ai-native-lab 0.1.0 → 0.2.0

package/dist/cli.js

@@ -1,4 +1,15 @@
 #!/usr/bin/env node
+import {
+  CliError,
+  EXIT,
+  createClient,
+  isOlder,
+  isSlug,
+  muteVersionNotice,
+  package_default,
+  serverMinCli,
+  slugify
+} from "./chunk-2AEAK4KI.js";
 
 // src/cli.ts
 import { spawn } from "child_process";
@@ -6,172 +17,7 @@ import { mkdir as mkdir3, readFile as readFile4, writeFile as writeFile3 } from
 import { homedir as homedir2, hostname } from "os";
 import path4 from "path";
 import { fileURLToPath } from "url";
-import { Command, Option } from "commander";
-
-// ../shared/src/cli.ts
-var EXIT = {
-  ok: 0,
-  error: 1,
-  usage: 2,
-  auth: 3,
-  forbidden: 4,
-  conflict: 5
-};
-
-// ../shared/src/content.ts
-var SLUG_RE = /^[a-z0-9][a-z0-9-]{0,79}$/;
-var isSlug = (s) => SLUG_RE.test(s);
-function slugify(raw) {
-  return raw.toLowerCase().normalize("NFKD").replace(/[^\w\s-]/g, "").replace(/[\s_]+/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "").slice(0, 80);
-}
-var IMAGE_LIMITS = { maxUploadBytes: 20 * 1024 * 1024, maxEdge: 2e3, targetBytes: 600 * 1024 };
-var PAGE_LIMITS = { maxUploadBytes: 50 * 1024 * 1024, maxTotalBytes: 200 * 1024 * 1024, maxFiles: 2e3 };
-
-// package.json
-var package_default = {
-  name: "ai-native-lab",
-  version: "0.1.0",
-  description: "AI Native Lab CLI for people and agents: read, search and publish content. Non-interactive, --json output, stable exit codes.",
-  keywords: [
-    "ai-native-lab",
-    "cli",
-    "agent",
-    "claude-code",
-    "content",
-    "markdown",
-    "mixlab"
-  ],
-  homepage: "https://github.com/shadowcz007/ai-native-lab/tree/main/packages/cli#readme",
-  repository: {
-    type: "git",
-    url: "git+https://github.com/shadowcz007/ai-native-lab.git",
-    directory: "packages/cli"
-  },
-  bugs: {
-    url: "https://github.com/shadowcz007/ai-native-lab/issues"
-  },
-  type: "module",
-  bin: {
-    aln: "dist/cli.js"
-  },
-  files: [
-    "dist",
-    "SKILL.md",
-    "README.md"
-  ],
-  engines: {
-    node: ">=20"
-  },
-  scripts: {
-    dev: "tsx src/cli.ts",
-    build: "tsup",
-    typecheck: "tsc -p .",
-    prepack: "tsup"
-  },
-  devDependencies: {
-    "@ai-native-lab/shared": "workspace:*"
-  },
-  dependencies: {
-    commander: "^15.0.0",
-    fflate: "^0.8.3",
-    yaml: "^2.8.1"
-  },
-  publishConfig: {
-    access: "public"
-  }
-};
-
-// src/api.ts
-var CliError = class extends Error {
-  constructor(code2, message, exitCode, status) {
-    super(message);
-    this.code = code2;
-    this.exitCode = exitCode;
-    this.status = status;
-  }
-  code;
-  exitCode;
-  status;
-};
-var exitFor = (status, code2) => status === 401 || code2 === "pending_approval" || code2 === "banned" || code2 === "expired_token" || code2 === "access_denied" ? EXIT.auth : status === 403 ? EXIT.forbidden : status === 409 || status === 412 ? EXIT.conflict : status === 400 ? EXIT.usage : EXIT.error;
-function createClient(apiUrl, token) {
-  async function call(method, p, body, headers = {}) {
-    const h = { "user-agent": `aln-cli/${package_default.version}`, ...headers };
-    if (token) h.authorization = `Bearer ${token}`;
-    if (body !== void 0) h["content-type"] = "application/json";
-    let res;
-    try {
-      res = await fetch(`${apiUrl}/api${p}`, { method, headers: h, body: body === void 0 ? void 0 : JSON.stringify(body) });
-    } catch (e) {
-      throw new CliError("network", `Can't reach ${apiUrl}: ${e.message}`, EXIT.error);
-    }
-    const text = await res.text();
-    let json = {};
-    try {
-      json = text ? JSON.parse(text) : {};
-    } catch {
-      if (res.ok) return text;
-    }
-    if (!res.ok) {
-      const code2 = json.error?.code ?? "http_error";
-      throw new CliError(code2, json.error?.message ?? `HTTP ${res.status}`, exitFor(res.status, code2), res.status);
-    }
-    return json;
-  }
-  async function download(p) {
-    const h = { "user-agent": `aln-cli/${package_default.version}` };
-    if (token) h.authorization = `Bearer ${token}`;
-    let res;
-    try {
-      res = await fetch(`${apiUrl}/api${p}`, { headers: h });
-    } catch (e) {
-      throw new CliError("network", `Can't reach ${apiUrl}: ${e.message}`, EXIT.error);
-    }
-    if (!res.ok) {
-      const json = await res.json().catch(() => ({}));
-      const code2 = json.error?.code ?? "http_error";
-      throw new CliError(code2, json.error?.message ?? `HTTP ${res.status}`, exitFor(res.status, code2), res.status);
-    }
-    return new Uint8Array(await res.arrayBuffer());
-  }
-  async function upload(p, form, method = "POST", extraHeaders = {}) {
-    const h = { "user-agent": `aln-cli/${package_default.version}`, ...extraHeaders };
-    if (token) h.authorization = `Bearer ${token}`;
-    let res;
-    try {
-      res = await fetch(`${apiUrl}/api${p}`, { method, headers: h, body: form });
-    } catch (e) {
-      throw new CliError("network", `Can't reach ${apiUrl}: ${e.message}`, EXIT.error);
-    }
-    const json = await res.json().catch(() => ({}));
-    if (!res.ok) {
-      const code2 = json.error?.code ?? "http_error";
-      throw new CliError(code2, json.error?.message ?? `HTTP ${res.status}`, exitFor(res.status, code2), res.status);
-    }
-    return json;
-  }
-  const q = (params) => {
-    const s = new URLSearchParams();
-    for (const [k, v] of Object.entries(params)) if (v !== void 0 && v !== false && v !== "") s.set(k, String(v === true ? 1 : v));
-    const str = s.toString();
-    return str ? `?${str}` : "";
-  };
-  const enc = encodeURIComponent;
-  return {
-    call,
-    upload,
-    download,
-    q,
-    me: () => call("GET", "/me"),
-    deviceStart: (clientName) => call("POST", "/cli/device", { clientName }),
-    deviceToken: (deviceCode) => call("POST", "/cli/device/token", { deviceCode }),
-    list: (params) => call("GET", `/contents${q(params)}`),
-    get: (slug) => call("GET", `/contents/${enc(slug)}`),
-    put: (slug, body, opts) => call("PUT", `/contents/${enc(slug)}${q({ dryRun: opts.dryRun })}`, body, opts.ifMatch ? { "if-match": opts.ifMatch } : {}),
-    action: (slug, action) => call("POST", `/contents/${enc(slug)}/${action}`, {}),
-    tags: () => call("GET", "/tags")
-  };
-}
+import { Command, CommanderError, Option } from "commander";
 
 // src/config.ts
 import { mkdir, readFile, rm, writeFile } from "fs/promises";
@@ -180,7 +26,7 @@ import path from "path";
 var DIR = path.join(process.env.XDG_CONFIG_HOME ?? path.join(homedir(), ".config"), "ai-native-lab");
 var FILE = path.join(DIR, "config.json");
 var configPath = FILE;
-var DEFAULT_API_URL = "https://ai-native-lab.mixdao.world";
+var DEFAULT_API_URL = "https://ai-native-lab.mixlab.top";
 var normalizeUrl = (url) => new URL(/^https?:\/\//.test(url) ? url : `https://${url}`).origin;
 async function loadConfig() {
   try {
@@ -196,10 +42,10 @@ async function saveConfig(c) {
 var clearConfig = () => rm(FILE, { force: true });
 async function resolveAuth(flags) {
   const c = await loadConfig();
-  const explicit = flags.apiUrl ?? process.env.ALN_API_URL;
+  const explicit = flags.apiUrl ?? process.env.AILAB_API_URL;
   const apiUrl = normalizeUrl(explicit ?? c.url ?? DEFAULT_API_URL);
   const same = !explicit || c.url && normalizeUrl(c.url) === apiUrl;
-  return { apiUrl, token: flags.token ?? process.env.ALN_TOKEN ?? (same ? c.token : void 0) };
+  return { apiUrl, token: flags.token ?? process.env.AILAB_TOKEN ?? (same ? c.token : void 0), column: flags.column ?? process.env.AILAB_COLUMN };
 }
 
 // src/images.ts
@@ -231,8 +77,124 @@ async function uploadLocalImages(body, baseDir, upload) {
   return { body: out2, uploaded };
 }
 
+// src/completion.ts
+var SHELLS = ["bash", "zsh", "fish"];
+var optsOf = (c) => c.options.flatMap((o) => [o.long, o.short].filter((x) => Boolean(x)));
+function walk(c, path5 = []) {
+  const subs = c.commands.filter((x) => !x._hidden);
+  const here = { path: path5, description: c.description(), subs: subs.map((s) => s.name()), opts: [...optsOf(c), "--help"] };
+  return [here, ...subs.flatMap((s) => walk(s, [...path5, s.name()]))];
+}
+var sh = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
+function bash(root) {
+  const nodes = walk(root);
+  const cases = nodes.map((n) => `    ${sh(n.path.join(" "))}) subs=${sh(n.subs.join(" "))}; opts=${sh(n.opts.join(" "))} ;;`).join("\n");
+  return `_ailab() {
+  local cur="\${COMP_WORDS[COMP_CWORD]}" path="" i w subs="" opts=""
+  # \u6CBF\u7740\u5DF2\u8F93\u5165\u7684\u8BCD\u5F80\u4E0B\u8D70\uFF0C\u8BA4\u5F97\u7684\u5B50\u547D\u4EE4\u624D\u7B97\u8DEF\u5F84\uFF1B\u9009\u9879\u548C\u5B83\u4EEC\u7684\u503C\u8DF3\u8FC7
+  for ((i = 1; i < COMP_CWORD; i++)); do
+    w="\${COMP_WORDS[i]}"
+    case "$w" in -*) continue ;; esac
+    case "\${path:+$path }$w" in
+${nodes.filter((n) => n.path.length).map((n) => `      ${sh(n.path.join(" "))}) path="\${path:+$path }$w" ;;`).join("\n")}
+    esac
+  done
+  case "$path" in
+${cases}
+  esac
+  if [[ "$cur" == -* ]]; then
+    COMPREPLY=($(compgen -W "$opts --json --api-url --token --column --timeout" -- "$cur"))
+  else
+    COMPREPLY=($(compgen -W "$subs" -- "$cur"))
+  fi
+}
+complete -F _ailab ailab
+`;
+}
+function fish(root) {
+  const lines = ["complete -c ailab -f"];
+  for (const n of walk(root)) {
+    const cond = n.path.length === 0 ? "__fish_use_subcommand" : `__fish_seen_subcommand_from ${n.path[n.path.length - 1]}`;
+    const cmd = n.path.length ? root.commands.find((c) => c.name() === n.path[0]) : root;
+    const children = cmd ? (n.path.length > 1 ? cmd.commands.find((c) => c.name() === n.path[1])?.commands : cmd.commands) ?? [] : [];
+    for (const c of children) lines.push(`complete -c ailab -n ${sh(cond)} -a ${sh(c.name())} -d ${sh(c.description().split("\n")[0].slice(0, 80))}`);
+    for (const o of n.opts) if (o.startsWith("--")) lines.push(`complete -c ailab -n ${sh(n.path.length ? cond : "true")} -l ${o.slice(2)}`);
+  }
+  return `${lines.join("\n")}
+`;
+}
+function completionScript(root, shell) {
+  const head = `# ailab ${shell} completion. Load it with:
+#   ${shell === "fish" ? "ailab completion fish | source" : `eval "$(ailab completion ${shell})"`}
+`;
+  if (shell === "fish") return head + fish(root);
+  const zsh = shell === "zsh" ? "autoload -U +X compinit && compinit -u 2>/dev/null\nautoload -U +X bashcompinit && bashcompinit\n" : "";
+  return head + zsh + bash(root);
+}
+
+// src/doctor.ts
+var date = (iso) => iso.slice(0, 10);
+async function diagnose(i) {
+  const checks = [];
+  const add = (c) => void checks.push(c);
+  const major = Number(i.nodeVersion.replace(/^v/, "").split(".")[0]);
+  add(major >= 20 ? { name: "cli", status: "ok", detail: `ailab ${i.version} \xB7 node ${i.nodeVersion}` } : { name: "cli", status: "fail", detail: `node ${i.nodeVersion} is too old; ailab needs node 20+`, hint: "upgrade node" });
+  const moved = i.urlSource === "saved login" && i.savedUrl && new URL(i.savedUrl).host !== new URL(i.defaultUrl).host && /mixdao\.world$/.test(new URL(i.savedUrl).host);
+  add(
+    moved ? { name: "server", status: "warn", detail: `${i.apiUrl} (${i.urlSource})`, hint: `the default server is now ${i.defaultUrl}; if you meant that one, run \`ailab login\` again` } : { name: "server", status: "ok", detail: `${i.apiUrl} (${i.urlSource})${i.column ? ` \xB7 column ${i.column}` : ""}` }
+  );
+  let me = null;
+  const t0 = Date.now();
+  try {
+    me = await i.client.me();
+    add({ name: "connection", status: "ok", detail: `reachable, ${Date.now() - t0}ms` });
+  } catch (e) {
+    if (e instanceof CliError && e.status !== void 0) {
+      add({ name: "connection", status: "ok", detail: `reachable, ${Date.now() - t0}ms` });
+      add({ name: "auth", status: "fail", detail: e.message, hint: "run `ailab login` again" });
+    } else {
+      add({ name: "connection", status: "fail", detail: e.message, hint: "check the server address (`--api-url`, `AILAB_API_URL`, `ailab login <url>`) and your network" });
+    }
+    return checks;
+  }
+  const min = i.minCli?.() ?? null;
+  if (min && isOlder(i.version, min)) {
+    add({ name: "version", status: "warn", detail: `ailab ${i.version} is older than the oldest version this server supports (${min})`, hint: "upgrade: npm i -g ai-native-lab" });
+  } else if (min) {
+    add({ name: "version", status: "ok", detail: `ailab ${i.version} (server needs ${min} or newer)` });
+  }
+  if (!i.tokenSource) {
+    add({ name: "auth", status: "warn", detail: "not logged in: you can only read public content", hint: "run `ailab login`, or set AILAB_TOKEN" });
+  } else if (!me.user) {
+    add({ name: "auth", status: "fail", detail: `the token (from ${i.tokenSource}) was not accepted: expired or revoked`, hint: "run `ailab login` again" });
+  } else {
+    const kind = me.actor.kind !== "human" ? ` (${me.actor.kind} credential)` : "";
+    add({ name: "auth", status: "ok", detail: `${me.user.email} \xB7 ${me.role}${kind}, token from ${i.tokenSource}` });
+  }
+  add(
+    me.column.status === "active" ? { name: "column", status: "ok", detail: `${me.column.name} (${me.column.slug})` } : { name: "column", status: "warn", detail: `${me.column.name} (${me.column.slug}) is ${me.column.status}` }
+  );
+  if (me.membership) add({ name: "membership", status: "ok", detail: `member until ${date(me.membership.expiresAt)}` });
+  return checks;
+}
+var MARK = { ok: "\u2713", warn: "!", fail: "\u2717" };
+function renderChecks(checks) {
+  return checks.map((c) => `${MARK[c.status]} ${c.name.padEnd(11)} ${c.detail}${c.hint ? `
+  \u2192 ${c.hint}` : ""}`).join("\n");
+}
+
 // src/markdown.ts
 import YAML from "yaml";
+var list = (v) => Array.isArray(v) ? v.map(String) : typeof v === "string" ? v.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
+function parseQuestions(v, fallback) {
+  if (v == null) return void 0;
+  if (!Array.isArray(v)) throw new Error("frontmatter `questions` must be a list");
+  return v.map((q) => {
+    if (typeof q === "string") return { text: q, disciplines: fallback ?? [] };
+    const o = q;
+    return { ...o.id ? { id: String(o.id) } : {}, text: String(o.text ?? ""), disciplines: list(o.disciplines) ?? fallback ?? [], ...o.membersOnly != null ? { membersOnly: Boolean(o.membersOnly) } : {}, ...o.evidence && typeof o.evidence === "object" ? { evidence: o.evidence } : {} };
+  });
+}
 var FM = /^?---\r?\n([\s\S]*?)\r?\n---\r?\n?/;
 function parseDoc(src) {
   const m = FM.exec(src);
@@ -248,12 +210,38 @@ function parseDoc(src) {
       body = body.slice(h.index + h[0].length).replace(/^\r?\n/, "");
     }
   }
-  const rawTags = fm.tags;
-  const tags = Array.isArray(rawTags) ? rawTags.map(String) : typeof rawTags === "string" ? rawTags.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
-  return { slug: str("slug"), title, summary: str("summary"), access: str("access"), status: str("status"), cover: str("cover"), tags, body };
+  const tags = list(fm.tags);
+  const disciplines = list(fm.disciplines);
+  return {
+    slug: str("slug"),
+    title,
+    summary: str("summary"),
+    access: str("access"),
+    authorship: str("authorship"),
+    status: str("status"),
+    cover: str("cover"),
+    tags,
+    disciplines,
+    research: typeof fm.research === "boolean" ? fm.research : void 0,
+    questions: parseQuestions(fm.questions, disciplines),
+    answers: list(fm.answers),
+    body
+  };
 }
 function formatDoc(d) {
-  const meta = { slug: d.slug, title: d.title, summary: d.summary || void 0, access: d.access, status: d.status, tags: d.tags };
+  const meta = {
+    slug: d.slug,
+    title: d.title,
+    summary: d.summary || void 0,
+    access: d.access,
+    authorship: d.authorship,
+    status: d.status,
+    tags: d.tags,
+    disciplines: d.disciplines?.length ? d.disciplines : void 0,
+    research: d.research === false ? false : void 0,
+    questions: d.questions?.length ? d.questions : void 0,
+    answers: d.answers?.length ? d.answers : void 0
+  };
   if (d.cover) meta.cover = d.cover;
   if (d.version != null) meta.version = d.version;
   for (const k of Object.keys(meta)) if (meta[k] === void 0) delete meta[k];
@@ -264,27 +252,81 @@ ${YAML.stringify(meta).trimEnd()}
 ${d.body.replace(/^\n+/, "")}`;
 }
 
+// src/questions.ts
+var pad = (s, n) => s.length >= n ? s : s + " ".repeat(n - s.length);
+var num = (n) => Number.isInteger(n) ? String(n) : n.toFixed(1);
+function formatGaps(r) {
+  if (!r.gaps.length) return r.concept ? `No pair has posts about "${r.concept.text}" on both sides (${r.concept.posts} matching posts)` : "No disciplines yet";
+  const lines = r.gaps.map((g2) => {
+    const head = `${pad(`${g2.a.slug} \xD7 ${g2.b.slug}`, 34)} score ${pad(num(g2.score), 4)} ${g2.questions}q \xB7 ${g2.confirmed} confirmed \xB7 ${g2.proposed} proposed bridges \xB7 posts ${g2.posts.a}/${g2.posts.b}`;
+    if (!g2.concept) return head;
+    const side = (slug, posts) => `    ${slug}: ${posts.map((p) => `${p.title} (${p.ref})`).join("; ")}`;
+    return [head, side(g2.a.slug, g2.concept.a), side(g2.b.slug, g2.concept.b)].join("\n");
+  });
+  const foot = r.concept ? `
+${r.concept.posts} posts about "${r.concept.text}". A low score means few questions and bridges, not that nobody has asked it elsewhere: check with \`question check\` and search the web.` : "";
+  return lines.join("\n") + foot;
+}
+function formatCheck(r) {
+  const lines = [];
+  if (r.cell) lines.push(`${r.cell.a.slug} \xD7 ${r.cell.b.slug}: ${r.cell.questions} open questions \xB7 ${r.cell.bridges} bridges (${r.cell.confirmedBridges} confirmed)`);
+  if (!r.similar.length) lines.push("No similar question on this site. That says nothing about the rest of the world: search the web before calling it new.");
+  else {
+    lines.push("Similar questions on this site:");
+    for (const s of r.similar) lines.push(`  ${s.similarity.toFixed(2)}  ${pad(s.status, 6)} ${pad(s.disciplines.map((d) => d.slug).join("\xD7"), 24)} ${s.text}  (${s.id})`);
+  }
+  return lines.join("\n");
+}
+async function checkQuestions(c, questions) {
+  const out2 = [];
+  for (const q of questions ?? []) {
+    try {
+      const check = await c.call("GET", `/questions/check${c.q({ text: q.text, disciplines: q.disciplines.length === 2 ? q.disciplines.join(",") : void 0 })}`);
+      out2.push({ text: q.text, disciplines: q.disciplines, similar: check.similar, cell: check.cell });
+    } catch (e) {
+      out2.push({ text: q.text, disciplines: q.disciplines, error: e instanceof Error ? e.message : String(e) });
+    }
+  }
+  return out2;
+}
+function formatChecks(checks) {
+  return checks.map((c) => {
+    if ("error" in c) return `question "${c.text}": couldn't check (${c.error})`;
+    if (!c.similar.length) return `question "${c.text}": nothing similar on this site`;
+    return `question "${c.text}": similar on this site
+${c.similar.map((s) => `  ${s.similarity.toFixed(2)}  ${s.text}  (${s.id})`).join("\n")}`;
+  }).join("\n");
+}
+function formatEvidence(e) {
+  if (!e) return "";
+  const lines = [];
+  if (e.why) lines.push(`    why: ${e.why}`);
+  if (e.site) lines.push(`    site: ${e.site.nearest?.length ? `nearest ${e.site.nearest.join(", ")}` : "nothing similar"}${e.site.note ? ` \u2014 ${e.site.note}` : ""}`);
+  for (const w of e.web ?? []) lines.push(`    web: "${w.query}"${w.closest ? ` \u2192 ${w.closest}` : " \u2192 nothing close"}${w.note ? ` \u2014 ${w.note}` : ""}`);
+  return lines.join("\n");
+}
+
 // src/pages.ts
 import { mkdir as mkdir2, readdir, readFile as readFile3, stat, writeFile as writeFile2 } from "fs/promises";
 import path3 from "path";
 import { unzipSync, zipSync } from "fflate";
-var META_FILE = "aln.json";
+var META_FILE = "ailab.json";
 var IGNORE = /* @__PURE__ */ new Set([".git", "node_modules", ".DS_Store", "Thumbs.db", META_FILE]);
 async function zipDir(dir) {
   const files = {};
   let count = 0;
-  const walk = async (rel) => {
+  const walk2 = async (rel) => {
     for (const e of await readdir(path3.join(dir, rel), { withFileTypes: true })) {
       if (IGNORE.has(e.name) || e.name.startsWith(".")) continue;
       const r = rel ? `${rel}/${e.name}` : e.name;
-      if (e.isDirectory()) await walk(r);
+      if (e.isDirectory()) await walk2(r);
       else if (e.isFile()) {
         files[r] = await readFile3(path3.join(dir, r));
         if (++count > 2e3) throw new Error("A page can have at most 2000 files");
       }
     }
   };
-  await walk("");
+  await walk2("");
   if (!files["index.html"] && !Object.keys(files).some((f) => !f.includes("/") && /\.html?$/i.test(f))) {
     throw new Error(`No index.html at the top of ${dir}`);
   }
@@ -315,20 +357,26 @@ async function extractTo(dir, zip, meta) {
 }
 
 // src/cli.ts
-var program = new Command().name("aln").description("AI Native Lab: read, search and publish content from the terminal or an agent").version(package_default.version).addOption(new Option("--json", "print one JSON object to stdout (also ALN_JSON=1)").default(process.env.ALN_JSON === "1")).option("--api-url <url>", "server URL, overrides the saved one (env ALN_API_URL)").option("--token <token>", "API token, overrides the saved one (env ALN_TOKEN)").showHelpAfterError().addHelpText(
+var program = new Command().name("ailab").description("AI Native Lab: read, search and publish content from the terminal or an agent").version(package_default.version).addOption(new Option("--json", "print one JSON object to stdout (also AILAB_JSON=1)").default(process.env.AILAB_JSON === "1")).option("--api-url <url>", "server URL, overrides the saved one (env AILAB_API_URL)").option("--token <token>", "API token, overrides the saved one (env AILAB_TOKEN)").option("--column <slug>", "which column to act in (env AILAB_COLUMN); default: the token's column, else the platform default").option("--timeout <seconds>", "per-request timeout, default 30 (env AILAB_TIMEOUT); uploads and downloads get 4\xD7").showHelpAfterError().exitOverride().addHelpText(
   "after",
   `
 Recommended workflow:
   First time       login <url> \u2192 whoami \u2192 tags \u2192 ls
+  Trouble          doctor (address, connection, login, column) \xB7 completion zsh|bash|fish
   Read             ls --tag <slug> \u2192 read <slug>            (read prints Markdown; locked content shows the summary)
   Search           search "<words>" \u2192 read <slug>
   Subscribe        tags \u2192 follow <tag>                       (weekly email digest; follow --remove <tag> to stop)
   Write (editor)   pull <slug> -o post.md \u2192 edit \u2192 push post.md --publish
   New content      push post.md --slug <slug> --tags a,b [--auto-tags topic] --dry-run, then without --dry-run
   Images           ![\u8BF4\u660E](./img/a.png) in Markdown is uploaded by push automatically; or: image upload a.png
-  HTML pages       push page.html | push site.zip | push ./site/  (folder: index.html + assets, metadata in aln.json)
+  HTML pages       push page.html | push site.zip | push ./site/  (folder: index.html + assets, metadata in ailab.json)
                    pull <slug> -o ./site/ \u2192 edit \u2192 push ./site/ --if-match <version>
-  Members (admin)  users --expiring 7 \u2192 member grant <email> --days 365
+  Columns          every command acts in one column: --column <slug> / AILAB_COLUMN (a column-bound token implies its own)
+  Members (admin)  member ls \xB7 users --expiring 7 \u2192 member grant <email> --days 365 [--plan vip]
+  Team (owner)     team ls \u2192 team set <email> editor \u2192 team rm <email>
+  Map              discipline ls \u2192 map \u2192 map --cell computing,anthropology \u2192 question ls
+  Compile (agent)  graph -o graph.json \u2192 bridge add <from> <col>/<slug> --kind analogy --claim "\u2026" --run r1
+                   (agent bridges and questions wait for a human: bridge confirm <id> \xB7 question confirm <id>)
 
 Markdown files carry metadata in YAML frontmatter:
   ---
@@ -336,18 +384,24 @@ Markdown files carry metadata in YAML frontmatter:
   title: \u6807\u9898             # or the first "# heading"
   summary: \u4E00\u53E5\u8BDD\u6458\u8981       # shown to readers who can't open the full text
   access: public | registered | member
+  authorship: human | assisted | agent_reviewed | agent   # required for new content: say how it was made
   status: draft | published
   tags: [agentic-coding, case-study]
+  disciplines: [computing, anthropology]   # 1\u20133, first is the main one; required to publish research content
+  questions:                               # at least one to publish; ends with "?", spans \u2265 2 disciplines
+    - text: \u5982\u679C reward shaping \u662F\u4E00\u79CD\u4E92\u60E0\u4E49\u52A1\uFF0CAgent \u4F1A\u4E0D\u4F1A\u300C\u6B20\u503A\u300D\uFF1F
+      disciplines: [computing, anthropology]
+  # research: false                        # announcements / events: no disciplines or questions needed
   ---
 
 Exit codes: 0 ok \xB7 1 error \xB7 2 usage \xB7 3 auth \xB7 4 forbidden \xB7 5 conflict (version mismatch / exists)
 
 Examples:
-  $ aln login                                      # default server; or: aln login https://your-host
-  $ aln ls --tag agentic-coding --json
-  $ aln read company-brain > company-brain.md
-  $ cat note.md | aln push - --slug quick-note --publish
-  $ ALN_TOKEN=aln_xxx ALN_API_URL=https://lab.example.com aln ls --json`
+  $ ailab login                                      # default server; or: ailab login https://your-host
+  $ ailab ls --tag agentic-coding --json
+  $ ailab read company-brain > company-brain.md
+  $ cat note.md | ailab push - --slug quick-note --publish
+  $ AILAB_TOKEN=aln_xxx AILAB_API_URL=https://lab.example.com ailab ls --json`
 );
 var g = () => program.opts();
 function out(human, data) {
@@ -358,14 +412,35 @@ function out(human, data) {
 var note = (msg) => {
   if (!g().json) console.error(msg);
 };
+function clientOptions() {
+  const raw = g().timeout ?? process.env.AILAB_TIMEOUT;
+  if (raw === void 0) return {};
+  const n = Number(raw);
+  if (!(n > 0)) throw new CliError("bad_request", `--timeout must be a positive number of seconds, got "${raw}"`, EXIT.usage);
+  return { timeoutMs: n * 1e3 };
+}
 async function client() {
-  const { apiUrl, token } = await resolveAuth(g());
-  return createClient(apiUrl, token);
+  const { apiUrl, token, column } = await resolveAuth(g());
+  return createClient(apiUrl, token, column, clientOptions());
+}
+async function currentColumn(c) {
+  const { column } = await resolveAuth(g());
+  return column ?? (await c.me()).column.slug;
 }
 async function needToken() {
-  const { apiUrl, token } = await resolveAuth(g());
-  if (!token) throw new CliError("unauthorized", "Not logged in. Run `aln login <url>` or set ALN_TOKEN", EXIT.auth);
-  return createClient(apiUrl, token);
+  const { apiUrl, token, column } = await resolveAuth(g());
+  if (!token) throw new CliError("unauthorized", "Not logged in. Run `ailab login <url>` or set AILAB_TOKEN", EXIT.auth);
+  return createClient(apiUrl, token, column, clientOptions());
+}
+function onoff(flag, v) {
+  if (v === void 0) return void 0;
+  if (v !== "on" && v !== "off") throw new CliError("bad_request", `${flag} must be on or off, got "${v}"`, EXIT.usage);
+  return v === "on";
+}
+function int(flag, v, min = 0) {
+  const n = Number(v);
+  if (v.trim() === "" || !Number.isInteger(n) || n < min) throw new CliError("bad_request", `${flag} must be an integer \u2265 ${min}, got "${v}"`, EXIT.usage);
+  return n;
 }
 var readInput = async (file) => {
   if (file !== "-") return readFile4(file, "utf8");
@@ -373,10 +448,10 @@ var readInput = async (file) => {
   for await (const c of process.stdin) chunks.push(c);
   return Buffer.concat(chunks).toString("utf8");
 };
-var date = (iso) => iso ? iso.slice(0, 10) : "\u2014";
-var pad = (s, n) => s.length >= n ? s : s + " ".repeat(n - s.length);
+var date2 = (iso) => iso ? iso.slice(0, 10) : "\u2014";
+var pad2 = (s, n) => s.length >= n ? s : s + " ".repeat(n - s.length);
 var lock = (i) => i.locked ? " \u{1F512}" : "";
-var listLine = (i) => `${pad(i.slug, 28)} ${pad(i.access, 10)} ${pad(i.status, 9)} ${date(i.publishedAt)}  ${i.title}${lock(i)}${i.tags.length ? `  [${i.tags.map((t) => t.slug).join(", ")}]` : ""}`;
+var listLine = (i) => `${pad2(i.slug, 28)} ${pad2(i.access, 10)} ${pad2(i.status, 9)} ${date2(i.publishedAt)}  ${i.title}${lock(i)}${i.tags.length ? `  [${i.tags.map((t) => t.slug).join(", ")}]` : ""}`;
 function openBrowser(url) {
   const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
   const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
@@ -387,21 +462,29 @@ function openBrowser(url) {
 }
 program.command("login [url]").description("log in through the browser (device code); the token is saved to ~/.config/ai-native-lab").option("--no-browser", "don't open the browser, just print the link").action(async (url, opts) => {
   const saved = await loadConfig();
-  const apiUrl = normalizeUrl(url ?? g().apiUrl ?? process.env.ALN_API_URL ?? saved.url ?? DEFAULT_API_URL);
-  const c = createClient(apiUrl);
-  const start = await c.deviceStart(`aln on ${hostname()}`.slice(0, 80));
+  const apiUrl = normalizeUrl(url ?? g().apiUrl ?? process.env.AILAB_API_URL ?? saved.url ?? DEFAULT_API_URL);
+  const c = createClient(apiUrl, void 0, void 0, clientOptions());
+  const start = await c.deviceStart(`ailab on ${hostname()}`.slice(0, 80));
   note(`Open ${start.verificationUrlComplete}
 and confirm the code ${start.userCode}. Waiting\u2026`);
   if (opts.browser) openBrowser(start.verificationUrlComplete);
   const deadline = Date.now() + start.expiresIn * 1e3;
+  let interval = start.interval;
   while (Date.now() < deadline) {
-    await new Promise((r) => setTimeout(r, start.interval * 1e3));
+    await new Promise((r) => setTimeout(r, interval * 1e3));
     try {
       const res = await c.deviceToken(start.deviceCode);
       await saveConfig({ url: apiUrl, token: res.token, email: res.user.email });
       return out(`Logged in to ${apiUrl} as ${res.user.email}`, { ok: true, url: apiUrl, email: res.user.email });
     } catch (e) {
-      if (e instanceof CliError && e.code === "authorization_pending") continue;
+      if (e instanceof CliError) {
+        if (e.code === "authorization_pending") continue;
+        if (e.code === "slow_down") {
+          interval += 5;
+          continue;
+        }
+        if (e.code === "network" || e.code === "timeout" || (e.status ?? 0) >= 500) continue;
+      }
       throw e;
     }
   }
@@ -413,11 +496,28 @@ program.command("logout").description("forget the saved token").action(async ()
 });
 program.command("whoami").description("who you are, your role and membership expiry").action(async () => {
   const me = await (await client()).me();
-  const m = me.membership ? `, member until ${date(me.membership.expiresAt)}` : "";
-  out(me.user ? `${me.user.email} \xB7 ${me.role}${m}
+  const m = me.membership ? `, member until ${date2(me.membership.expiresAt)}` : "";
+  out(me.user ? `${me.user.email} \xB7 ${me.role} in ${me.column.slug}${me.actor.kind !== "human" ? ` (${me.actor.kind} credential)` : ""}${m}
 permissions: ${me.permissions.join(", ")}` : "guest (not logged in)", me);
 });
-program.command("ls").description("list content (newest first)").option("--tag <slugs>", "comma separated tag slugs; OR within a tag group, AND across groups").option("--access <level>", "public | registered | member").option("--status <status>", "published (default) | draft | archived | all  (editors only for non-published)").option("-q, --query <text>", "full-text search (same as `aln search`)").option("--bookmarked", "only content you bookmarked").option("--limit <n>", "page size, max 100", "20").option("--offset <n>", "skip n items", "0").action(async (o) => {
+program.command("doctor").description("check the server address, connection, login and column, and say how to fix what's wrong").action(async () => {
+  muteVersionNotice();
+  const g0 = g();
+  const saved = await loadConfig();
+  const { apiUrl, token, column } = await resolveAuth(g0);
+  const explicit = g0.apiUrl ? "--api-url" : process.env.AILAB_API_URL ? "AILAB_API_URL" : null;
+  const urlSource = explicit ?? (saved.url ? "saved login" : "default");
+  const tokenSource = !token ? null : g0.token ? "--token" : process.env.AILAB_TOKEN ? "AILAB_TOKEN" : "saved login";
+  const checks = await diagnose({ version: package_default.version, nodeVersion: process.version, apiUrl, urlSource, tokenSource, column, savedUrl: saved.url, defaultUrl: DEFAULT_API_URL, client: createClient(apiUrl, token, column, clientOptions()), minCli: serverMinCli });
+  const failed = checks.find((c) => c.status === "fail");
+  out(renderChecks(checks), { ok: !failed, checks });
+  if (failed) process.exitCode = failed.name === "auth" ? EXIT.auth : EXIT.error;
+});
+program.command("completion <shell>").description(`print a shell completion script: ${SHELLS.join(" | ")}. e.g. eval "$(ailab completion zsh)"`).action((shell) => {
+  if (!SHELLS.includes(shell)) throw new CliError("bad_request", `shell must be one of ${SHELLS.join(", ")}`, EXIT.usage);
+  process.stdout.write(completionScript(program, shell));
+});
+program.command("ls").description("list content (newest first)").option("--tag <slugs>", "comma separated tag slugs; OR within a tag group, AND across groups").option("--access <level>", "public | registered | member").option("--status <status>", "published (default) | draft | archived | all  (editors only for non-published)").option("-q, --query <text>", "full-text search (same as `ailab search`)").option("--bookmarked", "only content you bookmarked").option("--limit <n>", "page size, max 100", "20").option("--offset <n>", "skip n items", "0").action(async (o) => {
   const res = await (await client()).list({ tag: o.tag, access: o.access, status: o.status, q: o.query, bookmarked: o.bookmarked, limit: o.limit, offset: o.offset });
   const more = res.nextOffset != null ? `
 \u2026 more: --offset ${res.nextOffset}` : "";
@@ -432,7 +532,7 @@ program.command("read <slug>").description("print a piece of content as Markdown
   const item = await c.get(slug);
   if (g().json) return out("", item);
   if (item.locked) {
-    console.log(`# ${item.title}
+    console.error(`# ${item.title}
 
 ${item.summary}
 `);
@@ -442,7 +542,7 @@ ${item.summary}
     if (item.format !== "html") throw new CliError("not_html", `${slug} is Markdown; drop --html`, EXIT.usage);
     return void process.stdout.write(await c.call("GET", `/contents/${encodeURIComponent(slug)}?format=html`));
   }
-  const doc = { ...item, tags: item.tags.map((t) => t.slug), body: item.body ?? "" };
+  const doc = { ...item, tags: item.tags.map((t) => t.slug), body: item.body ?? "", ...pulledKnowledge(item) };
   console.log(o.meta ? formatDoc(doc) : `# ${item.title}
 
 ${doc.body}`);
@@ -450,7 +550,7 @@ ${doc.body}`);
 program.command("tags").description("all tag groups and tags with published counts").action(async () => {
   const res = await (await client()).tags();
   out(res.groups.map((gr) => `${gr.name} (${gr.key})
-${gr.tags.map((t) => `  ${pad(t.slug, 28)} ${t.name}  ${t.count}`).join("\n") || "  \u2014"}`).join("\n"), res);
+${gr.tags.map((t) => `  ${pad2(t.slug, 28)} ${t.name}  ${t.count}`).join("\n") || "  \u2014"}`).join("\n"), res);
 });
 program.command("bookmark <slug>").description("bookmark (or --remove) a piece of content").option("--remove", "remove the bookmark").action(async (slug, o) => {
   const res = await (await needToken()).call(o.remove ? "DELETE" : "PUT", `/contents/${encodeURIComponent(slug)}/bookmark`);
@@ -461,15 +561,24 @@ program.command("follow [tag]").description("follow a tag (weekly email digest o
   if (!slug) {
     if (o.remove) throw new CliError("bad_request", "Pass the tag to unfollow", EXIT.usage);
     const res2 = await c.call("GET", "/me/follows");
-    return out(res2.follows.map((t) => `${pad(t.slug, 28)} ${t.name}${t.archived ? " (archived)" : ""}`).join("\n") || "Not following any tags. Try `aln tags`, then `aln follow <tag>`", res2);
+    return out(res2.follows.map((t) => `${pad2(t.slug, 28)} ${t.name}${t.archived ? " (archived)" : ""}`).join("\n") || "Not following any tags. Try `ailab tags`, then `ailab follow <tag>`", res2);
   }
   const res = await c.call(o.remove ? "DELETE" : "PUT", `/tags/${encodeURIComponent(slug)}/follow`);
   out(o.remove ? `Unfollowed ${slug}` : `Following ${slug} \xB7 weekly digest every Monday`, res);
 });
 program.command("redeem <code>").description("redeem a membership code").action(async (code2) => {
   const res = await (await needToken()).call("POST", "/redeem", { code: code2 });
-  out(`+${res.days} days, member until ${date(res.membership?.expiresAt ?? null)}`, res);
+  out(`+${res.days} days, member until ${date2(res.membership?.expiresAt ?? null)}`, res);
 });
+function knowledgeOf(src, o) {
+  const disciplines = o.disciplines ? o.disciplines.split(",").map((s) => s.trim()).filter(Boolean) : src.disciplines;
+  return {
+    ...disciplines ? { disciplines } : {},
+    ...o.notResearch ? { research: false } : src.research !== void 0 ? { research: src.research } : {},
+    ...src.questions ? { questions: src.questions.map((q) => ({ ...q, disciplines: q.disciplines.length ? q.disciplines : disciplines ?? [] })) } : {},
+    ...src.answers ? { answers: src.answers } : {}
+  };
+}
 async function pushPage(file, o) {
   const dir = await isDir(file);
   const meta = dir ? await readMeta(file) : {};
@@ -497,20 +606,24 @@ async function pushPage(file, o) {
   }
   const status = o.publish ? "published" : o.draft ? "draft" : meta.status;
   const tags = o.tags ? o.tags.split(",").map((s) => s.trim()).filter(Boolean) : meta.tags;
+  const knowledge = knowledgeOf(meta, o);
   const form = new FormData();
   form.append("file", new Blob([data]), dir ? `${slug}.zip` : path4.basename(file));
-  form.append("meta", JSON.stringify({ title, summary: o.summary ?? meta.summary, cover, access: o.access ?? meta.access, status, tags, autoCreateTagsIn: o.autoTags }));
+  form.append("meta", JSON.stringify({ title, summary: o.summary ?? meta.summary, cover, access: o.access ?? meta.access, authorship: o.authorship ?? meta.authorship, scheduledAt: o.schedule, status, tags, autoCreateTagsIn: o.autoTags, ...knowledge }));
   const res = await c.upload(
     `/contents/${encodeURIComponent(slug)}/page${c.q({ dryRun: o.dryRun })}`,
     form,
     "PUT",
     o.ifMatch ? { "if-match": o.ifMatch } : {}
   );
-  if (res.dryRun) return out(`dry run: would ${res.action} ${slug} (HTML, entry ${res.entry}, ${res.files} files)`, res);
+  if (res.dryRun) {
+    const questionChecks = await checkQuestions(c, knowledge.questions);
+    return out([`dry run: would ${res.action} ${slug} (HTML, entry ${res.entry}, ${res.files} files)`, formatChecks(questionChecks)].filter(Boolean).join("\n"), { ...res, questionChecks });
+  }
   const p = res.content.page;
   out(`${res.created ? "Created" : "Updated"} ${slug} \xB7 HTML${p ? ` (${p.files} files, ${Math.round(p.bytes / 1024)}KB)` : ""} \xB7 ${res.content.status} \xB7 v${res.content.version}`, res);
 }
-program.command("push <file>").description("create or update content from a Markdown file (or - for stdin), upsert by slug").option("--slug <slug>", "defaults to frontmatter slug, then the file name").option("--title <title>", "override the title").option("--summary <text>", "override the summary (what readers who can't open the full text see)").option("--access <level>", "public | registered | member").option("--tags <slugs>", "comma separated tag slugs (replaces existing tags)").option("--auto-tags <group>", "create unknown tags inside this tag group instead of failing").option("--publish", "publish right away (same as status: published)").option("--draft", "save as draft").option("--if-match <version>", "only write if the server version still matches (optimistic lock)").option("--dry-run", "validate and show what would happen, change nothing (local images are not uploaded)").option("--no-upload-images", "don't upload local images referenced in the Markdown").action(async (file, o) => {
+program.command("push <file>").description("create or update content from a Markdown file (or - for stdin), upsert by slug").option("--slug <slug>", "defaults to frontmatter slug, then the file name").option("--title <title>", "override the title").option("--summary <text>", "override the summary (what readers who can't open the full text see)").option("--access <level>", "public | registered | member").option("--authorship <how>", "how it was made: human | assisted | agent_reviewed | agent (frontmatter `authorship:` works too). Required for new content, except with an agent credential, which is always `agent`").option("--tags <slugs>", "comma separated tag slugs (replaces existing tags)").option("--auto-tags <group>", "create unknown tags inside this tag group instead of failing").option("--disciplines <slugs>", "comma separated discipline slugs, the first is the main one (frontmatter `disciplines:` works too); see `ailab discipline ls`").option("--not-research", "announcements, events\u2026: no disciplines or questions needed, kept off the map").option("--schedule <time>", "publish automatically at this time (ISO 8601, e.g. 2026-11-02T09:00:00+08:00); editors only").option("--publish", "publish right away (same as status: published)").option("--draft", "save as draft").option("--if-match <version>", "only write if the server version still matches (optimistic lock)").option("--dry-run", "validate and show what would happen, change nothing (local images are not uploaded)").option("--no-upload-images", "don't upload local images referenced in the Markdown").action(async (file, o) => {
   if (file !== "-" && (await isDir(file) || /\.(zip|html?)$/i.test(file))) return pushPage(file, o);
   const doc = parseDoc(await readInput(file));
   const slug = o.slug ?? doc.slug ?? (file === "-" ? "" : slugify(path4.basename(file, path4.extname(file))));
@@ -538,12 +651,15 @@ program.command("push <file>").description("create or update content from a Mark
     note(`dry run: would upload cover ${cover}`);
     cover = void 0;
   }
-  const body = { title, summary: o.summary ?? doc.summary, body: text, cover, access: o.access ?? doc.access, status, tags, autoCreateTagsIn: o.autoTags };
+  const body = { title, summary: o.summary ?? doc.summary, body: text, cover, access: o.access ?? doc.access, authorship: o.authorship ?? doc.authorship, scheduledAt: o.schedule, status, tags, autoCreateTagsIn: o.autoTags, ...knowledgeOf(doc, o) };
   const res = await c.put(slug, body, { ifMatch: o.ifMatch, dryRun: o.dryRun });
-  if (res.dryRun) return out(`dry run: would ${res.action} ${slug}`, res);
+  if (res.dryRun) {
+    const questionChecks = await checkQuestions(c, body.questions);
+    return out([`dry run: would ${res.action} ${slug}`, formatChecks(questionChecks)].filter(Boolean).join("\n"), { ...res, questionChecks });
+  }
   out(`${res.created ? "Created" : "Updated"} ${slug} \xB7 ${res.content.status} \xB7 v${res.content.version}`, { ...res, images });
 });
-program.command("pull <slug>").description("download content to edit and push back: Markdown with frontmatter, or for HTML pages a folder (with aln.json) / .zip").option("-o, --out <file>", "write to a file instead of stdout; HTML pages: a folder, or a path ending in .zip").action(async (slug, o) => {
+program.command("pull <slug>").description("download content to edit and push back: Markdown with frontmatter, or for HTML pages a folder (with ailab.json) / .zip").option("-o, --out <file>", "write to a file instead of stdout; HTML pages: a folder, or a path ending in .zip").action(async (slug, o) => {
   const c = await needToken();
   const item = await c.get(slug);
   if (item.locked || item.body == null) throw new CliError("locked", "You can't read the full text of this content", EXIT.forbidden);
@@ -559,19 +675,29 @@ program.command("pull <slug>").description("download content to edit and push ba
       title: item.title,
       summary: item.summary,
       access: item.access,
+      authorship: item.authorship,
       status: item.status,
       tags: item.tags.map((t) => t.slug),
       cover: item.cover,
-      version: item.version
+      version: item.version,
+      ...pulledKnowledge(item)
     });
-    return out(`Wrote ${n} files to ${o.out}/ (v${item.version}); edit, then: aln push ${o.out} --if-match ${item.version}`, { ok: true, dir: o.out, files: n, version: item.version });
+    return out(`Wrote ${n} files to ${o.out}/ (v${item.version}); edit, then: ailab push ${o.out} --if-match ${item.version}`, { ok: true, dir: o.out, files: n, version: item.version });
   }
-  const md = formatDoc({ ...item, tags: item.tags.map((t) => t.slug), body: item.body });
+  const md = formatDoc({ ...item, tags: item.tags.map((t) => t.slug), body: item.body, ...pulledKnowledge(item) });
   if (!o.out) return void process.stdout.write(md.endsWith("\n") ? md : `${md}
 `);
   await writeFile3(o.out, md);
   out(`Wrote ${o.out} (v${item.version})`, { ok: true, file: o.out, version: item.version });
 });
+function pulledKnowledge(item) {
+  return {
+    disciplines: item.disciplines?.map((d) => d.slug),
+    research: item.research,
+    questions: item.questions?.filter((q) => q.status === "open").map((q) => ({ id: q.id, text: q.text, disciplines: q.disciplines.map((d) => d.slug), ...q.membersOnly ? { membersOnly: true } : {}, ...q.evidence ? { evidence: q.evidence } : {} })),
+    answers: item.answers?.map((a) => a.id)
+  };
+}
 for (const action of ["publish", "unpublish", "archive"]) {
   program.command(`${action} <slug>`).description(action === "publish" ? "publish content" : action === "unpublish" ? "move published content back to draft" : "archive content (hide it everywhere)").action(async (slug) => {
     const res = await (await needToken()).action(slug, action);
@@ -588,7 +714,7 @@ tagCmd.command("archive <slug>").action(async (slug) => {
   out(`Archived tag ${slug}`, res);
 });
 tagCmd.command("group <key>").description("create a tag group").requiredOption("--name <name>").option("--position <n>").action(async (key, o) => {
-  const res = await (await needToken()).call("POST", "/tag-groups", { key, name: o.name, position: o.position ? Number(o.position) : void 0 });
+  const res = await (await needToken()).call("POST", "/tag-groups", { key, name: o.name, position: o.position ? int("--position", o.position) : void 0 });
   out(`Created tag group ${key}`, res);
 });
 var imageCmd = program.command("image").description("upload and manage images (editors upload, admins delete)");
@@ -601,7 +727,7 @@ imageCmd.command("upload <files...>").description("upload images (compressed to
 imageCmd.command("ls").description("list uploaded images and where they are used").option("--unused", "only images no content uses").option("--used", "only images in use").option("--limit <n>", "", "60").action(async (o) => {
   const c = await needToken();
   const res = await c.call("GET", `/images${c.q({ filter: o.unused ? "unused" : o.used ? "used" : void 0, limit: o.limit })}`);
-  const lines = res.images.map((i) => `${i.id.slice(0, 8)}  ${pad(`${i.width}x${i.height}`, 10)} ${pad(`${Math.round(i.bytes / 1024)}KB`, 7)} ${pad(i.originalName ?? "", 24)} ${i.usages.length ? i.usages.map((u) => `${u.slug}:${u.where}`).join(", ") : "(unused)"}`);
+  const lines = res.images.map((i) => `${i.id.slice(0, 8)}  ${pad2(`${i.width}x${i.height}`, 10)} ${pad2(`${Math.round(i.bytes / 1024)}KB`, 7)} ${pad2(i.originalName ?? "", 24)} ${i.usages.length ? i.usages.map((u) => `${u.slug}:${u.where}`).join(", ") : "(unused)"}`);
   out([`${res.stats.total} images, ${res.stats.unused} unused`, ...lines].join("\n"), res);
 });
 imageCmd.command("rm <id>").description("delete an image (admin); refuses if still used unless --force").option("--force", "delete even if content still uses it").action(async (id, o) => {
@@ -610,48 +736,74 @@ imageCmd.command("rm <id>").description("delete an image (admin); refuses if sti
   out(`Deleted ${id}`, res);
 });
 imageCmd.command("purge").description("delete images no content body / cover uses (admin); skips uploads from the last hour").option("--dry-run", "only count").option("--include-revisions", "also delete images only referenced by old revisions").option("--min-age <minutes>", "skip images newer than this", "60").action(async (o) => {
-  const res = await (await needToken()).call("POST", "/images/purge", { dryRun: o.dryRun, includeRevisions: o.includeRevisions, minAgeMinutes: Number(o.minAge) });
+  const res = await (await needToken()).call("POST", "/images/purge", { dryRun: o.dryRun, includeRevisions: o.includeRevisions, minAgeMinutes: int("--min-age", o.minAge) });
   out(`${o.dryRun ? "Would delete" : "Deleted"} ${res.count} images (${Math.round(res.bytes / 1024)}KB)`, res);
 });
 async function findUserByEmail(email) {
   const c = await needToken();
-  const res = await c.call("GET", `/admin/users${c.q({ q: email })}`);
-  const u = res.users.find((x) => x.email.toLowerCase() === email.toLowerCase());
-  if (!u) throw new CliError("not_found", `No user with email ${email}`, EXIT.error);
+  const u = await c.call("GET", `/admin/members/lookup${c.q({ email })}`);
   return { c, u };
 }
-program.command("users").description("list users (admin)").option("-q, --query <text>", "filter by email or name").option("--expiring <days>", "only members whose membership ends within N days").action(async (o) => {
+program.command("users").description("list all platform users with their identities in each column (platform admin); column staff: use `member ls`").option("-q, --query <text>", "filter by email or name").option("--status <s>", "all | pending | active | banned", "all").option("--limit <n>", "page size (max 200)", "50").option("--offset <n>", "skip the first N users", "0").option("--expiring <days>", "only members of the current column whose membership ends within N days").action(async (o) => {
   const c = await needToken();
   if (o.expiring) {
     const res2 = await c.call("GET", `/admin/memberships/expiring${c.q({ days: o.expiring })}`);
-    return out(res2.memberships.map((m) => `${pad(m.email, 32)} ${date(m.expiresAt)}  ${m.name}`).join("\n") || "Nobody", res2);
+    return out(res2.memberships.map((m) => `${pad2(m.email, 32)} ${date2(m.expiresAt)}  ${m.name}`).join("\n") || "Nobody", res2);
   }
-  const res = await c.call("GET", `/admin/users${c.q({ q: o.query })}`);
-  out(res.users.map((u) => `${pad(u.email, 32)} ${pad(u.role, 8)} ${pad(u.status, 8)} ${u.membership ? `member\u2192${date(u.membership.expiresAt)}` : ""}`).join("\n") || "No users", res);
+  const res = await c.call("GET", `/admin/users${c.q({ q: o.query, status: o.status, limit: o.limit, offset: o.offset })}`);
+  const state = (u) => u.banned ? "banned" : u.status;
+  const where = (u) => [...u.staffOf.map((s) => `${s.slug}:${s.role}`), ...u.memberOf.map((m) => `${m.slug}:member\u2192${date2(m.until)}`)].join(" ");
+  const lines = res.users.map((u) => `${pad2(u.email, 32)} ${pad2(u.platformRole, 6)} ${pad2(state(u), 8)} ${where(u)}`);
+  if (res.nextOffset !== null) lines.push(`\u2026 ${res.total} users in total; next page: --offset ${res.nextOffset}`);
+  out(lines.join("\n") || "No users", res);
 });
-var member = program.command("member").description("grant or revoke membership (admin)");
-member.command("grant <email>").option("--days <n>", "add N days (after the current expiry if already a member)").option("--until <date>", "set the end date, e.g. 2027-10-20").option("--note <text>").action(async (email, o) => {
+var member = program.command("member").description("grant or revoke membership in the current column (column admin)");
+member.command("ls").description("members of the current column (manager+)").option("-q, --query <text>", "filter by email or name").option("--status <s>", "active | expired | revoked | all", "active").option("--plan <key>", "only this plan").option("--limit <n>", "page size (max 200)", "50").option("--offset <n>", "skip the first N members", "0").action(async (o) => {
+  const c = await needToken();
+  const res = await c.call("GET", `/admin/members${c.q({ q: o.query, status: o.status, plan: o.plan, limit: o.limit, offset: o.offset })}`);
+  const lines = res.members.map((m) => `${pad2(m.email, 32)} ${pad2(m.plan, 10)} ${pad2(m.status, 8)} ${m.expiresAt ? date2(m.expiresAt) : ""}  ${m.name}`);
+  if (res.nextOffset !== null) lines.push(`\u2026 ${res.total} members in total; next page: --offset ${res.nextOffset}`);
+  out(lines.join("\n") || "No members", res);
+});
+member.command("grant <email>").option("--days <n>", "add N days (after the current expiry if already a member)").option("--until <date>", "set the end date, e.g. 2027-10-20").option("--plan <key>", "plan key; default: the lowest plan of the column").option("--note <text>").action(async (email, o) => {
   if (!o.days === !o.until) throw new CliError("bad_request", "Pass exactly one of --days or --until", EXIT.usage);
+  const days = o.days ? int("--days", o.days, 1) : void 0;
   const { c, u } = await findUserByEmail(email);
-  const res = await c.call("POST", `/admin/users/${u.id}/membership`, { days: o.days ? Number(o.days) : void 0, until: o.until, note: o.note });
-  out(`${email} is a member until ${date(res.membership?.expiresAt ?? null)}`, res);
+  const res = await c.call("POST", `/admin/users/${u.id}/membership`, { days, until: o.until, plan: o.plan, note: o.note });
+  out(`${email} is a member until ${date2(res.membership?.expiresAt ?? null)}`, res);
 });
 member.command("revoke <email>").action(async (email) => {
   const { c, u } = await findUserByEmail(email);
   const res = await c.call("DELETE", `/admin/users/${u.id}/membership`);
   out(`${email} is now ${res.role}`, res);
 });
-program.command("role <email> <role>").description("set staff role: admin | editor | user (admin)").action(async (email, role) => {
+program.command("role <email> <role>").description("set the PLATFORM role: admin | user (platform admin). Column roles: `team set`").action(async (email, role) => {
   const { c, u } = await findUserByEmail(email);
   const res = await c.call("POST", `/admin/users/${u.id}/role`, { role });
-  out(`${email} \u2192 ${res.staffRole}`, res);
+  out(`${email} \u2192 platform ${res.platformRole}`, res);
+});
+var team = program.command("team").description("the current column's editorial team (column admin; agent credentials can't)");
+team.command("ls").action(async () => {
+  const res = await (await needToken()).call("GET", "/admin/team");
+  out(res.team.map((m) => `${pad2(m.email, 32)} ${pad2(m.role, 8)} ${m.name}`).join("\n") || "Nobody", res);
 });
-var code = program.command("code").description("membership redeem codes (admin)");
-code.command("create").requiredOption("--days <n>", "membership days per redemption").option("--count <n>", "how many codes", "1").option("--max-uses <n>", "redemptions per code", "1").option("--expires <date>", "code stops working after this date").option("--note <text>").action(async (o) => {
+team.command("set <email> <role>").description("add someone to the team or change their role: owner | admin | editor | author").action(async (email, role) => {
+  const { c, u } = await findUserByEmail(email);
+  const res = await c.call("PUT", `/admin/team/${u.id}`, { role });
+  out(`${email} \u2192 ${res.role}`, res);
+});
+team.command("rm <email>").description("remove someone from the team").action(async (email) => {
+  const { c, u } = await findUserByEmail(email);
+  const res = await c.call("DELETE", `/admin/team/${u.id}`);
+  out(`${email} removed from the team`, res);
+});
+var code = program.command("code").description("membership redeem codes of the current column (column admin)");
+code.command("create").requiredOption("--days <n>", "membership days per redemption").option("--count <n>", "how many codes", "1").option("--max-uses <n>", "redemptions per code", "1").option("--expires <date>", "code stops working after this date").option("--plan <key>", "plan the code grants; default: the lowest plan of the column").option("--note <text>").action(async (o) => {
   const res = await (await needToken()).call("POST", "/admin/redeem-codes", {
-    days: Number(o.days),
-    count: Number(o.count),
-    maxUses: Number(o.maxUses),
+    days: int("--days", o.days, 1),
+    count: int("--count", o.count, 1),
+    maxUses: int("--max-uses", o.maxUses, 1),
+    plan: o.plan,
     expiresAt: o.expires,
     note: o.note
   });
@@ -659,17 +811,264 @@ code.command("create").requiredOption("--days <n>", "membership days per redempt
 });
 code.command("ls").action(async () => {
   const res = await (await needToken()).call("GET", "/admin/redeem-codes");
-  out(res.codes.map((x) => `${x.prefix}\u2026  ${pad(`${x.days}d`, 6)} ${x.usedCount}/${x.maxUses}  ${x.active ? "active" : "inactive"}  ${x.note ?? ""}`).join("\n") || "No codes", res);
+  out(res.codes.map((x) => `${x.prefix}\u2026  ${pad2(`${x.days}d`, 6)} ${x.usedCount}/${x.maxUses}  ${x.active ? "active" : "inactive"}  ${x.note ?? ""}`).join("\n") || "No codes", res);
 });
-program.command("audit").description("recent audit log (admin)").option("--action <prefix>", "e.g. content. or membership.").option("--limit <n>", "", "50").action(async (o) => {
+program.command("audit").description("recent audit log of the current column (column admin)").option("--action <prefix>", "e.g. content. or membership.").option("--limit <n>", "", "50").action(async (o) => {
   const c = await needToken();
   const res = await c.call("GET", `/admin/audit${c.q({ action: o.action, limit: o.limit })}`);
-  out(res.entries.map((e) => `${e.createdAt.slice(0, 19).replace("T", " ")}  ${pad(e.actor ?? "system", 28)} ${pad(e.action, 24)} ${e.targetType}:${e.targetId}`).join("\n"), res);
+  const who = (e) => `${e.actor ?? "system"}${e.actorKind === "agent" ? " [agent]" : e.actorKind === "reader_agent" ? " [reader-agent]" : ""}${e.platformOperator ? " [platform]" : ""}`;
+  out(res.entries.map((e) => `${e.createdAt.slice(0, 19).replace("T", " ")}  ${pad2(who(e), 36)} ${pad2(e.action, 24)} ${e.targetType}:${e.targetId}`).join("\n"), res);
+});
+var columnCmd = program.command("column").description("columns: discover, create (platform admin), settings (owner)");
+columnCmd.command("ls").description("open columns, optionally by category").option("--category <slug>").option("-q, --query <text>").action(async (o) => {
+  const c = await client();
+  const res = await c.call("GET", `/columns${c.q({ category: o.category, q: o.query })}`);
+  out(res.columns.map((x) => `${pad2(x.slug, 24)} ${pad2(x.category?.slug ?? "\u2014", 12)} ${pad2(`${x.publishedCount} posts`, 10)} ${x.name}${x.tagline ? ` \u2014 ${x.tagline}` : ""}`).join("\n") || "No columns", res);
+});
+columnCmd.command("create <slug>").description("create a column and name its owner (platform admin)").requiredOption("--name <name>").requiredOption("--owner <email>", "the owner's email; they must have registered").option("--tagline <text>").option("--category <slug>").action(async (slug, o) => {
+  const res = await (await needToken()).call("POST", "/columns", { slug, name: o.name, ownerEmail: o.owner, tagline: o.tagline, category: o.category });
+  out(`Created column ${res.slug}`, res);
 });
-program.command("skill").description("print the agent usage guide (SKILL.md), or --install it for Claude Code").option("--install", "write it to ~/.claude/skills/ai-native-lab/SKILL.md").action(async (o) => {
+columnCmd.command("info").description("the current column's public profile and plans").action(async () => {
+  const c = await client();
+  const slug = await currentColumn(c);
+  const res = await c.call("GET", `/columns/${encodeURIComponent(slug)}`);
+  out(`${res.name} (${res.slug})
+plans: ${res.plans.map((p) => `${p.key}=rank ${p.rank}`).join(", ")}
+team: ${res.team.map((t) => `${t.name} (${t.role})`).join(", ")}`, res);
+});
+columnCmd.command("set").description("change the current column's profile / settings (owner)").option("--name <name>").option("--tagline <text>").option("--slug <slug>", "rename the address; the old one keeps redirecting").option("--category <slug>").option("--comments <who>", "all | member | off").option("--ai-policy <policy>", "allow | cite-only | deny: what outside crawlers / AI may do with public content").option("--review <on|off>", "turn the author \u2192 editor review flow on or off").option("--notify-on-publish <on|off>", "email followers when something is published").action(async (o) => {
+  const c = await needToken();
+  const settings = { comments: o.comments, aiPolicy: o.aiPolicy, review: onoff("--review", o.review), notifyOnPublish: onoff("--notify-on-publish", o.notifyOnPublish) };
+  for (const k of Object.keys(settings)) if (settings[k] === void 0) delete settings[k];
+  const slug = await currentColumn(c);
+  const res = await c.call("PATCH", `/columns/${encodeURIComponent(slug)}`, { name: o.name, tagline: o.tagline, slug: o.slug, category: o.category, settings: Object.keys(settings).length ? settings : void 0 });
+  out(`Updated ${res.slug}`, res);
+});
+columnCmd.command("status <status>").description("active | suspended | archived (platform admin; pass --reason when acting on someone else's column)").option("--reason <text>", "why \u2014 recorded in the column's audit log").action(async (status, o) => {
+  const c = await needToken();
+  const slug = await currentColumn(c);
+  const res = await c.call("POST", `/columns/${encodeURIComponent(slug)}/status`, { status, reason: o.reason }, o.reason ? { "x-platform-reason": o.reason } : {});
+  out(`${slug} \u2192 ${status}`, res);
+});
+var planCmd = program.command("plan").description("membership plans of the current column (owner)");
+planCmd.command("ls").action(async () => {
+  const res = await (await client()).call("GET", "/plans");
+  out(res.plans.map((p) => `${pad2(p.key, 14)} rank ${pad2(String(p.rank), 4)} ${p.name}  ${p.description}`).join("\n") || "No plans", res);
+});
+planCmd.command("create <key>").requiredOption("--name <name>").requiredOption("--rank <n>", "higher rank includes everything below it").option("--description <text>", "", "").action(async (key, o) => {
+  const res = await (await needToken()).call("POST", "/admin/plans", { key, name: o.name, rank: int("--rank", o.rank), description: o.description });
+  out(`Created plan ${res.key} (rank ${res.rank})`, res);
+});
+planCmd.command("archive <key>").description("stop selling a plan; existing members keep it until they expire").action(async (key) => {
+  const res = await (await needToken()).call("PATCH", `/admin/plans/${encodeURIComponent(key)}`, { archived: true });
+  out(`Archived ${key}`, res);
+});
+team.command("invite <email> <role>").description("invite someone to the team by email (owner | admin | editor | author); they accept with `invite accept <token>` or in the browser").action(async (email, role) => {
+  const res = await (await needToken()).call("POST", "/admin/team/invites", { email, role });
+  out(res.mailed ? `Invitation emailed to ${email}` : `Mail isn't set up; send this link to ${email}:
+${res.link}`, res);
+});
+team.command("invites").description("pending invitations").action(async () => {
+  const res = await (await needToken()).call("GET", "/admin/team/invites");
+  out(res.invites.map((i) => `${pad2(i.id.slice(0, 8), 9)} ${pad2(i.email, 32)} ${pad2(i.role, 8)} until ${date2(i.expiresAt)}`).join("\n") || "No pending invitations", res);
+});
+team.command("uninvite <id>").action(async (id) => out(`Revoked ${id}`, await (await needToken()).call("DELETE", `/admin/team/invites/${encodeURIComponent(id)}`)));
+program.command("invite").description("accept a team invitation (sign in as the invited email first)").command("accept <token>").action(async (token) => {
+  const res = await (await needToken()).call("POST", "/invites/accept", { token });
+  out(`You're now ${res.role} of ${res.column.slug}`, res);
+});
+var agentCmd = program.command("agent").description("agent seats of the current column (owner; agent credentials can't manage these)");
+agentCmd.command("ls").action(async () => {
+  const res = await (await needToken()).call("GET", "/admin/agents");
+  out(res.agents.map((a) => `${pad2(a.id.slice(0, 8), 9)} ${pad2(a.name, 24)} ${a.canPublish ? "can publish" : "drafts only"}  ${a.disabled ? "disabled" : "active"}  ${a.tokens} tokens`).join("\n") || "No agent seats", res);
+});
+agentCmd.command("create <name>").option("--can-publish", "let this agent publish directly (still declared as `agent`, still audited)").action(async (name, o) => {
+  const res = await (await needToken()).call("POST", "/admin/agents", { name, canPublish: Boolean(o.canPublish) });
+  out(`Created agent seat ${res.id}`, res);
+});
+agentCmd.command("set <id>").option("--can-publish <on|off>").option("--disabled <on|off>").option("--name <name>").action(async (id, o) => {
+  const res = await (await needToken()).call("PATCH", `/admin/agents/${encodeURIComponent(id)}`, { name: o.name, canPublish: onoff("--can-publish", o.canPublish), disabled: onoff("--disabled", o.disabled) });
+  out(`Updated ${id}`, res);
+});
+agentCmd.command("rm <id>").action(async (id) => out(`Deleted ${id}`, await (await needToken()).call("DELETE", `/admin/agents/${encodeURIComponent(id)}`)));
+agentCmd.command("revoke-all").description("emergency stop: revoke every agent credential of this column").action(async () => {
+  const res = await (await needToken()).call("POST", "/admin/agents/revoke-all", {});
+  out(`Revoked ${res.revoked} agent credentials`, res);
+});
+program.command("export").description("take your column with you: content, members (email + plan + expiry only), tags, code metadata (column admin)").option("--part <part>", "all | members | content | tags | codes | knowledge", "all").option("-o, --out <dir>", "write files into this folder instead of printing JSON").action(async (o) => {
+  const c = await needToken();
+  const res = await c.call("GET", `/admin/export${c.q({ part: o.part })}`);
+  if (!o.out) return out(JSON.stringify(res, null, 2), res);
+  await mkdir3(o.out, { recursive: true });
+  let files = 0;
+  const questionsOf = (slug) => (res.questions ?? []).filter((q) => q.status === "open" && q.source?.slug === slug && q.source.columnSlug === res.column.slug).map((q) => ({ id: q.id, text: q.text, disciplines: q.disciplines.map((d) => d.slug), ...q.membersOnly ? { membersOnly: true } : {} }));
+  for (const post of res.content ?? []) {
+    const { body, slug, ...meta } = post;
+    await mkdir3(path4.join(o.out, "content"), { recursive: true });
+    await writeFile3(path4.join(o.out, "content", `${slug}.md`), formatDoc({ slug, title: String(meta.title), summary: String(meta.summary ?? ""), access: String(meta.access), authorship: String(meta.authorship), status: String(meta.status), tags: meta.tags ?? [], cover: meta.cover ?? null, disciplines: meta.disciplines ?? [], research: meta.research, questions: questionsOf(slug), body: String(body ?? "") }));
+    files++;
+  }
+  if (res.members) {
+    const esc = (v) => /[",\n]/.test(v) ? `"${v.replace(/"/g, '""')}"` : v;
+    await writeFile3(path4.join(o.out, "members.csv"), ["email,name,plans,active,expires_at", ...res.members.map((m) => [m.email, m.name, m.plans.join("|"), m.active ? "yes" : "no", m.expiresAt ?? ""].map(esc).join(","))].join("\n"));
+    files++;
+  }
+  for (const part of ["tags", "codes", "questions", "bridges"]) if (res[part]) await writeFile3(path4.join(o.out, `${part}.json`), JSON.stringify(res[part], null, 2)), files++;
+  out(`Exported ${res.column.slug}: ${files} files in ${o.out}/`, { ok: true, dir: o.out, files });
+});
+program.command("mcp").description("run as an MCP server over stdio so an agent client can read and write the column (tools follow your credential's permissions)").action(async () => {
+  const { apiUrl, token, column } = await resolveAuth(g());
+  const { serveStdio } = await import("./mcp-X4ZHRZEN.js");
+  console.error(`ailab mcp: serving ${apiUrl}${column ? ` (column ${column})` : ""}${token ? "" : " as a guest"}`);
+  await serveStdio({ client: (col) => createClient(apiUrl, token, col ?? column, clientOptions()) });
+});
+columnCmd.command("follow").description("follow (or --remove) the current column: new-post emails when the column has them on, and its posts in your weekly digest").option("--remove", "stop following").action(async (o) => {
+  const res = await (await needToken()).call(o.remove ? "DELETE" : "PUT", "/column/follow");
+  out(o.remove ? "Unfollowed" : "Following", res);
+});
+columnCmd.command("apply <slug>").description("apply to open your own column; a platform admin reviews it").requiredOption("--name <name>").requiredOption("--pitch <text>", "what you'll write and for whom (at least 10 characters)").action(async (slug, o) => {
+  const res = await (await needToken()).call("POST", "/column-applications", { slug, name: o.name, pitch: o.pitch });
+  out(`Application ${res.id.slice(0, 8)} submitted; you'll get an email when it's decided`, res);
+});
+var apps = program.command("applications").description("column applications (platform admin)");
+apps.command("ls").option("--status <s>", "pending | approved | rejected", "pending").action(async (o) => {
+  const c = await needToken();
+  const res = await c.call("GET", `/admin/column-applications${c.q({ status: o.status })}`);
+  out(res.applications.map((a) => `${a.id.slice(0, 8)}  ${pad2(a.slug, 20)} ${pad2(a.applicant.email, 28)} ${a.name} \u2014 ${a.pitch.replace(/\s+/g, " ").slice(0, 80)}`).join("\n") || "Nothing waiting", res);
+});
+apps.command("decide <id> <verdict>").description("approve | reject").option("--note <text>", "sent to the applicant").action(async (id, verdict, o) => {
+  if (!["approve", "reject"].includes(verdict)) throw new CliError("bad_request", "verdict must be approve or reject", EXIT.usage);
+  const res = await (await needToken()).call("POST", `/admin/column-applications/${encodeURIComponent(id)}/decide`, { approve: verdict === "approve", note: o.note });
+  out(`${verdict}d ${id}`, res);
+});
+var hook = program.command("webhook").description("webhooks of the current column: events pushed to your service, HMAC-signed (column admin)");
+hook.command("ls").action(async () => {
+  const res = await (await needToken()).call("GET", "/admin/webhooks");
+  out(res.webhooks.map((h) => `${h.id.slice(0, 8)}  ${h.disabled ? "off" : "on "}  ${pad2(h.url, 44)} ${h.events.join(",")}  ok ${h.deliveries.ok} / failed ${h.deliveries.failed} / pending ${h.deliveries.pending}`).join("\n") || "No webhooks", res);
+});
+hook.command("create <url>").requiredOption("--events <list>", "comma separated: content.published, content.updated, content.unpublished, member.added, member.revoked, member.expired, comment.created, or *").description("the signing secret is shown once").action(async (url, o) => {
+  const res = await (await needToken()).call("POST", "/admin/webhooks", { url, events: o.events.split(",").map((s) => s.trim()).filter(Boolean) });
+  out(`Created ${res.id}
+secret (shown once): ${res.secret}
+Verify: X-Aln-Signature = t=<unix>,v1=HMAC_SHA256(secret, "<t>.<raw body>")`, res);
+});
+hook.command("test <id>").description("send a ping").action(async (id) => out(`Ping queued for ${id}`, await (await needToken()).call("POST", `/admin/webhooks/${encodeURIComponent(id)}/test`)));
+hook.command("rotate <id>").description("issue a new signing secret").action(async (id) => {
+  const res = await (await needToken()).call("PATCH", `/admin/webhooks/${encodeURIComponent(id)}`, { rotateSecret: true });
+  out(`new secret (shown once): ${res.secret}`, res);
+});
+hook.command("rm <id>").action(async (id) => out(`Deleted ${id}`, await (await needToken()).call("DELETE", `/admin/webhooks/${encodeURIComponent(id)}`)));
+hook.command("deliveries <id>").description("recent deliveries").action(async (id) => {
+  const res = await (await needToken()).call("GET", `/admin/webhooks/${encodeURIComponent(id)}/deliveries`);
+  out(res.deliveries.map((d) => `${d.id.slice(0, 8)}  ${pad2(d.event, 20)} ${pad2(d.status, 8)} attempts ${d.attempts}  ${d.responseCode ?? "\u2014"}  ${d.createdAt.slice(0, 19)}`).join("\n") || "No deliveries", res);
+});
+program.command("report <type> <target>").description("report content (slug), a comment (id) or the whole column (any text) to the column team / platform").requiredOption("--reason <text>", "what's wrong (at least 4 characters)").action(async (type, target, o) => {
+  if (!["content", "comment", "column"].includes(type)) throw new CliError("bad_request", "type must be content, comment or column", EXIT.usage);
+  out("Reported. Thank you.", await (await needToken()).call("POST", "/reports", { targetType: type, target, reason: o.reason }));
+});
+program.command("stats").description("the current column's numbers: members, expiring, content, comments, followers, views (column admin)").action(async () => {
+  const s = await (await needToken()).call("GET", "/admin/stats");
+  out(
+    [
+      `members ${s.members.active} (+${s.members.new30d} in 30d; ${s.members.expiring7d} expire within 7d, ${s.members.expiring30d} within 30d)  ${s.members.byPlan.map((p) => `${p.plan}:${p.n}`).join(" ")}`,
+      `content ${s.content.published} published \xB7 ${s.content.draft} drafts \xB7 ${s.content.review} in review \xB7 ${s.content.scheduled} scheduled`,
+      `comments pending ${s.comments.pending} \xB7 followers ${s.followers} \xB7 views(30d) ${s.views.last30d}`,
+      ...s.views.top.map((t) => `  ${pad2(t.slug, 28)} ${t.views}`)
+    ].join("\n"),
+    s
+  );
+});
+var qLine = (q) => `${q.id}  ${pad2(q.status === "open" ? q.confirmed ? "open" : "pending" : q.status, 8)} ${pad2(q.disciplines.map((d) => d.slug).join("\xD7"), 28)} ${q.follows}f/${q.claims}c  ${q.text}${q.source ? `  (${q.source.columnSlug}/${q.source.slug})` : ""}`;
+var bLine = (b) => `${b.id}  ${pad2(b.status, 9)} ${pad2(b.kind, 13)} ${b.from.columnSlug}/${b.from.slug} [${b.from.discipline.slug}] \u2194 ${b.to.columnSlug}/${b.to.slug} [${b.to.discipline.slug}]${b.actorKind === "agent" ? " (agent)" : ""}  ${b.claim}`;
+var disciplineCmd = program.command("discipline").description("the platform-wide list of disciplines (platform admins maintain it)");
+disciplineCmd.command("ls").action(async () => {
+  const r = await (await client()).call("GET", "/disciplines");
+  out(r.disciplines.map((d) => `${pad2(d.slug, 20)} ${pad2(d.name, 10)} ${d.contents} published`).join("\n") || "No disciplines yet", r);
+});
+disciplineCmd.command("request <slug> <name>").description("ask the platform to add a discipline (column editors)").requiredOption("--reason <text>", "why the existing disciplines don't fit").action(async (slug, name, o) => out(`Requested ${slug}`, await (await needToken()).call("POST", "/discipline-requests", { slug, name, reason: o.reason })));
+program.command("map").description("the discipline \xD7 discipline map: confirmed / proposed bridges, contradictions, open questions per pair").option("--cell <a,b>", "show one pair: its bridges and questions").option("--gaps", "list the emptiest pairs first (score = open questions + confirmed bridges + half the proposed ones) to find where nobody has asked yet").option("--concept <text>", "with --gaps: only pairs where both sides have published posts mentioning this concept").option("--limit <n>", "with --gaps: how many pairs (default 10)").action(async (o) => {
+  if (o.gaps && o.cell) throw new CliError("bad_request", "--gaps and --cell can't be combined", EXIT.usage);
+  if (!o.gaps && (o.concept !== void 0 || o.limit !== void 0)) throw new CliError("bad_request", "--concept and --limit only work with --gaps", EXIT.usage);
+  const c = await client();
+  if (o.gaps) {
+    const r2 = await c.call("GET", `/map/gaps${c.q({ limit: o.limit === void 0 ? void 0 : int("--limit", o.limit, 1), concept: o.concept })}`);
+    return out(formatGaps(r2), r2);
+  }
+  if (o.cell) {
+    const [a, b] = o.cell.split(",").map((s) => s.trim());
+    const r2 = await c.call("GET", `/map/cell${c.q({ a, b })}`);
+    return out([`${a} \xD7 ${b}: ${r2.bridges.length} bridges, ${r2.questions.length} questions`, ...r2.bridges.map(bLine), ...r2.questions.map(qLine)].join("\n"), r2);
+  }
+  const r = await c.call("GET", "/map");
+  const pairs = [];
+  for (let i = 0; i < r.disciplines.length; i++)
+    for (let j = i + 1; j < r.disciplines.length; j++) {
+      const a = r.disciplines[i].slug, b = r.disciplines[j].slug;
+      const v = r.cells.find((x) => x.a === a && x.b === b || x.a === b && x.b === a);
+      pairs.push(`${pad2(`${a} \xD7 ${b}`, 34)} ${v ? `${v.confirmed} confirmed \xB7 ${v.proposed} proposed \xB7 ${v.contradictions} contradictions \xB7 ${v.questions} questions${v.proposed > 2 * v.confirmed ? "  \u2190 mostly unverified" : ""}` : "\u2014 blank \u2014"}`);
+    }
+  out([...pairs, "", `totals: ${JSON.stringify(r.totals)}`].join("\n"), r);
+});
+var questionCmd = program.command("question").description("questions: the question wall, follow / claim, and confirming agent-proposed questions (editors). Questions of a post are written with `push` (frontmatter `questions:`)");
+questionCmd.command("ls").description("the question wall").option("--discipline <slug>").option("--status <s>", "open | closed | all", "open").option("--limit <n>", "", "30").action(async (o) => {
+  const c = await client();
+  const r = await c.call("GET", `/questions${c.q({ discipline: o.discipline, status: o.status, limit: o.limit })}`);
+  out(r.questions.map(qLine).join("\n") || "No questions", r);
+});
+questionCmd.command("search <text>").description("find questions on the wall by words (every word must appear in the question or its note); closed ones included by default").option("--discipline <slug>").option("--status <s>", "open | closed | all", "all").option("--limit <n>", "", "20").action(async (text, o) => {
+  const c = await client();
+  const r = await c.call("GET", `/questions${c.q({ q: text, discipline: o.discipline, status: o.status, limit: int("--limit", o.limit, 1) })}`);
+  out(r.questions.map(qLine).join("\n") || "No matches", r);
+});
+questionCmd.command("check <text>").description("before asking: the most similar questions already on this site, and how crowded the pair of disciplines is. Says nothing about the web: search it yourself").option("--disciplines <a,b>", "exactly two discipline slugs, to also get that pair's open questions and bridges").action(async (text, o) => {
+  const slugs = o.disciplines?.split(",").map((s) => s.trim()).filter(Boolean);
+  if (slugs && (slugs.length !== 2 || slugs[0] === slugs[1])) throw new CliError("bad_request", "--disciplines takes exactly two different slugs, e.g. computing,anthropology", EXIT.usage);
+  const c = await client();
+  const r = await c.call("GET", `/questions/check${c.q({ text, disciplines: slugs?.join(",") })}`);
+  out(formatCheck(r), r);
+});
+questionCmd.command("show <id>").action(async (id) => {
+  const r = await (await client()).call("GET", `/questions/${encodeURIComponent(id)}`);
+  out([qLine(r), ...r.claimsList.map((x) => `  claimed by ${x.name}${x.note ? `: ${x.note}` : ""}`)].join("\n"), r);
+});
+questionCmd.command("pending").description("this column's agent-proposed questions waiting for a human").action(async () => {
+  const r = await (await needToken()).call("GET", "/column/questions?state=pending");
+  out(r.questions.map((q) => [qLine(q), formatEvidence(q.evidence)].filter(Boolean).join("\n")).join("\n") || "Nothing waiting", r);
+});
+for (const action of ["confirm", "close", "reopen"]) {
+  questionCmd.command(`${action} <id>`).description(action === "confirm" ? "confirm an agent-proposed question (humans only)" : `${action} a question of this column`).action(async (id) => out(`${id} \u2192 ${action}`, await (await needToken()).call("POST", `/column/questions/${encodeURIComponent(id)}/${action}`)));
+}
+questionCmd.command("follow <id>").option("--remove", "unfollow").action(async (id, o) => out(o.remove ? `Unfollowed ${id}` : `Following ${id}`, await (await needToken()).call(o.remove ? "DELETE" : "PUT", `/questions/${encodeURIComponent(id)}/follow`)));
+questionCmd.command("claim <id>").description("say you're working on it").option("--note <text>", "one line on what you're doing").option("--remove", "withdraw the claim").action(async (id, o) => out(o.remove ? `Withdrew claim on ${id}` : `Claimed ${id}`, await (await needToken()).call(o.remove ? "DELETE" : "PUT", `/questions/${encodeURIComponent(id)}/claim`, o.remove ? void 0 : { note: o.note })));
+questionCmd.command("ask <text>").description("post a platform question on a blank pair of the map (platform admins)").requiredOption("--disciplines <slugs>", "at least two, comma separated").action(async (text, o) => out("Posted", await (await needToken()).call("POST", "/admin/questions", { text, disciplines: o.disciplines.split(",").map((s) => s.trim()) })));
+var bridgeCmd = program.command("bridge").description("bridges between two disciplines: analogy, transfer, contradiction, translation. Agent bridges wait for a human editor");
+bridgeCmd.command("ls").description("this column's bridges").option("--status <s>", "proposed | confirmed | rejected").option("--run <id>", "only bridges from one compile run").option("--content <slug>", "bridges from / to one post (any visitor)").action(async (o) => {
+  const c = await (o.content ? client() : needToken());
+  const r = await c.call("GET", o.content ? `/contents/${encodeURIComponent(o.content)}/bridges` : `/bridges${c.q({ status: o.status, run: o.run })}`);
+  out(r.bridges.map(bLine).join("\n") || "No bridges", r);
+});
+bridgeCmd.command("add <from> <to>").description("from: a slug in this column; to: a slug here or <column>/<slug> (published)").requiredOption("--kind <kind>", "analogy | transfer | contradiction | translation").requiredOption("--claim <text>", "one line readers see on the map").option("--rationale <text>").option("--from-discipline <slug>", "defaults to the from post's main discipline").option("--to-discipline <slug>", "defaults to the to post's main discipline").option("--run <id>", "compile run id, to review / withdraw a batch together").action(async (from, to, o) => {
+  const r = await (await needToken()).call("POST", "/bridges", { from, to, kind: o.kind, claim: o.claim, rationale: o.rationale, fromDiscipline: o.fromDiscipline, toDiscipline: o.toDiscipline, compileRun: o.run });
+  out(bLine(r), r);
+});
+for (const action of ["confirm", "reject"]) {
+  bridgeCmd.command(`${action} <id>`).description(`${action} a bridge of this column (human editors)`).action(async (id) => out(bLine(await (await needToken()).call("POST", `/bridges/${encodeURIComponent(id)}/${action}`)), { ok: true }));
+}
+bridgeCmd.command("rm <id>").action(async (id) => out(`Deleted ${id}`, await (await needToken()).call("DELETE", `/bridges/${encodeURIComponent(id)}`)));
+program.command("graph").description("export the whole map for an agent to compile: disciplines, published research posts (metadata only), visible bridges and questions").option("-o, --out <file>", "write JSON to a file instead of stdout").action(async (o) => {
+  const r = await (await client()).call("GET", "/graph");
+  if (!o.out) return void process.stdout.write(`${JSON.stringify(r, null, 2)}
+`);
+  await writeFile3(o.out, `${JSON.stringify(r, null, 2)}
+`);
+  out(`Wrote ${o.out}: ${r.contents.length} posts, ${r.bridges.length} bridges, ${r.questions.length} questions`, { ok: true, file: o.out });
+});
+program.command("skill").description("print the agent usage guide (SKILL.md), or --install it as a skill").option("--install", "write it to ~/.claude/skills/ai-native-lab/SKILL.md (Claude Code)").option("--dir <skills-dir>", "install into another agent's skills folder as <skills-dir>/ai-native-lab/SKILL.md (implies --install)").action(async (o) => {
   const src = await readFile4(fileURLToPath(new URL("../SKILL.md", import.meta.url)), "utf8");
-  if (!o.install) return void process.stdout.write(src);
-  const dir = path4.join(homedir2(), ".claude", "skills", "ai-native-lab");
+  if (!o.install && !o.dir) return void process.stdout.write(src);
+  const root = o.dir ? path4.resolve(o.dir.replace(/^~(?=$|\/)/, homedir2())) : path4.join(homedir2(), ".claude", "skills");
+  const dir = path4.join(root, "ai-native-lab");
   await mkdir3(dir, { recursive: true });
   await writeFile3(path4.join(dir, "SKILL.md"), src);
   out(`Installed ${path4.join(dir, "SKILL.md")}`, { ok: true, path: path4.join(dir, "SKILL.md") });
@@ -677,6 +1076,11 @@ program.command("skill").description("print the agent usage guide (SKILL.md), or
 try {
   await program.parseAsync();
 } catch (e) {
+  if (e instanceof CommanderError) {
+    if (e.exitCode !== 0 && program.opts().json) process.stdout.write(`${JSON.stringify({ error: { code: "usage", message: e.message.replace(/^error: /, "") } })}
+`);
+    process.exit(e.exitCode === 0 ? 0 : EXIT.usage);
+  }
   const err = e instanceof CliError ? e : new CliError("error", e.message, EXIT.error);
   if (g().json) process.stdout.write(`${JSON.stringify({ error: { code: err.code, message: err.message } })}
 `);