skillwiki 0.10.44 → 0.10.45

package/dist/{chunk-BUHQMIOD.js → chunk-OWKNUKCC.js}

@@ -29,12 +29,13 @@ import {
   resolveVaultSyncPullHelper,
   resolveWikiS3Remote,
   runLint,
+  runManagedWriteTransaction,
   runStale,
   satelliteGateFromFleetLoad,
   snapshotterAliasForLocalHost,
   toUndirectedWeighted,
   writeDotenv
-} from "./chunk-NPHRDXHD.js";
+} from "./chunk-5LTXERHO.js";
 import {
   atomicWriteText,
   prepareTypedPage
@@ -609,9 +610,81 @@ function computeAdamicAdar(adj) {
   return out;
 }
 
+// src/utils/protected-vault-write-guard.ts
+import { resolve as resolvePath } from "path";
+async function guardProtectedVaultWrite(input) {
+  const env = input.env ?? process.env;
+  const home = input.home ?? process.env.HOME ?? "";
+  const cwd = input.cwd ?? process.cwd();
+  const liveVaultPath = await resolveLiveVaultPath({ env, home, cwd });
+  const load = await loadFleetManifestAndHost({
+    vault: liveVaultPath ?? input.vault,
+    hostId: input.hostId,
+    env,
+    home,
+    cwd,
+    osHostname: input.osHostname ?? process.env.HOSTNAME,
+    user: input.user ?? process.env.USER
+  });
+  if (!load?.hostId || load.identityStatus !== "known") {
+    return { blocked: false };
+  }
+  const host = load.manifest.hosts[load.hostId];
+  if (!host || host.role !== "snapshotter" || host.protected !== true) {
+    return { blocked: false };
+  }
+  const targetVault = resolvePath(input.vault);
+  const canonicalLiveVault = liveVaultPath ? resolvePath(liveVaultPath) : void 0;
+  if (canonicalLiveVault && targetVault === canonicalLiveVault) {
+    return { blocked: false };
+  }
+  const canonicalSnapshotWorktree = resolvePath(
+    resolveConfiguredSnapshotWorktree(home) ?? "/root/wiki-git"
+  );
+  if (targetVault === canonicalSnapshotWorktree) {
+    return {
+      blocked: true,
+      exitCode: ExitCode.PROTECTED_SNAPSHOTTER_WRITE_BLOCKED,
+      result: err("PROTECTED_SNAPSHOTTER_WRITE_BLOCKED", {
+        host_id: load.hostId,
+        command: input.command,
+        reason: `refusing mutation of snapshot worktree '${canonicalSnapshotWorktree}' on protected snapshotter host '${load.hostId}'`,
+        guidance: canonicalLiveVault ? `Use the live vault path '${canonicalLiveVault}' for authoring. Keep snapshot worktrees read-only except explicit snapshot maintenance.` : "Use the live skillwiki vault path for authoring. Keep snapshot worktrees read-only except explicit snapshot maintenance."
+      })
+    };
+  }
+  if (canonicalLiveVault && targetVault !== canonicalLiveVault) {
+    return {
+      blocked: true,
+      exitCode: ExitCode.PROTECTED_SNAPSHOTTER_WRITE_BLOCKED,
+      result: err("PROTECTED_SNAPSHOTTER_WRITE_BLOCKED", {
+        host_id: load.hostId,
+        command: input.command,
+        reason: `refusing vault mutation outside the live vault path '${canonicalLiveVault}' on protected snapshotter host '${load.hostId}'`,
+        guidance: "Use the resolved live skillwiki vault path for authoring. Keep alternate vault roots and snapshot worktrees read-only unless explicitly approved."
+      })
+    };
+  }
+  return { blocked: false };
+}
+async function resolveLiveVaultPath(input) {
+  const resolved = await resolveRuntimePath({
+    flag: void 0,
+    envValue: input.env.WIKI_PATH,
+    wikiEnv: input.env.WIKI,
+    home: input.home,
+    cwd: input.cwd
+  });
+  return resolved.ok ? resolved.data.path : void 0;
+}
+
 // src/commands/project-index.ts
 import { readdir, readFile as readFile4, mkdir as mkdir2 } from "fs/promises";
 import { join as join4, dirname as dirname2, basename } from "path";
+var DEFAULT_DEPS = {
+  guardProtectedVaultWrite,
+  runManagedWriteTransaction
+};
 var LAYER2_DIRS = ["entities", "concepts", "comparisons", "queries", "meta"];
 var PROJECT_LOCAL_DIRS = ["requirements", "work", "architecture", "history"];
 async function scanMarkdownTree(rootAbs, rootRel) {
@@ -787,7 +860,7 @@ Autogenerated by \`skillwiki project-index\` on ${today}.
     index_path: `projects/${slug}/knowledge.md`
   });
 }
-async function runProjectIndex(input) {
+async function runProjectIndex(input, deps = DEFAULT_DEPS) {
   const slug = input.slug;
   const projectDir = join4(input.vault, "projects", slug);
   const rendered = await renderProjectIndex(input.vault, slug);
@@ -813,37 +886,100 @@ async function runProjectIndex(input) {
     stale = existingPages.size !== currentPages.size || [...currentPages].some((p) => !existingPages.has(p));
   } catch {
   }
-  if (input.apply) {
-    try {
-      await mkdir2(dirname2(indexPath), { recursive: true });
-    } catch (e) {
-      return {
-        exitCode: ExitCode.WRITE_FAILED,
-        result: err("WRITE_FAILED", { file: indexPath, message: String(e) })
-      };
-    }
-    const written = await atomicWriteText(indexPath, rendered.data.text);
-    if (!written.ok) {
-      return { exitCode: ExitCode.WRITE_FAILED, result: written };
-    }
-  }
-  const action = input.apply ? `written ${entries.length} entries to ${indexPath}` : `${entries.length} entries found (use --apply to write)`;
-  const staleHint = stale ? " (STALE \u2014 existing index outdated)" : existing ? " (up to date)" : "";
-  return {
-    exitCode: ExitCode.OK,
-    result: ok({
-      slug,
-      entries,
-      existing,
-      stale,
-      index_path: rendered.data.index_path,
-      humanHint: `project: ${slug}
+  if (!input.apply) {
+    const action = `${entries.length} entries found (use --apply to write)`;
+    const staleHint = stale ? " (STALE \u2014 existing index outdated)" : existing ? " (up to date)" : "";
+    return {
+      exitCode: ExitCode.OK,
+      result: ok({
+        slug,
+        entries,
+        existing,
+        stale,
+        index_path: rendered.data.index_path,
+        humanHint: `project: ${slug}
 entries: ${entries.length}${staleHint}
 ${action}
 
 ${entries.map((e) => `  ${e.type}: [[${e.page.replace(/\.md$/, "")}]] \u2014 ${e.title}`).join("\n")}`
-    })
-  };
+      })
+    };
+  }
+  const guard = await deps.guardProtectedVaultWrite({
+    vault: input.vault,
+    command: "project-index --apply"
+  });
+  if (guard.blocked) {
+    return { exitCode: guard.exitCode, result: guard.result };
+  }
+  return deps.runManagedWriteTransaction({
+    vault: input.vault,
+    command: "project-index --apply",
+    allowImmutableRecord: false,
+    mutate: async (receipt) => {
+      const mutationVault = receipt.mutation_vault;
+      const mutationIndexPath = join4(mutationVault, "projects", slug, "knowledge.md");
+      try {
+        await mkdir2(dirname2(mutationIndexPath), { recursive: true });
+      } catch (e) {
+        return {
+          exitCode: ExitCode.WRITE_FAILED,
+          result: err("WRITE_FAILED", { file: mutationIndexPath, message: String(e) })
+        };
+      }
+      const written = await atomicWriteText(mutationIndexPath, rendered.data.text);
+      if (!written.ok) {
+        return { exitCode: ExitCode.WRITE_FAILED, result: written };
+      }
+      if (!written.data.changed) {
+        return {
+          exitCode: ExitCode.OK,
+          result: ok({
+            slug,
+            entries,
+            existing,
+            stale,
+            changed: false,
+            write_mode: receipt.mode,
+            index_path: rendered.data.index_path,
+            humanHint: `project: ${slug}
+entries: ${entries.length} (up to date)
+no write needed`
+          })
+        };
+      }
+      let installed = "";
+      try {
+        installed = await readFile4(mutationIndexPath, "utf8");
+      } catch (error) {
+        return {
+          exitCode: ExitCode.WRITE_FAILED,
+          result: err("WRITE_FAILED", { message: String(error) })
+        };
+      }
+      if (installed !== rendered.data.text) {
+        return {
+          exitCode: ExitCode.WRITE_FAILED,
+          result: err("WRITE_FAILED", { message: "installed knowledge.md differs from projection" })
+        };
+      }
+      return {
+        exitCode: ExitCode.OK,
+        result: ok({
+          slug,
+          entries,
+          existing,
+          stale,
+          changed: true,
+          write_mode: receipt.mode,
+          index_path: rendered.data.index_path,
+          humanHint: `project: ${slug}
+entries: ${entries.length}
+written ${entries.length} entries to ${mutationIndexPath}`
+        })
+      };
+    }
+  });
 }
 
 // src/commands/config.ts
@@ -5956,6 +6092,7 @@ export {
   runValidate,
   runGraphBuild,
   findPlugin,
+  guardProtectedVaultWrite,
   renderProjectIndex,
   runProjectIndex,
   scanConflictMarkerBlocksInText,

package/dist/cli.js

@@ -11,6 +11,7 @@ import {
   evaluateDirtyVolumeGate,
   evaluateSatelliteRunHealth,
   findPlugin,
+  guardProtectedVaultWrite,
   isFailedRunStatus,
   memoryAuthorityTiersRank,
   readCliPackageJson,
@@ -39,7 +40,7 @@ import {
   scanConflictMarkerBlocksInText,
   snapshotterHealthChecks,
   upsertIndexEntry
-} from "./chunk-BUHQMIOD.js";
+} from "./chunk-OWKNUKCC.js";
 import {
   normalizeDistTag,
   readCache,
@@ -53,20 +54,9 @@ import {
   renderRootIndex,
   writeRootIndexProjection
 } from "./chunk-NL2MUWNF.js";
-import {
-  VAULT_COMMIT_PATHSPEC,
-  runManagedWritePreflight,
-  runManagedWriteTransaction,
-  runSyncLock,
-  runSyncPeers,
-  runSyncPull,
-  runSyncPush,
-  runSyncStatus,
-  runSyncUnlock,
-  stageVaultContentChanges
-} from "./chunk-JHHVTW7E.js";
 import {
   FLEET_REL_PATH,
+  VAULT_COMMIT_PATHSPEC,
   acquireOwnedSyncLock,
   appendLastOp,
   applyRawStructuralMove,
@@ -74,6 +64,7 @@ import {
   buildRemoteObjectPath,
   canSupersedeJournal,
   clearLastOp,
+  collectClaimedTranscripts,
   extractTaxonomy,
   getCliSessionId,
   git,
@@ -114,20 +105,29 @@ import {
   runLinks,
   runLint,
   runLogRotate,
+  runManagedWritePreflight,
+  runManagedWriteTransaction,
   runOrphans,
   runPagesize,
   runStale,
   runSyncLintDelta,
+  runSyncLock,
+  runSyncPeers,
+  runSyncPull,
+  runSyncPush,
+  runSyncStatus,
+  runSyncUnlock,
   runTagAudit,
   runTopicMapCheck,
   safeWritePage,
   serializeJournalEnv,
   snapshotMaintainedPageState,
   snapshotterAliasForLocalHost,
+  stageVaultContentChanges,
   supersedeStaleReviewRequiredJournals,
   taxonomyCommentForPage,
   writeDotenv
-} from "./chunk-NPHRDXHD.js";
+} from "./chunk-5LTXERHO.js";
 import {
   assertTargetInsideVault,
   atomicWriteText,
@@ -950,76 +950,6 @@ async function runInit(input) {
 // src/commands/index-rebuild.ts
 import { readFileSync as readFileSync2 } from "fs";
 import { join as join6 } from "path";
-
-// src/utils/protected-vault-write-guard.ts
-import { resolve as resolvePath } from "path";
-async function guardProtectedVaultWrite(input) {
-  const env = input.env ?? process.env;
-  const home = input.home ?? process.env.HOME ?? "";
-  const cwd = input.cwd ?? process.cwd();
-  const liveVaultPath = await resolveLiveVaultPath({ env, home, cwd });
-  const load = await loadFleetManifestAndHost({
-    vault: liveVaultPath ?? input.vault,
-    hostId: input.hostId,
-    env,
-    home,
-    cwd,
-    osHostname: input.osHostname ?? process.env.HOSTNAME,
-    user: input.user ?? process.env.USER
-  });
-  if (!load?.hostId || load.identityStatus !== "known") {
-    return { blocked: false };
-  }
-  const host = load.manifest.hosts[load.hostId];
-  if (!host || host.role !== "snapshotter" || host.protected !== true) {
-    return { blocked: false };
-  }
-  const targetVault = resolvePath(input.vault);
-  const canonicalLiveVault = liveVaultPath ? resolvePath(liveVaultPath) : void 0;
-  if (canonicalLiveVault && targetVault === canonicalLiveVault) {
-    return { blocked: false };
-  }
-  const canonicalSnapshotWorktree = resolvePath(
-    resolveConfiguredSnapshotWorktree(home) ?? "/root/wiki-git"
-  );
-  if (targetVault === canonicalSnapshotWorktree) {
-    return {
-      blocked: true,
-      exitCode: ExitCode.PROTECTED_SNAPSHOTTER_WRITE_BLOCKED,
-      result: err("PROTECTED_SNAPSHOTTER_WRITE_BLOCKED", {
-        host_id: load.hostId,
-        command: input.command,
-        reason: `refusing mutation of snapshot worktree '${canonicalSnapshotWorktree}' on protected snapshotter host '${load.hostId}'`,
-        guidance: canonicalLiveVault ? `Use the live vault path '${canonicalLiveVault}' for authoring. Keep snapshot worktrees read-only except explicit snapshot maintenance.` : "Use the live skillwiki vault path for authoring. Keep snapshot worktrees read-only except explicit snapshot maintenance."
-      })
-    };
-  }
-  if (canonicalLiveVault && targetVault !== canonicalLiveVault) {
-    return {
-      blocked: true,
-      exitCode: ExitCode.PROTECTED_SNAPSHOTTER_WRITE_BLOCKED,
-      result: err("PROTECTED_SNAPSHOTTER_WRITE_BLOCKED", {
-        host_id: load.hostId,
-        command: input.command,
-        reason: `refusing vault mutation outside the live vault path '${canonicalLiveVault}' on protected snapshotter host '${load.hostId}'`,
-        guidance: "Use the resolved live skillwiki vault path for authoring. Keep alternate vault roots and snapshot worktrees read-only unless explicitly approved."
-      })
-    };
-  }
-  return { blocked: false };
-}
-async function resolveLiveVaultPath(input) {
-  const resolved = await resolveRuntimePath({
-    flag: void 0,
-    envValue: input.env.WIKI_PATH,
-    wikiEnv: input.env.WIKI,
-    home: input.home,
-    cwd: input.cwd
-  });
-  return resolved.ok ? resolved.data.path : void 0;
-}
-
-// src/commands/index-rebuild.ts
 async function runIndexRebuild(input) {
   const projection = await renderRootIndex({ vault: input.vault });
   if (!projection.ok) {
@@ -4554,9 +4484,13 @@ async function runSessionBrief(input) {
       ...baseHealthWarnings,
       ...satelliteHealthWarnings(satelliteHealth)
     ];
+    const claimed = collectClaimedTranscripts(
+      workItems.map((w) => ({ relDir: w.path, source: w.source, sources: w.sources, closes: w.closes }))
+    );
     const latestLogs = newest(transcripts.filter((t) => t.kind === "session-log"), 3);
     const unclaimedCaptures = newest(transcripts.filter((t) => {
       if (t.kind !== "task" && t.kind !== "bug") return false;
+      if (claimed.claimedByPath.has(t.path)) return false;
       return !t.workItem && (!project || t.project === project);
     }), 5);
     const activeWork = newest(workItems.filter((w) => {
@@ -4697,7 +4631,10 @@ async function loadWorkItems(workItemPages) {
       summary: summarize(body),
       date: stringField(fm.data.updated) || stringField(fm.data.created) || dateFromPath(page.relPath),
       status: stringField(fm.data.status),
-      project: wikilinkSlug(fm.data.project)
+      project: wikilinkSlug(fm.data.project),
+      source: fm.data.source,
+      sources: fm.data.sources,
+      closes: fm.data.closes
     });
   }
   return out;
@@ -7972,11 +7909,11 @@ import { existsSync as existsSync9, mkdirSync as mkdirSync4, appendFileSync } fr
 import { createHash as createHash5 } from "crypto";
 import { execSync as execSync3, spawn } from "child_process";
 import { platform as platform2 } from "os";
-import { join as join30, resolve as resolvePath2 } from "path";
+import { join as join30, resolve as resolvePath } from "path";
 var MAINTENANCE_SCHEMA_VERSION = 1;
 var MAINTENANCE_COMMAND = "snapshot-maintenance journal clear-stale";
 function canonicalize(p) {
-  return resolvePath2(p);
+  return resolvePath(p);
 }
 function computeApprovalId(plan) {
   const eligible = [...plan.eligible_journals].sort((a, b) => a.operation_id.localeCompare(b.operation_id));
@@ -9542,7 +9479,7 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-EDEMCLVQ.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-BVDVX63J.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,

package/dist/{managed-write-preflight-EDEMCLVQ.js → managed-write-preflight-BVDVX63J.js}

@@ -2,8 +2,7 @@
 import {
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-JHHVTW7E.js";
-import "./chunk-NPHRDXHD.js";
+} from "./chunk-5LTXERHO.js";
 import "./chunk-CTN66CDX.js";
 import "./chunk-RPZIGMMH.js";
 import "./chunk-APDMYPM6.js";

package/dist/skillwiki-mcp.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-BUHQMIOD.js";
+} from "./chunk-OWKNUKCC.js";
 import "./chunk-7I2TPIV5.js";
 import "./chunk-NL2MUWNF.js";
-import "./chunk-NPHRDXHD.js";
+import "./chunk-5LTXERHO.js";
 import "./chunk-CTN66CDX.js";
 import "./chunk-RPZIGMMH.js";
 import "./chunk-APDMYPM6.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.44",
+  "version": "0.10.45",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.44",
+  "version": "0.10.45",
   "skills": "./",
   "description": "Project-aware Karpathy-style knowledge base for Claude Code: 19 prompt-only skills (wiki-*, proj-*, using-skillwiki) backed by the deterministic `skillwiki` CLI.",
   "author": {

package/skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.44",
+  "version": "0.10.45",
   "description": "Project-aware Karpathy-style knowledge base for Codex with 19 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",

package/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.10.44",
+  "version": "0.10.45",
   "private": true,
   "files": [
     "wiki-*",