@delorenj/pjangler 1.5.13 → 1.5.15

package/dist/mcp-server.js

@@ -177,6 +177,41 @@ try {
   }
 });
 
+// src/utils/tree-diff.ts
+import { createHash } from "node:crypto";
+import { lstatSync, readFileSync, readdirSync, readlinkSync } from "node:fs";
+import { join as join2, relative } from "node:path";
+function snapshotTree(root, current = root, snapshot = /* @__PURE__ */ new Map()) {
+  let stat;
+  try {
+    stat = lstatSync(current);
+  } catch (error) {
+    if (error.code === "ENOENT") return snapshot;
+    throw error;
+  }
+  const rel = relative(root, current) || ".";
+  if (rel === ".git" || rel.startsWith(`.git${process.platform === "win32" ? "\\" : "/"}`)) return snapshot;
+  if (stat.isSymbolicLink()) {
+    snapshot.set(rel, `link:${readlinkSync(current)}`);
+  } else if (stat.isFile()) {
+    snapshot.set(rel, `file:${createHash("sha256").update(readFileSync(current)).digest("hex")}:${stat.mode & 4095}`);
+  } else if (stat.isDirectory()) {
+    snapshot.set(rel, `dir:${stat.mode & 4095}`);
+    for (const name of readdirSync(current)) snapshotTree(root, join2(current, name), snapshot);
+  } else {
+    snapshot.set(rel, `other:${stat.mode}`);
+  }
+  return snapshot;
+}
+function changedTreePaths(root, before, after) {
+  return [.../* @__PURE__ */ new Set([...before.keys(), ...after.keys()])].filter((path) => before.get(path) !== after.get(path)).map((path) => join2(root, path)).sort();
+}
+var init_tree_diff = __esm({
+  "src/utils/tree-diff.ts"() {
+    "use strict";
+  }
+});
+
 // src/notebook/types.ts
 function notebookCredentialMaterialPath(value) {
   const seen = /* @__PURE__ */ new WeakSet();
@@ -258,7 +293,7 @@ var init_types = __esm({
 
 // src/project/notebookSettingsValidation.ts
 import { isIP } from "node:net";
-import { isAbsolute as isAbsolute2 } from "node:path";
+import { isAbsolute as isAbsolute3 } from "node:path";
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -315,7 +350,7 @@ function validateGlobalNotebookConfig(value) {
   if (limits.lease_seconds * 1e3 <= limits.overall_timeout_ms) throw new Error("Project registry notebook lease_seconds must exceed one request timeout");
   if (isRecord(value.defaults) && value.defaults.overview_max_chars !== void 0 && Number(value.defaults.overview_max_chars) > limits.note_max_bytes) throw new Error("Project registry notebook overview_max_chars exceeds note_max_bytes");
   if (value.summarizer !== void 0) {
-    if (!isRecord(value.summarizer) || typeof value.summarizer.executable !== "string" || !isAbsolute2(value.summarizer.executable) || value.summarizer.executable.includes("\0") || Buffer.byteLength(value.summarizer.executable, "utf8") > 1024) throw new Error("Project registry notebook.summarizer executable must be a bounded absolute path");
+    if (!isRecord(value.summarizer) || typeof value.summarizer.executable !== "string" || !isAbsolute3(value.summarizer.executable) || value.summarizer.executable.includes("\0") || Buffer.byteLength(value.summarizer.executable, "utf8") > 1024) throw new Error("Project registry notebook.summarizer executable must be a bounded absolute path");
     if (value.summarizer.args !== void 0 && (!Array.isArray(value.summarizer.args) || value.summarizer.args.length > 32 || value.summarizer.args.some((entry) => typeof entry !== "string" || entry.includes("\0") || Buffer.byteLength(entry, "utf8") > 1024))) throw new Error("Project registry notebook.summarizer args must be bounded strings");
   }
 }
@@ -334,7 +369,7 @@ var init_executionBinding = __esm({
 });
 
 // src/project/manifestIndex.ts
-import { basename as basename4, dirname as dirname6, join as join6, resolve as resolve6 } from "node:path";
+import { basename as basename4, dirname as dirname6, join as join8, resolve as resolve7 } from "node:path";
 function normalizeProjectId2(value) {
   try {
     return normalizeProjectId(value);
@@ -380,53 +415,23 @@ var init_manifestIndex = __esm({
   }
 });
 
-// src/utils/tree-diff.ts
-import { createHash as createHash3 } from "node:crypto";
-import { existsSync as existsSync4, lstatSync as lstatSync5, readFileSync as readFileSync4, readdirSync as readdirSync4, readlinkSync as readlinkSync4 } from "node:fs";
-import { join as join7, relative as relative5 } from "node:path";
-function snapshotTree(root, current = root, snapshot = /* @__PURE__ */ new Map()) {
-  if (!existsSync4(current)) return snapshot;
-  const rel = relative5(root, current) || ".";
-  if (rel === ".git" || rel.startsWith(`.git${process.platform === "win32" ? "\\" : "/"}`)) return snapshot;
-  const stat = lstatSync5(current);
-  if (stat.isSymbolicLink()) {
-    snapshot.set(rel, `link:${readlinkSync4(current)}`);
-  } else if (stat.isFile()) {
-    snapshot.set(rel, `file:${createHash3("sha256").update(readFileSync4(current)).digest("hex")}:${stat.mode & 511}`);
-  } else if (stat.isDirectory()) {
-    snapshot.set(rel, `dir:${stat.mode & 511}`);
-    for (const name of readdirSync4(current)) snapshotTree(root, join7(current, name), snapshot);
-  } else {
-    snapshot.set(rel, `other:${stat.mode}`);
-  }
-  return snapshot;
-}
-function changedTreePaths(root, before, after) {
-  return [.../* @__PURE__ */ new Set([...before.keys(), ...after.keys()])].filter((path) => path !== "." && before.get(path) !== after.get(path)).map((path) => join7(root, path)).sort();
-}
-var init_tree_diff = __esm({
-  "src/utils/tree-diff.ts"() {
-    "use strict";
-  }
-});
-
 // src/lifecycle/preflight.ts
 import { createHash as createHash4 } from "node:crypto";
-import { accessSync, constants, existsSync as existsSync5, lstatSync as lstatSync6, readFileSync as readFileSync5, readdirSync as readdirSync5, realpathSync as realpathSync4, statSync as statSync2 } from "node:fs";
+import { accessSync, constants, existsSync as existsSync5, lstatSync as lstatSync7, readFileSync as readFileSync6, readdirSync as readdirSync5, realpathSync as realpathSync4, statSync as statSync2 } from "node:fs";
 import { tmpdir, userInfo } from "node:os";
-import { basename as basename5, delimiter, dirname as dirname7, isAbsolute as isAbsolute3, join as join8, relative as relative6, resolve as resolve7 } from "node:path";
+import { basename as basename5, delimiter, dirname as dirname7, isAbsolute as isAbsolute4, join as join9, relative as relative6, resolve as resolve8 } from "node:path";
 import YAML3 from "yaml";
 function containedBy(parent, candidate) {
-  const rel = relative6(resolve7(parent), resolve7(candidate));
-  return rel === "" || !rel.startsWith("..") && !isAbsolute3(rel);
+  const rel = relative6(resolve8(parent), resolve8(candidate));
+  return rel === "" || !rel.startsWith("..") && !isAbsolute4(rel);
 }
 function accountMiseShimsDir(home) {
-  return resolve7(join8(home, ".local", "share", "mise", "shims"));
+  return resolve8(join9(home, ".local", "share", "mise", "shims"));
 }
 function inactiveMiseShim(candidate, shimsDir) {
   if (dirname7(candidate) !== shimsDir) return void 0;
   try {
-    if (!lstatSync6(candidate).isSymbolicLink()) return void 0;
+    if (!lstatSync7(candidate).isSymbolicLink()) return void 0;
     const realPath = realpathSync4(candidate);
     if (basename5(realPath) !== "mise") return void 0;
     return { path: candidate, realPath, reason: "inactive-mise-shim" };
@@ -438,10 +443,10 @@ function resolveCopierOnPath(env2, shimsDir) {
   const skipped = [];
   for (const rawEntry of (env2.PATH ?? "").split(delimiter)) {
     const entry = rawEntry || process.cwd();
-    const candidate = resolve7(entry, process.platform === "win32" ? "copier.exe" : "copier");
+    const candidate = resolve8(entry, process.platform === "win32" ? "copier.exe" : "copier");
     try {
       accessSync(candidate, constants.X_OK);
-      const stat = lstatSync6(candidate);
+      const stat = lstatSync7(candidate);
       if (!stat.isFile() && !stat.isSymbolicLink()) continue;
     } catch {
       continue;
@@ -459,10 +464,10 @@ function describeSkipped(skipped) {
   return skipped.map((entry) => `${entry.path} -> ${entry.realPath}`).join(", ");
 }
 function sha256(path) {
-  return createHash4("sha256").update(readFileSync5(path)).digest("base64url");
+  return createHash4("sha256").update(readFileSync6(path)).digest("base64url");
 }
 function fingerprint(path) {
-  const absolute = resolve7(path);
+  const absolute = resolve8(path);
   const realPath = realpathSync4(absolute);
   const stat = statSync2(realPath);
   if (!stat.isFile()) throw new Error(`${absolute} is not a regular file`);
@@ -497,17 +502,17 @@ function sameFingerprint(expected) {
 function consoleScriptContract(path) {
   let text;
   try {
-    text = readFileSync5(path, "utf8").slice(0, 32 * 1024);
+    text = readFileSync6(path, "utf8").slice(0, 32 * 1024);
   } catch (error) {
     return { ok: false, error: `cannot read Copier launcher: ${error instanceof Error ? error.message : String(error)}` };
   }
   const firstLine = text.split(/\r?\n/, 1)[0] ?? "";
   if (!firstLine.startsWith("#!")) return { ok: false, error: "Copier launcher has no executable shebang" };
   const shebang = firstLine.slice(2).trim().split(/\s+/);
-  if (shebang.length !== 1 || !isAbsolute3(shebang[0] ?? "")) {
+  if (shebang.length !== 1 || !isAbsolute4(shebang[0] ?? "")) {
     return { ok: false, error: "Copier launcher must use one absolute Python interpreter" };
   }
-  const interpreterPath = resolve7(shebang[0]);
+  const interpreterPath = resolve8(shebang[0]);
   const interpreter = basename5(interpreterPath);
   if (!/^python(?:\d+(?:\.\d+)*)?$/.test(interpreter)) {
     return { ok: false, error: "Copier launcher is not an absolute Python console script" };
@@ -519,16 +524,16 @@ function consoleScriptContract(path) {
 }
 function defaultUvToolRoots(home) {
   return [
-    join8(home, ".local", "share", "uv", "tools", "copier"),
-    join8(home, "Library", "Application Support", "uv", "tools", "copier")
-  ].map((path) => resolve7(path));
+    join9(home, ".local", "share", "uv", "tools", "copier"),
+    join9(home, "Library", "Application Support", "uv", "tools", "copier")
+  ].map((path) => resolve8(path));
 }
 function locateUvSitePackages(toolRoot) {
-  const lib = join8(toolRoot, "lib");
+  const lib = join9(toolRoot, "lib");
   const candidates = [];
   for (const entry of readdirSync5(lib, { withFileTypes: true })) {
     if (!entry.isDirectory() || !/^python\d+(?:\.\d+)*$/.test(entry.name)) continue;
-    const sitePackages = join8(lib, entry.name, "site-packages");
+    const sitePackages = join9(lib, entry.name, "site-packages");
     if (existsSync5(sitePackages)) candidates.push(sitePackages);
   }
   if (candidates.length !== 1) throw new Error(`expected one UV Copier site-packages directory, found ${candidates.length}`);
@@ -545,15 +550,15 @@ function parseRecordLine(line) {
   };
 }
 function attestUvCopier(candidate, realCandidate, home) {
-  const toolRoot = defaultUvToolRoots(home).find((root) => realCandidate === join8(root, "bin", "copier"));
+  const toolRoot = defaultUvToolRoots(home).find((root) => realCandidate === join9(root, "bin", "copier"));
   if (!toolRoot) {
     return { ok: false, error: `refusing untrusted PATH-shadowed Copier executable: ${candidate}` };
   }
   const supportedEntries = new Set([
-    join8(home, ".local", "bin", "copier"),
-    join8(toolRoot, "bin", "copier")
-  ].map((path) => resolve7(path)));
-  if (!supportedEntries.has(resolve7(candidate))) {
+    join9(home, ".local", "bin", "copier"),
+    join9(toolRoot, "bin", "copier")
+  ].map((path) => resolve8(path)));
+  if (!supportedEntries.has(resolve8(candidate))) {
     return { ok: false, error: `refusing non-canonical UV Copier entry point: ${candidate}` };
   }
   try {
@@ -561,43 +566,43 @@ function attestUvCopier(candidate, realCandidate, home) {
     if (!launcher.ok || !launcher.interpreter) {
       return { ...launcher, executable: realCandidate, realExecutable: realCandidate };
     }
-    const expectedInterpreter = join8(toolRoot, "bin", basename5(launcher.interpreter));
-    if (resolve7(launcher.interpreter) !== resolve7(expectedInterpreter)) {
+    const expectedInterpreter = join9(toolRoot, "bin", basename5(launcher.interpreter));
+    if (resolve8(launcher.interpreter) !== resolve8(expectedInterpreter)) {
       return { ok: false, error: "UV Copier launcher interpreter is outside the attested tool environment" };
     }
     const interpreterReal = realpathSync4(launcher.interpreter);
     const uvPythonRoots = [
-      join8(home, ".local", "share", "uv", "python"),
-      join8(home, "Library", "Application Support", "uv", "python")
+      join9(home, ".local", "share", "uv", "python"),
+      join9(home, "Library", "Application Support", "uv", "python")
     ];
     if (!uvPythonRoots.some((root) => containedBy(root, interpreterReal))) {
       return { ok: false, error: "UV Copier interpreter is not managed by the canonical UV Python installation" };
     }
-    const receiptPath = join8(toolRoot, "uv-receipt.toml");
-    const receipt = readFileSync5(receiptPath, "utf8");
+    const receiptPath = join9(toolRoot, "uv-receipt.toml");
+    const receipt = readFileSync6(receiptPath, "utf8");
     if (!/requirements\s*=\s*\[[\s\S]*?name\s*=\s*["']copier["']/.test(receipt) || !/entrypoints\s*=\s*\[[\s\S]*?name\s*=\s*["']copier["'][\s\S]*?from\s*=\s*["']copier["']/.test(receipt)) {
       return { ok: false, error: "UV tool receipt does not bind the copier entry point to the Copier package" };
     }
     const sitePackages = locateUvSitePackages(toolRoot);
-    const distInfos = readdirSync5(sitePackages, { withFileTypes: true }).filter((entry) => entry.isDirectory() && /^copier-[^-]+\.dist-info$/i.test(entry.name)).map((entry) => join8(sitePackages, entry.name));
+    const distInfos = readdirSync5(sitePackages, { withFileTypes: true }).filter((entry) => entry.isDirectory() && /^copier-[^-]+\.dist-info$/i.test(entry.name)).map((entry) => join9(sitePackages, entry.name));
     if (distInfos.length !== 1) {
       return { ok: false, error: `expected one installed Copier distribution, found ${distInfos.length}` };
     }
     const distInfo = realpathSync4(distInfos[0]);
-    const metadataPath = join8(distInfo, "METADATA");
-    const entryPointsPath = join8(distInfo, "entry_points.txt");
-    const recordPath = join8(distInfo, "RECORD");
-    const metadata = readFileSync5(metadataPath, "utf8");
+    const metadataPath = join9(distInfo, "METADATA");
+    const entryPointsPath = join9(distInfo, "entry_points.txt");
+    const recordPath = join9(distInfo, "RECORD");
+    const metadata = readFileSync6(metadataPath, "utf8");
     const name = metadata.match(/^Name:\s*(.+)$/mi)?.[1]?.trim();
     const version = metadata.match(/^Version:\s*(.+)$/mi)?.[1]?.trim();
     if (name?.toLowerCase() !== "copier" || !version || !/^9(?:\.|$)/.test(version)) {
       return { ok: false, error: "installed distribution is not a Copier 9 package" };
     }
-    const entryPoints = readFileSync5(entryPointsPath, "utf8");
+    const entryPoints = readFileSync6(entryPointsPath, "utf8");
     if (!/^copier\s*=\s*copier\.__main__:CopierApp\.run\s*$/m.test(entryPoints)) {
       return { ok: false, error: "installed Copier distribution has an unexpected console entry point" };
     }
-    const recordEntries = readFileSync5(recordPath, "utf8").split(/\r?\n/).map(parseRecordLine).filter((entry) => Boolean(entry));
+    const recordEntries = readFileSync6(recordPath, "utf8").split(/\r?\n/).map(parseRecordLine).filter((entry) => Boolean(entry));
     const selected = recordEntries.filter((entry) => {
       const normalized = entry.relativePath.replaceAll("\\", "/");
       return normalized.startsWith("copier/") || normalized === `${basename5(distInfo)}/METADATA` || normalized === `${basename5(distInfo)}/entry_points.txt` || normalized === "../../../bin/copier";
@@ -607,7 +612,7 @@ function attestUvCopier(candidate, realCandidate, home) {
     }
     const attestedFiles = /* @__PURE__ */ new Map();
     for (const entry of selected) {
-      const path = resolve7(sitePackages, entry.relativePath);
+      const path = resolve8(sitePackages, entry.relativePath);
       const allowed = path === realCandidate || containedBy(sitePackages, path);
       if (!allowed) return { ok: false, error: `Copier RECORD path escapes the tool environment: ${entry.relativePath}` };
       const actualDigest = sha256(path);
@@ -615,14 +620,14 @@ function attestUvCopier(candidate, realCandidate, home) {
       if (actualDigest !== entry.digest || actualSize !== entry.size) {
         return { ok: false, error: `Copier RECORD integrity mismatch: ${entry.relativePath}` };
       }
-      attestedFiles.set(resolve7(path), fingerprint(path));
+      attestedFiles.set(resolve8(path), fingerprint(path));
     }
-    for (const path of [realCandidate, join8(toolRoot, "pyvenv.cfg"), receiptPath, metadataPath, entryPointsPath, recordPath]) {
-      attestedFiles.set(resolve7(path), fingerprint(path));
+    for (const path of [realCandidate, join9(toolRoot, "pyvenv.cfg"), receiptPath, metadataPath, entryPointsPath, recordPath]) {
+      attestedFiles.set(resolve8(path), fingerprint(path));
     }
     const identity = {
       executable: realCandidate,
-      resolvedFrom: resolve7(candidate),
+      resolvedFrom: resolve8(candidate),
       layout: "uv-tool",
       version,
       toolRoot,
@@ -641,7 +646,7 @@ function attestUvCopier(candidate, realCandidate, home) {
   }
 }
 function verifyTrustedCopierIdentity(identity) {
-  if (!isAbsolute3(identity.executable) || resolve7(identity.executable) !== resolve7(identity.files.find((file) => file.path === identity.executable)?.path ?? "")) {
+  if (!isAbsolute4(identity.executable) || resolve8(identity.executable) !== resolve8(identity.files.find((file) => file.path === identity.executable)?.path ?? "")) {
     return { ok: false, error: "trusted Copier identity has no canonical absolute launcher" };
   }
   const interpreter = sameFingerprint(identity.interpreter);
@@ -654,9 +659,9 @@ function verifyTrustedCopierIdentity(identity) {
 }
 function preflightTrustedCopier(options) {
   const env2 = options.env ?? process.env;
-  const home = resolve7(options.homeDir ?? userInfo().homedir);
-  const temporary = resolve7(options.temporaryDir ?? tmpdir());
-  const target = resolve7(options.targetDir);
+  const home = resolve8(options.homeDir ?? userInfo().homedir);
+  const temporary = resolve8(options.temporaryDir ?? tmpdir());
+  const target = resolve8(options.targetDir);
   const { candidate, skipped } = resolveCopierOnPath(env2, accountMiseShimsDir(home));
   for (const shim of skipped) {
     for (const [label, root] of [["target", target], ["temporary", temporary]]) {
@@ -692,18 +697,18 @@ function regularContainedFile(root, path, label) {
     const rootReal = realpathSync4(root);
     const fileReal = realpathSync4(path);
     if (!containedBy(rootReal, fileReal)) return { ok: false, error: `${label} escapes its vendored template root` };
-    if (!lstatSync6(path).isFile()) return { ok: false, error: `${label} is not a regular file` };
+    if (!lstatSync7(path).isFile()) return { ok: false, error: `${label} is not a regular file` };
     return { ok: true };
   } catch (error) {
     return { ok: false, error: `${label} is unavailable: ${error instanceof Error ? error.message : String(error)}` };
   }
 }
 function parseCopierConfig(templateRoot, label) {
-  const configPath = join8(templateRoot, "copier.yml");
+  const configPath = join9(templateRoot, "copier.yml");
   const file = regularContainedFile(templateRoot, configPath, `${label} copier.yml`);
   if (!file.ok) return { result: file };
   try {
-    const parsed = YAML3.parse(readFileSync5(configPath, "utf8"));
+    const parsed = YAML3.parse(readFileSync6(configPath, "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
       return { result: { ok: false, error: `${label} copier.yml must contain a mapping` } };
     }
@@ -721,13 +726,13 @@ function parseCopierConfig(templateRoot, label) {
 }
 function requireFiles(templateRoot, files, label) {
   for (const rel of files) {
-    const result2 = regularContainedFile(templateRoot, join8(templateRoot, rel), `${label} ${rel}`);
+    const result2 = regularContainedFile(templateRoot, join9(templateRoot, rel), `${label} ${rel}`);
     if (!result2.ok) return result2;
   }
   return { ok: true };
 }
 function preflightCommonProjectTemplate(pjanglerRoot) {
-  const templateRoot = join8(resolve7(pjanglerRoot), "templates", "commonproject");
+  const templateRoot = join9(resolve8(pjanglerRoot), "templates", "commonproject");
   const parsed = parseCopierConfig(templateRoot, "CommonProject template");
   if (!parsed.result.ok) return parsed.result;
   const files = requireFiles(templateRoot, [
@@ -738,7 +743,7 @@ function preflightCommonProjectTemplate(pjanglerRoot) {
     "template/mise.toml.jinja"
   ], "CommonProject template");
   if (!files.ok) return files;
-  const projectJson = readFileSync5(join8(templateRoot, "template", ".project.json.jinja"), "utf8");
+  const projectJson = readFileSync6(join9(templateRoot, "template", ".project.json.jinja"), "utf8");
   for (const key of ["project_name", "repo_path", "ticket_provider", "agents"]) {
     if (!projectJson.includes(`"${key}"`)) return { ok: false, error: `CommonProject projection is missing ${key}` };
   }
@@ -763,12 +768,12 @@ var init_preflight = __esm({
 });
 
 // src/project/boardUrl.ts
-import { existsSync as existsSync6, readFileSync as readFileSync6, statSync as statSync3 } from "node:fs";
-import { dirname as dirname8, isAbsolute as isAbsolute4, join as join9, resolve as resolve8 } from "node:path";
+import { existsSync as existsSync6, readFileSync as readFileSync7, statSync as statSync3 } from "node:fs";
+import { dirname as dirname8, isAbsolute as isAbsolute5, join as join10, resolve as resolve9 } from "node:path";
 function findProjectRoot(from) {
-  let dir = resolve8(from);
+  let dir = resolve9(from);
   for (; ; ) {
-    if (existsSync6(join9(dir, ".project.json"))) return dir;
+    if (existsSync6(join10(dir, ".project.json"))) return dir;
     const parent = dirname8(dir);
     if (parent === dir) return void 0;
     dir = parent;
@@ -781,8 +786,8 @@ var init_boardUrl = __esm({
 });
 
 // src/utils/version.ts
-import { readFileSync as readFileSync7 } from "node:fs";
-import { dirname as dirname9, join as join10 } from "node:path";
+import { readFileSync as readFileSync8 } from "node:fs";
+import { dirname as dirname9, join as join11 } from "node:path";
 import { fileURLToPath } from "node:url";
 var PJANGLER_VERSION;
 var init_version = __esm({
@@ -793,7 +798,7 @@ var init_version = __esm({
         let dir = dirname9(fileURLToPath(import.meta.url));
         for (let i = 0; i < 4; i++) {
           try {
-            const raw = readFileSync7(join10(dir, "package.json"), "utf8");
+            const raw = readFileSync8(join11(dir, "package.json"), "utf8");
             return JSON.parse(raw).version ?? "0.0.0";
           } catch {
             const parent = dirname9(dir);
@@ -822,10 +827,10 @@ var init_boardQuery = __esm({
 });
 
 // src/project/index.ts
-import { spawnSync as spawnSync4 } from "node:child_process";
-import { chmodSync as chmodSync2, closeSync, copyFileSync as copyFileSync2, existsSync as existsSync7, fchmodSync, fsyncSync, lstatSync as lstatSync7, mkdirSync as mkdirSync4, mkdtempSync, openSync, readFileSync as readFileSync8, realpathSync as realpathSync5, renameSync as renameSync3, rmSync as rmSync3, statSync as statSync4, unlinkSync as unlinkSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { spawnSync as spawnSync5 } from "node:child_process";
+import { chmodSync as chmodSync2, closeSync, copyFileSync as copyFileSync2, existsSync as existsSync7, fchmodSync, fsyncSync, lstatSync as lstatSync8, mkdirSync as mkdirSync4, mkdtempSync, openSync, readFileSync as readFileSync9, realpathSync as realpathSync5, renameSync as renameSync3, rmSync as rmSync3, statSync as statSync4, unlinkSync as unlinkSync4, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir as homedir3, tmpdir as tmpdir2 } from "node:os";
-import { basename as basename6, delimiter as delimiter2, dirname as dirname10, isAbsolute as isAbsolute5, join as join11, relative as relative7, resolve as resolve9, sep as sep2, win32 } from "node:path";
+import { basename as basename6, delimiter as delimiter2, dirname as dirname10, isAbsolute as isAbsolute6, join as join12, relative as relative7, resolve as resolve10, sep as sep2, win32 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import YAML4 from "yaml";
 function normalizeProjectType(value, label = "Project type") {
@@ -835,7 +840,7 @@ function normalizeProjectType(value, label = "Project type") {
 }
 function looksLikeObsidianPlugin(dir) {
   try {
-    const manifest = JSON.parse(readFileSync8(join11(dir, "manifest.json"), "utf8"));
+    const manifest = JSON.parse(readFileSync9(join12(dir, "manifest.json"), "utf8"));
     return isRecord2(manifest) && typeof manifest.id === "string" && typeof manifest.minAppVersion === "string";
   } catch {
     return false;
@@ -843,10 +848,10 @@ function looksLikeObsidianPlugin(dir) {
 }
 function assertTemplateOffersProjectType(pjanglerRoot, projectType) {
   if (projectType === "base") return;
-  const copierYml = join11(pjanglerRoot, "templates", "commonproject", "copier.yml");
+  const copierYml = join12(pjanglerRoot, "templates", "commonproject", "copier.yml");
   let choices;
   try {
-    const parsed = YAML4.parse(readFileSync8(copierYml, "utf8"));
+    const parsed = YAML4.parse(readFileSync9(copierYml, "utf8"));
     choices = isRecord2(parsed) && isRecord2(parsed.project_type) ? parsed.project_type.choices : void 0;
   } catch {
     choices = void 0;
@@ -857,7 +862,7 @@ function assertTemplateOffersProjectType(pjanglerRoot, projectType) {
   }
 }
 function operatorDisplayName(cwd) {
-  const result2 = spawnSync4("git", ["config", "--get", "user.name"], { cwd: existsSync7(cwd) ? cwd : void 0, encoding: "utf8", timeout: 5e3 });
+  const result2 = spawnSync5("git", ["config", "--get", "user.name"], { cwd: existsSync7(cwd) ? cwd : void 0, encoding: "utf8", timeout: 5e3 });
   return result2.status === 0 ? result2.stdout.trim() : "";
 }
 function providerAssignsIdentifiers(type) {
@@ -869,9 +874,9 @@ function carriedAutomation(automation) {
   return Object.keys(rest).length ? { automation: rest } : {};
 }
 function synchronizeCopierIdentity(manifestPath, manifest) {
-  const answersPath = join11(dirname10(manifestPath), ".copier-answers.yml");
+  const answersPath = join12(dirname10(manifestPath), ".copier-answers.yml");
   if (!existsSync7(answersPath)) return [];
-  const current = readFileSync8(answersPath, "utf8");
+  const current = readFileSync9(answersPath, "utf8");
   const document = YAML4.parseDocument(current);
   if (document.errors.length) return [];
   const name = String(document.get("project_name") ?? "");
@@ -888,12 +893,12 @@ function projectRegistryPath(env2 = process.env) {
   return resolveRegistryLocation(void 0, env2);
 }
 function createSafeRecord(entries = []) {
-  const record2 = /* @__PURE__ */ Object.create(null);
-  for (const [key, value] of entries) record2[key] = value;
-  return record2;
+  const record3 = /* @__PURE__ */ Object.create(null);
+  for (const [key, value] of entries) record3[key] = value;
+  return record3;
 }
-function getOwnRecordValue(record2, key) {
-  return Object.hasOwn(record2, key) ? record2[key] : void 0;
+function getOwnRecordValue(record3, key) {
+  return Object.hasOwn(record3, key) ? record3[key] : void 0;
 }
 function emptyProjectRegistry() {
   return { schema_version: PROJECT_REGISTRY_SCHEMA_VERSION, projects: createSafeRecord() };
@@ -905,7 +910,7 @@ function loadProjectRegistry(path = projectRegistryPath()) {
     return registry2;
   }
   if (!existsSync7(path)) return emptyProjectRegistry();
-  const raw = YAML4.parse(readFileSync8(path, "utf8"));
+  const raw = YAML4.parse(readFileSync9(path, "utf8"));
   if (raw == null) return emptyProjectRegistry();
   if (!isRecord2(raw)) throw new Error(`Project registry must be a mapping: ${path}`);
   const registry = raw;
@@ -995,10 +1000,10 @@ function saveProjectRegistry(registry, path = projectRegistryPath()) {
   let text;
   let mode = 420;
   if (existsSync7(path)) {
-    const stat = lstatSync7(path);
+    const stat = lstatSync8(path);
     if (!stat.isFile() || stat.isSymbolicLink()) throw new Error(`Project registry must be a regular file: ${path}`);
     mode = stat.mode & 511;
-    const current = readFileSync8(path, "utf8");
+    const current = readFileSync9(path, "utf8");
     const document = YAML4.parseDocument(current);
     if (document.errors.length) throw new Error(`Project registry YAML is invalid: ${path}`);
     setYamlLeaf(document, ["schema_version"], registry.schema_version);
@@ -1065,7 +1070,7 @@ function validateProjectRegistry(registry) {
     validateProjectRecord(project, slug);
     if (slugs.has(project.slug)) throw new Error(`Duplicate project slug: ${project.slug}`);
     slugs.add(project.slug);
-    const repoKey = resolve9(project.repo_path);
+    const repoKey = resolve10(project.repo_path);
     const existingRepoSlug = repoPaths.get(repoKey);
     if (existingRepoSlug && existingRepoSlug !== slug) {
       throw new Error(`Duplicate project repo_path: ${project.repo_path} used by ${existingRepoSlug} and ${slug}`);
@@ -1142,18 +1147,18 @@ function ticketProviderKeyVars(provider, workspace) {
   return ticketProviderKeyGroups(provider, workspace).flat();
 }
 function ticketProviderSecretsPath(env2 = process.env) {
-  const base = env2.XDG_CONFIG_HOME || join11(env2.HOME || homedir3(), ".config");
-  return join11(base, "zshyzsh", "secrets.zsh");
+  const base = env2.XDG_CONFIG_HOME || join12(env2.HOME || homedir3(), ".config");
+  return join12(base, "zshyzsh", "secrets.zsh");
 }
 function ticketProviderFleetEnvPath(env2 = process.env) {
-  return env2.HERMES_FLEET_ENV?.trim() || join11(env2.HOME || homedir3(), ".hermes", "fleet.env");
+  return env2.HERMES_FLEET_ENV?.trim() || join12(env2.HOME || homedir3(), ".hermes", "fleet.env");
 }
 function readShellAssignments(path, keys) {
   const found = {};
   if (!existsSync7(path)) return found;
   let text;
   try {
-    text = readFileSync8(path, "utf8");
+    text = readFileSync9(path, "utf8");
   } catch {
     return found;
   }
@@ -1189,7 +1194,7 @@ function resolveTicketProviderCredentials(input) {
     }
   }
   const candidates = [];
-  if (input.repoPath) candidates.push(join11(input.repoPath, ".env"));
+  if (input.repoPath) candidates.push(join12(input.repoPath, ".env"));
   candidates.push(ticketProviderFleetEnvPath(env2));
   candidates.push(ticketProviderSecretsPath(env2));
   for (const candidate of candidates) {
@@ -1207,19 +1212,19 @@ function resolveTicketProviderAdapter(provider, env2 = process.env) {
   const file = `${provider}.sh`;
   const candidates = [];
   const override = env2[TICKET_PROVIDER_ADAPTERS_ENV];
-  if (override) candidates.push(join11(override, file));
-  const relativeRoot = join11("krebs", "adapters", "tp");
+  if (override) candidates.push(join12(override, file));
+  const relativeRoot = join12("krebs", "adapters", "tp");
   try {
     let dir = dirname10(fileURLToPath2(import.meta.url));
     for (let depth = 0; depth < 8; depth++) {
-      candidates.push(join11(dir, relativeRoot, file));
+      candidates.push(join12(dir, relativeRoot, file));
       const parent = dirname10(dir);
       if (parent === dir) break;
       dir = parent;
     }
   } catch {
   }
-  candidates.push(join11(homedir3(), "code", "33GOD", relativeRoot, file));
+  candidates.push(join12(homedir3(), "code", "33GOD", relativeRoot, file));
   return candidates.find((candidate) => existsSync7(candidate));
 }
 function provisionTicketProviderBoard(action, env2 = process.env) {
@@ -1237,7 +1242,7 @@ function provisionTicketProviderBoard(action, env2 = process.env) {
       ok: true,
       skipped: true,
       logs: [
-        `ticket-provider: ${names} not set; skipping ${provider} board creation (state stays "planned"). Set it in the environment, ${join11(action.repoPath, ".env")}, ${ticketProviderFleetEnvPath(env2)}, or ${ticketProviderSecretsPath(env2)} \u2014 or pass --board-id to link an existing board.`
+        `ticket-provider: ${names} not set; skipping ${provider} board creation (state stays "planned"). Set it in the environment, ${join12(action.repoPath, ".env")}, ${ticketProviderFleetEnvPath(env2)}, or ${ticketProviderSecretsPath(env2)} \u2014 or pass --board-id to link an existing board.`
       ]
     };
   }
@@ -1251,12 +1256,12 @@ function provisionTicketProviderBoard(action, env2 = process.env) {
     };
   }
   const redact = (text) => Object.values(values).reduce((acc, secret) => secret ? acc.split(secret).join("***") : acc, text);
-  const staging = mkdtempSync(join11(tmpdir2(), "pjangler-tp-"));
+  const staging = mkdtempSync(join12(tmpdir2(), "pjangler-tp-"));
   try {
-    const providersDir = join11(staging, ".tp", "adapters");
+    const providersDir = join12(staging, ".tp", "adapters");
     mkdirSync4(providersDir, { recursive: true });
     writeFileSync4(
-      join11(staging, ".project.json"),
+      join12(staging, ".project.json"),
       `${JSON.stringify(
         {
           project_name: action.boardName,
@@ -1275,11 +1280,11 @@ function provisionTicketProviderBoard(action, env2 = process.env) {
 `,
       "utf8"
     );
-    const staged = join11(providersDir, `${provider}.sh`);
+    const staged = join12(providersDir, `${provider}.sh`);
     copyFileSync2(adapter, staged);
     const childEnv = { ...env2, ...values, TICKET_PROVIDER: provider };
     if (provider === "plane" && action.workspace) childEnv.PLANE_WORKSPACE = action.workspace;
-    const result2 = spawnSync4("sh", [staged, "create_board", action.boardName, action.identifier, action.description], {
+    const result2 = spawnSync5("sh", [staged, "create_board", action.boardName, action.identifier, action.description], {
       cwd: existsSync7(action.repoPath) ? action.repoPath : staging,
       encoding: "utf8",
       env: childEnv
@@ -1350,7 +1355,7 @@ function slugifyProjectName(value) {
 }
 function validateSafePathSegment(value, label) {
   const normalized = value.trim();
-  const unsafe = !normalized || normalized !== value || normalized === "." || normalized === ".." || isAbsolute5(normalized) || win32.isAbsolute(normalized) || normalized.includes("/") || normalized.includes("\\") || !SAFE_PATH_SEGMENT.test(normalized);
+  const unsafe = !normalized || normalized !== value || normalized === "." || normalized === ".." || isAbsolute6(normalized) || win32.isAbsolute(normalized) || normalized.includes("/") || normalized.includes("\\") || !SAFE_PATH_SEGMENT.test(normalized);
   if (unsafe) {
     throw new Error(
       `${label} must be a non-empty safe single path segment using letters, numbers, dots, underscores, or hyphens (no dot segments, absolute paths, separators, or traversal)`
@@ -1359,24 +1364,24 @@ function validateSafePathSegment(value, label) {
   return normalized;
 }
 function prospectiveRealPath(path) {
-  let cursor = resolve9(path);
+  let cursor = resolve10(path);
   const suffix = [];
   while (!existsSync7(cursor)) {
     const parent = dirname10(cursor);
-    if (parent === cursor) return resolve9(path);
+    if (parent === cursor) return resolve10(path);
     suffix.unshift(basename6(cursor));
     cursor = parent;
   }
-  return resolve9(realpathSync5(cursor), ...suffix);
+  return resolve10(realpathSync5(cursor), ...suffix);
 }
 function resolveContainedPath(parentDir, candidate, label) {
   const physicalParent = prospectiveRealPath(parentDir);
   const physicalCandidate = prospectiveRealPath(candidate);
   const fromParent = relative7(physicalParent, physicalCandidate);
-  if (!fromParent || fromParent === ".." || fromParent.startsWith(`..${sep2}`) || isAbsolute5(fromParent)) {
-    throw new Error(`${label} must remain contained beneath parent directory ${resolve9(parentDir)}`);
+  if (!fromParent || fromParent === ".." || fromParent.startsWith(`..${sep2}`) || isAbsolute6(fromParent)) {
+    throw new Error(`${label} must remain contained beneath parent directory ${resolve10(parentDir)}`);
   }
-  return resolve9(candidate);
+  return resolve10(candidate);
 }
 function proposeProjectIdentifier(value) {
   const compact = value.replace(/[^A-Za-z0-9]/g, "").toUpperCase();
@@ -1391,7 +1396,7 @@ function resolveAgentHooksLayer2(input, env2 = process.env) {
   const override = env2.PJ_AGENT_HOOKS_LAYER;
   if (override === "0" || override === "false") return false;
   if (override === "1" || override === "true") return true;
-  return !existsSync7(join11(homedir3(), ".agents", "hooks"));
+  return !existsSync7(join12(homedir3(), ".agents", "hooks"));
 }
 function jsonStable(value) {
   return JSON.stringify(value, (_key, item) => isRecord2(item) ? Object.fromEntries(Object.keys(item).sort().map((key) => [key, item[key]])) : item);
@@ -1405,14 +1410,14 @@ function projectRecordEquivalent(a, b) {
 function defaultProjectTargetDir(name, cwd = process.cwd()) {
   const compactName = name.replace(/[^A-Za-z0-9._-]/g, "");
   const safeName = SAFE_PATH_SEGMENT.test(compactName) ? compactName : slugifyProjectName(name);
-  return resolve9(dirname10(resolve9(cwd)), validateSafePathSegment(safeName, "Generated project directory"));
+  return resolve10(dirname10(resolve10(cwd)), validateSafePathSegment(safeName, "Generated project directory"));
 }
 function sourceSkillRoots(env2 = process.env) {
   const configuredRoots = (env2[PROJECT_SOURCE_SKILL_ROOTS_ENV] || "").split(delimiter2).map((root) => root.trim()).filter(Boolean);
   const seen = /* @__PURE__ */ new Set();
   const roots = [];
   for (const root of [...DEFAULT_SOURCE_SKILL_ROOTS, ...configuredRoots]) {
-    const normalized = resolve9(expandHome(root));
+    const normalized = resolve10(expandHome(root));
     if (seen.has(normalized)) continue;
     seen.add(normalized);
     roots.push(normalized);
@@ -1422,12 +1427,12 @@ function sourceSkillRoots(env2 = process.env) {
 function resolveSourceSkillPath(sourceSkill, env2 = process.env) {
   if (!sourceSkill) return void 0;
   const expanded = expandHome(sourceSkill);
-  const direct = resolve9(expanded);
+  const direct = resolve10(expanded);
   if (existsSync7(direct)) return direct;
   const name = basename6(sourceSkill);
   const roots = sourceSkillRoots(env2);
   for (const root of roots) {
-    const candidate = join11(root, name);
+    const candidate = join12(root, name);
     if (existsSync7(candidate)) return candidate;
   }
   const searched = roots.length ? ` Searched roots: ${roots.join(", ")}.` : "";
@@ -1436,9 +1441,9 @@ function resolveSourceSkillPath(sourceSkill, env2 = process.env) {
 }
 function planProjectInit(input) {
   if (!input.name.trim()) throw new Error("Project name is required");
-  const targetDir = resolve9(input.targetDir ?? defaultProjectTargetDir(input.name, input.cwd));
-  const localManifestPath = join11(targetDir, ".project.json");
-  const localManifestContent = existsSync7(localManifestPath) ? readFileSync8(localManifestPath, "utf8") : void 0;
+  const targetDir = resolve10(input.targetDir ?? defaultProjectTargetDir(input.name, input.cwd));
+  const localManifestPath = join12(targetDir, ".project.json");
+  const localManifestContent = existsSync7(localManifestPath) ? readFileSync9(localManifestPath, "utf8") : void 0;
   const localManifest = localManifestContent === void 0 ? void 0 : JSON.parse(localManifestContent);
   const localId = localManifest?.project_id ?? localManifest?.project_slug;
   const slug = normalizeProjectId(input.projectSlug ?? localId ?? slugifyProjectName(input.name));
@@ -1466,7 +1471,7 @@ function planProjectInit(input) {
   const recordedTypeValue = existing?.template?.commonproject?.project_type;
   const recordedType = recordedTypeValue === void 0 ? void 0 : normalizeProjectType(recordedTypeValue, `Recorded project type of ${slug}`);
   const requestedType = input.projectType === void 0 ? void 0 : normalizeProjectType(input.projectType);
-  const freshRender = scaffold && localManifest === void 0 && !existsSync7(join11(targetDir, ".copier-answers.yml"));
+  const freshRender = scaffold && localManifest === void 0 && !existsSync7(join12(targetDir, ".copier-answers.yml"));
   if (requestedType && !freshRender && requestedType !== (recordedType ?? "base")) {
     const adoptingPlugin = !scaffold && recordedType === void 0 && requestedType === "obsidian-plugin" && looksLikeObsidianPlugin(targetDir);
     if (!adoptingPlugin) {
@@ -1532,7 +1537,7 @@ function planProjectInit(input) {
     updated_at: projectRecordEquivalent(existing, candidateProject) ? existing.updated_at : now
   };
   validateNoDuplicateProject(registry, project, overwrite);
-  const pjanglerRoot = resolve9(input.pjanglerRoot ?? resolvePjanglerRoot());
+  const pjanglerRoot = resolve10(input.pjanglerRoot ?? resolvePjanglerRoot());
   const manifest = projectManifestFromRegistryProject(project);
   const apply = input.apply ?? false;
   const live = input.live ?? false;
@@ -1564,7 +1569,7 @@ function planProjectInit(input) {
     }));
   }
   actions.push(
-    { kind: "project.write-manifest", path: join11(targetDir, ".project.json"), manifest, expectedContent: localManifestContent },
+    { kind: "project.write-manifest", path: join12(targetDir, ".project.json"), manifest, expectedContent: localManifestContent },
     {
       kind: "ticket-provider.create-or-link",
       enabled: boardEnabled,
@@ -1619,12 +1624,12 @@ function linkTicketProviderBoard(plan, action, boardId, identifier, now = /* @__
   plan.manifest.ticket_provider = manifestProvider;
   action.boardId = boardId;
   action.state = manifestProvider.state;
-  const manifestPath = join11(action.repoPath, ".project.json");
+  const manifestPath = join12(action.repoPath, ".project.json");
   let next;
   if (existsSync7(manifestPath)) {
     let existing = {};
     try {
-      const parsed = JSON.parse(readFileSync8(manifestPath, "utf8"));
+      const parsed = JSON.parse(readFileSync9(manifestPath, "utf8"));
       if (isRecord2(parsed)) existing = parsed;
     } catch {
       existing = {};
@@ -1637,7 +1642,7 @@ function linkTicketProviderBoard(plan, action, boardId, identifier, now = /* @__
   }
   const text = `${JSON.stringify(next, null, 2)}
 `;
-  if (!existsSync7(manifestPath) || readFileSync8(manifestPath, "utf8") !== text) {
+  if (!existsSync7(manifestPath) || readFileSync9(manifestPath, "utf8") !== text) {
     writeFileSync4(manifestPath, text, "utf8");
     return [manifestPath];
   }
@@ -1677,7 +1682,7 @@ async function executeProjectInitPlan(plan, options = {}) {
         copierEnv.PYTHONSAFEPATH = "1";
       }
       copierEnv.MISE_YES = "1";
-      const result2 = spawnSync4(copierExecutable, action.command.slice(1), {
+      const result2 = spawnSync5(copierExecutable, action.command.slice(1), {
         encoding: "utf8",
         cwd: action.cwd,
         env: copierEnv
@@ -1698,14 +1703,14 @@ async function executeProjectInitPlan(plan, options = {}) {
         break;
       }
       const projectType = action.data.project_type ?? "base";
-      const missing = (PROJECT_TYPE_SENTINELS[projectType] ?? []).filter((rel) => !existsSync7(join11(action.targetDir, rel)));
+      const missing = (PROJECT_TYPE_SENTINELS[projectType] ?? []).filter((rel) => !existsSync7(join12(action.targetDir, rel)));
       if (missing.length) {
         errors.push(`copier rendered no ${projectType} project: ${missing.join(", ")} missing from ${action.targetDir}`);
         break;
       }
       if (projectType !== "base") logs.push(`commonproject: rendered as ${projectType}`);
     } else if (action.kind === "project.write-manifest") {
-      if (action.expectedContent !== void 0 && (!existsSync7(action.path) || readFileSync8(action.path, "utf8") !== action.expectedContent)) {
+      if (action.expectedContent !== void 0 && (!existsSync7(action.path) || readFileSync9(action.path, "utf8") !== action.expectedContent)) {
         errors.push(`Manifest changed after planning: ${action.path}; re-plan before applying`);
         break;
       }
@@ -1713,7 +1718,7 @@ async function executeProjectInitPlan(plan, options = {}) {
       let value = action.manifest;
       if (existsSync7(action.path)) {
         try {
-          const currentValue = JSON.parse(readFileSync8(action.path, "utf8"));
+          const currentValue = JSON.parse(readFileSync9(action.path, "utf8"));
           if (isRecord2(currentValue)) {
             const currentNotebook = isRecord2(currentValue.notebook) ? currentValue.notebook : {};
             const desiredNotebook = isRecord2(value.notebook) ? value.notebook : {};
@@ -1741,7 +1746,7 @@ async function executeProjectInitPlan(plan, options = {}) {
       value.project_id = normalizeProjectId(value.project_id ?? action.manifest.project_id);
       const next = `${JSON.stringify(value, null, 2)}
 `;
-      const current = existsSync7(action.path) ? readFileSync8(action.path, "utf8") : void 0;
+      const current = existsSync7(action.path) ? readFileSync9(action.path, "utf8") : void 0;
       if (current !== next) {
         writeFileSync4(action.path, next, "utf8");
         changedFiles.push(action.path);
@@ -1824,7 +1829,7 @@ function getProject(registry, slug) {
   return project;
 }
 function buildCommonProjectCopierAction(input) {
-  const templateDir = join11(input.pjanglerRoot, "templates", "commonproject");
+  const templateDir = join12(input.pjanglerRoot, "templates", "commonproject");
   const data = {
     project_name: input.projectName,
     project_description: input.projectDescription ?? "",
@@ -1855,19 +1860,19 @@ function buildCommonProjectCopierAction(input) {
 function resolvePjanglerRoot() {
   let dir = dirname10(fileURLToPath2(import.meta.url));
   while (dir !== dirname10(dir)) {
-    if (existsSync7(join11(dir, "package.json")) && existsSync7(join11(dir, "templates", "commonproject", "copier.yml"))) return dir;
+    if (existsSync7(join12(dir, "package.json")) && existsSync7(join12(dir, "templates", "commonproject", "copier.yml"))) return dir;
     dir = dirname10(dir);
   }
-  return resolve9(process.cwd());
+  return resolve10(process.cwd());
 }
 function validateNoDuplicateProject(registry, project, overwrite) {
   const existingSameSlug = getOwnRecordValue(registry.projects, project.slug);
-  if (existingSameSlug && !overwrite && resolve9(existingSameSlug.repo_path) !== resolve9(project.repo_path)) {
+  if (existingSameSlug && !overwrite && resolve10(existingSameSlug.repo_path) !== resolve10(project.repo_path)) {
     throw new Error(`Project slug already exists in registry: ${project.slug}`);
   }
   for (const [slug, existing] of Object.entries(registry.projects)) {
     if (slug === project.slug) continue;
-    if (resolve9(existing.repo_path) === resolve9(project.repo_path)) {
+    if (resolve10(existing.repo_path) === resolve10(project.repo_path)) {
       throw new Error(`Project repo_path already registered by ${slug}: ${project.repo_path}`);
     }
     if (ticketProviderScope(existing.ticket_provider) !== ticketProviderScope(project.ticket_provider)) continue;
@@ -1932,7 +1937,7 @@ function validateProjectRecord(project, key) {
 }
 function expandHome(path) {
   if (path === "~") return homedir3();
-  if (path.startsWith("~/")) return join11(homedir3(), path.slice(2));
+  if (path.startsWith("~/")) return join12(homedir3(), path.slice(2));
   return path;
 }
 function isRecord2(value) {
@@ -1959,7 +1964,7 @@ var init_project = __esm({
       "obsidian-plugin": ["typescript", "javascript"]
     };
     PROJECT_TYPE_SENTINELS = {
-      "obsidian-plugin": ["manifest.json", join11("src", "main.ts")]
+      "obsidian-plugin": ["manifest.json", join12("src", "main.ts")]
     };
     BOARD_URL_DEPRECATION_WARNING = "boardUrl is deprecated and ignored; board URLs are derived at runtime and are never persisted.";
     PROJECT_IDENTIFIER_SOURCES = ["provider", "proposed"];
@@ -1968,8 +1973,8 @@ var init_project = __esm({
     IDENTIFIER_REPAIR_COMMAND = "pj project identity --all --apply";
     DEFAULT_SOURCE_SKILL_ROOTS = [
       "/home/delorenj/code/skillex/all-skills",
-      join11(homedir3(), ".agents", "skills"),
-      join11(homedir3(), ".codex", "skills")
+      join12(homedir3(), ".agents", "skills"),
+      join12(homedir3(), ".codex", "skills")
     ];
     PROJECT_REGISTRY_OWNED_KEYS = [
       "name",
@@ -2001,21 +2006,21 @@ var init_project = __esm({
 import { randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
 import { isIP as isIP2 } from "node:net";
-import { closeSync as closeSync2, existsSync as existsSync8, fchmodSync as fchmodSync2, fsyncSync as fsyncSync2, lstatSync as lstatSync8, openSync as openSync2, readFileSync as readFileSync9, realpathSync as realpathSync6, renameSync as renameSync4, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname11, resolve as resolve10 } from "node:path";
+import { closeSync as closeSync2, existsSync as existsSync8, fchmodSync as fchmodSync2, fsyncSync as fsyncSync2, lstatSync as lstatSync9, openSync as openSync2, readFileSync as readFileSync10, realpathSync as realpathSync6, renameSync as renameSync4, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname11, resolve as resolve11 } from "node:path";
 function isRecord3(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function realOrResolved(path) {
-  const absolute = resolve10(path);
+  const absolute = resolve11(path);
   return existsSync8(absolute) ? realpathSync6(absolute) : absolute;
 }
 function readManifest(repoPath) {
-  const path = resolve10(repoPath, ".project.json");
+  const path = resolve11(repoPath, ".project.json");
   if (!existsSync8(path)) return null;
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync9(path, "utf8"));
+    parsed = JSON.parse(readFileSync10(path, "utf8"));
   } catch {
     throw new NotebookError("INVALID_INPUT", `${path} is not valid JSON`);
   }
@@ -2255,9 +2260,9 @@ function registryProjectBySlug(registry, slug) {
 }
 function persistProjectNotebookBinding(resolved, binding, policy) {
   const changed = [];
-  const manifestPath = resolve10(resolved.project.repo_path, ".project.json");
+  const manifestPath = resolve11(resolved.project.repo_path, ".project.json");
   if (isRegistryServiceLocation(resolved.registry_path)) {
-    const before = existsSync8(manifestPath) ? readFileSync9(manifestPath, "utf8") : null;
+    const before = existsSync8(manifestPath) ? readFileSync10(manifestPath, "utf8") : null;
     const declaredPolicy = resolved.manifest?.notebook?.policy ?? {};
     const nextProject = {
       ...resolved.project,
@@ -2269,10 +2274,10 @@ function persistProjectNotebookBinding(resolved, binding, policy) {
     resolved.registry = loadProjectRegistry(resolved.registry_path);
     resolved.project = registryProjectBySlug(resolved.registry, nextProject.slug);
     resolved.manifest = readManifest(nextProject.repo_path);
-    const after = existsSync8(manifestPath) ? readFileSync9(manifestPath, "utf8") : null;
+    const after = existsSync8(manifestPath) ? readFileSync10(manifestPath, "utf8") : null;
     return before === after ? [] : [manifestPath];
   }
-  const manifestRaw = existsSync8(manifestPath) ? JSON.parse(readFileSync9(manifestPath, "utf8")) : {};
+  const manifestRaw = existsSync8(manifestPath) ? JSON.parse(readFileSync10(manifestPath, "utf8")) : {};
   if (!isRecord3(manifestRaw)) throw new NotebookError("INVALID_INPUT", `${manifestPath} must contain a JSON object`);
   validateManifestNotebookSurface(manifestRaw.notebook);
   const manifestNotebook2 = isRecord3(manifestRaw.notebook) ? manifestRaw.notebook : {};
@@ -2305,14 +2310,14 @@ function persistProjectNotebookBinding(resolved, binding, policy) {
   };
   const manifestText = `${JSON.stringify(manifestNext, null, 2)}
 `;
-  if (!existsSync8(manifestPath) || readFileSync9(manifestPath, "utf8") !== manifestText) {
+  if (!existsSync8(manifestPath) || readFileSync10(manifestPath, "utf8") !== manifestText) {
     let mode = 420;
     if (existsSync8(manifestPath)) {
-      const current2 = lstatSync8(manifestPath);
+      const current2 = lstatSync9(manifestPath);
       if (!current2.isFile() || current2.isSymbolicLink()) throw new NotebookError("CONFLICT", `${manifestPath} must be a regular non-symlink file`);
       mode = current2.mode & 511;
     }
-    const temp = resolve10(dirname11(manifestPath), `.${process.pid}.${randomUUID()}.project.json.tmp`);
+    const temp = resolve11(dirname11(manifestPath), `.${process.pid}.${randomUUID()}.project.json.tmp`);
     const fd = openSync2(temp, "wx", mode);
     try {
       writeFileSync5(fd, manifestText, "utf8");
@@ -2336,9 +2341,9 @@ function persistProjectNotebookBinding(resolved, binding, policy) {
   const current = resolved.project.notebook;
   resolved.project.notebook = { ...isRecord3(current) ? current : { state: "planned" }, ...binding };
   const fileRegistry = !isRegistryServiceLocation(resolved.registry_path);
-  const registryBefore = fileRegistry && existsSync8(resolved.registry_path) ? readFileSync9(resolved.registry_path, "utf8") : null;
+  const registryBefore = fileRegistry && existsSync8(resolved.registry_path) ? readFileSync10(resolved.registry_path, "utf8") : null;
   saveProjectRegistry(resolved.registry, resolved.registry_path);
-  const registryAfter = fileRegistry && existsSync8(resolved.registry_path) ? readFileSync9(resolved.registry_path, "utf8") : null;
+  const registryAfter = fileRegistry && existsSync8(resolved.registry_path) ? readFileSync10(resolved.registry_path, "utf8") : null;
   if (registryBefore !== registryAfter) changed.push(resolved.registry_path);
   resolved.manifest = manifestNext;
   return changed;
@@ -2380,8 +2385,8 @@ function canonicalJson2(value) {
     return encoded;
   }
   if (Array.isArray(value)) return `[${value.map((item) => item === void 0 ? "null" : canonicalJson2(item)).join(",")}]`;
-  const record2 = value;
-  return `{${Object.keys(record2).filter((key) => record2[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson2(record2[key])}`).join(",")}}`;
+  const record3 = value;
+  return `{${Object.keys(record3).filter((key) => record3[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson2(record3[key])}`).join(",")}}`;
 }
 function sha256Hex(value) {
   return createHash5("sha256").update(value).digest("hex");
@@ -2649,7 +2654,7 @@ import {
   fchmodSync as fchmodSync3,
   fstatSync,
   fsyncSync as fsyncSync3,
-  lstatSync as lstatSync9,
+  lstatSync as lstatSync10,
   mkdirSync as mkdirSync5,
   openSync as openSync3,
   readSync,
@@ -2659,26 +2664,26 @@ import {
   writeFileSync as writeFileSync6
 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { basename as basename7, dirname as dirname12, join as join12, parse, relative as relative8, resolve as resolve11, sep as sep3 } from "node:path";
+import { basename as basename7, dirname as dirname12, join as join13, parse, relative as relative8, resolve as resolve12, sep as sep3 } from "node:path";
 function notebookStateRoot(env2 = process.env) {
-  const base = env2.XDG_STATE_HOME || join12(env2.HOME || homedir4(), ".local", "state");
-  return resolve11(base, "pjangler", "notebook", NOTEBOOK_STATE_VERSION);
+  const base = env2.XDG_STATE_HOME || join13(env2.HOME || homedir4(), ".local", "state");
+  return resolve12(base, "pjangler", "notebook", NOTEBOOK_STATE_VERSION);
 }
 function assertDigest(value, label) {
   if (!SESSION_KEY_RE.test(value)) throw new NotebookError("INVALID_INPUT", `Invalid ${label}`);
 }
 function projectStateDir(root, projectSlug) {
   if (!/^[a-z0-9][a-z0-9._-]{0,127}$/iu.test(projectSlug)) throw new NotebookError("INVALID_INPUT", "Invalid project slug for Notebook state");
-  return join12(resolve11(root), "projects", sha256Hex(`pjangler-project-state-v1\0${projectSlug}`));
+  return join13(resolve12(root), "projects", sha256Hex(`pjangler-project-state-v1\0${projectSlug}`));
 }
 function assertContained(root, candidate) {
-  const rel = relative8(resolve11(root), resolve11(candidate));
+  const rel = relative8(resolve12(root), resolve12(candidate));
   if (!rel || !rel.startsWith(`..${sep3}`) && rel !== ".." && !rel.startsWith(sep3)) return;
   throw new NotebookError("INTERNAL_ERROR", "Notebook state path escaped its root");
 }
 function openPinnedDirectory(path, root, create) {
-  const absolute = resolve11(path);
-  const absoluteRoot = resolve11(root);
+  const absolute = resolve12(path);
+  const absoluteRoot = resolve12(root);
   assertContained(absoluteRoot, absolute);
   if (!existsSync9("/proc/self/fd")) throw new NotebookError("INTERNAL_ERROR", "Descriptor-pinned Notebook state requires procfs");
   const parsed = parse(absolute);
@@ -2687,7 +2692,7 @@ function openPinnedDirectory(path, root, create) {
   try {
     for (const part of absolute.slice(parsed.root.length).split(sep3).filter(Boolean)) {
       const child = `/proc/self/fd/${fd}/${part}`;
-      cursor = join12(cursor, part);
+      cursor = join13(cursor, part);
       let childFd;
       try {
         childFd = openSync3(child, DIRECTORY_OPEN_FLAGS);
@@ -2724,8 +2729,8 @@ function assertOwned(stat) {
   }
 }
 function ensureDirectory(path, root) {
-  const absoluteRoot = resolve11(root);
-  const absolute = resolve11(path);
+  const absoluteRoot = resolve12(root);
+  const absolute = resolve12(path);
   assertContained(absoluteRoot, absolute);
   const fd = openPinnedDirectory(absolute, absoluteRoot, true);
   try {
@@ -2739,23 +2744,23 @@ function ensureDirectory(path, root) {
   }
 }
 function notebookStatePaths(root, projectSlug) {
-  const absoluteRoot = resolve11(root);
+  const absoluteRoot = resolve12(root);
   const project = projectStateDir(absoluteRoot, projectSlug);
   return {
     root: absoluteRoot,
     project,
-    baselines: join12(project, "baselines"),
-    claims: join12(project, "claims"),
-    receipts: join12(project, "receipts"),
-    refusals: join12(project, "refusals"),
-    journals: join12(project, "journals"),
-    locks: join12(project, "locks")
+    baselines: join13(project, "baselines"),
+    claims: join13(project, "claims"),
+    receipts: join13(project, "receipts"),
+    refusals: join13(project, "refusals"),
+    journals: join13(project, "journals"),
+    locks: join13(project, "locks")
   };
 }
 function ensureNotebookState(root, projectSlug) {
   const paths = notebookStatePaths(root, projectSlug);
   const { root: absoluteRoot, project } = paths;
-  for (const path of [absoluteRoot, join12(absoluteRoot, "projects"), project, paths.baselines, paths.claims, paths.receipts, paths.refusals, paths.journals, paths.locks]) {
+  for (const path of [absoluteRoot, join13(absoluteRoot, "projects"), project, paths.baselines, paths.claims, paths.receipts, paths.refusals, paths.journals, paths.locks]) {
     ensureDirectory(path, absoluteRoot);
   }
   return paths;
@@ -2823,7 +2828,7 @@ function renameStateFile(source, target, root) {
     if (!stat.isFile() || (stat.mode & 511) !== 384) throw new NotebookError("CONFLICT", "Notebook state rename source has an integrity finding");
     assertOwned(stat);
     try {
-      lstatSync9(targetPath);
+      lstatSync10(targetPath);
       throw new NotebookError("CONFLICT", "Notebook state rename target already exists");
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
@@ -2868,7 +2873,7 @@ function atomicWriteJson(path, value, root, afterParentPinned) {
       closeSync3(fd);
     }
     try {
-      const current = lstatSync9(target);
+      const current = lstatSync10(target);
       if (!existingIdentity || !current.isFile() || current.isSymbolicLink() || current.dev !== existingIdentity.dev || current.ino !== existingIdentity.ino) {
         throw new NotebookError("CONFLICT", "Notebook state target changed during atomic update; preserving both entries for audit");
       }
@@ -3103,13 +3108,13 @@ function baselineReceiptByteCeiling(limits) {
 function readSessionBaseline(root, projectSlug, sessionKey, limits) {
   assertDigest(sessionKey, "session key");
   const paths = ensureNotebookState(root, projectSlug);
-  return readBaseline(join12(paths.baselines, `${sessionKey}.json`), baselineReceiptByteCeiling(limits));
+  return readBaseline(join13(paths.baselines, `${sessionKey}.json`), baselineReceiptByteCeiling(limits));
 }
 function acquireLock(paths, maxWaitMs) {
-  const lock = join12(paths.locks, "admission.lock");
+  const lock = join13(paths.locks, "admission.lock");
   const deadline = Date.now() + Math.max(1, maxWaitMs);
   const token = randomUUID3();
-  const record2 = () => ({
+  const record3 = () => ({
     schema_version: NOTEBOOK_SCHEMA_VERSION,
     token,
     pid: process.pid,
@@ -3117,7 +3122,7 @@ function acquireLock(paths, maxWaitMs) {
     expires_at: new Date(Date.now() + Math.max(5e3, maxWaitMs * 20)).toISOString()
   });
   while (true) {
-    if (exclusiveWrite(lock, jsonLine(record2()), paths.root)) {
+    if (exclusiveWrite(lock, jsonLine(record3()), paths.root)) {
       return () => {
         const current = safeReadJson(lock, 8192);
         if (current.value && typeof current.value === "object" && !Array.isArray(current.value) && current.value.token === token) {
@@ -3136,7 +3141,7 @@ function acquireLock(paths, maxWaitMs) {
       throw new NotebookError("CONFLICT", "Notebook state lock has an integrity finding; preserve it and run pj notebook audit --json");
     }
     if (Date.now() >= expiresAt) {
-      const recovery = join12(paths.locks, `recovery-${heldToken}.lock`);
+      const recovery = join13(paths.locks, `recovery-${heldToken}.lock`);
       const recoveryRecord = jsonLine({ schema_version: NOTEBOOK_SCHEMA_VERSION, stale_token: heldToken, recovery_token: token, expires_at: new Date(Date.now() + 5e3).toISOString() });
       if (exclusiveWrite(recovery, recoveryRecord, paths.root)) {
         try {
@@ -3144,7 +3149,7 @@ function acquireLock(paths, maxWaitMs) {
           const currentToken = verify.value && typeof verify.value === "object" && !Array.isArray(verify.value) ? verify.value.token : null;
           const currentExpiry = verify.value && typeof verify.value === "object" && !Array.isArray(verify.value) ? Date.parse(String(verify.value.expires_at ?? "")) : Number.NaN;
           if (currentToken === heldToken && Number.isFinite(currentExpiry) && Date.now() >= currentExpiry) {
-            const recovered = join12(paths.locks, `.recovered-${heldToken}-${randomUUID3()}.json`);
+            const recovered = join13(paths.locks, `.recovered-${heldToken}-${randomUUID3()}.json`);
             renameStateFile(lock, recovered, paths.root);
             unlinkStateFile(recovered, paths.root);
           }
@@ -3224,7 +3229,7 @@ function scanAuxiliaryState(paths, limits) {
         addBoundedIntegrity(scan, limits, { entry_id: entryId, reason: "non-regular" });
         continue;
       }
-      const read = safeReadJson(join12(specification.dir, entry.name), specification.maxBytes);
+      const read = safeReadJson(join13(specification.dir, entry.name), specification.maxBytes);
       if (read.reason || read.value === void 0) {
         addBoundedIntegrity(scan, limits, { entry_id: entryId, reason: read.reason ?? "invalid-json" }, read.bytes);
         continue;
@@ -3249,7 +3254,7 @@ function scanAuxiliaryState(paths, limits) {
         addBoundedIntegrity(scan, limits, { entry_id: entryId, reason: "non-regular" });
         continue;
       }
-      const read = safeReadJson(join12(paths.journals, entry.name), limits.receipt_max_bytes);
+      const read = safeReadJson(join13(paths.journals, entry.name), limits.receipt_max_bytes);
       if (read.reason || read.value === void 0) {
         addBoundedIntegrity(scan, limits, { entry_id: entryId, reason: read.reason ?? "invalid-json" }, read.bytes);
         continue;
@@ -3278,7 +3283,7 @@ function scanAuxiliaryState(paths, limits) {
         addBoundedIntegrity(scan, limits, { entry_id: entryId, reason: "non-regular" });
         continue;
       }
-      const read = safeReadJson(join12(paths.locks, entry.name), 8192);
+      const read = safeReadJson(join13(paths.locks, entry.name), 8192);
       if (read.reason || read.value === void 0) {
         addBoundedIntegrity(scan, limits, { entry_id: entryId, reason: read.reason ?? "invalid-json" }, read.bytes);
         continue;
@@ -3317,7 +3322,7 @@ function scanReceipts(paths, limits) {
   }
   for (const entry of entries) {
     const entryId = safeEntryId("receipts", entry.name);
-    const path = join12(paths.receipts, entry.name);
+    const path = join13(paths.receipts, entry.name);
     if (!entry.isFile() || entry.isSymbolicLink() || !/^[a-f0-9]{64}\.json$/u.test(entry.name)) {
       addIntegrity({ entry_id: entryId, reason: "non-regular" });
       continue;
@@ -3347,7 +3352,7 @@ function scanBaselines(paths, nowMs, limits, referenced) {
   if (!existsSync9(paths.baselines)) return { current, stale };
   for (const entry of readStateDirectory(paths.baselines, paths.root)) {
     if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
-    const baseline = readBaseline(join12(paths.baselines, entry.name), baselineReceiptByteCeiling(limits));
+    const baseline = readBaseline(join13(paths.baselines, entry.name), baselineReceiptByteCeiling(limits));
     if (!baseline || referenced.has(baseline.session_key)) continue;
     const expires = Date.parse(baseline.created_at) + limits.receiptless_session_retention_seconds * 1e3;
     if (nowMs >= expires) stale += 1;
@@ -3361,7 +3366,7 @@ function scanRefusals(paths, nowMs, limits, scan) {
   const entries = readStateDirectory(paths.refusals, paths.root).sort((a, b) => a.name.localeCompare(b.name, "en")).slice(0, limits.refusal_max_entries);
   for (const entry of entries) {
     if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
-    const read = safeReadJson(join12(paths.refusals, entry.name), limits.receipt_max_bytes);
+    const read = safeReadJson(join13(paths.refusals, entry.name), limits.receipt_max_bytes);
     const marker = read.value === void 0 ? null : parseRefusal(read.value);
     if (!marker || `${marker.session_key}.json` !== entry.name) continue;
     if (nowMs >= Date.parse(marker.baseline_created_at) + limits.receiptless_session_retention_seconds * 1e3) continue;
@@ -3444,7 +3449,7 @@ function listCaptureReceipts(root, projectSlug, limits, state) {
 function readCaptureReceipt(root, projectSlug, receiptId, limits) {
   if (!RECEIPT_ID_RE.test(receiptId)) throw new NotebookError("INVALID_INPUT", "Invalid receipt ID");
   const paths = notebookStatePaths(root, projectSlug);
-  const path = join12(paths.receipts, `${receiptId}.json`);
+  const path = join13(paths.receipts, `${receiptId}.json`);
   if (!existsSync9(path)) throw new NotebookError("NOT_FOUND", `Capture receipt not found: ${receiptId}`);
   const read = safeReadJson(path, limits.receipt_max_bytes);
   const receipt = read.value === void 0 ? null : parseReceipt(read.value);
@@ -3457,7 +3462,7 @@ function writeReceipt(paths, receipt, limit) {
     const bytes = Buffer.byteLength(text, "utf8");
     if (bytes > limit) throw new NotebookError("CONFLICT", "Receipt transition exceeds its per-receipt ceiling");
     if (receipt.serialized_bytes === bytes) {
-      atomicWriteJson(join12(paths.receipts, `${receipt.receipt_id}.json`), receipt, paths.root);
+      atomicWriteJson(join13(paths.receipts, `${receipt.receipt_id}.json`), receipt, paths.root);
       return receipt;
     }
     receipt.serialized_bytes = bytes;
@@ -3596,7 +3601,7 @@ function pruneNotebookState(root, projectSlug, limits, now = /* @__PURE__ */ new
     const successCutoff = now.getTime() - limits.receipt_succeeded_retention_days * 864e5;
     for (const receipt of scan.receipts) {
       if (receipt.state !== "succeeded" || Date.parse(receipt.updated_at) > successCutoff) continue;
-      const path = join12(paths.receipts, `${receipt.receipt_id}.json`);
+      const path = join13(paths.receipts, `${receipt.receipt_id}.json`);
       unlinkStateFile(path, paths.root);
       removed.push(safeEntryId("receipts", basename7(path)));
     }
@@ -3605,15 +3610,15 @@ function pruneNotebookState(root, projectSlug, limits, now = /* @__PURE__ */ new
     const referenced = /* @__PURE__ */ new Set([...remaining.referencedSessions, ...remainingAuxiliary.referencedSessions]);
     for (const entry of readStateDirectory(paths.baselines, paths.root)) {
       if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
-      const path = join12(paths.baselines, entry.name);
+      const path = join13(paths.baselines, entry.name);
       const baseline = readBaseline(path, baselineReceiptByteCeiling(limits));
       if (!baseline || referenced.has(baseline.session_key)) continue;
       if (now.getTime() < Date.parse(baseline.created_at) + limits.receiptless_session_retention_seconds * 1e3) continue;
       unlinkStateFile(path, paths.root);
       removed.push(safeEntryId("baselines", entry.name));
-      const claim = join12(paths.claims, `${baseline.session_key}.overview`);
+      const claim = join13(paths.claims, `${baseline.session_key}.overview`);
       if (unlinkStateFile(claim, paths.root, true)) removed.push(safeEntryId("claims", basename7(claim)));
-      const refusal = join12(paths.refusals, `${baseline.session_key}.json`);
+      const refusal = join13(paths.refusals, `${baseline.session_key}.json`);
       if (unlinkStateFile(refusal, paths.root, true)) removed.push(safeEntryId("refusals", basename7(refusal)));
     }
     fsyncDirectory2(paths.project);
@@ -3998,11 +4003,11 @@ var init_open_notebook_client = __esm({
 });
 
 // src/notebook/git-evidence.ts
-import { spawnSync as spawnSync6 } from "node:child_process";
-import { closeSync as closeSync4, constants as constants3, fstatSync as fstatSync2, lstatSync as lstatSync10, openSync as openSync4, readSync as readSync2, realpathSync as realpathSync7 } from "node:fs";
-import { extname, join as join14, relative as relative9, resolve as resolve12, sep as sep4 } from "node:path";
+import { spawnSync as spawnSync7 } from "node:child_process";
+import { closeSync as closeSync4, constants as constants3, fstatSync as fstatSync2, lstatSync as lstatSync11, openSync as openSync4, readSync as readSync2, realpathSync as realpathSync7 } from "node:fs";
+import { extname, join as join15, relative as relative9, resolve as resolve13, sep as sep4 } from "node:path";
 function git(repo, args, maxBuffer = 4 * 1024 * 1024, timeout = 5e3) {
-  const result2 = spawnSync6("git", args, { cwd: repo, encoding: "utf8", maxBuffer, timeout, shell: false });
+  const result2 = spawnSync7("git", args, { cwd: repo, encoding: "utf8", maxBuffer, timeout, shell: false });
   return { ok: result2.status === 0, stdout: result2.stdout ?? "" };
 }
 function statusPaths(value) {
@@ -4069,7 +4074,7 @@ function validateCommittedGitRef(repoPath, gitRef) {
 function safeRelative(repoPath, relativePath2) {
   if (!relativePath2 || relativePath2.includes("\0") || relativePath2.startsWith("/") || relativePath2.split(/[\\/]/u).includes("..")) return null;
   const root = realpathSync7(repoPath);
-  const candidate = resolve12(root, relativePath2);
+  const candidate = resolve13(root, relativePath2);
   const rel = relative9(root, candidate);
   if (rel === ".." || rel.startsWith(`..${sep4}`) || rel.startsWith(sep4)) return null;
   return { root, candidate };
@@ -4078,9 +4083,9 @@ function hasSymlinkComponent(root, candidate) {
   const rel = relative9(root, candidate);
   let cursor = root;
   for (const part of rel.split(sep4).filter(Boolean)) {
-    cursor = join14(cursor, part);
+    cursor = join15(cursor, part);
     try {
-      if (lstatSync10(cursor).isSymbolicLink()) return true;
+      if (lstatSync11(cursor).isSymbolicLink()) return true;
     } catch {
       return true;
     }
@@ -4147,8 +4152,8 @@ function matchesSimpleGlob(path, glob) {
   if (glob.startsWith("**/*.")) return extname(path).toLowerCase() === `.${glob.slice(5).toLowerCase()}`;
   return path === glob;
 }
-function addExclusion(record2, reason) {
-  record2[reason] = (record2[reason] ?? 0) + 1;
+function addExclusion(record3, reason) {
+  record3[reason] = (record3[reason] ?? 0) + 1;
 }
 function selectEligibleDocuments(config, baseline, manualBaselineRef) {
   const repo = config.repo_path;
@@ -4221,10 +4226,10 @@ var init_git_evidence = __esm({
 
 // src/notebook/remote-mutation-journal.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 function journalPath(root, projectSlug, operationId) {
   if (!/^[a-f0-9-]{16,64}$/iu.test(operationId)) throw new NotebookError("INVALID_INPUT", "Invalid remote mutation operation ID");
-  return join15(ensureNotebookState(root, projectSlug).journals, `${operationId}.json`);
+  return join16(ensureNotebookState(root, projectSlug).journals, `${operationId}.json`);
 }
 function remoteMutationJournalPath(root, projectSlug, operationId) {
   return journalPath(root, projectSlug, operationId);
@@ -4244,7 +4249,7 @@ function listRemoteMutationJournals(root, projectSlug) {
     if (!entry.isFile() || entry.isSymbolicLink() || !/^[a-f0-9-]{16,64}\.json$/iu.test(entry.name)) {
       throw new NotebookError("CONFLICT", `Remote mutation journal state-integrity finding: journals/${entry.name}`);
     }
-    const read = readNotebookStateJson(join15(paths.journals, entry.name), paths.root, 65536);
+    const read = readNotebookStateJson(join16(paths.journals, entry.name), paths.root, 65536);
     const journal = read.value === void 0 ? null : parseRemoteMutationJournal(read.value);
     if (!journal || `${journal.operation_id}.json` !== entry.name) {
       throw new NotebookError("CONFLICT", `Remote mutation journal state-integrity finding: journals/${entry.name}`);
@@ -4599,15 +4604,15 @@ var init_reconcile = __esm({
 // src/notebook/entropy.ts
 import { existsSync as existsSync12 } from "node:fs";
 import { createHash as createHash9 } from "node:crypto";
-import { resolve as resolve15 } from "node:path";
-import { spawnSync as spawnSync9 } from "node:child_process";
+import { resolve as resolve16 } from "node:path";
+import { spawnSync as spawnSync10 } from "node:child_process";
 function listAllTrackedDocuments(config) {
   const repo = config.repo_path;
   const timeout = config.limits.overall_timeout_ms;
-  const trackedResult = spawnSync9("git", ["ls-files", "-z"], { cwd: repo, encoding: "utf8", maxBuffer: 4 * 1024 * 1024, timeout, shell: false });
+  const trackedResult = spawnSync10("git", ["ls-files", "-z"], { cwd: repo, encoding: "utf8", maxBuffer: 4 * 1024 * 1024, timeout, shell: false });
   if (trackedResult.status !== 0) return [];
   const tracked = trackedResult.stdout.split("\0").filter(Boolean);
-  const headRev = spawnSync9("git", ["rev-parse", "HEAD"], { cwd: repo, encoding: "utf8", timeout, shell: false }).stdout?.trim() ?? "HEAD";
+  const headRev = spawnSync10("git", ["rev-parse", "HEAD"], { cwd: repo, encoding: "utf8", timeout, shell: false }).stdout?.trim() ?? "HEAD";
   const documents = [];
   for (const path of tracked) {
     if (!config.policy.documentation_globs.some((glob) => matchesSimpleGlob(path, glob))) continue;
@@ -4634,7 +4639,7 @@ async function pruneZombieNotes(input) {
     const parsed = parseNoteEnvelope(note.content);
     if (!parsed || parsed.envelope.kind !== "document" || parsed.envelope.project_slug !== input.projectSlug) continue;
     const sourcePath = parsed.envelope.source_path;
-    if (!sourcePath || !existsSync12(resolve15(input.repoPath, sourcePath))) {
+    if (!sourcePath || !existsSync12(resolve16(input.repoPath, sourcePath))) {
       if (typeof input.client.deleteOwnedNote === "function") {
         await input.client.deleteOwnedNote(input.notebookId, note.id);
       } else if (typeof input.client.deleteNote === "function") {
@@ -4794,8 +4799,8 @@ var init_entropy = __esm({
 });
 
 // src/notebook/summarizer.ts
-import { spawnSync as spawnSync10 } from "node:child_process";
-import { isAbsolute as isAbsolute7 } from "node:path";
+import { spawnSync as spawnSync11 } from "node:child_process";
+import { isAbsolute as isAbsolute8 } from "node:path";
 function evidenceItems(evidence) {
   const items = [];
   const eligible = new Set(evidence.documents.map((item) => item.path));
@@ -4868,11 +4873,11 @@ function words(value) {
 }
 function validateClaims(value, items, noteMaxBytes) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return null;
-  const record2 = value;
-  if (record2.schema_version !== 1 || !Array.isArray(record2.claims) || record2.claims.length < 1 || record2.claims.length > 50 || Object.keys(record2).some((key) => key !== "schema_version" && key !== "claims")) return null;
+  const record3 = value;
+  if (record3.schema_version !== 1 || !Array.isArray(record3.claims) || record3.claims.length < 1 || record3.claims.length > 50 || Object.keys(record3).some((key) => key !== "schema_version" && key !== "claims")) return null;
   const byId = new Map(items.map((item) => [item.evidence_id, item]));
   const rendered = ["## Session outcome"];
-  for (const claimValue of record2.claims) {
+  for (const claimValue of record3.claims) {
     if (!claimValue || typeof claimValue !== "object" || Array.isArray(claimValue)) return null;
     const claim = claimValue;
     if (Object.keys(claim).some((key) => key !== "text" && key !== "evidence_ids") || typeof claim.text !== "string" || !claim.text.trim() || Buffer.byteLength(claim.text, "utf8") > 1024 || !Array.isArray(claim.evidence_ids) || claim.evidence_ids.length < 1 || claim.evidence_ids.length > 10 || claim.evidence_ids.some((id) => typeof id !== "string" || !byId.has(id))) return null;
@@ -4893,7 +4898,7 @@ function summarizeCapture(config, evidence) {
   const items = evidenceItems(evidence);
   const payload = JSON.stringify({ schema_version: 1, evidence: items });
   if (Buffer.byteLength(payload, "utf8") > config.limits.request_max_bytes) return { schema_version: 1, mode: "deterministic-fallback", summary: fallbackSummary };
-  const result2 = spawnSync10(config.summarizer.executable, config.summarizer.args, {
+  const result2 = spawnSync11(config.summarizer.executable, config.summarizer.args, {
     cwd: config.repo_path,
     input: Buffer.from(payload, "utf8"),
     timeout: config.limits.overall_timeout_ms,
@@ -4911,7 +4916,7 @@ function summarizeCapture(config, evidence) {
   }
 }
 function assertSummarizerConfig(config) {
-  if (config.summarizer && (!isAbsolute7(config.summarizer.executable) || config.summarizer.executable.includes("\0") || config.summarizer.args.length > 32 || config.summarizer.args.some((arg) => arg.includes("\0") || Buffer.byteLength(arg, "utf8") > 1024))) {
+  if (config.summarizer && (!isAbsolute8(config.summarizer.executable) || config.summarizer.executable.includes("\0") || config.summarizer.args.length > 32 || config.summarizer.args.some((arg) => arg.includes("\0") || Buffer.byteLength(arg, "utf8") > 1024))) {
     throw new NotebookError("NOT_CONFIGURED", "Configured Notebook summarizer command is invalid");
   }
 }
@@ -5221,7 +5226,7 @@ var init_capture = __esm({
 
 // src/mcp-server.ts
 import { existsSync as existsSync18, statSync as statSync7 } from "node:fs";
-import { dirname as dirname17, join as join26, resolve as resolve21 } from "node:path";
+import { dirname as dirname17, join as join27, resolve as resolve22 } from "node:path";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
@@ -5332,12 +5337,12 @@ var Recipe = class {
     };
   }
   /** Initialize missing/drifted state using only this recipe's owned checks. */
-  async initializeOwnedChecks(ctx) {
+  async initializeOwnedChecks(ctx, checks = this.checks) {
     const phases = [];
     const logs = [];
     const errors = [];
     const changedFiles = [];
-    for (const check of this.checks) {
+    for (const check of checks) {
       const finding2 = await check.audit(ctx);
       if (finding2.status === "pass" || finding2.status === "skip") {
         phases.push({ id: check.id, status: finding2.status === "skip" ? "skipped" : "unchanged", changedFiles: [], message: finding2.summary });
@@ -5419,10 +5424,233 @@ var Recipe = class {
 
 // src/parity/rules.ts
 init_registryClient();
+
+// src/bmad/companion.ts
+init_tree_diff();
+import { existsSync as existsSync2, lstatSync as lstatSync2, readFileSync as readFileSync2 } from "node:fs";
+import { spawnSync as spawnSync2 } from "node:child_process";
+import { isAbsolute, join as join3, resolve as resolve3 } from "node:path";
+import { pathToFileURL } from "node:url";
+var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
+function optionalObject(parent, key, label) {
+  if (!Object.hasOwn(parent, key)) return {};
+  const value = parent[key];
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object when present`);
+  return value;
+}
+function select(projectRoot) {
+  const path = join3(projectRoot, ".project.json");
+  const manifest = existsSync2(path) ? record(JSON.parse(readFileSync2(path, "utf8"))) : {};
+  const bmad = optionalObject(manifest, "bmad", "bmad");
+  const config = optionalObject(bmad, "companion", "bmad.companion");
+  const adapter = optionalObject(config, "adapter", "bmad.companion.adapter");
+  const options = optionalObject(adapter, "options", "bmad.companion.adapter.options");
+  if (config.enabled === false) return { enabled: false, reason: "g33 explicitly disabled in .project.json", options: {} };
+  if (config.enabled !== void 0 && config.enabled !== true) throw new Error("bmad.companion.enabled must be boolean");
+  const binding = record(manifest.ticket_provider);
+  const registered = typeof manifest.project_id === "string" && /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/i.test(manifest.project_id) && manifest.project_id.length <= 128;
+  const eligible = registered && binding.type === "plane" && binding.state === "linked" && typeof binding.workspace === "string" && binding.workspace.trim().toLowerCase() === "33god" && typeof binding.board_id === "string" && binding.board_id.trim() !== "";
+  if (!eligible && config.enabled !== true) return { enabled: false, reason: "g33 defaults off without a registered linked 33god project or explicit opt-in", options: {} };
+  const module = adapter.module ?? (process.env.PJ_G33_ADAPTER_MODULE?.trim() || void 0);
+  const exportName = adapter.exportName ?? (process.env.PJ_G33_ADAPTER_EXPORT?.trim() || void 0);
+  if (module !== void 0 && (typeof module !== "string" || !module.trim())) throw new Error("g33 adapter.module must be a non-empty package specifier or source path");
+  if (exportName !== void 0 && (typeof exportName !== "string" || !exportName.trim())) throw new Error("g33 adapter.exportName must name the supported callable export");
+  return {
+    enabled: true,
+    reason: eligible ? "Registered linked 33god project" : "Explicit g33 opt-in",
+    module,
+    exportName,
+    options
+  };
+}
+function g33CompanionEnabled(projectRoot) {
+  return select(projectRoot).enabled;
+}
+function resolveAdapter(projectRoot, module) {
+  if (module.startsWith(".") || isAbsolute(module)) {
+    const path = resolve3(projectRoot, module);
+    if (!existsSync2(path)) throw new Error(`Configured g33 source is unavailable: ${module}`);
+    return pathToFileURL(path).href;
+  }
+  if (module.includes(":") || module.startsWith("/")) throw new Error("Use a local source path or installed package specifier for g33");
+  const resolved = spawnSync2(process.execPath, [
+    "--experimental-import-meta-resolve",
+    "--input-type=module",
+    "--eval",
+    "process.stdout.write(import.meta.resolve(process.argv[1], process.argv[2]))",
+    "--",
+    module,
+    pathToFileURL(join3(projectRoot, ".project.json")).href
+  ], { encoding: "utf8", timeout: 1e4 });
+  if (resolved.status === 0 && resolved.stdout.trim()) return resolved.stdout.trim();
+  const projectError = resolved.stderr.trim() || resolved.error?.message || `resolver exit ${resolved.status}`;
+  try {
+    return import.meta.resolve(module);
+  } catch (error) {
+    throw new Error(`Project ESM resolution failed: ${projectError}
+PJangler ESM resolution failed: ${error instanceof Error ? error.message : String(error)}`);
+  }
+}
+function reply(value, operation) {
+  const data = record(value);
+  const statuses = operation === "observe" ? ["installed", "missing", "unavailable", "conflict", "error"] : operation === "plan" ? ["planned", "unchanged", "unavailable", "conflict", "error"] : ["changed", "unchanged", "unavailable", "conflict", "error"];
+  if (data.schemaVersion !== 1 || !statuses.includes(String(data.status)) || typeof data.summary !== "string" || ![data.details, data.evidence].every((field2) => Array.isArray(field2) && field2.every((item) => typeof item === "string"))) {
+    throw new Error(`Configured g33 adapter returned an invalid v1 ${operation} result`);
+  }
+  if (data.status === "installed" && !data.evidence.some((item) => item.trim())) {
+    throw new Error("g33 installed observation requires owner content/mapping evidence; metadata alone is insufficient");
+  }
+  return {
+    schemaVersion: 1,
+    status: data.status,
+    summary: data.summary,
+    details: [...data.details],
+    evidence: [...data.evidence]
+  };
+}
+async function runG33Companion(projectRoot, dryRun, reason = "recipe") {
+  projectRoot = resolve3(projectRoot);
+  const result2 = { schemaVersion: 1, moduleId: "g33", optional: true, status: "unavailable", summary: "g33 companion unavailable", details: [], evidence: [], changedFiles: [] };
+  let before;
+  try {
+    const selection = select(projectRoot);
+    if (!selection.enabled) return { ...result2, status: "disabled", summary: selection.reason };
+    result2.details.push(selection.reason);
+    if (!selection.module || !selection.exportName) return {
+      ...result2,
+      summary: "Optional g33 installer is not configured",
+      details: [...result2.details, "Configure bmad.companion.adapter.module and exportName (or PJ_G33_ADAPTER_MODULE/PJ_G33_ADAPTER_EXPORT) to the owner's supported callable adapter. No g33 installation was attempted."]
+    };
+    result2.adapter = { module: selection.module, exportName: selection.exportName };
+    let specifier;
+    try {
+      specifier = resolveAdapter(projectRoot, selection.module);
+    } catch (error) {
+      return { ...result2, status: "unavailable", summary: "Configured g33 adapter is unavailable", details: [...result2.details, error instanceof Error ? error.message : String(error)] };
+    }
+    before = snapshotTree(projectRoot);
+    const exported = await import(specifier);
+    if (changedTreePaths(projectRoot, before, snapshotTree(projectRoot)).length) {
+      throw new Error("g33 adapter violated the no-write import contract");
+    }
+    const callable = exported[selection.exportName];
+    if (typeof callable !== "function") throw new Error(`Configured g33 export ${selection.exportName} is not callable`);
+    const invoke = async (operation) => {
+      const value = reply(await callable({ schemaVersion: 1, moduleId: "g33", operation, projectRoot, reason, options: selection.options }), operation);
+      if (operation !== "apply" && changedTreePaths(projectRoot, before, snapshotTree(projectRoot)).length) {
+        throw new Error(`g33 adapter violated the no-write ${operation} contract`);
+      }
+      return value;
+    };
+    const observed = await invoke("observe");
+    if (["unavailable", "conflict", "error"].includes(observed.status)) return { ...result2, ...observed };
+    const plan = await invoke("plan");
+    if (["unavailable", "conflict", "error"].includes(plan.status)) return { ...result2, ...plan };
+    if (plan.status === "unchanged" && observed.status !== "installed") throw new Error("g33 plan claims convergence but owner observation does not prove installation");
+    if (dryRun) return { ...result2, ...plan, evidence: observed.evidence };
+    if (plan.status === "unchanged" && observed.status === "installed") return { ...result2, ...observed, status: "unchanged" };
+    const applied = await invoke("apply");
+    result2.changedFiles = changedTreePaths(projectRoot, before, snapshotTree(projectRoot));
+    if (["unavailable", "conflict", "error"].includes(applied.status)) return { ...result2, ...applied };
+    before = snapshotTree(projectRoot);
+    const verified = await invoke("observe");
+    if (verified.status !== "installed") return {
+      ...result2,
+      status: "error",
+      summary: "g33 apply did not establish an installed owner observation",
+      details: [verified.summary, ...verified.details],
+      evidence: verified.evidence
+    };
+    return { ...result2, ...verified, status: result2.changedFiles.length ? "changed" : "unchanged" };
+  } catch (error) {
+    if (before) {
+      try {
+        result2.changedFiles = [.../* @__PURE__ */ new Set([...result2.changedFiles, ...changedTreePaths(projectRoot, before, snapshotTree(projectRoot))])].sort();
+      } catch (snapshotError) {
+        result2.details.push(`Could not inventory partial g33 writes: ${String(snapshotError)}`);
+      }
+    }
+    return { ...result2, status: "error", summary: "Optional g33 companion could not be reconciled", details: [...result2.details, error instanceof Error ? error.message : String(error)] };
+  }
+}
+function localEntryPresent(path) {
+  try {
+    lstatSync2(path);
+    return true;
+  } catch (error) {
+    if (error.code === "ENOENT") return false;
+    throw error;
+  }
+}
+function g33BmadUpdateBoundary(projectRoot, retainedG33Declaration = false) {
+  const result2 = {
+    schemaVersion: 1,
+    moduleId: "g33",
+    optional: true,
+    status: "conflict",
+    summary: "BMAD update withheld pending the g33 owner pre-update preservation contract",
+    details: [
+      "No installer, retired-state eviction, or companion import/apply was attempted. Existing native BMAD bytes, customizations, and module mappings are retained.",
+      "The owner must provide a supported pre-update capture/protection and post-update restore/verification handoff, including failure recovery. The configured v1 callable alone does not authorize a destructive BMAD update."
+    ],
+    evidence: [],
+    changedFiles: []
+  };
+  try {
+    const retainedG33 = retainedG33Declaration || localEntryPresent(join3(projectRoot, "_bmad", "g33"));
+    const installedBmad = retainedG33 || localEntryPresent(join3(projectRoot, "_bmad", "_config", "manifest.yaml")) || localEntryPresent(join3(projectRoot, "_bmad", "core"));
+    if (!installedBmad) return void 0;
+    const selection = select(projectRoot);
+    if (!selection.enabled && !retainedG33) return void 0;
+    if (selection.module && selection.exportName) result2.adapter = { module: selection.module, exportName: selection.exportName };
+    result2.details.unshift(retainedG33 ? "Retained g33 tree or module declaration requires preservation, including after opt-out." : selection.reason);
+    return result2;
+  } catch (error) {
+    return {
+      ...result2,
+      status: "error",
+      summary: "BMAD update withheld: companion configuration or preservation inspection failed",
+      details: [...result2.details, error instanceof Error ? error.message : String(error)]
+    };
+  }
+}
+function companionDetails(result2) {
+  return [`g33 (${result2.status}): ${result2.summary}`, ...result2.details, ...result2.evidence];
+}
+function createG33CompanionCheck() {
+  return {
+    id: "bmad.g33-companion",
+    title: "Optional g33 companion",
+    audit: async (ctx) => {
+      const result2 = await runG33Companion(ctx.repoRoot, true, "audit");
+      return {
+        id: "bmad.g33-companion",
+        title: "Optional g33 companion",
+        status: result2.status === "disabled" ? "skip" : result2.status === "unchanged" && result2.evidence.length ? "pass" : "warn",
+        summary: result2.summary,
+        details: companionDetails(result2),
+        fixable: result2.status === "planned"
+      };
+    },
+    migrate: async (ctx, finding2) => {
+      const result2 = await runG33Companion(ctx.repoRoot, ctx.dryRun, "repair");
+      return {
+        id: finding2.id,
+        title: finding2.title,
+        status: result2.status === "changed" || result2.status === "planned" ? "applied" : result2.status === "unchanged" ? "noop" : result2.status === "disabled" ? "skipped" : "partial",
+        summary: result2.summary,
+        details: companionDetails(result2),
+        changedFiles: result2.changedFiles
+      };
+    }
+  };
+}
+
+// src/parity/rules.ts
 init_style();
-import { existsSync as existsSync3, lstatSync as lstatSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync3, readlinkSync as readlinkSync3, readdirSync as readdirSync3, realpathSync as realpathSync3, renameSync as renameSync2, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync3, chmodSync, copyFileSync, rmSync as rmSync2 } from "node:fs";
-import { basename as basename3, dirname as dirname5, join as join5, relative as relative4, resolve as resolve5 } from "node:path";
-import { spawnSync as spawnSync3 } from "node:child_process";
+import { existsSync as existsSync4, lstatSync as lstatSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync5, readlinkSync as readlinkSync4, readdirSync as readdirSync4, realpathSync as realpathSync3, renameSync as renameSync2, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync3, chmodSync, copyFileSync, rmSync as rmSync2 } from "node:fs";
+import { basename as basename3, dirname as dirname5, join as join7, relative as relative5, resolve as resolve6 } from "node:path";
+import { spawnSync as spawnSync4 } from "node:child_process";
 import YAML2 from "yaml";
 import { parse as parseToml2 } from "smol-toml";
 
@@ -5441,8 +5669,8 @@ var SUPPORTED_BMAD_TOOLS = SUPPORTED_CLIS.map((cli) => cli.bmadTool);
 var SUPPORTED_CLI_ROOTS = SUPPORTED_CLIS.map((cli) => cli.projectRoot);
 
 // src/parity/skills.ts
-import { lstatSync as lstatSync3, readlinkSync as readlinkSync2, realpathSync as realpathSync2, unlinkSync as unlinkSync2 } from "node:fs";
-import { basename as basename2, dirname as dirname4, join as join4, relative as relative3, resolve as resolve4 } from "node:path";
+import { lstatSync as lstatSync5, readlinkSync as readlinkSync3, realpathSync as realpathSync2, unlinkSync as unlinkSync2 } from "node:fs";
+import { basename as basename2, dirname as dirname4, join as join6, relative as relative4, resolve as resolve5 } from "node:path";
 import {
   initScope,
   inspectStatus,
@@ -5453,15 +5681,15 @@ import {
 } from "@delorenj/skillex";
 
 // src/parity/skill-roots.ts
-import { spawnSync as spawnSync2 } from "node:child_process";
-import { createHash as createHash2 } from "node:crypto";
+import { spawnSync as spawnSync3 } from "node:child_process";
+import { createHash as createHash3 } from "node:crypto";
 import {
   appendFileSync,
-  lstatSync as lstatSync2,
+  lstatSync as lstatSync4,
   mkdirSync as mkdirSync2,
-  readFileSync as readFileSync2,
-  readdirSync as readdirSync2,
-  readlinkSync,
+  readFileSync as readFileSync4,
+  readdirSync as readdirSync3,
+  readlinkSync as readlinkSync2,
   realpathSync,
   renameSync,
   rmSync,
@@ -5471,15 +5699,15 @@ import {
   unlinkSync,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { basename, dirname as dirname3, isAbsolute, join as join3, relative as relative2, resolve as resolve3, sep } from "node:path";
+import { basename, dirname as dirname3, isAbsolute as isAbsolute2, join as join5, relative as relative3, resolve as resolve4, sep } from "node:path";
 
 // src/parity/bmad-attestation.ts
-import { createHash } from "node:crypto";
-import { existsSync as existsSync2, lstatSync, readFileSync, readdirSync } from "node:fs";
-import { dirname as dirname2, join as join2, relative } from "node:path";
+import { createHash as createHash2 } from "node:crypto";
+import { existsSync as existsSync3, lstatSync as lstatSync3, readFileSync as readFileSync3, readdirSync as readdirSync2 } from "node:fs";
+import { dirname as dirname2, join as join4, relative as relative2 } from "node:path";
 import YAML from "yaml";
 function safeReadText(path) {
-  return existsSync2(path) ? readFileSync(path, "utf8").replace(/\r\n/g, "\n") : null;
+  return existsSync3(path) ? readFileSync3(path, "utf8").replace(/\r\n/g, "\n") : null;
 }
 function parseCsvRows(text) {
   const rows = [];
@@ -5523,7 +5751,7 @@ function csvObjects(text) {
   return rows.filter((row) => row.some(Boolean)).map((row) => Object.fromEntries(headers.map((header, index) => [header, row[index] ?? ""])));
 }
 function installedBmadTools(repoRoot) {
-  const raw = safeReadText(join2(repoRoot, "_bmad", "_config", "manifest.yaml"));
+  const raw = safeReadText(join4(repoRoot, "_bmad", "_config", "manifest.yaml"));
   if (!raw) return /* @__PURE__ */ new Set();
   try {
     const parsed = YAML.parse(raw);
@@ -5533,8 +5761,8 @@ function installedBmadTools(repoRoot) {
   }
 }
 function bmadCliProjectionInventory(repoRoot) {
-  const filesText = safeReadText(join2(repoRoot, "_bmad", "_config", "files-manifest.csv"));
-  const skillsText = safeReadText(join2(repoRoot, "_bmad", "_config", "skill-manifest.csv"));
+  const filesText = safeReadText(join4(repoRoot, "_bmad", "_config", "files-manifest.csv"));
+  const skillsText = safeReadText(join4(repoRoot, "_bmad", "_config", "skill-manifest.csv"));
   if (!filesText || !skillsText) return { files: /* @__PURE__ */ new Map(), error: "BMAD files/skill manifests are missing" };
   const fileHashes = /* @__PURE__ */ new Map();
   for (const row of csvObjects(filesText)) {
@@ -5550,23 +5778,23 @@ function bmadCliProjectionInventory(repoRoot) {
     const sourceRoot = dirname2(skillPath);
     for (const [sourcePath, hash] of fileHashes) {
       if (sourcePath !== `${sourceRoot}/SKILL.md` && !sourcePath.startsWith(`${sourceRoot}/`)) continue;
-      const suffix = relative(sourceRoot, sourcePath);
+      const suffix = relative2(sourceRoot, sourcePath);
       if (!suffix || suffix.startsWith("..")) continue;
-      projected.set(join2("skills", canonicalId, suffix), hash);
+      projected.set(join4("skills", canonicalId, suffix), hash);
     }
   }
   return projected.size ? { files: projected } : { files: projected, error: "BMAD manifests contain no projected skill inventory" };
 }
 function inventoryFilesUnder(root, current = root) {
-  if (!existsSync2(current)) return { files: [], unsafe: [] };
-  const stat = lstatSync(current);
-  const rel = relative(root, current) || ".";
+  if (!existsSync3(current)) return { files: [], unsafe: [] };
+  const stat = lstatSync3(current);
+  const rel = relative2(root, current) || ".";
   if (stat.isSymbolicLink()) return { files: [], unsafe: [rel] };
-  if (stat.isFile()) return { files: [relative(root, current)], unsafe: [] };
+  if (stat.isFile()) return { files: [relative2(root, current)], unsafe: [] };
   if (!stat.isDirectory()) return { files: [], unsafe: [rel] };
   const result2 = { files: [], unsafe: [] };
-  for (const name of readdirSync(current)) {
-    const child = inventoryFilesUnder(root, join2(current, name));
+  for (const name of readdirSync2(current)) {
+    const child = inventoryFilesUnder(root, join4(current, name));
     result2.files.push(...child.files);
     result2.unsafe.push(...child.unsafe);
   }
@@ -5578,7 +5806,7 @@ function attestBmadInstallerFiles(inventory, base, files, label) {
   for (const rel of files) {
     const expectedHash = inventory.files.get(rel);
     if (!expectedHash) return { safe: false, reason: `${label}/${rel} is outside the BMAD generated inventory` };
-    const actualHash = createHash("sha256").update(readFileSync(join2(base, rel))).digest("hex");
+    const actualHash = createHash2("sha256").update(readFileSync3(join4(base, rel))).digest("hex");
     if (actualHash !== expectedHash) return { safe: false, reason: `${label}/${rel} was locally modified after generation` };
   }
   return { safe: true, reason: `${files.length} file(s) match BMAD installer inventory and hashes` };
@@ -5590,7 +5818,7 @@ var SUPPORTED_SKILLS_ALIASES = SUPPORTED_CLIS.map((cli) => cli.skillsRoot);
 var SKILL_ROOTS_QUARANTINE = ".pjangler-quarantine";
 function lstatOrUndefined(path) {
   try {
-    return lstatSync2(path);
+    return lstatSync4(path);
   } catch (error) {
     const code = error.code;
     if (code === "ENOENT" || code === "ENOTDIR" || code === "ELOOP" || code === "ENAMETOOLONG") return void 0;
@@ -5605,17 +5833,17 @@ function realpathOrUndefined(path) {
   }
 }
 function within(path, root) {
-  const part = relative2(root, path);
-  return part === "" || !part.startsWith(`..${sep}`) && part !== ".." && !isAbsolute(part);
+  const part = relative3(root, path);
+  return part === "" || !part.startsWith(`..${sep}`) && part !== ".." && !isAbsolute2(part);
 }
 function gitToplevel(directory) {
-  const result2 = spawnSync2("git", ["-C", directory, "rev-parse", "--show-toplevel"], { encoding: "utf8" });
+  const result2 = spawnSync3("git", ["-C", directory, "rev-parse", "--show-toplevel"], { encoding: "utf8" });
   if (result2.status !== 0) return void 0;
   const top = result2.stdout.trim();
   return top ? realpathOrUndefined(top) ?? top : void 0;
 }
 function repoOwnsPath(repoRoot, path) {
-  const repoReal = realpathOrUndefined(repoRoot) ?? resolve3(repoRoot);
+  const repoReal = realpathOrUndefined(repoRoot) ?? resolve4(repoRoot);
   const real = realpathOrUndefined(path);
   if (!real || !within(real, repoReal)) return false;
   let directory = real;
@@ -5627,7 +5855,7 @@ function repoOwnsPath(repoRoot, path) {
   return gitToplevel(directory) === gitToplevel(repoReal);
 }
 function entryOf(path, stat) {
-  if (stat.isSymbolicLink()) return { kind: "link", text: readlinkSync(path), stat, phys: path };
+  if (stat.isSymbolicLink()) return { kind: "link", text: readlinkSync2(path), stat, phys: path };
   if (stat.isDirectory()) return { kind: "dir", stat, phys: path };
   if (stat.isFile()) return { kind: "file", stat, phys: path };
   return { kind: "special", stat, phys: path };
@@ -5638,16 +5866,16 @@ var diskLayout = {
     return stat ? entryOf(path, stat) : void 0;
   },
   readdir(path) {
-    return readdirSync2(path);
+    return readdirSync3(path);
   }
 };
 function finalLayout(spec) {
   const underIncoming = (path) => {
     if (!within(path, spec.root) || path === spec.root) return void 0;
-    const [name, ...rest] = relative2(spec.root, path).split(sep);
+    const [name, ...rest] = relative3(spec.root, path).split(sep);
     const occupant = spec.incoming.get(name);
     if (!occupant) return void 0;
-    if (occupant.kind === "move") return { mapped: join3(occupant.from, ...rest) };
+    if (occupant.kind === "move") return { mapped: join5(occupant.from, ...rest) };
     return rest.length ? void 0 : { link: occupant.text };
   };
   return {
@@ -5662,8 +5890,8 @@ function finalLayout(spec) {
     },
     readdir(path) {
       const mapping = underIncoming(path);
-      if (mapping?.mapped) return readdirSync2(mapping.mapped);
-      const names = new Set(lstatOrUndefined(path)?.isDirectory() ? readdirSync2(path) : []);
+      if (mapping?.mapped) return readdirSync3(mapping.mapped);
+      const names = new Set(lstatOrUndefined(path)?.isDirectory() ? readdirSync3(path) : []);
       if (path === spec.root) for (const name of spec.incoming.keys()) names.add(name);
       for (const created of [...spec.links.keys(), ...spec.dirs]) if (dirname3(created) === path) names.add(basename(created));
       return [...names].sort();
@@ -5703,7 +5931,7 @@ function walkNode(layout, path, root) {
   if (!entry) return { t: "special" };
   if (entry.kind === "link") {
     const text = entry.text ?? "";
-    return { t: "link", text, escapes: !isAbsolute(text) && !within(resolve3(dirname3(path), text), root) };
+    return { t: "link", text, escapes: !isAbsolute2(text) && !within(resolve4(dirname3(path), text), root) };
   }
   if (entry.kind === "file") {
     const stat = entry.stat;
@@ -5711,7 +5939,7 @@ function walkNode(layout, path, root) {
   }
   if (entry.kind === "dir") {
     const children = /* @__PURE__ */ new Map();
-    for (const name of layout.readdir(path).sort()) children.set(name, walkNode(layout, join3(path, name), root));
+    for (const name of layout.readdir(path).sort()) children.set(name, walkNode(layout, join5(path, name), root));
     return { t: "dir", children };
   }
   return { t: "special" };
@@ -5731,7 +5959,7 @@ var Hasher = class {
     if (this.cache.has(key)) return this.cache.get(key);
     const path = before ? this.translate(node.phys) : node.phys;
     const stat = lstatOrUndefined(path);
-    const digest = stat && stat.ino === node.ino && stat.dev === node.dev ? createHash2("sha256").update(readFileSync2(path)).digest("hex") : void 0;
+    const digest = stat && stat.ino === node.ino && stat.dev === node.dev ? createHash3("sha256").update(readFileSync4(path)).digest("hex") : void 0;
     this.cache.set(key, digest);
     return digest;
   }
@@ -5809,34 +6037,34 @@ function shellQuote(value) {
 function describeQuarantine(quarantine, label) {
   let runs;
   try {
-    runs = readdirSync2(quarantine).sort();
+    runs = readdirSync3(quarantine).sort();
   } catch {
     return [`${label(quarantine)} exists but cannot be read; inspect it before converting any CLI skills root`];
   }
   if (!runs.length) return [`${label(quarantine)} is an empty leftover of an earlier conversion; remove it: rmdir ${shellQuote(quarantine)}`];
   return runs.map((run) => {
-    const path = join3(quarantine, run);
+    const path = join5(quarantine, run);
     let progress;
     try {
-      progress = readFileSync2(join3(path, "progress.log"), "utf8");
+      progress = readFileSync4(join5(path, "progress.log"), "utf8");
     } catch {
     }
     if (progress !== void 0 && /^committed$/m.test(progress)) {
       return `an earlier conversion completed and was verified, but its quarantine of proven duplicates remains at ${label(path)}; remove it: rm -rf ${shellQuote(path)}`;
     }
     if (progress !== void 0 && /^rolled-back$/m.test(progress)) {
-      return `an earlier conversion was rolled back, but ${label(join3(path, "items"))} still holds entries nothing planned to put there; inspect them, then remove ${shellQuote(path)}`;
+      return `an earlier conversion was rolled back, but ${label(join5(path, "items"))} still holds entries nothing planned to put there; inspect them, then remove ${shellQuote(path)}`;
     }
-    if (progress === void 0 || !lstatOrUndefined(join3(path, "restore.sh"))) {
+    if (progress === void 0 || !lstatOrUndefined(join5(path, "restore.sh"))) {
       return `an interrupted conversion left ${label(path)} before its first step (no journal), so nothing was changed; remove it: rm -rf ${shellQuote(path)}`;
     }
-    return `an interrupted CLI skills-root conversion left ${label(path)}; restore the repository exactly with: sh ${shellQuote(join3(path, "restore.sh"))} (it reverses every completed step listed in journal.json, then removes the quarantine)`;
+    return `an interrupted CLI skills-root conversion left ${label(path)}; restore the repository exactly with: sh ${shellQuote(join5(path, "restore.sh"))} (it reverses every completed step listed in journal.json, then removes the quarantine)`;
   });
 }
 function indexRows(repoReal, rel) {
-  const probe = spawnSync2("git", ["rev-parse", "--is-inside-work-tree"], { cwd: repoReal, encoding: "utf8" });
+  const probe = spawnSync3("git", ["rev-parse", "--is-inside-work-tree"], { cwd: repoReal, encoding: "utf8" });
   if (probe.status !== 0 || probe.stdout.trim() !== "true") return { rows: [], worktree: false };
-  const listed = spawnSync2("git", ["ls-files", "-s", "-z", "--", rel], { cwd: repoReal, encoding: "utf8", maxBuffer: 64 * 1024 * 1024 });
+  const listed = spawnSync3("git", ["ls-files", "-s", "-z", "--", rel], { cwd: repoReal, encoding: "utf8", maxBuffer: 64 * 1024 * 1024 });
   if (listed.status !== 0) return { rows: [], worktree: true, error: `git ls-files failed for ${rel}: ${listed.stderr.trim()}` };
   const rows = listed.stdout.split("\0").filter(Boolean).map((line) => {
     const [meta, path] = line.split("	");
@@ -5846,19 +6074,19 @@ function indexRows(repoReal, rel) {
 }
 function entryHazard(path, label) {
   const walk = (current, rel) => {
-    const stat = lstatSync2(current);
+    const stat = lstatSync4(current);
     if (rel && basename(current) === ".git") return `${label} contains a nested git repository (${rel}); refusing to move or drop another repository's work tree`;
     if (stat.isSymbolicLink()) {
-      const text = readlinkSync(current);
-      if (!isAbsolute(text) && !within(resolve3(dirname3(current), text), path)) {
+      const text = readlinkSync2(current);
+      if (!isAbsolute2(text) && !within(resolve4(dirname3(current), text), path)) {
         return `${label}/${rel} -> ${text} leaves the entry; moving or dropping it would change what that link resolves to`;
       }
       return void 0;
     }
     if (stat.isFile()) return void 0;
     if (stat.isDirectory()) {
-      for (const name of readdirSync2(current).sort()) {
-        const found = walk(join3(current, name), rel ? `${rel}/${name}` : name);
+      for (const name of readdirSync3(current).sort()) {
+        const found = walk(join5(current, name), rel ? `${rel}/${name}` : name);
         if (found) return found;
       }
       return void 0;
@@ -5869,25 +6097,25 @@ function entryHazard(path, label) {
 }
 function planSkillRoots(repoRoot, options = {}) {
   const selected = options.aliases ?? SUPPORTED_SKILLS_ALIASES;
-  const lexicalRoot = join3(repoRoot, ".agents", "skills");
+  const lexicalRoot = join5(repoRoot, ".agents", "skills");
   const repoReal = realpathOrUndefined(repoRoot);
   const empty = (rootState2, reason) => {
-    const aliases2 = selected.map((alias) => ({ alias, path: join3(repoRoot, alias), state: "unsupported", operations: [], blocks: [reason], summary: `${alias}: blocked (${reason})` }));
+    const aliases2 = selected.map((alias) => ({ alias, path: join5(repoRoot, alias), state: "unsupported", operations: [], blocks: [reason], summary: `${alias}: blocked (${reason})` }));
     return { repoRoot, root: lexicalRoot, rootState: rootState2, aliases: aliases2, operations: [], blocks: [reason], clean: false, incoming: [] };
   };
   if (!repoReal) return empty("unsafe", `${repoRoot} does not resolve; refusing to plan any CLI skills root`);
-  const lex = (path) => within(path, repoReal) ? join3(repoRoot, relative2(repoReal, path)) : path;
-  const rel = (path) => relative2(repoReal, path) || ".";
-  const agents = join3(repoReal, ".agents");
-  const R = join3(agents, "skills");
+  const lex = (path) => within(path, repoReal) ? join5(repoRoot, relative3(repoReal, path)) : path;
+  const rel = (path) => relative3(repoReal, path) || ".";
+  const agents = join5(repoReal, ".agents");
+  const R = join5(agents, "skills");
   const agentsStat = lstatOrUndefined(agents);
   if (agentsStat && (agentsStat.isSymbolicLink() || !agentsStat.isDirectory())) {
-    const what = agentsStat.isSymbolicLink() ? `a symlink (to ${readlinkSync(agents)})` : "not a directory";
+    const what = agentsStat.isSymbolicLink() ? `a symlink (to ${readlinkSync2(agents)})` : "not a directory";
     return empty("unsafe", `.agents is ${what}; the activation root must be a real .agents/skills directory inside the repository, so no CLI skills root is planned`);
   }
   const rootStat = agentsStat ? lstatOrUndefined(R) : void 0;
   const rootState = !rootStat ? "absent" : rootStat.isSymbolicLink() ? "symlink" : rootStat.isDirectory() ? "directory" : "other";
-  const quarantine = join3(agents, SKILL_ROOTS_QUARANTINE);
+  const quarantine = join5(agents, SKILL_ROOTS_QUARANTINE);
   if (lstatOrUndefined(quarantine)) {
     const reasons = describeQuarantine(quarantine, (path) => rel(path));
     const plan2 = empty(rootState, reasons[0]);
@@ -5907,15 +6135,15 @@ function planSkillRoots(repoRoot, options = {}) {
   const repoTop = gitToplevel(repoReal);
   let inventory;
   const inventoryOf = () => inventory ??= bmadCliProjectionInventory(repoReal);
-  const realAliasDirs = SUPPORTED_SKILLS_ALIASES.map((alias) => join3(repoReal, alias)).filter((path) => {
+  const realAliasDirs = SUPPORTED_SKILLS_ALIASES.map((alias) => join5(repoReal, alias)).filter((path) => {
     const stat = lstatOrUndefined(path);
     return Boolean(stat?.isDirectory() && !stat.isSymbolicLink() && !lstatOrUndefined(dirname3(path))?.isSymbolicLink());
   });
   const infos = selected.map((alias) => {
-    const real = join3(repoReal, alias);
+    const real = join5(repoReal, alias);
     const cliRoot = dirname3(real);
     const cliName = rel(cliRoot);
-    const info = { alias, path: join3(repoRoot, alias), real, cliRoot, cliName, state: "unsupported", cliRootExists: false, blocks: [], candidates: [] };
+    const info = { alias, path: join5(repoRoot, alias), real, cliRoot, cliName, state: "unsupported", cliRootExists: false, blocks: [], candidates: [] };
     if (rootState === "other") {
       info.blocks.push(`.agents/skills is not a directory; refusing to plan ${alias}`);
       return info;
@@ -5939,10 +6167,10 @@ function planSkillRoots(repoRoot, options = {}) {
       return info;
     }
     if (stat.isSymbolicLink()) {
-      const text = readlinkSync(real);
+      const text = readlinkSync2(real);
       info.text = text;
       const reached = realpathOrUndefined(real);
-      if (rootReal !== void 0 && reached === rootReal || rootState === "absent" && resolve3(cliRoot, text) === R) {
+      if (rootReal !== void 0 && reached === rootReal || rootState === "absent" && resolve4(cliRoot, text) === R) {
         info.state = "alias";
         return info;
       }
@@ -5989,16 +6217,16 @@ function planSkillRoots(repoRoot, options = {}) {
       const name = row.path.slice(aliasRel.length + 1).split("/")[0];
       tracked.set(name, [...tracked.get(name) ?? [], row]);
     }
-    for (const name of readdirSync2(real).sort()) {
-      const path = join3(real, name);
+    for (const name of readdirSync3(real).sort()) {
+      const path = join5(real, name);
       const label = `${alias}/${name}`;
-      const entryStat = lstatSync2(path);
+      const entryStat = lstatSync4(path);
       const rows = tracked.get(name) ?? [];
       const candidate = { alias, name, path, label, kind: entryStat.isSymbolicLink() ? "link" : entryStat.isDirectory() ? "directory" : "file", tracked: rows.map((row) => row.path) };
       if (name === ".git") {
         candidate.staticBlock = `${label} is git metadata; refusing to relocate another repository's work tree`;
       } else if (entryStat.isSymbolicLink()) {
-        candidate.text = readlinkSync(path);
+        candidate.text = readlinkSync2(path);
         candidate.resolution = resolveIn(diskLayout, path);
         if (rows.length) candidate.staticBlock = `${label} -> ${candidate.text} is tracked in git; a tracked link cannot be attested BMAD installer output, so it is never untracked, moved or dropped`;
       } else if (!entryStat.isDirectory() && !entryStat.isFile()) {
@@ -6012,10 +6240,10 @@ function planSkillRoots(repoRoot, options = {}) {
         if (!candidate.staticBlock && linkRow) candidate.staticBlock = `${label} holds a tracked symlink (${linkRow.path}); a tracked link cannot be attested BMAD installer output`;
         if (!candidate.staticBlock && rows.length) {
           const paths = rows.map((row) => row.path);
-          const missing = paths.filter((path2) => !lstatOrUndefined(join3(repoReal, path2)));
+          const missing = paths.filter((path2) => !lstatOrUndefined(join5(repoReal, path2)));
           if (missing.length) candidate.staticBlock = `${label} has tracked path(s) missing from the work tree (${missing[0]}); restore or commit the deletion first`;
           else {
-            const verdict = attestBmadInstallerFiles(inventoryOf(), cliRoot, paths.map((path2) => relative2(cliRoot, join3(repoReal, path2))), cliName);
+            const verdict = attestBmadInstallerFiles(inventoryOf(), cliRoot, paths.map((path2) => relative3(cliRoot, join5(repoReal, path2))), cliName);
             if (!verdict.safe) candidate.staticBlock = `${label} is tracked in git and not attested BMAD installer output: ${verdict.reason}`;
           }
         }
@@ -6064,15 +6292,15 @@ function planSkillRoots(repoRoot, options = {}) {
     };
     const finalText = (candidate) => {
       const text = candidate.text;
-      if (isAbsolute(text)) return text;
-      const lexical = resolve3(dirname3(candidate.path), text);
+      if (isAbsolute2(text)) return text;
+      const lexical = resolve4(dirname3(candidate.path), text);
       const home = activeDirs.find((dir) => within(lexical, dir));
-      const mapped = home ? join3(R, relative2(home, lexical)) : lexical;
-      return relative2(R, mapped) || ".";
+      const mapped = home ? join5(R, relative3(home, lexical)) : lexical;
+      return relative3(R, mapped) || ".";
     };
     for (const name of [...byName.keys()].sort()) {
       const candidates = byName.get(name);
-      const counterpart = join3(R, name);
+      const counterpart = join5(R, name);
       const counterpartLabel = `.agents/skills/${name}`;
       const live = [];
       for (const candidate of candidates) {
@@ -6087,7 +6315,7 @@ function planSkillRoots(repoRoot, options = {}) {
         else decide(candidate, "drop-duplicate-entry", `drop ${candidate.label} (every entry already exists byte-identical in ${where})`, extra);
       };
       if (rootEntry) {
-        const counterpartText = rootEntry.isSymbolicLink() ? readlinkSync(counterpart) : void 0;
+        const counterpartText = rootEntry.isSymbolicLink() ? readlinkSync2(counterpart) : void 0;
         const rootView = beforeView(counterpart);
         if (rootEntry.isSymbolicLink()) {
           if (!rootView) {
@@ -6181,7 +6409,7 @@ function planSkillRoots(repoRoot, options = {}) {
       const responsible = converting.filter((info) => within(path, info.real) || [...view.hops, view.real].some((hop) => within(hop, info.real)));
       for (const hop of [path, ...view.hops, view.real]) {
         if (!within(hop, R) || hop === R) continue;
-        const writer = incomingByName.get(relative2(R, hop).split(sep)[0]);
+        const writer = incomingByName.get(relative3(R, hop).split(sep)[0]);
         const info = writer && converting.find((item) => item.alias === writer.alias);
         if (info && !responsible.includes(info)) responsible.push(info);
       }
@@ -6267,10 +6495,10 @@ function planSkillRoots(repoRoot, options = {}) {
     const after = finalLayout(spec);
     for (const [name, entry] of incomingByName) {
       if (blocked.has(entry.alias)) continue;
-      const resolution = resolveIn(after, join3(R, name));
+      const resolution = resolveIn(after, join5(R, name));
       const phys = resolution ? after.lstat(resolution.real)?.phys ?? resolution.real : void 0;
-      const text = entry.kind !== "link" ? void 0 : entry.incoming.kind === "link" ? entry.incoming.text : readlinkSync(entry.from);
-      incoming.push({ name, path: join3(lexicalRoot, name), from: lex(entry.from), kind: entry.kind, ...text === void 0 ? {} : { text }, resolves: phys ? lex(phys) : void 0 });
+      const text = entry.kind !== "link" ? void 0 : entry.incoming.kind === "link" ? entry.incoming.text : readlinkSync2(entry.from);
+      incoming.push({ name, path: join5(lexicalRoot, name), from: lex(entry.from), kind: entry.kind, ...text === void 0 ? {} : { text }, resolves: phys ? lex(phys) : void 0 });
     }
   }
   const plan = { repoRoot, root: lexicalRoot, rootState, aliases, operations, blocks, clean: blocks.length === 0, incoming };
@@ -6282,26 +6510,26 @@ function planSkillRoots(repoRoot, options = {}) {
     agentsExisted: Boolean(agentsStat),
     before,
     affected,
-    converted: converted.map((entry) => join3(repoReal, entry.alias)),
-    created: aliases.filter((entry) => entry.operations.some((operation) => operation.kind === "create-alias" || operation.kind === "replace-dangling-alias")).map((entry) => join3(repoReal, entry.alias))
+    converted: converted.map((entry) => join5(repoReal, entry.alias)),
+    created: aliases.filter((entry) => entry.operations.some((operation) => operation.kind === "create-alias" || operation.kind === "replace-dangling-alias")).map((entry) => join5(repoReal, entry.alias))
   });
   return plan;
 }
 function visibleViews(repoReal, R, view) {
   const views = /* @__PURE__ */ new Map();
   const seen = /* @__PURE__ */ new Set();
-  for (const location of [R, ...SUPPORTED_SKILLS_ALIASES.map((alias) => join3(repoReal, alias))]) {
+  for (const location of [R, ...SUPPORTED_SKILLS_ALIASES.map((alias) => join5(repoReal, alias))]) {
     const resolved = realpathOrUndefined(location);
     if (!resolved || seen.has(resolved)) continue;
     seen.add(resolved);
     let names;
     try {
-      names = readdirSync2(location);
+      names = readdirSync3(location);
     } catch {
       continue;
     }
     for (const name of names.sort()) {
-      const path = join3(location, name);
+      const path = join5(location, name);
       const found = view(path);
       if (found) views.set(path, found);
     }
@@ -6317,12 +6545,12 @@ function changedPaths(operation) {
   return operation.from ? [operation.from, operation.path] : [operation.path];
 }
 function compileSteps(plan, facts, items) {
-  const physical = (path) => join3(facts.repoReal, relative2(plan.repoRoot, path));
+  const physical = (path) => join5(facts.repoReal, relative3(plan.repoRoot, path));
   const steps = [];
   const park = (from, kind) => {
     const stat = lstatOrUndefined(from);
-    const text = kind === "link" && stat?.isSymbolicLink() ? readlinkSync(from) : void 0;
-    steps.push({ step: "rename", from, to: join3(items, `${steps.length}-${basename(from)}`), park: kind, ...text === void 0 ? {} : { text } });
+    const text = kind === "link" && stat?.isSymbolicLink() ? readlinkSync2(from) : void 0;
+    steps.push({ step: "rename", from, to: join5(items, `${steps.length}-${basename(from)}`), park: kind, ...text === void 0 ? {} : { text } });
   };
   for (const operation of plan.operations) {
     const path = physical(operation.path);
@@ -6425,15 +6653,15 @@ function runStep(step) {
     return;
   }
   if (lstatOrUndefined(step.to)) throw new Error(`${step.to} appeared before the move`);
-  if (step.park === "dir" && readdirSync2(step.from).length) throw new Error(`${step.from} is not empty (${readdirSync2(step.from)[0]})`);
-  if (step.park === "link" && (!lstatOrUndefined(step.from)?.isSymbolicLink() || readlinkSync(step.from) !== step.text)) throw new Error(`${step.from} is no longer the link that was planned`);
+  if (step.park === "dir" && readdirSync3(step.from).length) throw new Error(`${step.from} is not empty (${readdirSync3(step.from)[0]})`);
+  if (step.park === "link" && (!lstatOrUndefined(step.from)?.isSymbolicLink() || readlinkSync2(step.from) !== step.text)) throw new Error(`${step.from} is no longer the link that was planned`);
   renameSync(step.from, step.to);
 }
 function parkedGap(step, before, affected, hasher) {
   const stat = lstatOrUndefined(step.to);
   if (!stat) return `${step.to} is missing from the quarantine`;
-  if (step.park === "dir") return readdirSync2(step.to).length ? `${step.to} is no longer empty` : void 0;
-  if (step.park === "link") return stat.isSymbolicLink() && readlinkSync(step.to) === step.text ? void 0 : `${step.to} is no longer the planned link`;
+  if (step.park === "dir") return readdirSync3(step.to).length ? `${step.to} is no longer empty` : void 0;
+  if (step.park === "link") return stat.isSymbolicLink() && readlinkSync2(step.to) === step.text ? void 0 : `${step.to} is no longer the planned link`;
   if (!before?.node) return `${step.from} had no recorded content to compare`;
   const parked = viewIn(diskLayout, step.to, affected);
   if (!parked) return `${step.to} does not resolve`;
@@ -6447,7 +6675,7 @@ function undoStep(step) {
   }
   if (step.step === "symlink") {
     const stat = lstatOrUndefined(step.path);
-    if (!stat?.isSymbolicLink() || readlinkSync(step.path) !== step.text) throw new Error(`${step.path} is not the link this run created`);
+    if (!stat?.isSymbolicLink() || readlinkSync2(step.path) !== step.text) throw new Error(`${step.path} is not the link this run created`);
     unlinkSync(step.path);
     return;
   }
@@ -6459,7 +6687,7 @@ function translator(steps, done) {
     let current = path;
     for (let index = 0; index < done; index++) {
       const step = steps[index];
-      if (step.step === "rename" && within(current, step.from)) current = join3(step.to, relative2(step.from, current));
+      if (step.step === "rename" && within(current, step.from)) current = join5(step.to, relative3(step.from, current));
     }
     return current;
   };
@@ -6479,10 +6707,10 @@ function applySkillRoots(repoRoot, options) {
   if (!plan.operations.length) return { ok: plan.clean, changedFiles: [], details: [], blocks: plan.blocks, plan };
   const facts = internals.get(plan);
   const failed = (reason) => ({ ok: false, changedFiles: [], details: [], blocks: [...plan.blocks, reason], plan });
-  const agents = join3(facts.repoReal, ".agents");
-  const quarantine = join3(agents, SKILL_ROOTS_QUARANTINE);
-  const run = join3(quarantine, `${Date.now()}-${process.pid}`);
-  const items = join3(run, "items");
+  const agents = join5(facts.repoReal, ".agents");
+  const quarantine = join5(agents, SKILL_ROOTS_QUARANTINE);
+  const run = join5(quarantine, `${Date.now()}-${process.pid}`);
+  const items = join5(run, "items");
   const createdAgents = !lstatOrUndefined(agents);
   try {
     if (createdAgents) mkdirSync2(agents);
@@ -6492,12 +6720,12 @@ function applySkillRoots(repoRoot, options) {
     return failed(`could not create the quarantine ${quarantine}: ${error instanceof Error ? error.message : String(error)}`);
   }
   const steps = compileSteps(plan, facts, items);
-  const log = join3(run, "progress.log");
+  const log = join5(run, "progress.log");
   try {
-    writeFileSync2(join3(run, ".gitignore"), "*\n");
-    writeFileSync2(join3(run, "journal.json"), `${JSON.stringify({ version: 1, repo: facts.repoReal, createdAgents, steps, operations: plan.operations.map((operation) => operation.detail) }, null, 2)}
+    writeFileSync2(join5(run, ".gitignore"), "*\n");
+    writeFileSync2(join5(run, "journal.json"), `${JSON.stringify({ version: 1, repo: facts.repoReal, createdAgents, steps, operations: plan.operations.map((operation) => operation.detail) }, null, 2)}
 `);
-    writeFileSync2(join3(run, "restore.sh"), restoreScript(run, quarantine, createdAgents ? agents : void 0, facts.repoReal, steps), { mode: 493 });
+    writeFileSync2(join5(run, "restore.sh"), restoreScript(run, quarantine, createdAgents ? agents : void 0, facts.repoReal, steps), { mode: 493 });
     writeFileSync2(log, "");
   } catch (error) {
     rmSync(run, { recursive: true, force: true });
@@ -6535,11 +6763,11 @@ function applySkillRoots(repoRoot, options) {
         appendFileSync(log, `undone ${index}
 `);
       } catch (error) {
-        return failed(`${reason}; rollback stopped at step ${index} (${error instanceof Error ? error.message : String(error)}): finish it exactly with: sh ${shellQuote(join3(run, "restore.sh"))}`);
+        return failed(`${reason}; rollback stopped at step ${index} (${error instanceof Error ? error.message : String(error)}): finish it exactly with: sh ${shellQuote(join5(run, "restore.sh"))}`);
       }
     }
     appendFileSync(log, "rolled-back\n");
-    if (readdirSync2(items).length) return failed(`${reason}; rolled back, but ${items} is not empty \u2014 inspect it, then remove ${run}`);
+    if (readdirSync3(items).length) return failed(`${reason}; rolled back, but ${items} is not empty \u2014 inspect it, then remove ${run}`);
     cleanup();
     return failed(`rolled back: ${reason}`);
   };
@@ -6560,12 +6788,12 @@ function applySkillRoots(repoRoot, options) {
   const mismatches = [];
   for (const [path, view] of facts.before) {
     const gap = viewGap(view, viewIn(diskLayout, path, facts.affected), hasher);
-    if (gap) mismatches.push(`${relative2(facts.repoReal, path)}: ${gap}`);
+    if (gap) mismatches.push(`${relative3(facts.repoReal, path)}: ${gap}`);
   }
   const rootReal = realpathOrUndefined(facts.R);
   for (const alias of [...facts.converted, ...facts.created]) {
-    const reaches = rootReal ? realpathOrUndefined(alias) === rootReal : resolve3(dirname3(alias), readlinkSync(alias)) === facts.R;
-    if (!reaches) mismatches.push(`${relative2(facts.repoReal, alias)} does not resolve to .agents/skills`);
+    const reaches = rootReal ? realpathOrUndefined(alias) === rootReal : resolve4(dirname3(alias), readlinkSync2(alias)) === facts.R;
+    if (!reaches) mismatches.push(`${relative3(facts.repoReal, alias)} does not resolve to .agents/skills`);
   }
   for (const step of steps) {
     if (step.step !== "rename" || !step.park) continue;
@@ -6575,7 +6803,7 @@ function applySkillRoots(repoRoot, options) {
   if (mismatches.length) return rollback(mismatches.slice(0, 5).join("; "));
   const tracked = plan.operations.flatMap((operation) => operation.kind === "untrack" ? operation.tracked ?? [] : []);
   if (tracked.length) {
-    const removed = spawnSync2(
+    const removed = spawnSync3(
       "git",
       ["rm", "-r", "--cached", "--quiet", "--pathspec-from-file=-", "--pathspec-file-nul"],
       { cwd: facts.repoReal, encoding: "utf8", input: `${tracked.join("\0")}\0` }
@@ -6597,32 +6825,32 @@ function shellQuotePath(path) {
 var PJ_SKILLS = "pj skills";
 function skillCoreOptions(ctx) {
   return {
-    cwd: resolve4(ctx.repoRoot),
-    project: resolve4(ctx.repoRoot),
+    cwd: resolve5(ctx.repoRoot),
+    project: resolve5(ctx.repoRoot),
     scope: "project",
     home: ctx.homeDir,
     env: process.env,
     // Preserve the documented PJangler override while using one core resolver.
-    ...process.env.PJ_SKILLS_REGISTRY_ROOT?.trim() ? { registryRoot: resolve4(process.env.PJ_SKILLS_REGISTRY_ROOT.trim()) } : {}
+    ...process.env.PJ_SKILLS_REGISTRY_ROOT?.trim() ? { registryRoot: resolve5(process.env.PJ_SKILLS_REGISTRY_ROOT.trim()) } : {}
   };
 }
 function relaySkillexCommands(text) {
   return text.replace(SKILLEX_COMMAND, PJ_SKILLS);
 }
-var SKILLEX_COMMAND = /(?<![\w/@.:-])skillex(?=\s+(?:skill|set|pack|init|enable|disable|inherit|sync|status|explain|doctor|vendor|profile|migrate)\b)/g;
+var SKILLEX_COMMAND = /(?<![\w/@.:-])skillex(?=\s+(?:skill|set|pack|bmad|init|enable|disable|inherit|normalize|sync|status|explain|doctor|vendor|profile|migrate|integrations|clients|root)\b)/g;
 function skillDiagnostics(findings) {
   return findings.map(
     (finding2) => `${finding2.code}: ${finding2.message}${finding2.path ? ` (${finding2.path})` : ""}${finding2.fix ? ` \u2014 ${relaySkillexCommands(finding2.fix)}` : ""}`
   );
 }
 function migrationGuidance(ctx) {
-  const project = `--project ${shellQuotePath(resolve4(ctx.repoRoot))}`;
+  const project = `--project ${shellQuotePath(resolve5(ctx.repoRoot))}`;
   return `Legacy selections or skill-root content need explicit review. Preview: ${PJ_SKILLS} migrate ${project}. Apply the reviewed plan: ${PJ_SKILLS} migrate ${project} --apply (add --mapping <file> only for content the preview reports as ambiguous). PJangler relocates CLI-root skill entries losslessly into .agents/skills so each root can become the alias, but never claims ownership of foreign or installer-owned skills and never deletes content that is not a proven duplicate.`;
 }
 function projectPaths(ctx, rel) {
-  const paths = /* @__PURE__ */ new Set([join4(resolve4(ctx.repoRoot), rel)]);
+  const paths = /* @__PURE__ */ new Set([join6(resolve5(ctx.repoRoot), rel)]);
   try {
-    paths.add(join4(realpathSync2(ctx.repoRoot), rel));
+    paths.add(join6(realpathSync2(ctx.repoRoot), rel));
   } catch {
   }
   return paths;
@@ -6632,7 +6860,7 @@ function activationConflict(ctx, findings) {
   if (!finding2?.path) return void 0;
   const aliases = new Set(SUPPORTED_SKILLS_ALIASES.flatMap((alias) => [...projectPaths(ctx, alias)]));
   if (aliases.has(finding2.path)) return { kind: "alias", path: finding2.path, name: basename2(dirname4(finding2.path)) };
-  if (projectPaths(ctx, join4(".agents", "skills")).has(dirname4(finding2.path)) && /collides with foreign activation content/.test(finding2.message)) {
+  if (projectPaths(ctx, join6(".agents", "skills")).has(dirname4(finding2.path)) && /collides with foreign activation content/.test(finding2.message)) {
     return { kind: "root", path: finding2.path, name: basename2(finding2.path) };
   }
   return void 0;
@@ -6647,10 +6875,10 @@ async function canonicalSkillPath(ctx, name) {
   return (await projectBindings(ctx)).find((binding) => binding.name === name)?.path;
 }
 async function classifyRootCollision(ctx, path) {
-  const label = relative3(resolve4(ctx.repoRoot), path) || path;
+  const label = relative4(resolve5(ctx.repoRoot), path) || path;
   let stat;
   try {
-    stat = lstatSync3(path);
+    stat = lstatSync5(path);
   } catch {
     return { action: "block", detail: `${label} disappeared while resolving a root collision` };
   }
@@ -6661,7 +6889,7 @@ async function classifyRootCollision(ctx, path) {
   } catch {
     real = void 0;
   }
-  return classifyCollidingLink(ctx, basename2(path), label, readlinkSync2(path), real);
+  return classifyCollidingLink(ctx, basename2(path), label, readlinkSync3(path), real);
 }
 function realEntryCollision(label, name, directory) {
   return { action: "block", detail: `${label} is a real ${directory ? "directory" : "entry"} that collides with the selected catalog skill ${name}; move or rename it, pjangler never removes real content` };
@@ -6700,14 +6928,14 @@ function realpathOf(path) {
   }
 }
 async function predictRootCollisions(ctx, incoming) {
-  const root = join4(resolve4(ctx.repoRoot), ".agents", "skills");
-  const physicalRoot = join4(realpathOf(ctx.repoRoot) ?? resolve4(ctx.repoRoot), ".agents", "skills");
+  const root = join6(resolve5(ctx.repoRoot), ".agents", "skills");
+  const physicalRoot = join6(realpathOf(ctx.repoRoot) ?? resolve5(ctx.repoRoot), ".agents", "skills");
   const planned = new Map(incoming.map((entry) => [entry.name, entry]));
   const owned = await receiptOwnedLinks(ctx);
   const predictions = [];
   for (const binding of await projectBindings(ctx)) {
-    const path = join4(root, binding.name);
-    const label = relative3(resolve4(ctx.repoRoot), path);
+    const path = join6(root, binding.name);
+    const label = relative4(resolve5(ctx.repoRoot), path);
     const catalog = new Set([binding.path, realpathOf(binding.path)].filter(Boolean));
     const entry = planned.get(binding.name);
     if (entry) {
@@ -6722,12 +6950,12 @@ async function predictRootCollisions(ctx, incoming) {
     }
     let stat;
     try {
-      stat = lstatSync3(path);
+      stat = lstatSync5(path);
     } catch {
       continue;
     }
     if (stat.isSymbolicLink() && catalog.has(realpathOf(path))) continue;
-    if (owned.has(join4(physicalRoot, binding.name)) || owned.has(path)) continue;
+    if (owned.has(join6(physicalRoot, binding.name)) || owned.has(path)) continue;
     predictions.push({ path, decision: await classifyRootCollision(ctx, path) });
   }
   return predictions;
@@ -6795,7 +7023,7 @@ async function synchronizeProjectSkills(ctx, extra = {}) {
         const replaceable = predictions.filter(({ decision }) => decision.action === "unlink");
         if (blocking.length) {
           details.push(...blocking.map(({ decision }) => `blocked: ${decision.detail}`));
-          if (replaceable.length) details.push(`left in place until the blocked collision(s) above are resolved: ${replaceable.map(({ path }) => relative3(resolve4(ctx.repoRoot), path)).join(", ")}`);
+          if (replaceable.length) details.push(`left in place until the blocked collision(s) above are resolved: ${replaceable.map(({ path }) => relative4(resolve5(ctx.repoRoot), path)).join(", ")}`);
           details.push(migrationGuidance(ctx));
           return { ok: false, changedFiles: [...new Set(changedFiles)], details };
         }
@@ -7495,20 +7723,13 @@ var HOOKS_COMMENT_HEADER = `# This block will handle the linking of
 # TODO: Ensure this works for all levels of nesting.
 # i.e. All linked agent files MUST be siblings at
 # any given level of nesting.`;
-var SKILLEX_TOOL_VERSION = "0.1.2";
-var SKILLS_SYNC_TOOLS = `{ "npm:@delorenj/skillex" = { version = "${SKILLEX_TOOL_VERSION}", allow_low_downloads = true }, node = "24" }`;
 var LINK_AGENTFILES_WATCH_TASK_BLOCK = `[[watch_files]]
 patterns = ["AGENTS.md"]
 task = "${LINK_AGENTFILES_TASK}"
 
 ${taskHeader(LINK_AGENTFILES_TASK)}
 description = "Symlink all agent files to AGENTS.md"
-run = ${JSON.stringify(LINK_AGENTFILES_SCRIPT)}
-
-${taskHeader(SKILLS_SYNC_TASK)}
-description = "Reconcile this project's selected skills"
-tools = ${SKILLS_SYNC_TOOLS}
-run = "skillex sync --scope project --project '{{config_root}}'"`;
+run = ${JSON.stringify(LINK_AGENTFILES_SCRIPT)}`;
 var VERSIONING_BLOCK = `# >>> mise-versioning >>>  (managed block \u2014 do not edit by hand; re-run init to update)
 [tasks."version"]
 description = "Print the current version (vX.Y.Z)"
@@ -7539,10 +7760,10 @@ function normalizeNewlines(value) {
   return value.replace(/\r\n/g, "\n");
 }
 function readText(path) {
-  return normalizeNewlines(readFileSync3(path, "utf8"));
+  return normalizeNewlines(readFileSync5(path, "utf8"));
 }
 function safeReadText2(path) {
-  return existsSync3(path) ? readText(path) : null;
+  return existsSync4(path) ? readText(path) : null;
 }
 function ensureParent(path) {
   mkdirSync3(dirname5(path), { recursive: true });
@@ -7566,16 +7787,16 @@ function titleCaseSlug(slug) {
   return slug.split(/[-_]/g).filter(Boolean).map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join(" ");
 }
 function readSymlinkTarget(path) {
-  if (!existsSync3(path)) return null;
+  if (!existsSync4(path)) return null;
   try {
-    return readlinkSync3(path);
+    return readlinkSync4(path);
   } catch {
     return null;
   }
 }
 function ensureSymlink(path, target, dryRun) {
-  if (existsSync3(path)) {
-    const stat = lstatSync4(path);
+  if (existsSync4(path)) {
+    const stat = lstatSync6(path);
     if (stat.isSymbolicLink()) {
       const current = readSymlinkTarget(path);
       if (current === target) return { changed: false };
@@ -7585,18 +7806,18 @@ function ensureSymlink(path, target, dryRun) {
       }
       return { changed: true };
     }
-    return { changed: false, blocked: `${relative4(process.cwd(), path) || path} exists and is not a symlink` };
+    return { changed: false, blocked: `${relative5(process.cwd(), path) || path} exists and is not a symlink` };
   }
   if (!dryRun) symlinkSync2(target, path);
   return { changed: true };
 }
 function bootstrapAgentsFile(repoRoot, dryRun) {
-  const agentsPath = join5(repoRoot, "AGENTS.md");
-  if (existsSync3(agentsPath)) return { changedFiles: [], details: [] };
+  const agentsPath = join7(repoRoot, "AGENTS.md");
+  if (existsSync4(agentsPath)) return { changedFiles: [], details: [] };
   for (const file of ["CLAUDE.md", "GEMINI.md"]) {
-    const source = join5(repoRoot, file);
-    if (!existsSync3(source)) continue;
-    const stat = lstatSync4(source);
+    const source = join7(repoRoot, file);
+    if (!existsSync4(source)) continue;
+    const stat = lstatSync6(source);
     if (stat.isSymbolicLink()) continue;
     if (stat.isFile()) {
       if (!dryRun) renameSync2(source, agentsPath);
@@ -7604,9 +7825,9 @@ function bootstrapAgentsFile(repoRoot, dryRun) {
     }
     return { changedFiles: [], details: [], blocked: `${file} exists but is not a regular file; cannot promote to AGENTS.md` };
   }
-  const readmePath = join5(repoRoot, "README.md");
-  if (existsSync3(readmePath)) {
-    const stat = lstatSync4(readmePath);
+  const readmePath = join7(repoRoot, "README.md");
+  if (existsSync4(readmePath)) {
+    const stat = lstatSync6(readmePath);
     if (!stat.isFile()) return { changedFiles: [], details: [], blocked: "README.md exists but is not a regular file; cannot copy to AGENTS.md" };
     if (!dryRun) copyFileSync(readmePath, agentsPath);
     return { changedFiles: [agentsPath], details: ["Copied README.md to AGENTS.md before wiring agent-file symlinks"] };
@@ -7644,12 +7865,12 @@ function yamlGet(text, keyPath) {
   return "";
 }
 function discoverRoles(repoRoot) {
-  const rolesDir = join5(repoRoot, "agents", "hermes");
-  if (!existsSync3(rolesDir)) return [];
-  return readdirSync3(rolesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => {
-    const roleDir = join5(rolesDir, entry.name);
-    const roleYamlPath = join5(roleDir, "role.yaml");
-    if (!existsSync3(roleYamlPath)) return null;
+  const rolesDir = join7(repoRoot, "agents", "hermes");
+  if (!existsSync4(rolesDir)) return [];
+  return readdirSync4(rolesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => {
+    const roleDir = join7(rolesDir, entry.name);
+    const roleYamlPath = join7(roleDir, "role.yaml");
+    if (!existsSync4(roleYamlPath)) return null;
     const text = readText(roleYamlPath);
     const runtimeRepoRaw = yamlGet(text, "runtime.github_repo");
     return {
@@ -7681,26 +7902,26 @@ function discoverRoles(repoRoot) {
   }).filter((value) => Boolean(value));
 }
 function templateScript(ctx, name) {
-  const source = join5(ctx.pjanglerRoot, ".mise", "scripts", name);
-  return existsSync3(source) ? readText(source) : void 0;
+  const source = join7(ctx.pjanglerRoot, ".mise", "scripts", name);
+  return existsSync4(source) ? readText(source) : void 0;
 }
 function templateVersioningScript(ctx) {
   return templateScript(ctx, "versioning.sh");
 }
 function templateLinkAgentfilesScript(ctx) {
-  const source = join5(ctx.pjanglerRoot, "templates", "commonproject", "template", ".mise", "scripts", "link-agentfiles.sh");
-  return existsSync3(source) ? readText(source) : templateScript(ctx, "link-agentfiles.sh");
+  const source = join7(ctx.pjanglerRoot, "templates", "commonproject", "template", ".mise", "scripts", "link-agentfiles.sh");
+  return existsSync4(source) ? readText(source) : templateScript(ctx, "link-agentfiles.sh");
 }
 function templateMaterializeEnvScript(ctx) {
-  const source = join5(ctx.pjanglerRoot, "templates", "commonproject", "template", MATERIALIZE_ENV_SCRIPT_REL);
-  return existsSync3(source) ? readText(source) : void 0;
+  const source = join7(ctx.pjanglerRoot, "templates", "commonproject", "template", MATERIALIZE_ENV_SCRIPT_REL);
+  return existsSync4(source) ? readText(source) : void 0;
 }
 function resolveAgentHooksLayer(ctx) {
   const override = process.env.PJ_AGENT_HOOKS_LAYER;
   if (override === "0" || override === "false") return false;
   if (override === "1" || override === "true") return true;
-  if (existsSync3(join5(ctx.repoRoot, ".agents", "hooks", "sync.py"))) return true;
-  return !existsSync3(join5(ctx.homeDir, ".agents", "hooks"));
+  if (existsSync4(join7(ctx.repoRoot, ".agents", "hooks", "sync.py"))) return true;
+  return !existsSync4(join7(ctx.homeDir, ".agents", "hooks"));
 }
 function evaluateMiseConditionals(template, agentHooksLayer) {
   const out = [];
@@ -7730,22 +7951,22 @@ function renderGeneratedProjectMiseToml(ctx, template) {
   return evaluateMiseConditionals(template, resolveAgentHooksLayer(ctx)).replace(/\{%\s*raw\s*%\}([\s\S]*?)\{%\s*endraw\s*%\}/g, "$1").replace(/\{\{\s*project_name\s*\}\}/g, projectName);
 }
 function ensureMiseTomlFromTemplate(ctx, changedFiles) {
-  const targetPath = join5(ctx.repoRoot, "mise.toml");
-  if (existsSync3(targetPath)) return null;
-  const sourcePath = join5(ctx.pjanglerRoot, "templates", "commonproject", "template", "mise.toml.jinja");
-  if (!existsSync3(sourcePath)) return null;
+  const targetPath = join7(ctx.repoRoot, "mise.toml");
+  if (existsSync4(targetPath)) return null;
+  const sourcePath = join7(ctx.pjanglerRoot, "templates", "commonproject", "template", "mise.toml.jinja");
+  if (!existsSync4(sourcePath)) return null;
   const rendered = renderGeneratedProjectMiseToml(ctx, readText(sourcePath));
   changedFiles.push(targetPath);
   if (!ctx.dryRun) writeText(targetPath, rendered);
   return rendered;
 }
 function templateCommonProjectText(ctx, rel) {
-  const path = join5(ctx.pjanglerRoot, "templates", "commonproject", "template", rel);
-  return existsSync3(path) ? readText(path) : void 0;
+  const path = join7(ctx.pjanglerRoot, "templates", "commonproject", "template", rel);
+  return existsSync4(path) ? readText(path) : void 0;
 }
 function lstatIfPresent(path) {
   try {
-    return lstatSync4(path);
+    return lstatSync6(path);
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     throw error;
@@ -7753,17 +7974,17 @@ function lstatIfPresent(path) {
 }
 function templateVersionFilesConf(ctx, repoRoot) {
   if (isObsidianPluginRepo(ctx, repoRoot)) return OBSIDIAN_VERSION_FILES_CONF;
-  const packageJson = join5(repoRoot, "package.json");
-  return existsSync3(packageJson) ? "# mise-versioning manifest: <type> <path>\n# types: json toml cargo csproj gradle plain gittag\njson package.json\ngittag .\n" : "# mise-versioning manifest: <type> <path>\n# types: json toml cargo csproj gradle plain gittag\ngittag .\n";
+  const packageJson = join7(repoRoot, "package.json");
+  return existsSync4(packageJson) ? "# mise-versioning manifest: <type> <path>\n# types: json toml cargo csproj gradle plain gittag\njson package.json\ngittag .\n" : "# mise-versioning manifest: <type> <path>\n# types: json toml cargo csproj gradle plain gittag\ngittag .\n";
 }
 var OBSIDIAN_VERSION_FILES_CONF = "# mise-versioning manifest: <type> <path>\n# types: json toml cargo csproj gradle plain gittag obsidian\n# Obsidian plugin: bump with `mise run version:bump`, release with `npm version` (bare X.Y.Z tag).\njson package.json\nobsidian manifest.json\n";
 function recordedProjectType(ctx) {
-  return record(record(readProjectJson(ctx)?.template).commonproject).project_type;
+  return record2(record2(readProjectJson(ctx)?.template).commonproject).project_type;
 }
 function isObsidianPluginRepo(ctx, repoRoot) {
   const recorded = recordedProjectType(ctx);
   if (recorded !== void 0) return recorded === "obsidian-plugin";
-  const manifest = record(tryParseJson(safeReadText2(join5(repoRoot, "manifest.json"))));
+  const manifest = record2(tryParseJson(safeReadText2(join7(repoRoot, "manifest.json"))));
   return typeof manifest.id === "string" && typeof manifest.minAppVersion === "string";
 }
 function unsupportedVersionTypes(conf, script) {
@@ -7973,6 +8194,7 @@ function managedLinkHookIssues(parsed) {
 }
 var RETIRED_LINK_TASKS = [
   "skills-sync",
+  SKILLS_SYNC_TASK,
   "skills-provision-packs",
   PROVISION_PACKS_TASK,
   "skills-provision-bmad",
@@ -7986,8 +8208,7 @@ function managedLinkTables() {
   const parsed = parseToml2(LINK_AGENTFILES_WATCH_TASK_BLOCK);
   return {
     watch: { lines: chunks[0], value: parsed.watch_files[0] },
-    link: { lines: chunks[1], value: parsed.tasks[LINK_AGENTFILES_TASK] },
-    sync: { lines: chunks[2], value: parsed.tasks[SKILLS_SYNC_TASK] }
+    link: { lines: chunks[1], value: parsed.tasks[LINK_AGENTFILES_TASK] }
   };
 }
 function managedWatchPlan(watches) {
@@ -8033,7 +8254,7 @@ function reconcileManagedLinkTables(text) {
       edits.push({ start: span.start, end: span.end, lines: [] });
       continue;
     }
-    const table = name === LINK_AGENTFILES_TASK ? managed.link : managed.sync;
+    const table = managed.link;
     found.add(name);
     if (isDeepStrictEqualLoose(parseBody(lines, statements, index), table.value)) continue;
     if (name === LINK_AGENTFILES_TASK && !lines.slice(span.start, span.end).join("\n").includes("link-agentfiles")) {
@@ -8057,8 +8278,7 @@ function reconcileManagedLinkTables(text) {
   });
   const missing = [
     ...plan.managed >= 0 ? [] : [managed.watch.lines],
-    ...found.has(LINK_AGENTFILES_TASK) ? [] : [managed.link.lines],
-    ...found.has(SKILLS_SYNC_TASK) ? [] : [managed.sync.lines]
+    ...found.has(LINK_AGENTFILES_TASK) ? [] : [managed.link.lines]
   ];
   if (missing.length) {
     const block = missing.flatMap((chunk, index) => index ? ["", ...chunk] : chunk);
@@ -8142,7 +8362,6 @@ function expectedLinkModel(base, required) {
   const tasks = isTable(model.tasks) ? model.tasks : model.tasks = {};
   for (const name of RETIRED_LINK_TASKS) delete tasks[name];
   tasks[LINK_AGENTFILES_TASK] = deepClone(managed.link.value);
-  tasks[SKILLS_SYNC_TASK] = deepClone(managed.sync.value);
   const watches = Array.isArray(model.watch_files) ? model.watch_files : [];
   const plan = managedWatchPlan(watches);
   model.watch_files = [
@@ -8226,7 +8445,7 @@ function describeRewrite(before, after) {
   return difference ? `migrate would still rewrite ${difference} in mise.toml` : "migrate would still re-lay out mise.toml (its meaning is unchanged)";
 }
 function readProjectJson(ctx) {
-  return tryParseJson(safeReadText2(join5(ctx.repoRoot, ".project.json")));
+  return tryParseJson(safeReadText2(join7(ctx.repoRoot, ".project.json")));
 }
 function readDeclaredAgents(ctx) {
   const project = readProjectJson(ctx);
@@ -8243,8 +8462,8 @@ function readDeclaredAgents(ctx) {
   });
 }
 function readRoleYamlAt(roleDir) {
-  const roleYamlPath = join5(roleDir, "role.yaml");
-  if (!existsSync3(roleYamlPath)) return null;
+  const roleYamlPath = join7(roleDir, "role.yaml");
+  if (!existsSync4(roleYamlPath)) return null;
   const text = readText(roleYamlPath);
   return {
     role: yamlGet(text, "role"),
@@ -8255,7 +8474,7 @@ function readRoleYamlAt(roleDir) {
 }
 function declaredRoleIsUnprovisioned(repoRoot, roleDir) {
   if (!roleDir) return true;
-  return !existsSync3(join5(resolve5(repoRoot, roleDir), "role.yaml"));
+  return !existsSync4(join7(resolve6(repoRoot, roleDir), "role.yaml"));
 }
 function validateDeclaredAgent(ctx, declared) {
   const details = [];
@@ -8263,8 +8482,8 @@ function validateDeclaredAgent(ctx, declared) {
     details.push(`agents.${declared.agentId}.role_dir missing`);
     return { valid: false, details };
   }
-  const roleDir = resolve5(ctx.repoRoot, declared.roleDir);
-  if (!existsSync3(roleDir)) {
+  const roleDir = resolve6(ctx.repoRoot, declared.roleDir);
+  if (!existsSync4(roleDir)) {
     details.push(`agents.${declared.agentId}.role_dir ${declared.roleDir} does not exist`);
     return { valid: false, roleDir, details };
   }
@@ -8280,13 +8499,13 @@ function validateDeclaredAgent(ctx, declared) {
     details.push(`agents.${declared.agentId} should map to agent_id ${roleYaml.agentId}`);
   }
   if (roleYaml.providerName) {
-    const dispatcher = join5(roleDir, ".scripts", "lib", "ticket-provider.sh");
-    if (!existsSync3(dispatcher)) {
-      details.push(`agents.${declared.agentId} provider dispatcher ${relative4(ctx.repoRoot, dispatcher)} missing`);
+    const dispatcher = join7(roleDir, ".scripts", "lib", "ticket-provider.sh");
+    if (!existsSync4(dispatcher)) {
+      details.push(`agents.${declared.agentId} provider dispatcher ${relative5(ctx.repoRoot, dispatcher)} missing`);
     }
-    const provider = join5(roleDir, ".scripts", "providers", `${roleYaml.providerName}.sh`);
-    if (!existsSync3(provider)) {
-      details.push(`agents.${declared.agentId} provider script ${relative4(ctx.repoRoot, provider)} missing`);
+    const provider = join7(roleDir, ".scripts", "providers", `${roleYaml.providerName}.sh`);
+    if (!existsSync4(provider)) {
+      details.push(`agents.${declared.agentId} provider script ${relative5(ctx.repoRoot, provider)} missing`);
     }
   }
   return { valid: details.length === 0, role: roleYaml.role, agentId: roleYaml.agentId, roleDir, details };
@@ -8312,7 +8531,7 @@ function canonicalProjectJson(ctx) {
       role.agentId || `${slug}-${role.role}`,
       {
         role: role.role,
-        role_dir: relative4(ctx.repoRoot, role.roleDir)
+        role_dir: relative5(ctx.repoRoot, role.roleDir)
       }
     ])
   );
@@ -8344,7 +8563,7 @@ function canonicalProjectJson(ctx) {
     }
     agents[validated.agentId] = {
       role: validated.role,
-      role_dir: relative4(ctx.repoRoot, validated.roleDir),
+      role_dir: relative5(ctx.repoRoot, validated.roleDir),
       ...declared.extras
     };
   }
@@ -8362,12 +8581,12 @@ function canonicalProjectJson(ctx) {
   };
 }
 function projectJsonFinding(ctx) {
-  const projectPath = join5(ctx.repoRoot, ".project.json");
-  const planeJsonPath = join5(ctx.repoRoot, ".plane.json");
+  const projectPath = join7(ctx.repoRoot, ".project.json");
+  const planeJsonPath = join7(ctx.repoRoot, ".plane.json");
   const details = [];
   const data = readProjectJson(ctx);
   const roles = discoverRoles(ctx.repoRoot);
-  if (!existsSync3(projectPath)) {
+  if (!existsSync4(projectPath)) {
     return { id: "sot.project-json", title: "Canonical .project.json", status: "fail", summary: ".project.json missing", details: [], fixable: true };
   }
   if (!data) {
@@ -8387,8 +8606,8 @@ function projectJsonFinding(ctx) {
       continue;
     }
     if (agent.role !== role.role) details.push(`agents.${role.agentId}.role should be ${role.role}`);
-    if (agent.role_dir !== relative4(ctx.repoRoot, role.roleDir)) {
-      details.push(`agents.${role.agentId}.role_dir should be ${relative4(ctx.repoRoot, role.roleDir)}`);
+    if (agent.role_dir !== relative5(ctx.repoRoot, role.roleDir)) {
+      details.push(`agents.${role.agentId}.role_dir should be ${relative5(ctx.repoRoot, role.roleDir)}`);
     }
   }
   const declaredAgents = readDeclaredAgents(ctx);
@@ -8416,7 +8635,7 @@ function projectJsonFinding(ctx) {
   if ("reconcile" in automation) {
     details.push("automation.reconcile is vestigial and should be removed; the heartbeat reads role.yaml, never this key");
   }
-  if (existsSync3(planeJsonPath)) details.push(".plane.json should not exist once .project.json is canonical");
+  if (existsSync4(planeJsonPath)) details.push(".plane.json should not exist once .project.json is canonical");
   return {
     id: "sot.project-json",
     title: "Canonical .project.json",
@@ -8434,7 +8653,7 @@ var BMAD_DIST_TAGS_TTL_MS = 60 * 60 * 1e3;
 var DEFAULT_BMAD_MODULES = ["bmm", "bmb", "cis"];
 var BMAD_INSTALL_TOOLS = SUPPORTED_BMAD_TOOLS;
 function manifestBmadModules(repoRoot) {
-  const manifestPath = join5(repoRoot, "_bmad", "_config", "manifest.yaml");
+  const manifestPath = join7(repoRoot, "_bmad", "_config", "manifest.yaml");
   const raw = safeReadText2(manifestPath);
   if (raw === null) return { status: "absent" };
   try {
@@ -8443,14 +8662,16 @@ function manifestBmadModules(repoRoot) {
       return { status: "invalid", error: `${manifestPath} must define a modules array` };
     }
     const declared = [];
+    let hasG33 = false;
     for (const entry of parsed.modules) {
       const name = typeof entry === "string" ? entry : entry && typeof entry === "object" ? entry.name : void 0;
       if (typeof name !== "string" || !/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(name)) {
         return { status: "invalid", error: `${manifestPath} contains an invalid module entry` };
       }
-      if (name !== "core" && name !== "custom") declared.push(name);
+      if (name === "g33") hasG33 = true;
+      if (name !== "core" && name !== "custom" && name !== "g33") declared.push(name);
     }
-    return { status: "valid", modules: Array.from(new Set(declared)) };
+    return { status: "valid", modules: Array.from(new Set(declared)), hasG33 };
   } catch (error) {
     return {
       status: "invalid",
@@ -8458,24 +8679,24 @@ function manifestBmadModules(repoRoot) {
     };
   }
 }
-function configuredBmadModules(repoRoot) {
-  const raw = safeReadText2(join5(repoRoot, "_bmad", "config.toml"));
+function configuredBmadModuleSelection(repoRoot) {
+  const raw = safeReadText2(join7(repoRoot, "_bmad", "config.toml"));
   if (raw === null) return void 0;
   const modules = [...raw.matchAll(/^\[modules\.([A-Za-z0-9][A-Za-z0-9_-]*)\]\s*$/gm)].map((match) => match[1]);
-  return Array.from(new Set(modules));
+  return { modules: Array.from(new Set(modules)).filter((name) => name !== "g33"), hasG33: modules.includes("g33") };
 }
 function selectedBmadModules(repoRoot) {
   const manifest = manifestBmadModules(repoRoot);
   if (manifest.status === "valid") return manifest.modules;
   if (manifest.status === "invalid") throw new Error(manifest.error);
-  return configuredBmadModules(repoRoot) ?? [...DEFAULT_BMAD_MODULES];
+  return configuredBmadModuleSelection(repoRoot)?.modules ?? [...DEFAULT_BMAD_MODULES];
 }
 function requiredBmadSentinels(repoRoot, modules = selectedBmadModules(repoRoot)) {
   return [
-    join5("core", "config.yaml"),
-    join5("config.toml"),
-    join5("_config", "manifest.yaml"),
-    ...modules.map((module) => join5(module, "config.yaml"))
+    join7("core", "config.yaml"),
+    join7("config.toml"),
+    join7("_config", "manifest.yaml"),
+    ...modules.map((module) => join7(module, "config.yaml"))
   ];
 }
 function canonicalBmadProjectName(repoRoot) {
@@ -8487,7 +8708,7 @@ function bmadProjectNameIssues(repoRoot) {
   const expected = canonicalBmadProjectName(repoRoot);
   const paths = [];
   const details = [];
-  const configToml = join5(repoRoot, "_bmad", "config.toml");
+  const configToml = join7(repoRoot, "_bmad", "config.toml");
   const tomlText = safeReadText2(configToml);
   const tomlMatch = tomlText?.match(/^project_name\s*=\s*"((?:\\.|[^"\\])*)"\s*$/m);
   let tomlName;
@@ -8502,16 +8723,16 @@ function bmadProjectNameIssues(repoRoot) {
     paths.push(configToml);
     details.push(`_bmad/config.toml project_name must be ${JSON.stringify(expected)}`);
   }
-  const bmadRoot = join5(repoRoot, "_bmad");
-  if (existsSync3(bmadRoot)) {
+  const bmadRoot = join7(repoRoot, "_bmad");
+  if (existsSync4(bmadRoot)) {
     let declared;
     try {
       declared = selectedBmadModules(repoRoot);
     } catch {
-      declared = readdirSync3(bmadRoot);
+      declared = readdirSync4(bmadRoot);
     }
     for (const name of new Set(declared)) {
-      const configPath = join5(bmadRoot, name, "config.yaml");
+      const configPath = join7(bmadRoot, name, "config.yaml");
       const raw = safeReadText2(configPath);
       if (raw === null) continue;
       let actual;
@@ -8531,7 +8752,7 @@ function bmadProjectNameIssues(repoRoot) {
 function isCurrentActivation(path, activations) {
   if (activations.owned.has(path)) return true;
   try {
-    if (activations.owned.has(join5(realpathSync3(dirname5(path)), basename3(path)))) return true;
+    if (activations.owned.has(join7(realpathSync3(dirname5(path)), basename3(path)))) return true;
     return activations.targets.has(realpathSync3(path));
   } catch {
     return false;
@@ -8544,25 +8765,25 @@ async function skillActivations(ctx) {
 function evictLegacyBmadPackState(ctx, changedFiles, activations) {
   const details = [];
   const skillDirs = [
-    join5(ctx.repoRoot, ".agents", "skills"),
-    ...SUPPORTED_CLI_ROOTS.map((root) => join5(ctx.repoRoot, root, "skills"))
+    join7(ctx.repoRoot, ".agents", "skills"),
+    ...SUPPORTED_CLI_ROOTS.map((root) => join7(ctx.repoRoot, root, "skills"))
   ];
   for (const dir of skillDirs) {
     const dirStat = lstatIfPresent(dir);
     if (!dirStat || dirStat.isSymbolicLink() || !dirStat.isDirectory()) continue;
     let names;
     try {
-      names = readdirSync3(dir);
+      names = readdirSync4(dir);
     } catch {
       continue;
     }
     for (const name of names) {
       if (!name.startsWith(BMAD_SKILL_NAME_PREFIX)) continue;
-      const path = join5(dir, name);
+      const path = join7(dir, name);
       if (!lstatIfPresent(path)?.isSymbolicLink()) continue;
       if (isCurrentActivation(path, activations)) continue;
       changedFiles.push(path);
-      details.push(`removed retired BMAD pack symlink ${relative4(ctx.repoRoot, path)}`);
+      details.push(`removed retired BMAD pack symlink ${relative5(ctx.repoRoot, path)}`);
       if (!ctx.dryRun) unlinkSync3(path);
     }
   }
@@ -8570,7 +8791,7 @@ function evictLegacyBmadPackState(ctx, changedFiles, activations) {
 }
 function bmadInstallerInvocation(version = BMAD_INSTALLER_VERSION) {
   const explicit = process.env.PJ_BMAD_INSTALLER?.trim();
-  if (explicit) return { command: resolve5(explicit), prefixArgs: [] };
+  if (explicit) return { command: resolve6(explicit), prefixArgs: [] };
   return {
     command: "npx",
     prefixArgs: ["-y", `${BMAD_NPM_PACKAGE}@${version}`]
@@ -8597,7 +8818,7 @@ function bmadInstallDisplay(repoRoot, modules = selectedBmadModules(repoRoot), v
 }
 function preflightBmadLifecycle(_ctx) {
   const invocation = bmadInstallerInvocation();
-  const probe = spawnSync3(invocation.command, [...invocation.prefixArgs, "--version"], {
+  const probe = spawnSync4(invocation.command, [...invocation.prefixArgs, "--version"], {
     encoding: "utf8",
     timeout: 3e4
   });
@@ -8619,14 +8840,17 @@ ${probe.stderr ?? ""}`;
   }
   return { ok: true };
 }
-function runBmadInstall(repoRoot, modules = selectedBmadModules(repoRoot), version = BMAD_INSTALLER_VERSION) {
+async function runBmadInstall(repoRoot, modules = selectedBmadModules(repoRoot), version = BMAD_INSTALLER_VERSION) {
+  const installedSelection = manifestBmadModules(repoRoot);
+  const preservation = g33BmadUpdateBoundary(repoRoot, installedSelection.status === "valid" && installedSelection.hasG33 || configuredBmadModuleSelection(repoRoot)?.hasG33);
+  if (preservation) return { ok: false, error: preservation.summary, companion: preservation };
   const invocation = bmadInstallerInvocation(version);
-  const result2 = spawnSync3(invocation.command, [...invocation.prefixArgs, ...bmadInstallerArgs(repoRoot, modules)], { encoding: "utf8" });
+  const result2 = spawnSync4(invocation.command, [...invocation.prefixArgs, ...bmadInstallerArgs(repoRoot, modules)], { encoding: "utf8" });
   if (result2.status !== 0) {
     const stdoutTail = result2.stdout?.trim().split("\n").slice(-12).join("\n");
     return { ok: false, error: result2.stderr?.trim() || stdoutTail || result2.error?.message || `installer exited ${result2.status}` };
   }
-  return { ok: true };
+  return { ok: true, companion: await runG33Companion(repoRoot, false, "bmad-install") };
 }
 function bmadChannelTarget(distTags) {
   const next = distTags?.[BMAD_TARGET_CHANNEL];
@@ -8635,7 +8859,7 @@ function bmadChannelTarget(distTags) {
   return next ? { version: next, channel: BMAD_TARGET_CHANNEL } : void 0;
 }
 function readInstalledBmadVersion(repoRoot) {
-  const raw = safeReadText2(join5(repoRoot, "_bmad", "_config", "manifest.yaml"));
+  const raw = safeReadText2(join7(repoRoot, "_bmad", "_config", "manifest.yaml"));
   if (!raw) return void 0;
   try {
     const parsed = YAML2.parse(raw);
@@ -8646,8 +8870,8 @@ function readInstalledBmadVersion(repoRoot) {
   }
 }
 function bmadCachePath(homeDir) {
-  const cacheRoot = process.env.XDG_CACHE_HOME?.trim() || join5(homeDir, ".cache");
-  return join5(cacheRoot, "pjangler", "bmad-dist-tags.json");
+  const cacheRoot = process.env.XDG_CACHE_HOME?.trim() || join7(homeDir, ".cache");
+  return join7(cacheRoot, "pjangler", "bmad-dist-tags.json");
 }
 function readBmadDistTagsCache(homeDir) {
   const raw = safeReadText2(bmadCachePath(homeDir));
@@ -8662,7 +8886,7 @@ function readBmadDistTagsCache(homeDir) {
   return void 0;
 }
 function fetchBmadDistTags() {
-  const result2 = spawnSync3("npm", ["view", BMAD_NPM_PACKAGE, "dist-tags", "--json"], {
+  const result2 = spawnSync4("npm", ["view", BMAD_NPM_PACKAGE, "dist-tags", "--json"], {
     encoding: "utf8",
     timeout: 8e3
   });
@@ -8814,8 +9038,8 @@ var UNSUPPORTED_BMAD_ROOTS = {
   ".zencoder": "zencoder"
 };
 function unsupportedRootAttestation(repoRoot, rootName) {
-  const root = join5(repoRoot, rootName);
-  const stat = lstatSync4(root);
+  const root = join7(repoRoot, rootName);
+  const stat = lstatSync6(root);
   if (!stat.isDirectory() || stat.isSymbolicLink()) return { safe: false, reason: `${rootName} is not a regular generated directory` };
   const installerTool = UNSUPPORTED_BMAD_ROOTS[rootName];
   if (!installedBmadTools(repoRoot).has(installerTool)) {
@@ -8834,8 +9058,8 @@ var OPTIONAL_TEMPLATE_SCRIPTS = [
 function optionalTemplateScriptIssues(ctx) {
   const issues = [];
   for (const rel of OPTIONAL_TEMPLATE_SCRIPTS) {
-    const path = join5(ctx.repoRoot, rel);
-    if (!existsSync3(path)) continue;
+    const path = join7(ctx.repoRoot, rel);
+    if (!existsSync4(path)) continue;
     const expected = templateCommonProjectText(ctx, rel);
     if (expected === void 0) continue;
     if (safeReadText2(path) !== expected) issues.push(`${rel} is present but has drifted from the shipped template`);
@@ -8845,8 +9069,8 @@ function optionalTemplateScriptIssues(ctx) {
 function refreshOptionalTemplateScripts(ctx) {
   const changed = [];
   for (const rel of OPTIONAL_TEMPLATE_SCRIPTS) {
-    const path = join5(ctx.repoRoot, rel);
-    if (!existsSync3(path)) continue;
+    const path = join7(ctx.repoRoot, rel);
+    if (!existsSync4(path)) continue;
     const expected = templateCommonProjectText(ctx, rel);
     if (expected === void 0 || safeReadText2(path) === expected) continue;
     changed.push(path);
@@ -8863,14 +9087,14 @@ function createMiseChecks() {
       id: "mise.config-root",
       title: "mise config_root + AGENTS link hooks",
       audit: (ctx) => {
-        const misePath = join5(ctx.repoRoot, "mise.toml");
-        if (!existsSync3(misePath)) {
+        const misePath = join7(ctx.repoRoot, "mise.toml");
+        if (!existsSync4(misePath)) {
           return { id: "mise.config-root", title: "mise config_root + AGENTS link hooks", status: "fail", summary: "mise.toml missing", details: [], fixable: true };
         }
         const text = readText(misePath);
         const details = [];
-        const linkAgentfilesPath = join5(ctx.repoRoot, ".mise", "scripts", "link-agentfiles.sh");
-        if (!existsSync3(linkAgentfilesPath)) details.push(".mise/scripts/link-agentfiles.sh missing");
+        const linkAgentfilesPath = join7(ctx.repoRoot, ".mise", "scripts", "link-agentfiles.sh");
+        if (!existsSync4(linkAgentfilesPath)) details.push(".mise/scripts/link-agentfiles.sh missing");
         const toml = [];
         const manual = [];
         const parsed = parsedOrUndefined(text);
@@ -8917,10 +9141,10 @@ function createMiseChecks() {
         };
       },
       migrate: (ctx, finding2) => {
-        const path = join5(ctx.repoRoot, "mise.toml");
+        const path = join7(ctx.repoRoot, "mise.toml");
         const changedFiles = [];
         const details = [];
-        if (!existsSync3(path)) {
+        if (!existsSync4(path)) {
           if (ensureMiseTomlFromTemplate(ctx, changedFiles) === null) {
             return { id: finding2.id, title: finding2.title, status: "blocked", summary: "mise.toml missing and no generated-project mise template available to initialize from", changedFiles, details: [] };
           }
@@ -8936,7 +9160,7 @@ function createMiseChecks() {
           if (!ctx.dryRun) writeText(path, plan.text);
           text = plan.text;
         }
-        const linkAgentfilesPath = join5(ctx.repoRoot, ".mise", "scripts", "link-agentfiles.sh");
+        const linkAgentfilesPath = join7(ctx.repoRoot, ".mise", "scripts", "link-agentfiles.sh");
         const expectedScript = templateLinkAgentfilesScript(ctx);
         if (expectedScript === void 0) {
           return { id: finding2.id, title: finding2.title, status: "blocked", summary: "pjangler install is missing .mise/scripts/link-agentfiles.sh \u2014 update @delorenj/pjangler (broken package)", changedFiles, details: [] };
@@ -8974,13 +9198,13 @@ function createMiseChecks() {
       title: "managed mise versioning block",
       audit: (ctx) => {
         const details = [];
-        const misePath = join5(ctx.repoRoot, "mise.toml");
-        const versioningPath = join5(ctx.repoRoot, ".mise", "scripts", "versioning.sh");
-        const manifestPath = join5(ctx.repoRoot, ".mise", "version-files.conf");
+        const misePath = join7(ctx.repoRoot, "mise.toml");
+        const versioningPath = join7(ctx.repoRoot, ".mise", "scripts", "versioning.sh");
+        const manifestPath = join7(ctx.repoRoot, ".mise", "version-files.conf");
         const text = safeReadText2(misePath);
         if (!text?.includes("# >>> mise-versioning >>>")) details.push("mise versioning managed block missing");
-        if (!existsSync3(versioningPath)) details.push(".mise/scripts/versioning.sh missing");
-        if (!existsSync3(manifestPath)) details.push(".mise/version-files.conf missing");
+        if (!existsSync4(versioningPath)) details.push(".mise/scripts/versioning.sh missing");
+        if (!existsSync4(manifestPath)) details.push(".mise/version-files.conf missing");
         const conf = safeReadText2(manifestPath);
         const script = safeReadText2(versioningPath);
         if (conf !== null && script !== null) {
@@ -9002,8 +9226,8 @@ function createMiseChecks() {
       migrate: (ctx, finding2) => {
         const changedFiles = [];
         const details = [];
-        const misePath = join5(ctx.repoRoot, "mise.toml");
-        if (!existsSync3(misePath)) {
+        const misePath = join7(ctx.repoRoot, "mise.toml");
+        if (!existsSync4(misePath)) {
           if (ensureMiseTomlFromTemplate(ctx, changedFiles) === null) {
             return { id: finding2.id, title: finding2.title, status: "blocked", summary: "mise.toml missing and no generated-project mise template available to initialize from", changedFiles, details: [] };
           }
@@ -9020,7 +9244,7 @@ function createMiseChecks() {
           if (!changedFiles.includes(misePath)) changedFiles.push(misePath);
           if (!ctx.dryRun) writeText(misePath, versioningPlan.text);
         }
-        const versioningPath = join5(ctx.repoRoot, ".mise", "scripts", "versioning.sh");
+        const versioningPath = join7(ctx.repoRoot, ".mise", "scripts", "versioning.sh");
         const expectedScript = templateVersioningScript(ctx);
         if (expectedScript === void 0) {
           return { id: finding2.id, title: finding2.title, status: "blocked", summary: "pjangler install is missing .mise/scripts/versioning.sh \u2014 update @delorenj/pjangler (broken package)", changedFiles, details: [] };
@@ -9032,7 +9256,7 @@ function createMiseChecks() {
             chmodSync(versioningPath, 493);
           }
         }
-        const manifestPath = join5(ctx.repoRoot, ".mise", "version-files.conf");
+        const manifestPath = join7(ctx.repoRoot, ".mise", "version-files.conf");
         const expectedManifest = templateVersionFilesConf(ctx, ctx.repoRoot);
         if (safeReadText2(manifestPath) !== expectedManifest) {
           changedFiles.push(manifestPath);
@@ -9062,7 +9286,7 @@ function planVersioningBlock(original) {
   let replaced = [...VERSIONING_TASK_NAMES];
   try {
     if (oldBlock) {
-      replaced = Object.keys(record(record(parseToml2(oldBlock)).tasks));
+      replaced = Object.keys(record2(record2(parseToml2(oldBlock)).tasks));
       text = text.replace(blockPattern, VERSIONING_BLOCK);
     } else {
       const statements = scanToml(text);
@@ -9085,7 +9309,7 @@ function planVersioningBlock(original) {
   const verdict = checkRewrite(expected, text);
   return verdict.ok ? { text } : { text: original, refused: verdict.reason };
 }
-var record = (value) => isTable(value) ? value : {};
+var record2 = (value) => isTable(value) ? value : {};
 var RETIRED_SKILL_SCRIPTS = [
   SYNC_SKILLS_SCRIPT_REL,
   PROVISION_PACKS_SCRIPT_REL,
@@ -9094,39 +9318,30 @@ var RETIRED_SKILL_SCRIPTS = [
   ".mise/scripts/unlink-project-skills-from-clis.sh"
 ];
 function retiredSkillsScripts(ctx) {
-  return RETIRED_SKILL_SCRIPTS.map((path) => join5(ctx.repoRoot, path)).filter((path) => Boolean(lstatIfPresent(path)));
+  return RETIRED_SKILL_SCRIPTS.map((path) => join7(ctx.repoRoot, path)).filter((path) => Boolean(lstatIfPresent(path)));
 }
 function skillsWiringFindings(text) {
-  if (text === null) return { fixable: ["mise.toml is missing; add the explicit skills:sync task"], manual: [] };
+  if (text === null) return { fixable: [], manual: [] };
   const fixable = [];
   const manual = [];
   let parsed = parsedOrUndefined(text);
   if (!parsed) {
     const baseline = parseBaseline(text);
-    if ("refused" in baseline) return { fixable: [], manual: ["mise.toml is invalid TOML; repair it before running skills:sync"] };
+    if ("refused" in baseline) return { fixable: [], manual: ["mise.toml is invalid TOML; repair it before pjangler can retire skill tasks"] };
     parsed = baseline.parsed;
     fixable.push("mise.toml repeats the close of a [hooks] array (an earlier pjangler run wrote it); migrate repairs it");
   }
-  const record2 = (value) => isTable(value) ? value : {};
-  const tasks = record2(parsed.tasks), task = record2(tasks[SKILLS_SYNC_TASK]);
-  const run = Array.isArray(task.run) && task.run.length === 1 ? task.run[0] : task.run;
-  if (typeof run !== "string" || !/^skillex\s+sync\s+--scope\s+project\s+--project\s+(['"])\{\{config_root\}\}\1\s*$/.test(run)) {
-    fixable.push("skills:sync must explicitly target {{config_root}} with the Node CLI");
-  }
-  const pin = record2(task.tools)["npm:@delorenj/skillex"];
-  const pinned = typeof pin === "string" ? pin : record2(pin).version;
-  if (pinned !== SKILLEX_TOOL_VERSION) {
-    fixable.push(`skills:sync must pin @delorenj/skillex ${SKILLEX_TOOL_VERSION} in its own tools table`);
-  } else if (typeof pin === "string") {
-    fixable.push(`skills:sync pins @delorenj/skillex as the plain string "${pin}", which mise 2026.9 refuses to install inside its 30-day minimumPackageAge; pin { version = "${SKILLEX_TOOL_VERSION}", allow_low_downloads = true }`);
-  } else if (record2(pin).allow_low_downloads !== true) {
-    fixable.push(`skills:sync must approve @delorenj/skillex ${SKILLEX_TOOL_VERSION} with allow_low_downloads = true (mise 2026.9 refuses to install it otherwise)`);
+  const record3 = (value) => isTable(value) ? value : {};
+  const tasks = record3(parsed.tasks);
+  if (tasks[SKILLS_SYNC_TASK] !== void 0) {
+    fixable.push(`Retire the ${SKILLS_SYNC_TASK} mise task; invoke skillex directly (pj skills sync --scope project --project .)`);
   }
   const retired = /sync-skills\.py|provision-(?:packs|bmad-skills)\.py|skills[:\-]provision/;
   const renames = new Map(RETIRED_TASK_RENAMES);
-  const replaced = /* @__PURE__ */ new Set([...RETIRED_LINK_TASKS, LINK_AGENTFILES_TASK, SKILLS_SYNC_TASK]);
+  const replaced = /* @__PURE__ */ new Set([...RETIRED_LINK_TASKS, LINK_AGENTFILES_TASK]);
   for (const [name, entry] of Object.entries(tasks)) {
-    if (!retired.test(name) && !retired.test(JSON.stringify(record2(entry).run ?? ""))) continue;
+    if (name === SKILLS_SYNC_TASK) continue;
+    if (!retired.test(name) && !retired.test(JSON.stringify(record3(entry).run ?? ""))) continue;
     if (replaced.has(renames.get(name) ?? name)) {
       if (!fixable.includes("Retire Python skill sync/provision tasks from mise.toml")) fixable.push("Retire Python skill sync/provision tasks from mise.toml");
     } else {
@@ -9140,7 +9355,7 @@ function skillsWiringFindings(text) {
   }
   manual.push(...decisions.manual.filter((entry) => SKILL_WRITER_MENTION.test(entry.command)).map(manualHookLine));
   const watches = Array.isArray(parsed.watch_files) ? parsed.watch_files : [];
-  if (managedWatchPlan(watches).skills.length) fixable.push("Remove the skills watch hook; run skills:sync explicitly");
+  if (managedWatchPlan(watches).skills.length) fixable.push("Remove the skills watch hook; run pj skills sync explicitly, never automatically");
   return { fixable, manual };
 }
 function skillsWiringIssues(text) {
@@ -9154,15 +9369,16 @@ function createAgentHooksChecks() {
       title: "Skillex project skills",
       audit: async (ctx) => {
         const finding2 = await auditProjectSkills(ctx);
-        const mise = safeReadText2(join5(ctx.repoRoot, "mise.toml"));
+        const mise = safeReadText2(join7(ctx.repoRoot, "mise.toml"));
         const wiring = skillsWiringIssues(mise);
         const retired = retiredSkillsScripts(ctx);
         const unsafe = retired.filter((path) => lstatIfPresent(path)?.isDirectory());
         const details = [...finding2.details, ...wiring, ...retired.map((path) => unsafe.includes(path) ? `Inspect and preserve retired script directory: ${path}` : `${path} is a retired skill writer`)];
+        const miseDrift = mise !== null && upsertLinkAgentfilesBlock(mise, ctx) !== mise;
         return {
           ...finding2,
           status: wiring.length || retired.length ? "fail" : finding2.status,
-          fixable: unsafe.length ? false : finding2.fixable || wiring.length > 0 || retired.length > 0,
+          fixable: unsafe.length ? false : finding2.fixable || wiring.length > 0 || retired.length > 0 || miseDrift,
           summary: details.length ? `${details.length} Skillex finding(s)` : finding2.summary,
           details
         };
@@ -9171,7 +9387,7 @@ function createAgentHooksChecks() {
         const changedFiles = [];
         const details = [];
         const result2 = (status, summary) => ({ id: finding2.id, title: finding2.title, status, summary, changedFiles: [...new Set(changedFiles)], details });
-        let currentMise = safeReadText2(join5(ctx.repoRoot, "mise.toml"));
+        let currentMise = safeReadText2(join7(ctx.repoRoot, "mise.toml"));
         if (currentMise === null) {
           const template = templateCommonProjectText(ctx, "mise.toml.jinja");
           if (template === void 0) return result2("blocked", "Generated-project mise template is unavailable");
@@ -9188,7 +9404,7 @@ function createAgentHooksChecks() {
           changedFiles.push(path);
           if (!ctx.dryRun) unlinkSync3(path);
         }
-        const misePath = join5(ctx.repoRoot, "mise.toml");
+        const misePath = join7(ctx.repoRoot, "mise.toml");
         const nextMise = upsertLinkAgentfilesBlock(currentMise, ctx);
         if (safeReadText2(misePath) !== nextMise) {
           changedFiles.push(misePath);
@@ -9207,16 +9423,16 @@ function createAgentHooksChecks() {
         if (!reconciled.ok || !roots.ok) {
           return result2(changedFiles.length ? "partial" : "blocked", "Skillex requires attention before project migration");
         }
-        return changedFiles.length ? result2("applied", "Project skills use the Node core and explicit sync task") : result2("noop", "No changes required");
+        return changedFiles.length ? result2("applied", "Project skills use the Node core and direct invocation") : result2("noop", "No changes required");
       }
     },
     {
       id: "sot.agent-symlinks",
       title: "AGENTS/CLAUDE/GEMINI symlink contract",
       audit: (ctx) => {
-        const agentsPath = join5(ctx.repoRoot, "AGENTS.md");
-        if (!existsSync3(agentsPath)) {
-          const fallbackSources = ["CLAUDE.md", "GEMINI.md", "README.md"].filter((file) => existsSync3(join5(ctx.repoRoot, file)));
+        const agentsPath = join7(ctx.repoRoot, "AGENTS.md");
+        if (!existsSync4(agentsPath)) {
+          const fallbackSources = ["CLAUDE.md", "GEMINI.md", "README.md"].filter((file) => existsSync4(join7(ctx.repoRoot, file)));
           if (fallbackSources.length === 0) {
             return { id: "sot.agent-symlinks", title: "AGENTS/CLAUDE/GEMINI symlink contract", status: "skip", summary: "AGENTS.md missing; symlink contract not applicable", details: [], fixable: false };
           }
@@ -9231,7 +9447,7 @@ function createAgentHooksChecks() {
         }
         const details = [];
         for (const file of ["CLAUDE.md", "GEMINI.md"]) {
-          const full = join5(ctx.repoRoot, file);
+          const full = join7(ctx.repoRoot, file);
           const target = readSymlinkTarget(full);
           if (target !== "AGENTS.md") details.push(`${file} should be a symlink to AGENTS.md`);
         }
@@ -9255,7 +9471,7 @@ function createAgentHooksChecks() {
           return { id: finding2.id, title: finding2.title, status: "blocked", summary: "AGENTS.md missing; cannot derive canonical agent file", changedFiles, details: [bootstrap.blocked] };
         }
         for (const file of ["CLAUDE.md", "GEMINI.md"]) {
-          const full = join5(ctx.repoRoot, file);
+          const full = join7(ctx.repoRoot, file);
           const result2 = ensureSymlink(full, "AGENTS.md", ctx.dryRun);
           if (result2.blocked) blockedDetails.push(result2.blocked);
           if (result2.changed) changedFiles.push(full);
@@ -9282,7 +9498,7 @@ function createProjectJsonChecks() {
         const changedFiles = [];
         const blockedDetails = [];
         const droppedDetails = [];
-        const path = join5(ctx.repoRoot, ".project.json");
+        const path = join7(ctx.repoRoot, ".project.json");
         const existing = readProjectJson(ctx) ?? {};
         const canonical = canonicalProjectJson(ctx);
         const preservedDetails = [];
@@ -9314,11 +9530,11 @@ function createProjectJsonChecks() {
           changedFiles.push(path);
           if (!ctx.dryRun) writeText(path, expected);
         }
-        const planeJson = join5(ctx.repoRoot, ".plane.json");
-        if (existsSync3(planeJson)) {
+        const planeJson = join7(ctx.repoRoot, ".plane.json");
+        if (existsSync4(planeJson)) {
           const backup = `${planeJson}.migrated-backup`;
-          if (existsSync3(backup)) {
-            blockedDetails.push(`cannot back up .plane.json because ${relative4(ctx.repoRoot, backup)} already exists`);
+          if (existsSync4(backup)) {
+            blockedDetails.push(`cannot back up .plane.json because ${relative5(ctx.repoRoot, backup)} already exists`);
           } else {
             changedFiles.push(backup);
             if (!ctx.dryRun) renameSync2(planeJson, backup);
@@ -9346,10 +9562,10 @@ function createMiseOpInjectChecks() {
         const details = [];
         let envOpNeedsHands = false;
         const optedOut = envMaterializationOptedOut(ctx);
-        const envOpPath = join5(ctx.repoRoot, ".env.op");
-        const envOpExists = existsSync3(envOpPath);
+        const envOpPath = join7(ctx.repoRoot, ".env.op");
+        const envOpExists = existsSync4(envOpPath);
         const envOp = envOpExists ? readText(envOpPath) : void 0;
-        const gitignore = safeReadText2(join5(ctx.repoRoot, ".gitignore"));
+        const gitignore = safeReadText2(join7(ctx.repoRoot, ".gitignore"));
         if (!envOpExists) {
           details.push(".env.op missing");
         } else if (!envOp?.trim()) {
@@ -9369,7 +9585,7 @@ function createMiseOpInjectChecks() {
         if (!gitignore?.includes(".env\n") && !gitignore?.includes(".env\r\n")) details.push(".gitignore should ignore .env");
         if (!gitignore?.includes(".env.*")) details.push(".gitignore should ignore .env.*");
         if (!gitignore?.includes("!.env.op")) details.push(".gitignore should unignore .env.op");
-        const misePath = join5(ctx.repoRoot, "mise.toml");
+        const misePath = join7(ctx.repoRoot, "mise.toml");
         const miseText = safeReadText2(misePath);
         if (!miseText) {
           details.push("mise.toml missing for .env materialization hook");
@@ -9392,15 +9608,15 @@ function createMiseOpInjectChecks() {
           else if (plan.text !== miseText && !mise.length) mise.push(describeRewrite(miseText, plan.text));
           details.push(...mise);
         }
-        const materializePath = join5(ctx.repoRoot, MATERIALIZE_ENV_SCRIPT_REL);
+        const materializePath = join7(ctx.repoRoot, MATERIALIZE_ENV_SCRIPT_REL);
         const expectedMaterializer = templateMaterializeEnvScript(ctx);
         if (optedOut) {
-          if (existsSync3(materializePath)) details.push(`${MATERIALIZE_ENV_SCRIPT_REL} is present, but .project.json declares secrets.materialize_env: false`);
+          if (existsSync4(materializePath)) details.push(`${MATERIALIZE_ENV_SCRIPT_REL} is present, but .project.json declares secrets.materialize_env: false`);
         } else if (!expectedMaterializer) {
           details.push("pjangler package is missing the managed materialize-env.sh source");
         } else if (safeReadText2(materializePath) !== expectedMaterializer) {
           details.push(`${MATERIALIZE_ENV_SCRIPT_REL} missing or drifted`);
-        } else if ((lstatSync4(materializePath).mode & 73) === 0) {
+        } else if ((lstatSync6(materializePath).mode & 73) === 0) {
           details.push(`${MATERIALIZE_ENV_SCRIPT_REL} is not executable`);
         }
         return {
@@ -9416,13 +9632,13 @@ function createMiseOpInjectChecks() {
         const changedFiles = [];
         const details = [];
         let envOpNeedsHands = false;
-        const envOpPath = join5(ctx.repoRoot, ".env.op");
-        const canonicalEnvOpPath = join5(ctx.pjanglerRoot, "templates", "commonproject", "template", ".env.op");
-        if (!existsSync3(canonicalEnvOpPath)) {
+        const envOpPath = join7(ctx.repoRoot, ".env.op");
+        const canonicalEnvOpPath = join7(ctx.pjanglerRoot, "templates", "commonproject", "template", ".env.op");
+        if (!existsSync4(canonicalEnvOpPath)) {
           return { id: finding2.id, title: finding2.title, status: "blocked", summary: "pjangler package is missing the neutral .env.op template", changedFiles: [], details: [] };
         }
         const canonicalEnvOp = readText(canonicalEnvOpPath);
-        if (!existsSync3(envOpPath) || !readText(envOpPath).trim()) {
+        if (!existsSync4(envOpPath) || !readText(envOpPath).trim()) {
           changedFiles.push(envOpPath);
           if (!ctx.dryRun) writeText(envOpPath, canonicalEnvOp);
         } else {
@@ -9446,7 +9662,7 @@ function createMiseOpInjectChecks() {
             }
           }
         }
-        const gitignorePath = join5(ctx.repoRoot, ".gitignore");
+        const gitignorePath = join7(ctx.repoRoot, ".gitignore");
         const gitignore = safeReadText2(gitignorePath) ?? "";
         const requiredBlock = `# Secrets \u2014 .env is materialized from .env.op by \`op inject\` on mise enter,
 # staged through a mktemp file and moved into place only on success.
@@ -9459,7 +9675,7 @@ function createMiseOpInjectChecks() {
           changedFiles.push(gitignorePath);
           if (!ctx.dryRun) writeText(gitignorePath, `${gitignore.replace(/\s*$/, "")}${gitignore.trim() ? "\n\n" : ""}${requiredBlock}`);
         }
-        const misePath = join5(ctx.repoRoot, "mise.toml");
+        const misePath = join7(ctx.repoRoot, "mise.toml");
         let currentMise = safeReadText2(misePath);
         if (currentMise === null) {
           const initialized = ensureMiseTomlFromTemplate(ctx, changedFiles);
@@ -9476,16 +9692,16 @@ function createMiseOpInjectChecks() {
           if (!changedFiles.includes(misePath)) changedFiles.push(misePath);
           if (!ctx.dryRun) writeText(misePath, opPlan.text);
         }
-        const materializePath = join5(ctx.repoRoot, MATERIALIZE_ENV_SCRIPT_REL);
+        const materializePath = join7(ctx.repoRoot, MATERIALIZE_ENV_SCRIPT_REL);
         const expectedMaterializer = templateMaterializeEnvScript(ctx);
         if (optedOut) {
-          if (existsSync3(materializePath)) {
+          if (existsSync4(materializePath)) {
             changedFiles.push(materializePath);
             if (!ctx.dryRun) rmSync2(materializePath);
           }
         } else if (!expectedMaterializer) {
           return { id: finding2.id, title: finding2.title, status: "blocked", summary: "pjangler package is missing materialize-env.sh", changedFiles: [], details: [] };
-        } else if (safeReadText2(materializePath) !== expectedMaterializer || existsSync3(materializePath) && (lstatSync4(materializePath).mode & 73) === 0) {
+        } else if (safeReadText2(materializePath) !== expectedMaterializer || existsSync4(materializePath) && (lstatSync6(materializePath).mode & 73) === 0) {
           changedFiles.push(materializePath);
           if (!ctx.dryRun) {
             writeText(materializePath, expectedMaterializer);
@@ -9547,7 +9763,7 @@ function createProjectProvenanceChecks() {
       title: ".copier-answers.yml provenance + drift report",
       audit: (ctx) => {
         const details = [];
-        const path = join5(ctx.repoRoot, ".copier-answers.yml");
+        const path = join7(ctx.repoRoot, ".copier-answers.yml");
         const text = safeReadText2(path);
         const project = readProjectJson(ctx);
         if (!text) {
@@ -9575,11 +9791,11 @@ function createProjectProvenanceChecks() {
       migrate: (ctx, finding2) => {
         const changedFiles = [];
         const project = canonicalProjectJson(ctx);
-        const path = join5(ctx.repoRoot, ".copier-answers.yml");
+        const path = join7(ctx.repoRoot, ".copier-answers.yml");
         const current = safeReadText2(path);
         const existing = current ? YAML2.parseDocument(current) : void 0;
         const document = existing && !existing.errors.length && YAML2.isMap(existing.contents) ? existing : new YAML2.Document({});
-        document.set("_src_path", join5(ctx.pjanglerRoot, "templates", "commonproject"));
+        document.set("_src_path", join7(ctx.pjanglerRoot, "templates", "commonproject"));
         document.set("project_description", String(project.project_description));
         document.set("project_name", String(project.project_name));
         document.set("ticket_provider", String(project.ticket_provider?.type ?? "plane"));
@@ -9604,9 +9820,9 @@ ${body}`;
 }
 function supportedCliProjectionIssues(repoRoot, plan) {
   const issues = [];
-  const managedSkills = join5(repoRoot, ".agents", "skills");
+  const managedSkills = join7(repoRoot, ".agents", "skills");
   for (const rootName of SUPPORTED_CLI_ROOTS) {
-    const root = join5(repoRoot, rootName);
+    const root = join7(repoRoot, rootName);
     const rootStat = lstatIfPresent(root);
     if (!rootStat) {
       issues.push(`${rootName} missing`);
@@ -9616,7 +9832,7 @@ function supportedCliProjectionIssues(repoRoot, plan) {
       issues.push(`${rootName} must be a real configuration directory`);
       continue;
     }
-    const skills = join5(root, "skills");
+    const skills = join7(root, "skills");
     const skillsStat = lstatIfPresent(skills);
     if (!skillsStat) {
       issues.push(`${rootName}/skills missing`);
@@ -9625,7 +9841,7 @@ function supportedCliProjectionIssues(repoRoot, plan) {
     let projectedSkills = skills;
     if (skillsStat.isSymbolicLink()) {
       try {
-        readlinkSync3(skills);
+        readlinkSync4(skills);
       } catch {
         issues.push(`${rootName}/skills is an unreadable symlink`);
         continue;
@@ -9653,9 +9869,9 @@ function supportedCliProjectionIssues(repoRoot, plan) {
       issues.push(`${rootName}/skills is not a directory`);
       continue;
     }
-    const hasGeneratedSkill = existsSync3(projectedSkills) && readdirSync3(projectedSkills).some((name) => {
-      const skillFile = join5(projectedSkills, name, "SKILL.md");
-      return existsSync3(skillFile) && lstatSync4(skillFile).isFile();
+    const hasGeneratedSkill = existsSync4(projectedSkills) && readdirSync4(projectedSkills).some((name) => {
+      const skillFile = join7(projectedSkills, name, "SKILL.md");
+      return existsSync4(skillFile) && lstatSync6(skillFile).isFile();
     });
     if (!hasGeneratedSkill) issues.push(`${rootName}/skills contains no BMAD skill configuration`);
   }
@@ -9681,7 +9897,7 @@ var LEGACY_CLI_GITIGNORE_LINES = /* @__PURE__ */ new Set([
   "# some CLIs get a real directory here and some get a symlink."
 ]);
 function supportedCliGitignoreIssues(repoRoot) {
-  const lines = (safeReadText2(join5(repoRoot, ".gitignore")) ?? "").split(/\r?\n/);
+  const lines = (safeReadText2(join7(repoRoot, ".gitignore")) ?? "").split(/\r?\n/);
   const legacy = lines.filter((line) => LEGACY_CLI_GITIGNORE_LINES.has(line.trim()));
   return [
     ...legacy.length ? [`.gitignore contains ${legacy.length} legacy client-root override line(s); only .agents is canonical`] : [],
@@ -9689,7 +9905,7 @@ function supportedCliGitignoreIssues(repoRoot) {
   ];
 }
 function ensureSupportedCliGitignore(ctx) {
-  const path = join5(ctx.repoRoot, ".gitignore");
+  const path = join7(ctx.repoRoot, ".gitignore");
   const current = safeReadText2(path) ?? "";
   const kept = current.split(/\r?\n/).filter((line) => {
     const trimmed2 = line.trim();
@@ -9727,10 +9943,10 @@ function createBmadChecks() {
             fixable: false
           };
         }
-        const targetRoot = join5(ctx.repoRoot, "_bmad");
-        const selectedModules = manifestSelection.status === "valid" ? manifestSelection.modules : configuredBmadModules(ctx.repoRoot) ?? [...DEFAULT_BMAD_MODULES];
+        const targetRoot = join7(ctx.repoRoot, "_bmad");
+        const selectedModules = manifestSelection.status === "valid" ? manifestSelection.modules : configuredBmadModuleSelection(ctx.repoRoot)?.modules ?? [...DEFAULT_BMAD_MODULES];
         const sentinels = requiredBmadSentinels(ctx.repoRoot, selectedModules);
-        const missing = sentinels.filter((file) => !existsSync3(join5(targetRoot, file)));
+        const missing = sentinels.filter((file) => !existsSync4(join7(targetRoot, file)));
         const projectNameIssues = bmadProjectNameIssues(ctx.repoRoot);
         const details = [
           ...missing.map((file) => `_bmad/${file}`),
@@ -9758,10 +9974,21 @@ function createBmadChecks() {
             details: [manifestSelection.error]
           };
         }
-        const selectedModules = manifestSelection.status === "valid" ? manifestSelection.modules : configuredBmadModules(ctx.repoRoot) ?? [...DEFAULT_BMAD_MODULES];
+        const selectedModules = manifestSelection.status === "valid" ? manifestSelection.modules : configuredBmadModuleSelection(ctx.repoRoot)?.modules ?? [...DEFAULT_BMAD_MODULES];
+        const preservation = g33BmadUpdateBoundary(ctx.repoRoot, manifestSelection.status === "valid" && manifestSelection.hasG33 || configuredBmadModuleSelection(ctx.repoRoot)?.hasG33);
+        if (preservation) return {
+          id: finding2.id,
+          title: finding2.title,
+          status: "blocked",
+          summary: preservation.summary,
+          changedFiles: [],
+          details: companionDetails(preservation),
+          bmadCompanion: preservation
+        };
         if (ctx.dryRun) {
           const sentinels = requiredBmadSentinels(ctx.repoRoot, selectedModules);
-          changedFiles.push(...sentinels.map((file) => join5(ctx.repoRoot, "_bmad", file)).filter((path) => !existsSync3(path)));
+          const companion = await runG33Companion(ctx.repoRoot, true, "bmad-install");
+          changedFiles.push(...sentinels.map((file) => join7(ctx.repoRoot, "_bmad", file)).filter((path) => !existsSync4(path)));
           changedFiles.push(...bmadProjectNameIssues(ctx.repoRoot).paths);
           return {
             id: finding2.id,
@@ -9770,16 +9997,18 @@ function createBmadChecks() {
             summary: changedFiles.length ? "Would run non-interactive bmad-method install" : "No changes required",
             changedFiles,
             details: [
-              `Would run: ${bmadInstallDisplay(ctx.repoRoot, selectedModules)}`
-            ]
+              `Would run: ${bmadInstallDisplay(ctx.repoRoot, selectedModules)}`,
+              ...companionDetails(companion)
+            ],
+            bmadCompanion: companion
           };
         }
         const expectedChangedPaths = [
-          ...requiredBmadSentinels(ctx.repoRoot, selectedModules).map((file) => join5(ctx.repoRoot, "_bmad", file)).filter((path) => !existsSync3(path)),
+          ...requiredBmadSentinels(ctx.repoRoot, selectedModules).map((file) => join7(ctx.repoRoot, "_bmad", file)).filter((path) => !existsSync4(path)),
           ...bmadProjectNameIssues(ctx.repoRoot).paths
         ];
         const evicted = evictLegacyBmadPackState(ctx, changedFiles, await skillActivations(ctx));
-        const install = runBmadInstall(ctx.repoRoot, selectedModules);
+        const install = await runBmadInstall(ctx.repoRoot, selectedModules);
         if (!install.ok) {
           return {
             id: finding2.id,
@@ -9790,14 +10019,15 @@ function createBmadChecks() {
             details: [...evicted, install.error ?? "Unknown error"]
           };
         }
-        changedFiles.push(...expectedChangedPaths.filter(existsSync3));
+        changedFiles.push(...expectedChangedPaths.filter(existsSync4), ...install.companion?.changedFiles ?? []);
         return {
           id: finding2.id,
           title: finding2.title,
           status: changedFiles.length ? "applied" : "noop",
           summary: changedFiles.length ? "Installed BMAD scaffold via bmad-method" : "No changes required",
           changedFiles,
-          details: evicted
+          details: [...evicted, ...install.companion ? companionDetails(install.companion) : []],
+          bmadCompanion: install.companion
         };
       }
     },
@@ -9811,7 +10041,7 @@ function createBmadChecks() {
             id: "bmad.version",
             title: "BMAD version currency",
             status: "skip",
-            summary: existsSync3(join5(ctx.repoRoot, "_bmad")) ? "BMAD installed but version manifest unreadable" : "No BMAD install present",
+            summary: existsSync4(join7(ctx.repoRoot, "_bmad")) ? "BMAD installed but version manifest unreadable" : "No BMAD install present",
             details: [],
             fixable: false
           };
@@ -9899,7 +10129,7 @@ function createBmadChecks() {
         }
         const installed = readInstalledBmadVersion(ctx.repoRoot);
         const available = ctx.bmadVersionPin?.trim() ?? bmadChannelTarget(resolveBmadDistTags(ctx.homeDir)?.distTags)?.version;
-        const manifestPath = join5(ctx.repoRoot, "_bmad", "_config", "manifest.yaml");
+        const manifestPath = join7(ctx.repoRoot, "_bmad", "_config", "manifest.yaml");
         const manifestSelection = manifestBmadModules(ctx.repoRoot);
         if (manifestSelection.status === "invalid") {
           return {
@@ -9911,8 +10141,19 @@ function createBmadChecks() {
             details: [manifestSelection.error]
           };
         }
-        const selectedModules = manifestSelection.status === "valid" ? manifestSelection.modules : configuredBmadModules(ctx.repoRoot) ?? [...DEFAULT_BMAD_MODULES];
+        const selectedModules = manifestSelection.status === "valid" ? manifestSelection.modules : configuredBmadModuleSelection(ctx.repoRoot)?.modules ?? [...DEFAULT_BMAD_MODULES];
+        const preservation = g33BmadUpdateBoundary(ctx.repoRoot, manifestSelection.status === "valid" && manifestSelection.hasG33 || configuredBmadModuleSelection(ctx.repoRoot)?.hasG33);
+        if (preservation) return {
+          id: finding2.id,
+          title: finding2.title,
+          status: "blocked",
+          summary: preservation.summary,
+          changedFiles: [],
+          details: companionDetails(preservation),
+          bmadCompanion: preservation
+        };
         if (ctx.dryRun) {
+          const companion = await runG33Companion(ctx.repoRoot, true, "bmad-install");
           return {
             id: finding2.id,
             title: finding2.title,
@@ -9920,11 +10161,13 @@ function createBmadChecks() {
             summary: `Would upgrade BMAD ${installed ?? "?"} -> ${available ?? BMAD_TARGET_CHANNEL}`,
             changedFiles: [manifestPath],
             details: [
-              `Would run: ${bmadInstallDisplay(ctx.repoRoot, selectedModules, available ?? BMAD_TARGET_CHANNEL)}`
-            ]
+              `Would run: ${bmadInstallDisplay(ctx.repoRoot, selectedModules, available ?? BMAD_TARGET_CHANNEL)}`,
+              ...companionDetails(companion)
+            ],
+            bmadCompanion: companion
           };
         }
-        const install = runBmadInstall(ctx.repoRoot, selectedModules, available ?? BMAD_TARGET_CHANNEL);
+        const install = await runBmadInstall(ctx.repoRoot, selectedModules, available ?? BMAD_TARGET_CHANNEL);
         if (!install.ok) {
           return {
             id: finding2.id,
@@ -9941,7 +10184,8 @@ function createBmadChecks() {
         const upgraded = Boolean(nowInstalled && installed && compareBmadVersions(nowInstalled, installed) > 0);
         const changed = Array.from(/* @__PURE__ */ new Set([
           ...upgraded ? [manifestPath] : [],
-          ...evictedChanges
+          ...evictedChanges,
+          ...install.companion?.changedFiles ?? []
         ]));
         return {
           id: finding2.id,
@@ -9949,7 +10193,8 @@ function createBmadChecks() {
           status: changed.length ? "applied" : "noop",
           summary: upgraded ? `Upgraded BMAD ${installed} -> ${nowInstalled}` : `BMAD reinstalled (${nowInstalled ?? "?"})`,
           changedFiles: changed,
-          details: evicted
+          details: [...evicted, ...install.companion ? companionDetails(install.companion) : []],
+          bmadCompanion: install.companion
         };
       }
     },
@@ -9958,7 +10203,7 @@ function createBmadChecks() {
       title: "Supported BMAD CLI projection roots",
       audit: (ctx) => {
         const unsupportedNames = Object.keys(UNSUPPORTED_BMAD_ROOTS);
-        const present = unsupportedNames.filter((name) => existsSync3(join5(ctx.repoRoot, name)));
+        const present = unsupportedNames.filter((name) => existsSync4(join7(ctx.repoRoot, name)));
         const attestations = present.map((name) => ({ name, ...unsupportedRootAttestation(ctx.repoRoot, name) }));
         const plan = planSkillRoots(ctx.repoRoot);
         const supportedIssues = supportedCliProjectionIssues(ctx.repoRoot, plan);
@@ -9980,7 +10225,7 @@ function createBmadChecks() {
       },
       migrate: (ctx, finding2) => {
         const unsupportedNames = Object.keys(UNSUPPORTED_BMAD_ROOTS);
-        const present = unsupportedNames.filter((name) => existsSync3(join5(ctx.repoRoot, name)));
+        const present = unsupportedNames.filter((name) => existsSync4(join7(ctx.repoRoot, name)));
         const attestations = present.map((name) => ({ name, ...unsupportedRootAttestation(ctx.repoRoot, name) }));
         const blocked = attestations.filter((entry) => !entry.safe);
         if (blocked.length) {
@@ -10005,7 +10250,7 @@ function createBmadChecks() {
           };
         }
         const gitignoreChanges = ensureSupportedCliGitignore(ctx);
-        const removedRoots = attestations.map((entry) => join5(ctx.repoRoot, entry.name));
+        const removedRoots = attestations.map((entry) => join7(ctx.repoRoot, entry.name));
         if (!ctx.dryRun) for (const path of removedRoots) rmSync2(path, { recursive: true, force: true });
         const changedFiles = [.../* @__PURE__ */ new Set([...projectionResult.changedFiles, ...gitignoreChanges, ...removedRoots])].sort();
         return {
@@ -10064,11 +10309,11 @@ function linkedPlaneBoard(ctx) {
   return { boardId, workspace };
 }
 function runPx(args, ctx) {
-  const probe = spawnSync3("which", ["px"], { encoding: "utf8" });
+  const probe = spawnSync4("which", ["px"], { encoding: "utf8" });
   if (probe.status !== 0) {
     return { error: "px not found on PATH \u2014 install Pilot to manage board schemas" };
   }
-  const result2 = spawnSync3("px", args, {
+  const result2 = spawnSync4("px", args, {
     cwd: ctx.repoRoot,
     encoding: "utf8",
     shell: false,
@@ -10248,7 +10493,7 @@ var AgentHooksRecipe = class extends Recipe {
   printNextSteps() {
     console.log("\u{1FA9D} Agent-hooks layer installed!");
     console.log("   Next steps:");
-    console.log("   1. mise run skills:sync  # sync .agents/skills.json into local CLI dirs");
+    console.log("   1. pj skills sync --scope project --project .  # sync .agents/skills.json into local CLI dirs");
     console.log("   2. mise run hooks:sync   # generate .claude/settings.json + inject codex/kimi/hermes");
     console.log("   3. git add .claude/settings.json .agents/hooks .agents/skills.json && commit (codex/kimi/hermes are per-dev)");
     console.log("   4. mise run hindsight:setup   # set HINDSIGHT_OP_KEY_REF to your 1Password item first");
@@ -10258,11 +10503,12 @@ var AgentHooksRecipe = class extends Recipe {
 
 // src/recipes/BmadRecipe.ts
 var BmadRecipe = class extends Recipe {
-  checks = createBmadChecks();
+  requiredChecks = createBmadChecks();
+  checks = [...this.requiredChecks, createG33CompanionCheck()];
   metadata = {
     id: "bmad",
     name: "bmad",
-    description: "BMAD methodology and the supported CLI projections",
+    description: "BMAD methodology, supported CLI projections, and the optional owner-provided g33 companion",
     dependencies: ["agent-hooks"],
     commands: [],
     publicRuleIds: this.checks.map((check) => check.id)
@@ -10270,8 +10516,31 @@ var BmadRecipe = class extends Recipe {
   constructor(context) {
     super(context);
   }
-  init(ctx, _input) {
-    return this.initializeOwnedChecks(ctx);
+  async init(ctx, _input) {
+    const companions = [];
+    const checks = this.requiredChecks.map((check) => ({
+      ...check,
+      migrate: async (...args) => {
+        const result2 = await check.migrate(...args);
+        if (result2.bmadCompanion) companions.push(result2.bmadCompanion);
+        return result2;
+      }
+    }));
+    const required = await this.initializeOwnedChecks(ctx, checks);
+    if (!required.ok) return { ...required, ...companions.length ? { bmadCompanion: companions.at(-1) } : {} };
+    const companion = companions.at(-1) ?? await runG33Companion(ctx.repoRoot, ctx.dryRun);
+    return {
+      ...required,
+      bmadCompanion: companion,
+      changedFiles: [.../* @__PURE__ */ new Set([...required.changedFiles, ...companion.changedFiles])].sort(),
+      logs: [...required.logs, ...companionDetails(companion)],
+      phases: [...required.phases, {
+        id: "bmad.g33-companion",
+        status: companion.status === "planned" ? "planned" : companion.status === "changed" ? "changed" : companion.status === "unchanged" ? "unchanged" : "skipped",
+        message: `Optional g33 (${companion.status}): ${companion.summary}`,
+        changedFiles: companion.changedFiles
+      }]
+    };
   }
   printNextSteps() {
     console.log(`BMAD lifecycle initialized for the ${SUPPORTED_CLIS.length} supported CLIs.`);
@@ -10595,24 +10864,24 @@ var NodeRecipe = class extends Recipe {
 
 // src/recipes/ProjectRecipe.ts
 init_project();
-import { spawnSync as spawnSync11 } from "node:child_process";
-import { existsSync as existsSync14, lstatSync as lstatSync12, readFileSync as readFileSync14, rmSync as rmSync5 } from "node:fs";
-import { dirname as dirname14, isAbsolute as isAbsolute8, join as join18, relative as relativePath, resolve as resolve17 } from "node:path";
+import { spawnSync as spawnSync12 } from "node:child_process";
+import { existsSync as existsSync14, lstatSync as lstatSync13, readFileSync as readFileSync15, rmSync as rmSync5 } from "node:fs";
+import { dirname as dirname14, isAbsolute as isAbsolute9, join as join19, relative as relativePath, resolve as resolve18 } from "node:path";
 init_tree_diff();
 
 // src/recipes/NotebookRecipe.ts
 init_project();
-import { existsSync as existsSync13, readFileSync as readFileSync13 } from "node:fs";
-import { join as join17 } from "node:path";
+import { existsSync as existsSync13, readFileSync as readFileSync14 } from "node:fs";
+import { join as join18 } from "node:path";
 
 // src/notebook/checks.ts
 init_config();
 init_notes();
 init_output();
 init_state();
-import { spawnSync as spawnSync5 } from "node:child_process";
-import { existsSync as existsSync10, readFileSync as readFileSync11 } from "node:fs";
-import { join as join13 } from "node:path";
+import { spawnSync as spawnSync6 } from "node:child_process";
+import { existsSync as existsSync10, readFileSync as readFileSync12 } from "node:fs";
+import { join as join14 } from "node:path";
 var NOTEBOOK_RULE_IDS = [
   "notebook.configuration",
   "notebook.binding",
@@ -10629,10 +10898,10 @@ function result(check, status, summary, changedFiles = [], details = []) {
   return { id: check.id, title: check.title, status, summary, changedFiles, details };
 }
 function manifestNotebook(repo) {
-  const path = join13(repo, ".project.json");
+  const path = join14(repo, ".project.json");
   if (!existsSync10(path)) return null;
   try {
-    const parsed = JSON.parse(readFileSync11(path, "utf8"));
+    const parsed = JSON.parse(readFileSync12(path, "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
     const notebook = parsed.notebook;
     return notebook && typeof notebook === "object" && !Array.isArray(notebook) ? notebook : null;
@@ -10861,10 +11130,10 @@ function captureAudit(ctx) {
 function overviewMigrate(ctx, current) {
   if (ctx.dryRun) return result(current, "applied", "Would reconcile drifted Project Overview note");
   if (!ctx.live) return result(current, "blocked", "Reconciling the remote Overview note requires --live");
-  const pjanglerEntry = ctx.pjanglerRoot ? join13(ctx.pjanglerRoot, "dist", "index.js") : null;
+  const pjanglerEntry = ctx.pjanglerRoot ? join14(ctx.pjanglerRoot, "dist", "index.js") : null;
   const entry = pjanglerEntry && existsSync10(pjanglerEntry) ? pjanglerEntry : "pj";
   const cmd = entry === "pj" ? ["pj"] : [process.execPath, entry];
-  const spawned = spawnSync5(cmd[0], [...cmd.slice(1), "notebook", "overview", ctx.repoRoot], {
+  const spawned = spawnSync6(cmd[0], [...cmd.slice(1), "notebook", "overview", ctx.repoRoot], {
     encoding: "utf8",
     timeout: 1e4,
     env: { ...process.env, ...ctx.registryPath ? { PJ_PROJECT_REGISTRY: ctx.registryPath } : {} }
@@ -10909,7 +11178,7 @@ init_project();
 init_config();
 init_open_notebook_client();
 init_notes();
-import { resolve as resolve16 } from "node:path";
+import { resolve as resolve17 } from "node:path";
 
 // src/notebook/journal-key.ts
 init_types();
@@ -10943,18 +11212,18 @@ function journalNoteOperationId(period, key) {
 init_notes();
 init_git_evidence();
 init_types();
-import { spawnSync as spawnSync7 } from "node:child_process";
+import { spawnSync as spawnSync8 } from "node:child_process";
 import { realpathSync as realpathSync8 } from "node:fs";
-import { relative as relative10, resolve as resolve13, sep as sep5 } from "node:path";
+import { relative as relative10, resolve as resolve14, sep as sep5 } from "node:path";
 var DEFAULT_OVERVIEW_REFERENCES = [".project.json", "README.md", "AGENTS.md", "CLAUDE.md", "docs/architecture.md"];
 function git2(repo, args, timeout) {
-  const result2 = spawnSync7("git", args, { cwd: repo, encoding: "utf8", maxBuffer: 1024 * 1024, timeout, shell: false });
+  const result2 = spawnSync8("git", args, { cwd: repo, encoding: "utf8", maxBuffer: 1024 * 1024, timeout, shell: false });
   return { ok: result2.status === 0, stdout: result2.stdout?.trim() ?? "" };
 }
 function normalizedReference(repo, value) {
   if (!value || value.includes("\0") || value.startsWith("/") || value.split(/[\\/]/u).includes("..")) throw new NotebookError("INVALID_INPUT", `Overview reference is not a contained relative path: ${value}`);
   const root = realpathSync8(repo);
-  const candidate = resolve13(root, value);
+  const candidate = resolve14(root, value);
   const rel = relative10(root, candidate).split(sep5).join("/");
   if (!rel || rel === ".." || rel.startsWith("../")) throw new NotebookError("INVALID_INPUT", `Overview reference escapes the repository: ${value}`);
   return rel.normalize("NFC");
@@ -11087,21 +11356,21 @@ init_git_evidence();
 init_notes();
 init_state();
 init_types();
-import { spawn, spawnSync as spawnSync8 } from "node:child_process";
+import { spawn, spawnSync as spawnSync9 } from "node:child_process";
 import { createHash as createHash8, randomUUID as randomUUID5 } from "node:crypto";
-import { chmodSync as chmodSync4, closeSync as closeSync5, constants as constants4, copyFileSync as copyFileSync3, existsSync as existsSync11, fstatSync as fstatSync3, fsyncSync as fsyncSync4, lstatSync as lstatSync11, mkdirSync as mkdirSync6, openSync as openSync5, readFileSync as readFileSync12, readSync as readSync3, readdirSync as readdirSync7, realpathSync as realpathSync9, renameSync as renameSync6, rmSync as rmSync4, symlinkSync as symlinkSync3, unlinkSync as unlinkSync6, writeFileSync as writeFileSync7 } from "node:fs";
-import { basename as basename8, dirname as dirname13, isAbsolute as isAbsolute6, join as join16, parse as parse3, relative as relative11, resolve as resolve14, sep as sep6 } from "node:path";
+import { chmodSync as chmodSync4, closeSync as closeSync5, constants as constants4, copyFileSync as copyFileSync3, existsSync as existsSync11, fstatSync as fstatSync3, fsyncSync as fsyncSync4, lstatSync as lstatSync12, mkdirSync as mkdirSync6, openSync as openSync5, readFileSync as readFileSync13, readSync as readSync3, readdirSync as readdirSync7, realpathSync as realpathSync9, renameSync as renameSync6, rmSync as rmSync4, symlinkSync as symlinkSync3, unlinkSync as unlinkSync6, writeFileSync as writeFileSync7 } from "node:fs";
+import { basename as basename8, dirname as dirname13, isAbsolute as isAbsolute7, join as join17, parse as parse3, relative as relative11, resolve as resolve15, sep as sep6 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function bundledSkillCandidates() {
   const candidates = [];
   let cursor = dirname13(fileURLToPath3(import.meta.url));
   for (let depth = 0; depth < 8; depth++) {
-    candidates.push(join16(cursor, "dist", "assets", "project-notebook-skill"), join16(cursor, "assets", "project-notebook-skill"));
+    candidates.push(join17(cursor, "dist", "assets", "project-notebook-skill"), join17(cursor, "assets", "project-notebook-skill"));
     const parent = dirname13(cursor);
     if (parent === cursor) break;
     cursor = parent;
   }
-  return [...new Set(candidates.map((candidate) => resolve14(candidate)))];
+  return [...new Set(candidates.map((candidate) => resolve15(candidate)))];
 }
 function safeSkillRelativePath(value) {
   if (!value || value.startsWith("/") || value.includes("\0")) return false;
@@ -11114,14 +11383,14 @@ function assertOwnedSkillTree(source) {
   assertNoSymlinkComponents(source);
   const uid = typeof process.getuid === "function" ? process.getuid() : void 0;
   const walk = (directory) => {
-    const directoryStat = lstatSync11(directory);
+    const directoryStat = lstatSync12(directory);
     if (!directoryStat.isDirectory() || directoryStat.isSymbolicLink()) throw new NotebookError("CONFLICT", "Project Notebook skill source contains a non-directory component");
     if (uid !== void 0 && directoryStat.uid !== uid) throw new NotebookError("CONFLICT", "Project Notebook skill source is not owned by the current user");
     if (directoryStat.mode & 3586) throw new NotebookError("CONFLICT", "Project Notebook skill source has unsafe directory mode bits");
     for (const entry of readdirSync7(directory, { withFileTypes: true })) {
       if (entry.isDirectory() && (entry.name === "__pycache__" || entry.name === ".git" || entry.name === "node_modules")) continue;
-      const path = join16(directory, entry.name);
-      const stat = lstatSync11(path);
+      const path = join17(directory, entry.name);
+      const stat = lstatSync12(path);
       if (stat.isSymbolicLink()) throw new NotebookError("CONFLICT", "Project Notebook skill source contains a symlink");
       if (entry.isDirectory()) walk(path);
       else if (!entry.isFile()) throw new NotebookError("CONFLICT", "Project Notebook skill source contains a non-regular entry");
@@ -11138,16 +11407,16 @@ function enumerateSkillPayload(source) {
   const walk = (directory) => {
     for (const entry of readdirSync7(directory, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name, "en"))) {
       if (entry.isDirectory() && (entry.name === "__pycache__" || entry.name === ".git" || entry.name === "node_modules")) continue;
-      const path = join16(directory, entry.name);
+      const path = join17(directory, entry.name);
       const rel = relative11(source, path).split(sep6).join("/");
       if (!rel.includes("/") && (rel === "export-manifest.json" || rel === "SHA256SUMS" || rel === ".source.yaml")) continue;
       if (!safeSkillRelativePath(rel)) throw new NotebookError("CONFLICT", `Project Notebook skill export path is unsafe: ${rel}`);
-      const stat = lstatSync11(path);
+      const stat = lstatSync12(path);
       if (stat.isSymbolicLink()) throw new NotebookError("CONFLICT", "Project Notebook skill export contains a symlink");
       if (entry.isDirectory()) walk(path);
       else if (entry.isFile()) {
         const expectedMode = rel.endsWith(".sh") || rel.startsWith("scripts/") ? "0755" : "0644";
-        result2.push({ path: rel, sha256: createHash8("sha256").update(readFileSync12(path)).digest("hex"), mode: expectedMode });
+        result2.push({ path: rel, sha256: createHash8("sha256").update(readFileSync13(path)).digest("hex"), mode: expectedMode });
       } else throw new NotebookError("CONFLICT", "Project Notebook skill export contains a non-regular entry");
     }
   };
@@ -11155,9 +11424,9 @@ function enumerateSkillPayload(source) {
   return result2.sort((a, b) => a.path.localeCompare(b.path, "en"));
 }
 function parsePackedManifest(source) {
-  const manifestPath = join16(source, "export-manifest.json");
+  const manifestPath = join17(source, "export-manifest.json");
   if (!existsSync11(manifestPath)) return null;
-  const value = JSON.parse(readFileSync12(manifestPath, "utf8"));
+  const value = JSON.parse(readFileSync13(manifestPath, "utf8"));
   if (!value || typeof value !== "object" || Array.isArray(value)) throw new NotebookError("CONFLICT", "Project Notebook skill export manifest is invalid");
   const manifest = value;
   if (manifest.schema_version !== 1 || manifest.skill !== "project-notebook" || !Array.isArray(manifest.files)) throw new NotebookError("CONFLICT", "Project Notebook skill export manifest is incompatible");
@@ -11166,10 +11435,10 @@ function parsePackedManifest(source) {
     if (!entry || typeof entry.path !== "string" || !/^[a-f0-9]{64}$/u.test(entry.sha256) || !/^(?:0644|0755)$/u.test(entry.mode)) throw new NotebookError("CONFLICT", "Project Notebook skill export entry is invalid");
     if (!safeSkillRelativePath(entry.path) || paths.has(entry.path)) throw new NotebookError("CONFLICT", "Project Notebook skill export path is unsafe or duplicated");
     paths.add(entry.path);
-    const path = join16(source, ...entry.path.split("/"));
-    const stat = lstatSync11(path);
+    const path = join17(source, ...entry.path.split("/"));
+    const stat = lstatSync12(path);
     if (!stat.isFile() || stat.isSymbolicLink()) throw new NotebookError("CONFLICT", "Project Notebook skill export contains a non-regular entry");
-    const actual = createHash8("sha256").update(readFileSync12(path)).digest("hex");
+    const actual = createHash8("sha256").update(readFileSync13(path)).digest("hex");
     if (actual !== entry.sha256) throw new NotebookError("CONFLICT", `Project Notebook skill digest mismatch: ${entry.path}`);
     const actualMode = stat.mode & 511;
     const executable = entry.mode === "0755";
@@ -11181,12 +11450,12 @@ function parsePackedManifest(source) {
   if (JSON.stringify(actualPaths) !== JSON.stringify(manifest.files.map((entry) => entry.path))) throw new NotebookError("CONFLICT", "Project Notebook skill manifest does not exactly enumerate its payload");
   const sums = `${manifest.files.map((entry) => `${entry.sha256}  ${entry.path}`).join("\n")}
 `;
-  if (!existsSync11(join16(source, "SHA256SUMS")) || readFileSync12(join16(source, "SHA256SUMS"), "utf8") !== sums) throw new NotebookError("CONFLICT", "Project Notebook skill SHA256SUMS is missing or stale");
+  if (!existsSync11(join17(source, "SHA256SUMS")) || readFileSync13(join17(source, "SHA256SUMS"), "utf8") !== sums) throw new NotebookError("CONFLICT", "Project Notebook skill SHA256SUMS is missing or stale");
   return manifest;
 }
 function expectedPackedSkill() {
   for (const candidate of bundledSkillCandidates()) {
-    if (!existsSync11(join16(candidate, "export-manifest.json"))) continue;
+    if (!existsSync11(join17(candidate, "export-manifest.json"))) continue;
     assertOwnedSkillTree(candidate);
     const manifest = parsePackedManifest(candidate);
     if (!manifest) continue;
@@ -11196,7 +11465,7 @@ function expectedPackedSkill() {
   throw new NotebookError("NOT_CONFIGURED", "PJ\xE1ngler package has no verified Project Notebook skill export");
 }
 function isCanonicalSkillexProjectionPath(path) {
-  return resolve14(path).split(sep6).join("/").endsWith("/all-skills/project-notebook");
+  return resolve15(path).split(sep6).join("/").endsWith("/all-skills/project-notebook");
 }
 function isVerifiedCanonicalSkillexProjection(path) {
   if (!isCanonicalSkillexProjectionPath(path)) return false;
@@ -11216,7 +11485,7 @@ function describeProjectNotebookSkillDrift(source) {
   }
   let actual;
   try {
-    const absolute = resolve14(source);
+    const absolute = resolve15(source);
     const packed = parsePackedManifest(absolute);
     actual = packed?.files ?? enumerateSkillPayload(absolute);
   } catch (error) {
@@ -11240,7 +11509,7 @@ function describeProjectNotebookSkillDrift(source) {
   return drift.length ? drift.slice(0, 20) : ["no per-file drift detected; the export enumeration itself differs"];
 }
 function verifyProjectNotebookSkillExport(source) {
-  const absolute = resolve14(source);
+  const absolute = resolve15(source);
   assertOwnedSkillTree(absolute);
   const packed = parsePackedManifest(absolute);
   const actual = packed ?? { schema_version: 1, skill: "project-notebook", files: enumerateSkillPayload(absolute) };
@@ -11252,14 +11521,14 @@ function verifyProjectNotebookSkillExport(source) {
 }
 function resolveProjectNotebookSkillSource(env2 = process.env) {
   if (env2.PJ_PROJECT_NOTEBOOK_SKILL_ROOT) {
-    const explicit = resolve14(env2.PJ_PROJECT_NOTEBOOK_SKILL_ROOT);
-    if (!existsSync11(join16(explicit, "SKILL.md"))) throw new NotebookError("NOT_CONFIGURED", "Configured Project Notebook skill source is unavailable");
+    const explicit = resolve15(env2.PJ_PROJECT_NOTEBOOK_SKILL_ROOT);
+    if (!existsSync11(join17(explicit, "SKILL.md"))) throw new NotebookError("NOT_CONFIGURED", "Configured Project Notebook skill source is unavailable");
     verifyProjectNotebookSkillExport(explicit);
     return explicit;
   }
   if (env2.PJ_SKILLS_REGISTRY_ROOT) {
-    const canonical = resolve14(env2.PJ_SKILLS_REGISTRY_ROOT, "all-skills", "project-notebook");
-    if (existsSync11(join16(canonical, "SKILL.md"))) {
+    const canonical = resolve15(env2.PJ_SKILLS_REGISTRY_ROOT, "all-skills", "project-notebook");
+    if (existsSync11(join17(canonical, "SKILL.md"))) {
       verifyProjectNotebookSkillExport(canonical);
       return canonical;
     }
@@ -11274,7 +11543,7 @@ var REPAIR_COMMAND = "pj notebook skill --apply";
 function probeCanonicalSkillexRootProjection(skillsRoot, link) {
   let rootLink;
   try {
-    rootLink = lstatSync11(skillsRoot);
+    rootLink = lstatSync12(skillsRoot);
   } catch (error) {
     if (error.code === "ENOENT") return { state: "absent" };
     throw error;
@@ -11287,15 +11556,15 @@ function probeCanonicalSkillexRootProjection(skillsRoot, link) {
     if (uid !== void 0 && rootLink.uid !== uid) throw new Error("owner");
     const globalRoot = realpathSync9(skillsRoot);
     assertNoSymlinkComponents(globalRoot);
-    const globalStat = lstatSync11(globalRoot);
+    const globalStat = lstatSync12(globalRoot);
     if (!globalStat.isDirectory() || globalStat.isSymbolicLink()) throw new Error("root-type");
     if (uid !== void 0 && globalStat.uid !== uid) throw new Error("root-owner");
     if (globalStat.mode & 3586) throw new Error("root-mode");
     const skillSetsRoot = dirname13(globalRoot);
     if (basename8(globalRoot) !== "global" || basename8(skillSetsRoot) !== "skill-sets") throw new Error("layout");
     const checkoutRoot = dirname13(skillSetsRoot);
-    const expectedSource = join16(checkoutRoot, "all-skills", "project-notebook");
-    const linkStat = lstatSync11(link);
+    const expectedSource = join17(checkoutRoot, "all-skills", "project-notebook");
+    const linkStat = lstatSync12(link);
     if (!linkStat.isSymbolicLink()) throw new Error("projection-type");
     if (uid !== void 0 && linkStat.uid !== uid) throw new Error("projection-owner");
     const projectedSource = realpathSync9(link);
@@ -11331,28 +11600,28 @@ function installPackagedProjectNotebookSkill(input = {}) {
   const manifest = verifyProjectNotebookSkillExport(source);
   const digest = createHash8("sha256").update(JSON.stringify(manifest)).digest("hex");
   const home = env2.HOME;
-  if (!home || !resolve14(home).startsWith("/")) throw new NotebookError("NOT_CONFIGURED", "A trusted HOME is required to install the Project Notebook skill");
-  const skillsRoot = join16(home, ".agents", "skills");
-  const link = join16(skillsRoot, "project-notebook");
+  if (!home || !resolve15(home).startsWith("/")) throw new NotebookError("NOT_CONFIGURED", "A trusted HOME is required to install the Project Notebook skill");
+  const skillsRoot = join17(home, ".agents", "skills");
+  const link = join17(skillsRoot, "project-notebook");
   const probe = probeCanonicalSkillexRootProjection(skillsRoot, link);
   if (probe.state === "adopted") return { installed: false, path: link, digest };
   if (probe.state === "declined") return { installed: false, path: link, digest, blocked: probe.block };
-  const dataRoot = resolve14(env2.XDG_DATA_HOME || join16(home, ".local", "share"), "pjangler", "skills", "project-notebook");
-  const payload = join16(dataRoot, `${PJANGLER_VERSION}-${digest}`);
+  const dataRoot = resolve15(env2.XDG_DATA_HOME || join17(home, ".local", "share"), "pjangler", "skills", "project-notebook");
+  const payload = join17(dataRoot, `${PJANGLER_VERSION}-${digest}`);
   assertNoSymlinkComponents(dirname13(dataRoot), true);
   mkdirSync6(dataRoot, { recursive: true, mode: 448 });
   assertNoSymlinkComponents(dataRoot);
-  const dataStat = lstatSync11(dataRoot);
+  const dataStat = lstatSync12(dataRoot);
   if (!dataStat.isDirectory() || dataStat.isSymbolicLink() || typeof process.getuid === "function" && dataStat.uid !== process.getuid()) throw new NotebookError("CONFLICT", "Project Notebook skill data root is not a current-user directory");
   chmodSync4(dataRoot, 448);
   if (!existsSync11(payload)) {
-    const staging = join16(dataRoot, `.staging-${randomUUID5()}`);
+    const staging = join17(dataRoot, `.staging-${randomUUID5()}`);
     mkdirSync6(staging, { recursive: false, mode: 448 });
     try {
       for (const entry of manifest.files) {
-        const destination = join16(staging, ...entry.path.split("/"));
+        const destination = join17(staging, ...entry.path.split("/"));
         mkdirSync6(dirname13(destination), { recursive: true, mode: 493 });
-        copyFileSync3(join16(source, ...entry.path.split("/")), destination);
+        copyFileSync3(join17(source, ...entry.path.split("/")), destination);
         const mode = entry.mode === "0755" ? 493 : 420;
         chmodSync4(destination, mode);
         const fd = openSync5(destination, constants4.O_RDONLY | (constants4.O_NOFOLLOW ?? 0));
@@ -11364,9 +11633,9 @@ function installPackagedProjectNotebookSkill(input = {}) {
           closeSync5(fd);
         }
       }
-      writeFileSync7(join16(staging, "export-manifest.json"), `${JSON.stringify(manifest, null, 2)}
+      writeFileSync7(join17(staging, "export-manifest.json"), `${JSON.stringify(manifest, null, 2)}
 `, { mode: 420, flag: "wx" });
-      writeFileSync7(join16(staging, "SHA256SUMS"), `${manifest.files.map((entry) => `${entry.sha256}  ${entry.path}`).join("\n")}
+      writeFileSync7(join17(staging, "SHA256SUMS"), `${manifest.files.map((entry) => `${entry.sha256}  ${entry.path}`).join("\n")}
 `, { mode: 420, flag: "wx" });
       verifyProjectNotebookSkillExport(staging);
       renameSync6(staging, payload);
@@ -11374,7 +11643,7 @@ function installPackagedProjectNotebookSkill(input = {}) {
       if (existsSync11(staging)) rmSync4(staging, { recursive: true, force: true });
     }
   } else {
-    const stat = lstatSync11(payload);
+    const stat = lstatSync12(payload);
     if (!stat.isDirectory() || stat.isSymbolicLink()) throw new NotebookError("CONFLICT", "Installed Project Notebook payload is not a real directory");
     verifyProjectNotebookSkillExport(payload);
   }
@@ -11384,7 +11653,7 @@ function installPackagedProjectNotebookSkill(input = {}) {
   let linkExists = existsSync11(link);
   if (!linkExists) {
     try {
-      lstatSync11(link);
+      lstatSync12(link);
       linkExists = true;
     } catch {
     }
@@ -11401,7 +11670,7 @@ function installPackagedProjectNotebookSkill(input = {}) {
         repair: REPAIR_COMMAND
       }
     });
-    const stat = lstatSync11(link);
+    const stat = lstatSync12(link);
     if (!stat.isSymbolicLink()) return foreign(["the path is a real file or directory, not a PJ\xE1ngler-owned link"]);
     const target = realpathSync9(link);
     if (target !== realpathSync9(payload) && !isVerifiedCanonicalSkillexProjection(target)) {
@@ -11435,9 +11704,9 @@ function collectSupersededPayloads(dataRoot, keep) {
   }
   for (const name of entries) {
     if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?-[0-9a-f]{64}$/u.test(name)) continue;
-    const candidate = join16(dataRoot, name);
+    const candidate = join17(dataRoot, name);
     try {
-      const stat = lstatSync11(candidate);
+      const stat = lstatSync12(candidate);
       if (!stat.isDirectory() || stat.isSymbolicLink()) continue;
       if (kept.has(realpathSync9(candidate))) continue;
       rmSync4(candidate, { recursive: true, force: true });
@@ -11450,9 +11719,9 @@ function collectSupersededPayloads(dataRoot, keep) {
 function repairProjectNotebookSkillProjection(input = {}) {
   const env2 = input.env ?? process.env;
   const home = env2.HOME;
-  if (!home || !resolve14(home).startsWith("/")) throw new NotebookError("NOT_CONFIGURED", "A trusted HOME is required to repair the Project Notebook skill projection");
-  const skillsRoot = join16(home, ".agents", "skills");
-  const link = join16(skillsRoot, "project-notebook");
+  if (!home || !resolve15(home).startsWith("/")) throw new NotebookError("NOT_CONFIGURED", "A trusted HOME is required to repair the Project Notebook skill projection");
+  const skillsRoot = join17(home, ".agents", "skills");
+  const link = join17(skillsRoot, "project-notebook");
   const probe = probeCanonicalSkillexRootProjection(skillsRoot, link);
   if (probe.state === "adopted") return { status: "clean", summary: "Canonical Skillex projection already matches the version-pinned export", source: probe.source, drift: [], changed_files: [] };
   if (probe.state !== "declined") {
@@ -11466,7 +11735,7 @@ function repairProjectNotebookSkillProjection(input = {}) {
   const present = [];
   const walk = (directory) => {
     for (const entry of readdirSync7(directory, { withFileTypes: true })) {
-      const path = join16(directory, entry.name);
+      const path = join17(directory, entry.name);
       const rel = relative11(source, path).split(sep6).join("/");
       if (entry.isDirectory()) {
         walk(path);
@@ -11480,11 +11749,11 @@ function repairProjectNotebookSkillProjection(input = {}) {
   walk(source);
   const stale = present.filter((rel) => !wanted.has(rel)).sort();
   const changed = expected.manifest.files.filter((entry) => {
-    const path = join16(source, ...entry.path.split("/"));
+    const path = join17(source, ...entry.path.split("/"));
     if (!existsSync11(path)) return true;
-    const stat = lstatSync11(path);
+    const stat = lstatSync12(path);
     if (!stat.isFile()) return true;
-    if (createHash8("sha256").update(readFileSync12(path)).digest("hex") !== entry.sha256) return true;
+    if (createHash8("sha256").update(readFileSync13(path)).digest("hex") !== entry.sha256) return true;
     const mode = stat.mode & 511;
     const executable = entry.mode === "0755";
     return executable && (mode & 64) === 0 || !executable && (mode & 73) !== 0;
@@ -11499,15 +11768,15 @@ function repairProjectNotebookSkillProjection(input = {}) {
       summary: `Would restore ${affected.length} file(s) in ${source} from the version-pinned export`,
       source,
       drift: probe.block.details,
-      changed_files: affected.map((rel) => join16(source, ...rel.split("/")))
+      changed_files: affected.map((rel) => join17(source, ...rel.split("/")))
     };
   }
-  for (const rel of stale) rmSync4(join16(source, ...rel.split("/")), { force: true });
+  for (const rel of stale) rmSync4(join17(source, ...rel.split("/")), { force: true });
   for (const rel of changed) {
-    const destination = join16(source, ...rel.split("/"));
+    const destination = join17(source, ...rel.split("/"));
     const entry = expected.manifest.files.find((item) => item.path === rel);
     mkdirSync6(dirname13(destination), { recursive: true, mode: 493 });
-    copyFileSync3(join16(expected.source, ...rel.split("/")), destination);
+    copyFileSync3(join17(expected.source, ...rel.split("/")), destination);
     chmodSync4(destination, entry.mode === "0755" ? 493 : 420);
   }
   verifyProjectNotebookSkillExport(source);
@@ -11516,21 +11785,21 @@ function repairProjectNotebookSkillProjection(input = {}) {
     summary: `Restored ${affected.length} file(s) in ${source} from the version-pinned export; commit the change in the Skillex checkout`,
     source,
     drift: probe.block.details,
-    changed_files: affected.map((rel) => join16(source, ...rel.split("/")))
+    changed_files: affected.map((rel) => join17(source, ...rel.split("/")))
   };
 }
 function inspectProjectNotebookIntegration(env2 = process.env) {
   const home = env2.HOME;
   if (!home) return { skill_installed: false, hooks_projected: false, details: ["HOME is unavailable"] };
-  const skillsRoot = join16(home, ".agents", "skills");
-  const link = join16(skillsRoot, "project-notebook");
+  const skillsRoot = join17(home, ".agents", "skills");
+  const link = join17(skillsRoot, "project-notebook");
   try {
     const expected = expectedPackedSkill();
-    const dataRoot = resolve14(env2.XDG_DATA_HOME || join16(home, ".local", "share"), "pjangler", "skills", "project-notebook");
-    const expectedPayload = join16(dataRoot, `${PJANGLER_VERSION}-${expected.digest}`);
+    const dataRoot = resolve15(env2.XDG_DATA_HOME || join17(home, ".local", "share"), "pjangler", "skills", "project-notebook");
+    const expectedPayload = join17(dataRoot, `${PJANGLER_VERSION}-${expected.digest}`);
     const probe = probeCanonicalSkillexRootProjection(skillsRoot, link);
     if (probe.state === "declined") return { skill_installed: false, hooks_projected: false, details: probe.block.details, blocked: probe.block };
-    const stat = lstatSync11(link);
+    const stat = lstatSync12(link);
     if (!stat.isSymbolicLink()) {
       return {
         skill_installed: false,
@@ -11567,8 +11836,8 @@ function inspectProjectNotebookIntegration(env2 = process.env) {
   }
 }
 function projectorArguments(source, command, input) {
-  const script = join16(source, "scripts", "project-hooks.py");
-  const args = [script, command, "--master", join16(source, "hooks", "hooks.master.json"), "--fragment", join16(source, "hooks", "claude.settings.json"), "--target", input.target];
+  const script = join17(source, "scripts", "project-hooks.py");
+  const args = [script, command, "--master", join17(source, "hooks", "hooks.master.json"), "--fragment", join17(source, "hooks", "claude.settings.json"), "--target", input.target];
   if (command === "check") args.push("--json");
   else if (input.stateHome) args.push("--state-home", input.stateHome);
   return args;
@@ -11590,8 +11859,8 @@ function checkProjectNotebookHooks(input = {}) {
   verifyProjectNotebookSkillExport(source);
   const home = env2.HOME;
   if (!home) throw new NotebookError("NOT_CONFIGURED", "HOME is required to check Project Notebook hooks");
-  const target = resolve14(input.target ?? env2.PJ_PROJECT_NOTEBOOK_CLAUDE_SETTINGS ?? join16(home, ".claude", "settings.json"));
-  const result2 = spawnSync8("/usr/bin/python3", ["-I", ...projectorArguments(source, "check", { target })], { encoding: "utf8", env: projectorEnvironment(env2), timeout: 5e3, maxBuffer: 1048576 });
+  const target = resolve15(input.target ?? env2.PJ_PROJECT_NOTEBOOK_CLAUDE_SETTINGS ?? join17(home, ".claude", "settings.json"));
+  const result2 = spawnSync9("/usr/bin/python3", ["-I", ...projectorArguments(source, "check", { target })], { encoding: "utf8", env: projectorEnvironment(env2), timeout: 5e3, maxBuffer: 1048576 });
   if (result2.status !== 0 && result2.status !== 1) throw new NotebookError("CONFLICT", (result2.stderr || "Project Notebook projector check failed").trim().slice(0, 512));
   try {
     const parsed = JSON.parse(result2.stdout);
@@ -11608,13 +11877,13 @@ function installProjectNotebookIntegration(input = {}) {
   const source = realpathSync9(skill.path);
   const home = env2.HOME;
   if (!home) throw new NotebookError("NOT_CONFIGURED", "HOME is required to install Project Notebook hooks");
-  const target = resolve14(input.target ?? env2.PJ_PROJECT_NOTEBOOK_CLAUDE_SETTINGS ?? join16(home, ".claude", "settings.json"));
-  const stateHome = resolve14(env2.XDG_STATE_HOME || join16(home, ".local", "state"));
-  const result2 = spawnSync8("/usr/bin/python3", ["-I", ...projectorArguments(source, "install", { target, stateHome })], { encoding: "utf8", env: projectorEnvironment(env2), timeout: 5e3, maxBuffer: 1048576 });
+  const target = resolve15(input.target ?? env2.PJ_PROJECT_NOTEBOOK_CLAUDE_SETTINGS ?? join17(home, ".claude", "settings.json"));
+  const stateHome = resolve15(env2.XDG_STATE_HOME || join17(home, ".local", "state"));
+  const result2 = spawnSync9("/usr/bin/python3", ["-I", ...projectorArguments(source, "install", { target, stateHome })], { encoding: "utf8", env: projectorEnvironment(env2), timeout: 5e3, maxBuffer: 1048576 });
   if (result2.status !== 0) {
     if (skill.installed) {
       try {
-        const stat = lstatSync11(skill.path);
+        const stat = lstatSync12(skill.path);
         if (stat.isSymbolicLink() && realpathSync9(skill.path) === source) unlinkSync6(skill.path);
       } catch {
       }
@@ -11628,14 +11897,14 @@ function boundedDiagnostic(value, max = 512) {
   return message.replace(/[\u0000-\u001f\u007f]/gu, " ").replace(/\s+/gu, " ").slice(0, max);
 }
 function assertNoSymlinkComponents(path, allowMissing = false) {
-  const absolute = resolve14(path);
+  const absolute = resolve15(path);
   const root = parse3(absolute).root;
   let cursor = root;
   for (const component of absolute.slice(root.length).split(sep6).filter(Boolean)) {
-    cursor = join16(cursor, component);
+    cursor = join17(cursor, component);
     let stat;
     try {
-      stat = lstatSync11(cursor);
+      stat = lstatSync12(cursor);
     } catch (error) {
       if (allowMissing && error.code === "ENOENT") return;
       throw error;
@@ -11835,7 +12104,7 @@ var NotebookModule = class {
     return {
       changedFiles: [
         ...installed.skill.installed ? [installed.skill.path] : [],
-        ...installed.hooksChanged ? [resolve16(env2.PJ_PROJECT_NOTEBOOK_CLAUDE_SETTINGS ?? `${home}/.claude/settings.json`)] : []
+        ...installed.hooksChanged ? [resolve17(env2.PJ_PROJECT_NOTEBOOK_CLAUDE_SETTINGS ?? `${home}/.claude/settings.json`)] : []
       ],
       ...installed.blocked ? { blocked: installed.blocked } : {}
     };
@@ -12241,17 +12510,17 @@ init_remote_mutation_journal();
 function integrationEnvironment(module, ctx) {
   const env2 = { ...module.environment, HOME: ctx.homeDir };
   if (module.environment.HOME !== ctx.homeDir) {
-    env2.XDG_DATA_HOME = join17(ctx.homeDir, ".local", "share");
-    env2.XDG_STATE_HOME = join17(ctx.homeDir, ".local", "state");
-    env2.PJ_PROJECT_NOTEBOOK_CLAUDE_SETTINGS = join17(ctx.homeDir, ".claude", "settings.json");
+    env2.XDG_DATA_HOME = join18(ctx.homeDir, ".local", "share");
+    env2.XDG_STATE_HOME = join18(ctx.homeDir, ".local", "state");
+    env2.PJ_PROJECT_NOTEBOOK_CLAUDE_SETTINGS = join18(ctx.homeDir, ".claude", "settings.json");
   }
   return env2;
 }
 function resolvedForPlan(plan) {
-  const manifestPath = join17(plan.project.repo_path, ".project.json");
+  const manifestPath = join18(plan.project.repo_path, ".project.json");
   let manifest = plan.manifest;
   if (existsSync13(manifestPath)) {
-    const parsed = JSON.parse(readFileSync13(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync14(manifestPath, "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error(`${manifestPath} must contain a JSON object`);
     manifest = parsed;
   }
@@ -12392,7 +12661,7 @@ var PRODUCTION_RUNTIME = {
   executePlan: executeProjectInitPlan,
   preflightBmad: preflightBmadLifecycle,
   runGit(cwd, args, options) {
-    const result2 = spawnSync11("git", [...args], {
+    const result2 = spawnSync12("git", [...args], {
       cwd,
       encoding: "utf8",
       env: options?.env ? { ...process.env, ...options.env } : process.env
@@ -12406,13 +12675,13 @@ var PRODUCTION_RUNTIME = {
   }
 };
 function unsafeToRemove(targetDir) {
-  const absolute = resolve17(targetDir);
+  const absolute = resolve18(targetDir);
   let cursor = absolute;
   const seen = /* @__PURE__ */ new Set();
   while (!seen.has(cursor)) {
     seen.add(cursor);
     try {
-      const stat = lstatSync12(cursor);
+      const stat = lstatSync13(cursor);
       if (stat.isSymbolicLink()) {
         return cursor === absolute ? `${absolute} is a symlink; removing it would leave the tree it points at orphaned` : `${cursor} is a symlink on the path to ${absolute}; a recursive remove would traverse it`;
       }
@@ -12440,12 +12709,12 @@ function publicMigration(report) {
   };
 }
 function hasGitRepository(runtime, targetDir) {
-  if (!existsSync14(join18(targetDir, ".git"))) return false;
+  if (!existsSync14(join19(targetDir, ".git"))) return false;
   return runtime.runGit(targetDir, ["rev-parse", "--is-inside-work-tree"]).status === 0;
 }
 function refreshPlanFromCanonicalManifest(plan) {
-  const manifestPath = join18(plan.project.repo_path, ".project.json");
-  const manifest = JSON.parse(readFileSync14(manifestPath, "utf8"));
+  const manifestPath = join19(plan.project.repo_path, ".project.json");
+  const manifest = JSON.parse(readFileSync15(manifestPath, "utf8"));
   if (!manifest || typeof manifest !== "object" || Array.isArray(manifest)) {
     throw new Error(`${manifestPath} must contain a JSON object`);
   }
@@ -12537,6 +12806,8 @@ var ProjectRecipe = class extends Recipe {
       repoRoot: targetDir,
       bmadVersionPin: mode === "create" ? BMAD_INSTALLER_VERSION : ctx.bmadVersionPin
     };
+    let bmadCompanion;
+    let g33DeferredForEnrollment = false;
     let migrationReport;
     let audit;
     let notebookPlan;
@@ -12577,6 +12848,10 @@ var ProjectRecipe = class extends Recipe {
         message: planBlocked ? "Project plan skipped after failed preflight" : executed.ok ? "Project plan executed" : executed.errors.join("; ")
       });
       if (errors.length === 0 && executed.ok && mode === "create") {
+        try {
+          g33DeferredForEnrollment = !g33CompanionEnabled(targetDir);
+        } catch {
+        }
         const dependencyResult = await this.registry.initDependencies(this.metadata.id, transactionContext, normalized, ["notebook"]);
         logs.push(...dependencyResult.logs);
         errors.push(...dependencyResult.errors);
@@ -12657,7 +12932,7 @@ var ProjectRecipe = class extends Recipe {
         if (hasGitRepository(this.runtime, targetDir)) {
           phases.push({ id: "project.git", status: "unchanged", changedFiles: [], message: "Git repository already initialized" });
         } else {
-          const gitPath = join18(targetDir, ".git");
+          const gitPath = join19(targetDir, ".git");
           for (const { args, label, options } of [
             { args: ["init", "--initial-branch=main"], label: "git init" },
             { args: ["add", "-A"], label: "git add" },
@@ -12757,6 +13032,17 @@ var ProjectRecipe = class extends Recipe {
           errors.push(`project manifest refresh after external effects failed: ${error instanceof Error ? error.message : String(error)}`);
         }
       }
+      if (errors.length === 0 && registryFinalizerEligible && mode === "create" && g33DeferredForEnrollment && plan.project.ticket_provider.state === "linked") {
+        bmadCompanion = await runG33Companion(targetDir, ctx.dryRun);
+        logs.push(...companionDetails(bmadCompanion));
+        changedFiles.push(...bmadCompanion.changedFiles);
+        phases.push({
+          id: "project.optional:g33-companion",
+          status: bmadCompanion.status === "changed" ? "changed" : bmadCompanion.status === "planned" ? "planned" : bmadCompanion.status === "unchanged" ? "unchanged" : "skipped",
+          changedFiles: bmadCompanion.changedFiles,
+          message: `Optional g33 (${bmadCompanion.status}): ${bmadCompanion.summary}`
+        });
+      }
       if (registryFinalizerEligible && registryActions.length) {
         rollbackEligible = false;
         const registryPlan = { ...plan, actions: registryActions };
@@ -12810,8 +13096,8 @@ var ProjectRecipe = class extends Recipe {
       } else try {
         rmSync5(targetDir, { recursive: true, force: true });
         const insideTarget = (path) => {
-          const relative12 = relativePath(resolve17(targetDir), resolve17(path));
-          return relative12 === "" || !relative12.startsWith("..") && !isAbsolute8(relative12);
+          const relative12 = relativePath(resolve18(targetDir), resolve18(path));
+          return relative12 === "" || !relative12.startsWith("..") && !isAbsolute9(relative12);
         };
         const orphaned = [...new Set(changedFiles.filter((path) => !insideTarget(path)))].sort();
         changedFiles.length = 0;
@@ -12847,7 +13133,8 @@ var ProjectRecipe = class extends Recipe {
       audit,
       selectedOperations: normalized.selectedOperations ?? [],
       selectedParityRules: normalized.selectedRuleIds ?? [],
-      migrationReport
+      migrationReport,
+      ...bmadCompanion ? { bmadCompanion } : {}
     };
   }
   printNextSteps() {
@@ -12855,12 +13142,12 @@ var ProjectRecipe = class extends Recipe {
 };
 
 // src/recipes/registry.ts
-import { readFileSync as readFileSync15 } from "node:fs";
-import { join as join19 } from "node:path";
+import { readFileSync as readFileSync16 } from "node:fs";
+import { join as join20 } from "node:path";
 function projectWaivers(repoRoot) {
   let waive;
   try {
-    waive = JSON.parse(readFileSync15(join19(repoRoot, ".project.json"), "utf8"))?.parity?.waive;
+    waive = JSON.parse(readFileSync16(join20(repoRoot, ".project.json"), "utf8"))?.parity?.waive;
   } catch {
     return /* @__PURE__ */ new Map();
   }
@@ -13201,8 +13488,8 @@ var recipeRegistry = new RecipeRegistry([
 
 // src/commands/AgentHooksCommands.ts
 import { homedir as homedir6 } from "node:os";
-import { join as join20, dirname as dirname15 } from "node:path";
-import { existsSync as existsSync15, cpSync, mkdirSync as mkdirSync7, readFileSync as readFileSync16, writeFileSync as writeFileSync8 } from "node:fs";
+import { join as join21, dirname as dirname15 } from "node:path";
+import { existsSync as existsSync15, cpSync, mkdirSync as mkdirSync7, readFileSync as readFileSync17, writeFileSync as writeFileSync8 } from "node:fs";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 init_project();
 import { parse as parseToml3 } from "smol-toml";
@@ -13215,16 +13502,16 @@ function resolveTemplateRoot() {
   try {
     let dir = dirname15(fileURLToPath4(import.meta.url));
     for (let i = 0; i < 8; i++) {
-      candidates.push(join20(dir, "templates", "commonproject", "template"));
+      candidates.push(join21(dir, "templates", "commonproject", "template"));
       const parent = dirname15(dir);
       if (parent === dir) break;
       dir = parent;
     }
   } catch {
   }
-  candidates.push(join20(homedir6(), "code", "pjangler", "templates", "commonproject", "template"));
+  candidates.push(join21(homedir6(), "code", "pjangler", "templates", "commonproject", "template"));
   for (const c of candidates) {
-    if (existsSync15(join20(c, ".agents", "hooks", "hooks.master.json"))) return c;
+    if (existsSync15(join21(c, ".agents", "hooks", "hooks.master.json"))) return c;
   }
   throw new Error(
     "Could not locate the CommonProject template. Set PJANGLER_COMMONPROJECT_TEMPLATE to <repo>/templates/commonproject/template."
@@ -13250,8 +13537,8 @@ var CopyAgentHooksTree = class extends Command {
     const created = [];
     const skipped = [];
     for (const { rel, dir } of items) {
-      const src = join20(templateRoot, rel);
-      const dest = join20(this.context.targetDir, rel);
+      const src = join21(templateRoot, rel);
+      const dest = join21(this.context.targetDir, rel);
       if (!existsSync15(src)) continue;
       if (existsSync15(dest) && !this.context.force) {
         skipped.push(rel);
@@ -13279,14 +13566,14 @@ var WireMiseAgentHooks = class _WireMiseAgentHooks extends Command {
     if (!resolveAgentHooksLayer2()) {
       return { success: true, message: this.formatMessage(AGENT_HOOKS_SKIP_MESSAGE) };
     }
-    const misePath = join20(this.context.targetDir, "mise.toml");
+    const misePath = join21(this.context.targetDir, "mise.toml");
     if (!existsSync15(misePath)) {
       return {
         success: false,
         message: "\u26A0\uFE0F  No mise.toml found \u2014 run `pj add mise` first, then re-run."
       };
     }
-    let content = readFileSync16(misePath, "utf8");
+    let content = readFileSync17(misePath, "utf8");
     if (content.includes(_WireMiseAgentHooks.MARKER)) {
       return { success: true, message: this.formatMessage("\u2713 mise.toml already wired for agent-hooks") };
     }
@@ -13326,21 +13613,13 @@ ${leaveBlock}`);
       }
       wiredHooks = true;
     }
-    const skillsSync = [
-      '[tasks."skills:sync"]',
-      `description = "Reconcile this project's selected skills"`,
-      `tools = ${SKILLS_SYNC_TOOLS}`,
-      `run = "skillex sync --scope project --project '${cr}'"`,
-      ""
-    ];
-    const managedSkillsSync = parseToml3(skillsSync.join("\n")).tasks["skills:sync"];
-    const keepSkillsSync = existingTasks["skills:sync"] !== void 0 && canonicalJson(existingTasks["skills:sync"]) === canonicalJson(managedSkillsSync);
     const appended = [
       "",
       _WireMiseAgentHooks.MARKER + " (generated \u2014 see .agents/hooks/README.md)",
       // PJAN-61: task names use the colon namespace form. A colon is not legal
       // in a BARE toml key, so every header here MUST stay quoted.
-      ...keepSkillsSync ? [] : skillsSync,
+      // PJAN-135 retired 2026-10-10: no skills:sync task is appended — skill
+      // operations invoke skillex directly (`pj skills …`), never a mise task.
       "[[watch_files]]",
       'patterns = [".agents/hooks/hooks.master.json"]',
       'task = "hooks:sync"',
@@ -13509,7 +13788,7 @@ if __name__ == "__main__":
 
 // src/commands/AddMiseCodegraphScript.ts
 import { chmodSync as chmodSync5 } from "fs";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 var AddMiseCodegraphScript = class extends Command {
   async invoke() {
     const filePath = ".mise/scripts/codegraph.sh";
@@ -13563,7 +13842,7 @@ fi
 `;
     this.writeFile(filePath, content);
     if (!this.context.dryRun) {
-      chmodSync5(join21(this.context.targetDir, filePath), 493);
+      chmodSync5(join22(this.context.targetDir, filePath), 493);
     }
     return {
       success: true,
@@ -13601,18 +13880,18 @@ SECRET_KEY=""
 // src/parity/index.ts
 import { existsSync as existsSync16 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { dirname as dirname16, join as join22, resolve as resolve18 } from "node:path";
+import { dirname as dirname16, join as join23, resolve as resolve19 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 function resolvePjanglerRoot2() {
   let dir = dirname16(fileURLToPath5(import.meta.url));
   while (dir !== dirname16(dir)) {
-    if (existsSync16(join22(dir, "package.json")) && existsSync16(join22(dir, "templates", "commonproject", "copier.yml"))) return dir;
+    if (existsSync16(join23(dir, "package.json")) && existsSync16(join23(dir, "templates", "commonproject", "copier.yml"))) return dir;
     dir = dirname16(dir);
   }
-  return resolve18(process.cwd());
+  return resolve19(process.cwd());
 }
 function lifecycleContext(repoArg, dryRun, acceptRegistryMatches = false, overrides = {}) {
-  const repoRoot = resolve18(repoArg ?? process.cwd());
+  const repoRoot = resolve19(repoArg ?? process.cwd());
   return {
     ...overrides,
     targetDir: repoRoot,
@@ -13781,13 +14060,13 @@ init_version();
 // src/project/info.ts
 init_boardUrl();
 init_project();
-import { readFileSync as readFileSync17 } from "node:fs";
-import { join as join23, resolve as resolve19 } from "node:path";
+import { readFileSync as readFileSync18 } from "node:fs";
+import { join as join24, resolve as resolve20 } from "node:path";
 function readManifest2(root) {
-  const path = join23(root, ".project.json");
+  const path = join24(root, ".project.json");
   let manifest;
   try {
-    const value = JSON.parse(readFileSync17(path, "utf8"));
+    const value = JSON.parse(readFileSync18(path, "utf8"));
     if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("expected a JSON object");
     manifest = value;
   } catch (error) {
@@ -13827,8 +14106,8 @@ function readProjectInfo(input = {}) {
   const info = {
     ok: true,
     project_id: projectId,
-    repo_path: resolve19(root),
-    manifest_path: join23(resolve19(root), ".project.json"),
+    repo_path: resolve20(root),
+    manifest_path: join24(resolve20(root), ".project.json"),
     manifest,
     registry: { location, status: "indexed" }
   };
@@ -13849,27 +14128,27 @@ function readProjectInfo(input = {}) {
     info.registry = { location, status: "not-indexed", message: "This project is not indexed. Run pj init --apply from its repository." };
     return info;
   }
-  if (resolve19(indexed.repo_path) !== resolve19(root)) {
+  if (resolve20(indexed.repo_path) !== resolve20(root)) {
     info.registry = { location, status: "stale", message: `The registry points to ${indexed.repo_path}; this manifest is at ${root}. Reindex the repository.` };
   }
   return info;
 }
 
 // src/describe/index.ts
-import { existsSync as existsSync17, readFileSync as readFileSync18, readdirSync as readdirSync8, statSync as statSync6 } from "node:fs";
-import { join as join25, resolve as resolve20 } from "node:path";
+import { existsSync as existsSync17, readFileSync as readFileSync19, readdirSync as readdirSync8, statSync as statSync6 } from "node:fs";
+import { join as join26, resolve as resolve21 } from "node:path";
 init_project();
 
 // src/describe/activity.ts
-import { spawn as spawn2, spawnSync as spawnSync12 } from "node:child_process";
+import { spawn as spawn2, spawnSync as spawnSync13 } from "node:child_process";
 import { statSync as statSync5 } from "node:fs";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 var ACTIVE_WINDOW_SECONDS = 24 * 60 * 60;
 var MAX_DIRTY_STATS = 500;
 var GIT_TIMEOUT_MS = 5e3;
 var GIT_MAX_BUFFER = 16 * 1024 * 1024;
 function git3(repo, args) {
-  const result2 = spawnSync12("git", ["-C", repo, ...args], {
+  const result2 = spawnSync13("git", ["-C", repo, ...args], {
     encoding: "utf8",
     timeout: GIT_TIMEOUT_MS,
     maxBuffer: GIT_MAX_BUFFER
@@ -13992,7 +14271,7 @@ function uncommittedSource(repo, paths) {
   let newest = 0;
   for (const path of paths.slice(0, MAX_DIRTY_STATS)) {
     try {
-      const mtime = Math.floor(statSync5(join24(repo, path)).mtimeMs / 1e3);
+      const mtime = Math.floor(statSync5(join25(repo, path)).mtimeMs / 1e3);
       if (mtime > newest) newest = mtime;
     } catch {
     }
@@ -14101,7 +14380,7 @@ var CONFIG_FILES = [
 ];
 function readJson(path) {
   try {
-    const parsed = JSON.parse(readFileSync18(path, "utf8"));
+    const parsed = JSON.parse(readFileSync19(path, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : void 0;
   } catch {
     return void 0;
@@ -14123,7 +14402,7 @@ function describeType(repo) {
   const evidence = [];
   const note = (signal, file) => evidence.push(`${signal} (${file})`);
   for (const marker of LANGUAGE_MARKERS) {
-    if (!existsSync17(join25(repo, marker.file))) continue;
+    if (!existsSync17(join26(repo, marker.file))) continue;
     if (!languages.includes(marker.language)) {
       languages.push(marker.language);
       note(marker.language, marker.file);
@@ -14137,9 +14416,9 @@ function describeType(repo) {
     }
   } catch {
   }
-  const pkg = readJson(join25(repo, "package.json"));
+  const pkg = readJson(join26(repo, "package.json"));
   if (pkg) {
-    if (existsSync17(join25(repo, "tsconfig.json"))) {
+    if (existsSync17(join26(repo, "tsconfig.json"))) {
       const index = languages.indexOf("javascript");
       if (index >= 0) languages.splice(index, 1);
       if (!languages.includes("typescript")) {
@@ -14173,26 +14452,26 @@ function describeType(repo) {
     ["hermes-fleet-host", "agents/hermes"]
   ];
   for (const [role, marker] of roleMarkers) {
-    if (!existsSync17(join25(repo, marker))) continue;
+    if (!existsSync17(join26(repo, marker))) continue;
     roles.push(role);
     note(role, marker);
   }
   return { primaryLanguage: languages[0], languages, roles, evidence };
 }
 function describeIdentity(repo, registryPath) {
-  const manifestPath = join25(repo, ".project.json");
+  const manifestPath = join26(repo, ".project.json");
   const manifest = readJson(manifestPath);
   const drift = [];
-  let record2;
+  let record3;
   let registryReadable = true;
   try {
     const registry = loadProjectRegistry(registryPath);
     const identity = manifest?.project_id ?? manifest?.project_slug;
     const slug = typeof identity === "string" ? identity.toLowerCase() : void 0;
-    const resolved = resolve20(repo);
-    record2 = (slug ? registry.projects[slug] : void 0) ?? Object.values(registry.projects).find((project) => resolve20(project.repo_path) === resolved);
+    const resolved = resolve21(repo);
+    record3 = (slug ? registry.projects[slug] : void 0) ?? Object.values(registry.projects).find((project) => resolve21(project.repo_path) === resolved);
     const statuses = registry.__registry_status;
-    const status = record2 && statuses?.[record2.slug];
+    const status = record3 && statuses?.[record3.slug];
     if (status && status.status !== "ok") {
       drift.push({ note: `canonical manifest is ${status.status}; displaying the last indexed record. ${status.error ?? ""}`, command: "pjangler doctor" });
     }
@@ -14200,14 +14479,14 @@ function describeIdentity(repo, registryPath) {
     registryReadable = false;
     drift.push({ note: `registry unreadable: ${err instanceof Error ? err.message : String(err)}` });
   }
-  if (manifest && !record2 && registryReadable) {
+  if (manifest && !record3 && registryReadable) {
     drift.push({ note: ".project.json exists but this repo is not in the pjangler registry" });
   }
-  if (record2 && !manifest) {
-    drift.push({ note: `registered as ${record2.slug} but .project.json is missing`, command: "pjangler doctor" });
+  if (record3 && !manifest) {
+    drift.push({ note: `registered as ${record3.slug} but .project.json is missing`, command: "pjangler doctor" });
   }
-  if (record2 && resolve20(record2.repo_path) !== resolve20(repo)) {
-    drift.push({ note: `registry repo_path points elsewhere: ${record2.repo_path}`, command: "pjangler doctor" });
+  if (record3 && resolve21(record3.repo_path) !== resolve21(repo)) {
+    drift.push({ note: `registry repo_path points elsewhere: ${record3.repo_path}`, command: "pjangler doctor" });
   }
   const manifestProvider = manifest?.ticket_provider;
   const provider = manifestProvider ? {
@@ -14216,13 +14495,13 @@ function describeIdentity(repo, registryPath) {
     identifier: manifestProvider.identifier,
     board_id: manifestProvider.board_id,
     state: manifestProvider.state
-  } : record2?.ticket_provider;
-  if (manifestProvider && record2) {
+  } : record3?.ticket_provider;
+  if (manifestProvider && record3) {
     const fields = [
-      ["type", provider?.type, record2.ticket_provider.type],
-      ["workspace", provider?.workspace, record2.ticket_provider.workspace],
-      ["identifier", provider?.identifier, record2.ticket_provider.identifier],
-      ["board_id", provider?.board_id, record2.ticket_provider.board_id]
+      ["type", provider?.type, record3.ticket_provider.type],
+      ["workspace", provider?.workspace, record3.ticket_provider.workspace],
+      ["identifier", provider?.identifier, record3.ticket_provider.identifier],
+      ["board_id", provider?.board_id, record3.ticket_provider.board_id]
     ];
     for (const [field2, fromManifest, fromRegistry] of fields) {
       if ((fromManifest ?? "") === (fromRegistry ?? "")) continue;
@@ -14232,7 +14511,7 @@ function describeIdentity(repo, registryPath) {
     }
   }
   const manifestAgents = manifest?.agents ?? {};
-  const agents = record2 ? Object.entries(record2.agents).map(([name, agent]) => ({
+  const agents = record3 ? Object.entries(record3.agents).map(([name, agent]) => ({
     name,
     role: agent.role,
     provisioningState: agent.provisioning_state,
@@ -14245,11 +14524,11 @@ function describeIdentity(repo, registryPath) {
   }));
   return {
     manifest: Boolean(manifest),
-    registered: Boolean(record2),
+    registered: Boolean(record3),
     registryPath,
-    slug: record2?.slug ?? (manifest?.project_id ?? manifest?.project_slug),
-    name: record2?.name ?? manifest?.project_name,
-    description: record2?.description ?? manifest?.project_description,
+    slug: record3?.slug ?? (manifest?.project_id ?? manifest?.project_slug),
+    name: record3?.name ?? manifest?.project_name,
+    description: record3?.description ?? manifest?.project_description,
     ticketProvider: provider ? {
       type: provider.type,
       workspace: provider.workspace,
@@ -14273,12 +14552,12 @@ function describeSubsystems(repo, findings) {
     const markers = SUBSYSTEM_MARKERS[metadata.id] ?? [];
     const evidence = metadata.id === "notebook" ? (() => {
       try {
-        const manifest = JSON.parse(readFileSync18(join25(repo, ".project.json"), "utf8"));
+        const manifest = JSON.parse(readFileSync19(join26(repo, ".project.json"), "utf8"));
         return manifest.notebook && typeof manifest.notebook === "object" ? [".project.json#notebook"] : [];
       } catch {
         return [];
       }
-    })() : markers.filter((marker) => existsSync17(join25(repo, marker)));
+    })() : markers.filter((marker) => existsSync17(join26(repo, marker)));
     const rules = (byRecipe.get(metadata.id) ?? []).map((finding2) => ({
       id: finding2.id,
       title: finding2.title,
@@ -14296,8 +14575,8 @@ function describeSubsystems(repo, findings) {
 function describeNotebook(repo, registryPath) {
   try {
     const registry = loadProjectRegistry(registryPath);
-    const project = Object.values(registry.projects).find((entry) => resolve20(entry.repo_path) === resolve20(repo));
-    const manifest = existsSync17(join25(repo, ".project.json")) ? JSON.parse(readFileSync18(join25(repo, ".project.json"), "utf8")) : void 0;
+    const project = Object.values(registry.projects).find((entry) => resolve21(entry.repo_path) === resolve21(repo));
+    const manifest = existsSync17(join26(repo, ".project.json")) ? JSON.parse(readFileSync19(join26(repo, ".project.json"), "utf8")) : void 0;
     const declared = Boolean(project?.notebook || manifest?.notebook && typeof manifest.notebook === "object");
     if (!declared) return { declared: false, bindingState: null, notebookId: null, overviewNoteId: null, health: null, remoteCheck: "skip", captureAdmission: null };
     const config = loadEffectiveNotebookConfig(repo, registryPath);
@@ -14315,7 +14594,7 @@ function describeNotebook(repo, registryPath) {
   }
 }
 function describeConfigFiles(repo) {
-  return CONFIG_FILES.filter((spec) => existsSync17(join25(repo, spec.path))).map((spec) => ({ path: spec.path, purpose: spec.purpose, subsystem: spec.subsystem }));
+  return CONFIG_FILES.filter((spec) => existsSync17(join26(repo, spec.path))).map((spec) => ({ path: spec.path, purpose: spec.purpose, subsystem: spec.subsystem }));
 }
 function describeNextSteps(description, findings) {
   const steps = [];
@@ -14393,7 +14672,7 @@ function describeNextSteps(description, findings) {
   return steps;
 }
 async function describeProject(input = {}) {
-  const repo = resolve20(input.repoArg ?? process.cwd());
+  const repo = resolve21(input.repoArg ?? process.cwd());
   if (!existsSync17(repo)) throw new Error(`Path does not exist: ${repo}`);
   if (!statSync6(repo).isDirectory()) throw new Error(`Not a directory: ${repo}`);
   const registryPath = input.registryPath ?? projectRegistryPath();
@@ -14582,7 +14861,7 @@ function validateExternalEffectConsent(input, options) {
   return selected;
 }
 function resolveTargetDir(targetDir) {
-  const dir = resolve21(targetDir ?? process.cwd());
+  const dir = resolve22(targetDir ?? process.cwd());
   if (!existsSync18(dir)) {
     throw new Error(`Target directory does not exist: ${dir}`);
   }
@@ -14594,7 +14873,7 @@ function resolveTargetDir(targetDir) {
 function resolvePjanglerRoot3() {
   let dir = dirname17(fileURLToPath6(import.meta.url));
   while (dir !== dirname17(dir)) {
-    if (existsSync18(join26(dir, "package.json")) && existsSync18(join26(dir, "templates", "commonproject", "copier.yml"))) {
+    if (existsSync18(join27(dir, "package.json")) && existsSync18(join27(dir, "templates", "commonproject", "copier.yml"))) {
       return dir;
     }
     dir = dirname17(dir);
@@ -14889,12 +15168,12 @@ server.registerTool(
       );
       const pjanglerRoot = resolvePjanglerRoot3();
       const projectSlug = validateSafePathSegment(input.projectSlug ?? slugify(input.projectName), "Project slug");
-      const explicitTargetDir = input.targetDir ? resolve21(input.targetDir) : void 0;
-      const parentDir = resolve21(input.parentDir ?? (explicitTargetDir ? dirname17(explicitTargetDir) : process.cwd()));
+      const explicitTargetDir = input.targetDir ? resolve22(input.targetDir) : void 0;
+      const parentDir = resolve22(input.parentDir ?? (explicitTargetDir ? dirname17(explicitTargetDir) : process.cwd()));
       if (!existsSync18(parentDir) || !statSync7(parentDir).isDirectory()) throw new Error(`Parent directory does not exist: ${parentDir}`);
       const targetDir = resolveContainedPath(
         parentDir,
-        explicitTargetDir ?? join26(parentDir, projectSlug),
+        explicitTargetDir ?? join27(parentDir, projectSlug),
         "Bootstrap target"
       );
       const overwrite = input.overwrite ?? input.force ?? false;
@@ -15017,7 +15296,7 @@ server.registerTool(
         registryPath: input.registryPath,
         force: input.force ?? false,
         overwrite: input.force ?? false,
-        scaffold: !(input.targetDir && existsSync18(join26(resolve21(input.targetDir), ".git")))
+        scaffold: !(input.targetDir && existsSync18(join27(resolve22(input.targetDir), ".git")))
       });
       if (!input.apply) return asText(publicCompositeProjectResponse(publicProjectPlan(plan), plan));
       const preflight = await preflightProjectApply(plan, resolvePjanglerRoot3());