skillwiki 0.10.19 → 0.10.21

package/dist/{chunk-QJPCCW4N.js → chunk-65Q5UGND.js}

@@ -18,7 +18,7 @@ import {
 
 // src/utils/managed-write-preflight.ts
 import { existsSync as existsSync2 } from "fs";
-import { join as join2, resolve } from "path";
+import { join as join2, resolve as resolve2 } from "path";
 
 // src/utils/managed-write-lock.ts
 import { randomBytes } from "crypto";
@@ -29,7 +29,8 @@ import {
   unlinkSync,
   writeFileSync
 } from "fs";
-import { dirname, join } from "path";
+import { hostname } from "os";
+import { dirname, join, resolve } from "path";
 function managedWriteLockPath(vault) {
   const gitPath = git(vault, ["rev-parse", "--git-path", "vault-sync/managed-write.lock"]);
   if (gitPath) return gitPath.startsWith("/") ? gitPath : join(vault, gitPath);
@@ -65,19 +66,35 @@ function hasUnsafeGitState(vault) {
   const unmerged = git(vault, ["ls-files", "-u"]);
   return Boolean(unmerged && unmerged.trim().length > 0);
 }
-function reclaimDeadManagedWriteLockOwner(vault) {
+function isGitBackedVault(vault) {
+  return Boolean(git(vault, ["rev-parse", "--absolute-git-dir"]));
+}
+function hasLocalOwnerProof(vault, record) {
+  return isGitBackedVault(vault) || typeof record.owner_hostname === "string" && record.owner_hostname === hostname();
+}
+function reclaimDeadManagedWriteLockOwner(vault, options = {}) {
   const path = managedWriteLockPath(vault);
+  const gitStateVault = resolve(options.gitStateVault ?? vault);
   if (!existsSync(path)) return ok({ reclaimed: false });
   const record = readLockRecord(path);
   if (!record) {
     return err("SYNC_LOCK_HELD", { path, message: "managed-write lock unreadable" });
   }
+  if (!hasLocalOwnerProof(vault, record)) {
+    return err("SYNC_LOCK_HELD", {
+      path,
+      owner_hostname: record.owner_hostname,
+      current_hostname: hostname(),
+      message: "managed-write lock origin is foreign or unknown"
+    });
+  }
   if (isManagedWriteLockOwnerAlive(record.pid)) {
     return err("SYNC_LOCK_HELD", { path, message: "managed-write lock owner is alive" });
   }
-  if (hasUnsafeGitState(vault)) {
+  if (hasUnsafeGitState(gitStateVault)) {
     return err("SYNC_LOCK_HELD", {
       path,
+      git_state_vault: gitStateVault,
       message: "managed-write lock not reclaimed: unsafe git state"
     });
   }
@@ -90,6 +107,7 @@ function reclaimDeadManagedWriteLockOwner(vault) {
       recovered_at: (/* @__PURE__ */ new Date()).toISOString(),
       recovery_reason: "owner_pid_dead",
       owner_pid_alive: false,
+      git_state_vault: gitStateVault,
       lock: record
     };
     writeFileSync(recoveryPath, `${JSON.stringify(meta, null, 2)}
@@ -107,7 +125,13 @@ function tryCreateLock(path, command) {
     mkdirSync(dirname(path), { recursive: true });
     writeFileSync(
       path,
-      `${JSON.stringify({ pid: process.pid, owner_token: ownerToken, acquired, command })}
+      `${JSON.stringify({
+        pid: process.pid,
+        owner_hostname: hostname(),
+        owner_token: ownerToken,
+        acquired,
+        command
+      })}
 `,
       { flag: "wx" }
     );
@@ -117,14 +141,14 @@ function tryCreateLock(path, command) {
     return err("WRITE_FAILED", { path, message: String(error) });
   }
 }
-function acquireManagedWriteLock(vault, command) {
+function acquireManagedWriteLock(vault, command, options = {}) {
   const path = managedWriteLockPath(vault);
   const first = tryCreateLock(path, command);
   if (first.ok) {
     return ok({ ...first.data, vault });
   }
   if (first.error !== "SYNC_LOCK_HELD") return first;
-  const reclaimed = reclaimDeadManagedWriteLockOwner(vault);
+  const reclaimed = reclaimDeadManagedWriteLockOwner(vault, options);
   if (!reclaimed.ok || !reclaimed.data.reclaimed) {
     return err("SYNC_LOCK_HELD", { path });
   }
@@ -180,8 +204,8 @@ function isGitVault(vault) {
   return Boolean(git(vault, ["rev-parse", "--absolute-git-dir"]));
 }
 async function runManagedWritePreflight(input, deps = DEFAULT_DEPS) {
-  const mutationVault = resolve(input.vault);
-  let convergenceVault = input.convergenceVault && resolve(input.convergenceVault) !== mutationVault ? resolve(input.convergenceVault) : void 0;
+  const mutationVault = resolve2(input.vault);
+  let convergenceVault = input.convergenceVault && resolve2(input.convergenceVault) !== mutationVault ? resolve2(input.convergenceVault) : void 0;
   let convergenceSource = convergenceVault ? "explicit" : "single-path";
   const mutationBlocker = preflightBlocker(mutationVault);
   if (mutationBlocker) {
@@ -264,7 +288,7 @@ async function runManagedWritePreflight(input, deps = DEFAULT_DEPS) {
         })
       };
     }
-    convergenceVault = resolve(configured);
+    convergenceVault = resolve2(configured);
     convergenceSource = "configured";
     if (convergenceVault === mutationVault) {
       return {
@@ -373,8 +397,10 @@ async function runManagedWritePreflight(input, deps = DEFAULT_DEPS) {
   };
 }
 async function runManagedWriteTransaction(input, deps = DEFAULT_DEPS) {
-  const mutationVault = resolve(input.vault);
-  const lock = acquireManagedWriteLock(mutationVault, input.command);
+  const mutationVault = resolve2(input.vault);
+  const lock = acquireManagedWriteLock(mutationVault, input.command, {
+    gitStateVault: input.convergenceVault ? resolve2(input.convergenceVault) : mutationVault
+  });
   if (!lock.ok) {
     return { exitCode: ExitCode.SYNC_LOCK_HELD, result: lock };
   }

package/dist/{chunk-IGCW3DR2.js → chunk-I5JD3BQZ.js}

@@ -164,6 +164,11 @@ function redactMarker(kind, value) {
 function isSyntheticPlaceholder(value) {
   return REDACTED_RE.test(value) || SYNTHETIC_RE.test(value.trim());
 }
+function isNonSecretTokenCapture(value) {
+  if (value.startsWith("//")) return true;
+  if (/^[a-z]{2,}(?:-[a-z]{2,})+$/.test(value)) return true;
+  return false;
+}
 function collectMatches(text) {
   const matches = [];
   for (const matcher of MATCHERS) {
@@ -174,6 +179,7 @@ function collectMatches(text) {
       if (REDACTED_RE.test(whole)) continue;
       const value = matcher.valueGroup ? m[matcher.valueGroup] : whole;
       if (isSyntheticPlaceholder(value)) continue;
+      if (matcher.kind === "token" && isNonSecretTokenCapture(value)) continue;
       const valueOffset = whole.lastIndexOf(value);
       const valueStart = start + Math.max(0, valueOffset);
       matches.push({

package/dist/{chunk-IAPD6YTC.js → chunk-UNPZDCWN.js}

@@ -19,7 +19,7 @@ import {
   splitFrontmatter,
   vaultIoConcurrency,
   writeRootIndexProjection
-} from "./chunk-IGCW3DR2.js";
+} from "./chunk-I5JD3BQZ.js";
 import {
   CONFIG_KEYS,
   git,
@@ -3196,6 +3196,9 @@ function buildCliSurface() {
   program.command("log-append").requiredOption("--content <text>").option("--operation-id <id>").option("--write-event").option("--wiki <name>");
   program.command("work-complete").requiredOption("--work-item <path>").option("--operation-id <id>").option("--no-commit").option("--wiki <name>");
   program.command("work-validate").requiredOption("--work-item <path>").option("--require-complete").option("--wiki <name>");
+  program.command("log");
+  program.command("index");
+  program.command("projections");
   program.command("lint").option("--days <n>").option("--lines <n>").option("--log-threshold <n>").option("--fix").option("--only <bucket>").option("--summary").option("--examples <n>").option("--wiki <name>");
   program.command("config");
   program.command("health").option("--wiki <name>").option("--sync <mode>").option("--no-fail").option("--out <path>").option("--examples <n>");
@@ -3225,6 +3228,7 @@ function buildCliSurface() {
   program.command("fleet");
   program.command("page");
   program.command("write-preflight").option("--command <name>").option("--dirty-threshold <n>").option("--skip-dirty").option("--prior-artifact-file <path>").option("--prior-artifact-text <text>").option("--consecutive-no-decision <n>").option("--no-decision-threshold <n>").option("--human-allow").option("--mission-kind <kind>").option("--skip-mission").option("--project <slug>").option("--capture-day <date>").option("--capture-budget <n>").option("--severity <level>").option("--skip-budget").option("--checks <list>").option("--wiki <name>");
+  program.command("mcp");
   const graphCmd = program.commands.find((c) => c.name() === "graph");
   graphCmd.command("build").option("--out <path>").option("--wiki <name>");
   const canvasCmd = program.commands.find((c) => c.name() === "canvas");
@@ -3242,6 +3246,14 @@ function buildCliSurface() {
   tagCmd.command("reconcile").requiredOption("--page <path>").option("--from <path>").option("--tags <csv>").option("--reason <text>").option("--write").option("--wiki <name>");
   const pageCmd = program.commands.find((c) => c.name() === "page");
   pageCmd.command("publish").requiredOption("--target <path>").option("--log-note <text>").option("--write").option("--wiki <name>");
+  const logCmd = program.commands.find((c) => c.name() === "log");
+  logCmd.command("materialize").option("--write").option("--wiki <name>");
+  logCmd.command("migrate-legacy").option("--write").option("--converge-vault <dir>").option("--wiki <name>");
+  const indexCmd = program.commands.find((c) => c.name() === "index");
+  indexCmd.command("rebuild").option("--write").option("--wiki <name>");
+  const projectionsCmd = program.commands.find((c) => c.name() === "projections");
+  projectionsCmd.command("materialize").option("--write").option("--converge-vault <dir>").option("--wiki <name>");
+  projectionsCmd.command("repair-legacy").requiredOption("--event-operation-id <id>").option("--write").option("--converge-vault <dir>").option("--wiki <name>");
   const syncCmd = program.commands.find((c) => c.name() === "sync");
   syncCmd.command("status").option("--wiki <name>").option("--include-stashes").option("--include-remote-health").option("--check-snapshotter");
   syncCmd.command("push").option("--wiki <name>");
@@ -3346,7 +3358,8 @@ function validateCliRefs(text, page, surface) {
 // src/utils/source-identity.ts
 var PROJECT_PATTERNS = {
   hermes: [/\bhermes\b/i, /nousresearch\s*hermes/i, /nousresearch\/hermes-agent/i, /hermes agent/i],
-  skillwiki: [/\bskillwiki\b/i, /\bllm[-_ ]?wiki\b/i, /karpathy'?s llm wiki/i],
+  // normalize() splits CamelCase ("SkillWiki" → "skill wiki"), so match both forms.
+  skillwiki: [/\bskillwiki\b/i, /\bskill\s+wiki\b/i, /\bllm[-_ ]?wiki\b/i, /karpathy'?s llm wiki/i],
   superpowers: [/\bsuperpowers\b/i, /obra\/superpowers/i, /complete software development methodology/i],
   playwright: [/\bplaywright\b/i, /microsoft\s*playwright/i, /microsoft\/playwright/i],
   convex: [/\bconvex\b/i],
@@ -3359,6 +3372,9 @@ var PROJECT_PATTERNS = {
 var COMPATIBLE = /* @__PURE__ */ new Set([
   "hermes|skillwiki",
   "skillwiki|hermes",
+  // SkillWiki work items commonly reference Superpowers skills/methodology.
+  "skillwiki|superpowers",
+  "superpowers|skillwiki",
   "proxmox|seaweedfs",
   "seaweedfs|proxmox",
   "coolify|seaweedfs",

package/dist/cli.js

@@ -83,7 +83,7 @@ import {
   upsertIndexEntry,
   validateLogEvent,
   writeLogEvent
-} from "./chunk-IAPD6YTC.js";
+} from "./chunk-UNPZDCWN.js";
 import {
   normalizeDistTag,
   readCache,
@@ -105,11 +105,11 @@ import {
   scanVault,
   splitFrontmatter,
   writeRootIndexProjection
-} from "./chunk-IGCW3DR2.js";
+} from "./chunk-I5JD3BQZ.js";
 import {
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-QJPCCW4N.js";
+} from "./chunk-65Q5UGND.js";
 import {
   FLEET_REL_PATH,
   canSupersedeJournal,
@@ -3204,7 +3204,7 @@ ${fmRewritten}
   await rename2(join18(input.vault, relPath), join18(input.vault, archivePath));
   let indexUpdated = false;
   if (!isRaw) {
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-DENEYZTK.js");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-HAXDEM2F.js");
     const before = await readFile7(join18(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
@@ -3315,7 +3315,7 @@ async function runRemove(input) {
   if (relPath.endsWith(".md") && !relPath.startsWith("raw/")) {
     const { readFile: readFile17 } = await import("fs/promises");
     const { join: pathJoin } = await import("path");
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-DENEYZTK.js");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-HAXDEM2F.js");
     const before = await readFile17(pathJoin(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
@@ -7862,7 +7862,7 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-LO4LZ6OQ.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-CTXX2MHQ.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,

package/dist/{index-projection-DENEYZTK.js → index-projection-HAXDEM2F.js}

@@ -4,7 +4,7 @@ import {
   UNMANAGED_START,
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-IGCW3DR2.js";
+} from "./chunk-I5JD3BQZ.js";
 import "./chunk-Y6KRDGI2.js";
 export {
   UNMANAGED_END,

package/dist/{managed-write-preflight-LO4LZ6OQ.js → managed-write-preflight-CTXX2MHQ.js}

@@ -2,7 +2,7 @@
 import {
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-QJPCCW4N.js";
+} from "./chunk-65Q5UGND.js";
 import "./chunk-GNS2ZV5P.js";
 import "./chunk-Y6KRDGI2.js";
 export {

package/dist/skillwiki-mcp.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-IAPD6YTC.js";
+} from "./chunk-UNPZDCWN.js";
 import "./chunk-7I2TPIV5.js";
-import "./chunk-IGCW3DR2.js";
+import "./chunk-I5JD3BQZ.js";
 import "./chunk-GNS2ZV5P.js";
 import "./chunk-Y6KRDGI2.js";
 

package/dist/vault-sync/scripts/lib/managed-write-lock.sh

@@ -159,7 +159,7 @@ vault_sync_managed_lock_reclaim_dead_owner() {
 vault_sync_managed_lock_acquire() {
   local repo="${1:-.}"
   local command="${2:-wiki-pull}"
-  local path token now inherited attempt
+  local path token now owner_hostname inherited attempt
 
   path="$(vault_sync_managed_lock_path "$repo")" || return 1
   VAULT_SYNC_MANAGED_LOCK_PATH="$path"
@@ -185,8 +185,9 @@ vault_sync_managed_lock_acquire() {
     token="$(od -An -N16 -tx1 /dev/urandom 2>/dev/null | tr -d ' \n')"
     [ -n "$token" ] || token="$$-$(date +%s)"
     now="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
-    if ( set -o noclobber; printf '{"pid":%s,"owner_token":"%s","acquired":"%s","command":"%s"}\n' \
-        "$$" "$token" "$now" "$command" >"$path" ) 2>/dev/null; then
+    owner_hostname="$(hostname 2>/dev/null || printf unknown)"
+    if ( set -o noclobber; printf '{"pid":%s,"owner_hostname":"%s","owner_token":"%s","acquired":"%s","command":"%s"}\n' \
+        "$$" "$owner_hostname" "$token" "$now" "$command" >"$path" ) 2>/dev/null; then
       VAULT_SYNC_MANAGED_LOCK_TOKEN_OWNED="$token"
       VAULT_SYNC_MANAGED_LOCK_ACQUIRED="$now"
       VAULT_SYNC_MANAGED_LOCK_OWNS_RELEASE=1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.19",
+  "version": "0.10.21",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.19",
+  "version": "0.10.21",
   "skills": "./",
   "description": "Project-aware Karpathy-style knowledge base for Claude Code: 19 prompt-only skills (wiki-*, proj-*, using-skillwiki) backed by the deterministic `skillwiki` CLI.",
   "author": {

package/skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.19",
+  "version": "0.10.21",
   "description": "Project-aware Karpathy-style knowledge base for Codex with 19 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",

package/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.10.19",
+  "version": "0.10.21",
   "private": true,
   "files": [
     "wiki-*",