caveat-cli 0.6.1 → 0.7.0

package/dist/index.js

@@ -9761,49 +9761,49 @@ var require_fast_uri = __commonJS({
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
-    function resolveComponent(base2, relative3, options2, skipNormalization) {
+    function resolveComponent(base2, relative2, options2, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
         base2 = parse4(serialize(base2, options2), options2);
-        relative3 = parse4(serialize(relative3, options2), options2);
+        relative2 = parse4(serialize(relative2, options2), options2);
       }
       options2 = options2 || {};
-      if (!options2.tolerant && relative3.scheme) {
-        target.scheme = relative3.scheme;
-        target.userinfo = relative3.userinfo;
-        target.host = relative3.host;
-        target.port = relative3.port;
-        target.path = removeDotSegments(relative3.path || "");
-        target.query = relative3.query;
+      if (!options2.tolerant && relative2.scheme) {
+        target.scheme = relative2.scheme;
+        target.userinfo = relative2.userinfo;
+        target.host = relative2.host;
+        target.port = relative2.port;
+        target.path = removeDotSegments(relative2.path || "");
+        target.query = relative2.query;
       } else {
-        if (relative3.userinfo !== void 0 || relative3.host !== void 0 || relative3.port !== void 0) {
-          target.userinfo = relative3.userinfo;
-          target.host = relative3.host;
-          target.port = relative3.port;
-          target.path = removeDotSegments(relative3.path || "");
-          target.query = relative3.query;
+        if (relative2.userinfo !== void 0 || relative2.host !== void 0 || relative2.port !== void 0) {
+          target.userinfo = relative2.userinfo;
+          target.host = relative2.host;
+          target.port = relative2.port;
+          target.path = removeDotSegments(relative2.path || "");
+          target.query = relative2.query;
         } else {
-          if (!relative3.path) {
+          if (!relative2.path) {
             target.path = base2.path;
-            if (relative3.query !== void 0) {
-              target.query = relative3.query;
+            if (relative2.query !== void 0) {
+              target.query = relative2.query;
             } else {
               target.query = base2.query;
             }
           } else {
-            if (relative3.path[0] === "/") {
-              target.path = removeDotSegments(relative3.path);
+            if (relative2.path[0] === "/") {
+              target.path = removeDotSegments(relative2.path);
             } else {
               if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) {
-                target.path = "/" + relative3.path;
+                target.path = "/" + relative2.path;
               } else if (!base2.path) {
-                target.path = relative3.path;
+                target.path = relative2.path;
               } else {
-                target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative3.path;
+                target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative2.path;
               }
               target.path = removeDotSegments(target.path);
             }
-            target.query = relative3.query;
+            target.query = relative2.query;
           }
           target.userinfo = base2.userinfo;
           target.host = base2.host;
@@ -9811,7 +9811,7 @@ var require_fast_uri = __commonJS({
         }
         target.scheme = base2.scheme;
       }
-      target.fragment = relative3.fragment;
+      target.fragment = relative2.fragment;
       return target;
     }
     function equal(uriA, uriB, options2) {
@@ -12976,7 +12976,7 @@ import { Command } from "commander";
 
 // src/context.ts
 import { homedir } from "node:os";
-import { join as join9 } from "node:path";
+import { join as join7 } from "node:path";
 
 // ../../packages/core/dist/db.js
 import { DatabaseSync } from "node:sqlite";
@@ -15819,7 +15819,14 @@ function search(db, opts = {}) {
     conditions.push(`e.confidence IN (${placeholders})`);
     params.push(...filters.confidence);
   }
+  if (filters.visibility === "public" || filters.visibility === "private") {
+    conditions.push(`e.visibility = ?`);
+    params.push(filters.visibility);
+  }
   if (conditions.length) sql += " AND " + conditions.join(" AND ");
+  if (!ftsQuery) {
+    sql += ` ORDER BY json_extract(e.frontmatter_json, '$.updated_at') DESC`;
+  }
   sql += " LIMIT ?";
   params.push(limit);
   const rows = db.prepare(sql).all(...params);
@@ -15864,6 +15871,7 @@ function toSearchResult(row) {
     title: row.title,
     symptomExcerpt: symptom.slice(0, SYMPTOM_EXCERPT_LENGTH),
     confidence: row.confidence,
+    visibility: row.visibility ?? "public",
     environment: fm.environment ?? {}
   };
 }
@@ -16105,12 +16113,10 @@ function resolvePaths(caveatHome, knowledgeRepo, userHome) {
 
 // ../../packages/core/dist/config.js
 import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "node:fs";
-var SHARED_REPO_URL = "https://github.com/kitepon-rgb/Caveat";
 var DEFAULT_CONFIG = {
   knowledgeRepo: "own",
   semverKeys: ["driver", "cuda", "node"],
-  communitySources: [],
-  sharedRepo: SHARED_REPO_URL
+  communitySources: []
 };
 function loadConfig(userConfigPath) {
   const userCfg = existsSync5(userConfigPath) ? JSON.parse(readFileSync4(userConfigPath, "utf-8")) : {};
@@ -16134,7 +16140,7 @@ function deepMerge(base2, overlay) {
 }
 
 // ../../packages/core/dist/community.js
-import { existsSync as existsSync6, readdirSync as readdirSync3 } from "node:fs";
+import { existsSync as existsSync6, readdirSync as readdirSync3, rmSync, statSync as statSync4 } from "node:fs";
 import { join as join6 } from "node:path";
 
 // ../../node_modules/.pnpm/simple-git@3.36.0/node_modules/simple-git/dist/esm/index.js
@@ -21164,6 +21170,37 @@ function communityList(opts) {
   }
   return out;
 }
+function communityRemove(opts) {
+  const handle = (opts.handle ?? "").trim();
+  if (!handle) {
+    throw new Error("handle is required");
+  }
+  if (handle === "." || handle === ".." || /[\\/]/.test(handle)) {
+    throw new Error(`invalid handle (no path separators or relative segments): ${opts.handle}`);
+  }
+  const target = join6(opts.communityDir, handle);
+  const dirExisted = existsSync6(target) && statSync4(target).isDirectory();
+  const source = `community/${handle}`;
+  const row = opts.db.prepare("SELECT COUNT(*) AS n FROM entries WHERE source = ?").get(source);
+  const rowCount = row?.n ?? 0;
+  if (opts.dryRun) {
+    return { handle, path: target, dirExisted, rowCount, removed: false, dryRun: true };
+  }
+  if (dirExisted) {
+    rmSync(target, { recursive: true, force: true });
+  }
+  if (rowCount > 0) {
+    opts.db.prepare("DELETE FROM entries WHERE source = ?").run(source);
+  }
+  return {
+    handle,
+    path: target,
+    dirExisted,
+    rowCount,
+    removed: dirExisted || rowCount > 0,
+    dryRun: false
+  };
+}
 
 // ../../packages/core/dist/claudeHooks.js
 var CAVEAT_TRIGGERS = [
@@ -21194,262 +21231,28 @@ function stopReminderText() {
   return [
     "[caveat] \u3053\u306E\u30BB\u30C3\u30B7\u30E7\u30F3\u3067\u5916\u90E8\u4ED5\u69D8\u306E\u7F60\uFF08GPU/\u30C9\u30E9\u30A4\u30D0/\u30C4\u30FC\u30EB\u30D0\u30FC\u30B8\u30E7\u30F3/IDE/\u518D\u73FE\u6027\uFF09\u3092\u8E0F\u307F\u3001\u6B21\u56DE\u306E\u81EA\u5206\u306E\u8ABF\u67FB\u304C\u77ED\u7E2E\u3067\u304D\u305D\u3046\u306A\u3089 mcp__caveat__caveat_record \u3067\u767B\u9332\u3092\u691C\u8A0E\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
     "\u89E3\u6C7A\u3057\u305F\u30B1\u30FC\u30B9\u3060\u3051\u3067\u306A\u304F\u3001\u300C\u73FE\u72B6\u306E\u5236\u7D04\u3067\u306F\u4E0D\u53EF\u80FD\u3068\u5224\u5B9A\u3057\u305F\u300D\u7D50\u8AD6\u3082 outcome: impossible \u3068\u3057\u3066\u8A18\u9332\u5BFE\u8C61\u3002\u6B21\u56DE\u540C\u3058 3 \u6642\u9593\u3092\u6EB6\u304B\u3055\u306A\u3044\u305F\u3081\u306B\u3002",
-    "\u65E2\u306B\u540C\u7B49\u306E caveat \u304C\u3042\u308B\u5834\u5408\u306F caveat_update \u3067\u4E0A\u66F8\u304D\u3001\u307E\u305F\u306F last_verified \u3060\u3051\u66F4\u65B0\u3002",
-    "\u8A18\u9332\u3057\u305F\u7F60\u304C\u4ED6\u306E\u30E6\u30FC\u30B6\u306B\u3082\u518D\u5229\u7528\u4FA1\u5024\u304C\u3042\u308B\u306A\u3089 mcp__caveat__caveat_push \u3067\u5171\u6709 DB \u306B PR \u3092\u6295\u3052\u308B\u3053\u3068\u3082\u691C\u8A0E\uFF08\u500B\u4EBA\u30D7\u30ED\u30B8\u30A7\u30AF\u30C8\u56FA\u6709\u306E\u7269\u306F push \u3057\u306A\u3044\uFF09\u3002"
+    "\u65E2\u306B\u540C\u7B49\u306E caveat \u304C\u3042\u308B\u5834\u5408\u306F caveat_update \u3067\u4E0A\u66F8\u304D\u3001\u307E\u305F\u306F last_verified \u3060\u3051\u66F4\u65B0\u3002"
   ].join("\n");
 }
 
-// ../../packages/core/dist/push.js
-import { spawnSync } from "node:child_process";
-import {
-  copyFileSync,
-  existsSync as existsSync7,
-  mkdirSync as mkdirSync3,
-  readdirSync as readdirSync4,
-  readFileSync as readFileSync5
-} from "node:fs";
-import { dirname as dirname4, join as join7, relative as relative2 } from "node:path";
-async function pushEntry(opts) {
-  if (!checkGhAvailable()) {
-    return {
-      status: "gh-missing",
-      detail: "gh (GitHub CLI) is required. Install: https://cli.github.com/"
-    };
-  }
-  if (!checkGhAuthed()) {
-    return {
-      status: "gh-unauthed",
-      detail: "gh is not authenticated. Run `gh auth login`."
-    };
-  }
-  const validation = validateCommunityUrl(opts.sharedRepoUrl);
-  if (!validation.valid) {
-    return { status: "failed", detail: `sharedRepo URL invalid: ${validation.reason}` };
-  }
-  const [sharedOwner, sharedName] = parseOwnerRepo(opts.sharedRepoUrl);
-  if (!sharedOwner || !sharedName) {
-    return { status: "failed", detail: `cannot parse owner/repo from ${opts.sharedRepoUrl}` };
-  }
-  const owned = findOwnedEntry(opts.entriesDir, opts.id);
-  if (!owned) {
-    return {
-      status: "not-found",
-      detail: `entry id=${opts.id} not found under ${opts.entriesDir}`
-    };
-  }
-  const ghUser = resolveGhUser();
-  if (!ghUser) {
-    return { status: "failed", detail: "gh api user failed" };
-  }
-  if (opts.dryRun) {
-    return {
-      status: "dry-run",
-      plannedSteps: [
-        `fork ${sharedOwner}/${sharedName} as ${ghUser}/${sharedName}`,
-        `clone fork \u2192 ${forkStagingDir(opts.caveatHome)}`,
-        `copy entry \u2192 entries/${owned.relPath}`,
-        "commit, push branch, open PR against main"
-      ]
-    };
-  }
-  try {
-    ensureFork(sharedOwner, sharedName);
-    const stagingDir = forkStagingDir(opts.caveatHome);
-    ensureStagingClone(stagingDir, ghUser, sharedName, sharedOwner);
-    const branch = `caveat-push-${owned.id}-${Date.now().toString(36)}`;
-    runOrThrow("git", ["checkout", "-b", branch], { cwd: stagingDir });
-    const destPath = join7(stagingDir, "entries", owned.relPath);
-    mkdirSync3(dirname4(destPath), { recursive: true });
-    copyFileSync(owned.absPath, destPath);
-    runOrThrow("git", ["add", join7("entries", owned.relPath)], { cwd: stagingDir });
-    const isUpdate = upstreamAlreadyHas(stagingDir, "entries/" + owned.relPath);
-    const verb = isUpdate ? "update" : "add";
-    const commitMsg = `${verb}: ${owned.title}`;
-    runOrThrow("git", ["commit", "-m", commitMsg], { cwd: stagingDir });
-    runOrThrow("git", ["push", "--set-upstream", "origin", branch], { cwd: stagingDir });
-    const prTitle = `${verb}: ${owned.title}`;
-    const prBody = [
-      `Contribution of caveat \`${owned.id}\` via \`caveat push\`.`,
-      "",
-      `- entry path: \`entries/${owned.relPath}\``,
-      `- action: ${verb}`,
-      "",
-      "Merged PRs will appear in subscribers' repos on their next `caveat pull`."
-    ].join("\n");
-    const pr = runCapture(
-      "gh",
-      [
-        "pr",
-        "create",
-        "--repo",
-        `${sharedOwner}/${sharedName}`,
-        "--base",
-        "main",
-        "--head",
-        `${ghUser}:${branch}`,
-        "--title",
-        prTitle,
-        "--body",
-        prBody
-      ],
-      { cwd: stagingDir }
-    );
-    if (pr.status !== 0) {
-      return {
-        status: "failed",
-        detail: (pr.stderr || "gh pr create failed").trim()
-      };
-    }
-    return { status: "ok", prUrl: pr.stdout.trim() };
-  } catch (err) {
-    return {
-      status: "failed",
-      detail: err instanceof Error ? err.message : String(err)
-    };
-  }
-}
-function shellQuote(s) {
-  if (!/[\s&|<>^()"`$!*?\[\]{}\\]/.test(s)) return s;
-  return `"${s.replace(/"/g, '""')}"`;
-}
-function runCapture(command, args, opts = {}) {
-  const line = [command, ...args].map(shellQuote).join(" ");
-  const r2 = spawnSync(line, {
-    encoding: "utf-8",
-    cwd: opts.cwd,
-    shell: true
-  });
-  return {
-    status: r2.status,
-    stdout: typeof r2.stdout === "string" ? r2.stdout : "",
-    stderr: typeof r2.stderr === "string" ? r2.stderr : ""
-  };
-}
-function runOrThrow(command, args, opts = {}) {
-  const r2 = runCapture(command, args, opts);
-  if (r2.status !== 0) {
-    throw new Error(
-      `${command} ${args.join(" ")} failed: ${(r2.stderr || r2.stdout || "unknown").trim()}`
-    );
-  }
-}
-function checkGhAvailable() {
-  return runCapture("gh", ["--version"]).status === 0;
-}
-function checkGhAuthed() {
-  return runCapture("gh", ["auth", "status"]).status === 0;
-}
-function resolveGhUser() {
-  const r2 = runCapture("gh", ["api", "user", "--jq", ".login"]);
-  if (r2.status !== 0) return void 0;
-  return r2.stdout.trim() || void 0;
-}
-function parseOwnerRepo(url) {
-  const m = /^https:\/\/github\.com\/([^/]+)\/([^/]+?)(\.git)?\/?$/.exec(url);
-  if (!m) return [void 0, void 0];
-  return [m[1], m[2]];
-}
-function findOwnedEntry(entriesDir, id) {
-  if (!existsSync7(entriesDir)) return void 0;
-  for (const categoryDirent of readdirSync4(entriesDir, { withFileTypes: true })) {
-    if (!categoryDirent.isDirectory()) continue;
-    const categoryDir = join7(entriesDir, categoryDirent.name);
-    for (const fileDirent of readdirSync4(categoryDir, { withFileTypes: true })) {
-      if (!fileDirent.isFile() || !fileDirent.name.endsWith(".md")) continue;
-      const absPath = join7(categoryDir, fileDirent.name);
-      const raw2 = readFileSync5(absPath, "utf-8");
-      try {
-        const parsed = parseMarkdown(raw2);
-        if (parsed.frontmatter.id === id) {
-          const relPath = relative2(entriesDir, absPath).replace(/\\/g, "/");
-          return { id, title: parsed.frontmatter.title, absPath, relPath };
-        }
-      } catch {
-      }
-    }
-  }
-  return void 0;
-}
-function forkStagingDir(caveatHome) {
-  return join7(caveatHome, "push-fork");
-}
-function ensureFork(owner, repo) {
-  runCapture("gh", ["repo", "fork", `${owner}/${repo}`, "--clone=false", "--remote=false"]);
-}
-function ensureStagingClone(stagingDir, ghUser, sharedName, upstreamOwner) {
-  if (!existsSync7(stagingDir)) {
-    mkdirSync3(dirname4(stagingDir), { recursive: true });
-    const forkUrl = `https://github.com/${ghUser}/${sharedName}.git`;
-    runOrThrow("git", ["clone", "--depth", "30", forkUrl, stagingDir]);
-    runOrThrow(
-      "git",
-      ["remote", "add", "upstream", `https://github.com/${upstreamOwner}/${sharedName}.git`],
-      { cwd: stagingDir }
-    );
-  } else {
-    runOrThrow("git", ["checkout", "main"], { cwd: stagingDir });
-    runOrThrow("git", ["fetch", "upstream", "main"], { cwd: stagingDir });
-    runOrThrow("git", ["reset", "--hard", "upstream/main"], { cwd: stagingDir });
-    runOrThrow("git", ["push", "origin", "main", "--force-with-lease"], { cwd: stagingDir });
-  }
-}
-function upstreamAlreadyHas(stagingDir, relFromRoot) {
-  return existsSync7(join7(stagingDir, relFromRoot));
-}
-
-// ../../packages/core/dist/pullShared.js
-import { existsSync as existsSync8, readdirSync as readdirSync5 } from "node:fs";
-import { join as join8 } from "node:path";
-async function pullShared(opts) {
-  const result = { pulled: [], indexed: [] };
-  if (!existsSync8(opts.communityDir)) {
-    return result;
-  }
-  const pulls = await communityPull({
-    communityDir: opts.communityDir,
-    logger: opts.logger
-  });
-  for (const p2 of pulls) {
-    result.pulled.push({
-      handle: p2.handle,
-      status: p2.status,
-      message: p2.message
-    });
-  }
-  rebuildAll(opts.db);
-  if (existsSync8(opts.entriesDir)) {
-    const own = scanSource({ db: opts.db, source: "own", entriesRoot: opts.entriesDir });
-    result.indexed.push({ source: "own", ...own });
-  }
-  for (const entry of readdirSync5(opts.communityDir, { withFileTypes: true })) {
-    if (!entry.isDirectory()) continue;
-    const source = `community/${entry.name}`;
-    const root = join8(opts.communityDir, entry.name, "entries");
-    if (!existsSync8(root)) continue;
-    const scan = scanSource({ db: opts.db, source, entriesRoot: root });
-    result.indexed.push({ source, ...scan });
-  }
-  return result;
-}
-
 // src/context.ts
 function buildContext(logger, overrides = {}) {
   const userHome = overrides.userHome ?? homedir();
   const caveatHome = overrides.caveatHome ?? findCaveatHome(userHome);
-  const userConfigPath = join9(userHome, ".caveatrc.json");
+  const userConfigPath = join7(userHome, ".caveatrc.json");
   const config3 = loadConfig(userConfigPath);
   const paths = resolvePaths(caveatHome, config3.knowledgeRepo, userHome);
   return { caveatHome, userHome, userConfigPath, config: config3, paths, logger };
 }
 
 // src/version.ts
-import { readFileSync as readFileSync6 } from "node:fs";
-import { dirname as dirname5, join as join10 } from "node:path";
+import { readFileSync as readFileSync5 } from "node:fs";
+import { dirname as dirname4, join as join8 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function resolveVersion() {
   try {
-    const here2 = dirname5(fileURLToPath3(import.meta.url));
-    const pkg = JSON.parse(readFileSync6(join10(here2, "..", "package.json"), "utf-8"));
+    const here2 = dirname4(fileURLToPath3(import.meta.url));
+    const pkg = JSON.parse(readFileSync5(join8(here2, "..", "package.json"), "utf-8"));
     return typeof pkg.version === "string" ? pkg.version : "0.0.0";
   } catch {
     return "0.0.0";
@@ -21468,13 +21271,13 @@ var stdoutLogger = {
 };
 
 // src/commands/init.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync5, readdirSync as readdirSync6, renameSync, rmdirSync, writeFileSync as writeFileSync5 } from "node:fs";
-import { join as join12 } from "node:path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync4, readdirSync as readdirSync4, renameSync, rmdirSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname6, join as join10 } from "node:path";
 
 // src/claudeInstall.ts
-import { spawnSync as spawnSync2 } from "node:child_process";
-import { copyFileSync as copyFileSync2, existsSync as existsSync9, mkdirSync as mkdirSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
-import { dirname as dirname6, join as join11 } from "node:path";
+import { spawnSync } from "node:child_process";
+import { copyFileSync, existsSync as existsSync7, mkdirSync as mkdirSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "node:fs";
+import { dirname as dirname5, join as join9 } from "node:path";
 var EVENT_USER_PROMPT_SUBMIT = "UserPromptSubmit";
 var EVENT_STOP = "Stop";
 function quote(p2) {
@@ -21508,27 +21311,27 @@ function removeHook(settings, event, command) {
   return true;
 }
 function readSettings(path) {
-  if (!existsSync9(path)) return {};
-  return JSON.parse(readFileSync7(path, "utf-8"));
+  if (!existsSync7(path)) return {};
+  return JSON.parse(readFileSync6(path, "utf-8"));
 }
 function writeSettings(path, settings) {
-  const dir = dirname6(path);
-  if (!existsSync9(dir)) mkdirSync4(dir, { recursive: true });
+  const dir = dirname5(path);
+  if (!existsSync7(dir)) mkdirSync3(dir, { recursive: true });
   let backupPath = "";
-  if (existsSync9(path)) {
+  if (existsSync7(path)) {
     backupPath = `${path}.caveat-backup-${Date.now()}`;
-    copyFileSync2(path, backupPath);
+    copyFileSync(path, backupPath);
   }
   writeFileSync4(path, JSON.stringify(settings, null, 2) + "\n", "utf-8");
   return backupPath;
 }
 var CLAUDE_BIN = "claude";
-function shellQuote2(s) {
+function shellQuote(s) {
   return /[\s&|<>^()]/.test(s) ? `"${s}"` : s;
 }
 function runClaude(args) {
-  const line = [CLAUDE_BIN, ...args].map(shellQuote2).join(" ");
-  return spawnSync2(line, { shell: true, encoding: "utf-8" });
+  const line = [CLAUDE_BIN, ...args].map(shellQuote).join(" ");
+  return spawnSync(line, { shell: true, encoding: "utf-8" });
 }
 function registerMcp(nodePath, cliScriptPath, dryRun, logger) {
   const args = mcpArgs(cliScriptPath);
@@ -21578,7 +21381,7 @@ function unregisterMcp(dryRun, logger) {
   return { action: "skipped", detail: "not registered or removal failed" };
 }
 function installClaudeIntegration(opts) {
-  const settingsPath = join11(opts.claudeDir, "settings.json");
+  const settingsPath = join9(opts.claudeDir, "settings.json");
   const settings = readSettings(settingsPath);
   const usCmd = hookCommand(opts.nodePath, opts.cliScriptPath, "user-prompt-submit");
   const stopCmd = hookCommand(opts.nodePath, opts.cliScriptPath, "stop");
@@ -21597,7 +21400,7 @@ function installClaudeIntegration(opts) {
   return { mcp, hooks: { userPromptSubmit, stop }, backupPath };
 }
 function uninstallClaudeIntegration(opts) {
-  const settingsPath = join11(opts.claudeDir, "settings.json");
+  const settingsPath = join9(opts.claudeDir, "settings.json");
   const settings = readSettings(settingsPath);
   const usCmd = hookCommand(opts.nodePath, opts.cliScriptPath, "user-prompt-submit");
   const stopCmd = hookCommand(opts.nodePath, opts.cliScriptPath, "stop");
@@ -21629,35 +21432,34 @@ var KNOWLEDGE_GITIGNORE = [
   ".obsidian/",
   ""
 ].join("\n");
-async function runInit(ctx, opts = { skipClaude: false, skipShared: false, dryRun: false }) {
+async function runInit(ctx, opts = { skipClaude: false, dryRun: false }) {
   ensureUserConfig(ctx.userConfigPath);
   ctx.logger.info(`user config: ${ctx.userConfigPath}`);
-  if (!existsSync10(ctx.paths.knowledgeRepo)) {
-    mkdirSync5(ctx.paths.knowledgeRepo, { recursive: true });
-    mkdirSync5(ctx.paths.entriesDir, { recursive: true });
+  if (!existsSync8(ctx.paths.knowledgeRepo)) {
+    mkdirSync4(ctx.paths.knowledgeRepo, { recursive: true });
+    mkdirSync4(ctx.paths.entriesDir, { recursive: true });
     ctx.logger.info(`knowledge repo scaffolded: ${ctx.paths.knowledgeRepo}`);
   } else {
     ctx.logger.info(`knowledge repo: ${ctx.paths.knowledgeRepo}`);
   }
   migrateLegacyCommunityDir(ctx);
-  const gitignorePath = join12(ctx.paths.knowledgeRepo, ".gitignore");
-  if (!existsSync10(gitignorePath)) {
+  const gitignorePath = join10(ctx.paths.knowledgeRepo, ".gitignore");
+  if (!existsSync8(gitignorePath)) {
     writeFileSync5(gitignorePath, KNOWLEDGE_GITIGNORE, "utf-8");
     ctx.logger.info(`.gitignore created: ${gitignorePath}`);
   }
-  const db = openDb({ path: ctx.paths.dbPath, logger: ctx.logger });
-  try {
-    if (!opts.skipShared && !opts.dryRun) {
-      await subscribeSharedRepo(ctx, db);
-    } else if (opts.skipShared) {
-      ctx.logger.info("shared community DB subscription skipped (--skip-shared)");
-    } else if (opts.dryRun) {
-      ctx.logger.info(`[dry-run] would subscribe to shared community DB: ${ctx.config.sharedRepo}`);
-    }
-  } finally {
+  if (!opts.dryRun) {
+    const dbDir = dirname6(ctx.paths.dbPath);
+    if (!existsSync8(dbDir)) mkdirSync4(dbDir, { recursive: true });
+    const db = openDb({ path: ctx.paths.dbPath, logger: ctx.logger });
     db.close();
+    ctx.logger.info(`db initialized: ${ctx.paths.dbPath}`);
+  } else {
+    ctx.logger.info(`[dry-run] db path: ${ctx.paths.dbPath}`);
   }
-  ctx.logger.info(`db initialized: ${ctx.paths.dbPath}`);
+  ctx.logger.info(
+    "tip: subscribe to a group repo with `caveat community add <github-url>`, then `caveat pull`."
+  );
   if (opts.skipClaude) {
     ctx.logger.info("Claude Code integration skipped (--skip-claude)");
     return;
@@ -21668,7 +21470,7 @@ async function runInit(ctx, opts = { skipClaude: false, skipShared: false, dryRu
     return;
   }
   const result = installClaudeIntegration({
-    claudeDir: join12(ctx.userHome, ".claude"),
+    claudeDir: join10(ctx.userHome, ".claude"),
     cliScriptPath,
     nodePath: process.execPath,
     dryRun: opts.dryRun,
@@ -21677,20 +21479,20 @@ async function runInit(ctx, opts = { skipClaude: false, skipShared: false, dryRu
   reportInstallResult(ctx, result, opts.dryRun);
 }
 function migrateLegacyCommunityDir(ctx) {
-  const legacy = join12(ctx.paths.knowledgeRepo, "community");
+  const legacy = join10(ctx.paths.knowledgeRepo, "community");
   const current = ctx.paths.communityDir;
   if (legacy === current) return;
-  if (!existsSync10(legacy)) return;
-  if (existsSync10(current)) {
+  if (!existsSync8(legacy)) return;
+  if (existsSync8(current)) {
     ctx.logger.warn(
       `legacy community dir still exists at ${legacy} \u2014 remove manually (new location in use)`
     );
     return;
   }
-  mkdirSync5(current, { recursive: true });
-  for (const entry of readdirSync6(legacy, { withFileTypes: true })) {
+  mkdirSync4(current, { recursive: true });
+  for (const entry of readdirSync4(legacy, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
-    renameSync(join12(legacy, entry.name), join12(current, entry.name));
+    renameSync(join10(legacy, entry.name), join10(current, entry.name));
   }
   try {
     rmdirSync(legacy);
@@ -21698,52 +21500,6 @@ function migrateLegacyCommunityDir(ctx) {
   }
   ctx.logger.info(`migrated legacy community/ \u2192 ${current}`);
 }
-async function subscribeSharedRepo(ctx, db) {
-  const url = ctx.config.sharedRepo;
-  const validation = validateCommunityUrl(url);
-  if (!validation.valid) {
-    ctx.logger.warn(
-      `sharedRepo is not a valid GitHub URL \u2014 skipping: ${validation.reason}`
-    );
-    return;
-  }
-  const handle = validation.handle;
-  const target = join12(ctx.paths.communityDir, handle);
-  if (!existsSync10(target)) {
-    if (!existsSync10(ctx.paths.communityDir)) {
-      mkdirSync5(ctx.paths.communityDir, { recursive: true });
-    }
-    try {
-      await communityAdd({
-        url,
-        communityDir: ctx.paths.communityDir,
-        logger: ctx.logger
-      });
-      ctx.logger.info(`shared community DB subscribed: ${url} \u2192 community/${handle}/`);
-    } catch (err) {
-      ctx.logger.warn(
-        `shared community DB subscription failed: ${err instanceof Error ? err.message : String(err)}`
-      );
-      return;
-    }
-  } else {
-    ctx.logger.info(`shared community DB already subscribed: community/${handle}/`);
-  }
-  if (existsSync10(ctx.paths.communityDir)) {
-    rebuildAll(db);
-    if (existsSync10(ctx.paths.entriesDir)) {
-      scanSource({ db, source: "own", entriesRoot: ctx.paths.entriesDir });
-    }
-    for (const entry of readdirSync6(ctx.paths.communityDir, { withFileTypes: true })) {
-      if (!entry.isDirectory()) continue;
-      const source = `community/${entry.name}`;
-      const root = join12(ctx.paths.communityDir, entry.name, "entries");
-      if (!existsSync10(root)) continue;
-      const result = scanSource({ db, source, entriesRoot: root });
-      ctx.logger.info(`indexed ${source}: +${result.added}`);
-    }
-  }
-}
 function runUninstall(ctx, opts) {
   const cliScriptPath = process.argv[1];
   if (!cliScriptPath) {
@@ -21751,7 +21507,7 @@ function runUninstall(ctx, opts) {
     process.exit(1);
   }
   const result = uninstallClaudeIntegration({
-    claudeDir: join12(ctx.userHome, ".claude"),
+    claudeDir: join10(ctx.userHome, ".claude"),
     cliScriptPath,
     nodePath: process.execPath,
     dryRun: opts.dryRun,
@@ -21788,29 +21544,29 @@ function reportInstallResult(ctx, result, dryRun) {
 }
 
 // src/commands/indexCmd.ts
-import { existsSync as existsSync11, readdirSync as readdirSync7, mkdirSync as mkdirSync6 } from "node:fs";
-import { dirname as dirname7, join as join13 } from "node:path";
+import { existsSync as existsSync9, readdirSync as readdirSync5, mkdirSync as mkdirSync5 } from "node:fs";
+import { dirname as dirname7, join as join11 } from "node:path";
 function runIndex(ctx, opts) {
   const dbDir = dirname7(ctx.paths.dbPath);
-  if (!existsSync11(dbDir)) mkdirSync6(dbDir, { recursive: true });
+  if (!existsSync9(dbDir)) mkdirSync5(dbDir, { recursive: true });
   const db = openDb({ path: ctx.paths.dbPath, logger: ctx.logger });
   try {
     if (opts.full) {
       ctx.logger.info("full rebuild: DELETE FROM entries");
       rebuildAll(db);
     }
-    if (existsSync11(ctx.paths.entriesDir)) {
+    if (existsSync9(ctx.paths.entriesDir)) {
       const result = scanSource({ db, source: "own", entriesRoot: ctx.paths.entriesDir });
       ctx.logger.info(`own: +${result.added} ~${result.updated} -${result.deleted}`);
     } else {
       ctx.logger.warn(`entries dir not found: ${ctx.paths.entriesDir}`);
     }
-    if (existsSync11(ctx.paths.communityDir)) {
-      for (const entry of readdirSync7(ctx.paths.communityDir, { withFileTypes: true })) {
+    if (existsSync9(ctx.paths.communityDir)) {
+      for (const entry of readdirSync5(ctx.paths.communityDir, { withFileTypes: true })) {
         if (!entry.isDirectory()) continue;
         const source = `community/${entry.name}`;
-        const root = join13(ctx.paths.communityDir, entry.name, "entries");
-        if (!existsSync11(root)) continue;
+        const root = join11(ctx.paths.communityDir, entry.name, "entries");
+        if (!existsSync9(root)) continue;
         const result = scanSource({ db, source, entriesRoot: root });
         ctx.logger.info(`${source}: +${result.added} ~${result.updated} -${result.deleted}`);
       }
@@ -22584,11 +22340,11 @@ var serve = (options2, listeningListener) => {
 
 // ../web/dist/context.js
 import { homedir as homedir2 } from "node:os";
-import { join as join14 } from "node:path";
+import { join as join12 } from "node:path";
 function buildWebContext(overrides = {}) {
   const userHome = overrides.userHome ?? homedir2();
   const caveatHome = overrides.caveatHome ?? findCaveatHome(userHome);
-  const userConfigPath = join14(userHome, ".caveatrc.json");
+  const userConfigPath = join12(userHome, ".caveatrc.json");
   const logger = overrides.logger ?? stderrLogger;
   const config3 = loadConfig(userConfigPath);
   const paths = resolvePaths(caveatHome, config3.knowledgeRepo, userHome);
@@ -24693,7 +24449,7 @@ ul.entries li { padding: 0.5rem 0; border-bottom: 1px solid #eee; }
 ul.entries a.title { font-weight: 600; color: #0a5fff; text-decoration: none; }
 ul.entries a.title:hover { text-decoration: underline; }
 ul.entries .meta { font-size: 0.85rem; color: #666; margin-top: 0.2rem; }
-ul.entries .meta .badge {
+.badge {
   display: inline-block;
   padding: 0 0.4rem;
   margin-right: 0.3rem;
@@ -24701,10 +24457,12 @@ ul.entries .meta .badge {
   background: #f0f0f0;
   font-size: 0.8rem;
 }
-ul.entries .meta .badge.confirmed { background: #d7f4dc; color: #16703a; }
-ul.entries .meta .badge.reproduced { background: #e6eeff; color: #234ea3; }
-ul.entries .meta .badge.tentative { background: #fff4d1; color: #8a5a00; }
-ul.entries .meta .badge.impossible { background: #ffd9d9; color: #8a1a1a; }
+.badge.confirmed { background: #d7f4dc; color: #16703a; }
+.badge.reproduced { background: #e6eeff; color: #234ea3; }
+.badge.tentative { background: #fff4d1; color: #8a5a00; }
+.badge.impossible { background: #ffd9d9; color: #8a1a1a; }
+.badge.public { background: #eef2f5; color: #5a6470; }
+.badge.private { background: #fde7e7; color: #a02525; font-weight: 600; }
 ul.entries .excerpt { margin-top: 0.3rem; color: #444; font-size: 0.92rem; }
 article h2 { border-bottom: 1px solid #eee; padding-bottom: 0.2rem; margin-top: 1.6rem; }
 article pre {
@@ -24779,6 +24537,7 @@ function createIndexRoute(ctx) {
     const q2 = c3.req.query("q")?.trim() ?? "";
     const sourceParam = c3.req.query("source");
     const tagParam = c3.req.query("tag");
+    const visibilityParam = c3.req.query("visibility");
     const filters = {};
     if (sourceParam === "own" || sourceParam === "community" || sourceParam === "all") {
       filters.source = sourceParam;
@@ -24786,17 +24545,22 @@ function createIndexRoute(ctx) {
     if (tagParam) {
       filters.tags = [tagParam];
     }
-    const results = q2 ? search(ctx.db, { query: q2, filters, limit: 50 }) : listRecent(ctx.db, 50);
+    if (visibilityParam === "public" || visibilityParam === "private") {
+      filters.visibility = visibilityParam;
+    }
+    const results = search(ctx.db, { query: q2, filters, limit: 50 });
     const rows = results.map((r2) => {
       const envEntries = Object.entries(r2.environment ?? {});
       const envSummary = envEntries.slice(0, 3).map(([k2, v]) => `${escapeHtml(k2)}:${escapeHtml(String(v))}`).join(" ");
       const hrefSource = r2.source === "own" ? "" : `?source=${encodeURIComponent(r2.source)}`;
+      const visibilityBadge = r2.visibility === "private" ? `<span class="badge private" title="local-only \u2014 never pushed to community DB">\u{1F512} private</span>` : `<span class="badge public">public</span>`;
       return `
       <li>
         <a class="title" href="/g/${encodeURIComponent(r2.id)}${hrefSource}">${escapeHtml(r2.title)}</a>
         <div class="meta">
           <span class="badge ${escapeHtml(r2.confidence ?? "")}">${escapeHtml(r2.confidence ?? "")}</span>
           <span class="badge">${escapeHtml(r2.source)}</span>
+          ${visibilityBadge}
           ${envSummary ? `<span>${envSummary}</span>` : ""}
         </div>
         ${r2.symptomExcerpt ? `<div class="excerpt">${escapeHtml(r2.symptomExcerpt)}</div>` : ""}
@@ -24810,9 +24574,18 @@ function createIndexRoute(ctx) {
     <option value="own" ${sourceParam === "own" ? "selected" : ""}>own</option>
     <option value="community" ${sourceParam === "community" ? "selected" : ""}>community</option>
   </select>
+  <select name="visibility" title="visibility filter \u2014 useful when sharing screen">
+    <option value="" ${!visibilityParam ? "selected" : ""}>any visibility</option>
+    <option value="public" ${visibilityParam === "public" ? "selected" : ""}>public only</option>
+    <option value="private" ${visibilityParam === "private" ? "selected" : ""}>private only</option>
+  </select>
   <button type="submit">search</button>
 </form>
-${results.length > 0 ? `<ul class="entries">${rows}</ul>` : `<div class="empty">${q2 ? `no results for "${escapeHtml(q2)}"` : "no entries yet \u2014 run <code>caveat index</code> after adding md files"}</div>`}`;
+${results.length > 0 ? `<ul class="entries">${rows}</ul>` : (() => {
+      if (q2) return `<div class="empty">no results for "${escapeHtml(q2)}"</div>`;
+      const hasFilter = !!(sourceParam || tagParam || visibilityParam);
+      return hasFilter ? `<div class="empty">no entries match the active filters</div>` : `<div class="empty">no entries yet \u2014 run <code>caveat index</code> after adding md files</div>`;
+    })()}`;
     const title = q2 ? `search: ${q2} \xB7 Caveat` : "Caveat";
     return c3.html(layout(title, body));
   });
@@ -30278,10 +30051,11 @@ function createDetailRoute(ctx) {
     }
     const fm = entry.frontmatter;
     const envRows = Object.entries(fm.environment ?? {}).map(([k2, v]) => `<dt>${escapeHtml(k2)}</dt><dd>${escapeHtml(String(v))}</dd>`).join("");
+    const visibilityBadge = fm.visibility === "private" ? `<span class="badge private" title="local-only \u2014 never pushed to community DB">\u{1F512} private</span>` : `<span class="badge public">public</span>`;
     const metaRows = [
       `<dt>id</dt><dd><code>${escapeHtml(fm.id)}</code></dd>`,
       `<dt>source</dt><dd>${escapeHtml(entry.source)}</dd>`,
-      `<dt>visibility</dt><dd>${escapeHtml(fm.visibility)}</dd>`,
+      `<dt>visibility</dt><dd>${visibilityBadge}</dd>`,
       `<dt>confidence</dt><dd><span class="badge ${escapeHtml(fm.confidence)}">${escapeHtml(fm.confidence)}</span></dd>`
     ];
     if (fm.outcome) {
@@ -30315,14 +30089,14 @@ function createDetailRoute(ctx) {
 }
 
 // ../web/dist/routes/community.js
-import { existsSync as existsSync12, readdirSync as readdirSync8, statSync as statSync4 } from "node:fs";
-import { join as join15 } from "node:path";
+import { existsSync as existsSync10, readdirSync as readdirSync6, statSync as statSync5 } from "node:fs";
+import { join as join13 } from "node:path";
 function listCommunity(communityDir, db) {
-  if (!existsSync12(communityDir)) return [];
+  if (!existsSync10(communityDir)) return [];
   const handles = [];
-  for (const entry of readdirSync8(communityDir, { withFileTypes: true })) {
+  for (const entry of readdirSync6(communityDir, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
-    const handlePath = join15(communityDir, entry.name);
+    const handlePath = join13(communityDir, entry.name);
     const countRow = db.prepare("SELECT COUNT(*) AS n FROM entries WHERE source = ?").get(`community/${entry.name}`);
     handles.push({
       handle: entry.name,
@@ -30339,7 +30113,7 @@ function createCommunityRoute(ctx) {
     const list2 = handles.map((h2) => {
       let mtime = "";
       try {
-        mtime = statSync4(h2.path).mtime.toISOString().slice(0, 10);
+        mtime = statSync5(h2.path).mtime.toISOString().slice(0, 10);
       } catch {
         mtime = "";
       }
@@ -44620,11 +44394,11 @@ var StdioServerTransport = class {
 
 // ../mcp/dist/context.js
 import { homedir as homedir3 } from "node:os";
-import { join as join16 } from "node:path";
+import { join as join14 } from "node:path";
 function buildMcpContext(overrides = {}) {
   const userHome = overrides.userHome ?? homedir3();
   const caveatHome = overrides.caveatHome ?? findCaveatHome(userHome);
-  const userConfigPath = join16(userHome, ".caveatrc.json");
+  const userConfigPath = join14(userHome, ".caveatrc.json");
   const logger = overrides.logger ?? stderrLogger;
   const config3 = loadConfig(userConfigPath);
   const paths = resolvePaths(caveatHome, config3.knowledgeRepo, userHome);
@@ -44680,7 +44454,9 @@ var recordInputShape = {
   context: external_exports.string().optional(),
   confidence: confidenceSchema2.optional(),
   outcome: outcomeSchema.optional(),
-  visibility: visibilitySchema.optional(),
+  visibility: visibilitySchema.describe(
+    'REQUIRED. Ask the user "public (share to community) or private (keep local only)?" before calling \u2014 never auto-classify. The user owns the knowledge; they decide its reach.'
+  ),
   tags: external_exports.array(external_exports.string()).optional(),
   environment: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   category: external_exports.string().optional().describe("Directory under entries/ (e.g., gpu, claude-code). Default: misc")
@@ -44731,45 +44507,37 @@ function handleListRecent(ctx, args) {
 }
 
 // ../mcp/dist/tools/pull.js
+import { existsSync as existsSync11, readdirSync as readdirSync7 } from "node:fs";
+import { join as join15 } from "node:path";
 var pullInputShape = {};
 async function handlePull(ctx, _args = {}) {
-  const result = await pullShared({
-    communityDir: ctx.paths.communityDir,
-    entriesDir: ctx.paths.entriesDir,
-    db: ctx.db,
-    logger: ctx.logger
-  });
-  return {
-    pulled: result.pulled,
-    indexed: result.indexed.map((i2) => ({
-      source: i2.source,
-      added: i2.added,
-      updated: i2.updated,
-      deleted: i2.deleted
-    }))
-  };
-}
-
-// ../mcp/dist/tools/push.js
-var pushInputShape = {
-  id: external_exports.string().min(1).describe("Entry id (frontmatter.id) to push to the shared community DB"),
-  dry_run: external_exports.boolean().optional().describe("If true, compute the plan but do not modify GitHub or local git state")
-};
-async function handlePush(ctx, args) {
-  const result = await pushEntry({
-    entriesDir: ctx.paths.entriesDir,
-    caveatHome: ctx.caveatHome,
-    sharedRepoUrl: ctx.config.sharedRepo,
-    id: args.id,
-    dryRun: args.dry_run ?? false,
-    logger: ctx.logger
-  });
-  return {
-    status: result.status,
-    detail: result.detail,
-    pr_url: result.prUrl,
-    planned_steps: result.plannedSteps
-  };
+  const pulled = [];
+  const indexed = [];
+  if (existsSync11(ctx.paths.communityDir)) {
+    const results = await communityPull({
+      communityDir: ctx.paths.communityDir,
+      logger: ctx.logger
+    });
+    for (const r2 of results) {
+      pulled.push({ handle: r2.handle, status: r2.status, message: r2.message });
+    }
+  }
+  rebuildAll(ctx.db);
+  if (existsSync11(ctx.paths.entriesDir)) {
+    const own = scanSource({ db: ctx.db, source: "own", entriesRoot: ctx.paths.entriesDir });
+    indexed.push({ source: "own", ...own });
+  }
+  if (existsSync11(ctx.paths.communityDir)) {
+    for (const entry of readdirSync7(ctx.paths.communityDir, { withFileTypes: true })) {
+      if (!entry.isDirectory()) continue;
+      const source = `community/${entry.name}`;
+      const root = join15(ctx.paths.communityDir, entry.name, "entries");
+      if (!existsSync11(root)) continue;
+      const scan = scanSource({ db: ctx.db, source, entriesRoot: root });
+      indexed.push({ source, ...scan });
+    }
+  }
+  return { pulled, indexed };
 }
 
 // ../mcp/dist/registerTools.js
@@ -44788,7 +44556,7 @@ function registerAllTools(server, ctx) {
     "caveat_search",
     {
       title: "caveat_search",
-      description: "Full-text search across caveats (external spec gotchas). Returns summary; use caveat_get for body.",
+      description: 'Search the "caveats" knowledge base \u2014 records of time-wasting traps in EXTERNAL specs (GPU/driver/CUDA versions, native-module builds, IDE/shell quirks, platform-specific behavior, library version incompatibilities) that someone already diagnosed. Call this FIRST when a problem smells environmental rather than a logic bug \u2014 before reading stack traces top-to-bottom or trying fixes. Query: 3+ chars, plain tokens only (no OR/NEAR/other FTS5 operators). Returns summary rows including `{id, source}` \u2014 pass BOTH to caveat_get for the full body.',
       inputSchema: searchInputShape
     },
     async (args) => jsonResult(handleSearch(ctx, args))
@@ -44797,7 +44565,7 @@ function registerAllTools(server, ctx) {
     "caveat_get",
     {
       title: "caveat_get",
-      description: "Fetch full caveat by id (frontmatter + sections + body).",
+      description: 'Fetch the full body (frontmatter + H2 sections + text) of a caveat by id. IMPORTANT: when the id came from caveat_search, you MUST pass the `source` field from that same result (e.g., "community/Caveat"). The default source is "own" only; omitting source for a community entry returns not-found.',
       inputSchema: getInputShape
     },
     async (args) => jsonResult(handleGet(ctx, args))
@@ -44806,7 +44574,7 @@ function registerAllTools(server, ctx) {
     "caveat_record",
     {
       title: "caveat_record",
-      description: "Create a new caveat markdown file. Auto-fills source_session and environment fingerprint for unspecified keys. source_project is left null by design (publicly-shared knowledge should not leak per-user project names).",
+      description: "Create a new caveat: a record of an external-spec trap that wasted real time (wrong driver, version mismatch, platform bug, IDE quirk, native-module issue, etc.) so future sessions can find it via caveat_search. REQUIRED BEFORE CALLING: (1) run caveat_search first to avoid duplicates, (2) ASK THE USER whether this should be `public` (shareable to the community DB) or `private` (kept local only) \u2014 never auto-classify visibility; the user owns the knowledge and decides its reach. Qualifies: specific symptom + diagnosed cause (or `outcome: impossible` verdict) + environment fingerprint. Does NOT qualify: project-internal bugs, user preferences, session summaries, ephemeral task notes. Auto-fills source_session and environment defaults; source_project is left null by design (shared knowledge must not leak per-user project names).",
       inputSchema: recordInputShape
     },
     async (args) => jsonResult(handleRecord(ctx, args))
@@ -44815,7 +44583,7 @@ function registerAllTools(server, ctx) {
     "caveat_update",
     {
       title: "caveat_update",
-      description: "Patch an existing caveat. Frontmatter shallow-merges (arrays replace). Sections matched by case-insensitive H2 heading. Immutable keys: id, created_at, source_session, source_project.",
+      description: "Patch an existing caveat \u2014 use when newer evidence extends or corrects one that already exists. Frontmatter shallow-merges, but array fields (tags etc.) REPLACE rather than append \u2014 to add one tag, read the current list first, then patch with the full new array. Sections match by case-insensitive H2 heading. Immutable keys: id, created_at, source_session, source_project. Common uses: bump `last_verified` after re-confirming, add a resolution when it was `tentative`, flip `outcome` to `impossible`.",
       inputSchema: updateInputShape
     },
     async (args) => jsonResult(handleUpdate(ctx, args))
@@ -44824,7 +44592,7 @@ function registerAllTools(server, ctx) {
     "caveat_list_recent",
     {
       title: "caveat_list_recent",
-      description: "List caveats by updated_at DESC.",
+      description: "List caveats ordered by updated_at DESC. Use for browsing recent additions \u2014 e.g., showing the user what is new after caveat_pull. Not for search; use caveat_search when you have a query.",
       inputSchema: listRecentInputShape
     },
     async (args) => jsonResult(handleListRecent(ctx, args))
@@ -44833,20 +44601,11 @@ function registerAllTools(server, ctx) {
     "caveat_pull",
     {
       title: "caveat_pull",
-      description: "git-pull all subscribed community caveat repos (incl. the shared DB) and re-index. Call this when the user asks if others have documented a similar trap, or at the start of a session that might benefit from fresh external knowledge. Safe and idempotent \u2014 re-running is cheap.",
+      description: "git-pull every subscribed community caveat repo (added via `caveat community add`) and re-index. Call when: (a) the user explicitly asks about others' knowledge on a topic, or (b) caveat_search returned empty for a query that feels like it should have hits and a subscribed repo might be stale. Do NOT call reflexively at session start \u2014 it is cheap but not free, and stale-by-minutes is acceptable. Safe and idempotent.",
       inputSchema: pullInputShape
     },
     async (args) => jsonResult(await handlePull(ctx, args))
   );
-  server.registerTool(
-    "caveat_push",
-    {
-      title: "caveat_push",
-      description: "Contribute a user-owned caveat to the shared community DB via fork + PR. Call this after caveat_record when the entry looks genuinely reusable by others (not a one-off project tie-in, not duplicated by existing community entries). Requires the `gh` CLI on the user's machine; returns status=gh-missing or gh-unauthed when unavailable. Use dry_run=true to preview without touching GitHub.",
-      inputSchema: pushInputShape
-    },
-    async (args) => jsonResult(await handlePush(ctx, args))
-  );
 }
 
 // ../mcp/dist/server.js
@@ -44939,77 +44698,46 @@ async function runHook(name) {
 }
 
 // src/commands/pull.ts
-import { existsSync as existsSync13 } from "node:fs";
+import { existsSync as existsSync12, readdirSync as readdirSync8 } from "node:fs";
+import { join as join16 } from "node:path";
 async function runPull(ctx) {
-  if (!existsSync13(ctx.paths.communityDir)) {
+  if (!existsSync12(ctx.paths.communityDir)) {
     ctx.logger.info(
-      "no community repos yet \u2014 did you run `caveat init`? You can also `caveat community add <url>` manually."
+      "no community repos yet \u2014 add one with `caveat community add <github-url>`."
     );
     return;
   }
+  const pulls = await communityPull({
+    communityDir: ctx.paths.communityDir,
+    logger: ctx.logger
+  });
+  for (const p2 of pulls) {
+    if (p2.status === "ok") {
+      ctx.logger.info(`${p2.handle}: pulled`);
+    } else {
+      ctx.logger.warn(`${p2.handle}: FAILED \u2014 ${p2.message ?? "unknown"}`);
+    }
+  }
   const db = openDb({ path: ctx.paths.dbPath, logger: ctx.logger });
   try {
-    const result = await pullShared({
-      communityDir: ctx.paths.communityDir,
-      entriesDir: ctx.paths.entriesDir,
-      db,
-      logger: ctx.logger
-    });
-    for (const p2 of result.pulled) {
-      if (p2.status === "ok") {
-        ctx.logger.info(`${p2.handle}: pulled`);
-      } else {
-        ctx.logger.warn(`${p2.handle}: FAILED \u2014 ${p2.message ?? "unknown"}`);
-      }
+    rebuildAll(db);
+    if (existsSync12(ctx.paths.entriesDir)) {
+      const own = scanSource({ db, source: "own", entriesRoot: ctx.paths.entriesDir });
+      ctx.logger.info(`own: +${own.added}`);
     }
-    for (const i2 of result.indexed) {
-      ctx.logger.info(`${i2.source}: +${i2.added}`);
+    for (const entry of readdirSync8(ctx.paths.communityDir, { withFileTypes: true })) {
+      if (!entry.isDirectory()) continue;
+      const source = `community/${entry.name}`;
+      const root = join16(ctx.paths.communityDir, entry.name, "entries");
+      if (!existsSync12(root)) continue;
+      const scan = scanSource({ db, source, entriesRoot: root });
+      ctx.logger.info(`${source}: +${scan.added}`);
     }
   } finally {
     db.close();
   }
 }
 
-// src/commands/push.ts
-async function runPush(ctx, opts) {
-  const result = await pushEntry({
-    entriesDir: ctx.paths.entriesDir,
-    caveatHome: ctx.caveatHome,
-    sharedRepoUrl: ctx.config.sharedRepo,
-    id: opts.id,
-    dryRun: opts.dryRun,
-    logger: ctx.logger
-  });
-  switch (result.status) {
-    case "ok":
-      ctx.logger.info(`PR opened: ${result.prUrl ?? ""}`);
-      ctx.logger.info(
-        "Once merged, other subscribers will see your entry after their next `caveat pull`."
-      );
-      break;
-    case "dry-run":
-      for (const [i2, step] of (result.plannedSteps ?? []).entries()) {
-        ctx.logger.info(`[dry-run] ${i2 + 1}. ${step}`);
-      }
-      break;
-    case "not-found":
-      ctx.logger.error(
-        `${result.detail}. List entries with \`caveat list\` or write + index first.`
-      );
-      process.exitCode = 1;
-      break;
-    case "gh-missing":
-    case "gh-unauthed":
-      ctx.logger.error(result.detail ?? "gh CLI issue");
-      process.exitCode = 1;
-      break;
-    case "failed":
-      ctx.logger.error(result.detail ?? "unknown failure");
-      process.exitCode = 1;
-      break;
-  }
-}
-
 // src/commands/community.ts
 async function runCommunityAdd(ctx, url) {
   try {
@@ -45059,17 +44787,46 @@ function runCommunityList(ctx) {
     db.close();
   }
 }
+function runCommunityRemove(ctx, handle, opts) {
+  const db = openDb({ path: ctx.paths.dbPath, logger: ctx.logger });
+  try {
+    const result = communityRemove({
+      communityDir: ctx.paths.communityDir,
+      handle,
+      db,
+      dryRun: opts.dryRun,
+      logger: ctx.logger
+    });
+    if (!result.dirExisted && result.rowCount === 0) {
+      ctx.logger.warn(`no community subscription named "${handle}" \u2014 nothing to remove`);
+      return;
+    }
+    const prefix = result.dryRun ? "[dry-run] would " : "";
+    if (result.dirExisted) {
+      ctx.logger.info(`${prefix}remove dir: ${result.path}`);
+    }
+    if (result.rowCount > 0) {
+      ctx.logger.info(
+        `${prefix}delete ${result.rowCount} db row(s) for source=community/${handle}`
+      );
+    }
+  } catch (err) {
+    ctx.logger.error(err instanceof Error ? err.message : String(err));
+    process.exitCode = 1;
+  } finally {
+    db.close();
+  }
+}
 
 // src/index.ts
 var program = new Command();
 program.name("caveat").description("External spec gotcha knowledge base CLI").version(CAVEAT_VERSION);
 program.command("init").description(
-  "Initialize ~/.caveatrc.json, ~/.caveat/, subscribe to the shared community DB, and register Claude Code integration"
-).option("--skip-claude", "skip Claude Code MCP + hook registration", false).option("--skip-shared", "skip subscribing to the shared community DB", false).option("--dry-run", "show planned changes without writing", false).action(async (opts) => {
+  "Initialize ~/.caveatrc.json, ~/.caveat/, and register Claude Code integration. Add knowledge sources later with `caveat community add <github-url>`."
+).option("--skip-claude", "skip Claude Code MCP + hook registration", false).option("--dry-run", "show planned changes without writing", false).action(async (opts) => {
   const ctx = buildContext(stdoutLogger);
   await runInit(ctx, {
     skipClaude: opts.skipClaude,
-    skipShared: opts.skipShared,
     dryRun: opts.dryRun
   });
 });
@@ -45105,15 +44862,11 @@ program.command("stats").description("Show aggregate stats").action(() => {
   runStats(ctx);
 });
 program.command("pull").description(
-  "Refresh all subscribed community repos (incl. shared DB) and re-index. Use this to receive contributions others have merged."
+  "git-pull every subscribed community repo and re-index. Use this to receive updates from group/teammate repos."
 ).action(async () => {
   const ctx = buildContext(stdoutLogger);
   await runPull(ctx);
 });
-program.command("push").description("Contribute a caveat to the shared community DB via fork + PR (requires gh CLI).").argument("<id>", "entry id (from `caveat list`)").option("--dry-run", "show planned steps without making GitHub changes", false).action(async (id, opts) => {
-  const ctx = buildContext(stdoutLogger);
-  await runPush(ctx, { id, dryRun: opts.dryRun });
-});
 program.command("serve").description("Start the read-only web share portal").option("--port <n>", "port number", (v) => Number(v), 4242).action((opts) => {
   runServe({ port: opts.port });
 });
@@ -45136,6 +44889,10 @@ community.command("list").description("List imported community repos with entry
   const ctx = buildContext(stdoutLogger);
   runCommunityList(ctx);
 });
+community.command("remove <handle>").description("Unsubscribe from a community repo: delete community/<handle>/ and purge its DB rows").option("--dry-run", "show what would be removed without touching disk or db", false).action((handle, opts) => {
+  const ctx = buildContext(stdoutLogger);
+  runCommunityRemove(ctx, handle, { dryRun: opts.dryRun });
+});
 program.parseAsync(process.argv).catch((err) => {
   const msg = err instanceof Error ? err.message : String(err);
   process.stderr.write(`[caveat:error] ${msg}