heyspex 0.2.2 → 0.2.3

package/dist/cli/hs-index-reconcile.mjs

@@ -161,9 +161,9 @@ function parseCredentialsStore(raw) {
     accounts
   };
 }
-function readTextOrNull(read, path15) {
+function readTextOrNull(read, path16) {
   try {
-    const raw = read(path15);
+    const raw = read(path16);
     return typeof raw === "string" ? raw : null;
   } catch {
     return null;
@@ -215,14 +215,14 @@ var init_session_owner = __esm({
 });
 
 // vendor/heyspex-mcp/vault-less-endpoints.mjs
-function pathnameOf(path15) {
-  const raw = String(path15 ?? "").split("?")[0].split("#")[0];
+function pathnameOf(path16) {
+  const raw = String(path16 ?? "").split("?")[0].split("#")[0];
   const noTrailing = raw.length > 1 ? raw.replace(/\/+$/, "") : raw;
   return noTrailing || "/";
 }
-function isVaultLessEndpoint(method, path15) {
+function isVaultLessEndpoint(method, path16) {
   const m = String(method || "GET").toUpperCase();
-  const pathname = pathnameOf(path15);
+  const pathname = pathnameOf(path16);
   return VAULT_LESS_ENDPOINTS.some((row) => {
     const [rowMethod, rowPath] = row.split(" ");
     return rowPath === pathname && (rowMethod === "*" || rowMethod === m);
@@ -245,7 +245,9 @@ var init_vault_less_endpoints = __esm({
 });
 
 // scripts/lib/shared-path-helpers.mjs
+import { realpathSync } from "node:fs";
 import { isAbsolute, resolve as resolve2, sep } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 var init_shared_path_helpers = __esm({
   "scripts/lib/shared-path-helpers.mjs"() {
     "use strict";
@@ -270,20 +272,52 @@ var init_write_outbox = __esm({
   }
 });
 
+// vendor/heyspex-mcp/usable-dir-env.mjs
+import { statSync } from "node:fs";
+import { isAbsolute as isAbsolute3 } from "node:path";
+var init_usable_dir_env = __esm({
+  "vendor/heyspex-mcp/usable-dir-env.mjs"() {
+    "use strict";
+  }
+});
+
+// vendor/heyspex-mcp/vault-binding.mjs
+import {
+  copyFileSync,
+  existsSync as existsSync3,
+  mkdirSync as mkdirSync3,
+  readFileSync as readFileSync4,
+  realpathSync as realpathSync2,
+  renameSync as renameSync3,
+  statSync as statSync2,
+  unlinkSync,
+  writeFileSync as writeFileSync3
+} from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import path from "node:path";
+var init_vault_binding = __esm({
+  "vendor/heyspex-mcp/vault-binding.mjs"() {
+    "use strict";
+  }
+});
+
 // vendor/heyspex-mcp/vault-resolve.mjs
-import { existsSync as existsSync3, readFileSync as readFileSync4 } from "node:fs";
-import { homedir as homedir4, tmpdir } from "node:os";
-import { dirname as dirname3, join as join5, resolve as resolve3 } from "node:path";
+import { existsSync as existsSync4, readFileSync as readFileSync5, realpathSync as realpathSync3, statSync as statSync3 } from "node:fs";
+import { homedir as homedir5, tmpdir } from "node:os";
+import { basename as basename2, dirname as dirname3, join as join5, resolve as resolve3 } from "node:path";
 var init_vault_resolve = __esm({
   "vendor/heyspex-mcp/vault-resolve.mjs"() {
     "use strict";
     init_heyspex_home();
+    init_usable_dir_env();
+    init_vault_binding();
+    init_vault_binding();
   }
 });
 
 // vendor/heyspex-mcp/console-fetch.mjs
-import { readFileSync as readFileSync5 } from "node:fs";
-import { homedir as homedir5 } from "node:os";
+import { readFileSync as readFileSync6 } from "node:fs";
+import { homedir as homedir6 } from "node:os";
 import { join as join6 } from "node:path";
 function isCloudVaultId(value) {
   return typeof value === "string" && CLOUD_VAULT_ID_RE.test(value.trim());
@@ -305,13 +339,13 @@ var init_console_fetch = __esm({
 });
 
 // spex-console/src/lib/heyspex-home.ts
-import { homedir as homedir6 } from "node:os";
+import { homedir as homedir7 } from "node:os";
 function heyspexHome2(env = process.env) {
   const override = env?.HEYSPEX_HOME;
   if (typeof override === "string" && override.trim().length > 0) {
     return override.trim();
   }
-  return homedir6();
+  return homedir7();
 }
 var init_heyspex_home2 = __esm({
   "spex-console/src/lib/heyspex-home.ts"() {
@@ -339,7 +373,7 @@ var init_types = __esm({
 });
 
 // spex-console/src/lib/vault-registry/registry-file.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync6, renameSync as renameSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync7, renameSync as renameSync4, writeFileSync as writeFileSync4 } from "node:fs";
 import { dirname as dirname4, join as join7, resolve as resolve4 } from "node:path";
 function vaultRegistryDir(opts = {}) {
   return opts.registryDir ?? join7(heyspexHome2(), ".heyspex");
@@ -446,9 +480,9 @@ function parseVaultRegistryFile(json) {
 }
 function readRegistryJson(opts) {
   const filePath = vaultRegistryFilePath(opts);
-  if (!existsSync4(filePath)) return { kind: "missing" };
+  if (!existsSync5(filePath)) return { kind: "missing" };
   try {
-    const raw = readFileSync6(filePath, "utf8");
+    const raw = readFileSync7(filePath, "utf8");
     const json = JSON.parse(raw);
     if (registryFileSchemaOf(json) === null) return { kind: "unreadable" };
     return { kind: "ok", raw, json };
@@ -484,8 +518,8 @@ var init_registry_file = __esm({
 });
 
 // scripts/lib/dev-mode.mjs
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
-import { homedir as homedir7 } from "node:os";
+import { mkdirSync as mkdirSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "node:fs";
+import { homedir as homedir8 } from "node:os";
 import { join as join8 } from "node:path";
 function devModeFilePath(homeDir = heyspexHome()) {
   return join8(homeDir, ".heyspex", DEV_MODE_FILENAME);
@@ -540,6 +574,11 @@ function readLocalDevModeRecord({ homeDir = heyspexHome(), readFile = defaultRea
     return { record: null, parseError: `unparseable dev-mode.json: ${String(err?.message ?? err)}` };
   }
 }
+function overrideCloudCheck(source, cloudKnown, staleAgainstCloud) {
+  if (source !== "local-override") return "not-applicable";
+  if (!cloudKnown) return "unverified";
+  return staleAgainstCloud ? "stale" : "in-sync";
+}
 function resolveDevMode({
   env = process.env,
   homeDir = heyspexHome(),
@@ -579,6 +618,7 @@ function resolveDevMode({
   const semantics = deriveSemantics(mode, reliance);
   const consoleUrl = source === "local-override" && local.record?.console_url ? local.record.console_url.replace(/\/+$/, "") : semantics.consoleUrl;
   const staleAgainstCloud = source === "local-override" && cloudValue !== null && (cloudValue.mode !== mode || mode === "dev" && cloudValue.reliance !== semantics.reliance);
+  const cloudCheck = overrideCloudCheck(source, cloudKnown, staleAgainstCloud);
   return {
     mode,
     reliance: semantics.reliance,
@@ -596,7 +636,8 @@ function resolveDevMode({
       present: local.record !== null,
       record: local.record,
       parseError: local.parseError,
-      staleAgainstCloud
+      staleAgainstCloud,
+      cloudCheck
     },
     cloudSetting: { known: cloudKnown, value: cloudValue }
   };
@@ -610,13 +651,13 @@ var init_dev_mode = __esm({
     CLOUD_CONSOLE_URL = "https://app.heyspex.com";
     LOCAL_CONSOLE_URL = "http://localhost:3000";
     DEV_MODE_FILENAME = "dev-mode.json";
-    defaultReadFile = (p) => readFileSync7(p, "utf8");
+    defaultReadFile = (p) => readFileSync8(p, "utf8");
   }
 });
 
 // scripts/lib/console-url-resolver.mjs
-import { readFileSync as readFileSync8 } from "node:fs";
-import { homedir as homedir8 } from "node:os";
+import { readFileSync as readFileSync9 } from "node:fs";
+import { homedir as homedir9 } from "node:os";
 import { join as join9 } from "node:path";
 function trimTrailingSlash(url) {
   return url.replace(/\/+$/, "");
@@ -651,7 +692,7 @@ function readCredentialsConsoleUrl({ homeDir = heyspexHome(), readFile = default
   }
 }
 function defaultReadFile2(p) {
-  return readFileSync8(p, "utf8");
+  return readFileSync9(p, "utf8");
 }
 function readDiscoveryFileConsoleUrl(repoRoot, { readDiscovery: readDiscovery2 = defaultReadFile2 } = {}) {
   if (!repoRoot) return null;
@@ -726,9 +767,9 @@ var init_console_url_resolver = __esm({
 });
 
 // spex-console/src/lib/vault-registry/repo-identity.ts
-import path2 from "node:path";
+import path3 from "node:path";
 function normalizeRepoRoot(p) {
-  let resolved = path2.resolve(p);
+  let resolved = path3.resolve(p);
   while (resolved.length > 1 && (resolved.endsWith("/") || resolved.endsWith("\\"))) {
     resolved = resolved.slice(0, -1);
   }
@@ -737,8 +778,8 @@ function normalizeRepoRoot(p) {
 function repoRootCandidates(p) {
   const norm = normalizeRepoRoot(p);
   const candidates = [norm];
-  if (path2.basename(norm) === "specs") {
-    const parent = path2.dirname(norm);
+  if (path3.basename(norm) === "specs") {
+    const parent = path3.dirname(norm);
     if (parent !== norm) candidates.push(parent);
   }
   return candidates;
@@ -763,22 +804,22 @@ var init_default_workspace = __esm({
 });
 
 // spex-console/src/lib/cli/vault-workspace-shared.ts
-import { readFileSync as readFileSync9 } from "node:fs";
+import { readFileSync as readFileSync10 } from "node:fs";
 function resolveConfiguredAccountId(opts = {}) {
   return resolveSessionOwnerUncached({
     env: opts.env ?? process.env,
     homeDir: opts.homeDir ?? heyspexHome2(),
-    readFile: opts.readFile ?? ((p) => readFileSync9(p, "utf-8"))
+    readFile: opts.readFile ?? ((p) => readFileSync10(p, "utf-8"))
   });
 }
 function resolveCloudAccountIdOrRefuse(opts = {}) {
   const accountId = resolveConfiguredAccountId(opts);
   return accountId ? { ok: true, accountId } : { ok: false, message: CLOUD_ACCOUNT_ID_REQUIRED_MESSAGE };
 }
-async function cloudHttpRequest(http, method, path15, body) {
-  const scopeHeaders = http.scope ? http.scope.headersFor(method, path15) : {};
+async function cloudHttpRequest(http, method, path16, body) {
+  const scopeHeaders = http.scope ? http.scope.headersFor(method, path16) : {};
   try {
-    const res = await http.fetchImpl(`${http.consoleUrl}${path15}`, {
+    const res = await http.fetchImpl(`${http.consoleUrl}${path16}`, {
       method,
       headers: {
         "content-type": "application/json",
@@ -1639,7 +1680,7 @@ var init_vault_shared = __esm({
 // spex-console/src/lib/indexer/parser.ts
 import { createHash } from "node:crypto";
 import { promises as fs2 } from "node:fs";
-import path4 from "node:path";
+import path5 from "node:path";
 function normalizeWikilink2(raw) {
   let t = raw.trim();
   if (t.startsWith("[[") && t.endsWith("]]")) {
@@ -3812,9 +3853,9 @@ var init_satellite = __esm({
 });
 
 // spex-console/src/lib/vault-resolve/index.ts
-import { existsSync as existsSync5, readFileSync as readFileSync11 } from "node:fs";
+import { existsSync as existsSync6, readFileSync as readFileSync12, realpathSync as realpathSync4, statSync as statSync4 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import path5 from "node:path";
+import path6 from "node:path";
 var init_vault_resolve2 = __esm({
   "spex-console/src/lib/vault-resolve/index.ts"() {
     "use strict";
@@ -3851,12 +3892,12 @@ var init_resolve_status = __esm({
 });
 
 // spex-console/src/lib/vault-resolve/active.ts
-import { existsSync as existsSync6 } from "node:fs";
-import path6 from "node:path";
+import { existsSync as existsSync7 } from "node:fs";
+import path7 from "node:path";
 function fallbackSpecsDir() {
   const override = process.env.HEYSPEX_VAULT_DIR;
-  if (override) return path6.resolve(override);
-  return path6.resolve(process.cwd(), "..", "specs");
+  if (override) return path7.resolve(override);
+  return path7.resolve(process.cwd(), "..", "specs");
 }
 function getActiveSpecsDir() {
   return cacheStore.value ? cacheStore.value.specsDirAbs : fallbackSpecsDir();
@@ -3885,7 +3926,7 @@ var init_active = __esm({
 
 // spex-console/src/lib/control-plane/statusline-focus-cache.ts
 import fs3 from "node:fs";
-import path7 from "node:path";
+import path8 from "node:path";
 var init_statusline_focus_cache = __esm({
   "spex-console/src/lib/control-plane/statusline-focus-cache.ts"() {
     "use strict";
@@ -4502,10 +4543,10 @@ function trashPathFor(relPath, now) {
   const normalized = relPath.split("\\").join("/");
   const slashIdx = normalized.lastIndexOf("/");
   const folder = slashIdx === -1 ? "" : normalized.slice(0, slashIdx);
-  const basename2 = slashIdx === -1 ? normalized : normalized.slice(slashIdx + 1);
+  const basename3 = slashIdx === -1 ? normalized : normalized.slice(slashIdx + 1);
   const stamp = now.toISOString().replace(/[:.]/g, "-");
   const trashDir = folder ? `${folder}/.trash` : ".trash";
-  return `${trashDir}/${stamp}-${basename2}`;
+  return `${trashDir}/${stamp}-${basename3}`;
 }
 function materializeSpecMarkdown(bundle) {
   return stringifySpecMarkdown(bundle.bodyText, bundle.frontmatter);
@@ -4627,10 +4668,10 @@ var init_export_status = __esm({
 function isGitHubFailure(value) {
   return typeof value === "object" && value !== null && "status" in value;
 }
-async function githubJson(path15, target, fetchImpl, init) {
+async function githubJson(path16, target, fetchImpl, init) {
   let response;
   try {
-    response = await fetchImpl(`${GITHUB_API_BASE2}${path15}`, {
+    response = await fetchImpl(`${GITHUB_API_BASE2}${path16}`, {
       ...init,
       headers: {
         ...githubHeaders(target.token),
@@ -5473,7 +5514,7 @@ var init_diagnose_spawned = __esm({
 
 // spex-console/src/lib/guardrail-naming.ts
 import fs4 from "node:fs";
-import path8 from "node:path";
+import path9 from "node:path";
 var init_guardrail_naming = __esm({
   "spex-console/src/lib/guardrail-naming.ts"() {
     "use strict";
@@ -5576,7 +5617,7 @@ var init_scoped_context = __esm({
 // spex-console/src/lib/indexer/indexer-service.ts
 import { spawnSync } from "node:child_process";
 import { promises as fs5 } from "node:fs";
-import path9 from "node:path";
+import path10 from "node:path";
 var init_indexer_service = __esm({
   "spex-console/src/lib/indexer/indexer-service.ts"() {
     "use strict";
@@ -5595,7 +5636,7 @@ var init_indexer_service = __esm({
 
 // spex-console/src/lib/indexer/outbox-index-feeder.ts
 import { promises as fs6 } from "node:fs";
-import path10 from "node:path";
+import path11 from "node:path";
 var init_outbox_index_feeder = __esm({
   "spex-console/src/lib/indexer/outbox-index-feeder.ts"() {
     "use strict";
@@ -5874,7 +5915,7 @@ var init_list_filter = __esm({
 });
 
 // spex-console/src/lib/specs/list-query.ts
-import path11 from "node:path";
+import path12 from "node:path";
 var init_list_query = __esm({
   "spex-console/src/lib/specs/list-query.ts"() {
     "use strict";
@@ -5917,7 +5958,7 @@ var init_pipeline_neighborhood = __esm({
 });
 
 // spex-console/src/lib/specs/spec-by-id.ts
-import path12 from "node:path";
+import path13 from "node:path";
 var init_spec_by_id = __esm({
   "spex-console/src/lib/specs/spec-by-id.ts"() {
     "use strict";
@@ -5974,9 +6015,9 @@ var init_search_body_hit = __esm({
 
 // spex-console/src/lib/vault.ts
 import { spawn } from "node:child_process";
-import { readdirSync as readdirSync2, readFileSync as readFileSync12, statSync } from "node:fs";
+import { readdirSync as readdirSync2, readFileSync as readFileSync13, statSync as statSync5 } from "node:fs";
 import { promises as fs7 } from "node:fs";
-import path13 from "node:path";
+import path14 from "node:path";
 import yaml3 from "js-yaml";
 function normalizeDateField(value) {
   let d = null;
@@ -6017,18 +6058,18 @@ function extractBodyLinks(body) {
   return links;
 }
 function toSummary(absPath, root, fm, body) {
-  const basename2 = path13.basename(absPath).replace(/\.md$/i, "");
-  const relPath = path13.relative(root, absPath).split(path13.sep).join("/");
+  const basename3 = path14.basename(absPath).replace(/\.md$/i, "");
+  const relPath = path14.relative(root, absPath).split(path14.sep).join("/");
   return {
-    id: typeof fm.id === "string" && fm.id ? fm.id : basename2,
-    name: typeof fm.name === "string" && fm.name ? fm.name : basename2,
+    id: typeof fm.id === "string" && fm.id ? fm.id : basename3,
+    name: typeof fm.name === "string" && fm.name ? fm.name : basename3,
     type: typeof fm.type === "string" ? fm.type : "unknown",
     status: typeof fm.status === "string" ? fm.status : "unknown",
     effort: typeof fm.effort === "number" ? fm.effort : null,
     owner: typeof fm.owner === "string" ? fm.owner : null,
     tags: Array.isArray(fm.tags) ? fm.tags.map(String) : [],
     archived: fm.archived === true,
-    basename: basename2,
+    basename: basename3,
     relPath,
     links: extractBodyLinks(body),
     created: normalizeDateField(fm.created),
@@ -6114,9 +6155,9 @@ function invalidateVaultCacheForFile(absPath) {
   else evictProcessVaultHotRows();
 }
 function specIdFromAbsPath(absPath) {
-  const basename2 = path13.basename(absPath).replace(/\.md$/i, "");
-  if (!basename2) return null;
-  const parsed = parseSpecId(basename2);
+  const basename3 = path14.basename(absPath).replace(/\.md$/i, "");
+  if (!basename3) return null;
+  const parsed = parseSpecId(basename3);
   if (parsed?.era === 3 && parsed.fileKey) return `HS-${parsed.fileKey.toUpperCase()}`;
   return null;
 }
@@ -6205,8 +6246,8 @@ function isLocalVaultMode() {
 }
 async function writeSpecBytesToVault(relPath, content) {
   try {
-    const absPath = path13.join(vaultRoot(), relPath);
-    const dir = path13.dirname(absPath);
+    const absPath = path14.join(vaultRoot(), relPath);
+    const dir = path14.dirname(absPath);
     await fs7.mkdir(dir, { recursive: true });
     await fs7.writeFile(absPath, content, "utf8");
   } catch (err) {
@@ -6372,9 +6413,9 @@ var init_vault = __esm({
 
 // spex-console/bin/hs-index-reconcile.ts
 import { execFileSync } from "node:child_process";
-import { appendFileSync, mkdirSync as mkdirSync6, readFileSync as readFileSync13, writeFileSync as writeFileSync6 } from "node:fs";
+import { appendFileSync, mkdirSync as mkdirSync7, readFileSync as readFileSync15, writeFileSync as writeFileSync7 } from "node:fs";
 import { promises as fs10 } from "node:fs";
-import path14 from "node:path";
+import path15 from "node:path";
 import process4 from "node:process";
 
 // spex-console/src/lib/cli/control-shared.ts
@@ -6384,14 +6425,14 @@ init_credentials();
 init_session_owner();
 init_vault_less_endpoints();
 init_registry_file();
-import path from "node:path";
+import path2 from "node:path";
 var VAULT_ID_HEADER = "x-heyspex-vault-id";
 var ACCOUNT_ID_HEADER = "x-heyspex-account-id";
-function scopeHeadersFor(scope, method, path15) {
+function scopeHeadersFor(scope, method, path16) {
   if (scope === "none") {
-    if (!isVaultLessEndpoint(method, path15)) {
+    if (!isVaultLessEndpoint(method, path16)) {
       throw new Error(
-        `controlRequest: scope "none" is only allowed for the vault-less endpoints (${VAULT_LESS_ENDPOINTS.join(", ")}); ${method.toUpperCase()} ${path15} is vault-scoped and must name { accountId, vaultId }.`
+        `controlRequest: scope "none" is only allowed for the vault-less endpoints (${VAULT_LESS_ENDPOINTS.join(", ")}); ${method.toUpperCase()} ${path16} is vault-scoped and must name { accountId, vaultId }.`
       );
     }
     return {};
@@ -6402,7 +6443,7 @@ function cloudRequestScope(scope) {
   const named = { accountId: scope.accountId, vaultId: scope.vaultId };
   return {
     ...named,
-    headersFor: (method, path15) => isVaultLessEndpoint(method, path15) ? {} : scopeHeadersFor(named, method, path15)
+    headersFor: (method, path16) => isVaultLessEndpoint(method, path16) ? {} : scopeHeadersFor(named, method, path16)
   };
 }
 
@@ -6475,12 +6516,15 @@ var HELP2 = [
   "(spex-console/src/lib/cli/template-manifest.ts) \u2014 universal docs",
   "copied verbatim, template-shape docs written as author-prompt skeletons \u2014",
   "plus a generated CLAUDE.md, the kept-principles index, and the template_version",
-  "pin; with --git, one initial `git init` + commit. Rerunnable: a <dir> that already",
-  "holds heyspex.yaml and an empty/placeholder-only specs/ is accepted, existing",
-  "files are never overwritten (an existing CLAUDE.md gets a CLAUDE.md.template",
-  "beside it), and the result lists each manifest row as created or kept. Refuses a",
-  "non-empty <dir> without heyspex.yaml, or a specs/ holding managed specs.",
-  "See init.customer-vault.ts.",
+  "pin; with --git, one initial `git init` + commit. On an EXISTING vault (<dir>",
+  "holds heyspex.yaml with a vault_id) it is a REFRESH \u2014 the repair `hs doctor`'s",
+  "vault-template row names: only missing shipped files are added, template_version",
+  "is written/updated in heyspex.yaml (every other byte and the vault_id kept),",
+  "nothing existing is ever overwritten (an existing CLAUDE.md gets a",
+  "CLAUDE.md.template beside it), the result lists each manifest row as created or",
+  "kept, and a second run writes nothing. <dir> may be any path (a satellite repo",
+  "names its vault, e.g. `hs init --customer-vault ../my-specs`). Refuses only a",
+  "non-empty <dir> that has no heyspex.yaml. See init.customer-vault.ts.",
   "",
   "Flags:",
   "  --console-url <url>  console_url value (default: the mode-aware console --",
@@ -6507,7 +6551,7 @@ init_console_fetch();
 init_registry_file();
 init_repo_identity();
 import { promises as fs } from "node:fs";
-import path3 from "node:path";
+import path4 from "node:path";
 init_vault_workspace_shared();
 var SYNC_VAULT_EXIT_UNRESOLVED = 11;
 function refuse(message) {
@@ -6558,7 +6602,7 @@ async function resolveSyncVaultTargetFromEnv(deps) {
   let markerVaultId = null;
   try {
     markerVaultId = parseVaultId(
-      await fs.readFile(path3.join(deps.vaultRoot, "heyspex.yaml"), "utf8")
+      await fs.readFile(path4.join(deps.vaultRoot, "heyspex.yaml"), "utf8")
     );
   } catch {
     markerVaultId = null;
@@ -6608,6 +6652,25 @@ init_vault_workspace_shared();
 init_parser();
 
 // spex-console/src/lib/vault-sync/pull.ts
+function detectEol(text2) {
+  const crlf = (text2.match(/\r\n/g) ?? []).length;
+  const all = (text2.match(/\n/g) ?? []).length;
+  if (all === 0) return null;
+  return crlf * 2 >= all ? "\r\n" : "\n";
+}
+function classifyHeyspexYaml(text2) {
+  if (text2 === null) return "none";
+  if (/^vault_path:[ \t]*[^\s#]/m.test(text2)) return "satellite";
+  if (/^kind:[ \t]*["']?repo-binding["']?[ \t]*$/m.test(text2)) return "repo-binding";
+  const markerKey = /^(vault_id|vault_root):/m.test(text2);
+  if (!markerKey && /^vault:/m.test(text2)) return "repo-binding";
+  return "vault";
+}
+function pullTargetRefusal(repoRoot, markerText) {
+  const kind = classifyHeyspexYaml(markerText);
+  if (kind !== "satellite" && kind !== "repo-binding") return null;
+  return `refusing to write specs/ into ${repoRoot}: its heyspex.yaml is a ${kind} marker (a code repo that names its vault elsewhere), not a vault checkout. Nothing was written. Run \`hs pull\` inside the vault's own checkout (\`hs vault resolve\` shows which one this repo is bound to).`;
+}
 function normalizeSpecRelPath(raw) {
   if (typeof raw !== "string") return null;
   let p = raw.trim();
@@ -6702,9 +6765,9 @@ function isRoutableStatus(status, type) {
   if (ROUTE_SETTABLE_STATUSES.has(status)) return true;
   return (type ?? "").toLowerCase() === "adr" && ADR_SETTABLE_STATUSES.has(status);
 }
-function matchesSelector(id, basename2, selectors) {
+function matchesSelector(id, basename3, selectors) {
   const i = id.toLowerCase();
-  const b = basename2.toLowerCase();
+  const b = basename3.toLowerCase();
   return selectors.some((raw) => {
     const s = raw.trim().toLowerCase();
     return s.length > 0 && (i === s || b === s || i.startsWith(`${s}-`) || b.startsWith(`${s}-`));
@@ -6744,20 +6807,20 @@ function decideReconcilePlan({
     const c = cloudById.get(id) ?? null;
     const primary = d ?? c;
     const relPath = reconcileRelPath(primary.relPath);
-    const basename2 = primary.basename || basenameOfRelPath(relPath);
+    const basename3 = primary.basename || basenameOfRelPath(relPath);
     const type = d?.type ?? c?.type ?? null;
     const base = {
       id,
       type,
-      basename: basename2,
+      basename: basename3,
       relPath,
       disk: view(d),
       cloud: view(c),
       ...d?.closeReason ? { closeReason: d.closeReason } : {}
     };
     if (d && isCapabilityDoc(d.relPath)) capDocsOnDisk += 1;
-    if (only.length > 0 && !matchesSelector(id, basename2, only)) continue;
-    if (skip.length > 0 && matchesSelector(id, basename2, skip)) {
+    if (only.length > 0 && !matchesSelector(id, basename3, only)) continue;
+    if (skip.length > 0 && matchesSelector(id, basename3, skip)) {
       rows.push(hold({ ...base, winner: "none" }, "skipped", "held by --skip"));
       continue;
     }
@@ -7025,10 +7088,10 @@ async function applyReconcilePlan(deps, plan) {
   }
   return summarizeResult(rows, plan, sideEffects);
 }
-function interpretPatch(requested, res, basename2, sideEffects) {
+function interpretPatch(requested, res, basename3, sideEffects) {
   const json = rec(res.json);
   if (res.status >= 200 && res.status < 300) {
-    pushSideEffects(sideEffects, basename2, json);
+    pushSideEffects(sideEffects, basename3, json);
     const coercedTo = str2(json.coerced_to) ?? str2(json.coercedTo);
     if (coercedTo && coercedTo !== requested) {
       return {
@@ -7307,16 +7370,17 @@ async function postEdgesChunk(input, specs2) {
 }
 
 // spex-console/src/lib/vault-sync/pull-io.ts
-import { promises as fs9 } from "node:fs";
+import { promises as fs9, readFileSync as readFileSync14 } from "node:fs";
+import { EOL } from "node:os";
 import nodePath2 from "node:path";
 
 // spex-console/src/lib/dev-mode.ts
 init_heyspex_home2();
 init_credentials();
-import { mkdirSync as mkdirSync5, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "node:fs";
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join10 } from "node:path";
 var CLOUD_CONSOLE_URL2 = "https://app.heyspex.com";
-var defaultReadFile3 = (p) => readFileSync10(p, "utf8");
+var defaultReadFile3 = (p) => readFileSync11(p, "utf8");
 function readCredentialsMcpToken({
   homeDir = heyspexHome2(),
   readFile = defaultReadFile3
@@ -7344,6 +7408,30 @@ function hashContent(content) {
 }
 
 // spex-console/src/lib/vault-sync/pull-io.ts
+var DEFAULT_PULL_EOL = EOL === "\r\n" ? "\r\n" : "\n";
+async function eolForPath(abs, fallback = DEFAULT_PULL_EOL) {
+  try {
+    return detectEol(await fs9.readFile(abs, "utf8")) ?? fallback;
+  } catch {
+    return fallback;
+  }
+}
+var PullTargetNotVaultError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "PullTargetNotVaultError";
+  }
+};
+function assertPullTargetIsVault(repoRoot) {
+  let text2;
+  try {
+    text2 = readFileSync14(nodePath2.join(repoRoot, "heyspex.yaml"), "utf8");
+  } catch {
+    text2 = null;
+  }
+  const refusal = pullTargetRefusal(repoRoot, text2);
+  if (refusal) throw new PullTargetNotVaultError(refusal);
+}
 var LIST_FIELDS = "id,basename,relPath,type,status,updated,updatedAt";
 var PULL_LIST_PAGE_LIMIT = 500;
 var PULL_LIST_MAX_PAGES = 2e3;
@@ -7367,10 +7455,10 @@ function resolvePullSourceUrl(explicit) {
   const raw = explicit?.trim() || process.env.HEYSPEX_PULL_SOURCE_URL?.trim() || CLOUD_CONSOLE_URL2;
   return raw.replace(/\/+$/, "");
 }
-async function getJson({ baseUrl, token, fetchImpl = fetch, scopeHeaders = {} }, path15) {
+async function getJson({ baseUrl, token, fetchImpl = fetch, scopeHeaders = {} }, path16) {
   const headers = { Accept: "application/json", ...scopeHeaders };
   if (token) headers.Authorization = `Bearer ${token}`;
-  const res = await fetchImpl(`${baseUrl}/${path15.replace(/^\/+/, "")}`, { headers });
+  const res = await fetchImpl(`${baseUrl}/${path16.replace(/^\/+/, "")}`, { headers });
   const text2 = await res.text();
   let json = null;
   try {
@@ -7535,6 +7623,12 @@ function createVaultPullDeps({
 }) {
   const http = { baseUrl, token, fetchImpl, scopeHeaders };
   const prefetched = /* @__PURE__ */ new Map();
+  let targetChecked = false;
+  const guardTarget = () => {
+    if (!localRoot || targetChecked) return;
+    assertPullTargetIsVault(nodePath2.dirname(localRoot));
+    targetChecked = true;
+  };
   return {
     listRemote: () => listRemoteSpecs(http),
     getRemoteRef: async (selector) => {
@@ -7556,7 +7650,9 @@ function createVaultPullDeps({
     finish: ledger ? () => ledger.flush() : void 0,
     listLocal: () => listLocalSpecRelPaths(localRoot ?? vaultRoot()),
     serialize: stringifySpecMarkdown,
+    eolFor: (relPath) => eolForPath(nodePath2.join(localRoot ?? vaultRoot(), relPath)),
     writeSpec: localRoot ? async (relPath, content, opts) => {
+      guardTarget();
       const abs = nodePath2.join(localRoot, relPath);
       await fs9.mkdir(nodePath2.dirname(abs), { recursive: true });
       onLocalWrite?.(relPath);
@@ -7733,7 +7829,7 @@ function say(args, text2) {
 }
 function readDiscovery(p) {
   try {
-    return readFileSync13(p, "utf-8");
+    return readFileSync15(p, "utf-8");
   } catch {
     return null;
   }
@@ -7745,7 +7841,7 @@ function resolveConsole(args) {
 }
 function readMarkerVaultId(vaultRoot2) {
   try {
-    return parseVaultId(readFileSync13(path14.join(vaultRoot2, "heyspex.yaml"), "utf8"));
+    return parseVaultId(readFileSync15(path15.join(vaultRoot2, "heyspex.yaml"), "utf8"));
   } catch {
     return null;
   }
@@ -7760,7 +7856,7 @@ function rosterSizeOf(fm, type) {
   return Array.isArray(list) ? list.filter((x) => x !== null && x !== void 0 && x !== "").length : 0;
 }
 async function walkLocal(args) {
-  const specsDir = path14.join(args.vaultRoot, "specs");
+  const specsDir = path15.join(args.vaultRoot, "specs");
   const files = [];
   async function walk(dir) {
     let entries;
@@ -7770,7 +7866,7 @@ async function walkLocal(args) {
       return;
     }
     for (const entry of entries) {
-      const full = path14.join(dir, entry.name);
+      const full = path15.join(dir, entry.name);
       if (entry.isDirectory()) {
         if (entry.name === "node_modules") continue;
         await walk(full);
@@ -7785,12 +7881,12 @@ async function walkLocal(args) {
   const contents = /* @__PURE__ */ new Map();
   let failed = 0;
   for (const abs of files) {
-    const relPath = path14.relative(specsDir, abs).split(path14.sep).join("/");
+    const relPath = path15.relative(specsDir, abs).split(path15.sep).join("/");
     try {
       const content = await fs10.readFile(abs, "utf8");
       const parsed = parseSpecFromContent(content, {
         relPath: `specs/${relPath}`,
-        basenameFallback: path14.basename(abs).replace(/\.md$/i, "")
+        basenameFallback: path15.basename(abs).replace(/\.md$/i, "")
       });
       const fm = parsed.rawFrontmatter ?? {};
       records.push({
@@ -7920,18 +8016,18 @@ function reportStamp() {
   return (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
 }
 function writeReport(vaultRoot2, payload) {
-  const dir = path14.join(vaultRoot2, ".heyspex", "index-reconcile");
-  mkdirSync6(dir, { recursive: true });
-  const file = path14.join(dir, `${reportStamp()}.json`);
-  writeFileSync6(file, `${JSON.stringify(payload, null, 2)}
+  const dir = path15.join(vaultRoot2, ".heyspex", "index-reconcile");
+  mkdirSync7(dir, { recursive: true });
+  const file = path15.join(dir, `${reportStamp()}.json`);
+  writeFileSync7(file, `${JSON.stringify(payload, null, 2)}
 `, "utf-8");
   return file;
 }
 function appendJournal(vaultRoot2, message) {
-  const heyspexDir = path14.join(vaultRoot2, ".heyspex");
-  mkdirSync6(heyspexDir, { recursive: true });
+  const heyspexDir = path15.join(vaultRoot2, ".heyspex");
+  mkdirSync7(heyspexDir, { recursive: true });
   appendFileSync(
-    path14.join(heyspexDir, "index-reconcile.log"),
+    path15.join(heyspexDir, "index-reconcile.log"),
     `[${(/* @__PURE__ */ new Date()).toISOString()}] ${message}
 `,
     "utf-8"
@@ -7961,7 +8057,7 @@ async function main() {
   if (args.apply && markerVaultId && markerVaultId !== vaultId) {
     fail(
       RECONCILE_EXIT.VAULT_UNRESOLVED,
-      `refusing --apply: it would reconcile vault ${vaultId} against ${path14.join(args.vaultRoot, "specs")}, but that repo's heyspex.yaml names vault ${markerVaultId}. Nothing was written.`
+      `refusing --apply: it would reconcile vault ${vaultId} against ${path15.join(args.vaultRoot, "specs")}, but that repo's heyspex.yaml names vault ${markerVaultId}. Nothing was written.`
     );
   }
   const account = resolveCloudAccountIdOrRefuse();
@@ -8023,11 +8119,11 @@ async function main() {
         baseUrl: consoleUrl,
         token,
         scopeHeaders: scope.headersFor("GET", "/api/specs"),
-        localRoot: path14.join(args.vaultRoot, "specs")
+        localRoot: path15.join(args.vaultRoot, "specs")
       });
       const deps = {
-        patchStatus: async (basename2, body) => {
-          const route = `/api/specs/${encodeURIComponent(basename2)}/status`;
+        patchStatus: async (basename3, body) => {
+          const route = `/api/specs/${encodeURIComponent(basename3)}/status`;
           try {
             const res = await fetch(`${consoleUrl}${route}`, {
               method: "PATCH",
@@ -8116,7 +8212,7 @@ async function main() {
     rows: final.rows
   };
   const reportPath = writeReport(args.vaultRoot, payload);
-  const reportRel = path14.relative(args.vaultRoot, reportPath).split(path14.sep).join("/");
+  const reportRel = path15.relative(args.vaultRoot, reportPath).split(path15.sep).join("/");
   if (args.json) {
     process4.stdout.write(`${JSON.stringify({ ...payload, report: reportRel })}
 `);