kushi-agents 6.2.1 → 6.4.0

package/plugin/runners/pull-onenote.mjs

@@ -1,257 +1,7 @@
 #!/usr/bin/env node
 // plugin/runners/pull-onenote.mjs
-// Deterministic OneNote pull: two-phase (enum pages, then per-page content).
-// BODY_UNAVAILABLE does NOT defer — re-resolves the section via search, then retries.
-// Writes to Evidence/<alias>/onenote/<section-file-id>/<week>/.
-//
-// Usage:
-//   node plugin/runners/pull-onenote.mjs --project <P> --alias <A> --entity <section-file-id>
-//     [--week YYYY-MM-DD] [--dry-run] [--force] [--fixture <path>]
+// Deterministic onenote pull via WorkIQ (HARD RULE per workiq-only.instructions.md).
 
-import path from 'node:path';
-import { promises as fs } from 'node:fs';
-import YAML from 'yaml';
-import { assertProject, loadConfig } from './lib/config.mjs';
-import { sourceDir } from './lib/layout.mjs';
-import { writeAtomic } from './lib/evidence.mjs';
-import { fetchAllPages, fetchWithRetry, encodeODataOp } from './lib/http.mjs';
-import { getToken, SCOPES } from './lib/identity.mjs';
-import { updateCell } from './lib/ledger.mjs';
-import { appendRunLog } from './lib/runlog.mjs';
-import { clear } from './lib/deferred.mjs';
-import { currentIsoMonday, ymd, parseYmd } from './lib/weeks.mjs';
-import { emitLearningCandidate } from './lib/learnings.mjs';
-import { readLedger, cellKey } from './lib/ledger.mjs';
+import { runCli } from './lib/csc-pull.mjs';
 
-const SOURCE = 'onenote';
-
-function parseArgs(argv) {
-  const args = { dryRun: false, force: false };
-  for (let i = 0; i < argv.length; i++) {
-    const a = argv[i];
-    if (a === '--project') args.project = argv[++i];
-    else if (a === '--alias') args.alias = argv[++i];
-    else if (a === '--entity') args.entity = argv[++i];
-    else if (a === '--week') args.week = argv[++i];
-    else if (a === '--dry-run') args.dryRun = true;
-    else if (a === '--force') args.force = true;
-    else if (a === '--fixture') args.fixture = argv[++i];
-    else if (a === '--help' || a === '-h') args.help = true;
-  }
-  return args;
-}
-
-function help() {
-  return `Usage: node pull-onenote.mjs --project <P> --alias <A> --entity <section-file-id>
-  [--week YYYY-MM-DD] [--dry-run] [--force] [--fixture <path>]`;
-}
-
-function emit(obj) { process.stdout.write(JSON.stringify(obj) + '\n'); }
-function configError(msg) { const e = new Error(msg); e.exitCode = 2; return e; }
-function authError(msg)   { const e = new Error(msg); e.exitCode = 3; return e; }
-
-async function buildClient({ fixture }) {
-  if (fixture) {
-    const data = JSON.parse(await fs.readFile(fixture, 'utf8'));
-    return makeFixtureClient(data);
-  }
-  const token = await getToken(SCOPES.graph).catch(e => { throw authError(`token fetch failed: ${e.message}`); });
-  const headers = { Authorization: `Bearer ${token}`, Accept: 'application/json' };
-  return {
-    async getSection(sectionId) {
-      try {
-        const res = await fetchWithRetry(`https://graph.microsoft.com/v1.0/me/onenote/sections/${encodeURIComponent(sectionId)}`, { headers });
-        return await res.json();
-      } catch (e) { if (e.status === 404) return null; throw e; }
-    },
-    async resolveSection(sectionFileIdOrName) {
-      // Re-resolve via search across sections (used on body-unavailable)
-      const url = `https://graph.microsoft.com/v1.0/me/onenote/sections?${encodeODataOp('$filter')}=id eq '${sectionFileIdOrName.replace(/'/g, "''")}'`;
-      try {
-        const res = await fetchWithRetry(url, { headers });
-        const body = await res.json();
-        return (body.value && body.value[0]) || null;
-      } catch { return null; }
-    },
-    async listPages(sectionId, fromIso, toIso) {
-      const filter = `lastModifiedDateTime ge ${fromIso} and lastModifiedDateTime lt ${toIso}`;
-      const url = `https://graph.microsoft.com/v1.0/me/onenote/sections/${encodeURIComponent(sectionId)}/pages?${encodeODataOp('$filter')}=${encodeURIComponent(filter)}&${encodeODataOp('$orderby')}=lastModifiedDateTime desc&${encodeODataOp('$top')}=50`;
-      const { items } = await fetchAllPages(url, { headers });
-      return items;
-    },
-    async getPageContent(pageId) {
-      const url = `https://graph.microsoft.com/v1.0/me/onenote/pages/${encodeURIComponent(pageId)}/content`;
-      try {
-        const res = await fetchWithRetry(url, { headers: { ...headers, Accept: 'text/html' } });
-        return await res.text();
-      } catch (e) {
-        if (e.status === 404 || e.status === 410) return null; // body-unavailable signal
-        throw e;
-      }
-    },
-  };
-}
-
-function makeFixtureClient(data) {
-  return {
-    async getSection(id) { return (data.section && data.section.id === id) ? data.section : null; },
-    async resolveSection(id) { return (data.resolvedSection && data.resolvedSection.id === id) ? data.resolvedSection : null; },
-    async listPages(_sid, fromIso, toIso) {
-      return (data.pages || []).filter(p => p.lastModifiedDateTime >= fromIso && p.lastModifiedDateTime < toIso);
-    },
-    async getPageContent(pageId) {
-      const p = (data.pages || []).find(p => p.id === pageId);
-      return p ? p.content : null;
-    },
-  };
-}
-
-function weekBounds(weekStartYmd) {
-  const start = parseYmd(weekStartYmd);
-  const end = new Date(start);
-  end.setDate(end.getDate() + 7);
-  return { fromIso: start.toISOString(), toIso: end.toISOString() };
-}
-
-async function main() {
-  const args = parseArgs(process.argv.slice(2));
-  if (args.help) { console.log(help()); return 0; }
-  if (!args.project || !args.alias || !args.entity) {
-    console.error(help());
-    emit({ source: SOURCE, status: 'failed', errors: [{ signature: 'bad-args', message: 'required: --project --alias --entity' }] });
-    return 2;
-  }
-  const projectRoot = await assertProject(args.project).catch(e => { throw configError(e.message); });
-  await loadConfig(projectRoot, args.alias);
-  const weekStart = args.week || ymd(currentIsoMonday());
-  const { fromIso, toIso } = weekBounds(weekStart);
-
-  // Validate entity is a OneNote section file ID (hex with dashes, 20+ chars),
-  // not a page title from discover fallback. Display names break Graph URL
-  // construction with errors like "Resource not found for the segment '30 - HCA - account team'".
-  // Fixture mode bypasses validation.
-  if (!args.fixture && !/^[0-9a-f][0-9a-f\-]{20,}$/i.test(String(args.entity).trim())) {
-    await updateCell(projectRoot, args.alias, SOURCE, args.entity, weekStart, {
-      last_status: 'failed',
-      last_error: 'entity is not a OneNote section file ID (display name fallback from discover)',
-    });
-    if (!args.dryRun) await emitLearningCandidate({ projectRoot, alias: args.alias, source: SOURCE, entity: args.entity, week: weekStart, error: { signature: 'entity-not-section-id', message: 'expected hex section file ID like 1-abc123def456...', status: null }, context: { runner: 'pull-onenote' } });
-    emit({ source: SOURCE, entity: args.entity, week: weekStart, status: 'failed', errors: [{ signature: 'entity-not-section-id', message: `entity '${args.entity}' is not a OneNote section file ID. Discover stored a section-name fallback. Replace with a hex section_file_id in boundaries.yml onenote.section_file_ids.` }] });
-    return 0;
-  }
-
-  const client = await buildClient({ fixture: args.fixture });
-  const startedAt = new Date().toISOString();
-
-  // Phase 1: section enum
-  let section;
-  try { section = await client.getSection(args.entity); }
-  catch (e) {
-    await updateCell(projectRoot, args.alias, SOURCE, args.entity, weekStart, { last_status: 'failed', last_error: e.message });
-    if (!args.dryRun) await emitLearningCandidate({ projectRoot, alias: args.alias, source: SOURCE, entity: args.entity, week: weekStart, error: { signature: 'section-fetch-failed', message: e.message, status: e.status }, context: { runner: 'pull-onenote' } });
-    emit({ source: SOURCE, entity: args.entity, week: weekStart, status: 'failed', errors: [{ message: e.message }] });
-    return 0;
-  }
-  if (!section) {
-    await updateCell(projectRoot, args.alias, SOURCE, args.entity, weekStart, { last_status: 'failed', last_error: 'section not found' });
-    emit({ source: SOURCE, entity: args.entity, week: weekStart, status: 'failed', errors: [{ signature: 'section-not-found' }] });
-    return 0;
-  }
-
-  const pages = await client.listPages(section.id, fromIso, toIso).catch(() => []);
-  if (pages.length === 0) {
-    await updateCell(projectRoot, args.alias, SOURCE, args.entity, weekStart, { last_status: 'no-activity', items_pulled: 0, section_file_id: section.id });
-    emit({ source: SOURCE, entity: args.entity, week: weekStart, status: 'no-activity', items_pulled: 0, files_written: [] });
-    return 0;
-  }
-
-  // Phase 2: per-page content fetch (re-resolves section on body-unavailable; does NOT enqueue)
-  const captures = [];
-  const bodyUnavailable = [];
-  for (const p of pages) {
-    let content = await client.getPageContent(p.id).catch(() => null);
-    if (content == null) {
-      const resolved = await client.resolveSection(args.entity);
-      if (resolved && resolved.id) {
-        content = await client.getPageContent(p.id).catch(() => null);
-      }
-    }
-    if (content == null) bodyUnavailable.push(p.id);
-    else captures.push({ page: p, content });
-  }
-
-  const outDir = path.join(sourceDir(projectRoot, args.alias, SOURCE), section.id, weekStart);
-  const filesWritten = [];
-  if (!args.dryRun) {
-    const r1 = await writeAtomic(path.join(outDir, 'pages.yml'), YAML.stringify(pages));
-    if (r1.written !== false) filesWritten.push(path.relative(projectRoot, r1.path));
-    for (const c of captures) {
-      const r = await writeAtomic(path.join(outDir, 'content', `${c.page.id}.html`), c.content);
-      if (r.written !== false) filesWritten.push(path.relative(projectRoot, r.path));
-    }
-    const r2 = await writeAtomic(path.join(outDir, 'index.md'), renderIndexMd({ section, pages, captures, bodyUnavailable, pulledAt: startedAt }), { skipIfUnchanged: false });
-    if (r2.written !== false) filesWritten.push(path.relative(projectRoot, r2.path));
-  }
-
-  const status = bodyUnavailable.length === 0 ? 'captured' : (captures.length === 0 ? 'body-unavailable' : 'partial');
-
-  if (status === 'body-unavailable' && !args.dryRun) {
-    const prior = (await readLedger(projectRoot, args.alias).catch(() => ({ cells: {} })))
-      .cells?.[cellKey(SOURCE, args.entity, weekStart)];
-    const priorOccurrences = Number(prior?.body_unavailable_runs || 0);
-    const occurrences = priorOccurrences + 1;
-    if (occurrences >= 2) {
-      await emitLearningCandidate({
-        projectRoot, alias: args.alias, source: SOURCE, entity: args.entity, week: weekStart,
-        error: { signature: 'body-unavailable', message: `OneNote section ${section.id}: ${bodyUnavailable.length}/${pages.length} pages had no body across ${occurrences} runs`, occurrences },
-        context: { runner: 'pull-onenote' },
-      });
-    }
-    await updateCell(projectRoot, args.alias, SOURCE, args.entity, weekStart, { body_unavailable_runs: occurrences });
-  }
-
-  await clear(projectRoot, args.alias, SOURCE, args.entity).catch(() => {});
-  await updateCell(projectRoot, args.alias, SOURCE, args.entity, weekStart, {
-    last_status: status,
-    items_pulled: captures.length,
-    pages_enumerated: pages.length,
-    body_unavailable: bodyUnavailable.length || undefined,
-    section_file_id: section.id,
-  });
-
-  if (!args.dryRun) {
-    await appendRunLog(projectRoot, { runner: 'pull-onenote', alias: args.alias, entity: args.entity, week: weekStart, status, pages_enumerated: pages.length, pages_captured: captures.length });
-  }
-
-  emit({
-    source: SOURCE, entity: args.entity, week: weekStart, status,
-    items_pulled: captures.length, pages_enumerated: pages.length, body_unavailable: bodyUnavailable,
-    files_written: filesWritten, ledger_key: `onenote::${args.entity}::${weekStart}`,
-  });
-  return 0;
-}
-
-function renderIndexMd({ section, pages, captures, bodyUnavailable, pulledAt }) {
-  const lines = [
-    `# OneNote — ${section.displayName || section.id}`,
-    '',
-    `- section_id: ${section.id}`,
-    `- pages_enumerated: ${pages.length}`,
-    `- pages_captured: ${captures.length}`,
-    `- body_unavailable: ${bodyUnavailable.length}`,
-    `- pulled_at: ${pulledAt}`,
-    '',
-    '## Pages',
-  ];
-  for (const p of pages) {
-    const captured = captures.find(c => c.page.id === p.id) ? '✓' : '✗';
-    lines.push(`- [${captured}] ${p.lastModifiedDateTime} — **${p.title || p.id}**`);
-  }
-  lines.push('');
-  return lines.join('\n');
-}
-
-main().then(code => { process.exitCode = code; }).catch(e => {
-  emit({ source: SOURCE, status: 'failed', errors: [{ message: e.message, code: e.exitCode || 'unknown' }] });
-  process.exitCode = e.exitCode || 1;
-});
+runCli('onenote').then(code => { process.exitCode = code; });

package/plugin/runners/pull-sharepoint.mjs

@@ -1,288 +1,7 @@
 #!/usr/bin/env node
 // plugin/runners/pull-sharepoint.mjs
-// Deterministic SharePoint pull (Graph REST): one site per call, one ISO week.
-// - Cross-tenant filter via isAllowedTenant (#29)
-// - One file per item (#28)
-// - Depth-1+ traversal: drive-wide search PLUS root + each top-level folder children
-// - External-link extraction: harvests http(s) URLs from item descriptions/webUrls
-// Writes to Evidence/_shared/sharepoint/<site-hash>/<week>/items/<safe-id>.yml
-//        + Evidence/_shared/sharepoint/<site-hash>/<week>/index.md
-//        + Evidence/_shared/sharepoint/<site-hash>/<week>/external-links.md
+// Deterministic sharepoint pull via WorkIQ (HARD RULE per workiq-only.instructions.md).
 
-import path from 'node:path';
-import { promises as fs } from 'node:fs';
-import YAML from 'yaml';
-import { assertProject, loadConfig } from './lib/config.mjs';
-import { sourceDir } from './lib/layout.mjs';
-import { writeAtomic, safeSegment } from './lib/evidence.mjs';
-import { fetchAllPages, isAllowedTenant } from './lib/http.mjs';
-import { getToken, SCOPES } from './lib/identity.mjs';
-import { updateCell } from './lib/ledger.mjs';
-import { appendRunLog } from './lib/runlog.mjs';
-import { enqueue, clear } from './lib/deferred.mjs';
-import { shortHash } from './lib/dedup.mjs';
-import { currentIsoMonday, ymd, parseYmd } from './lib/weeks.mjs';
-import { emitLearningCandidate } from './lib/learnings.mjs';
+import { runCli } from './lib/csc-pull.mjs';
 
-const SOURCE = 'sharepoint';
-
-function parseArgs(argv) {
-  const args = { dryRun: false, force: false };
-  for (let i = 0; i < argv.length; i++) {
-    const a = argv[i];
-    if (a === '--project') args.project = argv[++i];
-    else if (a === '--alias') args.alias = argv[++i];
-    else if (a === '--entity') args.entity = argv[++i];
-    else if (a === '--allowed-tenants') args.allowedTenants = argv[++i];
-    else if (a === '--week') args.week = argv[++i];
-    else if (a === '--dry-run') args.dryRun = true;
-    else if (a === '--force') args.force = true;
-    else if (a === '--fixture') args.fixture = argv[++i];
-    else if (a === '--help' || a === '-h') args.help = true;
-  }
-  return args;
-}
-
-function help() {
-  return `Usage: node pull-sharepoint.mjs --project <P> --alias <A> --entity <site-url>
-  [--allowed-tenants <comma,list>] [--week YYYY-MM-DD] [--dry-run] [--force] [--fixture <path>]`;
-}
-
-function emit(obj) { process.stdout.write(JSON.stringify(obj) + '\n'); }
-function configError(msg) { const e = new Error(msg); e.exitCode = 2; return e; }
-function authError(msg)   { const e = new Error(msg); e.exitCode = 3; return e; }
-
-async function buildClient({ fixture }) {
-  if (fixture) {
-    const data = JSON.parse(await fs.readFile(fixture, 'utf8'));
-    return makeFixtureClient(data);
-  }
-  const token = await getToken(SCOPES.graph).catch(e => { throw authError(`token fetch failed: ${e.message}`); });
-  const headers = { Authorization: `Bearer ${token}`, Accept: 'application/json' };
-  return {
-    async listSiteItems(siteUrl, fromIso, toIso) {
-      const u = new URL(siteUrl);
-      const sitePath = `${u.hostname}:${u.pathname}`;
-      const siteRes = await (await fetch(`https://graph.microsoft.com/v1.0/sites/${encodeURIComponent(sitePath)}`, { headers })).json();
-      if (!siteRes.id) return [];
-
-      const drivesRes = await (await fetch(`https://graph.microsoft.com/v1.0/sites/${siteRes.id}/drives?$top=50`, { headers })).json();
-      const drives = drivesRes.value || [];
-
-      const inWindow = (m) => m && m >= fromIso && m < toIso;
-      const collected = new Map();
-
-      for (const drv of drives) {
-        try {
-          const searchUrl = `https://graph.microsoft.com/v1.0/drives/${drv.id}/root/search(q='''')?$top=200`;
-          const { items } = await fetchAllPages(searchUrl, { headers });
-          for (const it of items) {
-            if (inWindow(it.lastModifiedDateTime)) {
-              it.__drive_id = drv.id; it.__drive_name = drv.name;
-              collected.set(it.id, it);
-            }
-          }
-        } catch (_) { /* fall through to depth-1 walk */ }
-
-        try {
-          const rootUrl = `https://graph.microsoft.com/v1.0/drives/${drv.id}/root/children?$top=200`;
-          const { items: rootChildren } = await fetchAllPages(rootUrl, { headers });
-          for (const child of rootChildren) {
-            child.__drive_id = drv.id; child.__drive_name = drv.name;
-            if (inWindow(child.lastModifiedDateTime)) collected.set(child.id, child);
-            if (child.folder) {
-              try {
-                const subUrl = `https://graph.microsoft.com/v1.0/drives/${drv.id}/items/${child.id}/children?$top=200`;
-                const { items: subItems } = await fetchAllPages(subUrl, { headers });
-                for (const it of subItems) {
-                  it.__drive_id = drv.id; it.__drive_name = drv.name;
-                  it.__parent_folder = child.name;
-                  if (inWindow(it.lastModifiedDateTime)) collected.set(it.id, it);
-                }
-              } catch (_) { /* skip subfolder on error */ }
-            }
-          }
-        } catch (_) { /* drive may be empty/unreachable */ }
-      }
-
-      return [...collected.values()];
-    },
-  };
-}
-
-function makeFixtureClient(data) {
-  return {
-    async listSiteItems(siteUrl, fromIso, toIso) {
-      const items = (data.itemsBySite && data.itemsBySite[siteUrl]) || [];
-      return items.filter(i => i.lastModifiedDateTime >= fromIso && i.lastModifiedDateTime < toIso);
-    },
-  };
-}
-
-function weekBounds(weekStartYmd) {
-  const start = parseYmd(weekStartYmd);
-  const end = new Date(start);
-  end.setDate(end.getDate() + 7);
-  return { fromIso: start.toISOString(), toIso: end.toISOString() };
-}
-
-const URL_RE = /https?:\/\/[^\s<>"`)\]]+/g;
-
-function extractLinks(item) {
-  const blobs = [
-    item.webUrl, item.description, item.name,
-    item.parentReference && item.parentReference.path,
-  ].filter(Boolean).join('\n');
-  const set = new Set();
-  for (const m of blobs.matchAll(URL_RE)) {
-    let u = m[0].replace(/[).,;]+$/, '');
-    set.add(u);
-  }
-  return [...set];
-}
-
-function classifyExternal(siteUrl, link) {
-  try {
-    const a = new URL(siteUrl);
-    const b = new URL(link);
-    return b.hostname.toLowerCase() !== a.hostname.toLowerCase();
-  } catch { return false; }
-}
-
-async function main() {
-  const args = parseArgs(process.argv.slice(2));
-  if (args.help) { console.log(help()); return 0; }
-  if (!args.project || !args.alias || !args.entity) {
-    console.error(help());
-    emit({ source: SOURCE, status: 'failed', errors: [{ signature: 'bad-args', message: 'required: --project --alias --entity' }] });
-    return 2;
-  }
-  const projectRoot = await assertProject(args.project).catch(e => { throw configError(e.message); });
-  const cfg = await loadConfig(projectRoot, args.alias);
-  const weekStart = args.week || ymd(currentIsoMonday());
-  const { fromIso, toIso } = weekBounds(weekStart);
-
-  const tenantList = (args.allowedTenants || (cfg.merged && cfg.merged.sharepoint && cfg.merged.sharepoint.allowed_tenants && cfg.merged.sharepoint.allowed_tenants.join(',')) || '')
-    .split(',').map(s => s.trim()).filter(Boolean);
-
-  if (tenantList.length > 0 && !isAllowedTenant(args.entity, tenantList)) {
-    await updateCell(projectRoot, args.alias, SOURCE, args.entity, weekStart, {
-      last_status: 'failed',
-      last_error: `site tenant not in allowed list: ${tenantList.join(',')}`,
-    });
-    emit({
-      source: SOURCE, entity: args.entity, week: weekStart, status: 'failed',
-      errors: [{ signature: 'cross-tenant-blocked', message: 'site host not allowed', allowed_tenants: tenantList }],
-    });
-    return 0;
-  }
-
-  const client = await buildClient({ fixture: args.fixture });
-  const startedAt = new Date().toISOString();
-
-  let items;
-  try { items = await client.listSiteItems(args.entity, fromIso, toIso); }
-  catch (e) {
-    const retryable = !e.status || [429, 502, 503, 504].includes(e.status);
-    await updateCell(projectRoot, args.alias, SOURCE, args.entity, weekStart, { last_status: retryable ? 'deferred' : 'failed', last_error: e.message });
-    if (retryable && !args.dryRun) await enqueue(projectRoot, args.alias, { source: SOURCE, entity: args.entity, weekStart, signature: 'fetch-failed', reason: e.message });
-    if (!retryable && !args.dryRun) await emitLearningCandidate({ projectRoot, alias: args.alias, source: SOURCE, entity: args.entity, week: weekStart, error: { signature: 'fetch-failed', message: e.message, status: e.status }, context: { runner: 'pull-sharepoint' } });
-    emit({ source: SOURCE, entity: args.entity, week: weekStart, status: retryable ? 'deferred' : 'failed', errors: [{ message: e.message, status: e.status }] });
-    return retryable ? 1 : 0;
-  }
-
-  const siteHash = shortHash(args.entity);
-
-  if (items.length === 0) {
-    await updateCell(projectRoot, args.alias, SOURCE, args.entity, weekStart, { last_status: 'no-activity', items_pulled: 0, site_hash: siteHash });
-    emit({ source: SOURCE, entity: args.entity, week: weekStart, status: 'no-activity', items_pulled: 0, files_written: [] });
-    return 0;
-  }
-
-  const outDir = path.join(sourceDir(projectRoot, args.alias, SOURCE), siteHash, weekStart);
-  const filesWritten = [];
-  const linkAgg = new Map();
-
-  if (!args.dryRun) {
-    for (const it of items) {
-      const id = it.id || shortHash(it.webUrl || it.name || JSON.stringify(it));
-      const links = extractLinks(it);
-      const itemRecord = { ...it, _links: links };
-      const r = await writeAtomic(path.join(outDir, 'items', `${safeSegment(id)}.yml`), YAML.stringify(itemRecord));
-      if (r.written !== false) filesWritten.push(path.relative(projectRoot, r.path));
-      for (const lk of links) {
-        if (!classifyExternal(args.entity, lk)) continue;
-        if (!linkAgg.has(lk)) linkAgg.set(lk, new Set());
-        linkAgg.get(lk).add(it.name || it.id);
-      }
-    }
-    const r2 = await writeAtomic(path.join(outDir, 'index.md'), renderIndexMd({ siteUrl: args.entity, items, weekStart, pulledAt: startedAt }), { skipIfUnchanged: false });
-    if (r2.written !== false) filesWritten.push(path.relative(projectRoot, r2.path));
-
-    if (linkAgg.size > 0) {
-      const r3 = await writeAtomic(path.join(outDir, 'external-links.md'), renderLinksMd({ siteUrl: args.entity, linkAgg, weekStart }), { skipIfUnchanged: false });
-      if (r3.written !== false) filesWritten.push(path.relative(projectRoot, r3.path));
-    }
-  }
-
-  await clear(projectRoot, args.alias, SOURCE, args.entity).catch(() => {});
-
-  await updateCell(projectRoot, args.alias, SOURCE, args.entity, weekStart, {
-    last_status: 'captured',
-    items_pulled: items.length,
-    site_hash: siteHash,
-    external_links: linkAgg.size,
-  });
-
-  if (!args.dryRun) {
-    await appendRunLog(projectRoot, { runner: 'pull-sharepoint', alias: args.alias, entity: args.entity, week: weekStart, status: 'captured', items_pulled: items.length, external_links: linkAgg.size });
-  }
-
-  emit({
-    source: SOURCE, entity: args.entity, week: weekStart, status: 'captured',
-    items_pulled: items.length, site_hash: siteHash, external_links: linkAgg.size,
-    files_written: filesWritten, ledger_key: `sharepoint::${args.entity}::${weekStart}`,
-  });
-  return 0;
-}
-
-function renderIndexMd({ siteUrl, items, weekStart, pulledAt }) {
-  const lines = [
-    `# SharePoint - ${siteUrl} - week ${weekStart}`,
-    '',
-    `- site_url: ${siteUrl}`,
-    `- week_start: ${weekStart}`,
-    `- items: ${items.length}`,
-    `- pulled_at: ${pulledAt}`,
-    '',
-    '## Items',
-  ];
-  for (const it of items) {
-    const drv = it.__drive_name ? ` _[${it.__drive_name}${it.__parent_folder ? '/' + it.__parent_folder : ''}]_` : '';
-    lines.push(`- [${it.lastModifiedDateTime}] **${it.name || it.id}**${drv} - ${it.webUrl || ''}`);
-  }
-  lines.push('');
-  return lines.join('\n');
-}
-
-function renderLinksMd({ siteUrl, linkAgg, weekStart }) {
-  const lines = [
-    `# SharePoint external links - ${siteUrl} - week ${weekStart}`,
-    '',
-    `- site_url: ${siteUrl}`,
-    `- week_start: ${weekStart}`,
-    `- links: ${linkAgg.size}`,
-    '',
-    '## External links',
-  ];
-  for (const [link, sources] of [...linkAgg.entries()].sort()) {
-    lines.push(`- ${link} - referenced by: ${[...sources].join(', ')}`);
-  }
-  lines.push('');
-  return lines.join('\n');
-}
-
-main().then(code => { process.exitCode = code; }).catch(e => {
-  emit({ source: SOURCE, status: 'failed', errors: [{ message: e.message, code: e.exitCode || 'unknown' }] });
-  process.exitCode = e.exitCode || 1;
-});
+runCli('sharepoint').then(code => { process.exitCode = code; });