pi-para 0.6.0 → 0.6.1

package/dist/query.js

@@ -0,0 +1,120 @@
+/**
+ * Query pipeline — searches the wiki and returns relevant results.
+ *
+ * Performs scoped search via qmd and returns results for the LLM
+ * to synthesize answers from. This is the reusable library function;
+ * the wiki_query tool wraps it with LLM prompt formatting.
+ */
+import { searchWiki } from "./store.js";
+// -- Main pipeline -----------------------------------------------------------
+/**
+ * Search the wiki with scope and category filtering.
+ *
+ * This is the reusable library function. It:
+ * 1. Applies scope filtering (unless global flag is set)
+ * 2. Filters by PARA category if specified
+ * 3. Excludes archives unless explicitly requested
+ * 4. Returns results sorted by relevance score
+ *
+ * The caller (tool or standalone agent) can format the results
+ * into an LLM prompt or use them directly.
+ */
+export async function queryWiki(store, options, scope) {
+    const limit = options.limit ?? 10;
+    const isGlobal = options.global ?? false;
+    const includeArchives = options.includeArchives ?? (options.category === "archives");
+    // Build scope override if explicit scope tags provided
+    let effectiveScope;
+    if (isGlobal) {
+        effectiveScope = undefined; // no scope filtering
+    }
+    else if (options.scope && options.scope.length > 0) {
+        effectiveScope = {
+            ...scope,
+            name: scope.name,
+            include: options.scope,
+        };
+    }
+    else {
+        effectiveScope = scope;
+    }
+    let results = await searchWiki(store, options.query, {
+        scope: effectiveScope,
+        category: options.category,
+        limit,
+        includeArchives,
+        graphBoost: options.graphBoost,
+    });
+    // If QMD's BM25 index is stale, freshly written/readable pages can return
+    // as zero search results. On a miss, refresh the filesystem index once and
+    // retry before telling the agent the wiki lacks matching content.
+    if (results.length === 0) {
+        await store.update();
+        results = await searchWiki(store, options.query, {
+            scope: effectiveScope,
+            category: options.category,
+            limit,
+            includeArchives,
+            graphBoost: options.graphBoost,
+        });
+    }
+    return {
+        results,
+        scopeUsed: effectiveScope ?? scope,
+        wasGlobal: isGlobal,
+    };
+}
+/**
+ * Format query results as a readable text block.
+ * Useful for building LLM prompts or display.
+ *
+ * Includes freshness indicators so the LLM knows which pages to trust
+ * vs. which need verification against current code/state.
+ */
+export function formatQueryResults(results) {
+    if (results.length === 0)
+        return "No results found.";
+    const now = Date.now();
+    return results
+        .map((r, i) => {
+        const fm = r.frontmatter;
+        const freshness = formatFreshness(fm.updated, now);
+        return [
+            `### Result ${i + 1}: ${fm.title} (${r.page.path})`,
+            `PARA: ${fm.para} | Scope: ${fm.scope.join(", ")} | Tags: ${fm.tags.join(", ")}`,
+            `Updated: ${fm.updated} | ${freshness}`,
+            `Score: ${r.score.toFixed(3)}`,
+            "",
+            r.snippet,
+        ].join("\n");
+    })
+        .join("\n\n");
+}
+// -- Freshness helpers -------------------------------------------------------
+/**
+ * Compute a human-readable freshness indicator from the page's `updated` date.
+ *
+ * - < 7 days  → "✅ FRESH"
+ * - 7-14 days → "✅ Recent — N days old"
+ * - 14-30 days → "⚠️ AGING — N days old — verify claims about code/configs"
+ * - 30-90 days → "⚠️ STALE — N days old — verify before trusting"
+ * - > 90 days  → "🚨 VERY STALE — N days old — likely outdated, verify everything"
+ */
+export function formatFreshness(updatedISO, nowMs) {
+    const updatedMs = Date.parse(updatedISO);
+    if (isNaN(updatedMs))
+        return "❓ Unknown freshness (no valid date)";
+    const ageDays = Math.floor((nowMs - updatedMs) / (1000 * 60 * 60 * 24));
+    if (ageDays < 0)
+        return "✅ FRESH";
+    if (ageDays < 7)
+        return "✅ FRESH";
+    if (ageDays < 14)
+        return `✅ Recent — ${ageDays} days old`;
+    if (ageDays < 30)
+        return `⚠️ AGING — ${ageDays} days old — verify claims about code/configs`;
+    if (ageDays < 90)
+        return `⚠️ STALE — ${ageDays} days old — verify before trusting`;
+    return `🚨 VERY STALE — ${ageDays} days old — likely outdated, verify everything`;
+}
+//# sourceMappingURL=query.js.map

package/dist/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../src/query.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAkCxC,+EAA+E;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAe,EACf,OAAqB,EACrB,KAAmB;IAEnB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACzC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IAErF,uDAAuD;IACvD,IAAI,cAAwC,CAAC;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,cAAc,GAAG,SAAS,CAAC,CAAC,qBAAqB;IACnD,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,cAAc,GAAG;YACf,GAAG,KAAK;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,OAAO,CAAC,KAAK;SACvB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,cAAc,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;QACnD,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK;QACL,eAAe;QACf,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IAEH,0EAA0E;IAC1E,2EAA2E;IAC3E,kEAAkE;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;YAC/C,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK;YACL,eAAe;YACf,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO;QACP,SAAS,EAAE,cAAc,IAAI,KAAK;QAClC,SAAS,EAAE,QAAQ;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAErD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACZ,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC;QACzB,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnD,OAAO;YACL,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG;YACnD,SAAS,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAChF,YAAY,EAAE,CAAC,OAAO,MAAM,SAAS,EAAE;YACvC,UAAU,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAC9B,EAAE;YACF,CAAC,CAAC,OAAO;SACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,KAAa;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,qCAAqC,CAAC;IAEnE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAExE,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,cAAc,OAAO,WAAW,CAAC;IAC1D,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,cAAc,OAAO,8CAA8C,CAAC;IAC7F,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,cAAc,OAAO,oCAAoC,CAAC;IACnF,OAAO,mBAAmB,OAAO,gDAAgD,CAAC;AACpF,CAAC"}

package/dist/raw.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Raw source vault and session digests.
+ *
+ * Manages immutable source material in ~/.pi/wiki/raw/ and
+ * session digest entries in sessions.md.
+ */
+export interface RawSource {
+    type: "url" | "file" | "text";
+    originalPath: string;
+    savedPath: string;
+    ingestedAt: string;
+    wikiPages: string[];
+}
+export interface SessionDigest {
+    date: string;
+    project: string;
+    sessionFile: string;
+    scope: string;
+    capturedPages: string[];
+    summary: string;
+}
+/**
+ * Save a raw source to the vault. URL sources go to raw/articles/,
+ * file sources to raw/docs/, text sources to raw/notes/.
+ *
+ * The file is saved as markdown with a metadata header.
+ * Returns the path relative to wikiDir (e.g. "raw/articles/example-com-page.md").
+ */
+export declare function saveRawSource(wikiDir: string, source: {
+    type: "url" | "file" | "text";
+    content: string;
+    originalPath: string;
+}): Promise<string>;
+/**
+ * Append a session digest entry to sessions.md in the documented format:
+ *
+ * ```
+ * ## [2026-04-27] pi-mono | SSL certificate debugging
+ * - **Session**: `~/.pi/agent/sessions/.../file.jsonl`
+ * - **Scope**: pi-mono
+ * - **Captured**: [[ssl-cert-gotchas]]
+ * - **Summary**: One-paragraph summary...
+ * ```
+ *
+ * Creates sessions.md if it does not exist.
+ */
+export declare function appendSessionDigest(wikiDir: string, digest: SessionDigest): Promise<void>;
+/**
+ * Parse sessions.md and return session digest entries.
+ * Optionally filter by scope and/or limit the number of results.
+ * Results are returned in file order (oldest first).
+ */
+export declare function readSessionDigests(wikiDir: string, options?: {
+    limit?: number;
+    scope?: string;
+}): Promise<SessionDigest[]>;
+//# sourceMappingURL=raw.d.ts.map

package/dist/raw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../src/raw.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAgFD;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE;IACN,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB,GACA,OAAO,CAAC,MAAM,CAAC,CAqBjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,aAAa,EAAE,CAAC,CAiE1B"}

package/dist/raw.js

@@ -0,0 +1,219 @@
+/**
+ * Raw source vault and session digests.
+ *
+ * Manages immutable source material in ~/.pi/wiki/raw/ and
+ * session digest entries in sessions.md.
+ */
+import { readFile, writeFile, mkdir, access } from "node:fs/promises";
+import { join, basename, extname } from "node:path";
+// -- Helpers -----------------------------------------------------------------
+const RAW_SUBDIRS = {
+    url: "articles",
+    file: "docs",
+    text: "notes",
+};
+/**
+ * Slugify a string for use as a filename. Lowercase, hyphens, no special
+ * characters. Collapses multiple hyphens. Trims leading/trailing hyphens.
+ */
+function slugify(input) {
+    return input
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/-+/g, "-")
+        .replace(/^-|-$/g, "");
+}
+/**
+ * Derive a filename slug from the original path based on source type.
+ *
+ * - URL: extract domain + path components
+ * - file: use the filename without extension
+ * - text: use a timestamp-based name
+ */
+function deriveSlug(type, originalPath) {
+    if (type === "url") {
+        try {
+            const url = new URL(originalPath);
+            const host = url.hostname.replace(/^www\./, "");
+            const pathParts = url.pathname
+                .split("/")
+                .filter((p) => p.length > 0)
+                .slice(0, 3);
+            const raw = [host, ...pathParts].join("-");
+            return slugify(raw) || "untitled";
+        }
+        catch {
+            return slugify(originalPath) || "untitled";
+        }
+    }
+    if (type === "file") {
+        const name = basename(originalPath, extname(originalPath));
+        return slugify(name) || "untitled";
+    }
+    // text: timestamp-based
+    const ts = new Date().toISOString().replace(/[:.]/g, "-").slice(0, 19);
+    return `note-${ts}`;
+}
+async function fileExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Ensure a unique filename by appending -2, -3, etc. if the slug already exists.
+ */
+async function uniquePath(dir, slug, ext) {
+    let candidate = join(dir, `${slug}${ext}`);
+    if (!(await fileExists(candidate)))
+        return candidate;
+    let i = 2;
+    while (await fileExists(join(dir, `${slug}-${i}${ext}`))) {
+        i++;
+    }
+    return join(dir, `${slug}-${i}${ext}`);
+}
+// -- Functions ---------------------------------------------------------------
+/**
+ * Save a raw source to the vault. URL sources go to raw/articles/,
+ * file sources to raw/docs/, text sources to raw/notes/.
+ *
+ * The file is saved as markdown with a metadata header.
+ * Returns the path relative to wikiDir (e.g. "raw/articles/example-com-page.md").
+ */
+export async function saveRawSource(wikiDir, source) {
+    const subdir = RAW_SUBDIRS[source.type];
+    const dir = join(wikiDir, "raw", subdir);
+    await mkdir(dir, { recursive: true });
+    const slug = deriveSlug(source.type, source.originalPath);
+    const filePath = await uniquePath(dir, slug, ".md");
+    const fileName = basename(filePath);
+    const header = [
+        "---",
+        `source_type: ${source.type}`,
+        `original_path: "${source.originalPath}"`,
+        `ingested_at: "${new Date().toISOString()}"`,
+        "---",
+        "",
+    ].join("\n");
+    await writeFile(filePath, header + source.content, "utf-8");
+    return `raw/${subdir}/${fileName}`;
+}
+/**
+ * Append a session digest entry to sessions.md in the documented format:
+ *
+ * ```
+ * ## [2026-04-27] pi-mono | SSL certificate debugging
+ * - **Session**: `~/.pi/agent/sessions/.../file.jsonl`
+ * - **Scope**: pi-mono
+ * - **Captured**: [[ssl-cert-gotchas]]
+ * - **Summary**: One-paragraph summary...
+ * ```
+ *
+ * Creates sessions.md if it does not exist.
+ */
+export async function appendSessionDigest(wikiDir, digest) {
+    const sessionsPath = join(wikiDir, "sessions.md");
+    let existing;
+    try {
+        existing = await readFile(sessionsPath, "utf-8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            existing = "# Session Digests\n";
+        }
+        else {
+            throw err;
+        }
+    }
+    const captured = digest.capturedPages.map((p) => `[[${p}]]`).join(", ");
+    const heading = digest.summary.split(/[.!?\n]/)[0].trim() || "Session capture";
+    const entry = [
+        "",
+        `## [${digest.date}] ${digest.project} | ${heading}`,
+        `- **Session**: \`${digest.sessionFile}\``,
+        `- **Scope**: ${digest.scope}`,
+        `- **Captured**: ${captured || "none"}`,
+        `- **Summary**: ${digest.summary}`,
+        "",
+    ].join("\n");
+    await writeFile(sessionsPath, existing + entry, "utf-8");
+}
+/**
+ * Parse sessions.md and return session digest entries.
+ * Optionally filter by scope and/or limit the number of results.
+ * Results are returned in file order (oldest first).
+ */
+export async function readSessionDigests(wikiDir, options) {
+    const sessionsPath = join(wikiDir, "sessions.md");
+    let content;
+    try {
+        content = await readFile(sessionsPath, "utf-8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            return [];
+        }
+        throw err;
+    }
+    const digests = [];
+    // Split on ## headings (session entries)
+    const entryPattern = /^## \[([^\]]+)\] ([^|]+)\| (.+)$/gm;
+    let match;
+    while ((match = entryPattern.exec(content)) !== null) {
+        const date = match[1].trim();
+        const project = match[2].trim();
+        // Extract the block after this heading until the next heading or end
+        const startIdx = match.index + match[0].length;
+        const nextHeading = content.indexOf("\n## ", startIdx);
+        const block = nextHeading === -1
+            ? content.slice(startIdx)
+            : content.slice(startIdx, nextHeading);
+        const sessionFile = extractField(block, "Session");
+        const scope = extractField(block, "Scope");
+        const capturedRaw = extractField(block, "Captured");
+        const summary = extractField(block, "Summary");
+        // Parse captured wikilinks: [[slug1]], [[slug2]]
+        const capturedPages = [];
+        const linkPattern = /\[\[([^\]]+)\]\]/g;
+        let linkMatch;
+        while ((linkMatch = linkPattern.exec(capturedRaw)) !== null) {
+            capturedPages.push(linkMatch[1]);
+        }
+        digests.push({
+            date,
+            project,
+            sessionFile,
+            scope,
+            capturedPages,
+            summary,
+        });
+    }
+    // Apply scope filter
+    let filtered = digests;
+    if (options?.scope) {
+        const scopeFilter = options.scope;
+        filtered = filtered.filter((d) => d.scope === scopeFilter);
+    }
+    // Apply limit (return the last N entries — most recent)
+    if (options?.limit !== undefined && options.limit < filtered.length) {
+        filtered = filtered.slice(filtered.length - options.limit);
+    }
+    return filtered;
+}
+/**
+ * Extract a field value from a session digest block.
+ * Matches lines like: `- **Field**: value` or `- **Field**: \`value\``
+ */
+function extractField(block, field) {
+    const pattern = new RegExp(`^- \\*\\*${field}\\*\\*:\\s*(.+)$`, "m");
+    const match = pattern.exec(block);
+    if (!match)
+        return "";
+    // Strip backticks wrapping the value
+    return match[1].trim().replace(/^`|`$/g, "");
+}
+//# sourceMappingURL=raw.js.map

package/dist/raw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw.js","sourceRoot":"","sources":["../src/raw.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBpD,+EAA+E;AAE/E,MAAM,WAAW,GAA4C;IAC3D,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,OAAO;CACd,CAAC;AAEF;;;GAGG;AACH,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,IAA6B,EAAE,YAAoB;IACrE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ;iBAC3B,KAAK,CAAC,GAAG,CAAC;iBACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;iBAC3B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACf,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;IACrC,CAAC;IAED,wBAAwB;IACxB,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,OAAO,QAAQ,EAAE,EAAE,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,GAAW;IAC9D,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAErD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QACzD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,MAIC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEpC,MAAM,MAAM,GAAG;QACb,KAAK;QACL,gBAAgB,MAAM,CAAC,IAAI,EAAE;QAC7B,mBAAmB,MAAM,CAAC,YAAY,GAAG;QACzC,iBAAiB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG;QAC5C,KAAK;QACL,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE5D,OAAO,OAAO,MAAM,IAAI,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,MAAqB;IAErB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAElD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,QAAQ,GAAG,qBAAqB,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,iBAAiB,CAAC;IAE/E,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,MAAM,OAAO,EAAE;QACpD,oBAAoB,MAAM,CAAC,WAAW,IAAI;QAC1C,gBAAgB,MAAM,CAAC,KAAK,EAAE;QAC9B,mBAAmB,QAAQ,IAAI,MAAM,EAAE;QACvC,kBAAkB,MAAM,CAAC,OAAO,EAAE;QAClC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,SAAS,CAAC,YAAY,EAAE,QAAQ,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,OAA4C;IAE5C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAElD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,yCAAyC;IACzC,MAAM,YAAY,GAAG,oCAAoC,CAAC;IAC1D,IAAI,KAA6B,CAAC;IAElC,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,qEAAqE;QACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,WAAW,KAAK,CAAC,CAAC;YAC9B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;YACzB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEzC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAE/C,iDAAiD;QACjD,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,mBAAmB,CAAC;QACxC,IAAI,SAAiC,CAAC;QACtC,OAAO,CAAC,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,OAAO;YACP,WAAW;YACX,KAAK;YACL,aAAa;YACb,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,qBAAqB;IACrB,IAAI,QAAQ,GAAG,OAAO,CAAC;IACvB,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;QAClC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC;IAC7D,CAAC;IAED,wDAAwD;IACxD,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,YAAY,KAAK,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,qCAAqC;IACrC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC"}

package/dist/redact.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Secret redaction — strips API keys, tokens, passwords, and other
+ * sensitive values from wiki page content before writing.
+ *
+ * Runs automatically on every wiki_write to prevent secrets from
+ * being persisted in the knowledge base.
+ */
+/**
+ * Redact secrets from text content.
+ * Returns the redacted text and count of redactions made.
+ */
+export declare function redactSecrets(text: string): {
+    text: string;
+    redactions: number;
+};
+/**
+ * Check if text contains any detectable secrets.
+ * Faster than redactSecrets() — stops at first match.
+ */
+export declare function containsSecrets(text: string): boolean;
+//# sourceMappingURL=redact.d.ts.map

package/dist/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAuHH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAiBhF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMrD"}

package/dist/redact.js

@@ -0,0 +1,143 @@
+/**
+ * Secret redaction — strips API keys, tokens, passwords, and other
+ * sensitive values from wiki page content before writing.
+ *
+ * Runs automatically on every wiki_write to prevent secrets from
+ * being persisted in the knowledge base.
+ */
+/**
+ * Secret detection patterns — ordered from most specific to most general.
+ *
+ * Each pattern matches a specific type of secret. The replacement preserves
+ * the key type for documentation purposes while removing the actual value.
+ */
+const SECRET_PATTERNS = [
+    // --- Provider-specific API key formats ---
+    {
+        name: "OpenRouter API key",
+        pattern: /sk-or-v1-[a-f0-9]{64}/g,
+        replacement: "<REDACTED:openrouter-key>",
+    },
+    {
+        name: "OpenAI API key",
+        pattern: /sk-[a-zA-Z0-9]{48,}/g,
+        replacement: "<REDACTED:openai-key>",
+    },
+    {
+        name: "Anthropic API key",
+        pattern: /sk-ant-[a-zA-Z0-9_-]{40,}/g,
+        replacement: "<REDACTED:anthropic-key>",
+    },
+    {
+        name: "MiniMax API key",
+        pattern: /sk-cp-[a-zA-Z0-9_-]{40,}/g,
+        replacement: "<REDACTED:minimax-key>",
+    },
+    {
+        name: "GitHub PAT (fine-grained)",
+        pattern: /github_pat_[a-zA-Z0-9_]{60,}/g,
+        replacement: "<REDACTED:github-pat>",
+    },
+    {
+        name: "GitHub PAT (classic)",
+        pattern: /ghp_[a-zA-Z0-9]{36,}/g,
+        replacement: "<REDACTED:github-pat>",
+    },
+    {
+        name: "GitHub OAuth token",
+        pattern: /gho_[a-zA-Z0-9]{36,}/g,
+        replacement: "<REDACTED:github-oauth>",
+    },
+    {
+        name: "AWS Access Key ID",
+        pattern: /AKIA[0-9A-Z]{16}/g,
+        replacement: "<REDACTED:aws-key-id>",
+    },
+    {
+        name: "AWS Secret Access Key",
+        pattern: /(?<=aws_secret_access_key\s*[=:]\s*)[A-Za-z0-9/+=]{40}/g,
+        replacement: "<REDACTED:aws-secret>",
+    },
+    {
+        name: "Jina API key",
+        pattern: /jina_[a-zA-Z0-9_-]{30,}/g,
+        replacement: "<REDACTED:jina-key>",
+    },
+    {
+        name: "Bearer token",
+        pattern: /Bearer [a-zA-Z0-9._-]{30,}/g,
+        replacement: "Bearer <REDACTED>",
+    },
+    // --- Generic key/value patterns in YAML/config context ---
+    // Match: key: <long-alphanumeric-value> (in YAML blocks)
+    {
+        name: "YAML key value",
+        pattern: /(?<=^\s*key:\s*)[a-zA-Z0-9_-]{32,}/gm,
+        replacement: "<REDACTED>",
+    },
+    // Match: token: <long-alphanumeric-value>
+    {
+        name: "YAML token value",
+        pattern: /(?<=^\s*token:\s*)[a-zA-Z0-9_-]{32,}/gm,
+        replacement: "<REDACTED>",
+    },
+    // Match: secret: <long-alphanumeric-value>
+    {
+        name: "YAML secret value",
+        pattern: /(?<=^\s*secret:\s*)[a-zA-Z0-9_-]{32,}/gm,
+        replacement: "<REDACTED>",
+    },
+    // Match: password: <value> (any length, in YAML)
+    {
+        name: "YAML password value",
+        pattern: /(?<=^\s*password:\s*)\S+/gm,
+        replacement: "<REDACTED>",
+    },
+    // Match: api_key: / apiKey: <long-alphanumeric-value>
+    {
+        name: "YAML api_key value",
+        pattern: /(?<=^\s*(?:api_key|apiKey|api-key):\s*)[a-zA-Z0-9_-]{20,}/gm,
+        replacement: "<REDACTED>",
+    },
+    // --- Environment variable patterns ---
+    // Match: export SECRET_NAME=value or SECRET_NAME="value"
+    {
+        name: "Env var secret",
+        pattern: /(?<=(?:export\s+)?(?:API_KEY|SECRET|TOKEN|PASSWORD|PRIVATE_KEY|ACCESS_KEY)[A-Z_]*\s*=\s*["']?)[^\s"']{16,}/g,
+        replacement: "<REDACTED>",
+    },
+];
+// -- Public API --------------------------------------------------------------
+/**
+ * Redact secrets from text content.
+ * Returns the redacted text and count of redactions made.
+ */
+export function redactSecrets(text) {
+    let result = text;
+    let redactions = 0;
+    for (const { pattern, replacement } of SECRET_PATTERNS) {
+        // Reset regex state for global patterns
+        const re = new RegExp(pattern.source, pattern.flags);
+        const before = result;
+        result = result.replace(re, replacement);
+        if (result !== before) {
+            // Count how many replacements were made
+            const matches = before.match(new RegExp(pattern.source, pattern.flags));
+            redactions += matches?.length ?? 1;
+        }
+    }
+    return { text: result, redactions };
+}
+/**
+ * Check if text contains any detectable secrets.
+ * Faster than redactSecrets() — stops at first match.
+ */
+export function containsSecrets(text) {
+    for (const { pattern } of SECRET_PATTERNS) {
+        const re = new RegExp(pattern.source, pattern.flags);
+        if (re.test(text))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=redact.js.map

package/dist/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH;;;;;GAKG;AACH,MAAM,eAAe,GAAoB;IACvC,4CAA4C;IAC5C;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,wBAAwB;QACjC,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,sBAAsB;QAC/B,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,0BAA0B;KACxC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,2BAA2B;QACpC,WAAW,EAAE,wBAAwB;KACtC;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,+BAA+B;QACxC,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,yDAAyD;QAClE,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,qBAAqB;KACnC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,mBAAmB;KACjC;IAED,4DAA4D;IAC5D,yDAAyD;IACzD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,YAAY;KAC1B;IACD,0CAA0C;IAC1C;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,wCAAwC;QACjD,WAAW,EAAE,YAAY;KAC1B;IACD,2CAA2C;IAC3C;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,yCAAyC;QAClD,WAAW,EAAE,YAAY;KAC1B;IACD,iDAAiD;IACjD;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,YAAY;KAC1B;IACD,sDAAsD;IACtD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,6DAA6D;QACtE,WAAW,EAAE,YAAY;KAC1B;IAED,wCAAwC;IACxC,yDAAyD;IACzD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,6GAA6G;QACtH,WAAW,EAAE,YAAY;KAC1B;CACF,CAAC;AAEF,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,eAAe,EAAE,CAAC;QACvD,wCAAwC;QACxC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,wCAAwC;YACxC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,UAAU,IAAI,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,eAAe,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/repair.d.ts

@@ -0,0 +1,11 @@
+export declare const GENERATED_STATE_GITIGNORE_PATTERNS: string[];
+export interface GitignoreRepairResult {
+    path: string;
+    changed: boolean;
+    added: string[];
+}
+export declare function missingGeneratedStateGitignorePatterns(wikiDir: string): string[];
+export declare function ensureGeneratedStateGitignore(wikiDir: string): Promise<GitignoreRepairResult>;
+export declare function fixSecretPermissions(secretsPath: string): boolean;
+export declare function readMode(path: string): number;
+//# sourceMappingURL=repair.d.ts.map

package/dist/repair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair.d.ts","sourceRoot":"","sources":["../src/repair.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,kCAAkC,UAM9C,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wBAAgB,sCAAsC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAKhF;AAED,wBAAsB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAWnG;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAMjE;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C"}

package/dist/repair.js

@@ -0,0 +1,41 @@
+import { existsSync, chmodSync, readFileSync, statSync } from "node:fs";
+import { mkdir, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+export const GENERATED_STATE_GITIGNORE_PATTERNS = [
+    ".qmd.sqlite*",
+    ".daemon.sqlite*",
+    ".pi-para.sqlite*",
+    "gepa/input/",
+    "gepa/output/",
+];
+export function missingGeneratedStateGitignorePatterns(wikiDir) {
+    const path = join(wikiDir, ".gitignore");
+    const existing = existsSync(path) ? readFileSync(path, "utf-8") : "";
+    const lines = existing.split(/\r?\n/);
+    return GENERATED_STATE_GITIGNORE_PATTERNS.filter((pattern) => !lines.includes(pattern));
+}
+export async function ensureGeneratedStateGitignore(wikiDir) {
+    const path = join(wikiDir, ".gitignore");
+    await mkdir(dirname(path), { recursive: true });
+    const existing = existsSync(path) ? readFileSync(path, "utf-8") : "";
+    const added = missingGeneratedStateGitignorePatterns(wikiDir);
+    if (added.length === 0)
+        return { path, changed: false, added: [] };
+    const prefix = existing.trimEnd().length > 0 ? `${existing.trimEnd()}\n` : "";
+    const block = `${prefix}${prefix ? "\n" : ""}# pi-para generated state (do not version)\n${added.join("\n")}\n`;
+    await writeFile(path, block, "utf-8");
+    return { path, changed: true, added };
+}
+export function fixSecretPermissions(secretsPath) {
+    if (!existsSync(secretsPath))
+        return false;
+    const before = readMode(secretsPath);
+    if ((before & 0o077) === 0)
+        return false;
+    chmodSync(secretsPath, 0o600);
+    return true;
+}
+export function readMode(path) {
+    return existsSync(path) ? (statSync(path).mode & 0o777) : 0;
+}
+//# sourceMappingURL=repair.js.map

package/dist/repair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair.js","sourceRoot":"","sources":["../src/repair.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,cAAc;IACd,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,cAAc;CACf,CAAC;AAQF,MAAM,UAAU,sCAAsC,CAAC,OAAe;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,kCAAkC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAAe;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,sCAAsC,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAEnE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,+CAA+C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAChH,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC"}