gnosys 5.9.5 → 5.11.0

package/dist/lib/setup/ui/table.d.ts

@@ -34,4 +34,3 @@ export interface TableOptions<T> {
 export declare function renderTable<T>(rows: T[], columns: TableColumn<T>[], opts?: TableOptions<T>): string[];
 /** Convenience: render + print + trailing newline. */
 export declare function printTable<T>(rows: T[], columns: TableColumn<T>[], opts?: TableOptions<T>): void;
-//# sourceMappingURL=table.d.ts.map

package/dist/lib/setup/ui/table.js

@@ -79,4 +79,3 @@ function padCell(value, width, align) {
     const pad = " ".repeat(padLen);
     return align === "right" ? `${pad}${value}` : `${value}${pad}`;
 }
-//# sourceMappingURL=table.js.map

package/dist/lib/setup/ui/title.d.ts

@@ -11,4 +11,3 @@
 export declare function Title(title: string, sub?: string): string;
 /** Convenience: print title + trailing blank line to stdout. */
 export declare function printTitle(title: string, sub?: string): void;
-//# sourceMappingURL=title.d.ts.map

package/dist/lib/setup/ui/title.js

@@ -21,4 +21,3 @@ export function Title(title, sub) {
 export function printTitle(title, sub) {
     process.stdout.write(`${Title(title, sub)}\n\n`);
 }
-//# sourceMappingURL=title.js.map

package/dist/lib/setup/ui/tokens.d.ts

@@ -63,4 +63,3 @@ export declare const glyph: {
 export declare const COLS: number;
 /** Effective render width: clamp to >= 80 unless explicitly narrower. */
 export declare function width(): number;
-//# sourceMappingURL=tokens.d.ts.map

package/dist/lib/setup/ui/tokens.js

@@ -84,4 +84,3 @@ export const COLS = (() => {
 export function width() {
     return Math.max(80, COLS);
 }
-//# sourceMappingURL=tokens.js.map

package/dist/lib/setup.d.ts

@@ -7,7 +7,7 @@
  *
  * Uses Node.js built-in readline/promises — no external dependencies.
  */
-import { Interface as ReadlineInterface } from "readline/promises";
+import { type Interface as ReadlineInterface } from "readline/promises";
 export interface ModelTier {
     name: string;
     model: string;
@@ -16,7 +16,7 @@ export interface ModelTier {
     recommended: boolean;
 }
 /** Per-task routing override chosen during setup. */
-export interface TaskRouting {
+interface TaskRouting {
     provider: string;
     model: string;
 }
@@ -39,15 +39,6 @@ export interface SetupResult {
     dreamEnabled?: boolean;
 }
 export declare const PROVIDER_TIERS: Record<string, ModelTier[]>;
-/**
- * Fetch models from OpenRouter, cache for 24 hours, fall back to hardcoded.
- * Returns updated PROVIDER_TIERS for cloud providers only.
- */
-export declare function fetchDynamicModels(): Promise<Record<string, ModelTier[]>>;
-/**
- * Get model tiers for a provider — tries dynamic first, falls back to hardcoded.
- */
-export declare function getModelTiers(provider: string): Promise<ModelTier[]>;
 /**
  * Returns the cheapest capable model for structuring tasks.
  * Structuring (keyword extraction, tagging) doesn't need a flagship model.
@@ -59,12 +50,6 @@ export declare function getStructuringModel(provider: string, chosenModel: strin
  * Replaces an existing key line if found, otherwise appends.
  */
 export declare function writeApiKey(provider: string, key: string): Promise<void>;
-/**
- * Write an API key to the macOS Keychain.
- * Uses the -U flag to update if the entry already exists.
- * Returns true on success, false on failure.
- */
-export declare function writeApiKeyToKeychain(envVar: string, key: string): boolean;
 /**
  * Detect which IDEs are available in the given project directory.
  * Returns an array like ["claude", "cursor", "codex"].
@@ -130,19 +115,6 @@ export interface ModelsSetupOpts {
  * provider, then writes the result to gnosys.json. Skips IDE and remote setup.
  */
 export declare function runModelsSetup(opts?: ModelsSetupOpts): Promise<void>;
-export interface ModelsCommandOpts {
-    list?: boolean;
-    refresh?: boolean;
-    set?: string;
-    directory?: string;
-}
-/**
- * Lightweight model-management command. Supports three operations:
- *   --list:    print available models for the current provider
- *   --refresh: clear the OpenRouter cache and re-fetch
- *   --set X:   update the default model in gnosys.json (no prompts)
- */
-export declare function runModelsCommand(opts?: ModelsCommandOpts): Promise<void>;
 export interface DreamSetupOpts {
     directory?: string;
     /** v5.8.4: reuse the caller's readline (e.g. summary wizard) to avoid stdin races. */
@@ -179,4 +151,3 @@ export declare function runChatSetup(opts?: ChatSetupOpts): Promise<void>;
  */
 export declare function getApiKeyForProvider(provider: string): Promise<string>;
 export {};
-//# sourceMappingURL=setup.d.ts.map

package/dist/lib/setup.js

@@ -93,7 +93,7 @@ const OPENROUTER_PREFIX_MAP = {
  * Fetch models from OpenRouter, cache for 24 hours, fall back to hardcoded.
  * Returns updated PROVIDER_TIERS for cloud providers only.
  */
-export async function fetchDynamicModels() {
+async function fetchDynamicModels() {
     // Check cache first
     try {
         const stat = await fs.stat(CACHE_FILE);
@@ -266,7 +266,7 @@ export async function fetchDynamicModels() {
 /**
  * Get model tiers for a provider — tries dynamic first, falls back to hardcoded.
  */
-export async function getModelTiers(provider) {
+async function getModelTiers(provider) {
     const dynamic = await fetchDynamicModels();
     if (dynamic[provider] && dynamic[provider].length > 0) {
         return dynamic[provider];
@@ -337,7 +337,8 @@ export async function writeApiKey(provider, key) {
     if (!envVar)
         return;
     const configDir = path.join(os.homedir(), ".config", "gnosys");
-    await fs.mkdir(configDir, { recursive: true });
+    await fs.mkdir(configDir, { recursive: true, mode: 0o700 });
+    await fs.chmod(configDir, 0o700);
     const envPath = path.join(configDir, ".env");
     let lines = [];
     try {
@@ -364,13 +365,14 @@ export async function writeApiKey(provider, key) {
         lines.push(`${envVar}=${key}`);
     }
     await fs.writeFile(envPath, lines.join("\n") + "\n", "utf-8");
+    await fs.chmod(envPath, 0o600);
 }
 /**
  * Write an API key to the macOS Keychain.
  * Uses the -U flag to update if the entry already exists.
  * Returns true on success, false on failure.
  */
-export function writeApiKeyToKeychain(envVar, key) {
+function writeApiKeyToKeychain(envVar, key) {
     if (process.platform !== "darwin")
         return false;
     try {
@@ -700,9 +702,9 @@ export async function setupIDE(ide, projectDir) {
                     let existing = await fs.readFile(userCodexConfig, "utf-8");
                     const before = existing;
                     // Old shape (pre-v5.8.4): [gnosys] command/args
-                    existing = existing.replace(/\n?\[gnosys\][^\[]*?command\s*=\s*"gnosys"[^\[]*?args\s*=\s*\[[^\]]*\]\s*\n?/, "\n");
+                    existing = existing.replace(/\n?\[gnosys\][^[]*?command\s*=\s*"gnosys"[^[]*?args\s*=\s*\[[^\]]*\]\s*\n?/, "\n");
                     // v5.8.4 shape: [mcp.gnosys] type/command
-                    existing = existing.replace(/\n?\[mcp\.gnosys\][^\[]*?type\s*=\s*"local"[^\[]*?command\s*=\s*\[[^\]]*\]\s*\n?/, "\n");
+                    existing = existing.replace(/\n?\[mcp\.gnosys\][^[]*?type\s*=\s*"local"[^[]*?command\s*=\s*\[[^\]]*\]\s*\n?/, "\n");
                     if (existing !== before) {
                         existing = existing.replace(/\n{3,}/g, "\n\n");
                         await fs.writeFile(userCodexConfig, existing, "utf-8");
@@ -1112,6 +1114,7 @@ export async function runSetup(opts) {
                     console.log();
                 }
                 if (shouldUpgrade) {
+                    // Intentional dynamic import — lazy-load projectIdentity to avoid a static cycle.
                     const { createProjectIdentity } = await import("./projectIdentity.js");
                     for (const project of projects) {
                         // Check directory still exists on disk
@@ -1223,7 +1226,8 @@ export async function runSetup(opts) {
             if (baseUrl) {
                 // Write GNOSYS_LLM_BASE_URL to env file
                 const configDir = path.join(os.homedir(), ".config", "gnosys");
-                await fs.mkdir(configDir, { recursive: true });
+                await fs.mkdir(configDir, { recursive: true, mode: 0o700 });
+                await fs.chmod(configDir, 0o700);
                 const envPath = path.join(configDir, ".env");
                 let lines = [];
                 try {
@@ -1248,6 +1252,7 @@ export async function runSetup(opts) {
                     lines.push(`GNOSYS_LLM_BASE_URL=${baseUrl}`);
                 }
                 await fs.writeFile(envPath, lines.join("\n") + "\n", "utf-8");
+                await fs.chmod(envPath, 0o600);
             }
         }
         else if (isSkip) {
@@ -2078,7 +2083,7 @@ export async function runModelsSetup(opts = {}) {
  *   --refresh: clear the OpenRouter cache and re-fetch
  *   --set X:   update the default model in gnosys.json (no prompts)
  */
-export async function runModelsCommand(opts = {}) {
+async function runModelsCommand(opts = {}) {
     const projectDir = opts.directory ? path.resolve(opts.directory) : process.cwd();
     const existingConfig = await loadExistingConfig(projectDir);
     const currentProvider = existingConfig?.llm.defaultProvider;
@@ -2484,4 +2489,3 @@ export async function getApiKeyForProvider(provider) {
     }
     return "";
 }
-//# sourceMappingURL=setup.js.map

package/dist/lib/staticSearch.d.ts

@@ -67,4 +67,3 @@ export declare function listDocuments(index: GnosysWebIndex, filter?: {
     tags?: string[];
     status?: string;
 }): DocumentManifest[];
-//# sourceMappingURL=staticSearch.d.ts.map

package/dist/lib/staticSearch.js

@@ -159,4 +159,3 @@ export function listDocuments(index, filter) {
         return true;
     });
 }
-//# sourceMappingURL=staticSearch.js.map

package/dist/lib/store.d.ts

@@ -77,4 +77,3 @@ export declare class GnosysStore {
      */
     private autoCommit;
 }
-//# sourceMappingURL=store.d.ts.map

package/dist/lib/store.js

@@ -211,4 +211,3 @@ export class GnosysStore {
         }
     }
 }
-//# sourceMappingURL=store.js.map

package/dist/lib/structuredIngest.d.ts

@@ -34,4 +34,3 @@ export declare function computeTfIdf(documents: Array<{
     term: string;
     score: number;
 }>>;
-//# sourceMappingURL=structuredIngest.d.ts.map

package/dist/lib/structuredIngest.js

@@ -205,4 +205,3 @@ export function computeTfIdf(documents, topN = 20) {
     }
     return result;
 }
-//# sourceMappingURL=structuredIngest.js.map

package/dist/lib/tags.d.ts

@@ -21,4 +21,3 @@ export declare class GnosysTagRegistry {
     hasTag(tag: string): boolean;
     addTag(category: string, tag: string): Promise<boolean>;
 }
-//# sourceMappingURL=tags.d.ts.map

package/dist/lib/tags.js

@@ -96,4 +96,3 @@ export class GnosysTagRegistry {
         return true;
     }
 }
-//# sourceMappingURL=tags.js.map

package/dist/lib/timeline.d.ts

@@ -4,8 +4,8 @@
  * Group memories by time period to see knowledge evolution.
  * Compute summary statistics across the store.
  */
-import { Memory } from "./store.js";
-import { DbMemory } from "./db.js";
+import type { Memory } from "./store.js";
+import type { DbMemory } from "./db.js";
 export type TimePeriod = "day" | "week" | "month" | "year";
 export interface TimelineEntry {
     period: string;
@@ -38,4 +38,3 @@ export declare function groupDbByPeriod(memories: DbMemory[], period: TimePeriod
  * Compute summary statistics across all memories.
  */
 export declare function computeStats(memories: Memory[]): MemoryStats;
-//# sourceMappingURL=timeline.d.ts.map

package/dist/lib/timeline.js

@@ -99,9 +99,9 @@ function toPeriodKey(dateStr, period) {
     const parts = dateStr.split("-");
     if (parts.length < 3)
         return null;
-    const year = parseInt(parts[0]);
-    const month = parseInt(parts[1]);
-    const day = parseInt(parts[2]);
+    const year = parseInt(parts[0], 10);
+    const month = parseInt(parts[1], 10);
+    const day = parseInt(parts[2], 10);
     switch (period) {
         case "day":
             return dateStr; // Already YYYY-MM-DD
@@ -127,4 +127,3 @@ function getISOWeek(d) {
     return (1 +
         Math.round(((date.getTime() - week1.getTime()) / 86400000 - 3 + ((week1.getDay() + 6) % 7)) / 7));
 }
-//# sourceMappingURL=timeline.js.map

package/dist/lib/trace.d.ts

@@ -9,21 +9,7 @@
  *
  * No external dependencies beyond Node built-ins and the Gnosys DB.
  */
-import { GnosysDB } from "./db.js";
-export interface TraceNode {
-    name: string;
-    file: string;
-    kind: "function" | "class" | "method" | "export";
-    line: number;
-    calls: string[];
-    calledBy: string[];
-    imports: string[];
-}
-export interface TraceGraph {
-    nodes: Map<string, TraceNode>;
-    files: string[];
-    rootDir: string;
-}
+import type { GnosysDB } from "./db.js";
 export interface TraceResult {
     memoriesCreated: number;
     relationshipsCreated: number;
@@ -39,4 +25,3 @@ export declare function traceCodebase(db: GnosysDB, rootDir: string, opts?: {
     projectId?: string;
     maxFiles?: number;
 }): TraceResult;
-//# sourceMappingURL=trace.d.ts.map

package/dist/lib/trace.js

@@ -335,4 +335,3 @@ export function traceCodebase(db, rootDir, opts = {}) {
         memoryIds,
     };
 }
-//# sourceMappingURL=trace.js.map

package/dist/lib/upgrade.d.ts

@@ -35,4 +35,3 @@ export declare function readUpgradeMarker(): UpgradeMarker | null;
  * so the host respawns it against the upgraded global binary.
  */
 export declare function shouldRestartMcp(currentVersion: string): boolean;
-//# sourceMappingURL=upgrade.d.ts.map

package/dist/lib/upgrade.js

@@ -58,4 +58,3 @@ export function shouldRestartMcp(currentVersion) {
         return false;
     return marker.version !== currentVersion;
 }
-//# sourceMappingURL=upgrade.js.map

package/dist/lib/videoExtract.d.ts

@@ -27,4 +27,3 @@ export interface VideoTranscriptResult {
  * 5. Return the transcript result
  */
 export declare function transcribeVideo(filePath: string, options?: TranscriptionOptions): Promise<VideoTranscriptResult>;
-//# sourceMappingURL=videoExtract.d.ts.map

package/dist/lib/videoExtract.js

@@ -89,4 +89,3 @@ export async function transcribeVideo(filePath, options) {
         }
     }
 }
-//# sourceMappingURL=videoExtract.js.map

package/dist/lib/webIndex.d.ts

@@ -5,8 +5,7 @@
  * builds a TF-IDF weighted inverted index mapping tokens to documents,
  * and writes the result as a JSON file (gnosys-index.json).
  */
-import type { GnosysWebIndex, DocumentManifest, IndexEntry } from "./staticSearch.js";
-export type { GnosysWebIndex, DocumentManifest, IndexEntry };
+import type { GnosysWebIndex } from "./staticSearch.js";
 export interface BuildIndexOptions {
     stopWords?: boolean;
     minTokenLength?: number;
@@ -25,4 +24,3 @@ export declare function buildIndex(knowledgeDir: string, options?: BuildIndexOpt
  * Write an index to a JSON file.
  */
 export declare function writeIndex(index: GnosysWebIndex, outputPath: string): Promise<void>;
-//# sourceMappingURL=webIndex.d.ts.map

package/dist/lib/webIndex.js

@@ -205,4 +205,3 @@ export async function writeIndex(index, outputPath) {
     await fs.mkdir(dir, { recursive: true });
     writeFileSync(outputPath, JSON.stringify(index, null, 2), "utf-8");
 }
-//# sourceMappingURL=webIndex.js.map

package/dist/lib/webIngest.d.ts

@@ -32,6 +32,19 @@ export interface IngestResult {
     }>;
     duration: number;
 }
+export interface SafeUrlOptions {
+    /** Allow loopback hosts (127.0.0.1, localhost, ::1). Defaults to false. */
+    allowLoopback?: boolean;
+}
+/**
+ * Validate a URL is safe to fetch (blocks SSRF to internal networks).
+ * Only allows http/https schemes and rejects private/loopback/metadata targets.
+ */
+export declare function isSafeUrl(urlStr: string, options?: SafeUrlOptions): boolean;
+/**
+ * Fetch a URL with manual redirect handling; re-validates each hop through isSafeUrl.
+ */
+export declare function safeFetch(startUrl: string, init?: RequestInit, options?: SafeUrlOptions): Promise<Response>;
 /**
  * Ingest a website into a Gnosys knowledge directory.
  */
@@ -48,4 +61,3 @@ export declare function ingestDirectory(dir: string, config: WebIngestConfig, gn
  * Remove all knowledge files from the output directory.
  */
 export declare function removeKnowledge(knowledgePath: string): Promise<void>;
-//# sourceMappingURL=webIngest.d.ts.map

package/dist/lib/webIngest.js

@@ -9,6 +9,7 @@ import fs from "fs/promises";
 import { existsSync, readFileSync, mkdirSync } from "fs";
 import path from "path";
 import { createHash } from "crypto";
+import { isIP } from "node:net";
 import matter from "gray-matter";
 import TurndownService from "turndown";
 import { getLLMProvider } from "./llm.js";
@@ -28,36 +29,52 @@ function createTurndown() {
 const MAX_SITEMAP_DEPTH = 3;
 /** Maximum total URLs collected from sitemaps. */
 const MAX_SITEMAP_URLS = 10_000;
+/** Maximum redirect hops when fetching remote URLs. */
+const MAX_FETCH_REDIRECTS = 5;
 /**
  * Validate a URL is safe to fetch (blocks SSRF to internal networks).
- * Only allows http/https schemes and rejects private/loopback IPs.
+ * Only allows http/https schemes and rejects private/loopback/metadata targets.
  */
-function isSafeUrl(urlStr) {
+export function isSafeUrl(urlStr, options) {
     try {
         const url = new URL(urlStr);
         // Only allow http/https
         if (url.protocol !== "http:" && url.protocol !== "https:")
             return false;
-        const hostname = url.hostname;
-        // Block loopback
-        if (hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1" || hostname === "[::1]") {
-            return true; // Allow localhost for local dev — but block metadata endpoints below
-        }
+        const allowLoopback = options?.allowLoopback ?? false;
+        const hostname = url.hostname.replace(/^\[|\]$/g, "");
         // Block cloud metadata endpoints
         if (hostname === "169.254.169.254" || hostname === "metadata.google.internal")
             return false;
-        // Block private IPv4 ranges
-        const ipv4Match = hostname.match(/^(\d+)\.(\d+)\.(\d+)\.(\d+)$/);
-        if (ipv4Match) {
-            const [, a, b] = ipv4Match.map(Number);
-            if (a === 10)
-                return false; // 10.0.0.0/8
-            if (a === 172 && b >= 16 && b <= 31)
-                return false; // 172.16.0.0/12
-            if (a === 192 && b === 168)
-                return false; // 192.168.0.0/16
-            if (a === 169 && b === 254)
-                return false; // 169.254.0.0/16 (link-local)
+        // Block hex-encoded IP hostnames (e.g. 0x7f000001)
+        if (/^0x[0-9a-f]+$/i.test(hostname))
+            return false;
+        // Block dotted hosts with hex octets (e.g. 0x7f.0.0.1)
+        if (hostname.includes(".") && hostname.split(".").some((part) => /^0x[0-9a-f]+$/i.test(part))) {
+            return false;
+        }
+        const ipKind = isIP(hostname);
+        if (ipKind === 4) {
+            return isSafeIpv4(hostname, allowLoopback);
+        }
+        if (ipKind === 6) {
+            return isSafeIpv6(hostname, allowLoopback);
+        }
+        // All-numeric hostname (decimal IP encoding, e.g. 2130706433 = 127.0.0.1)
+        if (/^\d+$/.test(hostname)) {
+            const asInt = Number(hostname);
+            if (!Number.isFinite(asInt) || asInt < 0 || asInt > 0xffffffff)
+                return false;
+            const octets = [
+                (asInt >>> 24) & 0xff,
+                (asInt >>> 16) & 0xff,
+                (asInt >>> 8) & 0xff,
+                asInt & 0xff,
+            ];
+            return isSafeIpv4(octets.join("."), allowLoopback);
+        }
+        if (!allowLoopback && (hostname === "localhost" || hostname.endsWith(".localhost"))) {
+            return false;
         }
         return true;
     }
@@ -65,6 +82,66 @@ function isSafeUrl(urlStr) {
         return false;
     }
 }
+function isSafeIpv4(dotted, allowLoopback) {
+    const match = dotted.match(/^(\d+)\.(\d+)\.(\d+)\.(\d+)$/);
+    if (!match)
+        return false;
+    const octets = match.slice(1).map(Number);
+    if (octets.some((n) => n > 255))
+        return false;
+    const [a, b] = octets;
+    if (a === 0 && octets.every((n) => n === 0))
+        return false; // 0.0.0.0
+    if (!allowLoopback && a === 127)
+        return false; // 127.0.0.0/8
+    if (a === 10)
+        return false; // 10.0.0.0/8
+    if (a === 172 && b >= 16 && b <= 31)
+        return false; // 172.16.0.0/12
+    if (a === 192 && b === 168)
+        return false; // 192.168.0.0/16
+    if (a === 169 && b === 254)
+        return false; // 169.254.0.0/16
+    return true;
+}
+function isSafeIpv6(addr, allowLoopback) {
+    const lower = addr.toLowerCase();
+    if (!allowLoopback && (lower === "::1" || lower === "0:0:0:0:0:0:0:1"))
+        return false;
+    // Unique local addresses fc00::/7
+    if (/^f[cd]/i.test(lower))
+        return false;
+    // Link-local fe80::/10
+    if (/^fe[89ab]/i.test(lower))
+        return false;
+    // IPv4-mapped IPv6 (::ffff:x.x.x.x)
+    const mapped = lower.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/);
+    if (mapped) {
+        return isSafeIpv4(mapped[1], allowLoopback);
+    }
+    return true;
+}
+/**
+ * Fetch a URL with manual redirect handling; re-validates each hop through isSafeUrl.
+ */
+export async function safeFetch(startUrl, init, options) {
+    let url = startUrl;
+    for (let hop = 0; hop <= MAX_FETCH_REDIRECTS; hop++) {
+        if (!isSafeUrl(url, options)) {
+            throw new Error(`Refusing to fetch unsafe URL: ${url}`);
+        }
+        const response = await fetch(url, { ...init, redirect: "manual" });
+        if (response.status >= 300 && response.status < 400) {
+            const location = response.headers.get("location");
+            if (!location)
+                return response;
+            url = new URL(location, url).toString();
+            continue;
+        }
+        return response;
+    }
+    throw new Error("Too many redirects");
+}
 // ─── URL utilities ───────────────────────────────────────────────────────
 function matchesExclude(url, patterns) {
     const urlPath = new URL(url, "https://example.com").pathname;
@@ -122,7 +199,7 @@ async function fetchSitemapUrls(sitemapUrl, depth = 0) {
     if (!isSafeUrl(sitemapUrl)) {
         throw new Error(`Refusing to fetch unsafe URL: ${sitemapUrl}`);
     }
-    const response = await fetch(sitemapUrl);
+    const response = await safeFetch(sitemapUrl);
     if (!response.ok) {
         throw new Error(`Failed to fetch sitemap: ${response.status} ${response.statusText}`);
     }
@@ -153,7 +230,7 @@ async function fetchPage(url) {
     if (!isSafeUrl(url)) {
         throw new Error(`Refusing to fetch unsafe URL: ${url}`);
     }
-    const response = await fetch(url);
+    const response = await safeFetch(url);
     if (!response.ok) {
         throw new Error(`HTTP ${response.status}: ${response.statusText}`);
     }
@@ -507,7 +584,6 @@ async function applyTfIdfRelevance(outputDir) {
             docs.push({ id, content: parsed.content, path: filePath });
         }
         catch {
-            continue;
         }
     }
     if (docs.length === 0)
@@ -526,8 +602,6 @@ async function applyTfIdfRelevance(outputDir) {
             await fs.writeFile(doc.path, updated, "utf-8");
         }
         catch {
-            continue;
         }
     }
 }
-//# sourceMappingURL=webIngest.js.map

package/dist/lib/wikilinks.d.ts

@@ -4,7 +4,7 @@
  * Scans memory content for [[wikilinks]] and builds a link graph.
  * Supports both [[title]] and [[path|display text]] formats.
  */
-import { Memory } from "./store.js";
+import type { Memory } from "./store.js";
 /** A single link found in a memory. */
 export interface WikiLink {
     /** The raw target inside [[ ]] — could be a title or relative path */
@@ -17,7 +17,7 @@ export interface WikiLink {
     sourceTitle: string;
 }
 /** A node in the link graph with both outgoing and incoming links. */
-export interface LinkNode {
+interface LinkNode {
     /** This memory's relative path */
     path: string;
     /** This memory's title */
@@ -60,4 +60,4 @@ export declare function getOutgoingLinks(memories: Memory[], sourcePath: string)
  * Format the link graph as a simple text summary.
  */
 export declare function formatGraphSummary(graph: LinkGraph): string;
-//# sourceMappingURL=wikilinks.d.ts.map
+export {};

package/dist/lib/wikilinks.js

@@ -143,4 +143,3 @@ export function formatGraphSummary(graph) {
     }
     return lines.join("\n");
 }
-//# sourceMappingURL=wikilinks.js.map

package/dist/postinstall.d.ts

@@ -9,4 +9,3 @@
  * the only way users actually see the message during `npm install -g`.
  */
 export {};
-//# sourceMappingURL=postinstall.d.ts.map

package/dist/postinstall.js

@@ -98,4 +98,3 @@ async function main() {
     }
 }
 main();
-//# sourceMappingURL=postinstall.js.map

package/dist/sandbox/client.d.ts

@@ -79,4 +79,3 @@ export declare class SandboxClient {
     /** Check if the sandbox is running (non-throwing) */
     isRunning(): Promise<boolean>;
 }
-//# sourceMappingURL=client.d.ts.map

package/dist/sandbox/client.js

@@ -125,4 +125,3 @@ export class SandboxClient {
         }
     }
 }
-//# sourceMappingURL=client.js.map

package/dist/sandbox/helper-template.d.ts

@@ -11,4 +11,3 @@
  * Write the helper library file to the specified directory.
  */
 export declare function generateHelper(targetDir: string): Promise<string>;
-//# sourceMappingURL=helper-template.d.ts.map

package/dist/sandbox/helper-template.js

@@ -288,4 +288,3 @@ export async function generateHelper(targetDir) {
     fs.writeFileSync(outputPath, source, "utf8");
     return outputPath;
 }
-//# sourceMappingURL=helper-template.js.map