@c4a/context-cli 0.7.26 → 0.7.30

package/README.md

@@ -283,6 +283,18 @@ MIT.
 
 ## Updating an existing workspace
 
+### Lark read identity
+
+`CONTEXT_LARK_IDENTITY=user|bot` selects the identity for Lark acquisition
+(default: `user`). Export it in each shell executing Context commands. In Bot
+mode, a credential/scope/access failure retries once as the current user; the
+rest of that capture keeps the fallback identity for pagination and resources.
+Network, rate-limit and parsing errors do not trigger a user authorization
+attempt. This does not change source-read consent or the audience of published
+knowledge. Host-managed OAuth must use the host's authorization flow.
+
+### Workspace updates
+
 Start with `context entry --format json` and read the returned update guide when
 adding material or changing published knowledge. Entry and status only observe;
 they do not resume an earlier managed task before the new request is understood.

package/README.zh-CN.md

@@ -47,6 +47,14 @@ Provider Skill 投影到 Claude、Codex 和 Cursor 的用户技能目录。
 方法并停止。它不会为每次调用增加安装预检，也不会把普通工作流中的 `not found`
 诊断误判成可执行文件缺失。
 
+## 飞书读取身份
+
+`CONTEXT_LARK_IDENTITY=user|bot` 控制飞书来源采集，默认 `user`。每次执行 Context
+命令的 shell 都需传入该环境变量；仅在提示词中写配置并不会自动导出环境变量。
+`bot` 模式先使用应用身份，遇到凭证、scope 或访问权限错误时回退当前用户一次，
+本次采集后续分页、引用与资源下载沿用回退身份。网络、限流和解析错误不切换身份。
+该配置不扩大来源授权或知识产物可见范围；托管运行时的用户授权遵循宿主流程。
+
 ## 一个 Agent 入口如何驱动整套工作流
 
 ```text

package/cli.js

@@ -76780,22 +76780,14 @@ var init_indexerSourceBoundary = __esm(() => {
 
 // src/project/indexerParserSourceMaterialization.ts
 import { execFile as execFile3 } from "node:child_process";
-import { lstat as lstat4, readFile as readFile18 } from "node:fs/promises";
+import { lstat as lstat4, readFile as readFile18, stat as stat6 } from "node:fs/promises";
 import { promisify as promisify3 } from "node:util";
 import { basename as basename4, extname as extname8, join as join17 } from "node:path";
 function sourceRefName(sourceRef) {
   return sourceRef.startsWith("repo:") ? sourceRef.slice("repo:".length) : null;
 }
 async function trackedPaths(root, ref2) {
-  try {
-    await execFileAsync2("git", ["diff", "--quiet", ref2, "--", "."], { cwd: root });
-  } catch (error) {
-    const exitCode = error !== null && typeof error === "object" && "code" in error ? error.code : null;
-    if (exitCode === 1) {
-      throw new TypeError(`materialized repository source differs from its pinned ref: ${root}`);
-    }
-    throw error;
-  }
+  await assertPinnedSource(root, ref2);
   const { stdout } = await execFileAsync2("git", ["ls-files", "-z", "--", "."], {
     cwd: root,
     encoding: "buffer",
@@ -76804,6 +76796,20 @@ async function trackedPaths(root, ref2) {
   return Buffer.from(stdout).toString("utf8").split("\x00").filter(Boolean).sort();
 }
 async function assertPinnedSource(root, ref2) {
+  const sourceStat = await stat6(root).catch((error) => {
+    if (error.code === "ENOENT" || error.code === "ENOTDIR")
+      return;
+    throw error;
+  });
+  if (!sourceStat?.isDirectory()) {
+    throw new ContextError(ExitCode.WorkspaceStateError, `Repository source directory is unavailable: ${root}. Inspect recovery with context source recovery-plan --format json.`, {
+      category: ErrorCategory.WorkspaceStateInvalid,
+      reason_code: "repository-source-directory-unavailable",
+      cwd: root,
+      next_action: { command: "context source recovery-plan --format json" },
+      input_schema: { type: "object", properties: {}, additionalProperties: false }
+    });
+  }
   try {
     await execFileAsync2("git", ["diff", "--quiet", ref2, "--", "."], { cwd: root });
   } catch (error) {
@@ -76811,6 +76817,15 @@ async function assertPinnedSource(root, ref2) {
     if (exitCode === 1) {
       throw new TypeError(`materialized repository source differs from its pinned ref: ${root}`);
     }
+    if (exitCode === "ENOENT") {
+      throw new ContextError(ExitCode.ExternalToolError, `Git could not start for repository source ${root}. Check git --version and the source directory in the same host environment.`, {
+        category: ErrorCategory.ExternalToolFailed,
+        reason_code: "repository-git-spawn-unavailable",
+        cwd: root,
+        next_action: { command: "git --version" },
+        input_schema: { type: "object", properties: {}, additionalProperties: false }
+      });
+    }
     throw error;
   }
 }
@@ -76874,6 +76889,9 @@ var init_indexerParserSourceMaterialization = __esm(() => {
   init_src2();
   init_indexerReadScopeAuthorization();
   init_indexerSourceBoundary();
+  init_errors3();
+  init_exitCode();
+  init_cliFeedback();
   execFileAsync2 = promisify3(execFile3);
 });
 
@@ -76882,7 +76900,7 @@ var exports_managedDocumentSnapshot = {};
 __export(exports_managedDocumentSnapshot, {
   readManagedDocumentSnapshot: () => readManagedDocumentSnapshot
 });
-import { readFile as readFile19, stat as stat6 } from "node:fs/promises";
+import { readFile as readFile19, stat as stat7 } from "node:fs/promises";
 import { basename as basename5, dirname as dirname15 } from "node:path";
 async function readManagedDocumentSnapshot(projectRoot, type, name2) {
   const absolutePath = await assertManagedDocumentPath(projectRoot, type, name2);
@@ -76891,7 +76909,7 @@ async function readManagedDocumentSnapshot(projectRoot, type, name2) {
   const manifest = createDocumentSnapshotManifest({
     sourceType: type,
     sourceName: name2,
-    capturedAt: (await stat6(absolutePath)).mtime.toISOString(),
+    capturedAt: (await stat7(absolutePath)).mtime.toISOString(),
     files: [{
       path: file,
       bytes: markdown,
@@ -79423,7 +79441,7 @@ __export(exports_productionStageStore, {
   PRODUCTION_STAGES_ROOT: () => PRODUCTION_STAGES_ROOT
 });
 import { constants as constants4 } from "node:fs";
-import { readFile as readFile28, access as access2, stat as stat7 } from "node:fs/promises";
+import { readFile as readFile28, access as access2, stat as stat8 } from "node:fs/promises";
 import { join as join31 } from "node:path";
 function productionStageDirectory(id3) {
   productionAgentDirectory(id3);
@@ -79442,7 +79460,7 @@ async function readOptional(root, path2) {
 async function hasReadableProjection(root, path2) {
   const absolute = await safeProjectTarget(root, path2);
   try {
-    if (!(await stat7(absolute)).isFile())
+    if (!(await stat8(absolute)).isFile())
       throw new TypeError(`Stage material must be a regular file: ${path2}`);
     await access2(absolute, constants4.R_OK);
     return true;
@@ -81693,19 +81711,19 @@ function failure(reason, message, next) {
 }
 async function entries(root, path2) {
   await safeProjectTarget(root, path2);
-  let stat8;
+  let stat9;
   try {
-    stat8 = await lstat7(join43(root, path2));
+    stat9 = await lstat7(join43(root, path2));
   } catch (error) {
     if (error.code === "ENOENT")
       return [];
     throw error;
   }
-  if (stat8.isSymbolicLink())
+  if (stat9.isSymbolicLink())
     failure("preparation-symlink", `Refusing to clean linked task state: ${path2}`, "Inspect and relocate the link without deleting its target, then preview again.");
-  if (stat8.isFile())
+  if (stat9.isFile())
     return [path2];
-  if (!stat8.isDirectory())
+  if (!stat9.isDirectory())
     failure("preparation-file-type", `Unsupported task-state file: ${path2}`, "Inspect this file before preparing the workspace.");
   const result = [];
   for (const name3 of (await readdir10(join43(root, path2))).sort())
@@ -86351,7 +86369,7 @@ var init_packageSiteExtensions = __esm(() => {
 // src/project/packageSite.ts
 import { createHash as createHash17 } from "node:crypto";
 import { spawn as spawn3 } from "node:child_process";
-import { mkdir as mkdir23, mkdtemp as mkdtemp2, readFile as readFile52, writeFile as writeFile19, rm as rm12, symlink as symlink2, cp, access as access5, stat as stat8 } from "node:fs/promises";
+import { mkdir as mkdir23, mkdtemp as mkdtemp2, readFile as readFile52, writeFile as writeFile19, rm as rm12, symlink as symlink2, cp, access as access5, stat as stat9 } from "node:fs/promises";
 import { createRequire as createRequire5 } from "node:module";
 import { dirname as dirname28, join as join64, posix as posix6 } from "node:path";
 function sitePagePath(identity) {
@@ -86675,7 +86693,7 @@ title: LLM Docs
       const placeholder = [".css", ".js", ".mjs", ".cjs"].includes(extension2) ? `/* Intentionally empty. */
 ` : [".html", ".htm"].includes(extension2) ? `<!-- Intentionally empty. -->
 ` : null;
-      if (placeholder !== null && (await stat8(file.absPath)).size === 0) {
+      if (placeholder !== null && (await stat9(file.absPath)).size === 0) {
         await writeFile19(file.absPath, placeholder);
       }
     }
@@ -89996,7 +90014,7 @@ var init_sourceInputMutation = __esm(() => {
 
 // src/project/documentCapture.ts
 import { createHash as createHash21 } from "node:crypto";
-import { mkdir as mkdir28, readdir as readdir18, readFile as readFile63, rm as rm17, stat as stat9, writeFile as writeFile23 } from "node:fs/promises";
+import { mkdir as mkdir28, readdir as readdir18, readFile as readFile63, rm as rm17, stat as stat10, writeFile as writeFile23 } from "node:fs/promises";
 import { basename as basename8, dirname as dirname34, extname as extname12, join as join75, relative as relative22, resolve as resolve24 } from "node:path";
 function toPosixPath7(path2) {
   return path2.split(/[\\/]+/u).filter((part) => part.length > 0).join("/");
@@ -90101,7 +90119,7 @@ function assignFlatSnapshotPaths(files, module) {
   });
 }
 async function walkMarkdownFiles(input) {
-  const rootStat = await stat9(input.localRoot);
+  const rootStat = await stat10(input.localRoot);
   if (rootStat.isFile()) {
     const sourcePath = normalizeSnapshotRelativePath(basename8(input.localRoot));
     return {
@@ -98636,6 +98654,72 @@ var init_larkMarkdownImages = __esm(() => {
   init_markdownLinks();
 });
 
+// src/lib/larkReadIdentity.ts
+function resolveLarkReadIdentity() {
+  const value = process.env.CONTEXT_LARK_IDENTITY?.trim() || "user";
+  if (value === "user" || value === "bot")
+    return value;
+  throw new ContextError(ExitCode.UserError, "CONTEXT_LARK_IDENTITY must be user or bot", {
+    reason_code: "lark.invalid-read-identity",
+    valid_values: ["user", "bot"],
+    next: "Set CONTEXT_LARK_IDENTITY to user or bot and rerun the same command"
+  });
+}
+function credentialFailure(result) {
+  for (const output of [result.stdout, result.stderr]) {
+    const start2 = output.indexOf("{");
+    if (start2 < 0)
+      continue;
+    try {
+      const parsed = JSON.parse(output.slice(start2));
+      if (!parsed || typeof parsed !== "object" || !("error" in parsed))
+        continue;
+      if (result.exitCode === 0 && (!("ok" in parsed) || parsed.ok !== false))
+        continue;
+      const error = parsed.error;
+      if (!error || typeof error !== "object")
+        continue;
+      const type = "type" in error ? error.type : undefined;
+      const subtype = "subtype" in error ? error.subtype : undefined;
+      if (type === "authorization" || type === "authentication" || ["missing_scope", "permission_denied", "access_denied", "need_user_authorization"].includes(String(subtype))) {
+        return true;
+      }
+    } catch {}
+  }
+  return result.exitCode !== 0 && /reason=(?:bot_unavailable|not_authorized)\b|\b(?:missing_scope|permission_denied|access_denied)\b/iu.test(result.stderr);
+}
+function createLarkReadSession(runner2, initial, fallback = initial === "bot") {
+  let identity2 = initial;
+  let usedFallback = false;
+  const run = async (args, options) => {
+    const explicit = args.indexOf("--as");
+    const requested = explicit >= 0 ? args[explicit + 1] : identity2;
+    const selected = usedFallback ? "user" : requested === "bot" ? "bot" : "user";
+    const withIdentity = [...args];
+    if (explicit >= 0)
+      withIdentity[explicit + 1] = selected;
+    else
+      withIdentity.push("--as", selected);
+    const result = await runner2(withIdentity, options);
+    identity2 = selected;
+    if (identity2 !== "bot" || !fallback || usedFallback || args.includes("--help") || !credentialFailure(result))
+      return result;
+    usedFallback = true;
+    identity2 = "user";
+    withIdentity[withIdentity.indexOf("--as") + 1] = "user";
+    return runner2(withIdentity, options);
+  };
+  return { run, get identity() {
+    return identity2;
+  }, get usedFallback() {
+    return usedFallback;
+  } };
+}
+var init_larkReadIdentity = __esm(() => {
+  init_errors3();
+  init_exitCode();
+});
+
 // src/lib/feishu.ts
 import { spawn as spawn4 } from "node:child_process";
 async function detectDocsFetchCapabilities(runner2) {
@@ -98652,14 +98736,19 @@ ${result.stderr}`;
     supportsDocFormat: result.exitCode === 0 && /\s--doc-format\b/u.test(help)
   };
 }
-function resolveDocsFetchPlan(requested, runner2) {
+function resolveDocsFetchPlan(requested, runner2, cacheKey = runner2, identity2 = "user") {
   if (requested === "v1" || requested === "v2") {
     return Promise.resolve({ apiVersion: requested, docFormat: "xml" });
   }
-  let capabilitiesPromise = docsFetchCapabilitiesCache.get(runner2);
+  let cached = docsFetchCapabilitiesCache.get(cacheKey);
+  if (!cached) {
+    cached = new Map;
+    docsFetchCapabilitiesCache.set(cacheKey, cached);
+  }
+  let capabilitiesPromise = cached.get(identity2);
   if (capabilitiesPromise === undefined) {
     capabilitiesPromise = detectDocsFetchCapabilities(runner2);
-    docsFetchCapabilitiesCache.set(runner2, capabilitiesPromise);
+    cached.set(identity2, capabilitiesPromise);
   }
   return capabilitiesPromise.then((capabilities) => {
     if (!capabilities.supportsDocFormat) {
@@ -98956,20 +99045,25 @@ function hasEmptySubPageList(projection) {
   return projection.fidelity.issues.some((issue) => issue.code === LARK_EMPTY_SUB_PAGE_LIST_CODE);
 }
 async function fetchFeishuDocSnapshot(input, runner2 = defaultRunner) {
-  const docsFetchPlan = input.prefetched ? { apiVersion: "v2", docFormat: "xml" } : await resolveDocsFetchPlan(input.docsApiVersion ?? "auto", runner2);
+  const preference = input.prefetched?.identity ?? input.identity ?? resolveLarkReadIdentity();
+  const cacheKey = runner2;
+  const session = createLarkReadSession(runner2, input.prefetched?.identity ?? (preference === "bot" ? "bot" : "user"), !input.prefetched && preference === "bot");
+  runner2 = session.run;
+  const docsFetchPlan = input.prefetched ? { apiVersion: "v2", docFormat: "xml" } : await resolveDocsFetchPlan(input.docsApiVersion ?? "auto", runner2, cacheKey, preference);
   const identityFetch = input.prefetched ? {
     fetched: await fetchDocsResponse(input, docsFetchPlan, runner2, input.prefetched.identity),
     identity: input.prefetched.identity,
     fallback: false
-  } : await fetchWithIdentity(input, docsFetchPlan, runner2);
+  } : await fetchWithIdentity({ ...input, identity: preference }, docsFetchPlan, runner2);
   let fetched = identityFetch.fetched;
-  const accessIdentity = identityFetch.identity;
+  let accessIdentity = input.prefetched?.identity ?? session.identity;
   let projection;
   for (let attempt = 0;attempt < MAX_STRUCTURAL_FETCH_ATTEMPTS && fetched.contentFormat === "xml"; attempt++) {
     projection = projectLarkDocxXml({ xml: fetched.body, sourceUrl: input.url });
     if (input.prefetched || !hasEmptySubPageList(projection) || attempt === MAX_STRUCTURAL_FETCH_ATTEMPTS - 1)
       break;
     fetched = await fetchDocsResponse(input, docsFetchPlan, runner2, accessIdentity);
+    accessIdentity = session.identity;
   }
   let body2 = fetched.body;
   let title2 = fetched.title;
@@ -99055,7 +99149,7 @@ ${body2}`,
       fidelity,
       resourceMaterialization,
       accessIdentity,
-      identityFallback: identityFetch.fallback
+      identityFallback: identityFetch.fallback || session.usedFallback
     };
   }
   return {
@@ -99066,7 +99160,7 @@ ${body2}`,
     fidelity,
     resourceMaterialization,
     accessIdentity,
-    identityFallback: identityFetch.fallback
+    identityFallback: identityFetch.fallback || session.usedFallback
   };
 }
 var LARK_BIN = "lark-cli", MAX_FETCH_PAGES = 50, MAX_STRUCTURAL_FETCH_ATTEMPTS = 2, LarkCliNotInstalledError, LarkCliError, defaultRunner = (args, options) => new Promise((resolve8, reject) => {
@@ -99098,6 +99192,7 @@ var init_feishu = __esm(() => {
   init_larkResourceMaterialization();
   init_larkCaptureReport();
   init_larkMarkdownImages();
+  init_larkReadIdentity();
   LarkCliNotInstalledError = class LarkCliNotInstalledError extends Error {
     constructor() {
       super(`${LARK_BIN} not installed — see https://github.com/larksuite/cli for install instructions`);
@@ -99258,7 +99353,7 @@ function larkErrorRecovery(error, sourceName) {
   if (/auth|login|permission|forbidden|unauthori[sz]ed|scope/iu.test(message)) {
     return {
       reasonCode: "external.authorization-required",
-      next: "Run lark-cli auth login with an account that can read the document, then rerun capture"
+      next: "Check the selected Lark identity and document access. For host-managed credentials use the host authorization flow; use lark-cli auth login only for a locally managed user login, then rerun capture"
     };
   }
   return {
@@ -99403,6 +99498,8 @@ async function runCaptureLarkPhaseUnlocked(input) {
       ...input.prefetched === undefined ? {} : { prefetched: input.prefetched }
     }, input.larkRunner);
   } catch (error) {
+    if (error instanceof ContextError)
+      throw error;
     const failure2 = normalizeLarkError(error, resolved.sourceName);
     if (failure2.detail?.reason_code === "external.authorization-required" || failure2.detail?.reason_code === "external.tool-failed" && error instanceof LarkCliError && error.exitCode !== 0) {
       throw new ContextError(failure2.code, failure2.message, { ...failure2.detail, reason_code: DOCUMENT_ACQUISITION_UNAVAILABLE, acquisition_cause: failure2.detail?.reason_code });
@@ -99576,7 +99673,7 @@ async function runCaptureLarkPhaseUnlocked(input) {
     resource_materialization: fetched.resourceMaterialization,
     diagnostics: [
       ...recovery === undefined ? [] : [recovery.diagnostic],
-      ...fetched.identityFallback ? [`info: lark.capture.identity-fallback: user credentials unavailable; captured with ${fetched.accessIdentity} identity`] : [],
+      ...fetched.identityFallback ? [`info: lark.capture.identity-fallback: capture used an identity fallback; document identity: ${fetched.accessIdentity}; embedded reads may use the fallback identity`] : [],
       ...fetched.fidelity.issues.map((issue) => `${issue.severity}: ${issue.code}: ${issue.block_type} × ${issue.count}: ${issue.reason}`),
       ...fetched.resourceMaterialization.items.filter((item) => item.status === "failed" || item.kind === "poll" && item.reason?.includes("absent") === true).map((item) => `${item.status}: lark.capture.resource-${item.status}: ${item.kind}: ${item.reason ?? item.locator}`)
     ],
@@ -99938,15 +100035,15 @@ import { join as join100 } from "node:path";
 import { createHash as createHash30, randomUUID as randomUUID7 } from "node:crypto";
 async function inspectWriterLock(root2) {
   const path3 = await safeProjectTarget(root2, lockRelative);
-  let stat10;
+  let stat11;
   try {
-    stat10 = await lstat10(path3);
+    stat11 = await lstat10(path3);
   } catch (error) {
     if (error.code === "ENOENT")
       return null;
     throw error;
   }
-  if (!stat10.isDirectory() || stat10.isSymbolicLink())
+  if (!stat11.isDirectory() || stat11.isSymbolicLink())
     throw new Error("Writer lock must be a real directory.");
   const ownerPath = await safeProjectTarget(root2, `${lockRelative}/owner.json`);
   const bytes = await readFile82(ownerPath, "utf8");
@@ -99961,7 +100058,7 @@ async function inspectWriterLock(root2) {
     const code3 = error.code;
     processState = code3 === "ESRCH" ? "not-running" : code3 === "EPERM" ? "running" : "unknown";
   }
-  const digest6 = `sha256:${createHash30("sha256").update(`${stat10.dev}:${stat10.ino}:${stat10.birthtimeMs}:${bytes}`).digest("hex")}`;
+  const digest6 = `sha256:${createHash30("sha256").update(`${stat11.dev}:${stat11.ino}:${stat11.birthtimeMs}:${bytes}`).digest("hex")}`;
   return { ...owner, process_state: processState, digest: digest6, path: lockRelative };
 }
 async function recoverWriterLock(input) {
@@ -100033,22 +100130,22 @@ async function recoveryJournals(root2) {
   const entries2 = [];
   async function visit4(path3, depth) {
     await safeProjectTarget(root2, path3);
-    let stat10;
+    let stat11;
     try {
-      stat10 = await lstat11(join101(root2, path3));
+      stat11 = await lstat11(join101(root2, path3));
     } catch (error) {
       if (error.code === "ENOENT")
         return;
       throw error;
     }
-    if (stat10.isSymbolicLink())
+    if (stat11.isSymbolicLink())
       throw new TypeError("Recovery does not follow transaction symlinks.");
-    if (stat10.isDirectory()) {
+    if (stat11.isDirectory()) {
       if (depth > 3)
         throw new TypeError("Unexpected transaction directory depth; preserve it for diagnosis.");
       for (const name3 of (await readdir25(join101(root2, path3))).sort())
         await visit4(`${path3}/${name3}`, depth + 1);
-    } else if (stat10.isFile())
+    } else if (stat11.isFile())
       entries2.push({ path: path3, digest: indexerProtocolDigest(await recoveryText(root2, path3)) });
   }
   await visit4(TRANSACTIONS_PATH, 0);
@@ -112531,7 +112628,7 @@ function conflict(path3) {
     next: "Choose another --local directory, or move conflicting/customized skills aside before retrying."
   });
 }
-async function stat10(path3) {
+async function stat11(path3) {
   try {
     return await lstat14(path3);
   } catch (error) {
@@ -112541,7 +112638,7 @@ async function stat10(path3) {
   }
 }
 async function checkParents(path3) {
-  const entry = await stat10(path3);
+  const entry = await stat11(path3);
   if (entry && (!entry.isDirectory() || entry.isSymbolicLink()))
     conflict(path3);
   const parent = dirname46(path3);
@@ -112600,11 +112697,11 @@ ${frontmatter2[2].replace(/^disable-model-invocation:.*\r?\n?/mu, "")}${frontmat
       const target = join112(commandsRoot, entry.name);
       const marker = join112(commandsRoot, `.context-${entry.name}.json`);
       for (const file of [target, marker]) {
-        const existing = await stat10(file);
+        const existing = await stat11(file);
         if (existing && (!existing.isFile() || existing.isSymbolicLink()))
           conflict(file);
       }
-      if (await stat10(target)) {
+      if (await stat11(target)) {
         let previous3;
         try {
           previous3 = JSON.parse(await readFile94(marker, "utf8"));
@@ -112614,7 +112711,7 @@ ${frontmatter2[2].replace(/^disable-model-invocation:.*\r?\n?/mu, "")}${frontmat
         const current2 = createHash34("sha256").update(await readFile94(target)).digest("hex");
         if (previous3?.owner !== "context-plugin-local" || previous3.digest !== current2)
           conflict(target);
-      } else if (await stat10(marker))
+      } else if (await stat11(marker))
         conflict(marker);
       commandPlans.push({ name: entry.name, target, marker, content: content3, hash: createHash34("sha256").update(content3).digest("hex") });
     }
@@ -112623,21 +112720,21 @@ ${frontmatter2[2].replace(/^disable-model-invocation:.*\r?\n?/mu, "")}${frontmat
   }
   const plans = [];
   for (const entry of (await readdir29(sourceRoot2, { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name))) {
-    if (!entry.isDirectory() || !await stat10(join112(sourceRoot2, entry.name, "SKILL.md")))
+    if (!entry.isDirectory() || !await stat11(join112(sourceRoot2, entry.name, "SKILL.md")))
       continue;
     const source2 = join112(sourceRoot2, entry.name);
     const target = join112(skillsRoot, entry.name);
     if (commandEntries.has(entry.name)) {
-      if (await stat10(target))
+      if (await stat11(target))
         conflict(`${target} (use a fresh host directory to avoid duplicate command/skill entries)`);
       continue;
     }
-    const existing = await stat10(target);
+    const existing = await stat11(target);
     if (existing) {
       if (!existing.isDirectory() || existing.isSymbolicLink())
         conflict(target);
       const markerPath = join112(target, MARKER);
-      if (!(await stat10(markerPath))?.isFile())
+      if (!(await stat11(markerPath))?.isFile())
         conflict(target);
       let marker;
       try {