skillwiki 0.10.53 → 0.10.54

package/dist/{chunk-TZXWZ75D.js → chunk-EHUFPORA.js}

@@ -7241,6 +7241,7 @@ export {
   resolveFleetHostId,
   git,
   gitStrict,
+  VAULT_GENERATED_COMMIT_PATHS,
   VAULT_COMMIT_PATHSPEC,
   stageVaultContentChanges,
   resolveWikiS3Remote,

package/dist/{chunk-NPHWECWR.js → chunk-Q23OSECM.js}

@@ -35,7 +35,7 @@ import {
   snapshotterAliasForLocalHost,
   toUndirectedWeighted,
   writeDotenv
-} from "./chunk-TZXWZ75D.js";
+} from "./chunk-EHUFPORA.js";
 import {
   atomicWriteText,
   prepareTypedPage
@@ -325,10 +325,14 @@ async function runLogAppend(input) {
   }
   if (outcome.result.ok && outcome.result.data.appended && input.recordLastOp !== false) {
     try {
+      const files = ["log.md"];
+      if (eventPath) {
+        files.push(eventPath);
+      }
       appendLastOp(input.vault, {
         operation: "log-append",
         summary: `appended log entry (${outcome.result.data.entries_before}->${outcome.result.data.entries_after})`,
-        files: ["log.md"],
+        files,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       });
     } catch (error) {

package/dist/cli.js

@@ -50,7 +50,7 @@ import {
   snapshotterHealthChecks,
   upsertIndexEntry,
   vectorIndexStatus
-} from "./chunk-NPHWECWR.js";
+} from "./chunk-Q23OSECM.js";
 import {
   normalizeDistTag,
   readCache,
@@ -68,6 +68,7 @@ import {
   FLEET_REL_PATH,
   REDACTED_MALFORMED_REFERENCE,
   VAULT_COMMIT_PATHSPEC,
+  VAULT_GENERATED_COMMIT_PATHS,
   acquireOwnedSyncLock,
   appendLastOp,
   applyRawStructuralMove,
@@ -146,7 +147,7 @@ import {
   supersedeStaleReviewRequiredJournals,
   taxonomyCommentForPage,
   writeDotenv
-} from "./chunk-TZXWZ75D.js";
+} from "./chunk-EHUFPORA.js";
 import {
   assertTargetInsideVault,
   atomicWriteText,
@@ -9901,7 +9902,21 @@ async function runFleetHealth(input) {
 
 // src/utils/auto-commit.ts
 import { existsSync as existsSync14 } from "fs";
-import { join as join41 } from "path";
+import { isAbsolute, join as join41, normalize } from "path";
+function isValidLastOpPath(file) {
+  if (!file || typeof file !== "string") return false;
+  const trimmed = file.trim();
+  if (trimmed.length === 0) return false;
+  if (isAbsolute(trimmed)) return false;
+  const normalized = normalize(trimmed).replace(/\\/g, "/");
+  if (normalized.startsWith("../") || normalized === ".." || normalized.includes("/../")) return false;
+  for (const generatedPath of VAULT_GENERATED_COMMIT_PATHS) {
+    if (normalized === generatedPath || normalized.startsWith(`${generatedPath}/`)) {
+      return false;
+    }
+  }
+  return true;
+}
 async function postCommit(vault, exitCode) {
   if (exitCode !== 0) return;
   const home = process.env.HOME ?? "";
@@ -9913,16 +9928,31 @@ async function postCommit(vault, exitCode) {
   if (lastOps.length === 0) return;
   const porcelain = git(vault, ["status", "--porcelain", "--", ...VAULT_COMMIT_PATHSPEC]);
   if (!porcelain || porcelain.trim().length === 0) return;
-  try {
-    stageVaultContentChanges(vault);
-  } catch (e) {
-    process.stderr.write(`auto-commit: git add failed: ${String(e)}
+  const rawFiles = lastOps.flatMap((op) => op.files ?? []);
+  const candidateFiles = Array.from(new Set(rawFiles)).filter(isValidLastOpPath);
+  if (candidateFiles.length === 0) {
+    try {
+      stageVaultContentChanges(vault);
+    } catch (e) {
+      process.stderr.write(`auto-commit: stage vault content failed: ${String(e)}
 `);
-    return;
+      return;
+    }
+  } else {
+    try {
+      gitStrict(vault, ["add", "--", ...candidateFiles]);
+    } catch (e) {
+      process.stderr.write(`auto-commit: git add failed: ${String(e)}
+`);
+      return;
+    }
   }
+  const staged = git(vault, ["diff", "--cached", "--name-only"]);
+  if (!staged || staged.trim().length === 0) return;
   const commitMessage = lastOps.map((op) => `${op.operation}: ${op.summary} (${op.files.length} files)`).join("; ");
   try {
-    gitStrict(vault, ["commit", "-m", commitMessage]);
+    const commitArgs = candidateFiles.length === 0 ? ["commit", "-m", commitMessage] : ["commit", "-m", commitMessage, "--", ...candidateFiles];
+    gitStrict(vault, commitArgs);
   } catch (e) {
     process.stderr.write(`auto-commit: git commit failed: ${String(e)}
 `);
@@ -10069,7 +10099,7 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-SERVDSY6.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-CMVCRXRG.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,

package/dist/{managed-write-preflight-SERVDSY6.js → managed-write-preflight-CMVCRXRG.js}

@@ -6,7 +6,7 @@ import {
   runManagedWritePeerGate,
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-TZXWZ75D.js";
+} from "./chunk-EHUFPORA.js";
 import "./chunk-74OSLCXE.js";
 import "./chunk-GAHMWLWU.js";
 import "./chunk-IJ7DD7QZ.js";

package/dist/skillwiki-mcp.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-NPHWECWR.js";
+} from "./chunk-Q23OSECM.js";
 import "./chunk-7I2TPIV5.js";
 import "./chunk-O3HCB7R2.js";
-import "./chunk-TZXWZ75D.js";
+import "./chunk-EHUFPORA.js";
 import "./chunk-74OSLCXE.js";
 import "./chunk-HBQTTYXZ.js";
 import "./chunk-GAHMWLWU.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.53",
+  "version": "0.10.54",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.53",
+  "version": "0.10.54",
   "skills": "./",
   "description": "Project-aware Karpathy-style knowledge base for Claude Code: 20 prompt-only skills (wiki-*, proj-*, using-skillwiki) backed by the deterministic `skillwiki` CLI.",
   "author": {

package/skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.53",
+  "version": "0.10.54",
   "description": "Project-aware Karpathy-style knowledge base for Codex with 20 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",

package/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.10.53",
+  "version": "0.10.54",
   "private": true,
   "files": [
     "wiki-*",