skillwiki 0.10.91 → 0.10.93

package/dist/{chunk-ZUHA2EXE.js → chunk-3KEMRVWR.js}

@@ -3,11 +3,11 @@ import {
   ROOT_INDEX_SECTION_ORDER,
   atomicWriteText,
   buildRootIndexUniverse
-} from "./chunk-JHDN3FSF.js";
+} from "./chunk-C5WOEVX3.js";
 import {
   err,
   ok
-} from "./chunk-XJR3XXP5.js";
+} from "./chunk-SXNKZGNM.js";
 
 // src/utils/index-projection.ts
 import { readFile } from "fs/promises";

package/dist/{chunk-ZYVP52PM.js → chunk-BXEG5OWD.js}

@@ -6,7 +6,7 @@ import {
 import {
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-ZUHA2EXE.js";
+} from "./chunk-3KEMRVWR.js";
 import {
   CONFIG_KEYS,
   VAULT_HYGIENE_GENERATED_COMMIT_PATHS,
@@ -40,11 +40,11 @@ import {
   snapshotterAliasForLocalHost,
   toUndirectedWeighted,
   writeDotenv
-} from "./chunk-6WE7E6VB.js";
+} from "./chunk-OTESAW36.js";
 import {
   atomicWriteText,
   prepareTypedPage
-} from "./chunk-JHDN3FSF.js";
+} from "./chunk-C5WOEVX3.js";
 import {
   applySourceCompileClaim,
   applySourceCompilePublished,
@@ -57,11 +57,11 @@ import {
   planSourceCompileRelease,
   planSourceReview,
   runSourcesPending
-} from "./chunk-ECOEJABP.js";
+} from "./chunk-UDOZKMCN.js";
 import {
   eventPathFor,
   writeLogEvent
-} from "./chunk-QFRZDTJY.js";
+} from "./chunk-LTSIHHKD.js";
 import {
   CompoundSchema,
   ExitCode,
@@ -82,7 +82,7 @@ import {
   scanVault,
   splitFrontmatter,
   systemdPropertyFor
-} from "./chunk-XJR3XXP5.js";
+} from "./chunk-SXNKZGNM.js";
 
 // src/commands/log-append.ts
 import { readFile, stat } from "fs/promises";
@@ -4516,6 +4516,9 @@ function isEventLedgerPath(rel) {
   const n = rel.replace(/\\/g, "/").replace(/^\.\//, "");
   return n === "meta/log-events" || n.startsWith("meta/log-events/");
 }
+function countEventLedgerFiles(vault) {
+  return listFilesRecursive(join21(vault, "meta", "log-events")).length;
+}
 function measureDirtyVolume(vault) {
   const empty = (extra = {}) => ({
     porcelain_lines: 0,
@@ -6482,7 +6485,7 @@ async function runQuery(input) {
   }
   let pendingSources;
   if (input.includePending) {
-    const { runSourcesPending: runSourcesPending2 } = await import("./sources-A5GFRY3F.js");
+    const { runSourcesPending: runSourcesPending2 } = await import("./sources-4KCCBNCO.js");
     const pending = await runSourcesPending2({
       vault: input.vault,
       match: input.text,
@@ -7847,6 +7850,8 @@ export {
   DEFAULT_CAPTURE_BUDGET,
   DEFAULT_NO_DECISION_STREAK,
   GateError,
+  isEventLedgerPath,
+  countEventLedgerFiles,
   measureDirtyVolume,
   evaluateDirtyVolumeGate,
   CAPTURE_HYGIENE_CONTRACT,

package/dist/{chunk-JHDN3FSF.js → chunk-C5WOEVX3.js}

@@ -8,7 +8,7 @@ import {
   ok,
   scanSensitiveContent,
   scanVault
-} from "./chunk-XJR3XXP5.js";
+} from "./chunk-SXNKZGNM.js";
 
 // src/utils/atomic-write.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-QFRZDTJY.js → chunk-LTSIHHKD.js}

@@ -6,7 +6,7 @@ import {
   readPage,
   scanSensitiveContent,
   splitFrontmatter
-} from "./chunk-XJR3XXP5.js";
+} from "./chunk-SXNKZGNM.js";
 
 // src/utils/vault-path-safety.ts
 import { lstatSync, realpathSync } from "fs";

package/dist/{chunk-6WE7E6VB.js → chunk-OTESAW36.js}

@@ -2,7 +2,7 @@
 import {
   atomicWriteText,
   buildRootIndexUniverse
-} from "./chunk-JHDN3FSF.js";
+} from "./chunk-C5WOEVX3.js";
 import {
   authorizeRawOperation,
   buildSourceReferenceIndex,
@@ -22,7 +22,7 @@ import {
   resolveExistingRegularFileInsideVault,
   stripFencedBlocks,
   writeLogEvent
-} from "./chunk-QFRZDTJY.js";
+} from "./chunk-LTSIHHKD.js";
 import {
   ExitCode,
   FleetManifestSchema,
@@ -41,7 +41,7 @@ import {
   scanVault,
   splitFrontmatter,
   vaultIoConcurrency
-} from "./chunk-XJR3XXP5.js";
+} from "./chunk-SXNKZGNM.js";
 
 // src/utils/managed-write-preflight.ts
 import { existsSync as existsSync11 } from "fs";
@@ -5340,12 +5340,14 @@ async function runSyncLintDelta(input) {
 
 // src/utils/git.ts
 import { execFileSync as execFileSync2 } from "child_process";
+var GIT_OUTPUT_MAX_BUFFER = 16 * 1024 * 1024;
 function git(cwd, args, opts) {
   try {
     return execFileSync2("git", args, {
       cwd,
       encoding: "utf8",
       stdio: ["pipe", "pipe", "pipe"],
+      maxBuffer: GIT_OUTPUT_MAX_BUFFER,
       ...opts?.timeoutMs !== void 0 ? { timeout: opts.timeoutMs } : {}
     }).trim();
   } catch {
@@ -5353,7 +5355,12 @@ function git(cwd, args, opts) {
   }
 }
 function gitStrict(cwd, args) {
-  return execFileSync2("git", args, { cwd, encoding: "utf8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+  return execFileSync2("git", args, {
+    cwd,
+    encoding: "utf8",
+    stdio: ["pipe", "pipe", "pipe"],
+    maxBuffer: GIT_OUTPUT_MAX_BUFFER
+  }).trim();
 }
 
 // src/utils/sync-lock.ts
@@ -5538,6 +5545,7 @@ var VAULT_HYGIENE_GENERATED_COMMIT_PATHS = VAULT_HYGIENE_GITIGNORE_PATTERNS.map(
   (pattern) => pattern.replace(/\/$/, "")
 );
 var VAULT_SYNC_FILTER_REQUIRED_EXCLUDES = [
+  "/.WIKI_GIT_FROZEN",
   "remotely-save/data.json",
   ".skillwiki/sync.lock",
   ".skillwiki/managed-write.lock",
@@ -7442,6 +7450,7 @@ export {
   canSupersedeJournal,
   markJournalSuperseded,
   supersedeStaleReviewRequiredJournals,
+  readSkillWikiConfig,
   resolveConfiguredSnapshotWorktree,
   DEFAULT_MANAGED_WRITE_WAIT_MS,
   MANAGED_WRITE_POLL_INTERVAL_MS,

package/dist/{chunk-XJR3XXP5.js → chunk-SXNKZGNM.js}

@@ -389,6 +389,7 @@ var VaultSyncConfigSchema = z.object({
   "vault_sync.snapshot_profile": vaultSyncPathOrNone,
   "vault_sync.snapshot_script": vaultSyncPathOrNone,
   "vault_sync.snapshot_worktree": vaultSyncPathOrNone,
+  "vault_sync.fetch_projection": vaultSyncPathOrNone,
   "vault_sync.push_enabled": vaultSyncBool,
   "vault_sync.fuse_refresh_enabled": vaultSyncBool,
   "vault_sync.fuse_refresh_interval": vaultSyncDuration,

package/dist/{chunk-ECOEJABP.js → chunk-UDOZKMCN.js}

@@ -8,7 +8,7 @@ import {
   readLogEvents,
   resolveExistingRegularFileInsideVault,
   writeLogEvent
-} from "./chunk-QFRZDTJY.js";
+} from "./chunk-LTSIHHKD.js";
 import {
   ExitCode,
   RawSourceSchema,
@@ -19,7 +19,7 @@ import {
   scanSensitiveContent,
   scanVault,
   splitFrontmatter
-} from "./chunk-XJR3XXP5.js";
+} from "./chunk-SXNKZGNM.js";
 
 // src/commands/sources.ts
 import { readFile as readFile4 } from "fs/promises";

package/dist/cli.js

@@ -9,11 +9,13 @@ import {
   SATELLITE_STALE_MS,
   buildVectorIndex,
   configPath,
+  countEventLedgerFiles,
   detectFuseMount,
   evaluateDirtyVolumeGate,
   evaluateSatelliteRunHealth,
   findPlugin,
   guardProtectedVaultWrite,
+  isEventLedgerPath,
   isFailedRunStatus,
   measureDirtyVolume,
   memoryAuthorityTiersRank,
@@ -53,7 +55,7 @@ import {
   snapshotterHealthChecks,
   upsertIndexEntry,
   vectorIndexStatus
-} from "./chunk-ZYVP52PM.js";
+} from "./chunk-BXEG5OWD.js";
 import {
   normalizeDistTag,
   readCache,
@@ -66,7 +68,7 @@ import {
   UNMANAGED_START,
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-ZUHA2EXE.js";
+} from "./chunk-3KEMRVWR.js";
 import {
   FLEET_REL_PATH,
   REDACTED_MALFORMED_REFERENCE,
@@ -115,6 +117,7 @@ import {
   profileKey,
   readJournal,
   readLastOp,
+  readSkillWikiConfig,
   reconcileTaxonomyDocument,
   releaseOwnedSyncLock,
   renderVaultGitignoreTemplate,
@@ -157,12 +160,12 @@ import {
   supersedeStaleReviewRequiredJournals,
   taxonomyCommentForPage,
   writeDotenv
-} from "./chunk-6WE7E6VB.js";
+} from "./chunk-OTESAW36.js";
 import {
   assertTargetInsideVault,
   atomicWriteText,
   prepareTypedPage
-} from "./chunk-JHDN3FSF.js";
+} from "./chunk-C5WOEVX3.js";
 import {
   applySourceDisposition,
   decodeSourceActionApproval,
@@ -170,7 +173,7 @@ import {
   inventorySources,
   planSourceDisposition,
   runSourcesPending
-} from "./chunk-ECOEJABP.js";
+} from "./chunk-UDOZKMCN.js";
 import {
   authorizeRawOperation,
   buildSourceReferenceIndex,
@@ -187,7 +190,7 @@ import {
   resolveExistingRegularFileInsideVault,
   validateLogEvent,
   writeLogEvent
-} from "./chunk-QFRZDTJY.js";
+} from "./chunk-LTSIHHKD.js";
 import {
   ExitCode,
   MetaSchema,
@@ -208,10 +211,10 @@ import {
   scanVault,
   splitFrontmatter,
   vaultIoConcurrency
-} from "./chunk-XJR3XXP5.js";
+} from "./chunk-SXNKZGNM.js";
 
 // src/cli.ts
-import { join as join43 } from "path";
+import { join as join44 } from "path";
 import { Command } from "commander";
 
 // src/utils/output.ts
@@ -1604,21 +1607,21 @@ function rollbackPath(vault, path, stage2, stage3) {
 function hasMarkers(path, text) {
   const lines = text.split(/\r?\n/);
   let open2 = false;
-  let sep4 = false;
+  let sep5 = false;
   for (const line of lines) {
     if (line.startsWith("<<<<<<< ")) {
       open2 = true;
-      sep4 = false;
+      sep5 = false;
       continue;
     }
     if (line === "=======" && open2) {
-      sep4 = true;
+      sep5 = true;
       continue;
     }
-    if (line.startsWith(">>>>>>> ") && open2 && sep4) return true;
+    if (line.startsWith(">>>>>>> ") && open2 && sep5) return true;
     if (line.startsWith(">>>>>>> ")) {
       open2 = false;
-      sep4 = false;
+      sep5 = false;
     }
   }
   return false;
@@ -3785,7 +3788,7 @@ ${fmRewritten}
   }
   let indexUpdated = false;
   if (!isRaw) {
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-YP4JIMIQ.js");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-3ZMM53WL.js");
     const before = await readFile7(join19(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
@@ -3906,10 +3909,10 @@ async function runRemove(input) {
   const tombstonePath = await writeDeleteIntent(input.vault, intent);
   await unlink2(join20(input.vault, relPath));
   if (relPath.endsWith(".md") && !relPath.startsWith("raw/")) {
-    const { readFile: readFile22 } = await import("fs/promises");
+    const { readFile: readFile23 } = await import("fs/promises");
     const { join: pathJoin } = await import("path");
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-YP4JIMIQ.js");
-    const before = await readFile22(pathJoin(input.vault, "index.md"), "utf8").catch(() => "");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-3ZMM53WL.js");
+    const before = await readFile23(pathJoin(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
     const hadIndexEntry = before.includes(`[[${fullTarget}]]`) || before.includes(`[[${bare}]]`);
@@ -7366,7 +7369,7 @@ async function acquireRawCaptureLock(path) {
       if (error.code !== "EEXIST") {
         return err("WRITE_FAILED", { path: lockPath, phase: "raw-lock", message: String(error) });
       }
-      await new Promise((resolve7) => setTimeout(resolve7, 10));
+      await new Promise((resolve9) => setTimeout(resolve9, 10));
     }
   }
   return err("WRITE_FAILED", { path: lockPath, phase: "raw-lock", message: "raw capture lock held" });
@@ -9328,8 +9331,83 @@ async function runStatus(input) {
 }
 
 // src/commands/copy-status.ts
-import { existsSync as existsSync13 } from "fs";
-import { join as join37 } from "path";
+import { existsSync as existsSync13, realpathSync as realpathSync5 } from "fs";
+import { isAbsolute as isAbsolute2, join as join38, relative as relative5, resolve as resolve8 } from "path";
+
+// src/utils/fetch-projection.ts
+import { isAbsolute, join as join37, resolve as resolve7 } from "path";
+function inspectConfiguredFetchProjection(home) {
+  if (!home) return { configured: false };
+  const config = readSkillWikiConfig(join37(home, ".skillwiki", ".env"));
+  const configured = config["vault_sync.fetch_projection"];
+  if (!configured || configured === "none") return { configured: false };
+  if (!isAbsolute(configured)) {
+    return { configured: true, invalidDetail: "configured fetch projection path must be absolute" };
+  }
+  return { configured: true, path: resolve7(configured) };
+}
+
+// src/utils/live-drift.ts
+import { createHash as createHash6 } from "crypto";
+import { readFile as readFile19 } from "fs/promises";
+import { relative as relative4, sep as sep3 } from "path";
+
+// src/utils/git-promotion.ts
+function normalizedRelativePath(path) {
+  return path.replace(/\\/g, "/").replace(/^\.\//, "");
+}
+function isGitPromotablePath(path) {
+  const rel = normalizedRelativePath(path);
+  if (/^(?:\.skillwiki|\.claude|\.obsidian|\.antigravitycli|\.playwright-cli|\.superpowers|\.snapshots|\.git|\.drafts)(?:\/|$)/.test(rel)) {
+    return false;
+  }
+  if (/^(?:tmp|logs)(?:\/|$)/.test(rel) || isEventLedgerPath(rel)) return false;
+  if (rel === "raw/._.DS_Store" || rel === "._.DS_Store" || rel.startsWith("._")) return false;
+  if (rel.startsWith(".conflict") || rel.includes(".conflict-")) return false;
+  return true;
+}
+
+// src/utils/live-drift.ts
+function gitBlobOid(bytes) {
+  const header = Buffer.from(`blob ${bytes.length}\0`);
+  return createHash6("sha1").update(header).update(bytes).digest("hex");
+}
+function headBlobOids(projection) {
+  const output = git(projection, ["ls-tree", "-rz", "-r", "HEAD"]);
+  if (!output) return void 0;
+  const blobs = /* @__PURE__ */ new Map();
+  for (const entry of output.split("\0")) {
+    if (!entry) continue;
+    const match = entry.match(/^\d+\s+blob\s+([0-9a-f]{40})\t(.+)$/s);
+    if (match) blobs.set(match[2], match[1]);
+  }
+  return blobs;
+}
+async function measureAuthoritativeLiveDrift(liveVault, projection) {
+  const projectionBlobs = headBlobOids(projection);
+  if (!projectionBlobs) return { unknown: true, detail: "projection HEAD unreadable" };
+  const scan = await scanVault(liveVault);
+  if (!scan.ok) return { unknown: true, detail: "live Markdown inventory unavailable" };
+  let content = 0;
+  const livePromotable = /* @__PURE__ */ new Set();
+  for (const page of scan.data.allMarkdown) {
+    const rel = relative4(liveVault, page.absPath).split(sep3).join("/");
+    if (!isGitPromotablePath(rel)) continue;
+    livePromotable.add(rel);
+    const bytes = await readFile19(page.absPath);
+    if (projectionBlobs.get(rel) !== gitBlobOid(bytes)) content += 1;
+  }
+  for (const rel of projectionBlobs.keys()) {
+    if (rel.endsWith(".md") && isGitPromotablePath(rel) && !livePromotable.has(rel)) content += 1;
+  }
+  const events = await readLogEvents(liveVault);
+  if (!events.ok) return { unknown: true, detail: "live event ledger unreadable" };
+  return {
+    content,
+    ledger: events.data.length,
+    detail: content > 0 || events.data.length > 0 ? "authoritative live data ahead of GitHub" : void 0
+  };
+}
 
 // src/copy-status/copy-status.ts
 function liveRecord(p) {
@@ -9413,7 +9491,28 @@ function localRecord(p, githubOid) {
       p
     );
   }
-  return withDirty({ state: "unknown", detail: p.detail ?? "leaf clone unmeasured" }, p);
+  return withDirty({ state: "unknown", detail: p.detail ?? "live-vault Git unmeasured" }, p);
+}
+function liveDriftRecord(p) {
+  if (!p || p.unknown || p.content === void 0 && p.ledger === void 0) {
+    return { state: "unknown", detail: p?.detail ?? "live drift unmeasured" };
+  }
+  const content = p.content ?? 0;
+  const ledger = p.ledger ?? 0;
+  const rec = {
+    state: content > 0 || ledger > 0 ? "drifted" : "clean"
+  };
+  if (p.content !== void 0) rec.content = content;
+  if (p.ledger !== void 0) rec.ledger = ledger;
+  if (p.detail) rec.detail = p.detail;
+  return rec;
+}
+function formatLiveDrift(rec) {
+  const parts = [`live_drift: ${rec.state}`];
+  if (rec.content !== void 0) parts.push(`content=${rec.content}`);
+  if (rec.ledger !== void 0) parts.push(`ledger=${rec.ledger}`);
+  if (rec.detail) parts.push(rec.detail);
+  return parts.join(" ");
 }
 function formatPlane(name, rec) {
   const parts = [`${name}: ${rec.state}`];
@@ -9432,31 +9531,59 @@ function composeCopyStatus(input) {
   const live = liveRecord(input.live);
   const github = githubRecord(input.github);
   const local_git = localRecord(input.local, input.github.oid);
+  const live_drift = liveDriftRecord(input.liveDrift);
   const humanHint = [
     formatPlane("live", live),
     formatPlane("github", github),
-    formatPlane("local_git", local_git)
+    formatPlane("local_git", local_git),
+    formatLiveDrift(live_drift)
   ].join("\n");
-  return { live, github, local_git, humanHint };
+  return { live, github, local_git, live_drift, humanHint };
 }
 async function runCopyStatus(deps) {
-  const [live, github, local] = await Promise.all([
+  const [live, github, local, liveDrift] = await Promise.all([
     deps.probeLive(),
     deps.probeGithub(),
-    deps.probeLocalGit()
+    deps.probeLocalGit(),
+    deps.probeLiveDrift?.()
   ]);
-  return composeCopyStatus({ live, github, local });
+  return composeCopyStatus({ live, github, local, liveDrift });
 }
 
 // src/commands/copy-status.ts
+function comparablePath(path) {
+  try {
+    return realpathSync5(path);
+  } catch {
+    return resolve8(path);
+  }
+}
+function pathsAreNested(left, right) {
+  const rel = relative5(comparablePath(left), comparablePath(right));
+  return rel !== "" && !rel.startsWith("..") && !isAbsolute2(rel);
+}
 function defaultCopyStatusDeps(input) {
+  const selection = inspectConfiguredFetchProjection(input.home);
+  const sameAsLive = selection.path !== void 0 && comparablePath(selection.path) === comparablePath(input.vault);
+  const nestedWithLive = selection.path !== void 0 && (pathsAreNested(selection.path, input.vault) || pathsAreNested(input.vault, selection.path));
+  const configuredProjection = sameAsLive || nestedWithLive ? void 0 : selection.path;
+  const projectionProblem = selection.invalidDetail ?? (sameAsLive ? "configured fetch projection must be distinct from live vault" : nestedWithLive ? "configured fetch projection and live vault must not be nested" : void 0);
+  const gitVault = input.vault;
+  const projectionWarning = selection.configured ? `configured fetch projection ignored for Git status; using live vault${projectionProblem ? ` (${projectionProblem})` : ""}` : void 0;
+  const invalidProjectionDetail = projectionProblem ?? "configured fetch projection is not a git repository";
+  const gitRootProblem = () => {
+    if (!existsSync13(join38(gitVault, ".git"))) {
+      return "vault is not a git repository";
+    }
+    return void 0;
+  };
   return {
     probeLive() {
       if (input.s3Ok === true) return { reachable: true, detail: "MCP S3 ok" };
       if (input.s3Ok === false) return { reachable: false, detail: "MCP S3 not ok" };
       const remote = resolveWikiS3Remote({ home: input.home });
       if (!remote) {
-        return { unknown: true, detail: "leaf clone is not the live plane; S3 remote unconfigured" };
+        return { unknown: true, detail: "Git worktree is not the live plane; S3 remote unconfigured" };
       }
       const reach = probeS3Reachability(remote);
       if (reach === "ok") return { reachable: true, detail: "S3 reachable" };
@@ -9464,18 +9591,17 @@ function defaultCopyStatusDeps(input) {
       return { unknown: true, detail: "S3 unmeasured" };
     },
     probeGithub() {
-      if (!existsSync13(join37(input.vault, ".git"))) {
-        return { unknown: true, detail: "vault is not a git repository" };
-      }
-      const ls = git(input.vault, ["ls-remote", "origin", "refs/heads/main"], {
+      const problem = gitRootProblem();
+      if (problem) return { unknown: true, detail: problem };
+      const ls = git(gitVault, ["ls-remote", "origin", "refs/heads/main"], {
         timeoutMs: REMOTE_PROBE_TIMEOUT_MS
       });
       const oid = ls.split(/\s+/)[0];
       if (!oid) return { unknown: true, detail: "git ls-remote origin main failed" };
-      const originMain = git(input.vault, ["rev-parse", "--verify", "origin/main"]);
+      const originMain = git(gitVault, ["rev-parse", "--verify", "origin/main"]);
       let ageHours;
       if (originMain && originMain === oid) {
-        const ct = git(input.vault, ["log", "-1", "--format=%ct", "origin/main"]);
+        const ct = git(gitVault, ["log", "-1", "--format=%ct", "origin/main"]);
         const sec = Number.parseInt(ct, 10);
         if (Number.isFinite(sec) && sec > 0) {
           ageHours = Math.max(0, Math.round((Date.now() / 1e3 - sec) / 3600));
@@ -9484,31 +9610,40 @@ function defaultCopyStatusDeps(input) {
       return { oid, ageHours, detail: "git ls-remote origin main" };
     },
     probeLocalGit() {
-      if (!existsSync13(join37(input.vault, ".git"))) {
-        return { unknown: true, detail: "vault is not a git repository" };
-      }
-      const head = git(input.vault, ["rev-parse", "HEAD"]);
+      const problem = gitRootProblem();
+      if (problem) return { unknown: true, detail: problem };
+      const head = git(gitVault, ["rev-parse", "HEAD"]);
       if (!head) return { unknown: true, detail: "HEAD unreadable" };
-      const behindRaw = git(input.vault, ["rev-list", "--count", "HEAD..origin/main"]);
+      const behindRaw = git(gitVault, ["rev-list", "--count", "HEAD..origin/main"]);
       const behind = behindRaw === "" ? void 0 : Number.parseInt(behindRaw, 10);
-      const review = listReviewRequiredOps(input.vault)[0];
+      const review = listReviewRequiredOps(gitVault)[0];
       const blockedReason = review ? `review-required:${review.opId}` : void 0;
-      const dirty = measureDirtyVolume(input.vault);
+      const dirty = measureDirtyVolume(gitVault);
       const dirtyCount = dirty.is_git_repo ? dirty.expanded_files : void 0;
       const untrackedCount = dirty.is_git_repo ? dirty.untracked : void 0;
-      const ledgerUntracked = dirty.is_git_repo ? dirty.ledger_files : void 0;
+      const ledgerUntracked = dirty.is_git_repo ? countEventLedgerFiles(gitVault) : void 0;
       const contentUntracked = dirty.is_git_repo ? dirty.content_files : void 0;
-      const dirtyHint = dirtyCount && dirtyCount > 0 ? ledgerUntracked && ledgerUntracked > 0 ? `event-ledger live-ahead of GitHub; do not git add` : `live-ahead of GitHub; do not git add` : void 0;
+      const dirtyHint = ledgerUntracked && ledgerUntracked > 0 ? `event-ledger live-ahead of GitHub; do not git add` : dirtyCount && dirtyCount > 0 ? `live-ahead of GitHub; do not git add` : void 0;
+      const detail = [dirtyHint, blockedReason, projectionWarning].filter(Boolean).join("; ") || void 0;
       return {
         head,
         behind: Number.isFinite(behind) ? behind : void 0,
         blockedReason,
         dirty: dirtyCount,
         untracked: untrackedCount,
-        ledger_untracked: dirtyCount && dirtyCount > 0 ? ledgerUntracked : void 0,
-        content_untracked: dirtyCount && dirtyCount > 0 ? contentUntracked : void 0,
-        detail: dirtyHint ?? blockedReason
+        ledger_untracked: ledgerUntracked && ledgerUntracked > 0 ? ledgerUntracked : void 0,
+        content_untracked: contentUntracked && contentUntracked > 0 ? contentUntracked : void 0,
+        detail
       };
+    },
+    probeLiveDrift() {
+      if (!configuredProjection) {
+        return { unknown: true, detail: projectionProblem ?? "live drift requires a configured fetch projection" };
+      }
+      if (!existsSync13(join38(configuredProjection, ".git"))) {
+        return { unknown: true, detail: invalidProjectionDetail };
+      }
+      return measureAuthoritativeLiveDrift(input.vault, configuredProjection);
     }
   };
 }
@@ -9522,7 +9657,7 @@ async function runCopyStatusCommand(input) {
 
 // src/commands/seed.ts
 import { mkdir as mkdir12, writeFile as writeFile8, stat as stat4 } from "fs/promises";
-import { join as join38 } from "path";
+import { join as join39 } from "path";
 var TODAY = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 var EXAMPLE_PAGES = {
   "entities/example-project.md": `---
@@ -9591,29 +9726,29 @@ Real sources are immutable after ingestion \u2014 never edit them.
 `;
 async function runSeed(input) {
   try {
-    await stat4(join38(input.vault, "SCHEMA.md"));
+    await stat4(join39(input.vault, "SCHEMA.md"));
   } catch {
     return { exitCode: ExitCode.VAULT_PATH_INVALID, result: err("VAULT_PATH_INVALID", { root: input.vault, reason: "SCHEMA.md missing \u2014 run `skillwiki init` first" }) };
   }
   const created = [];
   const skipped = [];
   for (const [relPath, content] of Object.entries(EXAMPLE_PAGES)) {
-    const absPath = join38(input.vault, relPath);
+    const absPath = join39(input.vault, relPath);
     try {
       await stat4(absPath);
       skipped.push(relPath);
     } catch {
-      await mkdir12(join38(absPath, ".."), { recursive: true });
+      await mkdir12(join39(absPath, ".."), { recursive: true });
       await writeFile8(absPath, content, "utf8");
       created.push(relPath);
     }
   }
-  const rawPath = join38(input.vault, "raw", "articles", "example-source.md");
+  const rawPath = join39(input.vault, "raw", "articles", "example-source.md");
   try {
     await stat4(rawPath);
     skipped.push("raw/articles/example-source.md");
   } catch {
-    await mkdir12(join38(rawPath, ".."), { recursive: true });
+    await mkdir12(join39(rawPath, ".."), { recursive: true });
     await writeFile8(rawPath, EXAMPLE_RAW, "utf8");
     created.push("raw/articles/example-source.md");
   }
@@ -9636,9 +9771,9 @@ async function runSeed(input) {
 }
 
 // src/commands/canvas.ts
-import { readFile as readFile19, writeFile as writeFile9 } from "fs/promises";
+import { readFile as readFile20, writeFile as writeFile9 } from "fs/promises";
 import { existsSync as existsSync14 } from "fs";
-import { join as join39 } from "path";
+import { join as join40 } from "path";
 var NODE_WIDTH = 240;
 var NODE_HEIGHT = 60;
 var COLUMN_SPACING = 400;
@@ -9716,7 +9851,7 @@ function buildCanvasEdges(adjacency) {
   return edges;
 }
 async function runCanvasGenerate(input) {
-  const graphPath = input.graphPath ?? join39(input.vault, ".skillwiki", "graph.json");
+  const graphPath = input.graphPath ?? join40(input.vault, ".skillwiki", "graph.json");
   if (!existsSync14(graphPath)) {
     return {
       exitCode: ExitCode.FILE_NOT_FOUND,
@@ -9728,7 +9863,7 @@ async function runCanvasGenerate(input) {
   }
   let raw;
   try {
-    raw = await readFile19(graphPath, "utf8");
+    raw = await readFile20(graphPath, "utf8");
   } catch (e) {
     return {
       exitCode: ExitCode.FILE_NOT_FOUND,
@@ -9754,7 +9889,7 @@ async function runCanvasGenerate(input) {
   const nodes = buildCanvasNodes(paths);
   const edges = buildCanvasEdges(graph.adjacency);
   const canvas = { nodes, edges };
-  const outPath = join39(input.vault, "vault-graph.canvas");
+  const outPath = join40(input.vault, "vault-graph.canvas");
   try {
     await writeFile9(outPath, JSON.stringify(canvas, null, 2));
   } catch (e) {
@@ -9898,12 +10033,12 @@ async function runSourceDisposition(input) {
 }
 
 // src/utils/source-disposal.ts
-import { createHash as createHash6 } from "crypto";
-import { readFile as readFile21, unlink as unlink5 } from "fs/promises";
+import { createHash as createHash7 } from "crypto";
+import { readFile as readFile22, unlink as unlink5 } from "fs/promises";
 
 // src/utils/raw-asset-reference-index.ts
-import { readdir as readdir7, readFile as readFile20 } from "fs/promises";
-import { join as join40, relative as relative4, sep as sep3 } from "path";
+import { readdir as readdir7, readFile as readFile21 } from "fs/promises";
+import { join as join41, relative as relative6, sep as sep4 } from "path";
 var PREVIEW_EXTENSIONS = /* @__PURE__ */ new Set(["png", "jpg", "jpeg", "gif", "webp", "svg", "bmp", "avif", "pdf", "mp3", "wav", "m4a", "mp4", "webm"]);
 async function walkFiles(root, dir = root) {
   let entries;
@@ -9914,9 +10049,9 @@ async function walkFiles(root, dir = root) {
   }
   const out = [];
   for (const entry of entries) {
-    const path = join40(dir, entry.name);
+    const path = join41(dir, entry.name);
     if (entry.isDirectory()) out.push(...await walkFiles(root, path));
-    else if (entry.isFile()) out.push(relative4(root, path).split(sep3).join("/"));
+    else if (entry.isFile()) out.push(relative6(root, path).split(sep4).join("/"));
   }
   return out;
 }
@@ -9930,7 +10065,7 @@ function addInbound(map, target, source) {
   map.set(target, refs);
 }
 async function buildRawAssetReferenceIndex(vault) {
-  const assetRoot = join40(vault, "raw", "assets");
+  const assetRoot = join41(vault, "raw", "assets");
   const relativeAssets = await walkFiles(assetRoot);
   const assets = relativeAssets.map((path) => `raw/assets/${path}`).sort((a, b) => a.localeCompare(b));
   const assetSet = new Set(assets);
@@ -9946,7 +10081,7 @@ async function buildRawAssetReferenceIndex(vault) {
   for (const page of scan.data.allMarkdown) {
     let text;
     try {
-      text = await readFile20(page.absPath, "utf8");
+      text = await readFile21(page.absPath, "utf8");
     } catch {
       continue;
     }
@@ -9982,7 +10117,7 @@ async function buildRawAssetReferenceIndex(vault) {
 
 // src/utils/source-disposal.ts
 function sha256(bytes) {
-  return createHash6("sha256").update(bytes).digest("hex");
+  return createHash7("sha256").update(bytes).digest("hex");
 }
 function exactTarget(path) {
   if (/[?*\[\]{}]/.test(path) || !path.includes("/") || path.endsWith("/")) return err("RAW_DISPOSAL_TARGET_INVALID", { path, message: "exact file path required; globs, basenames, and directories are refused" });
@@ -10006,7 +10141,7 @@ async function planSourceDisposal(input) {
   if (sensitive.length > 0) return err("SENSITIVE_CONTENT_DETECTED", { findings: sensitive });
   const target = await resolveExistingRegularFileInsideVault(input.vault, input.rawPath);
   if (!target.ok) return err("RAW_DISPOSAL_TARGET_INVALID", { path: input.rawPath, cause: target });
-  const bytes = await readFile21(target.data);
+  const bytes = await readFile22(target.data);
   const size = bytes.byteLength;
   let typedReferences = [];
   let otherReferences = [];
@@ -10130,7 +10265,7 @@ async function runSourceDisposal(input) {
 import { existsSync as existsSync15, readFileSync as readFileSync16 } from "fs";
 import { execSync as nodeExecSync } from "child_process";
 import { hostname as nodeHostname, platform as nodePlatform } from "os";
-import { join as join41 } from "path";
+import { join as join42 } from "path";
 var SSH_TIMEOUT_MS = 15e3;
 var TIMER_UNIT = "agent-memory-trends.timer";
 var SERVICE_UNIT = "agent-memory-trends.service";
@@ -10360,7 +10495,7 @@ async function runFleetHealth(input) {
   const home = input.home ?? env.HOME ?? "";
   const osHostname = input.osHostname ?? env.HOSTNAME ?? nodeHostname();
   const vault = input.vault ?? env.WIKI_PATH;
-  const file = input.file ?? (vault ? join41(vault, FLEET_REL_PATH) : void 0);
+  const file = input.file ?? (vault ? join42(vault, FLEET_REL_PATH) : void 0);
   if (!file) {
     return {
       exitCode: ExitCode.NO_VAULT_CONFIGURED,
@@ -10445,12 +10580,12 @@ async function runFleetHealth(input) {
 
 // src/utils/auto-commit.ts
 import { existsSync as existsSync16 } from "fs";
-import { isAbsolute, join as join42, normalize } from "path";
+import { isAbsolute as isAbsolute3, join as join43, normalize } from "path";
 function isValidLastOpPath(file) {
   if (!file || typeof file !== "string") return false;
   const trimmed = file.trim();
   if (trimmed.length === 0) return false;
-  if (isAbsolute(trimmed)) return false;
+  if (isAbsolute3(trimmed)) return false;
   const normalized = normalize(trimmed).replace(/\\/g, "/");
   if (normalized.startsWith("../") || normalized === ".." || normalized.includes("/../")) return false;
   for (const generatedPath of VAULT_GENERATED_COMMIT_PATHS) {
@@ -10466,7 +10601,7 @@ async function postCommit(vault, exitCode) {
   const dotenv = await parseDotenvFile(configPath(home));
   const autoCommit = process.env.AUTO_COMMIT ?? dotenv["AUTO_COMMIT"];
   if (autoCommit === "false") return;
-  if (!existsSync16(join42(vault, ".git"))) return;
+  if (!existsSync16(join43(vault, ".git"))) return;
   const lastOps = readLastOp(vault);
   if (lastOps.length === 0) return;
   const porcelain = git(vault, ["status", "--porcelain", "--", ...VAULT_COMMIT_PATHSPEC]);
@@ -10508,7 +10643,7 @@ async function postCommit(vault, exitCode) {
 import { readFileSync as readFileSync17, writeFileSync as writeFileSync8 } from "fs";
 
 // src/utils/mcp-token-map.ts
-import { createHash as createHash7, randomBytes } from "crypto";
+import { createHash as createHash8, randomBytes } from "crypto";
 import yaml from "js-yaml";
 var HOST_ID_RE = /^[a-z][a-z0-9-]{1,62}$/;
 function parseMcpTokenMap(yamlText) {
@@ -10532,7 +10667,7 @@ function parseMcpTokenMap(yamlText) {
 function generateHostBearer(rng) {
   const bytes = (rng ?? (() => randomBytes(32)))();
   const raw = bytes.toString("base64url");
-  const hashHex = createHash7("sha256").update(raw, "utf8").digest("hex");
+  const hashHex = createHash8("sha256").update(raw, "utf8").digest("hex");
   return { raw, hashHex };
 }
 function appendHostHash(yamlText, hashHex, hostId) {
@@ -10561,7 +10696,7 @@ function preflight(error) {
 }
 async function runMcpAuthIssueHost(input) {
   const isTty = input.isTty ?? Boolean(process.stdin.isTTY && process.stdout.isTTY);
-  const readFile22 = input.readFile ?? readFileSync17;
+  const readFile23 = input.readFile ?? readFileSync17;
   const writeFile10 = input.writeFile ?? writeFileSync8;
   const stderrWrite = input.stderrWrite ?? ((s) => {
     process.stderr.write(s);
@@ -10574,7 +10709,7 @@ async function runMcpAuthIssueHost(input) {
   if (write && !isTty) return preflight("NO_TTY");
   let yamlText = "";
   try {
-    yamlText = readFile22(mapPath, "utf8");
+    yamlText = readFile23(mapPath, "utf8");
   } catch (error) {
     if (!isEnoent(error)) throw error;
   }
@@ -10689,8 +10824,8 @@ async function emit(r, vault, opts) {
     printJson(r.result);
   }
   if (vault && opts?.postCommit !== false) await postCommit(vault, r.exitCode);
-  await new Promise((resolve7, reject) => {
-    process.stdout.write("", (error) => error ? reject(error) : resolve7());
+  await new Promise((resolve9, reject) => {
+    process.stdout.write("", (error) => error ? reject(error) : resolve9());
   });
   process.exit(r.exitCode);
 }
@@ -10753,7 +10888,7 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-2Y5Q2WH4.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-T4WOM52R.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,
@@ -10783,7 +10918,7 @@ program.command("validate <file>").description("validate vault page frontmatter
   emit(await runValidate({ file, apply: !!opts.apply, vault }), vault);
 });
 program.command("graph").description("graph subcommands").command("build <vault>").option("--out <path>", "graph output path (default: <vault>/.skillwiki/graph.json)").option("--wiki <name>", "wiki profile name").action(async (vault, opts) => {
-  const out = opts.out ?? join43(vault, ".skillwiki", "graph.json");
+  const out = opts.out ?? join44(vault, ".skillwiki", "graph.json");
   return emitGuardedVaultWrite(vault, "graph build", () => runGraphBuild({ vault, out }));
 });
 var canvasCmd = program.command("canvas").description("manage Obsidian canvas files");
@@ -11405,7 +11540,7 @@ program.command("status [vault]").description("output vault diagnostics").option
     langEnvValue: process.env.WIKI_LANG
   }), v.vault);
 });
-program.command("copy-status [vault]").description("plane-tagged vault freshness: live S3 vs GitHub snapshot vs leaf clone").option("--wiki <name>", "wiki profile name").action(async (vault, opts) => {
+program.command("copy-status [vault]").description("plane-tagged vault freshness: live S3 vs GitHub snapshot vs live-vault Git").option("--wiki <name>", "wiki profile name").action(async (vault, opts) => {
   const v = await resolveVaultArg(vault, opts.wiki);
   if (!v.ok) emit({ exitCode: v.exitCode, result: v.payload });
   else emit(await runCopyStatusCommand({

package/dist/{index-projection-YP4JIMIQ.js → index-projection-3ZMM53WL.js}

@@ -4,9 +4,9 @@ import {
   UNMANAGED_START,
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-ZUHA2EXE.js";
-import "./chunk-JHDN3FSF.js";
-import "./chunk-XJR3XXP5.js";
+} from "./chunk-3KEMRVWR.js";
+import "./chunk-C5WOEVX3.js";
+import "./chunk-SXNKZGNM.js";
 export {
   UNMANAGED_END,
   UNMANAGED_START,

package/dist/{managed-write-preflight-2Y5Q2WH4.js → managed-write-preflight-T4WOM52R.js}

@@ -6,10 +6,10 @@ import {
   runManagedWritePeerGate,
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-6WE7E6VB.js";
-import "./chunk-JHDN3FSF.js";
-import "./chunk-QFRZDTJY.js";
-import "./chunk-XJR3XXP5.js";
+} from "./chunk-OTESAW36.js";
+import "./chunk-C5WOEVX3.js";
+import "./chunk-LTSIHHKD.js";
+import "./chunk-SXNKZGNM.js";
 export {
   DEFAULT_MANAGED_WRITE_WAIT_MS,
   MANAGED_WRITE_POLL_INTERVAL_MS,

package/dist/skillwiki-mcp.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-ZYVP52PM.js";
+} from "./chunk-BXEG5OWD.js";
 import "./chunk-7I2TPIV5.js";
-import "./chunk-ZUHA2EXE.js";
-import "./chunk-6WE7E6VB.js";
-import "./chunk-JHDN3FSF.js";
-import "./chunk-ECOEJABP.js";
-import "./chunk-QFRZDTJY.js";
-import "./chunk-XJR3XXP5.js";
+import "./chunk-3KEMRVWR.js";
+import "./chunk-OTESAW36.js";
+import "./chunk-C5WOEVX3.js";
+import "./chunk-UDOZKMCN.js";
+import "./chunk-LTSIHHKD.js";
+import "./chunk-SXNKZGNM.js";
 
 // src/mcp-entry.ts
 runSkillwikiMcpStdio().catch((error) => {

package/dist/sources-4KCCBNCO.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import {
+  runSourcesPending
+} from "./chunk-UDOZKMCN.js";
+import "./chunk-LTSIHHKD.js";
+import "./chunk-SXNKZGNM.js";
+export {
+  runSourcesPending
+};

package/dist/vault-sync/scripts/lib/git-promotion-policy.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+# GitHub promotion policy shared by snapshot execution and CLI parity tests.
+# This is intentionally narrower than S3 ownership.
+
+snapshot_non_promotable_path() {
+    local p="${1#./}"
+    case "$p" in
+        .skillwiki|.skillwiki/*|.claude|.claude/*|.obsidian|.obsidian/*|.antigravitycli|.antigravitycli/*|.playwright-cli|.playwright-cli/*|.superpowers|.superpowers/*|.snapshots|.snapshots/*|.git|.git/*|.drafts|.drafts/*)
+            return 0 ;;
+        tmp|tmp/*|logs|logs/*|meta/log-events|meta/log-events/*)
+            return 0 ;;
+        raw/._.DS_Store|._.DS_Store)
+            return 0 ;;
+        ._*)
+            return 0 ;;
+        .conflict*|*.conflict-*)
+            return 0 ;;
+    esac
+    return 1
+}

package/dist/vault-sync/scripts/wiki-fetch-notify.sh

@@ -21,7 +21,37 @@ SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]:-$0}" )" && pwd )"
 . "$SCRIPT_DIR/lib/git-operation-journal.sh"
 platform_detect_os
 
-WIKI_DIR="${WIKI_DIR:-$HOME/wiki}"
+CONFIG_FILE="$HOME/.skillwiki/.env"
+config_value() {
+  local key="$1"
+  [ -f "$CONFIG_FILE" ] || return 0
+  awk -F= -v key="$key" '$1==key { value=substr($0, index($0, "=") + 1); found=1 } END { if (found) print value }' "$CONFIG_FILE"
+}
+
+canonical_compare_path() {
+  local path="$1" probe suffix="" base
+  while [ "$path" != "/" ] && [ "${path%/}" != "$path" ]; do path="${path%/}"; done
+  probe="$path"
+  while [ ! -d "$probe" ] && [ "$probe" != "/" ]; do
+    base="$(basename "$probe")"
+    suffix="/$base$suffix"
+    probe="$(dirname "$probe")"
+  done
+  printf '%s%s\n' "$(cd "$probe" 2>/dev/null && pwd -P)" "$suffix"
+}
+
+LIVE_WIKI_DIR="${WIKI_PATH:-$(config_value WIKI_PATH)}"
+LIVE_WIKI_DIR="${LIVE_WIKI_DIR:-$HOME/wiki}"
+CONFIG_FETCH_PROJECTION="$(config_value vault_sync.fetch_projection)"
+FETCH_PROJECTION="${WIKI_FETCH_PROJECTION:-$CONFIG_FETCH_PROJECTION}"
+FETCH_PROJECTION_CONFIGURED=0
+if [ -n "$FETCH_PROJECTION" ] && [ "$FETCH_PROJECTION" != "none" ]; then
+  WIKI_DIR="$FETCH_PROJECTION"
+  FETCH_PROJECTION_CONFIGURED=1
+else
+  WIKI_DIR="$LIVE_WIKI_DIR"
+fi
+export WIKI_DIR
 BRANCH="${WIKI_BRANCH:-main}"
 STATE_DIR="$(platform_cache_dir)/wiki-fetch"
 STATE_FILE="$STATE_DIR/last-behind"
@@ -71,6 +101,25 @@ log() {
   printf '%s %s\n' "$(date -u +%FT%TZ)" "$*" >>"$LOG_FILE"
 }
 
+if [ "$FETCH_PROJECTION_CONFIGURED" -eq 1 ]; then
+  case "$WIKI_DIR" in
+    /*) ;;
+    *) log "ERROR: fetch projection path must be absolute: $WIKI_DIR"; exit 0 ;;
+  esac
+  LIVE_WIKI_IDENTITY="$(canonical_compare_path "$LIVE_WIKI_DIR")"
+  FETCH_PROJECTION_IDENTITY="$(canonical_compare_path "$WIKI_DIR")"
+  if [ "$LIVE_WIKI_IDENTITY" = "$FETCH_PROJECTION_IDENTITY" ]; then
+    log "ERROR: fetch projection must be distinct from live vault: $WIKI_DIR"
+    exit 0
+  fi
+  case "$FETCH_PROJECTION_IDENTITY/" in
+    "$LIVE_WIKI_IDENTITY/"*) log "ERROR: fetch projection and live vault must not be nested: $WIKI_DIR"; exit 0 ;;
+  esac
+  case "$LIVE_WIKI_IDENTITY/" in
+    "$FETCH_PROJECTION_IDENTITY/"*) log "ERROR: fetch projection and live vault must not be nested: $WIKI_DIR"; exit 0 ;;
+  esac
+fi
+
 handle_existing_handoff() {
   local blocker reason op identity previous_identity notified_at now before after
   # Same altitude as managed-write preflight: a review-required whose target_oid
@@ -187,7 +236,11 @@ attempt_pull_on_delta() {
 
 # Guard: working tree present.
 if [ ! -d "$WIKI_DIR/.git" ]; then
-  log "ERROR: $WIKI_DIR is not a git repo"
+  if [ "$FETCH_PROJECTION_CONFIGURED" -eq 1 ]; then
+    log "ERROR: configured fetch projection is not a git repo: $WIKI_DIR"
+  else
+    log "ERROR: $WIKI_DIR is not a git repo"
+  fi
   exit 0
 fi
 

package/dist/vault-sync/scripts/wiki-snapshot.sh

@@ -69,6 +69,14 @@ elif [ -f "$SCRIPT_DIR/../../scripts/lib/runtime-manifest.sh" ]; then
     source "$SCRIPT_DIR/../../scripts/lib/runtime-manifest.sh"
 fi
 
+if [ -f "$SCRIPT_DIR/lib/git-promotion-policy.sh" ]; then
+    source "$SCRIPT_DIR/lib/git-promotion-policy.sh"
+elif [ -f "$SCRIPT_DIR/scripts/lib/git-promotion-policy.sh" ]; then
+    source "$SCRIPT_DIR/scripts/lib/git-promotion-policy.sh"
+elif [ -f "$SCRIPT_DIR/../../scripts/lib/git-promotion-policy.sh" ]; then
+    source "$SCRIPT_DIR/../../scripts/lib/git-promotion-policy.sh"
+fi
+
 if ! command -v vault_sync_scan_conflict_markers >/dev/null 2>&1; then
     echo "[wiki-snapshot] ERROR: conflict-marker helper unavailable; refusing to run." >&2
     exit 1
@@ -77,6 +85,10 @@ if ! command -v vault_sync_sha256 >/dev/null 2>&1; then
     echo "[wiki-snapshot] ERROR: SHA-256 helper unavailable; refusing to run." >&2
     exit 1
 fi
+if ! command -v snapshot_non_promotable_path >/dev/null 2>&1; then
+    echo "[wiki-snapshot] ERROR: Git promotion policy helper unavailable; refusing to run." >&2
+    exit 1
+fi
 
 # ── Guard: Linux-only operation ────────────────────────────
 platform_require linux
@@ -101,42 +113,43 @@ REPAIR_SCRIPT="${WIKI_GIT_REPAIR_SCRIPT:-$SCRIPT_DIR/wiki-git-repair-v3.sh}"
 MAX_S3_ONLY_NOTES="${WIKI_SNAPSHOT_MAX_S3_ONLY_NOTES:-200}"
 MAX_TOMBSTONE_PRUNES="${WIKI_SNAPSHOT_MAX_TOMBSTONE_PRUNES:-10}"
 
-# Classified inventory: event ledger + local scratch are not GitHub-promotable notes.
-# Cap and rclone must share this class. Do not raise MAX_S3_ONLY_NOTES instead.
-# meta/log-events stay S3-authoritative; snapshot copies them separately for --events-from.
-snapshot_non_promotable_path() {
-    local p="${1#./}"
-    case "$p" in
-        .skillwiki/*|.claude/*|.obsidian/*|.antigravitycli/*|.playwright-cli/*|.superpowers/*|.snapshots/*|.git/*|.drafts/*)
-            return 0 ;;
-        tmp/*|logs|logs/*|meta/log-events|meta/log-events/*)
-            return 0 ;;
-        raw/._.DS_Store|._.DS_Store)
-            return 0 ;;
-        ._*)
-            return 0 ;;
-        .conflict*|*.conflict-*)
-            return 0 ;;
-    esac
-    return 1
+# rclone leaves non-promotable and ignored files in the worktree. Passing the
+# ignored directory names as negative pathspecs still makes `git add` exit 1,
+# so build an exact NUL-delimited inventory of tracked/untracked/deleted paths
+# and retain only the Git-promotion class. Already-tracked ledger history is
+# left as-is until the attended branch-tip cleanup stages its deletions.
+snapshot_promotable_pathspecs() {
+    local rel_path
+    while IFS= read -r -d '' rel_path; do
+        snapshot_non_promotable_path "$rel_path" || printf '%s\0' "$rel_path"
+    done < <(git ls-files --cached --others --deleted --exclude-standard -z)
 }
 
-# rclone exclude leaves leftover non-promotable files in the worktree.
-# `git add -A` would promote them (live 0.10.90 leak). Pathspecs match
-# snapshot_non_promotable_path. Already-tracked ledger history is left as-is.
 snapshot_git_add_promotable() {
-    git add --all -- . \
-        ':!.skillwiki' \
-        ':!.claude' \
-        ':!.obsidian' \
-        ':!.antigravitycli' \
-        ':!.playwright-cli' \
-        ':!.superpowers' \
-        ':!.snapshots' \
-        ':!.drafts' \
-        ':!tmp' \
-        ':!logs' \
-        ':!meta/log-events'
+    snapshot_promotable_pathspecs \
+        | git add --all --pathspec-from-file=- --pathspec-file-nul
+}
+
+snapshot_ledger_free_git_required() {
+    case "$(printf '%s' "${WIKI_SNAPSHOT_REQUIRE_LEDGER_FREE_GIT:-0}" | tr '[:upper:]' '[:lower:]')" in
+        1|true|yes|on) return 0 ;;
+        *) return 1 ;;
+    esac
+}
+
+snapshot_assert_ledger_free_git() {
+    local context="${1:-snapshot gate}"
+
+    snapshot_ledger_free_git_required || return 0
+    if git -C "$SNAPSHOT_WORKTREE" ls-files -- meta/log-events 2>/dev/null | grep -q .; then
+        log "ERROR: ledger-free Git gate failed ($context); meta/log-events remains in index or HEAD"
+        return 1
+    fi
+    if git -C "$SNAPSHOT_WORKTREE" ls-tree -r --name-only HEAD -- meta/log-events 2>/dev/null | grep -q .; then
+        log "ERROR: ledger-free Git gate failed ($context); meta/log-events remains in index or HEAD"
+        return 1
+    fi
+    return 0
 }
 
 PROJECTION_PARITY_TIMEOUT_SECONDS="${WIKI_SNAPSHOT_PROJECTION_PARITY_TIMEOUT_SECONDS:-120}"
@@ -906,6 +919,9 @@ if [ "$(git -C "$SNAPSHOT_WORKTREE" rev-parse --is-inside-work-tree 2>/dev/null)
 fi
 
 refresh_git_baseline
+if ! snapshot_assert_ledger_free_git "after baseline refresh"; then
+    exit 1
+fi
 
 # Dual-path requires distinct live mutation vs Git convergence roots.
 # Same-path would materialize projections then immediately rclone-overwrite them.
@@ -1263,6 +1279,9 @@ if [ "$needs_repair" = true ]; then
         log "ERROR: could not refresh snapshot transaction receipt after repair"
         exit 1
     fi
+    if ! snapshot_assert_ledger_free_git "after initial repair"; then
+        exit 1
+    fi
 fi
 
 if ! raw_dedup_guard; then
@@ -1276,6 +1295,9 @@ fi
 # Check for changes
 if [ -z "$(git status --porcelain)" ]; then
     log "No changes to commit"
+    if ! snapshot_assert_ledger_free_git "before no-change completion"; then
+        exit 1
+    fi
     if ! snapshot_verify_git_receipt; then
         log "ERROR: snapshot transaction changed before no-change proof"
         exit 1
@@ -1353,12 +1375,19 @@ if [ "$PULL_SUCCESS" = false ]; then
     fi
 fi
 
+if ! snapshot_assert_ledger_free_git "after pull/rebase/repair"; then
+    exit 1
+fi
+
 # Push (with retry)
 echo "Pushing to origin..."
 PUSH_RETRIES=3
 PUSH_SUCCESS=false
 
 for i in $(seq 1 $PUSH_RETRIES); do
+    if ! snapshot_assert_ledger_free_git "immediately before push attempt $i"; then
+        exit 1
+    fi
     if git push origin "$DEFAULT_BRANCH" 2>&1 | tee -a "$LOG_FILE"; then
         PUSH_SUCCESS=true
         break

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.91",
+  "version": "0.10.93",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.91",
+  "version": "0.10.93",
   "skills": "./",
   "description": "Project-aware Karpathy-style knowledge base for Claude Code: 21 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp) backed by the deterministic `skillwiki` CLI.",
   "author": {

package/skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.91",
+  "version": "0.10.93",
   "description": "Project-aware Karpathy-style knowledge base for Codex with 21 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",

package/skills/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.91",
+  "version": "0.10.93",
   "description": "Project-aware Karpathy-style knowledge base: 21 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp) backed by HTTP MCP wiki_capture.",
   "author": {
     "name": "karlorz"

package/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.10.91",
+  "version": "0.10.93",
   "private": true,
   "files": [
     "wiki-*",

package/dist/sources-A5GFRY3F.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-import {
-  runSourcesPending
-} from "./chunk-ECOEJABP.js";
-import "./chunk-QFRZDTJY.js";
-import "./chunk-XJR3XXP5.js";
-export {
-  runSourcesPending
-};