skillwiki 0.10.73 → 0.10.76

package/dist/{chunk-R5SDVKHS.js → chunk-5XT6MBWA.js}

@@ -3331,7 +3331,7 @@ function buildCliSurface() {
   program.command("lint").option("--days <n>").option("--lines <n>").option("--log-threshold <n>").option("--fix").option("--only <bucket>").option("--summary").option("--examples <n>").option("--wiki <name>");
   program.command("config");
   program.command("health").option("--wiki <name>").option("--sync <mode>").option("--no-fail").option("--out <path>").option("--examples <n>");
-  program.command("doctor").option("--check-snapshotter");
+  program.command("doctor").option("--check-snapshotter").option("--check-mcp");
   program.command("status").option("--wiki <name>");
   program.command("archive").option("--wiki <name>").option("--cascade").option("--apply").option("--approve <token>").option("--remote <remote>").option("--remote-delete").option("--max-remote-deletes <n>");
   program.command("remove").option("--wiki <name>").option("--remote <remote>").option("--remote-delete").option("--max-remote-deletes <n>").option("--reason <text>");
@@ -3360,6 +3360,7 @@ function buildCliSurface() {
   program.command("project-page");
   program.command("write-preflight").option("--command <name>").option("--dirty-threshold <n>").option("--skip-dirty").option("--prior-artifact-file <path>").option("--prior-artifact-text <text>").option("--consecutive-no-decision <n>").option("--no-decision-threshold <n>").option("--human-allow").option("--mission-kind <kind>").option("--skip-mission").option("--project <slug>").option("--capture-day <date>").option("--capture-budget <n>").option("--severity <level>").option("--skip-budget").option("--checks <list>").option("--wiki <name>");
   program.command("mcp");
+  program.command("mcp-auth");
   const graphCmd = program.commands.find((c) => c.name() === "graph");
   graphCmd.command("build").option("--out <path>").option("--wiki <name>");
   const vectorsCmd = program.commands.find((c) => c.name() === "vectors");
@@ -3436,6 +3437,8 @@ function buildCliSurface() {
   fleetCmd.command("validate");
   fleetCmd.command("context").option("--file <path>").option("--host-id <id>");
   fleetCmd.command("health").option("--file <path>").option("--host-id <id>").option("--json");
+  const mcpAuth = program.commands.find((c) => c.name() === "mcp-auth");
+  mcpAuth.command("issue-host").requiredOption("--host-id <id>").option("--map <path>").option("--write");
   const surface = /* @__PURE__ */ new Map();
   const rootFlags = new Set(program.options.map((o) => o.long ?? o.short).filter((f) => f != null));
   function walk(cmd, prefix, parentFlags) {

package/dist/{chunk-YKVJ2A3O.js → chunk-CLF6DZ6C.js}

@@ -40,7 +40,7 @@ import {
   snapshotterAliasForLocalHost,
   toUndirectedWeighted,
   writeDotenv
-} from "./chunk-R5SDVKHS.js";
+} from "./chunk-5XT6MBWA.js";
 import {
   atomicWriteText,
   prepareTypedPage
@@ -1079,7 +1079,7 @@ async function runConfigPath(input) {
 }
 
 // src/doctor/runner.ts
-import { existsSync as existsSync17 } from "fs";
+import { existsSync as existsSync18 } from "fs";
 
 // src/doctor/probes/environment.ts
 import { existsSync as existsSync4, lstatSync, readlinkSync } from "fs";
@@ -3981,6 +3981,204 @@ var dsStoreNoiseProbe = {
   }
 };
 
+// src/doctor/probes/mcp-handshake.ts
+import { existsSync as existsSync17 } from "fs";
+import { join as join20 } from "path";
+var DEFAULT_MCP_URL = "https://wiki.karldigi.dev/mcp";
+var URL_ENV = "SKILLWIKI_MCP_URL";
+var TOKEN_ENV = "SKILLWIKI_MCP_TOKEN";
+function mcpEnv(ctx) {
+  return ctx.input.env ?? process.env;
+}
+function checkMcpUrl(ctx) {
+  const env = mcpEnv(ctx);
+  const override = env[URL_ENV];
+  if (typeof override === "string" && override.trim().length > 0) {
+    return check("pass", "mcp_url_configured", "HTTP MCP URL", "configured via env override");
+  }
+  return check(
+    "pass",
+    "mcp_url_configured",
+    "HTTP MCP URL",
+    `plugin default ${DEFAULT_MCP_URL}`
+  );
+}
+function checkMcpCredential(ctx) {
+  const env = mcpEnv(ctx);
+  const value = env[TOKEN_ENV];
+  if (typeof value === "string" && value.trim().length > 0) {
+    return check("pass", "mcp_credential_present", "HTTP MCP auth", "present");
+  }
+  return check(
+    "warn",
+    "mcp_credential_present",
+    "HTTP MCP auth",
+    "not set \u2014 set in process env or host Configure (value not shown)"
+  );
+}
+function checkFrozenLeafWritePath(ctx) {
+  const vault = ctx.resolvedPath;
+  if (!vault || !existsSync17(join20(vault, ".WIKI_GIT_FROZEN"))) {
+    return check(
+      "pass",
+      "mcp_frozen_leaf_write_path",
+      "HTTP MCP write path",
+      "not a frozen leaf"
+    );
+  }
+  return check(
+    "pass",
+    "mcp_frozen_leaf_write_path",
+    "HTTP MCP write path",
+    "frozen leaf \u2014 writes must use HTTP MCP, not vault git or raw/transcripts/"
+  );
+}
+var HANDSHAKE_ID = "mcp_handshake";
+var HANDSHAKE_LABEL = "HTTP MCP handshake";
+var WORKITEM_TOOL = "wiki_workitem_write";
+function parseCoreSemver(version) {
+  const m = version.match(/^(\d+)\.(\d+)\.(\d+)/);
+  if (!m) return null;
+  return { major: Number.parseInt(m[1], 10), minor: Number.parseInt(m[2], 10), patch: Number.parseInt(m[3], 10) };
+}
+function versionLessThan(a, b) {
+  const pa = parseCoreSemver(a);
+  const pb = parseCoreSemver(b);
+  if (!pa || !pb) return false;
+  if (pa.major !== pb.major) return pa.major < pb.major;
+  if (pa.minor !== pb.minor) return pa.minor < pb.minor;
+  return pa.patch < pb.patch;
+}
+function redactSecret(detail, secret) {
+  if (!secret || secret.length === 0 || !detail.includes(secret)) return detail;
+  return detail.split(secret).join("[REDACTED]");
+}
+function handshakeRow(status, detail, secret) {
+  return check(status, HANDSHAKE_ID, HANDSHAKE_LABEL, redactSecret(detail, secret));
+}
+function parseMcpBody(text) {
+  const trimmed = text.trim();
+  if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
+    return JSON.parse(trimmed);
+  }
+  for (const line of trimmed.split(/\r?\n/)) {
+    const prefix = line.startsWith("data:") ? line.slice(5).trim() : "";
+    if (prefix.startsWith("{")) return JSON.parse(prefix);
+  }
+  throw new Error("non-JSON MCP body");
+}
+function jsonRpcResult(body) {
+  if (typeof body !== "object" || body === null) {
+    throw new Error("invalid JSON-RPC body");
+  }
+  const rec = body;
+  if (rec.error) {
+    throw new Error(typeof rec.error.message === "string" ? rec.error.message : "JSON-RPC error");
+  }
+  if (typeof rec.result !== "object" || rec.result === null) {
+    throw new Error("missing JSON-RPC result");
+  }
+  return rec.result;
+}
+async function mcpJsonRpc(fetchFn, url, token, method, id, params, sessionId) {
+  const headers = {
+    Authorization: `Bearer ${token}`,
+    "Content-Type": "application/json",
+    Accept: "application/json, text/event-stream"
+  };
+  if (sessionId) headers["mcp-session-id"] = sessionId;
+  const res = await fetchFn(url, {
+    method: "POST",
+    headers,
+    body: JSON.stringify({ jsonrpc: "2.0", id, method, params })
+  });
+  if (!res.ok) {
+    throw new Error(`HTTP ${res.status}`);
+  }
+  const nextSession = res.headers.get("mcp-session-id") ?? sessionId;
+  const result = jsonRpcResult(parseMcpBody(await res.text()));
+  return { result, sessionId: nextSession ?? void 0 };
+}
+function toolNames(result) {
+  const tools = result.tools;
+  if (!Array.isArray(tools)) return [];
+  return tools.map((t) => typeof t === "object" && t !== null && typeof t.name === "string" ? t.name : "").filter((name) => name.length > 0);
+}
+async function checkMcpHandshake(ctx) {
+  if (!ctx.input.checkMcp) {
+    return handshakeRow("pass", "not requested \u2014 check skipped");
+  }
+  const env = mcpEnv(ctx);
+  const url = typeof env[URL_ENV] === "string" && env[URL_ENV].trim().length > 0 ? env[URL_ENV].trim() : DEFAULT_MCP_URL;
+  const token = typeof env[TOKEN_ENV] === "string" ? env[TOKEN_ENV] : "";
+  if (token.trim().length === 0) {
+    return handshakeRow("error", "auth not set \u2014 handshake not attempted (value not shown)");
+  }
+  const fetchFn = ctx.input.mcpFetch ?? globalThis.fetch;
+  const shipped = ctx.input.currentVersion;
+  try {
+    const init = await mcpJsonRpc(
+      fetchFn,
+      url,
+      token,
+      "initialize",
+      1,
+      {
+        protocolVersion: "2025-11-25",
+        capabilities: {},
+        clientInfo: { name: "skillwiki-doctor", version: shipped }
+      }
+    );
+    const serverInfo = init.result.serverInfo;
+    const advertised = typeof serverInfo === "object" && serverInfo !== null && typeof serverInfo.version === "string" ? serverInfo.version : "";
+    if (!advertised) {
+      return handshakeRow("error", "handshake failed \u2014 missing serverInfo.version", token);
+    }
+    const listed = await mcpJsonRpc(
+      fetchFn,
+      url,
+      token,
+      "tools/list",
+      2,
+      {},
+      init.sessionId
+    );
+    const tools = toolNames(listed.result);
+    const frozen = Boolean(ctx.resolvedPath && existsSync17(join20(ctx.resolvedPath, ".WIKI_GIT_FROZEN")));
+    if (frozen && !tools.includes(WORKITEM_TOOL)) {
+      return handshakeRow(
+        "error",
+        `captures-only tool list (${tools.length} tools, missing ${WORKITEM_TOOL}) on frozen leaf \u2014 advertised ${advertised}`,
+        token
+      );
+    }
+    if (versionLessThan(advertised, shipped)) {
+      return handshakeRow(
+        "warn",
+        `advertised ${advertised} lags shipped ${shipped} (${tools.length} tools)`,
+        token
+      );
+    }
+    return handshakeRow("pass", `advertised ${advertised}, ${tools.length} tools`, token);
+  } catch (e) {
+    const raw = e instanceof Error ? e.message : String(e);
+    const safe = redactSecret(raw, token);
+    return handshakeRow("error", `handshake failed \u2014 ${safe}`, token);
+  }
+}
+var mcpHandshakeProbe = {
+  id: "mcp",
+  label: "HTTP MCP",
+  async run(ctx) {
+    return [
+      checkMcpUrl(ctx),
+      checkMcpCredential(ctx),
+      checkFrozenLeafWritePath(ctx),
+      await checkMcpHandshake(ctx)
+    ];
+  }
+};
+
 // src/doctor/probes/index.ts
 var DOCTOR_PROBES = [
   environmentProbe,
@@ -3994,7 +4192,8 @@ var DOCTOR_PROBES = [
   metricsProbe,
   fuseStalenessProbe,
   activationMarkerProbe,
-  dsStoreNoiseProbe
+  dsStoreNoiseProbe,
+  mcpHandshakeProbe
 ];
 
 // src/doctor/runner.ts
@@ -4005,7 +4204,7 @@ function resolveSnapshotGitWorktree(home) {
   const configured = resolveConfiguredSnapshotWorktree(home);
   if (configured) return configured;
   const defaultPath = "/root/wiki-git";
-  return existsSync17(defaultPath) ? defaultPath : void 0;
+  return existsSync18(defaultPath) ? defaultPath : void 0;
 }
 var DoctorRunner = class {
   probes;
@@ -4101,8 +4300,8 @@ function readCliPackageJson(baseUrl = import.meta.url) {
 
 // src/utils/vault-write-gates.ts
 import { execFileSync } from "child_process";
-import { existsSync as existsSync18, readdirSync as readdirSync7, readFileSync as readFileSync13, statSync as statSync3 } from "fs";
-import { join as join20, relative as relative2 } from "path";
+import { existsSync as existsSync19, readdirSync as readdirSync7, readFileSync as readFileSync13, statSync as statSync3 } from "fs";
+import { join as join21, relative as relative2 } from "path";
 var DEFAULT_DIRTY_VOLUME_THRESHOLD = 50;
 var DEFAULT_CAPTURE_BUDGET = 20;
 var DEFAULT_NO_DECISION_STREAK = 3;
@@ -4164,7 +4363,7 @@ function measureDirtyVolume(vault) {
     is_git_repo: false,
     ...extra
   });
-  if (!existsSync18(vault) || !statSync3(vault).isDirectory()) {
+  if (!existsSync19(vault) || !statSync3(vault).isDirectory()) {
     return empty();
   }
   const gitDir = git(vault, ["rev-parse", "--absolute-git-dir"]);
@@ -4202,8 +4401,8 @@ function measureDirtyVolume(vault) {
     if (!rel) continue;
     if (code === "??") {
       untracked += 1;
-      const abs = join20(vault, rel);
-      if (existsSync18(abs) && statSync3(abs).isDirectory()) {
+      const abs = join21(vault, rel);
+      if (existsSync19(abs) && statSync3(abs).isDirectory()) {
         const files = listFilesRecursive(abs);
         expanded += files.length;
         addBucket(rel, files.length);
@@ -4239,7 +4438,7 @@ function listFilesRecursive(dir) {
   }
   for (const name of entries) {
     if (name === ".git") continue;
-    const p = join20(dir, name);
+    const p = join21(dir, name);
     try {
       const st = statSync3(p);
       if (st.isDirectory()) out.push(...listFilesRecursive(p));
@@ -4334,7 +4533,7 @@ var CAPTURE_HYGIENE_CONTRACT = `After each productive cycle (or when daily captu
 function listProjectDayCaptures(vault, project, day) {
   const found = [];
   const slug = project.replace(/^\[\[/, "").replace(/\]\]$/, "").trim();
-  if (!slug || !existsSync18(vault)) return found;
+  if (!slug || !existsSync19(vault)) return found;
   const consider = (abs, rel) => {
     if (!rel.endsWith(".md")) return;
     const base = rel.split(/[/\\]/).pop() ?? "";
@@ -4362,7 +4561,7 @@ function listProjectDayCaptures(vault, project, day) {
     }
   };
   const walk = (dir, relBase) => {
-    if (!existsSync18(dir)) return;
+    if (!existsSync19(dir)) return;
     let entries;
     try {
       entries = readdirSync7(dir);
@@ -4370,7 +4569,7 @@ function listProjectDayCaptures(vault, project, day) {
       return;
     }
     for (const name of entries) {
-      const abs = join20(dir, name);
+      const abs = join21(dir, name);
       const rel = relBase ? `${relBase}/${name}` : name;
       try {
         const st = statSync3(abs);
@@ -4380,16 +4579,16 @@ function listProjectDayCaptures(vault, project, day) {
       }
     }
   };
-  walk(join20(vault, "raw", "transcripts"), "raw/transcripts");
-  walk(join20(vault, "projects", slug, "raw", "transcripts"), `projects/${slug}/raw/transcripts`);
-  walk(join20(vault, "projects", slug, "requirements"), `projects/${slug}/requirements`);
-  const workRoot = join20(vault, "projects", slug, "work");
-  if (existsSync18(workRoot)) {
+  walk(join21(vault, "raw", "transcripts"), "raw/transcripts");
+  walk(join21(vault, "projects", slug, "raw", "transcripts"), `projects/${slug}/raw/transcripts`);
+  walk(join21(vault, "projects", slug, "requirements"), `projects/${slug}/requirements`);
+  const workRoot = join21(vault, "projects", slug, "work");
+  if (existsSync19(workRoot)) {
     try {
       for (const name of readdirSync7(workRoot)) {
         if (!name.startsWith(day)) continue;
         if (!/investigate|pilot-q|research|cycle|dev-loop/.test(name)) continue;
-        const abs = join20(workRoot, name);
+        const abs = join21(workRoot, name);
         if (statSync3(abs).isDirectory()) {
           for (const f of listFilesRecursive(abs)) {
             const rel = relative2(vault, f).replace(/\\/g, "/");
@@ -4434,7 +4633,7 @@ function evaluateCaptureBudget(input) {
   return { allowed: true, reason: "under_budget", report };
 }
 function runWritePreflight(input) {
-  if (!input.vault || !existsSync18(input.vault)) {
+  if (!input.vault || !existsSync19(input.vault)) {
     return err(GateError.VAULT_PATH_INVALID, { path: input.vault });
   }
   const want = new Set(input.checks ?? ["all"]);
@@ -4494,8 +4693,8 @@ function runWritePreflight(input) {
 
 // src/commands/observe.ts
 import { mkdir as mkdir3, writeFile as writeFile2 } from "fs/promises";
-import { existsSync as existsSync19, statSync as statSync4 } from "fs";
-import { join as join21 } from "path";
+import { existsSync as existsSync20, statSync as statSync4 } from "fs";
+import { join as join22 } from "path";
 import { createHash as createHash2 } from "crypto";
 var ALLOWED_KINDS = /* @__PURE__ */ new Set(["note", "bug", "task", "idea", "session-log"]);
 function slugify(text) {
@@ -4518,7 +4717,7 @@ async function runObserve(input) {
       result: err("SCHEME_REJECTED", { message: "Text must not be empty" })
     };
   }
-  if (!existsSync19(input.vault) || !statSync4(input.vault).isDirectory()) {
+  if (!existsSync20(input.vault) || !statSync4(input.vault).isDirectory()) {
     return {
       exitCode: ExitCode.VAULT_PATH_INVALID,
       result: err("VAULT_PATH_INVALID", { path: input.vault })
@@ -4544,7 +4743,7 @@ async function runObserve(input) {
       };
     }
   }
-  const transcriptsDir = join21(input.vault, "raw", "transcripts");
+  const transcriptsDir = join22(input.vault, "raw", "transcripts");
   try {
     await mkdir3(transcriptsDir, { recursive: true });
   } catch {
@@ -4556,7 +4755,7 @@ async function runObserve(input) {
   const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
   const slug = slugify(input.text);
   const fileName = `${today}-observation-${slug}.md`;
-  const filePath = join21(transcriptsDir, fileName);
+  const filePath = join22(transcriptsDir, fileName);
   const body = `
 ${input.text.trim()}
 `;
@@ -4598,7 +4797,7 @@ ${input.text.trim()}
 // src/commands/memory.ts
 import { createHash as createHash3 } from "crypto";
 import { mkdir as mkdir4, readFile as readFile7, readdir as readdir2, stat as stat2, writeFile as writeFile3 } from "fs/promises";
-import { basename as basename2, extname, join as join22, relative as relative3, sep as sep2 } from "path";
+import { basename as basename2, extname, join as join23, relative as relative3, sep as sep2 } from "path";
 
 // src/utils/memory-authority.ts
 var TIER_RANK = {
@@ -4717,8 +4916,8 @@ async function runMemoryIndex(input) {
   }
   const generatedAt = (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "Z");
   const relCachePath = memoryCacheRelPath(input.project);
-  const absCachePath = join22(input.vault, relCachePath);
-  await mkdir4(join22(input.vault, ".skillwiki", "memory", input.project), { recursive: true });
+  const absCachePath = join23(input.vault, relCachePath);
+  await mkdir4(join23(input.vault, ".skillwiki", "memory", input.project), { recursive: true });
   await writeFile3(absCachePath, `${JSON.stringify({
     generated_at: generatedAt,
     project: input.project,
@@ -4910,7 +5109,7 @@ async function buildMemoryIndexState(pages, project) {
 }
 async function checkMemoryIndex(vault, project, current) {
   const relCachePath = memoryCacheRelPath(project);
-  const cacheText = await readIfExists(join22(vault, relCachePath));
+  const cacheText = await readIfExists(join23(vault, relCachePath));
   if (!cacheText) {
     return {
       ok: true,
@@ -5319,7 +5518,7 @@ async function walkImportFiles(dir, out) {
   const entries = await readdir2(dir, { withFileTypes: true });
   for (const entry of entries) {
     if (entry.name === ".git" || entry.name === "node_modules") continue;
-    const path = join22(dir, entry.name);
+    const path = join23(dir, entry.name);
     if (entry.isDirectory()) {
       await walkImportFiles(path, out);
     } else if (entry.isFile() && isImportCandidate(path)) {
@@ -5386,8 +5585,8 @@ async function writeImportCapture(vault, entry, today) {
   const content = hiddenString(entry, "__content");
   const project = hiddenString(entry, "__project");
   const relPath = await availableImportPath(vault, entry.proposed_path);
-  const absPath = join22(vault, relPath);
-  await mkdir4(join22(vault, "raw", "transcripts"), { recursive: true });
+  const absPath = join23(vault, relPath);
+  await mkdir4(join23(vault, "raw", "transcripts"), { recursive: true });
   await writeFile3(absPath, renderImportCapture(entry, content, project, today), "utf8");
   const validation = await runValidate({ file: absPath });
   return {
@@ -5403,7 +5602,7 @@ async function availableImportPath(vault, proposed) {
   const stem = proposed.slice(0, -ext.length);
   let candidate = proposed;
   let i = 2;
-  while (await readIfExists(join22(vault, candidate))) {
+  while (await readIfExists(join23(vault, candidate))) {
     candidate = `${stem}-${i}${ext}`;
     i++;
   }
@@ -5588,10 +5787,10 @@ function memoryCacheRelPath(project) {
 }
 async function readMemoryCache(vault, project) {
   if (project) {
-    const projectCache = await readIfExists(join22(vault, memoryCacheRelPath(project)));
+    const projectCache = await readIfExists(join23(vault, memoryCacheRelPath(project)));
     if (projectCache) return projectCache;
   }
-  return readIfExists(join22(vault, ".skillwiki", "memory-topics.json"));
+  return readIfExists(join23(vault, ".skillwiki", "memory-topics.json"));
 }
 function dedupePages(pages) {
   const seen = /* @__PURE__ */ new Set();
@@ -5683,7 +5882,7 @@ function slugify2(value) {
 
 // src/commands/query.ts
 import { readFile as readFile9, stat as stat4 } from "fs/promises";
-import { join as join24 } from "path";
+import { join as join25 } from "path";
 
 // src/utils/rrf.ts
 var RRF_K = 60;
@@ -5699,8 +5898,8 @@ function fuseRankings(lists, k = RRF_K) {
 
 // src/utils/vector-index.ts
 import { mkdir as mkdir5, readFile as readFile8, stat as stat3 } from "fs/promises";
-import { join as join23 } from "path";
-import { existsSync as existsSync20 } from "fs";
+import { join as join24 } from "path";
+import { existsSync as existsSync21 } from "fs";
 var VECTOR_INDEX_REL = ".skillwiki/vectors/index.json";
 var VECTOR_INDEX_SCHEMA = "skillwiki-tfidf-index/v1";
 function tokenize(text) {
@@ -5714,7 +5913,7 @@ function extractPageTokens(text) {
   return tokenize(`${title} ${body}`);
 }
 function vectorIndexPath(vault) {
-  return join23(vault, ...VECTOR_INDEX_REL.split("/"));
+  return join24(vault, ...VECTOR_INDEX_REL.split("/"));
 }
 function termFreq(tokens) {
   const tf = /* @__PURE__ */ new Map();
@@ -5769,7 +5968,7 @@ async function buildVectorIndex(vault, now = (/* @__PURE__ */ new Date()).toISOS
     docs
   };
   const dest = vectorIndexPath(vault);
-  await mkdir5(join23(vault, ".skillwiki", "vectors"), { recursive: true });
+  await mkdir5(join24(vault, ".skillwiki", "vectors"), { recursive: true });
   await atomicWriteText(dest, `${JSON.stringify(index)}
 `);
   return ok(index);
@@ -5812,7 +6011,7 @@ async function reindexPageInVectorIndex(vault, pageRelPath, now = (/* @__PURE__
   if (!normalizedPage.endsWith(".md")) {
     return err("USAGE", { message: `Page must be a .md file: ${pageRelPath}` });
   }
-  const absPath = join23(vault, ...normalizedPage.split("/"));
+  const absPath = join24(vault, ...normalizedPage.split("/"));
   let text;
   try {
     text = await readFile8(absPath, "utf8");
@@ -5897,7 +6096,7 @@ async function reindexPageInVectorIndex(vault, pageRelPath, now = (/* @__PURE__
     }
   }
   const dest = vectorIndexPath(vault);
-  await mkdir5(join23(vault, ".skillwiki", "vectors"), { recursive: true });
+  await mkdir5(join24(vault, ".skillwiki", "vectors"), { recursive: true });
   await atomicWriteText(dest, `${JSON.stringify(index)}
 `);
   return ok({
@@ -5915,8 +6114,8 @@ async function pruneVectorIndex(vault, opts) {
   const orphans = [];
   for (const docKey of Object.keys(index.docs)) {
     const normalizedKey = docKey.split(/\\|\//).join("/");
-    const absPath = join23(vault, ...normalizedKey.split("/"));
-    if (!existsSync20(absPath)) {
+    const absPath = join24(vault, ...normalizedKey.split("/"));
+    if (!existsSync21(absPath)) {
       orphans.push(normalizedKey);
     }
   }
@@ -5962,7 +6161,7 @@ async function pruneVectorIndex(vault, opts) {
       index.docs[docKey] = toTfIdf(termFreq(tokens), index.df, newPageCount);
     } else {
       try {
-        const text = await readFile8(join23(vault, ...docKey.split("/")), "utf8");
+        const text = await readFile8(join24(vault, ...docKey.split("/")), "utf8");
         const tokens = extractPageTokens(text);
         index.docs[docKey] = toTfIdf(termFreq(tokens), index.df, newPageCount);
       } catch {
@@ -5972,7 +6171,7 @@ async function pruneVectorIndex(vault, opts) {
   }
   if (!opts?.dryRun) {
     const dest = vectorIndexPath(vault);
-    await mkdir5(join23(vault, ".skillwiki", "vectors"), { recursive: true });
+    await mkdir5(join24(vault, ".skillwiki", "vectors"), { recursive: true });
     await atomicWriteText(dest, `${JSON.stringify(index)}
 `);
   }
@@ -6176,7 +6375,7 @@ function computeKeywordScore(terms, title, tags, body) {
   return score;
 }
 async function loadOrBuildGraph(vault) {
-  const graphPath = join24(vault, ".skillwiki", "graph.json");
+  const graphPath = join25(vault, ".skillwiki", "graph.json");
   let needsBuild = false;
   try {
     const fileStat = await stat4(graphPath);
@@ -6265,7 +6464,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { z } from "zod";
 
 // src/mcp/vault-resolve.ts
-import { join as join25, resolve as resolve4 } from "path";
+import { join as join26, resolve as resolve4 } from "path";
 
 // src/mcp/allowlist.ts
 import { resolve as resolve3, sep as sep3 } from "path";
@@ -6327,7 +6526,7 @@ async function resolveMcpVault(input) {
   return ok({ vault: vaultPath, source });
 }
 function defaultGraphOut(vault) {
-  return join25(vault, ".skillwiki", "graph.json");
+  return join26(vault, ".skillwiki", "graph.json");
 }
 
 // src/mcp/result-format.ts
@@ -6344,7 +6543,7 @@ function formatToolResult(payload) {
 // src/mcp/audit-log.ts
 import { appendFileSync, mkdirSync as mkdirSync2 } from "fs";
 import { homedir } from "os";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 function auditEnabled() {
   const v = process.env.SKILLWIKI_MCP_AUDIT;
   if (v === "0" || v === "false") return false;
@@ -6356,7 +6555,7 @@ function auditSink() {
 function auditFilePath() {
   const custom = process.env.SKILLWIKI_MCP_AUDIT_FILE;
   if (custom && custom.length > 0) return custom;
-  return join26(homedir(), ".skillwiki", "mcp-audit.jsonl");
+  return join27(homedir(), ".skillwiki", "mcp-audit.jsonl");
 }
 function auditMcpToolCall(entry) {
   if (!auditEnabled()) return;
@@ -6366,7 +6565,7 @@ function auditMcpToolCall(entry) {
     return;
   }
   const path = auditFilePath();
-  mkdirSync2(join26(path, ".."), { recursive: true });
+  mkdirSync2(join27(path, ".."), { recursive: true });
   appendFileSync(path, line, "utf8");
 }
 async function runMcpToolHandler(tool, input, fn) {
@@ -6640,7 +6839,7 @@ function registerMcpMutatingTools(server) {
 
 // src/mcp/resources.ts
 import { readFile as readFile11 } from "fs/promises";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 // src/mcp/lint-bucket.ts
@@ -6770,8 +6969,8 @@ async function fetchQueryPreview(input) {
 
 // src/mcp/graph-html.ts
 import { readFile as readFile10 } from "fs/promises";
-import { join as join27 } from "path";
-import { existsSync as existsSync21 } from "fs";
+import { join as join28 } from "path";
+import { existsSync as existsSync22 } from "fs";
 var TYPE_COLORS = {
   entities: "#e74c3c",
   concepts: "#27ae60",
@@ -6839,9 +7038,9 @@ ${nodeSvg}
   return { html, node_count: nodes.length, edge_count: edges.length, truncated };
 }
 async function fetchGraphHtmlReport(input) {
-  const graphPath = input.graphPath ?? join27(input.vault, ".skillwiki", "graph.json");
+  const graphPath = input.graphPath ?? join28(input.vault, ".skillwiki", "graph.json");
   const maxNodes = Math.min(Math.max(10, input.maxNodes ?? 120), 500);
-  if (!existsSync21(graphPath)) {
+  if (!existsSync22(graphPath)) {
     return {
       exitCode: ExitCode.FILE_NOT_FOUND,
       result: err("GRAPH_MISSING", { path: graphPath, hint: "Run skillwiki.graph_build first." })
@@ -6913,7 +7112,7 @@ async function fetchStaleSummary(input) {
 
 // src/mcp/resources.ts
 async function readVaultFile(vault, rel) {
-  return readFile11(join28(vault, rel), "utf8");
+  return readFile11(join29(vault, rel), "utf8");
 }
 async function tailLines(text, lines) {
   const parts = text.split(/\r?\n/);
@@ -6999,7 +7198,7 @@ function registerMcpResources(server) {
       if (!v.ok) {
         return { contents: [{ uri: uri.href, mimeType: "text/plain", text: JSON.stringify(v) }] };
       }
-      const path = join28(v.data.vault, ".skillwiki", "graph.json");
+      const path = join29(v.data.vault, ".skillwiki", "graph.json");
       try {
         const raw = await readFile11(path, "utf8");
         const graph = JSON.parse(raw);