skillwiki 0.10.16 → 0.10.18

package/dist/cli.js

@@ -83,7 +83,7 @@ import {
   upsertIndexEntry,
   validateLogEvent,
   writeLogEvent
-} from "./chunk-24MVNAFJ.js";
+} from "./chunk-IAPD6YTC.js";
 import {
   normalizeDistTag,
   readCache,
@@ -105,13 +105,11 @@ import {
   scanVault,
   splitFrontmatter,
   writeRootIndexProjection
-} from "./chunk-NMUYMNNB.js";
+} from "./chunk-IGCW3DR2.js";
 import {
-  acquireManagedWriteLock,
-  releaseManagedWriteLock,
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-UJLSUJB6.js";
+} from "./chunk-QJPCCW4N.js";
 import {
   FLEET_REL_PATH,
   canSupersedeJournal,
@@ -130,6 +128,7 @@ import {
   parseJournalEnv,
   profileKey,
   readJournal,
+  resolveConfiguredSnapshotWorktree,
   resolveFleetHostId,
   runFleetContext,
   runFleetValidate,
@@ -138,7 +137,7 @@ import {
   snapshotterAliasForLocalHost,
   supersedeStaleReviewRequiredJournals,
   writeDotenv
-} from "./chunk-OWPQJOFG.js";
+} from "./chunk-GNS2ZV5P.js";
 import {
   ExitCode,
   MetaSchema,
@@ -146,10 +145,10 @@ import {
   err,
   isBlockedHost,
   ok
-} from "./chunk-C5OLZRRM.js";
+} from "./chunk-Y6KRDGI2.js";
 
 // src/cli.ts
-import { join as join37 } from "path";
+import { join as join36 } from "path";
 import { Command } from "commander";
 
 // src/utils/output.ts
@@ -833,12 +832,11 @@ async function runInit(input) {
 }
 
 // src/commands/index-rebuild.ts
-import { readFileSync as readFileSync3 } from "fs";
-import { join as join7 } from "path";
+import { readFileSync as readFileSync2 } from "fs";
+import { join as join6 } from "path";
 
 // src/utils/protected-vault-write-guard.ts
-import { readFileSync as readFileSync2 } from "fs";
-import { join as join6, resolve as resolvePath } from "path";
+import { resolve as resolvePath } from "path";
 async function guardProtectedVaultWrite(input) {
   const env = input.env ?? process.env;
   const home = input.home ?? process.env.HOME ?? "";
@@ -860,14 +858,15 @@ async function guardProtectedVaultWrite(input) {
   if (!host || host.role !== "snapshotter" || host.protected !== true) {
     return { blocked: false };
   }
-  const snapshotWorktree = resolveSnapshotWorktree(home);
   const targetVault = resolvePath(input.vault);
   const canonicalLiveVault = liveVaultPath ? resolvePath(liveVaultPath) : void 0;
-  const canonicalSnapshotWorktree = snapshotWorktree ? resolvePath(snapshotWorktree) : void 0;
   if (canonicalLiveVault && targetVault === canonicalLiveVault) {
     return { blocked: false };
   }
-  if (canonicalSnapshotWorktree && targetVault === canonicalSnapshotWorktree) {
+  const canonicalSnapshotWorktree = resolvePath(
+    resolveConfiguredSnapshotWorktree(home) ?? "/root/wiki-git"
+  );
+  if (targetVault === canonicalSnapshotWorktree) {
     return {
       blocked: true,
       exitCode: ExitCode.PROTECTED_SNAPSHOTTER_WRITE_BLOCKED,
@@ -903,35 +902,6 @@ async function resolveLiveVaultPath(input) {
   });
   return resolved.ok ? resolved.data.path : void 0;
 }
-function resolveSnapshotWorktree(home) {
-  const skillwikiEnv = join6(home, ".skillwiki", ".env");
-  const explicitWorktree = readEnvKey(skillwikiEnv, ["vault_sync.snapshot_worktree"]);
-  if (explicitWorktree) return explicitWorktree;
-  const snapshotProfile = readEnvKey(skillwikiEnv, ["vault_sync.snapshot_profile"]);
-  if (snapshotProfile) {
-    const fromProfile = readEnvKey(snapshotProfile, ["WIKI_GIT_WORKTREE", "SNAPSHOT_WORKTREE", "GIT_DIR"]);
-    if (fromProfile) return fromProfile;
-  }
-  return "/root/wiki-git";
-}
-function readEnvKey(path, keys) {
-  try {
-    const content = readFileSync2(path, "utf8");
-    for (const line of content.split(/\r?\n/)) {
-      const trimmed = line.trim();
-      if (trimmed.length === 0 || trimmed.startsWith("#")) continue;
-      const eq = trimmed.indexOf("=");
-      if (eq <= 0) continue;
-      const key = trimmed.slice(0, eq).trim();
-      if (!keys.includes(key)) continue;
-      const value = trimmed.slice(eq + 1).trim();
-      if (value.length > 0) return value;
-    }
-  } catch {
-    return void 0;
-  }
-  return void 0;
-}
 
 // src/commands/index-rebuild.ts
 async function runIndexRebuild(input) {
@@ -942,7 +912,7 @@ async function runIndexRebuild(input) {
   }
   let current = "";
   try {
-    current = readFileSync3(join7(input.vault, "index.md"), "utf8");
+    current = readFileSync2(join6(input.vault, "index.md"), "utf8");
   } catch {
     current = "";
   }
@@ -991,7 +961,7 @@ async function runIndexRebuild(input) {
       }
       let installed = "";
       try {
-        installed = readFileSync3(join7(input.vault, "index.md"), "utf8");
+        installed = readFileSync2(join6(input.vault, "index.md"), "utf8");
       } catch (error) {
         return {
           exitCode: ExitCode.WRITE_FAILED,
@@ -1021,14 +991,14 @@ async function runIndexRebuild(input) {
 
 // src/commands/derived-conflicts.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync, readFileSync as readFileSync5, writeFileSync as writeFileSync2 } from "fs";
-import { join as join9 } from "path";
+import { existsSync, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "fs";
+import { join as join8 } from "path";
 
 // src/utils/log-merge.ts
 import { execFileSync } from "child_process";
 import { mkdtempSync, writeFileSync, rmSync } from "fs";
 import { tmpdir } from "os";
-import { join as join8 } from "path";
+import { join as join7 } from "path";
 var ENTRY_RE = /^## \[/m;
 var OPERATION_MARKER_RE = /<!--\s*skillwiki-(?:page-publish|log-op):([a-f0-9]{64})\s*-->/i;
 function splitLog(text) {
@@ -1047,11 +1017,11 @@ function publishId(entry) {
   return OPERATION_MARKER_RE.exec(entry)?.[1]?.toLowerCase();
 }
 function unionUnstructured(base, ours, theirs) {
-  const dir = mkdtempSync(join8(tmpdir(), "log-union-"));
+  const dir = mkdtempSync(join7(tmpdir(), "log-union-"));
   try {
-    const basePath = join8(dir, "base");
-    const oursPath = join8(dir, "ours");
-    const theirsPath = join8(dir, "theirs");
+    const basePath = join7(dir, "base");
+    const oursPath = join7(dir, "ours");
+    const theirsPath = join7(dir, "theirs");
     writeFileSync(basePath, base.endsWith("\n") || base.length === 0 ? base : `${base}
 `);
     writeFileSync(oursPath, ours.endsWith("\n") || ours.length === 0 ? ours : `${ours}
@@ -1121,10 +1091,10 @@ function classifyDerivedPath(path) {
 function journalPath(vault, operationId2) {
   const gitPath = git(vault, ["rev-parse", "--git-path", `vault-sync/operations/${operationId2}.env`]);
   if (!gitPath) return null;
-  return gitPath.startsWith("/") ? gitPath : join9(vault, gitPath);
+  return gitPath.startsWith("/") ? gitPath : join8(vault, gitPath);
 }
 function readJournalFields(path) {
-  const text = readFileSync5(path, "utf8");
+  const text = readFileSync4(path, "utf8");
   const out = {};
   for (const line of text.split("\n")) {
     const i = line.indexOf("=");
@@ -1296,7 +1266,7 @@ async function runDerivedConflictResolution(input) {
       if (hasMarkers(path, resolved.data)) {
         throw new Error(`${path}: conflict markers remain after resolve`);
       }
-      writeFileSync2(join9(vault, path), resolved.data, "utf8");
+      writeFileSync2(join8(vault, path), resolved.data, "utf8");
       execFileSync2("git", ["add", "--", path], { cwd: vault, stdio: ["pipe", "pipe", "pipe"] });
       staged.push(path);
     }
@@ -1341,8 +1311,8 @@ async function runDerivedConflictResolution(input) {
 }
 
 // src/commands/log-materialize.ts
-import { readFileSync as readFileSync6 } from "fs";
-import { join as join10 } from "path";
+import { readFileSync as readFileSync5 } from "fs";
+import { join as join9 } from "path";
 
 // src/utils/log-projection.ts
 function day(event) {
@@ -1448,7 +1418,7 @@ async function runLogMaterialize(input) {
   const text = renderLogProjection(events.data);
   let current = "";
   try {
-    current = readFileSync6(join10(input.vault, "log.md"), "utf8");
+    current = readFileSync5(join9(input.vault, "log.md"), "utf8");
   } catch {
     current = "";
   }
@@ -1492,9 +1462,9 @@ async function runLogMaterialize(input) {
       })
     };
   }
-  const written = await atomicWriteText(join10(input.vault, "log.md"), text);
+  const written = await atomicWriteText(join9(input.vault, "log.md"), text);
   if (!written.ok) return { exitCode: ExitCode.WRITE_FAILED, result: written };
-  const installed = readFileSync6(join10(input.vault, "log.md"), "utf8");
+  const installed = readFileSync5(join9(input.vault, "log.md"), "utf8");
   if (installed !== text) {
     return {
       exitCode: ExitCode.WRITE_FAILED,
@@ -1513,8 +1483,8 @@ async function runLogMaterialize(input) {
 }
 
 // src/commands/log-migrate-legacy.ts
-import { readFileSync as readFileSync7 } from "fs";
-import { join as join11 } from "path";
+import { readFileSync as readFileSync6 } from "fs";
+import { join as join10 } from "path";
 
 // src/utils/operation-id.ts
 import { createHash as createHash2 } from "crypto";
@@ -1543,7 +1513,7 @@ function splitLegacyBlocks(text) {
 async function runLogMigrateLegacy(input) {
   let text = "";
   try {
-    text = readFileSync7(join11(input.vault, "log.md"), "utf8");
+    text = readFileSync6(join10(input.vault, "log.md"), "utf8");
   } catch {
     return {
       exitCode: ExitCode.OK,
@@ -1599,8 +1569,8 @@ async function runLogMigrateLegacy(input) {
 }
 
 // src/commands/projections-materialize.ts
-import { readFileSync as readFileSync8 } from "fs";
-import { join as join12 } from "path";
+import { readFileSync as readFileSync7 } from "fs";
+import { join as join11 } from "path";
 var defaultDeps = {
   writeText: (path, text) => atomicWriteText(path, text)
 };
@@ -1616,11 +1586,11 @@ async function runProjectionsMaterialize(input, deps = defaultDeps) {
   let curIndex = "";
   let curLog = "";
   try {
-    curIndex = readFileSync8(join12(input.vault, "index.md"), "utf8");
+    curIndex = readFileSync7(join11(input.vault, "index.md"), "utf8");
   } catch {
   }
   try {
-    curLog = readFileSync8(join12(input.vault, "log.md"), "utf8");
+    curLog = readFileSync7(join11(input.vault, "log.md"), "utf8");
   } catch {
   }
   const indexDrift = curIndex !== indexProj.data.text;
@@ -1654,8 +1624,8 @@ async function runProjectionsMaterialize(input, deps = defaultDeps) {
       })
     };
   }
-  const indexPath = join12(input.vault, "index.md");
-  const logPath = join12(input.vault, "log.md");
+  const indexPath = join11(input.vault, "index.md");
+  const logPath = join11(input.vault, "log.md");
   const indexWrite = await deps.writeText(indexPath, indexProj.data.text);
   if (!indexWrite.ok) return { exitCode: ExitCode.WRITE_FAILED, result: indexWrite };
   const logWrite = await deps.writeText(logPath, logText);
@@ -1696,7 +1666,7 @@ async function runProjectionsMaterialize(input, deps = defaultDeps) {
 
 // src/commands/projections-repair-legacy.ts
 import { readdir as readdir3, readFile as readFile4 } from "fs/promises";
-import { join as join13 } from "path";
+import { join as join12 } from "path";
 var OPERATION_ID_RE = /^[0-9a-f]{64}$/;
 var LEGACY_KEYS = ["created", "kind", "note", "operation_id", "target"];
 var EVENT_KEYS = [
@@ -1759,7 +1729,7 @@ function normalizeLegacyTimestamp(value) {
   return ok(normalized);
 }
 async function findEventPath(vault, operationId2) {
-  const root = join13(vault, "meta", "log-events");
+  const root = join12(vault, "meta", "log-events");
   const matches = [];
   let days;
   try {
@@ -1772,12 +1742,12 @@ async function findEventPath(vault, operationId2) {
   }
   for (const day2 of days) {
     if (!day2.isDirectory()) continue;
-    const dayPath = join13(root, day2.name);
+    const dayPath = join12(root, day2.name);
     const entries = await readdir3(dayPath, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.isFile() || entry.name !== `${operationId2}.json`) continue;
       matches.push({
-        absolute: join13(dayPath, entry.name),
+        absolute: join12(dayPath, entry.name),
         relative: `meta/log-events/${day2.name}/${entry.name}`
       });
     }
@@ -1874,7 +1844,7 @@ async function runProjectionsRepairLegacy(input, deps = defaultDeps2) {
   }
   let indexText;
   try {
-    indexText = await readFile4(join13(input.vault, "index.md"), "utf8");
+    indexText = await readFile4(join12(input.vault, "index.md"), "utf8");
   } catch (error) {
     return {
       exitCode: ExitCode.SCHEME_REJECTED,
@@ -1909,7 +1879,7 @@ async function runProjectionsRepairLegacy(input, deps = defaultDeps2) {
   }
   let indexChanged = false;
   if (indexPlan.data.needed) {
-    const written = await deps.writeText(join13(input.vault, "index.md"), indexPlan.data.repaired);
+    const written = await deps.writeText(join12(input.vault, "index.md"), indexPlan.data.repaired);
     if (!written.ok) return { exitCode: ExitCode.WRITE_FAILED, result: written };
     indexChanged = written.data.changed;
   }
@@ -1920,7 +1890,7 @@ async function runProjectionsRepairLegacy(input, deps = defaultDeps2) {
       let rolledBack = false;
       let rollbackError;
       if (indexChanged) {
-        const rollback = await deps.writeText(join13(input.vault, "index.md"), indexPlan.data.current);
+        const rollback = await deps.writeText(join12(input.vault, "index.md"), indexPlan.data.current);
         rolledBack = rollback.ok;
         if (!rollback.ok) rollbackError = rollback;
       }
@@ -1952,7 +1922,7 @@ async function runProjectionsRepairLegacy(input, deps = defaultDeps2) {
 // src/commands/claim.ts
 import { mkdir as mkdir4, writeFile as writeFile3, readFile as readFile5 } from "fs/promises";
 import { existsSync as existsSync2, statSync } from "fs";
-import { join as join14 } from "path";
+import { join as join13 } from "path";
 function extractDate(filename) {
   const m = filename.match(/^(\d{4}-\d{2}-\d{2})/);
   return m?.[1] ?? "";
@@ -1967,7 +1937,7 @@ async function runClaim(input) {
   if (!existsSync2(input.vault) || !statSync(input.vault).isDirectory()) {
     return { exitCode: ExitCode.VAULT_PATH_INVALID, result: err("VAULT_PATH_INVALID", { path: input.vault }) };
   }
-  const absTranscript = join14(input.vault, input.transcript);
+  const absTranscript = join13(input.vault, input.transcript);
   if (!existsSync2(absTranscript)) {
     return { exitCode: ExitCode.FILE_NOT_FOUND, result: err("FILE_NOT_FOUND", { path: input.transcript }) };
   }
@@ -1983,7 +1953,7 @@ async function runClaim(input) {
       result: err("SCHEME_REJECTED", { message: "No project specified. Use --project or set project in transcript frontmatter." })
     };
   }
-  const projectDir = join14(input.vault, "projects", projectSlug);
+  const projectDir = join13(input.vault, "projects", projectSlug);
   if (!existsSync2(projectDir) || !statSync(projectDir).isDirectory()) {
     return {
       exitCode: ExitCode.PROJECT_NOT_FOUND,
@@ -2000,7 +1970,7 @@ async function runClaim(input) {
   }
   const workSlug = input.slug || extractSlugFromFilename(filename);
   const dirName = `${date}-${workSlug}`;
-  const workDir = join14(projectDir, "work", dirName);
+  const workDir = join13(projectDir, "work", dirName);
   const relWorkDir = `projects/${projectSlug}/work/${dirName}`;
   const relSpecPath = `${relWorkDir}/spec.md`;
   if (existsSync2(workDir)) {
@@ -2029,7 +1999,7 @@ async function runClaim(input) {
     `Claimed from ${input.transcript}`,
     ""
   ];
-  await writeFile3(join14(workDir, "spec.md"), specLines.join("\n"), "utf8");
+  await writeFile3(join13(workDir, "spec.md"), specLines.join("\n"), "utf8");
   appendLastOp(input.vault, {
     operation: "claim",
     summary: `claimed ${input.transcript} \u2192 ${relWorkDir}`,
@@ -2048,12 +2018,12 @@ async function runClaim(input) {
 }
 
 // src/commands/work-complete.ts
-import { existsSync as existsSync4, mkdirSync, readFileSync as readFileSync10, renameSync, writeFileSync as writeFileSync3 } from "fs";
-import { join as join16 } from "path";
+import { existsSync as existsSync4, mkdirSync, readFileSync as readFileSync9, renameSync, writeFileSync as writeFileSync3 } from "fs";
+import { join as join15 } from "path";
 
 // src/commands/work-validate.ts
-import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync9 } from "fs";
-import { join as join15 } from "path";
+import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync8 } from "fs";
+import { join as join14 } from "path";
 function normalizeWorkItemRel(workItem) {
   return workItem.replace(/\\/g, "/").replace(/^\.?\//, "");
 }
@@ -2110,7 +2080,7 @@ function validatePrMetadata(meta, findings) {
 }
 async function runWorkValidate(input) {
   const rel = normalizeWorkItemRel(input.workItem);
-  const workDir = join15(input.vault, rel);
+  const workDir = join14(input.vault, rel);
   if (!existsSync3(workDir)) {
     return {
       exitCode: ExitCode.FILE_NOT_FOUND,
@@ -2129,10 +2099,10 @@ async function runWorkValidate(input) {
     findings.push({ code: "missing_spec", path: `${rel}/spec.md`, message: "spec.md is required" });
   }
   for (const file of files) {
-    const abs = join15(workDir, file);
+    const abs = join14(workDir, file);
     let text;
     try {
-      text = readFileSync9(abs, "utf8");
+      text = readFileSync8(abs, "utf8");
     } catch {
       findings.push({ code: "unreadable", path: `${rel}/${file}`, message: "cannot read file" });
       continue;
@@ -2226,20 +2196,20 @@ async function runWorkValidate(input) {
 
 // src/commands/work-complete.ts
 function workCompleteJournalPath(vault, opId) {
-  return join16(vault, ".skillwiki", "work-complete", `${opId}.env`);
+  return join15(vault, ".skillwiki", "work-complete", `${opId}.env`);
 }
 function readWorkJournal(vault, opId) {
   const path = workCompleteJournalPath(vault, opId);
   if (!existsSync4(path)) return null;
   try {
-    return parseJournalEnv(readFileSync10(path, "utf8"));
+    return parseJournalEnv(readFileSync9(path, "utf8"));
   } catch {
     return null;
   }
 }
 function writeWorkJournal(vault, opId, fields) {
   const path = workCompleteJournalPath(vault, opId);
-  const dir = join16(vault, ".skillwiki", "work-complete");
+  const dir = join15(vault, ".skillwiki", "work-complete");
   mkdirSync(dir, { recursive: true });
   const tmp = `${path}.tmp.${process.pid}`;
   const body = serializeJournalEnv(fields, [
@@ -2259,11 +2229,11 @@ var DEFAULT_DEPS = {
 var PHASE_ORDER = ["validate", "evidence", "log", "projection", "commit", "done"];
 function resolveWorkDir(vault, workItem) {
   const rel = normalizeWorkItemRel(workItem);
-  const abs = join16(vault, rel);
+  const abs = join15(vault, rel);
   if (!existsSync4(abs)) {
     return err("FILE_NOT_FOUND", { path: rel });
   }
-  if (!existsSync4(join16(abs, "spec.md"))) {
+  if (!existsSync4(join15(abs, "spec.md"))) {
     return err("PREFLIGHT_FAILED", { reason: "missing-spec", path: rel });
   }
   return ok(abs);
@@ -2278,7 +2248,7 @@ function phaseIndex(phase) {
 async function patchFrontmatterStatus(filePath, extraBody) {
   let text;
   try {
-    text = readFileSync10(filePath, "utf8");
+    text = readFileSync9(filePath, "utf8");
   } catch (error) {
     return err("WRITE_FAILED", { path: filePath, stage: "read", message: String(error) });
   }
@@ -2311,7 +2281,7 @@ async function setStatusCompleted(filePath) {
   return patchFrontmatterStatus(filePath);
 }
 async function writeEvidence(workDir, opId, phases, writeText) {
-  const path = join16(workDir, "evidence.md");
+  const path = join15(workDir, "evidence.md");
   const body = [
     "---",
     "title: work-complete evidence",
@@ -2329,7 +2299,7 @@ async function writeEvidence(workDir, opId, phases, writeText) {
   return writeText(path, body);
 }
 async function markPlanComplete(workDir) {
-  const planPath = join16(workDir, "plan.md");
+  const planPath = join15(workDir, "plan.md");
   if (!existsSync4(planPath)) return ok(null);
   return patchFrontmatterStatus(planPath, (body) => body.replace(/- \[ \]/g, "- [x]"));
 }
@@ -2416,7 +2386,7 @@ async function runWorkComplete(input, deps = DEFAULT_DEPS) {
       advance("evidence");
     }
     if (phaseIndex(phase) <= phaseIndex("evidence")) {
-      const statusWrite = await setStatusCompleted(join16(workDir, "spec.md"));
+      const statusWrite = await setStatusCompleted(join15(workDir, "spec.md"));
       if (!statusWrite.ok) return writeFailure("evidence-spec", statusWrite);
       const planWrite = await markPlanComplete(workDir);
       if (!planWrite.ok) return writeFailure("evidence-plan", planWrite);
@@ -2455,7 +2425,7 @@ async function runWorkComplete(input, deps = DEFAULT_DEPS) {
       advance("projection");
     }
     if (phaseIndex(phase) <= phaseIndex("projection")) {
-      if (!existsSync4(join16(workDir, "evidence.md"))) {
+      if (!existsSync4(join15(workDir, "evidence.md"))) {
         const evidenceWrite = await writeEvidence(
           workDir,
           opId,
@@ -2485,7 +2455,7 @@ async function runWorkComplete(input, deps = DEFAULT_DEPS) {
     }
     let committed = false;
     if (phaseIndex(phase) <= phaseIndex("commit")) {
-      if (!input.noCommit && existsSync4(join16(input.vault, ".git"))) {
+      if (!input.noCommit && existsSync4(join15(input.vault, ".git"))) {
         try {
           appendLastOp(input.vault, {
             operation: "work-complete",
@@ -2545,8 +2515,8 @@ async function runWorkComplete(input, deps = DEFAULT_DEPS) {
 }
 
 // src/commands/health.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync11, renameSync as renameSync2, writeFileSync as writeFileSync4 } from "fs";
-import { dirname as dirname4, join as join17, resolve as resolve2 } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync10, renameSync as renameSync2, writeFileSync as writeFileSync4 } from "fs";
+import { dirname as dirname4, join as join16, resolve as resolve2 } from "path";
 import { platform } from "os";
 function statusFromCounts(counts) {
   if ((counts.error ?? 0) > 0) return "error";
@@ -2658,7 +2628,7 @@ function summarizeChecks(checks) {
 }
 function classifyLog(path, id, label, okPattern) {
   if (!existsSync5(path)) return { id, label, status: "warn", detail: `log file missing: ${path}` };
-  const lines = readFileSync11(path, "utf8").split(/\r?\n/).filter(Boolean);
+  const lines = readFileSync10(path, "utf8").split(/\r?\n/).filter(Boolean);
   if (lines.length === 0) return { id, label, status: "warn", detail: `log file empty: ${path}` };
   const statusLine = [...lines].reverse().find(
     (line) => /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z /.test(line) && (okPattern.test(line) || /\bFAIL\b|\bERROR\b/i.test(line))
@@ -2670,7 +2640,7 @@ function classifyLog(path, id, label, okPattern) {
 }
 function readVaultSyncRoleAndScope(home) {
   try {
-    const content = readFileSync11(join17(home, ".skillwiki", ".env"), "utf8");
+    const content = readFileSync10(join16(home, ".skillwiki", ".env"), "utf8");
     let role;
     let serviceScope;
     let snapshotScript;
@@ -2702,11 +2672,11 @@ function runVaultSyncHealth(home, syncMode, env = process.env) {
     };
   }
   const isMac = platform() === "darwin";
-  const shareDir = isMac ? join17(home, "Library", "Application Support", "vault-sync", "bin") : join17(home, ".local", "share", "vault-sync", "bin");
-  const logDir = isMac ? join17(home, "Library", "Logs") : join17(home, ".local", "state", "vault-sync", "log");
-  const filterPath = join17(home, ".config", "rclone", "wiki-push-filters.txt");
+  const shareDir = isMac ? join16(home, "Library", "Application Support", "vault-sync", "bin") : join16(home, ".local", "share", "vault-sync", "bin");
+  const logDir = isMac ? join16(home, "Library", "Logs") : join16(home, ".local", "state", "vault-sync", "log");
+  const filterPath = join16(home, ".config", "rclone", "wiki-push-filters.txt");
   const checks = [];
-  const pushScript = join17(shareDir, "wiki-push.sh");
+  const pushScript = join16(shareDir, "wiki-push.sh");
   if (syncMode === "optional" && !existsSync5(pushScript)) {
     return {
       status: "pass",
@@ -2722,7 +2692,7 @@ function runVaultSyncHealth(home, syncMode, env = process.env) {
   }
   const vsConfig = readVaultSyncRoleAndScope(home);
   if (vsConfig.role === "snapshotter") {
-    const snapshotScript = vsConfig.snapshotScript ?? join17(shareDir, "wiki-snapshot.sh");
+    const snapshotScript = vsConfig.snapshotScript ?? join16(shareDir, "wiki-snapshot.sh");
     const installed = existsSync5(snapshotScript) ? { id: "vault_sync_installed", label: "Vault sync installed", status: "pass", detail: `Found snapshot script: ${snapshotScript}` } : { id: "vault_sync_installed", label: "Vault sync installed", status: "error", detail: `Snapshot script not found at ${snapshotScript}` };
     const healthChecks = snapshotterHealthChecks(vsConfig.serviceScope ?? "user", logDir, env);
     const fetchNA = { id: "vault_sync_last_fetch_status", label: "Vault sync last fetch status", status: "pass", detail: "Snapshotter host \u2014 leaf wiki-fetch-notify log not applicable" };
@@ -2731,7 +2701,7 @@ function runVaultSyncHealth(home, syncMode, env = process.env) {
     if (!existsSync5(snapshotScript)) {
       guard = { id: "vault_sync_snapshot_guard", label: "Snapshot script guard", status: "error", detail: `Snapshot script not found at ${snapshotScript}` };
     } else {
-      const content = readFileSync11(snapshotScript, "utf8");
+      const content = readFileSync10(snapshotScript, "utf8");
       guard = content.includes("--max-delete") ? { id: "vault_sync_snapshot_guard", label: "Snapshot script guard", status: "pass", detail: `--max-delete present in ${snapshotScript}` } : { id: "vault_sync_snapshot_guard", label: "Snapshot script guard", status: "error", detail: `${snapshotScript} is missing --max-delete guard` };
     }
     const allChecks = [installed, ...healthChecks, fetchNA, filterNA, guard];
@@ -2746,24 +2716,24 @@ function runVaultSyncHealth(home, syncMode, env = process.env) {
   }
   checks.push(existsSync5(pushScript) ? { id: "vault_sync_installed", label: "Vault sync installed", status: "pass", detail: `Found: ${pushScript}` } : { id: "vault_sync_installed", label: "Vault sync installed", status: "error", detail: `Script missing: ${pushScript}` });
   if (isMac) {
-    const pushPlist = join17(home, "Library", "LaunchAgents", "com.karlchow.wiki-push.plist");
-    const fetchPlist = join17(home, "Library", "LaunchAgents", "com.karlchow.wiki-fetch.plist");
+    const pushPlist = join16(home, "Library", "LaunchAgents", "com.karlchow.wiki-push.plist");
+    const fetchPlist = join16(home, "Library", "LaunchAgents", "com.karlchow.wiki-fetch.plist");
     checks.push(existsSync5(pushPlist) && existsSync5(fetchPlist) ? { id: "vault_sync_jobs_enabled", label: "Vault sync jobs enabled", status: "pass", detail: "launchd unit files present (read-only mode)" } : { id: "vault_sync_jobs_enabled", label: "Vault sync jobs enabled", status: "warn", detail: "launchd unit files missing (read-only mode)" });
     checks.push({ id: "vault_sync_fuse_refresh_job", label: "Vault sync fuse refresh job", status: "pass", detail: "macOS host \u2014 check skipped" });
   } else {
-    const pushTimer = join17(home, ".config", "systemd", "user", "wiki-push.timer");
-    const fetchTimer = join17(home, ".config", "systemd", "user", "wiki-fetch.timer");
-    const fuseTimer = join17(home, ".config", "systemd", "user", "wiki-fuse-refresh.timer");
-    const fuseService = join17(home, ".config", "systemd", "user", "wiki-fuse-refresh.service");
+    const pushTimer = join16(home, ".config", "systemd", "user", "wiki-push.timer");
+    const fetchTimer = join16(home, ".config", "systemd", "user", "wiki-fetch.timer");
+    const fuseTimer = join16(home, ".config", "systemd", "user", "wiki-fuse-refresh.timer");
+    const fuseService = join16(home, ".config", "systemd", "user", "wiki-fuse-refresh.service");
     checks.push(existsSync5(pushTimer) && existsSync5(fetchTimer) ? { id: "vault_sync_jobs_enabled", label: "Vault sync jobs enabled", status: "pass", detail: "systemd timer unit files present (read-only mode)" } : { id: "vault_sync_jobs_enabled", label: "Vault sync jobs enabled", status: "warn", detail: "systemd timer unit files missing (read-only mode)" });
     checks.push(existsSync5(fuseTimer) && existsSync5(fuseService) ? { id: "vault_sync_fuse_refresh_job", label: "Vault sync fuse refresh job", status: "pass", detail: "wiki-fuse-refresh unit files present (read-only mode)" } : { id: "vault_sync_fuse_refresh_job", label: "Vault sync fuse refresh job", status: "warn", detail: "wiki-fuse-refresh unit files missing (read-only mode)" });
   }
-  checks.push(classifyLog(join17(logDir, "wiki-push.log"), "vault_sync_last_push_age", "Vault sync last push recency", /OK push/));
-  checks.push(classifyLog(join17(logDir, "wiki-fetch.log"), "vault_sync_last_fetch_status", "Vault sync last fetch status", /NOTIFY|OK behind|OK/));
+  checks.push(classifyLog(join16(logDir, "wiki-push.log"), "vault_sync_last_push_age", "Vault sync last push recency", /OK push/));
+  checks.push(classifyLog(join16(logDir, "wiki-fetch.log"), "vault_sync_last_fetch_status", "Vault sync last fetch status", /NOTIFY|OK behind|OK/));
   if (!existsSync5(filterPath)) {
     checks.push({ id: "vault_sync_filter_present", label: "Vault sync filter file present", status: "error", detail: `Filter missing: ${filterPath}` });
   } else {
-    const content = readFileSync11(filterPath, "utf8");
+    const content = readFileSync10(filterPath, "utf8");
     const missing = [
       "remotely-save/data.json",
       ".skillwiki/sync.lock",
@@ -3083,11 +3053,11 @@ async function runHealth(input) {
 
 // src/commands/archive.ts
 import { rename as rename2, mkdir as mkdir6, readFile as readFile7, writeFile as writeFile5 } from "fs/promises";
-import { join as join19, dirname as dirname5 } from "path";
+import { join as join18, dirname as dirname5 } from "path";
 
 // src/utils/delete-intent.ts
 import { mkdir as mkdir5, writeFile as writeFile4, readdir as readdir4, readFile as readFile6 } from "fs/promises";
-import { join as join18 } from "path";
+import { join as join17 } from "path";
 var DELETE_INTENT_SCHEMA = "vault-delete-intent/v1";
 var DELETE_INTENT_DIR = "meta/delete-intents";
 function normalizeVaultRelPath(path) {
@@ -3118,10 +3088,10 @@ function buildDeleteIntent(input) {
   };
 }
 async function writeDeleteIntent(vault, intent) {
-  const dir = join18(vault, DELETE_INTENT_DIR);
+  const dir = join17(vault, DELETE_INTENT_DIR);
   await mkdir5(dir, { recursive: true });
   const rel = `${DELETE_INTENT_DIR}/${pathToIntentFilename(intent.path)}`;
-  await writeFile4(join18(vault, rel), JSON.stringify(intent, null, 2) + "\n", "utf8");
+  await writeFile4(join17(vault, rel), JSON.stringify(intent, null, 2) + "\n", "utf8");
   return rel;
 }
 
@@ -3159,7 +3129,7 @@ async function runArchive(input) {
   if (!relPath) return { exitCode: ExitCode.ARCHIVE_TARGET_NOT_FOUND, result: err("ARCHIVE_TARGET_NOT_FOUND", { page: input.page }) };
   if (relPath.startsWith("_archive/")) return { exitCode: ExitCode.ARCHIVE_ALREADY_ARCHIVED, result: err("ARCHIVE_ALREADY_ARCHIVED", { page: relPath }) };
   const slug = relPath.replace(/\.md$/, "").split("/").pop();
-  const archivePath = join19("_archive", relPath).replace(/\\/g, "/");
+  const archivePath = join18("_archive", relPath).replace(/\\/g, "/");
   const remoteRoot = normalizeRemoteRoot(input.remote);
   const remoteObjectPath = buildRemoteObjectPath(remoteRoot, relPath);
   let cascade;
@@ -3185,7 +3155,7 @@ async function runArchive(input) {
     const indexRefs = [];
     if (!isRaw) {
       try {
-        const idx = await readFile7(join19(input.vault, "index.md"), "utf8");
+        const idx = await readFile7(join18(input.vault, "index.md"), "utf8");
         idx.split("\n").forEach((line, i) => {
           if (line.includes(`[[${slug}]]`)) indexRefs.push({ line: i + 1, text: line });
         });
@@ -3212,7 +3182,7 @@ async function runArchive(input) {
   }
   if (input.cascade && input.apply && cascade) {
     for (const ref of cascade.source_array_refs) {
-      const absPath = join19(input.vault, ref.page);
+      const absPath = join18(input.vault, ref.page);
       const text = await readFile7(absPath, "utf8");
       const split = splitFrontmatter(text);
       if (!split.ok) continue;
@@ -3230,12 +3200,12 @@ ${fmRewritten}
       }
     }
   }
-  await mkdir6(dirname5(join19(input.vault, archivePath)), { recursive: true });
-  await rename2(join19(input.vault, relPath), join19(input.vault, archivePath));
+  await mkdir6(dirname5(join18(input.vault, archivePath)), { recursive: true });
+  await rename2(join18(input.vault, relPath), join18(input.vault, archivePath));
   let indexUpdated = false;
   if (!isRaw) {
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-MHXG7QO2.js");
-    const before = await readFile7(join19(input.vault, "index.md"), "utf8").catch(() => "");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-DENEYZTK.js");
+    const before = await readFile7(join18(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
     const hadIndexEntry = before.includes(`[[${fullTarget}]]`) || before.includes(`[[${bare}]]`);
@@ -3286,7 +3256,7 @@ ${fmRewritten}
 
 // src/commands/remove.ts
 import { unlink as unlink2, access } from "fs/promises";
-import { join as join20 } from "path";
+import { join as join19 } from "path";
 async function pathExists(abs) {
   try {
     await access(abs);
@@ -3312,7 +3282,7 @@ async function runRemove(input) {
   if (!relPath) {
     try {
       const candidate = normalizeVaultRelPath(input.page);
-      if (await pathExists(join20(input.vault, candidate))) {
+      if (await pathExists(join19(input.vault, candidate))) {
         relPath = candidate;
       }
     } catch {
@@ -3341,11 +3311,11 @@ async function runRemove(input) {
     reason: input.reason
   });
   const tombstonePath = await writeDeleteIntent(input.vault, intent);
-  await unlink2(join20(input.vault, relPath));
+  await unlink2(join19(input.vault, relPath));
   if (relPath.endsWith(".md") && !relPath.startsWith("raw/")) {
     const { readFile: readFile17 } = await import("fs/promises");
     const { join: pathJoin } = await import("path");
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-MHXG7QO2.js");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-DENEYZTK.js");
     const before = await readFile17(pathJoin(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
@@ -3694,7 +3664,7 @@ ${migratedBody}${newFooter}`;
 
 // src/commands/update.ts
 import { execSync } from "child_process";
-import { join as join21 } from "path";
+import { join as join20 } from "path";
 function parseCoreSemver(version) {
   const m = version.match(/^(\d+)\.(\d+)\.(\d+)/);
   if (!m) return null;
@@ -3725,7 +3695,7 @@ function resolveGlobalSkillsRoot() {
       encoding: "utf8",
       timeout: 5e3
     }).trim();
-    return join21(globalRoot, "skillwiki", "skills");
+    return join20(globalRoot, "skillwiki", "skills");
   } catch {
     return null;
   }
@@ -3753,7 +3723,7 @@ async function runUpdate(input) {
   const pkg2 = readCliPackageJson();
   const currentVersion = pkg2.version;
   const tag = normalizeDistTag(input.distTag);
-  const target = join21(input.home, ".claude", "skills");
+  const target = join20(input.home, ".claude", "skills");
   let latest;
   try {
     latest = execSync(`npm view skillwiki@${tag} version`, {
@@ -3833,14 +3803,14 @@ async function runUpdate(input) {
 
 // src/commands/self-update.ts
 import { execSync as execSync2 } from "child_process";
-import { existsSync as existsSync6, readFileSync as readFileSync12 } from "fs";
-import { join as join22 } from "path";
+import { existsSync as existsSync6, readFileSync as readFileSync11 } from "fs";
+import { join as join21 } from "path";
 var DEFAULT_SOURCE_ROOT_SUFFIX = "/Desktop/code/llm-wiki";
 async function runSelfUpdate(input) {
   const currentVersion = readCliPackageJson().version;
   const sourceRoot = input.sourceRoot ?? `${input.home}${DEFAULT_SOURCE_ROOT_SUFFIX}`;
   const distTag = normalizeDistTag(input.distTag);
-  const localPkgPath = join22(sourceRoot, "packages", "cli", "package.json");
+  const localPkgPath = join21(sourceRoot, "packages", "cli", "package.json");
   const hasLocalSource = existsSync6(localPkgPath);
   if (input.check) {
     let availableVersion = null;
@@ -3848,7 +3818,7 @@ async function runSelfUpdate(input) {
     if (hasLocalSource) {
       source = "local";
       try {
-        availableVersion = JSON.parse(readFileSync12(localPkgPath, "utf8")).version ?? null;
+        availableVersion = JSON.parse(readFileSync11(localPkgPath, "utf8")).version ?? null;
       } catch {
         availableVersion = null;
       }
@@ -3906,7 +3876,7 @@ async function runSelfUpdate(input) {
     }
     const newVersion = (() => {
       try {
-        return JSON.parse(readFileSync12(localPkgPath, "utf8")).version ?? "unknown";
+        return JSON.parse(readFileSync11(localPkgPath, "utf8")).version ?? "unknown";
       } catch {
         return "unknown";
       }
@@ -3973,9 +3943,9 @@ async function runSelfUpdate(input) {
 
 // src/commands/transcripts.ts
 import { readdir as readdir5, stat as stat3, readFile as readFile9 } from "fs/promises";
-import { join as join23 } from "path";
+import { join as join22 } from "path";
 async function runTranscripts(input) {
-  const dir = join23(input.vault, "raw", "transcripts");
+  const dir = join22(input.vault, "raw", "transcripts");
   let entries;
   try {
     entries = await readdir5(dir, { withFileTypes: true });
@@ -3985,7 +3955,7 @@ async function runTranscripts(input) {
   const transcripts = [];
   for (const entry of entries) {
     if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
-    const filePath = join23(dir, entry.name);
+    const filePath = join22(dir, entry.name);
     const content = await readFile9(filePath, "utf8");
     const fm = extractFrontmatter(content);
     if (!fm.ok) continue;
@@ -4004,7 +3974,7 @@ async function runTranscripts(input) {
 
 // src/commands/compound.ts
 import { writeFile as writeFile7, mkdir as mkdir7, readdir as readdir6, unlink as unlink3 } from "fs/promises";
-import { join as join24 } from "path";
+import { join as join23 } from "path";
 import { existsSync as existsSync7 } from "fs";
 import { readFile as readFile10 } from "fs/promises";
 var RETRO_HEADING_RE = /^## \[(\d{4}-\d{2}-\d{2})(?:\s+[^\]]+)?\] retro \| loop cycle(?: (\d+))?: (.+)$/;
@@ -4104,7 +4074,7 @@ function extractRetroFields(date, cycleName, block) {
   };
 }
 async function runCompound(input) {
-  const logPath = join24(input.vault, "log.md");
+  const logPath = join23(input.vault, "log.md");
   let logText;
   try {
     logText = await readFile10(logPath, "utf8");
@@ -4114,7 +4084,7 @@ async function runCompound(input) {
   const entries = parseRetroEntries(logText);
   const promoted = [];
   const skipped = [];
-  const compoundDir = join24(input.vault, "projects", input.project, "compound");
+  const compoundDir = join23(input.vault, "projects", input.project, "compound");
   for (const entry of entries) {
     const generalizeValue = entry.generalize.trim();
     if (!/^yes/i.test(generalizeValue)) {
@@ -4122,7 +4092,7 @@ async function runCompound(input) {
       continue;
     }
     const slug = slugify(entry.cycleName);
-    const compoundPath = join24(compoundDir, `${slug}.md`);
+    const compoundPath = join23(compoundDir, `${slug}.md`);
     if (existsSync7(compoundPath)) {
       skipped.push(entry.date);
       continue;
@@ -4183,7 +4153,7 @@ async function runCompound(input) {
   };
 }
 async function runCompoundDelete(input) {
-  const projectDir = join24(input.vault, "projects", input.project);
+  const projectDir = join23(input.vault, "projects", input.project);
   if (!existsSync7(projectDir)) {
     return {
       exitCode: ExitCode.PROJECT_NOT_FOUND,
@@ -4191,7 +4161,7 @@ async function runCompoundDelete(input) {
     };
   }
   const entryName = input.entry.replace(/\.md$/, "");
-  const compoundPath = join24(projectDir, "compound", `${entryName}.md`);
+  const compoundPath = join23(projectDir, "compound", `${entryName}.md`);
   if (!existsSync7(compoundPath)) {
     return {
       exitCode: ExitCode.FILE_NOT_FOUND,
@@ -4225,7 +4195,7 @@ knowledge.md regenerated`
   };
 }
 async function runCompoundList(input) {
-  const compoundDir = join24(input.vault, "projects", input.project, "compound");
+  const compoundDir = join23(input.vault, "projects", input.project, "compound");
   if (!existsSync7(compoundDir)) {
     return {
       exitCode: ExitCode.OK,
@@ -4256,7 +4226,7 @@ could not read compound directory`
   const entries = [];
   for (const dirent of dirents) {
     if (!dirent.isFile() || !dirent.name.endsWith(".md")) continue;
-    const filePath = join24(compoundDir, dirent.name);
+    const filePath = join23(compoundDir, dirent.name);
     let text;
     try {
       text = await readFile10(filePath, "utf8");
@@ -4289,7 +4259,7 @@ no compound entries found`;
 
 // src/commands/session-brief.ts
 import { mkdir as mkdir8, readFile as readFile11, writeFile as writeFile8 } from "fs/promises";
-import { join as join25, relative, sep } from "path";
+import { join as join24, relative, sep } from "path";
 var MAX_WORDS = 900;
 async function runSessionBrief(input) {
   const scan = await scanVault(input.vault);
@@ -4389,7 +4359,7 @@ async function resolveProject(input) {
   const envProject = input.env?.SKILLWIKI_PROJECT;
   if (envProject) return envProject;
   const cwd = input.cwd ?? process.cwd();
-  const projectDotenv = await readProjectSlug(join25(cwd, ".skillwiki", ".env"));
+  const projectDotenv = await readProjectSlug(join24(cwd, ".skillwiki", ".env"));
   if (projectDotenv) return projectDotenv;
   const inferred = inferProjectFromPath(input.vault, cwd);
   if (inferred) return inferred;
@@ -4475,7 +4445,7 @@ async function loadTrendDigests(typedPages) {
   return out;
 }
 async function loadSessionPins(vault, project) {
-  const text = await readIfExists(join25(vault, "meta", "session-pins.md"));
+  const text = await readIfExists(join24(vault, "meta", "session-pins.md"));
   if (!text) return [];
   const fm = extractFrontmatter(text);
   if (!fm.ok) return [];
@@ -4592,7 +4562,7 @@ function satelliteHealthWarnings(warning) {
   return warning ? [warning] : [];
 }
 async function loadHealthWarnings(vault) {
-  const text = await readIfExists(join25(vault, ".skillwiki", "health.json"));
+  const text = await readIfExists(join24(vault, ".skillwiki", "health.json"));
   if (!text) return [];
   try {
     const parsed = JSON.parse(text);
@@ -4605,7 +4575,7 @@ async function loadHealthWarnings(vault) {
   }
 }
 async function loadMemoryTopics(vault, project) {
-  const text = await readIfExists(join25(vault, ".skillwiki", "memory", project, "topics.json"));
+  const text = await readIfExists(join24(vault, ".skillwiki", "memory", project, "topics.json"));
   if (!text) return [];
   try {
     const parsed = JSON.parse(text);
@@ -4630,11 +4600,11 @@ async function loadMemoryTopics(vault, project) {
   }
 }
 async function writeBriefArtifacts(vault, input) {
-  const metaPath = join25(vault, "meta", "latest-session-brief.md");
-  const cacheMdPath = join25(vault, ".skillwiki", "session-brief.md");
-  const cacheJsonPath = join25(vault, ".skillwiki", "session-brief.json");
-  await mkdir8(join25(vault, "meta"), { recursive: true });
-  await mkdir8(join25(vault, ".skillwiki"), { recursive: true });
+  const metaPath = join24(vault, "meta", "latest-session-brief.md");
+  const cacheMdPath = join24(vault, ".skillwiki", "session-brief.md");
+  const cacheJsonPath = join24(vault, ".skillwiki", "session-brief.json");
+  await mkdir8(join24(vault, "meta"), { recursive: true });
+  await mkdir8(join24(vault, ".skillwiki"), { recursive: true });
   const committed = renderCommittedBrief(input);
   const previousComparable = comparableBrief(await readIfExists(metaPath));
   const nextComparable = comparableBrief(committed);
@@ -4704,7 +4674,7 @@ function renderCommittedBrief(input) {
   ].filter((line) => line !== "").join("\n");
 }
 async function rebuildRootIndexProjection(vault) {
-  const before = await readIfExists(join25(vault, "index.md"));
+  const before = await readIfExists(join24(vault, "index.md"));
   if (!before) return false;
   const projection = await renderRootIndex({ vault, currentText: before });
   if (!projection.ok) return false;
@@ -4757,17 +4727,20 @@ function dateFromPath(path) {
 
 // src/commands/ingest.ts
 import { readFile as readFile13, open, unlink as unlink4, mkdir as mkdir9 } from "fs/promises";
-import { join as join27 } from "path";
+import { join as join26 } from "path";
 import { createHash as createHash4 } from "crypto";
 
 // src/commands/page-publish.ts
 import { realpathSync } from "fs";
 import { readFile as readFile12 } from "fs/promises";
-import { join as join26, resolve as resolve3 } from "path";
+import { join as join25, resolve as resolve3 } from "path";
 var DEFAULT_DEPS2 = {
   afterStage: async () => void 0,
   preflight: (input) => runManagedWritePreflight(input)
 };
+function defaultPagePublishDeps(overrides = {}) {
+  return { ...DEFAULT_DEPS2, ...overrides };
+}
 function errorExitCode(error) {
   switch (error) {
     case "FILE_NOT_FOUND":
@@ -4904,7 +4877,7 @@ async function runLockedPrimaryStages(input, vault, deps) {
       ExitCode.VAULT_PATH_INVALID
     );
   }
-  const schemaPath = join26(vault, "SCHEMA.md");
+  const schemaPath = join25(vault, "SCHEMA.md");
   let schemaText;
   try {
     schemaText = await readFile12(schemaPath, "utf8");
@@ -5007,6 +4980,12 @@ function successReceipt(input, taxonomyAdded, pageChanged, indexUpdated, logAppe
       files_changed: filesChanged,
       base_oid: receipt?.base_oid ?? null,
       write_mode: receipt?.mode ?? null,
+      ...receipt ? {
+        mutation_vault: receipt.mutation_vault,
+        git_vault: receipt.git_vault,
+        convergence_source: receipt.convergence_source
+      } : {},
+      ...receipt?.convergence_vault ? { convergence_vault: receipt.convergence_vault } : {},
       ...receipt?.host_id ? { host_id: receipt.host_id } : {},
       humanHint: dryRun ? `dry run: would publish ${input.page.target} (${input.operationId.slice(0, 12)})` : `published ${input.page.target} (${input.operationId.slice(0, 12)})`
     })
@@ -5030,7 +5009,7 @@ async function readPageChanged(targetPath, content) {
   }
 }
 async function previewPreparedPagePublication(input, vault) {
-  const schemaPath = join26(vault, "SCHEMA.md");
+  const schemaPath = join25(vault, "SCHEMA.md");
   let schemaText;
   try {
     schemaText = await readFile12(schemaPath, "utf8");
@@ -5045,7 +5024,7 @@ async function previewPreparedPagePublication(input, vault) {
   if (!reconciled.ok) return { exitCode: errorExitCode(reconciled.error), result: reconciled };
   const pageChanged = await readPageChanged(input.targetPath, input.page.content);
   if (!pageChanged.ok) return { exitCode: errorExitCode(pageChanged.error), result: pageChanged };
-  const indexPath = join26(vault, "index.md");
+  const indexPath = join25(vault, "index.md");
   let indexText;
   try {
     indexText = await readFile12(indexPath, "utf8");
@@ -5059,7 +5038,7 @@ async function previewPreparedPagePublication(input, vault) {
     type: input.page.type
   });
   if (!index.ok) return { exitCode: errorExitCode(index.error), result: index };
-  const logPath = join26(vault, "log.md");
+  const logPath = join25(vault, "log.md");
   let logText;
   try {
     logText = await readFile12(logPath, "utf8");
@@ -5084,160 +5063,164 @@ async function previewPreparedPagePublication(input, vault) {
     true
   );
 }
-async function publishPreparedPage(input, vault, deps = DEFAULT_DEPS2) {
-  const managed = acquireManagedWriteLock(vault, `page publish ${input.page.target}`);
-  if (!managed.ok) return { exitCode: errorExitCode(managed.error), result: managed };
-  try {
-    const preflight = await deps.preflight({
-      vault,
-      command: `page publish ${input.page.target}`,
-      lockToken: managed.data.ownerToken
-    });
-    if (!preflight.result.ok) {
-      return { exitCode: preflight.exitCode, result: preflight.result };
-    }
-    const writeReceipt = preflight.result.data;
-    const aggregateMode = resolveRootAggregateMode();
-    if (writeReceipt.base_oid) {
-      const head = git(vault, ["rev-parse", "HEAD"]);
-      if (head !== writeReceipt.base_oid) {
-        return {
-          exitCode: ExitCode.PREFLIGHT_FAILED,
-          result: err("PREFLIGHT_FAILED", {
-            reason: "base-oid-drift",
-            expected: writeReceipt.base_oid,
-            actual: head
-          })
-        };
-      }
-    }
-    let lock;
-    try {
-      lock = acquireOwnedSyncLock(vault, {
-        summary: `page publish ${input.page.target}`,
-        ttlMinutes: 1
-      });
-    } catch (error) {
+async function publishPreparedPageWithReceipt(input, vault, writeReceipt, deps = DEFAULT_DEPS2) {
+  const canonicalVault = resolve3(vault);
+  if (writeReceipt.mutation_vault !== canonicalVault) {
+    return {
+      exitCode: ExitCode.PREFLIGHT_FAILED,
+      result: err("PREFLIGHT_FAILED", {
+        reason: "mutation-vault-receipt-mismatch",
+        expected: writeReceipt.mutation_vault,
+        actual: canonicalVault
+      })
+    };
+  }
+  if (writeReceipt.base_oid) {
+    const head = writeReceipt.git_vault ? git(writeReceipt.git_vault, ["rev-parse", "HEAD"]) : null;
+    if (head !== writeReceipt.base_oid) {
       return {
-        exitCode: ExitCode.WRITE_FAILED,
-        result: err("WRITE_FAILED", { stage: "lock", message: String(error) })
+        exitCode: ExitCode.PREFLIGHT_FAILED,
+        result: err("PREFLIGHT_FAILED", {
+          reason: "base-oid-drift",
+          expected: writeReceipt.base_oid,
+          actual: head,
+          git_vault: writeReceipt.git_vault
+        })
       };
     }
-    if (!lock.ok) return { exitCode: errorExitCode(lock.error), result: lock };
-    let primary;
-    let released;
-    try {
-      primary = await runLockedPrimaryStages(input, vault, deps);
-    } catch (error) {
-      primary = lockedFailure(
-        "schema",
-        emptyLockedState(),
-        err("WRITE_FAILED", { message: `unexpected primary-stage failure: ${String(error)}` })
-      );
-    } finally {
-      released = releaseOwnedSyncLock(lock.data);
-    }
-    const primaryState = primary?.ok ? primary.data : primary?.state;
-    if (released === void 0 || !released.ok || !released.data.released) {
-      return phaseFailure(
-        "unlock",
-        input,
-        primaryState?.published ?? false,
-        released && !released.ok ? released : err("WRITE_FAILED", { message: "lock release did not run" }),
-        {
-          primary_stage: primary && !primary.ok ? primary.stage : "complete",
-          primary_error: primary && !primary.ok ? primary.cause.error : void 0
-        }
-      );
-    }
-    const unlockHook = await observeStage(deps, "unlock");
-    if (unlockHook) return phaseFailure("unlock", input, primaryState?.published ?? false, unlockHook);
-    if (primary === void 0) {
-      return phaseFailure(
-        "schema",
-        input,
-        false,
-        err("WRITE_FAILED", { message: "locked publication produced no result" })
-      );
-    }
-    if (!primary.ok) {
-      return phaseFailure(
-        primary.stage,
-        input,
-        primary.state.published,
-        primary.cause,
-        void 0,
-        primary.exitCode
-      );
-    }
-    const state = primary.data;
-    const event = await writeLogEvent(vault, {
-      schema: "skillwiki-log-event/v1",
-      operation_id: input.operationId,
-      occurred_at: `${input.date}T00:00:00.000Z`,
-      host_id: writeReceipt.host_id ?? "standalone",
-      actor: "skillwiki-cli",
-      kind: "page-publish",
-      target: input.page.target,
-      note: input.logNote ?? `Published ${input.page.title}`,
-      metadata: {
-        page_type: input.page.type,
-        // Stable for replay: do not embed schema-delta taxonomy_added (varies after first write).
-        tags: [...input.page.tags].sort(),
-        base_oid: writeReceipt.base_oid
+  }
+  const aggregateMode = resolveRootAggregateMode();
+  let lock;
+  try {
+    lock = acquireOwnedSyncLock(vault, {
+      summary: `page publish ${input.page.target}`,
+      ttlMinutes: 1
+    });
+  } catch (error) {
+    return {
+      exitCode: ExitCode.WRITE_FAILED,
+      result: err("WRITE_FAILED", { stage: "lock", message: String(error) })
+    };
+  }
+  if (!lock.ok) return { exitCode: errorExitCode(lock.error), result: lock };
+  let primary;
+  let released;
+  try {
+    primary = await runLockedPrimaryStages(input, vault, deps);
+  } catch (error) {
+    primary = lockedFailure(
+      "schema",
+      emptyLockedState(),
+      err("WRITE_FAILED", { message: `unexpected primary-stage failure: ${String(error)}` })
+    );
+  } finally {
+    released = releaseOwnedSyncLock(lock.data);
+  }
+  const primaryState = primary?.ok ? primary.data : primary?.state;
+  if (released === void 0 || !released.ok || !released.data.released) {
+    return phaseFailure(
+      "unlock",
+      input,
+      primaryState?.published ?? false,
+      released && !released.ok ? released : err("WRITE_FAILED", { message: "lock release did not run" }),
+      {
+        primary_stage: primary && !primary.ok ? primary.stage : "complete",
+        primary_error: primary && !primary.ok ? primary.cause.error : void 0
       }
+    );
+  }
+  const unlockHook = await observeStage(deps, "unlock");
+  if (unlockHook) return phaseFailure("unlock", input, primaryState?.published ?? false, unlockHook);
+  if (primary === void 0) {
+    return phaseFailure(
+      "schema",
+      input,
+      false,
+      err("WRITE_FAILED", { message: "locked publication produced no result" })
+    );
+  }
+  if (!primary.ok) {
+    return phaseFailure(
+      primary.stage,
+      input,
+      primary.state.published,
+      primary.cause,
+      void 0,
+      primary.exitCode
+    );
+  }
+  const state = primary.data;
+  const event = await writeLogEvent(vault, {
+    schema: "skillwiki-log-event/v1",
+    operation_id: input.operationId,
+    occurred_at: `${input.date}T00:00:00.000Z`,
+    host_id: writeReceipt.host_id ?? "standalone",
+    actor: "skillwiki-cli",
+    kind: "page-publish",
+    target: input.page.target,
+    note: input.logNote ?? `Published ${input.page.title}`,
+    metadata: {
+      page_type: input.page.type,
+      // Stable for replay: do not embed schema-delta taxonomy_added (varies after first write).
+      tags: [...input.page.tags].sort(),
+      base_oid: writeReceipt.base_oid
+    }
+  });
+  if (!event.ok) {
+    return phaseFailure(
+      "event",
+      input,
+      true,
+      event,
+      void 0,
+      event.error === "EVENT_IDENTITY_COLLISION" ? ExitCode.WRITE_FAILED : errorExitCode(event.error)
+    );
+  }
+  if (event.data.created) state.changed.add(event.data.path);
+  const eventHook = await observeStage(deps, "event");
+  if (eventHook) return phaseFailure("event", input, true, eventHook);
+  let logAppended = false;
+  if (aggregateMode === "dual") {
+    const log = await runLogAppend({
+      vault,
+      content: renderPublicationLog(input, state.taxonomyAdded),
+      operationId: input.operationId,
+      strictLock: true,
+      recordLastOp: false
     });
-    if (!event.ok) {
+    if (!log.result.ok) return phaseFailure("log", input, true, log.result);
+    if (log.exitCode !== ExitCode.OK) {
       return phaseFailure(
-        "event",
+        "log",
         input,
         true,
-        event,
-        void 0,
-        event.error === "EVENT_IDENTITY_COLLISION" ? ExitCode.WRITE_FAILED : errorExitCode(event.error)
+        err("WRITE_FAILED", { message: "log append returned inconsistent success state" })
       );
     }
-    if (event.data.created) state.changed.add(event.data.path);
-    const eventHook = await observeStage(deps, "event");
-    if (eventHook) return phaseFailure("event", input, true, eventHook);
-    let logAppended = false;
-    if (aggregateMode === "dual" || writeReceipt.mode !== "immutable-record") {
-      if (aggregateMode === "dual") {
-        const log = await runLogAppend({
-          vault,
-          content: renderPublicationLog(input, state.taxonomyAdded),
-          operationId: input.operationId,
-          strictLock: true,
-          recordLastOp: false
-        });
-        if (!log.result.ok) return phaseFailure("log", input, true, log.result);
-        if (log.exitCode !== ExitCode.OK) {
-          return phaseFailure(
-            "log",
-            input,
-            true,
-            err("WRITE_FAILED", { message: "log append returned inconsistent success state" })
-          );
-        }
-        logAppended = log.result.data.appended;
-        if (logAppended) state.changed.add("log.md");
-        const logHook = await observeStage(deps, "log");
-        if (logHook) return phaseFailure("log", input, true, logHook);
-      }
-    }
-    return successReceipt(
-      input,
-      state.taxonomyAdded,
-      state.pageChanged,
-      state.indexUpdated,
-      logAppended,
-      [...state.changed],
-      false,
-      writeReceipt
-    );
-  } finally {
-    releaseManagedWriteLock(managed.data);
+    logAppended = log.result.data.appended;
+    if (logAppended) state.changed.add("log.md");
+    const logHook = await observeStage(deps, "log");
+    if (logHook) return phaseFailure("log", input, true, logHook);
   }
+  return successReceipt(
+    input,
+    state.taxonomyAdded,
+    state.pageChanged,
+    state.indexUpdated,
+    logAppended,
+    [...state.changed],
+    false,
+    writeReceipt
+  );
+}
+async function publishPreparedPage(input, vault, deps = DEFAULT_DEPS2) {
+  return runManagedWriteTransaction({
+    vault,
+    command: `page publish ${input.page.target}`,
+    allowImmutableRecord: true,
+    preflight: deps.preflight,
+    mutate: async (receipt) => publishPreparedPageWithReceipt(input, vault, receipt, deps)
+  });
 }
 async function runPagePublish(input, deps = DEFAULT_DEPS2) {
   const prepared = await preparePagePublication(input);
@@ -5394,7 +5377,7 @@ async function acquireRawCaptureLock(path) {
   }
   return err("WRITE_FAILED", { path: lockPath, phase: "raw-lock", message: "raw capture lock held" });
 }
-async function runIngest(input) {
+async function runIngest(input, pagePublishDeps = defaultPagePublishDeps()) {
   if (!input.source || input.source.trim().length === 0) {
     return {
       exitCode: ExitCode.SCHEME_REJECTED,
@@ -5488,7 +5471,7 @@ async function runIngest(input) {
   const rawRelPath = `raw/articles/${slug}.md`;
   const typedDir = TYPE_DIR[input.type] ?? `${input.type}s`;
   const typedRelPath = `${typedDir}/${slug}.md`;
-  const rawAbsPath = join27(input.vault, rawRelPath);
+  const rawAbsPath = join26(input.vault, rawRelPath);
   const identity = assessSourceIdentity({
     rawPath: rawRelPath,
     sourceUrl: sourceUrl ?? void 0,
@@ -5532,11 +5515,11 @@ async function runIngest(input) {
   );
   if (!input.dryRun) {
     try {
-      await mkdir9(join27(input.vault, typedDir), { recursive: true });
+      await mkdir9(join26(input.vault, typedDir), { recursive: true });
     } catch (error) {
       return {
         exitCode: ExitCode.WRITE_FAILED,
-        result: err("WRITE_FAILED", { path: join27(input.vault, typedDir), message: String(error) })
+        result: err("WRITE_FAILED", { path: join26(input.vault, typedDir), message: String(error) })
       };
     }
   }
@@ -5582,89 +5565,104 @@ async function runIngest(input) {
       })
     };
   }
-  try {
-    await mkdir9(join27(input.vault, "raw", "articles"), { recursive: true });
-  } catch (error) {
-    return {
-      exitCode: ExitCode.WRITE_FAILED,
-      result: err("WRITE_FAILED", { path: join27(input.vault, "raw", "articles"), message: String(error) })
-    };
-  }
-  const rawWrite = await writeResolvedRaw({
-    path: rawAbsPath,
-    sourceUrl,
-    sourceContent,
-    sha256,
-    today,
-    capture: resolvedRaw.data
-  });
-  if (!rawWrite.ok) {
-    return {
-      exitCode: rawWrite.error === "INGEST_VALIDATION_FAILED" ? ExitCode.INGEST_VALIDATION_FAILED : ExitCode.WRITE_FAILED,
-      result: rawWrite
-    };
-  }
-  if (rawWrite.data.capture.ingested !== publicationDate) {
-    publicationDate = rawWrite.data.capture.ingested;
-    typedContent = buildTypedContent(
-      input.title,
-      publicationDate,
-      input.type,
-      tags,
-      rawRelPath,
-      input.provenance
-    );
-    publication = preparePagePublicationFromContent({
-      vault: input.vault,
-      content: typedContent,
-      target: typedRelPath,
-      logNote: `ingested from ${rawRelPath}`,
-      now: /* @__PURE__ */ new Date(`${publicationDate}T00:00:00Z`)
-    });
-    if (!publication.ok) {
+  let preparedPublication = publication.data;
+  return runManagedWriteTransaction({
+    vault: input.vault,
+    command: `page publish ${preparedPublication.page.target}`,
+    allowImmutableRecord: true,
+    preflight: pagePublishDeps.preflight,
+    mutate: async (receipt) => {
+      try {
+        await mkdir9(join26(input.vault, "raw", "articles"), { recursive: true });
+      } catch (error) {
+        return {
+          exitCode: ExitCode.WRITE_FAILED,
+          result: err("WRITE_FAILED", { path: join26(input.vault, "raw", "articles"), message: String(error) })
+        };
+      }
+      const rawWrite = await writeResolvedRaw({
+        path: rawAbsPath,
+        sourceUrl,
+        sourceContent,
+        sha256,
+        today,
+        capture: resolvedRaw.data
+      });
+      if (!rawWrite.ok) {
+        return {
+          exitCode: rawWrite.error === "INGEST_VALIDATION_FAILED" ? ExitCode.INGEST_VALIDATION_FAILED : ExitCode.WRITE_FAILED,
+          result: rawWrite
+        };
+      }
+      if (rawWrite.data.capture.ingested !== publicationDate) {
+        publicationDate = rawWrite.data.capture.ingested;
+        typedContent = buildTypedContent(
+          input.title,
+          publicationDate,
+          input.type,
+          tags,
+          rawRelPath,
+          input.provenance
+        );
+        const refreshedPublication = preparePagePublicationFromContent({
+          vault: input.vault,
+          content: typedContent,
+          target: typedRelPath,
+          logNote: `ingested from ${rawRelPath}`,
+          now: /* @__PURE__ */ new Date(`${publicationDate}T00:00:00Z`)
+        });
+        if (!refreshedPublication.ok) {
+          return {
+            exitCode: ExitCode.INGEST_VALIDATION_FAILED,
+            result: refreshedPublication
+          };
+        }
+        preparedPublication = refreshedPublication.data;
+      }
+      const published = await publishPreparedPageWithReceipt(
+        preparedPublication,
+        input.vault,
+        receipt,
+        pagePublishDeps
+      );
+      if (!published.result.ok) {
+        return { exitCode: published.exitCode, result: published.result };
+      }
+      if (published.exitCode !== ExitCode.OK) {
+        return {
+          exitCode: published.exitCode,
+          result: err("WRITE_FAILED", { message: "publisher returned inconsistent success state" })
+        };
+      }
+      const changedFiles = [
+        ...rawWrite.data.changed ? [rawRelPath] : [],
+        ...published.result.data.files_changed
+      ];
+      if (changedFiles.length > 0) {
+        appendLastOp(input.vault, {
+          operation: "ingest",
+          summary: `added ${slug}`,
+          files: [...new Set(changedFiles)],
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        });
+      }
       return {
-        exitCode: ExitCode.INGEST_VALIDATION_FAILED,
-        result: publication
+        exitCode: ExitCode.OK,
+        result: ok({
+          raw_path: rawRelPath,
+          typed_path: typedRelPath,
+          sha256,
+          dry_run: false,
+          humanHint: [
+            "created:",
+            `  ${rawRelPath} (sha256: ${sha256.slice(0, 12)}...)`,
+            `  ${typedRelPath}`
+          ].join("\n"),
+          publication: published.result.data
+        })
       };
     }
-  }
-  const published = await publishPreparedPage(publication.data, input.vault);
-  if (!published.result.ok) {
-    return { exitCode: published.exitCode, result: published.result };
-  }
-  if (published.exitCode !== ExitCode.OK) {
-    return {
-      exitCode: published.exitCode,
-      result: err("WRITE_FAILED", { message: "publisher returned inconsistent success state" })
-    };
-  }
-  const changedFiles = [
-    ...rawWrite.data.changed ? [rawRelPath] : [],
-    ...published.result.data.files_changed
-  ];
-  if (changedFiles.length > 0) {
-    appendLastOp(input.vault, {
-      operation: "ingest",
-      summary: `added ${slug}`,
-      files: [...new Set(changedFiles)],
-      timestamp: (/* @__PURE__ */ new Date()).toISOString()
-    });
-  }
-  return {
-    exitCode: ExitCode.OK,
-    result: ok({
-      raw_path: rawRelPath,
-      typed_path: typedRelPath,
-      sha256,
-      dry_run: false,
-      humanHint: [
-        "created:",
-        `  ${rawRelPath} (sha256: ${sha256.slice(0, 12)}...)`,
-        `  ${typedRelPath}`
-      ].join("\n"),
-      publication: published.result.data
-    })
-  };
+  });
 }
 
 // src/commands/tag-sync.ts
@@ -5816,7 +5814,7 @@ ${body}`;
 
 // src/commands/tag-reconcile.ts
 import { readFile as readFile14 } from "fs/promises";
-import { join as join28, posix } from "path";
+import { join as join27, posix } from "path";
 var TYPED_TARGET_RE = /^(entities|concepts|comparisons|queries|meta)\/[a-z0-9][a-z0-9./_-]*\.md$/;
 function errorExitCode2(error) {
   switch (error) {
@@ -5880,7 +5878,7 @@ async function resolveRequestedTags(input, page) {
       result: err("INVALID_FRONTMATTER", { message: "explicit tags must be an array of strings" })
     };
   }
-  const source = input.from ?? (explicit.length === 0 ? join28(input.vault, page) : void 0);
+  const source = input.from ?? (explicit.length === 0 ? join27(input.vault, page) : void 0);
   if (!source) return { exitCode: ExitCode.OK, result: ok({ tags: [...new Set(explicit)].sort() }) };
   const sourced = await readTagsFromFile(source);
   if (!sourced.result.ok) return { exitCode: sourced.exitCode, result: sourced.result };
@@ -5919,7 +5917,7 @@ function previewResult(page, tags, reconciled, dryRun, filesChanged) {
   };
 }
 async function reconcileTagsWhileLocked(input, page, tags, comment) {
-  const schemaPath = join28(input.vault, "SCHEMA.md");
+  const schemaPath = join27(input.vault, "SCHEMA.md");
   const current = await readSchema(schemaPath);
   if (!current.result.ok) return { exitCode: current.exitCode, result: current.result };
   const next = reconcileTaxonomyDocument(current.result.data, { tags, comment });
@@ -5956,7 +5954,7 @@ async function runTagReconcile(input) {
   const comment = taxonomyCommentForPage(page.data, date, input.reason);
   if (!comment.ok) return { exitCode: ExitCode.SCHEME_REJECTED, result: comment };
   if (!input.write) {
-    const schema = await readSchema(join28(input.vault, "SCHEMA.md"));
+    const schema = await readSchema(join27(input.vault, "SCHEMA.md"));
     if (!schema.result.ok) return { exitCode: schema.exitCode, result: schema.result };
     const preview = reconcileTaxonomyDocument(schema.result.data, { tags, comment: comment.data });
     return previewResult(page.data, tags, preview, true, []);
@@ -6009,7 +6007,7 @@ async function runTagReconcile(input) {
 
 // src/commands/sync.ts
 import { existsSync as existsSync8 } from "fs";
-import { join as join29 } from "path";
+import { join as join28 } from "path";
 import { execFileSync as execFileSync3 } from "child_process";
 
 // src/utils/vault-git-pathspec.ts
@@ -6063,7 +6061,7 @@ function refHasPath(vault, ref, path) {
 function runSyncStatus(input) {
   const vault = input.vault;
   const includeStashes = input.includeStashes ?? false;
-  if (!existsSync8(join29(vault, ".git"))) {
+  if (!existsSync8(join28(vault, ".git"))) {
     return {
       exitCode: ExitCode.VAULT_PATH_INVALID,
       result: ok({
@@ -6170,7 +6168,7 @@ function runSyncStatus(input) {
 }
 async function runSyncPush(input) {
   const vault = input.vault;
-  if (!existsSync8(join29(vault, ".git"))) {
+  if (!existsSync8(join28(vault, ".git"))) {
     return {
       exitCode: ExitCode.VAULT_PATH_INVALID,
       result: err("NOT_A_GIT_REPO", { path: vault })
@@ -6330,7 +6328,7 @@ function enableGitLongPathsOnWindows(vault) {
 }
 async function runSyncPull(input) {
   const vault = input.vault;
-  if (!existsSync8(join29(vault, ".git"))) {
+  if (!existsSync8(join28(vault, ".git"))) {
     return {
       exitCode: ExitCode.VAULT_PATH_INVALID,
       result: err("NOT_A_GIT_REPO", { path: vault })
@@ -6557,42 +6555,13 @@ function runSyncJournalClearStale(input) {
 }
 
 // src/commands/snapshot-maintenance.ts
-import { existsSync as existsSync9, readFileSync as readFileSync13, mkdirSync as mkdirSync3, appendFileSync } from "fs";
+import { existsSync as existsSync9, mkdirSync as mkdirSync3, appendFileSync } from "fs";
 import { createHash as createHash5 } from "crypto";
 import { execSync as execSync3, spawn } from "child_process";
 import { platform as platform2 } from "os";
-import { join as join30, resolve as resolvePath2 } from "path";
+import { join as join29, resolve as resolvePath2 } from "path";
 var MAINTENANCE_SCHEMA_VERSION = 1;
 var MAINTENANCE_COMMAND = "snapshot-maintenance journal clear-stale";
-function resolveConfiguredSnapshotWorktree(home) {
-  const skillwikiEnv = join30(home, ".skillwiki", ".env");
-  const explicit = readEnvKey2(skillwikiEnv, ["vault_sync.snapshot_worktree"]);
-  if (explicit) return resolvePath2(explicit);
-  const snapshotProfile = readEnvKey2(skillwikiEnv, ["vault_sync.snapshot_profile"]);
-  if (snapshotProfile) {
-    const fromProfile = readEnvKey2(snapshotProfile, ["WIKI_GIT_WORKTREE", "SNAPSHOT_WORKTREE", "GIT_DIR"]);
-    if (fromProfile) return resolvePath2(fromProfile);
-  }
-  return void 0;
-}
-function readEnvKey2(path, keys) {
-  try {
-    const content = readFileSync13(path, "utf8");
-    for (const line of content.split(/\r?\n/)) {
-      const trimmed = line.trim();
-      if (trimmed.length === 0 || trimmed.startsWith("#")) continue;
-      const eq = trimmed.indexOf("=");
-      if (eq <= 0) continue;
-      const key = trimmed.slice(0, eq).trim();
-      if (!keys.includes(key)) continue;
-      const value = trimmed.slice(eq + 1).trim();
-      if (value.length > 0) return value;
-    }
-  } catch {
-    return void 0;
-  }
-  return void 0;
-}
 function canonicalize(p) {
   return resolvePath2(p);
 }
@@ -6653,7 +6622,7 @@ async function runSnapshotMaintenanceDryRun(input) {
     audit(makeAuditEvent(input, fleetLoad.hostId, now, "refusal", "MAINTENANCE_WRONG_WORKTREE"));
     return { exitCode: ExitCode.PROTECTED_SNAPSHOTTER_WRITE_BLOCKED, result: refusalErr("MAINTENANCE_WRONG_WORKTREE", `requested path '${requested}' is not the configured snapshot worktree '${canonicalize(configuredWorktree)}'`) };
   }
-  if (!existsSync9(requested) || !existsSync9(join30(requested, ".git"))) {
+  if (!existsSync9(requested) || !existsSync9(join29(requested, ".git"))) {
     audit(makeAuditEvent(input, fleetLoad.hostId, now, "refusal", "MAINTENANCE_MISSING_GIT_REPO"));
     return { exitCode: ExitCode.PROTECTED_SNAPSHOTTER_WRITE_BLOCKED, result: refusalErr("MAINTENANCE_MISSING_GIT_REPO", `snapshot worktree is not a git repository: ${requested}`) };
   }
@@ -6733,14 +6702,14 @@ async function resolveLiveVault(input) {
   return resolved.ok ? canonicalize(resolved.data.path) : void 0;
 }
 function snapshotMaintenanceAuditLogPath(home) {
-  const stateDir = platform2() === "darwin" ? join30(home, "Library", "Application Support", "vault-sync") : join30(home, ".local", "state", "vault-sync");
-  return join30(stateDir, "snapshot-maintenance-audit.jsonl");
+  const stateDir = platform2() === "darwin" ? join29(home, "Library", "Application Support", "vault-sync") : join29(home, ".local", "state", "vault-sync");
+  return join29(stateDir, "snapshot-maintenance-audit.jsonl");
 }
 function defaultAuditSink(home) {
   return (event) => {
     try {
       const logPath = snapshotMaintenanceAuditLogPath(home);
-      mkdirSync3(join30(logPath, ".."), { recursive: true });
+      mkdirSync3(join29(logPath, ".."), { recursive: true });
       appendFileSync(logPath, JSON.stringify(event) + "\n", { encoding: "utf8" });
     } catch {
     }
@@ -6900,8 +6869,8 @@ function releaseSnapshotFlock(handle) {
 }
 
 // src/commands/backup.ts
-import { statSync as statSync2, readdirSync as readdirSync2, readFileSync as readFileSync14, mkdirSync as mkdirSync4, writeFileSync as writeFileSync5 } from "fs";
-import { join as join31, relative as relative2, dirname as dirname6 } from "path";
+import { statSync as statSync2, readdirSync as readdirSync2, readFileSync as readFileSync13, mkdirSync as mkdirSync4, writeFileSync as writeFileSync5 } from "fs";
+import { join as join30, relative as relative2, dirname as dirname6 } from "path";
 import { PutObjectCommand, HeadObjectCommand, ListObjectsV2Command, GetObjectCommand, DeleteObjectsCommand } from "@aws-sdk/client-s3";
 
 // src/utils/s3-client.ts
@@ -6925,7 +6894,7 @@ var SKIP_DIRS = /* @__PURE__ */ new Set([".git", ".obsidian", "_archive", "node_
 function* walkMarkdown(dir, base) {
   for (const entry of readdirSync2(dir, { withFileTypes: true })) {
     if (SKIP_DIRS.has(entry.name)) continue;
-    const full = join31(dir, entry.name);
+    const full = join30(dir, entry.name);
     if (entry.isDirectory()) {
       yield* walkMarkdown(full, base);
     } else if (entry.name.endsWith(".md")) {
@@ -6948,7 +6917,7 @@ async function runBackupSync(input) {
   let failed = 0;
   const files = [...walkMarkdown(input.vault, input.vault)];
   for (const relPath of files) {
-    const absPath = join31(input.vault, relPath);
+    const absPath = join30(input.vault, relPath);
     const localStat = statSync2(absPath);
     let needsUpload = true;
     try {
@@ -6967,7 +6936,7 @@ async function runBackupSync(input) {
       continue;
     }
     try {
-      const body = readFileSync14(absPath);
+      const body = readFileSync13(absPath);
       await client.send(new PutObjectCommand({ Bucket: input.bucket, Key: relPath, Body: body }));
       uploaded++;
     } catch {
@@ -7024,7 +6993,7 @@ async function runBackupRestore(input) {
     const objects = list.Contents ?? [];
     for (const obj of objects) {
       if (!obj.Key) continue;
-      const localPath = join31(target, obj.Key);
+      const localPath = join30(target, obj.Key);
       try {
         const localStat = statSync2(localPath);
         if (obj.LastModified && localStat.mtime > obj.LastModified) {
@@ -7072,7 +7041,7 @@ async function runBackupRestore(input) {
 // src/commands/status.ts
 import { existsSync as existsSync10, statSync as statSync3 } from "fs";
 import { readFile as readFile15 } from "fs/promises";
-import { join as join32 } from "path";
+import { join as join31 } from "path";
 async function runStatus(input) {
   if (!existsSync10(input.vault)) {
     return { exitCode: ExitCode.VAULT_PATH_INVALID, result: err("VAULT_PATH_INVALID", { vault: input.vault }) };
@@ -7099,7 +7068,7 @@ async function runStatus(input) {
   const compound = scan.data.compound.length;
   let schemaVersion = "v1";
   try {
-    const schemaContent = await readFile15(join32(input.vault, "SCHEMA.md"), "utf8");
+    const schemaContent = await readFile15(join31(input.vault, "SCHEMA.md"), "utf8");
     const versionMatch = schemaContent.match(/version:\s*["']?([^"'\s\n]+)/i);
     if (versionMatch) schemaVersion = versionMatch[1];
   } catch {
@@ -7160,7 +7129,7 @@ async function runStatus(input) {
 
 // src/commands/seed.ts
 import { mkdir as mkdir10, writeFile as writeFile9, stat as stat4 } from "fs/promises";
-import { join as join33 } from "path";
+import { join as join32 } from "path";
 var TODAY = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 var EXAMPLE_PAGES = {
   "entities/example-project.md": `---
@@ -7229,29 +7198,29 @@ Real sources are immutable after ingestion \u2014 never edit them.
 `;
 async function runSeed(input) {
   try {
-    await stat4(join33(input.vault, "SCHEMA.md"));
+    await stat4(join32(input.vault, "SCHEMA.md"));
   } catch {
     return { exitCode: ExitCode.VAULT_PATH_INVALID, result: err("VAULT_PATH_INVALID", { root: input.vault, reason: "SCHEMA.md missing \u2014 run `skillwiki init` first" }) };
   }
   const created = [];
   const skipped = [];
   for (const [relPath, content] of Object.entries(EXAMPLE_PAGES)) {
-    const absPath = join33(input.vault, relPath);
+    const absPath = join32(input.vault, relPath);
     try {
       await stat4(absPath);
       skipped.push(relPath);
     } catch {
-      await mkdir10(join33(absPath, ".."), { recursive: true });
+      await mkdir10(join32(absPath, ".."), { recursive: true });
       await writeFile9(absPath, content, "utf8");
       created.push(relPath);
     }
   }
-  const rawPath = join33(input.vault, "raw", "articles", "example-source.md");
+  const rawPath = join32(input.vault, "raw", "articles", "example-source.md");
   try {
     await stat4(rawPath);
     skipped.push("raw/articles/example-source.md");
   } catch {
-    await mkdir10(join33(rawPath, ".."), { recursive: true });
+    await mkdir10(join32(rawPath, ".."), { recursive: true });
     await writeFile9(rawPath, EXAMPLE_RAW, "utf8");
     created.push("raw/articles/example-source.md");
   }
@@ -7276,7 +7245,7 @@ async function runSeed(input) {
 // src/commands/canvas.ts
 import { readFile as readFile16, writeFile as writeFile10 } from "fs/promises";
 import { existsSync as existsSync11 } from "fs";
-import { join as join34 } from "path";
+import { join as join33 } from "path";
 var NODE_WIDTH = 240;
 var NODE_HEIGHT = 60;
 var COLUMN_SPACING = 400;
@@ -7354,7 +7323,7 @@ function buildCanvasEdges(adjacency) {
   return edges;
 }
 async function runCanvasGenerate(input) {
-  const graphPath = input.graphPath ?? join34(input.vault, ".skillwiki", "graph.json");
+  const graphPath = input.graphPath ?? join33(input.vault, ".skillwiki", "graph.json");
   if (!existsSync11(graphPath)) {
     return {
       exitCode: ExitCode.FILE_NOT_FOUND,
@@ -7392,7 +7361,7 @@ async function runCanvasGenerate(input) {
   const nodes = buildCanvasNodes(paths);
   const edges = buildCanvasEdges(graph.adjacency);
   const canvas = { nodes, edges };
-  const outPath = join34(input.vault, "vault-graph.canvas");
+  const outPath = join33(input.vault, "vault-graph.canvas");
   try {
     await writeFile10(outPath, JSON.stringify(canvas, null, 2));
   } catch (e) {
@@ -7414,10 +7383,10 @@ written: ${outPath}`
 }
 
 // src/commands/fleet-health.ts
-import { existsSync as existsSync12, readFileSync as readFileSync15 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync14 } from "fs";
 import { execSync as nodeExecSync } from "child_process";
 import { hostname as nodeHostname, platform as nodePlatform } from "os";
-import { join as join35 } from "path";
+import { join as join34 } from "path";
 var SSH_TIMEOUT_MS = 15e3;
 var TIMER_UNIT = "agent-memory-trends.timer";
 var SERVICE_UNIT = "agent-memory-trends.service";
@@ -7516,7 +7485,7 @@ function probeLocal(vaultPath, deps) {
   let parsed = null;
   if (existsSync12(latestPath)) {
     try {
-      const wire = readSatelliteLatestRunFromText(readFileSync15(latestPath, "utf8"));
+      const wire = readSatelliteLatestRunFromText(readFileSync14(latestPath, "utf8"));
       if (wire) {
         parsed = {
           status: wire.status,
@@ -7647,7 +7616,7 @@ async function runFleetHealth(input) {
   const home = input.home ?? env.HOME ?? "";
   const osHostname = input.osHostname ?? env.HOSTNAME ?? nodeHostname();
   const vault = input.vault ?? env.WIKI_PATH;
-  const file = input.file ?? (vault ? join35(vault, FLEET_REL_PATH) : void 0);
+  const file = input.file ?? (vault ? join34(vault, FLEET_REL_PATH) : void 0);
   if (!file) {
     return {
       exitCode: ExitCode.NO_VAULT_CONFIGURED,
@@ -7732,14 +7701,14 @@ async function runFleetHealth(input) {
 
 // src/utils/auto-commit.ts
 import { existsSync as existsSync13 } from "fs";
-import { join as join36 } from "path";
+import { join as join35 } from "path";
 async function postCommit(vault, exitCode) {
   if (exitCode !== 0) return;
   const home = process.env.HOME ?? "";
   const dotenv = await parseDotenvFile(configPath(home));
   const autoCommit = process.env.AUTO_COMMIT ?? dotenv["AUTO_COMMIT"];
   if (autoCommit === "false") return;
-  if (!existsSync13(join36(vault, ".git"))) return;
+  if (!existsSync13(join35(vault, ".git"))) return;
   const lastOps = readLastOp(vault);
   if (lastOps.length === 0) return;
   const porcelain = git(vault, ["status", "--porcelain", "--", ...VAULT_COMMIT_PATHSPEC]);
@@ -7763,7 +7732,7 @@ async function postCommit(vault, exitCode) {
 }
 
 // src/commands/write-preflight.ts
-import { existsSync as existsSync14, readFileSync as readFileSync16, statSync as statSync4 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync15, statSync as statSync4 } from "fs";
 async function runWritePreflightCommand(input) {
   if (!existsSync14(input.vault) || !statSync4(input.vault).isDirectory()) {
     return {
@@ -7779,7 +7748,7 @@ async function runWritePreflightCommand(input) {
         result: err("FILE_NOT_FOUND", { path: input.priorArtifactFile })
       };
     }
-    priorText = readFileSync16(input.priorArtifactFile, "utf8");
+    priorText = readFileSync15(input.priorArtifactFile, "utf8");
   }
   const checkList = input.checks ? input.checks.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
   const result = runWritePreflight({
@@ -7893,12 +7862,17 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-M2HL6DDY.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-LO4LZ6OQ.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,
     allowImmutableRecord: opts?.allowImmutableRecord === true,
     convergenceVault: opts?.convergenceVault,
+    env: process.env,
+    home: process.env.HOME ?? "",
+    cwd: process.cwd(),
+    osHostname: process.env.HOSTNAME,
+    user: process.env.USER,
     mutate: async (receipt) => await mutate(receipt)
   });
   return emit(run, vault, opts);
@@ -7918,7 +7892,7 @@ program.command("validate <file>").description("validate vault page frontmatter
   emit(await runValidate({ file, apply: !!opts.apply, vault }), vault);
 });
 program.command("graph").description("graph subcommands").command("build <vault>").option("--out <path>", "graph output path (default: <vault>/.skillwiki/graph.json)").option("--wiki <name>", "wiki profile name").action(async (vault, opts) => {
-  const out = opts.out ?? join37(vault, ".skillwiki", "graph.json");
+  const out = opts.out ?? join36(vault, ".skillwiki", "graph.json");
   return emitGuardedVaultWrite(vault, "graph build", () => runGraphBuild({ vault, out }));
 });
 var canvasCmd = program.command("canvas").description("manage Obsidian canvas files");