@delorenj/skillex 0.1.1 → 0.1.2

package/dist/cli.js

@@ -520,7 +520,8 @@ var PROJECT_CLI_ALIASES = Object.freeze([
   ".gemini/skills",
   ".copilot/skills",
   ".opencode/skills",
-  ".kimi-code/skills"
+  ".kimi-code/skills",
+  ".zcode/skills"
 ]);
 var NEVER_TOUCH = Object.freeze([".hermes", ".augment", ".cursor", ".crush"]);
 function aliasPaths(base, scope) {
@@ -531,7 +532,7 @@ function aliasPaths(base, scope) {
 }
 
 // src/core/catalog.ts
-import { readdir as readdir3 } from "node:fs/promises";
+import { readdir as readdir4 } from "node:fs/promises";
 import { join as join7 } from "node:path";
 
 // src/core/composition.ts
@@ -954,10 +955,12 @@ async function packInventory(registry, selection2) {
 }
 
 // src/core/discovery.ts
-import { lstat as lstat3, realpath as realpath4, stat } from "node:fs/promises";
+import { execFile } from "node:child_process";
+import { lstat as lstat3, readdir as readdir3, readFile as readFile3, realpath as realpath4, stat } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
 import { dirname as dirname2, join as join5, parse, resolve as resolve3 } from "node:path";
 import { fileURLToPath } from "node:url";
+import { promisify } from "node:util";
 var manifestParts = [".agents", "skills.json"];
 function errorMessage(error) {
   return error instanceof Error ? error.message : String(error);
@@ -1107,7 +1110,70 @@ async function installedPackageRoot() {
     current = parent;
   }
 }
-async function catalogRoot(path, required) {
+var execute = promisify(execFile);
+async function recordedCatalog(root) {
+  const env = {};
+  for (const [key2, value] of Object.entries(process.env))
+    if (!key2.startsWith("GIT_")) env[key2] = value;
+  let stdout;
+  try {
+    ({ stdout } = await execute(
+      "git",
+      ["-C", root, "ls-files", "--stage", "--full-name", "-z", "--", "all-skills"],
+      {
+        encoding: "utf8",
+        maxBuffer: 64 * 1024 * 1024,
+        env: {
+          ...env,
+          GIT_OPTIONAL_LOCKS: "0",
+          GIT_TERMINAL_PROMPT: "0",
+          GIT_CONFIG_NOSYSTEM: "1",
+          GIT_CONFIG_GLOBAL: "/dev/null"
+        }
+      }
+    ));
+  } catch {
+    return void 0;
+  }
+  const records = stdout.split("\0").filter(Boolean);
+  if (records.some((record9) => /^160000 [0-9a-f]+ \d\tall-skills$/.test(record9))) return "gitlink";
+  if (records.some((record9) => /^\d{6} [0-9a-f]+ \d\tall-skills\//.test(record9))) return "tree";
+  return void 0;
+}
+async function holdsDefinition(catalog, names2) {
+  for (const name of names2) {
+    try {
+      if ((await stat(join5(catalog, name, "SKILL.md"))).isFile()) return true;
+    } catch {
+    }
+  }
+  return false;
+}
+async function uninitializedCatalog(root, catalog) {
+  let declaration;
+  try {
+    declaration = await readFile3(join5(root, ".gitmodules"), "utf8");
+  } catch (error) {
+    if (["ENOENT", "ENOTDIR"].includes(error.code ?? "")) {
+      return void 0;
+    }
+    return ioFailure2(join5(root, ".gitmodules"), error);
+  }
+  if (!/^[\t ]*path[\t ]*=[\t ]*"?all-skills\/?"?[\t ]*$/m.test(declaration)) return void 0;
+  if (await entry(join5(catalog, ".git"))) return void 0;
+  let names2;
+  try {
+    names2 = (await readdir3(catalog)).sort();
+  } catch (error) {
+    return ioFailure2(catalog, error);
+  }
+  if (!names2.length) return names2;
+  const recorded = await recordedCatalog(root);
+  if (recorded === "gitlink") return names2;
+  if (recorded === "tree") return void 0;
+  return await holdsDefinition(catalog, names2) ? void 0 : names2;
+}
+async function catalogRoot(path, required, source) {
   const found = await entry(path);
   if (!found) {
     if (!required) return void 0;
@@ -1138,6 +1204,21 @@ async function catalogRoot(path, required) {
       fix: "Select the owning catalog checkout, or run skillex migrate to repair its topology."
     });
   }
+  const leftovers = await uninitializedCatalog(root, catalog);
+  if (leftovers) {
+    const quoted = JSON.stringify(root);
+    const more = leftovers.length > 8 ? `, and ${leftovers.length - 8} more` : "";
+    const clear = leftovers.length ? `First move the entries git left in all-skills/ (${leftovers.slice(0, 8).join(", ")}${more}) somewhere outside it, such as a sibling directory, keeping anything you still need: git will not populate a non-empty directory. Then ` : "";
+    const step = (text2) => clear ? `${clear}${text2}` : `${text2.charAt(0).toUpperCase()}${text2.slice(1)}`;
+    fail(
+      "E_REGISTRY_ROOT",
+      `The registry's all-skills/ catalog is an uninitialized git submodule: ${catalog}`,
+      {
+        path: catalog,
+        fix: source === "cache" ? `skillex never clones or fetches this registry cache. ${step(`bring it current and populate its catalog: git -C ${quoted} pull --ff-only && git -C ${quoted} submodule update --init --recursive.`)} Or drop the manifest's registry field, or pin a complete checkout with PJ_SKILLS_REGISTRY_ROOT.` : `${step(`populate the catalog submodule: git -C ${quoted} submodule update --init --recursive.`)} Or select a complete checkout with --registry-root or PJ_SKILLS_REGISTRY_ROOT.`
+      }
+    );
+  }
   return root;
 }
 async function discoverRegistry(options = {}) {
@@ -1149,7 +1230,7 @@ async function discoverRegistry(options = {}) {
     const path = absolutePath(value, cwd, home, "E_REGISTRY_ROOT", "registry root");
     if (searched.includes(path)) return void 0;
     searched.push(path);
-    const root = await catalogRoot(path, required);
+    const root = await catalogRoot(path, required, source);
     return root ? { root, source, searched: [...searched] } : void 0;
   };
   if (options.registryRoot !== void 0) {
@@ -1195,7 +1276,7 @@ async function discoverRegistry(options = {}) {
 }
 
 // src/core/metadata.ts
-import { readFile as readFile3 } from "node:fs/promises";
+import { readFile as readFile4 } from "node:fs/promises";
 import { join as join6 } from "node:path";
 import { parseDocument } from "yaml";
 function mapping(value) {
@@ -1238,7 +1319,7 @@ async function textFile(path, missing) {
   }
   let bytes;
   try {
-    bytes = await readFile3(path);
+    bytes = await readFile4(path);
   } catch {
     fail(
       "E_IO",
@@ -1443,7 +1524,7 @@ async function compositionReferences(registry, findings) {
         await inspectPack(name, path);
         inspected += 1;
       }
-      for (const entry3 of (await readdir3(path, { withFileTypes: true })).sort(
+      for (const entry3 of (await readdir4(path, { withFileTypes: true })).sort(
         (a, b) => compare(a.name, b.name)
       )) {
         if (entry3.name.startsWith(".") || entry3.name.startsWith("_")) continue;
@@ -1488,7 +1569,7 @@ async function compositionReferences(registry, findings) {
     try {
       if (!await inspectPath(path)) continue;
       await requireDirectory(path, kind2 === "set" ? "E_SET_MISSING" : "E_PACK_MISSING");
-      const entries = (await readdir3(path, { withFileTypes: true })).sort(
+      const entries = (await readdir4(path, { withFileTypes: true })).sort(
         (a, b) => compare(a.name, b.name)
       );
       for (const entry3 of entries) {
@@ -1526,7 +1607,7 @@ async function listSkills(options = {}) {
     let validDefinitions = 0;
     const catalog = join7(registry.root, "all-skills");
     const query = options.query?.trim().toLowerCase();
-    for (const entry3 of (await readdir3(catalog, { withFileTypes: true })).sort(
+    for (const entry3 of (await readdir4(catalog, { withFileTypes: true })).sort(
       (a, b) => compare(a.name, b.name)
     )) {
       if (entry3.name.startsWith(".") || entry3.name.startsWith("_")) continue;
@@ -1575,7 +1656,7 @@ async function showSkill(name, options = {}) {
 }
 
 // src/core/catalog-write.ts
-import { chmod, lstat as lstat8, mkdir as mkdir4, open as open4, readFile as readFile6, realpath as realpath9, symlink } from "node:fs/promises";
+import { chmod, lstat as lstat8, mkdir as mkdir4, open as open4, readFile as readFile7, realpath as realpath9, symlink } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
 import { dirname as dirname6, join as join12, resolve as resolve6 } from "node:path";
 import { stringify } from "yaml";
@@ -1591,8 +1672,8 @@ import {
   lstat as lstat4,
   mkdir as mkdir2,
   open as open2,
-  readdir as readdir4,
-  readFile as readFile4,
+  readdir as readdir5,
+  readFile as readFile5,
   realpath as realpath5,
   rmdir,
   unlink as unlink2
@@ -1697,7 +1778,7 @@ async function claimFiles(claim2) {
   if (!await sameDirectory(claim2.path, claim2.identity)) return void 0;
   let names2;
   try {
-    names2 = await readdir4(claim2.path);
+    names2 = await readdir5(claim2.path);
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     throw error;
@@ -1730,7 +1811,7 @@ async function readTicket(claim2, resource) {
   if (stat6.size > 4096) stateFailure(path, "Lock ticket is too large to be a valid claim.");
   let raw;
   try {
-    raw = JSON.parse(await readFile4(path, "utf8"));
+    raw = JSON.parse(await readFile5(path, "utf8"));
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     if (error instanceof SyntaxError) stateFailure(path, "Lock ticket is malformed JSON.");
@@ -1762,7 +1843,7 @@ async function removeClaim(claim2, expectedTicket, ownedTicket) {
   if (expectedTicket !== void 0 && names2.includes(ticketFile)) {
     let current;
     try {
-      current = await readFile4(join8(claim2.path, ticketFile), "utf8");
+      current = await readFile5(join8(claim2.path, ticketFile), "utf8");
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
     }
@@ -1794,7 +1875,7 @@ async function removeClaim(claim2, expectedTicket, ownedTicket) {
 async function claims(path, directory2, resource, localHostHash) {
   if (!await sameDirectory(path, directory2)) stateFailure(path, "Lock directory disappeared.");
   const result = [];
-  for (const name of (await readdir4(path)).sort()) {
+  for (const name of (await readdir5(path)).sort()) {
     const claimPath = join8(path, name);
     const identity5 = identityFrom(name, claimPath);
     const stat6 = await inspect2(claimPath);
@@ -1945,7 +2026,7 @@ import {
   lstat as lstat6,
   mkdir as mkdir3,
   open as open3,
-  readdir as readdir6,
+  readdir as readdir7,
   realpath as realpath7,
   rename as rename2,
   rmdir as rmdir2,
@@ -1956,16 +2037,14 @@ import { dirname as dirname5, join as join10, relative as relative3, resolve as
 
 // src/core/content.ts
 import { createHash as createHash3 } from "node:crypto";
-import { lstat as lstat5, readdir as readdir5, readFile as readFile5, readlink, realpath as realpath6 } from "node:fs/promises";
+import { lstat as lstat5, readdir as readdir6, readFile as readFile6, readlink, realpath as realpath6 } from "node:fs/promises";
 import { dirname as dirname4, isAbsolute as isAbsolute2, join as join9, relative as relative2, sep as sep3 } from "node:path";
 function isWithin(root, path) {
   const child = relative2(root, path);
   return child === "" || !isAbsolute2(child) && child !== ".." && !child.startsWith(`..${sep3}`);
 }
+var repositoryNames = /* @__PURE__ */ new Set([".git", ".hg", ".svn"]);
 var generatedNames = /* @__PURE__ */ new Set([
-  ".git",
-  ".hg",
-  ".svn",
   ".DS_Store",
   "__pycache__",
   ".pytest_cache",
@@ -1976,8 +2055,11 @@ var generatedNames = /* @__PURE__ */ new Set([
   ".venv",
   "node_modules"
 ]);
+function generatedName(name) {
+  return generatedNames.has(name) || /\.(?:pyc|pyo|pid|sock|db-wal|db-shm)$/.test(name);
+}
 function excludedName(name) {
-  return generatedNames.has(name) || /(?:\.(?:pyc|pyo|pid|sock|db-wal|db-shm|log|bak|orig)|~)$/.test(name) || /(?:\.bak-|-backup\.)/.test(name) || /^\.env(?:\.|$)/.test(name) && ![".env.op", ".env.example", ".env.sample", ".env.template"].includes(name);
+  return repositoryNames.has(name) || generatedName(name) || /(?:\.(?:log|bak|orig)|~)$/.test(name) || /(?:\.bak-|-backup\.)/.test(name) || /^\.env(?:\.|$)/.test(name) && ![".env.op", ".env.example", ".env.sample", ".env.template"].includes(name);
 }
 function contentFailure(path, message) {
   fail(
@@ -1991,7 +2073,7 @@ async function captureContent(root) {
   const entries = [];
   const excluded = [];
   const visit = async (path) => {
-    for (const name of (await readdir5(path)).sort()) {
+    for (const name of (await readdir6(path)).sort()) {
       const source = join9(path, name);
       const item2 = relative2(root, source);
       if (excludedName(name)) {
@@ -2003,7 +2085,7 @@ async function captureContent(root) {
         entries.push({ path: item2, kind: "directory", mode: metadata2.mode & 511 });
         await visit(source);
       } else if (metadata2.isFile()) {
-        const bytes = await readFile5(source);
+        const bytes = await readFile6(source);
         const after = await lstat5(source);
         if (metadata2.dev !== after.dev || metadata2.ino !== after.ino || metadata2.mode !== after.mode || metadata2.size !== after.size || metadata2.mtimeMs !== after.mtimeMs) {
           contentFailure(source, `Source changed while being inspected: ${source}`);
@@ -2179,7 +2261,7 @@ async function captureVendorTree(root) {
     const before = await lstat6(directory2, { bigint: true });
     if (!before.isDirectory())
       stateFailure2(directory2, "A content parent became a symlink or non-directory.");
-    for (const name of (await readdir6(directory2)).sort()) {
+    for (const name of (await readdir7(directory2)).sort()) {
       const path = join10(directory2, name);
       const info = await lstat6(path, { bigint: true });
       if (!info.isFile() && !info.isDirectory())
@@ -2210,7 +2292,7 @@ async function assertVendorTree(root, expected, allowMissing = false) {
     if (identity5?.kind !== "directory")
       stateFailure2(directory2, "A recovery parent has no directory ownership evidence.");
     await assertVendorIdentity(directory2, identity5);
-    for (const name of await readdir6(directory2)) {
+    for (const name of await readdir7(directory2)) {
       const path = join10(directory2, name);
       const item2 = relative3(root, path);
       const entry3 = expectedEntries.get(item2);
@@ -2790,7 +2872,7 @@ async function importSkill(source, name, options = {}) {
     const metadata2 = await readSkillMetadata(sourceRoot);
     for (const name2 of ["SKILL.md", ".source.yaml"]) {
       const captured = content.entries.find((entry3) => entry3.path === name2);
-      if (captured?.kind === "file" && !captured.bytes.equals(await readFile6(join12(sourceRoot, name2)))) {
+      if (captured?.kind === "file" && !captured.bytes.equals(await readFile7(join12(sourceRoot, name2)))) {
         fail("E_IMPORT_SOURCE_CHANGED", "Skill metadata changed while import was being planned.", {
           path: join12(sourceRoot, name2),
           fix: "Retry after the source writer has finished."
@@ -2844,12 +2926,12 @@ async function importSkill(source, name, options = {}) {
 }
 
 // src/core/diagnostics.ts
-import { readdir as readdir10, realpath as realpath13 } from "node:fs/promises";
+import { readdir as readdir11, realpath as realpath13 } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
 import { dirname as dirname10, join as join17, parse as parse2, resolve as resolve9, sep as sep5 } from "node:path";
 
 // src/core/activation-ownership.ts
-import { lstat as lstat9, readdir as readdir7, readlink as readlink2 } from "node:fs/promises";
+import { lstat as lstat9, readdir as readdir8, readlink as readlink2 } from "node:fs/promises";
 import { dirname as dirname7, isAbsolute as isAbsolute3, join as join13, relative as relative4, resolve as resolve7 } from "node:path";
 function refuse(path, message, code = "E_ACTIVATION_CONFLICT") {
   fail(
@@ -2908,7 +2990,7 @@ async function inspectOwnedNode(path, node, missingOkay = false) {
   const actual = await requireIdentity(path, node.identity, missingOkay);
   if (!actual) return false;
   if (node.identity.kind === "directory") {
-    for (const name of await readdir7(path)) {
+    for (const name of await readdir8(path)) {
       const expected = node.children?.[name];
       if (!expected)
         refuse(
@@ -2990,14 +3072,14 @@ function lexicalTarget(path, raw) {
 }
 
 // src/core/reconciliation.ts
-import { execFile } from "node:child_process";
+import { execFile as execFile2 } from "node:child_process";
 import { createHash as createHash5, randomUUID as randomUUID5 } from "node:crypto";
-import { mkdir as mkdir6, readdir as readdir9, realpath as realpath12, rename as rename4, rmdir as rmdir3, symlink as symlink3, unlink as unlink5 } from "node:fs/promises";
+import { mkdir as mkdir6, readdir as readdir10, realpath as realpath12, rename as rename4, rmdir as rmdir3, symlink as symlink3, unlink as unlink5 } from "node:fs/promises";
 import { basename as basename3, dirname as dirname9, join as join16, relative as relative6, resolve as resolve8, sep as sep4 } from "node:path";
-import { promisify } from "node:util";
+import { promisify as promisify2 } from "node:util";
 
 // src/core/packs.ts
-import { lstat as lstat11, readdir as readdir8, readFile as readFile8, realpath as realpath11 } from "node:fs/promises";
+import { lstat as lstat11, readdir as readdir9, readFile as readFile9, realpath as realpath11 } from "node:fs/promises";
 import { join as join15 } from "node:path";
 import { parse as parseToml2, stringify as stringifyToml } from "smol-toml";
 
@@ -3008,7 +3090,7 @@ import {
   lstat as lstat10,
   mkdir as mkdir5,
   open as open5,
-  readFile as readFile7,
+  readFile as readFile8,
   readlink as readlink3,
   realpath as realpath10,
   rename as rename3,
@@ -3135,7 +3217,7 @@ async function saveManifest(plan2, changed3) {
     await parents(plan2, manifest.path);
     const info = await inspectPath(manifest.path);
     if (manifest.before) {
-      if (!info?.isFile() || info.dev !== manifest.before.info.dev || info.ino !== manifest.before.info.ino || !(await readFile7(manifest.path)).equals(manifest.before.bytes))
+      if (!info?.isFile() || info.dev !== manifest.before.info.dev || info.ino !== manifest.before.info.ino || !(await readFile8(manifest.path)).equals(manifest.before.bytes))
         conflict(manifest.path, "The pack declaration changed while writing was being planned.");
     } else if (info) conflict(manifest.path, "A pack manifest appeared during creation.");
   };
@@ -3301,7 +3383,7 @@ async function readPack(registry, selected) {
   const path = join15(first.path, "pack.toml");
   const info = await lstat11(path);
   if (!info.isFile()) conflict(path, "Pack manifests must be real files.");
-  const bytes = await readFile8(path);
+  const bytes = await readFile9(path);
   let raw;
   try {
     raw = parseToml2(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
@@ -3314,7 +3396,7 @@ async function readPack(registry, selected) {
   }
   const inventory = await packInventory(registry, selected);
   const after = await lstat11(path);
-  if (inventory.path !== first.path || !after.isFile() || after.dev !== info.dev || after.ino !== info.ino || !(await readFile8(path)).equals(bytes))
+  if (inventory.path !== first.path || !after.isFile() || after.dev !== info.dev || after.ino !== info.ino || !(await readFile9(path)).equals(bytes))
     conflict(path, "The pack declaration changed during inspection.");
   const header = raw.pack;
   const text2 = description(header.description, path);
@@ -3361,7 +3443,7 @@ async function listPacks(options = {}) {
     };
     if (await inspectPath(root)) {
       await requireDirectory(root, "E_PACK_MISSING");
-      for (const family of (await readdir8(root, { withFileTypes: true })).sort(
+      for (const family of (await readdir9(root, { withFileTypes: true })).sort(
         (a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0
       )) {
         if (family.name.startsWith(".") || family.name.startsWith("_") || !family.isDirectory() && !family.isSymbolicLink())
@@ -3377,7 +3459,7 @@ async function listPacks(options = {}) {
             await inspect6(named, path);
             inspected += 1;
           }
-          for (const entry3 of (await readdir8(path, { withFileTypes: true })).sort(
+          for (const entry3 of (await readdir9(path, { withFileTypes: true })).sort(
             (a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0
           )) {
             if (entry3.name.startsWith(".") || entry3.name.startsWith("_") || !entry3.isDirectory() && !entry3.isSymbolicLink())
@@ -3463,7 +3545,7 @@ async function verifyPack(ref, options = {}) {
       );
     else {
       const names2 = new Set(inventory.names);
-      const entries = await readdir8(inventory.skillsRoot, { withFileTypes: true });
+      const entries = await readdir9(inventory.skillsRoot, { withFileTypes: true });
       const present = new Set(entries.map((entry3) => entry3.name));
       for (const name of names2)
         if (!present.has(name))
@@ -3541,7 +3623,7 @@ async function preparePack(selected, names2, operation, options) {
   const root = join15(composition2.path, "skills");
   await planDirectory(plan2, root);
   if (await inspectPath(root)) {
-    for (const entry3 of await readdir8(root, { withFileTypes: true })) {
+    for (const entry3 of await readdir9(root, { withFileTypes: true })) {
       const path = join15(root, entry3.name);
       const target2 = targets.get(entry3.name);
       if (target2) await planLink(plan2, path, target2);
@@ -3835,7 +3917,7 @@ async function resolveSelectionWithManifests(options = {}, proposed = /* @__PURE
 }
 
 // src/core/reconciliation.ts
-var runFile = promisify(execFile);
+var runFile = promisify2(execFile2);
 var lockResource = "skillex:activation:v2";
 function errorResult(command, error) {
   return makeResult(command, null, {
@@ -4129,7 +4211,7 @@ async function buildScope(scope, options, forbiddenRoots) {
     }
     return { identity: owned3, children };
   };
-  const awaitableNames = rootEntry?.info.isDirectory() ? await readdir9(physicalPath(root, recovery)) : [];
+  const awaitableNames = rootEntry?.info.isDirectory() ? await readdir10(physicalPath(root, recovery)) : [];
   if (!rootEntry) {
     operations.push({
       path: root,
@@ -4905,7 +4987,7 @@ async function observeScope(location2, resolved, manifest, options, forbiddenRoo
   const entries = [];
   if (observedRoot.observation.reachable && ["directory", "link"].includes(observedRoot.observation.kind)) {
     try {
-      const names2 = (await readdir10(root)).sort();
+      const names2 = (await readdir11(root)).sort();
       for (const name of names2) {
         cancelled(options);
         const path = join17(root, name);
@@ -5251,14 +5333,14 @@ async function explainSkill(name, options = {}) {
 }
 
 // src/core/doctor-sources.ts
-import { readdir as readdir12, readFile as readFile9, realpath as realpath15 } from "node:fs/promises";
+import { readdir as readdir13, readFile as readFile10, realpath as realpath15 } from "node:fs/promises";
 import { basename as basename4, dirname as dirname11, join as join20, relative as relative8, sep as sep7 } from "node:path";
 import { parse as parseToml4 } from "smol-toml";
 
 // src/core/vendor-provenance.ts
 import { createHash as createHash6 } from "node:crypto";
 import { constants as constants4 } from "node:fs";
-import { lstat as lstat13, open as open7, readdir as readdir11 } from "node:fs/promises";
+import { lstat as lstat13, open as open7, readdir as readdir12 } from "node:fs/promises";
 import { join as join19, relative as relative7, sep as sep6 } from "node:path";
 import { stringify as stringify2 } from "yaml";
 
@@ -5770,7 +5852,7 @@ async function digestVendorTree(skillPath) {
     const before = await lstat13(directory2);
     if (!before.isDirectory())
       unsafe(directory2, "Vendored skill directories must be real directories.");
-    for (const name of (await readdir11(directory2)).sort()) {
+    for (const name of (await readdir12(directory2)).sort()) {
       if (directory2 === root && name === ".source.yaml") continue;
       const path = join19(directory2, name);
       if (administration.has(name))
@@ -5822,7 +5904,7 @@ async function digestRecordedSkill(skillPath, provenance) {
 async function appendRegularContent(root, path, entries) {
   const info = await lstat13(path);
   if (info.isDirectory()) {
-    for (const name of (await readdir11(path)).sort()) {
+    for (const name of (await readdir12(path)).sort()) {
       if (administration.has(name))
         unsafe(join19(path, name), "Repository administration is not vendored skill content.");
       await appendRegularContent(root, join19(path, name), entries);
@@ -6066,7 +6148,7 @@ async function inspectDoctorSources(registry) {
   };
   await attempt(catalog, async () => {
     await requireDirectory(catalog, "E_NO_REGISTRY");
-    for (const name of (await readdir12(catalog)).sort()) {
+    for (const name of (await readdir13(catalog)).sort()) {
       if (name === ".git") continue;
       const path = join20(catalog, name);
       await attempt(path, async () => {
@@ -6097,7 +6179,7 @@ async function inspectDoctorSources(registry) {
   });
   const packManifests = [];
   const walk = async (directory2) => {
-    const names2 = await attempt(directory2, () => readdir12(directory2));
+    const names2 = await attempt(directory2, () => readdir13(directory2));
     for (const name of (names2 ?? []).sort()) {
       if (name === ".git") continue;
       const path = join20(directory2, name);
@@ -6132,7 +6214,7 @@ async function inspectDoctorSources(registry) {
       if (!await inspectPath(root)) return;
       await requireDirectory(root, "E_COMPOSITION_ROOT");
       await walk(root);
-      for (const name of (await readdir12(root)).sort()) {
+      for (const name of (await readdir13(root)).sort()) {
         if (!isSkillName(name)) continue;
         const path = join20(root, name);
         const info = await inspectPath(path);
@@ -6144,7 +6226,7 @@ async function inspectDoctorSources(registry) {
         if (kind2 !== "sets" || !info.isDirectory()) continue;
         data2.sets++;
         const members2 = await attempt(path, () => setMembers(registry.root, name));
-        const names2 = members2?.names ?? (await readdir12(path, { withFileTypes: true })).filter((item2) => item2.isSymbolicLink() && isSkillName(item2.name)).map((item2) => item2.name);
+        const names2 = members2?.names ?? (await readdir13(path, { withFileTypes: true })).filter((item2) => item2.isSymbolicLink() && isSkillName(item2.name)).map((item2) => item2.name);
         for (const member of names2)
           await attempt(join20(path, member), () => setMemberTarget(registry.root, path, member));
       }
@@ -6182,7 +6264,7 @@ async function inspectDoctorSources(registry) {
   return { data: data2, findings, exits };
 }
 async function toml(path, code) {
-  const bytes = await readFile9(path);
+  const bytes = await readFile10(path);
   try {
     return parseToml4(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
   } catch {
@@ -6194,8 +6276,8 @@ async function toml(path, code) {
 }
 
 // src/core/doctor-writers.ts
-import { execFile as execFile2 } from "node:child_process";
-import { readdir as readdir13, readFile as readFile10, realpath as realpath16, stat as stat3 } from "node:fs/promises";
+import { execFile as execFile3 } from "node:child_process";
+import { readdir as readdir14, readFile as readFile11, realpath as realpath16, stat as stat3 } from "node:fs/promises";
 import { homedir as homedir8 } from "node:os";
 import { basename as basename5, dirname as dirname12, join as join21, resolve as resolve11 } from "node:path";
 import { parse as parseToml5 } from "smol-toml";
@@ -6417,12 +6499,12 @@ async function inspectDoctorWriters(options, registries, scopes) {
   };
   const serviceRoot = join21(configHome, "systemd", "user");
   try {
-    for (const entry3 of await readdir13(serviceRoot, { withFileTypes: true })) {
+    for (const entry3 of await readdir14(serviceRoot, { withFileTypes: true })) {
       const path = join21(serviceRoot, entry3.name);
       if (entry3.name.endsWith(".service")) candidates.set(path, "service");
       else if (entry3.isDirectory() && entry3.name.endsWith(".service.d")) {
         try {
-          for (const file of await readdir13(path))
+          for (const file of await readdir14(path))
             if (file.endsWith(".conf")) candidates.set(join21(path, file), "service");
         } catch {
           unavailable(path, "Cannot inspect user service overrides.");
@@ -6442,7 +6524,7 @@ async function inspectDoctorWriters(options, registries, scopes) {
         unavailable(path, "Writer configuration is not a bounded regular file.");
         continue;
       }
-      const content = new TextDecoder("utf-8", { fatal: true }).decode(await readFile10(path));
+      const content = new TextDecoder("utf-8", { fatal: true }).decode(await readFile11(path));
       const lines = content.split(/\r?\n/);
       if (kind2 === "service") {
         for (const [index, line] of lines.entries()) {
@@ -6520,7 +6602,7 @@ async function inspectDoctorWriters(options, registries, scopes) {
 }
 async function boundedSnapshot(options, env) {
   const observation = options.processSnapshot ? options.processSnapshot() : new Promise((accept, reject) => {
-    execFile2(
+    execFile3(
       "ps",
       ["-axo", "pid=,args="],
       { env, timeout: timeoutMs, maxBuffer: maxProcessBytes, encoding: "utf8" },
@@ -6690,14 +6772,14 @@ import { realpath as realpath21, stat as stat4 } from "node:fs/promises";
 // src/core/migration-activation.ts
 import { createHash as createHash8, randomUUID as randomUUID6 } from "node:crypto";
 import { constants as constants6 } from "node:fs";
-import { mkdir as mkdir7, open as open9, readdir as readdir16, realpath as realpath18, rename as rename5, symlink as symlink4 } from "node:fs/promises";
+import { mkdir as mkdir7, open as open9, readdir as readdir17, realpath as realpath18, rename as rename5, symlink as symlink4 } from "node:fs/promises";
 import { dirname as dirname16, isAbsolute as isAbsolute7, join as join25, parse as parse3, relative as relative10, resolve as resolve14 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual4 } from "node:util";
 
 // src/core/migration-activation-state.ts
 import { createHash as createHash7 } from "node:crypto";
 import { constants as constants5 } from "node:fs";
-import { lstat as lstat14, open as open8, readdir as readdir14, readlink as readlink4, rmdir as rmdir4, unlink as unlink6 } from "node:fs/promises";
+import { lstat as lstat14, open as open8, readdir as readdir15, readlink as readlink4, rmdir as rmdir4, unlink as unlink6 } from "node:fs/promises";
 import { dirname as dirname13, isAbsolute as isAbsolute5, join as join22, relative as relative9, resolve as resolve12 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual2 } from "node:util";
 import { parseDocument as parseDocument2 } from "yaml";
@@ -6739,7 +6821,7 @@ async function captureMigrationNode(path) {
   const children = {};
   let hash4 = null;
   if (before.isDirectory()) {
-    const names2 = await readdir14(path, { encoding: "buffer" });
+    const names2 = await readdir15(path, { encoding: "buffer" });
     if (names2.length > 1e4)
       migrationRefusal(path, "A migration directory exceeds the bounded inventory limit.");
     for (const bytes of names2.sort(Buffer.compare)) {
@@ -6955,7 +7037,7 @@ function migrationAbsolute(value, home, cwd) {
 }
 
 // src/core/profile-discovery.ts
-import { lstat as lstat15, readdir as readdir15, readlink as readlink5, realpath as realpath17 } from "node:fs/promises";
+import { lstat as lstat15, readdir as readdir16, readlink as readlink5, realpath as realpath17 } from "node:fs/promises";
 import { homedir as homedir9 } from "node:os";
 import { basename as basename6, dirname as dirname14, join as join23, resolve as resolve13 } from "node:path";
 var namePattern = /^[a-z0-9][a-z0-9_-]{0,63}$/;
@@ -7198,7 +7280,7 @@ async function discoverProfiles(options = {}) {
   await canonicalDirectory(directory2, false);
   let names2;
   try {
-    names2 = (await readdir15(directory2, { withFileTypes: true })).filter(
+    names2 = (await readdir16(directory2, { withFileTypes: true })).filter(
       (entry3) => entry3.name !== "default" && namePattern.test(entry3.name) && (entry3.isDirectory() || entry3.isSymbolicLink())
     ).map((entry3) => entry3.name).sort();
   } catch (error) {
@@ -7770,7 +7852,7 @@ async function collectArtifacts(plan2) {
     await guard(plan2.target, join25(parent, "child"));
     const current = await entry2(parent);
     if (!current) continue;
-    for (const name of await readdir16(parent)) {
+    for (const name of await readdir17(parent)) {
       if (!/^\.skillex-tmp-migration-[a-f0-9-]+-(?:new|old)$/.test(name)) continue;
       const path = join25(parent, name);
       if (path === pending?.stage || path === pending?.parked) continue;
@@ -8313,7 +8395,7 @@ async function finishPending(target2, state, begin = () => {
     verified: state.data.verified
   });
 }
-async function execute(target2, operation, state, mark, begin) {
+async function execute2(target2, operation, state, mark, begin) {
   check(target2.options);
   await guard(target2, operation.item.path);
   for (const proof of operation.proofs) await assertMigrationNode(proof.path, proof.node);
@@ -8590,7 +8672,7 @@ async function migrateActivation(options = {}) {
               "The migration item did not converge after publication."
             );
           attempted.add(operation.item.id);
-          state = await execute(
+          state = await execute2(
             selected,
             operation,
             current.state,
@@ -8857,7 +8939,7 @@ import {
   lstat as lstat16,
   mkdir as mkdir8,
   open as open10,
-  readdir as readdir17,
+  readdir as readdir18,
   readlink as readlink6,
   rename as rename6,
   rmdir as rmdir5,
@@ -8952,6 +9034,7 @@ async function captureMigrationTree(root) {
   const initial = await migrationLstat(root);
   if (!initial) return null;
   const entries = [];
+  const excluded = [];
   const evidence2 = [];
   const visit = async (path, relpath) => {
     const before = await lstat16(path, { bigint: true });
@@ -8974,14 +9057,19 @@ async function captureMigrationTree(root) {
       target: target2 ?? null
     });
     if (id.kind === "directory") {
-      for (const name of (await readdir17(path)).sort()) {
+      for (const name of (await readdir18(path)).sort()) {
         if ([".git", ".hg", ".svn"].includes(name))
           migrationFailure2(
             join27(path, name),
             "A definition or composition contains repository administration; map its authored content explicitly.",
             "E_MIGRATION_CONTENT"
           );
-        await visit(join27(path, name), relpath ? join27(relpath, name) : name);
+        const child = relpath ? join27(relpath, name) : name;
+        if (generatedName(name)) {
+          excluded.push(child);
+          continue;
+        }
+        await visit(join27(path, name), child);
       }
     }
     if (!stable2(before, await lstat16(path, { bigint: true })))
@@ -8992,9 +9080,23 @@ async function captureMigrationTree(root) {
     migrationFailure2(root, "Source root was replaced while it was inspected.");
   return {
     entries,
-    evidence: { root: identity3(initial), entries: evidence2, digest: migrationTreeDigest(entries) }
+    evidence: { root: identity3(initial), entries: evidence2, digest: migrationTreeDigest(entries) },
+    excluded
   };
 }
+function refuseExcludedRemoval(path, tree) {
+  const first = tree.excluded[0];
+  if (first === void 0) return;
+  fail(
+    "E_MIGRATION_RUNTIME_CONTENT",
+    `Migration would remove generated build, cache, or runtime content it never migrates: ${tree.excluded.join(", ")}`,
+    {
+      path: join27(path, first),
+      fix: "Remove only verified generated entries (their tools rebuild them), or move them elsewhere, then rerun the migration preview."
+    },
+    ExitCode.REFUSED
+  );
+}
 async function assertMigrationIdentity(path, expected) {
   if (!equalIdentity2(await migrationLstat(path), expected))
     migrationFailure2(path, "A migration entry changed identity.");
@@ -9104,6 +9206,7 @@ async function removeMigrationTree(path, expected) {
   const currentTree = await captureMigrationTree(path);
   if (!currentTree) return;
   await assertMigrationIdentity(path, expected.root);
+  refuseExcludedRemoval(path, currentTree);
   for (const current of currentTree.evidence.entries) {
     const known = expected.entries.find((entry3) => entry3.path === current.path);
     if (!known || JSON.stringify(known) !== JSON.stringify(current))
@@ -9210,6 +9313,7 @@ async function publishMigrationOperation(operation) {
   } else {
     if (destination) {
       await assertMigrationTree(operation.path, operation.before);
+      refuseExcludedRemoval(operation.path, destination);
       if (!operation.parked || parked)
         migrationFailure2(operation.path, "Cannot park the original migration entry safely.");
       await assertMigrationTree(operation.parked, null);
@@ -10356,7 +10460,7 @@ async function migrateManifest(options, nameMap = {}) {
 
 // src/core/migration-registry.ts
 import { createHash as createHash10 } from "node:crypto";
-import { lstat as lstat18, readdir as readdir18, realpath as realpath20 } from "node:fs/promises";
+import { lstat as lstat18, readdir as readdir19, realpath as realpath20 } from "node:fs/promises";
 import { basename as basename8, dirname as dirname19, isAbsolute as isAbsolute10, join as join29, relative as relative13, sep as sep9 } from "node:path";
 import { parse as parseToml7, stringify as stringifyToml2 } from "smol-toml";
 function record8(value) {
@@ -10374,7 +10478,7 @@ function payloadDigest(entries) {
 async function sameCaseOnlyEntry(source, destination, before) {
   if (dirname19(source) !== dirname19(destination) || basename8(source) === basename8(destination) || basename8(source).toLowerCase() !== basename8(destination).toLowerCase())
     return false;
-  const names2 = await readdir18(dirname19(source));
+  const names2 = await readdir19(dirname19(source));
   if (!names2.includes(basename8(source)) || names2.includes(basename8(destination))) return false;
   const destinationTree = await captureMigrationTree(destination);
   return JSON.stringify(destinationTree?.evidence) === JSON.stringify(before);
@@ -10454,6 +10558,26 @@ function refuse2(path, code, message) {
     ExitCode.REFUSED
   );
 }
+var runtimeContentFix = "Remove only verified generated entries (their tools rebuild them), or move them outside the composition, then rerun the migration preview.";
+function runtimeContentMessage(holder) {
+  return `A ${holder} contains generated build, cache, or runtime content that migration never carries or removes.`;
+}
+function hiddenPath(path) {
+  return path.split(sep9).some((part) => part.startsWith(".") || part.startsWith("_"));
+}
+function skippedDetail(skipped, where) {
+  return skipped.length ? [
+    `Generated build, cache, or runtime entries ${where} are not definition content: they are not copied, not carried, and stay at the source: ${skipped.join(", ")}`
+  ] : [];
+}
+function runtimeContent(path, holder) {
+  fail(
+    "E_MIGRATION_RUNTIME_CONTENT",
+    runtimeContentMessage(holder),
+    { path, fix: runtimeContentFix },
+    ExitCode.REFUSED
+  );
+}
 function safeKey(value) {
   const parts = value.split("/");
   return !!value && !value.includes("\\") && ![...value].some(
@@ -10588,21 +10712,15 @@ async function importDefinition(plan2, lexicalSource, preferred, selected) {
   if (metadata2.provenance) plan2.provenance[lexicalSource] = metadata2.provenance;
   const tree = selected ? {
     entries: selected,
-    evidence: { ...captured.evidence, digest: migrationTreeDigest(selected) }
+    evidence: { ...captured.evidence, digest: migrationTreeDigest(selected) },
+    excluded: captured.excluded
   } : captured;
-  const runtime = tree.entries.find(
-    (entry3) => entry3.path.split(sep9).some((part) => part === "__pycache__" || /\.py[co]$/.test(part))
-  );
-  if (runtime)
-    fail(
-      "E_MIGRATION_RUNTIME_CONTENT",
-      "A candidate definition contains generated Python cache content.",
-      {
-        path: join29(lexicalSource, runtime.path),
-        fix: "Remove only verified generated Python cache entries from the source, then rerun the migration preview."
-      },
-      ExitCode.REFUSED
-    );
+  const skipped = selected ? captured.excluded.filter(
+    (item2) => selected.some(
+      (entry3) => entry3.kind === "directory" && entry3.path !== "" && item2.startsWith(`${entry3.path}${sep9}`)
+    )
+  ) : captured.excluded;
+  plan2.skipped.set(lexicalSource, skipped);
   const expected = mapped(plan2.options.mapping?.digests, plan2, lexicalSource) ?? mapped(plan2.options.mapping?.digests, plan2, source);
   if (expected !== void 0 && expected !== tree.evidence.digest)
     refuse2(
@@ -10655,7 +10773,8 @@ async function importDefinition(plan2, lexicalSource, preferred, selected) {
       details: [
         `source: ${lexicalSource}`,
         `canonical name: ${name}`,
-        "All captured definition bytes, support entries, modes, and provenance are preserved; internal absolute links are made portable."
+        skipped.length ? "Every authored definition byte, support entry, mode, and provenance is preserved; internal absolute links are made portable." : "All captured definition bytes, support entries, modes, and provenance are preserved; internal absolute links are made portable.",
+        ...skippedDetail(skipped, "at this source")
       ],
       dependsOn: []
     };
@@ -10675,7 +10794,8 @@ async function importDefinition(plan2, lexicalSource, preferred, selected) {
     beforeDigest: tree.evidence.digest,
     afterDigest: reused.digest,
     details: [
-      dependency ? "Definition is retained at its canonical destination before its original composition entry is replaced." : "Existing canonical authored payload is identical; differing original provenance is preserved separately in the migration receipt."
+      dependency ? "Definition is retained at its canonical destination before its original composition entry is replaced." : "Existing canonical authored payload is identical; differing original provenance is preserved separately in the migration receipt.",
+      ...skippedDetail(skipped, "at this source")
     ],
     dependsOn: dependency ? [dependency] : []
   });
@@ -10835,6 +10955,8 @@ async function composition(plan2, path, kind2) {
           "E_MIGRATION_REFERENCE",
           "A null reference mapping cannot remove a real definition; name and preserve its content instead."
         );
+      const generated = before.excluded.find((item3) => item3.startsWith(`${definition}${sep9}`));
+      if (generated !== void 0) runtimeContent(join29(path, generated), "candidate definition");
       const skill2 = await importDefinition(plan2, lexical, basename8(definition));
       members2.push({
         relativePath: definition,
@@ -10849,7 +10971,9 @@ async function composition(plan2, path, kind2) {
     }
   }
   for (const entry3 of tree.entries) {
-    if (!entry3.path || entry3.kind !== "link" || definitionRoots.some((parent) => entry3.path.startsWith(`${parent}${sep9}`)))
+    if (!entry3.path || entry3.kind !== "link" || // A hidden link is outside the composition's namespace: never a member, never rewritten,
+    // and its referent (often installer-owned) is never imported into the catalog.
+    hiddenPath(entry3.path) || definitionRoots.some((parent) => entry3.path.startsWith(`${parent}${sep9}`)))
       continue;
     const lexical = join29(path, entry3.path);
     const explicitReference = mapped(plan2.options.mapping?.references, plan2, lexical);
@@ -10913,7 +11037,7 @@ async function composition(plan2, path, kind2) {
     if (kind2 === "pack" || dirname19(member.relativePath) !== ".")
       entries.push(memberLink(plan2, destination, member.relativePath, member.name));
   }
-  let selected = members2.map((member) => member.name);
+  let selected = members2.filter((member) => !hiddenPath(member.relativePath)).map((member) => member.name);
   if (kind2 === "pack") {
     const declared = [];
     if (raw.freeform !== void 0 && (!record8(raw.freeform) || !Array.isArray(raw.freeform.skills) || !raw.freeform.skills.every((item3) => typeof item3 === "string")))
@@ -11065,6 +11189,18 @@ async function composition(plan2, path, kind2) {
   entries = entries.sort((a, b) => a.path.localeCompare(b.path));
   const afterDigest = migrationTreeDigest(entries);
   const changed3 = destination !== path || before.evidence.digest !== afterDigest;
+  if (changed3)
+    for (const item3 of before.excluded) {
+      if (definitionRoots.some((root) => item3.startsWith(`${root}${sep9}`))) continue;
+      finding(
+        plan2,
+        join29(path, item3),
+        "E_MIGRATION_RUNTIME_CONTENT",
+        runtimeContentMessage("composition"),
+        runtimeContentFix
+      );
+      hasBlocker = true;
+    }
   const dependencies = [
     ...new Set(members2.flatMap((member) => member.dependency ? [member.dependency] : []))
   ];
@@ -11132,12 +11268,13 @@ async function prepare2(registry, options, previousNames = {}, previousProvenanc
     provenance: { ...previousProvenance },
     externalRoots: new Set(previousExternalRoots),
     canonical: /* @__PURE__ */ new Map(),
-    imported: /* @__PURE__ */ new Map()
+    imported: /* @__PURE__ */ new Map(),
+    skipped: /* @__PURE__ */ new Map()
   };
   const catalog = join29(registry.root, "all-skills");
   const links = [];
   const retiredAliases = [];
-  for (const entry3 of (await readdir18(catalog, { withFileTypes: true })).sort(
+  for (const entry3 of (await readdir19(catalog, { withFileTypes: true })).sort(
     (a, b) => a.name.localeCompare(b.name)
   )) {
     interrupted2(options);
@@ -11210,7 +11347,10 @@ async function prepare2(registry, options, previousNames = {}, previousProvenanc
           state: "ready",
           beforeDigest: before.evidence.digest,
           afterDigest: skill2.digest,
-          details: [
+          details: plan2.skipped.get(path)?.length ? [
+            "Identical authored definition content is retained at the canonical target; retire only this exact alias after composition rewrites.",
+            ...skippedDetail(plan2.skipped.get(path) ?? [], "at the alias source")
+          ] : [
             "Identical definition content is retained at the canonical target; retire only this exact alias after composition rewrites."
           ],
           dependsOn: skill2.dependency ? [skill2.dependency] : []
@@ -11240,7 +11380,7 @@ async function prepare2(registry, options, previousNames = {}, previousProvenanc
       blocked3(plan2, root, new Error("Composition family root must be a real directory."));
       continue;
     }
-    for (const entry3 of (await readdir18(root, { withFileTypes: true })).sort(
+    for (const entry3 of (await readdir19(root, { withFileTypes: true })).sort(
       (a, b) => a.name.localeCompare(b.name)
     )) {
       const path = join29(root, entry3.name);
@@ -11262,7 +11402,7 @@ async function prepare2(registry, options, previousNames = {}, previousProvenanc
         else if (await inspectPath(join29(path, "pack.toml"))) await composition(plan2, path, "pack");
         else {
           const versions = [];
-          for (const child of await readdir18(path, { withFileTypes: true }))
+          for (const child of await readdir19(path, { withFileTypes: true }))
             if ((child.isDirectory() || child.isSymbolicLink()) && await inspectPath(join29(path, child.name, "pack.toml")))
               versions.push(child.name);
           if (versions.length)
@@ -11532,7 +11672,7 @@ async function migrateRegistry(options = {}) {
 // src/core/migration-sources.ts
 import { createHash as createHash11, randomUUID as randomUUID8 } from "node:crypto";
 import { constants as constants9 } from "node:fs";
-import { link as link6, open as open12, readdir as readdir19, unlink as unlink8 } from "node:fs/promises";
+import { link as link6, open as open12, readdir as readdir20, unlink as unlink8 } from "node:fs/promises";
 import { basename as basename9, join as join30 } from "node:path";
 var binding3 = { namespace: "migrations", targetParts: ["all-skills", "sources.toml"] };
 var prefix = ".skillex-tmp-migrate-sources-";
@@ -11551,7 +11691,7 @@ function refused2(path, message) {
 async function validateProvenance(registry, text2, path) {
   const sources = parseVendorSourcesText(text2, path);
   const catalog = join30(registry.root, "all-skills");
-  for (const name of (await readdir19(catalog)).sort()) {
+  for (const name of (await readdir20(catalog)).sort()) {
     const skill2 = join30(catalog, name);
     if (!(await inspectPath(skill2))?.isDirectory() || !await inspectPath(join30(skill2, "SKILL.md")))
       continue;
@@ -11583,7 +11723,7 @@ async function migrateSources(input) {
       const old = snapshot3.document?.data;
       if (old && (old.version !== 1 || typeof old.source !== "string" || typeof old.digest !== "string" || !/^sha256:[a-f0-9]{64}$/.test(old.digest) || !["pending", "verified"].includes(old.phase) || typeof old.stage !== "string" || basename9(old.stage) !== old.stage || !new RegExp(`^${prefix}[a-f0-9-]{36}$`).test(old.stage) || !/^\d+$/.test(old.dev) || !/^\d+$/.test(old.ino)))
         refused2(snapshot3.path, "The source migration receipt is malformed.");
-      const artifacts = (await readdir19(catalog)).filter((name) => name.startsWith(prefix));
+      const artifacts = (await readdir20(catalog)).filter((name) => name.startsWith(prefix));
       const unknown = artifacts.filter((name) => name !== old?.stage || old.phase !== "pending");
       if (unknown.length)
         return makeResult("migrate sources", data2, {
@@ -11884,7 +12024,7 @@ async function migrate(input = {}) {
 // src/core/profile-sync.ts
 import { randomUUID as randomUUID9 } from "node:crypto";
 import { constants as constants10 } from "node:fs";
-import { mkdir as mkdir10, open as open13, readdir as readdir20, realpath as realpath22, rename as rename8, symlink as symlink6, unlink as unlink9 } from "node:fs/promises";
+import { mkdir as mkdir10, open as open13, readdir as readdir21, realpath as realpath22, rename as rename8, symlink as symlink6, unlink as unlink9 } from "node:fs/promises";
 import { join as join31, resolve as resolve17 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual6 } from "node:util";
 function refused3(code, message, path, fix) {
@@ -12000,7 +12140,7 @@ async function observations(profile, state) {
       "Use the explicit migrate workflow to replace this whole-root alias or conflicting file while preserving profile content."
     );
   if (root)
-    for (const name of (await readdir20(profile.skillsRoot)).sort()) {
+    for (const name of (await readdir21(profile.skillsRoot)).sort()) {
       const path = join31(profile.skillsRoot, name);
       const actual = await entry2(path);
       if (!actual) continue;
@@ -13443,7 +13583,7 @@ async function setInheritance(enabled, options = {}) {
 }
 
 // src/core/sets.ts
-import { readdir as readdir21 } from "node:fs/promises";
+import { readdir as readdir22 } from "node:fs/promises";
 import { join as join34 } from "node:path";
 function validateName(name) {
   parseManifest({ sets: [{ name }] }, "set name");
@@ -13466,7 +13606,7 @@ async function listSets(options = {}) {
     const failures = [];
     if (await inspectPath(path)) {
       await requireDirectory(path, "E_SET_MISSING");
-      for (const entry3 of (await readdir21(path, { withFileTypes: true })).sort(
+      for (const entry3 of (await readdir22(path, { withFileTypes: true })).sort(
         (a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0
       )) {
         if (entry3.name.startsWith(".") || entry3.name.startsWith("_") || !entry3.isDirectory() && !entry3.isSymbolicLink())
@@ -13530,15 +13670,15 @@ async function removeSetSkills(name, names2, options = {}) {
 }
 
 // src/core/vendor-inspect.ts
-import { readdir as readdir22 } from "node:fs/promises";
+import { readdir as readdir23 } from "node:fs/promises";
 import { join as join35 } from "node:path";
 
 // src/core/vendor-git.ts
-import { execFile as execFile3 } from "node:child_process";
+import { execFile as execFile4 } from "node:child_process";
 import { realpath as realpath25 } from "node:fs/promises";
 import { posix } from "node:path";
-import { promisify as promisify2 } from "node:util";
-var execute2 = promisify2(execFile3);
+import { promisify as promisify3 } from "node:util";
+var execute3 = promisify3(execFile4);
 var oidPattern = /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/;
 function vendorInterrupted(options) {
   if (options.signal?.aborted) {
@@ -13568,7 +13708,7 @@ function gitEnvironment(options) {
 async function git(root, args2, options, missingRef = false, allowAbsent = false) {
   vendorInterrupted(options);
   try {
-    const result = await execute2(
+    const result = await execute3(
       "git",
       ["--no-lazy-fetch", "-c", "protocol.allow=never", "-C", root, ...args2],
       {
@@ -13894,7 +14034,7 @@ async function recordedInventory(manifest, observation, options) {
   const recorded = /* @__PURE__ */ new Map();
   const failed2 = /* @__PURE__ */ new Set();
   const catalog = join35(manifest.registry.root, "all-skills");
-  for (const entry3 of (await readdir22(catalog, { withFileTypes: true })).sort(
+  for (const entry3 of (await readdir23(catalog, { withFileTypes: true })).sort(
     (a, b) => a.name.localeCompare(b.name)
   )) {
     checkVendorSignal(options);
@@ -14303,7 +14443,7 @@ async function inspectVendorStatus(options = {}) {
 
 // src/core/vendor-sync.ts
 import { randomUUID as randomUUID11 } from "node:crypto";
-import { chmod as chmod3, lstat as lstat20, mkdir as mkdir12, open as open15, readdir as readdir23, rename as rename10 } from "node:fs/promises";
+import { chmod as chmod3, lstat as lstat20, mkdir as mkdir12, open as open15, readdir as readdir24, rename as rename10 } from "node:fs/promises";
 import { dirname as dirname22, join as join36 } from "node:path";
 function refuse3(code, message, path, fix) {
   fail(code, message, { path, fix }, ExitCode.REFUSED);
@@ -14501,7 +14641,7 @@ async function prepare4(options, extractedAt) {
     }
   }
   if (options.prune) {
-    for (const name of (await readdir23(catalog)).filter(isSkillName).sort()) {
+    for (const name of (await readdir24(catalog)).filter(isSkillName).sort()) {
       if (names2.has(name)) continue;
       const path = join36(catalog, name);
       if (!(await vendorLstat(path))?.isDirectory()) continue;