skillwiki 0.10.73 → 0.10.75

package/dist/{chunk-R5SDVKHS.js → chunk-4XCBKPKD.js}

@@ -3331,7 +3331,7 @@ function buildCliSurface() {
   program.command("lint").option("--days <n>").option("--lines <n>").option("--log-threshold <n>").option("--fix").option("--only <bucket>").option("--summary").option("--examples <n>").option("--wiki <name>");
   program.command("config");
   program.command("health").option("--wiki <name>").option("--sync <mode>").option("--no-fail").option("--out <path>").option("--examples <n>");
-  program.command("doctor").option("--check-snapshotter");
+  program.command("doctor").option("--check-snapshotter").option("--check-mcp");
   program.command("status").option("--wiki <name>");
   program.command("archive").option("--wiki <name>").option("--cascade").option("--apply").option("--approve <token>").option("--remote <remote>").option("--remote-delete").option("--max-remote-deletes <n>");
   program.command("remove").option("--wiki <name>").option("--remote <remote>").option("--remote-delete").option("--max-remote-deletes <n>").option("--reason <text>");

package/dist/{chunk-YKVJ2A3O.js → chunk-WAUWBPIQ.js}

@@ -40,7 +40,7 @@ import {
   snapshotterAliasForLocalHost,
   toUndirectedWeighted,
   writeDotenv
-} from "./chunk-R5SDVKHS.js";
+} from "./chunk-4XCBKPKD.js";
 import {
   atomicWriteText,
   prepareTypedPage
@@ -1079,7 +1079,7 @@ async function runConfigPath(input) {
 }
 
 // src/doctor/runner.ts
-import { existsSync as existsSync17 } from "fs";
+import { existsSync as existsSync18 } from "fs";
 
 // src/doctor/probes/environment.ts
 import { existsSync as existsSync4, lstatSync, readlinkSync } from "fs";
@@ -3981,6 +3981,204 @@ var dsStoreNoiseProbe = {
   }
 };
 
+// src/doctor/probes/mcp-handshake.ts
+import { existsSync as existsSync17 } from "fs";
+import { join as join20 } from "path";
+var DEFAULT_MCP_URL = "https://wiki.karldigi.dev/mcp";
+var URL_ENV = "SKILLWIKI_MCP_URL";
+var TOKEN_ENV = "SKILLWIKI_MCP_TOKEN";
+function mcpEnv(ctx) {
+  return ctx.input.env ?? process.env;
+}
+function checkMcpUrl(ctx) {
+  const env = mcpEnv(ctx);
+  const override = env[URL_ENV];
+  if (typeof override === "string" && override.trim().length > 0) {
+    return check("pass", "mcp_url_configured", "HTTP MCP URL", "configured via env override");
+  }
+  return check(
+    "pass",
+    "mcp_url_configured",
+    "HTTP MCP URL",
+    `plugin default ${DEFAULT_MCP_URL}`
+  );
+}
+function checkMcpCredential(ctx) {
+  const env = mcpEnv(ctx);
+  const value = env[TOKEN_ENV];
+  if (typeof value === "string" && value.trim().length > 0) {
+    return check("pass", "mcp_credential_present", "HTTP MCP auth", "present");
+  }
+  return check(
+    "warn",
+    "mcp_credential_present",
+    "HTTP MCP auth",
+    "not set \u2014 set in process env or host Configure (value not shown)"
+  );
+}
+function checkFrozenLeafWritePath(ctx) {
+  const vault = ctx.resolvedPath;
+  if (!vault || !existsSync17(join20(vault, ".WIKI_GIT_FROZEN"))) {
+    return check(
+      "pass",
+      "mcp_frozen_leaf_write_path",
+      "HTTP MCP write path",
+      "not a frozen leaf"
+    );
+  }
+  return check(
+    "pass",
+    "mcp_frozen_leaf_write_path",
+    "HTTP MCP write path",
+    "frozen leaf \u2014 writes must use HTTP MCP, not vault git or raw/transcripts/"
+  );
+}
+var HANDSHAKE_ID = "mcp_handshake";
+var HANDSHAKE_LABEL = "HTTP MCP handshake";
+var WORKITEM_TOOL = "wiki_workitem_write";
+function parseCoreSemver(version) {
+  const m = version.match(/^(\d+)\.(\d+)\.(\d+)/);
+  if (!m) return null;
+  return { major: Number.parseInt(m[1], 10), minor: Number.parseInt(m[2], 10), patch: Number.parseInt(m[3], 10) };
+}
+function versionLessThan(a, b) {
+  const pa = parseCoreSemver(a);
+  const pb = parseCoreSemver(b);
+  if (!pa || !pb) return false;
+  if (pa.major !== pb.major) return pa.major < pb.major;
+  if (pa.minor !== pb.minor) return pa.minor < pb.minor;
+  return pa.patch < pb.patch;
+}
+function redactSecret(detail, secret) {
+  if (!secret || secret.length === 0 || !detail.includes(secret)) return detail;
+  return detail.split(secret).join("[REDACTED]");
+}
+function handshakeRow(status, detail, secret) {
+  return check(status, HANDSHAKE_ID, HANDSHAKE_LABEL, redactSecret(detail, secret));
+}
+function parseMcpBody(text) {
+  const trimmed = text.trim();
+  if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
+    return JSON.parse(trimmed);
+  }
+  for (const line of trimmed.split(/\r?\n/)) {
+    const prefix = line.startsWith("data:") ? line.slice(5).trim() : "";
+    if (prefix.startsWith("{")) return JSON.parse(prefix);
+  }
+  throw new Error("non-JSON MCP body");
+}
+function jsonRpcResult(body) {
+  if (typeof body !== "object" || body === null) {
+    throw new Error("invalid JSON-RPC body");
+  }
+  const rec = body;
+  if (rec.error) {
+    throw new Error(typeof rec.error.message === "string" ? rec.error.message : "JSON-RPC error");
+  }
+  if (typeof rec.result !== "object" || rec.result === null) {
+    throw new Error("missing JSON-RPC result");
+  }
+  return rec.result;
+}
+async function mcpJsonRpc(fetchFn, url, token, method, id, params, sessionId) {
+  const headers = {
+    Authorization: `Bearer ${token}`,
+    "Content-Type": "application/json",
+    Accept: "application/json, text/event-stream"
+  };
+  if (sessionId) headers["mcp-session-id"] = sessionId;
+  const res = await fetchFn(url, {
+    method: "POST",
+    headers,
+    body: JSON.stringify({ jsonrpc: "2.0", id, method, params })
+  });
+  if (!res.ok) {
+    throw new Error(`HTTP ${res.status}`);
+  }
+  const nextSession = res.headers.get("mcp-session-id") ?? sessionId;
+  const result = jsonRpcResult(parseMcpBody(await res.text()));
+  return { result, sessionId: nextSession ?? void 0 };
+}
+function toolNames(result) {
+  const tools = result.tools;
+  if (!Array.isArray(tools)) return [];
+  return tools.map((t) => typeof t === "object" && t !== null && typeof t.name === "string" ? t.name : "").filter((name) => name.length > 0);
+}
+async function checkMcpHandshake(ctx) {
+  if (!ctx.input.checkMcp) {
+    return handshakeRow("pass", "not requested \u2014 check skipped");
+  }
+  const env = mcpEnv(ctx);
+  const url = typeof env[URL_ENV] === "string" && env[URL_ENV].trim().length > 0 ? env[URL_ENV].trim() : DEFAULT_MCP_URL;
+  const token = typeof env[TOKEN_ENV] === "string" ? env[TOKEN_ENV] : "";
+  if (token.trim().length === 0) {
+    return handshakeRow("error", "auth not set \u2014 handshake not attempted (value not shown)");
+  }
+  const fetchFn = ctx.input.mcpFetch ?? globalThis.fetch;
+  const shipped = ctx.input.currentVersion;
+  try {
+    const init = await mcpJsonRpc(
+      fetchFn,
+      url,
+      token,
+      "initialize",
+      1,
+      {
+        protocolVersion: "2025-11-25",
+        capabilities: {},
+        clientInfo: { name: "skillwiki-doctor", version: shipped }
+      }
+    );
+    const serverInfo = init.result.serverInfo;
+    const advertised = typeof serverInfo === "object" && serverInfo !== null && typeof serverInfo.version === "string" ? serverInfo.version : "";
+    if (!advertised) {
+      return handshakeRow("error", "handshake failed \u2014 missing serverInfo.version", token);
+    }
+    const listed = await mcpJsonRpc(
+      fetchFn,
+      url,
+      token,
+      "tools/list",
+      2,
+      {},
+      init.sessionId
+    );
+    const tools = toolNames(listed.result);
+    const frozen = Boolean(ctx.resolvedPath && existsSync17(join20(ctx.resolvedPath, ".WIKI_GIT_FROZEN")));
+    if (frozen && !tools.includes(WORKITEM_TOOL)) {
+      return handshakeRow(
+        "error",
+        `captures-only tool list (${tools.length} tools, missing ${WORKITEM_TOOL}) on frozen leaf \u2014 advertised ${advertised}`,
+        token
+      );
+    }
+    if (versionLessThan(advertised, shipped)) {
+      return handshakeRow(
+        "warn",
+        `advertised ${advertised} lags shipped ${shipped} (${tools.length} tools)`,
+        token
+      );
+    }
+    return handshakeRow("pass", `advertised ${advertised}, ${tools.length} tools`, token);
+  } catch (e) {
+    const raw = e instanceof Error ? e.message : String(e);
+    const safe = redactSecret(raw, token);
+    return handshakeRow("error", `handshake failed \u2014 ${safe}`, token);
+  }
+}
+var mcpHandshakeProbe = {
+  id: "mcp",
+  label: "HTTP MCP",
+  async run(ctx) {
+    return [
+      checkMcpUrl(ctx),
+      checkMcpCredential(ctx),
+      checkFrozenLeafWritePath(ctx),
+      await checkMcpHandshake(ctx)
+    ];
+  }
+};
+
 // src/doctor/probes/index.ts
 var DOCTOR_PROBES = [
   environmentProbe,
@@ -3994,7 +4192,8 @@ var DOCTOR_PROBES = [
   metricsProbe,
   fuseStalenessProbe,
   activationMarkerProbe,
-  dsStoreNoiseProbe
+  dsStoreNoiseProbe,
+  mcpHandshakeProbe
 ];
 
 // src/doctor/runner.ts
@@ -4005,7 +4204,7 @@ function resolveSnapshotGitWorktree(home) {
   const configured = resolveConfiguredSnapshotWorktree(home);
   if (configured) return configured;
   const defaultPath = "/root/wiki-git";
-  return existsSync17(defaultPath) ? defaultPath : void 0;
+  return existsSync18(defaultPath) ? defaultPath : void 0;
 }
 var DoctorRunner = class {
   probes;
@@ -4101,8 +4300,8 @@ function readCliPackageJson(baseUrl = import.meta.url) {
 
 // src/utils/vault-write-gates.ts
 import { execFileSync } from "child_process";
-import { existsSync as existsSync18, readdirSync as readdirSync7, readFileSync as readFileSync13, statSync as statSync3 } from "fs";
-import { join as join20, relative as relative2 } from "path";
+import { existsSync as existsSync19, readdirSync as readdirSync7, readFileSync as readFileSync13, statSync as statSync3 } from "fs";
+import { join as join21, relative as relative2 } from "path";
 var DEFAULT_DIRTY_VOLUME_THRESHOLD = 50;
 var DEFAULT_CAPTURE_BUDGET = 20;
 var DEFAULT_NO_DECISION_STREAK = 3;
@@ -4164,7 +4363,7 @@ function measureDirtyVolume(vault) {
     is_git_repo: false,
     ...extra
   });
-  if (!existsSync18(vault) || !statSync3(vault).isDirectory()) {
+  if (!existsSync19(vault) || !statSync3(vault).isDirectory()) {
     return empty();
   }
   const gitDir = git(vault, ["rev-parse", "--absolute-git-dir"]);
@@ -4202,8 +4401,8 @@ function measureDirtyVolume(vault) {
     if (!rel) continue;
     if (code === "??") {
       untracked += 1;
-      const abs = join20(vault, rel);
-      if (existsSync18(abs) && statSync3(abs).isDirectory()) {
+      const abs = join21(vault, rel);
+      if (existsSync19(abs) && statSync3(abs).isDirectory()) {
         const files = listFilesRecursive(abs);
         expanded += files.length;
         addBucket(rel, files.length);
@@ -4239,7 +4438,7 @@ function listFilesRecursive(dir) {
   }
   for (const name of entries) {
     if (name === ".git") continue;
-    const p = join20(dir, name);
+    const p = join21(dir, name);
     try {
       const st = statSync3(p);
       if (st.isDirectory()) out.push(...listFilesRecursive(p));
@@ -4334,7 +4533,7 @@ var CAPTURE_HYGIENE_CONTRACT = `After each productive cycle (or when daily captu
 function listProjectDayCaptures(vault, project, day) {
   const found = [];
   const slug = project.replace(/^\[\[/, "").replace(/\]\]$/, "").trim();
-  if (!slug || !existsSync18(vault)) return found;
+  if (!slug || !existsSync19(vault)) return found;
   const consider = (abs, rel) => {
     if (!rel.endsWith(".md")) return;
     const base = rel.split(/[/\\]/).pop() ?? "";
@@ -4362,7 +4561,7 @@ function listProjectDayCaptures(vault, project, day) {
     }
   };
   const walk = (dir, relBase) => {
-    if (!existsSync18(dir)) return;
+    if (!existsSync19(dir)) return;
     let entries;
     try {
       entries = readdirSync7(dir);
@@ -4370,7 +4569,7 @@ function listProjectDayCaptures(vault, project, day) {
       return;
     }
     for (const name of entries) {
-      const abs = join20(dir, name);
+      const abs = join21(dir, name);
       const rel = relBase ? `${relBase}/${name}` : name;
       try {
         const st = statSync3(abs);
@@ -4380,16 +4579,16 @@ function listProjectDayCaptures(vault, project, day) {
       }
     }
   };
-  walk(join20(vault, "raw", "transcripts"), "raw/transcripts");
-  walk(join20(vault, "projects", slug, "raw", "transcripts"), `projects/${slug}/raw/transcripts`);
-  walk(join20(vault, "projects", slug, "requirements"), `projects/${slug}/requirements`);
-  const workRoot = join20(vault, "projects", slug, "work");
-  if (existsSync18(workRoot)) {
+  walk(join21(vault, "raw", "transcripts"), "raw/transcripts");
+  walk(join21(vault, "projects", slug, "raw", "transcripts"), `projects/${slug}/raw/transcripts`);
+  walk(join21(vault, "projects", slug, "requirements"), `projects/${slug}/requirements`);
+  const workRoot = join21(vault, "projects", slug, "work");
+  if (existsSync19(workRoot)) {
     try {
       for (const name of readdirSync7(workRoot)) {
         if (!name.startsWith(day)) continue;
         if (!/investigate|pilot-q|research|cycle|dev-loop/.test(name)) continue;
-        const abs = join20(workRoot, name);
+        const abs = join21(workRoot, name);
         if (statSync3(abs).isDirectory()) {
           for (const f of listFilesRecursive(abs)) {
             const rel = relative2(vault, f).replace(/\\/g, "/");
@@ -4434,7 +4633,7 @@ function evaluateCaptureBudget(input) {
   return { allowed: true, reason: "under_budget", report };
 }
 function runWritePreflight(input) {
-  if (!input.vault || !existsSync18(input.vault)) {
+  if (!input.vault || !existsSync19(input.vault)) {
     return err(GateError.VAULT_PATH_INVALID, { path: input.vault });
   }
   const want = new Set(input.checks ?? ["all"]);
@@ -4494,8 +4693,8 @@ function runWritePreflight(input) {
 
 // src/commands/observe.ts
 import { mkdir as mkdir3, writeFile as writeFile2 } from "fs/promises";
-import { existsSync as existsSync19, statSync as statSync4 } from "fs";
-import { join as join21 } from "path";
+import { existsSync as existsSync20, statSync as statSync4 } from "fs";
+import { join as join22 } from "path";
 import { createHash as createHash2 } from "crypto";
 var ALLOWED_KINDS = /* @__PURE__ */ new Set(["note", "bug", "task", "idea", "session-log"]);
 function slugify(text) {
@@ -4518,7 +4717,7 @@ async function runObserve(input) {
       result: err("SCHEME_REJECTED", { message: "Text must not be empty" })
     };
   }
-  if (!existsSync19(input.vault) || !statSync4(input.vault).isDirectory()) {
+  if (!existsSync20(input.vault) || !statSync4(input.vault).isDirectory()) {
     return {
       exitCode: ExitCode.VAULT_PATH_INVALID,
       result: err("VAULT_PATH_INVALID", { path: input.vault })
@@ -4544,7 +4743,7 @@ async function runObserve(input) {
       };
     }
   }
-  const transcriptsDir = join21(input.vault, "raw", "transcripts");
+  const transcriptsDir = join22(input.vault, "raw", "transcripts");
   try {
     await mkdir3(transcriptsDir, { recursive: true });
   } catch {
@@ -4556,7 +4755,7 @@ async function runObserve(input) {
   const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
   const slug = slugify(input.text);
   const fileName = `${today}-observation-${slug}.md`;
-  const filePath = join21(transcriptsDir, fileName);
+  const filePath = join22(transcriptsDir, fileName);
   const body = `
 ${input.text.trim()}
 `;
@@ -4598,7 +4797,7 @@ ${input.text.trim()}
 // src/commands/memory.ts
 import { createHash as createHash3 } from "crypto";
 import { mkdir as mkdir4, readFile as readFile7, readdir as readdir2, stat as stat2, writeFile as writeFile3 } from "fs/promises";
-import { basename as basename2, extname, join as join22, relative as relative3, sep as sep2 } from "path";
+import { basename as basename2, extname, join as join23, relative as relative3, sep as sep2 } from "path";
 
 // src/utils/memory-authority.ts
 var TIER_RANK = {
@@ -4717,8 +4916,8 @@ async function runMemoryIndex(input) {
   }
   const generatedAt = (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "Z");
   const relCachePath = memoryCacheRelPath(input.project);
-  const absCachePath = join22(input.vault, relCachePath);
-  await mkdir4(join22(input.vault, ".skillwiki", "memory", input.project), { recursive: true });
+  const absCachePath = join23(input.vault, relCachePath);
+  await mkdir4(join23(input.vault, ".skillwiki", "memory", input.project), { recursive: true });
   await writeFile3(absCachePath, `${JSON.stringify({
     generated_at: generatedAt,
     project: input.project,
@@ -4910,7 +5109,7 @@ async function buildMemoryIndexState(pages, project) {
 }
 async function checkMemoryIndex(vault, project, current) {
   const relCachePath = memoryCacheRelPath(project);
-  const cacheText = await readIfExists(join22(vault, relCachePath));
+  const cacheText = await readIfExists(join23(vault, relCachePath));
   if (!cacheText) {
     return {
       ok: true,
@@ -5319,7 +5518,7 @@ async function walkImportFiles(dir, out) {
   const entries = await readdir2(dir, { withFileTypes: true });
   for (const entry of entries) {
     if (entry.name === ".git" || entry.name === "node_modules") continue;
-    const path = join22(dir, entry.name);
+    const path = join23(dir, entry.name);
     if (entry.isDirectory()) {
       await walkImportFiles(path, out);
     } else if (entry.isFile() && isImportCandidate(path)) {
@@ -5386,8 +5585,8 @@ async function writeImportCapture(vault, entry, today) {
   const content = hiddenString(entry, "__content");
   const project = hiddenString(entry, "__project");
   const relPath = await availableImportPath(vault, entry.proposed_path);
-  const absPath = join22(vault, relPath);
-  await mkdir4(join22(vault, "raw", "transcripts"), { recursive: true });
+  const absPath = join23(vault, relPath);
+  await mkdir4(join23(vault, "raw", "transcripts"), { recursive: true });
   await writeFile3(absPath, renderImportCapture(entry, content, project, today), "utf8");
   const validation = await runValidate({ file: absPath });
   return {
@@ -5403,7 +5602,7 @@ async function availableImportPath(vault, proposed) {
   const stem = proposed.slice(0, -ext.length);
   let candidate = proposed;
   let i = 2;
-  while (await readIfExists(join22(vault, candidate))) {
+  while (await readIfExists(join23(vault, candidate))) {
     candidate = `${stem}-${i}${ext}`;
     i++;
   }
@@ -5588,10 +5787,10 @@ function memoryCacheRelPath(project) {
 }
 async function readMemoryCache(vault, project) {
   if (project) {
-    const projectCache = await readIfExists(join22(vault, memoryCacheRelPath(project)));
+    const projectCache = await readIfExists(join23(vault, memoryCacheRelPath(project)));
     if (projectCache) return projectCache;
   }
-  return readIfExists(join22(vault, ".skillwiki", "memory-topics.json"));
+  return readIfExists(join23(vault, ".skillwiki", "memory-topics.json"));
 }
 function dedupePages(pages) {
   const seen = /* @__PURE__ */ new Set();
@@ -5683,7 +5882,7 @@ function slugify2(value) {
 
 // src/commands/query.ts
 import { readFile as readFile9, stat as stat4 } from "fs/promises";
-import { join as join24 } from "path";
+import { join as join25 } from "path";
 
 // src/utils/rrf.ts
 var RRF_K = 60;
@@ -5699,8 +5898,8 @@ function fuseRankings(lists, k = RRF_K) {
 
 // src/utils/vector-index.ts
 import { mkdir as mkdir5, readFile as readFile8, stat as stat3 } from "fs/promises";
-import { join as join23 } from "path";
-import { existsSync as existsSync20 } from "fs";
+import { join as join24 } from "path";
+import { existsSync as existsSync21 } from "fs";
 var VECTOR_INDEX_REL = ".skillwiki/vectors/index.json";
 var VECTOR_INDEX_SCHEMA = "skillwiki-tfidf-index/v1";
 function tokenize(text) {
@@ -5714,7 +5913,7 @@ function extractPageTokens(text) {
   return tokenize(`${title} ${body}`);
 }
 function vectorIndexPath(vault) {
-  return join23(vault, ...VECTOR_INDEX_REL.split("/"));
+  return join24(vault, ...VECTOR_INDEX_REL.split("/"));
 }
 function termFreq(tokens) {
   const tf = /* @__PURE__ */ new Map();
@@ -5769,7 +5968,7 @@ async function buildVectorIndex(vault, now = (/* @__PURE__ */ new Date()).toISOS
     docs
   };
   const dest = vectorIndexPath(vault);
-  await mkdir5(join23(vault, ".skillwiki", "vectors"), { recursive: true });
+  await mkdir5(join24(vault, ".skillwiki", "vectors"), { recursive: true });
   await atomicWriteText(dest, `${JSON.stringify(index)}
 `);
   return ok(index);
@@ -5812,7 +6011,7 @@ async function reindexPageInVectorIndex(vault, pageRelPath, now = (/* @__PURE__
   if (!normalizedPage.endsWith(".md")) {
     return err("USAGE", { message: `Page must be a .md file: ${pageRelPath}` });
   }
-  const absPath = join23(vault, ...normalizedPage.split("/"));
+  const absPath = join24(vault, ...normalizedPage.split("/"));
   let text;
   try {
     text = await readFile8(absPath, "utf8");
@@ -5897,7 +6096,7 @@ async function reindexPageInVectorIndex(vault, pageRelPath, now = (/* @__PURE__
     }
   }
   const dest = vectorIndexPath(vault);
-  await mkdir5(join23(vault, ".skillwiki", "vectors"), { recursive: true });
+  await mkdir5(join24(vault, ".skillwiki", "vectors"), { recursive: true });
   await atomicWriteText(dest, `${JSON.stringify(index)}
 `);
   return ok({
@@ -5915,8 +6114,8 @@ async function pruneVectorIndex(vault, opts) {
   const orphans = [];
   for (const docKey of Object.keys(index.docs)) {
     const normalizedKey = docKey.split(/\\|\//).join("/");
-    const absPath = join23(vault, ...normalizedKey.split("/"));
-    if (!existsSync20(absPath)) {
+    const absPath = join24(vault, ...normalizedKey.split("/"));
+    if (!existsSync21(absPath)) {
       orphans.push(normalizedKey);
     }
   }
@@ -5962,7 +6161,7 @@ async function pruneVectorIndex(vault, opts) {
       index.docs[docKey] = toTfIdf(termFreq(tokens), index.df, newPageCount);
     } else {
       try {
-        const text = await readFile8(join23(vault, ...docKey.split("/")), "utf8");
+        const text = await readFile8(join24(vault, ...docKey.split("/")), "utf8");
         const tokens = extractPageTokens(text);
         index.docs[docKey] = toTfIdf(termFreq(tokens), index.df, newPageCount);
       } catch {
@@ -5972,7 +6171,7 @@ async function pruneVectorIndex(vault, opts) {
   }
   if (!opts?.dryRun) {
     const dest = vectorIndexPath(vault);
-    await mkdir5(join23(vault, ".skillwiki", "vectors"), { recursive: true });
+    await mkdir5(join24(vault, ".skillwiki", "vectors"), { recursive: true });
     await atomicWriteText(dest, `${JSON.stringify(index)}
 `);
   }
@@ -6176,7 +6375,7 @@ function computeKeywordScore(terms, title, tags, body) {
   return score;
 }
 async function loadOrBuildGraph(vault) {
-  const graphPath = join24(vault, ".skillwiki", "graph.json");
+  const graphPath = join25(vault, ".skillwiki", "graph.json");
   let needsBuild = false;
   try {
     const fileStat = await stat4(graphPath);
@@ -6265,7 +6464,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { z } from "zod";
 
 // src/mcp/vault-resolve.ts
-import { join as join25, resolve as resolve4 } from "path";
+import { join as join26, resolve as resolve4 } from "path";
 
 // src/mcp/allowlist.ts
 import { resolve as resolve3, sep as sep3 } from "path";
@@ -6327,7 +6526,7 @@ async function resolveMcpVault(input) {
   return ok({ vault: vaultPath, source });
 }
 function defaultGraphOut(vault) {
-  return join25(vault, ".skillwiki", "graph.json");
+  return join26(vault, ".skillwiki", "graph.json");
 }
 
 // src/mcp/result-format.ts
@@ -6344,7 +6543,7 @@ function formatToolResult(payload) {
 // src/mcp/audit-log.ts
 import { appendFileSync, mkdirSync as mkdirSync2 } from "fs";
 import { homedir } from "os";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 function auditEnabled() {
   const v = process.env.SKILLWIKI_MCP_AUDIT;
   if (v === "0" || v === "false") return false;
@@ -6356,7 +6555,7 @@ function auditSink() {
 function auditFilePath() {
   const custom = process.env.SKILLWIKI_MCP_AUDIT_FILE;
   if (custom && custom.length > 0) return custom;
-  return join26(homedir(), ".skillwiki", "mcp-audit.jsonl");
+  return join27(homedir(), ".skillwiki", "mcp-audit.jsonl");
 }
 function auditMcpToolCall(entry) {
   if (!auditEnabled()) return;
@@ -6366,7 +6565,7 @@ function auditMcpToolCall(entry) {
     return;
   }
   const path = auditFilePath();
-  mkdirSync2(join26(path, ".."), { recursive: true });
+  mkdirSync2(join27(path, ".."), { recursive: true });
   appendFileSync(path, line, "utf8");
 }
 async function runMcpToolHandler(tool, input, fn) {
@@ -6640,7 +6839,7 @@ function registerMcpMutatingTools(server) {
 
 // src/mcp/resources.ts
 import { readFile as readFile11 } from "fs/promises";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 // src/mcp/lint-bucket.ts
@@ -6770,8 +6969,8 @@ async function fetchQueryPreview(input) {
 
 // src/mcp/graph-html.ts
 import { readFile as readFile10 } from "fs/promises";
-import { join as join27 } from "path";
-import { existsSync as existsSync21 } from "fs";
+import { join as join28 } from "path";
+import { existsSync as existsSync22 } from "fs";
 var TYPE_COLORS = {
   entities: "#e74c3c",
   concepts: "#27ae60",
@@ -6839,9 +7038,9 @@ ${nodeSvg}
   return { html, node_count: nodes.length, edge_count: edges.length, truncated };
 }
 async function fetchGraphHtmlReport(input) {
-  const graphPath = input.graphPath ?? join27(input.vault, ".skillwiki", "graph.json");
+  const graphPath = input.graphPath ?? join28(input.vault, ".skillwiki", "graph.json");
   const maxNodes = Math.min(Math.max(10, input.maxNodes ?? 120), 500);
-  if (!existsSync21(graphPath)) {
+  if (!existsSync22(graphPath)) {
     return {
       exitCode: ExitCode.FILE_NOT_FOUND,
       result: err("GRAPH_MISSING", { path: graphPath, hint: "Run skillwiki.graph_build first." })
@@ -6913,7 +7112,7 @@ async function fetchStaleSummary(input) {
 
 // src/mcp/resources.ts
 async function readVaultFile(vault, rel) {
-  return readFile11(join28(vault, rel), "utf8");
+  return readFile11(join29(vault, rel), "utf8");
 }
 async function tailLines(text, lines) {
   const parts = text.split(/\r?\n/);
@@ -6999,7 +7198,7 @@ function registerMcpResources(server) {
       if (!v.ok) {
         return { contents: [{ uri: uri.href, mimeType: "text/plain", text: JSON.stringify(v) }] };
       }
-      const path = join28(v.data.vault, ".skillwiki", "graph.json");
+      const path = join29(v.data.vault, ".skillwiki", "graph.json");
       try {
         const raw = await readFile11(path, "utf8");
         const graph = JSON.parse(raw);

package/dist/cli.js

@@ -50,7 +50,7 @@ import {
   snapshotterHealthChecks,
   upsertIndexEntry,
   vectorIndexStatus
-} from "./chunk-YKVJ2A3O.js";
+} from "./chunk-WAUWBPIQ.js";
 import {
   normalizeDistTag,
   readCache,
@@ -151,7 +151,7 @@ import {
   supersedeStaleReviewRequiredJournals,
   taxonomyCommentForPage,
   writeDotenv
-} from "./chunk-R5SDVKHS.js";
+} from "./chunk-4XCBKPKD.js";
 import {
   assertTargetInsideVault,
   atomicWriteText,
@@ -4246,24 +4246,45 @@ function parseCoreSemver(version) {
   if (!m) return null;
   return { major: parseInt(m[1], 10), minor: parseInt(m[2], 10), patch: parseInt(m[3], 10) };
 }
+function isAtLeast(parsed, major, minor, patch) {
+  return parsed.major > major || parsed.major === major && parsed.minor > minor || parsed.major === major && parsed.minor === minor && parsed.patch >= patch;
+}
+function isBelow(parsed, major, minor, patch) {
+  return !isAtLeast(parsed, major, minor, patch);
+}
 function needs0101Migration(previousVersion, newVersion) {
   const p = parseCoreSemver(previousVersion);
   const n = parseCoreSemver(newVersion);
   if (!p || !n) return false;
-  const prevLt = p.major < 0 || p.major === 0 && p.minor < 10 || p.major === 0 && p.minor === 10 && p.patch < 1;
-  const newGe = n.major > 0 || n.major === 0 && n.minor > 10 || n.major === 0 && n.minor === 10 && n.patch >= 1;
-  return prevLt && newGe;
+  return isBelow(p, 0, 10, 1) && isAtLeast(n, 0, 10, 1);
+}
+function needsHttpMcpMigration(previousVersion, newVersion) {
+  const p = parseCoreSemver(previousVersion);
+  const n = parseCoreSemver(newVersion);
+  if (!p || !n) return false;
+  return isBelow(p, 0, 10, 70) && isAtLeast(n, 0, 10, 70);
 }
 function migrationNotesForUpgrade(previousVersion, newVersion) {
-  if (!needs0101Migration(previousVersion, newVersion)) return [];
-  return [
-    "Migration 0.10.1:",
-    "- pull helper resolves from dist/ + host vault-sync install",
-    "- run: skillwiki doctor",
-    "- if managed writes blocked: skillwiki sync journal list",
-    "- then: skillwiki sync journal clear-stale --dry-run",
-    "- legacy override: SKILLWIKI_VAULT_SYNC_PULL_HELPER=<path-to-wiki-pull-with-auto-resolve.sh>"
-  ];
+  const notes = [];
+  if (needs0101Migration(previousVersion, newVersion)) {
+    notes.push(
+      "Migration 0.10.1:",
+      "- pull helper resolves from dist/ + host vault-sync install",
+      "- run: skillwiki doctor",
+      "- if managed writes blocked: skillwiki sync journal list",
+      "- then: skillwiki sync journal clear-stale --dry-run",
+      "- legacy override: SKILLWIKI_VAULT_SYNC_PULL_HELPER=<path-to-wiki-pull-with-auto-resolve.sh>"
+    );
+  }
+  if (needsHttpMcpMigration(previousVersion, newVersion)) {
+    notes.push(
+      "Migration HTTP MCP:",
+      "- upgrade the plugin channel, then start a new session (plugin instructions do not hot-swap)",
+      "- run: skillwiki doctor --check-mcp",
+      "- frozen-leaf hosts write via HTTP MCP only; do not local-write raw/transcripts/ or vault git"
+    );
+  }
+  return notes;
 }
 function resolveGlobalSkillsRoot() {
   try {
@@ -10410,7 +10431,7 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-PUEJOXJO.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-KCFPPZNF.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,
@@ -11043,13 +11064,14 @@ configCmd.command("get <key>").description("print the value of a config key").ac
 configCmd.command("set <key> <value>").description("set a config key value").action(async (key, value) => emit(await runConfigSet({ key, value, home: process.env.HOME ?? "" })));
 configCmd.command("list").option("--profiles", "show wiki profiles summary", false).description("list all config key=value pairs").action(async (opts) => emit(await runConfigList({ home: process.env.HOME ?? "", profiles: !!opts.profiles })));
 configCmd.command("path").description("print the config file path").action(async () => emit(await runConfigPath({ home: process.env.HOME ?? "" })));
-program.command("doctor").description("diagnose skillwiki setup issues").option("--check-snapshotter", "SSH-probe fleet snapshotter (short timeout)", false).action(async (opts) => emit(await runDoctor({
+program.command("doctor").description("diagnose skillwiki setup issues").option("--check-snapshotter", "SSH-probe fleet snapshotter (short timeout)", false).option("--check-mcp", "live-handshake HTTP MCP initialize + tools/list (network)", false).action(async (opts) => emit(await runDoctor({
   home: process.env.HOME ?? "",
   envValue: process.env.WIKI_PATH,
   argv: process.argv,
   currentVersion: pkg.version,
   cwd: process.cwd(),
-  checkSnapshotter: !!opts.checkSnapshotter
+  checkSnapshotter: !!opts.checkSnapshotter,
+  checkMcp: !!opts.checkMcp
 })));
 program.command("status [vault]").description("output vault diagnostics").option("--wiki <name>", "wiki profile name").action(async (vault, opts) => {
   const v = await resolveVaultArg(vault, opts.wiki);

package/dist/{managed-write-preflight-PUEJOXJO.js → managed-write-preflight-KCFPPZNF.js}

@@ -6,7 +6,7 @@ import {
   runManagedWritePeerGate,
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-R5SDVKHS.js";
+} from "./chunk-4XCBKPKD.js";
 import "./chunk-BPJ5KWIT.js";
 import "./chunk-OMO45AHI.js";
 import "./chunk-HJ4ALQG6.js";

package/dist/skillwiki-mcp.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-YKVJ2A3O.js";
+} from "./chunk-WAUWBPIQ.js";
 import "./chunk-7I2TPIV5.js";
 import "./chunk-KFEOMMWK.js";
-import "./chunk-R5SDVKHS.js";
+import "./chunk-4XCBKPKD.js";
 import "./chunk-BPJ5KWIT.js";
 import "./chunk-NPTIYO2S.js";
 import "./chunk-OMO45AHI.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.73",
+  "version": "0.10.75",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.73",
+  "version": "0.10.75",
   "skills": "./",
   "description": "Project-aware Karpathy-style knowledge base for Claude Code: 21 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp) backed by the deterministic `skillwiki` CLI.",
   "author": {

package/skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.73",
+  "version": "0.10.75",
   "description": "Project-aware Karpathy-style knowledge base for Codex with 21 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",

package/skills/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.73",
+  "version": "0.10.75",
   "description": "Project-aware Karpathy-style knowledge base: 21 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp) backed by HTTP MCP wiki_capture.",
   "author": {
     "name": "karlorz"

package/skills/agents/proj-work.md

@@ -21,10 +21,15 @@ You are a project work item manager specializing in creating and executing work
 
 **Execution Process:**
 
-If `$VAULT/.WIKI_GIT_FROZEN` exists after `skillwiki path`: do not create or mutate work folders; do not `page publish` or git commit. Capture a close note via HTTP MCP `wiki_capture` or STOP. Work-item close waits unpublished Tier 2 (`wiki_workitem_write`). Reads of existing folders are allowed.
+If `$VAULT/.WIKI_GIT_FROZEN` exists after `skillwiki path`:
+- Existing work folder reads are allowed.
+- Git add/commit/push and wiki-sync remain **fail closed**.
+- **If live MCP tools include `wiki_workitem_write`**: create, mutate, or close work items via MCP `wiki_workitem_write` (using CAS base_sha256). Do not write local files in `~/wiki`.
+- **If live MCP tools include `wiki_page_publish`**: publish typed pages via MCP `wiki_page_publish` CAS.
+- **If those tools are absent**: capture a close note via HTTP MCP `wiki_capture` or STOP. Do not local-write.
 
 ### Creating a New Work Item
-1. **Resolve vault.** Run `skillwiki path`. If `.WIKI_GIT_FROZEN` exists, STOP (see freeze rule above).
+1. **Resolve vault.** Run `skillwiki path`. If `.WIKI_GIT_FROZEN` exists, follow the freeze rule above (MCP `wiki_workitem_write` when advertised; otherwise STOP). Do not local-create.
 2. **Determine slug and kind.** From task prompt: kind (`feature` | `issue` | `refactor` | `decision`) and work slug.
 3. **Create folder.** `projects/{slug}/work/YYYY-MM-DD-{work-slug}/`.
 4. **Write spec.md.** Frontmatter with kind, status=planned, project wikilink. Body with context and scope.
@@ -55,13 +60,14 @@ Return:
 - Log entries appended
 
 **Stop Conditions:**
-- `$VAULT/.WIKI_GIT_FROZEN` exists and the task would create, mutate, or close a work item
+- `$VAULT/.WIKI_GIT_FROZEN` exists and the task would create, mutate, or close a work item when `wiki_workitem_write` is absent from live MCP tools
 - `validate` non-zero
 - Conflicting work folder name
 - No project context and no `playground` fallback
 
 **Forbidden:**
-- Creating or mutating work items on a vault that has `.WIKI_GIT_FROZEN`
+- Creating or mutating local work items on a vault that has `.WIKI_GIT_FROZEN` (use MCP `wiki_workitem_write` when advertised)
+- `git add` / `git commit` / `git push` on a vault that has `.WIKI_GIT_FROZEN`
 - Writing spec/plan files outside the work folder
 - Marking `status: completed` without a `completed:` date
 - Accepting tasks.md DONE labels without independent disk verification

package/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.10.73",
+  "version": "0.10.75",
   "private": true,
   "files": [
     "wiki-*",

package/skills/proj-work/SKILL.md

@@ -33,9 +33,10 @@ Standard four + project context (project README, last ~5 work logs).
 After `skillwiki path`, if `$VAULT/.WIKI_GIT_FROZEN` exists:
 
 - **Reads** of existing work folders are allowed.
-- **Do not** create or mutate `projects/*/work/**`, `knowledge.md`, or run `skillwiki page publish` on this leaf.
-- **Do not** `git commit` / `wiki-sync` push to “close” the item.
-- Work-item close is unpublished until Tier 2 (`wiki_workitem_write` / `wiki_page_publish`). If the user asked to close or complete work, capture a note via HTTP MCP `wiki_capture` (`kind: note` or `task`) and STOP. Do not local-write the work folder.
+- **Git fail-closed:** Git add/commit/push / `wiki-sync`: still **fail closed**. GitHub is sg01 `wiki-snapshot`.
+- **If the live MCP tool list includes `wiki_workitem_write`**: create, mutate, or close work items via MCP `wiki_workitem_write`. Read current bytes (`wiki_read_page` sha256 or local file hash), pass `path`, `content`, `base_sha256`. On `FILE_CHANGED`, re-read and retry once. Never local-write `~/wiki`.
+- **If the live MCP tool list includes `wiki_page_publish`**: publish typed Layer-2 pages via MCP `wiki_page_publish` with the same CAS. Do not run local `skillwiki page publish` on the frozen leaf.
+- **If those tools are absent** (daemon still captures-only): capture a close note via HTTP MCP `wiki_capture` (`kind: note` or `task`) or STOP. Do not local-write. Do not claim the tools exist.
 
 ## Executing an Existing Work Item
 
@@ -99,12 +100,13 @@ Rules:
 - **Re-marking without doing**: do not simply re-write tasks.md to say DONE without applying the corresponding fix. The next session will find the same gap.
 
 ## Stop conditions
-- `$VAULT/.WIKI_GIT_FROZEN` exists and the user asked to create, mutate, or close a work item — capture via `wiki_capture` or STOP; do not local-write.
+- `$VAULT/.WIKI_GIT_FROZEN` exists and the user asked to create, mutate, or close a work item when `wiki_workitem_write` is absent from the live MCP tool list — capture via `wiki_capture` or STOP; do not local-write.
 - `validate` non-zero.
 - Conflicting work folder name.
 
 ## Forbidden
-- Creating or mutating work items on a vault that has `.WIKI_GIT_FROZEN`.
+- Creating or mutating local work items on a vault that has `.WIKI_GIT_FROZEN` (use MCP `wiki_workitem_write` when advertised).
+- `git add` / `git commit` / `git push` on a vault that has `.WIKI_GIT_FROZEN`.
 - Writing spec/plan files outside the work folder.
 - Marking `status: completed` without a `completed:` date.
 - Accepting tasks.md status labels without independent disk verification.

package/skills/skills/proj-work/SKILL.md

@@ -33,9 +33,10 @@ Standard four + project context (project README, last ~5 work logs).
 After `skillwiki path`, if `$VAULT/.WIKI_GIT_FROZEN` exists:
 
 - **Reads** of existing work folders are allowed.
-- **Do not** create or mutate `projects/*/work/**`, `knowledge.md`, or run `skillwiki page publish` on this leaf.
-- **Do not** `git commit` / `wiki-sync` push to “close” the item.
-- Work-item close is unpublished until Tier 2 (`wiki_workitem_write` / `wiki_page_publish`). If the user asked to close or complete work, capture a note via HTTP MCP `wiki_capture` (`kind: note` or `task`) and STOP. Do not local-write the work folder.
+- **Git fail-closed:** Git add/commit/push / `wiki-sync`: still **fail closed**. GitHub is sg01 `wiki-snapshot`.
+- **If the live MCP tool list includes `wiki_workitem_write`**: create, mutate, or close work items via MCP `wiki_workitem_write`. Read current bytes (`wiki_read_page` sha256 or local file hash), pass `path`, `content`, `base_sha256`. On `FILE_CHANGED`, re-read and retry once. Never local-write `~/wiki`.
+- **If the live MCP tool list includes `wiki_page_publish`**: publish typed Layer-2 pages via MCP `wiki_page_publish` with the same CAS. Do not run local `skillwiki page publish` on the frozen leaf.
+- **If those tools are absent** (daemon still captures-only): capture a close note via HTTP MCP `wiki_capture` (`kind: note` or `task`) or STOP. Do not local-write. Do not claim the tools exist.
 
 ## Executing an Existing Work Item
 
@@ -99,12 +100,13 @@ Rules:
 - **Re-marking without doing**: do not simply re-write tasks.md to say DONE without applying the corresponding fix. The next session will find the same gap.
 
 ## Stop conditions
-- `$VAULT/.WIKI_GIT_FROZEN` exists and the user asked to create, mutate, or close a work item — capture via `wiki_capture` or STOP; do not local-write.
+- `$VAULT/.WIKI_GIT_FROZEN` exists and the user asked to create, mutate, or close a work item when `wiki_workitem_write` is absent from the live MCP tool list — capture via `wiki_capture` or STOP; do not local-write.
 - `validate` non-zero.
 - Conflicting work folder name.
 
 ## Forbidden
-- Creating or mutating work items on a vault that has `.WIKI_GIT_FROZEN`.
+- Creating or mutating local work items on a vault that has `.WIKI_GIT_FROZEN` (use MCP `wiki_workitem_write` when advertised).
+- `git add` / `git commit` / `git push` on a vault that has `.WIKI_GIT_FROZEN`.
 - Writing spec/plan files outside the work folder.
 - Marking `status: completed` without a `completed:` date.
 - Accepting tasks.md status labels without independent disk verification.

package/skills/skills/skillwiki-mcp/SKILL.md

@@ -22,13 +22,20 @@ SkillWiki captures are HTTP MCP only (`type: http`). Claude/Grok use `SKILLWIKI_
 - Never auto-source `mcp.env` or auto-write `~/.cursor/mcp.json`, Grok `config.toml`, or `mcp.env`.
 - Never print the bearer token.
 
-## Writes (captures-only)
+## Upgrade / migration
+
+Remotes still on a pre-HTTP-MCP plugin or CLI must upgrade the plugin channel (and the CLI where that host has one), then start a **new session** — plugin instructions do not hot-swap. The operator check is the same `skillwiki doctor` as metal: default rows cover URL/auth presence and frozen-leaf write-path; `skillwiki doctor --check-mcp` does the live initialize handshake. Do not invent a second admin skill or HTTP MCP admin tool. `wiki_status` remains daemon health only.
+
+## Writes
 
 On leaf hosts, wiki captures go through MCP. Do **not** write `raw/transcripts/` or `log.md` as local files.
 
 1. Call MCP `wiki_capture` with `kind` (`task` | `idea` | `bug` | `note`), `project`, `title`, and `content`. Optional `agent_note`.
 2. Call MCP `wiki_log_append` when a structural `log.md` line is needed. Pass append-only `content`. Do not rewrite log history.
-3. Write surface is captures-only. Do not call unpublished Tier 2 tools (`wiki_workitem_write`, `wiki_page_publish`). Those tools are not on the live daemon. Work-item close is not available from this MCP. Do not `git commit` / `wiki-push` against `~/wiki` for these captures. If `$VAULT/.WIKI_GIT_FROZEN` exists, that freeze is the reason nearby agents cannot close wiki work until Tier 2 ships.
+3. **Feature-detect work-item and page-publish tools**:
+   - When the server advertises `wiki_workitem_write`: use it to create, mutate, or close work items under `projects/<slug>/work/**` or update `projects/<slug>/knowledge.md`. Pass `path`, `content`, and `base_sha256` of existing bytes (from `wiki_read_page` or local mirror). On `FILE_CHANGED`, re-read and retry once.
+   - When the server advertises `wiki_page_publish`: use it to publish typed Layer-2 pages (`entities/`, `concepts/`, `comparisons/`, `queries/`, `meta/`) using the same CAS protocol.
+   - When those tools are **absent** from the live tool list (e.g. server is captures-only): do not call them or claim they exist. If `$VAULT/.WIKI_GIT_FROZEN` exists, fall back to capturing a close note via `wiki_capture` or STOP. Work-item close remains unavailable on the frozen leaf without `wiki_workitem_write`. Do not `git commit` / `wiki-push` against `~/wiki`.
 
 ## Reads
 

package/skills/skills/using-skillwiki/SKILL.md

@@ -170,8 +170,9 @@ If the vault has `.WIKI_GIT_FROZEN`:
 | Intent | Allowed? | How |
 |---|---|---|
 | Capture note/idea/bug/task | Yes | HTTP MCP `wiki_capture` / `wiki_log_append` |
-| Close or mutate a work item (`projects/*/work/**`, `knowledge.md`) | **No** until Tier 2 | Do not `page publish` or git commit. Capture a close note via MCP or STOP. |
-| `wiki-sync` push/commit | **No** | GitHub is sg01 `wiki-snapshot`. |
+| Close or mutate a work item (`projects/*/work/**`, `knowledge.md`) | Conditional | If live MCP tools include `wiki_workitem_write`, mutate/close via MCP CAS; if absent, capture a close note via MCP `wiki_capture` or STOP. Never local-write. |
+| Publish typed Layer-2 page (`concepts/`, `queries/`, etc.) | Conditional | If live MCP tools include `wiki_page_publish`, publish via MCP CAS; if absent, STOP. Do not run local `skillwiki page publish`. |
+| `wiki-sync` push/commit | **No** | Git fail-closed. GitHub is sg01 `wiki-snapshot`. |
 | Read local `~/wiki` | Yes | Mirror reads only |
 | `/wiki-add-task <text>` | You're in an interactive session on an authoring host | Creates `raw/transcripts/YYYY-MM-DD-{type}-{slug}.md` with ad-hoc capture frontmatter |
 | Filesystem drop | You're NOT in a Claude session (Obsidian, editor, sync) on an authoring host | Create a new `.md` file in `raw/transcripts/` — dev-loop discovers it on next cycle; do not edit it after capture |
@@ -245,7 +246,7 @@ Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `path`, `lang
 Optional read-only MCP (`skillwiki mcp`) exposes pending/compile/review list tools. Do not use MCP for compile claim, publish, or review writes.
 `skillwiki claim` binds a transcript to a work item only through an exact `raw/transcripts/...` path in `source:` / `sources:` / `closes:`. A `--project` that contradicts the capture's explicit project is rejected. `skillwiki stale --project` uses exact normalized slugs, not substring matching. `skillwiki claims audit` is the read-only integrity report for duplicate, malformed, dangling, cross-project, and unbacked claims; it never rewrites captures or work items.
 
-Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes the nonblocking source-lifecycle backlog. Pending captures are informational and do not make health fail. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only. Run `skillwiki config list` to see current configuration.
+Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes the nonblocking source-lifecycle backlog. Pending captures are informational and do not make health fail. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only, including HTTP MCP URL/auth presence and the frozen-leaf write path. Pass `--check-mcp` for a live initialize handshake and pin/tool-list lag; the default doctor path does not contact HTTP MCP. There is no second MCP admin skill. Run `skillwiki config list` to see current configuration.
 
 ## Runtime Host Context and Fleet Freshness
 Resolve the active project vault with `skillwiki path` first. Then pass that exact path to `skillwiki --human fleet context <vault>` for host identity and safety guidance. `fleet context` is authoritative for host identity. It overrides stale injected SessionStart context, remembered workspace context, and prior conversation summaries. `fleet context` is local and network-free; it reports `identity_status`, resolver trace, warnings, and the fact that remote freshness was not checked.

package/skills/skills/wiki-lint/SKILL.md

@@ -11,13 +11,13 @@ Standard four reads.
 ## Steps
 0. Resolve vault: `skillwiki path` (record source for context).
 - **CRITICAL**: Verify the correct vault when the user has multiple wiki instances (e.g., ~/wiki vs ~/wiki-fin). User may explicitly specify which vault to target — confirm before destructive operations.
-1. For a whole-system health report, run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail`. Read the JSON envelope from stdout or the report file. Treat `skillwiki doctor` as setup/runtime diagnostics only, not a vault-content health report.
+1. For a whole-system health report, run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail`. Read the JSON envelope from stdout or the report file. Treat `skillwiki doctor` as setup/runtime diagnostics only, not a vault-content health report. HTTP MCP URL, pin lag, handshake, and frozen-leaf write-path belong to `skillwiki doctor` (pass `--check-mcp` for the live handshake). Do not use this skill for client/plugin fleet upgrades.
 2. For lint-only maintenance, run `skillwiki lint <vault> --summary`. This returns bounded bucket counts, capped examples, and `details_command` hints without full item arrays.
 3. Drill into important buckets with `skillwiki lint <vault> --only <bucket>` when examples are insufficient for remediation.
 4. Reason over findings; present grouped by severity with concrete suggested actions per kind. If the CLI was recently updated with new lint checks, re-running lint on the full vault may flag pre-existing pages that predate the new rule — treat these as legitimate findings, not false positives.
 5. Treat `sensitive_content` as a security error. Drill down with `skillwiki lint <vault> --only sensitive_content --human`; never print the secret value. Raw findings are report/quarantine-only: `--fix` must not redact, rewrite, or recompute existing raw evidence. Maintained-page repairs may proceed only through their approved write workflow.
 6. If `log_rotate_needed` is present and the user consents, run `skillwiki log-rotate <vault> --apply`. Otherwise leave alone.
-7. **Post-migration verification**: If the user recently migrated content (e.g., moved entity/concept pages to another vault), re-run `skillwiki lint <vault> --summary` and verify that broken_wikilinks count decreased. Remaining broken links for migrated content indicate pages still referencing the moved files — these should be cleaned up (remove citations or migrate the referencing pages too).
+7. **Post-migration verification**: If the user recently migrated **vault content** (e.g., moved entity/concept pages to another vault), re-run `skillwiki lint <vault> --summary` and verify that broken_wikilinks count decreased. Remaining broken links for migrated content indicate pages still referencing the moved files — these should be cleaned up (remove citations or migrate the referencing pages too). This step is content moves only — not HTTP MCP client/plugin upgrades (those use `skillwiki doctor --check-mcp`).
 8. Append a `log.md` entry summarizing lint counts only when the user asked to record the maintenance result. Do not log routine `health` reports by default.
 ## Stop conditions
 None — lint reports all findings even on per-page errors.

package/skills/skills/wiki-sync/SKILL.md

@@ -20,7 +20,7 @@ If `$VAULT/.WIKI_GIT_FROZEN` exists, **fail closed** before any stash, commit, p
 
 - Do **not** `git add`, `git commit`, `git pull`, `git push`, or `skillwiki sync push`.
 - Captures go through HTTP MCP `wiki_capture` / `wiki_log_append`.
-- Closing or mutating work items is unpublished until Tier 2 (`wiki_workitem_write` / `wiki_page_publish`). Capture a close note via MCP or STOP.
+- Work items mutate/close via MCP `wiki_workitem_write` when advertised by the live MCP server; if absent, capture a close note via MCP `wiki_capture` or STOP. Never local-write or git-commit on the frozen leaf.
 - GitHub promotion is sg01 `wiki-snapshot`, not this leaf.
 - Report the freeze marker and stop. Do not treat dirty `~/wiki` as a sync job.
 
@@ -220,7 +220,7 @@ High-signal safety rule:
 Some older deployments separated a cloud-backed live vault from a Git snapshot worktree. That architecture still exists on protected snapshotters, but the snapshot worktree is **pipeline-internal**. Historical recipes that rsync into the worktree, reset it hard to origin/main, or run snapshot shell scripts by hand are obsolete and must not be copied.
 
 ## Stop conditions
-- `$VAULT/.WIKI_GIT_FROZEN` exists — frozen leaf; refuse git close/sync. Captures via HTTP MCP; work-item close waits Tier 2.
+- `$VAULT/.WIKI_GIT_FROZEN` exists — frozen leaf; refuse git close/sync. Captures via HTTP MCP; work-item close uses MCP `wiki_workitem_write` if advertised, else fallback capture or STOP.
 - `skillwiki sync status` reports `not_a_repo` — the vault is not a git repository. On protected snapshotters this is expected for the FUSE live path; do not switch to `/root/wiki-git` to force a push.
 - Lint errors are found before a push — do not push until resolved.
 - `git push` or `git pull` fails with a network error — report and stop.

package/skills/skillwiki-mcp/SKILL.md

@@ -22,13 +22,20 @@ SkillWiki captures are HTTP MCP only (`type: http`). Claude/Grok use `SKILLWIKI_
 - Never auto-source `mcp.env` or auto-write `~/.cursor/mcp.json`, Grok `config.toml`, or `mcp.env`.
 - Never print the bearer token.
 
-## Writes (captures-only)
+## Upgrade / migration
+
+Remotes still on a pre-HTTP-MCP plugin or CLI must upgrade the plugin channel (and the CLI where that host has one), then start a **new session** — plugin instructions do not hot-swap. The operator check is the same `skillwiki doctor` as metal: default rows cover URL/auth presence and frozen-leaf write-path; `skillwiki doctor --check-mcp` does the live initialize handshake. Do not invent a second admin skill or HTTP MCP admin tool. `wiki_status` remains daemon health only.
+
+## Writes
 
 On leaf hosts, wiki captures go through MCP. Do **not** write `raw/transcripts/` or `log.md` as local files.
 
 1. Call MCP `wiki_capture` with `kind` (`task` | `idea` | `bug` | `note`), `project`, `title`, and `content`. Optional `agent_note`.
 2. Call MCP `wiki_log_append` when a structural `log.md` line is needed. Pass append-only `content`. Do not rewrite log history.
-3. Write surface is captures-only. Do not call unpublished Tier 2 tools (`wiki_workitem_write`, `wiki_page_publish`). Those tools are not on the live daemon. Work-item close is not available from this MCP. Do not `git commit` / `wiki-push` against `~/wiki` for these captures. If `$VAULT/.WIKI_GIT_FROZEN` exists, that freeze is the reason nearby agents cannot close wiki work until Tier 2 ships.
+3. **Feature-detect work-item and page-publish tools**:
+   - When the server advertises `wiki_workitem_write`: use it to create, mutate, or close work items under `projects/<slug>/work/**` or update `projects/<slug>/knowledge.md`. Pass `path`, `content`, and `base_sha256` of existing bytes (from `wiki_read_page` or local mirror). On `FILE_CHANGED`, re-read and retry once.
+   - When the server advertises `wiki_page_publish`: use it to publish typed Layer-2 pages (`entities/`, `concepts/`, `comparisons/`, `queries/`, `meta/`) using the same CAS protocol.
+   - When those tools are **absent** from the live tool list (e.g. server is captures-only): do not call them or claim they exist. If `$VAULT/.WIKI_GIT_FROZEN` exists, fall back to capturing a close note via `wiki_capture` or STOP. Work-item close remains unavailable on the frozen leaf without `wiki_workitem_write`. Do not `git commit` / `wiki-push` against `~/wiki`.
 
 ## Reads
 

package/skills/using-skillwiki/SKILL.md

@@ -170,8 +170,9 @@ If the vault has `.WIKI_GIT_FROZEN`:
 | Intent | Allowed? | How |
 |---|---|---|
 | Capture note/idea/bug/task | Yes | HTTP MCP `wiki_capture` / `wiki_log_append` |
-| Close or mutate a work item (`projects/*/work/**`, `knowledge.md`) | **No** until Tier 2 | Do not `page publish` or git commit. Capture a close note via MCP or STOP. |
-| `wiki-sync` push/commit | **No** | GitHub is sg01 `wiki-snapshot`. |
+| Close or mutate a work item (`projects/*/work/**`, `knowledge.md`) | Conditional | If live MCP tools include `wiki_workitem_write`, mutate/close via MCP CAS; if absent, capture a close note via MCP `wiki_capture` or STOP. Never local-write. |
+| Publish typed Layer-2 page (`concepts/`, `queries/`, etc.) | Conditional | If live MCP tools include `wiki_page_publish`, publish via MCP CAS; if absent, STOP. Do not run local `skillwiki page publish`. |
+| `wiki-sync` push/commit | **No** | Git fail-closed. GitHub is sg01 `wiki-snapshot`. |
 | Read local `~/wiki` | Yes | Mirror reads only |
 | `/wiki-add-task <text>` | You're in an interactive session on an authoring host | Creates `raw/transcripts/YYYY-MM-DD-{type}-{slug}.md` with ad-hoc capture frontmatter |
 | Filesystem drop | You're NOT in a Claude session (Obsidian, editor, sync) on an authoring host | Create a new `.md` file in `raw/transcripts/` — dev-loop discovers it on next cycle; do not edit it after capture |
@@ -245,7 +246,7 @@ Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `path`, `lang
 Optional read-only MCP (`skillwiki mcp`) exposes pending/compile/review list tools. Do not use MCP for compile claim, publish, or review writes.
 `skillwiki claim` binds a transcript to a work item only through an exact `raw/transcripts/...` path in `source:` / `sources:` / `closes:`. A `--project` that contradicts the capture's explicit project is rejected. `skillwiki stale --project` uses exact normalized slugs, not substring matching. `skillwiki claims audit` is the read-only integrity report for duplicate, malformed, dangling, cross-project, and unbacked claims; it never rewrites captures or work items.
 
-Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes the nonblocking source-lifecycle backlog. Pending captures are informational and do not make health fail. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only. Run `skillwiki config list` to see current configuration.
+Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes the nonblocking source-lifecycle backlog. Pending captures are informational and do not make health fail. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only, including HTTP MCP URL/auth presence and the frozen-leaf write path. Pass `--check-mcp` for a live initialize handshake and pin/tool-list lag; the default doctor path does not contact HTTP MCP. There is no second MCP admin skill. Run `skillwiki config list` to see current configuration.
 
 ## Runtime Host Context and Fleet Freshness
 Resolve the active project vault with `skillwiki path` first. Then pass that exact path to `skillwiki --human fleet context <vault>` for host identity and safety guidance. `fleet context` is authoritative for host identity. It overrides stale injected SessionStart context, remembered workspace context, and prior conversation summaries. `fleet context` is local and network-free; it reports `identity_status`, resolver trace, warnings, and the fact that remote freshness was not checked.

package/skills/wiki-lint/SKILL.md

@@ -11,13 +11,13 @@ Standard four reads.
 ## Steps
 0. Resolve vault: `skillwiki path` (record source for context).
 - **CRITICAL**: Verify the correct vault when the user has multiple wiki instances (e.g., ~/wiki vs ~/wiki-fin). User may explicitly specify which vault to target — confirm before destructive operations.
-1. For a whole-system health report, run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail`. Read the JSON envelope from stdout or the report file. Treat `skillwiki doctor` as setup/runtime diagnostics only, not a vault-content health report.
+1. For a whole-system health report, run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail`. Read the JSON envelope from stdout or the report file. Treat `skillwiki doctor` as setup/runtime diagnostics only, not a vault-content health report. HTTP MCP URL, pin lag, handshake, and frozen-leaf write-path belong to `skillwiki doctor` (pass `--check-mcp` for the live handshake). Do not use this skill for client/plugin fleet upgrades.
 2. For lint-only maintenance, run `skillwiki lint <vault> --summary`. This returns bounded bucket counts, capped examples, and `details_command` hints without full item arrays.
 3. Drill into important buckets with `skillwiki lint <vault> --only <bucket>` when examples are insufficient for remediation.
 4. Reason over findings; present grouped by severity with concrete suggested actions per kind. If the CLI was recently updated with new lint checks, re-running lint on the full vault may flag pre-existing pages that predate the new rule — treat these as legitimate findings, not false positives.
 5. Treat `sensitive_content` as a security error. Drill down with `skillwiki lint <vault> --only sensitive_content --human`; never print the secret value. Raw findings are report/quarantine-only: `--fix` must not redact, rewrite, or recompute existing raw evidence. Maintained-page repairs may proceed only through their approved write workflow.
 6. If `log_rotate_needed` is present and the user consents, run `skillwiki log-rotate <vault> --apply`. Otherwise leave alone.
-7. **Post-migration verification**: If the user recently migrated content (e.g., moved entity/concept pages to another vault), re-run `skillwiki lint <vault> --summary` and verify that broken_wikilinks count decreased. Remaining broken links for migrated content indicate pages still referencing the moved files — these should be cleaned up (remove citations or migrate the referencing pages too).
+7. **Post-migration verification**: If the user recently migrated **vault content** (e.g., moved entity/concept pages to another vault), re-run `skillwiki lint <vault> --summary` and verify that broken_wikilinks count decreased. Remaining broken links for migrated content indicate pages still referencing the moved files — these should be cleaned up (remove citations or migrate the referencing pages too). This step is content moves only — not HTTP MCP client/plugin upgrades (those use `skillwiki doctor --check-mcp`).
 8. Append a `log.md` entry summarizing lint counts only when the user asked to record the maintenance result. Do not log routine `health` reports by default.
 ## Stop conditions
 None — lint reports all findings even on per-page errors.

package/skills/wiki-sync/SKILL.md

@@ -20,7 +20,7 @@ If `$VAULT/.WIKI_GIT_FROZEN` exists, **fail closed** before any stash, commit, p
 
 - Do **not** `git add`, `git commit`, `git pull`, `git push`, or `skillwiki sync push`.
 - Captures go through HTTP MCP `wiki_capture` / `wiki_log_append`.
-- Closing or mutating work items is unpublished until Tier 2 (`wiki_workitem_write` / `wiki_page_publish`). Capture a close note via MCP or STOP.
+- Work items mutate/close via MCP `wiki_workitem_write` when advertised by the live MCP server; if absent, capture a close note via MCP `wiki_capture` or STOP. Never local-write or git-commit on the frozen leaf.
 - GitHub promotion is sg01 `wiki-snapshot`, not this leaf.
 - Report the freeze marker and stop. Do not treat dirty `~/wiki` as a sync job.
 
@@ -220,7 +220,7 @@ High-signal safety rule:
 Some older deployments separated a cloud-backed live vault from a Git snapshot worktree. That architecture still exists on protected snapshotters, but the snapshot worktree is **pipeline-internal**. Historical recipes that rsync into the worktree, reset it hard to origin/main, or run snapshot shell scripts by hand are obsolete and must not be copied.
 
 ## Stop conditions
-- `$VAULT/.WIKI_GIT_FROZEN` exists — frozen leaf; refuse git close/sync. Captures via HTTP MCP; work-item close waits Tier 2.
+- `$VAULT/.WIKI_GIT_FROZEN` exists — frozen leaf; refuse git close/sync. Captures via HTTP MCP; work-item close uses MCP `wiki_workitem_write` if advertised, else fallback capture or STOP.
 - `skillwiki sync status` reports `not_a_repo` — the vault is not a git repository. On protected snapshotters this is expected for the FUSE live path; do not switch to `/root/wiki-git` to force a push.
 - Lint errors are found before a push — do not push until resolved.
 - `git push` or `git pull` fails with a network error — report and stop.