skillwiki 0.10.65 → 0.10.68

package/dist/{chunk-CKDF4DWU.js → chunk-R5SDVKHS.js}

@@ -5803,6 +5803,17 @@ async function runVaultSyncPullHelper(input) {
 }
 
 // src/commands/sync.ts
+function countAheadBehind(vault) {
+  const revOutput = git(vault, ["rev-list", "--left-right", "--count", "origin/HEAD...HEAD"]);
+  let ahead = 0;
+  let behind = 0;
+  if (revOutput) {
+    const parts = revOutput.split(/\s+/);
+    behind = parseInt(parts[0], 10) || 0;
+    ahead = parseInt(parts[1], 10) || 0;
+  }
+  return { ahead, behind };
+}
 function parseDirtyPaths(porcelain) {
   if (!porcelain) return [];
   return porcelain.split("\n").map((line) => line.trimEnd()).filter((line) => line.length >= 4).map((line) => {
@@ -5854,14 +5865,7 @@ function runSyncStatus(input) {
   const dirty = porcelain ? porcelain.split("\n").filter((l) => l.trim().length > 0).length : 0;
   const dirtyPaths = parseDirtyPaths(porcelain);
   const untrackedPaths = splitNonEmptyLines(git(vault, ["ls-files", "--others", "--exclude-standard"]));
-  const revOutput = git(vault, ["rev-list", "--left-right", "--count", "origin/HEAD...HEAD"]);
-  let ahead = 0;
-  let behind = 0;
-  if (revOutput) {
-    const parts = revOutput.split(/\s+/);
-    behind = parseInt(parts[0], 10) || 0;
-    ahead = parseInt(parts[1], 10) || 0;
-  }
+  const { ahead, behind } = countAheadBehind(vault);
   const tsRaw = git(vault, ["log", "-1", "--format=%ct"]);
   let last_commit;
   if (tsRaw) {
@@ -5961,14 +5965,91 @@ async function runSyncPush(input) {
   const porcelain = git(vault, ["status", "--porcelain"]);
   const dirtyFiles = porcelain ? porcelain.split("\n").filter((l) => l.trim().length > 0) : [];
   if (dirtyFiles.length === 0) {
+    const { ahead } = countAheadBehind(vault);
+    if (ahead === 0) {
+      return {
+        exitCode: ExitCode.OK,
+        result: ok({
+          files_committed: 0,
+          commit_message: "",
+          pushed: false,
+          path_fixes: pathFixes,
+          humanHint: "nothing to commit, working tree clean"
+        })
+      };
+    }
+    let delta2 = { full_errors: 0, base_errors: 0, new_errors: 0, resolved_errors: 0 };
+    const preferredBase2 = git(vault, ["rev-parse", "--verify", "origin/main"]) ? "origin/main" : git(vault, ["rev-parse", "--verify", "origin/HEAD"]) ? "origin/HEAD" : "";
+    if (preferredBase2) {
+      const deltaResult = await runSyncLintDelta({ vault, baseRef: preferredBase2 });
+      if (!deltaResult.result.ok) {
+        return {
+          exitCode: ExitCode.LINT_HAS_ERRORS,
+          result: err("LINT_DELTA_UNAVAILABLE", {
+            message: "lint-delta evidence missing or failed \u2014 fail closed",
+            detail: deltaResult.result
+          })
+        };
+      }
+      delta2 = deltaResult.result.data;
+      if (delta2.new_errors > 0) {
+        return {
+          exitCode: ExitCode.LINT_HAS_ERRORS,
+          result: err("LINT_NEW_ERRORS_BLOCK_PUSH", {
+            full_errors: delta2.full_errors,
+            base_errors: delta2.base_errors,
+            new_errors: delta2.new_errors,
+            resolved_errors: delta2.resolved_errors,
+            new_fingerprints: deltaResult.result.data.new_fingerprints
+          })
+        };
+      }
+    } else {
+      const lintResult = await runLint({ vault, days: 90, lines: 200, logThreshold: 500 });
+      if (lintResult.result.ok) {
+        const fullErrors = lintResult.result.data.summary.errors;
+        delta2 = { full_errors: fullErrors, base_errors: 0, new_errors: fullErrors, resolved_errors: 0 };
+        if (fullErrors > 0) {
+          const buckets = "by_severity" in lintResult.result.data ? lintResult.result.data.by_severity.error : [];
+          return {
+            exitCode: ExitCode.LINT_HAS_ERRORS,
+            result: err("LINT_ERRORS_BLOCK_PUSH", {
+              errors: fullErrors,
+              buckets,
+              message: "no origin base ref for delta; absolute lint errors block push"
+            })
+          };
+        }
+      } else {
+        delta2 = { full_errors: 0, base_errors: 0, new_errors: 0, resolved_errors: 0 };
+      }
+    }
+    let pushed2 = false;
+    try {
+      gitStrict(vault, ["push", "origin", "HEAD"]);
+      pushed2 = true;
+    } catch (e) {
+      return {
+        exitCode: ExitCode.SYNC_PUSH_FAILED,
+        result: err("SYNC_PUSH_FAILED", {
+          pushed: false,
+          message: `push failed: ${String(e)}`
+        })
+      };
+    }
+    const inheritedNote2 = delta2.full_errors > 0 ? `; lint full=${delta2.full_errors} base=${delta2.base_errors} new=${delta2.new_errors} resolved=${delta2.resolved_errors} (inherited debt only)` : `; lint full=0 new=0`;
     return {
       exitCode: ExitCode.OK,
       result: ok({
         files_committed: 0,
         commit_message: "",
-        pushed: false,
+        pushed: pushed2,
         path_fixes: pathFixes,
-        humanHint: "nothing to commit, working tree clean"
+        lint_full_errors: delta2.full_errors,
+        lint_base_errors: delta2.base_errors,
+        lint_new_errors: delta2.new_errors,
+        lint_resolved_errors: delta2.resolved_errors,
+        humanHint: `pushed ${ahead} commit(s) on clean working tree${pathFixes > 0 ? ` after ${pathFixes} long-path fix(es)` : ""}${inheritedNote2}`
       })
     };
   }

package/dist/{chunk-SNHTWLGF.js → chunk-YKVJ2A3O.js}

@@ -40,7 +40,7 @@ import {
   snapshotterAliasForLocalHost,
   toUndirectedWeighted,
   writeDotenv
-} from "./chunk-CKDF4DWU.js";
+} from "./chunk-R5SDVKHS.js";
 import {
   atomicWriteText,
   prepareTypedPage

package/dist/cli.js

@@ -50,7 +50,7 @@ import {
   snapshotterHealthChecks,
   upsertIndexEntry,
   vectorIndexStatus
-} from "./chunk-SNHTWLGF.js";
+} from "./chunk-YKVJ2A3O.js";
 import {
   normalizeDistTag,
   readCache,
@@ -151,7 +151,7 @@ import {
   supersedeStaleReviewRequiredJournals,
   taxonomyCommentForPage,
   writeDotenv
-} from "./chunk-CKDF4DWU.js";
+} from "./chunk-R5SDVKHS.js";
 import {
   assertTargetInsideVault,
   atomicWriteText,
@@ -10410,7 +10410,7 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-2MMVUXD3.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-PUEJOXJO.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,

package/dist/{managed-write-preflight-2MMVUXD3.js → managed-write-preflight-PUEJOXJO.js}

@@ -6,7 +6,7 @@ import {
   runManagedWritePeerGate,
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-CKDF4DWU.js";
+} from "./chunk-R5SDVKHS.js";
 import "./chunk-BPJ5KWIT.js";
 import "./chunk-OMO45AHI.js";
 import "./chunk-HJ4ALQG6.js";

package/dist/skillwiki-mcp.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-SNHTWLGF.js";
+} from "./chunk-YKVJ2A3O.js";
 import "./chunk-7I2TPIV5.js";
 import "./chunk-KFEOMMWK.js";
-import "./chunk-CKDF4DWU.js";
+import "./chunk-R5SDVKHS.js";
 import "./chunk-BPJ5KWIT.js";
 import "./chunk-NPTIYO2S.js";
 import "./chunk-OMO45AHI.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.65",
+  "version": "0.10.68",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.65",
+  "version": "0.10.68",
   "skills": "./",
   "description": "Project-aware Karpathy-style knowledge base for Claude Code: 20 prompt-only skills (wiki-*, proj-*, using-skillwiki) backed by the deterministic `skillwiki` CLI.",
   "author": {

package/skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.65",
+  "version": "0.10.68",
   "description": "Project-aware Karpathy-style knowledge base for Codex with 20 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",

package/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.10.65",
+  "version": "0.10.68",
   "private": true,
   "files": [
     "wiki-*",

package/skills/skills/using-skillwiki/SKILL.md

@@ -76,7 +76,7 @@ raw/
 ├── archived/{articles,papers,transcripts}/
 └── duplicates/{articles,papers,transcripts}/
 ```
-Use explicit vault-root asset embeds such as `![[raw/assets/example/diagram.png]]`. Agents may choose flat or URL-friendly nested paths. Once an immutable capture references an asset, that path freezes; routine source archive/dedup never moves the asset. Remote images remain external dependencies unless separately captured.
+Use explicit vault-root asset embeds such as `![[raw/assets/example/diagram.png]]`. Agents may choose flat or URL-friendly nested paths. Once an immutable capture references an asset, that path freezes; routine source archive/dedup never moves the asset. Remote images remain external dependencies unless separately captured. When storing binaries under `raw/assets/`, also write a sibling Markdown note (`listings.md`, `note.md`, or a dated `.md`) that embeds each file. Never use `.txt` as the only index; Obsidian opens Markdown notes.
 Raw frontmatter:
 ```yaml
 ---
@@ -287,7 +287,7 @@ skillwiki has multiple distribution channels that can drift:
 | Claude plugin | `~/.claude/plugins/cache/llm-wiki/` | `claude plugin update skillwiki@llm-wiki` |
 | Codex plugin | `~/.codex/plugins/cache/llm-wiki/` | `codex plugin marketplace upgrade llm-wiki`, then reinstall or restart Codex as needed |
 | Grok plugin | `~/.grok/installed-plugins/` (marketplace cache under `~/.grok/marketplace-cache/`) | `grok plugin update skillwiki`, then start a new session or reload plugins |
-| Cursor / Grok Bot (Team GitHub import) | `~/.cursor/plugins/cache/llm-wiki/` and `~/.cursor/plugins/marketplaces/github.com/karlorz/llm-wiki/<sha>/` | Cursor Dashboard → Plugins → **Refresh** or Enable Auto Refresh on `karlorz/llm-wiki`. Reinstall does not move a pinned snapshot. |
+| Cursor / Grok Bot (user GitHub add) | `~/.cursor/plugins/cache/llm-wiki/` and `~/.cursor/plugins/marketplaces/github.com/karlorz/llm-wiki/<sha>/` | `cursor-github-marketplace-repin` (`status.sh`). Team Dashboard Refresh only for a Team admin row. Reinstall does not move a pinned snapshot. |
 | Local git dev | source repo checkout | `npm link ./packages/cli` (from repo root) |
 **Check versions:** `skillwiki doctor` reports Plugin/CLI version mismatch warnings when installed channels disagree. For Grok, also inspect `~/.grok/installed-plugins/*/.claude-plugin/plugin.json` version and agent frontmatter under `agents/*.md`.
 **Plugin channel rule:** Plugin-managed skills and agents are not refreshed with `skillwiki install`. When Claude, Codex, or Grok plugin is installed and enabled, the plugin install root is the skill/agent provider; `skillwiki install` is only a legacy/standalone copier for `~/.claude/skills/`.

package/skills/skills/wiki-add-task/SKILL.md

@@ -10,7 +10,7 @@ Capture ad-hoc ideas, bugs, tasks, and notes into the vault. Three entry points
 | Filesystem drop | Hermes Agent compact mode (no slash commands available) | Same as above — create `.md` in `raw/transcripts/`, dev-loop discovers it |
 | Filesystem drop | You're NOT in a Claude session (Obsidian, editor, sync) | Create a new `.md` file in `raw/transcripts/` using the vault template — dev-loop discovers it on next cycle |
 | Dev-loop discovery | Automatic, next cycle | Scans `raw/transcripts/` for new files since last cycle, surfaces as claimable work |
-**Path Rule:** Captures ALWAYS go to `$(skillwiki path)/raw/transcripts/` (Layer 1). Never under `projects/{slug}/raw/` — that violates SCHEMA.md Layer 1 immutability.
+**Path Rule:** Captures ALWAYS go to `$(skillwiki path)/raw/transcripts/` (Layer 1). Never under `projects/{slug}/raw/` — that violates SCHEMA.md Layer 1 immutability. Text captures stay in `raw/transcripts/`. If the capture includes images or other binaries, store those files under `raw/assets/` with a sibling Markdown note that embeds them; never use a .txt sidecar (such as `README.txt`) as the only index; Obsidian opens Markdown notes.
 ### Exception: Explicit project task requests
 When the user explicitly says "raise task to project X", "add a task for X", "create a feature request for X", or uses a directive structure like "raise task to {project} {description}", the intent is a **work item**, not a capture:
 | User wording | Action | Target |
@@ -92,6 +92,7 @@ Ad-hoc captures may omit `sha256`; omission does not grant mutation authority. O
 - Creating a work item — this is capture-only. Use `proj-work` for full work items.
 - Writing to any Layer 2 or Layer 3 location. Captures are Layer 1 (raw).
 - Writing live credentials, access keys, tokens, passwords, cookies, bearer headers, private keys, or other authenticating secrets to the vault.
+- Indexing `raw/assets/` binaries with only a `.txt` sidecar.
 ## Filesystem drop (offline capture)
 When you're not in a Claude session, drop files directly into `raw/transcripts/`:
 1. Create a `.md` file in `raw/transcripts/` — name it descriptively (e.g., `2026-05-08-idea-fix-template.md`)

package/skills/skills/wiki-ingest/SKILL.md

@@ -65,6 +65,7 @@ Raw ephemeral data (market feeds, logs, transient JSON) must be written to the *
 - Writing raw ephemeral data directly to cloud-mounted wiki paths (`~/wiki/`).
 - Writing host-local absolute paths as canonical durable source references (see `using-skillwiki` → Portable Source References).
 - Writing `[[wikilinks]]` to pages that don't exist in the vault. Before linking, verify the target exists: check `index.md` or `ls` the target directory. If the target doesn't exist yet, use plain text instead of a wikilink.
+- Indexing `raw/assets/` binaries with only a `.txt` sidecar. Write a sibling Markdown note that embeds each file with `![[ ]]`.
 ## Batch Mode
 When the user provides multiple sources (a directory of files, a list of URLs, or a multi-document input):
 1. **Loop per source.** Execute steps 1–8 for each source individually, using one `skillwiki ingest` command per source.

package/skills/skills/wiki-init/SKILL.md

@@ -37,7 +37,9 @@ None for the first run.
    images remain external dependencies. An attended local-asset capture may
    choose any URL-friendly path under `raw/assets/`, but it must write the asset,
    emit an explicit vault-qualified `![[raw/assets/...]]` embed, verify
-   resolution/preview, and only then finalize the immutable raw note.
+   resolution/preview, and only then finalize the immutable raw note. Also write
+   a sibling Markdown note (`listings.md`, `note.md`, or a dated `.md`) that
+   embeds each file. Never use `.txt` as the only index.
 8. **Suggest first sources.** Propose 3–5 initial sources (URLs, papers, articles) appropriate to the domain. Prompt the user to provide the first one to ingest, then hand off to wiki-ingest.
 
 ## Stop conditions

package/skills/using-skillwiki/SKILL.md

@@ -76,7 +76,7 @@ raw/
 ├── archived/{articles,papers,transcripts}/
 └── duplicates/{articles,papers,transcripts}/
 ```
-Use explicit vault-root asset embeds such as `![[raw/assets/example/diagram.png]]`. Agents may choose flat or URL-friendly nested paths. Once an immutable capture references an asset, that path freezes; routine source archive/dedup never moves the asset. Remote images remain external dependencies unless separately captured.
+Use explicit vault-root asset embeds such as `![[raw/assets/example/diagram.png]]`. Agents may choose flat or URL-friendly nested paths. Once an immutable capture references an asset, that path freezes; routine source archive/dedup never moves the asset. Remote images remain external dependencies unless separately captured. When storing binaries under `raw/assets/`, also write a sibling Markdown note (`listings.md`, `note.md`, or a dated `.md`) that embeds each file. Never use `.txt` as the only index; Obsidian opens Markdown notes.
 Raw frontmatter:
 ```yaml
 ---
@@ -287,7 +287,7 @@ skillwiki has multiple distribution channels that can drift:
 | Claude plugin | `~/.claude/plugins/cache/llm-wiki/` | `claude plugin update skillwiki@llm-wiki` |
 | Codex plugin | `~/.codex/plugins/cache/llm-wiki/` | `codex plugin marketplace upgrade llm-wiki`, then reinstall or restart Codex as needed |
 | Grok plugin | `~/.grok/installed-plugins/` (marketplace cache under `~/.grok/marketplace-cache/`) | `grok plugin update skillwiki`, then start a new session or reload plugins |
-| Cursor / Grok Bot (Team GitHub import) | `~/.cursor/plugins/cache/llm-wiki/` and `~/.cursor/plugins/marketplaces/github.com/karlorz/llm-wiki/<sha>/` | Cursor Dashboard → Plugins → **Refresh** or Enable Auto Refresh on `karlorz/llm-wiki`. Reinstall does not move a pinned snapshot. |
+| Cursor / Grok Bot (user GitHub add) | `~/.cursor/plugins/cache/llm-wiki/` and `~/.cursor/plugins/marketplaces/github.com/karlorz/llm-wiki/<sha>/` | `cursor-github-marketplace-repin` (`status.sh`). Team Dashboard Refresh only for a Team admin row. Reinstall does not move a pinned snapshot. |
 | Local git dev | source repo checkout | `npm link ./packages/cli` (from repo root) |
 **Check versions:** `skillwiki doctor` reports Plugin/CLI version mismatch warnings when installed channels disagree. For Grok, also inspect `~/.grok/installed-plugins/*/.claude-plugin/plugin.json` version and agent frontmatter under `agents/*.md`.
 **Plugin channel rule:** Plugin-managed skills and agents are not refreshed with `skillwiki install`. When Claude, Codex, or Grok plugin is installed and enabled, the plugin install root is the skill/agent provider; `skillwiki install` is only a legacy/standalone copier for `~/.claude/skills/`.

package/skills/wiki-add-task/SKILL.md

@@ -10,7 +10,7 @@ Capture ad-hoc ideas, bugs, tasks, and notes into the vault. Three entry points
 | Filesystem drop | Hermes Agent compact mode (no slash commands available) | Same as above — create `.md` in `raw/transcripts/`, dev-loop discovers it |
 | Filesystem drop | You're NOT in a Claude session (Obsidian, editor, sync) | Create a new `.md` file in `raw/transcripts/` using the vault template — dev-loop discovers it on next cycle |
 | Dev-loop discovery | Automatic, next cycle | Scans `raw/transcripts/` for new files since last cycle, surfaces as claimable work |
-**Path Rule:** Captures ALWAYS go to `$(skillwiki path)/raw/transcripts/` (Layer 1). Never under `projects/{slug}/raw/` — that violates SCHEMA.md Layer 1 immutability.
+**Path Rule:** Captures ALWAYS go to `$(skillwiki path)/raw/transcripts/` (Layer 1). Never under `projects/{slug}/raw/` — that violates SCHEMA.md Layer 1 immutability. Text captures stay in `raw/transcripts/`. If the capture includes images or other binaries, store those files under `raw/assets/` with a sibling Markdown note that embeds them; never use a .txt sidecar (such as `README.txt`) as the only index; Obsidian opens Markdown notes.
 ### Exception: Explicit project task requests
 When the user explicitly says "raise task to project X", "add a task for X", "create a feature request for X", or uses a directive structure like "raise task to {project} {description}", the intent is a **work item**, not a capture:
 | User wording | Action | Target |
@@ -92,6 +92,7 @@ Ad-hoc captures may omit `sha256`; omission does not grant mutation authority. O
 - Creating a work item — this is capture-only. Use `proj-work` for full work items.
 - Writing to any Layer 2 or Layer 3 location. Captures are Layer 1 (raw).
 - Writing live credentials, access keys, tokens, passwords, cookies, bearer headers, private keys, or other authenticating secrets to the vault.
+- Indexing `raw/assets/` binaries with only a `.txt` sidecar.
 ## Filesystem drop (offline capture)
 When you're not in a Claude session, drop files directly into `raw/transcripts/`:
 1. Create a `.md` file in `raw/transcripts/` — name it descriptively (e.g., `2026-05-08-idea-fix-template.md`)

package/skills/wiki-ingest/SKILL.md

@@ -65,6 +65,7 @@ Raw ephemeral data (market feeds, logs, transient JSON) must be written to the *
 - Writing raw ephemeral data directly to cloud-mounted wiki paths (`~/wiki/`).
 - Writing host-local absolute paths as canonical durable source references (see `using-skillwiki` → Portable Source References).
 - Writing `[[wikilinks]]` to pages that don't exist in the vault. Before linking, verify the target exists: check `index.md` or `ls` the target directory. If the target doesn't exist yet, use plain text instead of a wikilink.
+- Indexing `raw/assets/` binaries with only a `.txt` sidecar. Write a sibling Markdown note that embeds each file with `![[ ]]`.
 ## Batch Mode
 When the user provides multiple sources (a directory of files, a list of URLs, or a multi-document input):
 1. **Loop per source.** Execute steps 1–8 for each source individually, using one `skillwiki ingest` command per source.

package/skills/wiki-init/SKILL.md

@@ -37,7 +37,9 @@ None for the first run.
    images remain external dependencies. An attended local-asset capture may
    choose any URL-friendly path under `raw/assets/`, but it must write the asset,
    emit an explicit vault-qualified `![[raw/assets/...]]` embed, verify
-   resolution/preview, and only then finalize the immutable raw note.
+   resolution/preview, and only then finalize the immutable raw note. Also write
+   a sibling Markdown note (`listings.md`, `note.md`, or a dated `.md`) that
+   embeds each file. Never use `.txt` as the only index.
 8. **Suggest first sources.** Propose 3–5 initial sources (URLs, papers, articles) appropriate to the domain. Prompt the user to provide the first one to ingest, then hand off to wiki-ingest.
 
 ## Stop conditions

package/templates/SCHEMA.md

@@ -117,6 +117,7 @@ project:          # optional: "[[slug]]" for cross-reference
 - **Stable asset pool:** binary assets may use any flat or URL-friendly nested path under `raw/assets/`; no fixed internal taxonomy such as papers/transcripts is required.
 - Use explicit vault-root embeds such as `![[raw/assets/example/diagram.png]]` so Obsidian preview and GitHub browsing remain unambiguous.
 - Resolve and preview a new local embed before finalizing its raw capture. Once referenced, the asset path freezes; source archive/dedup does not move it. Remote HTTP(S) images remain external dependencies unless separately captured.
+- **Asset notes:** When storing binaries under `raw/assets/`, also write a sibling Markdown note (`listings.md`, `note.md`, or a dated `.md`) that embeds each file with `![[filename.png]]` or vault-root `![[raw/assets/<dir>/<file>]]`. A `.txt` sidecar is never the only index; Obsidian opens Markdown notes, not `.txt`.
 - **Dataview queries** (read-only; do not replace index.md):
 
 ```dataview