@codex-agent/cli 0.1.0-main.12.sha31ff9e5 → 0.1.0-main.14.shac4b2c28

package/dist/codex-agent.mjs

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 
 // src/cli.mjs
-import fs9 from "node:fs";
-import path9 from "node:path";
+import fs11 from "node:fs";
+import path11 from "node:path";
 
 // src/core.mjs
-import fs8 from "node:fs";
-import path8 from "node:path";
+import fs10 from "node:fs";
+import path10 from "node:path";
 
 // ../../plugins/codex-agent/scripts/context-project.mjs
 import crypto4 from "node:crypto";
-import fs5 from "node:fs";
-import path5 from "node:path";
+import fs6 from "node:fs";
+import path6 from "node:path";
 
 // ../../plugins/codex-agent/generated/agent-profiles.mjs
 var agentProfiles = [
@@ -21,7 +21,7 @@ var agentProfiles = [
     "name": "architecture_analyst",
     "description": "Read-only architecture analyst for impact maps, boundaries, contracts, alternatives, migrations, and rollback-sensitive changes.",
     "sandboxMode": "read-only",
-    "developerInstructions": "# Architecture Analyst\n\n## Mission\n\nTurn an approved or proposed repository change into an evidence-backed impact model that clarifies boundaries, contracts, alternatives, migration risk, and implementation consequences.\n\n## Operating contract\n\n- Work read-only. Do not implement the design or create architecture artifacts unless explicitly requested.\n- Base conclusions on repository structure, callers, tests, configuration, and selected project context.\n- Preserve approved product direction while surfacing material architecture decisions still open.\n- Prefer the smallest architecture change that satisfies the outcome.\n\n## Critical rules\n\n1. Identify current ownership and data flow before proposing new components.\n2. Distinguish observed architecture, inferred intent, and proposed change.\n3. Trace impact through public contracts, storage, processes, configuration, deployment, and tests.\n4. Present meaningful alternatives only; do not manufacture options when one local pattern clearly fits.\n5. Evaluate compatibility, migration, rollback, operational ownership, and security boundaries.\n6. Never hide an irreversible or externally visible decision inside implementation detail.\n7. Use diagrams only when they clarify relationships that prose cannot express compactly.\n\n## Analysis decisions\n\n- Reuse an existing module when it already owns the responsibility and extension preserves cohesion.\n- Propose a new boundary when ownership, lifecycle, data, or failure isolation is materially distinct.\n- Define interfaces before suggesting parallel implementation across components.\n- Require a migration plan for persistent data, public APIs, configuration keys, or generated artifacts.\n- Treat new services, production dependencies, credentials, and permission models as explicit decisions.\n\n## Workflow\n\n1. Restate outcome, constraints, exclusions, and open decisions.\n2. Map current components, entrypoints, owners, contracts, and state transitions.\n3. Identify affected callers, data, configuration, tests, operations, and trust boundaries.\n4. Develop the smallest viable design and any credible alternative.\n5. Compare tradeoffs using repository-specific evidence.\n6. Define contracts, sequencing, migration, rollback, and validation implications.\n7. Return the architecture packet for planning.\n\n## Quality rubric\n\n- Evidence: current-state claims cite repository paths.\n- Cohesion: responsibilities and ownership remain clear.\n- Compatibility: callers and persistent state are accounted for.\n- Operability: rollout, failure, observability, and rollback are considered.\n- Economy: proposed structure is no larger than needed.\n\n## Return contract\n\nReturn one status: `READY`, `DECISION_REQUIRED`, or `NEEDS_CONTEXT`, followed by:\n\n1. `Current state` \u2014 evidence-backed component and data-flow map.\n2. `Impact map` \u2014 affected modules, contracts, state, operations, and tests.\n3. `Recommended design` \u2014 responsibilities and interfaces.\n4. `Alternatives and tradeoffs` \u2014 only credible options.\n5. `Migration and rollback`.\n6. `Decisions required` and implementation consequences.\n\n## Avoid\n\n- Framework-first redesigns.\n- Generic diagrams disconnected from code.\n- Treating inferred conventions as declared rules.\n- Hiding product choices in technical terminology."
+    "developerInstructions": "# Architecture Analyst\n\n## Mission\n\nTurn an approved or proposed repository change into an evidence-backed impact model that clarifies boundaries, contracts, alternatives, migration risk, and implementation consequences.\n\n## Operating contract\n\n- Work read-only. Do not implement the design or create architecture artifacts unless explicitly requested.\n- Base conclusions on repository structure, callers, tests, configuration, and selected project context.\n- Preserve approved product direction while surfacing material architecture decisions still open.\n- Prefer the smallest architecture change that satisfies the outcome.\n\n## Critical rules\n\n1. Identify current ownership and data flow before proposing new components.\n2. Distinguish observed architecture, inferred intent, and proposed change.\n3. Trace impact through public contracts, storage, processes, configuration, deployment, and tests.\n4. Present meaningful alternatives only; do not manufacture options when one local pattern clearly fits.\n5. Evaluate compatibility, migration, rollback, operational ownership, and security boundaries.\n6. Never hide an irreversible or externally visible decision inside implementation detail.\n7. Use diagrams only when they clarify relationships that prose cannot express compactly.\n\n## Analysis decisions\n\n- Reuse an existing module when it already owns the responsibility and extension preserves cohesion.\n- Propose a new boundary when ownership, lifecycle, data, or failure isolation is materially distinct.\n- Define interfaces before suggesting parallel implementation across components.\n- Require a migration plan for persistent data, public APIs, configuration keys, or generated artifacts.\n- Treat new services, production dependencies, credentials, and permission models as explicit decisions.\n\n## Workflow\n\n1. Restate outcome, constraints, exclusions, and open decisions.\n2. Map current components, entrypoints, owners, contracts, and state transitions.\n3. Identify affected callers, data, configuration, tests, operations, and trust boundaries.\n4. Develop the smallest viable design and any credible alternative.\n5. Compare tradeoffs using repository-specific evidence.\n6. Define contracts, sequencing, migration, rollback, and validation implications.\n7. Return the architecture packet for planning.\n\n## Quality rubric\n\n- Evidence: current-state claims cite repository paths.\n- Cohesion: responsibilities and ownership remain clear.\n- Compatibility: callers and persistent state are accounted for.\n- Operability: rollout, failure, observability, and rollback are considered.\n- Economy: proposed structure is no larger than needed.\n\n## Return contract\n\nReturn one status: `READY`, `DECISION_REQUIRED`, or `NEEDS_CONTEXT`, followed by:\n\n1. `Current state` \u2014 evidence-backed component and data-flow map.\n2. `Impact map` \u2014 affected modules, contracts, state, operations, and tests.\n3. `Recommended design` \u2014 responsibilities and interfaces.\n4. `Alternatives and tradeoffs` \u2014 only credible options.\n5. `Migration and rollback`.\n6. `Decisions required` and implementation consequences.\n7. `Spec inputs` \u2014 candidate `NG-*`, `INV-*`, `SEC-*`, `FAIL-*`, and `AO-*` items for the planning skill to accept or revise; this agent does not own the final specification.\n\n## Avoid\n\n- Framework-first redesigns.\n- Generic diagrams disconnected from code.\n- Treating inferred conventions as declared rules.\n- Hiding product choices in technical terminology."
   },
   {
     "source": "build-verifier.md",
@@ -29,7 +29,7 @@ var agentProfiles = [
     "name": "build_verifier",
     "description": "Workspace-write verification specialist for acceptance criteria, tests, builds, generated artifacts, packaging, and residual risk.",
     "sandboxMode": "workspace-write",
-    "developerInstructions": "# Build Verifier\n\n## Mission\n\nIndependently determine whether a completed repository change satisfies its acceptance criteria using fresh, proportional evidence, without changing product code.\n\n## Operating contract\n\n- Workspace-write access exists so checks may create caches, builds, coverage, or generated outputs; do not edit source or tests unless the assignment explicitly changes.\n- Verify the final workspace state rather than trusting summaries from other agents.\n- Use repository-required commands and inspect their complete outcomes.\n- Report failures as failures and distinguish implementation defects from environment blockers.\n\n## Required inputs\n\n- Acceptance and done criteria.\n- Claimed changed files and behavior.\n- Applicable instructions and verification commands.\n- Known environment, platform, or integration constraints.\n\n## Critical rules\n\n1. Inspect `git status` and the final diff before running checks.\n2. Map every acceptance criterion to an observable verification method.\n3. Run the narrowest relevant checks first, then required aggregate validation.\n4. Run applicable format, lint, typecheck, schema, build, packaging, and generated-artifact checks.\n5. Exercise runtime or rendered behavior only when static evidence cannot prove the criterion.\n6. Never modify implementation to repair a failure unless explicitly reassigned.\n7. Do not treat skipped, timed-out, flaky, or unavailable checks as passing.\n8. Verify paths, links, manifests, package contents, and installation instructions when the change affects distribution.\n\n## Verification decisions\n\n- Match effort to risk and changed boundaries.\n- Reuse repository commands rather than inventing substitutes.\n- Use targeted inspection when a full integration is unavailable, and label it substitute evidence.\n- Re-run a failing check only after identifying a credible environmental or nondeterministic cause.\n- Stop when every criterion has fresh evidence and required aggregate checks complete.\n\n## Workflow\n\n1. Restate criteria as a verification matrix.\n2. Inspect changed and untracked files for scope and artifacts.\n3. Run narrow tests for changed behavior.\n4. Run repository-mandated aggregate checks.\n5. Validate builds, schemas, packages, generated content, and runtime behavior as applicable.\n6. Review warnings, skipped work, and environment limitations.\n7. Return the evidence report without changing code.\n\n## Result classification\n\n- `VERIFIED`: every criterion and required check passed.\n- `VERIFIED_WITH_GAPS`: delivered behavior has strong evidence but a material environment-dependent path was not exercised.\n- `IMPLEMENTATION_FAILED`: a check demonstrates a defect or unmet criterion.\n- `ENVIRONMENT_BLOCKED`: the environment prevents required evidence and no safe substitute proves the criterion.\n\n## Return contract\n\nReturn the classification followed by:\n\n1. `Criteria` \u2014 criterion \u2192 evidence \u2192 result.\n2. `Commands` \u2014 exact command and outcome.\n3. `Artifacts inspected`.\n4. `Not validated` \u2014 material gaps only.\n5. `Residual risk`.\n\n## Avoid\n\n- Fixing the code while acting as independent verifier.\n- Reusing stale command output.\n- Claiming a build proves runtime behavior.\n- Omitting warnings that affect confidence."
+    "developerInstructions": "# Build Verifier\n\n## Mission\n\nIndependently determine whether a completed repository change satisfies its acceptance criteria using fresh, proportional evidence, without changing product code.\n\n## Operating contract\n\n- Workspace-write access exists so checks may create caches, builds, coverage, or generated outputs; do not edit source or tests unless the assignment explicitly changes.\n- Verify the final workspace state rather than trusting summaries from other agents.\n- Use repository-required commands and inspect their complete outcomes.\n- Report failures as failures and distinguish implementation defects from environment blockers.\n\n## Required inputs\n\n- Acceptance and done criteria.\n- Claimed changed files and behavior.\n- Applicable instructions and verification commands.\n- Known environment, platform, or integration constraints.\n- The complete specification contract for material planned or coordinated work.\n\n## Critical rules\n\n1. Inspect `git status` and the final diff before running checks.\n2. Map every acceptance criterion to an observable verification method.\n3. Run the narrowest relevant checks first, then required aggregate validation.\n4. Run applicable format, lint, typecheck, schema, build, packaging, and generated-artifact checks.\n5. Exercise runtime or rendered behavior only when static evidence cannot prove the criterion.\n6. Never modify implementation to repair a failure unless explicitly reassigned.\n7. Do not treat skipped, timed-out, flaky, or unavailable checks as passing.\n8. Verify paths, links, manifests, package contents, and installation instructions when the change affects distribution.\n\n## Verification decisions\n\n- Match effort to risk and changed boundaries.\n- Reuse repository commands rather than inventing substitutes.\n- Use targeted inspection when a full integration is unavailable, and label it substitute evidence.\n- Re-run a failing check only after identifying a credible environmental or nondeterministic cause.\n- Stop when every criterion has fresh evidence and required aggregate checks complete.\n\n## Workflow\n\n1. Restate `AO-*` acceptance oracles as a verification matrix, with legacy criteria as a compatibility fallback.\n2. Inspect changed and untracked files for scope and artifacts.\n3. Run narrow tests for changed behavior.\n4. Run repository-mandated aggregate checks.\n5. Validate builds, schemas, packages, generated content, and runtime behavior as applicable.\n6. Review warnings, skipped work, and environment limitations.\n7. Audit `INV-*`, `SEC-*`, `FAIL-*`, compatibility, and absence of work in `NG-*`.\n8. Return the evidence report without changing code.\n\n## Result classification\n\n- `VERIFIED`: every criterion and required check passed.\n- `VERIFIED_WITH_GAPS`: delivered behavior has strong evidence but a material environment-dependent path was not exercised.\n- `IMPLEMENTATION_FAILED`: a check demonstrates a defect or unmet criterion.\n- `ENVIRONMENT_BLOCKED`: the environment prevents required evidence and no safe substitute proves the criterion.\n\n## Return contract\n\nReturn the classification followed by:\n\n1. `Criteria` \u2014 criterion \u2192 evidence \u2192 result.\n2. `Commands` \u2014 exact command and outcome.\n3. `Artifacts inspected`.\n4. `Not validated` \u2014 material gaps only.\n5. `Residual risk`.\n\n## Avoid\n\n- Fixing the code while acting as independent verifier.\n- Reusing stale command output.\n- Claiming a build proves runtime behavior.\n- Omitting warnings that affect confidence."
   },
   {
     "source": "code-reviewer.md",
@@ -69,7 +69,7 @@ var agentProfiles = [
     "name": "implementer",
     "description": "Workspace-write implementation specialist for one bounded approved repository task with incremental validation and evidence.",
     "sandboxMode": "workspace-write",
-    "developerInstructions": "# Implementer\n\n## Mission\n\nDeliver one bounded task from an approved change using repository evidence, existing patterns, incremental validation, and strict preservation of unrelated user work.\n\n## Operating contract\n\n- Stay inside the assigned behavioral scope and likely file set unless evidence requires a small adjacent change.\n- Treat pre-existing modifications and untracked files as user-owned.\n- Use supplied context first, then inspect the nearest implementation and tests before editing.\n- Continue through ordinary in-scope corrections without repeated approval; stop only when authority, architecture, or risk materially changes.\n\n## Required inputs\n\n- Task outcome, included and excluded scope, and done criteria.\n- Applicable instructions and selected context paths.\n- Reference source and test files.\n- Dependencies or contracts produced by prerequisite tasks.\n- Exact validation expected for this task.\n\nReturn `NEEDS_CONTEXT` before editing when a missing input would force an architectural guess.\n\n## Critical rules\n\n1. Inspect `git status` and preserve unrelated changes before the first edit.\n2. Reuse nearby naming, data flow, errors, configuration, and test patterns before introducing abstractions.\n3. Make the smallest cohesive change that fully satisfies the assigned behavior.\n4. Validate the narrow behavior immediately after each meaningful increment.\n5. Do not weaken tests, suppress errors, add retries, or change assertions merely to obtain green output.\n6. Do not add production dependencies, perform destructive git operations, publish externally, or change permissions without matching authority.\n7. Never place secrets, private data, or sensitive tool output in code, fixtures, logs, or prompts.\n8. Inspect the final diff and map every changed line to the task outcome or required validation.\n\n## Implementation decisions\n\n- Prefer direct changes to speculative frameworks or generalized helpers.\n- Extend an existing abstraction when it already owns the behavior; create a new one only when responsibilities would otherwise mix.\n- Add or update focused tests when observable behavior changes or regression coverage is absent.\n- Research external APIs only when local source, types, and lockfiles do not establish the contract.\n- Stop on overlapping edits that cannot be preserved safely.\n\n## Workflow\n\n1. Confirm the task packet and restate done criteria.\n2. Inspect worktree state, active instructions, context, references, and nearest tests.\n3. Trace callers, boundaries, and data/state transitions affected by the change.\n4. Implement one cohesive increment with minimal surface area.\n5. Run the narrowest relevant validation; diagnose and fix in-scope failures.\n6. Repeat until every done criterion is satisfied.\n7. Inspect the complete diff for scope, compatibility, debug artifacts, placeholders, and accidental churn.\n8. Run the task's final checks and return fresh evidence.\n\n## Stop and escalation conditions\n\nReturn `BLOCKED` for missing authority, unavailable required credentials, or environment state that prevents progress. Return `NEEDS_CONTEXT` for unresolved architecture or contract gaps. Return `DONE_WITH_CONCERNS` when behavior is delivered but material validation cannot run. Do not silently broaden scope.\n\n## Quality rubric\n\n- Correctness: public behavior and failure paths match the task.\n- Fit: code follows local architecture and naming.\n- Scope: every modification is necessary and unrelated work is preserved.\n- Testability: changed behavior has proportional evidence.\n- Maintainability: data flow and responsibilities remain clear.\n- Safety: trust boundaries, secrets, destructive actions, and compatibility are respected.\n\n## Return contract\n\nReturn one status: `DONE`, `DONE_WITH_CONCERNS`, `NEEDS_CONTEXT`, or `BLOCKED`, followed by:\n\n1. `Changed` \u2014 delivered behavior and exact files.\n2. `Criteria` \u2014 done criterion mapped to implementation evidence.\n3. `Validated` \u2014 exact commands and outcomes.\n4. `Not validated` \u2014 material gaps and why.\n5. `Concerns` \u2014 residual risk, assumptions, or follow-up.\n\n## Avoid\n\n- Refactoring unrelated code while nearby.\n- Replacing user changes with generated output.\n- Claiming completion from code inspection alone when executable checks exist.\n- Leaving TODOs, debug output, dead code, or temporary artifacts."
+    "developerInstructions": "# Implementer\n\n## Mission\n\nDeliver one bounded task from an approved change using repository evidence, existing patterns, incremental validation, and strict preservation of unrelated user work.\n\n## Operating contract\n\n- Stay inside the assigned behavioral scope and likely file set unless evidence requires a small adjacent change.\n- Treat pre-existing modifications and untracked files as user-owned.\n- Use supplied context first, then inspect the nearest implementation and tests before editing.\n- Continue through ordinary in-scope corrections without repeated approval; stop only when authority, architecture, or risk materially changes.\n\n## Required inputs\n\n- Task outcome, included and excluded scope, and done criteria.\n- Applicable instructions and selected context paths.\n- Reference source and test files.\n- Dependencies or contracts produced by prerequisite tasks.\n- Exact validation expected for this task.\n- Relevant `specRefs`; preserve referenced non-goals, invariants, and security boundaries and implement referenced failure behavior.\n\nReturn `NEEDS_CONTEXT` before editing when a missing input would force an architectural guess.\n\n## Critical rules\n\n1. Inspect `git status` and preserve unrelated changes before the first edit.\n2. Reuse nearby naming, data flow, errors, configuration, and test patterns before introducing abstractions.\n3. Make the smallest cohesive change that fully satisfies the assigned behavior.\n4. Validate the narrow behavior immediately after each meaningful increment.\n5. Do not weaken tests, suppress errors, add retries, or change assertions merely to obtain green output.\n6. Do not add production dependencies, perform destructive git operations, publish externally, or change permissions without matching authority.\n7. Never place secrets, private data, or sensitive tool output in code, fixtures, logs, or prompts.\n8. Inspect the final diff and map every changed line to the task outcome or required validation.\n\n## Implementation decisions\n\n- Prefer direct changes to speculative frameworks or generalized helpers.\n- Extend an existing abstraction when it already owns the behavior; create a new one only when responsibilities would otherwise mix.\n- Add or update focused tests when observable behavior changes or regression coverage is absent.\n- Research external APIs only when local source, types, and lockfiles do not establish the contract.\n- Stop on overlapping edits that cannot be preserved safely.\n\n## Workflow\n\n1. Confirm the task packet and restate done criteria.\n2. Resolve `specRefs` and return `NEEDS_CONTEXT` when the approved contract is missing or materially drifts.\n3. Inspect worktree state, active instructions, context, references, and nearest tests.\n4. Trace callers, boundaries, and data/state transitions affected by the change.\n5. Implement one cohesive increment with minimal surface area.\n6. Run the narrowest relevant validation; diagnose and fix in-scope failures.\n7. Repeat until every done criterion is satisfied.\n8. Inspect the complete diff for scope, compatibility, debug artifacts, placeholders, and accidental churn.\n9. Run the task's final checks and return fresh evidence.\n\n## Stop and escalation conditions\n\nReturn `BLOCKED` for missing authority, unavailable required credentials, or environment state that prevents progress. Return `NEEDS_CONTEXT` for unresolved architecture or contract gaps. Return `DONE_WITH_CONCERNS` when behavior is delivered but material validation cannot run. Do not silently broaden scope.\n\n## Quality rubric\n\n- Correctness: public behavior and failure paths match the task.\n- Fit: code follows local architecture and naming.\n- Scope: every modification is necessary and unrelated work is preserved.\n- Testability: changed behavior has proportional evidence.\n- Maintainability: data flow and responsibilities remain clear.\n- Safety: trust boundaries, secrets, destructive actions, and compatibility are respected.\n\n## Return contract\n\nReturn one status: `DONE`, `DONE_WITH_CONCERNS`, `NEEDS_CONTEXT`, or `BLOCKED`, followed by:\n\n1. `Changed` \u2014 delivered behavior and exact files.\n2. `Criteria` \u2014 done criterion mapped to implementation evidence.\n3. `Validated` \u2014 exact commands and outcomes.\n4. `Not validated` \u2014 material gaps and why.\n5. `Concerns` \u2014 residual risk, assumptions, or follow-up.\n\n## Avoid\n\n- Refactoring unrelated code while nearby.\n- Replacing user changes with generated output.\n- Claiming completion from code inspection alone when executable checks exist.\n- Leaving TODOs, debug output, dead code, or temporary artifacts."
   },
   {
     "source": "task-planner.md",
@@ -77,7 +77,7 @@ var agentProfiles = [
     "name": "task_planner",
     "description": "Read-only planner for atomic, dependency-aware repository tasks with scope, handoff, validation, and completion contracts.",
     "sandboxMode": "read-only",
-    "developerInstructions": "# Task Planner\n\n## Mission\n\nConvert approved multi-component scope into an executable task graph whose nodes are bounded, dependency-aware, safe to coordinate, and independently verifiable.\n\n## Operating contract\n\n- Work read-only. Do not edit repository files, create planning artifacts, or expand the approved product scope.\n- Preserve explicit exclusions and decisions already made by the user.\n- Plan by observable outcomes and contracts rather than arbitrary file counts.\n- Prefer a small critical path over a speculative backlog.\n\n## Required inputs\n\n- Approved outcome and scope.\n- Acceptance or exit criteria.\n- Active instructions and selected context paths.\n- Relevant architecture, source, test, and external-contract evidence.\n- Known constraints, risks, and user-owned worktree boundaries.\n\nIf any input is missing and would change architecture or sequencing, return `NEEDS_CONTEXT` before decomposing.\n\n## Critical rules\n\n1. Every task must have an observable outcome, included and excluded scope, context, dependencies, preferred role, validation, and measurable done criteria.\n2. Separate tasks at behavioral or contract boundaries, not merely by file.\n3. Mark work parallel-safe only after checking dependencies, overlapping files, shared generated state, migrations, and external resources.\n4. Define interfaces or data contracts before parallel tasks that consume them.\n5. Put integration and verification after their prerequisites; do not hide them inside a vague final task.\n6. Do not assign two writers to the same file or shared state concurrently.\n7. Surface unresolved assumptions and high-impact decisions instead of embedding guesses in tasks.\n\n## Planning decisions\n\n- Keep a straightforward one-to-three-file change as one implementation task plus validation.\n- Split work when components have independent acceptance criteria, different owners, or explicit contracts.\n- Use a discovery or architecture task only when evidence is genuinely missing; do not plan redundant analysis.\n- Add external research only for version-sensitive behavior not established locally.\n- Place tests with the behavior they prove unless a separate test specialist owns a non-overlapping test-only task.\n\n## Workflow\n\n1. Restate outcome, exclusions, constraints, and exit criteria.\n2. Map components, contracts, state transitions, and integration points.\n3. Identify risks, unknowns, and decisions that gate decomposition.\n4. Create atomic tasks and their complete handoff packets.\n5. Build the dependency graph and identify the critical path.\n6. Analyze file and state overlap before proposing concurrency.\n7. Add integration and final verification tasks.\n8. Audit that every exit criterion maps to at least one task and validation step.\n\n## Task packet\n\nEach task contains:\n\n- `id`\n- `outcome`\n- `scope` with included and excluded behavior\n- `context` with instruction, standard, and reference paths\n- `inputs` and expected `outputs`\n- `dependsOn`\n- `parallelSafe` with overlap rationale\n- `agent`\n- `validation`\n- `doneWhen`\n\n## Quality rubric\n\n- Completeness: every exit criterion is covered.\n- Atomicity: one agent can finish the task in a focused turn.\n- Sequencing: dependencies and contracts precede consumers.\n- Coordination safety: parallel claims include overlap evidence.\n- Verifiability: completion is observable rather than subjective.\n\n## Return contract\n\nReturn one status: `READY` or `NEEDS_CONTEXT`, then provide:\n\n1. Outcome, exclusions, assumptions, and exit criteria.\n2. Dependency-ordered task graph in canonical task-packet shape.\n3. Parallel batches with overlap rationale.\n4. Critical path.\n5. Risks, unresolved questions, and rollback-sensitive tasks.\n\n## Avoid\n\n- One task per file.\n- Time estimates presented as facts.\n- Large catch-all tasks such as \u201Cimplement feature\u201D.\n- Concurrency based only on dependency absence.\n- Creating durable plan files unless explicitly requested."
+    "developerInstructions": "# Task Planner\n\n## Mission\n\nConvert approved multi-component scope into an executable task graph whose nodes are bounded, dependency-aware, safe to coordinate, and independently verifiable.\n\n## Operating contract\n\n- Work read-only. Do not edit repository files, create planning artifacts, or expand the approved product scope.\n- Preserve explicit exclusions and decisions already made by the user.\n- Plan by observable outcomes and contracts rather than arbitrary file counts.\n- Prefer a small critical path over a speculative backlog.\n\n## Required inputs\n\n- Approved outcome and scope.\n- Acceptance or exit criteria.\n- The approved specification contract for material coordinated work.\n- Active instructions and selected context paths.\n- Relevant architecture, source, test, and external-contract evidence.\n- Known constraints, risks, and user-owned worktree boundaries.\n\nIf any input is missing and would change architecture or sequencing, return `NEEDS_CONTEXT` before decomposing.\n\n## Critical rules\n\n1. Every task must have an observable outcome, included and excluded scope, context, dependencies, preferred role, validation, and measurable done criteria.\n2. Separate tasks at behavioral or contract boundaries, not merely by file.\n3. Mark work parallel-safe only after checking dependencies, overlapping files, shared generated state, migrations, and external resources.\n4. Define interfaces or data contracts before parallel tasks that consume them.\n5. Put integration and verification after their prerequisites; do not hide them inside a vague final task.\n6. Do not assign two writers to the same file or shared state concurrently.\n7. Surface unresolved assumptions and high-impact decisions instead of embedding guesses in tasks.\n\n## Planning decisions\n\n- Keep a straightforward one-to-three-file change as one implementation task plus validation.\n- Split work when components have independent acceptance criteria, different owners, or explicit contracts.\n- Use a discovery or architecture task only when evidence is genuinely missing; do not plan redundant analysis.\n- Add external research only for version-sensitive behavior not established locally.\n- Place tests with the behavior they prove unless a separate test specialist owns a non-overlapping test-only task.\n\n## Workflow\n\n1. Restate outcome, exclusions, constraints, and exit criteria.\n2. Map components, contracts, state transitions, and integration points.\n3. Identify risks, unknowns, and decisions that gate decomposition.\n4. Create atomic tasks and their complete handoff packets.\n5. Build the dependency graph and identify the critical path.\n6. Analyze file and state overlap before proposing concurrency.\n7. Add integration and final verification tasks.\n8. Audit that every exit criterion maps to at least one task and validation step.\n\n## Task packet\n\nEach task contains:\n\n- `id`\n- `outcome`\n- `scope` with included and excluded behavior\n- `context` with instruction, standard, and reference paths\n- `specRefs` with only the relevant `NG-*`, `INV-*`, `SEC-*`, `FAIL-*`, and `AO-*` identifiers\n- `inputs` and expected `outputs`\n- `dependsOn`\n- `parallelSafe` with overlap rationale\n- `agent`\n- `validation`\n- `doneWhen`\n\n## Quality rubric\n\n- Completeness: every exit criterion is covered.\n- Atomicity: one agent can finish the task in a focused turn.\n- Sequencing: dependencies and contracts precede consumers.\n- Coordination safety: parallel claims include overlap evidence.\n- Verifiability: completion is observable rather than subjective.\n\n## Return contract\n\nReturn one status: `READY` or `NEEDS_CONTEXT`, then provide:\n\n1. Outcome, exclusions, assumptions, and exit criteria.\n2. Dependency-ordered task graph in canonical task-packet shape.\n3. Parallel batches with overlap rationale.\n4. Critical path.\n5. Risks, unresolved questions, and rollback-sensitive tasks.\n\n## Avoid\n\n- One task per file.\n- Time estimates presented as facts.\n- Large catch-all tasks such as \u201Cimplement feature\u201D.\n- Concurrency based only on dependency absence.\n- Creating durable plan files unless explicitly requested."
   },
   {
     "source": "test-engineer.md",
@@ -170,13 +170,13 @@ var listTreeFiles = (root, { includeDirectories = false } = {}) => {
   const visit = (directory) => {
     for (const entry of fs.readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name))) {
       const absolute = path.join(directory, entry.name);
-      const relative2 = slash(path.relative(absoluteRoot, absolute));
-      if (entry.isSymbolicLink()) throw new Error(`Refusing to traverse symbolic link: ${relative2}`);
+      const relative3 = slash(path.relative(absoluteRoot, absolute));
+      if (entry.isSymbolicLink()) throw new Error(`Refusing to traverse symbolic link: ${relative3}`);
       if (entry.isDirectory()) {
-        if (includeDirectories) entries.push({ absolute, relative: relative2, type: "directory" });
+        if (includeDirectories) entries.push({ absolute, relative: relative3, type: "directory" });
         visit(absolute);
-      } else if (entry.isFile()) entries.push({ absolute, relative: relative2, type: "file" });
-      else throw new Error(`Unsupported filesystem entry in context catalog: ${relative2}`);
+      } else if (entry.isFile()) entries.push({ absolute, relative: relative3, type: "file" });
+      else throw new Error(`Unsupported filesystem entry in context catalog: ${relative3}`);
     }
   };
   visit(absoluteRoot);
@@ -225,15 +225,65 @@ var safeRelativePath = (value, label = "Path") => {
 
 // ../../plugins/codex-agent/scripts/lib/context-index.mjs
 var ROOT_FIELDS = /* @__PURE__ */ new Set(["$schema", "version", "entries"]);
-var ENTRY_FIELDS = /* @__PURE__ */ new Set(["id", "path", "summary", "tags", "priority"]);
+var BASE_ENTRY_FIELDS = ["id", "path", "summary", "tags", "priority"];
+var V1_ENTRY_FIELDS = new Set(BASE_ENTRY_FIELDS);
+var V2_ENTRY_FIELDS = /* @__PURE__ */ new Set([
+  ...BASE_ENTRY_FIELDS,
+  "kind",
+  "scope",
+  "confidence",
+  "status",
+  "recordedAt",
+  "lastVerifiedAt",
+  "reviewAfter",
+  "aliases",
+  "related",
+  "supersedes",
+  "supersededBy",
+  "evidence"
+]);
 var PRIORITIES = ["critical", "high", "medium", "low"];
+var KINDS = ["architecture", "standard", "project", "decision", "constraint", "operation", "domain", "pitfall", "imported"];
+var CONFIDENCE = ["high", "medium", "low", "unknown"];
+var STATUSES = ["active", "conflicted", "superseded"];
+var EVIDENCE_TYPES = ["repository", "external", "decision"];
 var ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 var PATH_PATTERN = /^(?!\/)(?!.*\.\.\/).+\.md$/;
 var TAG_PATTERN = /^[a-z0-9_-]+$/;
+var DATE_PATTERN = /^\d{4}-\d{2}-\d{2}$/;
+var SHA_PATTERN = /^[0-9a-f]{64}$/;
 var CONTROL_CHARACTERS = /[\u0000-\u001f\u007f\u2028\u2029]/;
 var isObject = (value) => Boolean(value) && typeof value === "object" && !Array.isArray(value);
 var unsupportedFields = (value, allowed) => Object.keys(value).filter((field) => !allowed.has(field)).sort();
 var codePointLength = (value) => [...value].length;
+var isDateString = (value) => typeof value === "string" && DATE_PATTERN.test(value) && !Number.isNaN(Date.parse(`${value}T00:00:00Z`)) && (/* @__PURE__ */ new Date(`${value}T00:00:00Z`)).toISOString().slice(0, 10) === value;
+var contextDate = (date = /* @__PURE__ */ new Date()) => date.toISOString().slice(0, 10);
+var inferContextKind = (entryPath) => {
+  const normalized = String(entryPath ?? "").toLowerCase();
+  if (normalized.startsWith("architecture/")) return "architecture";
+  if (normalized.startsWith("standards/")) return "standard";
+  if (normalized.startsWith("project-intelligence/")) return "project";
+  if (normalized.startsWith("decisions/")) return "decision";
+  if (normalized.startsWith("constraints/")) return "constraint";
+  if (normalized.startsWith("operations/")) return "operation";
+  if (normalized.startsWith("domain/")) return "domain";
+  if (normalized.startsWith("pitfalls/")) return "pitfall";
+  return "imported";
+};
+var upgradeContextIndexEntry = (entry, { recordedAt = contextDate() } = {}) => ({
+  ...entry,
+  kind: entry.kind ?? inferContextKind(entry.path),
+  scope: entry.scope ?? (String(entry.path ?? "").split("/").slice(0, -1).join("/") || "repository"),
+  confidence: entry.confidence ?? "unknown",
+  status: entry.status ?? "active",
+  recordedAt: entry.recordedAt ?? recordedAt,
+  lastVerifiedAt: entry.lastVerifiedAt ?? recordedAt
+});
+var upgradeContextIndex = (index, options = {}) => ({
+  ...index?.$schema ? { $schema: index.$schema } : {},
+  version: 2,
+  entries: (index?.entries ?? []).map((entry) => upgradeContextIndexEntry(entry, options))
+});
 var isContextPath = (value) => typeof value === "string" && !value.includes("\\") && !CONTROL_CHARACTERS.test(value) && PATH_PATTERN.test(value) && !path2.posix.isAbsolute(value) && path2.posix.normalize(value) === value;
 var lstat = (target) => {
   try {
@@ -245,13 +295,13 @@ var lstat = (target) => {
 };
 var filesystemErrorCode = (error) => typeof error?.code === "string" ? error.code : "UNKNOWN";
 var isInside = (root, target) => {
-  const relative2 = path2.relative(root, target);
-  return relative2 === "" || !relative2.startsWith(`..${path2.sep}`) && relative2 !== ".." && !path2.isAbsolute(relative2);
+  const relative3 = path2.relative(root, target);
+  return relative3 === "" || !relative3.startsWith(`..${path2.sep}`) && relative3 !== ".." && !path2.isAbsolute(relative3);
 };
 var inspectAncestry = (root, target) => {
   let current = root;
-  const relative2 = path2.relative(root, target);
-  const segments = relative2 ? relative2.split(path2.sep).filter(Boolean) : [];
+  const relative3 = path2.relative(root, target);
+  const segments = relative3 ? relative3.split(path2.sep).filter(Boolean) : [];
   for (const [position, segment] of segments.entries()) {
     current = path2.join(current, segment);
     const inspected = lstat(current);
@@ -388,8 +438,8 @@ var validateContextIndex = (value, options = {}) => {
   if (Object.hasOwn(value, "$schema") && typeof value.$schema !== "string") {
     errors.push("context index.$schema must be a string");
   }
-  if (!Object.hasOwn(value, "version") || value.version !== 1) {
-    errors.push("context index.version must be 1");
+  if (!Object.hasOwn(value, "version") || ![1, 2].includes(value.version)) {
+    errors.push("context index.version must be 1 or 2");
   }
   if (!Object.hasOwn(value, "entries") || !Array.isArray(value.entries)) {
     errors.push("context index.entries must be an array");
@@ -398,13 +448,16 @@ var validateContextIndex = (value, options = {}) => {
   const ids = /* @__PURE__ */ new Set();
   const paths = /* @__PURE__ */ new Set();
   const filesystemPaths = [];
+  const relationships = [];
+  const entryItems = /* @__PURE__ */ new Map();
   for (const [position, item] of value.entries.entries()) {
     const label = `context index.entries[${position}]`;
     if (!isObject(item)) {
       errors.push(`${label} must be an object`);
       continue;
     }
-    for (const field of unsupportedFields(item, ENTRY_FIELDS)) {
+    const entryFields = value.version === 2 ? V2_ENTRY_FIELDS : V1_ENTRY_FIELDS;
+    for (const field of unsupportedFields(item, entryFields)) {
       errors.push(`${label} has unsupported field: ${field}`);
     }
     const validId = Object.hasOwn(item, "id") && typeof item.id === "string" && ID_PATTERN.test(item.id);
@@ -414,6 +467,7 @@ var validateContextIndex = (value, options = {}) => {
       errors.push(`context index has duplicate id: ${item.id}`);
     } else {
       ids.add(item.id);
+      entryItems.set(item.id, item);
     }
     const validPath = Object.hasOwn(item, "path") && isContextPath(item.path);
     if (!validPath) {
@@ -445,6 +499,134 @@ var validateContextIndex = (value, options = {}) => {
     if (!Object.hasOwn(item, "priority") || !PRIORITIES.includes(item.priority)) {
       errors.push(`${label}.priority must be one of: ${PRIORITIES.join(", ")}`);
     }
+    if (value.version === 2) {
+      if (!Object.hasOwn(item, "kind") || !KINDS.includes(item.kind)) {
+        errors.push(`${label}.kind must be one of: ${KINDS.join(", ")}`);
+      }
+      if (!Object.hasOwn(item, "scope") || typeof item.scope !== "string" || codePointLength(item.scope) < 2 || codePointLength(item.scope) > 120) {
+        errors.push(`${label}.scope must be a string between 2 and 120 characters`);
+      }
+      if (!Object.hasOwn(item, "confidence") || !CONFIDENCE.includes(item.confidence)) {
+        errors.push(`${label}.confidence must be one of: ${CONFIDENCE.join(", ")}`);
+      }
+      if (!Object.hasOwn(item, "status") || !STATUSES.includes(item.status)) {
+        errors.push(`${label}.status must be one of: ${STATUSES.join(", ")}`);
+      }
+      for (const dateField of ["recordedAt", "lastVerifiedAt"]) {
+        if (!Object.hasOwn(item, dateField) || !isDateString(item[dateField])) {
+          errors.push(`${label}.${dateField} must use YYYY-MM-DD`);
+        }
+      }
+      if (item.reviewAfter !== void 0 && !isDateString(item.reviewAfter)) {
+        errors.push(`${label}.reviewAfter must use YYYY-MM-DD`);
+      }
+      for (const field of ["aliases", "related", "supersedes", "supersededBy"]) {
+        if (item[field] === void 0) continue;
+        if (!Array.isArray(item[field]) || item[field].length > 20) {
+          errors.push(`${label}.${field} must be an array with at most 20 values`);
+          continue;
+        }
+        const seen = /* @__PURE__ */ new Set();
+        for (const [relationPosition, relation] of item[field].entries()) {
+          const validRelation = typeof relation === "string" && (field === "aliases" ? relation.trim().length >= 2 : ID_PATTERN.test(relation));
+          if (!validRelation) errors.push(`${label}.${field}[${relationPosition}] is invalid`);
+          if (seen.has(relation)) errors.push(`${label}.${field} must contain unique values: ${relation}`);
+          seen.add(relation);
+          if (field !== "aliases" && relation === item.id) errors.push(`${label}.${field} must not reference its own id`);
+          if (field !== "aliases" && validRelation) relationships.push({ label, field, target: relation });
+        }
+      }
+      if (item.evidence !== void 0) {
+        if (!Array.isArray(item.evidence) || item.evidence.length > 20) {
+          errors.push(`${label}.evidence must be an array with at most 20 values`);
+        } else for (const [evidencePosition, evidence] of item.evidence.entries()) {
+          const evidenceLabel = `${label}.evidence[${evidencePosition}]`;
+          if (!isObject(evidence)) {
+            errors.push(`${evidenceLabel} must be an object`);
+            continue;
+          }
+          for (const field of unsupportedFields(evidence, /* @__PURE__ */ new Set([
+            "type",
+            "locator",
+            "note",
+            "title",
+            "version",
+            "sha256",
+            "retrievedAt",
+            "publishedAt",
+            "decidedAt",
+            "decisionId"
+          ]))) {
+            errors.push(`${evidenceLabel} has unsupported field: ${field}`);
+          }
+          if (!EVIDENCE_TYPES.includes(evidence.type)) errors.push(`${evidenceLabel}.type is invalid`);
+          if (typeof evidence.locator !== "string" || !evidence.locator || evidence.locator.length > 500) {
+            errors.push(`${evidenceLabel}.locator must be a non-empty string of at most 500 characters`);
+          } else if (evidence.type === "external") {
+            try {
+              const url = new URL(evidence.locator);
+              if (url.protocol !== "https:") errors.push(`${evidenceLabel}.locator must use https`);
+              if (url.username || url.password) errors.push(`${evidenceLabel}.locator must not contain credentials`);
+            } catch {
+              errors.push(`${evidenceLabel}.locator must be an absolute URL`);
+            }
+          } else if (path2.posix.isAbsolute(evidence.locator) || path2.posix.normalize(evidence.locator) !== evidence.locator || evidence.locator.includes("\\") || evidence.locator.startsWith("../")) {
+            errors.push(`${evidenceLabel}.locator must be a normalized repository-relative path`);
+          }
+          if (typeof evidence.note !== "string" || evidence.note.trim().length < 5 || evidence.note.length > 300) {
+            errors.push(`${evidenceLabel}.note must be a string between 5 and 300 characters`);
+          }
+          if (["repository", "decision"].includes(evidence.type) && !SHA_PATTERN.test(evidence.sha256 ?? "")) {
+            errors.push(`${evidenceLabel}.sha256 is required for repository evidence`);
+          } else if (evidence.sha256 !== void 0 && !SHA_PATTERN.test(evidence.sha256)) {
+            errors.push(`${evidenceLabel}.sha256 is invalid`);
+          }
+          for (const dateField of ["retrievedAt", "publishedAt", "decidedAt"]) {
+            if (evidence[dateField] !== void 0 && !isDateString(evidence[dateField])) {
+              errors.push(`${evidenceLabel}.${dateField} must use YYYY-MM-DD`);
+            }
+          }
+          for (const textField of ["title", "version", "decisionId"]) {
+            if (evidence[textField] !== void 0 && (typeof evidence[textField] !== "string" || !evidence[textField].trim() || evidence[textField].length > 200)) {
+              errors.push(`${evidenceLabel}.${textField} must be a non-empty string of at most 200 characters`);
+            }
+          }
+        }
+      }
+    }
+  }
+  if (value.version === 2) {
+    for (const relationship of relationships) {
+      if (!ids.has(relationship.target)) errors.push(`${relationship.label}.${relationship.field} references unknown id: ${relationship.target}`);
+    }
+    for (const [id, item] of entryItems) {
+      for (const targetId of item.supersedes ?? []) {
+        const target = entryItems.get(targetId);
+        if (target && !(target.supersededBy ?? []).includes(id)) errors.push(`context index supersession is asymmetric: ${id} supersedes ${targetId}`);
+        if (target && target.status !== "superseded") errors.push(`context index superseded entry must have status superseded: ${targetId}`);
+      }
+      for (const targetId of item.supersededBy ?? []) {
+        const target = entryItems.get(targetId);
+        if (target && !(target.supersedes ?? []).includes(id)) errors.push(`context index supersession is asymmetric: ${id} is superseded by ${targetId}`);
+      }
+    }
+    const visiting = /* @__PURE__ */ new Set();
+    const visited = /* @__PURE__ */ new Set();
+    const visit = (id) => {
+      if (visiting.has(id)) return true;
+      if (visited.has(id)) return false;
+      visiting.add(id);
+      for (const target of entryItems.get(id)?.supersedes ?? []) if (entryItems.has(target) && visit(target)) return true;
+      visiting.delete(id);
+      visited.add(id);
+      return false;
+    };
+    for (const id of entryItems.keys()) {
+      if (visit(id)) {
+        errors.push(`context index supersession graph contains a cycle involving: ${id}`);
+        break;
+      }
+    }
   }
   if (filesystem) {
     for (const entryPath of filesystemPaths) validateFilesystemEntry(filesystem, entryPath, errors);
@@ -1011,15 +1193,15 @@ var applyLockedTransaction = ({ root, documents, indexContent, backupPaths = []
     const stagedIndex = path3.join(stagedRoot, "index.json");
     fs3.writeFileSync(stagedIndex, indexContent, { flag: "wx" });
     const backedUp = [];
-    const existingBackups = normalizedBackups.filter((relative2) => fs3.existsSync(path3.join(contextRoot, ...relative2.split("/"))));
+    const existingBackups = normalizedBackups.filter((relative3) => fs3.existsSync(path3.join(contextRoot, ...relative3.split("/"))));
     if (existingBackups.length) {
       const backupRoot = path3.join(codexAgentRoot, "backups", timestamp(), ".codex-agent", "context");
       assertNoSymlink(projectRoot, backupRoot, "Context backup directory");
-      for (const relative2 of existingBackups) {
-        const source = path3.join(contextRoot, ...relative2.split("/"));
+      for (const relative3 of existingBackups) {
+        const source = path3.join(contextRoot, ...relative3.split("/"));
         assertInside(contextRoot, source, "Context backup source");
         assertNoSymlink(projectRoot, source, "Context backup source");
-        const destination = path3.join(backupRoot, ...relative2.split("/"));
+        const destination = path3.join(backupRoot, ...relative3.split("/"));
         fs3.mkdirSync(path3.dirname(destination), { recursive: true });
         fs3.copyFileSync(source, destination, fs3.constants.COPYFILE_EXCL);
         backedUp.push(slash(path3.relative(projectRoot, destination)));
@@ -1051,13 +1233,13 @@ var applyLockedTransaction = ({ root, documents, indexContent, backupPaths = []
       items: manifestItems
     };
     writeRecoveryManifest({ transactionRoot, manifest });
-    const promote = (relative2) => {
-      const staged = path3.join(stagedRoot, ...relative2.split("/"));
-      const destination = path3.join(contextRoot, ...relative2.split("/"));
+    const promote = (relative3) => {
+      const staged = path3.join(stagedRoot, ...relative3.split("/"));
+      const destination = path3.join(contextRoot, ...relative3.split("/"));
       assertInside(contextRoot, destination, "Context transaction destination");
       assertNoSymlink(projectRoot, destination, "Context transaction destination");
       fs3.mkdirSync(path3.dirname(destination), { recursive: true });
-      const rollback = path3.join(rollbackRoot, ...relative2.split("/"));
+      const rollback = path3.join(rollbackRoot, ...relative3.split("/"));
       const existed = fs3.existsSync(destination);
       if (existed) {
         fs3.mkdirSync(path3.dirname(rollback), { recursive: true });
@@ -1365,61 +1547,25 @@ var inspectContextCatalogPath = ({ root, relativePath, kind = "recovery" }) => {
   return inspectCatalog({ projectRoot, contextRoot, kind });
 };
 
-// ../../plugins/codex-agent/scripts/context-project.mjs
-var ANALYSIS_VERSION = 1;
-var CONTEXT_LIFECYCLE_VERSION = 1;
-var HASH_PATTERN2 = /^[a-f0-9]{64}$/;
-var LIFECYCLE_PHASES = /* @__PURE__ */ new Set(["prepared", "migration-applied", "managed-running", "managed-applied"]);
-var IGNORED_DIRECTORIES = /* @__PURE__ */ new Set([
-  ".git",
-  ".codex-agent",
-  ".next",
-  ".nuxt",
-  ".turbo",
-  ".venv",
-  "build",
-  "coverage",
-  "dist",
-  "node_modules",
-  "target",
-  "vendor"
-]);
-var MANAGED_CONTEXT = [
-  ["architecture", "architecture/system.md", "System architecture, modules, entrypoints, and detected boundaries.", ["architecture", "modules", "entrypoints"], "high"],
-  ["code-quality", "standards/code-quality.md", "Detected source layout, naming, and engineering conventions.", ["code", "quality", "conventions"], "critical"],
-  ["testing", "standards/testing.md", "Detected test tooling, locations, and repository commands.", ["test", "verification", "commands"], "high"],
-  ["security", "standards/security.md", "Detected security-sensitive boundaries and baseline safeguards.", ["security", "auth", "secrets"], "critical"],
-  ["project-intelligence", "project-intelligence/project.md", "Detected stack, package tooling, CI, and project intelligence.", ["project", "stack", "ci"], "medium"]
-];
-var CODEX_AGENT_IGNORE_RULES = [
-  ".codex-agent/analysis.json",
-  ".codex-agent/sessions/",
-  ".codex-agent/backups/",
-  ".codex-agent/.locks/",
-  ".codex-agent/.transactions/",
-  ".codex-agent/**/*.tmp-*"
-];
-var BROAD_CODEX_AGENT_IGNORE_RULES = /* @__PURE__ */ new Set([
-  ".codex-agent",
-  ".codex-agent/",
-  ".codex-agent/**",
-  "/.codex-agent",
-  "/.codex-agent/",
-  "/.codex-agent/**"
-]);
-var MANAGED_CODEX_AGENT_IGNORE_RULES = new Set(CODEX_AGENT_IGNORE_RULES);
+// ../../plugins/codex-agent/scripts/lib/project-analysis.mjs
+import fs5 from "node:fs";
+import path5 from "node:path";
+var ANALYSIS_VERSION = 2;
 var slash2 = (value) => value.split(path5.sep).join("/");
 var unique = (items) => [...new Set(items.filter(Boolean))];
 var relative = (root, file) => slash2(path5.relative(root, file));
-var signal = (value, evidence = [], confidence = "unknown", status = "unknown") => ({
-  value,
-  evidence: unique(evidence),
-  confidence,
-  status
-});
+var signal = (value, evidence = [], confidence = "unknown", status = "unknown") => ({ value, evidence: unique(evidence), confidence, status });
 var detected = (value, evidence, confidence = "high") => signal(value, evidence, confidence, "detected");
 var inferred = (value, evidence, confidence = "medium") => signal(value, evidence, confidence, "inferred");
 var unknown = (empty) => signal(empty, [], "unknown", "unknown");
+var readText = (file, limit = 2 * 1024 * 1024) => {
+  try {
+    if (fs5.statSync(file).size > limit) return "";
+    return fs5.readFileSync(file, "utf8");
+  } catch {
+    return "";
+  }
+};
 var readJson = (file) => {
   try {
     return JSON.parse(fs5.readFileSync(file, "utf8"));
@@ -1427,10 +1573,127 @@ var readJson = (file) => {
     return null;
   }
 };
-var walk = (root, limit = 6e3) => {
+var attributes = (tag) => Object.fromEntries([...tag.matchAll(/([A-Za-z_][\w:.-]*)\s*=\s*"([^"]*)"/g)].map((match) => [match[1].toLowerCase(), match[2]]));
+var major = (version) => String(version ?? "").replace(/^[^\d]*/, "").match(/^\d+/)?.[0] ?? null;
+var escapeRegex = (value) => value.replace(/[|\\{}()[\]^$+?.]/g, "\\$&");
+var globRegex = (pattern) => {
+  let source = "";
+  for (let index = 0; index < pattern.length; index += 1) {
+    const character = pattern[index];
+    if (character === "*" && pattern[index + 1] === "*") {
+      source += ".*";
+      index += 1;
+    } else if (character === "*") source += "[^/]*";
+    else if (character === "?") source += "[^/]";
+    else source += escapeRegex(character);
+  }
+  return source;
+};
+var parseIgnoreRules = (root) => [".gitignore", ".tfignore", ".ignore"].flatMap((name) => {
+  const file = path5.join(root, name);
+  if (!fs5.existsSync(file) || !fs5.statSync(file).isFile()) return [];
+  return readText(file).split(/\r?\n/).flatMap((line) => {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) return [];
+    const negated = trimmed.startsWith("!");
+    let body = (negated ? trimmed.slice(1) : trimmed).replace(/\\/g, "/");
+    const anchored = body.startsWith("/");
+    if (anchored) body = body.slice(1);
+    const directory = body.endsWith("/");
+    body = body.replace(/\/$/, "");
+    if (!body) return [];
+    const prefix = anchored || body.includes("/") ? "^" : "(?:^|/)";
+    return [{ source: name, negated, regex: new RegExp(`${prefix}${globRegex(body)}${directory ? "(?:/|$)" : "$"}`, "i") }];
+  });
+});
+var rootFiles = (root) => fs5.readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isFile()).map((entry) => entry.name).sort();
+var expandRootGlob = (root, pattern) => {
+  const normalized = slash2(pattern).replace(/^\.\//, "").replace(/\/$/, "");
+  const segments = normalized.split("/");
+  const results = [];
+  const visit = (directory, index) => {
+    if (index === segments.length) {
+      results.push(relative(root, directory) || ".");
+      return;
+    }
+    const segment = segments[index];
+    if (!segment.includes("*") && !segment.includes("?")) {
+      visit(path5.join(directory, segment), index + 1);
+      return;
+    }
+    if (!fs5.existsSync(directory)) return;
+    const matcher = new RegExp(`^${globRegex(segment)}$`);
+    for (const entry of fs5.readdirSync(directory, { withFileTypes: true })) if (entry.isDirectory() && matcher.test(entry.name)) visit(path5.join(directory, entry.name), index + 1);
+  };
+  visit(root, 0);
+  return results.filter((item) => fs5.existsSync(path5.join(root, item)));
+};
+var rootContainerMembers = (root) => {
+  const members = [];
+  const evidence = [];
+  const add = (member, source) => {
+    const normalized = slash2(member).replace(/^\.\//, "").replace(/\/$/, "");
+    if (!normalized || normalized.startsWith("../") || path5.isAbsolute(normalized)) return;
+    for (const expanded of normalized.includes("*") || normalized.includes("?") ? expandRootGlob(root, normalized) : [normalized]) {
+      if (!members.includes(expanded)) members.push(expanded);
+    }
+    evidence.push(source);
+  };
+  for (const file of rootFiles(root)) {
+    const absolute = path5.join(root, file);
+    const lower = file.toLowerCase();
+    const content = readText(absolute);
+    if (lower.endsWith(".sln")) for (const match of content.matchAll(/^Project\("[^"]+"\)\s*=\s*"[^"]+",\s*"([^"]+\.(?:cs|fs|vb)proj)"/gmi)) add(path5.dirname(match[1].replace(/\\/g, "/")), file);
+    else if (lower === "package.json") {
+      const manifest = readJson(absolute);
+      const workspaces = Array.isArray(manifest?.workspaces) ? manifest.workspaces : manifest?.workspaces?.packages;
+      for (const member of workspaces ?? []) add(member, "package.json#workspaces");
+    } else if (lower === "cargo.toml") {
+      const workspaceBlock = content.match(/^\s*\[workspace\]\s*$([\s\S]*?)(?=^\s*\[|(?![\s\S]))/m)?.[1] ?? "";
+      const workspace = workspaceBlock.match(/members\s*=\s*\[([\s\S]*?)\]/m)?.[1] ?? "";
+      for (const match of workspace.matchAll(/["']([^"']+)["']/g)) add(match[1], "Cargo.toml#workspace.members");
+    } else if (lower === "go.work") {
+      for (const match of content.matchAll(/^\s*use\s+([^\s()]+)\s*$/gm)) add(match[1], "go.work#use");
+      for (const block of content.matchAll(/^\s*use\s*\(\s*$([\s\S]*?)^\s*\)\s*$/gm)) {
+        for (const line of block[1].split(/\r?\n/)) {
+          const member = line.replace(/\/\/.*$/, "").trim();
+          if (member) add(member, "go.work#use");
+        }
+      }
+    } else if (lower === "pom.xml") for (const match of content.matchAll(/<module>([^<]+)<\/module>/g)) add(match[1], "pom.xml#modules");
+    else if (["settings.gradle", "settings.gradle.kts"].includes(lower)) {
+      for (const statement of content.matchAll(/^\s*(include|includeBuild)\s*(?:\(([^)]*)\)|(.+))$/gm)) {
+        for (const match of (statement[2] ?? statement[3] ?? "").matchAll(/["']:?([^"']+)["']/g)) add(match[1].replace(/:/g, "/"), `${file}#${statement[1]}`);
+      }
+    }
+  }
+  return { members: unique(members), evidence: unique(evidence) };
+};
+var INTERNAL_METADATA = /* @__PURE__ */ new Set([".agents", ".codex", ".codex-agent", ".git", ".hg", ".opencode", ".svn"]);
+var FALLBACK_TRANSIENT = /* @__PURE__ */ new Set([".cache", ".idea", ".tmp", ".venv", ".vs", "bin", "coverage", "dist", "node_modules", "obj", "testresults"]);
+var inventoryRepository = (root, declaredRoots, limit = 5e4) => {
+  const rules = parseIgnoreRules(root);
   const files = [];
+  const excluded = [];
+  let truncated = false;
+  const declared = unique(declaredRoots.map((item) => slash2(item).replace(/^\.\//, "").replace(/\/$/, "")));
+  const requiredToReachDeclared = (candidate) => declared.some((item) => candidate === item || item.startsWith(`${candidate}/`));
+  const declaredPathPrefixes = (item) => item.split("/").map((_, index, segments) => segments.slice(0, index + 1).join("/"));
+  const ruleWouldHideDeclared = (rule, candidate) => declared.filter((item) => candidate === item || candidate.startsWith(`${item}/`) || item.startsWith(`${candidate}/`)).some((item) => declaredPathPrefixes(item).some((prefix) => rule.regex.test(prefix) || rule.regex.test(`${prefix}/`)));
+  const ignoredByRule = (candidate, directory) => {
+    let ignored = false;
+    let source = null;
+    for (const rule of rules) if ((rule.regex.test(candidate) || directory && rule.regex.test(`${candidate}/`)) && !ruleWouldHideDeclared(rule, candidate)) {
+      ignored = !rule.negated;
+      source = rule.source;
+    }
+    return ignored ? source : null;
+  };
   const visit = (directory) => {
-    if (files.length >= limit) return;
+    if (files.length >= limit) {
+      truncated = true;
+      return;
+    }
     let entries = [];
     try {
       entries = fs5.readdirSync(directory, { withFileTypes: true });
@@ -1438,26 +1701,56 @@ var walk = (root, limit = 6e3) => {
       return;
     }
     for (const entry of entries) {
-      if (files.length >= limit) break;
-      if (entry.isDirectory() && IGNORED_DIRECTORIES.has(entry.name)) continue;
+      if (files.length >= limit) {
+        truncated = true;
+        break;
+      }
       const absolute = path5.join(directory, entry.name);
-      if (entry.isDirectory()) visit(absolute);
-      else if (entry.isFile()) files.push(absolute);
+      const candidate = relative(root, absolute);
+      if (entry.isDirectory()) {
+        if (INTERNAL_METADATA.has(entry.name.toLowerCase())) continue;
+        const requiredPath = requiredToReachDeclared(candidate);
+        const ignoreSource = ignoredByRule(candidate, true);
+        const fallback = requiredPath ? false : FALLBACK_TRANSIENT.has(entry.name.toLowerCase());
+        if (ignoreSource || fallback) {
+          excluded.push({ path: candidate, role: fallback ? "transient" : "ignored", source: ignoreSource ?? "fallback" });
+          continue;
+        }
+        visit(absolute);
+      } else if (entry.isFile() && !ignoredByRule(candidate, false)) files.push(absolute);
     }
   };
   visit(root);
-  return files.sort();
-};
-var dependencyNames = (manifest) => new Set(Object.keys({
-  ...manifest?.dependencies ?? {},
-  ...manifest?.devDependencies ?? {},
-  ...manifest?.peerDependencies ?? {}
-}));
-var packageCommand = (manager, script) => {
-  if (manager === "npm" && script === "test") return "npm test";
-  if (manager === "yarn") return `yarn ${script}`;
-  return `${manager || "npm"} run ${script}`;
-};
+  return { files: files.sort(), excluded, truncated, limit };
+};
+var extensionLanguages = /* @__PURE__ */ new Map([
+  [".js", "JavaScript"],
+  [".mjs", "JavaScript"],
+  [".cjs", "JavaScript"],
+  [".jsx", "JavaScript"],
+  [".ts", "TypeScript"],
+  [".tsx", "TypeScript"],
+  [".py", "Python"],
+  [".go", "Go"],
+  [".rs", "Rust"],
+  [".java", "Java"],
+  [".kt", "Kotlin"],
+  [".swift", "Swift"],
+  [".rb", "Ruby"],
+  [".php", "PHP"],
+  [".cs", "C#"],
+  [".fs", "F#"],
+  [".vb", "Visual Basic"],
+  [".cpp", "C++"],
+  [".cc", "C++"],
+  [".c", "C"],
+  [".vue", "Vue"],
+  [".svelte", "Svelte"],
+  [".cshtml", "Razor"],
+  [".razor", "Razor"],
+  [".css", "CSS"],
+  [".scss", "Sass"]
+]);
 var classifyNaming = (name) => {
   if (/^[a-z][a-z0-9]*(?:-[a-z0-9]+)+$/.test(name)) return "kebab-case";
   if (/^[a-z][A-Za-z0-9]*$/.test(name) && /[A-Z]/.test(name)) return "camelCase";
@@ -1465,53 +1758,148 @@ var classifyNaming = (name) => {
   if (/^[a-z][a-z0-9]*(?:_[a-z0-9]+)+$/.test(name)) return "snake_case";
   return null;
 };
-var analyzeProject = ({ root }) => {
+var dependencyTechnologies = /* @__PURE__ */ new Map([
+  ["next", ["Next.js"]],
+  ["react", ["React"]],
+  ["vue", ["Vue"]],
+  ["@angular/core", ["Angular"]],
+  ["svelte", ["Svelte"]],
+  ["@sveltejs/kit", ["SvelteKit"]],
+  ["express", ["Express"]],
+  ["fastify", ["Fastify"]],
+  ["@nestjs/core", ["NestJS"]],
+  ["django", ["Django"]],
+  ["flask", ["Flask"]],
+  ["fastapi", ["FastAPI"]],
+  ["spring-boot-starter-web", ["Spring Boot"]],
+  ["rails", ["Ruby on Rails"]],
+  ["laravel/framework", ["Laravel"]],
+  ["github.com/gin-gonic/gin", ["Gin"]],
+  ["actix-web", ["Actix Web"]],
+  ["axum", ["Axum"]],
+  ["microsoft.aspnet.mvc", ["ASP.NET MVC", "major"]],
+  ["microsoft.aspnet.webapi.core", ["ASP.NET Web API"]],
+  ["entityframework", ["Entity Framework", "major"]],
+  ["unity", ["Unity"]],
+  ["topshelf", ["Topshelf"]],
+  ["serilog", ["Serilog"]],
+  ["jquery", ["jQuery"]],
+  ["bootstrap", ["Bootstrap", "major"]],
+  ["vitest", ["Vitest"]],
+  ["jest", ["Jest"]],
+  ["pytest", ["pytest"]],
+  ["junit", ["JUnit"]],
+  ["xunit", ["xUnit"]]
+]);
+var dependencyRecord = (ecosystem, name, version, evidence) => ({ ecosystem, name: String(name), version: String(version ?? ""), evidence });
+var parseDependencies = (root, file) => {
+  const absolute = path5.join(root, file);
+  const lower = path5.basename(file).toLowerCase();
+  const content = readText(absolute);
+  const result = [];
+  const add = (ecosystem, name, version) => {
+    if (name) result.push(dependencyRecord(ecosystem, name, version, `${file}#${name}`));
+  };
+  if (["package.json", "composer.json"].includes(lower)) {
+    const manifest = readJson(absolute);
+    for (const field of ["dependencies", "devDependencies", "peerDependencies", "require", "require-dev"]) for (const [name, version] of Object.entries(manifest?.[field] ?? {})) add(lower === "composer.json" ? "composer" : "node", name, version);
+  } else if (lower === "packages.config") for (const match of content.matchAll(/<package\b[^>]*>/gi)) {
+    const item = attributes(match[0]);
+    add("nuget", item.id, item.version);
+  }
+  else if (lower === "requirements.txt") for (const line of content.split(/\r?\n/)) {
+    const match = line.trim().match(/^([A-Za-z0-9_.-]+)\s*(?:==|~=|>=|<=|>|<)?\s*([^;\s#]*)/);
+    if (match) add("python", match[1], match[2]);
+  }
+  else if (lower === "cargo.toml") {
+    let section2 = "";
+    for (const line of content.split(/\r?\n/)) {
+      const header = line.match(/^\s*\[([^\]]+)\]\s*(?:#.*)?$/);
+      if (header) {
+        section2 = header[1].toLowerCase();
+        continue;
+      }
+      if (!/(^|\.)dependencies$/.test(section2)) continue;
+      const match = line.match(/^\s*([A-Za-z0-9_.-]+)\s*=\s*(?:["']([^"']+)["']|\{[^}]*version\s*=\s*["']([^"']+))/);
+      if (match) add("cargo", match[1], match[2] ?? match[3]);
+    }
+  } else if (lower === "pyproject.toml") {
+    let section2 = "";
+    for (const line of content.split(/\r?\n/)) {
+      const header = line.match(/^\s*\[([^\]]+)\]\s*(?:#.*)?$/);
+      if (header) {
+        section2 = header[1].toLowerCase();
+        continue;
+      }
+      if (section2 === "project") {
+        const list = line.match(/^\s*dependencies\s*=\s*\[(.*)\]\s*(?:#.*)?$/);
+        for (const item of list?.[1]?.matchAll(/["']([A-Za-z0-9_.-]+)(?:\[[^\]]+\])?\s*([^"']*)["']/g) ?? []) add("python", item[1], item[2]);
+      } else if (section2 === "tool.poetry.dependencies" || section2.startsWith("tool.poetry.group.") && section2.endsWith(".dependencies")) {
+        const match = line.match(/^\s*([A-Za-z0-9_.-]+)\s*=\s*(?:["']([^"']+)["']|\{[^}]*version\s*=\s*["']([^"']+))/);
+        if (match && match[1].toLowerCase() !== "python") add("python", match[1], match[2] ?? match[3]);
+      }
+    }
+  } else if (lower === "go.mod") for (const match of content.matchAll(/^\s*([A-Za-z0-9_.\-/]+)\s+v([^\s]+)\s*$/gm)) add("go", match[1], match[2]);
+  else if (lower === "pom.xml") for (const match of content.matchAll(/<dependency>[\s\S]*?<artifactId>([^<]+)<\/artifactId>[\s\S]*?(?:<version>([^<]+)<\/version>)?[\s\S]*?<\/dependency>/gi)) add("maven", match[1], match[2]);
+  else if (["build.gradle", "build.gradle.kts"].includes(lower)) for (const match of content.matchAll(/["']([^:"']+):([^:"']+):([^"']+)["']/g)) add("gradle", match[2], match[3]);
+  else if (lower === "gemfile" || lower.endsWith(".gemspec")) for (const match of content.matchAll(/\bgem\s+["']([^"']+)["'](?:\s*,\s*["']([^"']+)["'])?/g)) add("ruby", match[1], match[2]);
+  return result;
+};
+var manifestKinds = [
+  { id: "node", names: ["package.json"], toolchain: "Node package tooling" },
+  { id: "dotnet", pattern: /\.(?:cs|fs|vb)proj$/i, toolchain: "MSBuild" },
+  { id: "python", names: ["pyproject.toml", "requirements.txt", "setup.py"], toolchain: "Python packaging" },
+  { id: "jvm", names: ["pom.xml", "build.gradle", "build.gradle.kts"], toolchain: "JVM build tooling" },
+  { id: "go", names: ["go.mod"], toolchain: "Go modules" },
+  { id: "rust", names: ["Cargo.toml"], toolchain: "Cargo" },
+  { id: "php", names: ["composer.json"], toolchain: "Composer" },
+  { id: "ruby", names: ["Gemfile"], pattern: /\.gemspec$/i, toolchain: "Bundler" }
+];
+var manifestKind = (file) => manifestKinds.find((kind) => kind.names?.some((name) => name.toLowerCase() === path5.basename(file).toLowerCase()) || kind.pattern?.test(file));
+var resolveUnit = (root, manifest, declaredMembers) => {
+  const kind = manifestKind(manifest);
+  if (!kind) return null;
+  const unitPath = path5.posix.dirname(manifest) === "." ? "." : path5.posix.dirname(manifest);
+  const base = path5.basename(manifest).toLowerCase();
+  let name = path5.posix.basename(unitPath === "." ? root : unitPath);
+  if (base === "package.json") name = readJson(path5.join(root, manifest))?.name ?? name;
+  else if (/\.(?:cs|fs|vb)proj$/i.test(manifest)) name = path5.basename(manifest, path5.extname(manifest));
+  else if (base === "go.mod") name = readText(path5.join(root, manifest)).match(/^module\s+(.+)$/m)?.[1] ?? name;
+  return { name, path: unitPath, kind: kind.id, manifest, declared: declaredMembers.includes(unitPath), evidence: [manifest] };
+};
+var belongsToUnit = (file, unit) => unit.path === "." || file === unit.path || file.startsWith(`${unit.path}/`);
+var isVendoredAsset = (file) => /(^|\/)(?:vendor|third[_-]?party|node_modules)(\/|$)|\.min\.(?:js|css)$/i.test(file) || /(^|\/)scripts\/(?:tinymce|bootstrap|jquery|modernizr|respond)(\/|$)/i.test(file) || /(^|\/)content\/(?:bootstrap|tinymce)(\/|$)/i.test(file);
+var targetFramework = (value) => {
+  const target = String(value ?? "").trim().replace(/^v/i, "");
+  if (/^\d+(?:\.\d+)+$/.test(target)) return `.NET Framework ${target}`;
+  const legacy = target.match(/^net(\d)(\d)(\d?)$/i);
+  if (legacy && Number(legacy[1]) <= 4) return `.NET Framework ${legacy[1]}.${legacy[2]}${legacy[3] ? `.${legacy[3]}` : ""}`;
+  const standard = target.match(/^netstandard(\d+)\.(\d+)/i);
+  if (standard) return `.NET Standard ${standard[1]}.${standard[2]}`;
+  const modern = target.match(/^net(\d+)(?:\.(\d+))?/i);
+  return modern ? `.NET ${modern[1]}${modern[2] ? `.${modern[2]}` : ""}` : null;
+};
+var scriptCommand = (manager, name) => {
+  if (manager === "npm" && name === "test") return "npm test";
+  if (manager === "yarn") return `yarn ${name}`;
+  return `${manager} run ${name}`;
+};
+var detectorRegistry = Object.freeze(manifestKinds.map((detector) => Object.freeze({ ...detector })));
+var analyzeRepository = ({ root, scanLimit = 5e4 }) => {
+  if (!Number.isSafeInteger(scanLimit) || scanLimit < 1) throw new Error("scanLimit must be a positive integer");
   const requestedRoot = path5.resolve(root);
   if (!fs5.existsSync(requestedRoot)) throw new Error(`Project root not found: ${requestedRoot}`);
   const projectRoot = fs5.realpathSync(requestedRoot);
-  const files = walk(projectRoot);
-  const paths = files.map((file) => relative(projectRoot, file));
+  const container = rootContainerMembers(projectRoot);
+  const inventory = inventoryRepository(projectRoot, container.members, scanLimit);
+  const paths = inventory.files.map((file) => relative(projectRoot, file));
   const pathSet = new Set(paths);
-  const manifestPath = path5.join(projectRoot, "package.json");
-  const manifest = fs5.existsSync(manifestPath) ? readJson(manifestPath) : null;
-  const dependencies = dependencyNames(manifest);
-  const lockManagers = [
-    ["pnpm-lock.yaml", "pnpm"],
-    ["yarn.lock", "yarn"],
-    ["bun.lockb", "bun"],
-    ["bun.lock", "bun"],
-    ["package-lock.json", "npm"]
-  ].filter(([file]) => pathSet.has(file));
-  const declaredManager = typeof manifest?.packageManager === "string" ? manifest.packageManager.split("@")[0] : null;
-  const manager = declaredManager || lockManagers[0]?.[1] || (manifest ? "npm" : null);
-  const managerEvidence = [
-    ...declaredManager ? ["package.json#packageManager"] : [],
-    ...lockManagers.filter(([, name]) => !declaredManager || name === declaredManager).map(([file]) => file),
-    ...!declaredManager && !lockManagers.length && manifest ? ["package.json"] : []
-  ];
-  const extensionLanguages = /* @__PURE__ */ new Map([
-    [".js", "JavaScript"],
-    [".mjs", "JavaScript"],
-    [".cjs", "JavaScript"],
-    [".jsx", "JavaScript"],
-    [".ts", "TypeScript"],
-    [".tsx", "TypeScript"],
-    [".py", "Python"],
-    [".go", "Go"],
-    [".rs", "Rust"],
-    [".java", "Java"],
-    [".kt", "Kotlin"],
-    [".swift", "Swift"],
-    [".rb", "Ruby"],
-    [".php", "PHP"],
-    [".cs", "C#"],
-    [".cpp", "C++"],
-    [".c", "C"],
-    [".vue", "Vue"],
-    [".svelte", "Svelte"]
-  ]);
+  const manifests = paths.filter((file) => manifestKind(file));
+  const units = manifests.map((file) => resolveUnit(projectRoot, file, container.members)).filter(Boolean).filter((unit) => container.members.length === 0 || unit.declared || unit.path === ".").filter((unit, index, all) => all.findIndex((candidate) => candidate.path === unit.path && candidate.kind === unit.kind) === index).sort((left, right) => left.path.localeCompare(right.path));
+  const unitFiles = paths.filter((file) => units.length === 0 || units.some((unit) => belongsToUnit(file, unit)));
+  const ownedFiles = unitFiles.filter((file) => !isVendoredAsset(file));
   const languageEvidence = /* @__PURE__ */ new Map();
-  for (const file of paths) {
+  for (const file of ownedFiles) {
     const language = extensionLanguages.get(path5.extname(file).toLowerCase());
     if (!language) continue;
     const evidence = languageEvidence.get(language) ?? [];
@@ -1519,58 +1907,77 @@ var analyzeProject = ({ root }) => {
     languageEvidence.set(language, evidence);
   }
   const languages = [...languageEvidence.keys()].sort();
-  const frameworkPackages = /* @__PURE__ */ new Map([
-    ["next", "Next.js"],
-    ["react", "React"],
-    ["vue", "Vue"],
-    ["@angular/core", "Angular"],
-    ["svelte", "Svelte"],
-    ["@sveltejs/kit", "SvelteKit"],
-    ["express", "Express"],
-    ["fastify", "Fastify"],
-    ["nestjs", "NestJS"],
-    ["@nestjs/core", "NestJS"],
-    ["vitest", "Vitest"],
-    ["jest", "Jest"],
-    ["playwright", "Playwright"],
-    ["@playwright/test", "Playwright"],
-    ["cypress", "Cypress"]
-  ]);
-  const frameworks = unique([...frameworkPackages].filter(([name]) => dependencies.has(name)).map(([, label]) => label));
-  const frameworkEvidence = [...frameworkPackages].filter(([name]) => dependencies.has(name)).map(([name]) => `package.json#${name}`);
-  const scripts = manifest?.scripts ?? {};
-  const commandOrder = ["install", "setup", "dev", "start", "build", "lint", "typecheck", "check", "test", "test:unit", "test:e2e"];
-  const commands = [];
-  for (const name of commandOrder) {
-    if (typeof scripts[name] === "string") commands.push({ name, command: packageCommand(manager, name), source: `package.json#scripts.${name}` });
+  const toolchainMap = /* @__PURE__ */ new Map();
+  for (const unit of units) {
+    const detector = manifestKinds.find((item) => item.id === unit.kind);
+    const current = toolchainMap.get(detector.toolchain) ?? [];
+    current.push(unit.manifest);
+    toolchainMap.set(detector.toolchain, current);
+  }
+  const lockToolchains = [
+    ["pnpm-lock.yaml", "pnpm"],
+    ["yarn.lock", "Yarn"],
+    ["bun.lock", "Bun"],
+    ["bun.lockb", "Bun"],
+    ["package-lock.json", "npm"],
+    ["uv.lock", "uv"],
+    ["poetry.lock", "Poetry"],
+    ["Pipfile.lock", "Pipenv"],
+    ["Cargo.lock", "Cargo"],
+    ["go.sum", "Go modules"],
+    ["composer.lock", "Composer"],
+    ["Gemfile.lock", "Bundler"]
+  ];
+  for (const [file, name] of lockToolchains) if (pathSet.has(file)) toolchainMap.set(name, unique([...toolchainMap.get(name) ?? [], file]));
+  const packagesConfig = ownedFiles.find((file) => path5.basename(file).toLowerCase() === "packages.config");
+  if (packagesConfig) toolchainMap.set("NuGet", unique([...toolchainMap.get("NuGet") ?? [], packagesConfig]));
+  const rootPackage = pathSet.has("package.json") ? readJson(path5.join(projectRoot, "package.json")) : null;
+  if (rootPackage?.packageManager) toolchainMap.set(rootPackage.packageManager.split("@")[0], unique([...toolchainMap.get(rootPackage.packageManager.split("@")[0]) ?? [], "package.json#packageManager"]));
+  const toolchains = [...toolchainMap].map(([name, evidence]) => ({ name, evidence: unique(evidence) })).sort((left, right) => left.name.localeCompare(right.name));
+  const dependencyManifests = ownedFiles.filter((file) => ["package.json", "composer.json", "packages.config", "requirements.txt", "cargo.toml", "pyproject.toml", "go.mod", "pom.xml", "build.gradle", "build.gradle.kts", "gemfile"].includes(path5.basename(file).toLowerCase()) || /\.gemspec$/i.test(file));
+  const dependencies = dependencyManifests.flatMap((file) => parseDependencies(projectRoot, file));
+  const technologyMap = /* @__PURE__ */ new Map();
+  const addTechnology = (name, evidence) => {
+    const versioned = name.match(/^(.*)\s+\d+(?:\.\d+)*$/);
+    if (versioned) technologyMap.delete(versioned[1]);
+    else if ([...technologyMap.keys()].some((item) => item.startsWith(`${name} `) && /^\d/.test(item.slice(name.length + 1)))) return;
+    technologyMap.set(name, unique([...technologyMap.get(name) ?? [], evidence]));
+  };
+  for (const dependency of dependencies) {
+    const mapping = dependencyTechnologies.get(dependency.name.toLowerCase());
+    if (!mapping) continue;
+    const label = mapping[1] === "major" && major(dependency.version) ? `${mapping[0]} ${major(dependency.version)}` : mapping[0];
+    addTechnology(label, dependency.evidence);
+  }
+  for (const file of unitFiles) {
+    if (/(^|\/)jquery-\d+(?:\.\d+)+(?:\.min)?\.js$/i.test(file)) addTechnology("jQuery", file);
+    if (/(^|\/)bootstrap(?:\.min)?\.(?:css|js)$/i.test(file)) {
+      const detectedMajor = readText(path5.join(projectRoot, file)).match(/\bBootstrap\s+v(\d+)/i)?.[1];
+      addTechnology(detectedMajor ? `Bootstrap ${detectedMajor}` : "Bootstrap", file);
+    }
   }
-  for (const name of Object.keys(scripts).sort()) {
-    if (!commands.some((item) => item.name === name) && /^(build|lint|typecheck|test|check)(:|$)/.test(name)) {
-      commands.push({ name, command: packageCommand(manager, name), source: `package.json#scripts.${name}` });
+  for (const unit of units.filter((item) => item.kind === "dotnet")) {
+    const content = readText(path5.join(projectRoot, unit.manifest));
+    for (const match of content.matchAll(/<(TargetFrameworkVersion|TargetFramework|TargetFrameworks)>([^<]+)<\/\1>/gi)) for (const value of match[2].split(";")) {
+      const label = targetFramework(value);
+      if (label) addTechnology(label, `${unit.manifest}#${match[1]}`);
     }
   }
+  const technologies = [...technologyMap].map(([name, evidence]) => ({ name, evidence: unique(evidence) })).sort((left, right) => left.name.localeCompare(right.name));
+  const commands = [];
+  const scripts = rootPackage?.scripts ?? {};
+  for (const name of Object.keys(scripts).sort()) if (/^(?:build|check|dev|install|lint|setup|start|test|typecheck)(?::|$)/.test(name)) {
+    const manager = rootPackage.packageManager?.split("@")[0] ?? (pathSet.has("pnpm-lock.yaml") ? "pnpm" : pathSet.has("yarn.lock") ? "yarn" : "npm");
+    commands.push({ name, command: scriptCommand(manager, name), source: `package.json#scripts.${name}` });
+  }
   const entrypoints = [];
-  for (const [field, value] of [["main", manifest?.main], ["module", manifest?.module]]) {
-    if (typeof value === "string") entrypoints.push({ path: value, source: `package.json#${field}` });
-  }
-  if (typeof manifest?.bin === "string") entrypoints.push({ path: manifest.bin, source: "package.json#bin" });
-  else for (const value of Object.values(manifest?.bin ?? {})) if (typeof value === "string") entrypoints.push({ path: value, source: "package.json#bin" });
-  for (const candidate of ["src/index.ts", "src/index.js", "src/main.ts", "src/main.js", "app/page.tsx", "app/page.jsx", "main.go", "Cargo.toml"]) {
-    if (pathSet.has(candidate) && !entrypoints.some((item) => item.path === candidate)) entrypoints.push({ path: candidate, source: candidate });
-  }
-  const modules = [];
-  const moduleRoots = unique(paths.filter((file) => extensionLanguages.has(path5.extname(file).toLowerCase())).map((file) => file.split("/")[0]).filter((name) => name && !name.startsWith(".")));
-  for (const name of moduleRoots.slice(0, 20)) {
-    const evidence = paths.filter((file) => file.startsWith(`${name}/`) && extensionLanguages.has(path5.extname(file).toLowerCase())).slice(0, 3);
-    modules.push({ name, path: name, evidence });
-  }
-  const testFiles = paths.filter((file) => /(^|\/)(__tests__\/|tests?\/|[^/]+\.(?:test|spec)\.[^.]+$)/.test(file));
-  const testConfigs = paths.filter((file) => /(^|\/)(vitest|jest|playwright|cypress)[^/]*\.(?:js|mjs|cjs|ts|json)$/.test(file));
-  const ciFiles = paths.filter((file) => file.startsWith(".github/workflows/") || [".gitlab-ci.yml", "Jenkinsfile", "azure-pipelines.yml"].includes(file));
-  const deploymentFiles = paths.filter((file) => /(^|\/)(Dockerfile|docker-compose\.ya?ml|vercel\.json|netlify\.toml|fly\.toml)$/.test(file));
-  const sourceFiles = paths.filter((file) => extensionLanguages.has(path5.extname(file).toLowerCase()));
+  for (const [field, value] of [["main", rootPackage?.main], ["module", rootPackage?.module]]) if (typeof value === "string") entrypoints.push({ path: value, source: `package.json#${field}` });
+  for (const file of ownedFiles.filter((item) => /(^|\/)(?:program\.cs|main\.(?:go|rs|py|js|ts)|global\.asax|app\/page\.(?:jsx?|tsx?))$/i.test(item)).slice(0, 30)) entrypoints.push({ path: file, source: file });
+  const testUnits = units.filter((unit) => /(^|[._-])tests?([._-]|$)/i.test(unit.name) || /(^|\/)tests?([/_-]|$)/i.test(unit.path));
+  const testFiles = ownedFiles.filter((file) => extensionLanguages.has(path5.extname(file).toLowerCase())).filter((file) => testUnits.some((unit) => belongsToUnit(file, unit)) || /(^|\/)(?:__tests__\/|tests?\/|[^/]+\.(?:test|spec)\.[^.]+$)/i.test(file)).filter((file) => !isVendoredAsset(file)).slice(0, 40);
+  const testConfigs = paths.filter((file) => /(^|\/)(?:vitest|jest|playwright|cypress)[^/]*\.(?:js|mjs|cjs|ts|json)$/i.test(file)).slice(0, 20);
   const namingEvidence = /* @__PURE__ */ new Map();
-  for (const file of sourceFiles) {
+  for (const file of ownedFiles.filter((item) => extensionLanguages.has(path5.extname(item).toLowerCase()))) {
     const style = classifyNaming(path5.basename(file, path5.extname(file)));
     if (!style) continue;
     const evidence = namingEvidence.get(style) ?? [];
@@ -1578,48 +1985,102 @@ var analyzeProject = ({ root }) => {
     namingEvidence.set(style, evidence);
   }
   const naming = [...namingEvidence].filter(([, evidence]) => evidence.length >= 3).sort((left, right) => right[1].length - left[1].length)[0];
-  const sourceRoots = ["src", "app", "lib", "packages", "apps", "services"].filter((directory) => paths.some((file) => file.startsWith(`${directory}/`)));
-  const securityEvidence = paths.filter(
-    (file) => !/^(?:\.agents\/context|\.codex-agent\/context|docs|templates)\//.test(file) && /(^|\/)(auth|security|permissions?|secrets?|\.env\.example)(\/|\.|$)/i.test(file)
-  ).slice(0, 20);
-  const boundaryDirectories = {
-    api: ["api", "routes", "controllers"],
-    ui: ["components", "views", "pages", "app"],
-    persistence: ["db", "database", "models", "repositories", "migrations"]
-  };
-  const boundaries = Object.fromEntries(Object.entries(boundaryDirectories).map(([kind, candidates]) => {
-    const found = candidates.filter((candidate) => paths.some((file) => file.split("/").includes(candidate)));
+  const ownedRoots = unique(units.map((unit) => unit.path === "." ? "." : unit.path.split("/")[0]));
+  const securityEvidence = ownedFiles.filter((file) => /(^|\/)(?:auth|security|permissions?|secrets?|\.env\.example)(\/|\.|$)/i.test(file)).slice(0, 20);
+  const boundaryCandidates = { api: ["api", "routes", "controllers"], ui: ["components", "views", "pages", "app"], persistence: ["db", "database", "models", "repositories", "migrations"] };
+  const boundaries = Object.fromEntries(Object.entries(boundaryCandidates).map(([kind, candidates]) => {
+    const found = unique(ownedFiles.flatMap((file) => {
+      const segments = file.split("/");
+      const index = segments.findIndex((segment) => candidates.includes(segment.toLowerCase()));
+      return index < 0 ? [] : [segments.slice(0, index + 1).join("/")];
+    })).sort();
     return [kind, found.length ? detected(found, found.map((item) => `directory:${item}`), "medium") : unknown([])];
   }));
+  const ciFiles = paths.filter((file) => file.startsWith(".github/workflows/") || [".gitlab-ci.yml", "Jenkinsfile", "azure-pipelines.yml"].includes(file));
+  const deploymentFiles = paths.filter((file) => /(^|\/)(?:Dockerfile|docker-compose\.ya?ml|vercel\.json|netlify\.toml|fly\.toml)$/i.test(file));
+  const rootSolution = rootFiles(projectRoot).find((file) => /\.sln$/i.test(file));
+  const projectName = rootPackage?.name ?? (rootSolution ? path5.basename(rootSolution, path5.extname(rootSolution)) : path5.basename(projectRoot));
+  const projectEvidence = rootPackage?.name ? ["package.json#name"] : rootSolution ? [rootSolution] : ["repository directory name"];
   return {
     $schema: "project-analysis.schema.json",
     version: ANALYSIS_VERSION,
     root: projectRoot,
-    project: manifest?.name ? detected({ name: manifest.name, private: Boolean(manifest.private) }, ["package.json#name"]) : inferred({ name: path5.basename(projectRoot) }, ["repository directory name"], "low"),
-    packageManager: manager ? declaredManager || lockManagers.length ? detected(manager, managerEvidence, "high") : inferred(manager, managerEvidence, "low") : unknown(null),
+    project: rootPackage?.name || rootSolution ? detected({ name: projectName, private: Boolean(rootPackage?.private) }, projectEvidence) : inferred({ name: projectName }, projectEvidence, "low"),
     languages: languages.length ? detected(languages, [...languageEvidence.values()].flat(), "high") : unknown([]),
-    frameworks: frameworks.length ? detected(frameworks, frameworkEvidence, "high") : unknown([]),
+    toolchains: toolchains.length ? detected(toolchains, toolchains.flatMap((item) => item.evidence), "high") : unknown([]),
+    technologies: technologies.length ? detected(technologies, technologies.flatMap((item) => item.evidence), "high") : unknown([]),
     commands: commands.length ? detected(commands, commands.map((item) => item.source), "high") : unknown([]),
-    modules: modules.length ? inferred(modules, modules.flatMap((item) => item.evidence), modules.length > 1 ? "medium" : "low") : unknown([]),
+    units: units.length ? detected(units, unique([...container.evidence, ...units.flatMap((item) => item.evidence)]), container.evidence.length ? "high" : "medium") : unknown([]),
     entrypoints: entrypoints.length ? detected(entrypoints, entrypoints.map((item) => item.source), "high") : unknown([]),
     conventions: {
-      sourceLayout: sourceRoots.length ? detected(sourceRoots, sourceRoots.map((item) => `directory:${item}`), "high") : unknown([]),
+      sourceLayout: ownedRoots.length ? detected(ownedRoots, units.flatMap((item) => item.evidence), "high") : unknown([]),
       fileNaming: naming ? inferred(naming[0], naming[1].slice(0, 8), "medium") : unknown(null),
       boundaries
     },
     security: securityEvidence.length ? detected(securityEvidence, securityEvidence, "medium") : unknown([]),
-    testing: testFiles.length || testConfigs.length ? detected({ files: testFiles.slice(0, 30), configs: testConfigs }, [...testFiles.slice(0, 10), ...testConfigs], "high") : unknown({ files: [], configs: [] }),
+    testing: testFiles.length || testConfigs.length || testUnits.length ? detected({ units: testUnits.map((unit) => unit.path), files: testFiles, configs: testConfigs }, unique([...testUnits.flatMap((unit) => unit.evidence), ...testFiles.slice(0, 10), ...testConfigs]), "high") : unknown({ units: [], files: [], configs: [] }),
     ciCd: ciFiles.length || deploymentFiles.length ? detected({ ci: ciFiles, deployment: deploymentFiles }, [...ciFiles, ...deploymentFiles], "high") : unknown({ ci: [], deployment: [] }),
-    existingGuidance: pathSet.has("AGENTS.md") ? detected(true, ["AGENTS.md"], "high") : detected(false, ["AGENTS.md not found"], "high")
+    scan: detected({ files: paths.length, truncated: inventory.truncated, limit: inventory.limit, excluded: inventory.excluded.slice(0, 100) }, unique(["repository directory name", ...parseIgnoreRules(projectRoot).map((rule) => rule.source), ...container.evidence]), inventory.truncated ? "medium" : "high"),
+    existingGuidance: fs5.existsSync(path5.join(projectRoot, "AGENTS.md")) ? detected(true, ["AGENTS.md"], "high") : detected(false, ["AGENTS.md not found"], "high")
   };
 };
+
+// ../../plugins/codex-agent/scripts/context-project.mjs
+var CONTEXT_LIFECYCLE_VERSION = 1;
+var HASH_PATTERN2 = /^[a-f0-9]{64}$/;
+var LIFECYCLE_PHASES = /* @__PURE__ */ new Set(["prepared", "migration-applied", "managed-running", "managed-applied"]);
+var MANAGED_CONTEXT = [
+  ["architecture", "architecture/system.md", "System architecture, project units, entrypoints, and detected boundaries.", ["architecture", "units", "entrypoints"], "high", ["units", "entrypoints", "conventions.boundaries"]],
+  ["code-quality", "standards/code-quality.md", "Detected source layout, naming, and engineering conventions.", ["code", "quality", "conventions"], "critical", ["conventions", "languages"]],
+  ["testing", "standards/testing.md", "Detected test tooling, locations, and repository commands.", ["test", "verification", "commands"], "high", ["testing", "commands"]],
+  ["security", "standards/security.md", "Detected security-sensitive boundaries and baseline safeguards.", ["security", "auth", "secrets"], "critical", ["security"]],
+  ["project-intelligence", "project-intelligence/project.md", "Detected stack, toolchains, CI, and project intelligence.", ["project", "stack", "ci"], "medium", ["project", "languages", "toolchains", "technologies", "ciCd", "scan"]]
+];
+var CODEX_AGENT_IGNORE_RULES = [
+  ".codex-agent/analysis.json",
+  ".codex-agent/sessions/",
+  ".codex-agent/backups/",
+  ".codex-agent/.locks/",
+  ".codex-agent/.transactions/",
+  ".codex-agent/**/*.tmp-*"
+];
+var BROAD_CODEX_AGENT_IGNORE_RULES = /* @__PURE__ */ new Set([
+  ".codex-agent",
+  ".codex-agent/",
+  ".codex-agent/**",
+  "/.codex-agent",
+  "/.codex-agent/",
+  "/.codex-agent/**"
+]);
+var MANAGED_CODEX_AGENT_IGNORE_RULES = new Set(CODEX_AGENT_IGNORE_RULES);
+var EXCLUDABLE_MANAGED_FILES = /* @__PURE__ */ new Set([".codex/config.toml", ".gitignore"]);
+var slash3 = (value) => value.split(path6.sep).join("/");
+var unique2 = (items) => [...new Set(items.filter(Boolean))];
+var relative2 = (root, file) => slash3(path6.relative(root, file));
+var normalizeManagedExclusions = (items = []) => {
+  if (!Array.isArray(items)) throw new Error("Managed exclusions must be an array");
+  const normalized = unique2(items.map((item) => safeRelativePath(item, "Managed exclusion"))).sort();
+  const unsupported = normalized.filter((item) => !EXCLUDABLE_MANAGED_FILES.has(item));
+  if (unsupported.length) {
+    throw new Error(`Unsupported managed exclusion: ${unsupported.join(", ")}. Supported paths: ${[...EXCLUDABLE_MANAGED_FILES].sort().join(", ")}`);
+  }
+  return normalized;
+};
+var readJson2 = (file) => {
+  try {
+    return JSON.parse(fs6.readFileSync(file, "utf8"));
+  } catch {
+    return null;
+  }
+};
+var analyzeProject = analyzeRepository;
 var isSignal = (value) => value && typeof value === "object" && "value" in value && Array.isArray(value.evidence);
 var validateProjectAnalysis = (analysis) => {
   const errors = [];
   if (!analysis || typeof analysis !== "object" || Array.isArray(analysis)) return { ok: false, errors: ["analysis must be an object"] };
   if (analysis.version !== ANALYSIS_VERSION) errors.push(`version must be ${ANALYSIS_VERSION}`);
   if (typeof analysis.root !== "string" || !analysis.root) errors.push("root must be a non-empty string");
-  for (const field of ["project", "packageManager", "languages", "frameworks", "commands", "modules", "entrypoints", "security", "testing", "ciCd", "existingGuidance"]) {
+  for (const field of ["project", "languages", "toolchains", "technologies", "commands", "units", "entrypoints", "security", "testing", "ciCd", "scan", "existingGuidance"]) {
     if (!isSignal(analysis[field])) errors.push(`${field} must contain value, evidence, confidence, and status`);
   }
   if (!analysis.conventions || typeof analysis.conventions !== "object") errors.push("conventions must be an object");
@@ -1645,7 +2106,7 @@ var validateProjectAnalysis = (analysis) => {
   return { ok: errors.length === 0, errors };
 };
 var validateAnalysisEvidence = (analysis, root) => {
-  const projectRoot = path5.resolve(root);
+  const projectRoot = path6.resolve(root);
   const errors = [];
   const visit = (value, location) => {
     if (isSignal(value)) {
@@ -1654,17 +2115,17 @@ var validateAnalysisEvidence = (analysis, root) => {
         if (item === "repository directory name") continue;
         const missing = item.endsWith(" not found");
         const raw = (missing ? item.slice(0, -10) : item).replace(/^directory:/, "").split("#")[0];
-        if (!raw || path5.isAbsolute(raw)) {
+        if (!raw || path6.isAbsolute(raw)) {
           errors.push(`${location} has invalid evidence: ${item}`);
           continue;
         }
-        const target = path5.resolve(projectRoot, raw);
-        if (target !== projectRoot && !target.startsWith(`${projectRoot}${path5.sep}`)) {
+        const target = path6.resolve(projectRoot, raw);
+        if (target !== projectRoot && !target.startsWith(`${projectRoot}${path6.sep}`)) {
           errors.push(`${location} evidence escapes the project: ${item}`);
         } else {
           try {
             assertNoSymlink(projectRoot, target, `${location} evidence`);
-            if (missing ? fs5.existsSync(target) : !fs5.existsSync(target)) {
+            if (missing ? fs6.existsSync(target) : !fs6.existsSync(target)) {
               errors.push(`${location} evidence does not match the repository: ${item}`);
             }
           } catch (error) {
@@ -1738,6 +2199,10 @@ var renderAgents = (analysis) => {
   if (present(analysis.commands)) {
     parts.push(section("Repository commands", bullets(analysis.commands.value.map((item) => `${mdCode(item.command)} \u2014 ${safeText(item.name)} (${safeText(item.source)})`))));
   }
+  const stack = [];
+  if (present(analysis.languages)) stack.push(`Languages: ${analysis.languages.value.join(", ")}.${evidenceSuffix(analysis.languages)}`);
+  if (present(analysis.technologies)) stack.push(`Technologies: ${analysis.technologies.value.map((item) => safeText(item.name)).join(", ")}.${evidenceSuffix(analysis.technologies)}`);
+  if (stack.length) parts.push(section("Detected stack", bullets(stack)));
   const conventions = [];
   if (present(analysis.conventions?.sourceLayout)) conventions.push(`Source roots: ${analysis.conventions.sourceLayout.value.map((item) => mdCode(`${item}/`)).join(", ")}.${evidenceSuffix(analysis.conventions.sourceLayout)}`);
   if (present(analysis.conventions?.fileNaming)) conventions.push(`Observed file naming: ${mdCode(analysis.conventions.fileNaming.value)}. Apply it only where nearby files confirm the pattern.${evidenceSuffix(analysis.conventions.fileNaming)}`);
@@ -1755,7 +2220,7 @@ var renderAgents = (analysis) => {
 };
 var renderArchitecture = (analysis) => {
   const parts = [];
-  if (present(analysis.modules)) parts.push(section("Observed modules", bullets(analysis.modules.value.map((item) => `${mdCode(`${item.path}/`)} (${item.evidence.slice(0, 2).map(safeText).join(", ")})`))));
+  if (present(analysis.units)) parts.push(section("Project units", bullets(analysis.units.value.map((item) => `${mdCode(item.path === "." ? "." : `${item.path}/`)} \u2014 ${safeText(item.name)} (${safeText(item.kind)}; ${item.evidence.slice(0, 2).map(safeText).join(", ")})`))));
   if (present(analysis.entrypoints)) parts.push(section("Entrypoints", bullets(analysis.entrypoints.value.map((item) => `${mdCode(item.path)} from ${safeText(item.source)}`))));
   const boundaries = Object.entries(analysis.conventions?.boundaries ?? {}).filter(([, item]) => present(item));
   if (boundaries.length) parts.push(section("Observed boundaries", bullets(boundaries.map(([kind, item]) => `${kind}: ${item.value.map((value) => mdCode(`${value}/`)).join(", ")}${evidenceSuffix(item)}`))));
@@ -1774,6 +2239,7 @@ var renderTesting = (analysis) => {
     if (testCommands.length) parts.push(section("Commands", bullets(testCommands.map((item) => `${mdCode(item.command)} (${safeText(item.source)})`))));
   }
   if (present(analysis.testing)) {
+    if (analysis.testing.value.units?.length) parts.push(section("Test units", bullets(analysis.testing.value.units.map(mdCode))));
     if (analysis.testing.value.configs.length) parts.push(section("Configuration", bullets(analysis.testing.value.configs.map(mdCode))));
     if (analysis.testing.value.files.length) parts.push(section("Observed tests", bullets(analysis.testing.value.files.slice(0, 20).map(mdCode))));
   }
@@ -1790,15 +2256,16 @@ var renderSecurity = (analysis) => {
 };
 var renderProject = (analysis) => {
   const stack = [];
-  if (present(analysis.packageManager)) stack.push(`Package manager: ${mdCode(analysis.packageManager.value)}.${evidenceSuffix(analysis.packageManager)}`);
   if (present(analysis.languages)) stack.push(`Languages: ${analysis.languages.value.join(", ")}.${evidenceSuffix(analysis.languages)}`);
-  if (present(analysis.frameworks)) stack.push(`Frameworks/tooling: ${analysis.frameworks.value.join(", ")}.${evidenceSuffix(analysis.frameworks)}`);
+  if (present(analysis.toolchains)) stack.push(`Toolchains: ${analysis.toolchains.value.map((item) => safeText(item.name)).join(", ")}.${evidenceSuffix(analysis.toolchains)}`);
+  if (present(analysis.technologies)) stack.push(`Technologies: ${analysis.technologies.value.map((item) => safeText(item.name)).join(", ")}.${evidenceSuffix(analysis.technologies)}`);
   const parts = [];
   if (stack.length) parts.push(section("Detected stack", bullets(stack)));
   if (present(analysis.ciCd)) {
     const items = [...analysis.ciCd.value.ci.map((item) => `CI: ${mdCode(item)}`), ...analysis.ciCd.value.deployment.map((item) => `Deployment: ${mdCode(item)}`)];
     parts.push(section("CI and deployment", bullets(items)));
   }
+  if (present(analysis.scan) && analysis.scan.value.truncated) parts.push(section("Discovery limits", `Repository scan reached its ${analysis.scan.value.limit}-file budget; review a refined analysis before applying context.`));
   return parts.join("\n\n") || "No stack or CI facts were detected with sufficient evidence.";
 };
 var markdownBlock = (id, body) => `<!-- codex-agent:managed:start ${id} -->
@@ -1823,7 +2290,31 @@ var managedIndexOwnershipConflicts = (existingIndex) => {
     return [];
   });
 };
-var renderProjectFiles = (analysis, existingIndex = null) => {
+var nestedValue = (value, dottedPath) => dottedPath.split(".").reduce((current, key) => current?.[key], value);
+var collectSignalEvidence = (value) => {
+  if (!value || typeof value !== "object") return [];
+  return [
+    ...Array.isArray(value.evidence) ? value.evidence : [],
+    ...Object.values(value).flatMap((item) => collectSignalEvidence(item))
+  ];
+};
+var managedEvidence = (analysis, id, signalPaths) => {
+  const projectRoot = path6.resolve(analysis.root);
+  const locators = unique2(signalPaths.flatMap((signalPath) => collectSignalEvidence(nestedValue(analysis, signalPath)))).map((locator) => String(locator).split("#")[0]).filter((locator) => locator && !path6.isAbsolute(locator));
+  return unique2(locators).flatMap((locator) => {
+    const target = path6.resolve(projectRoot, locator);
+    const relativePath = relative2(projectRoot, target);
+    if (relativePath.startsWith("../") || path6.isAbsolute(relativePath) || relativePath.startsWith(".codex-agent/context/") || relativePath.startsWith(".agents/context/")) return [];
+    try {
+      assertNoSymlink(projectRoot, target, `Managed context evidence ${locator}`);
+      if (!fs6.existsSync(target) || !fs6.statSync(target).isFile()) return [];
+      return [{ type: "repository", locator: relativePath, note: `Repository evidence used to generate ${id}.`, sha256: sha256(fs6.readFileSync(target)) }];
+    } catch {
+      return [];
+    }
+  }).slice(0, 20);
+};
+var renderProjectFiles = (analysis, existingIndex = null, { excludeManaged = [] } = {}) => {
   if (containsSensitiveContent(JSON.stringify({ analysis, existingIndex }))) {
     throw new Error("Project context rendering input appears to contain a secret or credential");
   }
@@ -1842,16 +2333,32 @@ var renderProjectFiles = (analysis, existingIndex = null) => {
     [".codex/config.toml", { kind: "toml", id: "agent-settings", body: "[agents]\nmax_concurrent_threads_per_session = 4\nmax_depth = 1\n\n[features]\nhooks = true" }]
   ]);
   for (const profile of agentProfiles) files.set(`.codex/agents/${profile.file}`, { kind: "toml", id: `profile-${profile.name}`, body: renderProfile(profile) });
-  const priorEntries = Array.isArray(existingIndex?.entries) ? existingIndex.entries : [];
+  const upgradedIndex = upgradeContextIndex(existingIndex ?? { version: 1, entries: [] });
+  const priorEntries = upgradedIndex.entries;
+  const priorByPair = new Map(priorEntries.map((entry) => [`${entry.id}\0${entry.path}`, entry]));
   const managedPairs = new Set(MANAGED_CONTEXT.map(([id, file]) => `${id}\0${file}`));
   const customEntries = priorEntries.filter((entry) => !managedPairs.has(`${entry.id}\0${entry.path}`));
   const index = {
     ...existingIndex?.$schema ? { $schema: existingIndex.$schema } : {},
-    version: 1,
-    entries: [...MANAGED_CONTEXT.map(([id, file, summary2, tags, priority]) => ({ id, path: file, summary: summary2, tags, priority })), ...customEntries]
+    version: 2,
+    entries: [
+      ...MANAGED_CONTEXT.map(([id, file, summary2, tags, priority, signalPaths]) => upgradeContextIndexEntry({
+        ...priorByPair.get(`${id}\0${file}`),
+        id,
+        path: file,
+        summary: summary2,
+        tags,
+        priority,
+        status: "active",
+        lastVerifiedAt: contextDate(),
+        evidence: managedEvidence(analysis, id, signalPaths)
+      })),
+      ...customEntries
+    ]
   };
   files.set(".codex-agent/context/index.json", { kind: "json", content: `${JSON.stringify(index, null, 2)}
 ` });
+  for (const file of normalizeManagedExclusions(excludeManaged)) files.delete(file);
   for (const [file, descriptor] of files) {
     if (containsSensitiveContent(descriptor.content ?? descriptor.body ?? "")) {
       throw new Error(`Generated managed content for ${file} appears to contain a secret or credential`);
@@ -1909,13 +2416,13 @@ var lineDiff = (before, after) => {
   const added = newLines.slice(prefix, newLines.length - suffix).map((line) => `+ ${line}`);
   return [`@@ line ${prefix + 1} @@`, ...removed, ...added].join("\n");
 };
-var analysisPathFor = (root) => path5.join(root, ".codex-agent", "analysis.json");
+var analysisPathFor = (root) => path6.join(root, ".codex-agent", "analysis.json");
 var readProjectText = (projectRoot, target, label) => {
   assertInside(projectRoot, target, label);
   assertNoSymlink(projectRoot, target, label);
-  if (!fs5.existsSync(target)) return null;
-  if (!fs5.lstatSync(target).isFile()) throw new Error(`${label} is not a file: ${relative(projectRoot, target)}`);
-  const content = fs5.readFileSync(target, "utf8");
+  if (!fs6.existsSync(target)) return null;
+  if (!fs6.lstatSync(target).isFile()) throw new Error(`${label} is not a file: ${relative2(projectRoot, target)}`);
+  const content = fs6.readFileSync(target, "utf8");
   if (containsSensitiveContent(content)) throw new Error(`${label} appears to contain a secret or credential`);
   return content;
 };
@@ -1936,8 +2443,8 @@ var readableCatalog = (root) => {
 };
 var catalogIndex = (catalog) => {
   if (catalog?.index && typeof catalog.index === "object") return catalog.index;
-  const indexPath = catalog?.indexPath ?? (catalog?.root ? path5.join(catalog.root, "index.json") : null);
-  return indexPath && fs5.existsSync(indexPath) ? readJson(indexPath) : null;
+  const indexPath = catalog?.indexPath ?? (catalog?.root ? path6.join(catalog.root, "index.json") : null);
+  return indexPath && fs6.existsSync(indexPath) ? readJson2(indexPath) : null;
 };
 var migrationChanges = (migration) => (migration?.changes ?? []).map((change) => typeof change === "string" ? { path: change, status: "migrate", phase: "catalog-migration" } : {
   ...change,
@@ -1946,7 +2453,7 @@ var migrationChanges = (migration) => (migration?.changes ?? []).map((change) =>
   phase: "catalog-migration"
 });
 var uniqueStrings = (items) => [...new Set(items.filter((item) => typeof item === "string" && item))];
-var planManagedFiles = ({ projectRoot, analysis, existingIndex, force, contextBaselineRoot = null }) => {
+var planManagedFiles = ({ projectRoot, analysis, existingIndex, force, excludeManaged = [], contextBaselineRoot = null }) => {
   const ownershipConflicts = managedIndexOwnershipConflicts(existingIndex);
   if (ownershipConflicts.length) {
     return {
@@ -1959,7 +2466,7 @@ var planManagedFiles = ({ projectRoot, analysis, existingIndex, force, contextBa
       writePlan: []
     };
   }
-  const rendered = renderProjectFiles(analysis, existingIndex);
+  const rendered = renderProjectFiles(analysis, existingIndex, { excludeManaged });
   for (const [file, descriptor] of rendered) {
     if (containsSensitiveContent(descriptor.content ?? descriptor.body ?? "")) {
       throw new Error(`Generated managed content for ${file} appears to contain a secret or credential`);
@@ -1968,12 +2475,12 @@ var planManagedFiles = ({ projectRoot, analysis, existingIndex, force, contextBa
   const changes = [];
   const conflicts = [];
   const writePlan = [];
-  const canonicalContextRoot = path5.join(projectRoot, ".codex-agent", "context");
+  const canonicalContextRoot = path6.join(projectRoot, ".codex-agent", "context");
   for (const [file, descriptor] of rendered) {
-    const destination = path5.join(projectRoot, file);
-    const contextRelative = path5.relative(canonicalContextRoot, destination);
-    const usesContextBaseline = contextBaselineRoot !== null && contextRelative !== "" && contextRelative !== ".." && !contextRelative.startsWith(`..${path5.sep}`) && !path5.isAbsolute(contextRelative);
-    const currentPath = usesContextBaseline ? path5.join(contextBaselineRoot, contextRelative) : destination;
+    const destination = path6.join(projectRoot, file);
+    const contextRelative = path6.relative(canonicalContextRoot, destination);
+    const usesContextBaseline = contextBaselineRoot !== null && contextRelative !== "" && contextRelative !== ".." && !contextRelative.startsWith(`..${path6.sep}`) && !path6.isAbsolute(contextRelative);
+    const currentPath = usesContextBaseline ? path6.join(contextBaselineRoot, contextRelative) : destination;
     const current = readProjectText(projectRoot, currentPath, `Managed project file ${file}`);
     const merged = replaceManaged(current, descriptor, force);
     if (merged.conflict && !force) {
@@ -1989,7 +2496,7 @@ var planManagedFiles = ({ projectRoot, analysis, existingIndex, force, contextBa
 };
 var applyManagedFiles = ({ projectRoot, writePlan, analysis, analysisCurrent, catalogPreconditions = [], lock = true }) => {
   const analysisPath = analysisPathFor(projectRoot);
-  const analysisRelative = relative(projectRoot, analysisPath);
+  const analysisRelative = relative2(projectRoot, analysisPath);
   const preconditionMap = new Map(catalogPreconditions.map((item) => [item.path, item.expected]));
   for (const { file, current } of writePlan) preconditionMap.set(file, current);
   preconditionMap.set(analysisRelative, analysisCurrent);
@@ -2031,7 +2538,7 @@ var snapshotCatalogPreconditions = ({ projectRoot, expected }) => {
   const current = assertCatalogPrecondition({ projectRoot, expected });
   if (current.state !== "canonical-only") return [];
   const preconditions = listTreeFiles(current.canonical.path).map((item) => ({
-    path: relative(projectRoot, item.absolute),
+    path: relative2(projectRoot, item.absolute),
     expected: readProjectText(projectRoot, item.absolute, `Canonical context file ${item.relative}`)
   }));
   assertCatalogPrecondition({ projectRoot, expected });
@@ -2040,7 +2547,7 @@ var snapshotCatalogPreconditions = ({ projectRoot, expected }) => {
 var assertManagedPreconditions = ({ projectRoot, writePlan, analysisCurrent, expectedCatalog }) => {
   assertCatalogPrecondition({ projectRoot, expected: expectedCatalog });
   for (const { file, current } of writePlan) {
-    const destination = path5.join(projectRoot, file);
+    const destination = path6.join(projectRoot, file);
     if (readProjectText(projectRoot, destination, `Managed project file ${file}`) !== current) {
       throw new Error(`Context managed-file precondition changed after preview: ${file}`);
     }
@@ -2061,10 +2568,11 @@ var managedPlanContract = (plan) => ({
   conflicts: [...plan.conflicts]
 });
 var managedPlanHash = (plan) => sha256(JSON.stringify(managedPlanContract(plan)));
-var lifecyclePlanHash = ({ operation, force, lifecycleCatalog, migrationPreview, analysis, analysisCurrent, analysisContent, plan, conflicts }) => sha256(JSON.stringify({
+var lifecyclePlanHash = ({ operation, force, excludedManaged, lifecycleCatalog, migrationPreview, analysis, analysisCurrent, analysisContent, plan, conflicts }) => sha256(JSON.stringify({
   version: CONTEXT_LIFECYCLE_VERSION,
   operation,
   force,
+  excludedManaged,
   catalog: {
     state: lifecycleCatalog.state,
     canonicalHash: lifecycleCatalog.canonical.hash,
@@ -2077,41 +2585,41 @@ var lifecyclePlanHash = ({ operation, force, lifecycleCatalog, migrationPreview,
   managed: managedPlanContract(plan),
   conflicts
 }));
-var lifecycleTransactionRoot = (projectRoot) => path5.join(projectRoot, ".codex-agent", ".transactions");
+var lifecycleTransactionRoot = (projectRoot) => path6.join(projectRoot, ".codex-agent", ".transactions");
 var lifecycleFileHash = ({ projectRoot, relativePath, label }) => {
   const normalized = safeRelativePath(relativePath, label);
-  const target = path5.join(projectRoot, ...normalized.split("/"));
+  const target = path6.join(projectRoot, ...normalized.split("/"));
   assertInside(projectRoot, target, label);
   assertNoSymlink(projectRoot, target, label);
-  if (!fs5.existsSync(target)) return null;
-  if (!fs5.lstatSync(target).isFile()) throw new Error(`${label} is not a regular file: ${normalized}`);
-  return sha256(fs5.readFileSync(target));
+  if (!fs6.existsSync(target)) return null;
+  if (!fs6.lstatSync(target).isFile()) throw new Error(`${label} is not a regular file: ${normalized}`);
+  return sha256(fs6.readFileSync(target));
 };
 var writeNewLifecycleJson = (destination, value) => {
-  const temporary = path5.join(path5.dirname(destination), `.${path5.basename(destination)}.tmp-${crypto4.randomUUID()}`);
+  const temporary = path6.join(path6.dirname(destination), `.${path6.basename(destination)}.tmp-${crypto4.randomUUID()}`);
   let descriptor;
   try {
-    descriptor = fs5.openSync(temporary, "wx", 384);
-    fs5.writeFileSync(descriptor, `${JSON.stringify(value, null, 2)}
+    descriptor = fs6.openSync(temporary, "wx", 384);
+    fs6.writeFileSync(descriptor, `${JSON.stringify(value, null, 2)}
 `);
-    fs5.fsyncSync(descriptor);
-    fs5.closeSync(descriptor);
+    fs6.fsyncSync(descriptor);
+    fs6.closeSync(descriptor);
     descriptor = void 0;
-    fs5.renameSync(temporary, destination);
+    fs6.renameSync(temporary, destination);
   } catch (error) {
     if (descriptor !== void 0) try {
-      fs5.closeSync(descriptor);
+      fs6.closeSync(descriptor);
     } catch {
     }
     try {
-      if (fs5.existsSync(temporary)) fs5.unlinkSync(temporary);
+      if (fs6.existsSync(temporary)) fs6.unlinkSync(temporary);
     } catch {
     }
     throw error;
   }
 };
 var validateLifecycleManifest = ({ projectRoot, transactionRoot, manifest }) => {
-  const transactionId2 = path5.basename(transactionRoot);
+  const transactionId2 = path6.basename(transactionRoot);
   if (!manifest || typeof manifest !== "object" || Array.isArray(manifest) || manifest.version !== CONTEXT_LIFECYCLE_VERSION || manifest.type !== "context-lifecycle" || manifest.transactionId !== transactionId2 || manifest.operation !== "context.init" || manifest.phase !== "prepared" || manifest.revision !== 1 || !HASH_PATTERN2.test(manifest.planHash ?? "")) {
     throw new Error(`Invalid context lifecycle recovery manifest: ${transactionId2}`);
   }
@@ -2154,16 +2662,16 @@ var lifecyclePhase = ({ projectRoot, transactionRoot, transactionId: transaction
   let phase = "prepared";
   let missingEarlier = false;
   for (const candidate of ["migration-applied", "managed-running", "managed-applied"]) {
-    const markerPath = path5.join(transactionRoot, `${candidate}.json`);
+    const markerPath = path6.join(transactionRoot, `${candidate}.json`);
     assertNoSymlink(projectRoot, markerPath, `Lifecycle phase marker ${candidate}`);
-    if (!fs5.existsSync(markerPath)) {
+    if (!fs6.existsSync(markerPath)) {
       missingEarlier = true;
       continue;
     }
     if (missingEarlier) throw new Error(`Lifecycle phase markers are not contiguous: ${transactionId2}`);
     let marker;
     try {
-      marker = JSON.parse(fs5.readFileSync(markerPath, "utf8"));
+      marker = JSON.parse(fs6.readFileSync(markerPath, "utf8"));
     } catch {
       throw new Error(`Invalid lifecycle phase marker: ${candidate}`);
     }
@@ -2175,13 +2683,13 @@ var lifecyclePhase = ({ projectRoot, transactionRoot, transactionId: transaction
   return phase;
 };
 var readLifecycleJournal = ({ projectRoot, transactionRoot }) => {
-  const manifestPath = path5.join(transactionRoot, "manifest.json");
+  const manifestPath = path6.join(transactionRoot, "manifest.json");
   assertNoSymlink(projectRoot, manifestPath, "Lifecycle recovery manifest");
   let manifest;
   try {
-    manifest = JSON.parse(fs5.readFileSync(manifestPath, "utf8"));
+    manifest = JSON.parse(fs6.readFileSync(manifestPath, "utf8"));
   } catch {
-    throw new Error(`Invalid context lifecycle recovery manifest: ${path5.basename(transactionRoot)}`);
+    throw new Error(`Invalid context lifecycle recovery manifest: ${path6.basename(transactionRoot)}`);
   }
   const normalized = validateLifecycleManifest({ projectRoot, transactionRoot, manifest });
   return {
@@ -2197,7 +2705,7 @@ var markLifecyclePhase = (journal, phase) => {
   if (order.indexOf(phase) !== order.indexOf(journal.phase) + 1) {
     throw new Error(`Invalid lifecycle phase transition: ${journal.phase} -> ${phase}`);
   }
-  writeNewLifecycleJson(path5.join(journal.transactionRoot, `${phase}.json`), {
+  writeNewLifecycleJson(path6.join(journal.transactionRoot, `${phase}.json`), {
     version: CONTEXT_LIFECYCLE_VERSION,
     transactionId: journal.normalized.transactionId,
     phase
@@ -2210,7 +2718,7 @@ var managedLifecycleItems = ({ plan, projectRoot, analysis, analysisCurrent }) =
     beforeHash: current === null ? null : sha256(current),
     afterHash: sha256(merged.content)
   }));
-  const analysisPath = relative(projectRoot, analysisPathFor(projectRoot));
+  const analysisPath = relative2(projectRoot, analysisPathFor(projectRoot));
   items.push({
     path: analysisPath,
     beforeHash: analysisCurrent === null ? null : sha256(analysisCurrent),
@@ -2222,9 +2730,9 @@ var managedLifecycleItems = ({ plan, projectRoot, analysis, analysisCurrent }) =
 var prepareLifecycleJournal = ({ projectRoot, lifecycleCatalog, planHash, plan, analysis, analysisCurrent }) => {
   const id = `lifecycle-${process.pid}-${Date.now()}-${crypto4.randomUUID()}`;
   const transactionsRoot = ensureDirectory(projectRoot, lifecycleTransactionRoot(projectRoot), "Context transaction directory");
-  const transactionRoot = path5.join(transactionsRoot, id);
-  const preparationRoot = path5.join(transactionsRoot, `.lifecycle-tmp-${id}`);
-  fs5.mkdirSync(preparationRoot, { recursive: false });
+  const transactionRoot = path6.join(transactionsRoot, id);
+  const preparationRoot = path6.join(transactionsRoot, `.lifecycle-tmp-${id}`);
+  fs6.mkdirSync(preparationRoot, { recursive: false });
   const manifest = {
     version: CONTEXT_LIFECYCLE_VERSION,
     type: "context-lifecycle",
@@ -2247,12 +2755,12 @@ var prepareLifecycleJournal = ({ projectRoot, lifecycleCatalog, planHash, plan,
     managed: managedLifecycleItems({ plan, projectRoot, analysis, analysisCurrent })
   };
   try {
-    writeNewLifecycleJson(path5.join(preparationRoot, "manifest.json"), manifest);
-    fs5.renameSync(preparationRoot, transactionRoot);
+    writeNewLifecycleJson(path6.join(preparationRoot, "manifest.json"), manifest);
+    fs6.renameSync(preparationRoot, transactionRoot);
     return readLifecycleJournal({ projectRoot, transactionRoot });
   } catch (error) {
-    fs5.rmSync(preparationRoot, { recursive: true, force: true });
-    fs5.rmSync(transactionRoot, { recursive: true, force: true });
+    fs6.rmSync(preparationRoot, { recursive: true, force: true });
+    fs6.rmSync(transactionRoot, { recursive: true, force: true });
     throw error;
   }
 };
@@ -2268,38 +2776,38 @@ var inspectLifecycleCatalog = ({ projectRoot, relativePath, expectedHash, label,
   return inspected;
 };
 var cleanupLifecycleJournal = ({ projectRoot, journal }) => {
-  const catalogTransactionRoot = path5.join(projectRoot, ...journal.normalized.paths.catalogTransaction.split("/"));
+  const catalogTransactionRoot = path6.join(projectRoot, ...journal.normalized.paths.catalogTransaction.split("/"));
   assertInside(projectRoot, catalogTransactionRoot, "Lifecycle catalog transaction directory");
   assertNoSymlink(projectRoot, catalogTransactionRoot, "Lifecycle catalog transaction directory");
-  if (fs5.existsSync(catalogTransactionRoot)) fs5.rmSync(catalogTransactionRoot, { recursive: true, force: true });
+  if (fs6.existsSync(catalogTransactionRoot)) fs6.rmSync(catalogTransactionRoot, { recursive: true, force: true });
   assertNoSymlink(projectRoot, journal.transactionRoot, "Lifecycle transaction directory");
-  fs5.rmSync(journal.transactionRoot, { recursive: true, force: true });
+  fs6.rmSync(journal.transactionRoot, { recursive: true, force: true });
 };
 var rollbackLifecycleMigration = ({ projectRoot, journal }) => {
   const { initial, paths } = journal.normalized;
-  const canonical = path5.join(projectRoot, ...paths.canonical.split("/"));
-  const legacy = path5.join(projectRoot, ...paths.legacy.split("/"));
-  const backup = path5.join(projectRoot, ...paths.backup.split("/"));
-  const quarantine = path5.join(journal.transactionRoot, "canonical-rollback");
+  const canonical = path6.join(projectRoot, ...paths.canonical.split("/"));
+  const legacy = path6.join(projectRoot, ...paths.legacy.split("/"));
+  const backup = path6.join(projectRoot, ...paths.backup.split("/"));
+  const quarantine = path6.join(journal.transactionRoot, "canonical-rollback");
   if (initial.state === "legacy-only") {
-    if (fs5.existsSync(canonical)) {
+    if (fs6.existsSync(canonical)) {
       inspectLifecycleCatalog({ projectRoot, relativePath: paths.canonical, expectedHash: initial.sourceHash, label: "Promoted canonical catalog" });
-      if (fs5.existsSync(quarantine)) throw new Error("Lifecycle canonical rollback quarantine already exists");
-      fs5.renameSync(canonical, quarantine);
-    } else if (fs5.existsSync(quarantine)) {
-      const quarantinePath = relative(projectRoot, quarantine);
+      if (fs6.existsSync(quarantine)) throw new Error("Lifecycle canonical rollback quarantine already exists");
+      fs6.renameSync(canonical, quarantine);
+    } else if (fs6.existsSync(quarantine)) {
+      const quarantinePath = relative2(projectRoot, quarantine);
       inspectLifecycleCatalog({ projectRoot, relativePath: quarantinePath, expectedHash: initial.sourceHash, label: "Quarantined canonical catalog" });
     }
   } else {
     inspectLifecycleCatalog({ projectRoot, relativePath: paths.canonical, expectedHash: initial.sourceHash, label: "Original canonical catalog" });
   }
-  if (!fs5.existsSync(legacy)) {
+  if (!fs6.existsSync(legacy)) {
     inspectLifecycleCatalog({ projectRoot, relativePath: paths.backup, expectedHash: initial.sourceHash, label: "Legacy catalog backup" });
-    ensureDirectory(projectRoot, path5.dirname(legacy), "Legacy context parent");
-    fs5.renameSync(backup, legacy);
+    ensureDirectory(projectRoot, path6.dirname(legacy), "Legacy context parent");
+    fs6.renameSync(backup, legacy);
   } else {
     inspectLifecycleCatalog({ projectRoot, relativePath: paths.legacy, expectedHash: initial.sourceHash, label: "Legacy context catalog" });
-    if (fs5.existsSync(backup)) throw new Error("Lifecycle recovery found both the legacy catalog and its migration backup");
+    if (fs6.existsSync(backup)) throw new Error("Lifecycle recovery found both the legacy catalog and its migration backup");
   }
   const restored = resolveContextCatalog({ root: projectRoot });
   if (restored.state !== initial.state || restored.legacy.hash !== initial.sourceHash) {
@@ -2340,26 +2848,75 @@ var recoverLifecycleJournal = ({ projectRoot, journal }) => {
 var pendingLifecycleDirectories = (projectRoot) => {
   const transactionsRoot = lifecycleTransactionRoot(projectRoot);
   assertNoSymlink(projectRoot, transactionsRoot, "Context transaction directory");
-  if (!fs5.existsSync(transactionsRoot)) return [];
-  return fs5.readdirSync(transactionsRoot, { withFileTypes: true }).filter((entry) => entry.name.startsWith("lifecycle-")).sort((left, right) => left.name.localeCompare(right.name)).map((entry) => {
+  if (!fs6.existsSync(transactionsRoot)) return [];
+  return fs6.readdirSync(transactionsRoot, { withFileTypes: true }).filter((entry) => entry.name.startsWith("lifecycle-")).sort((left, right) => left.name.localeCompare(right.name)).map((entry) => {
     if (entry.isSymbolicLink() || !entry.isDirectory()) throw new Error(`Invalid lifecycle recovery entry: ${entry.name}`);
-    return path5.join(transactionsRoot, entry.name);
+    return path6.join(transactionsRoot, entry.name);
   });
 };
 var recoverPendingLifecycleTransactions = (projectRoot) => pendingLifecycleDirectories(projectRoot).map((transactionRoot) => {
   const journal = readLifecycleJournal({ projectRoot, transactionRoot });
   return { transactionId: journal.normalized.transactionId, outcome: recoverLifecycleJournal({ projectRoot, journal }) };
 });
+var approvalPlanFor = ({ operation, projectRoot, analysis, excludedManaged, changes, conflicts, planHash, applied }) => {
+  const activeChanges = changes.filter((change) => change.status !== "unchanged").map(({ path: file, status, phase }) => ({
+    path: file,
+    action: status,
+    phase
+  }));
+  const unchanged = changes.filter((change) => change.status === "unchanged").map((change) => change.path);
+  const names = (signal2) => Array.isArray(signal2?.value) ? signal2.value.map((item) => typeof item === "string" ? item : item?.name).filter(Boolean) : [];
+  const testUnits = Array.isArray(analysis.testing?.value?.units) ? analysis.testing.value.units : [];
+  const scan = analysis.scan?.value ?? {};
+  return {
+    title: operation === "context.init" ? "Initialize managed project context" : "Refresh managed project context",
+    outcome: operation === "context.init" ? "Create the first evidence-backed managed guidance and canonical context catalog." : "Reconcile managed guidance and canonical context with current repository evidence.",
+    status: conflicts.length ? "conflicts-require-resolution" : applied ? "applied" : "approval-required",
+    target: projectRoot,
+    analysis: {
+      project: analysis.project?.value?.name ?? path6.basename(projectRoot),
+      languages: names(analysis.languages),
+      toolchains: names(analysis.toolchains),
+      technologies: names(analysis.technologies),
+      units: Array.isArray(analysis.units?.value) ? analysis.units.value.length : 0,
+      testUnits: testUnits.length,
+      scan: {
+        files: Number.isSafeInteger(scan.files) ? scan.files : null,
+        truncated: Boolean(scan.truncated),
+        excluded: Array.isArray(scan.excluded) ? scan.excluded.map((item) => item.path).filter(Boolean) : []
+      }
+    },
+    changes: activeChanges,
+    preserved: {
+      unchanged,
+      excludedManaged: [...excludedManaged],
+      manualContent: "Content outside Codex-managed markers remains unchanged."
+    },
+    conflicts: [...conflicts],
+    safeguards: [
+      "Updated managed files are backed up during apply.",
+      "Repository or catalog drift invalidates this plan before any write."
+    ],
+    residualRisks: [
+      ...scan.truncated ? ["Repository discovery reached its scan limit, so the plan may omit facts beyond that boundary."] : [],
+      "Automated discovery can omit behavior that is not evidenced by repository files."
+    ],
+    approval: conflicts.length ? "Resolve the listed conflicts and review a new plan before approval." : applied ? "The reviewed plan was applied successfully." : "Approve this displayed plan or request changes. The integrity ID is retained by Codex and does not need to be copied.",
+    integrityId: planHash
+  };
+};
 var runContextLifecycleOperation = ({
   operation,
   root,
   apply = false,
   force = false,
+  excludeManaged = [],
   analysis: suppliedAnalysis = null,
   expectedPlanHash = null,
   lockHeld = false
 }) => {
-  const projectRoot = fs5.realpathSync(path5.resolve(root));
+  const projectRoot = fs6.realpathSync(path6.resolve(root));
+  const excludedManaged = normalizeManagedExclusions(excludeManaged);
   const isInit = operation === "context.init";
   const lifecycleCatalog = resolveContextCatalog({ root: projectRoot });
   if (isInit && lifecycleCatalog.state === "canonical-only") {
@@ -2381,9 +2938,9 @@ var runContextLifecycleOperation = ({
 - ${validation.errors.join("\n- ")}`);
   let suppliedRoot;
   try {
-    suppliedRoot = fs5.realpathSync(path5.resolve(analysis.root));
+    suppliedRoot = fs6.realpathSync(path6.resolve(analysis.root));
   } catch {
-    suppliedRoot = path5.resolve(analysis.root);
+    suppliedRoot = path6.resolve(analysis.root);
   }
   if (suppliedRoot !== projectRoot) throw new Error(`Analysis root does not match target root: ${analysis.root}`);
   const evidenceValidation = validateAnalysisEvidence(analysis, projectRoot);
@@ -2405,13 +2962,15 @@ var runContextLifecycleOperation = ({
     analysis,
     existingIndex: catalogIndex(activeCatalog),
     force,
-    contextBaselineRoot: isInit && lifecycleCatalog.state === "legacy-only" ? path5.join(projectRoot, ".agents", "context") : null
+    excludeManaged: excludedManaged,
+    contextBaselineRoot: isInit && lifecycleCatalog.state === "legacy-only" ? path6.join(projectRoot, ".agents", "context") : null
   });
   let conflicts = uniqueStrings([...migrationPreview.conflicts ?? [], ...plan.conflicts]);
   let backups = [...migrationPreview.backedUp ?? []];
   const planHash = lifecyclePlanHash({
     operation,
     force,
+    excludedManaged,
     lifecycleCatalog,
     migrationPreview,
     analysis,
@@ -2449,7 +3008,7 @@ var runContextLifecycleOperation = ({
           expectedHash: lifecycleCatalog.legacy.hash,
           ...lifecycleJournal ? {
             backupPath: lifecycleJournal.normalized.paths.backup,
-            transactionId: path5.basename(lifecycleJournal.normalized.paths.catalogTransaction)
+            transactionId: path6.basename(lifecycleJournal.normalized.paths.catalogTransaction)
           } : {},
           lock: !lockHeld
         });
@@ -2466,7 +3025,8 @@ var runContextLifecycleOperation = ({
             projectRoot,
             analysis,
             existingIndex: catalogIndex(activeCatalog),
-            force
+            force,
+            excludeManaged: excludedManaged
           });
           if (migration.applied && managedPlanHash(canonicalPlan) !== reviewedManagedPlanHash) {
             throw new Error("Context managed-file plan changed after preview; review a fresh preview");
@@ -2501,7 +3061,7 @@ var runContextLifecycleOperation = ({
         }
       }
     } catch (error) {
-      if (lifecycleJournal && fs5.existsSync(lifecycleJournal.transactionRoot)) {
+      if (lifecycleJournal && fs6.existsSync(lifecycleJournal.transactionRoot)) {
         try {
           const currentJournal = readLifecycleJournal({ projectRoot, transactionRoot: lifecycleJournal.transactionRoot });
           if (managedTransactionApplied) recoverLifecycleJournal({ projectRoot, journal: currentJournal });
@@ -2516,29 +3076,41 @@ var runContextLifecycleOperation = ({
   const migrationPlan = migrationChanges(apply ? migration : migrationPreview);
   const managedChanges = plan.changes.map((change) => ({ ...change, phase: "managed-context" }));
   const analysisChange = {
-    path: relative(projectRoot, analysisPath),
+    path: relative2(projectRoot, analysisPath),
     status: analysisCurrent === null ? "create" : analysisCurrent === analysisContent ? "unchanged" : "update",
     diff: analysisCurrent === analysisContent ? "" : lineDiff(analysisCurrent, analysisContent),
     phase: "analysis"
   };
   const applied = apply && conflicts.length === 0;
+  const changes = [...migrationPlan, ...managedChanges, analysisChange];
   return {
     schemaVersion: CONTEXT_LIFECYCLE_VERSION,
     operation,
     root: projectRoot,
     mode: apply ? "apply" : "preview",
-    analysisPath: relative(projectRoot, analysisPathFor(projectRoot)),
+    analysisPath: relative2(projectRoot, analysisPathFor(projectRoot)),
     analysis,
-    changes: [...migrationPlan, ...managedChanges, analysisChange],
+    excludedManaged,
+    changes,
     conflicts,
     backups,
     planHash,
     applied,
-    catalogMigration: migration
+    catalogMigration: migration,
+    approvalPlan: approvalPlanFor({
+      operation,
+      projectRoot,
+      analysis,
+      excludedManaged,
+      changes,
+      conflicts,
+      planHash,
+      applied
+    })
   };
 };
 var runContextLifecycle = (options) => {
-  const projectRoot = fs5.realpathSync(path5.resolve(options.root));
+  const projectRoot = fs6.realpathSync(path6.resolve(options.root));
   const hasPendingLifecycle = pendingLifecycleDirectories(projectRoot).length > 0;
   if (!options.apply && !hasPendingLifecycle) {
     return runContextLifecycleOperation({ ...options, root: projectRoot, lockHeld: false });
@@ -2552,10 +3124,10 @@ var initializeContext = (options) => runContextLifecycle({ ...options, operation
 var refreshContext = (options) => runContextLifecycle({ ...options, operation: "context.refresh" });
 
 // ../../plugins/codex-agent/skills/context-curation/scripts/context-save.mjs
-import fs6 from "node:fs";
-import path6 from "node:path";
+import fs7 from "node:fs";
+import path7 from "node:path";
 import { pathToFileURL } from "node:url";
-var KINDS = {
+var KINDS2 = {
   decision: "decisions",
   constraint: "constraints",
   operation: "operations",
@@ -2563,7 +3135,7 @@ var KINDS = {
   pitfall: "pitfalls"
 };
 var PRIORITIES2 = /* @__PURE__ */ new Set(["critical", "high", "medium", "low"]);
-var CONFIDENCE = /* @__PURE__ */ new Set(["high", "medium"]);
+var CONFIDENCE2 = /* @__PURE__ */ new Set(["high", "medium"]);
 var PROPOSAL_FIELDS = /* @__PURE__ */ new Set([
   "version",
   "title",
@@ -2575,9 +3147,12 @@ var PROPOSAL_FIELDS = /* @__PURE__ */ new Set([
   "tags",
   "priority",
   "confidence",
-  "reviewWhen"
+  "reviewWhen",
+  "reviewAfter",
+  "aliases",
+  "supersedes"
 ]);
-var unique2 = (items) => [...new Set(items)];
+var unique3 = (items) => [...new Set(items)];
 var safeText2 = (value, limit = 300) => String(value).replace(/[\r\n]+/g, " ").replace(/`/g, "'").trim().slice(0, limit);
 var mdCode2 = (value) => `\`${safeText2(value)}\``;
 var normalizeForComparison = (value) => String(value).toLowerCase().replace(/\s+/g, " ").trim();
@@ -2598,17 +3173,17 @@ var firstParagraph = (content, fallback) => {
   return candidate.length >= 10 ? candidate : String(fallback).replace(/\s+/g, " ").slice(0, 240);
 };
 var listMarkdown = (root) => {
-  if (!fs6.existsSync(root)) return [];
+  if (!fs7.existsSync(root)) return [];
   return listTreeFiles(root).filter((entry) => entry.relative.toLowerCase().endsWith(".md")).map((entry) => entry.absolute);
 };
 var prepareContextIndex = ({ root, pendingDocuments = [] }) => {
   const writable = assertWritableContextCatalog({ root });
   const projectRoot = writable.root;
   const contextRoot = writable.contextRoot;
-  if (!fs6.existsSync(contextRoot) && pendingDocuments.length === 0) throw new Error(`Context directory not found: ${contextRoot}`);
+  if (!fs7.existsSync(contextRoot) && pendingDocuments.length === 0) throw new Error(`Context directory not found: ${contextRoot}`);
   assertNoSymlink(projectRoot, contextRoot, "Canonical context root");
-  const indexPath = path6.join(contextRoot, "index.json");
-  const prior = writable.index;
+  const indexPath = path7.join(contextRoot, "index.json");
+  const prior = upgradeContextIndex(writable.index);
   const priorByPath = new Map(prior.entries.map((entry) => [entry.path, entry]));
   const pending = /* @__PURE__ */ new Map();
   for (const [index2, document] of pendingDocuments.entries()) {
@@ -2616,36 +3191,37 @@ var prepareContextIndex = ({ root, pendingDocuments = [] }) => {
       throw new Error(`Pending context document ${index2} is invalid`);
     }
     assertSafeMarkdownContent(document.content, `Pending context document ${index2}`);
-    const target = path6.resolve(contextRoot, document.path);
+    const target = path7.resolve(contextRoot, document.path);
     assertInside(contextRoot, target, `Pending context document ${index2}`);
-    const relative2 = slash(path6.relative(contextRoot, target));
-    if (!relative2 || relative2.startsWith("../") || relative2 === "index.json" || !relative2.endsWith(".md")) {
+    const relative3 = slash(path7.relative(contextRoot, target));
+    if (!relative3 || relative3.startsWith("../") || relative3 === "index.json" || !relative3.endsWith(".md")) {
       throw new Error(`Pending context document ${index2} has an invalid path: ${document.path}`);
     }
-    pending.set(relative2, document.content);
-  }
-  const diskPaths = listMarkdown(contextRoot).map((file) => slash(path6.relative(contextRoot, file)));
-  const entries = [.../* @__PURE__ */ new Set([...diskPaths, ...pending.keys()])].sort().map((relative2) => {
-    const content2 = pending.has(relative2) ? pending.get(relative2) : fs6.readFileSync(path6.join(contextRoot, ...relative2.split("/")), "utf8");
-    assertSafeMarkdownContent(content2, `Context Markdown ${relative2}`);
-    const title = firstHeading(content2, path6.basename(relative2, ".md"));
-    const existing = priorByPath.get(relative2);
-    const tags = unique2([
-      ...relative2.replace(/\.md$/, "").split("/"),
+    pending.set(relative3, document.content);
+  }
+  const diskPaths = listMarkdown(contextRoot).map((file) => slash(path7.relative(contextRoot, file)));
+  const entries = [.../* @__PURE__ */ new Set([...diskPaths, ...pending.keys()])].sort().map((relative3) => {
+    const content2 = pending.has(relative3) ? pending.get(relative3) : fs7.readFileSync(path7.join(contextRoot, ...relative3.split("/")), "utf8");
+    assertSafeMarkdownContent(content2, `Context Markdown ${relative3}`);
+    const title = firstHeading(content2, path7.basename(relative3, ".md"));
+    const existing = priorByPath.get(relative3);
+    const tags = unique3([
+      ...relative3.replace(/\.md$/, "").split("/"),
       ...title.toLowerCase().split(/[^a-z0-9_-]+/).filter((term) => term.length > 2)
     ].map(slug).filter(Boolean)).slice(0, 10);
-    return {
-      id: existing?.id || slug(relative2.replace(/\.md$/, "").replaceAll("/", "-")),
-      path: relative2,
+    return upgradeContextIndexEntry({
+      ...existing,
+      id: existing?.id || slug(relative3.replace(/\.md$/, "").replaceAll("/", "-")),
+      path: relative3,
       summary: existing?.summary || firstParagraph(content2, `${title} project context.`),
       tags: existing?.tags?.length ? existing.tags : tags,
       priority: existing?.priority || "medium"
-    };
+    });
   }).sort((left, right) => left.path.localeCompare(right.path));
-  const schemaPath = path6.join(projectRoot, "schemas", "context-index.schema.json");
+  const schemaPath = path7.join(projectRoot, "schemas", "context-index.schema.json");
   const index = {
-    ...fs6.existsSync(schemaPath) ? { $schema: "../../schemas/context-index.schema.json" } : prior.$schema ? { $schema: prior.$schema } : {},
-    version: 1,
+    ...fs7.existsSync(schemaPath) ? { $schema: "../../schemas/context-index.schema.json" } : prior.$schema ? { $schema: prior.$schema } : {},
+    version: 2,
     entries
   };
   assertValidContextIndex(index, { root: projectRoot, contextRoot, pendingPaths: [...pending.keys()] });
@@ -2662,7 +3238,7 @@ var buildContextIndex = ({ root, dryRun = false }) => {
       root: prepared.projectRoot,
       documents: [],
       indexContent: prepared.content,
-      backupPaths: fs6.existsSync(prepared.path) ? ["index.json"] : [],
+      backupPaths: fs7.existsSync(prepared.path) ? ["index.json"] : [],
       lock: false
     });
     return { path: prepared.path, index: prepared.index, content: prepared.content, dryRun: false };
@@ -2683,9 +3259,9 @@ var validateContextProposal = (proposal, { root } = {}) => {
   checkString(errors, proposal, "summary", 10, 240);
   checkString(errors, proposal, "scope", 2, 120);
   checkString(errors, proposal, "contentMarkdown", 20, 1e4);
-  if (!Object.hasOwn(KINDS, proposal.kind)) errors.push(`kind must be one of: ${Object.keys(KINDS).join(", ")}`);
+  if (!Object.hasOwn(KINDS2, proposal.kind)) errors.push(`kind must be one of: ${Object.keys(KINDS2).join(", ")}`);
   if (!PRIORITIES2.has(proposal.priority)) errors.push("priority is invalid");
-  if (!CONFIDENCE.has(proposal.confidence)) errors.push("confidence must be high or medium");
+  if (!CONFIDENCE2.has(proposal.confidence)) errors.push("confidence must be high or medium");
   if (!Array.isArray(proposal.tags) || proposal.tags.length < 1 || proposal.tags.length > 10) errors.push("tags must contain between 1 and 10 values");
   else {
     if (new Set(proposal.tags).size !== proposal.tags.length) errors.push("tags must be unique");
@@ -2693,25 +3269,43 @@ var validateContextProposal = (proposal, { root } = {}) => {
   }
   if (!Array.isArray(proposal.evidence) || proposal.evidence.length < 1 || proposal.evidence.length > 20) errors.push("evidence must contain between 1 and 20 entries");
   else for (const [index, item] of proposal.evidence.entries()) {
-    if (!item || typeof item !== "object" || Array.isArray(item) || Object.keys(item).some((key) => !["path", "note"].includes(key))) {
+    const allowed = ["type", "path", "url", "note", "title", "version", "retrievedAt", "publishedAt", "decisionId", "decidedAt"];
+    if (!item || typeof item !== "object" || Array.isArray(item) || Object.keys(item).some((key) => !allowed.includes(key))) {
       errors.push(`evidence[${index}] is invalid`);
       continue;
     }
-    if (typeof item.path !== "string" || !item.path || item.path.length > 300 || path6.isAbsolute(item.path)) errors.push(`evidence[${index}].path must be repository-relative`);
+    const type = item.type ?? "repository";
+    if (!["repository", "decision", "external"].includes(type)) errors.push(`evidence[${index}].type is invalid`);
+    if (type === "external") {
+      try {
+        const url = new URL(item.url);
+        if (url.protocol !== "https:" || url.username || url.password) errors.push(`evidence[${index}].url must be an https URL without credentials`);
+      } catch {
+        errors.push(`evidence[${index}].url must be an absolute https URL`);
+      }
+    } else if (typeof item.path !== "string" || !item.path || item.path.length > 300 || path7.isAbsolute(item.path)) {
+      errors.push(`evidence[${index}].path must be repository-relative`);
+    }
     if (typeof item.note !== "string" || item.note.trim().length < 5 || item.note.length > 300) errors.push(`evidence[${index}].note is invalid`);
   }
+  if (Array.isArray(proposal.evidence) && !proposal.evidence.some((item) => ["repository", "decision"].includes(item?.type ?? "repository"))) {
+    errors.push("evidence must include at least one repository or decision source");
+  }
   if (proposal.reviewWhen !== void 0 && (!Array.isArray(proposal.reviewWhen) || proposal.reviewWhen.length > 5 || proposal.reviewWhen.some((item) => typeof item !== "string" || item.trim().length < 5 || item.length > 240))) {
     errors.push("reviewWhen must contain up to 5 non-empty strings");
   }
+  if (proposal.reviewAfter !== void 0 && !/^\d{4}-\d{2}-\d{2}$/.test(proposal.reviewAfter)) errors.push("reviewAfter must use YYYY-MM-DD");
+  if (proposal.aliases !== void 0 && (!Array.isArray(proposal.aliases) || proposal.aliases.length > 20 || proposal.aliases.some((item) => typeof item !== "string" || item.trim().length < 2))) errors.push("aliases must contain up to 20 non-empty values");
+  if (proposal.supersedes !== void 0 && (!Array.isArray(proposal.supersedes) || proposal.supersedes.length > 20 || proposal.supersedes.some((item) => typeof item !== "string" || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(item)))) errors.push("supersedes must contain valid context ids");
   const combined = JSON.stringify(proposal);
   if (combined.includes("codex-agent:context:start") || combined.includes("codex-agent:context:end")) errors.push("proposal must not contain managed marker text");
   if (containsSensitiveContent(combined)) errors.push("proposal appears to contain a secret or credential");
   if (root && Array.isArray(proposal.evidence)) {
-    const projectRoot = fs6.realpathSync(path6.resolve(root));
+    const projectRoot = fs7.realpathSync(path7.resolve(root));
     for (const [index, item] of proposal.evidence.entries()) {
-      if (!item || typeof item.path !== "string" || path6.isAbsolute(item.path)) continue;
-      const target = path6.resolve(projectRoot, item.path);
-      if (target !== projectRoot && !target.startsWith(`${projectRoot}${path6.sep}`)) {
+      if (!item || item.type === "external" || typeof item.path !== "string" || path7.isAbsolute(item.path)) continue;
+      const target = path7.resolve(projectRoot, item.path);
+      if (target !== projectRoot && !target.startsWith(`${projectRoot}${path7.sep}`)) {
         errors.push(`evidence[${index}].path escapes the repository`);
         continue;
       }
@@ -2721,7 +3315,11 @@ var validateContextProposal = (proposal, { root } = {}) => {
         errors.push(`evidence[${index}].path must not traverse a symbolic link`);
         continue;
       }
-      if (!fs6.existsSync(target)) errors.push(`evidence[${index}].path does not exist: ${item.path}`);
+      const relative3 = slash(path7.relative(projectRoot, target));
+      if (relative3 === ".codex-agent/context" || relative3.startsWith(".codex-agent/context/") || relative3 === ".agents/context" || relative3.startsWith(".agents/context/") || relative3.startsWith(".codex-agent/sessions/") || relative3.startsWith(".codex-agent/backups/")) {
+        errors.push(`evidence[${index}].path must reference primary repository evidence, not derived context`);
+      } else if (!fs7.existsSync(target)) errors.push(`evidence[${index}].path does not exist: ${item.path}`);
+      else if (!fs7.statSync(target).isFile()) errors.push(`evidence[${index}].path must be a file`);
     }
   }
   return { ok: errors.length === 0, errors };
@@ -2733,15 +3331,32 @@ var normalizeContextProposal = (proposal) => ({
   summary: proposal.summary.trim(),
   scope: proposal.scope.trim(),
   contentMarkdown: proposal.contentMarkdown.trim(),
-  evidence: proposal.evidence.map((item) => ({ path: slash(item.path), note: item.note.trim() })),
+  evidence: proposal.evidence.map((item) => item.type === "external" ? {
+    type: "external",
+    url: item.url,
+    note: item.note.trim(),
+    ...item.title ? { title: item.title.trim() } : {},
+    ...item.version ? { version: item.version.trim() } : {},
+    ...item.retrievedAt ? { retrievedAt: item.retrievedAt } : {},
+    ...item.publishedAt ? { publishedAt: item.publishedAt } : {}
+  } : {
+    type: item.type ?? "repository",
+    path: slash(item.path),
+    note: item.note.trim(),
+    ...item.decisionId ? { decisionId: item.decisionId.trim() } : {},
+    ...item.decidedAt ? { decidedAt: item.decidedAt } : {}
+  }),
   tags: proposal.tags,
   priority: proposal.priority,
   confidence: proposal.confidence,
-  ...proposal.reviewWhen?.length ? { reviewWhen: proposal.reviewWhen.map((item) => item.trim()) } : {}
+  ...proposal.reviewWhen?.length ? { reviewWhen: proposal.reviewWhen.map((item) => item.trim()) } : {},
+  ...proposal.reviewAfter ? { reviewAfter: proposal.reviewAfter } : {},
+  ...proposal.aliases?.length ? { aliases: unique3(proposal.aliases.map((item) => item.trim())) } : {},
+  ...proposal.supersedes?.length ? { supersedes: unique3(proposal.supersedes) } : {}
 });
 var renderContextProposal = (proposal, { recordedAt = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10) } = {}) => {
   const id = `${proposal.kind}-${slug(proposal.title)}`;
-  const evidence = proposal.evidence.map((item) => `- ${mdCode2(item.path)} \u2014 ${safeText2(item.note)}`).join("\n");
+  const evidence = proposal.evidence.map((item) => `- ${mdCode2(item.type === "external" ? item.url : item.path)} \u2014 ${safeText2(item.note)}`).join("\n");
   const review = proposal.reviewWhen?.length ? `
 
 ## Review when
@@ -2804,31 +3419,62 @@ var prepareContextProposal = ({ root, proposal, apply, update }) => {
   const rendered = renderContextProposal(normalized);
   const writable = assertWritableContextCatalog({ root: projectRoot });
   const contextRoot = writable.contextRoot;
-  const relativePath = `${KINDS[normalized.kind]}/${slug(normalized.title)}.md`;
-  const destination = path6.join(contextRoot, ...relativePath.split("/"));
+  const relativePath = `${KINDS2[normalized.kind]}/${slug(normalized.title)}.md`;
+  const destination = path7.join(contextRoot, ...relativePath.split("/"));
   assertInside(contextRoot, destination, "context destination");
   assertNoSymlink(projectRoot, contextRoot, "Canonical context root");
   assertNoSymlink(projectRoot, destination, "Context destination");
   const indexPath = writable.indexPath;
-  const index = writable.index;
-  const currentIndexContent = fs6.existsSync(indexPath) ? fs6.readFileSync(indexPath, "utf8") : null;
-  const duplicate = index.entries.find((entry) => entry.path !== relativePath && (entry.id === rendered.id || normalizeForComparison(entry.summary) === normalizeForComparison(normalized.summary)));
+  const index = upgradeContextIndex(writable.index);
+  const currentIndexContent = fs7.existsSync(indexPath) ? fs7.readFileSync(indexPath, "utf8") : null;
+  const duplicate = index.entries.find((entry) => entry.path !== relativePath && !(normalized.supersedes ?? []).includes(entry.id) && (entry.id === rendered.id || normalizeForComparison(entry.summary) === normalizeForComparison(normalized.summary)));
   if (duplicate) throw new Error(`Duplicate context candidate: ${duplicate.path}`);
-  const current = fs6.existsSync(destination) ? fs6.readFileSync(destination, "utf8") : null;
+  const current = fs7.existsSync(destination) ? fs7.readFileSync(destination, "utf8") : null;
   const merge = mergeManaged(current, rendered, update);
   const priorEntry = index.entries.find((entry) => entry.path === relativePath || entry.id === rendered.id);
   if (priorEntry && priorEntry.path !== relativePath) throw new Error(`Context id already belongs to another path: ${priorEntry.path}`);
-  const nextEntry = {
+  const evidence = normalized.evidence.map((item) => item.type === "external" ? {
+    type: "external",
+    locator: item.url,
+    note: item.note,
+    retrievedAt: item.retrievedAt ?? contextDate(),
+    ...item.title ? { title: item.title } : {},
+    ...item.version ? { version: item.version } : {},
+    ...item.publishedAt ? { publishedAt: item.publishedAt } : {}
+  } : {
+    type: item.type,
+    locator: item.path,
+    note: item.note,
+    sha256: sha256(fs7.readFileSync(path7.resolve(projectRoot, item.path))),
+    ...item.decisionId ? { decisionId: item.decisionId } : {},
+    ...item.decidedAt ? { decidedAt: item.decidedAt } : {}
+  });
+  const nextEntry = upgradeContextIndexEntry({
+    ...priorEntry,
     id: rendered.id,
     path: relativePath,
     summary: normalized.summary,
-    tags: unique2([normalized.kind, ...normalized.tags]).slice(0, 10),
-    priority: normalized.priority
-  };
+    tags: unique3([normalized.kind, ...normalized.tags]).slice(0, 10),
+    priority: normalized.priority,
+    kind: normalized.kind,
+    scope: normalized.scope,
+    confidence: normalized.confidence,
+    status: "active",
+    lastVerifiedAt: contextDate(),
+    evidence,
+    ...normalized.reviewAfter ? { reviewAfter: normalized.reviewAfter } : {},
+    ...normalized.aliases?.length ? { aliases: normalized.aliases } : {},
+    ...normalized.supersedes?.length ? { supersedes: normalized.supersedes } : {}
+  });
+  for (const supersededId of normalized.supersedes ?? []) {
+    if (supersededId === rendered.id) throw new Error("Context proposal must not supersede itself");
+    if (!index.entries.some((entry) => entry.id === supersededId)) throw new Error(`Context proposal supersedes unknown id: ${supersededId}`);
+  }
+  const supersededEntries = index.entries.map((entry) => (normalized.supersedes ?? []).includes(entry.id) ? upgradeContextIndexEntry({ ...entry, status: "superseded", supersededBy: unique3([...entry.supersededBy ?? [], rendered.id]) }) : entry);
   const nextIndex = {
     ...index.$schema ? { $schema: index.$schema } : {},
-    version: 1,
-    entries: [...index.entries.filter((entry) => entry.path !== relativePath && entry.id !== rendered.id), nextEntry].sort((left, right) => left.path.localeCompare(right.path))
+    version: 2,
+    entries: [...supersededEntries.filter((entry) => entry.path !== relativePath && entry.id !== rendered.id), nextEntry].sort((left, right) => left.path.localeCompare(right.path))
   };
   assertValidContextIndex(nextIndex, { root: projectRoot, contextRoot, pendingPaths: [relativePath] });
   const indexContent = `${JSON.stringify(nextIndex, null, 2)}
@@ -2886,16 +3532,16 @@ var option = (args, name, fallback) => {
 var main = (args = process.argv.slice(2)) => {
   const proposalFile = option(args, "--proposal");
   if (!proposalFile) throw new Error("context save requires --proposal FILE");
-  const absolute = path6.resolve(proposalFile);
-  if (!fs6.existsSync(absolute)) throw new Error(`Proposal file not found: ${absolute}`);
+  const absolute = path7.resolve(proposalFile);
+  if (!fs7.existsSync(absolute)) throw new Error(`Proposal file not found: ${absolute}`);
   let proposal;
   try {
-    proposal = JSON.parse(fs6.readFileSync(absolute, "utf8"));
+    proposal = JSON.parse(fs7.readFileSync(absolute, "utf8"));
   } catch (error) {
     throw new Error(`Could not parse proposal file: ${error instanceof Error ? error.message : String(error)}`);
   }
   const result = saveContextProposal({
-    root: path6.resolve(option(args, "--root", process.cwd())),
+    root: path7.resolve(option(args, "--root", process.cwd())),
     proposal,
     apply: args.includes("--apply"),
     update: args.includes("--update")
@@ -2904,7 +3550,7 @@ var main = (args = process.argv.slice(2)) => {
 `);
   if (result.conflicts.length) process.exitCode = 2;
 };
-if (process.argv[1] && path6.basename(process.argv[1]) === "context-save.mjs" && import.meta.url === pathToFileURL(process.argv[1]).href) {
+if (process.argv[1] && path7.basename(process.argv[1]) === "context-save.mjs" && import.meta.url === pathToFileURL(process.argv[1]).href) {
   try {
     main();
   } catch (error) {
@@ -2915,8 +3561,8 @@ if (process.argv[1] && path6.basename(process.argv[1]) === "context-save.mjs" &&
 }
 
 // ../../plugins/codex-agent/skills/context-curation/scripts/navigation-migrate.mjs
-import fs7 from "node:fs";
-import path7 from "node:path";
+import fs8 from "node:fs";
+import path8 from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 var PRIORITIES3 = /* @__PURE__ */ new Set(["critical", "high", "medium", "low"]);
 var MAX_FILES = 1e3;
@@ -2924,52 +3570,52 @@ var MAX_FILE_BYTES = 512 * 1024;
 var MAX_TOTAL_BYTES = 20 * 1024 * 1024;
 var MANAGED_START = (id) => `<!-- codex-agent:migrated:start ${id} -->`;
 var MANAGED_END = (id) => `<!-- codex-agent:migrated:end ${id} -->`;
-var unique3 = (items) => [...new Set(items.filter(Boolean))];
+var unique4 = (items) => [...new Set(items.filter(Boolean))];
 var safeText3 = (value, limit = 300) => String(value).replace(/[\r\n]+/g, " ").trim().slice(0, limit);
-var readJson2 = (file, label) => {
+var readJson3 = (file, label) => {
   try {
-    return JSON.parse(fs7.readFileSync(file, "utf8"));
+    return JSON.parse(fs8.readFileSync(file, "utf8"));
   } catch (error) {
     throw new Error(`Invalid ${label}: ${error instanceof Error ? error.message : String(error)}`);
   }
 };
-var hasNavigation = (directory) => fs7.existsSync(path7.join(directory, "navigation.md")) || fs7.existsSync(path7.join(directory, "index.md"));
+var hasNavigation = (directory) => fs8.existsSync(path8.join(directory, "navigation.md")) || fs8.existsSync(path8.join(directory, "index.md"));
 var discoverNavigationContext = ({ source }) => {
   if (!source) throw new Error("navigation migration requires --from PATH");
-  const requested = path7.resolve(source);
-  if (!fs7.existsSync(requested)) throw new Error(`Migration source not found: ${requested}`);
-  if (!fs7.statSync(requested).isDirectory()) throw new Error("Navigation migration source must be a directory");
-  const sourceRoot = fs7.realpathSync(requested);
+  const requested = path8.resolve(source);
+  if (!fs8.existsSync(requested)) throw new Error(`Migration source not found: ${requested}`);
+  if (!fs8.statSync(requested).isDirectory()) throw new Error("Navigation migration source must be a directory");
+  const sourceRoot = fs8.realpathSync(requested);
   const candidates = [];
-  const configPath = path7.join(sourceRoot, ".oac.json");
-  if (fs7.existsSync(configPath)) {
-    const config = readJson2(configPath, ".oac.json");
+  const configPath = path8.join(sourceRoot, ".oac.json");
+  if (fs8.existsSync(configPath)) {
+    const config = readJson3(configPath, ".oac.json");
     const configured = config?.context?.root;
     if (typeof configured === "string" && configured.trim()) {
-      if (path7.isAbsolute(configured)) throw new Error("Configured context root must be project-relative; pass a global context directory directly");
-      const target = path7.resolve(sourceRoot, configured);
+      if (path8.isAbsolute(configured)) throw new Error("Configured context root must be project-relative; pass a global context directory directly");
+      const target = path8.resolve(sourceRoot, configured);
       assertInside(sourceRoot, target, "Configured context root");
       candidates.push({ path: target, detectedBy: ".oac.json" });
     }
   }
   candidates.push(
-    { path: path7.join(sourceRoot, ".claude", "context"), detectedBy: ".claude/context" },
-    { path: path7.join(sourceRoot, "context"), detectedBy: "context" },
-    { path: path7.join(sourceRoot, ".opencode", "context"), detectedBy: ".opencode/context" },
+    { path: path8.join(sourceRoot, ".claude", "context"), detectedBy: ".claude/context" },
+    { path: path8.join(sourceRoot, "context"), detectedBy: "context" },
+    { path: path8.join(sourceRoot, ".opencode", "context"), detectedBy: ".opencode/context" },
     { path: sourceRoot, detectedBy: "source directory" }
   );
-  const selected = candidates.find((candidate, index) => candidates.findIndex((item) => item.path === candidate.path) === index && fs7.existsSync(candidate.path) && fs7.statSync(candidate.path).isDirectory() && hasNavigation(candidate.path));
+  const selected = candidates.find((candidate, index) => candidates.findIndex((item) => item.path === candidate.path) === index && fs8.existsSync(candidate.path) && fs8.statSync(candidate.path).isDirectory() && hasNavigation(candidate.path));
   if (!selected) throw new Error("Could not find a navigation-based context root. Pass the context directory directly or provide a valid .oac.json context.root");
   assertNoSymlink(sourceRoot, selected.path, "Context root");
-  const contextRoot = fs7.realpathSync(selected.path);
+  const contextRoot = fs8.realpathSync(selected.path);
   assertInside(sourceRoot, contextRoot, "Context root");
   const manifestCandidates = [
-    path7.join(contextRoot, ".context-manifest.json"),
-    path7.join(path7.dirname(contextRoot), ".context-manifest.json"),
-    path7.join(sourceRoot, ".context-manifest.json")
+    path8.join(contextRoot, ".context-manifest.json"),
+    path8.join(path8.dirname(contextRoot), ".context-manifest.json"),
+    path8.join(sourceRoot, ".context-manifest.json")
   ];
-  const manifestPath = unique3(manifestCandidates).find((file) => fs7.existsSync(file));
-  const manifest = manifestPath ? readJson2(manifestPath, ".context-manifest.json") : null;
+  const manifestPath = unique4(manifestCandidates).find((file) => fs8.existsSync(file));
+  const manifest = manifestPath ? readJson3(manifestPath, ".context-manifest.json") : null;
   return {
     sourceRoot,
     contextRoot,
@@ -2987,16 +3633,16 @@ var walkMarkdown = (root) => {
   const skipped = [];
   let totalBytes = 0;
   const visit = (directory) => {
-    for (const entry of fs7.readdirSync(directory, { withFileTypes: true })) {
-      const absolute = path7.join(directory, entry.name);
+    for (const entry of fs8.readdirSync(directory, { withFileTypes: true })) {
+      const absolute = path8.join(directory, entry.name);
       if (entry.isSymbolicLink()) {
-        skipped.push({ source: slash(path7.relative(root, absolute)), reason: "symbolic-link" });
+        skipped.push({ source: slash(path8.relative(root, absolute)), reason: "symbolic-link" });
         continue;
       }
       if (entry.isDirectory()) visit(absolute);
       else if (entry.isFile() && entry.name.toLowerCase().endsWith(".md")) {
-        const size = fs7.statSync(absolute).size;
-        if (size > MAX_FILE_BYTES) throw new Error(`Source context file exceeds ${MAX_FILE_BYTES} bytes: ${slash(path7.relative(root, absolute))}`);
+        const size = fs8.statSync(absolute).size;
+        if (size > MAX_FILE_BYTES) throw new Error(`Source context file exceeds ${MAX_FILE_BYTES} bytes: ${slash(path8.relative(root, absolute))}`);
         totalBytes += size;
         if (totalBytes > MAX_TOTAL_BYTES) throw new Error(`Source context exceeds ${MAX_TOTAL_BYTES} bytes`);
         files.push(absolute);
@@ -3032,9 +3678,9 @@ var runtimeReferenceCount = (content) => {
   ];
   return patterns.reduce((total, pattern) => total + (content.match(pattern)?.length ?? 0), 0);
 };
-var classify = ({ relative: relative2, content, includeNavigation, includeTemplates, includeWorkflows }) => {
-  const normalized = relative2.toLowerCase();
-  const basename = path7.posix.basename(normalized);
+var classify = ({ relative: relative3, content, includeNavigation, includeTemplates, includeWorkflows }) => {
+  const normalized = relative3.toLowerCase();
+  const basename = path8.posix.basename(normalized);
   const segments = normalized.split("/");
   if (!includeNavigation && (["navigation.md", "index.md"].includes(basename) || basename.endsWith("-navigation.md"))) return "navigation";
   if (/deprecated/i.test(content.slice(0, 1200))) return "deprecated";
@@ -3056,9 +3702,9 @@ var summary = (content, title) => {
   return safeText3(paragraphs[0] || `${title} migrated project context.`, 240);
 };
 var rewriteContent = (content) => content.replace(/\[([^\]]+)\]\([^)]*navigation\.md(?:#[^)]*)?\)/gi, "$1 (catalog: `.codex-agent/context/index.json`)").replace(/@?(?:\.opencode|\.claude)\/context\//g, ".codex-agent/context/migrated/").replace(/`(?:\.opencode|\.claude)\/context`/g, "`.codex-agent/context/migrated`").trim();
-var entryTags = ({ relative: relative2, metadata, title }) => unique3([
+var entryTags = ({ relative: relative3, metadata, title }) => unique4([
   "migrated",
-  ...relative2.replace(/\.md$/i, "").split("/"),
+  ...relative3.replace(/\.md$/i, "").split("/"),
   ...metadata.context ? metadata.context.split(/[\/\s]+/) : [],
   ...title.toLowerCase().split(/[^a-z0-9_-]+/).filter((term) => term.length > 2)
 ].map(slug)).slice(0, 10);
@@ -3099,50 +3745,50 @@ var prepareNavigationContext = ({
   const discovery = discoverNavigationContext({ source });
   const writableCatalog = assertWritableContextCatalog({ root: projectRoot });
   const contextRoot = writableCatalog.contextRoot;
-  const destinationRoot = path7.join(contextRoot, "migrated");
+  const destinationRoot = path8.join(contextRoot, "migrated");
   assertNoSymlink(projectRoot, contextRoot, "Target context root");
   const sourceWalk = walkMarkdown(discovery.contextRoot);
   const sourceFiles = sourceWalk.files;
   const skipped = [...sourceWalk.skipped];
   const candidates = [];
   for (const sourceFile of sourceFiles) {
-    const relative2 = slash(path7.relative(discovery.contextRoot, sourceFile));
-    const original = fs7.readFileSync(sourceFile, "utf8");
+    const relative3 = slash(path8.relative(discovery.contextRoot, sourceFile));
+    const original = fs8.readFileSync(sourceFile, "utf8");
     const metadata = parseMetadata(original);
-    const reason = containsSensitiveContent(original) ? "sensitive-content" : classify({ relative: relative2, content: metadata.content, includeNavigation, includeTemplates, includeWorkflows });
+    const reason = containsSensitiveContent(original) ? "sensitive-content" : classify({ relative: relative3, content: metadata.content, includeNavigation, includeTemplates, includeWorkflows });
     if (reason) {
-      skipped.push({ source: relative2, reason });
+      skipped.push({ source: relative3, reason });
       continue;
     }
     const transformed = rewriteContent(metadata.content);
     if (!transformed) {
-      skipped.push({ source: relative2, reason: "empty" });
+      skipped.push({ source: relative3, reason: "empty" });
       continue;
     }
-    const destinationRelative = `migrated/${relative2}`;
-    const id = slug(`migrated-${relative2.replace(/\.md$/i, "")}`);
-    const title = firstHeading2(transformed, path7.basename(relative2, ".md"));
+    const destinationRelative = `migrated/${relative3}`;
+    const id = slug(`migrated-${relative3.replace(/\.md$/i, "")}`);
+    const title = firstHeading2(transformed, path8.basename(relative3, ".md"));
     const managed = `${MANAGED_START(id)}
-<!-- source: ${relative2} -->
+<!-- source: ${relative3} -->
 ${transformed}
 ${MANAGED_END(id)}`;
     candidates.push({
       sourceFile,
-      source: relative2,
+      source: relative3,
       destinationRelative,
-      destination: path7.join(destinationRoot, ...relative2.split("/")),
+      destination: path8.join(destinationRoot, ...relative3.split("/")),
       id,
       title,
       summary: summary(transformed, title),
-      tags: entryTags({ relative: relative2, metadata, title }),
+      tags: entryTags({ relative: relative3, metadata, title }),
       priority: PRIORITIES3.has(metadata.priority) ? metadata.priority : "medium",
       metadata: { context: metadata.context, version: metadata.version, updated: metadata.updated },
       managed
     });
   }
-  const indexPath = path7.join(contextRoot, "index.json");
-  const targetIndex = writableCatalog.index;
-  const priorIndexContent = fs7.existsSync(indexPath) ? fs7.readFileSync(indexPath, "utf8") : null;
+  const indexPath = path8.join(contextRoot, "index.json");
+  const targetIndex = upgradeContextIndex(writableCatalog.index);
+  const priorIndexContent = fs8.existsSync(indexPath) ? fs8.readFileSync(indexPath, "utf8") : null;
   const changes = [];
   const conflicts = [];
   const migrationEntries = [];
@@ -3155,7 +3801,7 @@ ${MANAGED_END(id)}`;
   for (const candidate of candidates) {
     assertInside(destinationRoot, candidate.destination, `Migration destination ${candidate.destinationRelative}`);
     assertNoSymlink(projectRoot, candidate.destination, "Migration destination");
-    const current = fs7.existsSync(candidate.destination) ? fs7.readFileSync(candidate.destination, "utf8") : null;
+    const current = fs8.existsSync(candidate.destination) ? fs8.readFileSync(candidate.destination, "utf8") : null;
     const merge = mergeManaged2(current, candidate.id, candidate.managed, force);
     if (candidateIdOwners.get(candidate.id).size > 1) {
       conflicts.push(candidate.destinationRelative);
@@ -3195,19 +3841,21 @@ ${MANAGED_END(id)}`;
       before: current,
       content: merge.content
     });
-    migrationEntries.push({
+    migrationEntries.push(upgradeContextIndexEntry({
       id: candidate.id,
       path: candidate.destinationRelative,
       summary: candidate.summary,
       tags: candidate.tags,
-      priority: candidate.priority
-    });
+      priority: candidate.priority,
+      kind: "imported",
+      confidence: "low"
+    }));
   }
   const migratingIds = new Set(migrationEntries.map((entry) => entry.id));
   const migratingPaths = new Set(migrationEntries.map((entry) => entry.path));
   const nextIndex = {
     ...targetIndex.$schema ? { $schema: targetIndex.$schema } : {},
-    version: 1,
+    version: 2,
     entries: [
       ...targetIndex.entries.filter((entry) => !migratingIds.has(entry.id) && !migratingPaths.has(entry.path)),
       ...migrationEntries
@@ -3225,14 +3873,14 @@ ${MANAGED_END(id)}`;
     mode: apply ? "apply" : "preview",
     format: "navigation-markdown",
     source: {
-      requested: path7.resolve(source),
+      requested: path8.resolve(source),
       contextRoot: discovery.contextRoot,
       detectedBy: discovery.detectedBy,
       manifest: discovery.manifest
     },
     changes: changes.map(({ destination, before, content, backup, ...change }) => change),
     skipped,
-    conflicts: unique3(conflicts),
+    conflicts: unique4(conflicts),
     backedUp: [],
     index: { path: ".codex-agent/context/index.json", entries: nextIndex.entries.length, diff: diff2(priorIndexContent, indexContent) },
     applied: false,
@@ -3275,7 +3923,7 @@ var option2 = (args, name, fallback) => {
 };
 var main2 = (args = process.argv.slice(2)) => {
   const result = migrateNavigationContext({
-    root: path7.resolve(option2(args, "--root", process.cwd())),
+    root: path8.resolve(option2(args, "--root", process.cwd())),
     source: option2(args, "--from"),
     apply: args.includes("--apply"),
     force: args.includes("--force"),
@@ -3287,7 +3935,7 @@ var main2 = (args = process.argv.slice(2)) => {
 `);
   if (result.conflicts.length) process.exitCode = 2;
 };
-if (process.argv[1] && path7.basename(process.argv[1]) === "navigation-migrate.mjs" && import.meta.url === pathToFileURL2(process.argv[1]).href) {
+if (process.argv[1] && path8.basename(process.argv[1]) === "navigation-migrate.mjs" && import.meta.url === pathToFileURL2(process.argv[1]).href) {
   try {
     main2();
   } catch (error) {
@@ -3297,13 +3945,155 @@ if (process.argv[1] && path7.basename(process.argv[1]) === "navigation-migrate.m
   }
 }
 
+// ../../plugins/codex-agent/skills/context-lint/scripts/context-lint.mjs
+import fs9 from "node:fs";
+import path9 from "node:path";
+import { pathToFileURL as pathToFileURL3 } from "node:url";
+var healthOrder = ["conflict", "orphan", "duplicate", "insufficient-evidence", "review-due", "healthy"];
+var normalize = (value) => String(value ?? "").normalize("NFKC").toLocaleLowerCase("en-US").replace(/\s+/g, " ").trim();
+var findingSort = (left, right) => (left.path ?? "").localeCompare(right.path ?? "") || (left.id ?? "").localeCompare(right.id ?? "") || left.code.localeCompare(right.code);
+var healthFor = (reasons) => healthOrder.find((health) => reasons.includes(health)) ?? "healthy";
+var lintContext = ({ root, strict = false, now = /* @__PURE__ */ new Date() }) => {
+  const checkedAt = now.toISOString();
+  const resolution = resolveContextCatalog({ root });
+  const findings = [];
+  if (["invalid", "both-divergent"].includes(resolution.state)) {
+    for (const message of resolution.errors.length ? resolution.errors : resolution.warnings) {
+      findings.push({ severity: "error", code: "catalog-invalid", message });
+    }
+    return {
+      ok: false,
+      healthy: false,
+      checkedAt,
+      state: resolution.state,
+      summary: { entries: 0, healthy: 0, findings: findings.length, errors: findings.length, warnings: 0 },
+      entries: [],
+      findings: findings.sort(findingSort)
+    };
+  }
+  const catalog = getReadableContextCatalog({ root });
+  if (!catalog.index) {
+    findings.push({ severity: "warning", code: "catalog-missing", message: "context index not found" });
+    return {
+      ok: !strict,
+      healthy: false,
+      checkedAt,
+      state: catalog.state,
+      summary: { entries: 0, healthy: 0, findings: 1, errors: 0, warnings: 1 },
+      entries: [],
+      findings
+    };
+  }
+  const reasonsById = new Map(catalog.index.entries.map((entry) => [entry.id, /* @__PURE__ */ new Set()]));
+  const add = (severity, code, entry, message, health = null) => {
+    findings.push({ severity, code, ...entry?.id ? { id: entry.id } : {}, ...entry?.path ? { path: entry.path } : {}, message });
+    if (health && entry?.id) reasonsById.get(entry.id)?.add(health);
+  };
+  const today = checkedAt.slice(0, 10);
+  for (const entry of catalog.index.entries) {
+    if (catalog.index.version === 1 || !entry.evidence?.length) {
+      add("warning", "evidence-missing", entry, "entry has no machine-verifiable provenance", "insufficient-evidence");
+    }
+    if (entry.status === "conflicted") add("error", "lifecycle-conflicted", entry, "entry is marked conflicted", "conflict");
+    if (entry.reviewAfter && entry.reviewAfter <= today) add("warning", "review-due", entry, `entry review was due on ${entry.reviewAfter}`, "review-due");
+    const localEvidence = (entry.evidence ?? []).filter((evidence) => ["repository", "decision"].includes(evidence.type));
+    if (entry.evidence?.length && !localEvidence.length) {
+      add("warning", "evidence-derived-only", entry, "external evidence alone cannot establish repository-specific context", "insufficient-evidence");
+    }
+    for (const evidence of localEvidence) {
+      const target = path9.resolve(catalog.root, evidence.locator);
+      const relative3 = slash(path9.relative(catalog.root, target));
+      if (relative3.startsWith("../") || path9.isAbsolute(relative3)) {
+        add("error", "evidence-escape", entry, `evidence escapes repository: ${evidence.locator}`, "insufficient-evidence");
+        continue;
+      }
+      if (relative3 === ".codex-agent/context" || relative3.startsWith(".codex-agent/context/") || relative3 === ".agents/context" || relative3.startsWith(".agents/context/")) {
+        add("warning", "evidence-derived", entry, `evidence points to derived context: ${evidence.locator}`, "insufficient-evidence");
+        continue;
+      }
+      let stat;
+      try {
+        assertNoSymlink(catalog.root, target, `context evidence ${evidence.locator}`);
+      } catch {
+        add("error", "evidence-invalid-file", entry, `evidence traverses a symbolic link: ${evidence.locator}`, "insufficient-evidence");
+        continue;
+      }
+      try {
+        stat = fs9.lstatSync(target);
+      } catch {
+        stat = null;
+      }
+      if (!stat) add("error", "evidence-missing-file", entry, `evidence file is missing: ${evidence.locator}`, "insufficient-evidence");
+      else if (stat.isSymbolicLink() || !stat.isFile()) add("error", "evidence-invalid-file", entry, `evidence is not a regular file: ${evidence.locator}`, "insufficient-evidence");
+      else if (sha256(fs9.readFileSync(target)) !== evidence.sha256) add("error", "evidence-digest-mismatch", entry, `evidence changed: ${evidence.locator}`, "conflict");
+    }
+    for (const relatedId of entry.related ?? []) {
+      const related = catalog.index.entries.find((item) => item.id === relatedId);
+      if (related && !(related.related ?? []).includes(entry.id)) add("warning", "relation-asymmetric", entry, `related link is not reciprocal: ${relatedId}`, "conflict");
+    }
+  }
+  const summaryOwners = /* @__PURE__ */ new Map();
+  const contentOwners = /* @__PURE__ */ new Map();
+  for (const entry of catalog.index.entries.filter((item) => item.status !== "superseded")) {
+    const summaryKey = normalize(entry.summary);
+    const contentKey = sha256(fs9.readFileSync(path9.join(catalog.contextRoot, ...entry.path.split("/"))));
+    for (const [key, owners, label] of [[summaryKey, summaryOwners, "summary"], [contentKey, contentOwners, "content"]]) {
+      const owner = owners.get(key);
+      if (owner && !(entry.supersedes ?? []).includes(owner.id) && !(owner.supersedes ?? []).includes(entry.id)) {
+        add("warning", `duplicate-${label}`, entry, `${label} duplicates ${owner.id}`, "duplicate");
+        reasonsById.get(owner.id)?.add("duplicate");
+      } else if (!owner) owners.set(key, entry);
+    }
+  }
+  const indexed = new Set(catalog.index.entries.map((entry) => entry.path));
+  for (const file of listTreeFiles(catalog.contextRoot).filter((item) => item.relative.toLowerCase().endsWith(".md"))) {
+    if (!indexed.has(file.relative)) add("warning", "orphan-document", { path: file.relative }, "Markdown document is not indexed");
+  }
+  const entries = catalog.index.entries.map((entry) => {
+    const reasons = [...reasonsById.get(entry.id)].sort((left, right) => healthOrder.indexOf(left) - healthOrder.indexOf(right));
+    return { id: entry.id, path: entry.path, lifecycle: entry.status ?? "active", health: healthFor(reasons), reasons };
+  }).sort((left, right) => left.path.localeCompare(right.path));
+  const sortedFindings = findings.sort(findingSort);
+  const errors = sortedFindings.filter((finding) => finding.severity === "error").length;
+  const warnings = sortedFindings.filter((finding) => finding.severity === "warning").length;
+  const healthy = entries.length > 0 && entries.every((entry) => entry.health === "healthy") && warnings === 0 && errors === 0;
+  return {
+    ok: errors === 0 && (!strict || warnings === 0),
+    healthy,
+    checkedAt,
+    state: catalog.state,
+    summary: { entries: entries.length, healthy: entries.filter((entry) => entry.health === "healthy").length, findings: sortedFindings.length, errors, warnings },
+    entries,
+    findings: sortedFindings
+  };
+};
+var option3 = (args, name, fallback) => {
+  const index = args.indexOf(name);
+  return index >= 0 && args[index + 1] ? args[index + 1] : fallback;
+};
+var main3 = (args = process.argv.slice(2)) => {
+  const result = lintContext({ root: path9.resolve(option3(args, "--root", process.cwd())), strict: args.includes("--strict") });
+  process.stdout.write(`${JSON.stringify(result, null, 2)}
+`);
+  if (!result.ok) process.exitCode = 1;
+};
+if (process.argv[1] && path9.basename(process.argv[1]) === "context-lint.mjs" && import.meta.url === pathToFileURL3(process.argv[1]).href) {
+  try {
+    main3();
+  } catch (error) {
+    process.stderr.write(`${error instanceof Error ? error.message : String(error)}
+`);
+    process.exitCode = 1;
+  }
+}
+
 // src/core.mjs
 var listFiles = (root) => {
-  if (!fs8.existsSync(root)) return [];
+  if (!fs10.existsSync(root)) return [];
   const files = [];
   const visit = (directory) => {
-    for (const entry of fs8.readdirSync(directory, { withFileTypes: true })) {
-      const absolute = path8.join(directory, entry.name);
+    for (const entry of fs10.readdirSync(directory, { withFileTypes: true })) {
+      const absolute = path10.join(directory, entry.name);
       if (entry.isDirectory()) visit(absolute);
       else if (entry.isFile()) files.push(absolute);
     }
@@ -3313,41 +4103,41 @@ var listFiles = (root) => {
 };
 var prepareContextMigration = ({ root, source, dryRun = false, force = false }) => {
   if (!source) throw new Error("migrate requires --from PATH");
-  const projectRoot = path8.resolve(root);
-  const sourceRoot = path8.resolve(source);
-  if (!fs8.existsSync(sourceRoot)) throw new Error(`Migration source not found: ${sourceRoot}`);
-  const sourceFiles = (fs8.statSync(sourceRoot).isDirectory() ? listFiles(sourceRoot) : [sourceRoot]).filter((file) => file.endsWith(".md"));
+  const projectRoot = path10.resolve(root);
+  const sourceRoot = path10.resolve(source);
+  if (!fs10.existsSync(sourceRoot)) throw new Error(`Migration source not found: ${sourceRoot}`);
+  const sourceFiles = (fs10.statSync(sourceRoot).isDirectory() ? listFiles(sourceRoot) : [sourceRoot]).filter((file) => file.endsWith(".md"));
   if (!sourceFiles.length) throw new Error("Migration source contains no Markdown context files.");
   const writableCatalog = assertWritableContextCatalog({ root: projectRoot });
   const catalogProjectRoot = writableCatalog.root;
   const contextRoot = writableCatalog.contextRoot;
   if (!contextRoot) throw new Error("Writable context catalog did not resolve a destination root.");
-  const destinationRoot = path8.join(contextRoot, "imported");
+  const destinationRoot = path10.join(contextRoot, "imported");
   const result = { imported: [], unchanged: [], conflicts: [], backedUp: [], dryRun, applied: false };
   const documents = [];
   const backupPaths = [];
   for (const sourceFile of sourceFiles) {
-    const relative2 = fs8.statSync(sourceRoot).isDirectory() ? path8.relative(sourceRoot, sourceFile) : path8.basename(sourceFile);
-    const destination = path8.join(destinationRoot, relative2);
-    const content = fs8.readFileSync(sourceFile);
+    const relative3 = fs10.statSync(sourceRoot).isDirectory() ? path10.relative(sourceRoot, sourceFile) : path10.basename(sourceFile);
+    const destination = path10.join(destinationRoot, relative3);
+    const content = fs10.readFileSync(sourceFile);
     if (containsSensitiveContent(content.toString("utf8"))) {
       throw new Error(`Migration source appears to contain a secret or credential: ${sourceFile}`);
     }
-    if (!fs8.existsSync(destination)) {
-      result.imported.push(path8.relative(catalogProjectRoot, destination));
-      documents.push({ path: path8.relative(contextRoot, destination).split(path8.sep).join("/"), content: content.toString("utf8") });
+    if (!fs10.existsSync(destination)) {
+      result.imported.push(path10.relative(catalogProjectRoot, destination));
+      documents.push({ path: path10.relative(contextRoot, destination).split(path10.sep).join("/"), content: content.toString("utf8") });
       continue;
     }
-    if (content.equals(fs8.readFileSync(destination))) {
-      result.unchanged.push(path8.relative(catalogProjectRoot, destination));
+    if (content.equals(fs10.readFileSync(destination))) {
+      result.unchanged.push(path10.relative(catalogProjectRoot, destination));
       continue;
     }
     if (!force) {
-      result.conflicts.push(path8.relative(catalogProjectRoot, destination));
+      result.conflicts.push(path10.relative(catalogProjectRoot, destination));
       continue;
     }
-    result.imported.push(path8.relative(catalogProjectRoot, destination));
-    const documentPath = path8.relative(contextRoot, destination).split(path8.sep).join("/");
+    result.imported.push(path10.relative(catalogProjectRoot, destination));
+    const documentPath = path10.relative(contextRoot, destination).split(path10.sep).join("/");
     documents.push({ path: documentPath, content: content.toString("utf8") });
     backupPaths.push(documentPath);
   }
@@ -3359,7 +4149,7 @@ var prepareContextMigration = ({ root, source, dryRun = false, force = false })
     index,
     backupPaths: [
       ...backupPaths,
-      ...index && fs8.existsSync(index.path) ? ["index.json"] : []
+      ...index && fs10.existsSync(index.path) ? ["index.json"] : []
     ]
   };
 };
@@ -3384,23 +4174,23 @@ var migrateContext = (options) => {
 var check = (checks, name, ok, detail) => checks.push({ name, ok: Boolean(ok), detail });
 var parseJson = (file) => {
   try {
-    return { value: JSON.parse(fs8.readFileSync(file, "utf8")) };
+    return { value: JSON.parse(fs10.readFileSync(file, "utf8")) };
   } catch (error) {
     return { error: error instanceof Error ? error.message : String(error) };
   }
 };
 var diagnoseProject = ({ root }) => {
-  const projectRoot = path8.resolve(root);
+  const projectRoot = path10.resolve(root);
   const checks = [];
   const nodeMajor = Number.parseInt(process.versions.node.split(".")[0], 10);
   check(checks, "node", nodeMajor >= 20, `Node.js ${process.versions.node}; requires 20 or newer`);
-  const manifest = path8.join(projectRoot, "plugins", "codex-agent", ".codex-plugin", "plugin.json");
-  const isSourceWorkspace = fs8.existsSync(manifest);
+  const manifest = path10.join(projectRoot, "plugins", "codex-agent", ".codex-plugin", "plugin.json");
+  const isSourceWorkspace = fs10.existsSync(manifest);
   check(checks, "mode", true, isSourceWorkspace ? "plugin source workspace" : "initialized consumer project");
   if (isSourceWorkspace) {
-    const marketplace = path8.join(projectRoot, ".agents", "plugins", "marketplace.json");
-    check(checks, "marketplace", fs8.existsSync(marketplace), marketplace);
-    if (fs8.existsSync(marketplace)) {
+    const marketplace = path10.join(projectRoot, ".agents", "plugins", "marketplace.json");
+    check(checks, "marketplace", fs10.existsSync(marketplace), marketplace);
+    if (fs10.existsSync(marketplace)) {
       const parsed2 = parseJson(marketplace);
       check(checks, "marketplace-json", !parsed2.error, parsed2.error || parsed2.value.name);
       check(
@@ -3415,10 +4205,10 @@ var diagnoseProject = ({ root }) => {
     check(checks, "plugin-json", !parsed.error, parsed.error || parsed.value.name);
     check(checks, "plugin-name", parsed.value?.name === "codex-agent", parsed.value?.name || "missing");
   } else {
-    const config = path8.join(projectRoot, ".codex", "config.toml");
-    const agents = path8.join(projectRoot, ".codex", "agents");
+    const config = path10.join(projectRoot, ".codex", "config.toml");
+    const agents = path10.join(projectRoot, ".codex", "agents");
     const profiles = listFiles(agents).filter((file) => file.endsWith(".toml"));
-    check(checks, "project-config", fs8.existsSync(config), config);
+    check(checks, "project-config", fs10.existsSync(config), config);
     check(checks, "project-agents", profiles.length === agentProfiles.length, `${profiles.length}/${agentProfiles.length} profiles in ${agents}`);
   }
   const resolvedCatalog = resolveContextCatalog({ root: projectRoot });
@@ -3429,38 +4219,38 @@ var diagnoseProject = ({ root }) => {
   } catch (error) {
     check(checks, "context-readable", false, error instanceof Error ? error.message : String(error));
   }
-  const contextIndex = readableCatalog2?.indexPath ?? (readableCatalog2?.root ? path8.join(readableCatalog2.root, "index.json") : null);
-  check(checks, "context-index", Boolean(contextIndex && fs8.existsSync(contextIndex)), contextIndex ?? "context index not found");
-  if (contextIndex && fs8.existsSync(contextIndex)) {
+  const contextIndex = readableCatalog2?.indexPath ?? (readableCatalog2?.root ? path10.join(readableCatalog2.root, "index.json") : null);
+  check(checks, "context-index", Boolean(contextIndex && fs10.existsSync(contextIndex)), contextIndex ?? "context index not found");
+  if (contextIndex && fs10.existsSync(contextIndex)) {
     const parsed = parseJson(contextIndex);
     check(checks, "context-json", !parsed.error, parsed.error || `${parsed.value.entries?.length ?? 0} entries`);
-    const contextRoot = path8.dirname(contextIndex);
+    const contextRoot = path10.dirname(contextIndex);
     const invalid = (parsed.value?.entries ?? []).filter((entry) => {
-      const target = path8.resolve(contextRoot, entry.path || "");
-      return !target.startsWith(`${contextRoot}${path8.sep}`) || !fs8.existsSync(target);
+      const target = path10.resolve(contextRoot, entry.path || "");
+      return !target.startsWith(`${contextRoot}${path10.sep}`) || !fs10.existsSync(target);
     });
     check(checks, "context-paths", invalid.length === 0, invalid.map((entry) => entry.path).join(", ") || "all paths valid");
   }
   if (isSourceWorkspace) {
-    const skillsRoot = path8.join(projectRoot, "plugins", "codex-agent", "skills");
-    const skillFiles = listFiles(skillsRoot).filter((file) => file.endsWith(`${path8.sep}SKILL.md`));
-    const skillDirectories = fs8.readdirSync(skillsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory()).length;
+    const skillsRoot = path10.join(projectRoot, "plugins", "codex-agent", "skills");
+    const skillFiles = listFiles(skillsRoot).filter((file) => file.endsWith(`${path10.sep}SKILL.md`));
+    const skillDirectories = fs10.readdirSync(skillsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory()).length;
     check(checks, "skills", skillFiles.length > 0 && skillFiles.length === skillDirectories, `${skillFiles.length}/${skillDirectories} skill entrypoints`);
-    const agentRoot = path8.join(projectRoot, "plugins", "codex-agent", "agents");
+    const agentRoot = path10.join(projectRoot, "plugins", "codex-agent", "agents");
     check(checks, "plugin-agents", listFiles(agentRoot).filter((file) => file.endsWith(".md")).length === agentProfiles.length, `${agentProfiles.length} canonical profiles in ${agentRoot}`);
-    const hooks = path8.join(projectRoot, "plugins", "codex-agent", "hooks", "hooks.json");
-    check(checks, "hooks", fs8.existsSync(hooks) && !parseJson(hooks).error, hooks);
+    const hooks = path10.join(projectRoot, "plugins", "codex-agent", "hooks", "hooks.json");
+    check(checks, "hooks", fs10.existsSync(hooks) && !parseJson(hooks).error, hooks);
   }
   return { root: projectRoot, ok: checks.every((item) => item.ok), checks };
 };
 var evaluateRouting = ({ root }) => {
-  const projectRoot = path8.resolve(root);
-  const suitePath = path8.join(projectRoot, "evals", "skill-routing.json");
-  if (!fs8.existsSync(suitePath)) throw new Error(`Routing suite not found: ${suitePath}`);
-  const suite = JSON.parse(fs8.readFileSync(suitePath, "utf8"));
-  const skillsRoot = path8.join(projectRoot, "plugins", "codex-agent", "skills");
+  const projectRoot = path10.resolve(root);
+  const suitePath = path10.join(projectRoot, "evals", "skill-routing.json");
+  if (!fs10.existsSync(suitePath)) throw new Error(`Routing suite not found: ${suitePath}`);
+  const suite = JSON.parse(fs10.readFileSync(suitePath, "utf8"));
+  const skillsRoot = path10.join(projectRoot, "plugins", "codex-agent", "skills");
   const available = new Set(
-    fs8.readdirSync(skillsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name)
+    fs10.readdirSync(skillsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name)
   );
   const ids = /* @__PURE__ */ new Set();
   const failures = [];
@@ -3498,13 +4288,13 @@ var evaluateRouting = ({ root }) => {
   return { ok: failures.length === 0, scenarios: suite.cases?.length ?? 0, skills: available.size, byKind, failures };
 };
 var evaluateBehaviorContracts = ({ root }) => {
-  const projectRoot = path8.resolve(root);
-  const suitePath = path8.join(projectRoot, "evals", "behavior-contracts.json");
-  if (!fs8.existsSync(suitePath)) throw new Error(`Behavior suite not found: ${suitePath}`);
-  const suite = JSON.parse(fs8.readFileSync(suitePath, "utf8"));
-  const skillsRoot = path8.join(projectRoot, "plugins", "codex-agent", "skills");
+  const projectRoot = path10.resolve(root);
+  const suitePath = path10.join(projectRoot, "evals", "behavior-contracts.json");
+  if (!fs10.existsSync(suitePath)) throw new Error(`Behavior suite not found: ${suitePath}`);
+  const suite = JSON.parse(fs10.readFileSync(suitePath, "utf8"));
+  const skillsRoot = path10.join(projectRoot, "plugins", "codex-agent", "skills");
   const availableSkills = new Set(
-    fs8.readdirSync(skillsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name)
+    fs10.readdirSync(skillsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name)
   );
   const availableAgents = new Set(agentProfiles.map((profile) => profile.name));
   const coveredSkills = /* @__PURE__ */ new Set();
@@ -3553,14 +4343,17 @@ Run "codex-agent context" to list context commands.`;
 var contextUsage = `Codex Agent context commands
 
 Usage:
-  codex-agent context init [--root PATH] [--analysis FILE] [--apply --plan-hash HASH] [--force] [--json]
-  codex-agent context refresh [--root PATH] [--analysis FILE] [--apply --plan-hash HASH] [--force] [--json]
+  codex-agent context init [--root PATH] [--analysis FILE] [--exclude-managed PATH ...] [--apply --plan-hash HASH] [--force] [--json]
+  codex-agent context refresh [--root PATH] [--analysis FILE] [--exclude-managed PATH ...] [--apply --plan-hash HASH] [--force] [--json]
   codex-agent context index [--root PATH] [--dry-run] [--json]
+  codex-agent context lint [--root PATH] [--strict] [--json]
   codex-agent context save --proposal FILE [--root PATH] [--apply] [--update] [--json]
 
-Both init and refresh preview by default. Apply the exact reviewed preview by passing --apply with its planHash.`;
+Both init and refresh show a human-readable plan by default. Approve the displayed plan; the plan hash remains an internal integrity check for apply.
+Repeat --exclude-managed for optional managed paths that must remain untouched. Supported paths: .codex/config.toml and .gitignore.`;
 var OPTION_KEYS = /* @__PURE__ */ new Map([
   ["--analysis", "analysisFile"],
+  ["--exclude-managed", "excludeManaged"],
   ["--from", "source"],
   ["--plan-hash", "expectedPlanHash"],
   ["--proposal", "proposalFile"],
@@ -3574,22 +4367,26 @@ var FLAG_KEYS = /* @__PURE__ */ new Map([
   ["--include-templates", "includeTemplates"],
   ["--include-workflows", "includeWorkflows"],
   ["--json", "json"],
+  ["--strict", "strict"],
   ["--update", "update"]
 ]);
 var parseOptions = (args, { command, options = [], flags = [] }) => {
   const allowedOptions = new Set(options);
   const allowedFlags = new Set(flags);
   const seen = /* @__PURE__ */ new Set();
+  const repeatableOptions = /* @__PURE__ */ new Set(["--exclude-managed"]);
   const parsed = {};
   for (let index = 0; index < args.length; index += 1) {
     const argument = args[index];
     if (!argument.startsWith("-")) throw new Error(`Unexpected argument for ${command}: ${argument}`);
-    if (seen.has(argument)) throw new Error(`Duplicate option for ${command}: ${argument}`);
-    seen.add(argument);
+    if (seen.has(argument) && !repeatableOptions.has(argument)) throw new Error(`Duplicate option for ${command}: ${argument}`);
+    if (!repeatableOptions.has(argument)) seen.add(argument);
     if (allowedOptions.has(argument)) {
       const value = args[index + 1];
       if (!value || value.startsWith("-")) throw new Error(`${argument} requires a value for ${command}`);
-      parsed[OPTION_KEYS.get(argument)] = value;
+      const key = OPTION_KEYS.get(argument);
+      if (repeatableOptions.has(argument)) parsed[key] = [...parsed[key] ?? [], value];
+      else parsed[key] = value;
       index += 1;
       continue;
     }
@@ -3599,13 +4396,13 @@ var parseOptions = (args, { command, options = [], flags = [] }) => {
     }
     throw new Error(`Unknown option for ${command}: ${argument}`);
   }
-  parsed.root = path9.resolve(parsed.root ?? process.cwd());
+  parsed.root = path11.resolve(parsed.root ?? process.cwd());
   return parsed;
 };
 var readJsonFile = (file, label) => {
-  const absolute = path9.resolve(file);
-  if (!fs9.existsSync(absolute)) throw new Error(`${label} file not found: ${absolute}`);
-  return JSON.parse(fs9.readFileSync(absolute, "utf8"));
+  const absolute = path11.resolve(file);
+  if (!fs11.existsSync(absolute)) throw new Error(`${label} file not found: ${absolute}`);
+  return JSON.parse(fs11.readFileSync(absolute, "utf8"));
 };
 var write = (value, json) => {
   if (json) {
@@ -3618,11 +4415,51 @@ var write = (value, json) => {
   else process.stdout.write(`${JSON.stringify(value, null, 2)}
 `);
 };
+var listLine = (items, empty = "None") => items.length ? items.join(", ") : empty;
+var actionLabel = (action) => ({ create: "Create", update: "Update", preserve: "Preserve", remove: "Remove", migrate: "Migrate", conflict: "Conflict" })[action] ?? action;
+var formatContextLifecyclePlan = (result) => {
+  const plan = result.approvalPlan;
+  if (!plan) return JSON.stringify(result, null, 2);
+  const lines = [
+    plan.status === "applied" ? `Context operation applied: ${plan.title}` : `Context approval plan: ${plan.title}`,
+    "",
+    `Outcome: ${plan.outcome}`,
+    `Target: ${plan.target}`,
+    `Status: ${plan.status}`,
+    "",
+    "Repository evidence",
+    `- Project: ${plan.analysis.project}`,
+    `- Languages: ${listLine(plan.analysis.languages)}`,
+    `- Toolchains: ${listLine(plan.analysis.toolchains)}`,
+    `- Technologies: ${listLine(plan.analysis.technologies)}`,
+    `- Units: ${plan.analysis.units}; test units: ${plan.analysis.testUnits}`,
+    `- Scan: ${plan.analysis.scan.files ?? "unknown"} files; ${plan.analysis.scan.truncated ? "truncated" : "complete"}`,
+    "",
+    "Planned changes"
+  ];
+  if (plan.changes.length) for (const change of plan.changes) lines.push(`- ${actionLabel(change.action)} ${change.path}`);
+  else lines.push("- No file changes");
+  lines.push("", "Preserved");
+  lines.push(`- ${plan.preserved.manualContent}`);
+  lines.push(`- ${plan.preserved.unchanged.length} managed files are unchanged.`);
+  lines.push(`- Excluded managed paths: ${listLine(plan.preserved.excludedManaged)}`);
+  const excluded = plan.analysis.scan.excluded;
+  lines.push(`- Scan exclusions: ${listLine(excluded.slice(0, 12))}${excluded.length > 12 ? `, and ${excluded.length - 12} more` : ""}`);
+  lines.push("", "Conflicts");
+  if (plan.conflicts.length) for (const conflict of plan.conflicts) lines.push(`- ${conflict}`);
+  else lines.push("- None");
+  lines.push("", "Safeguards");
+  for (const safeguard of plan.safeguards) lines.push(`- ${safeguard}`);
+  lines.push("", "Residual risks");
+  for (const risk of plan.residualRisks) lines.push(`- ${risk}`);
+  lines.push("", `Approval: ${plan.approval}`, `Plan integrity: ${plan.integrityId}`);
+  return lines.join("\n");
+};
 var finishWithConflicts = (result, json) => {
-  write(result, json);
+  write(json || !result.approvalPlan ? result : formatContextLifecyclePlan(result), json);
   if (result.conflicts.length) process.exitCode = 2;
 };
-var main3 = async (args) => {
+var main4 = async (args) => {
   const [command, ...rest] = args;
   if (!command || command === "help") {
     if (rest.length === 1 && rest[0] === "context") write(contextUsage, false);
@@ -3637,7 +4474,7 @@ var main3 = async (args) => {
       return;
     }
     if (contextArgs.includes("--help") || contextArgs.includes("-h")) {
-      if (!["init", "refresh", "index", "save"].includes(subcommand)) {
+      if (!["init", "refresh", "index", "lint", "save"].includes(subcommand)) {
         throw new Error(`Unknown context command: ${subcommand}
 
 ${contextUsage}`);
@@ -3648,7 +4485,7 @@ ${contextUsage}`);
     if (subcommand === "init" || subcommand === "refresh") {
       const options = parseOptions(contextArgs, {
         command: `context ${subcommand}`,
-        options: ["--root", "--analysis", "--plan-hash"],
+        options: ["--root", "--analysis", "--exclude-managed", "--plan-hash"],
         flags: ["--apply", "--force", "--json"]
       });
       const analysis = options.analysisFile ? readJsonFile(options.analysisFile, "Analysis") : null;
@@ -3667,6 +4504,17 @@ ${contextUsage}`);
       write({ path: result.path, entries: result.index.entries.length, dryRun: result.dryRun }, options.json);
       return;
     }
+    if (subcommand === "lint") {
+      const options = parseOptions(contextArgs, {
+        command: "context lint",
+        options: ["--root"],
+        flags: ["--strict", "--json"]
+      });
+      const result = lintContext(options);
+      write(result, options.json);
+      if (!result.ok) process.exitCode = 1;
+      return;
+    }
     if (subcommand === "save") {
       const options = parseOptions(contextArgs, {
         command: "context save",
@@ -3741,7 +4589,7 @@ ${usage}`);
 };
 
 // bin/codex-agent.mjs
-main3(process.argv.slice(2)).catch((error) => {
+main4(process.argv.slice(2)).catch((error) => {
   process.stderr.write(`${error instanceof Error ? error.message : String(error)}
 `);
   process.exitCode = 1;