skillwiki 0.10.20 → 0.10.21

package/dist/{chunk-QJPCCW4N.js → chunk-65Q5UGND.js}

@@ -18,7 +18,7 @@ import {
 
 // src/utils/managed-write-preflight.ts
 import { existsSync as existsSync2 } from "fs";
-import { join as join2, resolve } from "path";
+import { join as join2, resolve as resolve2 } from "path";
 
 // src/utils/managed-write-lock.ts
 import { randomBytes } from "crypto";
@@ -29,7 +29,8 @@ import {
   unlinkSync,
   writeFileSync
 } from "fs";
-import { dirname, join } from "path";
+import { hostname } from "os";
+import { dirname, join, resolve } from "path";
 function managedWriteLockPath(vault) {
   const gitPath = git(vault, ["rev-parse", "--git-path", "vault-sync/managed-write.lock"]);
   if (gitPath) return gitPath.startsWith("/") ? gitPath : join(vault, gitPath);
@@ -65,19 +66,35 @@ function hasUnsafeGitState(vault) {
   const unmerged = git(vault, ["ls-files", "-u"]);
   return Boolean(unmerged && unmerged.trim().length > 0);
 }
-function reclaimDeadManagedWriteLockOwner(vault) {
+function isGitBackedVault(vault) {
+  return Boolean(git(vault, ["rev-parse", "--absolute-git-dir"]));
+}
+function hasLocalOwnerProof(vault, record) {
+  return isGitBackedVault(vault) || typeof record.owner_hostname === "string" && record.owner_hostname === hostname();
+}
+function reclaimDeadManagedWriteLockOwner(vault, options = {}) {
   const path = managedWriteLockPath(vault);
+  const gitStateVault = resolve(options.gitStateVault ?? vault);
   if (!existsSync(path)) return ok({ reclaimed: false });
   const record = readLockRecord(path);
   if (!record) {
     return err("SYNC_LOCK_HELD", { path, message: "managed-write lock unreadable" });
   }
+  if (!hasLocalOwnerProof(vault, record)) {
+    return err("SYNC_LOCK_HELD", {
+      path,
+      owner_hostname: record.owner_hostname,
+      current_hostname: hostname(),
+      message: "managed-write lock origin is foreign or unknown"
+    });
+  }
   if (isManagedWriteLockOwnerAlive(record.pid)) {
     return err("SYNC_LOCK_HELD", { path, message: "managed-write lock owner is alive" });
   }
-  if (hasUnsafeGitState(vault)) {
+  if (hasUnsafeGitState(gitStateVault)) {
     return err("SYNC_LOCK_HELD", {
       path,
+      git_state_vault: gitStateVault,
       message: "managed-write lock not reclaimed: unsafe git state"
     });
   }
@@ -90,6 +107,7 @@ function reclaimDeadManagedWriteLockOwner(vault) {
       recovered_at: (/* @__PURE__ */ new Date()).toISOString(),
       recovery_reason: "owner_pid_dead",
       owner_pid_alive: false,
+      git_state_vault: gitStateVault,
       lock: record
     };
     writeFileSync(recoveryPath, `${JSON.stringify(meta, null, 2)}
@@ -107,7 +125,13 @@ function tryCreateLock(path, command) {
     mkdirSync(dirname(path), { recursive: true });
     writeFileSync(
       path,
-      `${JSON.stringify({ pid: process.pid, owner_token: ownerToken, acquired, command })}
+      `${JSON.stringify({
+        pid: process.pid,
+        owner_hostname: hostname(),
+        owner_token: ownerToken,
+        acquired,
+        command
+      })}
 `,
       { flag: "wx" }
     );
@@ -117,14 +141,14 @@ function tryCreateLock(path, command) {
     return err("WRITE_FAILED", { path, message: String(error) });
   }
 }
-function acquireManagedWriteLock(vault, command) {
+function acquireManagedWriteLock(vault, command, options = {}) {
   const path = managedWriteLockPath(vault);
   const first = tryCreateLock(path, command);
   if (first.ok) {
     return ok({ ...first.data, vault });
   }
   if (first.error !== "SYNC_LOCK_HELD") return first;
-  const reclaimed = reclaimDeadManagedWriteLockOwner(vault);
+  const reclaimed = reclaimDeadManagedWriteLockOwner(vault, options);
   if (!reclaimed.ok || !reclaimed.data.reclaimed) {
     return err("SYNC_LOCK_HELD", { path });
   }
@@ -180,8 +204,8 @@ function isGitVault(vault) {
   return Boolean(git(vault, ["rev-parse", "--absolute-git-dir"]));
 }
 async function runManagedWritePreflight(input, deps = DEFAULT_DEPS) {
-  const mutationVault = resolve(input.vault);
-  let convergenceVault = input.convergenceVault && resolve(input.convergenceVault) !== mutationVault ? resolve(input.convergenceVault) : void 0;
+  const mutationVault = resolve2(input.vault);
+  let convergenceVault = input.convergenceVault && resolve2(input.convergenceVault) !== mutationVault ? resolve2(input.convergenceVault) : void 0;
   let convergenceSource = convergenceVault ? "explicit" : "single-path";
   const mutationBlocker = preflightBlocker(mutationVault);
   if (mutationBlocker) {
@@ -264,7 +288,7 @@ async function runManagedWritePreflight(input, deps = DEFAULT_DEPS) {
         })
       };
     }
-    convergenceVault = resolve(configured);
+    convergenceVault = resolve2(configured);
     convergenceSource = "configured";
     if (convergenceVault === mutationVault) {
       return {
@@ -373,8 +397,10 @@ async function runManagedWritePreflight(input, deps = DEFAULT_DEPS) {
   };
 }
 async function runManagedWriteTransaction(input, deps = DEFAULT_DEPS) {
-  const mutationVault = resolve(input.vault);
-  const lock = acquireManagedWriteLock(mutationVault, input.command);
+  const mutationVault = resolve2(input.vault);
+  const lock = acquireManagedWriteLock(mutationVault, input.command, {
+    gitStateVault: input.convergenceVault ? resolve2(input.convergenceVault) : mutationVault
+  });
   if (!lock.ok) {
     return { exitCode: ExitCode.SYNC_LOCK_HELD, result: lock };
   }

package/dist/cli.js

@@ -109,7 +109,7 @@ import {
 import {
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-QJPCCW4N.js";
+} from "./chunk-65Q5UGND.js";
 import {
   FLEET_REL_PATH,
   canSupersedeJournal,
@@ -7862,7 +7862,7 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-LO4LZ6OQ.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-CTXX2MHQ.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,

package/dist/{managed-write-preflight-LO4LZ6OQ.js → managed-write-preflight-CTXX2MHQ.js}

@@ -2,7 +2,7 @@
 import {
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-QJPCCW4N.js";
+} from "./chunk-65Q5UGND.js";
 import "./chunk-GNS2ZV5P.js";
 import "./chunk-Y6KRDGI2.js";
 export {

package/dist/vault-sync/scripts/lib/managed-write-lock.sh

@@ -159,7 +159,7 @@ vault_sync_managed_lock_reclaim_dead_owner() {
 vault_sync_managed_lock_acquire() {
   local repo="${1:-.}"
   local command="${2:-wiki-pull}"
-  local path token now inherited attempt
+  local path token now owner_hostname inherited attempt
 
   path="$(vault_sync_managed_lock_path "$repo")" || return 1
   VAULT_SYNC_MANAGED_LOCK_PATH="$path"
@@ -185,8 +185,9 @@ vault_sync_managed_lock_acquire() {
     token="$(od -An -N16 -tx1 /dev/urandom 2>/dev/null | tr -d ' \n')"
     [ -n "$token" ] || token="$$-$(date +%s)"
     now="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
-    if ( set -o noclobber; printf '{"pid":%s,"owner_token":"%s","acquired":"%s","command":"%s"}\n' \
-        "$$" "$token" "$now" "$command" >"$path" ) 2>/dev/null; then
+    owner_hostname="$(hostname 2>/dev/null || printf unknown)"
+    if ( set -o noclobber; printf '{"pid":%s,"owner_hostname":"%s","owner_token":"%s","acquired":"%s","command":"%s"}\n' \
+        "$$" "$owner_hostname" "$token" "$now" "$command" >"$path" ) 2>/dev/null; then
       VAULT_SYNC_MANAGED_LOCK_TOKEN_OWNED="$token"
       VAULT_SYNC_MANAGED_LOCK_ACQUIRED="$now"
       VAULT_SYNC_MANAGED_LOCK_OWNS_RELEASE=1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.20",
+  "version": "0.10.21",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.20",
+  "version": "0.10.21",
   "skills": "./",
   "description": "Project-aware Karpathy-style knowledge base for Claude Code: 19 prompt-only skills (wiki-*, proj-*, using-skillwiki) backed by the deterministic `skillwiki` CLI.",
   "author": {

package/skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.20",
+  "version": "0.10.21",
   "description": "Project-aware Karpathy-style knowledge base for Codex with 19 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",

package/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.10.20",
+  "version": "0.10.21",
   "private": true,
   "files": [
     "wiki-*",