@csark0812/skeleton 1.5.7 → 1.6.0

package/dist/cli.js

@@ -3037,7 +3037,6 @@ var require_utils = __commonJS((exports, module) => {
   var isHexPair = RegExp.prototype.test.bind(/^[\da-f]{2}$/iu);
   var isUnreserved = RegExp.prototype.test.bind(/^[\da-z\-._~]$/iu);
   var isPathCharacter = RegExp.prototype.test.bind(/^[\da-z\-._~!$&'()*+,;=:@/]$/iu);
-  var isQueryFragmentCharacter = RegExp.prototype.test.bind(/^[\da-z\-._~!$&'()*+,;=:@/?]$/iu);
   function stringArrayToHexStripped(input) {
     let acc = "";
     let code = 0;
@@ -3181,7 +3180,7 @@ var require_utils = __commonJS((exports, module) => {
             continue;
           }
         } else if (input[0] === "/") {
-          if (input[1] === ".") {
+          if (input[1] === "." || input[1] === "/") {
             output.push("/");
             break;
           }
@@ -3263,30 +3262,10 @@ var require_utils = __commonJS((exports, module) => {
     }
     return output;
   }
-  var BYTE_HEX = new Array(256);
-  {
-    const HEX_DIGITS = "0123456789ABCDEF";
-    for (let i = 0;i < 256; i++) {
-      BYTE_HEX[i] = "%" + HEX_DIGITS[i >> 4] + HEX_DIGITS[i & 15];
-    }
-  }
-  function isEscapeSafe(cp) {
-    return cp >= 48 && cp <= 57 || cp >= 65 && cp <= 90 || cp >= 97 && cp <= 122 || cp === 42 || cp === 43 || cp === 45 || cp === 46 || cp === 47 || cp === 64 || cp === 95;
-  }
-  function percentEncodeNonAscii(cp) {
-    if (cp < 2048) {
-      return BYTE_HEX[192 | cp >> 6] + BYTE_HEX[128 | cp & 63];
-    }
-    if (cp < 65536) {
-      return BYTE_HEX[224 | cp >> 12] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
-    }
-    return BYTE_HEX[240 | cp >> 18] + BYTE_HEX[128 | cp >> 12 & 63] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
-  }
   function normalizePathEncoding(input) {
     let output = "";
     for (let i = 0;i < input.length; i++) {
-      const ch = input[i];
-      if (ch === "%" && i + 2 < input.length) {
+      if (input[i] === "%" && i + 2 < input.length) {
         const hex = input.slice(i + 1, i + 3);
         if (isHexPair(hex)) {
           const normalizedHex = hex.toUpperCase();
@@ -3300,66 +3279,10 @@ var require_utils = __commonJS((exports, module) => {
           continue;
         }
       }
-      if (isPathCharacter(ch)) {
-        output += ch;
-      } else {
-        const code = input.charCodeAt(i);
-        if (code < 128) {
-          output += isEscapeSafe(code) ? ch : BYTE_HEX[code];
-        } else if (code < 55296 || code > 57343) {
-          output += percentEncodeNonAscii(code);
-        } else if (code <= 56319 && i + 1 < input.length) {
-          const low = input.charCodeAt(i + 1);
-          if (low >= 56320 && low <= 57343) {
-            output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
-            i++;
-          } else {
-            output += percentEncodeNonAscii(65533);
-          }
-        } else {
-          output += percentEncodeNonAscii(65533);
-        }
-      }
-    }
-    return output;
-  }
-  function normalizeQueryFragmentEncoding(input) {
-    let output = "";
-    for (let i = 0;i < input.length; i++) {
-      const ch = input[i];
-      if (ch === "%" && i + 2 < input.length) {
-        const hex = input.slice(i + 1, i + 3);
-        if (isHexPair(hex)) {
-          const normalizedHex = hex.toUpperCase();
-          const decoded = String.fromCharCode(parseInt(normalizedHex, 16));
-          if (isUnreserved(decoded)) {
-            output += decoded;
-          } else {
-            output += "%" + normalizedHex;
-          }
-          i += 2;
-          continue;
-        }
-      }
-      if (isQueryFragmentCharacter(ch)) {
-        output += ch;
+      if (isPathCharacter(input[i])) {
+        output += input[i];
       } else {
-        const code = input.charCodeAt(i);
-        if (code < 128) {
-          output += isEscapeSafe(code) ? ch : BYTE_HEX[code];
-        } else if (code < 55296 || code > 57343) {
-          output += percentEncodeNonAscii(code);
-        } else if (code <= 56319 && i + 1 < input.length) {
-          const low = input.charCodeAt(i + 1);
-          if (low >= 56320 && low <= 57343) {
-            output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
-            i++;
-          } else {
-            output += percentEncodeNonAscii(65533);
-          }
-        } else {
-          output += percentEncodeNonAscii(65533);
-        }
+        output += escape(input[i]);
       }
     }
     return output;
@@ -3367,8 +3290,7 @@ var require_utils = __commonJS((exports, module) => {
   function escapePreservingEscapes(input) {
     let output = "";
     for (let i = 0;i < input.length; i++) {
-      const ch = input[i];
-      if (ch === "%" && i + 2 < input.length) {
+      if (input[i] === "%" && i + 2 < input.length) {
         const hex = input.slice(i + 1, i + 3);
         if (isHexPair(hex)) {
           output += "%" + hex.toUpperCase();
@@ -3376,22 +3298,7 @@ var require_utils = __commonJS((exports, module) => {
           continue;
         }
       }
-      const code = input.charCodeAt(i);
-      if (code < 128) {
-        output += isEscapeSafe(code) ? ch : BYTE_HEX[code];
-      } else if (code < 55296 || code > 57343) {
-        output += percentEncodeNonAscii(code);
-      } else if (code <= 56319 && i + 1 < input.length) {
-        const low = input.charCodeAt(i + 1);
-        if (low >= 56320 && low <= 57343) {
-          output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
-          i++;
-        } else {
-          output += percentEncodeNonAscii(65533);
-        }
-      } else {
-        output += percentEncodeNonAscii(65533);
-      }
+      output += escape(input[i]);
     }
     return output;
   }
@@ -3425,7 +3332,6 @@ var require_utils = __commonJS((exports, module) => {
     reescapeHostDelimiters,
     normalizePercentEncoding,
     normalizePathEncoding,
-    normalizeQueryFragmentEncoding,
     escapePreservingEscapes,
     removeDotSegments,
     isIPv4,
@@ -3611,7 +3517,7 @@ var require_schemes = __commonJS((exports, module) => {
 
 // node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS((exports, module) => {
-  var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, normalizeQueryFragmentEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
+  var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
   var { SCHEMES, getSchemeHandler } = require_schemes();
   function normalize(uri, options) {
     if (typeof uri === "string") {
@@ -3623,12 +3529,7 @@ var require_fast_uri = __commonJS((exports, module) => {
   }
   function resolve(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-    const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed } = parseWithStatus(baseURI, schemelessOptions);
-    const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed } = parseWithStatus(relativeURI, schemelessOptions);
-    if (baseMalformed || relativeMalformed) {
-      throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
-    }
-    const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
+    const resolved = resolveComponent(parse(baseURI, schemelessOptions), parse(relativeURI, schemelessOptions), schemelessOptions, true);
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
@@ -3754,8 +3655,6 @@ var require_fast_uri = __commonJS((exports, module) => {
     return uriTokens.join("");
   }
   var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
-  var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
-  var AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
   function getParseError(parsed, matches) {
     if (matches[2] !== undefined && parsed.path && parsed.path[0] !== "/") {
       return 'URI path must start with "/" when authority is present.';
@@ -3785,28 +3684,9 @@ var require_fast_uri = __commonJS((exports, module) => {
         uri = "//" + uri;
       }
     }
-    const authorityMatch = uri.match(AUTHORITY_PREFIX);
-    if (authorityMatch !== null && authorityMatch[1].indexOf("\\") !== -1) {
-      parsed.error = "URI authority must not contain a literal backslash.";
-      malformedAuthorityOrPort = true;
-    }
-    const introducerMatch = uri.match(AUTHORITY_INTRODUCER_REGION);
-    if (introducerMatch !== null) {
-      const region = introducerMatch[1];
-      const normalizedRegion = region.replace(/[\t\n\r]/g, "");
-      if (normalizedRegion.length >= 2) {
-        if (normalizedRegion.slice(0, 2) !== "//") {
-          parsed.error = parsed.error || "URI authority must not contain a literal backslash.";
-          malformedAuthorityOrPort = true;
-        } else if (region.length !== normalizedRegion.length) {
-          parsed.error = parsed.error || "URI authority introducer must not contain whitespace.";
-          malformedAuthorityOrPort = true;
-        }
-      }
-    }
     const matches = uri.match(URI_PARSE);
     if (matches) {
-      parsed.scheme = matches[1] === undefined ? undefined : matches[1].toLowerCase();
+      parsed.scheme = matches[1];
       parsed.userinfo = matches[3];
       parsed.host = matches[4];
       parsed.port = parseInt(matches[5], 10);
@@ -3865,11 +3745,12 @@ var require_fast_uri = __commonJS((exports, module) => {
         if (parsed.path) {
           parsed.path = normalizePathEncoding(parsed.path);
         }
-        if (parsed.query) {
-          parsed.query = normalizeQueryFragmentEncoding(parsed.query);
-        }
         if (parsed.fragment) {
-          parsed.fragment = normalizeQueryFragmentEncoding(parsed.fragment);
+          try {
+            parsed.fragment = encodeURI(decodeURIComponent(parsed.fragment));
+          } catch {
+            parsed.error = parsed.error || "URI malformed";
+          }
         }
       }
       if (schemeHandler && schemeHandler.parse) {
@@ -7821,7 +7702,7 @@ var require_stringify = __commonJS((exports) => {
       props.push(doc.directives.tagString(tag));
     return props.join(" ");
   }
-  function stringify(item, ctx, onComment, onChompKeep) {
+  function stringify2(item, ctx, onComment, onChompKeep) {
     if (identity.isPair(item))
       return item.toString(ctx, onComment, onChompKeep);
     if (identity.isAlias(item)) {
@@ -7850,14 +7731,14 @@ var require_stringify = __commonJS((exports) => {
 ${ctx.indent}${str}`;
   }
   exports.createStringifyContext = createStringifyContext;
-  exports.stringify = stringify;
+  exports.stringify = stringify2;
 });
 
 // node_modules/yaml/dist/stringify/stringifyPair.js
 var require_stringifyPair = __commonJS((exports) => {
   var identity = require_identity();
   var Scalar = require_Scalar();
-  var stringify = require_stringify();
+  var stringify2 = require_stringify();
   var stringifyComment = require_stringifyComment();
   function stringifyPair({ key, value }, ctx, onComment, onChompKeep) {
     const { allNullValues, doc, indent, indentStep, options: { commentString, indentSeq, simpleKeys } } = ctx;
@@ -7879,7 +7760,7 @@ var require_stringifyPair = __commonJS((exports) => {
     });
     let keyCommentDone = false;
     let chompKeep = false;
-    let str = stringify.stringify(key, ctx, () => keyCommentDone = true, () => chompKeep = true);
+    let str = stringify2.stringify(key, ctx, () => keyCommentDone = true, () => chompKeep = true);
     if (!explicitKey && !ctx.inFlow && str.length > 1024) {
       if (simpleKeys)
         throw new Error("With simple keys, single line scalar must not span more than 1024 characters");
@@ -7931,7 +7812,7 @@ ${indent}:`;
       ctx.indent = ctx.indent.substring(2);
     }
     let valueCommentDone = false;
-    const valueStr = stringify.stringify(value, ctx, () => valueCommentDone = true, () => chompKeep = true);
+    const valueStr = stringify2.stringify(value, ctx, () => valueCommentDone = true, () => chompKeep = true);
     let ws = " ";
     if (keyComment || vsb || vcb) {
       ws = vsb ? `
@@ -8069,7 +7950,7 @@ var require_merge = __commonJS((exports) => {
 var require_addPairToJSMap = __commonJS((exports) => {
   var log = require_log();
   var merge = require_merge();
-  var stringify = require_stringify();
+  var stringify2 = require_stringify();
   var identity = require_identity();
   var toJS = require_toJS();
   function addPairToJSMap(ctx, map, { key, value }) {
@@ -8105,7 +7986,7 @@ var require_addPairToJSMap = __commonJS((exports) => {
     if (typeof jsKey !== "object")
       return String(jsKey);
     if (identity.isNode(key) && ctx?.doc) {
-      const strCtx = stringify.createStringifyContext(ctx.doc, {});
+      const strCtx = stringify2.createStringifyContext(ctx.doc, {});
       strCtx.anchors = new Set;
       for (const node of ctx.anchors.keys())
         strCtx.anchors.add(node.anchor);
@@ -8167,12 +8048,12 @@ var require_Pair = __commonJS((exports) => {
 // node_modules/yaml/dist/stringify/stringifyCollection.js
 var require_stringifyCollection = __commonJS((exports) => {
   var identity = require_identity();
-  var stringify = require_stringify();
+  var stringify2 = require_stringify();
   var stringifyComment = require_stringifyComment();
   function stringifyCollection(collection, ctx, options) {
     const flow = ctx.inFlow ?? collection.flow;
-    const stringify2 = flow ? stringifyFlowCollection : stringifyBlockCollection;
-    return stringify2(collection, ctx, options);
+    const stringify3 = flow ? stringifyFlowCollection : stringifyBlockCollection;
+    return stringify3(collection, ctx, options);
   }
   function stringifyBlockCollection({ comment, items }, ctx, { blockItemPrefix, flowChars, itemIndent, onChompKeep, onComment }) {
     const { indent, options: { commentString } } = ctx;
@@ -8197,7 +8078,7 @@ var require_stringifyCollection = __commonJS((exports) => {
         }
       }
       chompKeep = false;
-      let str2 = stringify.stringify(item, itemCtx, () => comment2 = null, () => chompKeep = true);
+      let str2 = stringify2.stringify(item, itemCtx, () => comment2 = null, () => chompKeep = true);
       if (comment2)
         str2 += stringifyComment.lineComment(str2, itemIndent, commentString(comment2));
       if (chompKeep && comment2)
@@ -8266,7 +8147,7 @@ ${indent}${line}` : `
       }
       if (comment)
         reqNewline = true;
-      let str = stringify.stringify(item, itemCtx, () => comment = null);
+      let str = stringify2.stringify(item, itemCtx, () => comment = null);
       reqNewline || (reqNewline = lines.length > linesAtValue || str.includes(`
 `));
       if (i < items.length - 1) {
@@ -9507,7 +9388,7 @@ var require_Schema = __commonJS((exports) => {
 // node_modules/yaml/dist/stringify/stringifyDocument.js
 var require_stringifyDocument = __commonJS((exports) => {
   var identity = require_identity();
-  var stringify = require_stringify();
+  var stringify2 = require_stringify();
   var stringifyComment = require_stringifyComment();
   function stringifyDocument(doc, options) {
     const lines = [];
@@ -9522,7 +9403,7 @@ var require_stringifyDocument = __commonJS((exports) => {
     }
     if (hasDirectives)
       lines.push("---");
-    const ctx = stringify.createStringifyContext(doc, options);
+    const ctx = stringify2.createStringifyContext(doc, options);
     const { commentString } = ctx.options;
     if (doc.commentBefore) {
       if (lines.length !== 1)
@@ -9544,7 +9425,7 @@ var require_stringifyDocument = __commonJS((exports) => {
         contentComment = doc.contents.comment;
       }
       const onChompKeep = contentComment ? undefined : () => chompKeep = true;
-      let body = stringify.stringify(doc.contents, ctx, () => contentComment = null, onChompKeep);
+      let body = stringify2.stringify(doc.contents, ctx, () => contentComment = null, onChompKeep);
       if (contentComment)
         body += stringifyComment.lineComment(body, "", commentString(contentComment));
       if ((body[0] === "|" || body[0] === ">") && lines[lines.length - 1] === "---") {
@@ -9552,7 +9433,7 @@ var require_stringifyDocument = __commonJS((exports) => {
       } else
         lines.push(body);
     } else {
-      lines.push(stringify.stringify(doc.contents, ctx));
+      lines.push(stringify2.stringify(doc.contents, ctx));
     }
     if (doc.directives?.docEnd) {
       if (doc.comment) {
@@ -11571,7 +11452,7 @@ var require_cst_scalar = __commonJS((exports) => {
 
 // node_modules/yaml/dist/parse/cst-stringify.js
 var require_cst_stringify = __commonJS((exports) => {
-  var stringify = (cst) => ("type" in cst) ? stringifyToken(cst) : stringifyItem(cst);
+  var stringify2 = (cst) => ("type" in cst) ? stringifyToken(cst) : stringifyItem(cst);
   function stringifyToken(token) {
     switch (token.type) {
       case "block-scalar": {
@@ -11624,7 +11505,7 @@ var require_cst_stringify = __commonJS((exports) => {
       res += stringifyToken(value);
     return res;
   }
-  exports.stringify = stringify;
+  exports.stringify = stringify2;
 });
 
 // node_modules/yaml/dist/parse/cst-visit.js
@@ -13315,7 +13196,7 @@ var require_public_api = __commonJS((exports) => {
     }
     return doc;
   }
-  function parse(src, reviver, options) {
+  function parse2(src, reviver, options) {
     let _reviver = undefined;
     if (typeof reviver === "function") {
       _reviver = reviver;
@@ -13334,7 +13215,7 @@ var require_public_api = __commonJS((exports) => {
     }
     return doc.toJS(Object.assign({ reviver: _reviver }, options));
   }
-  function stringify(value, replacer, options) {
+  function stringify2(value, replacer, options) {
     let _replacer = null;
     if (typeof replacer === "function" || Array.isArray(replacer)) {
       _replacer = replacer;
@@ -13356,10 +13237,10 @@ var require_public_api = __commonJS((exports) => {
       return value.toString(options);
     return new Document.Document(value, _replacer, options).toString(options);
   }
-  exports.parse = parse;
+  exports.parse = parse2;
   exports.parseAllDocuments = parseAllDocuments;
   exports.parseDocument = parseDocument;
-  exports.stringify = stringify;
+  exports.stringify = stringify2;
 });
 
 // node_modules/picomatch/lib/constants.js
@@ -14136,7 +14017,7 @@ var require_parse = __commonJS((exports, module) => {
     }
     return { risky: false };
   };
-  var parse = (input, options) => {
+  var parse2 = (input, options) => {
     if (typeof input !== "string") {
       throw new TypeError("Expected a string");
     }
@@ -14307,7 +14188,7 @@ var require_parse = __commonJS((exports, module) => {
           output = token.close = `)$))${extglobStar}`;
         }
         if (token.inner.includes("*") && (rest = remaining()) && /^\.[^\\/.]+$/.test(rest)) {
-          const expression = parse(rest, { ...options, fastpaths: false }).output;
+          const expression = parse2(rest, { ...options, fastpaths: false }).output;
           output = token.close = `)${expression})${extglobStar})`;
         }
         if (token.prev.type === "bos") {
@@ -14833,7 +14714,7 @@ var require_parse = __commonJS((exports, module) => {
     }
     return state;
   };
-  parse.fastpaths = (input, options) => {
+  parse2.fastpaths = (input, options) => {
     const opts = { ...options };
     const max = typeof opts.maxLength === "number" ? Math.min(MAX_LENGTH, opts.maxLength) : MAX_LENGTH;
     const len = input.length;
@@ -14901,13 +14782,13 @@ var require_parse = __commonJS((exports, module) => {
     }
     return source;
   };
-  module.exports = parse;
+  module.exports = parse2;
 });
 
 // node_modules/picomatch/lib/picomatch.js
 var require_picomatch = __commonJS((exports, module) => {
   var scan = require_scan();
-  var parse = require_parse();
+  var parse2 = require_parse();
   var utils = require_utils2();
   var constants = require_constants();
   var isObject = (val) => val && typeof val === "object" && !Array.isArray(val);
@@ -14997,7 +14878,7 @@ var require_picomatch = __commonJS((exports, module) => {
   picomatch.parse = (pattern, options) => {
     if (Array.isArray(pattern))
       return pattern.map((p) => picomatch.parse(p, options));
-    return parse(pattern, { ...options, fastpaths: false });
+    return parse2(pattern, { ...options, fastpaths: false });
   };
   picomatch.scan = (input, options) => scan(input, options);
   picomatch.compileRe = (state, options, returnOutput = false, returnState = false) => {
@@ -15023,10 +14904,10 @@ var require_picomatch = __commonJS((exports, module) => {
     }
     let parsed = { negated: false, fastpaths: true };
     if (options.fastpaths !== false && (input[0] === "." || input[0] === "*")) {
-      parsed.output = parse.fastpaths(input, options);
+      parsed.output = parse2.fastpaths(input, options);
     }
     if (!parsed.output) {
-      parsed = parse(input, options);
+      parsed = parse2(input, options);
     }
     return picomatch.compileRe(parsed, options, returnOutput, returnState);
   };
@@ -15070,13 +14951,13 @@ var require_ms = __commonJS((exports, module) => {
     options = options || {};
     var type = typeof val;
     if (type === "string" && val.length > 0) {
-      return parse(val);
+      return parse2(val);
     } else if (type === "number" && isFinite(val)) {
       return options.long ? fmtLong(val) : fmtShort(val);
     }
     throw new Error("val is not a non-empty string or a valid number. val=" + JSON.stringify(val));
   };
-  function parse(str) {
+  function parse2(str) {
     str = String(str);
     if (str.length > 100) {
       return;
@@ -15771,7 +15652,7 @@ var require_extend = __commonJS((exports, module) => {
 });
 
 // src/cli.ts
-import { readFileSync as readFileSync22 } from "node:fs";
+import { readFileSync as readFileSync24 } from "node:fs";
 import process7 from "node:process";
 
 // src/audit/config/load.ts
@@ -15781,6 +15662,883 @@ import { dirname, join } from "node:path";
 import process2 from "node:process";
 import { fileURLToPath } from "node:url";
 
+// node_modules/smol-toml/dist/date.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
+
+class TomlDate extends Date {
+  #hasDate = false;
+  #hasTime = false;
+  #offset = null;
+  constructor(date) {
+    let hasDate = true;
+    let hasTime = true;
+    let offset = "Z";
+    if (typeof date === "string") {
+      let match = date.match(DATE_TIME_RE);
+      if (match) {
+        if (!match[1]) {
+          hasDate = false;
+          date = `0000-01-01T${date}`;
+        }
+        hasTime = !!match[2];
+        hasTime && date[10] === " " && (date = date.replace(" ", "T"));
+        if (match[2] && +match[2] > 23) {
+          date = "";
+        } else {
+          offset = match[3] || null;
+          date = date.toUpperCase();
+          if (!offset && hasTime)
+            date += "Z";
+        }
+      } else {
+        date = "";
+      }
+    }
+    super(date);
+    if (!isNaN(this.getTime())) {
+      this.#hasDate = hasDate;
+      this.#hasTime = hasTime;
+      this.#offset = offset;
+    }
+  }
+  isDateTime() {
+    return this.#hasDate && this.#hasTime;
+  }
+  isLocal() {
+    return !this.#hasDate || !this.#hasTime || !this.#offset;
+  }
+  isDate() {
+    return this.#hasDate && !this.#hasTime;
+  }
+  isTime() {
+    return this.#hasTime && !this.#hasDate;
+  }
+  isValid() {
+    return this.#hasDate || this.#hasTime;
+  }
+  toISOString() {
+    let iso = super.toISOString();
+    if (this.isDate())
+      return iso.slice(0, 10);
+    if (this.isTime())
+      return iso.slice(11, 23);
+    if (this.#offset === null)
+      return iso.slice(0, -1);
+    if (this.#offset === "Z")
+      return iso;
+    let offset = +this.#offset.slice(1, 3) * 60 + +this.#offset.slice(4, 6);
+    offset = this.#offset[0] === "-" ? offset : -offset;
+    let offsetDate = new Date(this.getTime() - offset * 60000);
+    return offsetDate.toISOString().slice(0, -1) + this.#offset;
+  }
+  static wrapAsOffsetDateTime(jsDate, offset = "Z") {
+    let date = new TomlDate(jsDate);
+    date.#offset = offset;
+    return date;
+  }
+  static wrapAsLocalDateTime(jsDate) {
+    let date = new TomlDate(jsDate);
+    date.#offset = null;
+    return date;
+  }
+  static wrapAsLocalDate(jsDate) {
+    let date = new TomlDate(jsDate);
+    date.#hasTime = false;
+    date.#offset = null;
+    return date;
+  }
+  static wrapAsLocalTime(jsDate) {
+    let date = new TomlDate(jsDate);
+    date.#hasDate = false;
+    date.#offset = null;
+    return date;
+  }
+}
+
+// node_modules/smol-toml/dist/error.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+function getLineColFromPtr(string, ptr) {
+  let lines = string.slice(0, ptr).split(/\r\n|\n|\r/g);
+  return [lines.length, lines.pop().length + 1];
+}
+function makeCodeBlock(string, line, column) {
+  let lines = string.split(/\r\n|\n|\r/g);
+  let codeblock = "";
+  let numberLen = (Math.log10(line + 1) | 0) + 1;
+  for (let i = line - 1;i <= line + 1; i++) {
+    let l = lines[i - 1];
+    if (!l)
+      continue;
+    codeblock += i.toString().padEnd(numberLen, " ");
+    codeblock += ":  ";
+    codeblock += l;
+    codeblock += `
+`;
+    if (i === line) {
+      codeblock += " ".repeat(numberLen + column + 2);
+      codeblock += `^
+`;
+    }
+  }
+  return codeblock;
+}
+
+class TomlError extends Error {
+  line;
+  column;
+  codeblock;
+  constructor(message, options) {
+    const [line, column] = getLineColFromPtr(options.toml, options.ptr);
+    const codeblock = makeCodeBlock(options.toml, line, column);
+    super(`Invalid TOML document: ${message}
+
+${codeblock}`, options);
+    this.line = line;
+    this.column = column;
+    this.codeblock = codeblock;
+  }
+}
+
+// node_modules/smol-toml/dist/util.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+function indexOfNewline(str, start = 0) {
+  let idx = str.indexOf(`
+`, start);
+  if (str.charCodeAt(idx - 1) === 13)
+    idx--;
+  return idx;
+}
+function skipComment(ctx) {
+  for (;ctx.p < ctx.s.length; ctx.p++) {
+    let c = ctx.s.charCodeAt(ctx.p);
+    if (c === 10)
+      break;
+    if (c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10) {
+      ctx.p++;
+      break;
+    }
+    if (c < 32 && c !== 9 || c === 127) {
+      throw new TomlError("control characters are not allowed in comments", {
+        toml: ctx.s,
+        ptr: ctx.p
+      });
+    }
+  }
+}
+function skipVoid(ctx, banNewLines, banComments) {
+  let c;
+  while (true) {
+    while ((c = ctx.s.charCodeAt(ctx.p)) === 32 || c === 9 || !banNewLines && (c === 10 || c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10))
+      ctx.p++;
+    if (banComments || c !== 35)
+      break;
+    skipComment(ctx);
+  }
+}
+function skipUntil(ctx, sep, end) {
+  let ptr = ctx.p;
+  if (!end) {
+    ptr = indexOfNewline(ctx.s, ptr);
+    ctx.p = ptr < 0 ? ctx.s.length : ptr;
+    return;
+  }
+  for (;ctx.p < ctx.s.length; ctx.p++) {
+    let c = ctx.s.charCodeAt(ctx.p);
+    if (c === 35) {
+      skipComment(ctx);
+    } else if (c === end || c === sep) {
+      return;
+    }
+  }
+  throw new TomlError("cannot find end of structure", {
+    toml: ctx.s,
+    ptr
+  });
+}
+
+// node_modules/smol-toml/dist/primitive.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+var INT_REGEX = /^((0x[0-9a-fA-F](_?[0-9a-fA-F])*)|(([+-]|0[ob])?\d(_?\d)*))$/;
+var FLOAT_REGEX = /^[+-]?\d(_?\d)*(\.\d(_?\d)*)?([eE][+-]?\d(_?\d)*)?$/;
+var LEADING_ZERO = /^[+-]?0[0-9_]/;
+function parseString(ctx) {
+  let start = ctx.p;
+  let c = ctx.s.charCodeAt(ctx.p++);
+  let first = c;
+  let isLiteral = c === 39;
+  let isMultiline = c === ctx.s.charCodeAt(ctx.p) && c === ctx.s.charCodeAt(ctx.p + 1);
+  if (isMultiline) {
+    if ((c = ctx.s.charCodeAt(ctx.p += 2)) === 10)
+      ctx.p++;
+    else if (c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10)
+      ctx.p += 2;
+  }
+  let parsed = "";
+  let sliceStart = ctx.p;
+  let state = 0;
+  for (;ctx.p < ctx.s.length; ctx.p++) {
+    c = ctx.s.charCodeAt(ctx.p);
+    if (isMultiline && (c === 10 || c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10)) {
+      state = state && 3;
+    } else if (c < 32 && c !== 9 || c === 127) {
+      throw new TomlError("control characters are not allowed in strings", {
+        toml: ctx.s,
+        ptr: ctx.p
+      });
+    } else if ((!state || state === 3) && c === first && (!isMultiline || ctx.s.charCodeAt(ctx.p + 1) === first && ctx.s.charCodeAt(ctx.p + 2) === first)) {
+      if (isMultiline) {
+        if (ctx.s.charCodeAt(ctx.p + 3) === first)
+          ctx.p++;
+        if (ctx.s.charCodeAt(ctx.p + 3) === first)
+          ctx.p++;
+      }
+      if (!state)
+        parsed += ctx.s.slice(sliceStart, ctx.p);
+      ctx.p += isMultiline ? 3 : 1;
+      return parsed;
+    } else if (!state) {
+      if (!isLiteral && c === 92) {
+        parsed += ctx.s.slice(sliceStart, sliceStart = ctx.p);
+        state = 1;
+      }
+    } else if (state === 1) {
+      if (c === 120 || c === 117 || c === 85) {
+        let value = 0;
+        let len = c === 120 ? 2 : c === 117 ? 4 : 8;
+        for (let j = 0;j < len; j++, ctx.p++) {
+          let hex = ctx.s.charCodeAt(ctx.p + 1);
+          let digit = hex >= 48 && hex <= 57 ? hex - 48 : hex >= 65 && hex <= 70 ? hex - 65 + 10 : hex >= 97 && hex <= 102 ? hex - 97 + 10 : -1;
+          if (digit < 0)
+            throw new TomlError("invalid non-hex character in unicode escape", { toml: ctx.s, ptr: ctx.p + 1 });
+          value = value << 4 | digit;
+        }
+        if (value < 0 || value > 1114111 || value >= 55296 && value <= 57343) {
+          throw new TomlError("invalid unicode escape", { toml: ctx.s, ptr: ctx.p });
+        }
+        parsed += String.fromCodePoint(value);
+        sliceStart = ctx.p + 1;
+        state = 0;
+      } else if (c === 32 || c === 9) {
+        state = 2;
+      } else {
+        if (c === 98)
+          parsed += "\b";
+        else if (c === 116)
+          parsed += "\t";
+        else if (c === 110)
+          parsed += `
+`;
+        else if (c === 102)
+          parsed += "\f";
+        else if (c === 114)
+          parsed += "\r";
+        else if (c === 101)
+          parsed += "\x1B";
+        else if (c === 34)
+          parsed += '"';
+        else if (c === 92)
+          parsed += "\\";
+        else
+          throw new TomlError("unrecognized escape sequence", { toml: ctx.s, ptr: ctx.p });
+        sliceStart = ctx.p + 1;
+        state = 0;
+      }
+    } else if (c !== 32 && c !== 9) {
+      if (state === 2) {
+        throw new TomlError("invalid escape: only line-ending whitespace may be escaped", {
+          toml: ctx.s,
+          ptr: sliceStart
+        });
+      }
+      state = !isLiteral && c === 92 ? 1 : 0;
+      sliceStart = ctx.p;
+    }
+  }
+  throw new TomlError("unfinished string", { toml: ctx.s, ptr: start });
+}
+function sliceAndTrimEndOf(ctx, start, end) {
+  let value = ctx.s.slice(start, end);
+  let commentIdx = value.indexOf("#");
+  if (commentIdx > 0) {
+    skipComment({ s: value, p: commentIdx, d: 0 });
+    value = value.slice(0, commentIdx);
+  }
+  return value.trimEnd();
+}
+function parseValue(ctx, integersAsBigInt, end) {
+  let ptr = ctx.p;
+  let err = { toml: ctx.s, ptr };
+  skipUntil(ctx, 44, end);
+  let value = sliceAndTrimEndOf(ctx, ptr, ctx.p);
+  if (!value)
+    throw new TomlError("incomplete declaration: value expected", err);
+  if (value === "-inf")
+    return -Infinity;
+  if (value === "inf" || value === "+inf")
+    return Infinity;
+  if (value === "nan" || value === "+nan" || value === "-nan")
+    return NaN;
+  if (value === "-0")
+    return integersAsBigInt ? 0n : 0;
+  let isInt = INT_REGEX.test(value);
+  if (isInt || FLOAT_REGEX.test(value)) {
+    if (LEADING_ZERO.test(value)) {
+      throw new TomlError("leading zeroes are not allowed", err);
+    }
+    value = value.replace(/_/g, "");
+    let numeric = +value;
+    if (isNaN(numeric)) {
+      throw new TomlError("invalid number", err);
+    }
+    if (isInt) {
+      if ((isInt = !Number.isSafeInteger(numeric)) && !integersAsBigInt) {
+        throw new TomlError("integer value cannot be represented losslessly", err);
+      }
+      if (isInt || integersAsBigInt === true)
+        numeric = BigInt(value);
+    }
+    return numeric;
+  }
+  const date = new TomlDate(value);
+  if (!date.isValid())
+    throw new TomlError("invalid value", err);
+  return date;
+}
+
+// node_modules/smol-toml/dist/extract.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+function extractValue(ctx, end, integersAsBigInt) {
+  let ptr = ctx.p;
+  let c = ctx.s.charCodeAt(ptr);
+  if (c === 91 || c === 123) {
+    if (!ctx.d--) {
+      throw new TomlError("document contains excessively nested structures. aborting.", {
+        toml: ctx.s,
+        ptr
+      });
+    }
+    let value = c === 91 ? parseArray(ctx, integersAsBigInt) : parseInlineTable(ctx, integersAsBigInt);
+    ctx.d++;
+    return value;
+  }
+  if (c === 34 || c === 39) {
+    return parseString(ctx);
+  }
+  if (c === 116) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 114 || ctx.s.charCodeAt(++ctx.p) !== 117 || ctx.s.charCodeAt(++ctx.p) !== 101)
+      throw new TomlError("invalid value", { toml: ctx.s, ptr });
+    ctx.p++;
+    return true;
+  }
+  if (c === 102) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 97 || ctx.s.charCodeAt(++ctx.p) !== 108 || ctx.s.charCodeAt(++ctx.p) !== 115 || ctx.s.charCodeAt(++ctx.p) !== 101)
+      throw new TomlError("invalid value", { toml: ctx.s, ptr });
+    ctx.p++;
+    return false;
+  }
+  return parseValue(ctx, integersAsBigInt, end);
+}
+
+// node_modules/smol-toml/dist/struct.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+var KEY_PART_RE = /^[a-zA-Z0-9-_]+[ \t]*$/;
+function parseKey(ctx, end = "=") {
+  let start = ctx.p;
+  let dot = start - 1;
+  let parsed = [];
+  let endPtr = ctx.s.indexOf(end, start);
+  if (endPtr < 0) {
+    throw new TomlError("incomplete key-value: cannot find end of key", {
+      toml: ctx.s,
+      ptr: start
+    });
+  }
+  do {
+    let c = ctx.s.charCodeAt(ctx.p = ++dot);
+    if (c !== 32 && c !== 9) {
+      if (c === 34 || c === 39) {
+        if (c === ctx.s.charCodeAt(ctx.p + 1) && c === ctx.s.charCodeAt(ctx.p + 2)) {
+          throw new TomlError("multiline strings are not allowed in keys", {
+            toml: ctx.s,
+            ptr: ctx.p
+          });
+        }
+        let part = parseString(ctx);
+        dot = ctx.s.indexOf(".", ctx.p);
+        let strEnd = ctx.s.slice(ctx.p, dot < 0 || dot > endPtr ? endPtr : dot);
+        let newLine = indexOfNewline(strEnd);
+        if (newLine > -1) {
+          throw new TomlError("newlines are not allowed in keys", {
+            toml: ctx.s,
+            ptr: newLine
+          });
+        }
+        if (strEnd.trimStart()) {
+          throw new TomlError("found extra tokens after the string part", {
+            toml: ctx.s,
+            ptr: ctx.p
+          });
+        }
+        if (endPtr < ctx.p) {
+          endPtr = ctx.s.indexOf(end, ctx.p);
+          if (endPtr < 0) {
+            throw new TomlError("incomplete key-value: cannot find end of key", {
+              toml: ctx.s,
+              ptr: start
+            });
+          }
+        }
+        parsed.push(part);
+      } else {
+        dot = ctx.s.indexOf(".", ctx.p);
+        let part = ctx.s.slice(ctx.p, dot < 0 || dot > endPtr ? endPtr : dot);
+        if (!KEY_PART_RE.test(part)) {
+          throw new TomlError("only letter, numbers, dashes and underscores are allowed in keys", {
+            toml: ctx.s,
+            ptr: ctx.p
+          });
+        }
+        parsed.push(part.trimEnd());
+      }
+    }
+  } while (dot + 1 && dot < endPtr);
+  ctx.p = endPtr + 1;
+  skipVoid(ctx, true, true);
+  return parsed;
+}
+function parseInlineTable(ctx, integersAsBigInt) {
+  let res = {};
+  let seen = new Set;
+  let c;
+  ctx.p++;
+  while (ctx.p < ctx.s.length) {
+    skipVoid(ctx);
+    if ((c = ctx.s.charCodeAt(ctx.p)) === 125) {
+      ctx.p++;
+      return res;
+    }
+    let k;
+    let t = res;
+    let hasOwn = false;
+    let p = ctx.p;
+    let key = parseKey(ctx);
+    for (let i = 0;i < key.length; i++) {
+      if (i)
+        t = hasOwn ? t[k] : t[k] = {};
+      k = key[i];
+      if ((hasOwn = Object.hasOwn(t, k)) && (typeof t[k] !== "object" || seen.has(t[k]))) {
+        throw new TomlError("trying to redefine an already defined value", {
+          toml: ctx.s,
+          ptr: p
+        });
+      }
+      if (!hasOwn && k === "__proto__") {
+        Object.defineProperty(t, k, { enumerable: true, configurable: true, writable: true });
+      }
+    }
+    if (hasOwn) {
+      throw new TomlError("trying to redefine an already defined value", {
+        toml: ctx.s,
+        ptr: ctx.p
+      });
+    }
+    let value = extractValue(ctx, 125, integersAsBigInt);
+    seen.add(t[k] = value);
+    skipVoid(ctx);
+    if ((c = ctx.s.charCodeAt(ctx.p++)) === 125) {
+      return res;
+    }
+    if (c !== 44) {
+      throw new TomlError("expected comma or end of structure", { toml: ctx.s, ptr: ctx.p - 1 });
+    }
+  }
+  throw new TomlError("unfinished table encountered", {
+    toml: ctx.s,
+    ptr: ctx.p
+  });
+}
+function parseArray(ctx, integersAsBigInt) {
+  let res = [];
+  let c;
+  ctx.p++;
+  while (ctx.p < ctx.s.length) {
+    skipVoid(ctx);
+    if ((c = ctx.s.charCodeAt(ctx.p)) === 93) {
+      ctx.p++;
+      return res;
+    }
+    res.push(extractValue(ctx, 93, integersAsBigInt));
+    skipVoid(ctx);
+    if ((c = ctx.s.charCodeAt(ctx.p++)) === 93) {
+      return res;
+    }
+    if (c !== 44) {
+      throw new TomlError("expected comma or end of structure", { toml: ctx.s, ptr: ctx.p - 1 });
+    }
+  }
+  throw new TomlError("unfinished array encountered", {
+    toml: ctx.s,
+    ptr: ctx.p
+  });
+}
+
+// node_modules/smol-toml/dist/parse.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+function peekTable(key, table, meta, type) {
+  let t = table;
+  let m = meta;
+  let k;
+  let hasOwn = false;
+  let state;
+  for (let i = 0;i < key.length; i++) {
+    if (i) {
+      t = hasOwn ? t[k] : t[k] = {};
+      m = (state = m[k]).c;
+      if (type === 0 && (state.t === 1 || state.t === 2)) {
+        return null;
+      }
+      if (state.t === 2) {
+        let l = t.length - 1;
+        t = t[l];
+        m = m[l].c;
+      }
+    }
+    k = key[i];
+    if ((hasOwn = Object.hasOwn(t, k)) && m[k]?.t === 0 && m[k]?.d) {
+      return null;
+    }
+    if (!hasOwn) {
+      if (k === "__proto__") {
+        Object.defineProperty(t, k, { enumerable: true, configurable: true, writable: true });
+        Object.defineProperty(m, k, { enumerable: true, configurable: true, writable: true });
+      }
+      m[k] = {
+        t: i < key.length - 1 && type === 2 ? 3 : type,
+        d: false,
+        i: 0,
+        c: {}
+      };
+    }
+  }
+  state = m[k];
+  if (state.t !== type && !(type === 1 && state.t === 3)) {
+    return null;
+  }
+  if (type === 2) {
+    if (!state.d) {
+      state.d = true;
+      t[k] = [];
+    }
+    t[k].push(t = {});
+    state.c[state.i++] = state = { t: 1, d: false, i: 0, c: {} };
+  }
+  if (state.d) {
+    return null;
+  }
+  state.d = true;
+  if (type === 1) {
+    t = hasOwn ? t[k] : t[k] = {};
+  } else if (type === 0 && hasOwn) {
+    return null;
+  }
+  return [k, t, state.c];
+}
+function parse(toml, { maxDepth = 1000, integersAsBigInt } = {}) {
+  let ctx = { s: toml, p: 0, d: maxDepth };
+  let res = {};
+  let meta = {};
+  let tmp;
+  let tbl = res;
+  let m = meta;
+  skipVoid(ctx);
+  while (ctx.p < toml.length) {
+    if (toml.charCodeAt(ctx.p) === 91) {
+      let isTableArray = toml.charCodeAt(++ctx.p) === 91;
+      tmp = ctx.p += +isTableArray;
+      let k = parseKey(ctx, "]");
+      if (isTableArray) {
+        if (toml.charCodeAt(ctx.p - 1) !== 93) {
+          throw new TomlError("expected end of table declaration", {
+            toml,
+            ptr: ctx.p - 1
+          });
+        }
+        ctx.p++;
+      }
+      let p = peekTable(k, res, meta, isTableArray ? 2 : 1);
+      if (!p) {
+        throw new TomlError("trying to redefine an already defined table or value", {
+          toml,
+          ptr: tmp
+        });
+      }
+      m = p[2];
+      tbl = p[1];
+    } else {
+      tmp = ctx.p;
+      let k = parseKey(ctx);
+      let p = peekTable(k, tbl, m, 0);
+      if (!p) {
+        throw new TomlError("trying to redefine an already defined table or value", {
+          toml,
+          ptr: tmp
+        });
+      }
+      p[1][p[0]] = extractValue(ctx, undefined, integersAsBigInt);
+    }
+    skipVoid(ctx, true);
+    if (ctx.p < toml.length && (tmp = toml.charCodeAt(ctx.p)) !== 10 && tmp !== 13) {
+      throw new TomlError("each key-value declaration must be followed by an end-of-line", {
+        toml,
+        ptr: ctx.p
+      });
+    }
+    skipVoid(ctx);
+  }
+  return res;
+}
+
+// node_modules/smol-toml/dist/stringify.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+// node_modules/smol-toml/dist/index.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
 // node_modules/yaml/dist/index.js
 var composer = require_composer();
 var Document = require_Document();
@@ -15828,11 +16586,9 @@ var $visit = visit.visit;
 var $visitAsync = visit.visitAsync;
 
 // src/audit/core/shared.ts
-var REGISTRY_REL_PATH = ".skeleton/registry.md";
+var CATALOG_REL_PATH = ".skeleton/catalog.md";
 var REGISTRY_DIR_REL = ".skeleton";
 var EXTERNAL_LINK_RE = /^(https?:|mailto:|#)/;
-var SOURCE_OF_TRUTH_BANNER_RE = /\*\*Source of truth for\*\*/;
-var SOURCE_OF_TRUTH_BANNER_LINE_RE = /^\s*\*\*Source of truth for\*\*/m;
 var DOC_META_RE = /<!--\s*doc-meta:\s*owner=[^|]+\|\s*last-reviewed=\d{4}-\d{2}-\d{2}\s*-->/;
 var DOC_META_LAST_REVIEWED_RE = /last-reviewed=(\d{4}-\d{2}-\d{2})/;
 function docMetaLastReviewed(content) {
@@ -15933,6 +16689,8 @@ var SCHEMA_CANDIDATES = [
   join(dirname(fileURLToPath(import.meta.url)), "../schemas/config.schema.json"),
   join(dirname(fileURLToPath(import.meta.url)), "../../schemas/config.schema.json")
 ];
+var ROOT_CONFIG_TOML = "skeleton.toml";
+var LEGACY_CONFIG_YAML = join(".skeleton", "config.yaml");
 function resolveSchemaPath() {
   for (const candidate of SCHEMA_CANDIDATES) {
     if (existsSync(candidate))
@@ -15947,44 +16705,64 @@ var COVERAGE_BUILTIN_EXCLUDES = [
   "**/fixtures/**",
   "templates/**"
 ];
+function hasConfigMarker(dir) {
+  return existsSync(join(dir, ROOT_CONFIG_TOML)) || existsSync(join(dir, LEGACY_CONFIG_YAML));
+}
 function findRepoRoot(startDir = process2.cwd()) {
   let dir = startDir;
   while (true) {
-    if (existsSync(join(dir, ".skeleton", "config.yaml")))
+    if (hasConfigMarker(dir))
       return dir;
     const parent = dirname(dir);
     if (parent === dir) {
-      throw new Error("No .skeleton/config.yaml found — run skeleton init or create config manually");
+      throw new Error(`No ${ROOT_CONFIG_TOML} or ${LEGACY_CONFIG_YAML} found — run skeleton init or create config manually`);
     }
     dir = parent;
   }
 }
-function validateConfig(raw) {
+function validateConfig(raw, sourceLabel) {
   const schema = JSON.parse(readFileSync(resolveSchemaPath(), "utf8"));
   const ajv = new import_ajv.default({ allErrors: true, strict: false });
   const validate = ajv.compile(schema);
   if (!validate(raw)) {
     const detail = validate.errors?.map((e) => `${e.instancePath || "/"} ${e.message}`).join("; ");
-    throw new Error(`Invalid .skeleton/config.yaml: ${detail ?? "schema validation failed"}`);
+    throw new Error(`Invalid ${sourceLabel}: ${detail ?? "schema validation failed"}`);
   }
   const config = raw;
   validateDraftPathPrefixes(config.draftPathPrefixes);
   return config;
 }
-function loadConfig(root) {
-  const configPath = join(root, ".skeleton", "config.yaml");
-  if (!existsSync(configPath)) {
-    throw new Error(`Missing ${join(".skeleton", "config.yaml")}`);
+function loadConfigDetailed(root) {
+  const tomlPath = join(root, ROOT_CONFIG_TOML);
+  const yamlPath = join(root, LEGACY_CONFIG_YAML);
+  const hasToml = existsSync(tomlPath);
+  const hasYaml = existsSync(yamlPath);
+  if (!(hasToml || hasYaml)) {
+    throw new Error(`Missing ${ROOT_CONFIG_TOML} (or legacy ${LEGACY_CONFIG_YAML})`);
+  }
+  if (hasToml && hasYaml) {
+    console.error(`warning: both ${ROOT_CONFIG_TOML} and ${LEGACY_CONFIG_YAML} exist — using ${ROOT_CONFIG_TOML}; legacy YAML is ignored`);
   }
-  const raw = $parse(readFileSync(configPath, "utf8"));
-  return validateConfig(raw);
+  if (hasToml) {
+    const raw2 = parse(readFileSync(tomlPath, "utf8"));
+    return {
+      config: validateConfig(raw2, ROOT_CONFIG_TOML),
+      source: "toml",
+      warnedDual: hasToml && hasYaml
+    };
+  }
+  const raw = $parse(readFileSync(yamlPath, "utf8"));
+  return {
+    config: validateConfig(raw, LEGACY_CONFIG_YAML),
+    source: "yaml"
+  };
+}
+function loadConfig(root) {
+  return loadConfigDetailed(root).config;
 }
 function mergedExcludes(config) {
   return [...new Set([...BUILTIN_EXCLUDES, ...config.scan.exclude])];
 }
-function retiredSkills(config) {
-  return config.scan.retiredSkills ?? [];
-}
 function nonPublicSkills(config) {
   return config.scan.nonPublicSkills ?? [];
 }
@@ -17523,11 +18301,12 @@ function collectScanFiles(config, root, skillIndex) {
   });
 }
 function collectBannedFiles(config, root) {
-  if (config.scan.banned.length === 0)
+  const patterns = config.deny?.paths ?? [];
+  if (patterns.length === 0)
     return [];
   const exclude = mergedExcludes(config);
   const files = new Set;
-  for (const pattern of config.scan.banned) {
+  for (const pattern of patterns) {
     for (const abs of globSync(pattern, {
       cwd: root,
       absolute: true,
@@ -17592,7 +18371,7 @@ function collectDocMetaPaths(ctx) {
   for (const abs of expandPatterns(ctx.root, ["docs/*/README.md"], mergedExcludes(ctx.config))) {
     paths.push(normalizeRelPath(relative4(ctx.root, abs)));
   }
-  const extras = ["docs/README.md", ".skeleton/registry.md"];
+  const extras = ["docs/README.md"];
   for (const file of extras) {
     const abs = join6(ctx.root, file);
     if (existsSync7(abs))
@@ -17661,31 +18440,107 @@ function relPath(absPath, root) {
   return normalizeRelPath(relative4(root, absPath));
 }
 
-// src/audit/core/registry.ts
-import { existsSync as existsSync8, readFileSync as readFileSync6 } from "node:fs";
-import { join as join7, relative as relative5, resolve as resolve4 } from "node:path";
-var REGISTRY_TABLE_ROW_RE = /^\|\s*[^|]+\|\s*\[[^\]]*\]\(([^)]+)\)\s*\|/;
-var REGISTRY_TABLE_HEADER_RE = /\|\s*Topic\s*\|\s*Canonical file\s*\|/i;
-function parseRegistry(root) {
-  const abs = join7(root, REGISTRY_REL_PATH);
-  if (!existsSync8(abs)) {
-    return { paths: [], hasTableHeader: false };
+// src/audit/core/ssot-collect.ts
+import { readFileSync as readFileSync6 } from "node:fs";
+import { relative as relative5 } from "node:path";
+
+// src/audit/core/ssot.ts
+var SSOT_COMMENT_RE = /<!--\s*source-of-truth:\s*([\s\S]*?)\s*-->/gi;
+var SSOT_VISIBLE_LINE_RE = /^\s*source-of-truth:\s*(.+?)\s*$/gim;
+var LEGACY_BANNER_LINE_RE = /^\s*\*\*Source of truth for\*\*\s*(.+?)\s*$/gim;
+function cleanSummary(raw) {
+  return raw.replace(/\s+/g, " ").trim().replace(/\.$/, "").trim();
+}
+function stripCode(content) {
+  return content.replace(/```[\s\S]*?```/g, `
+`).replace(/`[^`\n]+`/g, " ");
+}
+function collectMatches(re, content) {
+  const out = [];
+  re.lastIndex = 0;
+  let match = re.exec(content);
+  while (match) {
+    const summary = cleanSummary(match[1] ?? "");
+    if (summary)
+      out.push(summary);
+    match = re.exec(content);
   }
-  const content = readFileSync6(abs, "utf8");
-  const hasTableHeader = REGISTRY_TABLE_HEADER_RE.test(content);
-  const paths = [];
-  for (const line of content.split(`
-`)) {
-    const match = REGISTRY_TABLE_ROW_RE.exec(line);
-    if (!match?.[1])
+  return out;
+}
+function parseSsot(content) {
+  const prose = stripCode(content);
+  const comments = collectMatches(SSOT_COMMENT_RE, prose);
+  const visibles = collectMatches(SSOT_VISIBLE_LINE_RE, prose);
+  const legacies = collectMatches(LEGACY_BANNER_LINE_RE, prose);
+  const forms = [];
+  if (comments.length)
+    forms.push("comment");
+  if (visibles.length)
+    forms.push("visible");
+  if (legacies.length)
+    forms.push("legacy");
+  if (forms.length === 0)
+    return { status: "none" };
+  if (forms.length > 1)
+    return { status: "dual", forms };
+  if (comments.length > 1 || visibles.length > 1 || legacies.length > 1) {
+    return { status: "malformed", detail: "multiple source-of-truth markers of the same form" };
+  }
+  if (comments.length === 1) {
+    const summary2 = comments[0];
+    if (!summary2)
+      return { status: "malformed", detail: "empty source-of-truth comment" };
+    return { status: "ok", entry: { summary: summary2, form: "comment" } };
+  }
+  if (visibles.length === 1) {
+    const summary2 = visibles[0];
+    if (!summary2)
+      return { status: "malformed", detail: "empty source-of-truth line" };
+    return { status: "ok", entry: { summary: summary2, form: "visible" } };
+  }
+  const summary = legacies[0];
+  if (!summary)
+    return { status: "malformed", detail: "empty legacy Source of truth banner" };
+  return { status: "ok", entry: { summary, form: "legacy" } };
+}
+function rewriteLegacySsotToComment(content) {
+  const parsed = parseSsot(content);
+  if (parsed.status !== "ok" || parsed.entry.form !== "legacy")
+    return null;
+  const comment = `<!-- source-of-truth: ${parsed.entry.summary} -->`;
+  const next = content.replace(LEGACY_BANNER_LINE_RE, comment);
+  return next === content ? null : next;
+}
+
+// src/audit/core/ssot-collect.ts
+function collectSsotEntries(files, root) {
+  const entries = [];
+  const errors2 = [];
+  for (const abs of files) {
+    const rel = normalizeRelPath(relative5(root, abs));
+    if (!(rel.endsWith(".md") || rel.endsWith(".mdc")))
       continue;
-    const linkTarget = match[1].trim();
-    if (linkTarget.startsWith("#"))
+    const content = readFileSync6(abs, "utf8");
+    const parsed = parseSsot(content);
+    if (parsed.status === "none")
+      continue;
+    if (parsed.status === "dual") {
+      errors2.push({
+        path: rel,
+        kind: "dual",
+        detail: `multiple source-of-truth forms: ${parsed.forms.join(", ")}`,
+        forms: parsed.forms
+      });
       continue;
-    const resolved = resolve4(join7(root, REGISTRY_DIR_REL), linkTarget);
-    paths.push(normalizeRelPath(relative5(root, resolved)));
+    }
+    if (parsed.status === "malformed") {
+      errors2.push({ path: rel, kind: "malformed", detail: parsed.detail });
+      continue;
+    }
+    entries.push({ path: rel, summary: parsed.entry.summary, form: parsed.entry.form });
   }
-  return { paths: [...new Set(paths)], hasTableHeader };
+  entries.sort((a, b) => a.path.localeCompare(b.path));
+  return { entries, errors: errors2 };
 }
 
 // src/audit/core/context.ts
@@ -17701,11 +18556,12 @@ function createContext(options = {}) {
     files = includeExplicitMarkdownPaths(files, options.paths, root);
     files = filterToPaths(files, options.paths, root);
   }
-  const registry = parseRegistry(root);
+  const ssot = collectSsotEntries(files, root);
+  const ssotPaths = ssot.entries.map((e) => e.path);
   const allDocMetaPaths = collectDocMetaPaths({
     config,
     root,
-    registryPaths: registry.paths,
+    registryPaths: ssotPaths,
     skillIndex
   });
   return {
@@ -17713,9 +18569,10 @@ function createContext(options = {}) {
     config,
     files,
     docMetaPaths: options.paths && options.paths.length > 0 ? filterDocMetaPaths(allDocMetaPaths, options.paths, skillIndex) : allDocMetaPaths,
-    registryPaths: registry.paths,
-    registryHasTableHeader: registry.hasTableHeader,
-    retiredSkills: new Set(retiredSkills(config)),
+    ssotEntries: ssot.entries,
+    ssotErrors: ssot.errors,
+    registryPaths: [],
+    registryHasTableHeader: false,
     skillIndex,
     lockedSkillSlugs: new Set(skillIndex.foreignSlugs),
     policies: options.policies ?? []
@@ -17723,12 +18580,12 @@ function createContext(options = {}) {
 }
 
 // src/audit/core/fix.ts
-import { existsSync as existsSync11, realpathSync as realpathSync5, writeFileSync } from "node:fs";
-import { dirname as dirname6, resolve as resolve6, sep as sep3 } from "node:path";
+import { existsSync as existsSync10, realpathSync as realpathSync5, writeFileSync } from "node:fs";
+import { dirname as dirname6, resolve as resolve5, sep as sep3 } from "node:path";
 
 // src/audit/fix/anchors.ts
-import { existsSync as existsSync9, readFileSync as readFileSync7 } from "node:fs";
-import { dirname as dirname5, resolve as resolve5 } from "node:path";
+import { existsSync as existsSync8, readFileSync as readFileSync7 } from "node:fs";
+import { dirname as dirname5, resolve as resolve4 } from "node:path";
 
 // node_modules/github-slugger/regex.js
 var regex = /[\0-\x1F!-,\.\/:-@\[-\^`\{-\xA9\xAB-\xB4\xB6-\xB9\xBB-\xBF\xD7\xF7\u02C2-\u02C5\u02D2-\u02DF\u02E5-\u02EB\u02ED\u02EF-\u02FF\u0375\u0378\u0379\u037E\u0380-\u0385\u0387\u038B\u038D\u03A2\u03F6\u0482\u0530\u0557\u0558\u055A-\u055F\u0589-\u0590\u05BE\u05C0\u05C3\u05C6\u05C8-\u05CF\u05EB-\u05EE\u05F3-\u060F\u061B-\u061F\u066A-\u066D\u06D4\u06DD\u06DE\u06E9\u06FD\u06FE\u0700-\u070F\u074B\u074C\u07B2-\u07BF\u07F6-\u07F9\u07FB\u07FC\u07FE\u07FF\u082E-\u083F\u085C-\u085F\u086B-\u089F\u08B5\u08C8-\u08D2\u08E2\u0964\u0965\u0970\u0984\u098D\u098E\u0991\u0992\u09A9\u09B1\u09B3-\u09B5\u09BA\u09BB\u09C5\u09C6\u09C9\u09CA\u09CF-\u09D6\u09D8-\u09DB\u09DE\u09E4\u09E5\u09F2-\u09FB\u09FD\u09FF\u0A00\u0A04\u0A0B-\u0A0E\u0A11\u0A12\u0A29\u0A31\u0A34\u0A37\u0A3A\u0A3B\u0A3D\u0A43-\u0A46\u0A49\u0A4A\u0A4E-\u0A50\u0A52-\u0A58\u0A5D\u0A5F-\u0A65\u0A76-\u0A80\u0A84\u0A8E\u0A92\u0AA9\u0AB1\u0AB4\u0ABA\u0ABB\u0AC6\u0ACA\u0ACE\u0ACF\u0AD1-\u0ADF\u0AE4\u0AE5\u0AF0-\u0AF8\u0B00\u0B04\u0B0D\u0B0E\u0B11\u0B12\u0B29\u0B31\u0B34\u0B3A\u0B3B\u0B45\u0B46\u0B49\u0B4A\u0B4E-\u0B54\u0B58-\u0B5B\u0B5E\u0B64\u0B65\u0B70\u0B72-\u0B81\u0B84\u0B8B-\u0B8D\u0B91\u0B96-\u0B98\u0B9B\u0B9D\u0BA0-\u0BA2\u0BA5-\u0BA7\u0BAB-\u0BAD\u0BBA-\u0BBD\u0BC3-\u0BC5\u0BC9\u0BCE\u0BCF\u0BD1-\u0BD6\u0BD8-\u0BE5\u0BF0-\u0BFF\u0C0D\u0C11\u0C29\u0C3A-\u0C3C\u0C45\u0C49\u0C4E-\u0C54\u0C57\u0C5B-\u0C5F\u0C64\u0C65\u0C70-\u0C7F\u0C84\u0C8D\u0C91\u0CA9\u0CB4\u0CBA\u0CBB\u0CC5\u0CC9\u0CCE-\u0CD4\u0CD7-\u0CDD\u0CDF\u0CE4\u0CE5\u0CF0\u0CF3-\u0CFF\u0D0D\u0D11\u0D45\u0D49\u0D4F-\u0D53\u0D58-\u0D5E\u0D64\u0D65\u0D70-\u0D79\u0D80\u0D84\u0D97-\u0D99\u0DB2\u0DBC\u0DBE\u0DBF\u0DC7-\u0DC9\u0DCB-\u0DCE\u0DD5\u0DD7\u0DE0-\u0DE5\u0DF0\u0DF1\u0DF4-\u0E00\u0E3B-\u0E3F\u0E4F\u0E5A-\u0E80\u0E83\u0E85\u0E8B\u0EA4\u0EA6\u0EBE\u0EBF\u0EC5\u0EC7\u0ECE\u0ECF\u0EDA\u0EDB\u0EE0-\u0EFF\u0F01-\u0F17\u0F1A-\u0F1F\u0F2A-\u0F34\u0F36\u0F38\u0F3A-\u0F3D\u0F48\u0F6D-\u0F70\u0F85\u0F98\u0FBD-\u0FC5\u0FC7-\u0FFF\u104A-\u104F\u109E\u109F\u10C6\u10C8-\u10CC\u10CE\u10CF\u10FB\u1249\u124E\u124F\u1257\u1259\u125E\u125F\u1289\u128E\u128F\u12B1\u12B6\u12B7\u12BF\u12C1\u12C6\u12C7\u12D7\u1311\u1316\u1317\u135B\u135C\u1360-\u137F\u1390-\u139F\u13F6\u13F7\u13FE-\u1400\u166D\u166E\u1680\u169B-\u169F\u16EB-\u16ED\u16F9-\u16FF\u170D\u1715-\u171F\u1735-\u173F\u1754-\u175F\u176D\u1771\u1774-\u177F\u17D4-\u17D6\u17D8-\u17DB\u17DE\u17DF\u17EA-\u180A\u180E\u180F\u181A-\u181F\u1879-\u187F\u18AB-\u18AF\u18F6-\u18FF\u191F\u192C-\u192F\u193C-\u1945\u196E\u196F\u1975-\u197F\u19AC-\u19AF\u19CA-\u19CF\u19DA-\u19FF\u1A1C-\u1A1F\u1A5F\u1A7D\u1A7E\u1A8A-\u1A8F\u1A9A-\u1AA6\u1AA8-\u1AAF\u1AC1-\u1AFF\u1B4C-\u1B4F\u1B5A-\u1B6A\u1B74-\u1B7F\u1BF4-\u1BFF\u1C38-\u1C3F\u1C4A-\u1C4C\u1C7E\u1C7F\u1C89-\u1C8F\u1CBB\u1CBC\u1CC0-\u1CCF\u1CD3\u1CFB-\u1CFF\u1DFA\u1F16\u1F17\u1F1E\u1F1F\u1F46\u1F47\u1F4E\u1F4F\u1F58\u1F5A\u1F5C\u1F5E\u1F7E\u1F7F\u1FB5\u1FBD\u1FBF-\u1FC1\u1FC5\u1FCD-\u1FCF\u1FD4\u1FD5\u1FDC-\u1FDF\u1FED-\u1FF1\u1FF5\u1FFD-\u203E\u2041-\u2053\u2055-\u2070\u2072-\u207E\u2080-\u208F\u209D-\u20CF\u20F1-\u2101\u2103-\u2106\u2108\u2109\u2114\u2116-\u2118\u211E-\u2123\u2125\u2127\u2129\u212E\u213A\u213B\u2140-\u2144\u214A-\u214D\u214F-\u215F\u2189-\u24B5\u24EA-\u2BFF\u2C2F\u2C5F\u2CE5-\u2CEA\u2CF4-\u2CFF\u2D26\u2D28-\u2D2C\u2D2E\u2D2F\u2D68-\u2D6E\u2D70-\u2D7E\u2D97-\u2D9F\u2DA7\u2DAF\u2DB7\u2DBF\u2DC7\u2DCF\u2DD7\u2DDF\u2E00-\u2E2E\u2E30-\u3004\u3008-\u3020\u3030\u3036\u3037\u303D-\u3040\u3097\u3098\u309B\u309C\u30A0\u30FB\u3100-\u3104\u3130\u318F-\u319F\u31C0-\u31EF\u3200-\u33FF\u4DC0-\u4DFF\u9FFD-\u9FFF\uA48D-\uA4CF\uA4FE\uA4FF\uA60D-\uA60F\uA62C-\uA63F\uA673\uA67E\uA6F2-\uA716\uA720\uA721\uA789\uA78A\uA7C0\uA7C1\uA7CB-\uA7F4\uA828-\uA82B\uA82D-\uA83F\uA874-\uA87F\uA8C6-\uA8CF\uA8DA-\uA8DF\uA8F8-\uA8FA\uA8FC\uA92E\uA92F\uA954-\uA95F\uA97D-\uA97F\uA9C1-\uA9CE\uA9DA-\uA9DF\uA9FF\uAA37-\uAA3F\uAA4E\uAA4F\uAA5A-\uAA5F\uAA77-\uAA79\uAAC3-\uAADA\uAADE\uAADF\uAAF0\uAAF1\uAAF7-\uAB00\uAB07\uAB08\uAB0F\uAB10\uAB17-\uAB1F\uAB27\uAB2F\uAB5B\uAB6A-\uAB6F\uABEB\uABEE\uABEF\uABFA-\uABFF\uD7A4-\uD7AF\uD7C7-\uD7CA\uD7FC-\uD7FF\uE000-\uF8FF\uFA6E\uFA6F\uFADA-\uFAFF\uFB07-\uFB12\uFB18-\uFB1C\uFB29\uFB37\uFB3D\uFB3F\uFB42\uFB45\uFBB2-\uFBD2\uFD3E-\uFD4F\uFD90\uFD91\uFDC8-\uFDEF\uFDFC-\uFDFF\uFE10-\uFE1F\uFE30-\uFE32\uFE35-\uFE4C\uFE50-\uFE6F\uFE75\uFEFD-\uFF0F\uFF1A-\uFF20\uFF3B-\uFF3E\uFF40\uFF5B-\uFF65\uFFBF-\uFFC1\uFFC8\uFFC9\uFFD0\uFFD1\uFFD8\uFFD9\uFFDD-\uFFFF]|\uD800[\uDC0C\uDC27\uDC3B\uDC3E\uDC4E\uDC4F\uDC5E-\uDC7F\uDCFB-\uDD3F\uDD75-\uDDFC\uDDFE-\uDE7F\uDE9D-\uDE9F\uDED1-\uDEDF\uDEE1-\uDEFF\uDF20-\uDF2C\uDF4B-\uDF4F\uDF7B-\uDF7F\uDF9E\uDF9F\uDFC4-\uDFC7\uDFD0\uDFD6-\uDFFF]|\uD801[\uDC9E\uDC9F\uDCAA-\uDCAF\uDCD4-\uDCD7\uDCFC-\uDCFF\uDD28-\uDD2F\uDD64-\uDDFF\uDF37-\uDF3F\uDF56-\uDF5F\uDF68-\uDFFF]|\uD802[\uDC06\uDC07\uDC09\uDC36\uDC39-\uDC3B\uDC3D\uDC3E\uDC56-\uDC5F\uDC77-\uDC7F\uDC9F-\uDCDF\uDCF3\uDCF6-\uDCFF\uDD16-\uDD1F\uDD3A-\uDD7F\uDDB8-\uDDBD\uDDC0-\uDDFF\uDE04\uDE07-\uDE0B\uDE14\uDE18\uDE36\uDE37\uDE3B-\uDE3E\uDE40-\uDE5F\uDE7D-\uDE7F\uDE9D-\uDEBF\uDEC8\uDEE7-\uDEFF\uDF36-\uDF3F\uDF56-\uDF5F\uDF73-\uDF7F\uDF92-\uDFFF]|\uD803[\uDC49-\uDC7F\uDCB3-\uDCBF\uDCF3-\uDCFF\uDD28-\uDD2F\uDD3A-\uDE7F\uDEAA\uDEAD-\uDEAF\uDEB2-\uDEFF\uDF1D-\uDF26\uDF28-\uDF2F\uDF51-\uDFAF\uDFC5-\uDFDF\uDFF7-\uDFFF]|\uD804[\uDC47-\uDC65\uDC70-\uDC7E\uDCBB-\uDCCF\uDCE9-\uDCEF\uDCFA-\uDCFF\uDD35\uDD40-\uDD43\uDD48-\uDD4F\uDD74\uDD75\uDD77-\uDD7F\uDDC5-\uDDC8\uDDCD\uDDDB\uDDDD-\uDDFF\uDE12\uDE38-\uDE3D\uDE3F-\uDE7F\uDE87\uDE89\uDE8E\uDE9E\uDEA9-\uDEAF\uDEEB-\uDEEF\uDEFA-\uDEFF\uDF04\uDF0D\uDF0E\uDF11\uDF12\uDF29\uDF31\uDF34\uDF3A\uDF45\uDF46\uDF49\uDF4A\uDF4E\uDF4F\uDF51-\uDF56\uDF58-\uDF5C\uDF64\uDF65\uDF6D-\uDF6F\uDF75-\uDFFF]|\uD805[\uDC4B-\uDC4F\uDC5A-\uDC5D\uDC62-\uDC7F\uDCC6\uDCC8-\uDCCF\uDCDA-\uDD7F\uDDB6\uDDB7\uDDC1-\uDDD7\uDDDE-\uDDFF\uDE41-\uDE43\uDE45-\uDE4F\uDE5A-\uDE7F\uDEB9-\uDEBF\uDECA-\uDEFF\uDF1B\uDF1C\uDF2C-\uDF2F\uDF3A-\uDFFF]|\uD806[\uDC3B-\uDC9F\uDCEA-\uDCFE\uDD07\uDD08\uDD0A\uDD0B\uDD14\uDD17\uDD36\uDD39\uDD3A\uDD44-\uDD4F\uDD5A-\uDD9F\uDDA8\uDDA9\uDDD8\uDDD9\uDDE2\uDDE5-\uDDFF\uDE3F-\uDE46\uDE48-\uDE4F\uDE9A-\uDE9C\uDE9E-\uDEBF\uDEF9-\uDFFF]|\uD807[\uDC09\uDC37\uDC41-\uDC4F\uDC5A-\uDC71\uDC90\uDC91\uDCA8\uDCB7-\uDCFF\uDD07\uDD0A\uDD37-\uDD39\uDD3B\uDD3E\uDD48-\uDD4F\uDD5A-\uDD5F\uDD66\uDD69\uDD8F\uDD92\uDD99-\uDD9F\uDDAA-\uDEDF\uDEF7-\uDFAF\uDFB1-\uDFFF]|\uD808[\uDF9A-\uDFFF]|\uD809[\uDC6F-\uDC7F\uDD44-\uDFFF]|[\uD80A\uD80B\uD80E-\uD810\uD812-\uD819\uD824-\uD82B\uD82D\uD82E\uD830-\uD833\uD837\uD839\uD83D\uD83F\uD87B-\uD87D\uD87F\uD885-\uDB3F\uDB41-\uDBFF][\uDC00-\uDFFF]|\uD80D[\uDC2F-\uDFFF]|\uD811[\uDE47-\uDFFF]|\uD81A[\uDE39-\uDE3F\uDE5F\uDE6A-\uDECF\uDEEE\uDEEF\uDEF5-\uDEFF\uDF37-\uDF3F\uDF44-\uDF4F\uDF5A-\uDF62\uDF78-\uDF7C\uDF90-\uDFFF]|\uD81B[\uDC00-\uDE3F\uDE80-\uDEFF\uDF4B-\uDF4E\uDF88-\uDF8E\uDFA0-\uDFDF\uDFE2\uDFE5-\uDFEF\uDFF2-\uDFFF]|\uD821[\uDFF8-\uDFFF]|\uD823[\uDCD6-\uDCFF\uDD09-\uDFFF]|\uD82C[\uDD1F-\uDD4F\uDD53-\uDD63\uDD68-\uDD6F\uDEFC-\uDFFF]|\uD82F[\uDC6B-\uDC6F\uDC7D-\uDC7F\uDC89-\uDC8F\uDC9A-\uDC9C\uDC9F-\uDFFF]|\uD834[\uDC00-\uDD64\uDD6A-\uDD6C\uDD73-\uDD7A\uDD83\uDD84\uDD8C-\uDDA9\uDDAE-\uDE41\uDE45-\uDFFF]|\uD835[\uDC55\uDC9D\uDCA0\uDCA1\uDCA3\uDCA4\uDCA7\uDCA8\uDCAD\uDCBA\uDCBC\uDCC4\uDD06\uDD0B\uDD0C\uDD15\uDD1D\uDD3A\uDD3F\uDD45\uDD47-\uDD49\uDD51\uDEA6\uDEA7\uDEC1\uDEDB\uDEFB\uDF15\uDF35\uDF4F\uDF6F\uDF89\uDFA9\uDFC3\uDFCC\uDFCD]|\uD836[\uDC00-\uDDFF\uDE37-\uDE3A\uDE6D-\uDE74\uDE76-\uDE83\uDE85-\uDE9A\uDEA0\uDEB0-\uDFFF]|\uD838[\uDC07\uDC19\uDC1A\uDC22\uDC25\uDC2B-\uDCFF\uDD2D-\uDD2F\uDD3E\uDD3F\uDD4A-\uDD4D\uDD4F-\uDEBF\uDEFA-\uDFFF]|\uD83A[\uDCC5-\uDCCF\uDCD7-\uDCFF\uDD4C-\uDD4F\uDD5A-\uDFFF]|\uD83B[\uDC00-\uDDFF\uDE04\uDE20\uDE23\uDE25\uDE26\uDE28\uDE33\uDE38\uDE3A\uDE3C-\uDE41\uDE43-\uDE46\uDE48\uDE4A\uDE4C\uDE50\uDE53\uDE55\uDE56\uDE58\uDE5A\uDE5C\uDE5E\uDE60\uDE63\uDE65\uDE66\uDE6B\uDE73\uDE78\uDE7D\uDE7F\uDE8A\uDE9C-\uDEA0\uDEA4\uDEAA\uDEBC-\uDFFF]|\uD83C[\uDC00-\uDD2F\uDD4A-\uDD4F\uDD6A-\uDD6F\uDD8A-\uDFFF]|\uD83E[\uDC00-\uDFEF\uDFFA-\uDFFF]|\uD869[\uDEDE-\uDEFF]|\uD86D[\uDF35-\uDF3F]|\uD86E[\uDC1E\uDC1F]|\uD873[\uDEA2-\uDEAF]|\uD87A[\uDFE1-\uDFFF]|\uD87E[\uDE1E-\uDFFF]|\uD884[\uDF4B-\uDFFF]|\uDB40[\uDC00-\uDCFF\uDDF0-\uDFFF]/g;
@@ -20731,10 +21588,10 @@ function resolveAll(constructs2, events, context) {
   const called = [];
   let index = -1;
   while (++index < constructs2.length) {
-    const resolve5 = constructs2[index].resolveAll;
-    if (resolve5 && !called.includes(resolve5)) {
-      events = resolve5(events, context);
-      called.push(resolve5);
+    const resolve4 = constructs2[index].resolveAll;
+    if (resolve4 && !called.includes(resolve4)) {
+      events = resolve4(events, context);
+      called.push(resolve4);
     }
   }
   return events;
@@ -21979,9 +22836,9 @@ function factoryTitle(effects, ok2, nok, type, markerType, stringType) {
       return atBreak(code);
     }
     effects.consume(code);
-    return code === codes.backslash ? escape : inside;
+    return code === codes.backslash ? escape2 : inside;
   }
-  function escape(code) {
+  function escape2(code) {
     if (code === marker || code === codes.backslash) {
       effects.consume(code);
       return inside;
@@ -24042,7 +24899,7 @@ function serializeChunks(chunks, expandTabs) {
 }
 
 // node_modules/micromark/dev/lib/parse.js
-function parse(options) {
+function parse2(options) {
   const settings = options || {};
   const constructs2 = combineExtensions([exports_constructs, ...settings.extensions || []]);
   const parser2 = {
@@ -24201,7 +25058,7 @@ function fromMarkdown(value, encoding, options) {
     options = encoding;
     encoding = undefined;
   }
-  return compiler(options)(postprocess(parse(options).document().write(preprocess()(value, encoding, true))));
+  return compiler(options)(postprocess(parse2(options).document().write(preprocess()(value, encoding, true))));
 }
 function compiler(options) {
   const config = {
@@ -25908,7 +26765,7 @@ var handle = {
 };
 
 // node_modules/mdast-util-to-markdown/lib/join.js
-var join8 = [joinDefaults];
+var join7 = [joinDefaults];
 function joinDefaults(left, right, parent, state) {
   if (right.type === "code" && formatCodeAsIndented(right, state) && (left.type === "list" || left.type === right.type && formatCodeAsIndented(left, state))) {
     return false;
@@ -26291,7 +27148,7 @@ function toMarkdown(tree, options) {
     handle: undefined,
     indentLines,
     indexStack: [],
-    join: [...join8],
+    join: [...join7],
     options: {},
     safe: safeBound,
     stack: [],
@@ -26784,7 +27641,7 @@ class Processor extends CallableInstance {
     assertParser("process", this.parser || this.Parser);
     assertCompiler("process", this.compiler || this.Compiler);
     return done ? executor(undefined, done) : new Promise(executor);
-    function executor(resolve5, reject) {
+    function executor(resolve4, reject) {
       const realFile = vfile(file);
       const parseTree = self.parse(realFile);
       self.run(parseTree, realFile, function(error, tree, file2) {
@@ -26803,8 +27660,8 @@ class Processor extends CallableInstance {
       function realDone(error, file2) {
         if (error || !file2) {
           reject(error);
-        } else if (resolve5) {
-          resolve5(file2);
+        } else if (resolve4) {
+          resolve4(file2);
         } else {
           ok(done, "`done` is defined if `resolve` is not");
           done(undefined, file2);
@@ -26837,7 +27694,7 @@ class Processor extends CallableInstance {
       file = undefined;
     }
     return done ? executor(undefined, done) : new Promise(executor);
-    function executor(resolve5, reject) {
+    function executor(resolve4, reject) {
       ok(typeof file !== "function", "`file` can’t be a `done` anymore, we checked");
       const realFile = vfile(file);
       transformers.run(tree, realFile, realDone);
@@ -26845,8 +27702,8 @@ class Processor extends CallableInstance {
         const resultingTree = outputTree || tree;
         if (error) {
           reject(error);
-        } else if (resolve5) {
-          resolve5(resultingTree);
+        } else if (resolve4) {
+          resolve4(resultingTree);
         } else {
           ok(done, "`done` is defined if `resolve` is not");
           done(undefined, resultingTree, file2);
@@ -29289,7 +30146,7 @@ function resolveLink(sourceFile, target) {
   const withoutAnchor = target.split("#")[0]?.split("?")[0] ?? "";
   if (!withoutAnchor)
     return sourceFile;
-  return resolve5(dirname5(sourceFile), withoutAnchor);
+  return resolve4(dirname5(sourceFile), withoutAnchor);
 }
 function replaceAnchorInTarget(target, oldAnchor, newAnchor) {
   const hashIndex = target.indexOf("#");
@@ -29313,7 +30170,7 @@ function anchorTargetReplacement(filePath, target) {
   if (!anchor)
     return null;
   const resolved = resolveLink(filePath, target);
-  if (!existsSync9(resolved))
+  if (!existsSync8(resolved))
     return null;
   const targetContent = readFileSync7(resolved, "utf8");
   const slugs = extractHeadingSlugs(targetContent, resolved);
@@ -29397,8 +30254,8 @@ function collectAnchorFixes(ctx) {
 }
 
 // src/audit/fix/doc-meta.ts
-import { existsSync as existsSync10, readFileSync as readFileSync8 } from "node:fs";
-import { join as join9 } from "node:path";
+import { existsSync as existsSync9, readFileSync as readFileSync8 } from "node:fs";
+import { join as join8 } from "node:path";
 
 // src/audit/core/git-meta.ts
 import { spawnSync } from "node:child_process";
@@ -29427,8 +30284,8 @@ function bumpDocMetaLastReviewed(content3, gitDate) {
   return replaceDocMetaLastReviewed(content3, gitDate);
 }
 function docMetaFixForPath(ctx, relPath2) {
-  const abs = join9(ctx.root, relPath2);
-  if (!existsSync10(abs))
+  const abs = join8(ctx.root, relPath2);
+  if (!existsSync9(abs))
     return null;
   const content3 = readFileSync8(abs, "utf8");
   if (!DOC_META_RE.test(content3))
@@ -29461,34 +30318,74 @@ function collectDocMetaFixes(ctx) {
   return edits;
 }
 
+// src/audit/fix/ssot.ts
+import { readFileSync as readFileSync9 } from "node:fs";
+import { join as join9 } from "node:path";
+function collectSsotFixes(ctx) {
+  const edits = [];
+  for (const entry of ctx.ssotEntries) {
+    if (entry.form !== "legacy")
+      continue;
+    const abs = join9(ctx.root, entry.path);
+    const content3 = readFileSync9(abs, "utf8");
+    const next = rewriteLegacySsotToComment(content3);
+    if (!next)
+      continue;
+    edits.push({
+      file: entry.path,
+      description: "rewrite legacy **Source of truth for** banner to <!-- source-of-truth: … -->",
+      content: next
+    });
+  }
+  return edits;
+}
+
 // src/audit/core/fix.ts
 function collectFixes(ctx, kinds) {
   const meta = kinds.has("doc-meta") ? collectDocMetaFixes(ctx) : [];
   const anchors = kinds.has("anchors") ? collectAnchorFixes(ctx) : [];
-  return coalesceFixEdits(meta, anchors);
+  const ssot = kinds.has("ssot") ? collectSsotFixes(ctx) : [];
+  return coalesceFixEdits(meta, anchors, ssot);
 }
-function coalesceFixEdits(metaEdits, anchorEdits) {
+function coalesceFixEdits(metaEdits, anchorEdits, ssotEdits = []) {
   const metaByFile = new Map(metaEdits.map((e) => [e.file, e]));
   const anchorByFile = new Map(anchorEdits.map((e) => [e.file, e]));
-  const files = new Set([...metaByFile.keys(), ...anchorByFile.keys()]);
+  const ssotByFile = new Map(ssotEdits.map((e) => [e.file, e]));
+  const files = new Set([...metaByFile.keys(), ...anchorByFile.keys(), ...ssotByFile.keys()]);
   const out = [];
   for (const file of [...files].sort()) {
-    const meta = metaByFile.get(file);
-    const anchors = anchorByFile.get(file);
-    if (meta && anchors) {
-      out.push({
-        file,
-        description: `${meta.description}; ${anchors.description}`,
-        content: overlayLastReviewed(anchors.content, meta.content)
-      });
-    } else if (meta) {
-      out.push(meta);
-    } else if (anchors) {
-      out.push(anchors);
-    }
+    out.push(coalesceOneFile({
+      file,
+      meta: metaByFile.get(file),
+      anchors: anchorByFile.get(file),
+      ssot: ssotByFile.get(file)
+    }));
   }
   return out;
 }
+function coalesceOneFile(input) {
+  const { file, meta, anchors, ssot } = input;
+  const descriptions = [];
+  let content3 = anchors?.content ?? meta?.content ?? ssot?.content ?? "";
+  if (meta)
+    descriptions.push(meta.description);
+  if (anchors) {
+    descriptions.push(anchors.description);
+    content3 = anchors.content;
+    if (meta)
+      content3 = overlayLastReviewed(content3, meta.content);
+  } else if (meta) {
+    content3 = meta.content;
+  }
+  if (ssot) {
+    descriptions.push(ssot.description);
+    content3 = rewriteSsotOnto(content3, ssot.content);
+  }
+  return { file, description: descriptions.join("; "), content: content3 };
+}
+function rewriteSsotOnto(base, ssotContent) {
+  return ssotContent || base;
+}
 function overlayLastReviewed(targetContent, metaContent) {
   const date = docMetaLastReviewed(metaContent);
   if (!date)
@@ -29502,9 +30399,9 @@ function shouldStopPathWalk(rootResolved, parent, cursor) {
   return parent === cursor || !underRoot(rootResolved, parent) && parent !== rootResolved;
 }
 function resolveExistingRealPath(rootResolved, abs, relFile) {
-  const rootReal = existsSync11(rootResolved) ? realpathSync5(rootResolved) : rootResolved;
+  const rootReal = existsSync10(rootResolved) ? realpathSync5(rootResolved) : rootResolved;
   let cursor = abs;
-  while (!existsSync11(cursor)) {
+  while (!existsSync10(cursor)) {
     const parent = dirname6(cursor);
     if (shouldStopPathWalk(rootResolved, parent, cursor))
       return abs;
@@ -29517,8 +30414,8 @@ function resolveExistingRealPath(rootResolved, abs, relFile) {
   return abs;
 }
 function resolveWritePath(root2, relFile) {
-  const rootResolved = resolve6(root2);
-  const abs = resolve6(rootResolved, relFile);
+  const rootResolved = resolve5(root2);
+  const abs = resolve5(rootResolved, relFile);
   if (!underRoot(rootResolved, abs)) {
     throw new Error(`Refusing autofix outside repo root: ${relFile}`);
   }
@@ -29545,19 +30442,22 @@ function applyFixes(ctx, options) {
 }
 function parseFixKinds(raw) {
   if (raw === true)
-    return ["doc-meta", "anchors"];
+    return ["doc-meta", "anchors", "ssot"];
   switch (raw) {
     case "doc-meta":
       return ["doc-meta"];
     case "anchors":
       return ["anchors"];
+    case "ssot":
+      return ["ssot"];
     default:
-      throw new Error(`Unknown --fix kind: ${raw}. Use doc-meta or anchors.`);
+      throw new Error(`Unknown --fix kind: ${raw}. Use doc-meta, anchors, or ssot.`);
   }
 }
 var FIX_KIND_RULE = {
   "doc-meta": "doc-meta",
-  anchors: "links"
+  anchors: "links",
+  ssot: "ssot"
 };
 function fixKindsForOnly(kinds, only) {
   if (!only)
@@ -29636,7 +30536,7 @@ function printTextReport(ctx) {
 }
 
 // src/references/check.ts
-import { existsSync as existsSync13, readdirSync as readdirSync4, readFileSync as readFileSync10 } from "node:fs";
+import { existsSync as existsSync12, readdirSync as readdirSync4, readFileSync as readFileSync11 } from "node:fs";
 import { join as join11, relative as relative7 } from "node:path";
 
 // src/references/constants.ts
@@ -29660,11 +30560,11 @@ function isGeneratedReference(content3) {
 }
 
 // src/references/discover.ts
-import { existsSync as existsSync12, readdirSync as readdirSync3, readFileSync as readFileSync9 } from "node:fs";
+import { existsSync as existsSync11, readdirSync as readdirSync3, readFileSync as readFileSync10 } from "node:fs";
 import { join as join10, relative as relative6 } from "node:path";
 function walkMarkdownFiles(dir, root2) {
   const files = [];
-  if (!existsSync12(dir))
+  if (!existsSync11(dir))
     return files;
   for (const entry of readdirSync3(dir, { withFileTypes: true })) {
     if (entry.name.startsWith("."))
@@ -29681,7 +30581,7 @@ function walkMarkdownFiles(dir, root2) {
   return files;
 }
 function canonicalExists(root2, refPath) {
-  return existsSync12(join10(root2, CANONICAL_REFS_DIR, refPath));
+  return existsSync11(join10(root2, CANONICAL_REFS_DIR, refPath));
 }
 function findSharedRefLinks(content3, sourceFile) {
   const links = [];
@@ -29725,7 +30625,7 @@ function findLocalCanonicalLinks(root2, content3, sourceFile) {
   return links;
 }
 function collectLinksForFile(root2, relFile) {
-  const content3 = readFileSync9(join10(root2, relFile), "utf8");
+  const content3 = readFileSync10(join10(root2, relFile), "utf8");
   if (isGeneratedReference(content3))
     return [];
   return [
@@ -29740,7 +30640,7 @@ function expandTransitiveRefs(input) {
     const refPath = queue.pop();
     if (!(refPath && canonicalExists(root2, refPath)))
       continue;
-    const canonicalContent = readFileSync9(join10(root2, CANONICAL_REFS_DIR, refPath), "utf8");
+    const canonicalContent = readFileSync10(join10(root2, CANONICAL_REFS_DIR, refPath), "utf8");
     const syntheticSource = generatedRefPath(slug2, refPath);
     for (const link2 of findLocalCanonicalLinks(root2, canonicalContent, syntheticSource)) {
       if (refPaths.has(link2.refPath))
@@ -29753,7 +30653,7 @@ function expandTransitiveRefs(input) {
 }
 function planForSkill(root2, slug2) {
   const skillDir = join10(root2, slug2);
-  if (!existsSync12(join10(skillDir, "SKILL.md")))
+  if (!existsSync11(join10(skillDir, "SKILL.md")))
     return null;
   const refPaths = new Set;
   const links = [];
@@ -29804,7 +30704,7 @@ function rewriteSharedRefLinks(content3, sourceFile, skill) {
 
 // src/references/check.ts
 function walkMarkdown(dir, onFile) {
-  if (!existsSync13(dir))
+  if (!existsSync12(dir))
     return;
   for (const entry of readdirSync4(dir, { withFileTypes: true })) {
     if (entry.name.startsWith("."))
@@ -29822,7 +30722,7 @@ function walkMarkdown(dir, onFile) {
 function listAllGeneratedFiles(root2) {
   const files = [];
   walkMarkdown(root2, (fullPath) => {
-    const content3 = readFileSync10(fullPath, "utf8");
+    const content3 = readFileSync11(fullPath, "utf8");
     if (isGeneratedReference(content3)) {
       files.push(normalizeRelPath(relative7(root2, fullPath)));
     }
@@ -29831,20 +30731,20 @@ function listAllGeneratedFiles(root2) {
 }
 function checkNeededCopy(root2, targetRel) {
   const targetPath = join11(root2, targetRel);
-  if (!existsSync13(targetPath)) {
+  if (!existsSync12(targetPath)) {
     return issue("generated-references", targetRel, "missing generated copy — run skeleton references sync");
   }
-  const generated = readFileSync10(targetPath, "utf8");
+  const generated = readFileSync11(targetPath, "utf8");
   if (!isGeneratedReference(generated)) {
     return issue("generated-references", targetRel, "expected generated-reference provenance header");
   }
   const body = stripGeneratedHeader(generated);
   const sourceRel = normalizeRelPath(generated.match(/source: ([^\n]+)/)?.[1] ?? join11(CANONICAL_REFS_DIR, targetRel.split("/references/")[1] ?? ""));
   const canonicalPath = join11(root2, sourceRel);
-  if (!existsSync13(canonicalPath)) {
+  if (!existsSync12(canonicalPath)) {
     return issue("generated-references", targetRel, `canonical source missing: ${sourceRel}`);
   }
-  const canonical = readFileSync10(canonicalPath, "utf8");
+  const canonical = readFileSync11(canonicalPath, "utf8");
   if (body !== canonical) {
     return issue("generated-references", targetRel, "stale generated copy — run skeleton references sync");
   }
@@ -29865,7 +30765,7 @@ function checkStaleSharedLinks(root2, skillDir) {
   const issues = [];
   walkMarkdown(skillDir, (fullPath) => {
     const relFile = normalizeRelPath(relative7(root2, fullPath));
-    const content3 = readFileSync10(fullPath, "utf8");
+    const content3 = readFileSync11(fullPath, "utf8");
     if (!content3.match(SHARED_REF_LINK_RE))
       return;
     issues.push(issue("generated-references", relFile, "still links to shared root references/ — run skeleton references sync"));
@@ -29875,7 +30775,7 @@ function checkStaleSharedLinks(root2, skillDir) {
 function runGeneratedReferencesCheck(root2, ownership) {
   const issues = [];
   const canonicalDir = join11(root2, CANONICAL_REFS_DIR);
-  if (!existsSync13(canonicalDir))
+  if (!existsSync12(canonicalDir))
     return issues;
   const skillIndex = buildSkillIndex(root2, ownership);
   const plans = discoverSkillReferencePlans(root2, ownership);
@@ -29910,14 +30810,14 @@ function runBannedRule(ctx) {
   const issues = [];
   for (const abs of collectBannedFiles(ctx.config, ctx.root)) {
     const rel = relPath(abs, ctx.root);
-    issues.push(issue("banned", rel, "file matches scan.banned — must not exist in repo"));
+    issues.push(issue("banned", rel, "file matches deny.paths — must not exist in repo"));
   }
   return issues;
 }
 var bannedRule = { id: "banned", run: runBannedRule };
 
 // src/audit/rules/doc-meta.ts
-import { existsSync as existsSync14, readFileSync as readFileSync11 } from "node:fs";
+import { existsSync as existsSync13, readFileSync as readFileSync12 } from "node:fs";
 import { join as join12 } from "node:path";
 function checkDocMetaBanner(relPath2, content3) {
   if (DOC_META_RE.test(content3))
@@ -29969,9 +30869,9 @@ function runDocMetaRule(ctx) {
   const today = new Date;
   for (const relPath2 of ctx.docMetaPaths) {
     const abs = join12(ctx.root, relPath2);
-    if (!existsSync14(abs))
+    if (!existsSync13(abs))
       continue;
-    const content3 = readFileSync11(abs, "utf8");
+    const content3 = readFileSync12(abs, "utf8");
     const banner = checkDocMetaBanner(relPath2, content3);
     if (banner) {
       issues.push(banner);
@@ -29999,23 +30899,13 @@ function runDocMetaRule(ctx) {
 var docMetaRule = { id: "doc-meta", run: runDocMetaRule };
 
 // src/audit/rules/links.ts
-import { existsSync as existsSync15, readFileSync as readFileSync12 } from "node:fs";
-import { dirname as dirname7, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync14, readFileSync as readFileSync13 } from "node:fs";
+import { dirname as dirname7, resolve as resolve6 } from "node:path";
 function resolveLink2(sourceFile, target) {
   const withoutAnchor = target.split("#")[0]?.split("?")[0] ?? "";
   if (!withoutAnchor)
     return sourceFile;
-  return resolve7(dirname7(sourceFile), withoutAnchor);
-}
-function checkRetiredSkill(input) {
-  const skillMatch = SKILL_LINK_IN_TARGET_RE.exec(input.target);
-  const slug2 = skillMatch?.[1];
-  if (!(slug2 && input.ctx.retiredSkills.has(slug2)))
-    return null;
-  return issue("links", relPath(input.sourceFile, input.ctx.root), {
-    message: `references retired skill "${slug2}/SKILL.md"`,
-    link: input.linkLabel
-  });
+  return resolve6(dirname7(sourceFile), withoutAnchor);
 }
 function checkMissingSkill(input, relSource) {
   if (!input.target.includes("/SKILL.md"))
@@ -30033,13 +30923,13 @@ function checkAgentFile(input, resolved, relSource) {
     return null;
   }
   const agentPath = resolved.endsWith(".md") ? resolved : `${resolved}.md`;
-  if (existsSync15(agentPath))
+  if (existsSync14(agentPath))
     return null;
   return issue("links", relSource, { message: "missing agent file", link: input.linkLabel });
 }
 function checkBrokenPath(ctx) {
   const { input, pathPart, resolved, relSource, relTarget } = ctx;
-  if (!(pathPart && !existsSync15(resolved)))
+  if (!(pathPart && !existsSync14(resolved)))
     return null;
   return issue("links", relSource, {
     message: `broken link → ${relTarget}`,
@@ -30048,9 +30938,9 @@ function checkBrokenPath(ctx) {
 }
 function checkBrokenAnchor(ctx) {
   const { input, anchor, resolved, relSource, relTarget } = ctx;
-  if (!(anchor && existsSync15(resolved)))
+  if (!(anchor && existsSync14(resolved)))
     return null;
-  const targetContent = readFileSync12(resolved, "utf8");
+  const targetContent = readFileSync13(resolved, "utf8");
   const slugs = extractHeadingSlugs(targetContent, resolved);
   const anchorSlug = slugifyAnchor(anchor);
   if (slugs.has(anchorSlug))
@@ -30075,9 +30965,6 @@ function validateTarget(input) {
   if (isPlaceholderLink(target))
     return [];
   const parts = resolveTargetParts(sourceFile, target, ctx.root);
-  const retired = checkRetiredSkill(input);
-  if (retired)
-    return [retired];
   const missingSkill = checkMissingSkill(input, parts.relSource);
   if (missingSkill)
     return [missingSkill];
@@ -30104,6 +30991,331 @@ function runLinksRule(ctx) {
 }
 var linksRule = { id: "links", run: runLinksRule };
 
+// src/audit/rules/near-duplicate.ts
+import { readFileSync as readFileSync14 } from "node:fs";
+import { join as join13 } from "node:path";
+
+// src/audit/core/ssot-fit.ts
+var DEFAULT_SSOT_OVERLAP_MIN = 0.35;
+var DEFAULT_BETTER_MATCH_MARGIN = 0.15;
+var STOP = new Set([
+  "a",
+  "an",
+  "the",
+  "and",
+  "or",
+  "of",
+  "for",
+  "to",
+  "in",
+  "on",
+  "with",
+  "this",
+  "that",
+  "is",
+  "are",
+  "be",
+  "as",
+  "by",
+  "from",
+  "at",
+  "it",
+  "its"
+]);
+var STEM_BLOCKLIST = new Set([
+  "business",
+  "analysis",
+  "status",
+  "process",
+  "access",
+  "address",
+  "series",
+  "species",
+  "news",
+  "means",
+  "cross",
+  "class",
+  "glass",
+  "less",
+  "success",
+  "progress",
+  "express",
+  "discuss",
+  "focus",
+  "bonus",
+  "basis",
+  "crisis",
+  "thesis",
+  "atlas",
+  "canvas",
+  "campus",
+  "virus",
+  "bus",
+  "gas",
+  "plus",
+  "alias",
+  "bias",
+  "circus",
+  "consensus",
+  "census"
+]);
+function lightStem(token) {
+  if (token.length < 4)
+    return token;
+  if (STEM_BLOCKLIST.has(token))
+    return token;
+  if (token.endsWith("ies") && token.length > 4) {
+    return `${token.slice(0, -3)}y`;
+  }
+  if (token.endsWith("sses") || token.endsWith("ches") || token.endsWith("shes") || token.endsWith("xes")) {
+    return token.slice(0, -2);
+  }
+  if (token.endsWith("s") && !token.endsWith("ss") && !token.endsWith("us") && !token.endsWith("is")) {
+    return token.slice(0, -1);
+  }
+  return token;
+}
+function contentTokens(text5) {
+  return text5.toLowerCase().replace(/[^a-z0-9\s]/g, " ").split(/\s+/).filter((t) => t.length > 1 && !STOP.has(t)).map(lightStem);
+}
+function uniqueContentTokens(text5) {
+  return [...new Set(contentTokens(text5))];
+}
+function stripCode2(content3) {
+  return content3.replace(/```[\s\S]*?```/g, `
+`).replace(/`[^`\n]+`/g, " ");
+}
+function stripSsotAndMeta(content3) {
+  return content3.replace(/<!--\s*source-of-truth:[\s\S]*?-->/gi, `
+`).replace(/^\s*source-of-truth:\s*.+$/gim, `
+`).replace(/^\s*\*\*Source of truth for\*\*\s*.+$/gim, `
+`).replace(/<!--\s*doc-meta:[\s\S]*?-->/gi, `
+`);
+}
+function extractH1(content3) {
+  const prose = stripCode2(content3);
+  const m = /^#\s+(.+)$/m.exec(prose);
+  return m?.[1]?.trim() ?? "";
+}
+function extractLeadParagraph(content3) {
+  const prose = stripSsotAndMeta(stripCode2(content3));
+  const lines = prose.split(/\n/);
+  const chunks = [];
+  let buf = [];
+  const flush = () => {
+    const t = buf.join(" ").trim();
+    if (t)
+      chunks.push(t);
+    buf = [];
+  };
+  for (const line of lines) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) {
+      flush();
+      continue;
+    }
+    if (/^[-*|]/.test(trimmed) && chunks.length === 0 && buf.length === 0) {
+      buf.push(trimmed.replace(/^[-*|]+\s*/, ""));
+      continue;
+    }
+    buf.push(trimmed);
+  }
+  flush();
+  return chunks[0] ?? "";
+}
+function buildEvidenceText(content3) {
+  const h1 = extractH1(content3);
+  const lead = extractLeadParagraph(content3);
+  const body = stripSsotAndMeta(stripCode2(content3));
+  return [h1, lead, body].filter(Boolean).join(`
+
+`);
+}
+function ssotEvidenceOverlap(summary, evidence) {
+  const st = uniqueContentTokens(summary);
+  if (st.length === 0)
+    return 0;
+  const ev = new Set(contentTokens(evidence));
+  let hit = 0;
+  for (const t of st) {
+    if (ev.has(t))
+      hit++;
+  }
+  return hit / st.length;
+}
+function longestSummaryPhrase(summary) {
+  const toks = contentTokens(summary);
+  if (toks.length >= 3)
+    return toks.slice(0, 3);
+  if (toks.length >= 2)
+    return toks.slice(0, 2);
+  return null;
+}
+function evidenceHasPhrase(evidence, phrase) {
+  if (phrase.length === 0)
+    return true;
+  const ev = contentTokens(evidence);
+  const needle = phrase.join(" ");
+  for (let i = 0;i <= ev.length - phrase.length; i++) {
+    if (ev.slice(i, i + phrase.length).join(" ") === needle)
+      return true;
+  }
+  return false;
+}
+function evaluateSsotFit(files, options = {}) {
+  const overlapMin = options.overlapMin ?? DEFAULT_SSOT_OVERLAP_MIN;
+  const margin = options.betterMatchMargin ?? DEFAULT_BETTER_MATCH_MARGIN;
+  const phraseCheck = options.phraseCheck !== false;
+  const prepared = files.map((f) => {
+    const evidence = buildEvidenceText(f.content);
+    const overlap = ssotEvidenceOverlap(f.summary, evidence);
+    const summaryToks = uniqueContentTokens(f.summary);
+    return { ...f, evidence, overlap, summaryToks };
+  });
+  const issues = [];
+  for (const row of prepared) {
+    if (row.summaryToks.length < 2) {
+      issues.push({
+        kind: "short",
+        path: row.path,
+        message: `source-of-truth summary too short to verify against body ("${row.summary}")`
+      });
+      continue;
+    }
+    if (row.overlap < overlapMin) {
+      let message = `source-of-truth summary weakly matches this paper (token overlap ${row.overlap.toFixed(2)} < ${overlapMin})`;
+      if (phraseCheck) {
+        const phrase = longestSummaryPhrase(row.summary);
+        if (phrase && !evidenceHasPhrase(row.evidence, phrase)) {
+          message += ` — key phrase "${phrase.join(" ")}" not found in H1/lead/body`;
+        }
+      }
+      issues.push({ kind: "weak", path: row.path, message });
+      let best = null;
+      for (const other of prepared) {
+        if (other.path === row.path)
+          continue;
+        const cross = ssotEvidenceOverlap(row.summary, other.evidence);
+        if (cross < overlapMin)
+          continue;
+        if (cross < row.overlap + margin)
+          continue;
+        if (!best || cross > best.overlap)
+          best = { path: other.path, overlap: cross };
+      }
+      if (best) {
+        issues.push({
+          kind: "better-match",
+          path: row.path,
+          otherPath: best.path,
+          message: `source-of-truth fits ${best.path} better (overlap ${best.overlap.toFixed(2)} vs own ${row.overlap.toFixed(2)}). ` + `Try: (1) rewrite this SSOT to match this paper, (2) move/fix the marker onto ${best.path}, ` + `or (3) if these pages are really one topic, consider combining them`
+        });
+      }
+    }
+  }
+  return issues;
+}
+
+// src/audit/rules/near-duplicate.ts
+var DEFAULT_THRESHOLD = 0.72;
+var SHINGLE_N = 3;
+function tokenize2(text5) {
+  return contentTokens(text5);
+}
+function normalizeSummary(summary) {
+  return contentTokens(summary).join(" ");
+}
+function shingles(tokens, n) {
+  const out = new Set;
+  if (tokens.length < n) {
+    if (tokens.length > 0)
+      out.add(tokens.join(" "));
+    return out;
+  }
+  for (let i = 0;i <= tokens.length - n; i++) {
+    out.add(tokens.slice(i, i + n).join(" "));
+  }
+  return out;
+}
+function jaccard2(a, b) {
+  if (a.size === 0 && b.size === 0)
+    return 1;
+  if (a.size === 0 || b.size === 0)
+    return 0;
+  let inter = 0;
+  for (const x of a) {
+    if (b.has(x))
+      inter++;
+  }
+  return inter / (a.size + b.size - inter);
+}
+function pairKey(a, b) {
+  return a < b ? `${a}::${b}` : `${b}::${a}`;
+}
+function ignoredPairSet(ctx) {
+  const pairs = ctx.config.docsLint?.ignorePairs ?? [];
+  const set = new Set;
+  for (const pair of pairs) {
+    if (!pair || pair.length < 2)
+      continue;
+    const a = normalizeRelPath(pair[0] ?? "");
+    const b = normalizeRelPath(pair[1] ?? "");
+    if (a && b)
+      set.add(pairKey(a, b));
+  }
+  return set;
+}
+function isIgnoredGlob(rel, globs) {
+  return globs.some((g) => matchesGlobScope(rel, g));
+}
+function bodyWithoutSsotNoise(content3) {
+  return content3.replace(/<!--\s*source-of-truth:[\s\S]*?-->/gi, " ").replace(/^\s*source-of-truth:\s*.+$/gim, " ").replace(/^\s*\*\*Source of truth for\*\*\s*.+$/gim, " ");
+}
+function eligibleEntries(ctx) {
+  const globs = ctx.config.docsLint?.ignoreGlobs ?? [];
+  return ctx.ssotEntries.filter((e) => !isIgnoredGlob(e.path, globs));
+}
+function runNearDuplicateRule(ctx) {
+  const issues = [];
+  const threshold = ctx.config.docsLint?.nearDuplicateThreshold ?? DEFAULT_THRESHOLD;
+  const ignored = ignoredPairSet(ctx);
+  const entries = eligibleEntries(ctx);
+  const fingerprints = entries.map((e) => {
+    const content3 = readFileSync14(join13(ctx.root, e.path), "utf8");
+    const tokens = tokenize2(bodyWithoutSsotNoise(content3));
+    return {
+      path: e.path,
+      summaryKey: normalizeSummary(e.summary),
+      set: shingles(tokens, SHINGLE_N)
+    };
+  });
+  for (let i = 0;i < fingerprints.length; i++) {
+    for (let j = i + 1;j < fingerprints.length; j++) {
+      const a = fingerprints[i];
+      const b = fingerprints[j];
+      if (!(a && b))
+        continue;
+      if (ignored.has(pairKey(a.path, b.path)))
+        continue;
+      const score = jaccard2(a.set, b.set);
+      if (score >= threshold) {
+        issues.push(issue("near-duplicate", a.path, {
+          message: `near-duplicate of ${b.path} (shingle Jaccard ${score.toFixed(2)} ≥ ${threshold})`,
+          severity: "warning"
+        }));
+      }
+      if (a.summaryKey && a.summaryKey === b.summaryKey) {
+        issues.push(issue("near-duplicate", a.path, {
+          message: `duplicate source-of-truth summary also used by ${b.path}`,
+          severity: "warning"
+        }));
+      }
+    }
+  }
+  return issues;
+}
+var nearDuplicateRule = { id: "near-duplicate", run: runNearDuplicateRule };
+
 // src/audit/rules/prose-policy.ts
 function checkDraftEntry(input) {
   const { rel, lines, entry, draftPrefixes } = input;
@@ -30164,53 +31376,6 @@ function runProsePolicyRule(ctx) {
 }
 var prosePolicyRule = { id: "prose-policy", run: runProsePolicyRule };
 
-// src/audit/rules/registry.ts
-import { existsSync as existsSync16, readFileSync as readFileSync13 } from "node:fs";
-import { join as join13 } from "node:path";
-function checkRegistryEntries(ctx) {
-  const issues = [];
-  for (const rel of ctx.registryPaths) {
-    const abs = join13(ctx.root, rel);
-    if (!existsSync16(abs)) {
-      issues.push(issue("registry", rel, "registry entry file missing"));
-      continue;
-    }
-    const content3 = readFileSync13(abs, "utf8");
-    if (!SOURCE_OF_TRUTH_BANNER_RE.test(content3)) {
-      issues.push(issue("registry", rel, "missing **Source of truth for** banner (required for registry entry)"));
-    }
-  }
-  return issues;
-}
-function checkUnregisteredBanners(ctx, registry) {
-  const issues = [];
-  for (const filePath of ctx.files) {
-    const rel = relPath(filePath, ctx.root);
-    if (rel === REGISTRY_REL_PATH)
-      continue;
-    if (!(rel.endsWith(".md") || rel.endsWith(".mdc")))
-      continue;
-    const content3 = readFileSync13(filePath, "utf8");
-    if (!SOURCE_OF_TRUTH_BANNER_LINE_RE.test(content3))
-      continue;
-    if (!registry.has(rel)) {
-      issues.push(issue("registry", rel, "has **Source of truth for** banner but is not in .skeleton/registry.md — add registry row or remove banner"));
-    }
-  }
-  return issues;
-}
-function runRegistryRule(ctx) {
-  const issues = [];
-  const registry = new Set(ctx.registryPaths);
-  if (ctx.registryHasTableHeader && ctx.registryPaths.length === 0) {
-    issues.push(issue("registry", REGISTRY_REL_PATH, "registry table header found but 0 rows parsed — check | Topic | Canonical file | format and link syntax"));
-  }
-  issues.push(...checkRegistryEntries(ctx));
-  issues.push(...checkUnregisteredBanners(ctx, registry));
-  return issues;
-}
-var registryRule = { id: "registry", run: runRegistryRule };
-
 // src/audit/rules/scan-gaps.ts
 function runCoverageGapsRule(ctx) {
   const exclude = [...COVERAGE_BUILTIN_EXCLUDES, ...ctx.config.scan.exclude];
@@ -30221,7 +31386,7 @@ function runCoverageGapsRule(ctx) {
     if (scanned.has(rel))
       continue;
     issues.push(issue("coverage-gaps", rel, {
-      message: "markdown outside audit scan perimeter — extend .skeleton/config.yaml scan.include",
+      message: "markdown outside audit scan perimeter — extend skeleton.toml (or legacy .skeleton/config.yaml) scan.include",
       severity: "warning"
     }));
   }
@@ -30240,11 +31405,11 @@ function runScanRootsRule(ctx) {
 var scanRootsRule = { id: "scan-roots", run: runScanRootsRule };
 
 // src/audit/rules/skill-index.ts
-import { existsSync as existsSync17, readdirSync as readdirSync5, readFileSync as readFileSync14 } from "node:fs";
+import { existsSync as existsSync15, readdirSync as readdirSync5, readFileSync as readFileSync15 } from "node:fs";
 import { join as join14, relative as relative8 } from "node:path";
 function walkSkillMarkdown(dir) {
   const files = [];
-  if (!existsSync17(dir))
+  if (!existsSync15(dir))
     return files;
   for (const entry of readdirSync5(dir, { withFileTypes: true })) {
     if (entry.name.startsWith("."))
@@ -30276,17 +31441,13 @@ function parseReadmeTaxonomySlugs(content3) {
 function scanFileForSkillLinks(ctx, filePath, index2) {
   const issues = [];
   const rel = relative8(ctx.root, filePath).replace(/\\/g, "/");
-  const content3 = readFileSync14(filePath, "utf8");
+  const content3 = readFileSync15(filePath, "utf8");
   if (isGeneratedReference(content3))
     return issues;
   for (const match of content3.matchAll(SKILL_LINK_RE)) {
     const slug2 = match[1];
     if (!slug2)
       continue;
-    if (ctx.retiredSkills.has(slug2)) {
-      issues.push(issue("skill-index", rel, `references retired skill "${slug2}/SKILL.md"`));
-      continue;
-    }
     if (!resolveSkillPath(index2, ctx.root, slug2)) {
       issues.push(issue("skill-index", rel, `links missing skill "${slug2}/SKILL.md"`));
     }
@@ -30296,13 +31457,13 @@ function scanFileForSkillLinks(ctx, filePath, index2) {
 function taxonomyIssuesForReadme(input) {
   const { ctx, index: index2, skillRoot, diskSlugs, nonPublic } = input;
   const readmePath = join14(ctx.root, skillRoot.relPath, "README.md");
-  if (!existsSync17(readmePath))
+  if (!existsSync15(readmePath))
     return [];
-  const readme = readFileSync14(readmePath, "utf8");
+  const readme = readFileSync15(readmePath, "utf8");
   if (!readme.includes("## Taxonomy"))
     return [];
   const taxonomySlugs = parseReadmeTaxonomySlugs(readme);
-  const nestedSlugs = diskSlugs.filter((slug2) => existsSync17(join14(ctx.root, skillRoot.relPath, slug2, "SKILL.md")));
+  const nestedSlugs = diskSlugs.filter((slug2) => existsSync15(join14(ctx.root, skillRoot.relPath, slug2, "SKILL.md")));
   const foreign = new Set(index2.foreignSlugs);
   const publicSlugs = nestedSlugs.filter((slug2) => !(nonPublic.has(slug2) || foreign.has(slug2)));
   const relReadme = `${skillRoot.relPath}/README.md`;
@@ -30338,7 +31499,7 @@ function auditSkillRoot(input) {
   const base = skillRoot.kind === "nested" ? join14(ctx.root, skillRoot.relPath) : ctx.root;
   for (const slug2 of slugsForRoot(skillRoot, index2, owned)) {
     const skillDir = join14(base, slug2);
-    if (!existsSync17(skillDir))
+    if (!existsSync15(skillDir))
       continue;
     for (const skillMd of walkSkillMarkdown(skillDir)) {
       issues.push(...scanFileForSkillLinks(ctx, skillMd, index2));
@@ -30377,10 +31538,46 @@ function skillAuditSuffix(ctx) {
   return ` (${owned} owned skills audited, ${foreign} foreign ignored)`;
 }
 
+// src/audit/rules/ssot.ts
+function runSsotRule(ctx) {
+  const issues = [];
+  for (const err of ctx.ssotErrors) {
+    issues.push(issue("ssot", err.path, err.detail));
+  }
+  return issues;
+}
+var ssotRule = { id: "ssot", run: runSsotRule };
+
+// src/audit/rules/ssot-summary.ts
+import { readFileSync as readFileSync16 } from "node:fs";
+import { join as join15 } from "node:path";
+function runSsotSummaryRule(ctx) {
+  const overlapMin = ctx.config.docsLint?.ssotOverlapMin ?? DEFAULT_SSOT_OVERLAP_MIN;
+  const margin = ctx.config.docsLint?.ssotBetterMatchMargin ?? DEFAULT_BETTER_MATCH_MARGIN;
+  const phraseCheck = ctx.config.docsLint?.ssotPhraseCheck !== false;
+  const files = ctx.ssotEntries.map((entry) => ({
+    path: entry.path,
+    summary: entry.summary,
+    content: readFileSync16(join15(ctx.root, entry.path), "utf8")
+  }));
+  return evaluateSsotFit(files, {
+    overlapMin,
+    betterMatchMargin: margin,
+    phraseCheck
+  }).map((fit) => issue("ssot-summary", fit.path, {
+    message: fit.message,
+    severity: "warning",
+    link: fit.otherPath
+  }));
+}
+var ssotSummaryRule = { id: "ssot-summary", run: runSsotSummaryRule };
+
 // src/audit/rules/index.ts
 var docsRules = [
   { ...scanRootsRule, global: true },
-  { ...registryRule, global: true },
+  { ...ssotRule, global: true },
+  { ...nearDuplicateRule, global: true },
+  { ...ssotSummaryRule, global: true },
   { ...coverageGapsRule, global: true },
   linksRule,
   docMetaRule,
@@ -30444,8 +31641,8 @@ function rulesForSuite(suite, pluginRules = []) {
 function parseFixArg(argv, index2) {
   const next = argv[index2 + 1];
   if (next && !next.startsWith("-")) {
-    if (next !== "doc-meta" && next !== "anchors") {
-      throw new Error(`Unknown --fix kind: ${next}. Use --fix, --fix=doc-meta, or --fix=anchors.`);
+    if (next !== "doc-meta" && next !== "anchors" && next !== "ssot") {
+      throw new Error(`Unknown --fix kind: ${next}. Use --fix, --fix=doc-meta, --fix=anchors, or --fix=ssot.`);
     }
     return { fix: next, nextIndex: index2 + 1 };
   }
@@ -30536,7 +31733,7 @@ async function runAuditFixes(options, ctx, loaded) {
   }
   const kinds = fixKindsForOnly(parseFixKinds(options.fix), options.only);
   if (kinds.length === 0) {
-    console.error("--fix has no overlapping rules with --only (doc-meta → doc-meta, anchors → links).");
+    console.error("--fix has no overlapping rules with --only (doc-meta → doc-meta, anchors → links, ssot → ssot).");
     return 1;
   }
   applyFixes(ctx, { kinds, dryRun: options.dryRun });
@@ -30580,41 +31777,89 @@ async function runAudit(options) {
   });
 }
 
+// src/catalog.ts
+import { existsSync as existsSync16, mkdirSync, readFileSync as readFileSync17, writeFileSync as writeFileSync2 } from "node:fs";
+import { dirname as dirname8, join as join16 } from "node:path";
+function renderCatalog(entries) {
+  const lines = [
+    "# Skeleton catalog",
+    "",
+    "Generated by `skeleton catalog`. Gitignored — regenerate locally; do not commit.",
+    "",
+    "Agents: skim this list, then read only the SSOT line / first ~20 lines of a candidate before opening the full paper.",
+    "",
+    "| Summary | Path |",
+    "| ------- | ---- |"
+  ];
+  for (const e of entries) {
+    const summary = e.summary.replace(/\|/g, "\\|");
+    lines.push(`| ${summary} | [${e.path}](../${e.path}) |`);
+  }
+  lines.push("");
+  return lines.join(`
+`);
+}
+function buildCatalogContent(root2) {
+  const config = loadConfig(root2);
+  const skillIndex = buildSkillIndex(root2, config.skillOwnership);
+  const files = collectScanFiles(config, root2, skillIndex);
+  const { entries } = collectSsotEntries(files, root2);
+  return { content: renderCatalog(entries), entries };
+}
+function checkCatalog(root2) {
+  const { content: expected, entries } = buildCatalogContent(root2);
+  const abs = join16(root2, CATALOG_REL_PATH);
+  if (!existsSync16(abs)) {
+    return { ok: false, missing: true, stale: false, expected, actual: null, entries };
+  }
+  const actual = readFileSync17(abs, "utf8");
+  const stale = actual !== expected;
+  return { ok: !stale, missing: false, stale, expected, actual, entries };
+}
+function writeCatalog(root2) {
+  const { content: content3, entries } = buildCatalogContent(root2);
+  const abs = join16(root2, CATALOG_REL_PATH);
+  mkdirSync(dirname8(abs), { recursive: true });
+  writeFileSync2(abs, content3, "utf8");
+  return { path: normalizeRelPath(CATALOG_REL_PATH), entries };
+}
+function runCatalogCli(options = {}) {
+  const root2 = options.root ?? findRepoRoot();
+  if (options.check) {
+    const result = checkCatalog(root2);
+    if (result.missing) {
+      console.error(`catalog: missing ${CATALOG_REL_PATH} — run \`skeleton catalog\``);
+      return 0;
+    }
+    if (result.stale) {
+      console.error(`catalog: ${CATALOG_REL_PATH} is outdated — run \`skeleton catalog\``);
+      return 0;
+    }
+    console.log(`catalog: ${CATALOG_REL_PATH} up to date (${result.entries.length} entries)`);
+    return 0;
+  }
+  const written = writeCatalog(root2);
+  console.log(`catalog: wrote ${written.path} (${written.entries.length} entries)`);
+  return 0;
+}
+
 // src/customize/resolve.ts
-import { existsSync as existsSync18, readFileSync as readFileSync15 } from "node:fs";
-import { basename as basename3, join as join15, relative as relative9 } from "node:path";
-var CUSTOMIZE_PREFIX = "Customize: ";
+import { existsSync as existsSync17, readFileSync as readFileSync18 } from "node:fs";
+import { basename as basename3, join as join17, relative as relative9 } from "node:path";
 function customizeDir(root2) {
-  return join15(root2, REGISTRY_DIR_REL, "customize");
+  return join17(root2, REGISTRY_DIR_REL, "customize");
 }
 function customizePathForSlug(root2, slug2) {
-  return join15(customizeDir(root2), `${slug2}.md`);
-}
-function findCustomizeViaRegistry(root2, slug2) {
-  for (const rel of parseRegistry(root2).paths) {
-    const expected = `${REGISTRY_DIR_REL}/customize/${slug2}.md`;
-    if (normalizeRelPath(rel) === expected && existsSync18(join15(root2, rel))) {
-      return rel;
-    }
-  }
-  return null;
+  return join17(customizeDir(root2), `${slug2}.md`);
 }
 function resolveSlugFile(root2, slug2) {
   const direct = customizePathForSlug(root2, slug2);
-  if (existsSync18(direct)) {
+  if (existsSync17(direct)) {
     return {
-      content: readFileSync15(direct, "utf8"),
+      content: readFileSync18(direct, "utf8"),
       path: normalizeRelPath(relative9(root2, direct))
     };
   }
-  const registryPath = findCustomizeViaRegistry(root2, slug2);
-  if (registryPath) {
-    const abs = join15(root2, registryPath);
-    return {
-      content: readFileSync15(abs, "utf8"),
-      path: registryPath
-    };
-  }
   return { content: null, path: null };
 }
 function alwaysIncludeBasenames(root2) {
@@ -30633,10 +31878,10 @@ function readAlwaysInclude(root2, basenames, skipBasename) {
     const file = basename3(name);
     if (skipBasename && file === skipBasename)
       continue;
-    const abs = join15(dir, file);
-    if (!existsSync18(abs))
+    const abs = join17(dir, file);
+    if (!existsSync17(abs))
       continue;
-    parts.push(readFileSync15(abs, "utf8").trimEnd());
+    parts.push(readFileSync18(abs, "utf8").trimEnd());
     paths.push(normalizeRelPath(relative9(root2, abs)));
   }
   return { parts, paths };
@@ -30760,39 +32005,39 @@ Customize override for /${slug2} (from ${from}):
 
 // src/init/init.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { copyFileSync, existsSync as existsSync22, mkdirSync as mkdirSync2, readFileSync as readFileSync17 } from "node:fs";
-import { join as join19 } from "node:path";
+import { copyFileSync, existsSync as existsSync21, mkdirSync as mkdirSync3, readFileSync as readFileSync20 } from "node:fs";
+import { join as join21 } from "node:path";
 import process4 from "node:process";
 
 // src/init/merge-hooks.ts
-import { existsSync as existsSync21, mkdirSync, readFileSync as readFileSync16, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname10, join as join18 } from "node:path";
+import { existsSync as existsSync20, mkdirSync as mkdirSync2, readFileSync as readFileSync19, writeFileSync as writeFileSync3 } from "node:fs";
+import { dirname as dirname11, join as join20 } from "node:path";
 
 // src/init/package-paths.ts
-import { existsSync as existsSync19 } from "node:fs";
-import { dirname as dirname8, join as join16 } from "node:path";
+import { existsSync as existsSync18 } from "node:fs";
+import { dirname as dirname9, join as join18 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
-var MODULE_DIR = dirname8(fileURLToPath5(import.meta.url));
-var PACKAGE_ROOT_CANDIDATES = [join16(MODULE_DIR, "../.."), join16(MODULE_DIR, "..")];
+var MODULE_DIR = dirname9(fileURLToPath5(import.meta.url));
+var PACKAGE_ROOT_CANDIDATES = [join18(MODULE_DIR, "../.."), join18(MODULE_DIR, "..")];
 function resolvePackageRoot() {
   for (const candidate of PACKAGE_ROOT_CANDIDATES) {
-    if (existsSync19(join16(candidate, "package.json")))
+    if (existsSync18(join18(candidate, "package.json")))
       return candidate;
   }
   throw new Error("Could not resolve @csark0812/skeleton package root");
 }
 function resolveTemplatesDir() {
-  const dir = join16(resolvePackageRoot(), "templates/skeleton-init");
-  if (!existsSync19(dir)) {
+  const dir = join18(resolvePackageRoot(), "templates/skeleton-init");
+  if (!existsSync18(dir)) {
     throw new Error("Missing templates/skeleton-init in package");
   }
   return dir;
 }
 
 // src/init/resolve-hook-command.ts
-import { existsSync as existsSync20, realpathSync as realpathSync6 } from "node:fs";
+import { existsSync as existsSync19, realpathSync as realpathSync6 } from "node:fs";
 import { createRequire as createRequire3 } from "node:module";
-import { dirname as dirname9, join as join17, relative as relative10, resolve as resolve8 } from "node:path";
+import { dirname as dirname10, join as join19, relative as relative10, resolve as resolve7 } from "node:path";
 var PACKAGE_NAME = "@csark0812/skeleton";
 var CLI_DIST = "dist/cli.js";
 var PACKAGE_ROOT = resolvePackageRoot();
@@ -30811,7 +32056,7 @@ function toRepoRelative(cwd, absPath) {
 }
 function tryResolvePublishedCli(cwd) {
   try {
-    const req = createRequire3(join17(cwd, "package.json"));
+    const req = createRequire3(join19(cwd, "package.json"));
     return req.resolve(`${PACKAGE_NAME}/${CLI_DIST}`);
   } catch {
     return null;
@@ -30820,10 +32065,10 @@ function tryResolvePublishedCli(cwd) {
 function walkNodeModulesCli(cwd) {
   let dir = cwd;
   while (true) {
-    const candidate = join17(dir, "node_modules", PACKAGE_NAME, CLI_DIST);
-    if (existsSync20(candidate))
+    const candidate = join19(dir, "node_modules", PACKAGE_NAME, CLI_DIST);
+    if (existsSync19(candidate))
       return candidate;
-    const parent = dirname9(dir);
+    const parent = dirname10(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -30831,7 +32076,7 @@ function walkNodeModulesCli(cwd) {
   return null;
 }
 function isInsidePackageRoot(cwd) {
-  const rel = relative10(PACKAGE_ROOT, resolve8(cwd)).replace(/\\/g, "/");
+  const rel = relative10(PACKAGE_ROOT, resolve7(cwd)).replace(/\\/g, "/");
   return rel === "" || !(rel.startsWith("..") || rel.startsWith("/"));
 }
 function nodeCliHookCommand(cliPath) {
@@ -30862,21 +32107,21 @@ function identityKey(platform, event, matcher) {
   return `skeleton:customize:${platform}:${event}:${matcher}`;
 }
 function loadFragment(name, hookCommand) {
-  const raw = readFileSync16(join18(TEMPLATES_DIR, name), "utf8");
+  const raw = readFileSync19(join20(TEMPLATES_DIR, name), "utf8");
   return JSON.parse(raw.replaceAll("{{HOOK_COMMAND}}", hookCommand));
 }
 function readJson(path2) {
-  if (!existsSync21(path2))
+  if (!existsSync20(path2))
     return null;
   try {
-    return JSON.parse(readFileSync16(path2, "utf8"));
+    return JSON.parse(readFileSync19(path2, "utf8"));
   } catch (error) {
     throw new Error(`Invalid JSON in ${path2}: ${error}`);
   }
 }
 function writeJson(path2, value) {
-  mkdirSync(dirname10(path2), { recursive: true });
-  writeFileSync2(path2, `${JSON.stringify(value, null, 2)}
+  mkdirSync2(dirname11(path2), { recursive: true });
+  writeFileSync3(path2, `${JSON.stringify(value, null, 2)}
 `, "utf8");
 }
 function deepEqual(a, b) {
@@ -31029,10 +32274,10 @@ function mergeNestedHooks(args) {
 }
 function mergeHookConfigs(opts) {
   const results = [];
-  const cursorPath = join18(opts.cwd, ".cursor/hooks.json");
+  const cursorPath = join20(opts.cwd, ".cursor/hooks.json");
   const cursorFragment = loadFragment("cursor-hooks.fragment.json", opts.hookCommand);
   results.push(mergeCursorHooks(cursorPath, cursorFragment, opts));
-  const claudePath = join18(opts.cwd, ".claude/settings.json");
+  const claudePath = join20(opts.cwd, ".claude/settings.json");
   const claudeFragment = loadFragment("claude-settings.fragment.json", opts.hookCommand);
   results.push(mergeNestedHooks({
     platform: "claude",
@@ -31041,8 +32286,8 @@ function mergeHookConfigs(opts) {
     eventName: "PostToolUse",
     opts
   }));
-  const codexPath = join18(opts.cwd, ".codex/hooks.json");
-  if (existsSync21(join18(opts.cwd, ".codex"))) {
+  const codexPath = join20(opts.cwd, ".codex/hooks.json");
+  if (existsSync20(join20(opts.cwd, ".codex"))) {
     const codexFragment = loadFragment("codex-hooks.fragment.json", opts.hookCommand);
     results.push(mergeNestedHooks({
       platform: "codex",
@@ -31057,11 +32302,11 @@ function mergeHookConfigs(opts) {
   return results;
 }
 function mergePackageJsonScripts(cwd) {
-  const pkgPath = join18(cwd, "package.json");
-  if (!existsSync21(pkgPath))
+  const pkgPath = join20(cwd, "package.json");
+  if (!existsSync20(pkgPath))
     return "skipped";
-  const fragment = JSON.parse(readFileSync16(join18(TEMPLATES_DIR, "package.json.scripts.fragment.json"), "utf8"));
-  const pkg = JSON.parse(readFileSync16(pkgPath, "utf8"));
+  const fragment = JSON.parse(readFileSync19(join20(TEMPLATES_DIR, "package.json.scripts.fragment.json"), "utf8"));
+  const pkg = JSON.parse(readFileSync19(pkgPath, "utf8"));
   pkg.scripts ??= {};
   let changed = false;
   for (const [key, value] of Object.entries(fragment)) {
@@ -31072,7 +32317,7 @@ function mergePackageJsonScripts(cwd) {
   }
   if (!changed)
     return "skipped";
-  writeFileSync2(pkgPath, `${JSON.stringify(pkg, null, 2)}
+  writeFileSync3(pkgPath, `${JSON.stringify(pkg, null, 2)}
 `, "utf8");
   return "updated";
 }
@@ -31117,27 +32362,23 @@ function skillsAddArgs(options = {}) {
 // src/init/init.ts
 var TEMPLATES_DIR2 = resolveTemplatesDir();
 function writeScaffold(cwd) {
-  const skeletonDir2 = join19(cwd, ".skeleton");
-  mkdirSync2(skeletonDir2, { recursive: true });
+  const skeletonDir2 = join21(cwd, ".skeleton");
+  mkdirSync3(skeletonDir2, { recursive: true });
   let created = false;
-  const configPath = join19(skeletonDir2, "config.yaml");
-  if (!existsSync22(configPath)) {
-    copyFileSync(join19(TEMPLATES_DIR2, "config.yaml"), configPath);
-    created = true;
-  }
-  const registryPath = join19(skeletonDir2, "registry.md");
-  if (!existsSync22(registryPath)) {
-    copyFileSync(join19(TEMPLATES_DIR2, "registry.md"), registryPath);
+  const tomlPath = join21(cwd, "skeleton.toml");
+  const legacyYaml = join21(skeletonDir2, "config.yaml");
+  if (!(existsSync21(tomlPath) || existsSync21(legacyYaml))) {
+    copyFileSync(join21(TEMPLATES_DIR2, "skeleton.toml"), tomlPath);
     created = true;
   }
-  mkdirSync2(join19(skeletonDir2, "customize"), { recursive: true });
+  mkdirSync3(join21(skeletonDir2, "customize"), { recursive: true });
   return created ? "created" : "skipped";
 }
 function assertPackageResolvable(cwd) {
-  const pkgPath = join19(cwd, "package.json");
-  if (!existsSync22(pkgPath))
+  const pkgPath = join21(cwd, "package.json");
+  if (!existsSync21(pkgPath))
     return;
-  const pkg = JSON.parse(readFileSync17(pkgPath, "utf8"));
+  const pkg = JSON.parse(readFileSync20(pkgPath, "utf8"));
   const hasDep = pkg.devDependencies?.["@csark0812/skeleton"] || pkg.dependencies?.["@csark0812/skeleton"];
   if (!hasDep) {
     try {
@@ -31186,9 +32427,9 @@ function runInit(options = {}) {
   for (const result of hooks)
     logHookMergeResult(result);
   if (scaffold === "created") {
-    console.log("init: wrote .skeleton/config.yaml and registry.md");
+    console.log("init: wrote skeleton.toml (hooks optional — see docs)");
   } else {
-    console.log("init: .skeleton/ already present — skipped scaffold write");
+    console.log("init: skeleton.toml or .skeleton/ already present — skipped scaffold write");
   }
   if (scripts === "updated") {
     console.log("init: merged validate/audit scripts into package.json");
@@ -31221,8 +32462,8 @@ function parseInitArgs(argv) {
 // src/plugins/build.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { createHash } from "node:crypto";
-import { existsSync as existsSync23, readFileSync as readFileSync18, writeFileSync as writeFileSync3 } from "node:fs";
-import { basename as basename4, dirname as dirname11, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync22, readFileSync as readFileSync21, writeFileSync as writeFileSync4 } from "node:fs";
+import { basename as basename4, dirname as dirname12, resolve as resolve8 } from "node:path";
 function parseBuildPluginArgs(argv) {
   let check = false;
   let entry;
@@ -31247,7 +32488,7 @@ function collectPluginEntries(root2, config, entry) {
   return (config.plugins ?? []).map((e) => resolvePluginTsPath(root2, e));
 }
 function localImportPaths(tsAbs, content3) {
-  const dir = dirname11(tsAbs);
+  const dir = dirname12(tsAbs);
   const deps = [];
   const re = /(?:from\s+|import\s*\(\s*|import\s+)["'](\.[^"']+)["']/g;
   for (const match of content3.matchAll(re)) {
@@ -31257,12 +32498,12 @@ function localImportPaths(tsAbs, content3) {
     const candidates = [];
     if (spec.endsWith(".js")) {
       const withoutJs = spec.slice(0, -".js".length);
-      candidates.push(resolve9(dir, `${withoutJs}.ts`), resolve9(dir, spec), resolve9(dir, withoutJs, "index.ts"));
+      candidates.push(resolve8(dir, `${withoutJs}.ts`), resolve8(dir, spec), resolve8(dir, withoutJs, "index.ts"));
     } else {
-      candidates.push(resolve9(dir, spec), resolve9(dir, `${spec}.ts`), resolve9(dir, `${spec}.js`), resolve9(dir, spec, "index.ts"));
+      candidates.push(resolve8(dir, spec), resolve8(dir, `${spec}.ts`), resolve8(dir, `${spec}.js`), resolve8(dir, spec, "index.ts"));
     }
     for (const candidate of candidates) {
-      if (existsSync23(candidate) && candidate.endsWith(".ts")) {
+      if (existsSync22(candidate) && candidate.endsWith(".ts")) {
         deps.push(candidate);
         break;
       }
@@ -31279,7 +32520,7 @@ function sourceFingerprint(tsAbs, seen = new Set) {
     if (seen.has(abs))
       return;
     seen.add(abs);
-    const content3 = readFileSync18(abs, "utf8");
+    const content3 = readFileSync21(abs, "utf8");
     hash.update(basename4(abs));
     hash.update("\x00");
     hash.update(content3);
@@ -31292,12 +32533,12 @@ function sourceFingerprint(tsAbs, seen = new Set) {
   return hash.digest("hex");
 }
 function writeStamp(tsAbs, mjsAbs) {
-  writeFileSync3(stampPathForMjs(mjsAbs), `${sourceFingerprint(tsAbs)}
+  writeFileSync4(stampPathForMjs(mjsAbs), `${sourceFingerprint(tsAbs)}
 `, "utf8");
 }
 async function buildOne(tsAbs) {
   const mjsAbs = mjsPathForTs(tsAbs);
-  if (!existsSync23(tsAbs)) {
+  if (!existsSync22(tsAbs)) {
     throw new Error(`Plugin source not found: ${tsAbs}`);
   }
   const proc = spawnSync3("bun", ["build", tsAbs, "--target=node", "--format=esm", `--outfile=${mjsAbs}`, "--packages=external"], { encoding: "utf8" });
@@ -31317,17 +32558,17 @@ ${proc.stderr || proc.stdout || `exit ${proc.status}`}`);
 }
 function checkOne(tsAbs) {
   const mjsAbs = mjsPathForTs(tsAbs);
-  if (!existsSync23(mjsAbs)) {
+  if (!existsSync22(mjsAbs)) {
     throw new Error(`Plugin not built: ${tsAbs} (missing ${mjsAbs}). Run: skeleton build-plugin`);
   }
-  if (!existsSync23(tsAbs)) {
+  if (!existsSync22(tsAbs)) {
     throw new Error(`Plugin source not found: ${tsAbs}`);
   }
   const stampAbs = stampPathForMjs(mjsAbs);
-  if (!existsSync23(stampAbs)) {
+  if (!existsSync22(stampAbs)) {
     throw new Error(`Plugin stale: ${mjsAbs} has no fingerprint stamp. Run: skeleton build-plugin`);
   }
-  const expected = readFileSync18(stampAbs, "utf8").trim();
+  const expected = readFileSync21(stampAbs, "utf8").trim();
   const actual = sourceFingerprint(tsAbs);
   if (expected !== actual) {
     throw new Error(`Plugin stale: ${mjsAbs} does not match ${tsAbs} (or local imports). Run: skeleton build-plugin`);
@@ -31360,14 +32601,14 @@ import process6 from "node:process";
 
 // src/references/sync.ts
 import {
-  existsSync as existsSync24,
-  mkdirSync as mkdirSync3,
+  existsSync as existsSync23,
+  mkdirSync as mkdirSync4,
   readdirSync as readdirSync6,
-  readFileSync as readFileSync19,
+  readFileSync as readFileSync22,
   unlinkSync,
-  writeFileSync as writeFileSync4
+  writeFileSync as writeFileSync5
 } from "node:fs";
-import { dirname as dirname12, join as join20, relative as relative11 } from "node:path";
+import { dirname as dirname13, join as join22, relative as relative11 } from "node:path";
 import process5 from "node:process";
 function resolveOwnership(root2, override) {
   if (override !== undefined)
@@ -31378,12 +32619,12 @@ function resolveOwnership(root2, override) {
 }
 function walkMarkdownFiles2(dir, root2) {
   const files = [];
-  if (!existsSync24(dir))
+  if (!existsSync23(dir))
     return files;
   for (const entry of readdirSync6(dir, { withFileTypes: true })) {
     if (entry.name.startsWith("."))
       continue;
-    const fullPath = join20(dir, entry.name);
+    const fullPath = join22(dir, entry.name);
     if (entry.isDirectory()) {
       files.push(...walkMarkdownFiles2(fullPath, root2));
       continue;
@@ -31397,14 +32638,14 @@ function walkMarkdownFiles2(dir, root2) {
 function collectGeneratedInDir(input) {
   const { dir, refsDir, skill, files } = input;
   for (const entry of readdirSync6(dir, { withFileTypes: true })) {
-    const fullPath = join20(dir, entry.name);
+    const fullPath = join22(dir, entry.name);
     if (entry.isDirectory()) {
       collectGeneratedInDir({ dir: fullPath, refsDir, skill, files });
       continue;
     }
     if (!entry.name.endsWith(".md"))
       continue;
-    const content3 = readFileSync19(fullPath, "utf8");
+    const content3 = readFileSync22(fullPath, "utf8");
     if (!isGeneratedReference(content3))
       continue;
     const refPath = normalizeRelPath(relative11(refsDir, fullPath));
@@ -31412,8 +32653,8 @@ function collectGeneratedInDir(input) {
   }
 }
 function listGeneratedReferenceFiles(skillDir, skill) {
-  const refsDir = join20(skillDir, "references");
-  if (!existsSync24(refsDir))
+  const refsDir = join22(skillDir, "references");
+  if (!existsSync23(refsDir))
     return [];
   const files = [];
   collectGeneratedInDir({ dir: refsDir, refsDir, skill, files });
@@ -31421,21 +32662,21 @@ function listGeneratedReferenceFiles(skillDir, skill) {
 }
 function syncGeneratedCopy(ctx, refPath) {
   const { root: root2, plan, options, result } = ctx;
-  const sourceRel = normalizeRelPath(join20(CANONICAL_REFS_DIR, refPath));
-  const canonicalPath = join20(root2, sourceRel);
-  if (!existsSync24(canonicalPath)) {
+  const sourceRel = normalizeRelPath(join22(CANONICAL_REFS_DIR, refPath));
+  const canonicalPath = join22(root2, sourceRel);
+  if (!existsSync23(canonicalPath)) {
     throw new Error(`canonical reference missing: ${sourceRel}`);
   }
   const targetRel = generatedRefPath(plan.skill, refPath);
-  const targetPath = join20(root2, targetRel);
-  const canonicalContent = readFileSync19(canonicalPath, "utf8");
+  const targetPath = join22(root2, targetRel);
+  const canonicalContent = readFileSync22(canonicalPath, "utf8");
   const nextContent = formatGeneratedHeader(sourceRel) + canonicalContent;
   if (!options.dryRun)
-    mkdirSync3(dirname12(targetPath), { recursive: true });
-  const existing = existsSync24(targetPath) ? readFileSync19(targetPath, "utf8") : null;
+    mkdirSync4(dirname13(targetPath), { recursive: true });
+  const existing = existsSync23(targetPath) ? readFileSync22(targetPath, "utf8") : null;
   if (existing !== nextContent) {
     if (!options.dryRun)
-      writeFileSync4(targetPath, nextContent, "utf8");
+      writeFileSync5(targetPath, nextContent, "utf8");
     result.written.push(targetRel);
   } else {
     result.skipped.push(targetRel);
@@ -31446,13 +32687,13 @@ function rewritePlanLinks(ctx, skillDir) {
   if (options.rewriteLinks === false)
     return;
   for (const relFile of walkMarkdownFiles2(skillDir, root2)) {
-    const filePath = join20(root2, relFile);
-    const content3 = readFileSync19(filePath, "utf8");
+    const filePath = join22(root2, relFile);
+    const content3 = readFileSync22(filePath, "utf8");
     const next = rewriteSharedRefLinks(content3, relFile, plan.skill);
     if (next === content3)
       continue;
     if (!options.dryRun)
-      writeFileSync4(filePath, next, "utf8");
+      writeFileSync5(filePath, next, "utf8");
     result.rewritten.push(relFile);
   }
 }
@@ -31463,12 +32704,12 @@ function removeStaleGenerated(ctx, skillDir) {
     if (plan.refPaths.has(refPath))
       continue;
     if (!options.dryRun)
-      unlinkSync(join20(root2, generatedRel));
+      unlinkSync(join22(root2, generatedRel));
     result.removed.push(generatedRel);
   }
 }
 function syncPlan(ctx) {
-  const skillDir = join20(ctx.root, ctx.plan.skill);
+  const skillDir = join22(ctx.root, ctx.plan.skill);
   for (const refPath of ctx.plan.refPaths) {
     syncGeneratedCopy(ctx, refPath);
   }
@@ -31477,8 +32718,8 @@ function syncPlan(ctx) {
 }
 function syncReferences(options = {}) {
   const root2 = options.root ?? process5.cwd();
-  const canonicalDir = join20(root2, CANONICAL_REFS_DIR);
-  if (!existsSync24(canonicalDir)) {
+  const canonicalDir = join22(root2, CANONICAL_REFS_DIR);
+  if (!existsSync23(canonicalDir)) {
     throw new Error(`canonical references dir not found: ${CANONICAL_REFS_DIR}`);
   }
   const result = { written: [], rewritten: [], removed: [], skipped: [] };
@@ -31523,183 +32764,10 @@ function printSyncResult(result) {
   }
 }
 
-// src/register.ts
-import { existsSync as existsSync25, readFileSync as readFileSync20, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname13, join as join21, relative as relative12 } from "node:path";
-var REGISTRY_TABLE_ROW_RE2 = /^\|\s*([^|]+)\|\s*\[[^\]]*\]\(([^)]+)\)\s*\|/;
-var REGISTRY_TABLE_HEADER = "| Topic | Canonical file |";
-function extractTopic(content3) {
-  const match = content3.match(/\*\*Source of truth for\*\*\s*(.+)/);
-  return match?.[1]?.trim().replace(/\s+$/, "") ?? null;
-}
-function toRegistryLink(root2, absPath) {
-  const fromRegistry = join21(root2, REGISTRY_DIR_REL);
-  return normalizeRelPath(relative12(fromRegistry, absPath));
-}
-function inferSection(registryLink) {
-  return registryLink.startsWith("customize/") ? "Customizations" : "Documentation";
-}
-function ensureCustomizeTopic(topic, registryLink) {
-  if (!registryLink.startsWith("customize/"))
-    return topic;
-  if (topic.startsWith(CUSTOMIZE_PREFIX))
-    return topic;
-  return `${CUSTOMIZE_PREFIX}${topic}`;
-}
-function parseRegistryRows(content3) {
-  const rows = [];
-  for (const line of content3.split(`
-`)) {
-    const match = REGISTRY_TABLE_ROW_RE2.exec(line);
-    if (!(match?.[1] && match[2]))
-      continue;
-    rows.push({ topic: match[1].trim(), link: match[2].trim(), line });
-  }
-  return rows;
-}
-function pathFromRegistryLink(root2, link2) {
-  return normalizeRelPath(relative12(root2, join21(root2, REGISTRY_DIR_REL, link2)));
-}
-function isOutsideScan(root2, relPath2) {
-  const config = loadConfig(root2);
-  const skillIndex = buildSkillIndex(root2, config.skillOwnership);
-  const scanned = collectScanFiles(config, root2, skillIndex).map((abs) => normalizeRelPath(relative12(root2, abs)));
-  if (scanned.includes(relPath2))
-    return false;
-  return !config.scan.include.some((pattern) => matchesGlobScope(relPath2, pattern));
-}
-function defaultRegistryContent() {
-  return `# Registry
-
-<!-- doc-meta: owner=eng | last-reviewed=${new Date().toISOString().slice(0, 10)} -->
-
-**Source of truth for** topic routing in this repo. Edit rows here; edit content in canonical files only.
-
-## Documentation
-
-${REGISTRY_TABLE_HEADER}
-|-------|------------------|
-
-`;
-}
-function upsertRow(opts) {
-  const { content: content3, topic, link: link2, section, root: root2 } = opts;
-  const rows = parseRegistryRows(content3);
-  const targetPath = link2;
-  const existingByLink = rows.find((row) => row.link === targetPath);
-  if (existingByLink && existingByLink.topic === topic) {
-    return { content: content3, action: "noop" };
-  }
-  const duplicateTopic = rows.find((row) => row.topic === topic && row.link !== targetPath);
-  if (duplicateTopic) {
-    throw new Error(`topic "${topic}" already registered for ${pathFromRegistryLink(root2, duplicateTopic.link)} — hand-edit registry or use different topic`);
-  }
-  const newLine = `| ${topic} | [${link2.split("/").pop()}](${link2}) |`;
-  if (existingByLink) {
-    const updated = content3.replace(existingByLink.line, newLine);
-    return { content: updated, action: "updated" };
-  }
-  const sectionHeader = `## ${section}`;
-  const sectionIdx = content3.indexOf(sectionHeader);
-  if (sectionIdx >= 0) {
-    const afterSection = content3.indexOf(REGISTRY_TABLE_HEADER, sectionIdx);
-    if (afterSection >= 0) {
-      const insertAt = content3.indexOf(`
-`, afterSection + REGISTRY_TABLE_HEADER.length);
-      if (insertAt >= 0) {
-        const updated = `${content3.slice(0, insertAt + 1) + newLine}
-${content3.slice(insertAt + 1)}`;
-        return { content: updated, action: "added" };
-      }
-    }
-  }
-  const appended = `${content3.trimEnd()}
-
-## ${section}
-
-${REGISTRY_TABLE_HEADER}
-|-------|------------------|
-${newLine}
-`;
-  return { content: appended, action: "added" };
-}
-function printRegisterResult(options, result, relPath2) {
-  if (options.json) {
-    console.log(JSON.stringify(result, null, 2));
-  } else if (options.dryRun) {
-    console.log(`dry-run: would ${result.action} registry row for ${relPath2} → ${result.topic}`);
-  } else if (result.action === "noop") {
-    console.log(`register: ${relPath2} already registered (${result.topic})`);
-  } else {
-    console.log(`register: ${result.action} ${relPath2} → ${result.topic}`);
-  }
-}
-function resolveRegistrationTopic(input) {
-  const { options, root: root2, relPath: relPath2, absPath } = input;
-  const content3 = readFileSync20(absPath, "utf8");
-  let topic = options.topic ?? extractTopic(content3);
-  if (!topic) {
-    throw new Error(`No **Source of truth for** banner in ${relPath2} — add banner or pass --topic`);
-  }
-  const registryLink = toRegistryLink(root2, absPath);
-  topic = ensureCustomizeTopic(topic, registryLink);
-  return { topic, registryLink, section: inferSection(registryLink) };
-}
-function loadRegistryContent(root2) {
-  const registryAbs = join21(root2, REGISTRY_REL_PATH);
-  if (!(existsSync25(registryAbs) || existsSync25(join21(root2, ".skeleton/config.yaml")))) {
-    throw new Error("Missing .skeleton/config.yaml — run skeleton init first");
-  }
-  return existsSync25(registryAbs) ? readFileSync20(registryAbs, "utf8") : defaultRegistryContent();
-}
-function registerPath(options) {
-  const root2 = options.root ?? findRepoRoot();
-  const relPath2 = normalizeRelPath(options.path);
-  const absPath = join21(root2, relPath2);
-  if (!existsSync25(absPath)) {
-    throw new Error(`File not found: ${relPath2}`);
-  }
-  const { topic, registryLink, section } = resolveRegistrationTopic({
-    options,
-    root: root2,
-    relPath: relPath2,
-    absPath
-  });
-  let registryContent = loadRegistryContent(root2);
-  const { content: updated, action } = upsertRow({
-    content: registryContent,
-    topic,
-    link: registryLink,
-    section,
-    root: root2
-  });
-  registryContent = updated;
-  const result = {
-    topic,
-    registryLink,
-    section,
-    action,
-    warnOutsideScan: isOutsideScan(root2, relPath2)
-  };
-  const registryAbs = join21(root2, REGISTRY_REL_PATH);
-  if (!options.dryRun && action !== "noop") {
-    const dir = dirname13(registryAbs);
-    if (!existsSync25(dir)) {
-      throw new Error(`Missing ${REGISTRY_DIR_REL}/ directory`);
-    }
-    writeFileSync5(registryAbs, registryContent, "utf8");
-  }
-  if (result.warnOutsideScan) {
-    console.error(`warning: ${relPath2} is outside scan.include — register succeeded but audit will not scan it`);
-  }
-  printRegisterResult(options, result, relPath2);
-  return result;
-}
-
 // src/validate/changed.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
-import { existsSync as existsSync26, readFileSync as readFileSync21 } from "node:fs";
-import { basename as basename5, extname as extname2, join as join22 } from "node:path";
+import { existsSync as existsSync24, readFileSync as readFileSync23 } from "node:fs";
+import { basename as basename5, extname as extname2, join as join23 } from "node:path";
 
 // src/validate/git-diff.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
@@ -31792,9 +32860,9 @@ function parseJsonContent(content3) {
   }
 }
 function validateJson(relPath2, root2) {
-  const abs = join22(root2, relPath2);
+  const abs = join23(root2, relPath2);
   try {
-    parseJsonContent(readFileSync21(abs, "utf8"));
+    parseJsonContent(readFileSync23(abs, "utf8"));
     return 0;
   } catch (error) {
     console.error(`validate changed: invalid JSON in ${relPath2}: ${error}`);
@@ -31802,9 +32870,9 @@ function validateJson(relPath2, root2) {
   }
 }
 function validatePolicy(relPath2, root2) {
-  const abs = join22(root2, relPath2);
+  const abs = join23(root2, relPath2);
   try {
-    loadPolicyFile(abs, readFileSync21(abs, "utf8"));
+    loadPolicyFile(abs, readFileSync23(abs, "utf8"));
     return 0;
   } catch (error) {
     console.error(`validate changed: invalid policy ${relPath2}: ${error}`);
@@ -31812,7 +32880,7 @@ function validatePolicy(relPath2, root2) {
   }
 }
 function validateShell(relPath2, root2) {
-  const abs = join22(root2, relPath2);
+  const abs = join23(root2, relPath2);
   const shellcheck = spawnSync5("shellcheck", [abs], { encoding: "utf8" });
   if (shellcheck.status === 0)
     return 0;
@@ -31833,11 +32901,11 @@ function resolvePaths(options) {
   });
 }
 function packageManagerFromPackageJson(root2) {
-  const pkgPath = join22(root2, "package.json");
-  if (!existsSync26(pkgPath))
+  const pkgPath = join23(root2, "package.json");
+  if (!existsSync24(pkgPath))
     return null;
   try {
-    const pkg = JSON.parse(readFileSync21(pkgPath, "utf8"));
+    const pkg = JSON.parse(readFileSync23(pkgPath, "utf8"));
     const raw = pkg.packageManager?.split("@")[0];
     if (raw === "bun" || raw === "npm" || raw === "pnpm" || raw === "yarn")
       return raw;
@@ -31845,13 +32913,13 @@ function packageManagerFromPackageJson(root2) {
   return null;
 }
 function packageManagerFromLockfiles(root2) {
-  if (existsSync26(join22(root2, "bun.lock")) || existsSync26(join22(root2, "bun.lockb")))
+  if (existsSync24(join23(root2, "bun.lock")) || existsSync24(join23(root2, "bun.lockb")))
     return "bun";
-  if (existsSync26(join22(root2, "pnpm-lock.yaml")))
+  if (existsSync24(join23(root2, "pnpm-lock.yaml")))
     return "pnpm";
-  if (existsSync26(join22(root2, "yarn.lock")))
+  if (existsSync24(join23(root2, "yarn.lock")))
     return "yarn";
-  if (existsSync26(join22(root2, "package-lock.json")))
+  if (existsSync24(join23(root2, "package-lock.json")))
     return "npm";
   return null;
 }
@@ -31877,8 +32945,8 @@ function emptyBuckets() {
 function classifySinglePath(input) {
   const { relPath: relPath2, ctx, state, bucketCtx } = input;
   const normalized = normalizeRelPath(relPath2);
-  const abs = join22(ctx.root, normalized);
-  if (!existsSync26(abs)) {
+  const abs = join23(ctx.root, normalized);
+  if (!existsSync24(abs)) {
     state.missing++;
     console.error(`validate changed: path not found: ${relPath2}`);
     return;
@@ -32112,31 +33180,16 @@ function usage() {
 Commands:
   init [--force-hooks] [--skills] [--no-skills] [skills add flags…]
   audit docs|self|skills [--strict] [--json] [--paths=a,b] [--only=rule]
-                         [--fix[=doc-meta|anchors]] [--dry-run]
+                         [--fix[=doc-meta|anchors|ssot]] [--dry-run]
   build-plugin [path] [--check]
   validate changed [paths…] [--staged] [--base <ref>]
-  register <path> [--topic=…] [--dry-run] [--json]
+  catalog [--check]         write or check .skeleton/catalog.md (gitignored)
   customize resolve <slug> [--json]
   hook customize            (reads a host hook payload on stdin)
   references sync [--dry-run] [--no-rewrite-links]
-  references check [--json] [--strict]`);
-}
-function parseRegisterArgs(argv) {
-  let path2 = null;
-  let topic;
-  let dryRun = false;
-  let json = false;
-  for (const arg of argv) {
-    if (arg === "--dry-run")
-      dryRun = true;
-    else if (arg === "--json")
-      json = true;
-    else if (arg.startsWith("--topic="))
-      topic = arg.slice("--topic=".length);
-    else if (!(arg.startsWith("-") || path2))
-      path2 = arg;
-  }
-  return { path: path2, topic, dryRun, json };
+  references check [--json] [--strict]
+
+Note: \`register\` was removed — add a source-of-truth marker to the file and run \`skeleton catalog\`.`);
 }
 function parseValidateChangedArgs(rest) {
   const paths = [];
@@ -32180,19 +33233,12 @@ async function handleValidateChanged(argv) {
   const { paths, staged, base } = parseValidateChangedArgs(argv);
   return runValidateChanged({ paths, staged, base });
 }
-function handleRegister(argv) {
-  const opts = parseRegisterArgs(argv);
-  if (!opts.path) {
-    console.error("register: path required");
-    return 1;
-  }
-  registerPath({
-    path: opts.path,
-    topic: opts.topic,
-    dryRun: opts.dryRun,
-    json: opts.json
-  });
-  return 0;
+function handleRegister() {
+  console.error("register: removed — add `<!-- source-of-truth: … -->` (or visible `source-of-truth:`) to the file, then run `skeleton catalog`.");
+  return 1;
+}
+function handleCatalog(argv) {
+  return runCatalogCli({ check: argv.includes("--check") });
 }
 function handleCustomizeResolve(argv) {
   const slug2 = argv[0];
@@ -32214,7 +33260,7 @@ function handleHook(argv) {
     usage();
     return 1;
   }
-  process7.stdout.write(runCustomizeHook(readFileSync22(0, "utf8")));
+  process7.stdout.write(runCustomizeHook(readFileSync24(0, "utf8")));
   return 0;
 }
 function handleInit(argv) {
@@ -32250,7 +33296,9 @@ async function dispatchCommand(argv) {
     case "validate":
       return rest[0] === "changed" ? handleValidateChanged(rest.slice(1)) : null;
     case "register":
-      return handleRegister(rest);
+      return handleRegister();
+    case "catalog":
+      return handleCatalog(rest);
     case "customize":
       return rest[0] === "resolve" ? handleCustomizeResolve(rest.slice(1)) : null;
     case "hook":