skillwiki 0.10.56 → 0.10.58

package/dist/{chunk-FM6RWVW6.js → chunk-LXZPRAZU.js}

@@ -3305,7 +3305,7 @@ function buildCliSurface() {
   program.command("install").option("--target <dir>").option("--dry-run").option("--skills-root <dir>").option("--symlink");
   program.command("path").option("--vault <dir>").option("--target <dir>").option("--wiki <name>").option("--init-time").option("--explain").option("--plain");
   program.command("lang").option("--lang <code>").option("--explain");
-  program.command("init").option("--target <dir>").requiredOption("--domain <text>").option("--taxonomy <csv>").option("--lang <code>").option("--force").option("--no-env").option("--profile <name>");
+  program.command("init").option("--target <dir>").requiredOption("--domain <text>").option("--taxonomy <csv>").option("--lang <code>").option("--force").option("--no-env").option("--profile <name>").option("--no-gitignore").option("--write-gitignore");
   program.command("links").option("--wiki <name>");
   program.command("tag-audit").option("--wiki <name>");
   program.command("index-check").option("--wiki <name>");
@@ -5497,23 +5497,76 @@ function releaseOwnedSyncLock(handle) {
   }
 }
 
-// src/utils/vault-git-pathspec.ts
-var VAULT_GENERATED_COMMIT_PATHS = [
+// src/utils/vault-hygiene-ignores.ts
+var VAULT_HYGIENE_GITIGNORE_PATTERNS = [
+  ".skillwiki/last-op.json",
+  ".skillwiki/graph.json",
+  ".skillwiki/sync.lock",
+  ".skillwiki/managed-write.lock",
+  ".skillwiki/memory/",
+  ".skillwiki/memory-topics.json",
+  ".skillwiki/work-complete/",
+  ".skillwiki/vectors/"
+];
+var VAULT_HYGIENE_GENERATED_COMMIT_PATHS = VAULT_HYGIENE_GITIGNORE_PATTERNS.map(
+  (pattern) => pattern.replace(/\/$/, "")
+);
+var VAULT_SYNC_FILTER_REQUIRED_EXCLUDES = [
+  "remotely-save/data.json",
+  ".skillwiki/sync.lock",
+  ".skillwiki/managed-write.lock",
+  ".skillwiki/graph.json",
+  ".skillwiki/memory/",
+  ".skillwiki/memory-topics.json",
+  ".skillwiki/work-complete/",
   ".skillwiki/last-op.json",
-  ".skillwiki/memory",
-  ".skillwiki/memory-topics.json"
+  ".claude/settings.local.json"
 ];
+function missingIgnorePatterns(content, patterns) {
+  return patterns.filter((pattern) => !content.includes(pattern));
+}
+function mergeGitignore(existing, required = VAULT_HYGIENE_GITIGNORE_PATTERNS) {
+  const added = missingIgnorePatterns(existing, required);
+  if (added.length === 0) {
+    return { text: existing, changed: false, added: [] };
+  }
+  const base = existing.length === 0 || existing.endsWith("\n") ? existing : `${existing}
+`;
+  const block = [
+    "# SkillWiki local scratch (not GitHub SSOT; keep session-brief and agent-memory-trends)",
+    ...added,
+    ""
+  ].join("\n");
+  return { text: `${base}${block}`, changed: true, added };
+}
+function renderVaultGitignoreTemplate() {
+  return [
+    "# SkillWiki vault gitignore",
+    "# Local scratch must not enter GitHub. Keep session-brief.* and agent-memory-trends/.",
+    ...VAULT_HYGIENE_GITIGNORE_PATTERNS,
+    ".obsidian/workspace.json",
+    "*.conflict-*",
+    ".conflict*",
+    ".claude/settings.local.json",
+    "._.DS_Store",
+    ".DS_Store",
+    "logs",
+    "tmp/",
+    ""
+  ].join("\n");
+}
+
+// src/utils/vault-git-pathspec.ts
+var VAULT_GENERATED_COMMIT_PATHS = VAULT_HYGIENE_GENERATED_COMMIT_PATHS;
 var VAULT_GENERATED_COMMIT_EXCLUDES = [
   ...VAULT_GENERATED_COMMIT_PATHS.map((path) => `:!${path}`)
 ];
 var VAULT_COMMIT_PATHSPEC = [".", ...VAULT_GENERATED_COMMIT_EXCLUDES];
 function stageVaultContentChanges(vault) {
   gitStrict(vault, ["add", "-A", "--", "."]);
-  for (const generatedPath of VAULT_GENERATED_COMMIT_PATHS) {
-    try {
-      gitStrict(vault, ["reset", "HEAD", "--", generatedPath]);
-    } catch (_e) {
-    }
+  try {
+    gitStrict(vault, ["reset", "HEAD", "--", ...VAULT_GENERATED_COMMIT_PATHS]);
+  } catch (_e) {
   }
 }
 
@@ -7231,6 +7284,12 @@ export {
   defaultLintRunner,
   runLint,
   runSyncLintDelta,
+  VAULT_HYGIENE_GITIGNORE_PATTERNS,
+  VAULT_HYGIENE_GENERATED_COMMIT_PATHS,
+  VAULT_SYNC_FILTER_REQUIRED_EXCLUDES,
+  missingIgnorePatterns,
+  mergeGitignore,
+  renderVaultGitignoreTemplate,
   FLEET_REL_PATH,
   runFleetValidate,
   runFleetContext,

package/dist/{chunk-AVVFFPQ5.js → chunk-Y2EPEJT7.js}

@@ -9,6 +9,9 @@ import {
 } from "./chunk-NHRRYAXT.js";
 import {
   CONFIG_KEYS,
+  VAULT_HYGIENE_GENERATED_COMMIT_PATHS,
+  VAULT_HYGIENE_GITIGNORE_PATTERNS,
+  VAULT_SYNC_FILTER_REQUIRED_EXCLUDES,
   acquireOwnedSyncLock,
   appendLastOp,
   buildWikilinkAdjacency,
@@ -18,6 +21,7 @@ import {
   listReviewRequiredOps,
   loadFleetManifestAndHost,
   louvain,
+  missingIgnorePatterns,
   parseDotenvFile,
   parseDotenvText,
   probeGithubReachability,
@@ -35,7 +39,7 @@ import {
   snapshotterAliasForLocalHost,
   toUndirectedWeighted,
   writeDotenv
-} from "./chunk-FM6RWVW6.js";
+} from "./chunk-LXZPRAZU.js";
 import {
   atomicWriteText,
   prepareTypedPage
@@ -1767,7 +1771,7 @@ var gitFleetProbe = {
 };
 
 // src/doctor/probes/hygiene.ts
-import { existsSync as existsSync8, readdirSync as readdirSync3 } from "fs";
+import { existsSync as existsSync8, readdirSync as readdirSync3, readFileSync as readFileSync5 } from "fs";
 import { join as join11 } from "path";
 
 // src/utils/conflict-markers.ts
@@ -1894,12 +1898,60 @@ function checkVaultConflictMarkers(resolvedPath) {
     `${n} ${fileWord}, first: ${first.path}:${first.line}`
   );
 }
+function githubSyncedGitRoot(gitRoot) {
+  if (gitRoot === void 0) return { ok: false, reason: "No vault path \u2014 check skipped" };
+  if (!existsSync8(join11(gitRoot, ".git"))) return { ok: false, reason: "Not a git repository \u2014 check skipped" };
+  if (!git(gitRoot, ["remote"])) return { ok: false, reason: "No git remote \u2014 not GitHub-synced, check skipped" };
+  return { ok: true, gitRoot };
+}
+function checkVaultGitignoreHygiene(synced) {
+  if (!synced.ok) {
+    return check("pass", "vault_gitignore_hygiene", "Vault gitignore hygiene", synced.reason);
+  }
+  let content = "";
+  try {
+    content = readFileSync5(join11(synced.gitRoot, ".gitignore"), "utf8");
+  } catch {
+    content = "";
+  }
+  const missing = missingIgnorePatterns(content, VAULT_HYGIENE_GITIGNORE_PATTERNS);
+  if (missing.length === 0) {
+    return check("pass", "vault_gitignore_hygiene", "Vault gitignore hygiene", "Required local-scratch patterns present");
+  }
+  return check(
+    "warn",
+    "vault_gitignore_hygiene",
+    "Vault gitignore hygiene",
+    `Missing ${missing.join(", ")} \u2014 run \`skillwiki init --target <vault> --domain existing --write-gitignore\``
+  );
+}
+function checkTrackedHygieneScratch(synced) {
+  if (!synced.ok) {
+    return check("pass", "vault_gitignore_tracked_scratch", "Tracked hygiene scratch", synced.reason);
+  }
+  const listed = git(synced.gitRoot, ["ls-files", "--", ...VAULT_HYGIENE_GENERATED_COMMIT_PATHS]);
+  const files = listed ? listed.split("\n").filter(Boolean) : [];
+  if (files.length === 0) {
+    return check("pass", "vault_gitignore_tracked_scratch", "Tracked hygiene scratch", "No local-scratch paths tracked");
+  }
+  const sample = files.slice(0, 3).join(", ");
+  const more = files.length > 3 ? ` (+${files.length - 3} more)` : "";
+  return check(
+    "warn",
+    "vault_gitignore_tracked_scratch",
+    "Tracked hygiene scratch",
+    `${files.length} tracked scratch path(s) (${sample}${more}) \u2014 untrack with: git rm --cached -- ${files[0]}`
+  );
+}
 var hygieneProbe = {
   id: "hygiene",
   run(ctx) {
+    const synced = githubSyncedGitRoot(ctx.gitCheckPath);
     return [
       checkDotStoreClean(ctx.readOnlyScanRoot),
-      checkVaultConflictMarkers(ctx.readOnlyScanRoot)
+      checkVaultConflictMarkers(ctx.readOnlyScanRoot),
+      checkVaultGitignoreHygiene(synced),
+      checkTrackedHygieneScratch(synced)
     ];
   }
 };
@@ -1912,7 +1964,7 @@ import { execSync as execSync4 } from "child_process";
 // src/utils/s3-mount-health.ts
 import { execSync as execSync3 } from "child_process";
 import { platform as platform2 } from "os";
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, unlinkSync as unlinkSync2, readFileSync as readFile6 } from "fs";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync2, unlinkSync as unlinkSync2, readFileSync as readFile6 } from "fs";
 import { join as join12 } from "path";
 var OS = platform2();
 function findRcloneMountPid() {
@@ -1997,7 +2049,7 @@ function extractRcloneFs(args) {
 function getRcloneArgs(pid) {
   try {
     if (OS === "linux") {
-      const raw = readFileSync5(`/proc/${pid}/cmdline`);
+      const raw = readFileSync6(`/proc/${pid}/cmdline`);
       return new TextDecoder().decode(raw).split("\0").filter(Boolean);
     } else {
       const out = execSync3(`ps -o args= -p ${pid}`, {
@@ -2040,7 +2092,7 @@ function queryRcloneRC(rcAddr, fs) {
 function detectFuseMount(vaultPath) {
   try {
     if (OS === "linux") {
-      const mounts = readFileSync5("/proc/mounts", "utf8");
+      const mounts = readFileSync6("/proc/mounts", "utf8");
       let best = null;
       for (const line of mounts.split("\n")) {
         const parts = line.split(" ");
@@ -2435,7 +2487,7 @@ var s3MountHealthProbe = {
 };
 
 // src/doctor/probes/skills-plugins.ts
-import { existsSync as existsSync11, readdirSync as readdirSync4, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync11, readdirSync as readdirSync4, readFileSync as readFileSync7 } from "fs";
 import { join as join14 } from "path";
 function findSkillMd(dir) {
   const results = [];
@@ -2571,7 +2623,7 @@ function checkGrokActivation(home, cwd) {
   if (!existsSync11(agentsPath)) {
     issues.push("~/.grok/AGENTS.md missing");
   } else {
-    const agents = readFileSync6(agentsPath, "utf8");
+    const agents = readFileSync7(agentsPath, "utf8");
     const hasBegin = agents.includes("<!-- skillwiki:begin -->");
     const hasExpected = agents.includes(GROK_ACTIVATION_REFERENCE);
     const hasStale = agents.includes(STALE_GROK_ACTIVATION_REFERENCE);
@@ -2587,8 +2639,8 @@ function checkGrokActivation(home, cwd) {
     const template = findGrokActivationTemplate(home, cwd);
     if (template) {
       try {
-        const installed = readFileSync6(activationPath, "utf8");
-        const expected = readFileSync6(template, "utf8");
+        const installed = readFileSync7(activationPath, "utf8");
+        const expected = readFileSync7(template, "utf8");
         if (installed !== expected) {
           issues.push("~/.grok/skillwiki.md differs from template");
         }
@@ -2673,14 +2725,14 @@ var skillsPluginsProbe = {
 };
 
 // src/doctor/probes/vault-sync.ts
-import { existsSync as existsSync12, readFileSync as readFileSync7 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync8 } from "fs";
 import { join as join15 } from "path";
 import { execSync as execSync5 } from "child_process";
 import { platform as platform3 } from "os";
 function readPushResultState(stateFile) {
   if (!existsSync12(stateFile)) return { exists: false };
   try {
-    const content = readFileSync7(stateFile, "utf8");
+    const content = readFileSync8(stateFile, "utf8");
     let result;
     let reason;
     let timestamp;
@@ -2703,7 +2755,7 @@ function readPushResultState(stateFile) {
 }
 function readVaultSyncConfig(home) {
   try {
-    const content = readFileSync7(join15(home, ".skillwiki", ".env"), "utf8");
+    const content = readFileSync8(join15(home, ".skillwiki", ".env"), "utf8");
     let installed = false;
     let role;
     let serviceScope;
@@ -2739,7 +2791,7 @@ function loadSnapshotFixture(env) {
   const path = env.VS_SNAPSHOT_HEALTH_FIXTURE;
   if (!path || !existsSync12(path)) return null;
   try {
-    return JSON.parse(readFileSync7(path, "utf8"));
+    return JSON.parse(readFileSync8(path, "utf8"));
   } catch {
     return null;
   }
@@ -2805,7 +2857,7 @@ function checkPushAgeFromTimestamp(ts) {
 }
 function checkPushAgeFromLog(logDir, logFile) {
   try {
-    const logContent = readFileSync7(logFile, "utf8");
+    const logContent = readFileSync8(logFile, "utf8");
     const lines = logContent.trim().split("\n").filter(Boolean);
     if (lines.length === 0) {
       return check(
@@ -2906,7 +2958,7 @@ function snapshotterHealthChecks(scope, logDir, env) {
   let completionOutcome = "unknown";
   const logRecords = fixture ? fixture.log_records : (() => {
     try {
-      const content = readFileSync7(join15(logDir, "wiki-snapshot.log"), "utf8");
+      const content = readFileSync8(join15(logDir, "wiki-snapshot.log"), "utf8");
       return content.split(/\r?\n/).filter(Boolean);
     } catch {
       return [];
@@ -3010,7 +3062,7 @@ function vaultSyncChecks(input) {
           `Snapshot script not found at ${snapshotPath}`
         );
       } else {
-        const content = readFileSync7(snapshotPath, "utf8");
+        const content = readFileSync8(snapshotPath, "utf8");
         if (!content.includes("--max-delete")) {
           c52 = check(
             "error",
@@ -3144,7 +3196,7 @@ function vaultSyncChecks(input) {
   const fetchLogFile = join15(logDir, "wiki-fetch.log");
   let cFetch;
   try {
-    const logContent = readFileSync7(fetchLogFile, "utf8");
+    const logContent = readFileSync8(fetchLogFile, "utf8");
     const lines = logContent.trim().split("\n").filter(Boolean);
     if (lines.length === 0) {
       cFetch = check(
@@ -3196,15 +3248,8 @@ function vaultSyncChecks(input) {
         `Filter file not found at ${filterPath}`
       );
     } else {
-      const content = readFileSync7(filterPath, "utf8");
-      const requiredExcludes = [
-        "remotely-save/data.json",
-        ".skillwiki/sync.lock",
-        ".skillwiki/memory/",
-        ".skillwiki/memory-topics.json",
-        ".claude/settings.local.json"
-      ];
-      const missing = requiredExcludes.filter((ex) => !content.includes(ex));
+      const content = readFileSync8(filterPath, "utf8");
+      const missing = VAULT_SYNC_FILTER_REQUIRED_EXCLUDES.filter((ex) => !content.includes(ex));
       if (missing.length > 0) {
         c4 = check(
           "warn",
@@ -3247,7 +3292,7 @@ function vaultSyncChecks(input) {
           `Snapshot script not found at ${snapshotPath}`
         );
       } else {
-        const content = readFileSync7(snapshotPath, "utf8");
+        const content = readFileSync8(snapshotPath, "utf8");
         if (!content.includes("--max-delete")) {
           c5 = check(
             "error",
@@ -3335,7 +3380,7 @@ import { execSync as execSync6 } from "child_process";
 import { platform as platform4 } from "os";
 
 // src/utils/satellite-run-health.ts
-import { existsSync as existsSync13, readFileSync as readFileSync8 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync9 } from "fs";
 import { join as join16 } from "path";
 var SATELLITE_STALE_MS = 26 * 60 * 60 * 1e3;
 function satelliteLatestRunPath(vault) {
@@ -3363,7 +3408,7 @@ function readSatelliteLatestRun(vault) {
   const latestPath = satelliteLatestRunPath(vault);
   if (!existsSync13(latestPath)) return null;
   try {
-    return parseLatestRunFile(readFileSync8(latestPath, "utf8"));
+    return parseLatestRunFile(readFileSync9(latestPath, "utf8"));
   } catch {
     return null;
   }
@@ -3474,7 +3519,7 @@ var satelliteProbe = {
 };
 
 // src/doctor/probes/metrics.ts
-import { readFileSync as readFileSync9 } from "fs";
+import { readFileSync as readFileSync10 } from "fs";
 import { join as join17 } from "path";
 var METRIC_TYPES = ["entities", "concepts", "comparisons", "queries", "meta"];
 function doctorReadOnlyScanRoot(resolvedPath) {
@@ -3519,7 +3564,7 @@ async function vaultMetrics(resolvedPath) {
   }
   let logLines = 0;
   try {
-    logLines = readFileSync9(join17(scanRoot, "log.md"), "utf8").split("\n").length;
+    logLines = readFileSync10(join17(scanRoot, "log.md"), "utf8").split("\n").length;
   } catch {
   }
   return [
@@ -3654,7 +3699,7 @@ var fuseStalenessProbe = {
 };
 
 // src/doctor/probes/activation-marker.ts
-import { existsSync as existsSync15, readFileSync as readFileSync10, readdirSync as readdirSync5 } from "fs";
+import { existsSync as existsSync15, readFileSync as readFileSync11, readdirSync as readdirSync5 } from "fs";
 import { join as join18 } from "path";
 var GROK_ACTIVATION_REFERENCE2 = "Read @~/.grok/skillwiki.md for SkillWiki activation context.";
 var STALE_GROK_ACTIVATION_REFERENCE2 = "Read @skillwiki.md";
@@ -3700,7 +3745,7 @@ function checkActivationMarker(home, cwd) {
     issues.push("~/.grok/AGENTS.md missing");
   } else {
     try {
-      const agents = readFileSync10(agentsPath, "utf8");
+      const agents = readFileSync11(agentsPath, "utf8");
       const hasBegin = agents.includes("<!-- skillwiki:begin -->");
       const hasExpected = agents.includes(GROK_ACTIVATION_REFERENCE2);
       const hasStale = agents.includes(STALE_GROK_ACTIVATION_REFERENCE2);
@@ -3719,8 +3764,8 @@ function checkActivationMarker(home, cwd) {
     const template = findGrokActivationTemplate2(home, cwd);
     if (template) {
       try {
-        const installed = readFileSync10(activationPath, "utf8");
-        const expected = readFileSync10(template, "utf8");
+        const installed = readFileSync11(activationPath, "utf8");
+        const expected = readFileSync11(template, "utf8");
         if (installed !== expected) {
           issues.push("~/.grok/skillwiki.md differs from template");
         }
@@ -3901,7 +3946,7 @@ async function runDoctor(input) {
 }
 
 // src/utils/package-info.ts
-import { readFileSync as readFileSync11 } from "fs";
+import { readFileSync as readFileSync12 } from "fs";
 function packageJsonCandidateUrls(baseUrl = import.meta.url) {
   return [
     new URL("../package.json", baseUrl),
@@ -3911,7 +3956,7 @@ function packageJsonCandidateUrls(baseUrl = import.meta.url) {
 function readCliPackageJson(baseUrl = import.meta.url) {
   for (const url of packageJsonCandidateUrls(baseUrl)) {
     try {
-      const pkg = JSON.parse(readFileSync11(url, "utf8"));
+      const pkg = JSON.parse(readFileSync12(url, "utf8"));
       if (typeof pkg.version === "string") {
         return { ...pkg, version: pkg.version };
       }
@@ -3923,7 +3968,7 @@ function readCliPackageJson(baseUrl = import.meta.url) {
 
 // src/utils/vault-write-gates.ts
 import { execFileSync } from "child_process";
-import { existsSync as existsSync18, readdirSync as readdirSync7, readFileSync as readFileSync12, statSync as statSync3 } from "fs";
+import { existsSync as existsSync18, readdirSync as readdirSync7, readFileSync as readFileSync13, statSync as statSync3 } from "fs";
 import { join as join20, relative as relative2 } from "path";
 var DEFAULT_DIRTY_VOLUME_THRESHOLD = 50;
 var DEFAULT_CAPTURE_BUDGET = 20;
@@ -4173,7 +4218,7 @@ function listProjectDayCaptures(vault, project, day) {
     }
     if (norm.startsWith("raw/transcripts/")) {
       try {
-        const body = readFileSync12(abs, "utf8");
+        const body = readFileSync13(abs, "utf8");
         if (body.includes(`project: ${slug}`) || body.includes(`project: "[[${slug}]]"`) || body.includes(`project: [[${slug}]]`)) {
           found.push(norm);
         } else if (base.includes(slug)) {

package/dist/cli.js

@@ -50,7 +50,7 @@ import {
   snapshotterHealthChecks,
   upsertIndexEntry,
   vectorIndexStatus
-} from "./chunk-AVVFFPQ5.js";
+} from "./chunk-Y2EPEJT7.js";
 import {
   normalizeDistTag,
   readCache,
@@ -69,6 +69,8 @@ import {
   REDACTED_MALFORMED_REFERENCE,
   VAULT_COMMIT_PATHSPEC,
   VAULT_GENERATED_COMMIT_PATHS,
+  VAULT_HYGIENE_GITIGNORE_PATTERNS,
+  VAULT_SYNC_FILTER_REQUIRED_EXCLUDES,
   acquireOwnedSyncLock,
   appendLastOp,
   applyRawStructuralMove,
@@ -95,6 +97,7 @@ import {
   loadFleetManifest,
   loadFleetManifestAndHost,
   markJournalSuperseded,
+  mergeGitignore,
   mergeTaxonomyConflict,
   normalizeProjectSlug,
   normalizeRemoteRoot,
@@ -109,6 +112,7 @@ import {
   readLastOp,
   reconcileTaxonomyDocument,
   releaseOwnedSyncLock,
+  renderVaultGitignoreTemplate,
   resolveConfiguredSnapshotWorktree,
   resolveFleetHostId,
   resolveInitTimePath,
@@ -147,7 +151,7 @@ import {
   supersedeStaleReviewRequiredJournals,
   taxonomyCommentForPage,
   writeDotenv
-} from "./chunk-FM6RWVW6.js";
+} from "./chunk-LXZPRAZU.js";
 import {
   assertTargetInsideVault,
   atomicWriteText,
@@ -1019,6 +1023,23 @@ async function discoverTagsFromPages(target, knownSlugs) {
   }
   return [...discovered].sort();
 }
+async function applyVaultGitignore(target) {
+  const dest = join6(target, ".gitignore");
+  let existing = "";
+  let existed = false;
+  try {
+    existing = await readFile3(dest, "utf8");
+    existed = true;
+  } catch {
+  }
+  const next = existed ? mergeGitignore(existing, VAULT_HYGIENE_GITIGNORE_PATTERNS) : { text: renderVaultGitignoreTemplate(), changed: true, added: [...VAULT_HYGIENE_GITIGNORE_PATTERNS] };
+  if (!next.changed) {
+    return { written: false, preserved: true };
+  }
+  await mkdir3(dirname3(dest), { recursive: true });
+  await writeFile2(dest, next.text, "utf8");
+  return { written: true, preserved: existed };
+}
 async function runInit(input) {
   const pathRes = await resolveInitTimePath({ flag: input.flag, envValue: input.envValue, home: input.home });
   const target = pathRes.path;
@@ -1030,6 +1051,37 @@ async function runInit(input) {
   } catch {
   }
   if (oldSchemaText && !input.force) {
+    if (input.writeGitignoreOnly && !input.noGitignore) {
+      try {
+        const gi = await applyVaultGitignore(target);
+        return {
+          exitCode: ExitCode.OK,
+          result: ok({
+            vault: target,
+            domain: input.domain,
+            taxonomy: input.taxonomy && input.taxonomy.length > 0 ? input.taxonomy : DEFAULT_TAXONOMY,
+            lang: canonicalLang,
+            created: gi.written ? [".gitignore"] : [],
+            preserved: gi.preserved ? [".gitignore"] : [],
+            env_written: "",
+            env_skipped: true,
+            imported_from_hermes: false,
+            discovered_tags: 0,
+            humanHint: `vault: ${target}
+gitignore: ${gi.written ? "merged" : "unchanged"} (write-gitignore only)`,
+            templates_created: false,
+            web_clipper_template_path: WEB_CLIPPER_TEMPLATE_REL,
+            web_clipper_readme_path: WEB_CLIPPER_README_REL,
+            web_clipper_template_created: false,
+            web_clipper_template_preserved: false,
+            gitignore_written: gi.written,
+            gitignore_preserved: gi.preserved
+          })
+        };
+      } catch (e) {
+        return { exitCode: ExitCode.WRITE_FAILED, result: err("WRITE_FAILED", { file: ".gitignore", message: String(e) }) };
+      }
+    }
     return {
       exitCode: ExitCode.INIT_TARGET_NOT_EMPTY,
       result: err("INIT_TARGET_NOT_EMPTY", { target })
@@ -1194,6 +1246,19 @@ async function runInit(input) {
     }
   }
   const importedFromHermes = pathRes.source === "hermes-dotenv" && !swDotenvHadPath;
+  let gitignoreWritten = false;
+  let gitignorePreserved = false;
+  if (!input.noGitignore) {
+    try {
+      const gi = await applyVaultGitignore(target);
+      gitignoreWritten = gi.written;
+      gitignorePreserved = gi.preserved;
+      if (gi.written) created.push(".gitignore");
+      else if (gi.preserved) preserved.push(".gitignore");
+    } catch (e) {
+      return { exitCode: ExitCode.WRITE_FAILED, result: err("WRITE_FAILED", { file: ".gitignore", message: String(e) }) };
+    }
+  }
   const humanHint = [
     `vault: ${target}`,
     `domain: ${domain}`,
@@ -1201,6 +1266,7 @@ async function runInit(input) {
     `created: ${created.length}, preserved: ${preserved.length}`,
     `discovered tags: ${discovered_tags}`,
     skipEnv ? "env: skipped" : `env: ${envWritten}`,
+    input.noGitignore ? "gitignore: skipped" : `gitignore: ${gitignoreWritten ? "written" : "unchanged"}`,
     `web clipper template: ${WEB_CLIPPER_TEMPLATE_REL}`,
     "web clipper import: open Obsidian Web Clipper Settings and import the JSON in each browser profile"
   ].join("\n");
@@ -1230,7 +1296,9 @@ async function runInit(input) {
       web_clipper_template_path: WEB_CLIPPER_TEMPLATE_REL,
       web_clipper_readme_path: WEB_CLIPPER_README_REL,
       web_clipper_template_created: created.includes(WEB_CLIPPER_TEMPLATE_REL),
-      web_clipper_template_preserved: preserved.includes(WEB_CLIPPER_TEMPLATE_REL)
+      web_clipper_template_preserved: preserved.includes(WEB_CLIPPER_TEMPLATE_REL),
+      gitignore_written: gitignoreWritten,
+      gitignore_preserved: gitignorePreserved
     })
   };
 }
@@ -3147,13 +3215,7 @@ function runVaultSyncHealth(home, syncMode, env = process.env) {
     checks.push({ id: "vault_sync_filter_present", label: "Vault sync filter file present", status: "error", detail: `Filter missing: ${filterPath}` });
   } else {
     const content = readFileSync10(filterPath, "utf8");
-    const missing = [
-      "remotely-save/data.json",
-      ".skillwiki/sync.lock",
-      ".skillwiki/memory/",
-      ".skillwiki/memory-topics.json",
-      ".claude/settings.local.json"
-    ].filter((item) => !content.includes(item));
+    const missing = VAULT_SYNC_FILTER_REQUIRED_EXCLUDES.filter((item) => !content.includes(item));
     checks.push(missing.length > 0 ? { id: "vault_sync_filter_present", label: "Vault sync filter file present", status: "warn", detail: `Missing excludes: ${missing.join(", ")}` } : { id: "vault_sync_filter_present", label: "Vault sync filter file present", status: "pass", detail: "Required excludes present" });
   }
   checks.push({ id: "vault_sync_snapshot_guard", label: "Snapshot script guard", status: "pass", detail: "Not a snapshotter host \u2014 check skipped" });
@@ -10108,7 +10170,7 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-SP2A57YY.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-DOOM7XIV.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,
@@ -10397,7 +10459,7 @@ program.command("lang").description("get or set the vault language").option("--l
     explain: !!opts.explain
   }));
 });
-program.command("init").description("bootstrap a new vault with SCHEMA.md, index.md, log.md").option("--target <dir>", "explicit target directory").requiredOption("--domain <text>", "knowledge domain seed").option("--taxonomy <csv>", "comma-separated tag list").option("--lang <code>", "output language (BCP 47 or alias)").option("--force", "override existing target / env conflict", false).option("--no-env", "skip writing ~/.skillwiki/.env").option("--profile <name>", "write as named wiki profile instead of WIKI_PATH").action(async (opts) => {
+program.command("init").description("bootstrap a new vault with SCHEMA.md, index.md, log.md").option("--target <dir>", "explicit target directory").requiredOption("--domain <text>", "knowledge domain seed").option("--taxonomy <csv>", "comma-separated tag list").option("--lang <code>", "output language (BCP 47 or alias)").option("--force", "override existing target / env conflict", false).option("--no-env", "skip writing ~/.skillwiki/.env").option("--profile <name>", "write as named wiki profile instead of WIKI_PATH").option("--no-gitignore", "skip writing the vault .gitignore hygiene template").option("--write-gitignore", "merge hygiene .gitignore only (existing vault; does not rewrite SCHEMA.md)", false).action(async (opts) => {
   const templates = new URL("../templates/", import.meta.url).pathname;
   const taxonomy = typeof opts.taxonomy === "string" ? opts.taxonomy.split(",").map((s) => s.trim()).filter((s) => s.length > 0) : void 0;
   emit(await runInit({
@@ -10410,7 +10472,9 @@ program.command("init").description("bootstrap a new vault with SCHEMA.md, index
     lang: opts.lang,
     force: !!opts.force,
     noEnv: opts.env === false,
-    profile: opts.profile
+    profile: opts.profile,
+    noGitignore: opts.gitignore === false,
+    writeGitignoreOnly: !!opts.writeGitignore
   }));
 });
 async function resolveVaultArg(arg, wiki) {

package/dist/{managed-write-preflight-SP2A57YY.js → managed-write-preflight-DOOM7XIV.js}

@@ -6,7 +6,7 @@ import {
   runManagedWritePeerGate,
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-FM6RWVW6.js";
+} from "./chunk-LXZPRAZU.js";
 import "./chunk-NG72ZD4C.js";
 import "./chunk-6AMXNODT.js";
 import "./chunk-MHGUYPGE.js";

package/dist/skillwiki-mcp.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-AVVFFPQ5.js";
+} from "./chunk-Y2EPEJT7.js";
 import "./chunk-7I2TPIV5.js";
 import "./chunk-NHRRYAXT.js";
-import "./chunk-FM6RWVW6.js";
+import "./chunk-LXZPRAZU.js";
 import "./chunk-NG72ZD4C.js";
 import "./chunk-JMV7YBQN.js";
 import "./chunk-6AMXNODT.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.56",
+  "version": "0.10.58",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.56",
+  "version": "0.10.58",
   "skills": "./",
   "description": "Project-aware Karpathy-style knowledge base for Claude Code: 20 prompt-only skills (wiki-*, proj-*, using-skillwiki) backed by the deterministic `skillwiki` CLI.",
   "author": {

package/skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.56",
+  "version": "0.10.58",
   "description": "Project-aware Karpathy-style knowledge base for Codex with 20 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",

package/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.10.56",
+  "version": "0.10.58",
   "private": true,
   "files": [
     "wiki-*",

package/skills/skills/using-skillwiki/SKILL.md

@@ -287,6 +287,7 @@ skillwiki has multiple distribution channels that can drift:
 | Claude plugin | `~/.claude/plugins/cache/llm-wiki/` | `claude plugin update skillwiki@llm-wiki` |
 | Codex plugin | `~/.codex/plugins/cache/llm-wiki/` | `codex plugin marketplace upgrade llm-wiki`, then reinstall or restart Codex as needed |
 | Grok plugin | `~/.grok/installed-plugins/` (marketplace cache under `~/.grok/marketplace-cache/`) | `grok plugin update skillwiki`, then start a new session or reload plugins |
+| Cursor / Grok Bot (Team GitHub import) | `~/.cursor/plugins/cache/llm-wiki/` and `~/.cursor/plugins/marketplaces/github.com/karlorz/llm-wiki/<sha>/` | Cursor Dashboard → Plugins → **Refresh** or Enable Auto Refresh on `karlorz/llm-wiki`. Reinstall does not move a pinned snapshot. |
 | Local git dev | source repo checkout | `npm link ./packages/cli` (from repo root) |
 **Check versions:** `skillwiki doctor` reports Plugin/CLI version mismatch warnings when installed channels disagree. For Grok, also inspect `~/.grok/installed-plugins/*/.claude-plugin/plugin.json` version and agent frontmatter under `agents/*.md`.
 **Plugin channel rule:** Plugin-managed skills and agents are not refreshed with `skillwiki install`. When Claude, Codex, or Grok plugin is installed and enabled, the plugin install root is the skill/agent provider; `skillwiki install` is only a legacy/standalone copier for `~/.claude/skills/`.

package/skills/skills/wiki-init/SKILL.md

@@ -22,6 +22,11 @@ None for the first run.
 3. Propose a 10–15 tag taxonomy tailored to the domain. Confirm or accept the user's revision.
 4. Ask the language question: "What language should generated page prose use? Default is `en`. Aliases like `chinese-traditional` or `zh-Hant` are accepted."
 5. Run `skillwiki init --target <dir> --domain "<answer>" --taxonomy "<comma list>" --lang "<lang>"`.
+   Init always writes or merges a vault `.gitignore` for GitHub-sync hygiene
+   (work-complete journals, last-op, locks, memory/graph caches). It does **not**
+   ignore `session-brief.*` or `agent-memory-trends/`. Pass `--no-gitignore` only
+   when the user explicitly does not want that file. For an existing vault:
+   `skillwiki init --target <dir> --domain existing --write-gitignore`.
 6. Report the installed Web Clipper assets at
    `_Templates/web-clipper/llm-wiki-clippings.json` and
    `_Templates/web-clipper/readme.txt`. Tell the user to open Obsidian Web

package/skills/skills/wiki-sync/SKILL.md

@@ -197,6 +197,7 @@ High-signal safety rule:
 - Do **not** run `git reset --hard`, direct commits, or manual snapshot scripts to "fix" divergence.
 - Promotion is owned by `wiki-snapshot.timer` by default. Publishers never start systemd units.
 - `skillwiki work-complete` may finish with `committed=false` on sg01; later snapshot promotion owns the Git commit/push.
+- `.skillwiki/work-complete/*.env` journals are local retry hygiene, not GitHub SSOT. Do not treat them as publishable. Prefer last-op pathspecs over a raw `git add -A` when staging a managed completion. Vault `.gitignore` and rclone push filters must exclude `work-complete/` and `last-op.json`.
 
 ### Authorized Git leaf rules
 

package/skills/using-skillwiki/SKILL.md

@@ -287,6 +287,7 @@ skillwiki has multiple distribution channels that can drift:
 | Claude plugin | `~/.claude/plugins/cache/llm-wiki/` | `claude plugin update skillwiki@llm-wiki` |
 | Codex plugin | `~/.codex/plugins/cache/llm-wiki/` | `codex plugin marketplace upgrade llm-wiki`, then reinstall or restart Codex as needed |
 | Grok plugin | `~/.grok/installed-plugins/` (marketplace cache under `~/.grok/marketplace-cache/`) | `grok plugin update skillwiki`, then start a new session or reload plugins |
+| Cursor / Grok Bot (Team GitHub import) | `~/.cursor/plugins/cache/llm-wiki/` and `~/.cursor/plugins/marketplaces/github.com/karlorz/llm-wiki/<sha>/` | Cursor Dashboard → Plugins → **Refresh** or Enable Auto Refresh on `karlorz/llm-wiki`. Reinstall does not move a pinned snapshot. |
 | Local git dev | source repo checkout | `npm link ./packages/cli` (from repo root) |
 **Check versions:** `skillwiki doctor` reports Plugin/CLI version mismatch warnings when installed channels disagree. For Grok, also inspect `~/.grok/installed-plugins/*/.claude-plugin/plugin.json` version and agent frontmatter under `agents/*.md`.
 **Plugin channel rule:** Plugin-managed skills and agents are not refreshed with `skillwiki install`. When Claude, Codex, or Grok plugin is installed and enabled, the plugin install root is the skill/agent provider; `skillwiki install` is only a legacy/standalone copier for `~/.claude/skills/`.

package/skills/wiki-init/SKILL.md

@@ -22,6 +22,11 @@ None for the first run.
 3. Propose a 10–15 tag taxonomy tailored to the domain. Confirm or accept the user's revision.
 4. Ask the language question: "What language should generated page prose use? Default is `en`. Aliases like `chinese-traditional` or `zh-Hant` are accepted."
 5. Run `skillwiki init --target <dir> --domain "<answer>" --taxonomy "<comma list>" --lang "<lang>"`.
+   Init always writes or merges a vault `.gitignore` for GitHub-sync hygiene
+   (work-complete journals, last-op, locks, memory/graph caches). It does **not**
+   ignore `session-brief.*` or `agent-memory-trends/`. Pass `--no-gitignore` only
+   when the user explicitly does not want that file. For an existing vault:
+   `skillwiki init --target <dir> --domain existing --write-gitignore`.
 6. Report the installed Web Clipper assets at
    `_Templates/web-clipper/llm-wiki-clippings.json` and
    `_Templates/web-clipper/readme.txt`. Tell the user to open Obsidian Web

package/skills/wiki-sync/SKILL.md

@@ -197,6 +197,7 @@ High-signal safety rule:
 - Do **not** run `git reset --hard`, direct commits, or manual snapshot scripts to "fix" divergence.
 - Promotion is owned by `wiki-snapshot.timer` by default. Publishers never start systemd units.
 - `skillwiki work-complete` may finish with `committed=false` on sg01; later snapshot promotion owns the Git commit/push.
+- `.skillwiki/work-complete/*.env` journals are local retry hygiene, not GitHub SSOT. Do not treat them as publishable. Prefer last-op pathspecs over a raw `git add -A` when staging a managed completion. Vault `.gitignore` and rclone push filters must exclude `work-complete/` and `last-op.json`.
 
 ### Authorized Git leaf rules