skillwiki 0.10.108 → 0.10.110

package/dist/{chunk-DTTKCCQ4.js → chunk-KX5Y3GSX.js}

@@ -3,11 +3,11 @@ import {
   ROOT_INDEX_SECTION_ORDER,
   atomicWriteText,
   buildRootIndexUniverse
-} from "./chunk-HMHMCPCE.js";
+} from "./chunk-WPJHDRTP.js";
 import {
   err,
   ok
-} from "./chunk-GJC2CI3W.js";
+} from "./chunk-R2DJ7IJ5.js";
 
 // src/utils/index-projection.ts
 import { readFile } from "fs/promises";

package/dist/{chunk-QU2IXZRN.js → chunk-NA3TZ4JN.js}

@@ -8,7 +8,7 @@ import {
   readLogEvents,
   resolveExistingRegularFileInsideVault,
   writeLogEvent
-} from "./chunk-JCDAEZVD.js";
+} from "./chunk-5MV5SSRM.js";
 import {
   ExitCode,
   RawSourceSchema,
@@ -19,7 +19,7 @@ import {
   scanSensitiveContent,
   scanVault,
   splitFrontmatter
-} from "./chunk-GJC2CI3W.js";
+} from "./chunk-R2DJ7IJ5.js";
 
 // src/commands/sources.ts
 import { readFile as readFile4 } from "fs/promises";

package/dist/{chunk-PGD3J2GE.js → chunk-QU2CKXM4.js}

@@ -2,7 +2,7 @@
 import {
   atomicWriteText,
   buildRootIndexUniverse
-} from "./chunk-HMHMCPCE.js";
+} from "./chunk-WPJHDRTP.js";
 import {
   authorizeRawOperation,
   buildSourceReferenceIndex,
@@ -22,7 +22,7 @@ import {
   resolveExistingRegularFileInsideVault,
   stripFencedBlocks,
   writeLogEvent
-} from "./chunk-JCDAEZVD.js";
+} from "./chunk-5MV5SSRM.js";
 import {
   ExitCode,
   FleetManifestSchema,
@@ -30,6 +30,7 @@ import {
   extractFrontmatter,
   filterGitIgnoredRelativePaths,
   getErrorMessage,
+  isClipOutboxKey,
   isVaultSyncKey,
   mapWithConcurrency,
   ok,
@@ -41,11 +42,27 @@ import {
   scanVault,
   splitFrontmatter,
   vaultIoConcurrency
-} from "./chunk-GJC2CI3W.js";
+} from "./chunk-R2DJ7IJ5.js";
+
+// src/utils/home.ts
+import { homedir } from "os";
+import { resolve } from "path";
+function resolveSkillwikiHome(home, env = process.env) {
+  for (const candidate of [home, env.HOME, env.USERPROFILE]) {
+    if (candidate?.trim()) return resolve(candidate);
+  }
+  try {
+    const fallback = homedir();
+    if (fallback?.trim()) return resolve(fallback);
+  } catch {
+    throw new Error("Could not resolve SkillWiki home directory");
+  }
+  throw new Error("Could not resolve SkillWiki home directory");
+}
 
 // src/utils/managed-write-preflight.ts
 import { existsSync as existsSync11 } from "fs";
-import { join as join21, resolve as resolve6 } from "path";
+import { join as join21, resolve as resolve7 } from "path";
 
 // src/commands/fleet.ts
 import { readFile as readFile2 } from "fs/promises";
@@ -88,7 +105,7 @@ function parseDotenvText(text) {
     if (eq <= 0) continue;
     const key = line.slice(0, eq).trim();
     const value = line.slice(eq + 1).trim();
-    if (!_whitelist.has(key) && !isValidWikiProfileKey(key) && !isVaultSyncKey(key)) continue;
+    if (!_whitelist.has(key) && !isValidWikiProfileKey(key) && !isVaultSyncKey(key) && !isClipOutboxKey(key)) continue;
     if (value.length === 0) continue;
     out[key] = value;
   }
@@ -175,7 +192,7 @@ async function runFleetValidate(input) {
 }
 async function runFleetContext(input) {
   const env = input.env ?? process.env;
-  const home = input.home ?? env.HOME ?? "";
+  const home = resolveSkillwikiHome(input.home, env);
   const cwd = input.cwd ?? process.cwd();
   const osHostname = input.osHostname ?? safeEnvValue(env.HOSTNAME) ?? nodeHostname();
   const user = input.user ?? safeEnvValue(env.USER) ?? safeUserName();
@@ -297,7 +314,7 @@ async function runFleetContext(input) {
 }
 function fleetContextEnv(input) {
   const env = input.env ?? process.env;
-  const home = input.home ?? env.HOME ?? "";
+  const home = resolveSkillwikiHome(input.home, env);
   const osHostname = input.osHostname ?? safeEnvValue(env.HOSTNAME) ?? nodeHostname();
   const vault = input.vault ?? safeEnvValue(env.WIKI_PATH);
   const file = input.file ?? (vault ? join(vault, FLEET_REL_PATH) : void 0);
@@ -2414,7 +2431,7 @@ async function runTopicMapCheck(input) {
 // src/commands/dedup.ts
 import { createHash as createHash3 } from "crypto";
 import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname3, join as join10, posix, resolve } from "path";
+import { dirname as dirname3, join as join10, posix, resolve as resolve2 } from "path";
 
 // src/utils/rclone.ts
 import { execFile } from "child_process";
@@ -2649,7 +2666,7 @@ async function runDedup(input) {
   const manifest = safeEntries.length > 0 ? {
     version: 1,
     created_at: (/* @__PURE__ */ new Date()).toISOString(),
-    vault: resolve(input.vault),
+    vault: resolve2(input.vault),
     entries: safeEntries
   } : void 0;
   const remoteDeleteCount = safeEntries.reduce((count, entry) => count + entry.duplicates.length, 0);
@@ -2843,11 +2860,11 @@ function readManifest(path) {
   }
 }
 function validateManifestLocalState(vault, manifest) {
-  if (resolve(manifest.vault) !== resolve(vault)) {
+  if (resolve2(manifest.vault) !== resolve2(vault)) {
     return err("APPROVAL_INVALID", {
       message: "dedup manifest belongs to a different vault",
       manifest_vault: manifest.vault,
-      vault: resolve(vault)
+      vault: resolve2(vault)
     });
   }
   for (const entry of manifest.entries) {
@@ -2929,7 +2946,7 @@ async function runRawBodyDedup(vault, scan, pageTextCache) {
 
 // src/commands/audit.ts
 import { readFile as readFile11, stat as stat2 } from "fs/promises";
-import { dirname as dirname4, resolve as resolve2, join as join11 } from "path";
+import { dirname as dirname4, resolve as resolve3, join as join11 } from "path";
 async function runAudit(input) {
   let text;
   try {
@@ -2941,7 +2958,7 @@ async function runAudit(input) {
   if (!fm.ok) return { exitCode: ExitCode.INVALID_FRONTMATTER, result: fm };
   const split = splitFrontmatter(text);
   const body = split.ok ? split.data.body : text;
-  const vault = await findVaultRoot(dirname4(resolve2(input.file)));
+  const vault = await findVaultRoot(dirname4(resolve3(input.file)));
   if (!vault) return { exitCode: ExitCode.VAULT_PATH_INVALID, result: err("VAULT_PATH_INVALID") };
   const markers = extractCitationMarkers(body);
   const resolved = await Promise.all(markers.map(async (m) => {
@@ -3043,7 +3060,7 @@ async function validateCompoundReferences(vault, existingScan, pageTextCache) {
 // src/commands/path-too-long.ts
 import { existsSync as existsSync3 } from "fs";
 import { mkdir as mkdir4, readFile as readFile12, rename as rename3, unlink as unlink2 } from "fs/promises";
-import { dirname as dirname5, join as join12, posix as posix2, resolve as resolve3 } from "path";
+import { dirname as dirname5, join as join12, posix as posix2, resolve as resolve4 } from "path";
 var MAX_PATH_LENGTH = 240;
 var WINDOWS_ABSOLUTE_PATH_LIMIT = 259;
 async function runPathTooLong(input) {
@@ -3136,7 +3153,7 @@ function findPathTooLongViolations(pages, maxLength) {
 }
 function maxFixPathLength(vault) {
   if (process.platform !== "win32") return MAX_PATH_LENGTH;
-  const root = resolve3(vault);
+  const root = resolve4(vault);
   const separatorBudget = root.endsWith("\\") || root.endsWith("/") ? 0 : 1;
   const absoluteSafeRelLength = WINDOWS_ABSOLUTE_PATH_LIMIT - root.length - separatorBudget;
   return Math.max(1, Math.min(MAX_PATH_LENGTH, absoluteSafeRelLength));
@@ -5723,7 +5740,7 @@ function probeRemoteHealth(input) {
 // src/utils/vault-sync-helper.ts
 import { spawnSync } from "child_process";
 import { existsSync as existsSync7 } from "fs";
-import { homedir, platform } from "os";
+import { platform } from "os";
 import { dirname as dirname6, join as join16 } from "path";
 import { fileURLToPath } from "url";
 var HELPER_NAME = "wiki-pull-with-auto-resolve.sh";
@@ -5746,13 +5763,7 @@ function candidateHelperPaths(input = { vault: "" }) {
     paths.push(join16(here, "..", "..", "vault-sync", "scripts", HELPER_NAME));
     paths.push(join16(here, "..", "..", "..", "vault-sync", "scripts", HELPER_NAME));
   }
-  const home = input.home ?? env.HOME ?? env.USERPROFILE ?? (() => {
-    try {
-      return homedir();
-    } catch {
-      return void 0;
-    }
-  })();
+  const home = resolveSkillwikiHome(input.home, env);
   if (home) {
     const xdg = env.XDG_DATA_HOME;
     const isDarwin = platform() === "darwin";
@@ -5942,7 +5953,7 @@ function runSyncStatus(input) {
     output.stashes = stashes;
   }
   if (input.includeRemoteHealth) {
-    const home = input.home ?? process.env.HOME ?? "";
+    const home = resolveSkillwikiHome(input.home);
     const remote_health = probeRemoteHealth({
       vaultPath: vault,
       home,
@@ -6527,7 +6538,7 @@ import {
   writeFileSync as writeFileSync4
 } from "fs";
 import { hostname } from "os";
-import { dirname as dirname7, join as join18, resolve as resolve4 } from "path";
+import { dirname as dirname7, join as join18, resolve as resolve5 } from "path";
 function managedWriteLockPath(vault) {
   const gitPath = git(vault, ["rev-parse", "--git-path", "vault-sync/managed-write.lock"]);
   if (gitPath) return gitPath.startsWith("/") ? gitPath : join18(vault, gitPath);
@@ -6572,7 +6583,7 @@ function hasLocalOwnerProof(vault, record) {
 }
 function reclaimDeadManagedWriteLockOwner(vault, options = {}) {
   const path = managedWriteLockPath(vault);
-  const gitStateVault = resolve4(options.gitStateVault ?? vault);
+  const gitStateVault = resolve5(options.gitStateVault ?? vault);
   if (!existsSync9(path)) return ok({ reclaimed: false });
   const record = readLockRecord(path);
   if (!record) {
@@ -6859,7 +6870,7 @@ function supersedeStaleReviewRequiredJournals(vault, opts = {}) {
 
 // src/utils/snapshot-worktree.ts
 import { readFileSync as readFileSync8 } from "fs";
-import { join as join20, resolve as resolve5 } from "path";
+import { join as join20, resolve as resolve6 } from "path";
 function readSkillWikiConfig(path) {
   try {
     return parseDotenvText(readFileSync8(path, "utf8"));
@@ -6888,12 +6899,12 @@ function resolveConfiguredSnapshotWorktree(home) {
   if (!home) return void 0;
   const config = readSkillWikiConfig(join20(home, ".skillwiki", ".env"));
   const explicit = config["vault_sync.snapshot_worktree"];
-  if (explicit) return resolve5(explicit);
+  if (explicit) return resolve6(explicit);
   const snapshotProfile = config["vault_sync.snapshot_profile"];
   if (!snapshotProfile) return void 0;
-  const profile = readSnapshotProfile(resolve5(snapshotProfile));
+  const profile = readSnapshotProfile(resolve6(snapshotProfile));
   const fromProfile = profile.WIKI_GIT_WORKTREE ?? profile.SNAPSHOT_WORKTREE ?? profile.GIT_DIR;
-  return fromProfile ? resolve5(fromProfile) : void 0;
+  return fromProfile ? resolve6(fromProfile) : void 0;
 }
 
 // src/utils/managed-write-preflight.ts
@@ -6910,7 +6921,7 @@ var DEFAULT_DEPS = {
   converge: (input) => runVaultSyncPullHelper(input),
   resolveConfiguredSnapshotWorktree,
   syncPeers: runSyncPeers,
-  sleepMs: (ms) => new Promise((resolve7) => setTimeout(resolve7, ms)),
+  sleepMs: (ms) => new Promise((resolve8) => setTimeout(resolve8, ms)),
   nowMs: () => Date.now(),
   logHeartbeat: (message) => {
     process.stderr.write(`${message}
@@ -7102,8 +7113,8 @@ function isGitVault(vault) {
   return Boolean(git(vault, ["rev-parse", "--absolute-git-dir"]));
 }
 async function runManagedWritePreflight(input, deps = DEFAULT_DEPS) {
-  const mutationVault = resolve6(input.vault);
-  let convergenceVault = input.convergenceVault && resolve6(input.convergenceVault) !== mutationVault ? resolve6(input.convergenceVault) : void 0;
+  const mutationVault = resolve7(input.vault);
+  let convergenceVault = input.convergenceVault && resolve7(input.convergenceVault) !== mutationVault ? resolve7(input.convergenceVault) : void 0;
   let convergenceSource = convergenceVault ? "explicit" : "single-path";
   const mutationBlocker = preflightBlocker(mutationVault);
   if (mutationBlocker) {
@@ -7181,7 +7192,7 @@ async function runManagedWritePreflight(input, deps = DEFAULT_DEPS) {
     };
   }
   if (!convergenceVault && host.role === "snapshotter" && host.protected === true) {
-    const home = input.home ?? input.env?.HOME ?? process.env.HOME ?? "";
+    const home = resolveSkillwikiHome(input.home, input.env);
     const configured = (deps.resolveConfiguredSnapshotWorktree ?? resolveConfiguredSnapshotWorktree)(home);
     if (!configured) {
       return {
@@ -7193,7 +7204,7 @@ async function runManagedWritePreflight(input, deps = DEFAULT_DEPS) {
         })
       };
     }
-    convergenceVault = resolve6(configured);
+    convergenceVault = resolve7(configured);
     convergenceSource = "configured";
     if (convergenceVault === mutationVault) {
       return {
@@ -7302,9 +7313,9 @@ async function runManagedWritePreflight(input, deps = DEFAULT_DEPS) {
   };
 }
 async function runManagedWriteTransaction(input, deps = DEFAULT_DEPS) {
-  const mutationVault = resolve6(input.vault);
+  const mutationVault = resolve7(input.vault);
   const lock = acquireManagedWriteLock(mutationVault, input.command, {
-    gitStateVault: input.convergenceVault ? resolve6(input.convergenceVault) : mutationVault
+    gitStateVault: input.convergenceVault ? resolve7(input.convergenceVault) : mutationVault
   });
   if (!lock.ok) {
     return { exitCode: ExitCode.SYNC_LOCK_HELD, result: lock };
@@ -7357,6 +7368,7 @@ async function runManagedWriteTransaction(input, deps = DEFAULT_DEPS) {
 }
 
 export {
+  resolveSkillwikiHome,
   readLastOp,
   appendLastOp,
   clearLastOp,

package/dist/{chunk-GJC2CI3W.js → chunk-R2DJ7IJ5.js}

@@ -419,6 +419,106 @@ function parseVaultSyncKeyValue(key, value) {
   const first = parsed.error.issues[0];
   return { ok: false, message: first?.message ?? "invalid value" };
 }
+var clipBool = z.enum(["true", "false"]);
+var clipIntString = (min, max) => z.string().regex(/^[0-9]+$/, "must be a decimal integer").refine((s) => {
+  const n = Number(s);
+  return Number.isInteger(n) && n >= min && n <= max;
+}, { message: `must be an integer ${min}\u2013${max}` });
+var clipHttpsUrl = z.string().min(1).refine((s) => {
+  try {
+    const u = new URL(s);
+    return u.protocol === "https:" && u.username === "" && u.password === "";
+  } catch {
+    return false;
+  }
+}, { message: "must be an https URL without userinfo" });
+var clipCredentialRef = z.string().min(1).max(128).regex(
+  /^[a-zA-Z0-9_.-]+$/,
+  "must be a credential reference name, never a secret value"
+);
+var CLIP_IMAGE_TYPES = ["png", "jpeg", "gif", "webp"];
+var CLIP_ALLOWED_PREFIXES = "raw/articles,raw/assets";
+var CLIP_OUTBOX_DEFAULTS = {
+  enabled: "false",
+  vault_id: "central",
+  allowed_prefixes: CLIP_ALLOWED_PREFIXES,
+  destination: "seaweed-wiki:cloud/wiki",
+  mode: "event-watch",
+  poll_fallback_enabled: "true",
+  reconcile_seconds: "3600",
+  debounce_ms: "500",
+  stable_hash_ms: "500",
+  max_article_bytes: "2097152",
+  max_images: "64",
+  max_image_bytes: "20971520",
+  max_bundle_bytes: "104857600",
+  max_pixels: "40000000",
+  download_concurrency: "4",
+  image_types: CLIP_IMAGE_TYPES.join(","),
+  max_redirects: "5",
+  request_timeout_ms: "30000",
+  localize_timeout_ms: "120000",
+  watcher_label: "com.karlchow.skillwiki-clip-outbox"
+};
+var ClipOutboxConfigSchema = z.object({
+  "clip_outbox.enabled": clipBool,
+  "clip_outbox.root": absolutePath,
+  "clip_outbox.state_root": absolutePath,
+  "clip_outbox.mirror_root": absolutePath,
+  "clip_outbox.d8_note_root": absolutePath,
+  "clip_outbox.d8_note_absent": clipBool,
+  "clip_outbox.vault_id": z.literal("central"),
+  "clip_outbox.allowed_prefixes": z.string().refine((s) => {
+    const parts = s.split(",").map((p) => p.trim()).filter(Boolean).sort();
+    return parts.join(",") === "raw/articles,raw/assets";
+  }, { message: "must be exactly raw/articles,raw/assets" }),
+  "clip_outbox.destination": z.literal("seaweed-wiki:cloud/wiki"),
+  "clip_outbox.mode": z.literal("event-watch"),
+  "clip_outbox.poll_fallback_enabled": clipBool,
+  "clip_outbox.reconcile_seconds": clipIntString(1, 86400),
+  "clip_outbox.debounce_ms": clipIntString(100, 5e3),
+  "clip_outbox.stable_hash_ms": clipIntString(100, 5e3),
+  "clip_outbox.max_article_bytes": clipIntString(1, 2097152),
+  "clip_outbox.max_images": clipIntString(0, 64),
+  "clip_outbox.max_image_bytes": clipIntString(1, 20971520),
+  "clip_outbox.max_bundle_bytes": clipIntString(1, 104857600),
+  "clip_outbox.max_pixels": clipIntString(1, 4e7),
+  "clip_outbox.download_concurrency": clipIntString(1, 4),
+  "clip_outbox.image_types": z.string().refine((s) => {
+    const parts = s.split(",").map((p) => p.trim()).filter(Boolean);
+    if (parts.length === 0) return false;
+    const allowed = new Set(CLIP_IMAGE_TYPES);
+    const seen = /* @__PURE__ */ new Set();
+    for (const p of parts) {
+      if (!allowed.has(p) || seen.has(p)) return false;
+      seen.add(p);
+    }
+    return true;
+  }, { message: "must be a unique subset of png,jpeg,gif,webp" }),
+  "clip_outbox.max_redirects": clipIntString(0, 5),
+  "clip_outbox.request_timeout_ms": clipIntString(1, 3e4),
+  "clip_outbox.localize_timeout_ms": clipIntString(1, 12e4),
+  "clip_outbox.ready_url": clipHttpsUrl,
+  "clip_outbox.s3_credential_ref": clipCredentialRef,
+  "clip_outbox.ready_credential_ref": clipCredentialRef,
+  "clip_outbox.watcher_label": z.literal("com.karlchow.skillwiki-clip-outbox")
+}).strict();
+var CLIP_OUTBOX_KEYS = Object.keys(ClipOutboxConfigSchema.shape);
+function isClipOutboxKey(key) {
+  return CLIP_OUTBOX_KEYS.includes(key);
+}
+function parseClipOutboxKeyValue(key, value) {
+  if (!isClipOutboxKey(key)) {
+    return { ok: false, message: `unknown clip_outbox key: ${key}` };
+  }
+  const fieldSchema = ClipOutboxConfigSchema.shape[key];
+  const parsed = fieldSchema.safeParse(value);
+  if (parsed.success) {
+    return { ok: true };
+  }
+  const first = parsed.error.issues[0];
+  return { ok: false, message: first?.message ?? "invalid value" };
+}
 function detectSchema(fm) {
   const COMPOUND_TYPES = /* @__PURE__ */ new Set(["lesson", "pattern", "antipattern", "gotcha"]);
   if (typeof fm.type === "string" && COMPOUND_TYPES.has(fm.type) && "project" in fm) return { schema: "compound" };
@@ -834,6 +934,9 @@ export {
   FleetManifestSchema,
   isVaultSyncKey,
   parseVaultSyncKeyValue,
+  CLIP_OUTBOX_DEFAULTS,
+  isClipOutboxKey,
+  parseClipOutboxKeyValue,
   detectSchema,
   isBlockedHost,
   getErrorMessage,

package/dist/{chunk-HMHMCPCE.js → chunk-WPJHDRTP.js}

@@ -8,7 +8,7 @@ import {
   ok,
   scanSensitiveContent,
   scanVault
-} from "./chunk-GJC2CI3W.js";
+} from "./chunk-R2DJ7IJ5.js";
 
 // src/utils/atomic-write.ts
 import { randomBytes } from "crypto";