@agentskit/doc-bridge 1.11.2 → 1.12.0

package/dist/cli/program.js

@@ -1,6 +1,6 @@
 // src/cli/program.ts
-import { closeSync as closeSync3, existsSync as existsSync30, mkdirSync as mkdirSync13, openSync as openSync3, readFileSync as readFileSync33, renameSync as renameSync6, rmSync as rmSync3, writeFileSync as writeFileSync14 } from "fs";
-import { dirname as dirname13, relative as relative12, resolve as resolve33 } from "path";
+import { closeSync as closeSync3, existsSync as existsSync31, mkdirSync as mkdirSync13, openSync as openSync3, readFileSync as readFileSync34, renameSync as renameSync6, rmSync as rmSync3, writeFileSync as writeFileSync14 } from "fs";
+import { dirname as dirname14, relative as relative13, resolve as resolve34 } from "path";
 import { createInterface } from "readline/promises";
 
 // src/config/load-config.ts
@@ -871,8 +871,8 @@ var projectRootFromConfigPath = (configFilePath, projectRootField) => {
 };
 
 // src/conformance/documentation-standard-v1.ts
-import { closeSync as closeSync2, existsSync as existsSync11, fstatSync as fstatSync2, openSync as openSync2, readFileSync as readFileSync12, realpathSync as realpathSync7 } from "fs";
-import { isAbsolute as isAbsolute5, relative as relative7, resolve as resolve11, sep as sep8 } from "path";
+import { closeSync as closeSync2, existsSync as existsSync12, fstatSync as fstatSync2, openSync as openSync2, readFileSync as readFileSync13, realpathSync as realpathSync8 } from "fs";
+import { isAbsolute as isAbsolute6, relative as relative8, resolve as resolve12, sep as sep9 } from "path";
 
 // src/conformance/ecosystem-contract.ts
 import { z as z2 } from "zod";
@@ -922,10 +922,9 @@ var ManifestSchema = z2.object({
   schemaVersion: z2.literal(2),
   parentBrand: z2.object({ id: NonEmptyStringSchema, name: NonEmptyStringSchema }).passthrough(),
   products: z2.array(ProductSchema).min(1),
-  // Legacy three-product shim or full public product projection of products[].
-  properties: z2.array(LegacyPropertySchema).refine((value) => value.length === 3 || value.length === 6, {
-    message: "must project either the legacy three products or the full public product catalog"
-  }),
+  // Deprecated compatibility shim: when present, every entry projects one products[] record.
+  // Membership is whatever the canonical manifest lists; no product is required by name.
+  properties: z2.array(LegacyPropertySchema).optional(),
   builder: z2.object({ id: NonEmptyStringSchema, name: NonEmptyStringSchema, url: HttpsUrlSchema }).passthrough().optional()
 }).passthrough();
 var EvidenceSchema = z2.discriminatedUnion("type", [
@@ -959,15 +958,6 @@ var ClaimsSchema = z2.object({
   manifestSchemaVersion: z2.literal(2),
   products: z2.array(ClaimProductSchema)
 }).passthrough();
-var LEGACY_PRODUCT_IDS = ["agentskit", "playbook", "registry"];
-var PUBLIC_PRODUCT_IDS = [
-  "agentskit",
-  "registry",
-  "agentskit-chat",
-  "playbook",
-  "doc-bridge",
-  "code-review"
-];
 var parseCanonicalEcosystemContract = (manifestInput, claimsInput) => {
   const manifest = ManifestSchema.parse(manifestInput);
   const claims = ClaimsSchema.parse(claimsInput);
@@ -993,12 +983,14 @@ var parseCanonicalEcosystemContract = (manifestInput, claimsInput) => {
       if (!products.has(nextId)) throw new Error(`Product ${product.id} references unknown product ${nextId}.`);
     }
   }
-  const propertyIds = manifest.properties.length === 6 ? PUBLIC_PRODUCT_IDS : LEGACY_PRODUCT_IDS;
-  for (const [index, id] of propertyIds.entries()) {
-    const legacy = manifest.properties[index];
+  const propertyIds = /* @__PURE__ */ new Set();
+  for (const [index, legacy] of (manifest.properties ?? []).entries()) {
+    const id = legacy.id;
     const product = products.get(id);
-    if (!legacy || !product || legacy.id !== id || !product.surfaces.home) {
-      throw new Error(`Legacy property ${index} must project product ${id}.`);
+    if (propertyIds.has(id)) throw new Error(`Legacy property ${id} is listed more than once.`);
+    propertyIds.add(id);
+    if (!product || !product.surfaces.home) {
+      throw new Error(`Legacy property ${index} (${id}) must project a manifest product with a home surface.`);
     }
     const expected = {
       name: product.name,
@@ -1049,8 +1041,8 @@ var parseCanonicalEcosystemContract = (manifestInput, claimsInput) => {
 };
 
 // src/index-builder/build-index.ts
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync11, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname4, join as join10 } from "path";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync12, writeFileSync as writeFileSync2 } from "fs";
+import { dirname as dirname5, join as join11 } from "path";
 
 // src/discovery/documentation.ts
 import { parseDocument } from "yaml";
@@ -1418,8 +1410,8 @@ var nodeStart = (node) => {
 var conventionalPackageReference = (path, agentRoot) => {
   const prefix = `${agentRoot.replace(/\/$/, "")}/`;
   if (!path.startsWith(prefix)) return void 0;
-  const relative13 = path.slice(prefix.length);
-  const [scope, file] = relative13.split("/");
+  const relative14 = path.slice(prefix.length);
+  const [scope, file] = relative14.split("/");
   if (scope !== "packages" && scope !== "apps" || !file) return void 0;
   return file.replace(/\.mdx?$/, "");
 };
@@ -1732,9 +1724,9 @@ var applyDocumentationDeclarations = (snapshot, documents, options = {}) => {
 };
 
 // src/discovery/repository.ts
-import { execFileSync } from "child_process";
-import { existsSync as existsSync5, readFileSync as readFileSync3 } from "fs";
-import { basename as basename2, dirname as dirname2, extname as extname2, join as join5, relative as relative3, resolve as resolve4, sep as sep3 } from "path";
+import { execFileSync as execFileSync2 } from "child_process";
+import { existsSync as existsSync6, readFileSync as readFileSync4 } from "fs";
+import { basename as basename2, dirname as dirname3, extname as extname2, join as join6, relative as relative4, resolve as resolve5, sep as sep4 } from "path";
 import * as ts2 from "typescript";
 
 // src/lib/glob-expand.ts
@@ -1750,9 +1742,9 @@ var containedProjectPath = (root, path) => {
   const unresolved = resolve2(projectRoot, path);
   const unresolvedRelative = relative(projectRoot, unresolved);
   if (isAbsolute(unresolvedRelative) || unresolvedRelative === ".." || unresolvedRelative.startsWith(`..${sep}`)) return void 0;
-  const canonical = existsSync2(unresolved) ? realpathSync.native(unresolved) : unresolved;
-  const canonicalRelative = relative(projectRoot, canonical);
-  return isAbsolute(canonicalRelative) || canonicalRelative === ".." || canonicalRelative.startsWith(`..${sep}`) ? void 0 : canonical;
+  const canonical2 = existsSync2(unresolved) ? realpathSync.native(unresolved) : unresolved;
+  const canonicalRelative = relative(projectRoot, canonical2);
+  return isAbsolute(canonicalRelative) || canonicalRelative === ".." || canonicalRelative.startsWith(`..${sep}`) ? void 0 : canonical2;
 };
 
 // src/lib/glob-expand.ts
@@ -1844,25 +1836,140 @@ var defaultChecksForTarget = (root, opts) => {
 };
 
 // src/safety/repository.ts
-import { lstatSync, readdirSync as readdirSync2, realpathSync as realpathSync2, statSync as statSync2 } from "fs";
-import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve3, sep as sep2 } from "path";
+import { lstatSync, readdirSync as readdirSync2, realpathSync as realpathSync3, statSync as statSync2 } from "fs";
+import { isAbsolute as isAbsolute3, relative as relative3, resolve as resolve4, sep as sep3 } from "path";
 import { minimatch } from "minimatch";
+
+// src/lib/ignore-filter.ts
+import { execFileSync } from "child_process";
+import { existsSync as existsSync5, readFileSync as readFileSync3, realpathSync as realpathSync2 } from "fs";
+import { dirname as dirname2, isAbsolute as isAbsolute2, join as join4, relative as relative2, resolve as resolve3, sep as sep2 } from "path";
+import ignore from "ignore";
+var toPosix2 = (value) => value.split(sep2).join("/");
+var canonical = (path) => {
+  try {
+    return realpathSync2.native(resolve3(path));
+  } catch {
+    return resolve3(path);
+  }
+};
+var below = (root, candidate) => {
+  const rel = relative2(root, candidate);
+  if (rel === "") return "";
+  if (isAbsolute2(rel) || rel === ".." || rel.startsWith(`..${sep2}`)) return void 0;
+  return toPosix2(rel);
+};
+var gitVisibleFiles = (root) => {
+  try {
+    const inside = execFileSync("git", ["rev-parse", "--is-inside-work-tree"], {
+      cwd: root,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+    if (inside !== "true") return void 0;
+    const output = execFileSync("git", ["ls-files", "-z", "--cached", "--others", "--exclude-standard", "--", "."], {
+      cwd: root,
+      encoding: "utf8",
+      maxBuffer: 256 * 1024 * 1024,
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    return output.split("\0").filter(Boolean);
+  } catch {
+    return void 0;
+  }
+};
+var gitFilter = (root, canonicalRoot, visible) => {
+  const files = new Set(visible.filter((path) => !path.endsWith("/")));
+  const directories = /* @__PURE__ */ new Set([""]);
+  for (const file of visible) {
+    let parent = file;
+    for (; ; ) {
+      const slash = parent.lastIndexOf("/");
+      if (slash === -1) break;
+      parent = parent.slice(0, slash);
+      if (directories.has(parent)) break;
+      directories.add(parent);
+    }
+  }
+  return {
+    mode: "git",
+    isIgnored: (absolutePath, isDirectory) => {
+      const rel = below(root, resolve3(absolutePath)) ?? below(canonicalRoot, canonical(absolutePath));
+      if (rel === void 0) return false;
+      return isDirectory ? !directories.has(rel) : !files.has(rel);
+    }
+  };
+};
+var gitignoreFilter = (root) => {
+  const rules = /* @__PURE__ */ new Map();
+  const rulesFor = (directory) => {
+    if (rules.has(directory)) return rules.get(directory);
+    const file = join4(directory, ".gitignore");
+    let matcher;
+    if (existsSync5(file)) {
+      try {
+        matcher = ignore().add(readFileSync3(file, "utf8"));
+      } catch {
+        matcher = void 0;
+      }
+    }
+    rules.set(directory, matcher);
+    return matcher;
+  };
+  const ignoredCache = /* @__PURE__ */ new Map();
+  const isIgnored = (absolutePath, isDirectory) => {
+    const target2 = resolve3(absolutePath);
+    const rel = below(root, target2);
+    if (rel === void 0 || rel === "") return false;
+    const key = `${isDirectory ? "d" : "f"}:${rel}`;
+    const cached = ignoredCache.get(key);
+    if (cached !== void 0) return cached;
+    const parent = dirname2(target2);
+    let result = parent !== root && below(root, parent) !== void 0 ? isIgnored(parent, true) : false;
+    if (!result) {
+      let decided;
+      let directory = root;
+      const segments = below(root, parent)?.split("/").filter(Boolean) ?? [];
+      for (let index = 0; index <= segments.length; index += 1) {
+        if (index > 0) directory = join4(directory, segments[index - 1]);
+        const matcher = rulesFor(directory);
+        if (!matcher) continue;
+        const local = toPosix2(relative2(directory, target2)) + (isDirectory ? "/" : "");
+        const verdict = matcher.test(local);
+        if (verdict.ignored) decided = true;
+        else if (verdict.unignored) decided = false;
+      }
+      result = decided ?? false;
+    }
+    ignoredCache.set(key, result);
+    return result;
+  };
+  return { mode: "gitignore", isIgnored };
+};
+var createIgnoreFilter = (root) => {
+  const base = resolve3(root);
+  const canonicalRoot = canonical(root);
+  const visible = gitVisibleFiles(canonicalRoot);
+  return visible ? gitFilter(base, canonicalRoot, visible) : gitignoreFilter(base);
+};
+
+// src/safety/repository.ts
 var DEFAULT_SAFETY_EXCLUDES = ["**/.git/**", "**/node_modules/**", "**/dist/**", "**/build/**", "**/coverage/**", "**/.doc-bridge/**", "**/.next/**", "**/out/**", "**/.turbo/**", "**/.svelte-kit/**", "**/.mcpb-build/**", "**/.mcpb-output/**", "**/.env", "**/.env.*", "**/*secret*", "**/*credential*", "**/*.pem", "**/*.key"];
 var containedPath = (root, candidate) => {
-  const projectRoot = realpathSync2.native(resolve3(root));
-  const unresolved = resolve3(projectRoot, candidate);
-  const unresolvedRelative = relative2(projectRoot, unresolved);
-  if (isAbsolute2(unresolvedRelative) || unresolvedRelative === ".." || unresolvedRelative.startsWith(`..${sep2}`)) return void 0;
+  const projectRoot = realpathSync3.native(resolve4(root));
+  const unresolved = resolve4(projectRoot, candidate);
+  const unresolvedRelative = relative3(projectRoot, unresolved);
+  if (isAbsolute3(unresolvedRelative) || unresolvedRelative === ".." || unresolvedRelative.startsWith(`..${sep3}`)) return void 0;
   try {
-    const canonical = realpathSync2.native(unresolved);
-    const canonicalRelative = relative2(projectRoot, canonical);
-    return isAbsolute2(canonicalRelative) || canonicalRelative === ".." || canonicalRelative.startsWith(`..${sep2}`) ? void 0 : canonical;
+    const canonical2 = realpathSync3.native(unresolved);
+    const canonicalRelative = relative3(projectRoot, canonical2);
+    return isAbsolute3(canonicalRelative) || canonicalRelative === ".." || canonicalRelative.startsWith(`..${sep3}`) ? void 0 : canonical2;
   } catch {
     return unresolved;
   }
 };
 var safeWalkFiles = (root, options = {}) => {
-  const projectRoot = resolve3(root);
+  const projectRoot = resolve4(root);
   const extensions = options.extensions ?? [];
   const excludes = options.exclude ?? DEFAULT_SAFETY_EXCLUDES;
   const files = [];
@@ -1870,6 +1977,7 @@ var safeWalkFiles = (root, options = {}) => {
   let reason;
   const started = Date.now();
   const matchesExclude = (path) => excludes.some((pattern) => minimatch(path, pattern, { dot: true }));
+  const ignored = options.respectIgnore === false ? void 0 : createIgnoreFilter(projectRoot);
   const visit2 = (directory) => {
     if (reason) return;
     if (options.maxTimeMs !== void 0 && Date.now() - started >= options.maxTimeMs) {
@@ -1887,8 +1995,8 @@ var safeWalkFiles = (root, options = {}) => {
       return;
     }
     for (const name of entries.sort()) {
-      const absolute = resolve3(directory, name);
-      const relativePath3 = relative2(projectRoot, absolute).split(sep2).join("/");
+      const absolute = resolve4(directory, name);
+      const relativePath3 = relative3(projectRoot, absolute).split(sep3).join("/");
       if (matchesExclude(relativePath3) || name === ".git") continue;
       let stats;
       try {
@@ -1897,6 +2005,7 @@ var safeWalkFiles = (root, options = {}) => {
         continue;
       }
       if (stats.isSymbolicLink()) continue;
+      if (ignored?.isIgnored(absolute, stats.isDirectory())) continue;
       if (stats.isDirectory()) {
         visit2(absolute);
         if (reason) return;
@@ -2119,11 +2228,11 @@ var relativeToPackage = (modulePath, packagePath) => {
   const prefix = `${packagePath}/`;
   return modulePath.startsWith(prefix) ? modulePath.slice(prefix.length) : void 0;
 };
-var join4 = (...parts) => parts.filter(Boolean).join("/");
+var join5 = (...parts) => parts.filter(Boolean).join("/");
 var conventionalAreaPath = (module, depth = DEFAULT_AREA_DEPTH, roots = DEFAULT_AREA_ROOTS) => {
-  const relative13 = relativeToPackage(normalize(module.path), normalize(module.packagePath));
-  if (relative13 === void 0) return void 0;
-  const segments = relative13.split("/");
+  const relative14 = relativeToPackage(normalize(module.path), normalize(module.packagePath));
+  if (relative14 === void 0) return void 0;
+  const segments = relative14.split("/");
   segments.pop();
   if (!segments.length) return void 0;
   const rootPrefix = [];
@@ -2135,7 +2244,7 @@ var conventionalAreaPath = (module, depth = DEFAULT_AREA_DEPTH, roots = DEFAULT_
   const taken = rest.slice(0, Math.max(1, depth));
   if (!taken.length) return void 0;
   const packagePath = normalize(module.packagePath);
-  return join4(packagePath === "." ? "" : packagePath, ...rootPrefix, ...taken);
+  return join5(packagePath === "." ? "" : packagePath, ...rootPrefix, ...taken);
 };
 var encloses = (candidate, path) => path === candidate || path.startsWith(`${candidate}/`);
 var deriveAreas = (options) => {
@@ -2819,13 +2928,13 @@ var MAX_MARKDOWN_NOTES = 32;
 var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var readJson = (path) => {
   try {
-    const value = JSON.parse(readFileSync3(path, "utf8"));
+    const value = JSON.parse(readFileSync4(path, "utf8"));
     return isRecord(value) ? { value } : { error: "JSON root is not an object" };
   } catch (error) {
     return { error: error instanceof Error ? error.message : String(error) };
   }
 };
-var relativePath = (root, path) => toPosix(relative3(root, path)) || ".";
+var relativePath = (root, path) => toPosix(relative4(root, path)) || ".";
 var lineEvidence = (source, root, path, lineStart, lineEnd) => ({
   source,
   path: relativePath(root, path),
@@ -2843,11 +2952,11 @@ var workspacePatterns = (root, rootManifest) => {
   if (isRecord(fromPackageJson) && Array.isArray(fromPackageJson.packages)) {
     return fromPackageJson.packages.filter((value) => typeof value === "string");
   }
-  const workspacePath = join5(root, "pnpm-workspace.yaml");
-  if (!existsSync5(workspacePath)) return [];
+  const workspacePath = join6(root, "pnpm-workspace.yaml");
+  if (!existsSync6(workspacePath)) return [];
   const patterns = [];
   let inPackages = false;
-  for (const line of readFileSync3(workspacePath, "utf8").split(/\r?\n/)) {
+  for (const line of readFileSync4(workspacePath, "utf8").split(/\r?\n/)) {
     const trimmed = line.trim();
     if (trimmed === "packages:") {
       inPackages = true;
@@ -2865,7 +2974,7 @@ var workspacePatterns = (root, rootManifest) => {
 var discoverPackages = (root, rootManifest, config) => {
   const packages = [];
   const coverage = [];
-  const rootManifestPath = join5(root, "package.json");
+  const rootManifestPath = join6(root, "package.json");
   if (rootManifest) {
     const name = packageName(rootManifest, "");
     packages.push({
@@ -2885,8 +2994,8 @@ var discoverPackages = (root, rootManifest, config) => {
   }
   const dirs = expandWorkspaceGlobs(root, patterns);
   for (const absPath of dirs) {
-    const manifestPath = join5(absPath, "package.json");
-    if (!existsSync5(manifestPath)) continue;
+    const manifestPath = join6(absPath, "package.json");
+    if (!existsSync6(manifestPath)) continue;
     const parsed = readJson(manifestPath);
     if (!parsed.value) {
       coverage.push({ status: "partial", reason: `${relativePath(root, manifestPath)}: ${parsed.error ?? "invalid package.json"}` });
@@ -2896,7 +3005,7 @@ var discoverPackages = (root, rootManifest, config) => {
     const name = packageName(parsed.value, path);
     const id = entityId("package", name ?? path);
     const duplicate = packages.find((pkg) => pkg.id === id);
-    if (duplicate && duplicate.absPath !== absPath) {
+    if (duplicate && toPosix(duplicate.absPath) !== toPosix(absPath)) {
       throw new Error(`Package identity collision for "${id}": "${duplicate.path}" and "${path}".`);
     }
     if (!duplicate) packages.push({ id, ...name ? { name } : {}, path, absPath, manifestPath, manifest: parsed.value });
@@ -2904,13 +3013,13 @@ var discoverPackages = (root, rootManifest, config) => {
   coverage.push({ status: "complete" });
   return { packages: packages.sort((a, b) => a.id.localeCompare(b.id)), coverage };
 };
-var packageForModule = (packages, absPath) => [...packages].filter((pkg) => absPath === pkg.absPath || absPath.startsWith(`${pkg.absPath}${sep3}`)).sort((a, b) => b.absPath.length - a.absPath.length)[0];
+var packageForModule = (packages, absPath) => [...packages].filter((pkg) => absPath === pkg.absPath || absPath.startsWith(`${pkg.absPath}${sep4}`)).sort((a, b) => b.absPath.length - a.absPath.length)[0];
 var readCompilerOptions = (root) => {
   const configPath = ts2.findConfigFile(root, ts2.sys.fileExists, "tsconfig.json");
   if (!configPath) return { options: {} };
   const parsed = ts2.readConfigFile(configPath, ts2.sys.readFile);
   if (parsed.error) return { options: {}, error: ts2.flattenDiagnosticMessageText(parsed.error.messageText, "\n") };
-  const config = ts2.parseJsonConfigFileContent(parsed.config, ts2.sys, dirname2(configPath));
+  const config = ts2.parseJsonConfigFileContent(parsed.config, ts2.sys, dirname3(configPath));
   if (config.errors.length) {
     return {
       options: config.options,
@@ -3041,17 +3150,17 @@ var moduleReferences = (root, path, sourceFile, runtimeWiringMethods) => {
   };
 };
 var resolveRelativeModule = (specifier, containingFile, modulePaths) => {
-  const base = resolve4(dirname2(containingFile), specifier);
+  const base = resolve5(dirname3(containingFile), specifier);
   const extension = extname2(base);
   const extensionlessBase = extension ? base.slice(0, -extension.length) : base;
   const candidates = [
     base,
     ...SOURCE_EXTENSIONS.map((extension2) => `${base}${extension2}`),
-    ...SOURCE_EXTENSIONS.map((extension2) => join5(base, `index${extension2}`)),
+    ...SOURCE_EXTENSIONS.map((extension2) => join6(base, `index${extension2}`)),
     ...SOURCE_EXTENSIONS.map((extension2) => `${extensionlessBase}${extension2}`),
-    ...SOURCE_EXTENSIONS.map((extension2) => join5(extensionlessBase, `index${extension2}`))
+    ...SOURCE_EXTENSIONS.map((extension2) => join6(extensionlessBase, `index${extension2}`))
   ];
-  return candidates.map((candidate) => modulePaths.get(resolve4(candidate))).find(Boolean);
+  return candidates.map((candidate) => modulePaths.get(resolve5(candidate))).find(Boolean);
 };
 var resolveReference = (reference8, containingFile, modules, packages, compilerOptions) => {
   if (reference8.specifier.startsWith(".") || reference8.specifier.startsWith("/")) {
@@ -3061,7 +3170,7 @@ var resolveReference = (reference8, containingFile, modules, packages, compilerO
   const packageTarget = [...packages].filter((pkg) => pkg.name && (reference8.specifier === pkg.name || reference8.specifier.startsWith(`${pkg.name}/`))).sort((a, b) => (b.name?.length ?? 0) - (a.name?.length ?? 0))[0];
   if (packageTarget) return { targetId: packageTarget.id };
   const resolved = ts2.resolveModuleName(reference8.specifier, containingFile, compilerOptions, ts2.sys).resolvedModule?.resolvedFileName;
-  const resolvedTarget = resolved ? modules.get(resolve4(resolved)) : void 0;
+  const resolvedTarget = resolved ? modules.get(resolve5(resolved)) : void 0;
   if (resolvedTarget) return { targetId: resolvedTarget.entityId };
   return { targetId: entityId("external", reference8.specifier) };
 };
@@ -3078,26 +3187,26 @@ var sourceRevision = (root, files) => {
     value: sha256NormalizedV1(
       files.map((path) => ({
         path: relativePath(root, path),
-        contentHash: sha256NormalizedV1(readFileSync3(path, "utf8"))
+        contentHash: sha256NormalizedV1(readFileSync4(path, "utf8"))
       }))
     ),
     kind: "content"
   });
   try {
-    const status = execFileSync("git", ["status", "--porcelain", "--untracked-files=all"], {
+    const status = execFileSync2("git", ["status", "--porcelain", "--untracked-files=all"], {
       cwd: root,
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
     if (status) return contentRevision();
-    const value = execFileSync("git", ["rev-parse", "HEAD"], { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    const value = execFileSync2("git", ["rev-parse", "HEAD"], { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
     if (value) return { value, kind: "git" };
   } catch {
   }
   return contentRevision();
 };
 var hasPackageManagerMetadata = (root, rootManifest) => Boolean(
-  rootManifest?.packageManager || existsSync5(join5(root, "pnpm-lock.yaml")) || existsSync5(join5(root, "pnpm-workspace.yaml")) || existsSync5(join5(root, "yarn.lock")) || existsSync5(join5(root, "bun.lock")) || existsSync5(join5(root, "bun.lockb")) || existsSync5(join5(root, "package-lock.json"))
+  rootManifest?.packageManager || existsSync6(join6(root, "pnpm-lock.yaml")) || existsSync6(join6(root, "pnpm-workspace.yaml")) || existsSync6(join6(root, "yarn.lock")) || existsSync6(join6(root, "bun.lock")) || existsSync6(join6(root, "bun.lockb")) || existsSync6(join6(root, "package-lock.json"))
 );
 var PIPELINE_VERSION = "1.5.0";
 var ANALYZER_VERSIONS = { repository: "1.3.0", "js-ts": "1.3.5", markdown: MARKDOWN_ANALYZER_VERSION, graph: GRAPH_ANALYZER_VERSION };
@@ -3122,12 +3231,12 @@ var artifact = (root, config, files, entities, relations, coverage) => {
   return DiscoverySnapshotV1Schema.parse({ ...base, contentHash: contentHashForArtifactV1(base) });
 };
 var discoverRepository = (opts = {}) => {
-  const root = resolve4(opts.root ?? process.cwd());
+  const root = resolve5(opts.root ?? process.cwd());
   const safeOptions = safeWalkOptions(opts.config, {
     maxFiles: opts.maxFiles ?? opts.config?.safety?.maxFiles ?? DEFAULT_MAX_FILES,
     ...opts.maxBytes !== void 0 ? { maxBytes: opts.maxBytes } : {}
   });
-  const rootManifestPath = join5(root, "package.json");
+  const rootManifestPath = join6(root, "package.json");
   const rootManifest = readJson(rootManifestPath).value;
   const packageResult = discoverPackages(root, rootManifest, opts.config);
   const sourceWalk = safeWalkFiles(root, { extensions: SOURCE_EXTENSIONS, ...safeOptions });
@@ -3136,7 +3245,7 @@ var discoverRepository = (opts = {}) => {
   const sourcePaths = sourceWalk.files;
   const documentPaths = documentWalk.files;
   const configPaths = configWalk.files.filter((path) => /(?:^|\/)(?:tsconfig|jsconfig|vite\.config|webpack\.config|rollup\.config|next\.config|jest\.config|eslint\.config|vitest\.config)/.test(relativePath(root, path)));
-  const allFiles = [...new Set([rootManifestPath, ...sourcePaths, ...documentPaths, ...configPaths].filter(existsSync5))].sort();
+  const allFiles = [...new Set([rootManifestPath, ...sourcePaths, ...documentPaths, ...configPaths].filter(existsSync6))].sort();
   const entities = /* @__PURE__ */ new Map();
   const relations = /* @__PURE__ */ new Map();
   const addEntity = (entity) => {
@@ -3159,7 +3268,7 @@ var discoverRepository = (opts = {}) => {
     relations.set(relation.id, { ...existing, evidence: [...evidence2.values()] });
   };
   for (const pkg of packageResult.packages) {
-    const text = readFileSync3(pkg.manifestPath, "utf8");
+    const text = readFileSync4(pkg.manifestPath, "utf8");
     addEntity({
       id: pkg.id,
       kind: "package",
@@ -3207,9 +3316,9 @@ var discoverRepository = (opts = {}) => {
     const path = relativePath(root, absPath);
     const pkg = packageForModule(packageResult.packages, absPath);
     const id = entityId("module", path);
-    const text = readFileSync3(absPath, "utf8");
+    const text = readFileSync4(absPath, "utf8");
     const contentHash = fileContentHash(text);
-    modules.set(resolve4(absPath), { absPath, path, entityId: id, ...pkg ? { packageId: pkg.id } : {} });
+    modules.set(resolve5(absPath), { absPath, path, entityId: id, ...pkg ? { packageId: pkg.id } : {} });
     modulesByPath.set(path, id);
     if (pkg) areaModules.push({ moduleId: id, path, packageId: pkg.id, packagePath: pkg.path });
     const priorModule = reuseModuleRelations ? prior?.modules.get(path) : void 0;
@@ -3332,7 +3441,7 @@ var discoverRepository = (opts = {}) => {
   for (const [path, absPath] of documentFiles) {
     let text;
     try {
-      text = readFileSync3(absPath, "utf8");
+      text = readFileSync4(absPath, "utf8");
     } catch {
       unreadableDocuments.push(path);
       ledger.parsedFiles.push(path);
@@ -3451,7 +3560,7 @@ var discoverRepository = (opts = {}) => {
     });
   }
   for (const pkg of packageResult.packages) {
-    const text = readFileSync3(pkg.manifestPath, "utf8");
+    const text = readFileSync4(pkg.manifestPath, "utf8");
     for (const dependency of dependencyEntries(pkg.manifest)) {
       const target2 = packageResult.packages.find((candidate) => candidate.name === dependency.name)?.id ?? entityId("external", dependency.name);
       if (!entities.has(target2)) addEntity({ id: target2, kind: "external", name: dependency.name, provenance: "observed", evidence: [lineEvidence("configuration", root, pkg.manifestPath, firstLineContaining(text, `"${dependency.name}"`))] });
@@ -3490,7 +3599,7 @@ var discoverRepository = (opts = {}) => {
       ledger.skippedFiles.push(module.path);
       continue;
     }
-    const text = readFileSync3(module.absPath, "utf8");
+    const text = readFileSync4(module.absPath, "utf8");
     const sourceFile = ts2.createSourceFile(module.absPath, text, ts2.ScriptTarget.Latest, true, scriptKind(module.absPath));
     const runtimeWiringMethods = includeTestRuntimeWiring || !TEST_MODULE_PATTERN.test(module.path) ? configuredRuntimeWiringMethods : /* @__PURE__ */ new Set();
     const references = moduleReferences(root, module.absPath, sourceFile, runtimeWiringMethods);
@@ -3523,7 +3632,7 @@ var discoverRepository = (opts = {}) => {
 };
 
 // src/lib/bounded-text.ts
-import { closeSync, fstatSync, openSync, readFileSync as readFileSync4 } from "fs";
+import { closeSync, fstatSync, openSync, readFileSync as readFileSync5 } from "fs";
 var MAX_DOCUMENT_BYTES = 4 * 1024 * 1024;
 var MAX_CORPUS_BYTES = 64 * 1024 * 1024;
 var readBoundedText = (path, budget, limits) => {
@@ -3540,7 +3649,7 @@ var readBoundedText = (path, budget, limits) => {
       throw new Error(`Documentation corpus exceeds the ${maxCorpusBytes} byte read budget.`);
     }
     budget.used += stat.size;
-    return readFileSync4(fd, "utf8");
+    return readFileSync5(fd, "utf8");
   } finally {
     closeSync(fd);
   }
@@ -3730,8 +3839,8 @@ var slugFromPath = (relPath) => {
 };
 
 // src/lib/walk.ts
-import { lstatSync as lstatSync2, readdirSync as readdirSync3, realpathSync as realpathSync3 } from "fs";
-import { join as join6 } from "path";
+import { lstatSync as lstatSync2, readdirSync as readdirSync3, realpathSync as realpathSync4 } from "fs";
+import { join as join7 } from "path";
 var DEFAULT_SKIP = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "coverage", ".doc-bridge"]);
 var DEFAULT_MAX_FILES2 = 1e4;
 var walkFiles = (root, opts) => {
@@ -3739,10 +3848,11 @@ var walkFiles = (root, opts) => {
   const skip = opts?.skipDirs ?? DEFAULT_SKIP;
   const out = [];
   const visited = /* @__PURE__ */ new Set();
+  const ignored = opts?.respectIgnore === false ? void 0 : createIgnoreFilter(root);
   const visit2 = (dir) => {
     let canonicalDir;
     try {
-      canonicalDir = realpathSync3.native(dir);
+      canonicalDir = realpathSync4.native(dir);
     } catch {
       return;
     }
@@ -3755,7 +3865,7 @@ var walkFiles = (root, opts) => {
       return;
     }
     for (const name of entries) {
-      const abs = join6(dir, name);
+      const abs = join7(dir, name);
       let st;
       try {
         st = lstatSync2(abs);
@@ -3764,12 +3874,12 @@ var walkFiles = (root, opts) => {
       }
       if (st.isSymbolicLink()) continue;
       if (st.isDirectory()) {
-        if (skip.has(name)) continue;
+        if (skip.has(name) || ignored?.isIgnored(abs, true)) continue;
         visit2(abs);
         continue;
       }
       if (!st.isFile()) continue;
-      if (extensions.some((ext) => name.endsWith(ext))) {
+      if (extensions.some((ext) => name.endsWith(ext)) && !ignored?.isIgnored(abs, false)) {
         if (out.length >= (opts?.maxFiles ?? DEFAULT_MAX_FILES2)) {
           throw new Error(`Documentation corpus exceeds the ${opts?.maxFiles ?? DEFAULT_MAX_FILES2} file limit.`);
         }
@@ -4061,7 +4171,7 @@ var buildLookup = (config, packages, corpus, indexOutFile, humanDocs = {}, root
 };
 
 // src/version.ts
-var PACKAGE_VERSION = "1.11.2";
+var PACKAGE_VERSION = "1.12.0";
 
 // src/index-builder/capabilities.ts
 var renderCapabilitiesJson = (config, index, paths) => {
@@ -4095,8 +4205,8 @@ var renderCapabilitiesJson = (config, index, paths) => {
 };
 
 // src/render/template-source.ts
-import { readFileSync as readFileSync5 } from "fs";
-import { resolve as resolve5 } from "path";
+import { readFileSync as readFileSync6 } from "fs";
+import { resolve as resolve6 } from "path";
 
 // src/render/engine.ts
 import {
@@ -4651,10 +4761,10 @@ var BUNDLED_TEMPLATES = {
 var resolveTemplateSource = (name, config, root) => {
   const override = config.render?.templates?.[name];
   if (!override) return { name, source: BUNDLED_TEMPLATES[name], origin: "bundled" };
-  const path = root ? resolve5(root, override) : resolve5(override);
+  const path = root ? resolve6(root, override) : resolve6(override);
   let source;
   try {
-    source = readFileSync5(path, "utf8");
+    source = readFileSync6(path, "utf8");
   } catch (error) {
     throw new Error(`render.templates["${name}"] points at ${toPosix(override)}, which could not be read: ${error instanceof Error ? error.message : String(error)}`);
   }
@@ -4673,8 +4783,8 @@ var compile = (template2) => {
 var renderNamedTemplate = (name, variables, config, root) => renderCompiledTemplate(compile(resolveTemplateSource(name, config, root)), variables);
 
 // src/index-builder/project-corpus.ts
-import { basename as basename3, extname as extname3, relative as relative4, resolve as resolve6, sep as sep4 } from "path";
-import { readFileSync as readFileSync6 } from "fs";
+import { basename as basename3, extname as extname3, relative as relative5, resolve as resolve7, sep as sep5 } from "path";
+import { readFileSync as readFileSync7 } from "fs";
 var CORPUS_PROJECTION_VERSION = 2;
 var PROJECTED_ENTRY_TYPES = ["document", "module"];
 var isProjectedEntry = (entry) => PROJECTED_ENTRY_TYPES.includes(entry.type);
@@ -4693,14 +4803,14 @@ var isInput = (path, name) => {
   return CONFIG_INPUT_PATTERN.test(path);
 };
 var repositoryInputs = (root, config) => {
-  const projectRoot = resolve6(root);
+  const projectRoot = resolve7(root);
   const walk = safeWalkFiles(projectRoot, { extensions: INPUT_EXTENSIONS, ...safeWalkOptions(config) });
   const fingerprints = [];
   for (const absPath of walk.files) {
-    const path = toPosix(relative4(projectRoot, absPath).split(sep4).join("/"));
+    const path = toPosix(relative5(projectRoot, absPath).split(sep5).join("/"));
     if (!isInput(path, basename3(absPath))) continue;
     try {
-      fingerprints.push([path, sha256NormalizedV1(readFileSync6(absPath, "utf8"))]);
+      fingerprints.push([path, sha256NormalizedV1(readFileSync7(absPath, "utf8"))]);
     } catch {
       fingerprints.push([path, "unreadable"]);
     }
@@ -4745,15 +4855,15 @@ var llmsTxtVariables = (config, knowledge, projectName2) => {
 var renderLlmsTxt = (config, knowledge, projectName2, options = {}) => renderNamedTemplate("llms.txt", llmsTxtVariables(config, knowledge, projectName2), config, options.root);
 
 // src/index-builder/human-adapters/index.ts
-import { realpathSync as realpathSync5 } from "fs";
-import { resolve as resolve8, sep as sep6 } from "path";
+import { realpathSync as realpathSync6 } from "fs";
+import { resolve as resolve9, sep as sep7 } from "path";
 
 // src/index-builder/human-adapters/docusaurus.ts
-import { existsSync as existsSync6 } from "fs";
+import { existsSync as existsSync7 } from "fs";
 
 // src/index-builder/human-adapters/core.ts
-import { realpathSync as realpathSync4 } from "fs";
-import { isAbsolute as isAbsolute3, relative as relative5, resolve as resolve7, sep as sep5 } from "path";
+import { realpathSync as realpathSync5 } from "fs";
+import { isAbsolute as isAbsolute4, relative as relative6, resolve as resolve8, sep as sep6 } from "path";
 var optionString = (options, keys) => {
   for (const key of keys) {
     const value = options?.[key];
@@ -4762,11 +4872,12 @@ var optionString = (options, keys) => {
   return void 0;
 };
 var parseFrontmatter2 = (raw) => {
-  if (!raw.startsWith("---\n")) return {};
-  const end = raw.indexOf("\n---", 4);
+  const normalized = raw.includes("\r\n") ? raw.replace(/\r\n/g, "\n") : raw;
+  if (!normalized.startsWith("---\n")) return {};
+  const end = normalized.indexOf("\n---", 4);
   if (end === -1) return {};
   const out = {};
-  for (const line of raw.slice(4, end).split("\n")) {
+  for (const line of normalized.slice(4, end).split("\n")) {
     const match = /^([A-Za-z0-9_-]+):\s*(.+?)\s*$/.exec(line);
     if (match?.[1] && match[2]) out[match[1]] = match[2].replace(/^['"]|['"]$/g, "");
   }
@@ -4784,15 +4895,15 @@ var humanUrl = (slug2, urlPrefix) => {
 };
 var scanMarkdownDocs = (root, humanRoot, options) => {
   const out = [];
-  const projectRoot = realpathSync4.native(resolve7(root));
+  const projectRoot = realpathSync5.native(resolve8(root));
   const absRoot = containedProjectPath(root, humanRoot);
   if (!absRoot) return out;
   const budget = { used: 0 };
   for (const abs of walkFiles(absRoot, { extensions: [".md", ".mdx"] })) {
-    const canonical = realpathSync4.native(abs);
-    const fileRelative = relative5(projectRoot, canonical);
-    if (isAbsolute3(fileRelative) || fileRelative === ".." || fileRelative.startsWith(`..${sep5}`)) continue;
-    const relToHumanRoot = toPosix(abs.replace(`${toPosix(absRoot)}/`, ""));
+    const canonical2 = realpathSync5.native(abs);
+    const fileRelative = relative6(projectRoot, canonical2);
+    if (isAbsolute4(fileRelative) || fileRelative === ".." || fileRelative.startsWith(`..${sep6}`)) continue;
+    const relToHumanRoot = toPosix(abs).replace(`${toPosix(absRoot)}/`, "");
     const raw = readBoundedText(abs, budget);
     if (options?.includeRelPath && !options.includeRelPath(relToHumanRoot, raw)) continue;
     out.push({
@@ -4833,7 +4944,7 @@ var docusaurusRecordId = (relPath, raw) => {
 };
 var readSidebars = (sidebarsFile) => {
   if (!sidebarsFile) return { enabled: false, ids: /* @__PURE__ */ new Set(), autogenDirs: [] };
-  if (!existsSync6(sidebarsFile)) return { enabled: false, ids: /* @__PURE__ */ new Set(), autogenDirs: [] };
+  if (!existsSync7(sidebarsFile)) return { enabled: false, ids: /* @__PURE__ */ new Set(), autogenDirs: [] };
   const raw = readBoundedText(sidebarsFile, { used: 0 }, { maxFileBytes: 1048576, maxCorpusBytes: 1048576 });
   const filter = { ids: /* @__PURE__ */ new Set(), autogenDirs: [] };
   const visit2 = (value) => {
@@ -4883,13 +4994,13 @@ var docusaurusAdapter = {
 };
 
 // src/index-builder/human-adapters/fumadocs.ts
-import { existsSync as existsSync7, readFileSync as readFileSync7 } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync8, readFileSync as readFileSync8 } from "fs";
+import { join as join8 } from "path";
 var readMetaPages = (dir) => {
-  const file = join7(dir, "meta.json");
-  if (!existsSync7(file)) return void 0;
+  const file = join8(dir, "meta.json");
+  if (!existsSync8(file)) return void 0;
   try {
-    const meta = JSON.parse(readFileSync7(file, "utf8"));
+    const meta = JSON.parse(readFileSync8(file, "utf8"));
     return Array.isArray(meta.pages) ? meta.pages.filter((page) => typeof page === "string") : void 0;
   } catch {
     return void 0;
@@ -4904,7 +5015,7 @@ var isListedByMeta = (contentRoot, relPath) => {
   if (isDotFile(relPath)) return false;
   const parts = relPath.split("/");
   for (let i = 0; i < parts.length; i += 1) {
-    const dir = join7(contentRoot, ...parts.slice(0, i));
+    const dir = join8(contentRoot, ...parts.slice(0, i));
     const pages = readMetaPages(dir);
     if (!pages?.length || pages.includes("...")) continue;
     const key = pageKey(parts[i] ?? "");
@@ -4917,7 +5028,7 @@ var fumadocsAdapter = {
   scan: ({ root, config }) => {
     const contentDir = optionString(config.options, ["contentDir", "root"]);
     if (!contentDir) return [];
-    const contentRoot = join7(root, contentDir);
+    const contentRoot = join8(root, contentDir);
     const excludePrefixes = Array.isArray(config.options?.excludePrefixes) ? config.options.excludePrefixes.filter((v) => typeof v === "string") : typeof config.options?.excludePrefix === "string" ? [config.options.excludePrefix] : [];
     if (!excludePrefixes.includes("for-agents")) excludePrefixes.push("for-agents");
     return scanMarkdownDocs(root, contentDir, {
@@ -5061,21 +5172,21 @@ var humanConfigs = (config) => {
 };
 var canonicalPath = (path) => {
   try {
-    return realpathSync5.native(path);
+    return realpathSync6.native(path);
   } catch {
-    return resolve8(path);
+    return resolve9(path);
   }
 };
 var scanHumanDocRecords = (root, config) => {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
-  const agentRoot = canonicalPath(resolve8(root, config.corpus.agent.root));
+  const agentRoot = canonicalPath(resolve9(root, config.corpus.agent.root));
   for (const human of humanConfigs(config)) {
     const adapter = ADAPTERS.find((candidate) => candidate.plugin === human.plugin);
     if (!adapter) continue;
     for (const record of adapter.scan({ root, config: human })) {
       const recordPath = canonicalPath(record.path);
-      if (recordPath === agentRoot || recordPath.startsWith(`${agentRoot}${sep6}`) || record.path.includes("/for-agents/") || record.path.endsWith("/for-agents")) {
+      if (recordPath === agentRoot || recordPath.startsWith(`${agentRoot}${sep7}`) || record.path.includes("/for-agents/") || record.path.endsWith("/for-agents")) {
         continue;
       }
       if (seen.has(record.id)) continue;
@@ -5088,8 +5199,8 @@ var scanHumanDocRecords = (root, config) => {
 var scanHumanDocs = (root, config) => Object.fromEntries(scanHumanDocRecords(root, config).map((doc) => [doc.id, doc.url]));
 
 // src/index-builder/plugins/nx.ts
-import { existsSync as existsSync8, lstatSync as lstatSync3, readFileSync as readFileSync8, realpathSync as realpathSync6 } from "fs";
-import { basename as basename4, dirname as dirname3, isAbsolute as isAbsolute4, relative as relative6, resolve as resolve9, sep as sep7 } from "path";
+import { existsSync as existsSync9, lstatSync as lstatSync3, readFileSync as readFileSync9, realpathSync as realpathSync7 } from "fs";
+import { basename as basename4, dirname as dirname4, isAbsolute as isAbsolute5, relative as relative7, resolve as resolve10, sep as sep8 } from "path";
 var NX_SCAN_SKIP = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
@@ -5102,22 +5213,22 @@ var NX_PROJECT_NAME = /^(?:@[A-Za-z0-9._-]+\/)?[A-Za-z0-9][A-Za-z0-9._-]*$/;
 var isRecord2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var readJsonRecord = (path) => {
   try {
-    const parsed = JSON.parse(readFileSync8(path, "utf8"));
+    const parsed = JSON.parse(readFileSync9(path, "utf8"));
     return isRecord2(parsed) ? parsed : void 0;
   } catch {
     return void 0;
   }
 };
 var safeProjectPath = (root, manifestDir, declaredRoot) => {
-  const candidate = typeof declaredRoot === "string" ? resolve9(root, declaredRoot) : manifestDir;
-  const rel = toPosix(relative6(root, candidate)) || ".";
-  if (isAbsolute4(rel) || rel === ".." || rel.startsWith("../")) return void 0;
+  const candidate = typeof declaredRoot === "string" ? resolve10(root, declaredRoot) : manifestDir;
+  const rel = toPosix(relative7(root, candidate)) || ".";
+  if (isAbsolute5(rel) || rel === ".." || rel.startsWith("../")) return void 0;
   try {
     if (!lstatSync3(candidate).isDirectory()) return void 0;
-    const canonicalRoot = realpathSync6.native(root);
-    const canonicalCandidate = realpathSync6.native(candidate);
-    const canonicalRel = relative6(canonicalRoot, canonicalCandidate);
-    if (isAbsolute4(canonicalRel) || canonicalRel === ".." || canonicalRel.startsWith(`..${sep7}`)) {
+    const canonicalRoot = realpathSync7.native(root);
+    const canonicalCandidate = realpathSync7.native(candidate);
+    const canonicalRel = relative7(canonicalRoot, canonicalCandidate);
+    if (isAbsolute5(canonicalRel) || canonicalRel === ".." || canonicalRel.startsWith(`..${sep8}`)) {
       return void 0;
     }
   } catch {
@@ -5143,7 +5254,7 @@ var inferredChecks = (root, config, projectName2, targets) => {
   return checks.length ? checks : void 0;
 };
 var discoverNxProjects = (root, config) => {
-  if (!existsSync8(resolve9(root, "nx.json"))) return [];
+  if (!existsSync9(resolve10(root, "nx.json"))) return [];
   const manifests = walkFiles(root, {
     extensions: ["project.json", "package.json"],
     skipDirs: NX_SCAN_SKIP,
@@ -5153,7 +5264,7 @@ var discoverNxProjects = (root, config) => {
   for (const manifest of manifests) {
     const json = readJsonRecord(manifest);
     if (!json) continue;
-    const manifestDir = dirname3(manifest);
+    const manifestDir = dirname4(manifest);
     const manifestName = basename4(manifest);
     const isProjectJson = manifestName === "project.json";
     if (!isProjectJson && manifestName !== "package.json") continue;
@@ -5161,7 +5272,7 @@ var discoverNxProjects = (root, config) => {
     if (!isProjectJson && !isRecord2(nx)) continue;
     const path = safeProjectPath(root, manifestDir, isProjectJson ? json.root : void 0);
     if (!path) continue;
-    const projectPackage = isProjectJson ? readJsonRecord(resolve9(root, path, "package.json")) : void 0;
+    const projectPackage = isProjectJson ? readJsonRecord(resolve10(root, path, "package.json")) : void 0;
     const projectName2 = typeof json.name === "string" ? json.name : typeof projectPackage?.name === "string" ? projectPackage.name : basename4(path === "." ? root : path);
     if (!NX_PROJECT_NAME.test(projectName2)) continue;
     const targets = /* @__PURE__ */ new Set();
@@ -5197,8 +5308,8 @@ var discoverNxProjects = (root, config) => {
 };
 
 // src/index-builder/plugins/pnpm-monorepo.ts
-import { existsSync as existsSync9, readFileSync as readFileSync9 } from "fs";
-import { basename as basename5, join as join8 } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync10 } from "fs";
+import { basename as basename5, join as join9 } from "path";
 var parsePnpmWorkspace = (yaml) => {
   const lines = yaml.split("\n");
   const patterns = [];
@@ -5220,10 +5331,10 @@ var parsePnpmWorkspace = (yaml) => {
   return patterns;
 };
 var readPackageJson = (dir) => {
-  const file = join8(dir, "package.json");
-  if (!existsSync9(file)) return null;
+  const file = join9(dir, "package.json");
+  if (!existsSync10(file)) return null;
   try {
-    return JSON.parse(readFileSync9(file, "utf8"));
+    return JSON.parse(readFileSync10(file, "utf8"));
   } catch {
     return null;
   }
@@ -5232,9 +5343,9 @@ var discoverPnpmPackages = (root, config) => {
   const explicit = config.routing?.options?.packages;
   let patterns = explicit;
   if (!patterns?.length) {
-    const workspaceFile = join8(root, "pnpm-workspace.yaml");
-    if (existsSync9(workspaceFile)) {
-      patterns = parsePnpmWorkspace(readFileSync9(workspaceFile, "utf8"));
+    const workspaceFile = join9(root, "pnpm-workspace.yaml");
+    if (existsSync10(workspaceFile)) {
+      patterns = parsePnpmWorkspace(readFileSync10(workspaceFile, "utf8"));
     }
   }
   if (!patterns?.length) return [];
@@ -5935,8 +6046,8 @@ var toKnowledgeEntry = (entry) => ({
 });
 
 // src/enrich/overlay.ts
-import { existsSync as existsSync10, mkdirSync, readFileSync as readFileSync10, renameSync, writeFileSync } from "fs";
-import { join as join9, resolve as resolve10 } from "path";
+import { existsSync as existsSync11, mkdirSync, readFileSync as readFileSync11, renameSync, writeFileSync } from "fs";
+import { join as join10, resolve as resolve11 } from "path";
 
 // src/schemas/enrichment.ts
 import { z as z6 } from "zod";
@@ -6433,14 +6544,14 @@ var EnrichmentProposalListSchema = z7.array(z7.unknown()).max(1024);
 // src/enrich/overlay.ts
 var ENRICHMENT_DIR = ".doc-bridge/enrich";
 var ENRICHMENT_OVERLAY_FILE = "overlay.json";
-var enrichmentDir = (root) => join9(resolve10(root), ENRICHMENT_DIR);
-var enrichmentOverlayPath = (root) => join9(enrichmentDir(root), ENRICHMENT_OVERLAY_FILE);
-var enrichmentCacheDir = (root) => join9(enrichmentDir(root), "cache");
+var enrichmentDir = (root) => join10(resolve11(root), ENRICHMENT_DIR);
+var enrichmentOverlayPath = (root) => join10(enrichmentDir(root), ENRICHMENT_OVERLAY_FILE);
+var enrichmentCacheDir = (root) => join10(enrichmentDir(root), "cache");
 var readEnrichmentOverlay = (root) => {
   const path = enrichmentOverlayPath(root);
-  if (!existsSync10(path)) return void 0;
+  if (!existsSync11(path)) return void 0;
   try {
-    const parsed = EnrichmentOverlayV1Schema.parse(JSON.parse(readFileSync10(path, "utf8")));
+    const parsed = EnrichmentOverlayV1Schema.parse(JSON.parse(readFileSync11(path, "utf8")));
     return parsed.contentHash === enrichmentOverlayContentHash(parsed) ? parsed : void 0;
   } catch {
     return void 0;
@@ -6514,7 +6625,7 @@ var projectEnrichmentOverlay = (overlay, snapshot) => {
   const signals = /* @__PURE__ */ new Map();
   const aliases = /* @__PURE__ */ new Map();
   const summaries = /* @__PURE__ */ new Map();
-  const canonical = /* @__PURE__ */ new Map();
+  const canonical2 = /* @__PURE__ */ new Map();
   const intents = [];
   const relations = [];
   const paths = new Map(snapshot.entities.map((entity) => [entity.id, entity.path]));
@@ -6539,7 +6650,7 @@ var projectEnrichmentOverlay = (overlay, snapshot) => {
         });
         break;
       case "mark-canonical":
-        canonical.set(proposal.entity, proposal.payload.scope);
+        canonical2.set(proposal.entity, proposal.payload.scope);
         bump(proposal.entity, SIGNAL_CANONICAL);
         break;
       case "rank-hint":
@@ -6560,7 +6671,7 @@ var projectEnrichmentOverlay = (overlay, snapshot) => {
     ...signals.size ? { signals } : {},
     ...aliases.size ? { aliases } : {},
     ...summaries.size ? { summaries } : {},
-    ...canonical.size ? { canonical } : {},
+    ...canonical2.size ? { canonical: canonical2 } : {},
     ...intents.length ? { intents } : {},
     ...relations.length ? { relations } : {}
   };
@@ -6587,7 +6698,7 @@ var assertObservedSurvive = (observed, enriched) => {
 var projectName = (root, config) => {
   if (config.project?.name) return config.project.name;
   try {
-    const pkg = JSON.parse(readFileSync11(join10(root, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync12(join11(root, "package.json"), "utf8"));
     if (pkg.name) return pkg.name;
   } catch {
   }
@@ -6600,7 +6711,7 @@ var projectFromSnapshot = (root, config, given, lookup, curated, requested) => {
   for (const entity of observed.entities) {
     if (entity.kind !== "document" || !entity.path) continue;
     try {
-      contents.set(entity.path, readBoundedText(join10(root, entity.path), budget));
+      contents.set(entity.path, readBoundedText(join11(root, entity.path), budget));
     } catch {
     }
   }
@@ -6623,7 +6734,7 @@ var projectFromSnapshot = (root, config, given, lookup, curated, requested) => {
 };
 var existingGeneratedAt = (indexPath, contentHash) => {
   try {
-    const index = JSON.parse(readFileSync11(indexPath, "utf8"));
+    const index = JSON.parse(readFileSync12(indexPath, "utf8"));
     return index.contentHash === contentHash && typeof index.generatedAt === "string" ? index.generatedAt : void 0;
   } catch {
     return void 0;
@@ -6634,7 +6745,7 @@ var buildDocBridgeIndex = (opts) => {
   const config = opts.config;
   const write = opts.write ?? true;
   const outFile = config.index?.outFile ?? ".doc-bridge/index.json";
-  const indexPath = join10(root, outFile);
+  const indexPath = join11(root, outFile);
   const corpus = scanAgentCorpus(root, config);
   const curated = corpus.map(({ absPath: _a, relPath: _r, frontmatter: _f, ...entry }) => entry);
   const retrieval = {
@@ -6684,7 +6795,7 @@ var buildDocBridgeIndex = (opts) => {
     );
   }
   if (write) {
-    mkdirSync2(dirname4(indexPath), { recursive: true });
+    mkdirSync2(dirname5(indexPath), { recursive: true });
     writeFileSync2(indexPath, `${JSON.stringify(index, null, 2)}
 `, "utf8");
   }
@@ -6693,7 +6804,7 @@ var buildDocBridgeIndex = (opts) => {
   if (config.index?.llmsTxt?.enabled !== false) {
     const llmsOut = config.index?.llmsTxt?.outFile ?? "llms.txt";
     llmsTxtRelPath = toPosix(llmsOut);
-    llmsTxtPath = join10(root, llmsOut);
+    llmsTxtPath = join11(root, llmsOut);
     if (write) {
       writeFileSync2(
         llmsTxtPath,
@@ -6705,9 +6816,9 @@ var buildDocBridgeIndex = (opts) => {
   let capabilitiesPath;
   if (config.index?.capabilities?.enabled !== false) {
     const capabilitiesOut = config.index?.capabilities?.outFile ?? ".doc-bridge/capabilities.json";
-    capabilitiesPath = join10(root, capabilitiesOut);
+    capabilitiesPath = join11(root, capabilitiesOut);
     if (write) {
-      mkdirSync2(dirname4(capabilitiesPath), { recursive: true });
+      mkdirSync2(dirname5(capabilitiesPath), { recursive: true });
       writeFileSync2(
         capabilitiesPath,
         renderCapabilitiesJson(config, index, {
@@ -6731,15 +6842,15 @@ var DOCUMENTATION_STANDARD_V1_ID = "documentation-standard-v1";
 var DOCUMENTATION_STANDARD_V1_STATUS = "stable";
 var MAX_TEXT_EVIDENCE_BYTES = 4 * 1024 * 1024;
 var safePath = (root, path) => {
-  const rootAbs = realpathSync7.native(resolve11(root));
-  const unresolved = resolve11(rootAbs, path);
-  const unresolvedRel = relative7(rootAbs, unresolved);
-  if (isAbsolute5(unresolvedRel) || unresolvedRel === ".." || unresolvedRel.startsWith(`..${sep8}`)) return void 0;
-  if (!existsSync11(unresolved)) return unresolved;
+  const rootAbs = realpathSync8.native(resolve12(root));
+  const unresolved = resolve12(rootAbs, path);
+  const unresolvedRel = relative8(rootAbs, unresolved);
+  if (isAbsolute6(unresolvedRel) || unresolvedRel === ".." || unresolvedRel.startsWith(`..${sep9}`)) return void 0;
+  if (!existsSync12(unresolved)) return unresolved;
   try {
-    const abs = realpathSync7.native(unresolved);
-    const rel = relative7(rootAbs, abs);
-    return !isAbsolute5(rel) && rel !== ".." && !rel.startsWith(`..${sep8}`) ? abs : void 0;
+    const abs = realpathSync8.native(unresolved);
+    const rel = relative8(rootAbs, abs);
+    return !isAbsolute6(rel) && rel !== ".." && !rel.startsWith(`..${sep9}`) ? abs : void 0;
   } catch {
     return void 0;
   }
@@ -6767,7 +6878,7 @@ var fileEvidence = (root, path, options) => {
       return {
         exists: true,
         content: "",
-        evidence: { path: toPosix(relative7(resolve11(root), abs)) || ".", detail: "File exists and is non-empty." }
+        evidence: { path: toPosix(relative8(resolve12(root), abs)) || ".", detail: "File exists and is non-empty." }
       };
     }
     if (stat.size > MAX_TEXT_EVIDENCE_BYTES) {
@@ -6777,12 +6888,12 @@ var fileEvidence = (root, path, options) => {
         evidence: { path, detail: `Text evidence exceeds ${MAX_TEXT_EVIDENCE_BYTES} bytes.` }
       };
     }
-    const content = readFileSync12(fd, "utf8");
+    const content = readFileSync13(fd, "utf8");
     return {
       exists: content.trim().length > 0,
       content,
       evidence: {
-        path: toPosix(relative7(resolve11(root), abs)) || ".",
+        path: toPosix(relative8(resolve12(root), abs)) || ".",
         detail: content.trim().length > 0 ? "File exists and is non-empty." : "File is empty."
       }
     };
@@ -6824,7 +6935,7 @@ var humanDocsRule = (root, config) => {
     passed: docs.length > 0,
     message: docs.length > 0 ? `Found ${docs.length} human document(s).` : "No human documentation was discovered.",
     evidence: docs.slice(0, 10).map((doc) => ({
-      path: toPosix(relative7(resolve11(root), doc.path)),
+      path: toPosix(relative8(resolve12(root), doc.path)),
       detail: `Human route: ${doc.url}`
     })),
     remediation: {
@@ -6835,10 +6946,10 @@ var humanDocsRule = (root, config) => {
 };
 var llmsRule = (root, config, options, generated) => {
   const llmsPath = config.index?.llmsTxt?.outFile ?? "llms.txt";
-  const llmsKey = safePath(root, llmsPath) ?? resolve11(root, llmsPath);
+  const llmsKey = safePath(root, llmsPath) ?? resolve12(root, llmsPath);
   const rawSources = /* @__PURE__ */ new Map();
   for (const path of options.rawSources ?? []) {
-    const key = safePath(root, path) ?? resolve11(root, path);
+    const key = safePath(root, path) ?? resolve12(root, path);
     if (key !== llmsKey && !rawSources.has(key)) rawSources.set(key, path);
   }
   const paths = [llmsPath, ...rawSources.values()];
@@ -6977,11 +7088,11 @@ var linksRule = (root, options) => {
   for (const link of links) {
     const sources = link.paths.map((path) => ({ path, file: fileEvidence(root, path) }));
     const matches2 = sources.filter(({ file }) => file.exists && file.content.includes(link.url));
-    const canonical = contract.urls.has(normalizedUrl(link.url));
-    if (matches2.length === 0 || !canonical) passed = false;
+    const canonical2 = contract.urls.has(normalizedUrl(link.url));
+    if (matches2.length === 0 || !canonical2) passed = false;
     evidence2.push({
       path: sources.map((source) => source.path).join(", "),
-      detail: matches2.length === 0 ? `Missing ${link.url}` : canonical ? `Found canonical ecosystem URL ${link.url}` : `Found ${link.url}, but it is absent from the canonical ecosystem manifest.`
+      detail: matches2.length === 0 ? `Missing ${link.url}` : canonical2 ? `Found canonical ecosystem URL ${link.url}` : `Found ${link.url}, but it is absent from the canonical ecosystem manifest.`
     });
   }
   return {
@@ -7089,8 +7200,8 @@ var formatDocumentationStandardText = (report) => [
 ];
 
 // src/federation/llms.ts
-import { existsSync as existsSync12, readFileSync as readFileSync13 } from "fs";
-import { resolve as resolve12 } from "path";
+import { existsSync as existsSync13, readFileSync as readFileSync14 } from "fs";
+import { resolve as resolve13 } from "path";
 
 // src/retrieval/rank.ts
 var BM25_SCALE = 50;
@@ -7547,9 +7658,9 @@ var sourceText = async (root, source, fetchText) => {
   try {
     const remote = httpUrl(source);
     if (remote) return await fetchText(remote);
-    const path = resolve12(root, source);
-    if (!existsSync12(path)) return null;
-    return readFileSync13(path, "utf8");
+    const path = resolve13(root, source);
+    if (!existsSync13(path)) return null;
+    return readFileSync14(path, "utf8");
   } catch {
     return null;
   }
@@ -7676,11 +7787,11 @@ var retrieveHybridChunks = async (root, config, index, query, options = {}) => {
 };
 
 // src/gates/run-gates.ts
-import { readFileSync as readFileSync15 } from "fs";
+import { readFileSync as readFileSync16 } from "fs";
 
 // src/query/load-index.ts
-import { existsSync as existsSync13, readFileSync as readFileSync14 } from "fs";
-import { join as join11, resolve as resolve13 } from "path";
+import { existsSync as existsSync14, readFileSync as readFileSync15 } from "fs";
+import { join as join12, resolve as resolve14 } from "path";
 
 // src/schemas/agent-handoff.ts
 import { z as z9 } from "zod";
@@ -8003,11 +8114,11 @@ var IndexStaleError = class extends Error {
   actual;
   expected;
 };
-var indexFilePath = (root, config) => join11(root, config.index?.outFile ?? ".doc-bridge/index.json");
+var indexFilePath = (root, config) => join12(root, config.index?.outFile ?? ".doc-bridge/index.json");
 var loadDocBridgeIndex = (root, config) => {
   const path = indexFilePath(root, config);
-  if (!existsSync13(path)) throw new IndexNotFoundError(path);
-  const raw = JSON.parse(readFileSync14(path, "utf8"));
+  if (!existsSync14(path)) throw new IndexNotFoundError(path);
+  const raw = JSON.parse(readFileSync15(path, "utf8"));
   return parseDocBridgeIndex(raw);
 };
 var loadFreshDocBridgeIndex = (root, config) => {
@@ -8027,7 +8138,7 @@ var loadFreshDocBridgeIndex = (root, config) => {
 };
 
 // src/discovery/reproducibility.ts
-import { execFileSync as execFileSync2 } from "child_process";
+import { execFileSync as execFileSync3 } from "child_process";
 var NOT_CHECKED = (skipped) => ({
   checked: false,
   skipped,
@@ -8035,7 +8146,7 @@ var NOT_CHECKED = (skipped) => ({
 });
 var git = (root, args, options = {}) => {
   try {
-    return execFileSync2("git", args, {
+    return execFileSync3("git", args, {
       cwd: root,
       encoding: "utf8",
       stdio: ["pipe", "pipe", "ignore"],
@@ -8114,7 +8225,7 @@ var runGate = (root, config, id) => {
     return {
       id,
       ok: false,
-      message: `${result.ignored.length} indexed path(s) are ignored by Git, so a clean checkout builds a different index. Add them to safety.exclude.`,
+      message: `${result.ignored.length} indexed path(s) are ignored by Git, so a clean checkout builds a different index. Rebuild the index (scans skip ignored paths) or add them to safety.exclude.`,
       expected: "every indexed path is committed",
       actual: sample.join(", ")
     };
@@ -8173,7 +8284,7 @@ var runOkfTypeGate = (root, config) => {
   const required = config.corpus.agent.okf?.requireType ?? config.gates?.preset === "strict";
   if (!required) return { id: "okf-type", ok: true, message: "OKF type frontmatter not required" };
   const allowed = config.corpus.agent.okf?.allowedTypes;
-  const bad = scanAgentCorpus(root, config).filter((doc) => doc.path !== config.corpus.agent.index).map((doc) => ({ path: doc.path, type: frontmatterType(readFileSync15(doc.absPath, "utf8")) })).filter((doc) => !doc.type || allowed && !allowed.includes(doc.type));
+  const bad = scanAgentCorpus(root, config).filter((doc) => doc.path !== config.corpus.agent.index).map((doc) => ({ path: doc.path, type: frontmatterType(readFileSync16(doc.absPath, "utf8")) })).filter((doc) => !doc.type || allowed && !allowed.includes(doc.type));
   if (bad.length) {
     return {
       id: "okf-type",
@@ -8247,7 +8358,7 @@ var runDocsStyleGate = (root, config) => {
   }
   const bad = scanAgentCorpus(root, config).filter((doc) => doc.path !== config.corpus.agent.index).map((doc) => ({
     path: doc.path,
-    missing: missingStyleRules(readFileSync15(doc.absPath, "utf8"), required)
+    missing: missingStyleRules(readFileSync16(doc.absPath, "utf8"), required)
   })).filter((doc) => doc.missing.length > 0);
   if (bad.length) {
     return {
@@ -8317,11 +8428,11 @@ var resolvedOptions = (options) => {
   const config = RulesConfigSchema.parse(options.config ?? {});
   const mode = options.preset ?? config.mode ?? "default";
   const severity = { ...config.severity, ...options.severity };
-  const ignore = /* @__PURE__ */ new Set([...config.ignore ?? [], ...options.ignore ?? []]);
+  const ignore2 = /* @__PURE__ */ new Set([...config.ignore ?? [], ...options.ignore ?? []]);
   return {
     mode,
     severity,
-    ignore,
+    ignore: ignore2,
     criticalEntities: options.criticalEntities ?? config.criticalEntities ?? [],
     criticalPaths: options.criticalPaths ?? config.criticalPaths ?? [],
     warningThresholds: { ...config.warningThresholds, ...options.warningThresholds }
@@ -8413,7 +8524,7 @@ var parseRuleSeverity = (value) => {
 var MAX_RELATED = 3;
 var MAX_READ_BEFORE = 2;
 var MAX_RELATED_EVIDENCE = 3;
-var dirname5 = (path) => path.split("/").slice(0, -1).join("/") || ".";
+var dirname6 = (path) => path.split("/").slice(0, -1).join("/") || ".";
 var isHttp = (value) => /^https?:\/\//.test(value);
 var bridgeFor = (config, id, humanDoc) => humanDoc ? { humanDoc: isHttp(humanDoc) ? "external" : "linked" } : config.corpus.human ? { humanDoc: "missing", action: "ak-docs bootstrap agent-docs", bootstrap: `docs/for-agents/human/${id}.md` } : void 0;
 var legacyHandoff = (index, id, config) => {
@@ -8549,7 +8660,7 @@ var handoffForEntity = (index, id, config, options = {}) => {
   const area = target2.graph.areaId ? byId.get(target2.graph.areaId) : void 0;
   const packageEntry = target2.graph.packageId ? byId.get(target2.graph.packageId) : target2.kind === "package" ? target2 : void 0;
   const explain = {};
-  const unit = target2.kind === "module" ? area ? { path: area.path, reason: `contained by area ${area.id}` } : packageEntry ? { path: packageEntry.path, reason: `contained by package ${packageEntry.id}` } : { path: dirname5(target2.path), reason: "the directory of the module; no area or package contains it" } : { path: ownership?.path ?? target2.path, reason: ownership ? `ownership ${ownership.id} path` : `the ${target2.kind} itself` };
+  const unit = target2.kind === "module" ? area ? { path: area.path, reason: `contained by area ${area.id}` } : packageEntry ? { path: packageEntry.path, reason: `contained by package ${packageEntry.id}` } : { path: dirname6(target2.path), reason: "the directory of the module; no area or package contains it" } : { path: ownership?.path ?? target2.path, reason: ownership ? `ownership ${ownership.id} path` : `the ${target2.kind} itself` };
   explain.editRoots = [unit.reason];
   const documents = documentsFor(projection, byId, target2, ownership);
   const startHere = documents[0]?.path ?? config.corpus.agent.index ?? target2.path;
@@ -8744,7 +8855,7 @@ var runQuery = (index, config, req, options = {}) => {
 };
 
 // src/intelligence/adapter.ts
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 
 // src/intelligence/peers.ts
 var PeerMissingError = class extends Error {
@@ -8871,20 +8982,20 @@ var resolveIntelligenceRuntime = async (config) => {
   }
   return { adapter, embed, provider, ...model ? { model } : {} };
 };
-var defaultVectorStorePath = (root) => join12(root, ".doc-bridge", "vectors");
+var defaultVectorStorePath = (root) => join13(root, ".doc-bridge", "vectors");
 
 // src/intelligence/rag.ts
-import { readFileSync as readFileSync16 } from "fs";
-import { join as join13 } from "path";
+import { readFileSync as readFileSync17 } from "fs";
+import { join as join14 } from "path";
 var loadDocuments = (root, index, sources) => {
   const includeAgent = sources.includes("agent") || sources.length === 0;
   const docs = [];
   if (includeAgent) {
     for (const entry of index.knowledge) {
-      const abs = join13(root, entry.path);
+      const abs = join14(root, entry.path);
       let content = "";
       try {
-        content = readFileSync16(abs, "utf8");
+        content = readFileSync17(abs, "utf8");
       } catch {
         content = [entry.title, entry.description].filter(Boolean).join("\n\n");
       }
@@ -8902,7 +9013,7 @@ var createDocBridgeRag = async (root, config, index) => {
   const { embed } = await resolveIntelligenceRuntime(config);
   const ragMod = await importPeer("@agentskit/rag");
   const memoryMod = await importPeer("@agentskit/memory");
-  const storePath = typeof config.intelligence?.retriever?.options?.storePath === "string" ? join13(root, config.intelligence.retriever.options.storePath) : defaultVectorStorePath(root);
+  const storePath = typeof config.intelligence?.retriever?.options?.storePath === "string" ? join14(root, config.intelligence.retriever.options.storePath) : defaultVectorStorePath(root);
   const store = memoryMod.fileVectorMemory({ path: storePath });
   const rag = ragMod.createRAG({
     embed,
@@ -9037,15 +9148,15 @@ var startInkChat = async (root, config, index) => {
 };
 
 // src/memory/ingest.ts
-import { existsSync as existsSync14, readFileSync as readFileSync17 } from "fs";
-import { join as join14 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync18 } from "fs";
+import { join as join15 } from "path";
 var memoryFact = (raw, id) => firstParagraph(raw) ?? firstHeading(raw) ?? id;
 var relativePath2 = (root, abs) => toPosix(abs).replace(`${toPosix(root)}/`, "");
 var ingestMarkdownDir = (root, dir, source, confidence) => {
-  if (!existsSync14(dir)) return [];
-  return walkFiles(dir, { extensions: [".md", ".mdc"] }).map((abs) => {
+  if (!existsSync15(dir)) return [];
+  return walkFiles(dir, { extensions: [".md", ".mdc"], respectIgnore: false }).map((abs) => {
     const rel = relativePath2(root, abs);
-    const raw = readFileSync17(abs, "utf8");
+    const raw = readFileSync18(abs, "utf8");
     const id = slugFromPath(rel);
     return {
       schemaVersion: 1,
@@ -9060,10 +9171,10 @@ var ingestMarkdownDir = (root, dir, source, confidence) => {
   });
 };
 var ingestCursorRules = (root) => {
-  const dir = join14(root, ".cursor", "rules");
+  const dir = join15(root, ".cursor", "rules");
   return ingestMarkdownDir(root, dir, "cursor", 0.6);
 };
-var ingestAgentMemory = (root) => ingestMarkdownDir(root, join14(root, ".agent-memory"), "agent-memory", 0.7);
+var ingestAgentMemory = (root) => ingestMarkdownDir(root, join15(root, ".agent-memory"), "agent-memory", 0.7);
 var ingestMemoryCandidates = (root) => [
   ...ingestAgentMemory(root),
   ...ingestCursorRules(root)
@@ -9149,9 +9260,9 @@ var draftMemoryPromotion = (classifications) => {
 };
 
 // src/memory/github-pr.ts
-import { execFileSync as execFileSync3, spawnSync } from "child_process";
-import { existsSync as existsSync15, mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "fs";
-import { join as join15 } from "path";
+import { execFileSync as execFileSync4, spawnSync } from "child_process";
+import { existsSync as existsSync16, mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "fs";
+import { join as join16 } from "path";
 var run = (cmd, args, cwd) => {
   const result = spawnSync(cmd, [...args], { cwd, encoding: "utf8" });
   const out = `${result.stdout ?? ""}${result.stderr ?? ""}`.trim();
@@ -9159,10 +9270,10 @@ var run = (cmd, args, cwd) => {
 };
 var hasGh = () => run("gh", ["--version"], process.cwd()).ok;
 var slug = () => (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
-var defaultPromotionDraftPath = (root) => join15(root, ".doc-bridge", "drafts", `memory-promotion-${slug()}.md`);
+var defaultPromotionDraftPath = (root) => join16(root, ".doc-bridge", "drafts", `memory-promotion-${slug()}.md`);
 var writePromotionDraft = (root, draft, path) => {
   const draftPath = path ?? defaultPromotionDraftPath(root);
-  mkdirSync3(join15(root, ".doc-bridge", "drafts"), { recursive: true });
+  mkdirSync3(join16(root, ".doc-bridge", "drafts"), { recursive: true });
   writeFileSync3(draftPath, `${draft.body}
 `, "utf8");
   return draftPath;
@@ -9198,7 +9309,7 @@ var promoteMemoryToGithubPr = (root, draft, options = {}) => {
       message: `Wrote draft to ${relDraft}. Run the printed git/gh commands to open a draft PR.`
     };
   }
-  if (!existsSync15(join15(root, ".git"))) {
+  if (!existsSync16(join16(root, ".git"))) {
     return {
       ok: false,
       dryRun: false,
@@ -9276,7 +9387,7 @@ ${auth.out}`
   ];
   let prUrl = "";
   try {
-    prUrl = execFileSync3("gh", prArgs, { cwd: root, encoding: "utf8" }).trim();
+    prUrl = execFileSync4("gh", prArgs, { cwd: root, encoding: "utf8" }).trim();
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     return {
@@ -9301,23 +9412,23 @@ ${auth.out}`
 };
 
 // src/index-builder/watch-index.ts
-import { existsSync as existsSync16, watch } from "fs";
-import { dirname as dirname6, resolve as resolve14 } from "path";
+import { existsSync as existsSync17, watch } from "fs";
+import { dirname as dirname7, resolve as resolve15 } from "path";
 var WATCH_PATTERN = /\.(md|mdx|json|ya?ml|mdc)$/i;
 var NX_MANIFEST_PATTERN = /(^|[/\\])(project|package)\.json$/i;
 var collectWatchRoots = (root, config, configPath) => {
   const roots = /* @__PURE__ */ new Set();
-  roots.add(resolve14(root, config.corpus.agent.root));
+  roots.add(resolve15(root, config.corpus.agent.root));
   const humanSources = config.corpus.human ? Array.isArray(config.corpus.human) ? config.corpus.human : [config.corpus.human] : [];
   for (const source of humanSources) {
     const humanOpts = source.options ?? {};
     for (const key of ["contentDir", "docsDir", "root", "srcDir"]) {
       const value = humanOpts[key];
-      if (typeof value === "string" && value.length) roots.add(resolve14(root, value));
+      if (typeof value === "string" && value.length) roots.add(resolve15(root, value));
     }
   }
-  if (configPath) roots.add(dirname6(resolve14(configPath)));
-  return [...roots].filter((dir) => existsSync16(dir));
+  if (configPath) roots.add(dirname7(resolve15(configPath)));
+  return [...roots].filter((dir) => existsSync17(dir));
 };
 var watchDocBridgeIndex = (opts) => {
   const debounceMs = opts.debounceMs ?? 350;
@@ -9358,15 +9469,15 @@ var watchDocBridgeIndex = (opts) => {
       rebuild();
     });
   }
-  const nxRoot = resolve14(opts.root);
-  if (opts.config.routing?.plugin === "nx" && existsSync16(nxRoot)) {
+  const nxRoot = resolve15(opts.root);
+  if (opts.config.routing?.plugin === "nx" && existsSync17(nxRoot)) {
     watch(nxRoot, { recursive: true }, (_event, filename) => {
       if (!filename || !NX_MANIFEST_PATTERN.test(filename)) return;
       rebuild();
     });
   }
-  const configDir = resolve14(opts.root);
-  if (existsSync16(configDir)) {
+  const configDir = resolve15(opts.root);
+  if (existsSync17(configDir)) {
     watch(configDir, (_event, filename) => {
       if (!filename || !/doc-bridge\.config/.test(filename)) return;
       rebuild();
@@ -9384,8 +9495,8 @@ var watchDocBridgeIndex = (opts) => {
 };
 
 // src/workflow/engine.ts
-import { appendFileSync, existsSync as existsSync17, mkdirSync as mkdirSync4, readFileSync as readFileSync18, renameSync as renameSync2, rmSync, writeFileSync as writeFileSync4 } from "fs";
-import { join as join16, relative as relative8, resolve as resolve15 } from "path";
+import { appendFileSync, existsSync as existsSync18, mkdirSync as mkdirSync4, readFileSync as readFileSync19, renameSync as renameSync2, rmSync, writeFileSync as writeFileSync4 } from "fs";
+import { join as join17, relative as relative9, resolve as resolve16 } from "path";
 var WORKFLOW_STAGES = ["collect", "normalize", "reconcile", "enrich", "evaluate", "report"];
 var OPTIONAL_WORKFLOW_STAGES = ["enrich"];
 var stageState = {
@@ -9396,7 +9507,7 @@ var stageState = {
   evaluate: "proposed",
   report: "delivered"
 };
-var defaultStateDir = (root) => join16(root, ".doc-bridge", "workflow");
+var defaultStateDir = (root) => join17(root, ".doc-bridge", "workflow");
 var atomicWrite = (path, value) => {
   const temp = `${path}.tmp-${process.pid}-${Date.now()}`;
   writeFileSync4(temp, `${JSON.stringify(value, null, 2)}
@@ -9404,10 +9515,10 @@ var atomicWrite = (path, value) => {
   renameSync2(temp, path);
 };
 var writeManifest = (stateDir, run2) => {
-  atomicWrite(join16(stateDir, "manifest.json"), run2);
+  atomicWrite(join17(stateDir, "manifest.json"), run2);
 };
 var appendTransition = (stateDir, transition2) => {
-  appendFileSync(join16(stateDir, "transitions.jsonl"), `${JSON.stringify(transition2)}
+  appendFileSync(join17(stateDir, "transitions.jsonl"), `${JSON.stringify(transition2)}
 `, "utf8");
 };
 var transition = (run2, to, reason) => {
@@ -9438,8 +9549,8 @@ var transition = (run2, to, reason) => {
 };
 var runId = () => `${Date.now()}-${process.pid}`;
 var stageInputHash = (options, stage, input) => sha256NormalizedV1({ stage, input, sourceRevision: options.sourceRevision, configurationHash: options.configurationHash, pipelineVersion: options.pipelineVersion ?? "1.0.0", analyzerVersions: options.analyzerVersions ?? {}, toolVersion: options.toolVersion ?? "1.0.0" });
-var stageArtifactPath = (stateDir, stage, inputHash) => join16(stateDir, "artifacts", `${stage}-${inputHash}.json`);
-var readArtifact = (path) => JSON.parse(readFileSync18(path, "utf8"));
+var stageArtifactPath = (stateDir, stage, inputHash) => join17(stateDir, "artifacts", `${stage}-${inputHash}.json`);
+var readArtifact = (path) => JSON.parse(readFileSync19(path, "utf8"));
 var readVerifiedArtifact = (path, stage, step) => {
   const artifact2 = readArtifact(path);
   if (artifact2.type !== "workflow-step-artifact" || artifact2.stage !== stage || artifact2.inputHash !== step.inputHash) throw new Error(`Invalid workflow artifact for stage "${stage}".`);
@@ -9447,8 +9558,8 @@ var readVerifiedArtifact = (path, stage, step) => {
   return artifact2;
 };
 var stepArtifactPath = (stateDir, step) => {
-  const path = resolve15(stateDir, step.artifactRefs?.[0] ?? "");
-  const pathRelativeToState = relative8(stateDir, path);
+  const path = resolve16(stateDir, step.artifactRefs?.[0] ?? "");
+  const pathRelativeToState = relative9(stateDir, path);
   if (pathRelativeToState.startsWith("..") || pathRelativeToState.startsWith("/")) throw new Error(`Workflow artifact escapes state directory for stage "${step.name}".`);
   return path;
 };
@@ -9458,13 +9569,13 @@ var stepOutput = (stateDir, run2, stage) => {
   return readVerifiedArtifact(stepArtifactPath(stateDir, step), stage, step).value;
 };
 var acquireLock = (stateDir) => {
-  const lock = join16(stateDir, ".lock");
+  const lock = join17(stateDir, ".lock");
   try {
     mkdirSync4(lock);
   } catch {
-    const ownerPath = join16(lock, "owner.json");
+    const ownerPath = join17(lock, "owner.json");
     try {
-      const owner = JSON.parse(readFileSync18(ownerPath, "utf8"));
+      const owner = JSON.parse(readFileSync19(ownerPath, "utf8"));
       if (typeof owner.pid === "number") process.kill(owner.pid, 0);
       throw new Error(`Workflow is already running (pid ${owner.pid ?? "unknown"}).`);
     } catch (error) {
@@ -9473,13 +9584,13 @@ var acquireLock = (stateDir) => {
       mkdirSync4(lock);
     }
   }
-  writeFileSync4(join16(lock, "owner.json"), JSON.stringify({ pid: process.pid, startedAt: (/* @__PURE__ */ new Date()).toISOString() }), "utf8");
+  writeFileSync4(join17(lock, "owner.json"), JSON.stringify({ pid: process.pid, startedAt: (/* @__PURE__ */ new Date()).toISOString() }), "utf8");
   return () => rmSync(lock, { recursive: true, force: true });
 };
 var loadManifest = (stateDir) => {
-  const path = join16(stateDir, "manifest.json");
-  if (!existsSync17(path)) return void 0;
-  return WorkflowRunV1Schema.parse(JSON.parse(readFileSync18(path, "utf8")));
+  const path = join17(stateDir, "manifest.json");
+  if (!existsSync18(path)) return void 0;
+  return WorkflowRunV1Schema.parse(JSON.parse(readFileSync19(path, "utf8")));
 };
 var baseRun = (options, stateDir, supersedes) => {
   const inputHash = sha256NormalizedV1({ sourceRevision: options.sourceRevision, configurationHash: options.configurationHash, pipelineVersion: options.pipelineVersion ?? "1.0.0", analyzerVersions: options.analyzerVersions ?? {}, toolVersion: options.toolVersion ?? "1.0.0" });
@@ -9488,7 +9599,7 @@ var baseRun = (options, stateDir, supersedes) => {
     schemaVersion: 1,
     contentHash: "0".repeat(64),
     contentHashAlgo: "sha256-normalized-v1",
-    project: { name: resolve15(options.root).split("/").pop() ?? "project", root: "." },
+    project: { name: resolve16(options.root).split("/").pop() ?? "project", root: "." },
     sourceRevision: options.sourceRevision,
     sourceRevisionKind: "content",
     configurationHash: options.configurationHash,
@@ -9499,16 +9610,16 @@ var baseRun = (options, stateDir, supersedes) => {
     state: "created",
     steps: WORKFLOW_STAGES.map((name) => ({ name, status: "pending", inputHash })),
     transitions: [{ from: null, to: "created", at: (/* @__PURE__ */ new Date()).toISOString() }],
-    artifactRefs: [relative8(resolve15(options.root), stateDir), ...supersedes ? [`supersedes:${supersedes}`] : []]
+    artifactRefs: [relative9(resolve16(options.root), stateDir), ...supersedes ? [`supersedes:${supersedes}`] : []]
   });
 };
 var withHash = (run2) => WorkflowRunV1Schema.parse({ ...run2, contentHash: contentHashForArtifactV1(run2) });
 var sameInputs = (run2, options) => run2.sourceRevision === options.sourceRevision && run2.configurationHash === options.configurationHash && run2.pipelineVersion === (options.pipelineVersion ?? "1.0.0") && sha256NormalizedV1(run2.analyzerVersions) === sha256NormalizedV1({ ...options.analyzerVersions ?? {}, workflow: options.toolVersion ?? "1.0.0" });
 var selectedStages = (stage) => stage && stage !== "all" ? [stage] : WORKFLOW_STAGES;
 var runWorkflow = (options) => {
-  const root = resolve15(options.root);
-  const stateDir = resolve15(root, options.stateDir ?? defaultStateDir(root));
-  mkdirSync4(join16(stateDir, "artifacts"), { recursive: true });
+  const root = resolve16(options.root);
+  const stateDir = resolve16(root, options.stateDir ?? defaultStateDir(root));
+  mkdirSync4(join17(stateDir, "artifacts"), { recursive: true });
   const release = acquireLock(stateDir);
   try {
     let run2 = loadManifest(stateDir);
@@ -9547,8 +9658,8 @@ var runWorkflow = (options) => {
       const input = options.inputs?.[stage] ?? previousOutput;
       const inputHash = stageInputHash(options, stage, input);
       const existing = run2.steps.find((step) => step.name === stage);
-      const artifactPath = existing?.artifactRefs?.[0] && existing.inputHash === inputHash ? resolve15(stateDir, existing.artifactRefs[0]) : stageArtifactPath(stateDir, stage, inputHash);
-      if (existing?.status === "completed" && existing.inputHash === inputHash && existing.outputHash && existsSync17(artifactPath)) {
+      const artifactPath = existing?.artifactRefs?.[0] && existing.inputHash === inputHash ? resolve16(stateDir, existing.artifactRefs[0]) : stageArtifactPath(stateDir, stage, inputHash);
+      if (existing?.status === "completed" && existing.inputHash === inputHash && existing.outputHash && existsSync18(artifactPath)) {
         try {
           previousOutput = readVerifiedArtifact(artifactPath, stage, existing).value;
         } catch (error) {
@@ -9578,14 +9689,14 @@ var runWorkflow = (options) => {
         const value = handler({ root, stage, input, previousOutput });
         const outputHash = sha256NormalizedV1(value);
         const artifact2 = { type: "workflow-step-artifact", stage, inputHash, outputHash, value };
-        mkdirSync4(join16(stateDir, "artifacts"), { recursive: true });
-        if (existsSync17(artifactPath)) {
+        mkdirSync4(join17(stateDir, "artifacts"), { recursive: true });
+        if (existsSync18(artifactPath)) {
           const existingArtifact = readArtifact(artifactPath);
           if (existingArtifact.outputHash !== outputHash) throw new Error(`Immutable workflow artifact collision for stage "${stage}".`);
         } else {
           atomicWrite(artifactPath, artifact2);
         }
-        const ref = relative8(stateDir, artifactPath);
+        const ref = relative9(stateDir, artifactPath);
         const completedStep = { name: stage, status: "completed", inputHash, outputHash, artifactRefs: [ref] };
         run2 = withHash({ ...run2, steps: run2.steps.map((step) => step.name === stage ? completedStep : step) });
         writeManifest(stateDir, run2);
@@ -9605,15 +9716,15 @@ var runWorkflow = (options) => {
         run2 = complete;
       }
       writeManifest(stateDir, run2);
-      if (run2.state === "delivered") atomicWrite(join16(stateDir, "last-known-good.json"), { runId: run2.runId, manifestHash: run2.contentHash, report: run2.steps.find((step) => step.name === "report")?.artifactRefs?.[0] });
+      if (run2.state === "delivered") atomicWrite(join17(stateDir, "last-known-good.json"), { runId: run2.runId, manifestHash: run2.contentHash, report: run2.steps.find((step) => step.name === "report")?.artifactRefs?.[0] });
     }
     return { run: run2, stateDir, reusedStages };
   } finally {
     release();
   }
 };
-var loadWorkflowManifest = (stateDir) => WorkflowRunV1Schema.parse(JSON.parse(readFileSync18(join16(resolve15(stateDir), "manifest.json"), "utf8")));
-var loadWorkflowStepOutput = (stateDir, stage) => stepOutput(resolve15(stateDir), loadWorkflowManifest(stateDir), stage);
+var loadWorkflowManifest = (stateDir) => WorkflowRunV1Schema.parse(JSON.parse(readFileSync19(join17(resolve16(stateDir), "manifest.json"), "utf8")));
+var loadWorkflowStepOutput = (stateDir, stage) => stepOutput(resolve16(stateDir), loadWorkflowManifest(stateDir), stage);
 
 // src/doctor/badge.ts
 var doctorBadgeMetrics = (report) => {
@@ -9774,15 +9885,15 @@ var docBridgePatternPayload = () => ({
 });
 
 // src/cli/demo.ts
-import { cpSync, existsSync as existsSync19, mkdtempSync, readFileSync as readFileSync20, rmSync as rmSync2 } from "fs";
+import { cpSync, existsSync as existsSync20, mkdtempSync, readFileSync as readFileSync21, rmSync as rmSync2 } from "fs";
 import { tmpdir } from "os";
-import { dirname as dirname8, join as join18, resolve as resolve17 } from "path";
+import { dirname as dirname9, join as join19, resolve as resolve18 } from "path";
 import { fileURLToPath } from "url";
 
 // src/mcp/install.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync5, readFileSync as readFileSync19, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync19, mkdirSync as mkdirSync5, readFileSync as readFileSync20, writeFileSync as writeFileSync5 } from "fs";
 import { homedir } from "os";
-import { dirname as dirname7, join as join17, resolve as resolve16 } from "path";
+import { dirname as dirname8, join as join18, resolve as resolve17 } from "path";
 var SERVER_NAME = "ak-docs";
 var mcpServerEntry = (root) => ({
   command: "npx",
@@ -9790,26 +9901,26 @@ var mcpServerEntry = (root) => ({
   cwd: root
 });
 var readJson2 = (path) => {
-  if (!existsSync18(path)) return {};
+  if (!existsSync19(path)) return {};
   try {
-    const parsed = JSON.parse(readFileSync19(path, "utf8"));
+    const parsed = JSON.parse(readFileSync20(path, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
   } catch {
     return {};
   }
 };
 var writeJson = (path, value) => {
-  mkdirSync5(dirname7(path), { recursive: true });
+  mkdirSync5(dirname8(path), { recursive: true });
   writeFileSync5(path, `${JSON.stringify(value, null, 2)}
 `, "utf8");
 };
 var resolveTargetPath = (target2, root) => {
-  if (target2 === "cursor") return resolve16(root, ".cursor", "mcp.json");
-  return join17(homedir(), "Library", "Application Support", "Claude", "claude_desktop_config.json");
+  if (target2 === "cursor") return resolve17(root, ".cursor", "mcp.json");
+  return join18(homedir(), "Library", "Application Support", "Claude", "claude_desktop_config.json");
 };
 var installMcpConfig = (root, target2) => {
   const configPath = resolveTargetPath(target2, root);
-  const created = !existsSync18(configPath);
+  const created = !existsSync19(configPath);
   const existing = readJson2(configPath);
   const servers = existing.mcpServers && typeof existing.mcpServers === "object" && !Array.isArray(existing.mcpServers) ? { ...existing.mcpServers } : {};
   servers[SERVER_NAME] = mcpServerEntry(root);
@@ -9834,12 +9945,12 @@ var installMcpConfig = (root, target2) => {
 var mcpSnippet = (root) => JSON.stringify({ mcpServers: { [SERVER_NAME]: mcpServerEntry(root) } }, null, 2);
 
 // src/cli/demo.ts
-var packageRoot = resolve17(dirname8(fileURLToPath(import.meta.url)), "..", "..");
+var packageRoot = resolve18(dirname9(fileURLToPath(import.meta.url)), "..", "..");
 var fixturePath = (fixture) => {
   if (fixture === "monorepo") {
-    return join18(packageRoot, "examples", "demo-monorepo");
+    return join19(packageRoot, "examples", "demo-monorepo");
   }
-  return join18(packageRoot, "examples", "demo-example");
+  return join19(packageRoot, "examples", "demo-example");
 };
 var formatHandoffText = (handoff) => {
   const bridge = handoff.bridge?.humanDoc === "missing" ? `human guide: missing \u2192 ${handoff.bridge.action ?? "ak-docs bootstrap agent-docs"}` : handoff.humanDoc ? `human guide: ${handoff.humanDoc}` : "human guide: (none)";
@@ -9855,11 +9966,11 @@ var formatHandoffText = (handoff) => {
 var runDemo = (root, config, fixture = "example", options = {}) => {
   const targetPackage = fixture === "monorepo" ? "auth" : "example";
   const fixtureDir = fixturePath(fixture);
-  if (options.copyFixture && existsSync19(fixtureDir)) {
+  if (options.copyFixture && existsSync20(fixtureDir)) {
     for (const rel of ["doc-bridge.config.json", "docs", "packages", "pnpm-workspace.yaml", "package.json"]) {
-      const src = join18(fixtureDir, rel);
-      if (!existsSync19(src)) continue;
-      const dest = join18(root, rel);
+      const src = join19(fixtureDir, rel);
+      if (!existsSync20(src)) continue;
+      const dest = join19(root, rel);
       cpSync(src, dest, { recursive: true });
     }
   }
@@ -9914,14 +10025,14 @@ var formatDemoText = (result) => {
   return lines;
 };
 var withDemoWorkspace = (fixture, fn) => {
-  const dir = mkdtempSync(join18(tmpdir(), "ak-docs-demo-"));
+  const dir = mkdtempSync(join19(tmpdir(), "ak-docs-demo-"));
   try {
     const fixtureDir = fixturePath(fixture);
-    if (!existsSync19(fixtureDir)) {
+    if (!existsSync20(fixtureDir)) {
       throw new Error(`Demo fixture "${fixture}" not found at ${fixtureDir}`);
     }
     cpSync(fixtureDir, dir, { recursive: true });
-    const config = JSON.parse(readFileSync20(join18(dir, "doc-bridge.config.json"), "utf8"));
+    const config = JSON.parse(readFileSync21(join19(dir, "doc-bridge.config.json"), "utf8"));
     return fn(dir, config);
   } finally {
     rmSync2(dir, { recursive: true, force: true });
@@ -9929,8 +10040,8 @@ var withDemoWorkspace = (fixture, fn) => {
 };
 
 // src/doctor/run-doctor.ts
-import { existsSync as existsSync20, readFileSync as readFileSync21 } from "fs";
-import { resolve as resolve18 } from "path";
+import { existsSync as existsSync21, readFileSync as readFileSync22 } from "fs";
+import { resolve as resolve19 } from "path";
 
 // src/bench/retrieval.ts
 import { z as z12 } from "zod";
@@ -10212,11 +10323,11 @@ var measureConnectivity = (index) => {
 };
 var measureBenchmark = (root, config, index) => {
   const suite = config.retrieval?.benchmark?.suite ?? DEFAULT_RETRIEVAL_SUITE;
-  const suitePath = resolve18(root, suite);
-  if (!existsSync20(suitePath)) return { status: "not-analyzed", suite, reason: `No retrieval suite at ${suite}` };
+  const suitePath = resolve19(root, suite);
+  if (!existsSync21(suitePath)) return { status: "not-analyzed", suite, reason: `No retrieval suite at ${suite}` };
   if (!index.projection) return { status: "not-analyzed", suite, reason: "The index carries no retrieval projection. Run: ak-docs index" };
   try {
-    const parsed = parseRetrievalSuite(JSON.parse(readFileSync21(suitePath, "utf8")));
+    const parsed = parseRetrievalSuite(JSON.parse(readFileSync22(suitePath, "utf8")));
     const result = runRetrievalBench({ index, suite: parsed });
     return {
       status: "measured",
@@ -10464,8 +10575,8 @@ var formatDoctorText = (report) => {
 };
 
 // src/mcp/server.ts
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync25, realpathSync as realpathSync9, writeFileSync as writeFileSync9 } from "fs";
-import { join as join22, relative as relative10, resolve as resolve22 } from "path";
+import { mkdirSync as mkdirSync8, readFileSync as readFileSync26, realpathSync as realpathSync10, writeFileSync as writeFileSync9 } from "fs";
+import { join as join23, relative as relative11, resolve as resolve23 } from "path";
 import { z as z14, ZodError } from "zod";
 
 // src/findings/report.ts
@@ -10883,14 +10994,14 @@ var formatKnowledgeLookupText = (response) => {
 };
 
 // src/fixes/proposals.ts
-import { existsSync as existsSync21, readdirSync as readdirSync4, readFileSync as readFileSync22, realpathSync as realpathSync8, renameSync as renameSync3, unlinkSync, writeFileSync as writeFileSync6 } from "fs";
-import { basename as basename7, dirname as dirname9, extname as extname5, join as join19, relative as relative9, resolve as resolve19, sep as sep9 } from "path";
+import { existsSync as existsSync22, readdirSync as readdirSync4, readFileSync as readFileSync23, realpathSync as realpathSync9, renameSync as renameSync3, unlinkSync, writeFileSync as writeFileSync6 } from "fs";
+import { basename as basename7, dirname as dirname10, extname as extname5, join as join20, relative as relative10, resolve as resolve20, sep as sep10 } from "path";
 var hash4 = (value) => sha256NormalizedV1(value);
 var artifactMetadata = (root, options) => ({
   schemaVersion: 1,
   contentHash: "0".repeat(64),
   contentHashAlgo: "sha256-normalized-v1",
-  project: { name: options.projectName ?? basename7(resolve19(root)), root: "." },
+  project: { name: options.projectName ?? basename7(resolve20(root)), root: "." },
   sourceRevision: options.baseRevision,
   sourceRevisionKind: options.baseRevision.length === 40 ? "git" : "content",
   configurationHash: options.configurationHash,
@@ -10921,31 +11032,32 @@ var makeProposal = (root, options, changes, preconditions, postconditions) => {
   };
   return FixProposalV1Schema.parse({ ...draft, contentHash: contentHashForArtifactV1(draft) });
 };
-var walkMarkdown = (root, directory = root) => readdirSync4(directory, { withFileTypes: true }).flatMap((entry) => {
+var walkMarkdown = (root, directory = root, ignored = createIgnoreFilter(root)) => readdirSync4(directory, { withFileTypes: true }).flatMap((entry) => {
   if (entry.name === ".git" || entry.name === "node_modules" || entry.name === "dist" || entry.name === "build") return [];
-  const path = join19(directory, entry.name);
-  if (entry.isDirectory()) return walkMarkdown(root, path);
-  return entry.isFile() && [".md", ".mdx"].includes(extname5(entry.name).toLowerCase()) ? [relative9(root, path).split(sep9).join("/")] : [];
+  const path = join20(directory, entry.name);
+  if (ignored.isIgnored(path, entry.isDirectory())) return [];
+  if (entry.isDirectory()) return walkMarkdown(root, path, ignored);
+  return entry.isFile() && [".md", ".mdx"].includes(extname5(entry.name).toLowerCase()) ? [relative10(root, path).split(sep10).join("/")] : [];
 });
 var localLink = /(!?)\[([^\]]*)\]\(([^)\s]+)(?:\s+["'][^)]*["'])?\)/g;
 var sortJson = (value) => Array.isArray(value) ? value.map(sortJson) : value && typeof value === "object" ? Object.fromEntries(Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => [key, sortJson(item)])) : value;
 var createMarkdownLinkFixProposal = (root, options) => {
-  const projectRoot = realpathSync8.native(resolve19(root));
+  const projectRoot = realpathSync9.native(resolve20(root));
   const paths = walkMarkdown(projectRoot);
   const changes = [];
   for (const path of paths) {
-    const content = readFileSync22(join19(projectRoot, path), "utf8");
+    const content = readFileSync23(join20(projectRoot, path), "utf8");
     let next = content;
     for (const match of content.matchAll(localLink)) {
       const target2 = match[3];
       if (!target2 || match[1] === "!" || /^(?:[a-z]+:|\/|#)/i.test(target2)) continue;
       const targetPath = target2.split("#")[0]?.split("?")[0];
-      if (!targetPath || existsSync21(resolve19(projectRoot, dirname9(path), targetPath))) continue;
+      if (!targetPath || existsSync22(resolve20(projectRoot, dirname10(path), targetPath))) continue;
       const targetStem = basename7(targetPath, extname5(targetPath)).toLowerCase();
       const labelStem = (match[2] ?? "").trim().toLowerCase().replace(/[^a-z0-9]+/g, "");
       const candidates = paths.filter((candidate) => basename7(candidate, extname5(candidate)).toLowerCase() === targetStem || basename7(candidate, extname5(candidate)).toLowerCase().replace(/[^a-z0-9]+/g, "") === labelStem);
       if (candidates.length !== 1) continue;
-      let replacement = relative9(dirname9(path), candidates[0]).split(sep9).join("/");
+      let replacement = relative10(dirname10(path), candidates[0]).split(sep10).join("/");
       if (target2.startsWith("./") && !replacement.startsWith(".")) replacement = `./${replacement}`;
       next = next.replace(match[0], match[0].replace(target2, replacement));
     }
@@ -10954,13 +11066,13 @@ var createMarkdownLinkFixProposal = (root, options) => {
   return changes.length ? makeProposal(projectRoot, options, changes, ["Each replacement has exactly one Markdown target."], ["All corrected local Markdown links resolve."]) : void 0;
 };
 var createArtifactNormalizationProposal = (root, artifactPath, options) => {
-  const projectRoot = realpathSync8.native(resolve19(root));
-  const path = artifactPath.split(sep9).join("/");
+  const projectRoot = realpathSync9.native(resolve20(root));
+  const path = artifactPath.split(sep10).join("/");
   const absolute = containedPath(projectRoot, path);
   if (!absolute) return void 0;
   let before;
   try {
-    before = readFileSync22(absolute, "utf8");
+    before = readFileSync23(absolute, "utf8");
   } catch {
     return void 0;
   }
@@ -10971,7 +11083,7 @@ var createArtifactNormalizationProposal = (root, artifactPath, options) => {
   } catch {
     return void 0;
   }
-  return after === before ? void 0 : makeProposal(projectRoot, options, [{ path: relative9(projectRoot, absolute).split(sep9).join("/"), before, after }], ["The artifact contains valid JSON."], ["The artifact is valid canonical JSON with one trailing newline."]);
+  return after === before ? void 0 : makeProposal(projectRoot, options, [{ path: relative10(projectRoot, absolute).split(sep10).join("/"), before, after }], ["The artifact contains valid JSON."], ["The artifact is valid canonical JSON with one trailing newline."]);
 };
 var approveFixProposal = (proposalInput, approvedBy, approvedAt = (/* @__PURE__ */ new Date()).toISOString()) => {
   const proposal = FixProposalV1Schema.parse(proposalInput);
@@ -10989,7 +11101,7 @@ var applyFixProposal = (root, proposalInput, options = {}) => {
   if (proposal.approval.proposalHash !== bindingHash(proposal)) throw new Error("Approval is not bound to the exact proposal content.");
   if (options.currentRevision && options.currentRevision !== proposal.baseRevision) throw new Error("The repository revision changed since this proposal was created.");
   if (!proposal.changes?.length) throw new Error("This proposal has no executable changes.");
-  const projectRoot = realpathSync8.native(resolve19(root));
+  const projectRoot = realpathSync9.native(resolve20(root));
   const originals = /* @__PURE__ */ new Map();
   const affected = new Map(proposal.affectedFiles.map((file) => [file.path, file]));
   if (proposal.changes.some((change) => !affected.has(change.path) || affected.get(change.path)?.contentHash !== sha256NormalizedV1(change.before)) || affected.size !== proposal.changes.length) {
@@ -10997,29 +11109,29 @@ var applyFixProposal = (root, proposalInput, options = {}) => {
   }
   for (const file of proposal.affectedFiles) {
     const absolute = containedPath(projectRoot, file.path);
-    if (!absolute || !existsSync21(absolute)) throw new Error(`Affected file is unavailable or escapes the repository root: ${file.path}`);
-    const current = readFileSync22(absolute, "utf8");
+    if (!absolute || !existsSync22(absolute)) throw new Error(`Affected file is unavailable or escapes the repository root: ${file.path}`);
+    const current = readFileSync23(absolute, "utf8");
     if (sha256NormalizedV1(current) !== file.contentHash) throw new Error(`Affected file changed since proposal creation: ${file.path}`);
     originals.set(absolute, current);
   }
   try {
     for (const change of proposal.changes) {
-      const absolute = resolve19(projectRoot, change.path);
+      const absolute = resolve20(projectRoot, change.path);
       writeFileSync6(`${absolute}.docbridge-${process.pid}.tmp`, change.after, "utf8");
     }
     for (const change of proposal.changes) {
-      const absolute = resolve19(projectRoot, change.path);
+      const absolute = resolve20(projectRoot, change.path);
       renameSync3(`${absolute}.docbridge-${process.pid}.tmp`, absolute);
     }
     for (const change of proposal.changes) {
-      if (readFileSync22(resolve19(projectRoot, change.path), "utf8") !== change.after) throw new Error(`Postcondition failed for ${change.path}`);
+      if (readFileSync23(resolve20(projectRoot, change.path), "utf8") !== change.after) throw new Error(`Postcondition failed for ${change.path}`);
     }
     options.verify?.(proposal.changes.map((change) => change.path));
   } catch (error) {
     for (const [absolute, content] of originals) writeFileSync6(absolute, content, "utf8");
     for (const change of proposal.changes) {
-      const temp = `${resolve19(projectRoot, change.path)}.docbridge-${process.pid}.tmp`;
-      if (existsSync21(temp)) unlinkSync(temp);
+      const temp = `${resolve20(projectRoot, change.path)}.docbridge-${process.pid}.tmp`;
+      if (existsSync22(temp)) unlinkSync(temp);
     }
     throw error;
   }
@@ -11028,9 +11140,9 @@ var applyFixProposal = (root, proposalInput, options = {}) => {
 };
 
 // src/agents/registry-adapter.ts
-import { existsSync as existsSync22, readFileSync as readFileSync23, writeFileSync as writeFileSync7, mkdirSync as mkdirSync6 } from "fs";
+import { existsSync as existsSync23, readFileSync as readFileSync24, writeFileSync as writeFileSync7, mkdirSync as mkdirSync6 } from "fs";
 import { spawn } from "child_process";
-import { join as join20, resolve as resolve20 } from "path";
+import { join as join21, resolve as resolve21 } from "path";
 import { pathToFileURL } from "url";
 import { z as z13 } from "zod";
 var DEFAULT_REGISTRY_AGENT_ID = "ecosystem-doc-bridge-corpus-scanner";
@@ -11065,7 +11177,7 @@ var validateGrounding = (proposal, snapshot, report, documentation) => {
   if (proposal.relatedDiagnosticIds.some((id) => !diagnosticIds.has(id))) throw new Error("Registry agent proposal references an unknown diagnostic.");
   if (proposal.evidence.some((item) => !evidenceKeys.has(evidenceKey2(item)))) throw new Error("Registry agent proposal contains evidence outside the supplied snapshot/report.");
 };
-var runCli = (root, cli, context, timeoutMs, maxInputBytes, maxResponseBytes) => new Promise((resolve34, reject) => {
+var runCli = (root, cli, context, timeoutMs, maxInputBytes, maxResponseBytes) => new Promise((resolve35, reject) => {
   const v2 = "protocol" in context;
   const input = JSON.stringify(
     v2 ? { protocol: REGISTRY_AGENT_PROTOCOL_V2, response: 'Return exactly one JSON object { "proposals": [...] } on stdout. Do not emit markdown or logs on stdout.', context } : { protocol: "doc-bridge.registry-agent.v1", response: "Return exactly one AgentProposalV1 JSON object on stdout. Do not emit markdown or logs on stdout.", context }
@@ -11117,7 +11229,7 @@ var runCli = (root, cli, context, timeoutMs, maxInputBytes, maxResponseBytes) =>
         return;
       }
       try {
-        resolve34(JSON.parse(stdout));
+        resolve35(JSON.parse(stdout));
       } catch (error) {
         reject(new Error(`Registry agent CLI must return one JSON object on stdout: ${error instanceof Error ? error.message : String(error)}`));
       }
@@ -11133,8 +11245,8 @@ var runCli = (root, cli, context, timeoutMs, maxInputBytes, maxResponseBytes) =>
 var loadRegistryAgentRunner = async (root, config) => {
   const metadata = loadRegistryAgentMetadata(root, config);
   const configured = registryConfig(config)?.runnerModule;
-  const modulePath = configured ? containedPath(root, configured) : containedPath(root, join20(metadata.root, "doc-bridge-adapter.js"));
-  if (!modulePath || !existsSync22(modulePath)) throw new Error(`Registry agent "${metadata.id}" has no local runner module. Configure intelligence.registry.runnerModule or add doc-bridge-adapter.js to the installed agent.`);
+  const modulePath = configured ? containedPath(root, configured) : containedPath(root, join21(metadata.root, "doc-bridge-adapter.js"));
+  if (!modulePath || !existsSync23(modulePath)) throw new Error(`Registry agent "${metadata.id}" has no local runner module. Configure intelligence.registry.runnerModule or add doc-bridge-adapter.js to the installed agent.`);
   const loaded = await import(pathToFileURL(modulePath).href);
   const runner = typeof loaded.run === "function" ? loaded.run : typeof loaded.default === "function" ? loaded.default : loaded.default && typeof loaded.default === "object" && "run" in loaded.default && typeof loaded.default.run === "function" ? loaded.default.run : void 0;
   if (!runner) throw new Error(`Registry agent runner at ${modulePath} must export a function or { run }. `);
@@ -11144,17 +11256,17 @@ var loadRegistryAgentMetadata = (root, config) => {
   const settings = registryConfig(config);
   const id = settings?.agentId ?? DEFAULT_REGISTRY_AGENT_ID;
   const agentRoot = settings?.agentRoot ?? "agents";
-  const agentPath = containedPath(root, join20(agentRoot, id));
-  if (!agentPath || !existsSync22(agentPath)) throw new Error(`AgentsKit Registry agent "${id}" is not installed at ${join20(agentRoot, id)}. Install it with: npx agentskit add ${id}`);
-  const metadataPath = [join20(agentPath, "agent.json"), join20(agentPath, "manifest.json")].find(existsSync22);
+  const agentPath = containedPath(root, join21(agentRoot, id));
+  if (!agentPath || !existsSync23(agentPath)) throw new Error(`AgentsKit Registry agent "${id}" is not installed at ${join21(agentRoot, id)}. Install it with: npx agentskit add ${id}`);
+  const metadataPath = [join21(agentPath, "agent.json"), join21(agentPath, "manifest.json")].find(existsSync23);
   if (!metadataPath) throw new Error(`Registry agent "${id}" is installed but has no agent.json or manifest.json metadata.`);
-  const metadata = RegistryAgentMetadataSchema.parse(JSON.parse(readFileSync23(metadataPath, "utf8")));
+  const metadata = RegistryAgentMetadataSchema.parse(JSON.parse(readFileSync24(metadataPath, "utf8")));
   if (metadata.id !== id) throw new Error(`Installed Registry agent metadata id "${metadata.id}" does not match configured id "${id}".`);
   return { ...metadata, root: agentPath };
 };
 var createRegistryAgentAdapter = (root, config, runner) => {
   if (!registryConfig(config)?.enabled) throw new Error("Registry agents are disabled. Set intelligence.registry.enabled: true to run an assisted workflow.");
-  const metadata = loadRegistryAgentMetadata(resolve20(root), config);
+  const metadata = loadRegistryAgentMetadata(resolve21(root), config);
   const settings = registryConfig(config) ?? {};
   const timeoutMs = settings.timeoutMs ?? 12e4;
   const maxInputBytes = settings.maxInputBytes ?? 8e6;
@@ -11171,7 +11283,7 @@ var createRegistryAgentAdapter = (root, config, runner) => {
     try {
       let raw;
       if (settings.cli) {
-        raw = await runCli(resolve20(root), settings.cli, context, timeoutMs, maxInputBytes, maxResponseBytes);
+        raw = await runCli(resolve21(root), settings.cli, context, timeoutMs, maxInputBytes, maxResponseBytes);
       } else {
         const localRunner = runner;
         const timeout = new Promise((_, reject) => {
@@ -11249,20 +11361,20 @@ var persistRegistryAgentProposal = (stateDir, proposal) => {
   AgentProposalV1Schema.parse(proposal);
   if (proposal.contentHash !== contentHashForArtifactV1(proposal)) throw new Error("Cannot persist a Registry agent proposal with an invalid contentHash.");
   const safeHash = contentHashForArtifactV1(proposal);
-  mkdirSync6(join20(resolve20(stateDir), "agents"), { recursive: true });
-  const path = join20(resolve20(stateDir), "agents", `${proposal.origin.id}-${safeHash}.json`);
+  mkdirSync6(join21(resolve21(stateDir), "agents"), { recursive: true });
+  const path = join21(resolve21(stateDir), "agents", `${proposal.origin.id}-${safeHash}.json`);
   writeFileSync7(path, `${JSON.stringify(proposal, null, 2)}
 `, "utf8");
   return path;
 };
 
 // src/enrich/approvals.ts
-import { existsSync as existsSync23, mkdirSync as mkdirSync7, readFileSync as readFileSync24, readdirSync as readdirSync5, renameSync as renameSync4, writeFileSync as writeFileSync8 } from "fs";
-import { join as join21, resolve as resolve21 } from "path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync7, readFileSync as readFileSync25, readdirSync as readdirSync5, renameSync as renameSync4, writeFileSync as writeFileSync8 } from "fs";
+import { join as join22, resolve as resolve22 } from "path";
 var APPROVALS_DIR = ".doc-bridge/approvals";
 var ENRICHMENT_APPROVAL_GATE = "doc-bridge.enrichment";
 var FIX_APPROVAL_GATE = "doc-bridge.fix";
-var approvalsDir = (root) => join21(resolve21(root), APPROVALS_DIR);
+var approvalsDir = (root) => join22(resolve22(root), APPROVALS_DIR);
 var safeId = (id) => {
   if (!/^[a-f0-9]{16,64}$/.test(id)) throw new Error(`Approval ids are content hashes; received "${id}".`);
   return id;
@@ -11270,7 +11382,7 @@ var safeId = (id) => {
 var enrichmentApprovalId = (proposalId, targetContentHash) => sha256NormalizedV1({ proposalId, targetContentHash });
 var fixApprovalId = (proposalId, proposalHash) => sha256NormalizedV1({ proposalId, proposalHash });
 var createFileApprovalStore = (dir) => {
-  const pathFor = (id) => join21(dir, `${safeId(id)}.json`);
+  const pathFor = (id) => join22(dir, `${safeId(id)}.json`);
   const write = (approval) => {
     mkdirSync7(dir, { recursive: true });
     const path = pathFor(approval.id);
@@ -11281,9 +11393,9 @@ var createFileApprovalStore = (dir) => {
   };
   const read = (id) => {
     const path = pathFor(id);
-    if (!existsSync23(path)) return null;
+    if (!existsSync24(path)) return null;
     try {
-      return JSON.parse(readFileSync24(path, "utf8"));
+      return JSON.parse(readFileSync25(path, "utf8"));
     } catch {
       return null;
     }
@@ -11629,16 +11741,16 @@ var findDocPath = (index, args) => {
   return doc.path;
 };
 var resolveDocPath = (root, relPath) => {
-  const rootAbs = realpathSync9.native(root);
-  const unresolved = resolve22(rootAbs, relPath);
-  const unresolvedRel = relative10(rootAbs, unresolved);
+  const rootAbs = realpathSync10.native(root);
+  const unresolved = resolve23(rootAbs, relPath);
+  const unresolvedRel = relative11(rootAbs, unresolved);
   if (unresolvedRel.startsWith("..")) throw new Error("doc.get path escapes project root");
-  const abs = realpathSync9.native(unresolved);
-  const rel = relative10(rootAbs, abs);
+  const abs = realpathSync10.native(unresolved);
+  const rel = relative11(rootAbs, abs);
   if (rel.startsWith("..")) throw new Error("doc.get path escapes project root");
   return abs;
 };
-var workflowStateDir = (ctx) => resolve22(ctx.root, ctx.config.workflow?.stateDir ?? ".doc-bridge/workflow");
+var workflowStateDir = (ctx) => resolve23(ctx.root, ctx.config.workflow?.stateDir ?? ".doc-bridge/workflow");
 var workflowRun = (ctx) => loadWorkflowManifest(workflowStateDir(ctx));
 var ensureLatestRun = (ctx, runId2) => {
   const run2 = workflowRun(ctx);
@@ -11654,17 +11766,17 @@ var workflowReport = (ctx, runId2) => {
   ensureLatestRun(ctx, runId2);
   return parseReconciliationReport(loadWorkflowStepOutput(workflowStateDir(ctx), "reconcile"));
 };
-var proposalPath = (ctx) => join22(ctx.root, ".doc-bridge", "proposal.json");
+var proposalPath = (ctx) => join23(ctx.root, ".doc-bridge", "proposal.json");
 var readSavedProposal = (ctx, input) => {
   if (input !== void 0) return FixProposalV1Schema.parse(input);
   try {
-    return FixProposalV1Schema.parse(JSON.parse(readFileSync25(proposalPath(ctx), "utf8")));
+    return FixProposalV1Schema.parse(JSON.parse(readFileSync26(proposalPath(ctx), "utf8")));
   } catch {
     throw new Error(`No saved fix proposal at ${proposalPath(ctx)}.`);
   }
 };
 var saveProposal = (ctx, proposal) => {
-  mkdirSync8(join22(ctx.root, ".doc-bridge"), { recursive: true });
+  mkdirSync8(join23(ctx.root, ".doc-bridge"), { recursive: true });
   writeFileSync9(proposalPath(ctx), `${JSON.stringify(proposal, null, 2)}
 `, "utf8");
 };
@@ -11727,7 +11839,7 @@ var handleMcpRequest = (ctx, request) => {
     }
     if (name === "doc.get") {
       const relPath = findDocPath(index(), parseToolArgs("doc.get", DocGetArgsSchema, args));
-      return textResult(readFileSync25(resolveDocPath(ctx.root, relPath), "utf8"));
+      return textResult(readFileSync26(resolveDocPath(ctx.root, relPath), "utf8"));
     }
     if (name === "gate.status") return textResult(runGates(ctx.root, ctx.config));
     if (name === "retriever.query") {
@@ -12506,7 +12618,7 @@ var studyRetrievalSuite = (options) => {
       continue;
     }
     const targets = byRepository.get(task.repositoryId);
-    const resolve34 = (references, kind) => references.flatMap((item) => {
+    const resolve35 = (references, kind) => references.flatMap((item) => {
       const resolved = targets?.[item];
       if (!resolved?.length) {
         unresolved.push({ taskId: task.id, repositoryId: task.repositoryId, reference: item, kind });
@@ -12515,7 +12627,7 @@ var studyRetrievalSuite = (options) => {
       return resolved;
     });
     const expectedTargets = [
-      .../* @__PURE__ */ new Set([...resolve34(task.expectedEntities ?? [], "entity"), ...resolve34(task.expectedDocuments ?? [], "document")])
+      .../* @__PURE__ */ new Set([...resolve35(task.expectedEntities ?? [], "entity"), ...resolve35(task.expectedDocuments ?? [], "document")])
     ].sort();
     if (!expectedTargets.length) continue;
     const queries = taskRetrievalQueries(task);
@@ -13069,11 +13181,11 @@ var reconcileKnowledge = (observed, declared, options = {}) => {
 };
 
 // src/enrich/stage.ts
-import { basename as basename8, resolve as resolve24 } from "path";
+import { basename as basename8, resolve as resolve25 } from "path";
 
 // src/enrich/cache.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync9, readFileSync as readFileSync26, renameSync as renameSync5, writeFileSync as writeFileSync10 } from "fs";
-import { join as join23 } from "path";
+import { existsSync as existsSync25, mkdirSync as mkdirSync9, readFileSync as readFileSync27, renameSync as renameSync5, writeFileSync as writeFileSync10 } from "fs";
+import { join as join24 } from "path";
 import { z as z19 } from "zod";
 var enrichmentCacheKey = (input) => sha256NormalizedV1({ task: input.task, agentId: input.agentId, agentVersion: input.agentVersion, promptVersion: input.promptVersion, packHash: input.packHash });
 var CacheEntrySchema = z19.object({
@@ -13088,14 +13200,14 @@ var CacheEntrySchema = z19.object({
 }).strict();
 var createEnrichmentCache = (root) => {
   const dir = enrichmentCacheDir(root);
-  const pathFor = (key) => join23(dir, `${key}.json`);
+  const pathFor = (key) => join24(dir, `${key}.json`);
   return {
     read: (input) => {
       const key = enrichmentCacheKey(input);
       const path = pathFor(key);
-      if (!existsSync24(path)) return void 0;
+      if (!existsSync25(path)) return void 0;
       try {
-        const entry = CacheEntrySchema.parse(JSON.parse(readFileSync26(path, "utf8")));
+        const entry = CacheEntrySchema.parse(JSON.parse(readFileSync27(path, "utf8")));
         return entry.key === key && entry.packHash === input.packHash && entry.agentId === input.agentId ? entry.proposals : void 0;
       } catch {
         return void 0;
@@ -13116,8 +13228,8 @@ var createEnrichmentCache = (root) => {
 };
 
 // src/enrich/context-pack.ts
-import { readFileSync as readFileSync27 } from "fs";
-import { join as join24, resolve as resolve23 } from "path";
+import { readFileSync as readFileSync28 } from "fs";
+import { join as join25, resolve as resolve24 } from "path";
 var CONTEXT_PACK_VERSION = 1;
 var DEFAULT_PACK_BYTES = 64 * 1024;
 var MAX_PACK_NEIGHBOURS = 32;
@@ -13141,7 +13253,7 @@ var boundedMetadata = (metadata) => {
 var defaultReader = (root) => (path) => {
   if (!root) return void 0;
   try {
-    return readFileSync27(join24(resolve23(root), path), "utf8");
+    return readFileSync28(join25(resolve24(root), path), "utf8");
   } catch {
     return void 0;
   }
@@ -13320,7 +13432,7 @@ var registryAgent = async (root, config) => {
   };
   return {
     call: async ({ role, task, packs }) => (await adapterFor(role.agentId)).enrich(task, packs, { role: role.role, promptVersion: role.promptVersion }),
-    version: (role) => loadRegistryAgentMetadata(resolve24(root), configWithAgent(config, role.agentId)).version
+    version: (role) => loadRegistryAgentMetadata(resolve25(root), configWithAgent(config, role.agentId)).version
   };
 };
 var overlayBase = (options) => ({
@@ -13863,7 +13975,7 @@ const findingMatches=(finding)=>{const query=state.query.toLowerCase();return(!q
 const findingScope=(finding)=>data.view?.diagnosticGroup?.[finding.id]?.[0]||(()=>{const ids=[...(finding.entityIds||[])];(finding.relationIds||[]).forEach((id)=>{const relation=relationById.get(id);if(relation)ids.push(relation.from,relation.to)});return ids.map(groupFor).sort()[0]||"repository"})();
 const findingGroups=(findings)=>{const groups=new Map();findings.forEach((finding)=>{const scope=findingScope(finding),key=[scope,finding.code,finding.status,finding.severity].join("|"),group=groups.get(key)||{key,scope,code:finding.code,status:finding.status,severity:finding.severity,findings:[]};group.findings.push(finding);groups.set(key,group)});return[...groups.values()].sort((left,right)=>right.findings.length-left.findings.length||left.code.localeCompare(right.code)||left.key.localeCompare(right.key))};
 const renderFinding=(finding)=>"<article class=\"finding\" id=\""+esc("diagnostic-"+finding.id.replace(/[^A-Za-z0-9_-]+/g,"-"))+"\"><div class=\"finding-head\"><h3>"+esc(finding.code)+"</h3><span><span class=\"tag "+esc(finding.severity)+"\">"+esc(finding.severity)+"</span> <span class=\"tag\">"+esc(finding.status)+"</span></span></div><p>"+esc(finding.message)+"</p>"+(finding.evidence.length?"<ul>"+finding.evidence.slice(0,4).map((item)=>"<li>"+esc(item.path+(item.lineStart?":"+item.lineStart:"")+(item.context?" — "+item.context:""))+"</li>").join("")+"</ul>":"")+(finding.remediation?"<p><strong>Next check:</strong> "+esc(finding.remediation)+"</p>":"")+"</article>";
-const renderFindings=()=>{let findings=data.diagnostics.filter(findingMatches);if(state.lens==="risks")findings=findings.filter((finding)=>finding.severity==="error"||finding.severity==="warn");if(state.lens==="evidence")findings=findings.filter((finding)=>finding.evidence.length);if(state.lens==="drift")findings=findings.filter((finding)=>finding.status!=="confirmed");const itemLabel=state.lens==="evidence"?"evidence checks":"findings",groups=findingGroups(findings),active=groups.find((group)=>group.key===state.findingGroup);if(!active){state.findingGroup=null;state.findingPage=0}syncHash();const selected=active||null,pageSize=40,pageCount=selected?Math.ceil(selected.findings.length/pageSize):0,page=Math.max(0,Math.min(state.findingPage,Math.max(0,pageCount-1))),start=page*pageSize;document.querySelector("#finding-count").textContent=findings.length+" "+itemLabel+" · "+groups.length+" groups";document.querySelector("#findings").innerHTML=findings.length?"<div class=\"finding-groups\">"+groups.map((group)=>"<article class=\"finding-group\"><div class=\"finding-head\"><h3>"+esc(group.code)+"</h3><span><span class=\"tag "+esc(group.severity)+"\">"+esc(group.severity)+"</span> <span class=\"tag\">"+esc(group.status)+"</span></span></div><p><strong>"+group.findings.length+"</strong> "+itemLabel+" · "+esc(groupById.get(group.scope)?.name||group.scope)+"</p><p>"+esc(group.findings[0].message)+"</p><button class=\"tab\" type=\"button\" data-finding-group=\""+esc(group.key)+"\" aria-expanded=\""+String(selected?.key===group.key)+"\">Inspect group</button></article>").join("")+"</div>"+(selected?"<div class=\"finding-detail\"><div class=\"finding-head\"><h3>"+esc(selected.code)+" · "+esc(groupById.get(selected.scope)?.name||selected.scope)+"</h3><span class=\"subtle\">"+selected.findings.length+" "+itemLabel+"</span></div>"+selected.findings.slice(start,start+pageSize).map(renderFinding).join("")+"<div class=\"finding-actions\"><button class=\"tab\" type=\"button\" data-finding-group=\""+esc(selected.key)+"\" data-finding-page=\""+(page-1)+"\" "+(page===0?"disabled":"")+">Previous</button><span class=\"subtle\">Showing "+(start+1)+"–"+Math.min(start+pageSize,selected.findings.length)+" of "+selected.findings.length+" · page "+(page+1)+"/"+pageCount+"</span><button class=\"tab\" type=\"button\" data-finding-group=\""+esc(selected.key)+"\" data-finding-page=\""+(page+1)+"\" "+(page+1>=pageCount?"disabled":"")+">Next</button></div></div>":""):"<p class=\"empty\">No "+itemLabel+" match the current lens and filters.</p>"};
+const renderFindings=()=>{let findings=data.diagnostics.filter(findingMatches);if(state.lens==="risks")findings=findings.filter((finding)=>finding.severity==="error"||finding.severity==="warn");if(state.lens==="evidence")findings=findings.filter((finding)=>finding.evidence.length);if(state.lens==="drift")findings=findings.filter((finding)=>finding.status!=="confirmed");const itemLabel=state.lens==="evidence"?"evidence checks":"findings",groups=findingGroups(findings),active=groups.find((group)=>group.key===state.findingGroup);if(!active){state.findingGroup=null;state.findingPage=0}syncHash();const selected=active||null,pageSize=40,pageCount=selected?Math.ceil(selected.findings.length/pageSize):0,page=Math.max(0,Math.min(state.findingPage,Math.max(0,pageCount-1))),start=page*pageSize;document.querySelector("#finding-count").textContent=findings.length+" "+itemLabel+" · "+groups.length+" groups";document.querySelector("#findings").innerHTML=findings.length?"<div class=\"finding-groups\">"+groups.map((group)=>"<article class=\"finding-group\"><div class=\"finding-head\"><h3>"+esc(group.code)+"</h3><span><span class=\"tag "+esc(group.severity)+"\">"+esc(group.severity)+"</span> <span class=\"tag\">"+esc(group.status)+"</span></span></div><p><strong>"+group.findings.length+"</strong> "+itemLabel+" · "+esc(groupById.get(group.scope)?.name||group.scope)+"</p><p>"+esc(group.findings[0].message)+"</p><button class=\"tab\" type=\"button\" data-finding-group=\""+esc(group.key)+"\" aria-expanded=\""+String(selected?.key===group.key)+"\">Inspect group</button></article>").join("")+"</div>"+(selected?"<div class=\"finding-detail\"><div class=\"finding-head\"><h3>"+esc(selected.code)+" · "+esc(groupById.get(selected.scope)?.name||selected.scope)+"</h3><span class=\"subtle\">"+selected.findings.length+" "+itemLabel+"</span></div>"+selected.findings.slice(start,start+pageSize).map(renderFinding).join("")+"<div class=\"finding-actions\"><button class=\"tab\" type=\"button\" data-finding-group=\""+esc(selected.key)+"\" data-finding-page=\""+(page - 1)+"\" "+(page===0?"disabled":"")+">Previous</button><span class=\"subtle\">Showing "+(start+1)+"–"+Math.min(start+pageSize,selected.findings.length)+" of "+selected.findings.length+" · page "+(page+1)+"/"+pageCount+"</span><button class=\"tab\" type=\"button\" data-finding-group=\""+esc(selected.key)+"\" data-finding-page=\""+(page+1)+"\" "+(page+1>=pageCount?"disabled":"")+">Next</button></div></div>":""):"<p class=\"empty\">No "+itemLabel+" match the current lens and filters.</p>"};
 const renderCoverage=()=>{document.querySelector("#coverage-list").innerHTML=(data.coverage||[]).map((entry)=>{const width=entry.status==="complete"?100:entry.status==="partial"?55:12;return"<div class=\"coverage-row\"><div><b>"+esc(entry.analyzer)+"</b><br><span class=\"subtle\">"+esc(entry.scope)+"</span></div><div class=\"bar\"><i class=\""+(entry.status==="complete"?"":entry.status==="partial"?"partial":"none")+"\" style=\"width:"+width+"%\"></i></div><div>"+esc(entry.status)+"</div></div>"}).join("")||"<p class=\"empty\">No coverage metadata.</p>"};
 const deferFindings=()=>{if(findingsLoaded())return;const actionable=data.actionableCount??data.diagnosticCount??0,confirmed=data.confirmedCount??0;document.querySelector("#finding-count").textContent=actionable+" actionable findings · "+confirmed+" confirmed checks available on demand";document.querySelector("#findings").innerHTML="<div class=\"empty\"><p>Findings stay out of the first paint so large repositories remain responsive. Confirmed checks are evidence, not issues.</p><button id=\"load-findings\" class=\"tab\" type=\"button\">Load findings</button></div>"};
 const scopePrompt=()=>{if((state.level==="module"||state.level==="file")&&!state.selected){document.querySelector("#map-note").textContent="Select an app or package to inspect this level.";document.querySelector("#graph").innerHTML="<text x=\"500\" y=\"270\" text-anchor=\"middle\" class=\"subtle\">Select an app or package to expand this view.</text>"}};
@@ -14098,8 +14210,8 @@ var formatBenchmarkText = (result) => [
 ].join("\n");
 
 // src/audit/documentation.ts
-import { readFileSync as readFileSync28 } from "fs";
-import { resolve as resolve25 } from "path";
+import { readFileSync as readFileSync29 } from "fs";
+import { resolve as resolve26 } from "path";
 import { minimatch as minimatch7 } from "minimatch";
 
 // src/render/data.ts
@@ -14507,7 +14619,7 @@ var auditDocumentation = (options) => {
   const generatedPaths = config.generatedPaths ?? [];
   const criticalPaths = config.criticalPaths ?? [];
   const requiredSections = config.requiredSections ?? [];
-  const documents = options.snapshot.entities.filter((entity) => entity.kind === "document" && entity.path).map((entity) => ({ path: normalizedPath2(entity.path), content: readFileSync28(resolve25(options.root, entity.path), "utf8") })).filter((document) => !matches(document.path, excluded)).sort((a, b) => a.path.localeCompare(b.path));
+  const documents = options.snapshot.entities.filter((entity) => entity.kind === "document" && entity.path).map((entity) => ({ path: normalizedPath2(entity.path), content: readFileSync29(resolve26(options.root, entity.path), "utf8") })).filter((document) => !matches(document.path, excluded)).sort((a, b) => a.path.localeCompare(b.path));
   const findings = [];
   const generated = documents.filter((document) => matches(document.path, generatedPaths));
   const analyzed = documents.filter((document) => !matches(document.path, generatedPaths));
@@ -14729,8 +14841,8 @@ var formatDocumentationAuditText = (report) => [
 ];
 
 // src/render/render.ts
-import { existsSync as existsSync25, mkdirSync as mkdirSync10, readFileSync as readFileSync29, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname10, join as join25, relative as relative11, resolve as resolve26 } from "path";
+import { existsSync as existsSync26, mkdirSync as mkdirSync10, readFileSync as readFileSync30, writeFileSync as writeFileSync11 } from "fs";
+import { dirname as dirname11, join as join26, relative as relative12, resolve as resolve27 } from "path";
 var OPEN_PLACEHOLDER = "@@doc-bridge:generated-open@@";
 var CLOSE_PLACEHOLDER = "@@doc-bridge:generated-close@@";
 var REGION_VARIABLES = { open: OPEN_PLACEHOLDER, close: CLOSE_PLACEHOLDER };
@@ -14763,8 +14875,8 @@ var renderPage = (name, variables, config, root) => {
   const output = renderNamedTemplate(name, { ...variables, region: REGION_VARIABLES }, config, root);
   return RENDER_TEMPLATES[name].generatedRegion ? applyGeneratedRegions(output, name) : output;
 };
-var readJson3 = (root, path) => JSON.parse(readFileSync29(resolve26(root, path), "utf8"));
-var stateDirOf = (root, config) => resolve26(root, config.workflow?.stateDir ?? ".doc-bridge/workflow");
+var readJson3 = (root, path) => JSON.parse(readFileSync30(resolve27(root, path), "utf8"));
+var stateDirOf = (root, config) => resolve27(root, config.workflow?.stateDir ?? ".doc-bridge/workflow");
 var loadIndex = (options) => options.dataPath ? parseDocBridgeIndex(readJson3(options.root, options.dataPath)) : buildDocBridgeIndex({ root: options.root, config: options.config, write: false }).index;
 var loadReconciliation = (root, config) => {
   try {
@@ -14787,7 +14899,7 @@ var loadPreviousSnapshot = (options) => {
 };
 var DEFAULT_OVERLAY_PATH = ".doc-bridge/enrich/overlay.json";
 var loadOverlay = (options) => {
-  const path = options.dataPath ?? (existsSync25(resolve26(options.root, DEFAULT_OVERLAY_PATH)) ? DEFAULT_OVERLAY_PATH : void 0);
+  const path = options.dataPath ?? (existsSync26(resolve27(options.root, DEFAULT_OVERLAY_PATH)) ? DEFAULT_OVERLAY_PATH : void 0);
   if (!path) return { overlay: void 0 };
   const value = readJson3(options.root, path);
   if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${path} is not an overlay object.`);
@@ -14838,20 +14950,20 @@ var writeRenderedPages = (result, target2, root) => {
   const single = result.pages.length === 1 && !RENDER_TEMPLATES[result.template].multiPage;
   const written = [];
   const write = (path, content) => {
-    mkdirSync10(dirname10(path), { recursive: true });
+    mkdirSync10(dirname11(path), { recursive: true });
     writeFileSync11(path, content, "utf8");
-    return toPosix(relative11(root, path));
+    return toPosix(relative12(root, path));
   };
   for (const page of result.pages) {
     if (!single) {
-      written.push(write(join25(target2, page.path), page.content));
+      written.push(write(join26(target2, page.path), page.content));
       continue;
     }
     try {
       written.push(write(target2, page.content));
     } catch (error) {
       if (error.code !== "EISDIR") throw error;
-      written.push(write(join25(target2, page.path), page.content));
+      written.push(write(join26(target2, page.path), page.content));
     }
   }
   return written;
@@ -14924,8 +15036,8 @@ Global flags:
 `;
 
 // src/parity/check.ts
-import { existsSync as existsSync27, readFileSync as readFileSync31 } from "fs";
-import { resolve as resolve28 } from "path";
+import { existsSync as existsSync28, readFileSync as readFileSync32 } from "fs";
+import { resolve as resolve29 } from "path";
 import { z as z23 } from "zod";
 
 // src/parity/claims.ts
@@ -15072,9 +15184,9 @@ var claimPattern = (claim, surface) => {
 var renderClaim = (claim, value, surface) => (surface === void 0 ? claim.template ?? "{value}" : templateFor(claim, surface)).replace("{value}", value);
 
 // src/parity/resolve.ts
-import { existsSync as existsSync26, readFileSync as readFileSync30 } from "fs";
-import { resolve as resolve27 } from "path";
-var readJson4 = (path) => JSON.parse(readFileSync30(path, "utf8"));
+import { existsSync as existsSync27, readFileSync as readFileSync31 } from "fs";
+import { resolve as resolve28 } from "path";
+var readJson4 = (path) => JSON.parse(readFileSync31(path, "utf8"));
 var dotted = (value, field) => field.split(".").reduce((current, key) => {
   if (current === null || typeof current !== "object") return void 0;
   return current[key];
@@ -15126,20 +15238,20 @@ var resolveClaim = (claim, context) => {
   const evidence2 = claim.evidence;
   switch (evidence2.kind) {
     case "package-field": {
-      const path = resolve27(context.root, "package.json");
-      if (!existsSync26(path)) return { status: "not-analyzed", reason: "package.json is not present." };
+      const path = resolve28(context.root, "package.json");
+      if (!existsSync27(path)) return { status: "not-analyzed", reason: "package.json is not present." };
       const value = scalar2(dotted(readJson4(path), evidence2.field), void 0);
       return value === void 0 ? { status: "not-analyzed", reason: `package.json has no scalar field "${evidence2.field}".` } : { status: "resolved", value };
     }
     case "artifact-field": {
-      const path = resolve27(context.root, evidence2.path);
-      if (!existsSync26(path)) return { status: "not-analyzed", reason: `${evidence2.path} is not present.` };
+      const path = resolve28(context.root, evidence2.path);
+      if (!existsSync27(path)) return { status: "not-analyzed", reason: `${evidence2.path} is not present.` };
       const value = scalar2(dotted(readJson4(path), evidence2.field), evidence2.transform);
       return value === void 0 ? { status: "not-analyzed", reason: `${evidence2.path} has no scalar field "${evidence2.field}" that renders under ${evidence2.transform ?? "identity"}.` } : { status: "resolved", value };
     }
     case "artifact-sum": {
-      const path = resolve27(context.root, evidence2.path);
-      if (!existsSync26(path)) return { status: "not-analyzed", reason: `${evidence2.path} is not present.` };
+      const path = resolve28(context.root, evidence2.path);
+      if (!existsSync27(path)) return { status: "not-analyzed", reason: `${evidence2.path} is not present.` };
       const array = dotted(readJson4(path), evidence2.arrayField);
       if (!Array.isArray(array) || array.length === 0) {
         return { status: "not-analyzed", reason: `${evidence2.path} has no non-empty array at "${evidence2.arrayField}".` };
@@ -15248,8 +15360,8 @@ var occurrences = (claim, surface, content) => {
 var checkPublicParity = (options) => {
   const { registry } = options;
   const read = options.readSurface ?? ((path) => {
-    const absolute = resolve28(options.root, path);
-    return existsSync27(absolute) ? readFileSync31(absolute, "utf8") : void 0;
+    const absolute = resolve29(options.root, path);
+    return existsSync28(absolute) ? readFileSync32(absolute, "utf8") : void 0;
   });
   const surfaces2 = claimSurfaces(registry);
   const contents = new Map(surfaces2.map((surface) => [surface, read(surface)]));
@@ -15394,12 +15506,12 @@ var formatPublicParityText = (report) => [
 import { spawn as spawn2 } from "child_process";
 import { createHash as createHash3 } from "crypto";
 import { mkdirSync as mkdirSync11, writeFileSync as writeFileSync12 } from "fs";
-import { dirname as dirname11, resolve as resolve30 } from "path";
+import { dirname as dirname12, resolve as resolve31 } from "path";
 import { z as z25 } from "zod";
 
 // src/study/provider-cli.ts
-import { accessSync, constants, existsSync as existsSync28, statSync as statSync3 } from "fs";
-import { isAbsolute as isAbsolute6, resolve as resolve29 } from "path";
+import { accessSync, constants, existsSync as existsSync29, statSync as statSync3 } from "fs";
+import { isAbsolute as isAbsolute7, resolve as resolve30 } from "path";
 import { z as z24 } from "zod";
 var STUDY_PROVIDER_CLI_SCHEMA_VERSION = 1;
 var STUDY_PROVIDER_CLI_CONTENT_HASH_ALGO = "sha256-normalized-v1";
@@ -15469,9 +15581,9 @@ var calculateStudyCostUsd = (pricing2, usage2) => {
   return Number(((uncachedInputTokens * pricing2.inputPerMillionUsd + cachedInputTokens * pricing2.cachedInputPerMillionUsd + usage2.outputTokens * pricing2.outputPerMillionUsd) / 1e6).toFixed(8));
 };
 var validateStudyProviderCommand = (provider, cwd) => {
-  if (isAbsolute6(provider.command) || provider.command.includes("/")) {
-    const resolvedPath = isAbsolute6(provider.command) ? provider.command : resolve29(cwd, provider.command);
-    if (!existsSync28(resolvedPath) || !statSync3(resolvedPath).isFile()) throw new Error(`Provider CLI command is not executable at ${resolvedPath}.`);
+  if (isAbsolute7(provider.command) || provider.command.includes("/")) {
+    const resolvedPath = isAbsolute7(provider.command) ? provider.command : resolve30(cwd, provider.command);
+    if (!existsSync29(resolvedPath) || !statSync3(resolvedPath).isFile()) throw new Error(`Provider CLI command is not executable at ${resolvedPath}.`);
     try {
       accessSync(resolvedPath, constants.X_OK);
     } catch {
@@ -15482,7 +15594,7 @@ var validateStudyProviderCommand = (provider, cwd) => {
   const pathEntries = (process.env.PATH ?? "").split(":").filter(Boolean);
   if (pathEntries.some((entry) => {
     try {
-      accessSync(resolve29(entry, provider.command), constants.X_OK);
+      accessSync(resolve30(entry, provider.command), constants.X_OK);
       return true;
     } catch {
       return false;
@@ -15737,7 +15849,7 @@ var runAttempt = (request, sessionId) => new Promise((resolveAttempt) => {
   const maxRuntimeMs = request.maxRuntimeMs ?? request.plan.budget.maxRuntimeMs;
   const maxOutputBytes = request.maxOutputBytes ?? request.plan.budget.maxOutputBytes;
   const child = spawn2(request.command, [...request.args ?? []], {
-    cwd: resolve30(request.cwd),
+    cwd: resolve31(request.cwd),
     shell: false,
     detached: true,
     env: { ...env, DOC_BRIDGE_STUDY_SESSION_ID: sessionId },
@@ -15865,10 +15977,10 @@ var runControlledCommand = async (request) => {
 };
 var persistControlledStudyLedger = (path, ledger) => {
   parseControlledStudyLedger(ledger);
-  mkdirSync11(dirname11(resolve30(path)), { recursive: true });
-  writeFileSync12(resolve30(path), `${JSON.stringify(ledger, null, 2)}
+  mkdirSync11(dirname12(resolve31(path)), { recursive: true });
+  writeFileSync12(resolve31(path), `${JSON.stringify(ledger, null, 2)}
 `, "utf8");
-  return resolve30(path);
+  return resolve31(path);
 };
 var formatControlledStudyRunPlanText = (plan) => [
   `Run plan: ${plan.planVersion}`,
@@ -15881,8 +15993,8 @@ var formatControlledStudyRunPlanText = (plan) => [
 ];
 
 // src/study/execution.ts
-import { existsSync as existsSync29, readFileSync as readFileSync32, statSync as statSync4 } from "fs";
-import { resolve as resolve31 } from "path";
+import { existsSync as existsSync30, readFileSync as readFileSync33, statSync as statSync4 } from "fs";
+import { resolve as resolve32 } from "path";
 import { z as z26 } from "zod";
 var PROVIDER_RESPONSE_CONTRACT = "Return one JSON object matching the output schema. Required keys: taskOutcome, evidenceQuality, safetyOutcome, evidenceIds, clarificationRequests, reworkCount, and measurements. Each measurement is {name:string,value:number>=0}. Run every available acceptance check and report observed acceptanceChecksPassed, acceptanceChecksTotal, and acceptanceChecksExecuted; include firstEvidenceLatencyMs only when observed. Use canonical names when observed: tokensToFirstEvidence (tokens consumed before correct grounded evidence was in hand), registryAgentInputTokens, registryAgentOutputTokens, registryAgentCostUsd, registryAgentRuns (the enrichment agent of the assisted arm, reported apart from your own cost), searchHitRate, acceptanceChecksPassed, acceptanceChecksTotal, acceptanceChecksExecuted, entrypointEvidenceCount, ownershipEvidenceCount, architectureRelationCount, documentationClaimEvidenceCount, sourceComparisonEvidenceCount, verificationEvidenceCount, errorRate, documentationFindingCount, documentationExampleRate, documentationFreshnessRate, documentationCorrectnessRate, documentationCompletenessRate, documentationClarityRate, documentationMaintainabilityRate, timeToFirstEvidenceMs, analysisCostUsd, and agentCostUsd. Omit unknown values; never invent. Output no markdown, prose, logs, token counts, or extra keys; stdout must contain only the JSON object.";
 var STUDY_REPOSITORY_CONFIG_SCHEMA_VERSION = 1;
@@ -15916,8 +16028,8 @@ var emptyLedger2 = () => createControlledStudyLedger({
   observations: []
 });
 var loadLedger = (path) => {
-  if (!existsSync29(path)) return emptyLedger2();
-  return parseControlledStudyLedger(JSON.parse(readFileSync32(path, "utf8")));
+  if (!existsSync30(path)) return emptyLedger2();
+  return parseControlledStudyLedger(JSON.parse(readFileSync33(path, "utf8")));
 };
 var executionKey = (execution) => sha256NormalizedV1({
   taskId: execution.taskId,
@@ -15998,8 +16110,8 @@ var assertRunInputs = (options) => {
     throw new Error("Study repository config must contain exactly one root for every task-suite population id.");
   }
   for (const repository of options.repositories.repositories) {
-    const root = resolve31(repository.root);
-    if (!existsSync29(root) || !statSync4(root).isDirectory()) throw new Error(`Study repository ${repository.id} is not available at the configured root.`);
+    const root = resolve32(repository.root);
+    if (!existsSync30(root) || !statSync4(root).isDirectory()) throw new Error(`Study repository ${repository.id} is not available at the configured root.`);
   }
   const executions = selectTaskExecutions(options.suite, options.plan.sampling.sampleSize, options.plan.sampling);
   const assisted = assistedArmReadiness(options.plan, options.providers, options.suite);
@@ -16045,7 +16157,7 @@ var runControlledStudy = async (options) => {
     repositoryConfigHash: repositories.contentHash,
     assistedArm: { ...assisted, recorded: 0 }
   };
-  let ledger = loadLedger(resolve31(options.ledgerPath));
+  let ledger = loadLedger(resolve32(options.ledgerPath));
   if (ledger.observations.some((observation) => observation.runId === plan.runId && observation.planHash !== plan.contentHash)) throw new Error(`Ledger already contains run ${plan.runId} with a different plan hash.`);
   let executed = 0;
   let skipped = 0;
@@ -16104,7 +16216,7 @@ var runControlledStudy = async (options) => {
     planned: executions.length,
     executed,
     skipped,
-    ledgerPath: resolve31(options.ledgerPath),
+    ledgerPath: resolve32(options.ledgerPath),
     ledgerHash: ledger.contentHash,
     providerConfigHash: providers.contentHash,
     repositoryConfigHash: repositories.contentHash,
@@ -16128,7 +16240,7 @@ var formatControlledStudyRunText = (summary) => [
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash4 } from "crypto";
 import { mkdirSync as mkdirSync12, writeFileSync as writeFileSync13 } from "fs";
-import { dirname as dirname12, resolve as resolve32 } from "path";
+import { dirname as dirname13, resolve as resolve33 } from "path";
 import { z as z27 } from "zod";
 var STUDY_ADJUDICATION_METHOD = "independent-rubric-v1";
 var outcome2 = z27.enum(["success", "partial", "incorrect", "incomplete", "blocked"]);
@@ -16155,7 +16267,7 @@ var terminate = (child) => {
 var runAdjudicatorProcess = (config, cwd, input, maxRuntimeMs) => new Promise((resolveResult) => {
   const env = Object.fromEntries([.../* @__PURE__ */ new Set(["PATH", "HOME", "TMPDIR", ...config.envAllowlist])].flatMap((name) => process.env[name] === void 0 ? [] : [[name, process.env[name]]]));
   const started = Date.now();
-  const child = spawn3(config.command, [...config.args], { cwd: resolve32(cwd), shell: false, detached: true, env, stdio: ["pipe", "pipe", "pipe"] });
+  const child = spawn3(config.command, [...config.args], { cwd: resolve33(cwd), shell: false, detached: true, env, stdio: ["pipe", "pipe", "pipe"] });
   let stdout = "";
   let stderrBytes = 0;
   let settled = false;
@@ -16293,10 +16405,10 @@ var independentlyAdjudicateStudyLedger = async (options) => {
 };
 var persistIndependentlyAdjudicatedLedger = (path, ledger) => {
   parseControlledStudyLedger(ledger);
-  mkdirSync12(dirname12(resolve32(path)), { recursive: true });
-  writeFileSync13(resolve32(path), `${JSON.stringify(ledger, null, 2)}
+  mkdirSync12(dirname13(resolve33(path)), { recursive: true });
+  writeFileSync13(resolve33(path), `${JSON.stringify(ledger, null, 2)}
 `, "utf8");
-  return resolve32(path);
+  return resolve33(path);
 };
 
 // src/study/metrics.ts
@@ -17027,12 +17139,12 @@ var readIndexedDoc = (root, config, idOrPath) => {
   const index = loadFreshDocBridgeIndex(root, config);
   const entry = index.knowledge.find((doc) => doc.id === idOrPath || doc.path === idOrPath);
   if (!entry) throw new Error(`Unknown indexed doc "${idOrPath}". Try: search ${idOrPath}`);
-  const abs = resolve33(root, entry.path);
-  const rootAbs = resolve33(root);
+  const abs = resolve34(root, entry.path);
+  const rootAbs = resolve34(root);
   if (abs !== rootAbs && !abs.startsWith(`${rootAbs}/`)) {
     throw new Error(`Indexed doc escapes project root: ${entry.path}`);
   }
-  return readFileSync33(abs, "utf8");
+  return readFileSync34(abs, "utf8");
 };
 var runAskRepl = async (root, config) => {
   const index = loadFreshDocBridgeIndex(root, config);
@@ -17136,7 +17248,7 @@ var scanWorkflow = (root, config) => {
   runWorkflow(workflowOptions(root, config, discovered.sourceRevision, "collect", { collect: () => discovered }, versions));
   return runWorkflow(workflowOptions(root, config, discovered.sourceRevision, "normalize", { normalize: ({ input }) => input }, versions));
 };
-var documentationInputs = (root, snapshot) => snapshot.entities.filter((entity) => entity.kind === "document" && entity.path).map((entity) => ({ path: entity.path, content: readFileSync33(resolve33(root, entity.path), "utf8") }));
+var documentationInputs = (root, snapshot) => snapshot.entities.filter((entity) => entity.kind === "document" && entity.path).map((entity) => ({ path: entity.path, content: readFileSync34(resolve34(root, entity.path), "utf8") }));
 var ownershipOptions = (config) => {
   const ownership = Object.entries(config.routing?.options?.ownership ?? {}).map(([id, record]) => ({ id, path: record.path }));
   return ownership.length ? { ownership } : {};
@@ -17224,11 +17336,11 @@ var writeAtomicFile = (path, content) => {
   renameSync6(temporaryPath, path);
 };
 var writeReportArtifact = (htmlPath, artifact2) => {
-  mkdirSync13(dirname13(htmlPath), { recursive: true });
+  mkdirSync13(dirname14(htmlPath), { recursive: true });
   if (artifact2.mode === "single-file") {
     writeAtomicFile(htmlPath, artifact2.indexHtml);
     const artifactDir2 = htmlPath.replace(/\.html?$/i, "");
-    if (existsSync30(artifactDir2)) rmSync3(artifactDir2, { recursive: true, force: true });
+    if (existsSync31(artifactDir2)) rmSync3(artifactDir2, { recursive: true, force: true });
     return htmlPath;
   }
   const artifactDir = htmlPath.replace(/\.html?$/i, "");
@@ -17239,28 +17351,28 @@ var writeReportArtifact = (htmlPath, artifact2) => {
   rmSync3(backupDir, { recursive: true, force: true });
   mkdirSync13(temporaryDir, { recursive: true });
   for (const [file, content] of Object.entries(artifact2.files)) {
-    const filePath = resolve33(temporaryDir, file);
-    mkdirSync13(dirname13(filePath), { recursive: true });
+    const filePath = resolve34(temporaryDir, file);
+    mkdirSync13(dirname14(filePath), { recursive: true });
     writeFileSync14(filePath, content, "utf8");
   }
-  writeFileSync14(resolve33(temporaryDir, "manifest.json"), artifact2.manifest, "utf8");
-  const frameSource = `${relative12(dirname13(htmlPath), artifactDir)}/index.html`;
+  writeFileSync14(resolve34(temporaryDir, "manifest.json"), artifact2.manifest, "utf8");
+  const frameSource = `${relative13(dirname14(htmlPath), artifactDir)}/index.html`;
   const launcher = `<!doctype html><html lang="en"><head><meta charset="utf-8"><title>Doc Bridge report</title></head><body style="margin:0"><iframe title="Doc Bridge report" src="${frameSource}" style="border:0;width:100vw;height:100vh"></iframe></body></html>`;
   writeFileSync14(launcherTemp, launcher, "utf8");
   try {
-    if (existsSync30(artifactDir)) renameSync6(artifactDir, backupDir);
+    if (existsSync31(artifactDir)) renameSync6(artifactDir, backupDir);
     renameSync6(temporaryDir, artifactDir);
     renameSync6(launcherTemp, htmlPath);
-    if (existsSync30(backupDir)) rmSync3(backupDir, { recursive: true, force: true });
+    if (existsSync31(backupDir)) rmSync3(backupDir, { recursive: true, force: true });
   } catch (error) {
-    if (existsSync30(backupDir)) {
+    if (existsSync31(backupDir)) {
       const failedDir = `${artifactDir}.failed-${process.pid}`;
-      if (existsSync30(artifactDir)) renameSync6(artifactDir, failedDir);
+      if (existsSync31(artifactDir)) renameSync6(artifactDir, failedDir);
       renameSync6(backupDir, artifactDir);
-      if (existsSync30(failedDir)) rmSync3(failedDir, { recursive: true, force: true });
-    } else if (existsSync30(artifactDir)) rmSync3(artifactDir, { recursive: true, force: true });
-    if (existsSync30(temporaryDir)) rmSync3(temporaryDir, { recursive: true, force: true });
-    if (existsSync30(launcherTemp)) rmSync3(launcherTemp, { force: true });
+      if (existsSync31(failedDir)) rmSync3(failedDir, { recursive: true, force: true });
+    } else if (existsSync31(artifactDir)) rmSync3(artifactDir, { recursive: true, force: true });
+    if (existsSync31(temporaryDir)) rmSync3(temporaryDir, { recursive: true, force: true });
+    if (existsSync31(launcherTemp)) rmSync3(launcherTemp, { force: true });
     throw error;
   }
   return artifactDir;
@@ -17324,8 +17436,8 @@ var finishWorkflowCommand = (command2, flags, argv, config, root, result, extra)
       const snapshot = config.intelligence?.registry?.enabled ? withAcceptedRelations(observed, readEnrichmentOverlay(root)) : observed;
       const report = parseReconciliationReport(loadWorkflowStepOutput(result.stateDir, "reconcile"));
       const outputPath = optionValues(argv, "--output")[0] ?? ".doc-bridge/report.html";
-      const htmlPath = resolve33(root, outputPath);
-      mkdirSync13(dirname13(htmlPath), { recursive: true });
+      const htmlPath = resolve34(root, outputPath);
+      mkdirSync13(dirname14(htmlPath), { recursive: true });
       const thresholdValue = optionValues(argv, "--report-threshold")[0];
       const thresholdBytes = thresholdValue === void 0 ? void 0 : Number(thresholdValue);
       if (thresholdBytes !== void 0 && (!Number.isSafeInteger(thresholdBytes) || thresholdBytes < 1)) throw new Error("--report-threshold must be a positive integer.");
@@ -17376,7 +17488,7 @@ var runBenchCommand = (flags, positional, configPath, argv) => {
   }
   try {
     const { config, root } = loadProject(configPath);
-    const suite = parseRetrievalSuite(JSON.parse(readFileSync33(resolve33(root, positional[2]), "utf8")));
+    const suite = parseRetrievalSuite(JSON.parse(readFileSync34(resolve34(root, positional[2]), "utf8")));
     const limitOption = optionValues(argv, "--limit")[0];
     const limit = limitOption === void 0 ? void 0 : Number(limitOption);
     if (limit !== void 0 && (!Number.isInteger(limit) || limit <= 0)) {
@@ -17385,7 +17497,7 @@ var runBenchCommand = (flags, positional, configPath, argv) => {
     if (flags.has("--overlay")) {
       const overlay = readEnrichmentOverlay(root);
       if (!overlay) throw new Error("No enrichment overlay at .doc-bridge/enrich/overlay.json. Run: ak-docs enrich");
-      const stateDir = resolve33(root, config.workflow?.stateDir ?? ".doc-bridge/workflow");
+      const stateDir = resolve34(root, config.workflow?.stateDir ?? ".doc-bridge/workflow");
       const snapshot = (() => {
         try {
           return parseDiscoverySnapshot(loadWorkflowStepOutput(stateDir, "normalize"));
@@ -17399,34 +17511,34 @@ var runBenchCommand = (flags, positional, configPath, argv) => {
       return delta2.regression ? 1 : 0;
     }
     const indexOption = optionValues(argv, "--index")[0];
-    const index = indexOption ? parseDocBridgeIndex(JSON.parse(readFileSync33(resolve33(root, indexOption), "utf8"))) : loadFreshDocBridgeIndex(root, config);
+    const index = indexOption ? parseDocBridgeIndex(JSON.parse(readFileSync34(resolve34(root, indexOption), "utf8"))) : loadFreshDocBridgeIndex(root, config);
     const result = runRetrievalBench({
       index,
       suite,
       ...limit === void 0 ? {} : { limit }
     });
     const baselineOption = optionValues(argv, "--baseline")[0];
-    const baselinePath = baselineOption ? resolve33(root, baselineOption) : void 0;
+    const baselinePath = baselineOption ? resolve34(root, baselineOption) : void 0;
     if (flags.has("--update-baseline")) {
       const approvedBy = optionValues(argv, "--by")[0];
       if (!baselinePath) throw new Error("--update-baseline requires --baseline <file>.");
       if (!approvedBy) throw new Error("--update-baseline requires --by <name>: a baseline is an approved figure, not a side effect of a run.");
       const reason = optionValues(argv, "--reason")[0];
       const baseline = createRetrievalBaseline({ result, approvedBy, ...reason ? { reason } : {} });
-      mkdirSync13(dirname13(baselinePath), { recursive: true });
+      mkdirSync13(dirname14(baselinePath), { recursive: true });
       writeFileSync14(baselinePath, `${JSON.stringify(baseline, null, 2)}
 `, "utf8");
       if (wantsTextOutput(flags, config)) {
-        writeLines([...formatRetrievalBenchText(result), `Baseline written: ${relative12(root, baselinePath)} (approved by ${approvedBy})`]);
+        writeLines([...formatRetrievalBenchText(result), `Baseline written: ${relative13(root, baselinePath)} (approved by ${approvedBy})`]);
       } else writeJson2({ ok: true, result, baseline, baselinePath });
       return 0;
     }
-    if (baselinePath && !existsSync30(baselinePath)) {
+    if (baselinePath && !existsSync31(baselinePath)) {
       throw new Error(
-        `No baseline at ${relative12(root, baselinePath)}. Record the current figures with: ak-docs bench retrieval ${positional[2]} --baseline ${baselineOption} --update-baseline --by <name>`
+        `No baseline at ${relative13(root, baselinePath)}. Record the current figures with: ak-docs bench retrieval ${positional[2]} --baseline ${baselineOption} --update-baseline --by <name>`
       );
     }
-    const comparison = baselinePath ? compareRetrievalBaseline(result, parseRetrievalBaseline(JSON.parse(readFileSync33(baselinePath, "utf8")))) : void 0;
+    const comparison = baselinePath ? compareRetrievalBaseline(result, parseRetrievalBaseline(JSON.parse(readFileSync34(baselinePath, "utf8")))) : void 0;
     if (wantsTextOutput(flags, config)) {
       writeLines([...formatRetrievalBenchText(result), ...comparison ? formatRetrievalComparisonText(comparison) : []]);
     } else {
@@ -17479,7 +17591,7 @@ var runRenderCommand = (flags, positional, configPath, argv) => {
     }
     const result = renderArtifact({ root, config, template: name, ...dataPath ? { dataPath } : {} });
     if (outputPath) {
-      const written = writeRenderedPages(result, resolve33(root, outputPath), root);
+      const written = writeRenderedPages(result, resolve34(root, outputPath), root);
       writeJson2({ ok: true, template: name, source: result.origin, written });
       return 0;
     }
@@ -17504,7 +17616,7 @@ var runRulesCommand = (argv, flags, positional, configPath) => {
   }
   try {
     const { config } = loadProject(configPath);
-    const report = parseReconciliationReport(JSON.parse(readFileSync33(resolve33(reportPath), "utf8")));
+    const report = parseReconciliationReport(JSON.parse(readFileSync34(resolve34(reportPath), "utf8")));
     const presetValue = optionValues(argv, "--preset")[0];
     const preset = presetValue === void 0 ? void 0 : ["default", "recommended", "strict"].includes(presetValue) ? presetValue : (() => {
       throw new Error(`Invalid rules preset "${presetValue}".`);
@@ -17513,12 +17625,12 @@ var runRulesCommand = (argv, flags, positional, configPath) => {
     for (const [rule, level] of Object.entries(parseRuleAssignments(optionValues(argv, "--severity"), parseRuleSeverity))) {
       severity[parseRuleId(rule)] = level;
     }
-    const ignore = optionValues(argv, "--ignore").map(parseRuleId);
+    const ignore2 = optionValues(argv, "--ignore").map(parseRuleId);
     const result = evaluateRules(report, {
       ...config.rules ? { config: config.rules } : {},
       ...preset ? { preset } : {},
       ...Object.keys(severity).length ? { severity } : {},
-      ...ignore.length ? { ignore } : {},
+      ...ignore2.length ? { ignore: ignore2 } : {},
       ...optionValues(argv, "--critical-entity").length ? { criticalEntities: optionValues(argv, "--critical-entity") } : {},
       ...optionValues(argv, "--critical-path").length ? { criticalPaths: optionValues(argv, "--critical-path") } : {}
     });
@@ -17554,16 +17666,16 @@ var runFixCommand = async (argv, positional, configPath) => {
       }
       const outputPath = optionValues(argv, "--output")[0];
       if (outputPath) {
-        mkdirSync13(dirname13(resolve33(root, outputPath)), { recursive: true });
-        writeFileSync14(resolve33(root, outputPath), `${JSON.stringify(proposal2, null, 2)}
+        mkdirSync13(dirname14(resolve34(root, outputPath)), { recursive: true });
+        writeFileSync14(resolve34(root, outputPath), `${JSON.stringify(proposal2, null, 2)}
 `, "utf8");
       }
-      writeJson2({ ok: true, proposal: proposal2, ...outputPath ? { proposalPath: resolve33(root, outputPath) } : {} });
+      writeJson2({ ok: true, proposal: proposal2, ...outputPath ? { proposalPath: resolve34(root, outputPath) } : {} });
       return 0;
     }
     if (!proposalPath2 || !["approve", "apply"].includes(action ?? "")) throw new Error("Usage: ak-docs fix propose links|normalize <artifact> [--output <file>] | fix approve|apply <proposal.json> [--by <name>]");
-    const file = resolve33(root, proposalPath2);
-    const proposal = JSON.parse(readFileSync33(file, "utf8"));
+    const file = resolve34(root, proposalPath2);
+    const proposal = JSON.parse(readFileSync34(file, "utf8"));
     const result = action === "approve" ? approveFixProposal(proposal, optionValues(argv, "--by")[0] ?? "human") : applyFixProposal(root, proposal, { currentRevision: sourceRevision2 });
     const recorded = action === "approve" && result.approval ? await recordApproval(root, { id: fixApprovalId(result.proposalId, result.approval.proposalHash), name: FIX_APPROVAL_GATE, payload: { proposalId: result.proposalId, proposalHash: result.approval.proposalHash }, decision: "approved", by: result.approval.approvedBy }) : void 0;
     writeFileSync14(file, `${JSON.stringify(result, null, 2)}
@@ -17591,7 +17703,7 @@ var runEnrichCommand = async (flags, positional, argv, configPath) => {
       const proposalId = positional[2];
       const by = optionValues(argv, "--by")[0];
       if (!proposalId || !by) throw new Error("Usage: ak-docs enrich approve|reject <proposalId> --by <name> [--reason <text>]");
-      const stateDir = resolve33(root, config.workflow?.stateDir ?? ".doc-bridge/workflow");
+      const stateDir = resolve34(root, config.workflow?.stateDir ?? ".doc-bridge/workflow");
       const snapshot2 = (() => {
         try {
           return parseDiscoverySnapshot(loadWorkflowStepOutput(stateDir, "normalize"));
@@ -17617,7 +17729,7 @@ var runEnrichCommand = async (flags, positional, argv, configPath) => {
       config,
       snapshot,
       overlay: result.overlay,
-      suite: parseRetrievalSuite(JSON.parse(readFileSync33(resolve33(root, config.retrieval?.benchmark?.suite ?? DEFAULT_RETRIEVAL_SUITE), "utf8")))
+      suite: parseRetrievalSuite(JSON.parse(readFileSync34(resolve34(root, config.retrieval?.benchmark?.suite ?? DEFAULT_RETRIEVAL_SUITE), "utf8")))
     }) : void 0;
     if (wantsTextOutput(flags, config)) writeLines([...formatEnrichmentText(result), ...delta2 ? formatOverlayRetrievalDeltaText(delta2) : []]);
     else writeJson2({
@@ -17651,7 +17763,7 @@ var runParityCommand = (flags, configPath, argv) => {
   try {
     const { config, root } = loadProject(configPath);
     const claimsPath = optionValues(argv, "--claims")[0] ?? DEFAULT_PUBLIC_CLAIMS;
-    const registry = parsePublicClaims(JSON.parse(readFileSync33(resolve33(root, claimsPath), "utf8")));
+    const registry = parsePublicClaims(JSON.parse(readFileSync34(resolve34(root, claimsPath), "utf8")));
     const snapshot = discoverRepository({ root, config });
     const doctor = registry.claims.some((claim) => claim.evidence.kind === "doctor-metric") ? runDoctor(root, config) : void 0;
     const report = checkPublicParity({
@@ -17676,7 +17788,7 @@ var runParityCommand = (flags, configPath, argv) => {
 var runSuggestCommand = async (flags, configPath) => {
   try {
     const { config, root } = loadProject(configPath);
-    const stateDir = resolve33(root, config.workflow?.stateDir ?? ".doc-bridge/workflow");
+    const stateDir = resolve34(root, config.workflow?.stateDir ?? ".doc-bridge/workflow");
     const snapshot = parseDiscoverySnapshot(loadWorkflowStepOutput(stateDir, "normalize"));
     const report = parseReconciliationReport(loadWorkflowStepOutput(stateDir, "reconcile"));
     const runner = config.intelligence?.registry?.cli ? void 0 : await loadRegistryAgentRunner(root, config);
@@ -17694,7 +17806,7 @@ var runSuggestCommand = async (flags, configPath) => {
   }
 };
 var writeIfMissing = (path, contents) => {
-  mkdirSync13(dirname13(path), { recursive: true });
+  mkdirSync13(dirname14(path), { recursive: true });
   try {
     const fd = openSync3(path, "wx");
     try {
@@ -17808,7 +17920,7 @@ var scaffoldWorkspaceDocs = (root, config) => {
   const created = [];
   const skipped = [];
   for (const pkg of discoverPnpmPackages(root, config)) {
-    const path = resolve33(root, config.corpus.agent.root, "packages", `${pkg.id}.md`);
+    const path = resolve34(root, config.corpus.agent.root, "packages", `${pkg.id}.md`);
     if (writeIfMissing(path, workspaceDocDraft(pkg.id, pkg.path))) created.push(path);
     else skipped.push(path);
   }
@@ -17818,11 +17930,11 @@ var bootstrapAgentDocs = (root, config) => {
   const created = [];
   const skipped = [];
   for (const doc of scanHumanDocRecords(root, config)) {
-    const raw = readFileSync33(doc.path, "utf8");
+    const raw = readFileSync34(doc.path, "utf8");
     const body = raw.replace(/^---\n[\s\S]*?\n---\n?/, "");
     const title2 = firstHeading(body) ?? doc.id;
     const description = firstParagraph(body);
-    const draftPath = resolve33(root, config.corpus.agent.root, "human", `${doc.id}.md`);
+    const draftPath = resolve34(root, config.corpus.agent.root, "human", `${doc.id}.md`);
     const draft = [
       "---",
       "type: knowledge",
@@ -17865,12 +17977,12 @@ var runStudyCommand = async (flags, positional, argv, configPath) => {
     if (action === "expectations") {
       const expectationsPath = optionValues(argv, "--expectations")[0];
       if (!expectationsPath) throw new Error("Study expectations require --expectations <expectations.json>.");
-      const suite = parseStudyTaskSuite(JSON.parse(readFileSync33(resolve33(inputPath), "utf8")));
-      const expectations = parseStudyExpectations(JSON.parse(readFileSync33(resolve33(expectationsPath), "utf8")));
+      const suite = parseStudyTaskSuite(JSON.parse(readFileSync34(resolve34(inputPath), "utf8")));
+      const expectations = parseStudyExpectations(JSON.parse(readFileSync34(resolve34(expectationsPath), "utf8")));
       const repositoryId = optionValues(argv, "--repository")[0];
       const indexOption = optionValues(argv, "--index")[0];
       const { config, root } = loadProject(configPath);
-      const index = indexOption ? parseDocBridgeIndex(JSON.parse(readFileSync33(resolve33(root, indexOption), "utf8"))) : loadFreshDocBridgeIndex(root, config);
+      const index = indexOption ? parseDocBridgeIndex(JSON.parse(readFileSync34(resolve34(root, indexOption), "utf8"))) : loadFreshDocBridgeIndex(root, config);
       const check = checkStudyExpectations({ taskSuite: suite, expectations, index, ...repositoryId ? { repositoryId } : {} });
       if (flags.has("--text")) writeLines(formatStudyExpectationsText(check));
       else writeJson2({ ok: check.ok, expectations: check });
@@ -17883,11 +17995,11 @@ var runStudyCommand = async (flags, positional, argv, configPath) => {
       const ledgerPath = optionValues(argv, "--ledger")[0];
       if (!taskSuitePath || !providersPath || !repositoriesPath || !ledgerPath) throw new Error("Study run requires a task suite, --providers, --repositories, and --ledger.");
       const summary = await runControlledStudy({
-        plan: parseControlledStudyRunPlan(JSON.parse(readFileSync33(resolve33(inputPath), "utf8"))),
-        suite: parseStudyTaskSuite(JSON.parse(readFileSync33(resolve33(taskSuitePath), "utf8"))),
-        providers: parseStudyProviderCliConfig(JSON.parse(readFileSync33(resolve33(providersPath), "utf8"))),
-        repositories: parseStudyRepositoryConfig(JSON.parse(readFileSync33(resolve33(repositoriesPath), "utf8"))),
-        ledgerPath: resolve33(ledgerPath),
+        plan: parseControlledStudyRunPlan(JSON.parse(readFileSync34(resolve34(inputPath), "utf8"))),
+        suite: parseStudyTaskSuite(JSON.parse(readFileSync34(resolve34(taskSuitePath), "utf8"))),
+        providers: parseStudyProviderCliConfig(JSON.parse(readFileSync34(resolve34(providersPath), "utf8"))),
+        repositories: parseStudyRepositoryConfig(JSON.parse(readFileSync34(resolve34(repositoriesPath), "utf8"))),
+        ledgerPath: resolve34(ledgerPath),
         ...optionValues(argv, "--round")[0] === void 0 ? {} : { round: optionValues(argv, "--round")[0] },
         ...flags.has("--dry-run") ? { dryRun: true } : {}
       });
@@ -17900,21 +18012,21 @@ var runStudyCommand = async (flags, positional, argv, configPath) => {
       const adjudicatorConfigPath = optionValues(argv, "--adjudicator")[0];
       const outputPath = optionValues(argv, "--output")[0];
       if (!taskSuitePath || !adjudicatorConfigPath || !outputPath) throw new Error("Study adjudication requires a task suite, --adjudicator with an adjudicator, and --output.");
-      const config = parseStudyProviderCliConfig(JSON.parse(readFileSync33(resolve33(adjudicatorConfigPath), "utf8")));
+      const config = parseStudyProviderCliConfig(JSON.parse(readFileSync34(resolve34(adjudicatorConfigPath), "utf8")));
       if (!config.adjudicator) throw new Error("Study provider config must declare an adjudicator.");
-      const ledger = parseControlledStudyLedger(JSON.parse(readFileSync33(resolve33(inputPath), "utf8")));
-      const suite = parseStudyTaskSuite(JSON.parse(readFileSync33(resolve33(taskSuitePath), "utf8")));
+      const ledger = parseControlledStudyLedger(JSON.parse(readFileSync34(resolve34(inputPath), "utf8")));
+      const suite = parseStudyTaskSuite(JSON.parse(readFileSync34(resolve34(taskSuitePath), "utf8")));
       const limitValue = optionValues(argv, "--limit")[0];
       const limit = limitValue === void 0 ? void 0 : Number(limitValue);
       const offsetValue = optionValues(argv, "--offset")[0];
       const offset = offsetValue === void 0 ? void 0 : Number(offsetValue);
       const result = await independentlyAdjudicateStudyLedger({ ledger, taskSuite: suite, config: config.adjudicator, configurationHash: config.contentHash, cwd: process.cwd(), maxRuntimeMs: suite.maxRuntimeMsPerTask, ...optionValues(argv, "--run-id")[0] === void 0 ? {} : { runId: optionValues(argv, "--run-id")[0] }, ...offset === void 0 ? {} : { offset }, ...limit === void 0 ? {} : { limit } });
       persistIndependentlyAdjudicatedLedger(outputPath, result);
-      if (flags.has("--text")) writeLines([`Adjudicated observations: ${result.observations.length}`, `Ledger: ${resolve33(outputPath)}`, `Content hash: ${result.contentHash}`]);
+      if (flags.has("--text")) writeLines([`Adjudicated observations: ${result.observations.length}`, `Ledger: ${resolve34(outputPath)}`, `Content hash: ${result.contentHash}`]);
       else writeJson2({ ok: true, ledger: result });
       return 0;
     }
-    const input = JSON.parse(readFileSync33(resolve33(inputPath), "utf8"));
+    const input = JSON.parse(readFileSync34(resolve34(inputPath), "utf8"));
     if (action === "protocol") {
       const protocol = parseStudyProtocol(input);
       if (flags.has("--text")) writeLines(formatStudyProtocolText(protocol));
@@ -17972,7 +18084,7 @@ var runStudyCommand = async (flags, positional, argv, configPath) => {
     const registry = parseHistoricalEvidenceRegistry(input);
     const protocolPath = optionValues(argv, "--protocol")[0];
     if (protocolPath) {
-      const protocol = parseStudyProtocol(JSON.parse(readFileSync33(resolve33(protocolPath), "utf8")));
+      const protocol = parseStudyProtocol(JSON.parse(readFileSync34(resolve34(protocolPath), "utf8")));
       validateHistoricalEvidenceRegistry(registry, protocol);
     }
     if (flags.has("--text")) writeLines(formatHistoricalEvidenceText(registry));
@@ -18016,8 +18128,8 @@ var runCli2 = (argv) => {
       return 1;
     }
     try {
-      const abs = resolve33(file);
-      const raw = readFileSync33(abs, "utf8");
+      const abs = resolve34(file);
+      const raw = readFileSync34(abs, "utf8");
       const handoff = parseAgentHandoff(JSON.parse(raw));
       writeJson2({ ok: true, handoff });
       return 0;
@@ -18059,8 +18171,8 @@ var runCli2 = (argv) => {
       return 1;
     }
     try {
-      const fixture = benchmarkFixture(JSON.parse(readFileSync33(resolve33(fixturePath2), "utf8")));
-      const observation = JSON.parse(readFileSync33(resolve33(observationPath), "utf8"));
+      const fixture = benchmarkFixture(JSON.parse(readFileSync34(resolve34(fixturePath2), "utf8")));
+      const observation = JSON.parse(readFileSync34(resolve34(observationPath), "utf8"));
       const result = measureBenchmark2(observation, fixture);
       if (flags.has("--text")) writeLines([formatBenchmarkText(result)]);
       else writeJson2(result);
@@ -18085,10 +18197,10 @@ var runCli2 = (argv) => {
   if (command2 === "init") {
     const root = process.cwd();
     const withDemo = flags.has("--demo") || !flags.has("--no-demo");
-    const configFile = resolve33(root, configPath ?? "doc-bridge.config.json");
-    const docsIndex = resolve33(root, "docs/for-agents/INDEX.md");
-    const exampleDoc = resolve33(root, "docs/for-agents/packages/example.md");
-    const agentsMd = resolve33(root, "AGENTS.md");
+    const configFile = resolve34(root, configPath ?? "doc-bridge.config.json");
+    const docsIndex = resolve34(root, "docs/for-agents/INDEX.md");
+    const exampleDoc = resolve34(root, "docs/for-agents/packages/example.md");
+    const agentsMd = resolve34(root, "AGENTS.md");
     const configWritten = writeIfMissing(configFile, initConfigContents(configFile, withDemo));
     const indexWritten = writeIfMissing(
       docsIndex,
@@ -18096,7 +18208,7 @@ var runCli2 = (argv) => {
     );
     const exampleWritten = withDemo ? writeIfMissing(exampleDoc, exampleAgentDoc) : false;
     const agentsWritten = writeIfMissing(agentsMd, agentsMdSnippet);
-    if (withDemo) writeIfMissing(resolve33(root, "src/.gitkeep"), "");
+    if (withDemo) writeIfMissing(resolve34(root, "src/.gitkeep"), "");
     const scaffold = flags.has("--scaffold-workspaces") ? scaffoldWorkspaceDocs(root, loadProject(configFile).config) : void 0;
     writeJson2({
       ok: true,
@@ -18340,8 +18452,8 @@ var runCli2 = (argv) => {
       const { config, root } = loadProject(configPath);
       const report = runDoctor(root, config);
       if (flags.has("--write-badge")) {
-        const badgePath = resolve33(root, ".doc-bridge", "coverage-badge.json");
-        mkdirSync13(dirname13(badgePath), { recursive: true });
+        const badgePath = resolve34(root, ".doc-bridge", "coverage-badge.json");
+        mkdirSync13(dirname14(badgePath), { recursive: true });
         writeFileSync14(badgePath, `${formatDoctorBadgeJson(report.badge)}
 `, "utf8");
       }