mindgraph-mcp 0.18.0 → 0.19.0

package/dist/cli.js

@@ -65,8 +65,8 @@ var init_dist = __esm({
         this.retryBackoffMs = config.retryBackoffMs ?? 1e3;
       }
       // ---- HTTP helpers ----
-      async request(method, path7, body) {
-        const url = `${this.baseUrl}${path7}`;
+      async request(method, path8, body) {
+        const url = `${this.baseUrl}${path8}`;
         const requestId = createRequestId();
         const init = {
           method,
@@ -91,13 +91,14 @@ var init_dist = __esm({
               parsed = text2;
             }
             const err5 = new MindGraphError(
-              `${method} ${path7} failed: ${res.status}`,
+              `${method} ${path8} failed: ${res.status}`,
               res.status,
               parsed
             );
             if (res.status === 503 && attempt < this.maxRetries) {
               lastError = err5;
-              const delay = this.retryBackoffMs * 2 ** attempt;
+              const retryAfterSecs = Number(res.headers.get("retry-after"));
+              const delay = Number.isFinite(retryAfterSecs) && retryAfterSecs > 0 ? Math.min(retryAfterSecs * 1e3, 1e4) : this.retryBackoffMs * 2 ** attempt;
               await new Promise((r) => setTimeout(r, delay));
               continue;
             }
@@ -109,17 +110,17 @@ var init_dist = __esm({
         }
         throw lastError;
       }
-      get(path7) {
-        return this.request("GET", path7);
+      get(path8) {
+        return this.request("GET", path8);
       }
-      post(path7, body) {
-        return this.request("POST", path7, body);
+      post(path8, body) {
+        return this.request("POST", path8, body);
       }
-      patch(path7, body) {
-        return this.request("PATCH", path7, body);
+      patch(path8, body) {
+        return this.request("PATCH", path8, body);
       }
-      del(path7) {
-        return this.request("DELETE", path7);
+      del(path8) {
+        return this.request("DELETE", path8);
       }
       // ---- Health ----
       async health() {
@@ -148,6 +149,52 @@ var init_dist = __esm({
       async entity(req) {
         return this.post("/reality/entity", req);
       }
+      async series(req) {
+        return this.post("/reality/series", req);
+      }
+      async createSeries(req) {
+        return this.post("/reality/series", { action: "create", ...req });
+      }
+      async appendSeries(req) {
+        return this.post("/reality/series", { action: "append", ...req });
+      }
+      async seriesWindow(req) {
+        return this.post("/reality/series", { action: "window", ...req });
+      }
+      async aggregateSeries(req) {
+        return this.post("/reality/series", { action: "aggregate", ...req });
+      }
+      async latestSeries(seriesUid, options) {
+        return this.post("/reality/series", {
+          action: "latest",
+          series_uid: seriesUid,
+          ...options
+        });
+      }
+      async listSeriesForEntity(entityUid, options) {
+        return this.post("/reality/series", {
+          action: "list_for_entity",
+          entity_uid: entityUid,
+          ...options
+        });
+      }
+      async batchLatestSeries(entityUids, options) {
+        return this.post("/reality/series", {
+          action: "batch_latest",
+          entity_uids: entityUids,
+          ...options
+        });
+      }
+      async batchAggregateSeries(req) {
+        return this.post("/reality/series", { action: "batch_aggregate", ...req });
+      }
+      async deleteSeries(seriesUid, options) {
+        return this.post("/reality/series", {
+          action: "delete_series",
+          series_uid: seriesUid,
+          ...options
+        });
+      }
       /** Convenience: create or find an entity by label. */
       async findOrCreateEntity(label, props, agentId) {
         return this.post("/reality/entity", {
@@ -717,6 +764,20 @@ var init_dist = __esm({
       async getOntologySchema(id) {
         return this.get(`/v1/ontology/schemas/${seg(id)}`);
       }
+      async createOntologySeriesBinding(schemaId, request) {
+        return this.post(`/v1/ontology/schemas/${seg(schemaId)}/series-bindings`, request);
+      }
+      async syncOntologySeriesBinding(bindingId, mode) {
+        return this.post(
+          `/v1/ontology/series-bindings/${seg(bindingId)}/sync`,
+          mode ? { mode } : {}
+        );
+      }
+      async archiveOntologySeriesBinding(schemaId, bindingId) {
+        return this.del(
+          `/v1/ontology/schemas/${seg(schemaId)}/series-bindings/${seg(bindingId)}`
+        );
+      }
       async createOntologySchema(req) {
         return this.post("/v1/ontology/schemas", req);
       }
@@ -988,14 +1049,14 @@ function unavailabilityCaveats(reason, message) {
   }
   return caveats;
 }
-function normalizePath(path7) {
-  return path7.replaceAll("\\", "/").replace(/^\.\//, "");
+function normalizePath(path8) {
+  return path8.replaceAll("\\", "/").replace(/^\.\//, "");
 }
 function normalizeSignature(signature) {
   return signature.replace(/\s+/g, " ").trim();
 }
-function languageFromPath(path7) {
-  const extension = (0, import_node_path2.extname)(path7).toLowerCase();
+function languageFromPath(path8) {
+  const extension = (0, import_node_path2.extname)(path8).toLowerCase();
   return {
     ".c": "c",
     ".cc": "cpp",
@@ -1158,7 +1219,7 @@ function codeRefIdentityKey(ref) {
     }
   };
 }
-var import_node_child_process, import_node_fs2, import_promises, import_node_os2, import_node_path2, import_node_crypto2, UnknownRepositoryError, DEFAULT_TIMEOUT_MS, DEFAULT_STATUS_TTL_MS, MAX_OUTPUT_BYTES, CodegraphAdapter;
+var import_node_child_process, import_node_fs2, import_promises, import_node_os2, import_node_path2, import_node_crypto3, UnknownRepositoryError, DEFAULT_TIMEOUT_MS, DEFAULT_STATUS_TTL_MS, MAX_OUTPUT_BYTES, CodegraphAdapter;
 var init_codegraph = __esm({
   "src/codegraph.ts"() {
     "use strict";
@@ -1167,7 +1228,7 @@ var init_codegraph = __esm({
     import_promises = require("fs/promises");
     import_node_os2 = require("os");
     import_node_path2 = require("path");
-    import_node_crypto2 = require("crypto");
+    import_node_crypto3 = require("crypto");
     UnknownRepositoryError = class extends Error {
       constructor(repo) {
         super(
@@ -1296,7 +1357,7 @@ var init_codegraph = __esm({
         } catch {
         }
         (0, import_node_fs2.mkdirSync)(identityDir, { recursive: true, mode: 448 });
-        const generated = (0, import_node_crypto2.randomUUID)();
+        const generated = (0, import_node_crypto3.randomUUID)();
         try {
           (0, import_node_fs2.writeFileSync)(identityFile, `${generated}
 `, {
@@ -2308,7 +2369,7 @@ function windowsCommand(harness) {
 function installHookRunner(sourceFile, homeDir, version) {
   const target = import_node_path4.default.join(homeDir || import_node_os4.default.homedir(), RUNNER_RELATIVE);
   import_node_fs4.default.mkdirSync(import_node_path4.default.dirname(target), { recursive: true });
-  const temporary = `${target}.${process.pid}.${import_node_crypto4.default.randomUUID()}.tmp`;
+  const temporary = `${target}.${process.pid}.${import_node_crypto5.default.randomUUID()}.tmp`;
   import_node_fs4.default.copyFileSync(sourceFile, temporary);
   import_node_fs4.default.renameSync(temporary, target);
   const versionPath = import_node_path4.default.join(homeDir || import_node_os4.default.homedir(), RUNNER_VERSION_RELATIVE);
@@ -2478,7 +2539,7 @@ function entryHasOwnedHook(value) {
 }
 function writeSettings(file, settings) {
   import_node_fs4.default.mkdirSync(import_node_path4.default.dirname(file), { recursive: true });
-  const temporary = `${file}.${process.pid}.${import_node_crypto4.default.randomUUID()}.tmp`;
+  const temporary = `${file}.${process.pid}.${import_node_crypto5.default.randomUUID()}.tmp`;
   import_node_fs4.default.writeFileSync(temporary, `${JSON.stringify(settings, null, 2)}
 `, {
     mode: 384
@@ -2554,14 +2615,14 @@ function installCodexHooks(scope, projectDir = process.cwd(), codexHomeDir) {
 function uninstallCodexHooks(scope, projectDir = process.cwd(), codexHomeDir) {
   return uninstallHooks("codex", scope, projectDir, codexHomeDir);
 }
-var import_node_fs4, import_node_os4, import_node_path4, import_node_crypto4, OWNER_MARKER, RUNNER_RELATIVE, RUNNER_VERSION_RELATIVE;
+var import_node_fs4, import_node_os4, import_node_path4, import_node_crypto5, OWNER_MARKER, RUNNER_RELATIVE, RUNNER_VERSION_RELATIVE;
 var init_hook_installer = __esm({
   "src/hook-installer.ts"() {
     "use strict";
     import_node_fs4 = __toESM(require("fs"));
     import_node_os4 = __toESM(require("os"));
     import_node_path4 = __toESM(require("path"));
-    import_node_crypto4 = __toESM(require("crypto"));
+    import_node_crypto5 = __toESM(require("crypto"));
     OWNER_MARKER = "--owner mindgraph";
     RUNNER_RELATIVE = ".mindgraph/bin/mindgraph-hook.cjs";
     RUNNER_VERSION_RELATIVE = `${RUNNER_RELATIVE}.version`;
@@ -2603,7 +2664,7 @@ function fileDescriptor(root, absolute) {
   const content = import_node_fs5.default.readFileSync(absolute, "utf8");
   return {
     logical_path: import_node_path5.default.relative(root, absolute).split(import_node_path5.default.sep).join("/"),
-    content_hash: import_node_crypto5.default.createHash("sha256").update(content).digest("hex"),
+    content_hash: import_node_crypto6.default.createHash("sha256").update(content).digest("hex"),
     bytes: Buffer.byteLength(content),
     content
   };
@@ -2716,11 +2777,11 @@ async function scanRepository(remote, repository, requested, provider, agentId)
     files: results
   };
 }
-var import_node_crypto5, import_node_fs5, import_node_path5, ok2, err2, SYNC_TOOL;
+var import_node_crypto6, import_node_fs5, import_node_path5, ok2, err2, SYNC_TOOL;
 var init_sync_tool = __esm({
   "src/sync-tool.ts"() {
     "use strict";
-    import_node_crypto5 = __toESM(require("crypto"));
+    import_node_crypto6 = __toESM(require("crypto"));
     import_node_fs5 = __toESM(require("fs"));
     import_node_path5 = __toESM(require("path"));
     init_codegraph();
@@ -3121,15 +3182,15 @@ function renderTraversal(response) {
   const labelByUid = /* @__PURE__ */ new Map();
   for (const node of nodes) labelByUid.set(str(node.uid), str(node.label) || "?");
   if (paths.length > 0) {
-    const items = paths.map((raw) => obj(raw)).filter((path7) => Boolean(path7)).map((path7, index) => {
-      const uids = Array.isArray(path7.node_uids) ? path7.node_uids.map(String) : [];
-      const labels = Array.isArray(path7.labels) ? path7.labels.map(String) : Array.isArray(path7.nodes) ? path7.nodes.map((hop) => {
+    const items = paths.map((raw) => obj(raw)).filter((path8) => Boolean(path8)).map((path8, index) => {
+      const uids = Array.isArray(path8.node_uids) ? path8.node_uids.map(String) : [];
+      const labels = Array.isArray(path8.labels) ? path8.labels.map(String) : Array.isArray(path8.nodes) ? path8.nodes.map((hop) => {
         const hopNode = obj(hop);
         return str(hopNode?.label) || labelByUid.get(str(hopNode?.uid) || "") || str(hop) || "?";
       }) : [];
       const route = labels.length > 0 ? labels.join(" \u2192 ") : uids.join(" \u2192 ") || "(path)";
-      const cost = num(path7.cost) ?? num(path7.path_cost);
-      const confidence = num(path7.path_confidence);
+      const cost = num(path8.cost) ?? num(path8.path_cost);
+      const confidence = num(path8.path_confidence);
       const meta = [
         cost !== void 0 ? `cost ${cost}` : void 0,
         confidence !== void 0 ? `confidence ${confidence}` : void 0
@@ -3362,6 +3423,9 @@ async function handleTool(client2, name, args) {
       case "mindgraph_retrieve":
         result = await handleRetrieve(client2, args);
         break;
+      case "mindgraph_series_query":
+        result = await handleSeriesQuery(client2, args);
+        break;
       case "mindgraph_ingest":
         result = await handleIngest(client2, args);
         break;
@@ -3406,12 +3470,36 @@ async function handleTool(client2, name, args) {
     return err3(errorDetail(e));
   }
 }
+async function handleSeriesQuery(client2, args) {
+  const action = typeof args.action === "string" ? args.action : "";
+  if (!["list_for_entity", "latest", "window", "aggregate"].includes(action)) {
+    return err3(`Unknown series query action: ${action}`);
+  }
+  if (action === "list_for_entity" && typeof args.entity_uid !== "string") {
+    return err3("entity_uid is required for action='list_for_entity'");
+  }
+  if (action !== "list_for_entity" && typeof args.series_uid !== "string") {
+    return err3(`series_uid is required for action='${action}'`);
+  }
+  if ((action === "window" || action === "aggregate") && (typeof args.from !== "number" || typeof args.to !== "number")) {
+    return err3(`from and to are required for action='${action}'`);
+  }
+  if (action === "aggregate" && (typeof args.bucket !== "string" || typeof args.agg !== "string")) {
+    return err3("bucket and agg are required for action='aggregate'");
+  }
+  return ok3(
+    await client2.series(args)
+  );
+}
 async function handleCapture(client2, args) {
   const {
     action,
     label,
     summary,
     content,
+    name,
+    description,
+    license,
     session_uid,
     work_uid,
     execution_uid,
@@ -3446,6 +3534,41 @@ async function handleCapture(client2, args) {
           agent_id
         })
       );
+    case "skill": {
+      if (!name) return err3("name is required for action=skill");
+      if (!description) return err3("description is required for action=skill");
+      if (content === void 0) return err3("content is required for action=skill");
+      const hasProvenance = [session_uid, work_uid, execution_uid].some(
+        (uid) => typeof uid === "string" && uid.length > 0
+      ) || Array.isArray(summarizes_uids) && summarizes_uids.some((uid) => typeof uid === "string" && uid.length > 0);
+      if (!hasProvenance) {
+        return err3(
+          "at least one of session_uid, work_uid, execution_uid, or summarizes_uids is required for action=skill"
+        );
+      }
+      return ok3(
+        await client2.distill({
+          label,
+          output_type: "skill",
+          summary,
+          confidence,
+          salience,
+          session_uid,
+          work_uid,
+          execution_uid,
+          idempotency_key,
+          supersedes_uid,
+          summarizes_uids,
+          props: {
+            name,
+            description,
+            content,
+            ...license ? { license } : {}
+          },
+          agent_id
+        })
+      );
+    }
     case "journal": {
       if (!content) return err3("content is required for action=journal");
       const journalProps = { content };
@@ -4433,7 +4556,7 @@ var init_tools = __esm({
     TOOLS = [
       {
         name: "mindgraph_capture",
-        description: "Capture knowledge into the graph. Use 'entity' for people/orgs/places/events/nations/concepts (auto-deduplicates \u2014 safe to call even if already exists), 'observation' for factual statements, 'source' for documents/URLs, 'snippet' for quotes from a source, and 'concept' for abstract ideas. Use 'journal' for quick personal notes and 'lesson' for a durable learning attributable to a session or source nodes. Prefer 'entity'/'observation' for objective facts, 'journal' for informal notes, and 'lesson' only for reusable knowledge.",
+        description: "Capture knowledge into the graph. Use 'entity' for people/orgs/places/events/nations/concepts (auto-deduplicates \u2014 safe to call even if already exists), 'observation' for factual statements, 'source' for documents/URLs, 'snippet' for quotes from a source, and 'concept' for abstract ideas. Use 'journal' for quick personal notes, 'lesson' for a durable learning, and 'skill' for a reusable procedure authored from completed work. Skill capture always creates a candidate requiring admin review; it never publishes. Skill names must be 1-64 lowercase a-z, digits, or hyphens, with no leading/trailing/consecutive hyphens and no 'anthropic' or 'claude'. Provide at least one provenance field and write instructions, not a transcript dump.",
         inputSchema: {
           type: "object",
           properties: {
@@ -4446,7 +4569,8 @@ var init_tools = __esm({
                 "snippet",
                 "concept",
                 "journal",
-                "lesson"
+                "lesson",
+                "skill"
               ],
               description: "Type of knowledge to capture"
             },
@@ -4460,11 +4584,30 @@ var init_tools = __esm({
             },
             content: {
               type: "string",
-              description: "Journal content/body text (for action=journal)"
+              maxLength: 65536,
+              description: "Journal body (action=journal) or complete SKILL.md instructions, at most 64 KiB UTF-8 (action=skill)"
+            },
+            name: {
+              type: "string",
+              minLength: 1,
+              maxLength: 64,
+              pattern: "^(?!.*(?:anthropic|claude))(?!-)(?!.*--)[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
+              description: "Stable skill identifier using lowercase a-z, digits, and hyphens (for action=skill)"
+            },
+            description: {
+              type: "string",
+              minLength: 1,
+              maxLength: 1024,
+              description: "When the skill should be used; XML tags are rejected (for action=skill)"
+            },
+            license: {
+              type: "string",
+              description: "Optional skill license (for action=skill)"
             },
             session_uid: {
               type: "string",
-              description: "Session UID that produced a lesson (for action=lesson)"
+              minLength: 1,
+              description: "Session UID that produced a lesson or skill"
             },
             work_uid: {
               type: "string",
@@ -4485,7 +4628,8 @@ var init_tools = __esm({
             summarizes_uids: {
               type: "array",
               items: { type: "string" },
-              description: "Source node UIDs the lesson was learned from (for action=lesson)"
+              minItems: 1,
+              description: "Source node UIDs the lesson or skill was learned from"
             },
             entity_type: {
               type: "string",
@@ -4552,7 +4696,24 @@ var init_tools = __esm({
               description: "Agent identity"
             }
           },
-          required: ["action", "label"]
+          required: ["action", "label"],
+          allOf: [
+            {
+              if: {
+                properties: { action: { const: "skill" } },
+                required: ["action"]
+              },
+              then: {
+                required: ["name", "description", "content"],
+                anyOf: [
+                  { required: ["session_uid"] },
+                  { required: ["work_uid"] },
+                  { required: ["execution_uid"] },
+                  { required: ["summarizes_uids"] }
+                ]
+              }
+            }
+          ]
         }
       },
       {
@@ -5138,6 +5299,42 @@ var init_tools = __esm({
           required: ["action"]
         }
       },
+      {
+        name: "mindgraph_series_query",
+        description: "Read dense numeric time series without placing raw points in general retrieval context. Use list_for_entity to discover series, latest for cached statistics, window for [from,to) keyset pages, and aggregate for bounded calendar buckets.",
+        inputSchema: {
+          type: "object",
+          additionalProperties: false,
+          properties: {
+            action: {
+              type: "string",
+              enum: ["list_for_entity", "latest", "window", "aggregate"]
+            },
+            entity_uid: { type: "string" },
+            series_uid: { type: "string" },
+            from: { type: "number" },
+            to: { type: "number" },
+            cursor: { type: "number" },
+            limit: { type: "number", minimum: 1, maximum: 1e4 },
+            bucket: {
+              type: "string",
+              enum: ["year", "quarter", "month", "week", "day", "hour"]
+            },
+            agg: {
+              type: "string",
+              enum: ["sum", "mean", "min", "max", "count", "std_dev", "last"]
+            },
+            fill: { type: "string", enum: ["none", "null", "prev"] }
+          },
+          required: ["action"]
+        },
+        annotations: {
+          readOnlyHint: true,
+          destructiveHint: false,
+          idempotentHint: true,
+          openWorldHint: false
+        }
+      },
       {
         name: "mindgraph_ingest",
         description: "Ingest long-form content (articles, transcripts, documents, meeting notes) into the knowledge graph. The pipeline automatically chunks the text, extracts entities/claims/relationships via LLM, and deduplicates against existing nodes. Use 'chunk' for a single passage (synchronous), 'document' for full documents (async \u2014 returns a job ID), 'session' for conversation transcripts. Use 'job_status' to check progress. For short individual facts, use the specific cognitive tools instead.",
@@ -5624,7 +5821,7 @@ function isTransientStatus(status) {
   return status === 408 || status === 425 || status === 429 || status >= 500;
 }
 function sleep(ms) {
-  return new Promise((resolve2) => setTimeout(resolve2, ms));
+  return new Promise((resolve3) => setTimeout(resolve3, ms));
 }
 function headers(apiKey, orgId) {
   const value = {
@@ -5642,6 +5839,7 @@ function unsupportedResponse(status, body) {
 }
 function toolMutability(toolName, action) {
   if (toolName === "mindgraph_retrieve") return "read";
+  if (toolName === "mindgraph_series_query") return "read";
   if (toolName === "mindgraph_plan") {
     return action && PLAN_READ_ACTIONS.has(action) ? "read" : "write";
   }
@@ -5826,6 +6024,8 @@ var init_governance = __esm({
     UID_FIELDS = [
       "uid",
       "source_uid",
+      "entity_uid",
+      "series_uid",
       "session_uid",
       "work_uid",
       "goal_uid",
@@ -5978,7 +6178,7 @@ async function main() {
   const transport = new import_stdio.StdioServerTransport();
   await server.connect(transport);
   console.error(
-    `MindGraph MCP server v${"0.18.0"} running on stdio (${BASE_URL})`
+    `MindGraph MCP server v${"0.19.0"} running on stdio (${BASE_URL})`
   );
 }
 var import_server, import_stdio, import_types, import_node_path6, API_KEY, BASE_URL, AGENT_ID, ORG_ID, PROFILE, HARNESS, client, INSTRUCTIONS, RUNNER_REFRESH, HOOK_SKEW_NOTE, server, GOVERNANCE_CONFIG, PROMPTS;
@@ -6119,7 +6319,7 @@ Capture knowledge when the user shares something worth remembering:
     }
     RUNNER_REFRESH = (() => {
       try {
-        return refreshHookRunner("0.18.0", import_node_path6.default.join(__dirname, "cli.js"));
+        return refreshHookRunner("0.19.0", import_node_path6.default.join(__dirname, "cli.js"));
       } catch {
         return void 0;
       }
@@ -6133,12 +6333,12 @@ Capture knowledge when the user shares something worth remembering:
         }
       })();
       console.error(
-        `[mindgraph-mcp] refreshed pinned hook runner ${RUNNER_REFRESH.runnerVersion ? `v${RUNNER_REFRESH.runnerVersion}` : "(pre-sidecar)"} \u2192 v${"0.18.0"}` + (refreshedSettings.length > 0 ? `; refreshed owned hook entries in ${refreshedSettings.join(", ")}` : "")
+        `[mindgraph-mcp] refreshed pinned hook runner ${RUNNER_REFRESH.runnerVersion ? `v${RUNNER_REFRESH.runnerVersion}` : "(pre-sidecar)"} \u2192 v${"0.19.0"}` + (refreshedSettings.length > 0 ? `; refreshed owned hook entries in ${refreshedSettings.join(", ")}` : "")
       );
     }
     HOOK_SKEW_NOTE = (() => {
       try {
-        return versionSkewNote("0.18.0");
+        return versionSkewNote("0.19.0");
       } catch {
         return void 0;
       }
@@ -6152,7 +6352,7 @@ ${HOOK_SKEW_NOTE}`;
     server = new import_server.Server(
       {
         name: "mindgraph",
-        version: "0.18.0"
+        version: "0.19.0"
       },
       {
         capabilities: {
@@ -6370,8 +6570,8 @@ ${conversation}`
 });
 
 // src/cli.ts
-var fs5 = __toESM(require("fs"));
-var path6 = __toESM(require("path"));
+var fs6 = __toESM(require("fs"));
+var path7 = __toESM(require("path"));
 var os4 = __toESM(require("os"));
 var crypto5 = __toESM(require("crypto"));
 var import_child_process = require("child_process");
@@ -6389,6 +6589,8 @@ function parseArgs(argv) {
   let harness;
   let hooks = false;
   let agentId = process.env.MINDGRAPH_AGENT_ID;
+  const positionals = [];
+  let dir;
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
     switch (arg) {
@@ -6409,6 +6611,9 @@ function parseArgs(argv) {
       case "--project-dir":
         projectDir = args[++i];
         break;
+      case "--dir":
+        dir = args[++i];
+        break;
       case "--harness":
         harness = args[++i];
         break;
@@ -6427,12 +6632,27 @@ function parseArgs(argv) {
         break;
       default:
         if (!arg.startsWith("-")) {
-          command2 = arg;
+          if (command2 === "serve") {
+            command2 = arg;
+          } else {
+            positionals.push(arg);
+          }
         }
         break;
     }
   }
-  return { command: command2, apiKey, baseUrl, scope, projectDir, harness, hooks, agentId };
+  return {
+    command: command2,
+    apiKey,
+    baseUrl,
+    scope,
+    projectDir,
+    harness,
+    hooks,
+    agentId,
+    positionals,
+    dir
+  };
 }
 function mcpAddFailureOutput(e) {
   const err5 = e;
@@ -6446,8 +6666,375 @@ function classifyMcpAddFailure(e) {
   return "other";
 }
 
+// src/skills-cli.ts
+var import_node_crypto2 = require("crypto");
+var fs2 = __toESM(require("fs"));
+var path2 = __toESM(require("path"));
+function httpSkillsApi(baseUrl, apiKey, agentId) {
+  const endpoint = `${baseUrl.replace(/\/$/, "")}/action/skill`;
+  const call = async (body) => {
+    const response = await fetch(endpoint, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${apiKey}`
+      },
+      body: JSON.stringify(
+        agentId ? { agent_id: agentId, ...body } : body
+      )
+    });
+    let parsed = {};
+    try {
+      parsed = await response.json();
+    } catch {
+      parsed = { error: `non-JSON response (HTTP ${response.status})` };
+    }
+    return { status: response.status, body: parsed };
+  };
+  return {
+    async list(grantedTo) {
+      const { status, body } = await call({
+        action: "list",
+        ...grantedTo ? { granted_to: grantedTo } : {}
+      });
+      if (status !== 200) {
+        throw new Error(
+          `skill list failed (HTTP ${status}): ${String(body.error ?? "")}`
+        );
+      }
+      return body.skills ?? [];
+    },
+    async get(uid) {
+      const { status, body } = await call({ action: "get", uid });
+      if (status === 404) return null;
+      if (status !== 200) {
+        throw new Error(
+          `skill get failed (HTTP ${status}): ${String(body.error ?? "")}`
+        );
+      }
+      const props = body.props ?? {};
+      return {
+        uid: String(body.uid ?? uid),
+        name: String(props.name ?? ""),
+        description: String(props.description ?? ""),
+        content: String(props.content ?? ""),
+        license: props.license ?? null,
+        status: String(props.status ?? "candidate"),
+        status_reason: props.status_reason ?? null,
+        content_hash: String(props.content_hash ?? ""),
+        version: Number(body.version ?? 0)
+      };
+    },
+    send: call
+  };
+}
+function isValidSkillName(name) {
+  return name.length >= 1 && name.length <= 64 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(name);
+}
+function renderSkillMd(skill) {
+  const lines = [
+    "---",
+    `name: ${JSON.stringify(skill.name)}`,
+    `description: ${JSON.stringify(skill.description)}`
+  ];
+  if (skill.license) {
+    lines.push(`license: ${JSON.stringify(skill.license)}`);
+  }
+  lines.push(
+    "metadata:",
+    `  mindgraph-uid: ${JSON.stringify(skill.uid)}`,
+    `  mindgraph-version: ${JSON.stringify(String(skill.version))}`,
+    `  mindgraph-content-hash: ${JSON.stringify(skill.content_hash)}`,
+    "---",
+    "",
+    skill.content
+  );
+  return `${lines.join("\n")}
+`;
+}
+function scalar(raw) {
+  const trimmed = raw.trim();
+  try {
+    const parsed = JSON.parse(trimmed);
+    if (typeof parsed === "string") return parsed;
+  } catch {
+  }
+  return trimmed;
+}
+function parseSkillMd(text) {
+  if (!text.startsWith("---\n")) return null;
+  const end = text.indexOf("\n---\n", 4);
+  if (end < 0) return null;
+  const frontmatter = text.slice(4, end + 1);
+  const body = text.slice(end + 5).replace(/^\n/, "").replace(/\n$/, "");
+  const entries = [];
+  for (const line of frontmatter.split("\n")) {
+    const top = /^([A-Za-z0-9_-]+):(.*)$/.exec(line);
+    if (top) {
+      entries.push({ key: top[1], raw: top[2] });
+    } else if (entries.length > 0) {
+      entries[entries.length - 1].raw += `
+${line}`;
+    }
+  }
+  const result = { unknown: {}, body };
+  for (const { key, raw } of entries) {
+    switch (key) {
+      case "name":
+        result.name = scalar(raw);
+        break;
+      case "description":
+        result.description = scalar(raw);
+        break;
+      case "license":
+        result.license = scalar(raw);
+        break;
+      case "metadata": {
+        const uid = /mindgraph-uid:\s*(.+)/.exec(raw);
+        const version = /mindgraph-version:\s*(.+)/.exec(raw);
+        const hash = /mindgraph-content-hash:\s*(.+)/.exec(raw);
+        if (uid) {
+          result.pin = {
+            uid: scalar(uid[1]),
+            version: version ? scalar(version[1]) : void 0,
+            contentHash: hash ? scalar(hash[1]) : void 0
+          };
+        } else if (raw.trim().length > 0) {
+          result.unknown[key] = raw;
+        }
+        break;
+      }
+      default:
+        result.unknown[key] = raw;
+        break;
+    }
+  }
+  return result;
+}
+var STATE_FILE = ".mindgraph-skills-state.json";
+function sha256(text) {
+  return (0, import_node_crypto2.createHash)("sha256").update(text).digest("hex");
+}
+function loadState(dir) {
+  try {
+    return JSON.parse(
+      fs2.readFileSync(path2.join(dir, STATE_FILE), "utf8")
+    );
+  } catch {
+    return {};
+  }
+}
+function saveState(dir, state) {
+  fs2.writeFileSync(
+    path2.join(dir, STATE_FILE),
+    `${JSON.stringify(state, null, 2)}
+`
+  );
+}
+function isSymlink(target) {
+  try {
+    return fs2.lstatSync(target).isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+function safeSkillPaths(dir, name) {
+  if (!isValidSkillName(name)) {
+    return `invalid skill name ${JSON.stringify(name)}`;
+  }
+  const root = path2.resolve(dir);
+  const skillDir = path2.resolve(root, name);
+  if (skillDir !== path2.join(root, name) || !skillDir.startsWith(root + path2.sep)) {
+    return "resolved path escapes the target directory";
+  }
+  if (isSymlink(skillDir)) {
+    return "target directory is a symlink";
+  }
+  const skillFile = path2.join(skillDir, "SKILL.md");
+  if (isSymlink(skillFile)) {
+    return "target SKILL.md is a symlink";
+  }
+  return { skillDir, skillFile };
+}
+async function skillsPull(api, dir, grantedTo) {
+  const report = {
+    written: [],
+    unchanged: [],
+    locallyEdited: [],
+    conflicts: [],
+    removed: [],
+    refused: []
+  };
+  fs2.mkdirSync(dir, { recursive: true });
+  const state = loadState(dir);
+  const summaries = await api.list(grantedTo);
+  const fetched = /* @__PURE__ */ new Set();
+  for (const summary of summaries) {
+    const detail = await api.get(summary.uid);
+    if (!detail || detail.status !== "published") continue;
+    fetched.add(detail.name);
+    const paths = safeSkillPaths(dir, detail.name);
+    if (typeof paths === "string") {
+      report.refused.push({ name: detail.name, reason: paths });
+      continue;
+    }
+    const { skillDir, skillFile } = paths;
+    const rendered2 = renderSkillMd(detail);
+    let existing = null;
+    try {
+      existing = fs2.readFileSync(skillFile, "utf8");
+    } catch {
+      existing = null;
+    }
+    if (existing === rendered2) {
+      state[detail.name] = {
+        uid: detail.uid,
+        content_hash: detail.content_hash,
+        file_sha256: sha256(rendered2)
+      };
+      report.unchanged.push(detail.name);
+      continue;
+    }
+    const recorded = state[detail.name];
+    const locallyModified = existing !== null && (!recorded || sha256(existing) !== recorded.file_sha256);
+    if (locallyModified) {
+      if (recorded && recorded.content_hash === detail.content_hash) {
+        report.locallyEdited.push(detail.name);
+        continue;
+      }
+      fs2.writeFileSync(`${skillFile}.conflict`, rendered2);
+      report.conflicts.push(detail.name);
+      continue;
+    }
+    fs2.mkdirSync(skillDir, { recursive: true });
+    fs2.writeFileSync(skillFile, rendered2);
+    state[detail.name] = {
+      uid: detail.uid,
+      content_hash: detail.content_hash,
+      file_sha256: sha256(rendered2)
+    };
+    report.written.push(detail.name);
+  }
+  for (const [name, recorded] of Object.entries(state)) {
+    if (fetched.has(name)) continue;
+    const paths = safeSkillPaths(dir, name);
+    if (typeof paths === "string") {
+      delete state[name];
+      continue;
+    }
+    const { skillDir, skillFile } = paths;
+    let statusReason = null;
+    try {
+      const gone = await api.get(recorded.uid);
+      statusReason = gone?.status_reason ?? (gone ? `status: ${gone.status}` : null);
+    } catch {
+      statusReason = null;
+    }
+    let existing = null;
+    try {
+      existing = fs2.readFileSync(skillFile, "utf8");
+    } catch {
+      existing = null;
+    }
+    if (existing === null) {
+      delete state[name];
+      continue;
+    }
+    const locallyModified = sha256(existing) !== recorded.file_sha256;
+    if (locallyModified) {
+      fs2.renameSync(skillFile, `${skillFile}.conflict`);
+      report.removed.push({ name, statusReason, kept: true });
+    } else {
+      fs2.rmSync(skillDir, { recursive: true, force: true });
+      report.removed.push({ name, statusReason, kept: false });
+    }
+    delete state[name];
+  }
+  saveState(dir, state);
+  return report;
+}
+async function skillsPush(api, skillPath) {
+  const resolved = path2.resolve(skillPath);
+  const file = resolved.endsWith("SKILL.md") ? resolved : path2.join(resolved, "SKILL.md");
+  if (isSymlink(file)) {
+    return { outcome: "error", message: `${file} is a symlink; refusing` };
+  }
+  let text;
+  try {
+    text = fs2.readFileSync(file, "utf8");
+  } catch {
+    return { outcome: "error", message: `could not read ${file}` };
+  }
+  const parsed = parseSkillMd(text);
+  if (!parsed) {
+    return {
+      outcome: "error",
+      message: "SKILL.md must start with a --- frontmatter block"
+    };
+  }
+  if (!parsed.name || !parsed.description) {
+    return {
+      outcome: "error",
+      message: "SKILL.md frontmatter requires name and description"
+    };
+  }
+  if (parsed.pin?.uid) {
+    const { status: status2, body: body2 } = await api.send({
+      action: "update",
+      uid: parsed.pin.uid,
+      name: parsed.name,
+      description: parsed.description,
+      content: parsed.body,
+      ...parsed.license ? { license: parsed.license } : {}
+    });
+    if (status2 === 200) {
+      return {
+        outcome: "updated",
+        message: `updated candidate ${parsed.name} (${parsed.pin.uid})`,
+        uid: parsed.pin.uid
+      };
+    }
+    return {
+      outcome: status2 === 409 ? "conflict" : "error",
+      message: `update failed (HTTP ${status2}): ${String(body2.error ?? "")}`,
+      existingUid: body2.existing_uid ?? void 0,
+      existingStatus: body2.existing_status ?? void 0
+    };
+  }
+  const { status, body } = await api.send({
+    action: "create",
+    skill_source: "imported",
+    name: parsed.name,
+    description: parsed.description,
+    content: parsed.body,
+    ...parsed.license ? { license: parsed.license } : {},
+    ...Object.keys(parsed.unknown).length > 0 ? { imported_frontmatter: parsed.unknown } : {},
+    import_origin: `skills-push:${path2.basename(resolved)}`
+  });
+  if (status === 200 && body.replayed === true) {
+    return {
+      outcome: "replayed",
+      message: `unchanged: ${parsed.name} already imported (${String(body.uid)})`,
+      uid: String(body.uid)
+    };
+  }
+  if (status === 200) {
+    return {
+      outcome: "created",
+      message: `imported ${parsed.name} as a candidate (${String(body.uid)}) \u2014 review and publish in the dashboard`,
+      uid: String(body.uid)
+    };
+  }
+  return {
+    outcome: status === 409 ? "conflict" : "error",
+    message: `import failed (HTTP ${status}): ${String(body.error ?? "")}`,
+    existingUid: body.existing_uid ?? void 0,
+    existingStatus: body.existing_status ?? void 0
+  };
+}
+
 // src/hook-core.ts
-var import_node_crypto3 = __toESM(require("crypto"));
+var import_node_crypto4 = __toESM(require("crypto"));
 var import_node_fs3 = __toESM(require("fs"));
 var import_node_os3 = __toESM(require("os"));
 var import_node_path3 = __toESM(require("path"));
@@ -6477,7 +7064,7 @@ function runtimeDir(options) {
 }
 function ledgerPath(sessionId, options) {
   const harness = "harness" in options ? options.harness : "claude-code";
-  const key = import_node_crypto3.default.createHash("sha256").update(`${harness}\0${sessionId}`).digest("hex");
+  const key = import_node_crypto4.default.createHash("sha256").update(`${harness}\0${sessionId}`).digest("hex");
   return import_node_path3.default.join(runtimeDir(options), `${key}.json`);
 }
 function waitBriefly(ms) {
@@ -6519,7 +7106,7 @@ function withLedger(sessionId, options, update) {
     }
     const result = update(ledger);
     ledger.updatedAt = Date.now();
-    const temporary = `${file}.${process.pid}.${import_node_crypto3.default.randomUUID()}.tmp`;
+    const temporary = `${file}.${process.pid}.${import_node_crypto4.default.randomUUID()}.tmp`;
     import_node_fs3.default.writeFileSync(temporary, `${JSON.stringify(ledger)}
 `, { mode: 384 });
     import_node_fs3.default.renameSync(temporary, file);
@@ -6927,7 +7514,7 @@ async function sessionStart(input, client2, options) {
   const contextText = registrationNote ? `${registrationNote}
 
 ${briefText}` : briefText;
-  const briefHash = import_node_crypto3.default.createHash("sha256").update(contextText).digest("hex");
+  const briefHash = import_node_crypto4.default.createHash("sha256").update(contextText).digest("hex");
   const shouldInject = withLedger(input.session_id, options, (ledger) => {
     const changed = ledger.lastBriefHash !== briefHash;
     const reinjectCompact = options.reinjectUnchangedCompact && input.source === "compact";
@@ -7026,7 +7613,7 @@ async function postTool(input, client2, options) {
       ledger.mutatingOperations += 1;
     }
     if (!payload?.error) {
-      if (name.includes("mindgraph_capture") && ["lesson", "journal"].includes(action || "") || name.includes("mindgraph_commit") && action === "resolve_decision" || name.includes("mindgraph_plan") && action === "assess_risk") {
+      if (name.includes("mindgraph_capture") && ["lesson", "journal", "skill"].includes(action || "") || name.includes("mindgraph_commit") && action === "resolve_decision" || name.includes("mindgraph_plan") && action === "assess_risk") {
         ledger.memoryWritten = true;
       }
     }
@@ -7309,15 +7896,15 @@ async function runCodexHook(input, client2, options = {}) {
 init_hook_installer();
 function recordHookHealth(harness, error) {
   try {
-    const dir = process.env.MINDGRAPH_RUNTIME_DIR || path6.join(os4.homedir(), ".mindgraph", "runtime");
-    fs5.mkdirSync(dir, { recursive: true, mode: 448 });
-    const file = path6.join(dir, "hook-health.json");
+    const dir = process.env.MINDGRAPH_RUNTIME_DIR || path7.join(os4.homedir(), ".mindgraph", "runtime");
+    fs6.mkdirSync(dir, { recursive: true, mode: 448 });
+    const file = path7.join(dir, "hook-health.json");
     let failures = 0;
     try {
-      failures = Number(JSON.parse(fs5.readFileSync(file, "utf8")).consecutiveFailures) || 0;
+      failures = Number(JSON.parse(fs6.readFileSync(file, "utf8")).consecutiveFailures) || 0;
     } catch {
     }
-    fs5.writeFileSync(
+    fs6.writeFileSync(
       file,
       `${JSON.stringify({
         harness,
@@ -7333,14 +7920,14 @@ function recordHookHealth(harness, error) {
 }
 function clearHookHealth(harness) {
   try {
-    const file = path6.join(
-      process.env.MINDGRAPH_RUNTIME_DIR || path6.join(os4.homedir(), ".mindgraph", "runtime"),
+    const file = path7.join(
+      process.env.MINDGRAPH_RUNTIME_DIR || path7.join(os4.homedir(), ".mindgraph", "runtime"),
       "hook-health.json"
     );
-    if (!fs5.existsSync(file)) return;
-    const current = JSON.parse(fs5.readFileSync(file, "utf8"));
+    if (!fs6.existsSync(file)) return;
+    const current = JSON.parse(fs6.readFileSync(file, "utf8"));
     if (!Number(current.consecutiveFailures)) return;
-    fs5.writeFileSync(
+    fs6.writeFileSync(
       file,
       `${JSON.stringify({
         harness,
@@ -7356,7 +7943,7 @@ function clearHookHealth(harness) {
 function getClaudeDesktopConfigPath() {
   switch (process.platform) {
     case "darwin":
-      return path6.join(
+      return path7.join(
         os4.homedir(),
         "Library",
         "Application Support",
@@ -7364,13 +7951,13 @@ function getClaudeDesktopConfigPath() {
         "claude_desktop_config.json"
       );
     case "win32":
-      return path6.join(
-        process.env.APPDATA || path6.join(os4.homedir(), "AppData", "Roaming"),
+      return path7.join(
+        process.env.APPDATA || path7.join(os4.homedir(), "AppData", "Roaming"),
         "Claude",
         "claude_desktop_config.json"
       );
     case "linux":
-      return path6.join(
+      return path7.join(
         os4.homedir(),
         ".config",
         "Claude",
@@ -7381,16 +7968,16 @@ function getClaudeDesktopConfigPath() {
   }
 }
 function readJsonFile(filePath) {
-  if (!fs5.existsSync(filePath)) return {};
-  const content = fs5.readFileSync(filePath, "utf-8");
+  if (!fs6.existsSync(filePath)) return {};
+  const content = fs6.readFileSync(filePath, "utf-8");
   return JSON.parse(content);
 }
 function writeJsonFile(filePath, data) {
-  const dir = path6.dirname(filePath);
-  if (!fs5.existsSync(dir)) {
-    fs5.mkdirSync(dir, { recursive: true });
+  const dir = path7.dirname(filePath);
+  if (!fs6.existsSync(dir)) {
+    fs6.mkdirSync(dir, { recursive: true });
   }
-  fs5.writeFileSync(filePath, JSON.stringify(data, null, 2) + "\n");
+  fs6.writeFileSync(filePath, JSON.stringify(data, null, 2) + "\n");
 }
 function getMcpServerEntry(apiKey, baseUrl) {
   const env = { MINDGRAPH_API_KEY: apiKey };
@@ -7477,7 +8064,7 @@ function installClaudeCode(apiKey, baseUrl, agentId) {
 }
 function uninstallClaudeDesktop() {
   const configPath = getClaudeDesktopConfigPath();
-  if (!fs5.existsSync(configPath)) {
+  if (!fs6.existsSync(configPath)) {
     console.log("Claude Desktop config not found. Nothing to remove.");
     return;
   }
@@ -7504,7 +8091,7 @@ function uninstallClaudeCode() {
 }
 function printStatus() {
   const desktopPath = getClaudeDesktopConfigPath();
-  if (fs5.existsSync(desktopPath)) {
+  if (fs6.existsSync(desktopPath)) {
     const config = readJsonFile(desktopPath);
     const servers = config.mcpServers;
     if (servers && "mindgraph" in servers) {
@@ -7522,12 +8109,12 @@ function printStatus() {
     `MINDGRAPH_BASE_URL: ${process.env.MINDGRAPH_BASE_URL || "https://api.mindgraph.cloud (default)"}`
   );
   try {
-    const healthFile = path6.join(
-      process.env.MINDGRAPH_RUNTIME_DIR || path6.join(os4.homedir(), ".mindgraph", "runtime"),
+    const healthFile = path7.join(
+      process.env.MINDGRAPH_RUNTIME_DIR || path7.join(os4.homedir(), ".mindgraph", "runtime"),
       "hook-health.json"
     );
-    if (fs5.existsSync(healthFile)) {
-      const health = JSON.parse(fs5.readFileSync(healthFile, "utf8"));
+    if (fs6.existsSync(healthFile)) {
+      const health = JSON.parse(fs6.readFileSync(healthFile, "utf8"));
       const failures = Number(health.consecutiveFailures) || 0;
       console.log(
         failures > 0 ? `Hooks: FAILING (${failures} consecutive; last: ${health.lastError} at ${health.lastFailureAt})` : `Hooks: healthy (last recovery ${health.lastOkAt || "unknown"})`
@@ -7544,7 +8131,7 @@ function withHooksFlag() {
 }
 function finishCodeInstall(apiKey, baseUrl, withHooks, agentId) {
   if (withHooks) {
-    const runner = installHookRunner(__filename, void 0, "0.18.0");
+    const runner = installHookRunner(__filename, void 0, "0.19.0");
     console.log(`Installed pinned hook runner at ${runner}`);
     const result = installClaudeHooks("user");
     console.log(
@@ -7592,6 +8179,20 @@ USAGE:
   mindgraph-mcp install-hooks --harness claude-code|codex [--scope user|project]
   mindgraph-mcp uninstall-hooks --harness claude-code|codex [--scope user|project]
   mindgraph-mcp status           Show installation status
+  mindgraph-mcp skills pull [--dir .claude/skills]
+                                 Write your org's published+granted skills as
+                                 SKILL.md directories (allowlisted frontmatter
+                                 only). Revoked/archived skills are withdrawn;
+                                 local edits are never overwritten (.conflict
+                                 sidecars). NOTE: coding harnesses hot-reload
+                                 skill files \u2014 running sessions adopt pulled
+                                 changes immediately; session pinning exists
+                                 on the managed-agent leg only.
+  mindgraph-mcp skills push <path>
+                                 Import a SKILL.md directory as a review
+                                 candidate (nothing auto-publishes). A
+                                 previously pulled directory routes to the
+                                 candidate-only update path.
 
 OPTIONS:
   --api-key <key>     MindGraph API key (or set MINDGRAPH_API_KEY env var)
@@ -7655,7 +8256,7 @@ async function pollForKey(code) {
     } catch (e) {
       if (e instanceof Error && e.message.includes("Session")) throw e;
     }
-    await new Promise((resolve2) => setTimeout(resolve2, POLL_INTERVAL));
+    await new Promise((resolve3) => setTimeout(resolve3, POLL_INTERVAL));
   }
   throw new Error("Timed out waiting for authorization.");
 }
@@ -7665,7 +8266,7 @@ async function interactiveInit(baseUrl) {
     input: process.stdin,
     output: process.stdout
   });
-  const ask = (q) => new Promise((resolve2) => rl.question(q, resolve2));
+  const ask = (q) => new Promise((resolve3) => rl.question(q, resolve3));
   console.log("\nMindGraph MCP Server Setup\n");
   console.log("  1. Sign in via browser (recommended)");
   console.log("  2. Enter API key manually");
@@ -7736,8 +8337,79 @@ async function interactiveInit(baseUrl) {
   console.log("\nDone! Your knowledge graph is now connected.");
 }
 async function main2() {
-  const { command: command2, apiKey, baseUrl, scope, projectDir, harness, hooks, agentId } = parseArgs(process.argv);
+  const {
+    command: command2,
+    apiKey,
+    baseUrl,
+    scope,
+    projectDir,
+    harness,
+    hooks,
+    agentId,
+    positionals,
+    dir
+  } = parseArgs(process.argv);
   switch (command2) {
+    case "skills": {
+      if (!apiKey) {
+        console.error(
+          "API key required. Use --api-key or set MINDGRAPH_API_KEY."
+        );
+        process.exit(1);
+      }
+      const sub = positionals[0];
+      const api = httpSkillsApi(
+        baseUrl ?? "https://api.mindgraph.cloud",
+        apiKey,
+        agentId
+      );
+      if (sub === "pull") {
+        if (!agentId) {
+          console.error(
+            "note: no --agent-id/MINDGRAPH_AGENT_ID \u2014 pulling ALL published skills; bind an agent identity to scope the set by its grants."
+          );
+        }
+        const report = await skillsPull(api, dir ?? ".claude/skills", agentId);
+        for (const name of report.written) console.log(`  written    ${name}`);
+        for (const name of report.unchanged)
+          console.log(`  unchanged  ${name}`);
+        for (const name of report.locallyEdited)
+          console.log(`  local-edit ${name} \u2014 upstream unchanged; left alone`);
+        for (const name of report.conflicts)
+          console.log(
+            `  CONFLICT   ${name} \u2014 local edits kept; new upstream saved as SKILL.md.conflict`
+          );
+        for (const removal of report.removed)
+          console.log(
+            `  withdrawn  ${removal.name}${removal.kept ? " (local edits kept as SKILL.md.conflict)" : ""}${removal.statusReason ? ` \u2014 ${removal.statusReason}` : ""}`
+          );
+        for (const refusal of report.refused)
+          console.log(`  REFUSED    ${refusal.name} \u2014 ${refusal.reason}`);
+        const total = report.written.length + report.unchanged.length + report.locallyEdited.length + report.conflicts.length;
+        console.log(`
+${total} skill(s) synced.`);
+      } else if (sub === "push") {
+        const target = positionals[1];
+        if (!target) {
+          console.error("Usage: mindgraph-mcp skills push <path>");
+          process.exit(1);
+        }
+        const report = await skillsPush(api, target);
+        console.log(report.message);
+        if (report.existingUid) {
+          console.log(
+            `  existing skill: ${report.existingUid}${report.existingStatus ? ` (${report.existingStatus})` : ""}`
+          );
+        }
+        if (report.outcome === "error" || report.outcome === "conflict") {
+          process.exit(1);
+        }
+      } else {
+        console.error("Usage: mindgraph-mcp skills pull|push [...]");
+        process.exit(1);
+      }
+      break;
+    }
     case "help":
       printUsage();
       break;
@@ -7774,7 +8446,7 @@ async function main2() {
       if (hookHarness !== "claude-code" && hookHarness !== "codex") {
         throw new Error("--harness must be claude-code or codex");
       }
-      const runner = installHookRunner(__filename, void 0, "0.18.0");
+      const runner = installHookRunner(__filename, void 0, "0.19.0");
       console.log(`Installed pinned hook runner at ${runner}`);
       const result = hookHarness === "codex" ? installCodexHooks(scope, projectDir) : installClaudeHooks(scope, projectDir);
       console.log(