@ree-auz/nook 0.1.0 → 0.1.2

package/src/commands/forget.mjs

@@ -1,57 +1,57 @@
-import { readdirSync } from "node:fs";
-import { join } from "node:path";
-import { NookError } from "../errors.mjs";
-import { exists, isInside } from "../home.mjs";
-import { resolveRepo } from "../context.mjs";
-import { createPrompter } from "../prompt.mjs";
-import { dockerCli, findComposeProjects, removeComposeProject } from "../compose.mjs";
-import { deleteFolder } from "./rm.mjs";
-
-/**
- * nk forget [<short-name>]: nk stops knowing a repository. Its registration
- * and shared files go; the repository folder and backups stay. Workspaces are
- * removed first with nk rm, which backs up their work, unless the repository
- * folder itself is gone: then git cannot remove them and they go with it.
- */
-export async function forgetRepo(ctx, { name: input, yes = false, prompter = createPrompter(), docker = dockerCli } = {}) {
-  const { name, repo } = resolveRepo(ctx, input);
-  const workspaces = Object.keys(repo.workspaces);
-  const present = exists(repo.path);
-  if (workspaces.length && present)
-    throw new NookError(`${name} still has workspaces: ${workspaces.join(", ")}\nRemove them first, which backs up their work: nk rm ${workspaces.join(" ")} --repo ${name}`);
-
-  const shared = join(ctx.paths.shared, name);
-  const dir = join(ctx.paths.workspaces, name);
-  const leftovers = exists(dir) ? readdirSync(dir).map((entry) => join(dir, entry)) : [];
-  ctx.info(`Forgetting ${name} (${repo.path}${present ? "" : ", which no longer exists"})`);
-  if (exists(shared)) ctx.warn(`Deletes the shared files ${shared}, with the values you filled in`);
-  if (leftovers.length) {
-    ctx.warn(`Deletes what is left in ${dir}${present ? "" : " (git cannot remove these without the repository)"}:`);
-    for (const path of leftovers) ctx.item(path);
-  }
-  ctx.info(`Keeps the repository folder${exists(join(ctx.paths.backup, name)) ? ` and the backups in ${join(ctx.paths.backup, name)}` : ""}`);
-  if (!yes) {
-    let ok;
-    try {
-      ok = await prompter.confirm(`Forget ${name}?`, false);
-    } catch {
-      throw new NookError("Confirmation needs a terminal; pass -y to forget without asking");
-    }
-    if (!ok) throw new NookError("Nothing was changed");
-  }
-
-  // What was started from those folders goes with them: Compose projects (containers, volumes, networks,
-  // built images) and the service containers generated hooks start (labelled with their workspace).
-  if (exists(dir)) {
-    for (const project of findComposeProjects(dir, docker).projects) removeComposeProject(project, docker);
-    const labelled = docker(["container", "ls", "-a", "--filter", "label=dev.nook.workspace", "--format", '{{.ID}}\t{{.Label "dev.nook.workspace"}}']);
-    const ids = labelled.ok ? labelled.out.split(/\r?\n/).filter(Boolean).map((row) => row.split("\t")).filter(([, path]) => path && isInside(path, dir)).map(([id]) => id) : [];
-    if (ids.length) docker(["container", "rm", "-f", "-v", ...ids]);
-  }
-  deleteFolder(dir);
-  deleteFolder(shared);
-  delete ctx.config.repos[name];
-  ctx.save();
-  ctx.ok(`Forgot ${name}. Register it again with nk init`);
-  return 0;
-}
+import { readdirSync } from "node:fs";
+import { join } from "node:path";
+import { NookError } from "../errors.mjs";
+import { exists, isInside } from "../home.mjs";
+import { resolveRepo } from "../context.mjs";
+import { createPrompter } from "../prompt.mjs";
+import { dockerCli, findComposeProjects, removeComposeProject } from "../compose.mjs";
+import { deleteFolder } from "./rm.mjs";
+
+/**
+ * nk forget [<short-name>]: nk stops knowing a repository. Its registration
+ * and shared files go; the repository folder and backups stay. Workspaces are
+ * removed first with nk rm, which backs up their work, unless the repository
+ * folder itself is gone: then git cannot remove them and they go with it.
+ */
+export async function forgetRepo(ctx, { name: input, yes = false, prompter = createPrompter(), docker = dockerCli } = {}) {
+  const { name, repo } = resolveRepo(ctx, input);
+  const workspaces = Object.keys(repo.workspaces);
+  const present = exists(repo.path);
+  if (workspaces.length && present)
+    throw new NookError(`${name} still has workspaces: ${workspaces.join(", ")}\nRemove them first, which backs up their work: nk rm ${workspaces.join(" ")} --repo ${name}`);
+
+  const shared = join(ctx.paths.shared, name);
+  const dir = join(ctx.paths.workspaces, name);
+  const leftovers = exists(dir) ? readdirSync(dir).map((entry) => join(dir, entry)) : [];
+  ctx.info(`Forgetting ${name} (${repo.path}${present ? "" : ", which no longer exists"})`);
+  if (exists(shared)) ctx.warn(`Deletes the shared files ${shared}, with the values you filled in`);
+  if (leftovers.length) {
+    ctx.warn(`Deletes what is left in ${dir}${present ? "" : " (git cannot remove these without the repository)"}:`);
+    for (const path of leftovers) ctx.item(path);
+  }
+  ctx.info(`Keeps the repository folder${exists(join(ctx.paths.backup, name)) ? ` and the backups in ${join(ctx.paths.backup, name)}` : ""}`);
+  if (!yes) {
+    let ok;
+    try {
+      ok = await prompter.confirm(`Forget ${name}?`, false);
+    } catch {
+      throw new NookError("Confirmation needs a terminal; pass -y to forget without asking");
+    }
+    if (!ok) throw new NookError("Nothing was changed");
+  }
+
+  // What was started from those folders goes with them: Compose projects (containers, volumes, networks,
+  // built images) and the service containers generated hooks start (labelled with their workspace).
+  if (exists(dir)) {
+    for (const project of findComposeProjects(dir, docker).projects) removeComposeProject(project, docker);
+    const labelled = docker(["container", "ls", "-a", "--filter", "label=dev.nook.workspace", "--format", '{{.ID}}\t{{.Label "dev.nook.workspace"}}']);
+    const ids = labelled.ok ? labelled.out.split(/\r?\n/).filter(Boolean).map((row) => row.split("\t")).filter(([, path]) => path && isInside(path, dir)).map(([id]) => id) : [];
+    if (ids.length) docker(["container", "rm", "-f", "-v", ...ids]);
+  }
+  deleteFolder(dir);
+  deleteFolder(shared);
+  delete ctx.config.repos[name];
+  ctx.save();
+  ctx.ok(`Forgot ${name}. Register it again with nk init`);
+  return 0;
+}

package/src/commands/hooks.mjs

@@ -1,27 +1,34 @@
-import { resolveRepo } from "../context.mjs";
-import { useColor, line } from "../ui.mjs";
-import { HOOK_EVENTS, findHook, hookHash, trustState } from "../hooks.mjs";
-import { ciChanged } from "./check-hooks.mjs";
-
-/** nk hooks: each hook of the repository, whether it is allowed, and whether it passed nk hooks test. */
-export function listHooks(ctx, { repo: repoFlag }) {
-  const { name: repoName, repo } = resolveRepo(ctx, repoFlag);
-  const color = useColor(ctx.out, ctx.env);
-  const hooks = HOOK_EVENTS.map((event) => findHook(repo.path, event)).filter(Boolean);
-  ctx.print(`Hooks of ${repoName} (${repo.path}/.nook)`);
-  if (!hooks.length) {
-    ctx.print(`  ${line("info", "none yet; to have an agent write them: nk hooks write <agent>", color)}`);
-    return 0;
-  }
-  let untested = 0;
-  for (const hook of hooks) {
-    const trust = trustState(repo, hook);
-    const tested = repo.checked?.[hook.name] === hookHash(hook.file);
-    if (!tested) untested++;
-    const notes = [trust === "trusted" ? "allowed" : trust === "new" ? "not allowed yet" : "changed, will ask again", tested ? "tested" : "not tested since it changed"];
-    ctx.print(`  ${line(tested && trust === "trusted" ? "ok" : "warn", `${hook.event.padEnd(6)} .nook/${hook.name}  ${notes.join(", ")}`, color)}`);
-  }
-  if (ciChanged(repo)) ctx.print(`  ${line("warn", "CI changed since the hooks were tested; update them with nk hooks write, then nk hooks test", color)}`);
-  if (untested) ctx.print(`  ${line("info", "Test them: nk hooks test", color)}`);
-  return 0;
-}
+import { resolveRepo } from "../context.mjs";
+import { useColor, line } from "../ui.mjs";
+import { HOOK_EVENTS, findHook, hookHash, trustState } from "../hooks.mjs";
+import { readFileSync } from "node:fs";
+import { ciChanged } from "./check-hooks.mjs";
+import { GENERATED_MARK } from "../generate-hooks.mjs";
+
+/** nk hooks: each hook of the repository, whether it is allowed, and whether it passed nk hooks test. */
+export function listHooks(ctx, { repo: repoFlag }) {
+  const { name: repoName, repo } = resolveRepo(ctx, repoFlag);
+  const color = useColor(ctx.out, ctx.env);
+  const hooks = HOOK_EVENTS.map((event) => findHook(repo.path, event)).filter(Boolean);
+  ctx.print(`Hooks of ${repoName} (${repo.path}/.nook)`);
+  if (!hooks.length) {
+    ctx.print(`  ${line("info", "none yet; to have an agent write them: nk hooks write <agent>", color)}`);
+    return 0;
+  }
+  let untested = 0;
+  for (const hook of hooks) {
+    const trust = trustState(repo, hook);
+    const tested = repo.checked?.[hook.name] === hookHash(hook.file);
+    if (!tested) untested++;
+    const notes = [trust === "trusted" ? "allowed" : trust === "new" ? "not allowed yet" : "changed, will ask again", tested ? "tested" : "not tested since it changed"];
+    ctx.print(`  ${line(tested && trust === "trusted" ? "ok" : "warn", `${hook.event.padEnd(6)} .nook/${hook.name}  ${notes.join(", ")}`, color)}`);
+  }
+  if (ciChanged(repo)) {
+    // nk hooks write only replaces hooks it generated; hooks written by hand are updated by hand (or by an agent).
+    const generated = hooks.every((hook) => readFileSync(hook.file, "utf8").startsWith(GENERATED_MARK));
+    const update = generated ? "update them with nk hooks write" : "check whether the hooks need the change (nk hooks write <agent> can help)";
+    ctx.print(`  ${line("warn", `CI changed since the hooks were tested; ${update}, then nk hooks test`, color)}`);
+  }
+  if (untested) ctx.print(`  ${line("info", "Test them: nk hooks test", color)}`);
+  return 0;
+}

package/src/commands/init.mjs

@@ -1,154 +1,154 @@
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { basename, join } from "node:path";
-import spawn from "cross-spawn";
-import { detectAgents, which } from "../agents.mjs";
-import { NookError } from "../errors.mjs";
-import { isInside, samePath } from "../home.mjs";
-import { defaultBranch, listWorktrees, mainWorktree, remoteUrl } from "../git.mjs";
-import { ensureTrusted, findHooks, trustState } from "../hooks.mjs";
-import { assertName, suggestRepoName } from "../names.mjs";
-import { createPrompter, splitArgs } from "../prompt.mjs";
-import { copyFile, includePatterns, knownSecretFiles, listFiles, sharedCandidates, templateFiles } from "../shared.mjs";
-import { toolStatus } from "../tools.mjs";
-import { hostAddresses, pointAtHost } from "../compose-plan.mjs";
-import { planFromCi } from "../ci.mjs";
-
-const plural = (n, word) => `${n} ${word}${n === 1 ? "" : "s"}`;
-
-function openEditor(ctx, file, prompter) {
-  if (!prompter.interactive || prompter.yes) return false;
-  const editor = ctx.env.VISUAL || ctx.env.EDITOR;
-  let command;
-  if (editor) command = [...splitArgs(editor), file];
-  else if (process.platform === "win32") command = ["notepad", file];
-  else if (process.platform === "darwin") command = ["open", "-W", "-t", file];
-  else if (which("xdg-open", ctx.env)) command = ["xdg-open", file];
-  else return false;
-  spawn.sync(command[0], command.slice(1), { stdio: "inherit" });
-  return true;
-}
-
-/**
- * Fills the shared folder. A file already there is never replaced, so running
- * init again only adds what is new (a template added since, for example).
- */
-async function prepareShared(ctx, { repoPath, sharedDir, prompter }) {
-  mkdirSync(sharedDir, { recursive: true });
-  const present = new Set(listFiles(sharedDir));
-  const { patterns, source } = includePatterns(repoPath);
-  ctx.info(`Shared files follow ${source === "default" ? "the default pattern .env*" : ".worktreeinclude"}; only files git ignores are used`);
-  const candidates = sharedCandidates(repoPath, patterns);
-  const templates = templateFiles(repoPath);
-  const copies = [];
-  const fill = [];
-  for (const template of templates) {
-    if (present.has(template.to)) continue;
-    // A committed template is the safe start: the same file in the main checkout may be production.
-    copies.push({ from: join(repoPath, template.from), to: template.to });
-    fill.push(join(sharedDir, template.to));
-    ctx.info(`Starting shared ${template.to} from ${template.from}`);
-  }
-  const covered = new Set([...templates.map((template) => template.to), ...present]);
-  const others = candidates.filter((file) => !covered.has(file));
-  if (others.length && (await prompter.confirm(`Copy ${others.join(", ")} from the repository into the shared folder? (only development files, not production)`, false)))
-    for (const file of others) copies.push({ from: join(repoPath, file), to: file });
-
-  for (const file of knownSecretFiles(repoPath, [...candidates, ...covered]))
-    if (!present.has(file) && (await prompter.confirm(`Found ignored ${file}. Share it with new workspaces too?`, false)))
-      copies.push({ from: join(repoPath, file), to: file });
-
-  for (const copy of copies) copyFile(copy.from, join(sharedDir, copy.to));
-  // A template for running the app inside Docker names Compose services (postgres:5432); here the app runs on
-  // this machine, so point those values at where the services are published.
-  // When the CI job has services, those are started instead of Compose's (see nk hooks write).
-  const addresses = fill.length ? hostAddresses(repoPath, { start: !planFromCi(repoPath).best?.services.length }) : {};
-  if (Object.keys(addresses).length)
-    for (const file of fill) {
-      const { text, keys } = pointAtHost(readFileSync(file, "utf8"), addresses);
-      if (!keys.length) continue;
-      writeFileSync(file, text);
-      ctx.info(`Pointed ${keys.join(", ")} in ${basename(file)} at the Compose services on this machine (each workspace then uses its own ports)`);
-    }
-  if (present.size) ctx.info(`Kept shared files: ${[...present].join(", ")} (edit them in ${sharedDir})`);
-  if (copies.length) ctx.ok(`Shared files in ${sharedDir}: ${copies.map((c) => c.to).join(", ")}`);
-  for (const file of fill) {
-    if (openEditor(ctx, file, prompter)) ctx.ok(`Saved ${file}`);
-    else ctx.warn(`Fill in ${file} once; every new workspace copies it`);
-  }
-}
-
-/**
- * Records the agents on PATH. Nothing is asked: each starts with its own
- * default command, and `args` in config.toml can be edited later if wanted.
- */
-function recordAgents(ctx) {
-  const found = detectAgents(ctx.env);
-  ctx.info(found.length ? "Agents found (start one with nk <name> <agent>):" : "No known agents found on PATH");
-  for (const agent of found) {
-    ctx.item(`${agent.name}  ${agent.version || "?"}  ${agent.path}`);
-    const args = ctx.config.agents[agent.name]?.args ?? [];
-    ctx.config.agents[agent.name] = { path: agent.path, version: agent.version, args };
-  }
-}
-
-/** Worktrees other tools made need no adopting: nk ls, rm and clean read them from git. */
-function listOtherWorktrees(ctx, { repoPath, repo }) {
-  const known = Object.values(repo.workspaces).map((ws) => ws.path);
-  const others = listWorktrees(repoPath)
-    .slice(1)
-    .filter((w) => !known.some((path) => samePath(path, w.path)));
-  if (!others.length) return;
-  ctx.info(`Other worktrees of this repository (nk ls, nk rm and nk clean include them):`);
-  for (const w of others) ctx.item(`${w.branch ?? "(detached)"}  ${w.path}`);
-}
-
-/** nk init: run once per repository; safe to run again. */
-export async function init(ctx, { yes = false, allowHooks = false, name: nameFlag } = {}) {
-  const prompter = createPrompter({ yes });
-  const repoPath = mainWorktree(ctx.cwd);
-  if (isInside(repoPath, ctx.paths.home)) throw new NookError("Run nk init in the main repository, not in a workspace");
-  const registered = Object.entries(ctx.config.repos).find(([, repo]) => samePath(repo.path, repoPath));
-  let name;
-  if (registered) {
-    name = registered[0];
-    if (nameFlag && nameFlag !== name) throw new NookError(`This repository is already registered as "${name}"`);
-  } else {
-    name = assertName(nameFlag ?? (await prompter.ask("Short name for this repository", suggestRepoName(basename(repoPath)))), "repository");
-    if (ctx.config.repos[name]) throw new NookError(`"${name}" is already used for ${ctx.config.repos[name].path}`);
-  }
-
-  const repo = (ctx.config.repos[name] ??= { workspaces: {}, hooks: {} });
-  repo.path = repoPath;
-  repo.remote = remoteUrl(repoPath);
-  repo.default_branch = defaultBranch(repoPath);
-  repo.workspaces ??= {};
-  repo.hooks ??= {};
-  ctx.ok(`Registered ${name} @ ${repoPath}`);
-  ctx.info(`Remote ${repo.remote || "(none)"}, default branch ${repo.default_branch}`);
-  mkdirSync(join(ctx.paths.workspaces, name), { recursive: true });
-
-  listOtherWorktrees(ctx, { repoPath, repo });
-  recordAgents(ctx);
-  const tools = toolStatus(ctx.env);
-  ctx.info(`gh: ${tools.gh}; docker: ${tools.docker}`);
-  await prepareShared(ctx, { repoPath, sharedDir: join(ctx.paths.shared, name), prompter });
-  ctx.save();
-
-  // Allowing hooks lets this repository's scripts run on this machine: --yes skips questions, but
-  // only --allow-hooks (or a person answering in a terminal) gives that.
-  const hooks = findHooks(repoPath);
-  const pending = hooks.filter((hook) => trustState(repo, hook) !== "trusted");
-  if (pending.length && !allowHooks && (yes || !prompter.interactive)) {
-    ctx.warn(`${plural(pending.length, "hook")} not allowed yet: ${pending.map((h) => `.nook/${h.name}`).join(", ")}`);
-    ctx.info(`Read them in ${join(repoPath, ".nook")}, then run nk init --allow-hooks, or nk init in a terminal`);
-  } else {
-    const hookPrompter = allowHooks ? { confirm: async () => true } : prompter;
-    await ensureTrusted({ repoName: name, repoConfig: repo, hooks, prompter: hookPrompter, save: () => ctx.save(), ui: ctx });
-    if (allowHooks && pending.length) ctx.info(`Allowed ${pending.map((h) => `.nook/${h.name}`).join(", ")} (--allow-hooks)`);
-  }
-  if (!hooks.length) ctx.info("No .nook/ hooks yet. To have an agent write them: nk hooks write <agent>");
-  ctx.save();
-  ctx.ok(`Done. Config: ${ctx.paths.config}`);
-  ctx.info("Next: nk -b <name> [agent]");
-  return 0;
-}
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { basename, join } from "node:path";
+import spawn from "cross-spawn";
+import { detectAgents, which } from "../agents.mjs";
+import { NookError } from "../errors.mjs";
+import { isInside, samePath } from "../home.mjs";
+import { defaultBranch, listWorktrees, mainWorktree, remoteUrl } from "../git.mjs";
+import { ensureTrusted, findHooks, trustState } from "../hooks.mjs";
+import { assertName, suggestRepoName } from "../names.mjs";
+import { createPrompter, splitArgs } from "../prompt.mjs";
+import { copyFile, includePatterns, knownSecretFiles, listFiles, sharedCandidates, templateFiles } from "../shared.mjs";
+import { toolStatus } from "../tools.mjs";
+import { hostAddresses, pointAtHost } from "../compose-plan.mjs";
+import { planFromCi } from "../ci.mjs";
+
+const plural = (n, word) => `${n} ${word}${n === 1 ? "" : "s"}`;
+
+function openEditor(ctx, file, prompter) {
+  if (!prompter.interactive || prompter.yes) return false;
+  const editor = ctx.env.VISUAL || ctx.env.EDITOR;
+  let command;
+  if (editor) command = [...splitArgs(editor), file];
+  else if (process.platform === "win32") command = ["notepad", file];
+  else if (process.platform === "darwin") command = ["open", "-W", "-t", file];
+  else if (which("xdg-open", ctx.env)) command = ["xdg-open", file];
+  else return false;
+  spawn.sync(command[0], command.slice(1), { stdio: "inherit" });
+  return true;
+}
+
+/**
+ * Fills the shared folder. A file already there is never replaced, so running
+ * init again only adds what is new (a template added since, for example).
+ */
+async function prepareShared(ctx, { repoPath, sharedDir, prompter }) {
+  mkdirSync(sharedDir, { recursive: true });
+  const present = new Set(listFiles(sharedDir));
+  const { patterns, source } = includePatterns(repoPath);
+  ctx.info(`Shared files follow ${source === "default" ? "the default pattern .env*" : ".worktreeinclude"}; only files git ignores are used`);
+  const candidates = sharedCandidates(repoPath, patterns);
+  const templates = templateFiles(repoPath);
+  const copies = [];
+  const fill = [];
+  for (const template of templates) {
+    if (present.has(template.to)) continue;
+    // A committed template is the safe start: the same file in the main checkout may be production.
+    copies.push({ from: join(repoPath, template.from), to: template.to });
+    fill.push(join(sharedDir, template.to));
+    ctx.info(`Starting shared ${template.to} from ${template.from}`);
+  }
+  const covered = new Set([...templates.map((template) => template.to), ...present]);
+  const others = candidates.filter((file) => !covered.has(file));
+  if (others.length && (await prompter.confirm(`Copy ${others.join(", ")} from the repository into the shared folder? (only development files, not production)`, false)))
+    for (const file of others) copies.push({ from: join(repoPath, file), to: file });
+
+  for (const file of knownSecretFiles(repoPath, [...candidates, ...covered]))
+    if (!present.has(file) && (await prompter.confirm(`Found ignored ${file}. Share it with new workspaces too?`, false)))
+      copies.push({ from: join(repoPath, file), to: file });
+
+  for (const copy of copies) copyFile(copy.from, join(sharedDir, copy.to));
+  // A template for running the app inside Docker names Compose services (postgres:5432); here the app runs on
+  // this machine, so point those values at where the services are published.
+  // When the CI job has services, those are started instead of Compose's (see nk hooks write).
+  const addresses = fill.length ? hostAddresses(repoPath, { start: !planFromCi(repoPath).best?.services.length }) : {};
+  if (Object.keys(addresses).length)
+    for (const file of fill) {
+      const { text, keys } = pointAtHost(readFileSync(file, "utf8"), addresses);
+      if (!keys.length) continue;
+      writeFileSync(file, text);
+      ctx.info(`Pointed ${keys.join(", ")} in ${basename(file)} at the Compose services on this machine (each workspace then uses its own ports)`);
+    }
+  if (present.size) ctx.info(`Kept shared files: ${[...present].join(", ")} (edit them in ${sharedDir})`);
+  if (copies.length) ctx.ok(`Shared files in ${sharedDir}: ${copies.map((c) => c.to).join(", ")}`);
+  for (const file of fill) {
+    if (openEditor(ctx, file, prompter)) ctx.ok(`Saved ${file}`);
+    else ctx.warn(`Fill in ${file} once; every new workspace copies it`);
+  }
+}
+
+/**
+ * Records the agents on PATH. Nothing is asked: each starts with its own
+ * default command, and `args` in config.toml can be edited later if wanted.
+ */
+function recordAgents(ctx) {
+  const found = detectAgents(ctx.env);
+  ctx.info(found.length ? "Agents found (start one with nk <name> <agent>):" : "No known agents found on PATH");
+  for (const agent of found) {
+    ctx.item(`${agent.name}  ${agent.version || "?"}  ${agent.path}`);
+    const args = ctx.config.agents[agent.name]?.args ?? [];
+    ctx.config.agents[agent.name] = { path: agent.path, version: agent.version, args };
+  }
+}
+
+/** Worktrees other tools made need no adopting: nk ls, rm and clean read them from git. */
+function listOtherWorktrees(ctx, { repoPath, repo }) {
+  const known = Object.values(repo.workspaces).map((ws) => ws.path);
+  const others = listWorktrees(repoPath)
+    .slice(1)
+    .filter((w) => !known.some((path) => samePath(path, w.path)));
+  if (!others.length) return;
+  ctx.info(`Other worktrees of this repository (nk ls, nk rm and nk clean include them):`);
+  for (const w of others) ctx.item(`${w.branch ?? "(detached)"}  ${w.path}`);
+}
+
+/** nk init: run once per repository; safe to run again. */
+export async function init(ctx, { yes = false, allowHooks = false, name: nameFlag } = {}) {
+  const prompter = createPrompter({ yes });
+  const repoPath = mainWorktree(ctx.cwd);
+  if (isInside(repoPath, ctx.paths.home)) throw new NookError("Run nk init in the main repository, not in a workspace");
+  const registered = Object.entries(ctx.config.repos).find(([, repo]) => samePath(repo.path, repoPath));
+  let name;
+  if (registered) {
+    name = registered[0];
+    if (nameFlag && nameFlag !== name) throw new NookError(`This repository is already registered as "${name}"`);
+  } else {
+    name = assertName(nameFlag ?? (await prompter.ask("Short name for this repository", suggestRepoName(basename(repoPath)))), "repository");
+    if (ctx.config.repos[name]) throw new NookError(`"${name}" is already used for ${ctx.config.repos[name].path}`);
+  }
+
+  const repo = (ctx.config.repos[name] ??= { workspaces: {}, hooks: {} });
+  repo.path = repoPath;
+  repo.remote = remoteUrl(repoPath);
+  repo.default_branch = defaultBranch(repoPath);
+  repo.workspaces ??= {};
+  repo.hooks ??= {};
+  ctx.ok(`Registered ${name} @ ${repoPath}`);
+  ctx.info(`Remote ${repo.remote || "(none)"}, default branch ${repo.default_branch}`);
+  mkdirSync(join(ctx.paths.workspaces, name), { recursive: true });
+
+  listOtherWorktrees(ctx, { repoPath, repo });
+  recordAgents(ctx);
+  const tools = toolStatus(ctx.env);
+  ctx.info(`gh: ${tools.gh}; docker: ${tools.docker}`);
+  await prepareShared(ctx, { repoPath, sharedDir: join(ctx.paths.shared, name), prompter });
+  ctx.save();
+
+  // Allowing hooks lets this repository's scripts run on this machine: --yes skips questions, but
+  // only --allow-hooks (or a person answering in a terminal) gives that.
+  const hooks = findHooks(repoPath);
+  const pending = hooks.filter((hook) => trustState(repo, hook) !== "trusted");
+  if (pending.length && !allowHooks && (yes || !prompter.interactive)) {
+    ctx.warn(`${plural(pending.length, "hook")} not allowed yet: ${pending.map((h) => `.nook/${h.name}`).join(", ")}`);
+    ctx.info(`Read them in ${join(repoPath, ".nook")}, then run nk init --allow-hooks, or nk init in a terminal`);
+  } else {
+    const hookPrompter = allowHooks ? { confirm: async () => true } : prompter;
+    await ensureTrusted({ repoName: name, repoConfig: repo, hooks, prompter: hookPrompter, save: () => ctx.save(), ui: ctx });
+    if (allowHooks && pending.length) ctx.info(`Allowed ${pending.map((h) => `.nook/${h.name}`).join(", ")} (--allow-hooks)`);
+  }
+  if (!hooks.length) ctx.info("No .nook/ hooks yet. To have an agent write them: nk hooks write <agent>");
+  ctx.save();
+  ctx.ok(`Done. Config: ${ctx.paths.config}`);
+  ctx.info("Next: nk -b <name> [agent]");
+  return 0;
+}