oh-my-second-brain 0.8.3 → 0.9.0

package/assets/codex/rules/oms.md

@@ -1,25 +1,24 @@
 # Oh My Second Brain for Codex
 
-Use Oh My Second Brain when the user asks to set up, validate, capture into, retrieve from, or inspect an Obsidian/Markdown vault governed by `vault/.oms/`.
+Use Oh My Second Brain for an Obsidian/Markdown vault governed by user-owned template controls in `.oms/`.
 
 ## Core rule
 
-Oh My Second Brain is a convention harness, not a content generator. The user owns the ontology in `vault/.oms/`; agents must use the declared folder axis, frontmatter/property axes, wikilinks, and retrieval lenses before reading or writing notes.
+Actual Obsidian Markdown templates own note shape and body scaffolding. The user-owned ontology remains active: template policy records note/field meaning and policy, while taxonomy records folder/link meaning and placement. `.obsidian/types.json` is read-only type authority; `.oms/types.json` is derived and must never be hand-edited.
 
 ## Command mapping
 
-| User intent | Preferred Oh My Second Brain surface |
+| User intent | Preferred surface |
 |---|---|
-| adopt a vault | `oms setup --vault <path>` |
+| inspect and adopt templates | `oms setup --vault <path> --dry-run`, then `--yes --approved-digest <digest>` |
 | install host integration | `oms install --runtime codex --vault <path> --yes` |
-| uninstall host integration | `oms uninstall --runtime codex --yes` |
-| validate notes | `$oms-doctor` or `oms doctor --vault <path>` |
-| write a vault note | use `$oms-write` / MCP `oms_write` (`create`, `append`, or `update`) |
-| retrieve knowledge | use `$oms-search` / MCP `oms_search`, loading full notes only when needed |
+| diagnose or repair | `$oms-doctor` or `oms doctor --vault <path>` |
+| write a note | `$oms-write` / MCP `oms_write` with a stable `templateId` |
+| retrieve knowledge | `$oms-search` / MCP `oms_search`; discover IDs with `op: "templates"` |
 
 ## Safety
 
-- Never delete vault notes or `vault/.oms/` during uninstall.
-- Capture must stay inside the configured vault and target Markdown files only.
-- If required frontmatter is missing, ask for it; do not invent user-owned ontology values.
-- Route ambiguous captures to inbox when the ontology cannot decide.
+- Never delete vault notes or `.oms/` during uninstall.
+- Never use direct file tools for vault notes or managed templates.
+- Never invent required values or self-approve a repair digest.
+- `status` and search are read-only; mutation requires a verified target.

package/assets/hermes/SOUL.md

@@ -1,18 +1,16 @@
-# Oh My Second Brain Convention Shim — Hermes
+# Oh My Second Brain — Hermes
 
-<!-- Add this as a context file in your Hermes session to activate Oh My Second Brain conventions. -->
+This vault uses user-owned template conventions in `.oms/`.
 
-## Vault Convention (Oh My Second Brain)
+Before vault work:
+- Actual Obsidian `.md` templates own note shape and body scaffolding.
+- `.obsidian/types.json` is read-only type authority.
+- The user-owned ontology remains active: `.oms/template-policy.json` records note/field meaning and policy; `.oms/taxonomy.yaml` records folder/link meaning and placement.
+- `.oms/types.json` is derived and must never be hand-edited.
+- Humans and agents use identical stable `templateId` rules.
 
-This vault is governed by Oh My Second Brain conventions stored in `.oms/`.
+**Write:** Use the `write` skill and MCP `oms_write`; never direct file tools for vault notes or managed templates. Notes use `op: "note"`. Template changes use `op: "template"`, dry-run first, then exact reviewed `approvalDigest`.
 
-**Before working with vault notes:**
-- Run `oms doctor` to validate notes against the convention (exits 0, non-blocking).
-- Read `.oms/taxonomy.yaml` for folder-to-concept bindings.
-- Read `.oms/concepts/*.yaml` for field declarations and lenses.
+**Retrieve:** Use `search`, discover IDs through `op: "templates"`, and filter by template, declared fields, folder, or links.
 
-**Write:** Use the `write` skill. Call MCP `oms_write`. Do not use host Write/Edit for vault `.md` files.
-
-**Retrieve:** Use the `search` skill or follow the retriever persona — identify purpose, match lens, project lens fields only.
-
-> **v0 native install:** `oms install --runtime hermes` installs the `write`, `search`, `link`, `distill`, `status`, and `doctor` skills and registers Oh My Second Brain MCP in `~/.hermes/config.yaml`. Use Oh My Second Brain MCP tools for vault operations and CLI commands for lifecycle.
+**Maintain:** `status` is read-only. `doctor` diagnoses and performs explicit repairs. Hermes installs the same seven write, search, link, distill, status, doctor, and tool-less template skills.

package/assets/hermes-manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "oms",
-  "version": "0.8.3",
+  "version": "0.9.0",
   "description": "Oh My Second Brain convention layer for Obsidian vaults — Hermes skill bundle and MCP adapter.",
   "_note": "oms install writes ~/.hermes/config.yaml mcp_servers.oms and installs skills under ~/.hermes/skills/knowledge-management/oms/."
 }

package/assets/skills/doctor/SKILL.md

@@ -1,23 +1,24 @@
 ---
 name: doctor
-description: Diagnose vault convention and index problems, then run explicit repairs.
+description: Diagnose template authority and index problems, then run explicit repairs.
 mcp_tool: oms_doctor
 mcp_args:
-  op: "audit"
+  op: "validate"
 ---
 
 # doctor
 
-Diagnose vault problems and perform the requested repair.
-
-## Use when
-
-Use this skill when a vault has convention violations, an unhealthy graph or semantic index, or stale generated state that needs correction. Use `status` instead when inspection alone is required.
+Diagnose vault template and derived-index state, then run only the named repair.
 
 ## Usage
 
 ```text
-/doctor <audit|validate|build-graph|cleanup|sync-embeddings>
+/doctor <validate|regenerate-types|backfill-defaults|audit|build-graph|cleanup|sync-embeddings>
 ```
 
-`audit` and `validate` inspect notes against their declared concept schemas. `build-graph`, `cleanup`, and `sync-embeddings` are repair operations and may write generated graph or semantic-index state. Review the diagnosis, then invoke only the repair needed.
+- `validate` is read-only. It reports policy/projection/source-signature drift, migration marker state, managed source exclusions, and unresolved legacy notes.
+- `regenerate-types` recomputes the derived `.oms/types.json` from actual templates, policy, taxonomy, and read-only Obsidian types.
+- `backfill-defaults` updates exactly one explicit note with stable template identity while preserving unrelated frontmatter and body bytes.
+- `build-graph`, `cleanup`, and `sync-embeddings` repair derived indexes.
+
+Every note/control repair requires a verified target. Run a dry-run, review the receipt, then submit its exact `approvalDigest`; never self-approve or repair all notes implicitly.

package/assets/skills/search/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: search
-description: Retrieve vault knowledge through declared retrieval lenses.
+description: Retrieve vault knowledge through resolved template axes.
 aliases: [retrieve]
 mcp_tool: oms_search
 mcp_args:
@@ -10,11 +10,7 @@ mcp_args:
 
 # search
 
-Retrieve notes and declared fields for a vault question. A lens is a vault-declared retrieval view, not an ad-hoc query filter: it identifies which fields matter for a purpose such as synthesis or audit.
-
-## Use when
-
-Use this skill to find and assemble relevant vault knowledge without changing the vault.
+Retrieve vault knowledge without changing the vault.
 
 ## Usage
 
@@ -22,20 +18,13 @@ Use this skill to find and assemble relevant vault knowledge without changing th
 /search <query>
 ```
 
-Choose the declared lens that matches the request, return only that lens's fields, and group results by concept or folder. Search may combine the live note, frontmatter, and wikilink graph with available semantic candidates; graph results remain available when the semantic index is unavailable.
-
-## Axes
-
-`query` scores text, so it reaches a note only where the words are actually written. A request that names a kind — a person, a meeting, a project — belongs on an axis instead: an entity note is titled with its subject and then seldom repeats it, which is precisely what text scoring cannot find.
-
-Put the request on an axis whenever it names a kind, a declared property, or a relationship:
-
-- `axes.field.<key>` filters on a frontmatter property declared by the vault contract. The value may be a scalar, a list of scalars (matching any of them), or a predicate object — `in`, `contains`, `containsAll`, `between`, `gte`/`gt`/`lte`/`lt`, `from`/`to`.
-- `axes.folder` scopes to a top-level folder. It takes the folder's own name, not the concept name derived from it.
-- `axes.link` follows the wikilink graph to reach the notes that reference an entity rather than the one describing it. It matches on filename alone: a bare title is enough, and a surrounding folder path or `.md` extension is ignored rather than narrowing the match.
+Plain `query` is projection-independent lexical retrieval and remains available when no embedding provider is configured. Template-managed source files are never returned as notes.
 
-Axes intersect, so a kind and a folder can be combined to narrow a single query. An axis filter is also a complete query by itself: omit `query` to enumerate a whole kind instead of searching inside it. Axis queries match lexically, so pair them with `query` or a `lex` sub-query; asking for `vec` or `hyde` retrieval alongside an axis returns nothing and says so.
+Use `oms_search { op: "templates" }` to discover stable template IDs and declared axes. Typed queries use the same derived projection as writes:
 
-Discover axes rather than guessing them. A successful query returns `facets` — the axis keys this vault actually uses, each with its observed values and their counts — and `op: "concepts"` reports the fields every concept declares. Which properties exist is a per-vault contract, so read it before filtering on it.
+- `axes.template` selects one stable template identity.
+- `axes.field.<key>` filters a field declared by that template; values may be scalars, scalar lists, or supported predicate objects.
+- `axes.folder` scopes physical placement.
+- `axes.link` follows observed wikilinks.
 
-A rejected axis is not a failed call. The response returns `available: false` with a `reason` naming the key it refused, and comes back with `hits` and `facets` both empty — so recover by querying again without that axis and reading the facets that call returns, never by retrying the same guess. `concept` is derived from a note's folder rather than stored as a property, so scope it with `axes.folder` or with `op: "context"` — `axes.field.concept` is always refused.
+Axes intersect. They require a current `.oms/types.json` projection and fail loudly on an undeclared field or stale signature; remove the typed axis or run template diagnosis rather than guessing. Vector or HyDE retrieval also fails loudly without configured embedding provider and model.

package/assets/skills/status/SKILL.md

@@ -1,22 +1,16 @@
 ---
 name: status
-description: Report read-only vault health, statistics, and index state.
+description: Report read-only template, graph, and semantic-index health.
 mcp_tool: oms_status
 mcp_args: {}
 ---
 
 # status
 
-Report the current state of a vault without changing it.
-
-## Use when
-
-Use this skill to inspect vault health and statistics before deciding whether maintenance is needed.
-
-## Usage
+Report vault health without changing files.
 
 ```text
 /status
 ```
 
-Report note counts, semantic-index availability and freshness, and graph-cache status. Status is observational only: it never rebuilds an index, repairs notes, or writes vault files.
+Show resolved template count, current projection/input signature, managed template-source exclusions, template diagnosis state, and graph/semantic-index availability. A malformed or missing projection is reported as invalid with an actionable doctor operation. Status never regenerates controls, rebuilds caches, repairs notes, or writes the vault.

package/assets/skills/template/SKILL.md

@@ -0,0 +1,29 @@
+---
+name: template
+description: Design, migrate, and safely apply vault-resident Obsidian templates through the derived OMS contract.
+---
+
+# template
+
+Turn the user's natural-language note design into an actual Obsidian Markdown template and the smallest matching policy change. People and agents follow the same template contract; never introduce personas.
+
+## Authority
+
+- The actual `.md` template owns frontmatter order/default scaffolding and body shape.
+- `.obsidian/types.json` is read-only property-type authority.
+- The user-owned ontology remains active: `.oms/template-policy.json` owns note/field `intent` plus BaseContract inheritance, requiredness, formats, allowed values, naming, stable identity, and bindings.
+- `.oms/taxonomy.yaml` owns folder/link `intent`, note placement, and global axes.
+- `.oms/types.json` is derived state. Never edit it directly.
+
+Use an existing stable `templateId` when updating or moving a template. A path or digest change never creates a new identity. New OMS-managed templates default to `<templateFolder>/<templateId>.md`; registered existing templates keep their explicitly verified `sourcePath`.
+
+## Workflow
+
+1. Read `oms_search { op: "templates" }` and the user's requested shape. Do not guess existing IDs or fields.
+2. Draft the exact Markdown and policy/taxonomy intent. Preserve unknown frontmatter, policy extensions, body bytes, and Obsidian property types.
+3. Call `oms_write { op: "template", ..., dryRun: true }` for create, update, reclassify, or relocate-folder.
+4. Show the proposal, paths, diagnostics, and `approvalDigest` to the user.
+5. Apply only after the caller explicitly approves that exact digest. Submit the same request with `dryRun: false` and `approvedDigest`.
+6. Report the server-verified receipt and postconditions.
+
+Reject unsupported expressions, unsafe paths, unresolved legacy mappings, stale signatures, and identity changes. Never self-approve, silently fall back to a legacy Concept reader, or directly mutate managed template/control files.

package/assets/skills/write/SKILL.md

@@ -1,30 +1,36 @@
 ---
 name: write
-description: Write a vault note through the Oh My Second Brain kernel contract.
+description: Write vault notes and manage Obsidian templates through the guarded template contract.
 mcp_tool: oms_write
 mcp_args:
-  op: "create"
-  notePath: "$1"
+  op: "note"
+  mode: "create"
+  templateId: "$1"
   body: "$2"
 ---
 
 # write
 
-Write, append to, or update a vault note through MCP `oms_write`. Do not use host Write/Edit for vault `.md` files.
+Use MCP `oms_write` for every vault-note or managed-template mutation. Do not use host Write/Edit for vault Markdown.
 
-## Use when
+## Notes
 
-Use this skill for every vault-note mutation.
-
-## Usage
+Translate the user's natural-language note kind into a stable ID returned by `oms_search { op: "templates" }`; never guess an ID.
 
 ```text
-/write <create|append|update> <vault-relative-note-path> [body]
+/write <template-id> [body]
 ```
 
-Use `op` with `create`, `append`, or `update`. The kernel owns `.oms` and returns one status:
+For create, call `op: "note"` with `mode`, `templateId`, and body/frontmatter; placement and naming derive the path. For append/update, pass `notePath` without `templateId`; OMS resolves the persisted `frontmatter.template`. The actual Obsidian template supplies frontmatter shape and body scaffolding; OMS applies the vault-wide base defaults and policy.
+
+## Templates
+
+Template creation, updates, reclassification, and template-folder relocation use `op: "template"` with `mode: "create" | "update" | "reclassify" | "relocate-folder"`.
+
+1. Submit `dryRun: true` with current input and source signatures.
+2. Show the resulting proposal and `approvalDigest`.
+3. Apply only with `dryRun: false` and that exact caller-approved digest.
+
+Never self-approve, hand-edit the derived `.oms/types.json`, or directly edit a managed template.
 
-- `ask` — fill the missing or invalid fields and call `write` again
-- `inbox` — tell the user; do not invent a folder
-- `written` — done
-- `rejected` — fix `violations` or `reason` and call `write` again
+Responses are `ask`, `written`, or `rejected`. Resolve named violations and retry; never invent missing required values.

package/core/AGENTS.md

@@ -1,112 +1,49 @@
 # Oh My Second Brain Vault Convention — SSOT for Host Agents
 
-This file is the authoritative reference a host agent (Claude Code, Codex, Hermes, or any
-other) reads when working inside a vault managed by Oh My Second Brain. It explains the convention model so
-the agent understands *why* knowledge is organized the way it is — not just *where*.
-
----
-
-## What is a Convention?
-
-An Oh My Second Brain **convention** is declarative semantic data the **user owns**. It lives in
-`vault/.oms/` (copied there by `oms setup`; Oh My Second Brain ships the defaults in `core/ontology/`).
-The user edits it freely. Oh My Second Brain enforces whatever is declared — it does not impose structure.
-
-The convention has four building blocks:
-
----
-
-## 1. Concept
-
-A **concept** is a note-type. Each concept carries:
-
-| Field    | Purpose |
-|----------|---------|
-| `concept` | Identifier (e.g. `literature`). |
-| `intent`  | One sentence: *what this knowledge is FOR.* |
-| `folder`  | The vault folder where notes of this type live. |
-| `fields`  | List of frontmatter keys the concept declares. |
-| `lenses`  | Named retrieval views (optional). |
-
-> "The folder itself is information — every folder declares its intent."
-> Rather than pattern-matching a directory listing, a host agent reads the declared `intent`
-> to understand *why* knowledge lives in a given folder.
-
----
-
-## 2. Field
-
-A **field** is one frontmatter key — the smallest unit of convention. Each field declares:
-
-| Property   | Meaning |
-|------------|---------|
-| `name`     | The frontmatter key (kebab-case, e.g. `source-url`). |
-| `type`     | One of `string`, `url`, `date`, `list`, `number`, `boolean`. |
-| `required` | Whether the key must be present and non-empty. |
-| `intent`   | Semantic purpose: *what this field is FOR.* |
-| `normalize` | Optional: `kebab`, `lower`, or `trim` — applied at validation. |
-| `immutable` | Advisory: once written, should not change (v0: no-op, forward-compat). |
-| `enum` | Optional closed vocabulary for string fields; values outside it are lint violations. |
-
-Users grow their convention field-by-field. There is no mandatory field list.
-
----
-
-## 3. Lens
-
-A **lens** is a pre-declared, named retrieval view. It is NOT a query filter — it is a
-concept's declaration of which fields matter for a specific retrieval purpose.
-
-Example: a `synthesis` lens on `literature` surfaces `title` and `source-url`, because those
-are the fields needed when synthesizing across references. A host agent uses the active lens
-to know which frontmatter to surface during retrieval.
-
----
-
-## 4. Taxonomy
-
-The **taxonomy** binds folders to concepts and gives each folder a declared `intent`.
-
-```yaml
-version: 1
-folders:
-  references:
-    intent: "Processed external sources the user has read and synthesized."
-    concept: literature
-  inbox:
-    intent: "Unprocessed captures awaiting triage."
-    concept: inbox
-```
-
-A folder may bind to one concept, multiple concepts (list), or `null` (not yet assigned). A folder binding may set `agentWritable: true`; paired with `routingLawStrict: true`, notes in that folder must carry `created_by`. Top-level `exclude` entries are vault-relative globs skipped by audit/lint scans.
-
----
-
-## Enforcement Posture
-
-| Setting | Value | Meaning |
-|---------|-------|---------|
-| `onViolation` | `warn` | Violations are logged but never block writes (v0 is non-blocking). |
-| `additionalProperties` | `preserve` | Frontmatter keys not declared in the concept are left untouched. |
-
-Oh My Second Brain enforces what the user declared; it does not touch anything else.
-
----
+This file defines the end-user vault convention for host agents (Claude Code, Codex,
+Hermes, and others). All convention data and its meaning remain vault-owned.
+
+## Four Separate Authorities
+
+These authorities do not overlap:
+
+1. **Markdown templates — shape and body.** Actual vault Markdown templates own
+   frontmatter-key scaffolding, default literals, and note body shape. Do not infer
+   semantic meaning from a template's defaults.
+2. **Ontology policy — note and field meaning.** `.oms/template-policy.json` owns
+   `intent` for notes and frontmatter fields. It is the note/field portion of the
+   semantic ontology, not template shape or type authority.
+3. **Taxonomy — placement and folder/link ontology.** `.oms/taxonomy.yaml` owns note
+   placement and the folder/link portion of the semantic ontology, expressed through
+   folder and link `intent`. Authored folder intents surface on the derived
+   `folder-ontology` axis.
+4. **Obsidian types — type authority.** `.obsidian/types.json` is the read-only type
+   authority. `.oms/types.json` is derived output, never an independent authority.
+
+## Operating Boundaries
+
+- Treat the verified target note and its applicable vault template as the write
+  boundary. Write only after verifying that target; never use a destination merely
+  because a template default suggests it.
+- Read ontology and taxonomy to understand declared meaning and placement. Do not
+  overwrite them as a side effect of writing a note.
+- Read `.obsidian/types.json` without modifying it. Do not edit derived
+  `.oms/types.json` as a source of truth.
+- Preserve unknown frontmatter fields and their values. The convention constrains only
+  what the user declared.
 
 ## User Ownership
 
-1. `oms setup` scans the vault's existing top-level folders and creates `vault/.oms/`.
-2. It copies shipped default concepts into `vault/.oms/concepts/` and writes
-   `vault/.oms/taxonomy.yaml` — seeded with the user's real folders.
-3. The user fills in `intent` values and adds or removes fields/lenses freely.
-4. Oh My Second Brain never imposes a folder structure; it adopts what already exists.
-
----
+The user owns templates, ontology, taxonomy, and type definitions in the vault.
+Oh My Second Brain applies those declarations without making them sticky: it does not
+impose a folder structure, retain obsolete declarations, or replace user-authored
+meaning. The user-owned semantic ontology remains active across ontology policy and
+taxonomy; it is separate from template shape and type authority.
 
 ## Quick Reference for Host Agents
 
-- To understand a note: look up its folder in the taxonomy → read the `concept.intent`.
-- To validate frontmatter: load the concept's `fields`; check `required`, `type`, and any `enum`.
-- To retrieve knowledge: apply the relevant `lens` to surface the fields that matter.
-- To audit a vault: honor taxonomy `exclude` globs and routing-law flags.
-- When in doubt, preserve: `additionalProperties: preserve` means unknown keys are safe.
+- For note shape and default values, read the applicable vault Markdown template.
+- For note or field ontology, read `intent` in `.oms/template-policy.json`.
+- For destination and folder/link ontology, read `.oms/taxonomy.yaml`.
+- For types, read `.obsidian/types.json`; treat `.oms/types.json` only as derived data.
+- When in doubt, preserve user-authored content and unknown frontmatter.

package/dist/cli/args.d.ts

@@ -7,10 +7,12 @@ export interface ParsedCliArgs {
     readonly vault: string;
     readonly vaultExplicit: boolean;
     readonly yes: boolean;
+    readonly approvedDigest?: string;
+    readonly templateFolder?: string;
+    readonly maxPerTemplate?: number;
     /** linkify: opt into rewriting notes in place (still requires `--yes`). */
     readonly apply: boolean;
     readonly installClaude: boolean;
-    readonly suggestFields: boolean;
     readonly runtime: RuntimeSelection | undefined;
     readonly dryRun: boolean;
     readonly executeExternal: boolean;
@@ -19,7 +21,6 @@ export interface ParsedCliArgs {
     readonly agentVault: string | undefined;
     readonly verbose: boolean;
     readonly json: boolean;
-    readonly maxPerConcept: number | undefined;
     readonly folders: readonly string[];
     readonly conventionNote: boolean;
     readonly embeddingDescriptorPath: string | undefined;

package/dist/cli/args.js

@@ -16,9 +16,11 @@ export function parseCliArgs(argv, cwd = process.cwd()) {
     let vault = cwd;
     let vaultExplicit = false;
     let yes = false;
+    let approvedDigest;
+    let templateFolder;
+    let maxPerTemplate;
     let apply = false;
     let installClaude = false;
-    let suggestFields = false;
     let runtime;
     let dryRun = false;
     let executeExternal = false;
@@ -27,7 +29,6 @@ export function parseCliArgs(argv, cwd = process.cwd()) {
     let agentVault;
     let verbose = false;
     let json = false;
-    let maxPerConcept;
     const folders = [];
     let conventionNote = true;
     let embeddingDescriptorPath;
@@ -45,15 +46,34 @@ export function parseCliArgs(argv, cwd = process.cwd()) {
         else if (arg === "--yes") {
             yes = true;
         }
+        else if (arg === "--approved-digest") {
+            if (next === undefined || next.startsWith("--")) {
+                return parsedArgsWithError("[oms] Missing value for --approved-digest.");
+            }
+            approvedDigest = next;
+            i++;
+        }
+        else if (arg === "--template-folder") {
+            if (next === undefined || next.startsWith("--")) {
+                return parsedArgsWithError("[oms] Missing value for --template-folder.");
+            }
+            templateFolder = next;
+            i++;
+        }
+        else if (arg === "--max-per-template") {
+            const parsed = Number.parseInt(next ?? "", 10);
+            if (next === undefined || !Number.isFinite(parsed) || parsed <= 0 || `${parsed}` !== next) {
+                return parsedArgsWithError(`[oms] --max-per-template must be a positive integer.`);
+            }
+            maxPerTemplate = parsed;
+            i++;
+        }
         else if (arg === "--apply") {
             apply = true;
         }
         else if (arg === "--install-claude") {
             installClaude = true;
         }
-        else if (arg === "--suggest-fields") {
-            suggestFields = true;
-        }
         else if (arg === "--check") {
             checkUpdate = true;
         }
@@ -90,14 +110,6 @@ export function parseCliArgs(argv, cwd = process.cwd()) {
         else if (arg === "--json") {
             json = true;
         }
-        else if (arg === "--max" && next) {
-            const parsed = Number.parseInt(next, 10);
-            if (!Number.isFinite(parsed) || parsed <= 0) {
-                return parsedArgsWithError(`[oms] Unsupported --max value: ${next}`);
-            }
-            maxPerConcept = parsed;
-            i++;
-        }
         else if (arg === "--folder" && next) {
             folders.push(next);
             i++;
@@ -124,9 +136,11 @@ export function parseCliArgs(argv, cwd = process.cwd()) {
         vault,
         vaultExplicit,
         yes,
+        approvedDigest,
+        templateFolder,
+        maxPerTemplate,
         apply,
         installClaude,
-        suggestFields,
         runtime,
         dryRun,
         executeExternal,
@@ -135,7 +149,6 @@ export function parseCliArgs(argv, cwd = process.cwd()) {
         agentVault,
         verbose,
         json,
-        maxPerConcept,
         folders,
         conventionNote,
         embeddingDescriptorPath,
@@ -150,9 +163,11 @@ export function parseCliArgs(argv, cwd = process.cwd()) {
             vault,
             vaultExplicit,
             yes,
+            approvedDigest,
+            templateFolder,
+            maxPerTemplate,
             apply,
             installClaude,
-            suggestFields,
             runtime,
             dryRun,
             executeExternal,
@@ -161,7 +176,6 @@ export function parseCliArgs(argv, cwd = process.cwd()) {
             agentVault,
             verbose,
             json,
-            maxPerConcept,
             folders,
             conventionNote,
             embeddingDescriptorPath,

package/dist/cli/args.js.map

@@ -1 +1 @@
-{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAG/E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AA8BD,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAuB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,GAAG,CAAC;IAChB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAqC,CAAC;IAC1C,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,SAA6B,CAAC;IAClC,IAAI,UAA8B,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,aAAiC,CAAC;IACtC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,cAAc,GAAG,IAAI,CAAC;IAC1B,IAAI,uBAA2C,CAAC;IAChD,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,EAAE,CAAC;YAC9B,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChC,aAAa,GAAG,IAAI,CAAC;YACrB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YAC3B,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;aAAM,IAAI,GAAG,KAAK,kBAAkB,EAAE,CAAC;YACtC,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,KAAK,kBAAkB,EAAE,CAAC;YACtC,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc,IAAI,IAAI,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC5C,OAAO,mBAAmB,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,SAAS,GAAG,MAAM,CAAC;YACnB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,IAAI,IAAI,EAAE,CAAC;YACvC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,OAAO,mBAAmB,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,eAAe,IAAI,IAAI,EAAE,CAAC;YAC3C,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/B,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC/C,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,IAAI,IAAI,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC5C,OAAO,mBAAmB,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,aAAa,GAAG,MAAM,CAAC;YACvB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,UAAU,IAAI,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,sBAAsB,EAAE,CAAC;YAC1C,cAAc,GAAG,KAAK,CAAC;QACzB,CAAC;aAAM,IAAI,GAAG,KAAK,wBAAwB,IAAI,IAAI,EAAE,CAAC;YACpD,uBAAuB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClD,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,wBAAwB,EAAE,CAAC;YAC5C,kBAAkB,GAAG,IAAI,CAAC;QAC5B,CAAC;aAAM,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;YACzC,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,KAAK;QACL,aAAa;QACb,GAAG;QACH,KAAK;QACL,aAAa;QACb,aAAa;QACb,OAAO;QACP,MAAM;QACN,eAAe;QACf,WAAW;QACX,SAAS;QACT,UAAU;QACV,OAAO;QACP,IAAI;QACJ,aAAa;QACb,OAAO;QACP,cAAc;QACd,uBAAuB;QACvB,kBAAkB;QAClB,gBAAgB;QAChB,YAAY;QACZ,KAAK,EAAE,SAAS;KACjB,CAAC;IAEF,SAAS,mBAAmB,CAAC,OAAe;QAC1C,OAAO;YACL,OAAO;YACP,KAAK;YACL,aAAa;YACb,GAAG;YACH,KAAK;YACL,aAAa;YACb,aAAa;YACb,OAAO;YACP,MAAM;YACN,eAAe;YACf,WAAW;YACX,SAAS;YACT,UAAU;YACV,OAAO;YACP,IAAI;YACJ,aAAa;YACb,OAAO;YACP,cAAc;YACd,uBAAuB;YACvB,kBAAkB;YAClB,gBAAgB;YAChB,YAAY;YACZ,KAAK,EAAE,IAAI,gBAAgB,CAAC,OAAO,CAAC;SACrC,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAG/E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AA+BD,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAuB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,GAAG,CAAC;IAChB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,cAAkC,CAAC;IACvC,IAAI,cAAkC,CAAC;IACvC,IAAI,cAAkC,CAAC;IACvC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAqC,CAAC;IAC1C,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,SAA6B,CAAC;IAClC,IAAI,UAA8B,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,cAAc,GAAG,IAAI,CAAC;IAC1B,IAAI,uBAA2C,CAAC;IAChD,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,EAAE,CAAC;YAC9B,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChC,aAAa,GAAG,IAAI,CAAC;YACrB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YAC3B,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;aAAM,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;YACvC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,OAAO,mBAAmB,CAAC,4CAA4C,CAAC,CAAC;YAC3E,CAAC;YACD,cAAc,GAAG,IAAI,CAAC;YACtB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;YACvC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,OAAO,mBAAmB,CAAC,4CAA4C,CAAC,CAAC;YAC3E,CAAC;YACD,cAAc,GAAG,IAAI,CAAC;YACtB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,oBAAoB,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,GAAG,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC1F,OAAO,mBAAmB,CAAC,sDAAsD,CAAC,CAAC;YACrF,CAAC;YACD,cAAc,GAAG,MAAM,CAAC;YACxB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;aAAM,IAAI,GAAG,KAAK,kBAAkB,EAAE,CAAC;YACtC,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc,IAAI,IAAI,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC5C,OAAO,mBAAmB,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,SAAS,GAAG,MAAM,CAAC;YACnB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,IAAI,IAAI,EAAE,CAAC;YACvC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,OAAO,mBAAmB,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,eAAe,IAAI,IAAI,EAAE,CAAC;YAC3C,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/B,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC/C,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,GAAG,KAAK,UAAU,IAAI,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,sBAAsB,EAAE,CAAC;YAC1C,cAAc,GAAG,KAAK,CAAC;QACzB,CAAC;aAAM,IAAI,GAAG,KAAK,wBAAwB,IAAI,IAAI,EAAE,CAAC;YACpD,uBAAuB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClD,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,wBAAwB,EAAE,CAAC;YAC5C,kBAAkB,GAAG,IAAI,CAAC;QAC5B,CAAC;aAAM,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;YACzC,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,KAAK;QACL,aAAa;QACb,GAAG;QACH,cAAc;QACd,cAAc;QACd,cAAc;QACd,KAAK;QACL,aAAa;QACb,OAAO;QACP,MAAM;QACN,eAAe;QACf,WAAW;QACX,SAAS;QACT,UAAU;QACV,OAAO;QACP,IAAI;QACJ,OAAO;QACP,cAAc;QACd,uBAAuB;QACvB,kBAAkB;QAClB,gBAAgB;QAChB,YAAY;QACZ,KAAK,EAAE,SAAS;KACjB,CAAC;IAEF,SAAS,mBAAmB,CAAC,OAAe;QAC1C,OAAO;YACL,OAAO;YACP,KAAK;YACL,aAAa;YACb,GAAG;YACH,cAAc;YACd,cAAc;YACd,cAAc;YACd,KAAK;YACL,aAAa;YACX,OAAO;YACT,MAAM;YACN,eAAe;YACf,WAAW;YACX,SAAS;YACT,UAAU;YACV,OAAO;YACP,IAAI;YACF,OAAO;YACT,cAAc;YACd,uBAAuB;YACvB,kBAAkB;YAClB,gBAAgB;YAChB,YAAY;YACZ,KAAK,EAAE,IAAI,gBAAgB,CAAC,OAAO,CAAC;SACrC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/audit.d.ts

@@ -2,5 +2,4 @@ export declare function runAudit(opts: {
     readonly vault: string;
     readonly json?: boolean;
     readonly folder?: string;
-    readonly suggestFields?: boolean;
 }): Promise<number>;