skillwiki 0.10.98 → 0.10.102

package/dist/{managed-write-preflight-THGIM2U7.js → managed-write-preflight-NS7OQ2Y7.js}

@@ -6,7 +6,7 @@ import {
   runManagedWritePeerGate,
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-MRYWP5HY.js";
+} from "./chunk-7UK67FAZ.js";
 import "./chunk-KDH352MC.js";
 import "./chunk-F5GFUYPF.js";
 import "./chunk-QM64LUEY.js";

package/dist/skillwiki-mcp.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-EEO2YDPX.js";
+} from "./chunk-PIXBNB74.js";
 import "./chunk-7I2TPIV5.js";
 import "./chunk-XYXTV2YD.js";
-import "./chunk-MRYWP5HY.js";
+import "./chunk-7UK67FAZ.js";
 import "./chunk-KDH352MC.js";
 import "./chunk-H42EY6E7.js";
 import "./chunk-F5GFUYPF.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.98",
+  "version": "0.10.102",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,8 +1,8 @@
 {
   "name": "skillwiki",
-  "version": "0.10.98",
+  "version": "0.10.102",
   "skills": "./",
-  "description": "Project-aware Karpathy-style knowledge base for Claude Code: 21 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp) backed by the deterministic `skillwiki` CLI.",
+  "description": "Project-aware Karpathy-style knowledge base for Claude Code: 22 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp, skillwiki-connect) backed by the deterministic `skillwiki` CLI.",
   "author": {
     "name": "karlorz",
     "url": "https://github.com/karlorz"

package/skills/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "skillwiki",
-  "version": "0.10.98",
-  "description": "Project-aware Karpathy-style knowledge base for Codex with 21 prompt-only skills backed by the deterministic skillwiki CLI.",
+  "version": "0.10.102",
+  "description": "Project-aware Karpathy-style knowledge base for Codex with 22 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",
     "url": "https://github.com/karlorz"
@@ -22,7 +22,7 @@
   "interface": {
     "displayName": "SkillWiki",
     "shortDescription": "Project-aware wiki skills for Codex agents",
-    "longDescription": "21 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp) for deterministic, project-aware knowledge workflows.",
+    "longDescription": "22 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp, skillwiki-connect) for deterministic, project-aware knowledge workflows.",
     "developerName": "karlorz",
     "category": "Productivity",
     "capabilities": [

package/skills/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "skillwiki",
-  "version": "0.10.98",
-  "description": "Project-aware Karpathy-style knowledge base: 21 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp) backed by HTTP MCP wiki_capture.",
+  "version": "0.10.102",
+  "description": "Project-aware Karpathy-style knowledge base: 22 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp, skillwiki-connect) backed by HTTP MCP wiki_capture.",
   "author": {
     "name": "karlorz"
   },
@@ -20,6 +20,11 @@
         "type": "string",
         "title": "SkillWiki HTTP MCP bearer",
         "description": "Bearer for https://wiki.karldigi.dev/mcp. Same SKILLWIKI_MCP_TOKEN used by Grok CLI. Never put the value in plugin files."
+      },
+      "SKILLWIKI_EXTRA_VAULTS": {
+        "type": "string",
+        "title": "SkillWiki extra vault ids",
+        "description": "Optional comma-separated extra vault ids (example: wiki-fin). Non-secret. Same connector URL https://wiki.karldigi.dev/mcp. Default central stays on. Server allowed_vaults is the security boundary; listing an extra here does not authorize it. Do not put a bearer in this field."
       }
     },
     "required": [

package/skills/README.md

@@ -3,7 +3,7 @@
 Prompt-only Markdown skills for Claude Code. Installed via `skillwiki install`
 or the Claude/Codex/Antigravity plugin packaging paths.
 
-Current package inventory: **21 skills**.
+Current package inventory: **22 skills**.
 
 Publication policy: new or updated typed-knowledge and meta pages must use
 `skillwiki page publish` from a temporary draft, inspect its dry-run, and add
@@ -26,7 +26,7 @@ fixed papers/transcripts taxonomy.
 | `wiki-*` | `wiki-init`, `wiki-ingest`, `wiki-query`, `wiki-lint`, `wiki-crystallize`, `wiki-audit`, `wiki-archive`, `wiki-reingest`, `wiki-adapter-prd`, `wiki-add-task`, `wiki-sync`, `wiki-canvas`, `wiki-gate-plan-mode` |
 | `proj-*` | `proj-init`, `proj-work`, `proj-distill`, `proj-decide` |
 | onboarding | `using-skillwiki` |
-| mcp | `skillwiki-mcp` |
+| mcp | `skillwiki-mcp`, `skillwiki-connect` |
 
 Verify the live inventory from source:
 

package/skills/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.10.98",
+  "version": "0.10.102",
   "private": true,
   "files": [
     "wiki-*",
     "proj-*",
     "using-skillwiki",
-    "skillwiki-mcp",
+    "skillwiki-connect",
     "skills",
     "agents",
     "scripts",

package/skills/skills/skillwiki-connect/SKILL.md

@@ -0,0 +1,75 @@
+---
+name: skillwiki-connect
+description: Use skillwiki connect for unknown-agent HTTP MCP. Never init, Drive, or paste tokens.
+---
+
+# skillwiki-connect
+
+Unknown-agent HTTP MCP setup. Use when the client has no SkillWiki plugin and no usable connector (Doubao Work cloud, headless VM). The official ingest is `skillwiki connect`. Do not paste bearers into chat. Do not run `skillwiki init`.
+
+## When this skill activates
+
+- An unknown agent must install CLI + unique host-id bearer and finish MCP connect.
+- `SKILLWIKI_MCP_TOKEN` is missing from process env and `~/.skillwiki/.env`.
+- Doctor reports auth not set, or WIKI_PATH missing on a host that should stay vault-less.
+
+## Hard rules
+
+- Do **not** run `skillwiki init`.
+- Do **not** cat, echo, or print tokens or `~/.skillwiki/.env`.
+- Do **not** reuse another host’s token (`msi`, `doubao-linux-agent`, `macos-dev`, …).
+- Do **not** use 云盘 / Drive / CloudStorage as the secret path. Only a chat-attached file reaches the VM.
+- Missing `WIKI_PATH` is expected on an MCP-only leaf. Handshake pass is done.
+- Do **not** instruct the operator to paste the bearer into the chat transcript.
+
+## Paste-once prompt
+
+Give the unknown agent this prompt (no leading slash). After `skillwiki connect` exists, prefer `--from-file` over `cp`.
+
+```text
+You are on a SkillWiki HTTP MCP leaf. Goal: connect as a unique host-id writer. No connector is required.
+
+Hard rules:
+- Do NOT run `skillwiki init`.
+- Do NOT cat/echo/print tokens or ~/.skillwiki/.env.
+- Do NOT reuse another host’s token (msi, doubao-linux-agent, macos-dev, …).
+- Do NOT use 云盘/Drive as the secret path. Only a chat-attached file reaches this VM.
+- WIKI_PATH missing is expected. Handshake pass = done.
+- Do NOT paste the bearer into chat.
+
+Do this:
+1) If a SkillWiki connector exists and is NOT “local-only”, use it and stop.
+2) Else install/upgrade `skillwiki` CLI if missing.
+3) mkdir -p ~/.skillwiki
+4) If ~/.skillwiki/.env has a non-empty SKILLWIKI_MCP_TOKEN:
+   skillwiki doctor --check-mcp
+5) If token is empty: STOP. Ask the operator to attach a mode-600 env file as a CHAT ATTACHMENT (not Drive). Then:
+   skillwiki connect --from-file <attachment>
+   delete the sandbox copy if you can (do not cat it)
+   skillwiki doctor --check-mcp
+6) Report only: writer_id, ok, auth, reconcile_ready, TOKEN_SET|EMPTY.
+7) Then wiki_query one tiny smoke. Stop. Never print secrets.
+```
+
+Operator metal side stays: `skillwiki mcp-auth issue-host --host-id <new-id> --write`, then attach the env file. Do not mint from this skill.
+
+## CLI
+
+Always no-init.
+
+```text
+skillwiki connect --from-file <chat-attachment>
+skillwiki connect --from-file <chat-attachment> --dry-run
+skillwiki connect --from-stdin --dry-run
+```
+
+`--from-file` and `--from-stdin` are mutually exclusive. `--force` overwrites a different existing token. Cloud Drive paths are refused. Reserved host-ids are refused unless `--force`. Write mode is `0600`.
+
+Doctor on an MCP-only leaf (no vault + token present + vault-sync not installed) treats missing `WIKI_PATH` as info, not an init cluster.
+
+## Stop conditions
+
+- A non-local-only SkillWiki connector already authenticates.
+- `skillwiki connect` or doctor `--check-mcp` reports `TOKEN_SET` / auth present and handshake `ok`.
+- The operator has not attached an env file and no token exists — stop and ask for a chat attachment, never for a paste into chat.
+---

package/skills/skills/skillwiki-mcp/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: skillwiki-mcp
-description: Use when capturing a note, idea, or bug into the wiki, appending log.md, or using wiki MCP tools. Writes via wiki_capture / wiki_log_append; never local raw/transcripts.
+description: Use when capturing a note, idea, or bug, appending log.md, or using wiki MCP tools. Writes via wiki_capture / wiki_log_append; never local raw/transcripts.
 ---
 
 # SkillWiki HTTP MCP
@@ -14,10 +14,10 @@ SkillWiki captures are HTTP MCP only (`type: http`). Claude/Grok use `SKILLWIKI_
 ## First-run readiness
 
 - Resolve the installed plugin root from `GROK_PLUGIN_ROOT`, falling back to `CLAUDE_PLUGIN_ROOT`, and run `python3 "$PLUGIN_ROOT/scripts/check_readiness.py" --apply --json` before the first SkillWiki MCP call.
-- **Cursor / Grok Bot:** the Cursor-native plugin requires `SKILLWIKI_MCP_TOKEN` under **Plugins → Configure**. It pins `https://wiki.karldigi.dev/mcp`. Grok Bot does not inherit Mac process env or `~/.cursor/mcp.json`. `failed_to_load` with no token box means this package is missing; after this package is installed, Configure is the token field (same pattern as grok-search).
+- **Cursor / Grok Bot:** the Cursor-native plugin requires `SKILLWIKI_MCP_TOKEN` under **Plugins → Configure**. Optional non-secret `SKILLWIKI_EXTRA_VAULTS` (comma-separated vault ids such as `wiki-fin`) opts the client into extra vaults on the **same** connector URL. It is not a second connector, not a secret, and not written to `~/.cursor/mcp.json` or Grok `config.toml`. Server `allowed_vaults` remains the security boundary; an extra listed here but missing from the bearer still fails closed. Omit `vault=` on tools to use the handshake `default_vault` (central). Grok Bot does not inherit Mac process env or `~/.cursor/mcp.json`. `failed_to_load` with no token box means this package is missing; after this package is installed, Configure is the token field (same pattern as grok-search).
 - `missing_prereq` means `SKILLWIKI_MCP_TOKEN` is absent from process environment; stop and ask for a bearer. Do not invent a stdio MCP.
-- A new host (a machine that should write the wiki for the first time) needs an issued host-id bearer before handshake can pass. The operator runs `skillwiki mcp-auth issue-host --host-id <id> --write` on metal (TTY required). The client pastes the printed value into process env or host Configure. Do not auto-write `mcp.env`, `mcp.json`, or Grok `config.toml`. Do not invent a second admin skill. A local vault/FUSE mirror is optional.
-- First-run order: install plugin/CLI → operator issues on metal → paste into process env or Configure → **new session** → `skillwiki doctor --check-mcp` → one write (`wiki_capture`, work-item write, or page publish).
+- A new host (a machine that should write the wiki for the first time) needs an issued host-id bearer before handshake can pass. The operator runs `skillwiki mcp-auth issue-host --host-id <id> --write` on metal (TTY required). Connector hosts put the printed value into process env or host Configure. Unknown agents (no plugin / no usable connector) ingest a chat-attached env file with `skillwiki connect --from-file` (or `--from-stdin`); do not instruct paste-into-chat. Do not auto-write `mcp.env`, `mcp.json`, or Grok `config.toml`. Do not invent a second admin skill. A local vault/FUSE mirror is optional.
+- First-run order: install plugin/CLI → operator issues on metal → connector Configure **or** unknown-agent `skillwiki connect --from-file <attachment>` → **new session** → `skillwiki doctor --check-mcp` → one write (`wiki_capture`, work-item write, or page publish).
 - `in_sync` means the probe has a usable URL/token decision.
 - A 401 is an MCP handshake failure, not a readiness-probe status. Report that the token is missing or rejected and stop.
 - Grok SessionStart cannot inject the parent MCP environment. A restart cannot supply a missing token.
@@ -48,4 +48,4 @@ Local `~/wiki` (or `skillwiki path`) is fine for reads. MCP read tools are optio
 
 ## Errors
 
-Report handshake, capture, and append failures literally. If tools are missing after a 401 or `missing_prereq`, stop and tell the operator to export `SKILLWIKI_MCP_TOKEN`, run `grok plugin update skillwiki`, and start a new session. Do not fall back to local `raw/transcripts/` writes.
+Report handshake, capture, and append failures literally. If tools are missing after a 401 or `missing_prereq`, stop and tell the operator to set `SKILLWIKI_MCP_TOKEN` via process env, host Configure, or `skillwiki connect --from-file` (unknown agents; never paste-into-chat), run `grok plugin update skillwiki`, and start a new session. Do not fall back to local `raw/transcripts/` writes.

package/skills/skills/using-skillwiki/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: using-skillwiki
-description: Invoke for vault, wiki, or SkillWiki setup. Maps skills, workflow profiles, and vault routing. Skip unrelated coding.
+description: Invoke for vault, wiki, or SkillWiki setup. Maps skills, workflow profiles, and vault routing.
 ---
 *Note: If executing as a background subagent, skip this skill section.*
 
@@ -55,6 +55,7 @@ Invoke a skillwiki skill when the user:
 - Mentions crystallizing a session into a note
 - Talks about project workspaces, ADRs, or distillation
 - Wants to quickly capture an idea, bug, task, or note without interrupting their workflow
+- Needs unknown-agent HTTP MCP connect (CLI + dotenv; no plugin/connector)
 - Wants to archive or clean up old vault pages
 - Wants to hard-delete a vault path without snapshot resurrection (`wiki-remove`)
 - Needs to detect source drift or re-ingest updated content
@@ -193,6 +194,7 @@ If the vault has `.WIKI_GIT_FROZEN`:
 | `wiki-reingest` | Detect drift in raw sources (sha256 comparison) and re-ingest updated content |
 | `wiki-add-task` | Quick-capture ideas, bugs, tasks, notes (captures via wiki_capture on leaf hosts; local raw/transcripts/ only on authoring hosts) |
 | `skillwiki-mcp` | HTTP MCP captures (`wiki_capture` / `wiki_log_append`); never local raw/transcripts on leaf hosts. `wiki_log_append` returns a receipt; verify via `wiki_read_page(event_path)`. Use `wiki_read_page` `tail_bytes` to browse oversized `log.md`. |
+| `skillwiki-connect` | Unknown-agent HTTP MCP first-run: ingest a chat-attached env file with `skillwiki connect --from-file` (never paste-into-chat, never `skillwiki init`, never Drive). |
 | `wiki-adapter-prd` | Map foreign PRD formats (CodeStable, RFC, AIDE, Hermes) into vault pages |
 | `proj-init` | Bootstrap a project workspace (README, requirements, architecture) |
 | `proj-work` | Open or run a work item under a project's work/ directory |
@@ -243,11 +245,11 @@ for code changes.
 
 ## CLI Backbone
 All skills are backed by the `skillwiki` CLI — a deterministic tool with no LLM calls. It handles path resolution, config management, validation, health reporting, and linting. Skills invoke it via Bash for the mechanical parts and use the active agent for the creative parts.
-Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `path`, `lang`, `install`, `fleet context`, `fleet validate`, `graph build`, `query`, `vectors rebuild`, `vectors status`, `sources pending`, `sources compile`, `sources review`, `sources reviews`, `sources disposition`, `sources dispose`, `archive`, `remove`, `drift`, `dedup`, `compound`, `tag-sync`, `tag reconcile`, `page publish`, `sync status`, `seed`, `stale`, `claim`, `claims audit`, `observe`, `canvas generate`, `mcp`, `mcp-auth`.
+Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `connect`, `path`, `lang`, `install`, `fleet context`, `fleet validate`, `graph build`, `query`, `vectors rebuild`, `vectors status`, `sources pending`, `sources compile`, `sources review`, `sources reviews`, `sources disposition`, `sources dispose`, `archive`, `remove`, `drift`, `dedup`, `compound`, `tag-sync`, `tag reconcile`, `page publish`, `sync status`, `seed`, `stale`, `claim`, `claims audit`, `observe`, `canvas generate`, `mcp`, `mcp-auth`.
 Optional read-only MCP (`skillwiki mcp`) exposes pending/compile/review list tools. Do not use MCP for compile claim, publish, or review writes.
 `skillwiki claim` binds a transcript to a work item only through an exact `raw/transcripts/...` path in `source:` / `sources:` / `closes:`. A `--project` that contradicts the capture's explicit project is rejected. `skillwiki stale --project` uses exact normalized slugs, not substring matching. `skillwiki claims audit` is the read-only integrity report for duplicate, malformed, dangling, cross-project, and unbacked claims; it never rewrites captures or work items.
 
-Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes the nonblocking source-lifecycle backlog. Pending captures are informational and do not make health fail. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only, including HTTP MCP URL/auth presence and the frozen-leaf write path. Pass `--check-mcp` for a live initialize handshake and pin/tool-list lag; the default doctor path does not contact HTTP MCP. Fetch-only leaves set `vault_sync.push_enabled=false`; doctor must not tell them to run `vault-sync-install` to enable wiki-push. New hosts need an issued host-id bearer from metal `skillwiki mcp-auth issue-host` before handshake can pass. There is no second MCP admin skill. Run `skillwiki config list` to see current configuration.
+Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes the nonblocking source-lifecycle backlog. Pending captures are informational and do not make health fail. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only, including HTTP MCP URL/auth presence and the frozen-leaf write path. Pass `--check-mcp` for a live initialize handshake and pin/tool-list lag; the default doctor path does not contact HTTP MCP. Fetch-only leaves set `vault_sync.push_enabled=false`; doctor must not tell them to run `vault-sync-install` to enable wiki-push. New hosts need an issued host-id bearer from metal `skillwiki mcp-auth issue-host` before handshake can pass. Unknown agents (no plugin/connector) ingest the chat-attached env file with `skillwiki connect --from-file` (or `--from-stdin`); do not instruct paste-into-chat. Connector hosts use process env or Configure. There is no second MCP admin skill. Run `skillwiki config list` to see current configuration.
 
 ## Runtime Host Context and Fleet Freshness
 Resolve the active project vault with `skillwiki path` first. Then pass that exact path to `skillwiki --human fleet context <vault>` for host identity and safety guidance. `fleet context` is authoritative for host identity. It overrides stale injected SessionStart context, remembered workspace context, and prior conversation summaries. `fleet context` is local and network-free; it reports `identity_status`, resolver trace, warnings, and the fact that remote freshness was not checked.

package/skills/skills/using-skillwiki/activation.md

@@ -26,6 +26,7 @@ Invoke a SkillWiki skill when the user: wants vault/wiki/knowledge-base operatio
 | `wiki-reingest` | Detect source drift and re-ingest updated content |
 | `wiki-add-task` | Quick-capture ideas, bugs, tasks, notes (HTTP MCP on leaf hosts; local files on authoring hosts) |
 | `skillwiki-mcp` | HTTP MCP captures (`wiki_capture`, `wiki_log_append`); never local writes on leaf hosts |
+| `skillwiki-connect` | Unknown-agent HTTP MCP connect: `skillwiki connect --from-file` (never paste-into-chat) |
 | `wiki-adapter-prd` | Map foreign PRD formats (CodeStable, RFC, AIDE, Hermes) |
 | `wiki-sync` | Safely sync vault git repository |
 | `wiki-canvas` | Generate Obsidian Canvas visualization |

package/skills/skillwiki-connect/SKILL.md

@@ -0,0 +1,75 @@
+---
+name: skillwiki-connect
+description: Use skillwiki connect for unknown-agent HTTP MCP. Never init, Drive, or paste tokens.
+---
+
+# skillwiki-connect
+
+Unknown-agent HTTP MCP setup. Use when the client has no SkillWiki plugin and no usable connector (Doubao Work cloud, headless VM). The official ingest is `skillwiki connect`. Do not paste bearers into chat. Do not run `skillwiki init`.
+
+## When this skill activates
+
+- An unknown agent must install CLI + unique host-id bearer and finish MCP connect.
+- `SKILLWIKI_MCP_TOKEN` is missing from process env and `~/.skillwiki/.env`.
+- Doctor reports auth not set, or WIKI_PATH missing on a host that should stay vault-less.
+
+## Hard rules
+
+- Do **not** run `skillwiki init`.
+- Do **not** cat, echo, or print tokens or `~/.skillwiki/.env`.
+- Do **not** reuse another host’s token (`msi`, `doubao-linux-agent`, `macos-dev`, …).
+- Do **not** use 云盘 / Drive / CloudStorage as the secret path. Only a chat-attached file reaches the VM.
+- Missing `WIKI_PATH` is expected on an MCP-only leaf. Handshake pass is done.
+- Do **not** instruct the operator to paste the bearer into the chat transcript.
+
+## Paste-once prompt
+
+Give the unknown agent this prompt (no leading slash). After `skillwiki connect` exists, prefer `--from-file` over `cp`.
+
+```text
+You are on a SkillWiki HTTP MCP leaf. Goal: connect as a unique host-id writer. No connector is required.
+
+Hard rules:
+- Do NOT run `skillwiki init`.
+- Do NOT cat/echo/print tokens or ~/.skillwiki/.env.
+- Do NOT reuse another host’s token (msi, doubao-linux-agent, macos-dev, …).
+- Do NOT use 云盘/Drive as the secret path. Only a chat-attached file reaches this VM.
+- WIKI_PATH missing is expected. Handshake pass = done.
+- Do NOT paste the bearer into chat.
+
+Do this:
+1) If a SkillWiki connector exists and is NOT “local-only”, use it and stop.
+2) Else install/upgrade `skillwiki` CLI if missing.
+3) mkdir -p ~/.skillwiki
+4) If ~/.skillwiki/.env has a non-empty SKILLWIKI_MCP_TOKEN:
+   skillwiki doctor --check-mcp
+5) If token is empty: STOP. Ask the operator to attach a mode-600 env file as a CHAT ATTACHMENT (not Drive). Then:
+   skillwiki connect --from-file <attachment>
+   delete the sandbox copy if you can (do not cat it)
+   skillwiki doctor --check-mcp
+6) Report only: writer_id, ok, auth, reconcile_ready, TOKEN_SET|EMPTY.
+7) Then wiki_query one tiny smoke. Stop. Never print secrets.
+```
+
+Operator metal side stays: `skillwiki mcp-auth issue-host --host-id <new-id> --write`, then attach the env file. Do not mint from this skill.
+
+## CLI
+
+Always no-init.
+
+```text
+skillwiki connect --from-file <chat-attachment>
+skillwiki connect --from-file <chat-attachment> --dry-run
+skillwiki connect --from-stdin --dry-run
+```
+
+`--from-file` and `--from-stdin` are mutually exclusive. `--force` overwrites a different existing token. Cloud Drive paths are refused. Reserved host-ids are refused unless `--force`. Write mode is `0600`.
+
+Doctor on an MCP-only leaf (no vault + token present + vault-sync not installed) treats missing `WIKI_PATH` as info, not an init cluster.
+
+## Stop conditions
+
+- A non-local-only SkillWiki connector already authenticates.
+- `skillwiki connect` or doctor `--check-mcp` reports `TOKEN_SET` / auth present and handshake `ok`.
+- The operator has not attached an env file and no token exists — stop and ask for a chat attachment, never for a paste into chat.
+---

package/skills/skillwiki-mcp/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: skillwiki-mcp
-description: Use when capturing a note, idea, or bug into the wiki, appending log.md, or using wiki MCP tools. Writes via wiki_capture / wiki_log_append; never local raw/transcripts.
+description: Use when capturing a note, idea, or bug, appending log.md, or using wiki MCP tools. Writes via wiki_capture / wiki_log_append; never local raw/transcripts.
 ---
 
 # SkillWiki HTTP MCP
@@ -14,10 +14,10 @@ SkillWiki captures are HTTP MCP only (`type: http`). Claude/Grok use `SKILLWIKI_
 ## First-run readiness
 
 - Resolve the installed plugin root from `GROK_PLUGIN_ROOT`, falling back to `CLAUDE_PLUGIN_ROOT`, and run `python3 "$PLUGIN_ROOT/scripts/check_readiness.py" --apply --json` before the first SkillWiki MCP call.
-- **Cursor / Grok Bot:** the Cursor-native plugin requires `SKILLWIKI_MCP_TOKEN` under **Plugins → Configure**. It pins `https://wiki.karldigi.dev/mcp`. Grok Bot does not inherit Mac process env or `~/.cursor/mcp.json`. `failed_to_load` with no token box means this package is missing; after this package is installed, Configure is the token field (same pattern as grok-search).
+- **Cursor / Grok Bot:** the Cursor-native plugin requires `SKILLWIKI_MCP_TOKEN` under **Plugins → Configure**. Optional non-secret `SKILLWIKI_EXTRA_VAULTS` (comma-separated vault ids such as `wiki-fin`) opts the client into extra vaults on the **same** connector URL. It is not a second connector, not a secret, and not written to `~/.cursor/mcp.json` or Grok `config.toml`. Server `allowed_vaults` remains the security boundary; an extra listed here but missing from the bearer still fails closed. Omit `vault=` on tools to use the handshake `default_vault` (central). Grok Bot does not inherit Mac process env or `~/.cursor/mcp.json`. `failed_to_load` with no token box means this package is missing; after this package is installed, Configure is the token field (same pattern as grok-search).
 - `missing_prereq` means `SKILLWIKI_MCP_TOKEN` is absent from process environment; stop and ask for a bearer. Do not invent a stdio MCP.
-- A new host (a machine that should write the wiki for the first time) needs an issued host-id bearer before handshake can pass. The operator runs `skillwiki mcp-auth issue-host --host-id <id> --write` on metal (TTY required). The client pastes the printed value into process env or host Configure. Do not auto-write `mcp.env`, `mcp.json`, or Grok `config.toml`. Do not invent a second admin skill. A local vault/FUSE mirror is optional.
-- First-run order: install plugin/CLI → operator issues on metal → paste into process env or Configure → **new session** → `skillwiki doctor --check-mcp` → one write (`wiki_capture`, work-item write, or page publish).
+- A new host (a machine that should write the wiki for the first time) needs an issued host-id bearer before handshake can pass. The operator runs `skillwiki mcp-auth issue-host --host-id <id> --write` on metal (TTY required). Connector hosts put the printed value into process env or host Configure. Unknown agents (no plugin / no usable connector) ingest a chat-attached env file with `skillwiki connect --from-file` (or `--from-stdin`); do not instruct paste-into-chat. Do not auto-write `mcp.env`, `mcp.json`, or Grok `config.toml`. Do not invent a second admin skill. A local vault/FUSE mirror is optional.
+- First-run order: install plugin/CLI → operator issues on metal → connector Configure **or** unknown-agent `skillwiki connect --from-file <attachment>` → **new session** → `skillwiki doctor --check-mcp` → one write (`wiki_capture`, work-item write, or page publish).
 - `in_sync` means the probe has a usable URL/token decision.
 - A 401 is an MCP handshake failure, not a readiness-probe status. Report that the token is missing or rejected and stop.
 - Grok SessionStart cannot inject the parent MCP environment. A restart cannot supply a missing token.
@@ -48,4 +48,4 @@ Local `~/wiki` (or `skillwiki path`) is fine for reads. MCP read tools are optio
 
 ## Errors
 
-Report handshake, capture, and append failures literally. If tools are missing after a 401 or `missing_prereq`, stop and tell the operator to export `SKILLWIKI_MCP_TOKEN`, run `grok plugin update skillwiki`, and start a new session. Do not fall back to local `raw/transcripts/` writes.
+Report handshake, capture, and append failures literally. If tools are missing after a 401 or `missing_prereq`, stop and tell the operator to set `SKILLWIKI_MCP_TOKEN` via process env, host Configure, or `skillwiki connect --from-file` (unknown agents; never paste-into-chat), run `grok plugin update skillwiki`, and start a new session. Do not fall back to local `raw/transcripts/` writes.

package/skills/using-skillwiki/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: using-skillwiki
-description: Invoke for vault, wiki, or SkillWiki setup. Maps skills, workflow profiles, and vault routing. Skip unrelated coding.
+description: Invoke for vault, wiki, or SkillWiki setup. Maps skills, workflow profiles, and vault routing.
 ---
 *Note: If executing as a background subagent, skip this skill section.*
 
@@ -55,6 +55,7 @@ Invoke a skillwiki skill when the user:
 - Mentions crystallizing a session into a note
 - Talks about project workspaces, ADRs, or distillation
 - Wants to quickly capture an idea, bug, task, or note without interrupting their workflow
+- Needs unknown-agent HTTP MCP connect (CLI + dotenv; no plugin/connector)
 - Wants to archive or clean up old vault pages
 - Wants to hard-delete a vault path without snapshot resurrection (`wiki-remove`)
 - Needs to detect source drift or re-ingest updated content
@@ -193,6 +194,7 @@ If the vault has `.WIKI_GIT_FROZEN`:
 | `wiki-reingest` | Detect drift in raw sources (sha256 comparison) and re-ingest updated content |
 | `wiki-add-task` | Quick-capture ideas, bugs, tasks, notes (captures via wiki_capture on leaf hosts; local raw/transcripts/ only on authoring hosts) |
 | `skillwiki-mcp` | HTTP MCP captures (`wiki_capture` / `wiki_log_append`); never local raw/transcripts on leaf hosts. `wiki_log_append` returns a receipt; verify via `wiki_read_page(event_path)`. Use `wiki_read_page` `tail_bytes` to browse oversized `log.md`. |
+| `skillwiki-connect` | Unknown-agent HTTP MCP first-run: ingest a chat-attached env file with `skillwiki connect --from-file` (never paste-into-chat, never `skillwiki init`, never Drive). |
 | `wiki-adapter-prd` | Map foreign PRD formats (CodeStable, RFC, AIDE, Hermes) into vault pages |
 | `proj-init` | Bootstrap a project workspace (README, requirements, architecture) |
 | `proj-work` | Open or run a work item under a project's work/ directory |
@@ -243,11 +245,11 @@ for code changes.
 
 ## CLI Backbone
 All skills are backed by the `skillwiki` CLI — a deterministic tool with no LLM calls. It handles path resolution, config management, validation, health reporting, and linting. Skills invoke it via Bash for the mechanical parts and use the active agent for the creative parts.
-Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `path`, `lang`, `install`, `fleet context`, `fleet validate`, `graph build`, `query`, `vectors rebuild`, `vectors status`, `sources pending`, `sources compile`, `sources review`, `sources reviews`, `sources disposition`, `sources dispose`, `archive`, `remove`, `drift`, `dedup`, `compound`, `tag-sync`, `tag reconcile`, `page publish`, `sync status`, `seed`, `stale`, `claim`, `claims audit`, `observe`, `canvas generate`, `mcp`, `mcp-auth`.
+Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `connect`, `path`, `lang`, `install`, `fleet context`, `fleet validate`, `graph build`, `query`, `vectors rebuild`, `vectors status`, `sources pending`, `sources compile`, `sources review`, `sources reviews`, `sources disposition`, `sources dispose`, `archive`, `remove`, `drift`, `dedup`, `compound`, `tag-sync`, `tag reconcile`, `page publish`, `sync status`, `seed`, `stale`, `claim`, `claims audit`, `observe`, `canvas generate`, `mcp`, `mcp-auth`.
 Optional read-only MCP (`skillwiki mcp`) exposes pending/compile/review list tools. Do not use MCP for compile claim, publish, or review writes.
 `skillwiki claim` binds a transcript to a work item only through an exact `raw/transcripts/...` path in `source:` / `sources:` / `closes:`. A `--project` that contradicts the capture's explicit project is rejected. `skillwiki stale --project` uses exact normalized slugs, not substring matching. `skillwiki claims audit` is the read-only integrity report for duplicate, malformed, dangling, cross-project, and unbacked claims; it never rewrites captures or work items.
 
-Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes the nonblocking source-lifecycle backlog. Pending captures are informational and do not make health fail. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only, including HTTP MCP URL/auth presence and the frozen-leaf write path. Pass `--check-mcp` for a live initialize handshake and pin/tool-list lag; the default doctor path does not contact HTTP MCP. Fetch-only leaves set `vault_sync.push_enabled=false`; doctor must not tell them to run `vault-sync-install` to enable wiki-push. New hosts need an issued host-id bearer from metal `skillwiki mcp-auth issue-host` before handshake can pass. There is no second MCP admin skill. Run `skillwiki config list` to see current configuration.
+Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes the nonblocking source-lifecycle backlog. Pending captures are informational and do not make health fail. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only, including HTTP MCP URL/auth presence and the frozen-leaf write path. Pass `--check-mcp` for a live initialize handshake and pin/tool-list lag; the default doctor path does not contact HTTP MCP. Fetch-only leaves set `vault_sync.push_enabled=false`; doctor must not tell them to run `vault-sync-install` to enable wiki-push. New hosts need an issued host-id bearer from metal `skillwiki mcp-auth issue-host` before handshake can pass. Unknown agents (no plugin/connector) ingest the chat-attached env file with `skillwiki connect --from-file` (or `--from-stdin`); do not instruct paste-into-chat. Connector hosts use process env or Configure. There is no second MCP admin skill. Run `skillwiki config list` to see current configuration.
 
 ## Runtime Host Context and Fleet Freshness
 Resolve the active project vault with `skillwiki path` first. Then pass that exact path to `skillwiki --human fleet context <vault>` for host identity and safety guidance. `fleet context` is authoritative for host identity. It overrides stale injected SessionStart context, remembered workspace context, and prior conversation summaries. `fleet context` is local and network-free; it reports `identity_status`, resolver trace, warnings, and the fact that remote freshness was not checked.

package/skills/using-skillwiki/activation.md

@@ -26,6 +26,7 @@ Invoke a SkillWiki skill when the user: wants vault/wiki/knowledge-base operatio
 | `wiki-reingest` | Detect source drift and re-ingest updated content |
 | `wiki-add-task` | Quick-capture ideas, bugs, tasks, notes (HTTP MCP on leaf hosts; local files on authoring hosts) |
 | `skillwiki-mcp` | HTTP MCP captures (`wiki_capture`, `wiki_log_append`); never local writes on leaf hosts |
+| `skillwiki-connect` | Unknown-agent HTTP MCP connect: `skillwiki connect --from-file` (never paste-into-chat) |
 | `wiki-adapter-prd` | Map foreign PRD formats (CodeStable, RFC, AIDE, Hermes) |
 | `wiki-sync` | Safely sync vault git repository |
 | `wiki-canvas` | Generate Obsidian Canvas visualization |