@c4a/context-cli 0.7.4 → 0.7.5

package/indexers/release-manifest.json

@@ -1,26 +1,26 @@
 {
   "protocol": "context.indexer.cli-release-manifest/v1",
   "package": "@c4a/context-cli",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "issuer": "context4ai/context",
   "bundles": [
     {
       "skill": "context-code-indexer",
-      "version": "1.1.1",
+      "version": "1.1.2",
       "distribution": {
         "kind": "cli-bundled",
         "locator": "cli-bundled://context/context-code-indexer"
       },
-      "integrity": "sha256:80c85d8cb10af8e65a85cc22d6102ccafe1fe661696c856ffafd4ee0c42aa6d1",
-      "manifest_digest": "sha256:69cc16d6e680b840879bb20570e56e64b38a5d83755a5f7996a718c03a62ef66",
+      "integrity": "sha256:1ed6831f383cee2399b3c49b01378010ed40c65dce554cf50fc0a5d8ecac6a04",
+      "manifest_digest": "sha256:17f70fd4018068892a8067a3008855d2914f16728a90134328b5da4754429c11",
       "files": [
         {
           "path": "SKILL.md",
-          "digest": "sha256:9f844460d49494bcb708162ddd983b36908305836c7015d46803e6bfedd6e70f"
+          "digest": "sha256:d08738034dc6ed4fab857184ea92927a207a4c712be7626ae58ce3a0be1499fd"
         },
         {
           "path": "context-indexer.yaml",
-          "digest": "sha256:69cc16d6e680b840879bb20570e56e64b38a5d83755a5f7996a718c03a62ef66"
+          "digest": "sha256:17f70fd4018068892a8067a3008855d2914f16728a90134328b5da4754429c11"
         },
         {
           "path": "references/composers/contracts-and-chains.md",
@@ -146,21 +146,21 @@
     },
     {
       "skill": "context-markdown-indexer",
-      "version": "1.1.0",
+      "version": "1.1.1",
       "distribution": {
         "kind": "cli-bundled",
         "locator": "cli-bundled://context/context-markdown-indexer"
       },
-      "integrity": "sha256:58104934dad8aaa934c45bac646dfd1e8ec952eb00aadb44fcf84af1d620638f",
-      "manifest_digest": "sha256:7e2b153d37fa3c4b7c916b3efff95b0fd1c489a50ba1ffab7c80bf43fb4e43f5",
+      "integrity": "sha256:082664b409f05861cf69c77f45de0cf9c3269522c949b1c1f5fb25d2e78d59b9",
+      "manifest_digest": "sha256:6ed1f921e340d1ba8876dec57da9a41308cb72bd12c7aacf24acd93c7dd59439",
       "files": [
         {
           "path": "SKILL.md",
-          "digest": "sha256:e4959961af57d30d8b4468e997a5d64eb3fb98e4c7be8884a217b65df24709e8"
+          "digest": "sha256:ed1684c9b2659ec5f42a3785803f6bf3fec3061cc5bc6f4ea69cc3b0a5a42b6e"
         },
         {
           "path": "context-indexer.yaml",
-          "digest": "sha256:7e2b153d37fa3c4b7c916b3efff95b0fd1c489a50ba1ffab7c80bf43fb4e43f5"
+          "digest": "sha256:6ed1f921e340d1ba8876dec57da9a41308cb72bd12c7aacf24acd93c7dd59439"
         },
         {
           "path": "references/classification.md",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c4a/context-cli",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "type": "module",
   "description": "Local runtime and Agent integration for traceable knowledge production",
   "license": "MIT",
@@ -24,17 +24,17 @@
   },
   "dependencies": {
     "@c4a/agent-graph": "0.3.0",
-    "@c4a/context": "0.7.4",
-    "@c4a/extract": "0.7.4",
-    "@c4a/extract-contract": "0.7.4",
-    "@c4a/extract-go": "0.7.4",
-    "@c4a/extract-mdx": "0.7.4",
-    "@c4a/extract-proto": "0.7.4",
-    "@c4a/extract-rush": "0.7.4",
-    "@c4a/extract-sql": "0.7.4",
-    "@c4a/extract-style": "0.7.4",
-    "@c4a/extract-thrift": "0.7.4",
-    "@c4a/extract-ts": "0.7.4",
+    "@c4a/context": "0.7.5",
+    "@c4a/extract": "0.7.5",
+    "@c4a/extract-contract": "0.7.5",
+    "@c4a/extract-go": "0.7.5",
+    "@c4a/extract-mdx": "0.7.5",
+    "@c4a/extract-proto": "0.7.5",
+    "@c4a/extract-rush": "0.7.5",
+    "@c4a/extract-sql": "0.7.5",
+    "@c4a/extract-style": "0.7.5",
+    "@c4a/extract-thrift": "0.7.5",
+    "@c4a/extract-ts": "0.7.5",
     "commander": "^11.0.0",
     "fast-xml-parser": "^5.10.1",
     "handlebars": "^4.7.8",

package/plugins/VERSION

@@ -1 +1 @@
-0.7.4
+0.7.5

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "c4a",
   "description": "Start or continue a project-local knowledge workspace through one graph-routed entry.",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "author": { "name": "c4a" },
   "license": "MIT",
   "keywords": ["context", "knowledge-base", "wiki", "claude-plugin", "c4a"]

package/plugins/claude/commands/context.md

@@ -119,7 +119,7 @@ and do not create a retry ledger or override Gate. If a legacy workspace returns
 `route.extract.codeindex-migration-required`, execute only its migration
 command; do not rename `codegraph` paths manually.
 
-### Discover Indexer Providers before selection
+### Select Indexer Providers
 
 For `indexer-provider-required`, `indexer-provider-unavailable`,
 `indexer-customization-required`, `indexer-customization-invalid`, or
@@ -132,30 +132,20 @@ remembered or host-specific workflow.
 
 When the current Route starts a new Code or Markdown indexing task, its
 `configure-indexer-providers` Action input already contains the exact applied
-requirements and CLI-bundled Provider catalog. Report those bundled entries
-together with every other Indexer Skill already visible through the current
-host. The conversational report must
-include each Skill name, readable exact version when available, and source type
-(CLI-bundled community, workspace, installed plugin, or authorized marketplace
-result). When the host already exposes an exact Skill root or `SKILL.md` path,
-read only its YAML frontmatter and sibling `context-indexer.yaml` during
-discovery. The manifest version is authoritative;
-`metadata.context-provider-version` is a readable copy that must match it. Do
-not load the Provider body or other guidance until the Route selects it. If the
-host exposes no readable root or exact version, report the version as
-unavailable rather than guessing it.
-
-Group observations with the same Skill name and exact version into one
-conversational item and list all observed source types on that item. An
-installed projection of an identical CLI-bundled identity is not a second
-Provider. Keep different versions separate; never use source count or discovery order as
-selection precedence. Do not search arbitrary directories, infer host cache
-paths, install a plugin, or query a marketplace unless the user separately
-authorizes it. Keep this discovery report only in the conversation: do not
-write it to `src/`, `package.json`, lifecycle state, receipts, audit output, or
-`dist/`. Do not repeat it during an unchanged task resume; repeat it only for a
-new indexing task, a changed host-visible Skill set, or an explicit diagnostic
-request.
+requirements and CLI-bundled Provider catalog. Select applicable Providers from
+the Skills already visible to the Host and that supplied catalog. Do not add a
+catalog command, installation preflight, discovery report, or discovery-only
+confirmation to the normal workflow. The main entry being visible is not proof
+that every Provider is available; the CLI checks the selected distribution
+when it is used and returns any missing/version-conflict recovery.
+
+Use the supplied CLI-bundled identity for a selected shipped Provider, including
+when the same Skill/version is also visible as an installed projection. Do not
+resolve that copy through the Host or re-read its installed metadata. For a
+relevant external Skill, read only the exact Host-exposed frontmatter and
+sibling `context-indexer.yaml` needed for selection; do not guess a version or
+scan caches. Different versions remain distinct. Read Provider guidance only
+when selected. Discovery is not a durable workspace artifact.
 
 Return only `stage: provider-selection`, the non-CLI
 `host_visible_skills`, and the selected semantic `indexers` through the exact

package/plugins/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "c4a",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "description": "Start or continue a project-local knowledge workspace through one graph-routed entry.",
   "author": { "name": "c4a" },
   "homepage": "https://github.com/context4ai/c4a",
@@ -10,7 +10,7 @@
   "skills": "./skills/",
   "interface": {
     "displayName": "C4A Context",
-    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.7.4",
+    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.7.5",
     "longDescription": "Create a Context workspace and use agent-guided next steps to register sources, run extraction, review candidates, build package outputs, and verify health without silently mutating source repositories.",
     "developerName": "c4a",
     "category": "Productivity",

package/plugins/codex/skills/context/SKILL.md

@@ -120,7 +120,7 @@ and do not create a retry ledger or override Gate. If a legacy workspace returns
 `route.extract.codeindex-migration-required`, execute only its migration
 command; do not rename `codegraph` paths manually.
 
-### Discover Indexer Providers before selection
+### Select Indexer Providers
 
 For `indexer-provider-required`, `indexer-provider-unavailable`,
 `indexer-customization-required`, `indexer-customization-invalid`, or
@@ -133,30 +133,20 @@ remembered or host-specific workflow.
 
 When the current Route starts a new Code or Markdown indexing task, its
 `configure-indexer-providers` Action input already contains the exact applied
-requirements and CLI-bundled Provider catalog. Report those bundled entries
-together with every other Indexer Skill already visible through the current
-host. The conversational report must
-include each Skill name, readable exact version when available, and source type
-(CLI-bundled community, workspace, installed plugin, or authorized marketplace
-result). When the host already exposes an exact Skill root or `SKILL.md` path,
-read only its YAML frontmatter and sibling `context-indexer.yaml` during
-discovery. The manifest version is authoritative;
-`metadata.context-provider-version` is a readable copy that must match it. Do
-not load the Provider body or other guidance until the Route selects it. If the
-host exposes no readable root or exact version, report the version as
-unavailable rather than guessing it.
-
-Group observations with the same Skill name and exact version into one
-conversational item and list all observed source types on that item. An
-installed projection of an identical CLI-bundled identity is not a second
-Provider. Keep different versions separate; never use source count or discovery order as
-selection precedence. Do not search arbitrary directories, infer host cache
-paths, install a plugin, or query a marketplace unless the user separately
-authorizes it. Keep this discovery report only in the conversation: do not
-write it to `src/`, `package.json`, lifecycle state, receipts, audit output, or
-`dist/`. Do not repeat it during an unchanged task resume; repeat it only for a
-new indexing task, a changed host-visible Skill set, or an explicit diagnostic
-request.
+requirements and CLI-bundled Provider catalog. Select applicable Providers from
+the Skills already visible to the Host and that supplied catalog. Do not add a
+catalog command, installation preflight, discovery report, or discovery-only
+confirmation to the normal workflow. The main entry being visible is not proof
+that every Provider is available; the CLI checks the selected distribution
+when it is used and returns any missing/version-conflict recovery.
+
+Use the supplied CLI-bundled identity for a selected shipped Provider, including
+when the same Skill/version is also visible as an installed projection. Do not
+resolve that copy through the Host or re-read its installed metadata. For a
+relevant external Skill, read only the exact Host-exposed frontmatter and
+sibling `context-indexer.yaml` needed for selection; do not guess a version or
+scan caches. Different versions remain distinct. Read Provider guidance only
+when selected. Discovery is not a durable workspace artifact.
 
 Return only `stage: provider-selection`, the non-CLI
 `host_visible_skills`, and the selected semantic `indexers` through the exact

package/plugins/cursor/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "c4a",
   "displayName": "C4A Context",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "description": "Start or continue a project-local knowledge workspace through one graph-routed entry.",
   "author": { "name": "Context4AI", "email": "support@context4ai.dev" },
   "homepage": "https://github.com/context4ai/c4a",

package/plugins/cursor/commands/c4a-context.md

@@ -121,7 +121,7 @@ and do not create a retry ledger or override Gate. If a legacy workspace returns
 `route.extract.codeindex-migration-required`, execute only its migration
 command; do not rename `codegraph` paths manually.
 
-### Discover Indexer Providers before selection
+### Select Indexer Providers
 
 For `indexer-provider-required`, `indexer-provider-unavailable`,
 `indexer-customization-required`, `indexer-customization-invalid`, or
@@ -134,30 +134,20 @@ remembered or host-specific workflow.
 
 When the current Route starts a new Code or Markdown indexing task, its
 `configure-indexer-providers` Action input already contains the exact applied
-requirements and CLI-bundled Provider catalog. Report those bundled entries
-together with every other Indexer Skill already visible through the current
-host. The conversational report must
-include each Skill name, readable exact version when available, and source type
-(CLI-bundled community, workspace, installed plugin, or authorized marketplace
-result). When the host already exposes an exact Skill root or `SKILL.md` path,
-read only its YAML frontmatter and sibling `context-indexer.yaml` during
-discovery. The manifest version is authoritative;
-`metadata.context-provider-version` is a readable copy that must match it. Do
-not load the Provider body or other guidance until the Route selects it. If the
-host exposes no readable root or exact version, report the version as
-unavailable rather than guessing it.
-
-Group observations with the same Skill name and exact version into one
-conversational item and list all observed source types on that item. An
-installed projection of an identical CLI-bundled identity is not a second
-Provider. Keep different versions separate; never use source count or discovery order as
-selection precedence. Do not search arbitrary directories, infer host cache
-paths, install a plugin, or query a marketplace unless the user separately
-authorizes it. Keep this discovery report only in the conversation: do not
-write it to `src/`, `package.json`, lifecycle state, receipts, audit output, or
-`dist/`. Do not repeat it during an unchanged task resume; repeat it only for a
-new indexing task, a changed host-visible Skill set, or an explicit diagnostic
-request.
+requirements and CLI-bundled Provider catalog. Select applicable Providers from
+the Skills already visible to the Host and that supplied catalog. Do not add a
+catalog command, installation preflight, discovery report, or discovery-only
+confirmation to the normal workflow. The main entry being visible is not proof
+that every Provider is available; the CLI checks the selected distribution
+when it is used and returns any missing/version-conflict recovery.
+
+Use the supplied CLI-bundled identity for a selected shipped Provider, including
+when the same Skill/version is also visible as an installed projection. Do not
+resolve that copy through the Host or re-read its installed metadata. For a
+relevant external Skill, read only the exact Host-exposed frontmatter and
+sibling `context-indexer.yaml` needed for selection; do not guess a version or
+scan caches. Different versions remain distinct. Read Provider guidance only
+when selected. Discovery is not a durable workspace artifact.
 
 Return only `stage: provider-selection`, the non-CLI
 `host_visible_skills`, and the selected semantic `indexers` through the exact

package/plugins/skills/context/SKILL.md

@@ -120,7 +120,7 @@ and do not create a retry ledger or override Gate. If a legacy workspace returns
 `route.extract.codeindex-migration-required`, execute only its migration
 command; do not rename `codegraph` paths manually.
 
-### Discover Indexer Providers before selection
+### Select Indexer Providers
 
 For `indexer-provider-required`, `indexer-provider-unavailable`,
 `indexer-customization-required`, `indexer-customization-invalid`, or
@@ -133,30 +133,20 @@ remembered or host-specific workflow.
 
 When the current Route starts a new Code or Markdown indexing task, its
 `configure-indexer-providers` Action input already contains the exact applied
-requirements and CLI-bundled Provider catalog. Report those bundled entries
-together with every other Indexer Skill already visible through the current
-host. The conversational report must
-include each Skill name, readable exact version when available, and source type
-(CLI-bundled community, workspace, installed plugin, or authorized marketplace
-result). When the host already exposes an exact Skill root or `SKILL.md` path,
-read only its YAML frontmatter and sibling `context-indexer.yaml` during
-discovery. The manifest version is authoritative;
-`metadata.context-provider-version` is a readable copy that must match it. Do
-not load the Provider body or other guidance until the Route selects it. If the
-host exposes no readable root or exact version, report the version as
-unavailable rather than guessing it.
-
-Group observations with the same Skill name and exact version into one
-conversational item and list all observed source types on that item. An
-installed projection of an identical CLI-bundled identity is not a second
-Provider. Keep different versions separate; never use source count or discovery order as
-selection precedence. Do not search arbitrary directories, infer host cache
-paths, install a plugin, or query a marketplace unless the user separately
-authorizes it. Keep this discovery report only in the conversation: do not
-write it to `src/`, `package.json`, lifecycle state, receipts, audit output, or
-`dist/`. Do not repeat it during an unchanged task resume; repeat it only for a
-new indexing task, a changed host-visible Skill set, or an explicit diagnostic
-request.
+requirements and CLI-bundled Provider catalog. Select applicable Providers from
+the Skills already visible to the Host and that supplied catalog. Do not add a
+catalog command, installation preflight, discovery report, or discovery-only
+confirmation to the normal workflow. The main entry being visible is not proof
+that every Provider is available; the CLI checks the selected distribution
+when it is used and returns any missing/version-conflict recovery.
+
+Use the supplied CLI-bundled identity for a selected shipped Provider, including
+when the same Skill/version is also visible as an installed projection. Do not
+resolve that copy through the Host or re-read its installed metadata. For a
+relevant external Skill, read only the exact Host-exposed frontmatter and
+sibling `context-indexer.yaml` needed for selection; do not guess a version or
+scan caches. Different versions remain distinct. Read Provider guidance only
+when selected. Discovery is not a durable workspace artifact.
 
 Return only `stage: provider-selection`, the non-CLI
 `host_visible_skills`, and the selected semantic `indexers` through the exact

package/plugins/skills/context-code-indexer/SKILL.md

@@ -4,7 +4,7 @@ description: Context-managed Provider for source-grounded code knowledge. Use on
 metadata:
   context-role: "indexer-provider"
   context-public-entry: "false"
-  context-provider-version: "1.1.1"
+  context-provider-version: "1.1.2"
 ---
 
 # Context Code Indexer

package/plugins/skills/context-code-indexer/context-indexer.yaml

@@ -1,6 +1,6 @@
 protocol: context.indexer.provider/v1
 id: context-code-indexer
-version: 1.1.1
+version: 1.1.2
 domains: [code]
 
 activation:

package/plugins/skills/context-markdown-indexer/SKILL.md

@@ -4,7 +4,7 @@ description: Context-managed Provider for source-grounded document knowledge. Us
 metadata:
   context-role: "indexer-provider"
   context-public-entry: "false"
-  context-provider-version: "1.1.0"
+  context-provider-version: "1.1.1"
 ---
 
 # Context Markdown Indexer

package/plugins/skills/context-markdown-indexer/context-indexer.yaml

@@ -1,6 +1,6 @@
 protocol: context.indexer.provider/v1
 id: context-markdown-indexer
-version: 1.1.0
+version: 1.1.1
 domains: [markdown]
 
 activation:

package/providers/context/actions/authorize-current-indexer-provider-program.yaml

@@ -0,0 +1,6 @@
+schema: agent-graph.action.v1
+id: authorize-current-indexer-provider-program
+runner: agent
+effect: external
+skill: skills/authorize-current-indexer-provider-program/SKILL.md
+outputSchema: schemas/indexer-agent-step-result.schema.json

package/providers/context/actions/finalize-current-indexer-provider-selection.yaml

@@ -0,0 +1,5 @@
+schema: agent-graph.action.v1
+id: finalize-current-indexer-provider-selection
+runner: command
+effect: write
+command: context run --format json

package/providers/context/actions/resolve-current-indexer-gate.yaml

@@ -0,0 +1,6 @@
+schema: agent-graph.action.v1
+id: resolve-current-indexer-gate
+runner: agent
+effect: write
+skill: skills/resolve-current-indexer-gate/SKILL.md
+outputSchema: schemas/indexer-agent-step-result.schema.json

package/providers/context/actions/resolve-current-indexer-provider.yaml

@@ -0,0 +1,6 @@
+schema: agent-graph.action.v1
+id: resolve-current-indexer-provider
+runner: agent
+effect: external
+skill: skills/resolve-current-indexer-provider/SKILL.md
+outputSchema: schemas/indexer-agent-step-result.schema.json

package/providers/context/actions/run-indexer-lifecycle.yaml

@@ -4,4 +4,3 @@ description: Continue the unique registry-and-Provider Indexer lifecycle until c
 runner: agent
 effect: write
 skill: skills/run-indexer-lifecycle/SKILL.md
-outputSchema: schemas/indexer-lifecycle-continuation.schema.json

package/providers/context/actions/run-indexer-post-author-composer.yaml

@@ -3,5 +3,5 @@ id: run-indexer-post-author-composer
 runner: agent
 effect: write
 skill: skills/run-indexer-post-author-composer/SKILL.md
-inputSchema: schemas/indexer-post-author-fragment-request.schema.json
+inputSchema: schemas/indexer-agent-step-input.schema.json
 outputSchema: schemas/indexer-agent-step-result.schema.json

package/providers/context/codes.yaml

@@ -33,6 +33,8 @@ codes:
   - { code: route.indexer.layout-confirmation-required, kind: route-reason, summary: Confirm the proposed knowledge layout change or reject it with revision feedback. }
   - { code: route.indexer.agent-step, kind: route-reason, summary: Run one digest-bound Indexer workset with the static Context Agent Action. }
   - { code: route.indexer.provider-configuration, kind: route-reason, summary: Configure an exact path-free Provider selection from currently visible Indexer Skills. }
+  - { code: route.indexer.provider-host-resolution-required, kind: route-reason, summary: Resolve the exact current Indexer Provider through its declared Host Action. }
+  - { code: route.indexer.provider-finalization-required, kind: route-reason, summary: Deterministically validate and apply the fully resolved current Indexer Provider selection. }
   - { code: route.indexer.markdown-capture-validation, kind: route-reason, summary: Require exact current document capture before discovering a semantic Markdown Provider. }
   - { code: route.indexer.markdown-provider-discovery, kind: route-reason, summary: Report visible Markdown Indexer Skills and build one capture-bound Provider route input. }
   - { code: route.indexer.markdown-provider-validation, kind: route-reason, summary: Revalidate the capture-bound selection and resolve it through the exact CLI or Host boundary. }

package/providers/context/graphs/indexer.yaml

@@ -4,6 +4,9 @@ description: Static Agent route for one digest-bound Indexer workset.
 entrypoints:
   agent-step: run-indexer-agent-step
   provider-selection: configure-indexer-providers
+  current-provider-resolution: resolve-current-indexer-provider
+  current-provider-program-authorization: authorize-current-indexer-provider-program
+  current-provider-finalization: finalize-current-indexer-provider-selection
   markdown-provider: inspect-markdown-provider-capture
   requirement-confirmation: route-index-requirement-confirmation
   contract-overlay-validation: validate-indexer-contract-overlays
@@ -41,6 +44,7 @@ nodes:
   - id: review-current-indexer-structure
     kind: gate
     reasonCode: route.indexer.semantic-structure-review
+    resolutionAction: actions/resolve-current-indexer-gate.yaml
     gate:
       id: indexer-semantic-structure-review
       prompt: Review the complete semantic structure and its create-or-enrich targets before authoring.
@@ -72,6 +76,7 @@ nodes:
   - id: confirm-current-indexer-layout
     kind: gate
     reasonCode: route.indexer.layout-confirmation-required
+    resolutionAction: actions/resolve-current-indexer-gate.yaml
     gate:
       id: confirm-layout-change
       prompt: Confirm the proposed knowledge layout change or reject it with revision feedback.
@@ -86,6 +91,23 @@ nodes:
     kind: action
     reasonCode: route.indexer.provider-configuration
     action: actions/configure-indexer-providers.yaml
+  - id: resolve-current-indexer-provider
+    kind: action
+    reasonCode: route.indexer.provider-host-resolution-required
+    action: actions/resolve-current-indexer-provider.yaml
+  - id: authorize-current-indexer-provider-program
+    kind: gate
+    reasonCode: route.indexer.program-execution-authorization
+    resolutionAction: actions/authorize-current-indexer-provider-program.yaml
+    gate:
+      id: authorize-indexer-program-execution
+      prompt: Authorize the exact current Provider program for trusted non-sandboxed execution.
+      authority: context.indexer-program-execution
+      delegatable: true
+  - id: finalize-current-indexer-provider-selection
+    kind: action
+    reasonCode: route.indexer.provider-finalization-required
+    action: actions/finalize-current-indexer-provider-selection.yaml
   - id: inspect-markdown-provider-capture
     kind: action
     reasonCode: route.indexer.markdown-capture-validation

package/providers/context/graphs/workspace.yaml

@@ -196,6 +196,7 @@ nodes:
     inspectionAction: actions/inspect-review.yaml
     resolutionAction: actions/apply-forced-review.yaml
     delegated:
+      inspection: skip
       resolutionAction: actions/apply-managed-review.yaml
       resources:
         required: