@chimix/agentscan 2.0.0 → 2.3.1

package/dist/cli.js

@@ -6952,41 +6952,56 @@ import { resolve as resolve13 } from "node:path";
 
 // src/checks/spec-pages.ts
 var SPEC_PAGES = {
-  agentSkills: { url: "https://agentskills.io/specification", lastVerified: "2026-09-03" },
-  claudeHooks: { url: "https://code.claude.com/docs/en/hooks", lastVerified: "2026-09-03" },
-  claudeSubagents: { url: "https://code.claude.com/docs/en/sub-agents", lastVerified: "2026-09-02" },
-  claudeSkills: { url: "https://code.claude.com/docs/en/skills", lastVerified: "2026-09-03" },
-  claudeMcp: { url: "https://code.claude.com/docs/en/mcp", lastVerified: "2026-09-03" },
-  claudeMemory: { url: "https://code.claude.com/docs/en/memory", lastVerified: "2026-09-03" },
-  opencodeMcp: { url: "https://opencode.ai/v2/docs/mcp-servers", lastVerified: "2026-09-03" },
-  copilotHooks: { url: "https://docs.github.com/en/copilot/reference/hooks-reference", lastVerified: "2026-09-02" },
-  grokHooks: { url: "https://docs.x.ai/build/features/hooks", lastVerified: "2026-09-03" },
-  grokMcp: { url: "https://docs.x.ai/build/features/mcp-servers", lastVerified: "2026-09-02" },
-  grokSkills: { url: "https://docs.x.ai/build/features/skills-plugins-marketplaces", lastVerified: "2026-09-02" },
+  agentSkills: { url: "https://agentskills.io/specification", lastVerified: "2026-11-14" },
+  claudeHooks: { url: "https://code.claude.com/docs/en/hooks", lastVerified: "2026-11-14" },
+  claudeSubagents: { url: "https://code.claude.com/docs/en/sub-agents", lastVerified: "2026-11-13" },
+  claudeSkills: { url: "https://code.claude.com/docs/en/skills", lastVerified: "2026-11-14" },
+  claudeMcp: { url: "https://code.claude.com/docs/en/mcp", lastVerified: "2026-11-14" },
+  claudeMemory: { url: "https://code.claude.com/docs/en/memory", lastVerified: "2026-11-14" },
+  opencodeMcp: { url: "https://opencode.ai/v2/docs/mcp-servers", lastVerified: "2026-11-14" },
+  copilotHooks: { url: "https://docs.github.com/en/copilot/reference/hooks-reference", lastVerified: "2026-11-14" },
+  grokHooks: { url: "https://docs.x.ai/build/features/hooks", lastVerified: "2026-11-14" },
+  grokMcp: { url: "https://docs.x.ai/build/features/mcp-servers", lastVerified: "2026-11-14" },
+  grokSkills: { url: "https://docs.x.ai/build/features/skills-plugins-marketplaces", lastVerified: "2026-11-14" },
   commandcodeHooks: { url: "https://commandcode.ai/docs/hooks", lastVerified: "2026-09-02" },
-  commandcodeMcp: { url: "https://commandcode.ai/docs/mcp", lastVerified: "2026-09-02" },
-  commandcodeAgents: { url: "https://commandcode.ai/docs/agents", lastVerified: "2026-09-03" },
-  kiroHooks: { url: "https://kiro.dev/docs/hooks/", lastVerified: "2026-09-07" },
-  kiroHooksV1: { url: "https://kiro.dev/docs/ide/whats-new-v1/hooks/", lastVerified: "2026-09-07" },
+  commandcodeMcp: { url: "https://commandcode.ai/docs/mcp", lastVerified: "2026-11-14" },
+  commandcodeAgents: { url: "https://commandcode.ai/docs/agents", lastVerified: "2026-11-14" },
+  kiroHooks: { url: "https://kiro.dev/docs/hooks/", lastVerified: "2026-11-14" },
+  kiroHooksV1: { url: "https://kiro.dev/docs/ide/whats-new-v1/hooks/", lastVerified: "2026-11-14" },
   geminiHooks: { url: "https://geminicli.com/docs/hooks/", lastVerified: "2026-09-03" },
-  geminiMcp: { url: "https://github.com/google-gemini/gemini-cli/blob/main/docs/tools/mcp-server.md", lastVerified: "2026-09-03" },
-  vscodeHooks: { url: "https://code.visualstudio.com/docs/agents/reference/hooks-reference", lastVerified: "2026-11-12" },
+  geminiMcp: { url: "https://github.com/google-gemini/gemini-cli/blob/main/docs/tools/mcp-server.md", lastVerified: "2026-11-14" },
+  vscodeHooks: { url: "https://code.visualstudio.com/docs/agents/reference/hooks-reference", lastVerified: "2026-11-14" },
   vscodeMcp: { url: "https://code.visualstudio.com/docs/agents/reference/mcp-configuration", lastVerified: "2026-11-12" },
-  windsurfRules: { url: "https://docs.windsurf.com/windsurf/cascade/memories", lastVerified: "2026-09-02" },
-  windsurfMcp: { url: "https://docs.windsurf.com/windsurf/cascade/mcp", lastVerified: "2026-09-03" },
-  windsurfHooks: { url: "https://docs.devin.ai/desktop/cascade/hooks", lastVerified: "2026-09-03" },
-  cursorHooks: { url: "https://cursor.com/docs/hooks", lastVerified: "2026-09-03" },
-  cursorRules: { url: "https://cursor.com/docs/rules", lastVerified: "2026-09-03" },
-  cursorMcp: { url: "https://cursor.com/docs/context/mcp", lastVerified: "2026-09-02" },
+  copilotCliConfigDir: { url: "https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-config-dir-reference", lastVerified: "2026-11-14" },
+  windsurfRules: { url: "https://docs.windsurf.com/windsurf/cascade/memories", lastVerified: "2026-11-14" },
+  windsurfMcp: { url: "https://docs.windsurf.com/windsurf/cascade/mcp", lastVerified: "2026-11-14" },
+  windsurfHooks: { url: "https://docs.devin.ai/desktop/cascade/hooks", lastVerified: "2026-11-14" },
+  cursorHooks: { url: "https://cursor.com/docs/hooks", lastVerified: "2026-11-14" },
+  cursorRules: { url: "https://cursor.com/docs/rules", lastVerified: "2026-11-14" },
+  cursorMcp: { url: "https://cursor.com/docs/context/mcp", lastVerified: "2026-11-14" },
   continueMcp: { url: "https://docs.continue.dev/customize/deep-dives/mcp", lastVerified: "2026-09-02" },
-  codexMcp: { url: "https://learn.chatgpt.com/docs/extend/mcp", lastVerified: "2026-09-03" },
-  codexAgentsMd: { url: "https://learn.chatgpt.com/docs/agent-configuration/agents-md", lastVerified: "2026-09-02" },
+  codexMcp: { url: "https://learn.chatgpt.com/docs/extend/mcp", lastVerified: "2026-11-14" },
+  codexAgentsMd: { url: "https://learn.chatgpt.com/docs/agent-configuration/agents-md", lastVerified: "2026-11-14" },
   codexHooks: { url: "https://learn.chatgpt.com/docs/hooks", lastVerified: "2026-11-12" },
-  antigravityMcp: { url: "https://antigravity.google/docs/mcp", lastVerified: "2026-11-12" },
+  codexAgents: { url: "https://learn.chatgpt.com/docs/agent-configuration/subagents", lastVerified: "2026-11-14" },
+  antigravityMcp: { url: "https://antigravity.google/docs/mcp", lastVerified: "2026-11-14" },
   antigravityHooks: { url: "https://antigravity.google/docs/hooks", lastVerified: "2026-11-12" },
   antigravityRules: { url: "https://antigravity.google/docs/rules", lastVerified: "2026-11-12" },
-  devinHooks: { url: "https://docs.devin.ai/cli/extensibility/hooks/overview", lastVerified: "2026-11-12" },
-  devinMcp: { url: "https://docs.devin.ai/cli/extensibility/mcp/configuration", lastVerified: "2026-11-12" },
+  devinHooks: { url: "https://docs.devin.ai/cli/extensibility/hooks/overview", lastVerified: "2026-11-14" },
+  devinMcp: { url: "https://docs.devin.ai/cli/extensibility/mcp/configuration", lastVerified: "2026-11-14" },
+  zedMcp: { url: "https://zed.dev/docs/ai/mcp", lastVerified: "2026-11-14" },
+  ampMcp: { url: "https://ampcode.com/docs/customize/mcp", lastVerified: "2026-11-14" },
+  claudeDesktopMcp: { url: "https://modelcontextprotocol.io/docs/develop/connect-local-servers", lastVerified: "2026-11-14" },
+  claudeDesktopExtensions: {
+    url: "https://raw.githubusercontent.com/anthropics/mcpb/main/MANIFEST.md",
+    lastVerified: "2026-11-14"
+  },
+  qwenHooks: { url: "https://qwenlm.github.io/qwen-code-docs/en/users/features/hooks/", lastVerified: "2026-11-14" },
+  qwenMcp: { url: "https://qwenlm.github.io/qwen-code-docs/en/users/features/mcp/", lastVerified: "2026-11-14" },
+  factoryHooks: { url: "https://docs.factory.com/harness/hooks", lastVerified: "2026-11-14" },
+  factoryMcp: { url: "https://docs.factory.com/harness/mcp", lastVerified: "2026-11-14" },
+  factoryAgents: { url: "https://docs.factory.com/harness/subagents", lastVerified: "2026-11-14" },
+  gooseMcp: { url: "https://goose-docs.ai/docs/guides/config-files/", lastVerified: "2026-11-14" },
   vscodeHooksGuide: { url: "https://code.visualstudio.com/docs/agent-customization/hooks", lastVerified: "2026-09-02" }
 };
 
@@ -6998,7 +7013,7 @@ var STRUCTURAL_CHECKS = [
   {
     id: "config.unreadable",
     description: "Config file is not valid JSON or cannot be read",
-    severity: "error",
+    severity: ["error", "info"],
     provenance: "internal-consistency",
     lastVerified: "2026-09-02",
     source: { kind: "derived", detail: "parser result" }
@@ -7114,7 +7129,7 @@ var STRUCTURAL_CHECKS = [
   {
     id: "copilot.hook.unknown-event",
     description: "Copilot CLI hook registered under an event name that is never dispatched",
-    severity: "error",
+    severity: ["error", "warning"],
     provenance: "spec-required",
     ...spec(SPEC_PAGES.copilotHooks, "copilot-hooks.md")
   },
@@ -7177,7 +7192,7 @@ var STRUCTURAL_CHECKS = [
   },
   {
     id: "claude.skill.missing-description",
-    description: "SKILL.md frontmatter has no description and no first markdown paragraph",
+    description: "SKILL.md frontmatter has no description and no first non-empty markdown line",
     severity: "info",
     provenance: "vendor-recommendation",
     ...spec(SPEC_PAGES.claudeSkills, "skills.md")
@@ -7335,8 +7350,8 @@ var STRUCTURAL_CHECKS = [
   },
   {
     id: "claude.agent.invalid-name",
-    description: "Agent frontmatter name is not a valid identifier",
-    severity: ["warning", "error"],
+    description: "Agent frontmatter name is one Claude Code skips",
+    severity: "error",
     provenance: "spec-required",
     ...spec(SPEC_PAGES.claudeSubagents, "agents.md")
   },
@@ -7737,7 +7752,7 @@ var STRUCTURAL_CHECKS = [
   {
     id: "windsurf.rule.missing-trigger",
     description: "Windsurf workspace rule is missing frontmatter trigger",
-    severity: "warning",
+    severity: "info",
     provenance: "spec-required",
     ...spec(SPEC_PAGES.windsurfRules, "windsurf-rules.md")
   },
@@ -7792,8 +7807,8 @@ var STRUCTURAL_CHECKS = [
   },
   {
     id: "windsurf.hook.unknown-event",
-    description: "Windsurf hook registered under an event name that is never dispatched",
-    severity: "error",
+    description: "Windsurf hook registered under an event name outside the legacy Cascade event table",
+    severity: "warning",
     provenance: "spec-required",
     ...spec(SPEC_PAGES.windsurfHooks, "windsurf-hooks.md")
   },
@@ -7905,6 +7920,13 @@ var STRUCTURAL_CHECKS = [
     provenance: "spec-required",
     ...spec(SPEC_PAGES.codexHooks, "codex-hooks.md")
   },
+  {
+    id: "codex.agent.missing-field",
+    description: "Codex custom agent file does not define string name, description, and developer_instructions",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.codexAgents, "codex-agents.md")
+  },
   {
     id: "codex.hook.timeout-out-of-bounds",
     description: "Codex SessionEnd or Interrupt hook timeout is outside 1–3 seconds",
@@ -8019,6 +8041,143 @@ var STRUCTURAL_CHECKS = [
     severity: "error",
     provenance: "spec-required",
     ...spec(SPEC_PAGES.kiroHooks, "kiro-hooks.md")
+  },
+  {
+    id: "zed.mcp.no-launch",
+    description: "Zed context server declares neither command nor url",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.zedMcp, "zed-mcp.md")
+  },
+  {
+    id: "amp.mcp.no-launch",
+    description: "Amp MCP server declares neither command nor url",
+    severity: "warning",
+    provenance: "internal-consistency",
+    lastVerified: "2026-11-14",
+    source: { kind: "derived", detail: "agentscan inference" }
+  },
+  {
+    id: "claude-desktop.mcp.no-launch",
+    description: "Claude Desktop MCP server declares no command",
+    severity: "warning",
+    provenance: "internal-consistency",
+    lastVerified: "2026-11-14",
+    source: { kind: "derived", detail: "agentscan inference" }
+  },
+  {
+    id: "claude-desktop.extension.missing-field",
+    description: "Claude Desktop extension manifest lacks a required field or names an unknown server type",
+    severity: "warning",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.claudeDesktopExtensions, "claude-desktop-extensions.md")
+  },
+  {
+    id: "qwen.mcp.no-launch",
+    description: "Qwen Code MCP server has neither command, url, nor httpUrl",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.qwenMcp, "qwen-mcp.md")
+  },
+  {
+    id: "qwen.hook.unknown-event",
+    description: "Qwen Code hook registered under an event name that is never dispatched",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.qwenHooks, "qwen-hooks.md")
+  },
+  {
+    id: "qwen.hook.missing-script",
+    description: "Qwen Code hook points at a script that does not exist, so it never runs",
+    severity: "error",
+    provenance: "internal-consistency",
+    lastVerified: "2026-11-14",
+    source: { kind: "derived", detail: "agentscan inference" }
+  },
+  {
+    id: "qwen.hook.command-without-command",
+    description: "Qwen Code command hook is missing the command field",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.qwenHooks, "qwen-hooks.md")
+  },
+  {
+    id: "qwen.hook.http-without-url",
+    description: "Qwen Code http hook is missing the url field",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.qwenHooks, "qwen-hooks.md")
+  },
+  {
+    id: "qwen.hook.unknown-handler-type",
+    description: "Qwen Code hook type is missing or is not command, http, or prompt",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.qwenHooks, "qwen-hooks.md")
+  },
+  {
+    id: "factory.mcp.no-launch",
+    description: "Factory Droid MCP server has neither command nor url",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.factoryMcp, "factory-mcp.md")
+  },
+  {
+    id: "factory.hook.unknown-event",
+    description: "Factory Droid hook registered under an event name that is never dispatched",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.factoryHooks, "factory-hooks.md")
+  },
+  {
+    id: "factory.hook.missing-script",
+    description: "Factory Droid hook points at a script that does not exist, so it never runs",
+    severity: "error",
+    provenance: "internal-consistency",
+    lastVerified: "2026-11-14",
+    source: { kind: "derived", detail: "agentscan inference" }
+  },
+  {
+    id: "factory.hook.invalid-group",
+    description: "Factory Droid hook group has no hooks array",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.factoryHooks, "factory-hooks.md")
+  },
+  {
+    id: "factory.hook.command-without-command",
+    description: "Factory Droid command hook is missing the command field",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.factoryHooks, "factory-hooks.md")
+  },
+  {
+    id: "factory.hook.unknown-handler-type",
+    description: "Factory Droid hook type is missing or is not command",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.factoryHooks, "factory-hooks.md")
+  },
+  {
+    id: "factory.droid.invalid-name",
+    description: "Factory custom droid name is missing or does not match ^[a-z0-9-_]+$",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.factoryAgents, "factory-agents.md")
+  },
+  {
+    id: "factory.droid.empty-body",
+    description: "Factory custom droid has an empty system prompt body",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.factoryAgents, "factory-agents.md")
+  },
+  {
+    id: "goose.mcp.no-launch",
+    description: "Goose extension declares type sse, which Goose does not support",
+    severity: "error",
+    provenance: "spec-required",
+    ...spec(SPEC_PAGES.gooseMcp, "goose-mcp.md")
   }
 ];
 var BY_ID = new Map(STRUCTURAL_CHECKS.map((check) => [check.id, check]));
@@ -8029,6 +8188,16 @@ function ignoreRuleSet(ids) {
   return new Set(ids);
 }
 
+// src/facts/paths.ts
+import { isAbsolute, relative, resolve, sep } from "node:path";
+function toPosix(path) {
+  return path.replaceAll("\\", "/");
+}
+function isInside(child, parent) {
+  const rel = relative(resolve(parent), resolve(child));
+  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);
+}
+
 // src/checks/budgets.ts
 import { basename } from "node:path";
 
@@ -8036,7 +8205,9 @@ import { basename } from "node:path";
 function lineCount(text) {
   return text.length === 0 ? 0 : text.replace(/\r?\n$/, "").split(/\r?\n/).length;
 }
-var INTERPOLATED = /\$\{[A-Za-z_][A-Za-z0-9_]*(?::-[^}]*)?\}|\$\{env:[A-Za-z_][A-Za-z0-9_]*\}|\$\{file:[^}]+\}|\$\{input:[A-Za-z0-9_-]+\}|\$\{(?:userHome|workspaceFolder|workspaceFolderBasename|pathSeparator|\/)\}|\{env:[A-Za-z_][A-Za-z0-9_]*\}|\$\{\{\s*secrets\.[A-Za-z0-9_.]+\s*\}\}|\{\{[^{}]+\}\}|\$[A-Za-z_][A-Za-z0-9_]*|%[A-Za-z_][A-Za-z0-9_]*%/;
+var NON_PERCENT_INTERPOLATED = /\$\{[A-Za-z_][A-Za-z0-9_]*(?::-[^}]*)?\}|\$\{env:[A-Za-z_][A-Za-z0-9_]*\}|\$\{file:[^}]+\}|\$\{input:[A-Za-z0-9_-]+\}|\$\{(?:userHome|workspaceFolder|workspaceFolderBasename|pathSeparator|\/)\}|\{env:[A-Za-z_][A-Za-z0-9_]*\}|\$\{\{\s*secrets\.[A-Za-z0-9_.]+\s*\}\}|\{\{[^{}]+\}\}|\$[A-Za-z_][A-Za-z0-9_]*/;
+var INTERPOLATED = new RegExp(`${NON_PERCENT_INTERPOLATED.source}|%[A-Za-z_][A-Za-z0-9_]*%`);
+var INTERPOLATED_NO_PERCENT = NON_PERCENT_INTERPOLATED;
 
 // src/checks/make.ts
 function make(ruleId, subject, args) {
@@ -8206,16 +8377,6 @@ function applyPrecedence(items, keyOf, rankOf) {
   }
 }
 
-// src/facts/paths.ts
-import { isAbsolute, relative, resolve, sep } from "node:path";
-function toPosix(path) {
-  return path.replaceAll("\\", "/");
-}
-function isInside(child, parent) {
-  const rel = relative(resolve(parent), resolve(child));
-  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);
-}
-
 // src/facts/provider.ts
 function assertNever(value, message) {
   throw new Error(message);
@@ -8256,7 +8417,19 @@ var MCP_FILE_RULES = [
   {
     profile: "copilot-json",
     test: (p) => /(?:^|\/)\.copilot\/mcp-config\.json$/.test(p)
-  }
+  },
+  {
+    profile: "zed-json",
+    test: (p) => /(?:^|\/)(?:\.zed|\.config\/zed|Zed)\/settings\.json$/.test(p),
+    jsonc: true
+  },
+  {
+    profile: "amp-json",
+    test: (p) => /(?:^|\/)(?:\.amp|\.config\/amp)\/settings\.jsonc?$/.test(p),
+    jsonc: true
+  },
+  { profile: "qwen-json", test: (p) => /(?:^|\/)\.qwen\/settings\.json$/.test(p), jsonc: true },
+  { profile: "factory-json", test: (p) => /(?:^|\/)\.factory\/mcp\.json$/.test(p) }
 ];
 var DEFAULT_MCP_PATHS = [
   ".mcp.json",
@@ -8317,7 +8490,7 @@ function commandcodeAgentSuggest(agent, defect) {
     case "reserved-name":
       return `Rename ${agent.path} — explore, plan, review, and general are reserved`;
     case "invalid-permission-mode":
-      return `Use permissionMode default, auto-accept, bypass, plan, or dont-ask in ${agent.path}`;
+      return `Use permissionMode default, accept-edits, yolo, plan, or dont-ask in ${agent.path}`;
     case "invalid-field-type":
       return `Fix the type of ${agent.invalidField ?? "the field"} in ${agent.path}`;
     default: {
@@ -8348,6 +8521,22 @@ function checkCommandcodeAgents(facts) {
   }
   return out;
 }
+function checkCodexAgents(facts) {
+  const out = [];
+  for (const agent of facts.agents) {
+    if (agent.sourceProvider !== "codex" || agent.codexMissingFields === undefined) {
+      continue;
+    }
+    const fields = agent.codexMissingFields.join(", ");
+    out.push(make("codex.agent.missing-field", `agent:${agent.path}`, {
+      message: `Codex agent "${agent.name}" does not define string ${fields}`,
+      reason: "Every standalone Codex custom agent file must define name, description, and developer_instructions. See docs/spec/codex-agents.md.",
+      evidence: [{ kind: "agent", value: agent.path }],
+      suggest: `Add ${fields} as strings to ${agent.path}`
+    }));
+  }
+  return out;
+}
 function checkAgents(facts) {
   const out = [];
   const names = new Map;
@@ -8384,20 +8573,20 @@ function checkAgents(facts) {
       }));
     } else {
       const name = agent.frontmatterName;
-      const skipped = name.startsWith("-") || name.includes(":");
-      const formatOk = /^[a-z]+(?:-[a-z]+)*$/.test(name);
-      if (!formatOk) {
+      if (name.trim() === "" || name.startsWith("-") || name.includes(":") || name.length > 256) {
         out.push(make("claude.agent.invalid-name", `agent:${agent.name}`, {
-          severity: skipped ? "error" : "warning",
-          message: skipped ? `Agent name "${name}" is skipped (starts with "-" or contains ":")` : `Agent name "${name}" is not a valid identifier`,
-          reason: "The subagent reference specifies a unique identifier in lowercase letters and hyphens. The filename does not have to match. A name that starts with `-` or contains `:` is skipped. See docs/spec/agents.md.",
+          message: `Agent name "${name.slice(0, 80)}" is skipped (empty, starts with "-", contains ":", or longer than 256 characters)`,
+          reason: "Claude Code skips a subagent whose name is empty, starts with `-`, contains `:`, or is longer than 256 characters, and writes an error to the debug log. See docs/spec/agents.md.",
           evidence: [{ kind: "agent", value: agent.path }],
-          suggest: "Use lowercase letters and hyphens in the `name` field; do not start with `-` or include `:`"
+          suggest: "Use a non-empty name of at most 256 characters that does not start with `-` or contain `:`"
         }));
       }
       const scope = agent.namespace ?? "";
       const key = `${scope}\x00${agent.frontmatterName}`;
       const list = names.get(key) ?? [];
+      if (list.includes(agent.path)) {
+        continue;
+      }
       list.push(agent.path);
       names.set(key, list);
     }
@@ -8413,7 +8602,45 @@ function checkAgents(facts) {
       }));
     }
   }
-  return [...out, ...checkCommandcodeAgents(facts)];
+  return [...out, ...checkCommandcodeAgents(facts), ...checkCodexAgents(facts), ...checkFactoryDroids(facts)];
+}
+function checkFactoryDroids(facts) {
+  const out = [];
+  for (const agent of facts.agents) {
+    if (agent.sourceProvider !== "factory") {
+      continue;
+    }
+    for (const defect of agent.factoryDroidDefects ?? []) {
+      out.push(defect === "invalid-name" ? make("factory.droid.invalid-name", `agent:${agent.path}`, {
+        message: `Droid "${agent.name}" has no frontmatter name matching ^[a-z0-9-_]+$`,
+        reason: "Factory requires `name` (lowercase letters, digits, `-`, `_`); it drives the `subagent_type` value. The CLI validates every definition and exposes only valid droids. See docs/spec/factory-agents.md.",
+        evidence: [{ kind: "agent", value: agent.path }],
+        suggest: `Set a lowercase name in ${agent.path}`
+      }) : make("factory.droid.empty-body", `agent:${agent.path}`, {
+        message: `Droid "${agent.name}" has an empty system prompt`,
+        reason: "The body after the frontmatter is the droid's system prompt and cannot be empty. See docs/spec/factory-agents.md.",
+        evidence: [{ kind: "agent", value: agent.path }],
+        suggest: `Write the system prompt below the frontmatter in ${agent.path}`
+      }));
+    }
+  }
+  return out;
+}
+
+// src/checks/claude-desktop.ts
+function checkClaudeDesktopExtensions(facts) {
+  return (facts.claudeDesktopExtensions ?? []).map((ext) => {
+    const problems = [
+      ...ext.missingFields.length > 0 ? [`is missing ${ext.missingFields.join(", ")}`] : [],
+      ...ext.unknownServerType === undefined ? [] : [`has unknown server.type "${ext.unknownServerType}"`]
+    ];
+    return make("claude-desktop.extension.missing-field", `extension:${ext.path}`, {
+      message: `Claude Desktop extension manifest ${problems.join(" and ")}`,
+      reason: "MCPB manifests require manifest_version, name, version, description, author (with name) and server; server.type is node, python, binary or uv. See docs/spec/claude-desktop-extensions.md.",
+      evidence: [{ kind: "config", value: ext.path }],
+      suggest: "Reinstall the extension, or fix its manifest.json"
+    });
+  });
 }
 
 // src/checks/config.ts
@@ -8425,7 +8652,16 @@ function safeDetail(detail) {
   return position === undefined ? head : `${head} at ${position}`;
 }
 function checkConfigErrors(facts) {
-  return facts.configErrors.map((err) => {
+  const denied = new Set;
+  const errors = facts.configErrors.filter((err) => {
+    if (err.kind !== "permission-denied")
+      return true;
+    if (denied.has(err.path))
+      return false;
+    denied.add(err.path);
+    return true;
+  });
+  return errors.map((err) => {
     if (err.kind === "truncated") {
       return make("scan.truncated", `scan:${err.path}`, {
         message: `${basename2(err.path)} is larger than the scan cap — only its first bytes were read`,
@@ -8436,8 +8672,20 @@ function checkConfigErrors(facts) {
         ]
       });
     }
+    if (err.kind === "permission-denied") {
+      return make("config.unreadable", `config:${err.path}#${err.kind}`, {
+        severity: "info",
+        message: `${basename2(err.path)} could not be read (permission denied) — skipped`,
+        reason: "The scanning user lacks permission to read this path. That is a property of this scan, not a defect in the file, which is often not agent config at all.",
+        evidence: [
+          { kind: "config", value: err.path },
+          { kind: "detail", value: safeDetail(err.detail) }
+        ]
+      });
+    }
     const what = err.kind === "invalid-json" ? "is not valid JSON" : err.kind === "unreadable" ? "could not be read" : "has an unexpected shape";
     return make("config.unreadable", `config:${err.path}#${err.kind}:${safeDetail(err.detail)}`, {
+      severity: "error",
       message: `${basename2(err.path)} ${what} — its contents are invisible to the scan`,
       reason: "An unparseable config is silently ignored by the tools that read it, so whatever it configured is simply not in effect.",
       evidence: [
@@ -8455,14 +8703,14 @@ import { join } from "node:path";
 var PROVIDERS = {
   "agent-skills": { dotDir: ".agents", skills: "agent-skills", userSkills: true, portableSkills: true },
   claude: { dotDir: ".claude", homeEnv: "CLAUDE_CONFIG_DIR", skills: "claude", userSkills: true },
-  cursor: { dotDir: ".cursor", skills: "agent-skills", portableSkills: true },
-  codex: { dotDir: ".codex", homeEnv: "CODEX_HOME", skills: "agent-skills", userSkills: true, portableSkills: true },
+  cursor: { dotDir: ".cursor", skills: "agent-skills", userSkills: true, portableSkills: true },
+  codex: { dotDir: ".codex", homeEnv: "CODEX_HOME" },
   commandcode: { dotDir: ".commandcode", skills: "agent-skills", userSkills: true },
   grok: { dotDir: ".grok", homeEnv: "GROK_HOME", skills: "grok", userSkills: true },
   windsurf: { dotDir: ".windsurf", home: ".codeium/windsurf", skills: "agent-skills", userSkills: true },
   devin: { dotDir: ".devin", home: ".config/devin", skills: "agent-skills", userSkills: true },
   kiro: { dotDir: ".kiro", skills: "agent-skills", userSkills: true },
-  cline: { dotDir: ".cline", skills: "agent-skills", userSkills: true },
+  cline: { dotDir: ".cline", skillDotDirs: [".clinerules"], skills: "agent-skills", userSkills: true },
   roo: { dotDir: ".roo", skills: "agent-skills", userSkills: true },
   kilo: { dotDir: ".kilo", skills: "agent-skills", userSkills: true },
   junie: { dotDir: ".junie", skills: "agent-skills", userSkills: true },
@@ -8471,7 +8719,13 @@ var PROVIDERS = {
   opencode: { dotDir: ".opencode" },
   continue: { dotDir: ".continue" },
   antigravity: { home: ".gemini/config", userSkills: true, skills: "agent-skills" },
-  copilot: { dotDir: ".github", home: ".copilot", homeEnv: "COPILOT_HOME" }
+  copilot: { dotDir: ".github", home: ".copilot", homeEnv: "COPILOT_HOME" },
+  zed: { dotDir: ".zed" },
+  amp: { home: ".config/amp", skills: "agent-skills", userSkills: true },
+  "claude-desktop": {},
+  qwen: { dotDir: ".qwen", skills: "agent-skills", userSkills: true },
+  factory: { dotDir: ".factory", skills: "agent-skills", userSkills: true },
+  goose: { home: ".config/goose" }
 };
 var SPECS = Object.entries(PROVIDERS);
 function providerHome(id) {
@@ -8483,20 +8737,22 @@ function providerHome(id) {
   return join(homedir(), spec.home ?? spec.dotDir ?? "");
 }
 var WITH_SKILLS = SPECS.filter(([, spec]) => spec.skills !== undefined);
-var PROJECT_SKILL_DIRS = WITH_SKILLS.flatMap(([, spec]) => spec.dotDir === undefined ? [] : [`${spec.dotDir}/skills`]);
+var PROJECT_SKILL_DIRS = WITH_SKILLS.flatMap(([, spec]) => [...spec.dotDir === undefined ? [] : [spec.dotDir], ...spec.skillDotDirs ?? []].map((dir) => `${dir}/skills`));
 var SKILL_PATHS_BEFORE_BARE = [".agents/skills", ".claude/skills"];
 var DEFAULT_SKILL_PATHS = [
   ...SKILL_PATHS_BEFORE_BARE,
   "skills",
   ...PROJECT_SKILL_DIRS.filter((dir) => !SKILL_PATHS_BEFORE_BARE.includes(dir))
 ];
-var SKILL_DOT_DIRS = new Set(WITH_SKILLS.flatMap(([id, spec]) => id === "commandcode" || spec.dotDir === undefined ? [] : [spec.dotDir]));
+var SKILL_DOT_DIRS = new Set(WITH_SKILLS.flatMap(([id, spec]) => id === "commandcode" || spec.dotDir === undefined ? [] : [spec.dotDir, ...spec.skillDotDirs ?? []]));
 var USER_SKILL_PROVIDERS = WITH_SKILLS.filter(([, spec]) => spec.userSkills).map(([id]) => id);
 var AGENT_CONFIG_DOT_DIRS = SPECS.flatMap(([, spec]) => spec.dotDir ?? []);
 var SKILL_MARKERS = WITH_SKILLS.flatMap(([id, spec]) => {
   const markers = [];
-  if (spec.dotDir !== undefined) {
-    markers.push(`/${spec.dotDir}/skills`);
+  for (const dir of [spec.dotDir, ...spec.skillDotDirs ?? []]) {
+    if (dir !== undefined) {
+      markers.push(`/${dir}/skills`);
+    }
   }
   if (spec.home !== undefined && spec.userSkills) {
     markers.push(`/${spec.home}/skills`);
@@ -8547,11 +8803,13 @@ var COMMANDCODE_RESERVED_AGENT_NAMES = new Set([
 ]);
 var COMMANDCODE_PERMISSION_MODES = new Set([
   "default",
-  "auto-accept",
-  "bypass",
+  "accept-edits",
+  "yolo",
   "plan",
   "dont-ask",
-  "inherit"
+  "inherit",
+  "auto-accept",
+  "bypass"
 ]);
 var COMMANDCODE_MCP_TRANSPORTS = new Set(["http", "stdio"]);
 var COMMANDCODE_TOLERATED_MCP_TRANSPORTS = new Set(["sse"]);
@@ -8743,7 +9001,6 @@ var COPILOT_HOOK_EVENTS = new Set([
 ]);
 var CLAUDE_ALL_HANDLER_EVENTS = new Set([
   "PermissionDenied",
-  "PermissionRequest",
   "PostToolBatch",
   "PostToolUse",
   "PostToolUseFailure",
@@ -8756,6 +9013,7 @@ var CLAUDE_ALL_HANDLER_EVENTS = new Set([
   "UserPromptExpansion",
   "UserPromptSubmit"
 ]);
+var CLAUDE_NO_AGENT_EVENTS = new Set(["PermissionRequest"]);
 var CLAUDE_COMMAND_HTTP_MCP_EVENTS = new Set([
   "ConfigChange",
   "CwdChanged",
@@ -8784,6 +9042,9 @@ function claudeHandlerCompatible(event, type) {
   if (CLAUDE_ALL_HANDLER_EVENTS.has(event)) {
     return true;
   }
+  if (CLAUDE_NO_AGENT_EVENTS.has(event)) {
+    return type !== "agent";
+  }
   if (CLAUDE_COMMAND_MCP_EVENTS.has(event)) {
     return type === "command" || type === "mcp_tool";
   }
@@ -8826,7 +9087,9 @@ var KIRO_HOOK_EVENTS = new Set([
   "PostToolUse",
   "PostFileCreate",
   "PostFileSave",
-  "PostFileDelete"
+  "PostFileDelete",
+  "AgentSpawn",
+  "agentSpawn"
 ]);
 var KIRO_HOOK_HANDLER_TYPES = new Set(["command", "agent"]);
 
@@ -8846,6 +9109,48 @@ var WINDSURF_HOOK_EVENTS = new Set([
   "post_setup_worktree"
 ]);
 
+// src/facts/qwen.ts
+var QWEN_HOOK_EVENTS = new Set([
+  "PreToolUse",
+  "PostToolUse",
+  "PostToolUseFailure",
+  "PostToolBatch",
+  "UserPromptSubmit",
+  "UserPromptExpansion",
+  "SessionStart",
+  "SessionEnd",
+  "SessionDelete",
+  "MessageDisplay",
+  "Stop",
+  "StopFailure",
+  "SubagentStart",
+  "SubagentStop",
+  "PreCompact",
+  "PostCompact",
+  "Notification",
+  "PermissionRequest",
+  "PermissionDenied",
+  "TodoCreated",
+  "TodoCompleted",
+  "InstructionsLoaded",
+  "FileChanged"
+]);
+var QWEN_HOOK_HANDLER_TYPES = new Set(["command", "http", "prompt", "function"]);
+
+// src/facts/factory.ts
+var FACTORY_HOOK_EVENTS = new Set([
+  "PreToolUse",
+  "PostToolUse",
+  "UserPromptSubmit",
+  "Notification",
+  "Stop",
+  "SubagentStop",
+  "PreCompact",
+  "SessionStart",
+  "SessionEnd"
+]);
+var FACTORY_DROID_NAME = /^[a-z0-9-_]+$/;
+
 // src/facts/hook-profiles.ts
 var PROFILES = {
   claude: {
@@ -8996,6 +9301,20 @@ var PROFILES = {
     layout: "own",
     fileSource: "kiro-hooks",
     invalidGroupHasNoEvent: true
+  },
+  qwen: {
+    events: QWEN_HOOK_EVENTS,
+    ruleIdPrefix: "qwen",
+    defects: ["command-without-command", "http-without-url", "unknown-handler-type"],
+    layout: "nested",
+    fileSource: "qwen-settings"
+  },
+  factory: {
+    events: FACTORY_HOOK_EVENTS,
+    ruleIdPrefix: "factory",
+    defects: ["invalid-group", "command-without-command", "unknown-handler-type"],
+    layout: "nested",
+    fileSource: "factory-hooks"
   }
 };
 var HOOK_PROFILES = PROFILES;
@@ -9041,8 +9360,10 @@ function checkHookEvents(facts) {
       continue;
     }
     reported.add(key);
-    out.push(make(ruleId, `hook:${event}`, {
-      message: `"${event}" is not a hook event that gets dispatched`,
+    const recased = `${event.charAt(0).toLowerCase()}${event.slice(1)}`;
+    const casingSlip = profile === "copilot-cli" && recased !== event && known.has(recased);
+    const args = {
+      message: casingSlip ? `"${event}" is not a documented Copilot CLI hook event; the documented name is "${recased}"` : `"${event}" is not a hook event that gets dispatched`,
       reason: "Hook events are matched by exact name. An unrecognised name never matches, so everything registered under it silently never runs — a typo here looks identical to a working hook. Event sets are per schema profile; a VS Code name is not validated against Claude's list, and Copilot CLI camelCase names map onto VS Code events where the Copilot hooks reference documents that mapping.",
       evidence: [
         { kind: "hook", value: `${event} @ ${hook.path}` },
@@ -9051,8 +9372,9 @@ function checkHookEvents(facts) {
           value: [...known].join(", ")
         }
       ],
-      suggest: `Fix the event name in ${hook.path} (or ignoreRules: ["${ruleId}"] if it is newly supported)`
-    }));
+      suggest: casingSlip ? `Rename "${event}" to "${recased}" in ${hook.path}` : `Fix the event name in ${hook.path} (or ignoreRules: ["${ruleId}"] if it is newly supported)`
+    };
+    out.push(ruleId === "copilot.hook.unknown-event" ? make(ruleId, `hook:${event}`, { ...args, severity: casingSlip ? "warning" : "error" }) : make(ruleId, `hook:${event}`, args));
   }
   return out;
 }
@@ -9246,6 +9568,44 @@ var PROFILES2 = {
     sourceProvider: "vscode",
     consumedBy: ["vscode"],
     ruleIdPrefix: "vscode"
+  },
+  "zed-json": {
+    ...COMMAND_OR_URL,
+    sourceProvider: "zed",
+    consumedBy: ["zed"],
+    ruleIdPrefix: "zed",
+    launchable: (server) => commandOrUrl(server) || server.extensionProvided === true || server.commandPathObject === true
+  },
+  "amp-json": { ...COMMAND_OR_URL, sourceProvider: "amp", consumedBy: ["amp"], ruleIdPrefix: "amp" },
+  "claude-desktop-json": {
+    sourceProvider: "claude-desktop",
+    consumedBy: ["claude-desktop"],
+    ruleIdPrefix: "claude-desktop",
+    launchable: (server) => commandOrUrl(server) || server.transport !== undefined,
+    noLaunchDeclares: "no command",
+    noLaunchAdd: "a command"
+  },
+  "qwen-json": {
+    sourceProvider: "qwen",
+    consumedBy: ["qwen"],
+    ruleIdPrefix: "qwen",
+    launchable: (server) => commandOrUrl(server) || server.hasHttpUrl === true,
+    noLaunchDeclares: "neither command, url, nor httpUrl",
+    noLaunchAdd: "a command, url, or httpUrl"
+  },
+  "factory-json": {
+    ...COMMAND_OR_URL,
+    sourceProvider: "factory",
+    consumedBy: ["factory"],
+    ruleIdPrefix: "factory"
+  },
+  "goose-yaml": {
+    ...COMMAND_OR_URL,
+    sourceProvider: "goose",
+    consumedBy: ["goose"],
+    ruleIdPrefix: "goose",
+    noLaunchDeclares: "type sse, which Goose does not support",
+    noLaunchAdd: "type streamable_http with uri"
   }
 };
 var MCP_PROFILES = PROFILES2;
@@ -9652,12 +10012,12 @@ function checkSkillStructure(facts) {
     }
     if (schema === "agent-skills") {
       out.push(...checkAgentSkillsFrontmatter(skill));
-    } else if (schema === "grok") {} else if (skill.description === undefined && skill.firstMarkdownParagraph === undefined) {
+    } else if (schema === "grok") {} else if (skill.description === undefined && skill.firstNonEmptyLine === undefined) {
       out.push(make("claude.skill.missing-description", skillSubject(skill), {
-        message: "SKILL.md frontmatter has no `description` and no first markdown paragraph",
-        reason: "The description is what Claude matches against when deciding to load a skill automatically. If it is omitted, Claude uses the first markdown paragraph. Without either, the skill still works when invoked directly, but it will not be picked up on its own. The spec marks description Recommended, not required — see docs/spec/skills.md.",
+        message: "SKILL.md frontmatter has no `description` and no first non-empty markdown line",
+        reason: "The description is what Claude matches against when deciding to load a skill automatically. If it is omitted, Claude uses the first non-empty markdown line. Without either, the skill still works when invoked directly, but it will not be picked up on its own. The spec marks description Recommended, not required — see docs/spec/skills.md.",
         evidence: skillEvidence(skill, `${skill.path}/SKILL.md`),
-        suggest: "Add a one-line description to the frontmatter, or a first markdown paragraph"
+        suggest: "Add a one-line description to the frontmatter, or a first non-empty markdown line"
       }));
     }
   }
@@ -9666,7 +10026,7 @@ function checkSkillStructure(facts) {
 function checkAgentSkillsFrontmatter(skill) {
   const out = [];
   const dirName = basename3(toPosix(skill.path));
-  if (skill.frontmatterName === undefined) {
+  if (skill.frontmatterName === undefined && skill.sourceProvider !== "antigravity") {
     const typeNote = skill.nameKind !== undefined && skill.nameKind !== "string" ? ` (found ${skill.nameKind}, not a string)` : "";
     out.push(make("agent-skills.skill.missing-name", skillSubject(skill), {
       message: `SKILL.md frontmatter has no string \`name\`${typeNote}`,
@@ -9674,7 +10034,7 @@ function checkAgentSkillsFrontmatter(skill) {
       evidence: skillEvidence(skill, `${skill.path}/SKILL.md`),
       suggest: `Add name: ${dirName}`
     }));
-  } else {
+  } else if (skill.frontmatterName !== undefined) {
     const name = skill.frontmatterName;
     if (name.length > AGENT_SKILLS_NAME_MAX) {
       out.push(make("agent-skills.skill.name-too-long", skillSubject(skill), {
@@ -9683,7 +10043,7 @@ function checkAgentSkillsFrontmatter(skill) {
         evidence: skillEvidence(skill, `${skill.path}/SKILL.md`),
         suggest: "Shorten the frontmatter name"
       }));
-    } else if (!isValidAgentSkillsName(name)) {
+    } else if (!isValidAgentSkillsName(name) && skill.sourceProvider !== "qwen") {
       out.push(make("agent-skills.skill.invalid-name", skillSubject(skill), {
         message: `Skill name "${name}" is not a valid Agent Skills identifier`,
         reason: "Name must be lowercase letters (any script), numbers, and hyphens, without a leading or trailing hyphen or consecutive hyphens. See docs/spec/agent-skills.md.",
@@ -9691,7 +10051,7 @@ function checkAgentSkillsFrontmatter(skill) {
         suggest: "Use a lowercase hyphenated name that matches the directory"
       }));
     }
-    if (name !== dirName && skill.sourceProvider !== "junie") {
+    if (name !== dirName && skill.sourceProvider !== "junie" && skill.sourceProvider !== "qwen" && skill.sourceProvider !== "factory") {
       out.push(make("agent-skills.skill.name-does-not-match-directory", skillSubject(skill), {
         message: `Skill name "${name}" does not match directory "${dirName}"`,
         reason: "The Agent Skills spec requires `name` to match the parent directory. See docs/spec/agent-skills.md.",
@@ -9819,7 +10179,7 @@ function checkLockIntegrity(facts, requireLock) {
     const inScope = projectSkills.filter((skill) => governingLockRoot(skillAbs(skill, facts), lockRoots) === root);
     const onDisk = new Set(inScope.map((skill) => skill.id));
     for (const entry of entries) {
-      if (onDisk.has(entry.id)) {
+      if (onDisk.has(entry.id) || entry.installedBesideLock === true) {
         continue;
       }
       const from = entry.source === undefined ? "" : ` (from ${entry.source})`;
@@ -9890,7 +10250,7 @@ function checkDescriptionBudget(facts, thresholds) {
     const subject = byRoot.size === 1 ? "skills:description-budget" : `skills:description-budget:${where}`;
     out.push(make("skill.description-budget", subject, {
       message: `Skill listing text totals ${chars} characters across ${skills.length} skills in ${where} (over ${ceiling}; per-entry cap ${perEntryCap})`,
-      reason: "Claude loads description (or the first markdown paragraph) plus when_to_use for every skill at listing time. That listing is 1% of the model context window, with an 8000-character fallback when the window is unknown, and each entry is truncated at 1536 characters. Past the budget, matching keywords are lost. See docs/spec/skills.md.",
+      reason: "Claude loads description (or the first non-empty markdown line) plus when_to_use for every skill at listing time. That listing is 1% of the model context window, with an 8000-character fallback when the window is unknown, and each entry is truncated at 1536 characters. Past the budget, matching keywords are lost. See docs/spec/skills.md.",
       evidence: [
         { kind: "count", value: `listingChars=${chars}` },
         { kind: "threshold", value: String(ceiling) }
@@ -9901,15 +10261,37 @@ function checkDescriptionBudget(facts, thresholds) {
   return out;
 }
 function listingText(skill) {
-  const description = skill.description ?? skill.firstMarkdownParagraph ?? "";
+  const description = skill.description ?? skill.firstNonEmptyLine ?? "";
   const when = skill.whenToUse ?? "";
   return `${description}${when}`;
 }
 
 // src/checks/index.ts
+var GLOBAL_COPY_TREES = [
+  "/.claude/plugins/cache/",
+  "/.claude/plugins/marketplaces/",
+  "/.claude-backups/",
+  "/.codex/plugins/",
+  "/.grok/installed-plugins/",
+  "/.cursor/plugins/"
+];
+function inGlobalCopyTree(path) {
+  const posix = toPosix(path);
+  return GLOBAL_COPY_TREES.some((tree) => posix.includes(tree));
+}
+function withoutGlobalCopies(facts) {
+  return {
+    ...facts,
+    rules: facts.rules?.filter((r) => r.sourceProvider !== "windsurf" || !inGlobalCopyTree(r.path)),
+    agents: facts.agents.filter((a) => !inGlobalCopyTree(a.path)),
+    mcp: facts.mcp.filter((m) => !inGlobalCopyTree(m.path)),
+    configErrors: facts.configErrors.filter((e) => e.kind !== "truncated" || !inGlobalCopyTree(e.path))
+  };
+}
 function runChecks(facts, config) {
+  const quiet = config.includeGlobal === true ? withoutGlobalCopies(facts) : facts;
   return [
-    ...checkConfigErrors(facts),
+    ...checkConfigErrors(quiet),
     ...checkHookEvents(facts),
     ...checkHooks(facts),
     ...checkSkillStructure(facts),
@@ -9918,8 +10300,9 @@ function runChecks(facts, config) {
     ...checkDescriptionBudget(facts, config.thresholds),
     ...checkAgents(facts),
     ...checkMcp(facts),
-    ...checkRules(facts),
-    ...runBudgets(facts, config.thresholds)
+    ...checkClaudeDesktopExtensions(facts),
+    ...checkRules(quiet),
+    ...runBudgets(quiet, config.thresholds)
   ];
 }
 
@@ -13789,8 +14172,8 @@ function loadConfig(root, configPath) {
 }
 
 // src/discover/extract.ts
-import { existsSync as existsSync7 } from "node:fs";
-import { join as join21 } from "node:path";
+import { existsSync as existsSync9 } from "node:fs";
+import { join as join25 } from "node:path";
 
 // src/discover/fs.ts
 import {
@@ -15609,6 +15992,10 @@ function isRealDirectory(path) {
 function errorDetail(err) {
   return err instanceof Error ? err.message : String(err);
 }
+function unreadableKind(err) {
+  const code = err instanceof Error ? err.code : undefined;
+  return code === "EACCES" || code === "EPERM" ? "permission-denied" : "unreadable";
+}
 function isEnoent(err) {
   return err instanceof Error && err.code === "ENOENT";
 }
@@ -15622,7 +16009,7 @@ function listDir(dir, io, opts = {}) {
     if (opts.optional === true && isEnoent(err)) {
       return;
     }
-    io.errors.push({ path: dir, kind: "unreadable", detail: opts.detail ?? errorDetail(err) });
+    io.errors.push({ path: dir, kind: unreadableKind(err), detail: opts.detail ?? errorDetail(err) });
     return;
   }
 }
@@ -15640,7 +16027,7 @@ function readCapped(path, cap, io, opts = {}) {
     if (opts.optional === true && isEnoent(err)) {
       return;
     }
-    io.errors.push({ path, kind: "unreadable", detail: errorDetail(err) });
+    io.errors.push({ path, kind: unreadableKind(err), detail: errorDetail(err) });
     return;
   }
   const truncated = buf.length > cap;
@@ -15699,7 +16086,7 @@ function parseConfigFile(path, errors) {
   try {
     text = readFileSync2(path, "utf8");
   } catch (err) {
-    errors.push({ path, kind: "unreadable", detail: errorDetail(err) });
+    errors.push({ path, kind: unreadableKind(err), detail: errorDetail(err) });
     return;
   }
   const format = configFormat(path);
@@ -15727,11 +16114,11 @@ function parseConfigFile(path, errors) {
 }
 
 // src/discover/index.ts
-import { homedir as homedir4 } from "node:os";
-import { dirname as dirname11, join as join20, resolve as resolve12 } from "node:path";
+import { homedir as homedir6 } from "node:os";
+import { dirname as dirname12, join as join24, resolve as resolve12 } from "node:path";
 
 // src/discover/agents.ts
-import { dirname as dirname6, join as join10 } from "node:path";
+import { dirname as dirname6, join as join11 } from "node:path";
 
 // src/discover/commandcode.ts
 import { existsSync as existsSync4 } from "node:fs";
@@ -15894,7 +16281,7 @@ function scriptCandidateFromArgv(argv, bases = {}) {
   return expandPlaceholder(candidate, bases);
 }
 function scriptCandidateFromLaunch(launch, bases = {}) {
-  if (launch.args.length === 0 && /\s/.test(launch.executable)) {
+  if (launch.args.length === 0 && /[\s"']/.test(launch.executable)) {
     const tokens = tokenize(launch.executable);
     return tokens === undefined ? undefined : scriptCandidateFromArgv(tokens, bases);
   }
@@ -16085,6 +16472,7 @@ var NESTED_DISCOVERY_SKIP = new Set([
   "coverage",
   "vendor"
 ]);
+var NESTED_DISCOVERY_SKIP_PATHS = ["/.local/share/containers"];
 function walkFiles(dir, opts, depth = 0) {
   const out = [];
   for (const entry of listDir(dir, opts.io, { optional: true }) ?? []) {
@@ -16093,6 +16481,9 @@ function walkFiles(dir, opts, depth = 0) {
     }
     const abs = join4(dir, entry.name);
     if (entry.isDirectory()) {
+      if (NESTED_DISCOVERY_SKIP_PATHS.some((tail) => toPosix(abs).endsWith(tail))) {
+        continue;
+      }
       if (depth >= opts.maxDepth) {
         continue;
       }
@@ -16156,39 +16547,39 @@ function commandFactsFromEntry(entry, root, hostPlatform = process.platform) {
 function isSecretNamedKey(key) {
   return SECRET_NAMED_KEY.test(key) || AUTH_HEADER_NAME.test(key);
 }
-function isLiteralCredentialValue(val) {
-  return typeof val === "string" && val.length > 0 && !INTERPOLATED.test(val);
+function isLiteralCredentialValue(val, interpolated) {
+  return typeof val === "string" && val.length > 0 && !interpolated.test(val);
 }
-function literalEnvKeysFrom(entry) {
+function literalEnvKeysFrom(entry, interpolated) {
   const env = entry.env;
   if (!isRecord(env)) {
     return [];
   }
   const keys = [];
   for (const [key, val] of Object.entries(env)) {
-    if (isLiteralCredentialValue(val) && SECRET_NAMED_KEY.test(key)) {
+    if (isLiteralCredentialValue(val, interpolated) && SECRET_NAMED_KEY.test(key)) {
       keys.push(key);
     }
   }
   return keys;
 }
-function literalFieldsFromMap(obj, prefix) {
+function literalFieldsFromMap(obj, prefix, interpolated) {
   if (!isRecord(obj)) {
     return [];
   }
   const fields = [];
   for (const [key, val] of Object.entries(obj)) {
-    if (isLiteralCredentialValue(val) && isSecretNamedKey(key)) {
+    if (isLiteralCredentialValue(val, interpolated) && isSecretNamedKey(key)) {
       fields.push(`${prefix}.${key}`);
     }
   }
   return fields;
 }
-function literalCredentialFieldsFrom(entry) {
+function literalCredentialFieldsFrom(entry, interpolated) {
   return [
-    ...literalFieldsFromMap(entry.headers, "headers"),
-    ...literalFieldsFromMap(entry.http_headers, "http_headers"),
-    ...literalFieldsFromMap(entry.auth, "auth")
+    ...literalFieldsFromMap(entry.headers, "headers", interpolated),
+    ...literalFieldsFromMap(entry.http_headers, "http_headers", interpolated),
+    ...literalFieldsFromMap(entry.auth, "auth", interpolated)
   ];
 }
 function looksLikeServerEntry(value, profile) {
@@ -16274,6 +16665,8 @@ function parseMcpServers(raw, filePath, root, io, profile) {
     let hasUrl = false;
     let hasServerUrl = false;
     let hasHttpUrl = false;
+    let extensionProvided = false;
+    let commandPathObject = false;
     let transport;
     let transportField;
     let literalEnvKeys = [];
@@ -16286,14 +16679,17 @@ function parseMcpServers(raw, filePath, root, io, profile) {
       hasUrl = typeof entry.url === "string" && entry.url.length > 0;
       hasServerUrl = typeof entry.serverUrl === "string" && entry.serverUrl.length > 0;
       hasHttpUrl = typeof entry.httpUrl === "string" && entry.httpUrl.length > 0;
+      commandPathObject = isRecord(entry.command) && typeof entry.command.path === "string";
+      extensionProvided = entry.command === undefined && entry.url === undefined && isRecord(entry.settings);
       const declared = transportFromEntry(entry);
       transport = declared.transport;
       transportField = declared.transportField;
       if (typeof entry.uses === "string" && entry.uses.length > 0) {
         uses = entry.uses;
       }
-      literalEnvKeys = literalEnvKeysFrom(entry);
-      literalCredentialFields = literalCredentialFieldsFrom(entry);
+      const interpolated = profile === "qwen-json" ? INTERPOLATED_NO_PERCENT : INTERPOLATED;
+      literalEnvKeys = literalEnvKeysFrom(entry, interpolated);
+      literalCredentialFields = literalCredentialFieldsFrom(entry, interpolated);
     }
     const launchKind = profile === "continue-yaml" && uses !== undefined ? "registry-reference" : commandVariants.some((variant) => variant.hasCommand) ? "command" : hasUrl || hasServerUrl || hasHttpUrl ? "url" : "no-launch";
     const variants = launchKind === "command" ? commandVariants.filter((variant) => variant.hasCommand) : [{ hasCommand: false }];
@@ -16312,6 +16708,8 @@ function parseMcpServers(raw, filePath, root, io, profile) {
         ...uses === undefined ? {} : { uses },
         ...hasServerUrl ? { hasServerUrl: true } : {},
         ...hasHttpUrl ? { hasHttpUrl: true } : {},
+        ...extensionProvided ? { extensionProvided: true } : {},
+        ...commandPathObject ? { commandPathObject: true } : {},
         ...variant.command === undefined ? {} : { command: variant.command },
         ...variant.commandExists === undefined ? {} : { commandExists: variant.commandExists },
         ...variant.cwd === undefined ? {} : { cwd: variant.cwd },
@@ -16527,6 +16925,10 @@ function parseProfiledMcpFile(filePath, root, io, profile, opts = {}) {
     reportRootShapeOnce(filePath, io, "MCP config root is not an object");
     return [];
   }
+  if (opts.serversKey !== undefined) {
+    const servers = raw[opts.serversKey];
+    return isRecord(servers) ? parseMcpServers({ mcpServers: servers }, filePath, root, io, profile) : [];
+  }
   if (opts.mcpServersOptional === true && !isRecord(raw.mcpServers)) {
     return [];
   }
@@ -16780,6 +17182,36 @@ function discoverNestedContinueMcp(root, io) {
   }
   return facts;
 }
+function discoverGooseUserMcp(root, io) {
+  const appData = process.env.APPDATA;
+  const dir = process.platform === "win32" && appData !== undefined && appData.length > 0 ? join5(appData, "Block", "goose", "config") : providerHome("goose");
+  const filePath = join5(dir, "config.yaml");
+  const raw = readConfigFile(filePath, io, { optional: true });
+  if (raw === undefined) {
+    return [];
+  }
+  if (!isRecord(raw)) {
+    reportRootShapeOnce(filePath, io, "Goose config root is not a mapping");
+    return [];
+  }
+  if (!isRecord(raw.extensions)) {
+    return [];
+  }
+  const servers = {};
+  for (const [id, ext] of Object.entries(raw.extensions)) {
+    if (!isRecord(ext) || ext.enabled === false) {
+      continue;
+    }
+    if (ext.type === "stdio" && typeof ext.cmd === "string" && ext.cmd.length > 0) {
+      servers[id] = { command: ext.cmd, args: ext.args, env: ext.envs };
+    } else if (ext.type === "streamable_http" && typeof ext.uri === "string" && ext.uri.length > 0) {
+      servers[id] = { url: ext.uri, headers: ext.headers };
+    } else if (ext.type === "sse") {
+      servers[id] = {};
+    }
+  }
+  return parseMcpServers({ mcpServers: servers }, filePath, root, io, "goose-yaml");
+}
 
 // src/discover/claude.ts
 import { basename as basename6, dirname as dirname4, join as join8, resolve as resolve6 } from "node:path";
@@ -17178,6 +17610,33 @@ function devinHookFromEntry(item, ctx) {
   }
   return [commandHook(baseFact(ctx), nonemptyString(item.command), ctx.bases.project)];
 }
+function qwenHookFromEntry(item, ctx) {
+  const typeRaw = typeof item.type === "string" ? item.type : undefined;
+  if (typeRaw === undefined || !QWEN_HOOK_HANDLER_TYPES.has(typeRaw)) {
+    return [baseFact(ctx, { defect: "unknown-handler-type", unknownHandlerType: unknownTypeLabel(item) })];
+  }
+  if (typeRaw === "http") {
+    return [
+      baseFact(ctx, {
+        handlerType: "http",
+        ...nonemptyString(item.url) === undefined ? { defect: "http-without-url" } : {}
+      })
+    ];
+  }
+  if (typeRaw === "prompt") {
+    return [baseFact(ctx, { handlerType: "prompt" })];
+  }
+  if (typeRaw === "function") {
+    return [baseFact(ctx)];
+  }
+  return commandFactsFromLaunches(ctx, item, "command-without-command");
+}
+function factoryHookFromEntry(item, ctx) {
+  if (item.type !== "command") {
+    return [baseFact(ctx, { defect: "unknown-handler-type", unknownHandlerType: unknownTypeLabel(item) })];
+  }
+  return [commandHook(baseFact(ctx), nonemptyString(item.command), ctx.bases.project)];
+}
 var ENTRY_READERS = {
   claude: claudeHookFromEntry,
   "vscode-native": vscodeNativeHookFromEntry,
@@ -17186,7 +17645,9 @@ var ENTRY_READERS = {
   grok: grokHookFromEntry,
   gemini: geminiHookFromEntry,
   devin: devinHookFromEntry,
-  codex: codexHookFromEntry
+  codex: codexHookFromEntry,
+  qwen: qwenHookFromEntry,
+  factory: factoryHookFromEntry
 };
 function isPipedProfile(profile) {
   const layout = HOOK_PROFILES[profile].layout;
@@ -17382,6 +17843,9 @@ function discoverCopilotUserSettingsHooks(io) {
 function discoverGrokHooks(dir, projectRoot, io) {
   return hookJsonFiles(dir, io).flatMap((filePath) => readHooksFile(filePath, { source: "grok-hooks", sourceProvider: "grok", profile: "grok" }, { project: projectRoot, own: dir }, io));
 }
+function discoverQwenHooksFile(filePath, projectRoot, io) {
+  return readHooksFile(filePath, { source: "qwen-settings", sourceProvider: "qwen", profile: "qwen" }, { project: projectRoot }, io);
+}
 
 // src/discover/scan-context.ts
 import { existsSync as existsSync3 } from "node:fs";
@@ -17411,7 +17875,7 @@ function hasWorkspaceMarker(dir) {
   return WORKSPACE_MARKERS.some((name) => existsSync3(join7(dir, name)));
 }
 var SCAN_ROOT_MARKER = ".agentscan-root";
-function resolveScanContext(startDir) {
+function resolveScanContext(startDir, opts = {}) {
   const requestedDir = resolve5(startDir);
   let dir = requestedDir;
   let nearestSignal;
@@ -17441,6 +17905,15 @@ function resolveScanContext(startDir) {
     dir = parent;
   }
   const projectRoot = nearer(requestedDir, nearestSignal, nearestWorkspace) ?? nearestGit;
+  if (projectRoot === undefined && opts.allowNoProject === true) {
+    return {
+      startDir: requestedDir,
+      workspaceBoundary: undefined,
+      repositoryBoundary: undefined,
+      scanBoundary: requestedDir,
+      root: requestedDir
+    };
+  }
   if (projectRoot === undefined) {
     throw new Error(`No package.json or agent configuration found walking up from ${requestedDir}`);
   }
@@ -18042,6 +18515,75 @@ function applyCommandcodeSkillPrecedence(skills, ctx) {
   applyPrecedence(skills, (skill) => skill.id, (skill) => rankIn(table, (dir) => isInside(resolve7(skill.path), dir)));
 }
 
+// src/discover/factory.ts
+import { existsSync as existsSync5 } from "node:fs";
+import { join as join10 } from "node:path";
+function standaloneHooks(filePath, projectRoot, io, unwrap) {
+  const doc = readHooksDocument(filePath, io);
+  if (doc === undefined) {
+    return [];
+  }
+  return hooksFromObject(unwrap && isRecord(doc.hooks) ? doc.hooks : doc, filePath, "factory-hooks", { project: projectRoot }, io, {
+    sourceProvider: "factory",
+    schemaProfile: "factory"
+  });
+}
+function factoryHooks(factoryDir, projectRoot, io, legacy) {
+  const files = [join10(factoryDir, "hooks.json"), ...legacy ? [join10(factoryDir, "hooks", "hooks.json")] : []];
+  if (!files.some((file) => existsSync5(file))) {
+    if (legacy)
+      return [];
+    return readHooksFile(join10(factoryDir, "settings.json"), { source: "settings", sourceProvider: "factory", profile: "factory" }, { project: projectRoot }, io);
+  }
+  return files.flatMap((file, index) => standaloneHooks(file, projectRoot, io, index > 0));
+}
+function factoryMcp(factoryDir, projectRoot, io) {
+  return parseProfiledMcpFile(join10(factoryDir, "mcp.json"), projectRoot, io, "factory-json", { optional: true });
+}
+function discoverFactoryProject(dir, io) {
+  const root = join10(dir, ".factory");
+  return { hooks: factoryHooks(root, dir, io, true), mcp: factoryMcp(root, dir, io) };
+}
+function discoverFactoryUser(projectRoot, io) {
+  const home = providerHome("factory");
+  return { hooks: factoryHooks(home, projectRoot, io, false), mcp: factoryMcp(home, projectRoot, io) };
+}
+function discoverFactoryDroidsDir(dir, io) {
+  const facts = [];
+  for (const { name } of listDir(dir, io, { optional: true }) ?? []) {
+    const filePath = join10(dir, name);
+    if (name.startsWith(".") || !name.endsWith(".md") || !isFile(filePath)) {
+      continue;
+    }
+    const fm = readFrontmatter(filePath, io);
+    const fact = {
+      name: fm.name ?? name.slice(0, -".md".length),
+      path: filePath,
+      sourceProvider: "factory",
+      namespace: dir,
+      nameSource: fm.name === undefined ? "filename" : "frontmatter",
+      hasFrontmatter: fm.hasFrontmatter
+    };
+    if (fm.unreadable === true || fm.unparseable === true) {
+      fact.unreadable = true;
+      facts.push(fact);
+      continue;
+    }
+    const defects = [];
+    if (fm.name === undefined || !FACTORY_DROID_NAME.test(fm.name)) {
+      defects.push("invalid-name");
+    }
+    if ((fm.body ?? "").trim().length === 0) {
+      defects.push("empty-body");
+    }
+    if (defects.length > 0) {
+      fact.factoryDroidDefects = defects;
+    }
+    facts.push(fact);
+  }
+  return facts;
+}
+
 // src/discover/agents.ts
 function agentFiles(dir, io) {
   const out = [];
@@ -18050,7 +18592,7 @@ function agentFiles(dir, io) {
       continue;
     }
     if (entry.endsWith("/")) {
-      out.push(...agentFiles(join10(dir, entry.slice(0, -1)), io).map((p) => join10(entry.slice(0, -1), p)));
+      out.push(...agentFiles(join11(dir, entry.slice(0, -1)), io).map((p) => join11(entry.slice(0, -1), p)));
       continue;
     }
     out.push(entry);
@@ -18098,7 +18640,7 @@ function discoverClaudeAgentsDir(dir, root, io, includeFrontmatterHooks = true)
     if (!name.endsWith(".md")) {
       continue;
     }
-    const filePath = join10(dir, name);
+    const filePath = join11(dir, name);
     if (!isFile(filePath)) {
       continue;
     }
@@ -18107,7 +18649,7 @@ function discoverClaudeAgentsDir(dir, root, io, includeFrontmatterHooks = true)
   return facts;
 }
 function discoverVscodeAgents(root, io) {
-  const dir = join10(root, ".github", "agents");
+  const dir = join11(root, ".github", "agents");
   const facts = [];
   for (const { name } of listDir(dir, io, { optional: true }) ?? []) {
     if (name.startsWith(".")) {
@@ -18116,7 +18658,7 @@ function discoverVscodeAgents(root, io) {
     if (!name.endsWith(".agent.md") && !name.endsWith(".md")) {
       continue;
     }
-    const filePath = join10(dir, name);
+    const filePath = join11(dir, name);
     if (!isFile(filePath)) {
       continue;
     }
@@ -18197,7 +18739,7 @@ function discoverKiroAgentsDir(dir, io) {
     if (name === undefined) {
       continue;
     }
-    const filePath = join10(dir, rel);
+    const filePath = join11(dir, rel);
     if (!isFile(filePath)) {
       continue;
     }
@@ -18221,29 +18763,84 @@ function shadowFartherKiroAgents(pending) {
     return item.fact;
   });
 }
+var CODEX_AGENT_REQUIRED = ["name", "description", "developer_instructions"];
+function discoverCodexAgentsDir(dir, io) {
+  const facts = [];
+  for (const entry of listDir(dir, io, { optional: true }) ?? []) {
+    if (entry.name.startsWith(".") || !entry.name.endsWith(".toml")) {
+      continue;
+    }
+    const filePath = join11(dir, entry.name);
+    if (!isFile(filePath)) {
+      continue;
+    }
+    const fact = {
+      name: entry.name.slice(0, -".toml".length),
+      path: filePath,
+      sourceProvider: "codex",
+      namespace: dir,
+      nameSource: "filename",
+      hasFrontmatter: false
+    };
+    const value = readConfigFile(filePath, io);
+    if (value === undefined) {
+      fact.unreadable = true;
+    } else if (!isRecord(value)) {
+      reportRootShapeOnce(filePath, io, "Codex agent root is not a table");
+      fact.unreadable = true;
+    } else {
+      if (typeof value.name === "string") {
+        fact.name = value.name;
+        fact.nameSource = "frontmatter";
+      }
+      const missing = CODEX_AGENT_REQUIRED.filter((key) => typeof value[key] !== "string");
+      if (missing.length > 0) {
+        fact.codexMissingFields = missing;
+      }
+    }
+    facts.push(fact);
+  }
+  return facts;
+}
 function discoverAgents(root, io, startDir = root, includeGlobal = false, commandcodeProjectRoot = root) {
   const facts = [];
   const kiroPending = [];
   const seenDirs = new Set;
   const ancestors = ancestorDirsInclusive(startDir, root);
   for (const [hop, dir] of ancestors.entries()) {
-    const agentsDir = join10(dir, ".claude", "agents");
+    const agentsDir = join11(dir, ".claude", "agents");
     if (!seenDirs.has(agentsDir)) {
       seenDirs.add(agentsDir);
       facts.push(...discoverClaudeAgentsDir(agentsDir, root, io));
       facts.push(...discoverVscodeAgents(dir, io));
     }
-    for (const fact of discoverKiroAgentsDir(join10(dir, ".kiro", "agents"), io)) {
+    for (const fact of discoverKiroAgentsDir(join11(dir, ".kiro", "agents"), io)) {
       kiroPending.push({ fact, hops: hop });
     }
+    facts.push(...discoverCodexAgentsDir(join11(dir, ".codex", "agents"), io));
+    facts.push(...discoverFactoryDroidsDir(join11(dir, ".factory", "droids"), io));
   }
   facts.push(...discoverCommandcodeAgents(commandcodeProjectRoot, includeGlobal, io));
   if (includeGlobal) {
-    facts.push(...discoverClaudeAgentsDir(join10(providerHome("claude"), "agents"), root, io));
-    for (const fact of discoverKiroAgentsDir(join10(providerHome("kiro"), "agents"), io)) {
-      kiroPending.push({ fact, hops: KIRO_GLOBAL_HOPS });
+    const claudeGlobal = join11(providerHome("claude"), "agents");
+    if (!seenDirs.has(claudeGlobal)) {
+      facts.push(...discoverClaudeAgentsDir(claudeGlobal, root, io));
+    }
+    const codexGlobal = join11(providerHome("codex"), "agents");
+    if (!ancestors.some((dir) => join11(dir, ".codex", "agents") === codexGlobal)) {
+      facts.push(...discoverCodexAgentsDir(codexGlobal, io));
+    }
+    const kiroGlobal = join11(providerHome("kiro"), "agents");
+    if (!ancestors.some((dir) => join11(dir, ".kiro", "agents") === kiroGlobal)) {
+      for (const fact of discoverKiroAgentsDir(kiroGlobal, io)) {
+        kiroPending.push({ fact, hops: KIRO_GLOBAL_HOPS });
+      }
     }
   }
+  const factoryGlobal = join11(providerHome("factory"), "droids");
+  if (includeGlobal && !ancestors.some((dir) => join11(dir, ".factory", "droids") === factoryGlobal)) {
+    facts.push(...discoverFactoryDroidsDir(factoryGlobal, io));
+  }
   facts.push(...shadowFartherKiroAgents(kiroPending));
   return facts;
 }
@@ -18333,10 +18930,10 @@ function handlerFact(event, item, filePath, projectRoot) {
 }
 
 // src/discover/codex.ts
-import { isAbsolute as isAbsolute6, join as join11 } from "node:path";
+import { isAbsolute as isAbsolute6, join as join12 } from "node:path";
 function discoverCodexUserMcp(io) {
   const home = providerHome("codex");
-  return parseCodexTomlFile(join11(home, "config.toml"), home, io, { optional: true });
+  return parseCodexTomlFile(join12(home, "config.toml"), home, io, { optional: true });
 }
 var CODEX_PROJECT_DOC_MAX_BYTES = 32768;
 function readCodexProjectConfig(dirs, mcpPaths, io) {
@@ -18344,7 +18941,7 @@ function readCodexProjectConfig(dirs, mcpPaths, io) {
   for (const dir of dirs) {
     const inDir = {};
     for (const rel of mcpPaths) {
-      const filePath = isAbsolute6(rel) ? rel : join11(dir, rel);
+      const filePath = isAbsolute6(rel) ? rel : join12(dir, rel);
       if (mcpProfileFromPath(filePath) !== "codex-toml") {
         continue;
       }
@@ -18383,12 +18980,12 @@ var CODEX_HOOKS_FILE = {
 };
 function discoverCodexHookFiles(dir, projectRoot, io) {
   return [
-    ...readHooksFile(join11(dir, "hooks.json"), CODEX_HOOKS_FILE, { project: projectRoot }, io),
-    ...hooksFromCodexToml(join11(dir, "config.toml"), projectRoot, io)
+    ...readHooksFile(join12(dir, "hooks.json"), CODEX_HOOKS_FILE, { project: projectRoot }, io),
+    ...hooksFromCodexToml(join12(dir, "config.toml"), projectRoot, io)
   ];
 }
 function discoverCodexProjectHooks(dir, io) {
-  return discoverCodexHookFiles(join11(dir, ".codex"), dir, io);
+  return discoverCodexHookFiles(join12(dir, ".codex"), dir, io);
 }
 function discoverCodexUserHooks(projectRoot, io) {
   return discoverCodexHookFiles(providerHome("codex"), projectRoot, io);
@@ -18405,7 +19002,8 @@ function hooksFromCodexToml(filePath, projectRoot, io) {
   if (raw.hooks === undefined) {
     return [];
   }
-  return hooksFromObject(raw.hooks, filePath, "codex-hooks", { project: projectRoot }, io, {
+  const hooks = isRecord(raw.hooks) ? Object.fromEntries(Object.entries(raw.hooks).filter(([key]) => key !== "state")) : raw.hooks;
+  return hooksFromObject(hooks, filePath, "codex-hooks", { project: projectRoot }, io, {
     sourceProvider: "codex",
     schemaProfile: "codex"
   });
@@ -18418,7 +19016,7 @@ function stringArray(value) {
 }
 
 // src/discover/cursor.ts
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 function discoverCursorHooksFile(filePath, projectRoot, io) {
   return readFlatHooks(filePath, "cursor", io, (item, base) => {
     if (!isRecord(item)) {
@@ -18438,11 +19036,11 @@ function discoverCursorHooksFile(filePath, projectRoot, io) {
   });
 }
 function discoverCursorUserMcp(projectRoot, io) {
-  return parseMcpFile(join12(providerHome("cursor"), "mcp.json"), projectRoot, io, { optional: true });
+  return parseMcpFile(join13(providerHome("cursor"), "mcp.json"), projectRoot, io, { optional: true });
 }
 
 // src/discover/devin.ts
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 var SETTINGS_HOOKS = {
   source: "settings",
   sourceProvider: "devin",
@@ -18460,29 +19058,29 @@ function discoverDevinSettingsHooks(filePath, projectRoot, io) {
 }
 function discoverDevinMcpFiles(dir, projectRoot, io) {
   return [
-    ...parseProfiledMcpFile(join13(dir, "config.json"), projectRoot, io, "devin-json", {
+    ...parseProfiledMcpFile(join14(dir, "config.json"), projectRoot, io, "devin-json", {
       optional: true,
       mcpServersOptional: true
     }),
-    ...parseProfiledMcpFile(join13(dir, "config.local.json"), projectRoot, io, "devin-json", {
+    ...parseProfiledMcpFile(join14(dir, "config.local.json"), projectRoot, io, "devin-json", {
       optional: true,
       mcpServersOptional: true
     }),
-    ...parseProfiledMcpFile(join13(dir, "mcp_config.json"), projectRoot, io, "devin-json", {
+    ...parseProfiledMcpFile(join14(dir, "mcp_config.json"), projectRoot, io, "devin-json", {
       optional: true
     }),
-    ...parseProfiledMcpFile(join13(dir, "mcp_config.local.json"), projectRoot, io, "devin-json", {
+    ...parseProfiledMcpFile(join14(dir, "mcp_config.local.json"), projectRoot, io, "devin-json", {
       optional: true
     })
   ];
 }
 function discoverDevinProject(dir, io) {
-  const root = join13(dir, ".devin");
+  const root = join14(dir, ".devin");
   return {
     hooks: [
-      ...discoverDevinV1Hooks(join13(root, "hooks.v1.json"), dir, io),
-      ...discoverDevinSettingsHooks(join13(root, "config.json"), dir, io),
-      ...discoverDevinSettingsHooks(join13(root, "config.local.json"), dir, io)
+      ...discoverDevinV1Hooks(join14(root, "hooks.v1.json"), dir, io),
+      ...discoverDevinSettingsHooks(join14(root, "config.json"), dir, io),
+      ...discoverDevinSettingsHooks(join14(root, "config.local.json"), dir, io)
     ],
     mcp: discoverDevinMcpFiles(root, dir, io)
   };
@@ -18490,7 +19088,7 @@ function discoverDevinProject(dir, io) {
 function discoverDevinUser(projectRoot, io) {
   const home = providerHome("devin");
   return {
-    hooks: discoverDevinSettingsHooks(join13(home, "config.json"), projectRoot, io),
+    hooks: discoverDevinSettingsHooks(join14(home, "config.json"), projectRoot, io),
     mcp: discoverDevinMcpFiles(home, projectRoot, io)
   };
 }
@@ -18547,13 +19145,13 @@ function discoverKiroHooksFile(filePath, projectRoot, io) {
 }
 
 // src/discover/grok.ts
-import { dirname as dirname7, join as join14, resolve as resolve8 } from "node:path";
+import { dirname as dirname7, join as join15, resolve as resolve8 } from "node:path";
 function discoverGrokUserMcp(io) {
   const home = providerHome("grok");
-  return parseGrokTomlFile(join14(home, "config.toml"), home, io, { optional: true });
+  return parseGrokTomlFile(join15(home, "config.toml"), home, io, { optional: true });
 }
 function applyGrokMcpPrecedence(mcp, startDir) {
-  const userFile = resolve8(join14(providerHome("grok"), "config.toml"));
+  const userFile = resolve8(join15(providerHome("grok"), "config.toml"));
   applyPrecedence(mcp, (entry) => entry.name, (entry) => entry.schemaProfile === "grok-toml" ? grokMcpScore(entry, startDir, userFile) : undefined);
 }
 function grokMcpScore(entry, startDir, userFile) {
@@ -18565,11 +19163,11 @@ function grokMcpScore(entry, startDir, userFile) {
 }
 
 // src/discover/plugins.ts
-import { existsSync as existsSync5 } from "node:fs";
-import { join as join16, resolve as resolve10 } from "node:path";
+import { existsSync as existsSync6 } from "node:fs";
+import { join as join17, resolve as resolve10 } from "node:path";
 
 // src/discover/skills.ts
-import { basename as basename8, join as join15, resolve as resolve9 } from "node:path";
+import { basename as basename8, dirname as dirname8, join as join16, resolve as resolve9 } from "node:path";
 var BUNDLED = "scripts|references|assets|templates|examples";
 var REFERENCE_RE = new RegExp(`(?<![\\w/.-])(?:\\./)?((?:${BUNDLED})/[A-Za-z0-9_./-]+\\.[A-Za-z0-9]{1,10})(?![A-Za-z0-9_.-])`, "g");
 var FENCE_BLOCK = /^[ \t]*(`{3,}|~{3,})[^\n]*\n[\s\S]*?(?:^[ \t]*\1[ \t]*$|(?![\s\S]))/gm;
@@ -18589,28 +19187,36 @@ function skillReferences(body) {
   }
   return out;
 }
-function firstMarkdownParagraph(body) {
-  const blocks = body.replace(/\r\n/g, `
-`).trim().split(/\n\s*\n/);
-  for (const block of blocks) {
-    const lines = block.split(`
-`).filter((line) => !/^#{1,6}\s/.test(line.trim()));
-    const text = lines.map((line) => line.trim()).filter((line) => line.length > 0).join(" ");
-    if (text.length > 0) {
-      return text;
+function firstNonEmptyLine(body) {
+  return body.split(/\r?\n/).map((line) => line.trim()).find((line) => line.length > 0);
+}
+function inNamedSibling(body, skillDir, rel) {
+  const needle = `\`${rel}\``;
+  for (let at = body.indexOf(needle);at !== -1; at = body.indexOf(needle, at + needle.length)) {
+    const before = body.slice(0, at);
+    const start = Math.max(before.lastIndexOf("."), before.search(/\n\s*\n(?![\s\S]*\n\s*\n)/));
+    for (const match of before.slice(start + 1).matchAll(/`([a-z0-9][a-z0-9-]*)`/g)) {
+      const sibling = match[1];
+      if (sibling !== undefined && isFile(join16(dirname8(skillDir), sibling, rel))) {
+        return true;
+      }
     }
   }
-  return;
+  return false;
 }
 function brokenReferences(body, skillDir, root, skillRootOnly) {
   return skillReferences(body).filter((rel) => {
-    if (isFile(join15(skillDir, rel))) {
+    if (isFile(join16(skillDir, rel)) || inNamedSibling(body, skillDir, rel)) {
       return false;
     }
     if (skillRootOnly) {
       return true;
     }
-    return !isFile(join15(root, rel));
+    if (isFile(join16(root, rel))) {
+      return false;
+    }
+    const marker = skillsMarker(skillDir)?.root;
+    return marker === undefined || !isFile(join16(dirname8(dirname8(marker)), rel));
   });
 }
 function findSkillMdDirs(dir, io, depth = 0) {
@@ -18618,7 +19224,7 @@ function findSkillMdDirs(dir, io, depth = 0) {
   if (names === undefined) {
     return [];
   }
-  if (isFile(join15(dir, "SKILL.md"))) {
+  if (isFile(join16(dir, "SKILL.md"))) {
     return [dir];
   }
   if (depth >= NESTED_DISCOVERY_MAX_DEPTH) {
@@ -18629,7 +19235,7 @@ function findSkillMdDirs(dir, io, depth = 0) {
     if (name.startsWith(".") || NESTED_DISCOVERY_SKIP.has(name)) {
       continue;
     }
-    const child = join15(dir, name);
+    const child = join16(dir, name);
     if (!isRealDirectory(child)) {
       continue;
     }
@@ -18688,7 +19294,7 @@ function applyAgentSkillsOptionalFields(fact, fields) {
 function skillFactFromDir(skillDir, source, skillsRoot, io, root, opts) {
   const sourceProvider = opts.provider ?? providerFromSkillsDir(skillsRoot);
   const schemaProfile = opts.profile ?? skillSchemaFor(sourceProvider);
-  const skillMd = join15(skillDir, "SKILL.md");
+  const skillMd = join16(skillDir, "SKILL.md");
   const fm = opts.hasSkillMd ? readFrontmatter(skillMd, io) : { hasFrontmatter: false };
   const fact = {
     id: basename8(skillDir),
@@ -18710,9 +19316,9 @@ function skillFactFromDir(skillDir, source, skillsRoot, io, root, opts) {
     if (broken.length > 0) {
       fact.brokenReferences = broken;
     }
-    const paragraph = firstMarkdownParagraph(fm.body);
-    if (paragraph !== undefined) {
-      fact.firstMarkdownParagraph = paragraph;
+    const firstLine = firstNonEmptyLine(fm.body);
+    if (firstLine !== undefined) {
+      fact.firstNonEmptyLine = firstLine;
     }
   }
   if (fm.lineCount !== undefined) {
@@ -18748,7 +19354,7 @@ function skillFactFromDir(skillDir, source, skillsRoot, io, root, opts) {
   return fact;
 }
 function discoverSkillAtDir(skillDir, source, io, root, provider) {
-  const skillMd = join15(skillDir, "SKILL.md");
+  const skillMd = join16(skillDir, "SKILL.md");
   if (!isFile(skillMd)) {
     return;
   }
@@ -18765,7 +19371,7 @@ function discoverSkillsInDir(dir, source, io, root, provider, profile) {
     if (name.startsWith(".") || NESTED_DISCOVERY_SKIP.has(name)) {
       continue;
     }
-    const child = join15(dir, name);
+    const child = join16(dir, name);
     if (!isRealDirectory(child)) {
       continue;
     }
@@ -18795,7 +19401,7 @@ function discoverNestedClaudeSkills(root, configuredRoots, io, options = {}) {
     for (const entry of entries) {
       if (!entry.isDirectory() || entry.name !== "skills")
         continue;
-      const child = join15(dir, entry.name);
+      const child = join16(dir, entry.name);
       if (configuredRoots.has(resolve9(child)))
         continue;
       out.push(...discoverSkillsInDir(child, "project", io, root));
@@ -18810,7 +19416,7 @@ function discoverNestedClaudeSkills(root, configuredRoots, io, options = {}) {
         continue;
       if (entry.name.startsWith(".") && !SKILL_DOT_DIRS.has(entry.name))
         continue;
-      const child = join15(dir, entry.name);
+      const child = join16(dir, entry.name);
       if (SKILL_DOT_DIRS.has(entry.name)) {
         inspectSkillsParent(child);
         continue;
@@ -18838,7 +19444,7 @@ function disambiguateSkills(skills, root) {
 // src/discover/plugins.ts
 function findPluginRoots(root, io) {
   const found = [];
-  if (existsSync5(join16(root, "hooks", "hooks.json"))) {
+  if (existsSync6(join17(root, "hooks", "hooks.json"))) {
     found.push(root);
   }
   const walk = (dir, depth) => {
@@ -18850,8 +19456,8 @@ function findPluginRoots(root, io) {
       if (entry.name.startsWith(".") && entry.name !== ".claude") {
         continue;
       }
-      const child = join16(dir, entry.name);
-      if (existsSync5(join16(child, ".claude-plugin", "plugin.json"))) {
+      const child = join17(dir, entry.name);
+      if (existsSync6(join17(child, ".claude-plugin", "plugin.json"))) {
         found.push(child);
         continue;
       }
@@ -18867,7 +19473,7 @@ function findPluginRoots(root, io) {
 function discoverPluginHooks(root, io, pluginRoots) {
   const facts = [];
   for (const pluginRoot of pluginRoots) {
-    facts.push(...readHooksFile(join16(pluginRoot, "hooks", "hooks.json"), { source: "plugin", sourceProvider: "claude", profile: "claude" }, { project: root, plugin: pluginRoot, own: pluginRoot }, io));
+    facts.push(...readHooksFile(join17(pluginRoot, "hooks", "hooks.json"), { source: "plugin", sourceProvider: "claude", profile: "claude" }, { project: root, plugin: pluginRoot, own: pluginRoot }, io));
   }
   return facts;
 }
@@ -18877,25 +19483,25 @@ function discoverPluginSurfaces(root, io, configuredSkillRoots, pluginRoots) {
   const mcp = [];
   const commands = [];
   for (const pluginRoot of pluginRoots) {
-    const skillsDir = resolve10(join16(pluginRoot, "skills"));
+    const skillsDir = resolve10(join17(pluginRoot, "skills"));
     if (!configuredSkillRoots.has(skillsDir)) {
       configuredSkillRoots.add(skillsDir);
-      skills.push(...discoverSkillsInDir(join16(pluginRoot, "skills"), "project", io, root, "claude"));
+      skills.push(...discoverSkillsInDir(join17(pluginRoot, "skills"), "project", io, root, "claude"));
     }
     const rootSkill = discoverSkillAtDir(pluginRoot, "project", io, root, "claude");
     if (rootSkill !== undefined) {
       skills.push(rootSkill);
     }
-    agents.push(...discoverClaudeAgentsDir(join16(pluginRoot, "agents"), root, io, false));
-    commands.push(...discoverClaudeCommandsInDir(join16(pluginRoot, "commands"), "project", root, io));
-    mcp.push(...parseClaudePluginMcpFile(join16(pluginRoot, ".mcp.json"), root, io));
+    agents.push(...discoverClaudeAgentsDir(join17(pluginRoot, "agents"), root, io, false));
+    commands.push(...discoverClaudeCommandsInDir(join17(pluginRoot, "commands"), "project", root, io));
+    mcp.push(...parseClaudePluginMcpFile(join17(pluginRoot, ".mcp.json"), root, io));
   }
   return { skills, agents, mcp, commands };
 }
 
 // src/discover/policy.ts
-import { existsSync as existsSync6 } from "node:fs";
-import { basename as basename9, dirname as dirname8, join as join17, resolve as resolve11 } from "node:path";
+import { existsSync as existsSync7 } from "node:fs";
+import { basename as basename9, dirname as dirname9, join as join18, resolve as resolve11 } from "node:path";
 function readPolicyFile(filePath, io, meta) {
   const result = readCapped(filePath, POLICY_CAP, io, { optional: true });
   if (result === undefined) {
@@ -18906,7 +19512,7 @@ function readPolicyFile(filePath, io, meta) {
     text: result.text,
     sourceProvider: meta.sourceProvider,
     kind: meta.kind,
-    hopsFromStart: hops(meta.startDir, meta.hopsDir ?? dirname8(filePath))
+    hopsFromStart: hops(meta.startDir, meta.hopsDir ?? dirname9(filePath))
   };
 }
 function addUnique(out, seen, fact) {
@@ -18928,7 +19534,7 @@ function resolveCodexProjectRoot(startDir, scanBoundary, markers) {
   }
   const names = markers ?? [".git"];
   for (const dir of ancestorDirsInclusive(start, boundary)) {
-    if (names.some((name) => existsSync6(join17(dir, name)))) {
+    if (names.some((name) => existsSync7(join18(dir, name)))) {
       return dir;
     }
   }
@@ -18953,7 +19559,7 @@ function codexInstructionChain(files, startDir, codexRoot, fallbacks) {
     if (!isAgentsMdPolicy(policy) && !isFallbackPolicy(policy, fallbacks)) {
       return false;
     }
-    const dir = resolve11(dirname8(policy.path));
+    const dir = resolve11(dirname9(policy.path));
     if (basename9(dir) === ".commandcode" && basename9(policy.path) === "AGENTS.md") {
       return false;
     }
@@ -18961,7 +19567,7 @@ function codexInstructionChain(files, startDir, codexRoot, fallbacks) {
   });
   const byDir = new Map;
   for (const policy of onChain) {
-    const dir = resolve11(dirname8(policy.path));
+    const dir = resolve11(dirname9(policy.path));
     const bucket = byDir.get(dir);
     if (bucket === undefined) {
       byDir.set(dir, [policy]);
@@ -19002,7 +19608,7 @@ function pickCodexFile(group, fallbacks) {
   return;
 }
 function isCommandcodeMemoryFallback(abs) {
-  return basename9(abs) === "AGENTS.md" && basename9(dirname8(abs)) === ".commandcode";
+  return basename9(abs) === "AGENTS.md" && basename9(dirname9(abs)) === ".commandcode";
 }
 function discoverPolicyFiles(root, policyFiles, io, startDir = root, includeGlobal = false, fallbackFilenames = []) {
   const out = [];
@@ -19011,38 +19617,38 @@ function discoverPolicyFiles(root, policyFiles, io, startDir = root, includeGlob
   for (const rel of policyFiles) {
     const kind = basename9(rel) === "CLAUDE.md" || basename9(rel) === "CLAUDE.local.md" ? "claude-md" : basename9(rel).endsWith(".instructions.md") || basename9(rel) === "copilot-instructions.md" ? "vscode-instructions" : "agents-md";
     const sourceProvider = kind === "claude-md" ? "claude" : kind === "vscode-instructions" ? "vscode" : "unknown";
-    addUnique(out, seen, readPolicyFile(join17(root, rel), io, { sourceProvider, kind, startDir: start }));
+    addUnique(out, seen, readPolicyFile(join18(root, rel), io, { sourceProvider, kind, startDir: start }));
   }
   for (const dir of ancestorDirsInclusive(start, root)) {
-    addUnique(out, seen, readPolicyFile(join17(dir, "AGENTS.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(dir, "AGENTS.md"), io, {
       sourceProvider: "unknown",
       kind: "agents-md",
       startDir: start
     }));
-    addUnique(out, seen, readPolicyFile(join17(dir, "agents.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(dir, "agents.md"), io, {
       sourceProvider: "unknown",
       kind: "agents-md",
       startDir: start
     }));
-    addUnique(out, seen, readPolicyFile(join17(dir, "Agents.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(dir, "Agents.md"), io, {
       sourceProvider: "grok",
       kind: "agents-md",
       startDir: start
     }));
-    addUnique(out, seen, readPolicyFile(join17(dir, "AGENT.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(dir, "AGENT.md"), io, {
       sourceProvider: "grok",
       kind: "agents-md",
       startDir: start
     }));
-    if (!existsSync6(join17(dir, "AGENTS.md"))) {
-      addUnique(out, seen, readPolicyFile(join17(dir, ".commandcode", "AGENTS.md"), io, {
+    if (!existsSync7(join18(dir, "AGENTS.md"))) {
+      addUnique(out, seen, readPolicyFile(join18(dir, ".commandcode", "AGENTS.md"), io, {
         sourceProvider: "commandcode",
         kind: "agents-md",
         startDir: start,
         hopsDir: dir
       }));
     }
-    addUnique(out, seen, readPolicyFile(join17(dir, "AGENTS.override.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(dir, "AGENTS.override.md"), io, {
       sourceProvider: "codex",
       kind: "agents-md",
       startDir: start
@@ -19051,23 +19657,23 @@ function discoverPolicyFiles(root, policyFiles, io, startDir = root, includeGlob
       if (name === "AGENTS.md" || name === "AGENTS.override.md" || basename9(name) !== name) {
         continue;
       }
-      addUnique(out, seen, readPolicyFile(join17(dir, name), io, {
+      addUnique(out, seen, readPolicyFile(join18(dir, name), io, {
         sourceProvider: "codex",
         kind: "agents-md",
         startDir: start
       }));
     }
-    addUnique(out, seen, readPolicyFile(join17(dir, "CLAUDE.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(dir, "CLAUDE.md"), io, {
       sourceProvider: "claude",
       kind: "claude-md",
       startDir: start
     }));
-    addUnique(out, seen, readPolicyFile(join17(dir, ".claude", "CLAUDE.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(dir, ".claude", "CLAUDE.md"), io, {
       sourceProvider: "claude",
       kind: "claude-md",
       startDir: start
     }));
-    addUnique(out, seen, readPolicyFile(join17(dir, "CLAUDE.local.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(dir, "CLAUDE.local.md"), io, {
       sourceProvider: "claude",
       kind: "claude-md",
       startDir: start
@@ -19082,8 +19688,8 @@ function discoverPolicyFiles(root, policyFiles, io, startDir = root, includeGlob
       if (name !== "AGENTS.md") {
         return false;
       }
-      if (basename9(dirname8(abs)) === ".commandcode") {
-        return !existsSync6(join17(dirname8(dirname8(abs)), "AGENTS.md"));
+      if (basename9(dirname9(abs)) === ".commandcode") {
+        return !existsSync7(join18(dirname9(dirname9(abs)), "AGENTS.md"));
       }
       return true;
     },
@@ -19094,15 +19700,15 @@ function discoverPolicyFiles(root, policyFiles, io, startDir = root, includeGlob
       sourceProvider: commandcodeMemory ? "commandcode" : basename9(abs) === "AGENTS.override.md" ? "codex" : basename9(abs) === "Agents.md" || basename9(abs) === "AGENT.md" ? "grok" : "unknown",
       kind: "agents-md",
       startDir: start,
-      ...commandcodeMemory ? { hopsDir: dirname8(dirname8(abs)) } : {}
+      ...commandcodeMemory ? { hopsDir: dirname9(dirname9(abs)) } : {}
     }));
   }
-  addUnique(out, seen, readPolicyFile(join17(root, ".github", "copilot-instructions.md"), io, {
+  addUnique(out, seen, readPolicyFile(join18(root, ".github", "copilot-instructions.md"), io, {
     sourceProvider: "vscode",
     kind: "vscode-instructions",
     startDir: start
   }));
-  const instructionsDir = join17(root, ".github", "instructions");
+  const instructionsDir = join18(root, ".github", "instructions");
   for (const abs of walkFiles(instructionsDir, {
     maxDepth: NESTED_DISCOVERY_MAX_DEPTH,
     match: (_abs, name) => name.endsWith(".instructions.md"),
@@ -19115,22 +19721,22 @@ function discoverPolicyFiles(root, policyFiles, io, startDir = root, includeGlob
     }));
   }
   if (includeGlobal) {
-    addUnique(out, seen, readPolicyFile(join17(providerHome("codex"), "AGENTS.override.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(providerHome("codex"), "AGENTS.override.md"), io, {
       sourceProvider: "codex",
       kind: "agents-md",
       startDir: start
     }));
-    addUnique(out, seen, readPolicyFile(join17(providerHome("codex"), "AGENTS.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(providerHome("codex"), "AGENTS.md"), io, {
       sourceProvider: "codex",
       kind: "agents-md",
       startDir: start
     }));
-    addUnique(out, seen, readPolicyFile(join17(providerHome("commandcode"), "AGENTS.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(providerHome("commandcode"), "AGENTS.md"), io, {
       sourceProvider: "commandcode",
       kind: "agents-md",
       startDir: start
     }));
-    addUnique(out, seen, readPolicyFile(join17(providerHome("claude"), "CLAUDE.md"), io, {
+    addUnique(out, seen, readPolicyFile(join18(providerHome("claude"), "CLAUDE.md"), io, {
       sourceProvider: "claude",
       kind: "claude-md",
       startDir: start
@@ -19171,10 +19777,13 @@ function parseSkillsLockFile(filePath, io) {
     });
     return { entries: [], invalid: true };
   }
-  const lockRoot = dirname8(resolve11(filePath));
+  const lockRoot = dirname9(resolve11(filePath));
   const locked = [];
   for (const [id, value] of Object.entries(skills)) {
     const entry = { id, lockRoot, lockPath: filePath };
+    if (PROJECT_SKILL_DIRS.some((dir) => isFile(join18(lockRoot, dir, id, "SKILL.md")))) {
+      entry.installedBesideLock = true;
+    }
     if (isRecord(value)) {
       const v = value;
       if (typeof v.source === "string") {
@@ -19212,10 +19821,10 @@ function discoverSkillsLocks(scanBoundary, projectRoot, io) {
       return;
     }
     validCount += 1;
-    lockRoots.push(dirname8(resolved));
+    lockRoots.push(dirname9(resolved));
     locked.push(...parsed.entries);
   };
-  consider(join17(projectRoot, "skills-lock.json"));
+  consider(join18(projectRoot, "skills-lock.json"));
   for (const abs of walkFiles(scanBoundary, {
     maxDepth: NESTED_DISCOVERY_MAX_DEPTH,
     match: (_abs, name) => name === "skills-lock.json",
@@ -19232,7 +19841,7 @@ function discoverSkillsLocks(scanBoundary, projectRoot, io) {
 }
 
 // src/discover/rules.ts
-import { basename as basename10, dirname as dirname9, join as join18 } from "node:path";
+import { basename as basename10, dirname as dirname10, join as join19 } from "node:path";
 function windsurfWorkspaceTrigger(text) {
   const split = splitFrontmatter(text);
   if (split.kind === "none") {
@@ -19304,7 +19913,7 @@ function listOneLevelMd(dir, io) {
     if (!entry.isFile() || entry.name.startsWith(".") || !entry.name.endsWith(".md")) {
       continue;
     }
-    out.push(join18(dir, entry.name));
+    out.push(join19(dir, entry.name));
   }
   return out;
 }
@@ -19376,7 +19985,7 @@ function pushAntigravity(out, fact) {
 }
 function discoverRules(root, io) {
   const out = [];
-  const cursorRules = join18(root, ".cursor", "rules");
+  const cursorRules = join19(root, ".cursor", "rules");
   for (const abs of walkFiles(cursorRules, {
     maxDepth: NESTED_DISCOVERY_MAX_DEPTH,
     match: (_abs, name) => name.endsWith(".mdc"),
@@ -19387,27 +19996,27 @@ function discoverRules(root, io) {
       out.push(fact);
     }
   }
-  out.push(...collectMdRules(join18(root, ".grok", "rules"), "grok", io));
-  out.push(...collectMdRules(join18(root, ".claude", "rules"), "claude", io));
-  out.push(...collectMdRules(join18(root, ".devin", "rules"), "windsurf", io, {
+  out.push(...collectMdRules(join19(root, ".grok", "rules"), "grok", io));
+  out.push(...collectMdRules(join19(root, ".claude", "rules"), "claude", io));
+  out.push(...collectMdRules(join19(root, ".devin", "rules"), "windsurf", io, {
     windsurfScope: "workspace"
   }));
-  out.push(...collectMdRules(join18(root, ".windsurf", "rules"), "windsurf", io, {
+  out.push(...collectMdRules(join19(root, ".windsurf", "rules"), "windsurf", io, {
     windsurfScope: "workspace"
   }));
-  const legacy = join18(root, ".windsurfrules");
+  const legacy = join19(root, ".windsurfrules");
   const legacyFact = readRuleFile(legacy, "windsurf", io, { windsurfScope: "legacy" });
   if (legacyFact !== undefined) {
     out.push(legacyFact);
   }
-  pushAntigravity(out, readAntigravityRule(join18(root, "GEMINI.md"), io, "standalone"));
-  pushAntigravity(out, readAntigravityRule(join18(root, ".agents", "GEMINI.md"), io, "standalone"));
-  for (const dir of [join18(root, ".agents", "rules"), join18(root, ".agent", "rules")]) {
+  pushAntigravity(out, readAntigravityRule(join19(root, "GEMINI.md"), io, "standalone"));
+  pushAntigravity(out, readAntigravityRule(join19(root, ".agents", "GEMINI.md"), io, "standalone"));
+  for (const dir of [join19(root, ".agents", "rules"), join19(root, ".agent", "rules")]) {
     for (const abs of listOneLevelMd(dir, io)) {
       pushAntigravity(out, readAntigravityRule(abs, io, "modular"));
     }
   }
-  readAntigravityRulesJson(join18(root, ".agents", "rules.json"), io);
+  readAntigravityRulesJson(join19(root, ".agents", "rules.json"), io);
   return out;
 }
 function discoverNestedWindsurfRules(scanBoundary, io) {
@@ -19425,13 +20034,13 @@ function discoverNestedWindsurfRules(scanBoundary, io) {
   return out;
 }
 function discoverClaudeUserRules(io) {
-  return collectMdRules(join18(providerHome("claude"), "rules"), "claude", io);
+  return collectMdRules(join19(providerHome("claude"), "rules"), "claude", io);
 }
 function discoverWindsurfGlobalRules(filePath, io) {
   if (basename10(filePath) !== "global_rules.md") {
     return [];
   }
-  if (basename10(dirname9(filePath)) !== "memories") {
+  if (basename10(dirname10(filePath)) !== "memories") {
     return [];
   }
   const fact = readRuleFile(filePath, "windsurf", io, { windsurfScope: "global" });
@@ -19442,23 +20051,23 @@ function discoverAntigravityUserRules(io) {
   const geminiHome = providerHome("gemini");
   const configHome = providerHome("antigravity");
   for (const path of [
-    join18(geminiHome, "GEMINI.md"),
-    join18(geminiHome, "AGENTS.md"),
-    join18(configHome, "GEMINI.md"),
-    join18(configHome, "AGENTS.md")
+    join19(geminiHome, "GEMINI.md"),
+    join19(geminiHome, "AGENTS.md"),
+    join19(configHome, "GEMINI.md"),
+    join19(configHome, "AGENTS.md")
   ]) {
     pushAntigravity(out, readAntigravityRule(path, io, "standalone"));
   }
-  for (const abs of listOneLevelMd(join18(configHome, "rules"), io)) {
+  for (const abs of listOneLevelMd(join19(configHome, "rules"), io)) {
     pushAntigravity(out, readAntigravityRule(abs, io, "modular"));
   }
   return out;
 }
 
 // src/discover/windsurf.ts
-import { dirname as dirname10, join as join19 } from "node:path";
+import { dirname as dirname11, join as join20 } from "node:path";
 function windsurfUserHooksPath() {
-  return join19(providerHome("windsurf"), "hooks.json");
+  return join20(providerHome("windsurf"), "hooks.json");
 }
 function discoverWindsurfHooksFile(filePath, projectRoot, io) {
   return readFlatHooks(filePath, "windsurf", io, (item, base, hostPlatform) => {
@@ -19481,19 +20090,111 @@ function discoverWindsurfHooksFile(filePath, projectRoot, io) {
   });
 }
 function windsurfUserMcpPath() {
-  return join19(providerHome("windsurf"), "mcp_config.json");
+  return join20(providerHome("windsurf"), "mcp_config.json");
 }
 function windsurfGlobalRulesPath() {
-  return join19(providerHome("windsurf"), "memories", "global_rules.md");
+  return join20(providerHome("windsurf"), "memories", "global_rules.md");
 }
 function discoverWindsurfUserMcp(io) {
   const filePath = windsurfUserMcpPath();
-  return parseWindsurfJsonFile(filePath, dirname10(filePath), io, { optional: true });
+  return parseWindsurfJsonFile(filePath, dirname11(filePath), io, { optional: true });
 }
 function discoverWindsurfUserRules(io) {
   return discoverWindsurfGlobalRules(windsurfGlobalRulesPath(), io);
 }
 
+// src/discover/zed.ts
+import { homedir as homedir4 } from "node:os";
+import { join as join21 } from "node:path";
+function zedSettingsMcp(path, root, io) {
+  return parseProfiledMcpFile(path, root, io, "zed-json", { optional: true, serversKey: "context_servers" });
+}
+function discoverZedProjectMcp(dir, io) {
+  return zedSettingsMcp(join21(dir, ".zed", "settings.json"), dir, io);
+}
+function discoverZedUserMcp(root, io) {
+  const appData = process.env.APPDATA;
+  const path = process.platform === "win32" && appData !== undefined ? join21(appData, "Zed", "settings.json") : join21(homedir4(), ".config", "zed", "settings.json");
+  return zedSettingsMcp(path, root, io);
+}
+
+// src/discover/amp.ts
+import { existsSync as existsSync8 } from "node:fs";
+import { join as join22 } from "node:path";
+function settingsIn(dir) {
+  return ["settings.json", "settings.jsonc"].map((name) => join22(dir, name)).find((path) => existsSync8(path));
+}
+function ampSettingsMcp(path, root, io) {
+  return path === undefined ? [] : parseProfiledMcpFile(path, root, io, "amp-json", { optional: true, serversKey: "amp.mcpServers" });
+}
+function discoverAmpProjectMcp(dirs, io) {
+  for (const dir of dirs) {
+    const path = settingsIn(join22(dir, ".amp"));
+    if (path !== undefined) {
+      return ampSettingsMcp(path, dir, io);
+    }
+  }
+  return [];
+}
+function discoverAmpUserMcp(root, io) {
+  return ampSettingsMcp(settingsIn(providerHome("amp")), root, io);
+}
+
+// src/discover/claude-desktop.ts
+import { homedir as homedir5 } from "node:os";
+import { join as join23 } from "node:path";
+function claudeDesktopConfigDir() {
+  if (process.platform === "darwin") {
+    return join23(homedir5(), "Library", "Application Support", "Claude");
+  }
+  const appData = process.env.APPDATA;
+  if (process.platform === "win32" && appData !== undefined) {
+    return join23(appData, "Claude");
+  }
+  return join23(homedir5(), ".config", "Claude");
+}
+function discoverClaudeDesktopMcp(root, io) {
+  return parseProfiledMcpFile(join23(claudeDesktopConfigDir(), "claude_desktop_config.json"), root, io, "claude-desktop-json", {
+    optional: true,
+    mcpServersOptional: true
+  });
+}
+var REQUIRED = ["manifest_version", "name", "version", "description", "author", "server"];
+var SERVER_TYPES = new Set(["node", "python", "binary", "uv"]);
+function present(value) {
+  return value !== undefined && value !== null && value !== "";
+}
+function manifestDefects(raw) {
+  const missingFields = REQUIRED.filter((key) => !present(raw[key]) && !(key === "manifest_version" && present(raw.dxt_version)));
+  if (present(raw.author) && !(isRecord(raw.author) && present(raw.author.name))) {
+    missingFields.push("author.name");
+  }
+  const type = isRecord(raw.server) ? raw.server.type : undefined;
+  return {
+    missingFields,
+    ...typeof type === "string" && !SERVER_TYPES.has(type) ? { unknownServerType: type } : {}
+  };
+}
+function discoverClaudeDesktopExtensions(io) {
+  const dir = join23(claudeDesktopConfigDir(), "Claude Extensions");
+  const out = [];
+  for (const entry of listDir(dir, io, { optional: true }) ?? []) {
+    if (!entry.isDirectory()) {
+      continue;
+    }
+    const path = join23(dir, entry.name, "manifest.json");
+    const raw = readConfigFile(path, io, { optional: true });
+    if (!isRecord(raw)) {
+      continue;
+    }
+    const defects = manifestDefects(raw);
+    if (defects.missingFields.length > 0 || defects.unknownServerType !== undefined) {
+      out.push({ path, ...defects });
+    }
+  }
+  return out;
+}
+
 // src/discover/index.ts
 function hookFileKey(fact) {
   return `${resolve12(fact.path)}\x00${fact.source ?? ""}\x00${fact.sourceProvider ?? ""}`;
@@ -19534,7 +20235,10 @@ var SOURCES = [
   },
   {
     id: "copilot",
-    project: (dir, { io }) => ({ hooks: discoverCopilotSettingsHooks(dir, io) }),
+    project: (dir, { io }) => ({
+      hooks: discoverCopilotSettingsHooks(dir, io),
+      mcp: parseProfiledMcpFile(join24(dir, ".github", "mcp.json"), dir, io, "copilot-json", { optional: true })
+    }),
     user: ({ root, io }) => ({
       hooks: [...discoverCopilotUserHooks(io), ...discoverCopilotUserSettingsHooks(io)],
       mcp: discoverCopilotUserMcp(root, io)
@@ -19543,10 +20247,10 @@ var SOURCES = [
   {
     id: "grok",
     project: (dir, { io }) => ({
-      hooks: discoverGrokHooks(join20(dir, ".grok", "hooks"), dir, io)
+      hooks: discoverGrokHooks(join24(dir, ".grok", "hooks"), dir, io)
     }),
     user: ({ io }) => ({
-      hooks: discoverGrokHooks(join20(providerHome("grok"), "hooks"), providerHome("grok"), io),
+      hooks: discoverGrokHooks(join24(providerHome("grok"), "hooks"), providerHome("grok"), io),
       mcp: discoverGrokUserMcp(io)
     })
   },
@@ -19561,10 +20265,10 @@ var SOURCES = [
   {
     id: "antigravity",
     project: (dir, { io }) => ({
-      hooks: discoverAntigravityHooksFile(join20(dir, ".agents", "hooks.json"), dir, io)
+      hooks: discoverAntigravityHooksFile(join24(dir, ".agents", "hooks.json"), dir, io)
     }),
     user: ({ root, io }) => ({
-      hooks: discoverAntigravityHooksFile(join20(providerHome("antigravity"), "hooks.json"), root, io),
+      hooks: discoverAntigravityHooksFile(join24(providerHome("antigravity"), "hooks.json"), root, io),
       rules: discoverAntigravityUserRules(io)
     })
   },
@@ -19590,7 +20294,7 @@ var SOURCES = [
   {
     id: "windsurf",
     project: (dir, { io }) => ({
-      hooks: discoverWindsurfHooksFile(join20(dir, ".windsurf", "hooks.json"), dir, io)
+      hooks: discoverWindsurfHooksFile(join24(dir, ".windsurf", "hooks.json"), dir, io)
     }),
     nested: ({ scanBoundary, io }) => ({
       rules: discoverNestedWindsurfRules(scanBoundary, io)
@@ -19602,27 +20306,27 @@ var SOURCES = [
       return {
         mcp,
         rules,
-        hooks: discoverWindsurfHooksFile(hooksPath, dirname11(hooksPath), io)
+        hooks: discoverWindsurfHooksFile(hooksPath, dirname12(hooksPath), io)
       };
     }
   },
   {
     id: "cursor",
     project: (dir, { io }) => ({
-      hooks: discoverCursorHooksFile(join20(dir, ".cursor", "hooks.json"), dir, io)
+      hooks: discoverCursorHooksFile(join24(dir, ".cursor", "hooks.json"), dir, io)
     }),
     user: ({ root, io }) => ({
-      hooks: discoverCursorHooksFile(join20(providerHome("cursor"), "hooks.json"), root, io),
+      hooks: discoverCursorHooksFile(join24(providerHome("cursor"), "hooks.json"), root, io),
       mcp: discoverCursorUserMcp(root, io)
     })
   },
   {
     id: "kiro",
     project: (dir, { io }) => ({
-      hooks: discoverKiroHooksDir(join20(dir, ".kiro", "hooks"), dir, io)
+      hooks: discoverKiroHooksDir(join24(dir, ".kiro", "hooks"), dir, io)
     }),
     user: ({ root, io }) => ({
-      hooks: discoverKiroHooksDir(join20(providerHome("kiro"), "hooks"), root, io)
+      hooks: discoverKiroHooksDir(join24(providerHome("kiro"), "hooks"), root, io)
     })
   },
   {
@@ -19631,6 +20335,48 @@ var SOURCES = [
       mcp: discoverNestedContinueMcp(scanBoundary, io)
     })
   },
+  {
+    id: "zed",
+    project: (dir, { io }) => ({ mcp: discoverZedProjectMcp(dir, io) }),
+    user: ({ root, io }) => ({ mcp: discoverZedUserMcp(root, io) })
+  },
+  {
+    id: "amp",
+    nested: ({ startDir, scanBoundary, io }) => ({
+      mcp: discoverAmpProjectMcp(ancestorDirsInclusive(startDir, scanBoundary), io)
+    }),
+    user: ({ root, io }) => ({ mcp: discoverAmpUserMcp(root, io) })
+  },
+  {
+    id: "claude-desktop",
+    user: ({ root, io }) => ({ mcp: discoverClaudeDesktopMcp(root, io) })
+  },
+  {
+    id: "qwen",
+    project: (dir, { io }) => {
+      const file = join24(dir, ".qwen", "settings.json");
+      return {
+        hooks: discoverQwenHooksFile(file, dir, io),
+        mcp: parseProfiledMcpFile(file, dir, io, "qwen-json", { optional: true, mcpServersOptional: true })
+      };
+    },
+    user: ({ root, io }) => {
+      const file = join24(providerHome("qwen"), "settings.json");
+      return {
+        hooks: discoverQwenHooksFile(file, root, io),
+        mcp: parseProfiledMcpFile(file, root, io, "qwen-json", { optional: true, mcpServersOptional: true })
+      };
+    }
+  },
+  {
+    id: "factory",
+    project: (dir, { io }) => discoverFactoryProject(dir, io),
+    user: ({ root, io }) => discoverFactoryUser(root, io)
+  },
+  {
+    id: "goose",
+    user: ({ root, io }) => ({ mcp: discoverGooseUserMcp(root, io) })
+  },
   {
     id: "mcp-paths",
     project: (dir, { config, io }) => ({
@@ -19677,12 +20423,12 @@ function discoverAgentSurface(ctx, config, opts = {}) {
       continue;
     }
     configuredRoots.add(abs);
-    const source = isInside(abs, homedir4()) ? "global" : "project";
+    const source = isInside(abs, homedir6()) ? "global" : "project";
     skills.push(...discoverSkillsInDir(abs, source, io, root, undefined, "agent-skills"));
   }
   if (includeGlobal) {
     for (const provider of USER_SKILL_PROVIDERS) {
-      const abs = join20(providerHome(provider), "skills");
+      const abs = join24(providerHome(provider), "skills");
       const resolved = resolve12(abs);
       if (configuredRoots.has(resolved)) {
         continue;
@@ -19690,8 +20436,13 @@ function discoverAgentSurface(ctx, config, opts = {}) {
       configuredRoots.add(resolved);
       skills.push(...discoverSkillsInDir(abs, "global", io, root, provider));
     }
+    const configAgentsSkills = resolve12(homedir6(), ".config", "agents", "skills");
+    if (!configuredRoots.has(configAgentsSkills)) {
+      configuredRoots.add(configAgentsSkills);
+      skills.push(...discoverSkillsInDir(configAgentsSkills, "global", io, root, "agent-skills"));
+    }
   }
-  const agentsSkillsRoots = commandcodeAgentsSkillsRoots(startDir, scanBoundary, homedir4());
+  const agentsSkillsRoots = commandcodeAgentsSkillsRoots(startDir, scanBoundary, homedir6());
   const lock = discoverSkillsLocks(scanBoundary, root, io);
   const agents = discoverAgents(scanBoundary, io, startDir, includeGlobal, commandcodeProjectRoot);
   const hooks = [];
@@ -19770,13 +20521,14 @@ function discoverAgentSurface(ctx, config, opts = {}) {
     skillLockRoots: lock.lockRoots,
     configErrors: io.errors,
     codexProjectDocMaxBytes: codex.projectDocMaxBytes ?? CODEX_PROJECT_DOC_MAX_BYTES,
-    codexInstructionChain: codexInstructionChain(policyFiles, startDir, codexProjectRoot, fallbacks)
+    codexInstructionChain: codexInstructionChain(policyFiles, startDir, codexProjectRoot, fallbacks),
+    ...includeGlobal ? { claudeDesktopExtensions: discoverClaudeDesktopExtensions(io) } : {}
   };
 }
 
 // src/discover/extract.ts
 function readPackageJson(root, io) {
-  const path = join21(root, "package.json");
+  const path = join25(root, "package.json");
   const raw = readConfigFile(path, io, { optional: true });
   if (raw === undefined) {
     return {};
@@ -19854,16 +20606,16 @@ function inferPackageManager(root, pkg) {
       return prefix;
     }
   }
-  if (existsSync7(join21(root, "bun.lock")) || existsSync7(join21(root, "bun.lockb"))) {
+  if (existsSync9(join25(root, "bun.lock")) || existsSync9(join25(root, "bun.lockb"))) {
     return "bun";
   }
-  if (existsSync7(join21(root, "pnpm-lock.yaml"))) {
+  if (existsSync9(join25(root, "pnpm-lock.yaml"))) {
     return "pnpm";
   }
-  if (existsSync7(join21(root, "yarn.lock"))) {
+  if (existsSync9(join25(root, "yarn.lock"))) {
     return "yarn";
   }
-  if (existsSync7(join21(root, "package-lock.json"))) {
+  if (existsSync9(join25(root, "package-lock.json"))) {
     return "npm";
   }
   return "unknown";
@@ -19908,7 +20660,7 @@ function sortFindings(findings) {
 // src/analyze.ts
 function loadProject(options = {}) {
   const requested = resolve13(options.dir ?? process.cwd());
-  const location = resolveScanContext(requested);
+  const location = resolveScanContext(requested, { allowNoProject: options.global === true });
   const root = location.root;
   const loaded = loadConfig(root, options.configPath);
   const config = {
@@ -20298,7 +21050,7 @@ function formatSummary(summary, ink) {
 }
 
 // src/version.ts
-var VERSION = "2.0.0";
+var VERSION = "2.3.1";
 
 // src/commands/check.ts
 function runCheck(options) {
@@ -20345,13 +21097,13 @@ import {
   writeFileSync
 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join22 } from "node:path";
+import { join as join26 } from "node:path";
 function runDemo() {
-  const root = mkdtempSync(join22(tmpdir(), "agentscan-demo-"));
+  const root = mkdtempSync(join26(tmpdir(), "agentscan-demo-"));
   try {
-    const claude = join22(root, ".claude");
+    const claude = join26(root, ".claude");
     mkdirSync(claude, { recursive: true });
-    writeFileSync(join22(claude, "settings.json"), `${JSON.stringify({
+    writeFileSync(join26(claude, "settings.json"), `${JSON.stringify({
       hooks: {
         PreToolUse: [
           {
@@ -20422,12 +21174,12 @@ function formatExplain(f) {
 }
 
 // src/commands/init.ts
-import { existsSync as existsSync8, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join23, resolve as resolve14 } from "node:path";
+import { existsSync as existsSync10, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join27, resolve as resolve14 } from "node:path";
 function runInit(dir, options = {}) {
   const root = resolve14(dir ?? process.cwd());
-  const path = join23(root, ".agentscanrc.json");
-  if (existsSync8(path) && !options.force) {
+  const path = join27(root, ".agentscanrc.json");
+  if (existsSync10(path) && !options.force) {
     return {
       exitCode: 2,
       stdout: "",
@@ -20481,7 +21233,7 @@ function runRulesCommand(options = {}) {
 // src/report/clipboard.ts
 import { spawn } from "node:child_process";
 import { accessSync, constants } from "node:fs";
-import { delimiter, join as join24 } from "node:path";
+import { delimiter, join as join28 } from "node:path";
 var TOOLS = [
   ["wl-copy"],
   ["xclip", "-selection", "clipboard"],
@@ -20498,7 +21250,7 @@ function resolve15(name) {
     if (dir.length === 0) {
       continue;
     }
-    const candidate = join24(dir, name);
+    const candidate = join28(dir, name);
     try {
       accessSync(candidate, constants.X_OK);
       return candidate;