skillwiki 0.10.44 → 0.10.46

package/dist/{chunk-BUHQMIOD.js → chunk-5JYOYMST.js}

@@ -6,7 +6,7 @@ import {
 import {
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-NL2MUWNF.js";
+} from "./chunk-GAU4D25O.js";
 import {
   CONFIG_KEYS,
   acquireOwnedSyncLock,
@@ -29,20 +29,21 @@ import {
   resolveVaultSyncPullHelper,
   resolveWikiS3Remote,
   runLint,
+  runManagedWriteTransaction,
   runStale,
   satelliteGateFromFleetLoad,
   snapshotterAliasForLocalHost,
   toUndirectedWeighted,
   writeDotenv
-} from "./chunk-NPHRDXHD.js";
+} from "./chunk-4SINVFR3.js";
 import {
   atomicWriteText,
   prepareTypedPage
-} from "./chunk-CTN66CDX.js";
+} from "./chunk-UHZBOOMK.js";
 import {
   eventPathFor,
   writeLogEvent
-} from "./chunk-RPZIGMMH.js";
+} from "./chunk-PLUHIOCQ.js";
 import {
   CompoundSchema,
   ExitCode,
@@ -63,7 +64,7 @@ import {
   scanVault,
   splitFrontmatter,
   systemdPropertyFor
-} from "./chunk-APDMYPM6.js";
+} from "./chunk-EVQASYII.js";
 
 // src/commands/log-append.ts
 import { readFile, stat } from "fs/promises";
@@ -609,11 +610,84 @@ function computeAdamicAdar(adj) {
   return out;
 }
 
+// src/utils/protected-vault-write-guard.ts
+import { resolve as resolvePath } from "path";
+async function guardProtectedVaultWrite(input) {
+  const env = input.env ?? process.env;
+  const home = input.home ?? process.env.HOME ?? "";
+  const cwd = input.cwd ?? process.cwd();
+  const liveVaultPath = await resolveLiveVaultPath({ env, home, cwd });
+  const load = await loadFleetManifestAndHost({
+    vault: liveVaultPath ?? input.vault,
+    hostId: input.hostId,
+    env,
+    home,
+    cwd,
+    osHostname: input.osHostname ?? process.env.HOSTNAME,
+    user: input.user ?? process.env.USER
+  });
+  if (!load?.hostId || load.identityStatus !== "known") {
+    return { blocked: false };
+  }
+  const host = load.manifest.hosts[load.hostId];
+  if (!host || host.role !== "snapshotter" || host.protected !== true) {
+    return { blocked: false };
+  }
+  const targetVault = resolvePath(input.vault);
+  const canonicalLiveVault = liveVaultPath ? resolvePath(liveVaultPath) : void 0;
+  if (canonicalLiveVault && targetVault === canonicalLiveVault) {
+    return { blocked: false };
+  }
+  const canonicalSnapshotWorktree = resolvePath(
+    resolveConfiguredSnapshotWorktree(home) ?? "/root/wiki-git"
+  );
+  if (targetVault === canonicalSnapshotWorktree) {
+    return {
+      blocked: true,
+      exitCode: ExitCode.PROTECTED_SNAPSHOTTER_WRITE_BLOCKED,
+      result: err("PROTECTED_SNAPSHOTTER_WRITE_BLOCKED", {
+        host_id: load.hostId,
+        command: input.command,
+        reason: `refusing mutation of snapshot worktree '${canonicalSnapshotWorktree}' on protected snapshotter host '${load.hostId}'`,
+        guidance: canonicalLiveVault ? `Use the live vault path '${canonicalLiveVault}' for authoring. Keep snapshot worktrees read-only except explicit snapshot maintenance.` : "Use the live skillwiki vault path for authoring. Keep snapshot worktrees read-only except explicit snapshot maintenance."
+      })
+    };
+  }
+  if (canonicalLiveVault && targetVault !== canonicalLiveVault) {
+    return {
+      blocked: true,
+      exitCode: ExitCode.PROTECTED_SNAPSHOTTER_WRITE_BLOCKED,
+      result: err("PROTECTED_SNAPSHOTTER_WRITE_BLOCKED", {
+        host_id: load.hostId,
+        command: input.command,
+        reason: `refusing vault mutation outside the live vault path '${canonicalLiveVault}' on protected snapshotter host '${load.hostId}'`,
+        guidance: "Use the resolved live skillwiki vault path for authoring. Keep alternate vault roots and snapshot worktrees read-only unless explicitly approved."
+      })
+    };
+  }
+  return { blocked: false };
+}
+async function resolveLiveVaultPath(input) {
+  const resolved = await resolveRuntimePath({
+    flag: void 0,
+    envValue: input.env.WIKI_PATH,
+    wikiEnv: input.env.WIKI,
+    home: input.home,
+    cwd: input.cwd
+  });
+  return resolved.ok ? resolved.data.path : void 0;
+}
+
 // src/commands/project-index.ts
 import { readdir, readFile as readFile4, mkdir as mkdir2 } from "fs/promises";
 import { join as join4, dirname as dirname2, basename } from "path";
+var DEFAULT_DEPS = {
+  guardProtectedVaultWrite,
+  runManagedWriteTransaction
+};
 var LAYER2_DIRS = ["entities", "concepts", "comparisons", "queries", "meta"];
 var PROJECT_LOCAL_DIRS = ["requirements", "work", "architecture", "history"];
+var PROJECT_INDEX_STALE_EXIT_CODE = 3;
 async function scanMarkdownTree(rootAbs, rootRel) {
   const found = [];
   let entries;
@@ -787,8 +861,14 @@ Autogenerated by \`skillwiki project-index\` on ${today}.
     index_path: `projects/${slug}/knowledge.md`
   });
 }
-async function runProjectIndex(input) {
+async function runProjectIndex(input, deps = DEFAULT_DEPS) {
   const slug = input.slug;
+  if (input.check && input.apply) {
+    return {
+      exitCode: ExitCode.USAGE,
+      result: err("USAGE", { message: "--check and --apply are mutually exclusive" })
+    };
+  }
   const projectDir = join4(input.vault, "projects", slug);
   const rendered = await renderProjectIndex(input.vault, slug);
   if (!rendered.ok) {
@@ -813,37 +893,100 @@ async function runProjectIndex(input) {
     stale = existingPages.size !== currentPages.size || [...currentPages].some((p) => !existingPages.has(p));
   } catch {
   }
-  if (input.apply) {
-    try {
-      await mkdir2(dirname2(indexPath), { recursive: true });
-    } catch (e) {
-      return {
-        exitCode: ExitCode.WRITE_FAILED,
-        result: err("WRITE_FAILED", { file: indexPath, message: String(e) })
-      };
-    }
-    const written = await atomicWriteText(indexPath, rendered.data.text);
-    if (!written.ok) {
-      return { exitCode: ExitCode.WRITE_FAILED, result: written };
-    }
-  }
-  const action = input.apply ? `written ${entries.length} entries to ${indexPath}` : `${entries.length} entries found (use --apply to write)`;
-  const staleHint = stale ? " (STALE \u2014 existing index outdated)" : existing ? " (up to date)" : "";
-  return {
-    exitCode: ExitCode.OK,
-    result: ok({
-      slug,
-      entries,
-      existing,
-      stale,
-      index_path: rendered.data.index_path,
-      humanHint: `project: ${slug}
+  if (!input.apply) {
+    const action = `${entries.length} entries found (use --apply to write)`;
+    const staleHint = stale ? " (STALE \u2014 existing index outdated)" : existing ? " (up to date)" : "";
+    return {
+      exitCode: input.check && stale ? PROJECT_INDEX_STALE_EXIT_CODE : ExitCode.OK,
+      result: ok({
+        slug,
+        entries,
+        existing,
+        stale,
+        index_path: rendered.data.index_path,
+        humanHint: `project: ${slug}
 entries: ${entries.length}${staleHint}
 ${action}
 
 ${entries.map((e) => `  ${e.type}: [[${e.page.replace(/\.md$/, "")}]] \u2014 ${e.title}`).join("\n")}`
-    })
-  };
+      })
+    };
+  }
+  const guard = await deps.guardProtectedVaultWrite({
+    vault: input.vault,
+    command: "project-index --apply"
+  });
+  if (guard.blocked) {
+    return { exitCode: guard.exitCode, result: guard.result };
+  }
+  return deps.runManagedWriteTransaction({
+    vault: input.vault,
+    command: "project-index --apply",
+    allowImmutableRecord: false,
+    mutate: async (receipt) => {
+      const mutationVault = receipt.mutation_vault;
+      const mutationIndexPath = join4(mutationVault, "projects", slug, "knowledge.md");
+      try {
+        await mkdir2(dirname2(mutationIndexPath), { recursive: true });
+      } catch (e) {
+        return {
+          exitCode: ExitCode.WRITE_FAILED,
+          result: err("WRITE_FAILED", { file: mutationIndexPath, message: String(e) })
+        };
+      }
+      const written = await atomicWriteText(mutationIndexPath, rendered.data.text);
+      if (!written.ok) {
+        return { exitCode: ExitCode.WRITE_FAILED, result: written };
+      }
+      if (!written.data.changed) {
+        return {
+          exitCode: ExitCode.OK,
+          result: ok({
+            slug,
+            entries,
+            existing,
+            stale,
+            changed: false,
+            write_mode: receipt.mode,
+            index_path: rendered.data.index_path,
+            humanHint: `project: ${slug}
+entries: ${entries.length} (up to date)
+no write needed`
+          })
+        };
+      }
+      let installed = "";
+      try {
+        installed = await readFile4(mutationIndexPath, "utf8");
+      } catch (error) {
+        return {
+          exitCode: ExitCode.WRITE_FAILED,
+          result: err("WRITE_FAILED", { message: String(error) })
+        };
+      }
+      if (installed !== rendered.data.text) {
+        return {
+          exitCode: ExitCode.WRITE_FAILED,
+          result: err("WRITE_FAILED", { message: "installed knowledge.md differs from projection" })
+        };
+      }
+      return {
+        exitCode: ExitCode.OK,
+        result: ok({
+          slug,
+          entries,
+          existing,
+          stale,
+          changed: true,
+          write_mode: receipt.mode,
+          index_path: rendered.data.index_path,
+          humanHint: `project: ${slug}
+entries: ${entries.length}
+written ${entries.length} entries to ${mutationIndexPath}`
+        })
+      };
+    }
+  });
 }
 
 // src/commands/config.ts
@@ -4850,7 +4993,7 @@ async function runQuery(input) {
   }).filter((r) => r.score > 0).sort((a, b) => b.score - a.score || a.path.localeCompare(b.path)).slice(0, limit);
   let pendingSources;
   if (input.includePending) {
-    const { runSourcesPending } = await import("./sources-Z4VMD2YO.js");
+    const { runSourcesPending } = await import("./sources-CMV5DKS5.js");
     const pending = await runSourcesPending({
       vault: input.vault,
       match: input.text,
@@ -5956,6 +6099,7 @@ export {
   runValidate,
   runGraphBuild,
   findPlugin,
+  guardProtectedVaultWrite,
   renderProjectIndex,
   runProjectIndex,
   scanConflictMarkerBlocksInText,

package/dist/{chunk-APDMYPM6.js → chunk-EVQASYII.js}

@@ -74,6 +74,7 @@ function err(error, detail) {
 }
 
 // ../shared/src/schemas.ts
+import { isAbsolute } from "path";
 import { z } from "zod";
 var isoDate = z.string().refine((s) => {
   if (!/^\d{4}-\d{2}-\d{2}$/.test(s)) return false;
@@ -205,7 +206,7 @@ var endpointName = z.string().min(1).regex(/^[A-Za-z0-9_.-]+$/, "must be a hostn
 var ipAddress = z.string().min(1).regex(/^[0-9a-fA-F:.]+$/, "must be an IP address token");
 var sshAlias = z.string().min(1).regex(/^[A-Za-z0-9_.@-]+$/, "must be an SSH alias token");
 var sshUser = z.string().min(1).regex(/^[A-Za-z0-9_.-]+$/, "must be an SSH user token");
-var absolutePath = z.string().min(1).regex(/^\//, "must be an absolute path");
+var absolutePath = z.string().min(1).refine((value) => isAbsolute(value), "must be an absolute path");
 var FleetAccessProfileSchema = z.object({
   status: z.enum(["local", "configured", "planned", "absent", "unknown"]),
   ssh_aliases: z.array(sshAlias).optional(),

package/dist/{chunk-NL2MUWNF.js → chunk-GAU4D25O.js}

@@ -3,11 +3,11 @@ import {
   ROOT_INDEX_SECTION_ORDER,
   atomicWriteText,
   buildRootIndexUniverse
-} from "./chunk-CTN66CDX.js";
+} from "./chunk-UHZBOOMK.js";
 import {
   err,
   ok
-} from "./chunk-APDMYPM6.js";
+} from "./chunk-EVQASYII.js";
 
 // src/utils/index-projection.ts
 import { readFile } from "fs/promises";

package/dist/{chunk-RPZIGMMH.js → chunk-PLUHIOCQ.js}

@@ -6,7 +6,7 @@ import {
   readPage,
   scanSensitiveContent,
   splitFrontmatter
-} from "./chunk-APDMYPM6.js";
+} from "./chunk-EVQASYII.js";
 
 // src/utils/log-events.ts
 import { mkdir, open, readFile, readdir } from "fs/promises";

package/dist/{chunk-DHGHISVY.js → chunk-QNSD72FH.js}

@@ -8,7 +8,7 @@ import {
   readLogEvents,
   resolveExistingRegularFileInsideVault,
   writeLogEvent
-} from "./chunk-RPZIGMMH.js";
+} from "./chunk-PLUHIOCQ.js";
 import {
   ExitCode,
   RawSourceSchema,
@@ -19,7 +19,7 @@ import {
   scanSensitiveContent,
   scanVault,
   splitFrontmatter
-} from "./chunk-APDMYPM6.js";
+} from "./chunk-EVQASYII.js";
 
 // src/utils/source-lifecycle.ts
 import { basename } from "path";

package/dist/{chunk-CTN66CDX.js → chunk-UHZBOOMK.js}

@@ -8,7 +8,7 @@ import {
   ok,
   scanSensitiveContent,
   scanVault
-} from "./chunk-APDMYPM6.js";
+} from "./chunk-EVQASYII.js";
 
 // src/utils/atomic-write.ts
 import { randomBytes } from "crypto";

package/dist/cli.js

@@ -11,6 +11,7 @@ import {
   evaluateDirtyVolumeGate,
   evaluateSatelliteRunHealth,
   findPlugin,
+  guardProtectedVaultWrite,
   isFailedRunStatus,
   memoryAuthorityTiersRank,
   readCliPackageJson,
@@ -39,7 +40,7 @@ import {
   scanConflictMarkerBlocksInText,
   snapshotterHealthChecks,
   upsertIndexEntry
-} from "./chunk-BUHQMIOD.js";
+} from "./chunk-5JYOYMST.js";
 import {
   normalizeDistTag,
   readCache,
@@ -52,21 +53,10 @@ import {
   UNMANAGED_START,
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-NL2MUWNF.js";
-import {
-  VAULT_COMMIT_PATHSPEC,
-  runManagedWritePreflight,
-  runManagedWriteTransaction,
-  runSyncLock,
-  runSyncPeers,
-  runSyncPull,
-  runSyncPush,
-  runSyncStatus,
-  runSyncUnlock,
-  stageVaultContentChanges
-} from "./chunk-JHHVTW7E.js";
+} from "./chunk-GAU4D25O.js";
 import {
   FLEET_REL_PATH,
+  VAULT_COMMIT_PATHSPEC,
   acquireOwnedSyncLock,
   appendLastOp,
   applyRawStructuralMove,
@@ -74,6 +64,7 @@ import {
   buildRemoteObjectPath,
   canSupersedeJournal,
   clearLastOp,
+  collectClaimedTranscripts,
   extractTaxonomy,
   getCliSessionId,
   git,
@@ -114,25 +105,34 @@ import {
   runLinks,
   runLint,
   runLogRotate,
+  runManagedWritePreflight,
+  runManagedWriteTransaction,
   runOrphans,
   runPagesize,
   runStale,
   runSyncLintDelta,
+  runSyncLock,
+  runSyncPeers,
+  runSyncPull,
+  runSyncPush,
+  runSyncStatus,
+  runSyncUnlock,
   runTagAudit,
   runTopicMapCheck,
   safeWritePage,
   serializeJournalEnv,
   snapshotMaintainedPageState,
   snapshotterAliasForLocalHost,
+  stageVaultContentChanges,
   supersedeStaleReviewRequiredJournals,
   taxonomyCommentForPage,
   writeDotenv
-} from "./chunk-NPHRDXHD.js";
+} from "./chunk-4SINVFR3.js";
 import {
   assertTargetInsideVault,
   atomicWriteText,
   prepareTypedPage
-} from "./chunk-CTN66CDX.js";
+} from "./chunk-UHZBOOMK.js";
 import {
   applySourceDisposition,
   decodeSourceActionApproval,
@@ -140,7 +140,7 @@ import {
   inventorySources,
   planSourceDisposition,
   runSourcesPending
-} from "./chunk-DHGHISVY.js";
+} from "./chunk-QNSD72FH.js";
 import {
   authorizeRawOperation,
   buildSourceReferenceIndex,
@@ -156,7 +156,7 @@ import {
   resolveExistingRegularFileInsideVault,
   validateLogEvent,
   writeLogEvent
-} from "./chunk-RPZIGMMH.js";
+} from "./chunk-PLUHIOCQ.js";
 import {
   ExitCode,
   MetaSchema,
@@ -173,7 +173,7 @@ import {
   scanSensitiveContent,
   scanVault,
   splitFrontmatter
-} from "./chunk-APDMYPM6.js";
+} from "./chunk-EVQASYII.js";
 
 // src/cli.ts
 import { join as join38 } from "path";
@@ -950,76 +950,6 @@ async function runInit(input) {
 // src/commands/index-rebuild.ts
 import { readFileSync as readFileSync2 } from "fs";
 import { join as join6 } from "path";
-
-// src/utils/protected-vault-write-guard.ts
-import { resolve as resolvePath } from "path";
-async function guardProtectedVaultWrite(input) {
-  const env = input.env ?? process.env;
-  const home = input.home ?? process.env.HOME ?? "";
-  const cwd = input.cwd ?? process.cwd();
-  const liveVaultPath = await resolveLiveVaultPath({ env, home, cwd });
-  const load = await loadFleetManifestAndHost({
-    vault: liveVaultPath ?? input.vault,
-    hostId: input.hostId,
-    env,
-    home,
-    cwd,
-    osHostname: input.osHostname ?? process.env.HOSTNAME,
-    user: input.user ?? process.env.USER
-  });
-  if (!load?.hostId || load.identityStatus !== "known") {
-    return { blocked: false };
-  }
-  const host = load.manifest.hosts[load.hostId];
-  if (!host || host.role !== "snapshotter" || host.protected !== true) {
-    return { blocked: false };
-  }
-  const targetVault = resolvePath(input.vault);
-  const canonicalLiveVault = liveVaultPath ? resolvePath(liveVaultPath) : void 0;
-  if (canonicalLiveVault && targetVault === canonicalLiveVault) {
-    return { blocked: false };
-  }
-  const canonicalSnapshotWorktree = resolvePath(
-    resolveConfiguredSnapshotWorktree(home) ?? "/root/wiki-git"
-  );
-  if (targetVault === canonicalSnapshotWorktree) {
-    return {
-      blocked: true,
-      exitCode: ExitCode.PROTECTED_SNAPSHOTTER_WRITE_BLOCKED,
-      result: err("PROTECTED_SNAPSHOTTER_WRITE_BLOCKED", {
-        host_id: load.hostId,
-        command: input.command,
-        reason: `refusing mutation of snapshot worktree '${canonicalSnapshotWorktree}' on protected snapshotter host '${load.hostId}'`,
-        guidance: canonicalLiveVault ? `Use the live vault path '${canonicalLiveVault}' for authoring. Keep snapshot worktrees read-only except explicit snapshot maintenance.` : "Use the live skillwiki vault path for authoring. Keep snapshot worktrees read-only except explicit snapshot maintenance."
-      })
-    };
-  }
-  if (canonicalLiveVault && targetVault !== canonicalLiveVault) {
-    return {
-      blocked: true,
-      exitCode: ExitCode.PROTECTED_SNAPSHOTTER_WRITE_BLOCKED,
-      result: err("PROTECTED_SNAPSHOTTER_WRITE_BLOCKED", {
-        host_id: load.hostId,
-        command: input.command,
-        reason: `refusing vault mutation outside the live vault path '${canonicalLiveVault}' on protected snapshotter host '${load.hostId}'`,
-        guidance: "Use the resolved live skillwiki vault path for authoring. Keep alternate vault roots and snapshot worktrees read-only unless explicitly approved."
-      })
-    };
-  }
-  return { blocked: false };
-}
-async function resolveLiveVaultPath(input) {
-  const resolved = await resolveRuntimePath({
-    flag: void 0,
-    envValue: input.env.WIKI_PATH,
-    wikiEnv: input.env.WIKI,
-    home: input.home,
-    cwd: input.cwd
-  });
-  return resolved.ok ? resolved.data.path : void 0;
-}
-
-// src/commands/index-rebuild.ts
 async function runIndexRebuild(input) {
   const projection = await renderRootIndex({ vault: input.vault });
   if (!projection.ok) {
@@ -3477,7 +3407,7 @@ ${fmRewritten}
   }
   let indexUpdated = false;
   if (!isRaw) {
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-RWF5M7U7.js");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-BJNZUPH6.js");
     const before = await readFile7(join18(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
@@ -3597,7 +3527,7 @@ async function runRemove(input) {
   if (relPath.endsWith(".md") && !relPath.startsWith("raw/")) {
     const { readFile: readFile20 } = await import("fs/promises");
     const { join: pathJoin } = await import("path");
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-RWF5M7U7.js");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-BJNZUPH6.js");
     const before = await readFile20(pathJoin(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
@@ -4554,9 +4484,13 @@ async function runSessionBrief(input) {
       ...baseHealthWarnings,
       ...satelliteHealthWarnings(satelliteHealth)
     ];
+    const claimed = collectClaimedTranscripts(
+      workItems.map((w) => ({ relDir: w.path, source: w.source, sources: w.sources, closes: w.closes }))
+    );
     const latestLogs = newest(transcripts.filter((t) => t.kind === "session-log"), 3);
     const unclaimedCaptures = newest(transcripts.filter((t) => {
       if (t.kind !== "task" && t.kind !== "bug") return false;
+      if (claimed.claimedByPath.has(t.path)) return false;
       return !t.workItem && (!project || t.project === project);
     }), 5);
     const activeWork = newest(workItems.filter((w) => {
@@ -4697,7 +4631,10 @@ async function loadWorkItems(workItemPages) {
       summary: summarize(body),
       date: stringField(fm.data.updated) || stringField(fm.data.created) || dateFromPath(page.relPath),
       status: stringField(fm.data.status),
-      project: wikilinkSlug(fm.data.project)
+      project: wikilinkSlug(fm.data.project),
+      source: fm.data.source,
+      sources: fm.data.sources,
+      closes: fm.data.closes
     });
   }
   return out;
@@ -7972,11 +7909,11 @@ import { existsSync as existsSync9, mkdirSync as mkdirSync4, appendFileSync } fr
 import { createHash as createHash5 } from "crypto";
 import { execSync as execSync3, spawn } from "child_process";
 import { platform as platform2 } from "os";
-import { join as join30, resolve as resolvePath2 } from "path";
+import { join as join30, resolve as resolvePath } from "path";
 var MAINTENANCE_SCHEMA_VERSION = 1;
 var MAINTENANCE_COMMAND = "snapshot-maintenance journal clear-stale";
 function canonicalize(p) {
-  return resolvePath2(p);
+  return resolvePath(p);
 }
 function computeApprovalId(plan) {
   const eligible = [...plan.eligible_journals].sort((a, b) => a.operation_id.localeCompare(b.operation_id));
@@ -9542,7 +9479,7 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-EDEMCLVQ.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-DWK3PJCO.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,
@@ -10173,7 +10110,11 @@ program.command("transcripts [vault]").description("list transcript files in raw
   if (!v.ok) emit({ exitCode: v.exitCode, result: v.payload });
   else emit(await runTranscripts({ vault: v.vault, since: opts.since }), v.vault);
 });
-program.command("project-index <slug> [vault]").description("generate a knowledge index for a project workspace").option("--apply", "write knowledge.md to the project directory", false).option("--wiki <name>", "wiki profile name").action(async (slug, vault, opts) => {
+program.command("project-index <slug> [vault]").description("generate a knowledge index for a project workspace").option("--apply", "write knowledge.md to the project directory", false).option("--check", "check-only: exit 0 when the existing index is fresh, 3 when stale (no writes; mutually exclusive with --apply)", false).option("--wiki <name>", "wiki profile name").action(async (slug, vault, opts) => {
+  if (opts.check && opts.apply) {
+    emit({ exitCode: ExitCode.USAGE, result: err("USAGE", "--check and --apply are mutually exclusive") });
+    return;
+  }
   const v = await resolveVaultArg(vault, opts.wiki);
   if (!v.ok) emit({ exitCode: v.exitCode, result: v.payload });
   else if (opts.apply) return emitGuardedVaultWrite(
@@ -10181,7 +10122,7 @@ program.command("project-index <slug> [vault]").description("generate a knowledg
     "project-index --apply",
     () => runProjectIndex({ vault: v.vault, slug, apply: true })
   );
-  else emit(await runProjectIndex({ vault: v.vault, slug, apply: false }), v.vault);
+  else emit(await runProjectIndex({ vault: v.vault, slug, apply: false, check: opts.check }), v.vault);
 });
 var compoundCmd = program.command("compound").description("manage project compound entries");
 compoundCmd.command("promote [vault]").description("promote retros with Generalize?: yes to compound entries").requiredOption("--project <slug>", "project slug (e.g., llm-wiki)").option("--dry-run", "preview promotions without writing files", false).option("--wiki <name>", "wiki profile name").action(async (vault, opts) => {

package/dist/{index-projection-RWF5M7U7.js → index-projection-BJNZUPH6.js}

@@ -4,9 +4,9 @@ import {
   UNMANAGED_START,
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-NL2MUWNF.js";
-import "./chunk-CTN66CDX.js";
-import "./chunk-APDMYPM6.js";
+} from "./chunk-GAU4D25O.js";
+import "./chunk-UHZBOOMK.js";
+import "./chunk-EVQASYII.js";
 export {
   UNMANAGED_END,
   UNMANAGED_START,

package/dist/{managed-write-preflight-EDEMCLVQ.js → managed-write-preflight-DWK3PJCO.js}

@@ -2,11 +2,10 @@
 import {
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-JHHVTW7E.js";
-import "./chunk-NPHRDXHD.js";
-import "./chunk-CTN66CDX.js";
-import "./chunk-RPZIGMMH.js";
-import "./chunk-APDMYPM6.js";
+} from "./chunk-4SINVFR3.js";
+import "./chunk-UHZBOOMK.js";
+import "./chunk-PLUHIOCQ.js";
+import "./chunk-EVQASYII.js";
 export {
   runManagedWritePreflight,
   runManagedWriteTransaction

package/dist/skillwiki-mcp.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-BUHQMIOD.js";
+} from "./chunk-5JYOYMST.js";
 import "./chunk-7I2TPIV5.js";
-import "./chunk-NL2MUWNF.js";
-import "./chunk-NPHRDXHD.js";
-import "./chunk-CTN66CDX.js";
-import "./chunk-RPZIGMMH.js";
-import "./chunk-APDMYPM6.js";
+import "./chunk-GAU4D25O.js";
+import "./chunk-4SINVFR3.js";
+import "./chunk-UHZBOOMK.js";
+import "./chunk-PLUHIOCQ.js";
+import "./chunk-EVQASYII.js";
 
 // src/mcp-entry.ts
 runSkillwikiMcpStdio().catch((error) => {