@delorenj/skillex 0.1.1 → 0.1.3

package/dist/cli.js

@@ -520,7 +520,8 @@ var PROJECT_CLI_ALIASES = Object.freeze([
   ".gemini/skills",
   ".copilot/skills",
   ".opencode/skills",
-  ".kimi-code/skills"
+  ".kimi-code/skills",
+  ".zcode/skills"
 ]);
 var NEVER_TOUCH = Object.freeze([".hermes", ".augment", ".cursor", ".crush"]);
 function aliasPaths(base, scope) {
@@ -531,7 +532,7 @@ function aliasPaths(base, scope) {
 }
 
 // src/core/catalog.ts
-import { readdir as readdir3 } from "node:fs/promises";
+import { readdir as readdir4 } from "node:fs/promises";
 import { join as join7 } from "node:path";
 
 // src/core/composition.ts
@@ -954,10 +955,12 @@ async function packInventory(registry, selection2) {
 }
 
 // src/core/discovery.ts
-import { lstat as lstat3, realpath as realpath4, stat } from "node:fs/promises";
+import { execFile } from "node:child_process";
+import { lstat as lstat3, readdir as readdir3, readFile as readFile3, realpath as realpath4, stat } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
 import { dirname as dirname2, join as join5, parse, resolve as resolve3 } from "node:path";
 import { fileURLToPath } from "node:url";
+import { promisify } from "node:util";
 var manifestParts = [".agents", "skills.json"];
 function errorMessage(error) {
   return error instanceof Error ? error.message : String(error);
@@ -1107,7 +1110,70 @@ async function installedPackageRoot() {
     current = parent;
   }
 }
-async function catalogRoot(path, required) {
+var execute = promisify(execFile);
+async function recordedCatalog(root) {
+  const env = {};
+  for (const [key2, value] of Object.entries(process.env))
+    if (!key2.startsWith("GIT_")) env[key2] = value;
+  let stdout;
+  try {
+    ({ stdout } = await execute(
+      "git",
+      ["-C", root, "ls-files", "--stage", "--full-name", "-z", "--", "all-skills"],
+      {
+        encoding: "utf8",
+        maxBuffer: 64 * 1024 * 1024,
+        env: {
+          ...env,
+          GIT_OPTIONAL_LOCKS: "0",
+          GIT_TERMINAL_PROMPT: "0",
+          GIT_CONFIG_NOSYSTEM: "1",
+          GIT_CONFIG_GLOBAL: "/dev/null"
+        }
+      }
+    ));
+  } catch {
+    return void 0;
+  }
+  const records = stdout.split("\0").filter(Boolean);
+  if (records.some((record9) => /^160000 [0-9a-f]+ \d\tall-skills$/.test(record9))) return "gitlink";
+  if (records.some((record9) => /^\d{6} [0-9a-f]+ \d\tall-skills\//.test(record9))) return "tree";
+  return void 0;
+}
+async function holdsDefinition(catalog, names2) {
+  for (const name of names2) {
+    try {
+      if ((await stat(join5(catalog, name, "SKILL.md"))).isFile()) return true;
+    } catch {
+    }
+  }
+  return false;
+}
+async function uninitializedCatalog(root, catalog) {
+  let declaration;
+  try {
+    declaration = await readFile3(join5(root, ".gitmodules"), "utf8");
+  } catch (error) {
+    if (["ENOENT", "ENOTDIR"].includes(error.code ?? "")) {
+      return void 0;
+    }
+    return ioFailure2(join5(root, ".gitmodules"), error);
+  }
+  if (!/^[\t ]*path[\t ]*=[\t ]*"?all-skills\/?"?[\t ]*$/m.test(declaration)) return void 0;
+  if (await entry(join5(catalog, ".git"))) return void 0;
+  let names2;
+  try {
+    names2 = (await readdir3(catalog)).sort();
+  } catch (error) {
+    return ioFailure2(catalog, error);
+  }
+  if (!names2.length) return names2;
+  const recorded = await recordedCatalog(root);
+  if (recorded === "gitlink") return names2;
+  if (recorded === "tree") return void 0;
+  return await holdsDefinition(catalog, names2) ? void 0 : names2;
+}
+async function catalogRoot(path, required, source) {
   const found = await entry(path);
   if (!found) {
     if (!required) return void 0;
@@ -1138,6 +1204,21 @@ async function catalogRoot(path, required) {
       fix: "Select the owning catalog checkout, or run skillex migrate to repair its topology."
     });
   }
+  const leftovers = await uninitializedCatalog(root, catalog);
+  if (leftovers) {
+    const quoted = JSON.stringify(root);
+    const more = leftovers.length > 8 ? `, and ${leftovers.length - 8} more` : "";
+    const clear = leftovers.length ? `First move the entries git left in all-skills/ (${leftovers.slice(0, 8).join(", ")}${more}) somewhere outside it, such as a sibling directory, keeping anything you still need: git will not populate a non-empty directory. Then ` : "";
+    const step = (text2) => clear ? `${clear}${text2}` : `${text2.charAt(0).toUpperCase()}${text2.slice(1)}`;
+    fail(
+      "E_REGISTRY_ROOT",
+      `The registry's all-skills/ catalog is an uninitialized git submodule: ${catalog}`,
+      {
+        path: catalog,
+        fix: source === "cache" ? `skillex never clones or fetches this registry cache. ${step(`bring it current and populate its catalog: git -C ${quoted} pull --ff-only && git -C ${quoted} submodule update --init --recursive.`)} Or drop the manifest's registry field, or pin a complete checkout with PJ_SKILLS_REGISTRY_ROOT.` : `${step(`populate the catalog submodule: git -C ${quoted} submodule update --init --recursive.`)} Or select a complete checkout with --registry-root or PJ_SKILLS_REGISTRY_ROOT.`
+      }
+    );
+  }
   return root;
 }
 async function discoverRegistry(options = {}) {
@@ -1149,7 +1230,7 @@ async function discoverRegistry(options = {}) {
     const path = absolutePath(value, cwd, home, "E_REGISTRY_ROOT", "registry root");
     if (searched.includes(path)) return void 0;
     searched.push(path);
-    const root = await catalogRoot(path, required);
+    const root = await catalogRoot(path, required, source);
     return root ? { root, source, searched: [...searched] } : void 0;
   };
   if (options.registryRoot !== void 0) {
@@ -1195,7 +1276,7 @@ async function discoverRegistry(options = {}) {
 }
 
 // src/core/metadata.ts
-import { readFile as readFile3 } from "node:fs/promises";
+import { readFile as readFile4 } from "node:fs/promises";
 import { join as join6 } from "node:path";
 import { parseDocument } from "yaml";
 function mapping(value) {
@@ -1238,7 +1319,7 @@ async function textFile(path, missing) {
   }
   let bytes;
   try {
-    bytes = await readFile3(path);
+    bytes = await readFile4(path);
   } catch {
     fail(
       "E_IO",
@@ -1443,7 +1524,7 @@ async function compositionReferences(registry, findings) {
         await inspectPack(name, path);
         inspected += 1;
       }
-      for (const entry3 of (await readdir3(path, { withFileTypes: true })).sort(
+      for (const entry3 of (await readdir4(path, { withFileTypes: true })).sort(
         (a, b) => compare(a.name, b.name)
       )) {
         if (entry3.name.startsWith(".") || entry3.name.startsWith("_")) continue;
@@ -1488,7 +1569,7 @@ async function compositionReferences(registry, findings) {
     try {
       if (!await inspectPath(path)) continue;
       await requireDirectory(path, kind2 === "set" ? "E_SET_MISSING" : "E_PACK_MISSING");
-      const entries = (await readdir3(path, { withFileTypes: true })).sort(
+      const entries = (await readdir4(path, { withFileTypes: true })).sort(
         (a, b) => compare(a.name, b.name)
       );
       for (const entry3 of entries) {
@@ -1526,7 +1607,7 @@ async function listSkills(options = {}) {
     let validDefinitions = 0;
     const catalog = join7(registry.root, "all-skills");
     const query = options.query?.trim().toLowerCase();
-    for (const entry3 of (await readdir3(catalog, { withFileTypes: true })).sort(
+    for (const entry3 of (await readdir4(catalog, { withFileTypes: true })).sort(
       (a, b) => compare(a.name, b.name)
     )) {
       if (entry3.name.startsWith(".") || entry3.name.startsWith("_")) continue;
@@ -1575,7 +1656,7 @@ async function showSkill(name, options = {}) {
 }
 
 // src/core/catalog-write.ts
-import { chmod, lstat as lstat8, mkdir as mkdir4, open as open4, readFile as readFile6, realpath as realpath9, symlink } from "node:fs/promises";
+import { chmod, lstat as lstat8, mkdir as mkdir4, open as open4, readFile as readFile7, realpath as realpath9, symlink } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
 import { dirname as dirname6, join as join12, resolve as resolve6 } from "node:path";
 import { stringify } from "yaml";
@@ -1591,8 +1672,8 @@ import {
   lstat as lstat4,
   mkdir as mkdir2,
   open as open2,
-  readdir as readdir4,
-  readFile as readFile4,
+  readdir as readdir5,
+  readFile as readFile5,
   realpath as realpath5,
   rmdir,
   unlink as unlink2
@@ -1697,7 +1778,7 @@ async function claimFiles(claim2) {
   if (!await sameDirectory(claim2.path, claim2.identity)) return void 0;
   let names2;
   try {
-    names2 = await readdir4(claim2.path);
+    names2 = await readdir5(claim2.path);
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     throw error;
@@ -1730,7 +1811,7 @@ async function readTicket(claim2, resource) {
   if (stat6.size > 4096) stateFailure(path, "Lock ticket is too large to be a valid claim.");
   let raw;
   try {
-    raw = JSON.parse(await readFile4(path, "utf8"));
+    raw = JSON.parse(await readFile5(path, "utf8"));
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     if (error instanceof SyntaxError) stateFailure(path, "Lock ticket is malformed JSON.");
@@ -1762,7 +1843,7 @@ async function removeClaim(claim2, expectedTicket, ownedTicket) {
   if (expectedTicket !== void 0 && names2.includes(ticketFile)) {
     let current;
     try {
-      current = await readFile4(join8(claim2.path, ticketFile), "utf8");
+      current = await readFile5(join8(claim2.path, ticketFile), "utf8");
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
     }
@@ -1794,7 +1875,7 @@ async function removeClaim(claim2, expectedTicket, ownedTicket) {
 async function claims(path, directory2, resource, localHostHash) {
   if (!await sameDirectory(path, directory2)) stateFailure(path, "Lock directory disappeared.");
   const result = [];
-  for (const name of (await readdir4(path)).sort()) {
+  for (const name of (await readdir5(path)).sort()) {
     const claimPath = join8(path, name);
     const identity5 = identityFrom(name, claimPath);
     const stat6 = await inspect2(claimPath);
@@ -1945,7 +2026,7 @@ import {
   lstat as lstat6,
   mkdir as mkdir3,
   open as open3,
-  readdir as readdir6,
+  readdir as readdir7,
   realpath as realpath7,
   rename as rename2,
   rmdir as rmdir2,
@@ -1956,16 +2037,14 @@ import { dirname as dirname5, join as join10, relative as relative3, resolve as
 
 // src/core/content.ts
 import { createHash as createHash3 } from "node:crypto";
-import { lstat as lstat5, readdir as readdir5, readFile as readFile5, readlink, realpath as realpath6 } from "node:fs/promises";
+import { lstat as lstat5, readdir as readdir6, readFile as readFile6, readlink, realpath as realpath6 } from "node:fs/promises";
 import { dirname as dirname4, isAbsolute as isAbsolute2, join as join9, relative as relative2, sep as sep3 } from "node:path";
 function isWithin(root, path) {
   const child = relative2(root, path);
   return child === "" || !isAbsolute2(child) && child !== ".." && !child.startsWith(`..${sep3}`);
 }
+var repositoryNames = /* @__PURE__ */ new Set([".git", ".hg", ".svn"]);
 var generatedNames = /* @__PURE__ */ new Set([
-  ".git",
-  ".hg",
-  ".svn",
   ".DS_Store",
   "__pycache__",
   ".pytest_cache",
@@ -1976,8 +2055,11 @@ var generatedNames = /* @__PURE__ */ new Set([
   ".venv",
   "node_modules"
 ]);
+function generatedName(name) {
+  return generatedNames.has(name) || /\.(?:pyc|pyo|pid|sock|db-wal|db-shm)$/.test(name);
+}
 function excludedName(name) {
-  return generatedNames.has(name) || /(?:\.(?:pyc|pyo|pid|sock|db-wal|db-shm|log|bak|orig)|~)$/.test(name) || /(?:\.bak-|-backup\.)/.test(name) || /^\.env(?:\.|$)/.test(name) && ![".env.op", ".env.example", ".env.sample", ".env.template"].includes(name);
+  return repositoryNames.has(name) || generatedName(name) || /(?:\.(?:log|bak|orig)|~)$/.test(name) || /(?:\.bak-|-backup\.)/.test(name) || /^\.env(?:\.|$)/.test(name) && ![".env.op", ".env.example", ".env.sample", ".env.template"].includes(name);
 }
 function contentFailure(path, message) {
   fail(
@@ -1991,7 +2073,7 @@ async function captureContent(root) {
   const entries = [];
   const excluded = [];
   const visit = async (path) => {
-    for (const name of (await readdir5(path)).sort()) {
+    for (const name of (await readdir6(path)).sort()) {
       const source = join9(path, name);
       const item2 = relative2(root, source);
       if (excludedName(name)) {
@@ -2003,7 +2085,7 @@ async function captureContent(root) {
         entries.push({ path: item2, kind: "directory", mode: metadata2.mode & 511 });
         await visit(source);
       } else if (metadata2.isFile()) {
-        const bytes = await readFile5(source);
+        const bytes = await readFile6(source);
         const after = await lstat5(source);
         if (metadata2.dev !== after.dev || metadata2.ino !== after.ino || metadata2.mode !== after.mode || metadata2.size !== after.size || metadata2.mtimeMs !== after.mtimeMs) {
           contentFailure(source, `Source changed while being inspected: ${source}`);
@@ -2179,7 +2261,7 @@ async function captureVendorTree(root) {
     const before = await lstat6(directory2, { bigint: true });
     if (!before.isDirectory())
       stateFailure2(directory2, "A content parent became a symlink or non-directory.");
-    for (const name of (await readdir6(directory2)).sort()) {
+    for (const name of (await readdir7(directory2)).sort()) {
       const path = join10(directory2, name);
       const info = await lstat6(path, { bigint: true });
       if (!info.isFile() && !info.isDirectory())
@@ -2210,7 +2292,7 @@ async function assertVendorTree(root, expected, allowMissing = false) {
     if (identity5?.kind !== "directory")
       stateFailure2(directory2, "A recovery parent has no directory ownership evidence.");
     await assertVendorIdentity(directory2, identity5);
-    for (const name of await readdir6(directory2)) {
+    for (const name of await readdir7(directory2)) {
       const path = join10(directory2, name);
       const item2 = relative3(root, path);
       const entry3 = expectedEntries.get(item2);
@@ -2790,7 +2872,7 @@ async function importSkill(source, name, options = {}) {
     const metadata2 = await readSkillMetadata(sourceRoot);
     for (const name2 of ["SKILL.md", ".source.yaml"]) {
       const captured = content.entries.find((entry3) => entry3.path === name2);
-      if (captured?.kind === "file" && !captured.bytes.equals(await readFile6(join12(sourceRoot, name2)))) {
+      if (captured?.kind === "file" && !captured.bytes.equals(await readFile7(join12(sourceRoot, name2)))) {
         fail("E_IMPORT_SOURCE_CHANGED", "Skill metadata changed while import was being planned.", {
           path: join12(sourceRoot, name2),
           fix: "Retry after the source writer has finished."
@@ -2844,12 +2926,12 @@ async function importSkill(source, name, options = {}) {
 }
 
 // src/core/diagnostics.ts
-import { readdir as readdir10, realpath as realpath13 } from "node:fs/promises";
+import { readdir as readdir11, realpath as realpath13 } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
 import { dirname as dirname10, join as join17, parse as parse2, resolve as resolve9, sep as sep5 } from "node:path";
 
 // src/core/activation-ownership.ts
-import { lstat as lstat9, readdir as readdir7, readlink as readlink2 } from "node:fs/promises";
+import { lstat as lstat9, readdir as readdir8, readlink as readlink2 } from "node:fs/promises";
 import { dirname as dirname7, isAbsolute as isAbsolute3, join as join13, relative as relative4, resolve as resolve7 } from "node:path";
 function refuse(path, message, code = "E_ACTIVATION_CONFLICT") {
   fail(
@@ -2908,7 +2990,7 @@ async function inspectOwnedNode(path, node, missingOkay = false) {
   const actual = await requireIdentity(path, node.identity, missingOkay);
   if (!actual) return false;
   if (node.identity.kind === "directory") {
-    for (const name of await readdir7(path)) {
+    for (const name of await readdir8(path)) {
       const expected = node.children?.[name];
       if (!expected)
         refuse(
@@ -2990,14 +3072,14 @@ function lexicalTarget(path, raw) {
 }
 
 // src/core/reconciliation.ts
-import { execFile } from "node:child_process";
+import { execFile as execFile2 } from "node:child_process";
 import { createHash as createHash5, randomUUID as randomUUID5 } from "node:crypto";
-import { mkdir as mkdir6, readdir as readdir9, realpath as realpath12, rename as rename4, rmdir as rmdir3, symlink as symlink3, unlink as unlink5 } from "node:fs/promises";
+import { mkdir as mkdir6, readdir as readdir10, realpath as realpath12, rename as rename4, rmdir as rmdir3, symlink as symlink3, unlink as unlink5 } from "node:fs/promises";
 import { basename as basename3, dirname as dirname9, join as join16, relative as relative6, resolve as resolve8, sep as sep4 } from "node:path";
-import { promisify } from "node:util";
+import { promisify as promisify2 } from "node:util";
 
 // src/core/packs.ts
-import { lstat as lstat11, readdir as readdir8, readFile as readFile8, realpath as realpath11 } from "node:fs/promises";
+import { lstat as lstat11, readdir as readdir9, readFile as readFile9, realpath as realpath11 } from "node:fs/promises";
 import { join as join15 } from "node:path";
 import { parse as parseToml2, stringify as stringifyToml } from "smol-toml";
 
@@ -3008,7 +3090,7 @@ import {
   lstat as lstat10,
   mkdir as mkdir5,
   open as open5,
-  readFile as readFile7,
+  readFile as readFile8,
   readlink as readlink3,
   realpath as realpath10,
   rename as rename3,
@@ -3135,7 +3217,7 @@ async function saveManifest(plan2, changed3) {
     await parents(plan2, manifest.path);
     const info = await inspectPath(manifest.path);
     if (manifest.before) {
-      if (!info?.isFile() || info.dev !== manifest.before.info.dev || info.ino !== manifest.before.info.ino || !(await readFile7(manifest.path)).equals(manifest.before.bytes))
+      if (!info?.isFile() || info.dev !== manifest.before.info.dev || info.ino !== manifest.before.info.ino || !(await readFile8(manifest.path)).equals(manifest.before.bytes))
         conflict(manifest.path, "The pack declaration changed while writing was being planned.");
     } else if (info) conflict(manifest.path, "A pack manifest appeared during creation.");
   };
@@ -3301,7 +3383,7 @@ async function readPack(registry, selected) {
   const path = join15(first.path, "pack.toml");
   const info = await lstat11(path);
   if (!info.isFile()) conflict(path, "Pack manifests must be real files.");
-  const bytes = await readFile8(path);
+  const bytes = await readFile9(path);
   let raw;
   try {
     raw = parseToml2(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
@@ -3314,7 +3396,7 @@ async function readPack(registry, selected) {
   }
   const inventory = await packInventory(registry, selected);
   const after = await lstat11(path);
-  if (inventory.path !== first.path || !after.isFile() || after.dev !== info.dev || after.ino !== info.ino || !(await readFile8(path)).equals(bytes))
+  if (inventory.path !== first.path || !after.isFile() || after.dev !== info.dev || after.ino !== info.ino || !(await readFile9(path)).equals(bytes))
     conflict(path, "The pack declaration changed during inspection.");
   const header = raw.pack;
   const text2 = description(header.description, path);
@@ -3361,7 +3443,7 @@ async function listPacks(options = {}) {
     };
     if (await inspectPath(root)) {
       await requireDirectory(root, "E_PACK_MISSING");
-      for (const family of (await readdir8(root, { withFileTypes: true })).sort(
+      for (const family of (await readdir9(root, { withFileTypes: true })).sort(
         (a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0
       )) {
         if (family.name.startsWith(".") || family.name.startsWith("_") || !family.isDirectory() && !family.isSymbolicLink())
@@ -3377,7 +3459,7 @@ async function listPacks(options = {}) {
             await inspect6(named, path);
             inspected += 1;
           }
-          for (const entry3 of (await readdir8(path, { withFileTypes: true })).sort(
+          for (const entry3 of (await readdir9(path, { withFileTypes: true })).sort(
             (a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0
           )) {
             if (entry3.name.startsWith(".") || entry3.name.startsWith("_") || !entry3.isDirectory() && !entry3.isSymbolicLink())
@@ -3463,7 +3545,7 @@ async function verifyPack(ref, options = {}) {
       );
     else {
       const names2 = new Set(inventory.names);
-      const entries = await readdir8(inventory.skillsRoot, { withFileTypes: true });
+      const entries = await readdir9(inventory.skillsRoot, { withFileTypes: true });
       const present = new Set(entries.map((entry3) => entry3.name));
       for (const name of names2)
         if (!present.has(name))
@@ -3541,7 +3623,7 @@ async function preparePack(selected, names2, operation, options) {
   const root = join15(composition2.path, "skills");
   await planDirectory(plan2, root);
   if (await inspectPath(root)) {
-    for (const entry3 of await readdir8(root, { withFileTypes: true })) {
+    for (const entry3 of await readdir9(root, { withFileTypes: true })) {
       const path = join15(root, entry3.name);
       const target2 = targets.get(entry3.name);
       if (target2) await planLink(plan2, path, target2);
@@ -3835,7 +3917,7 @@ async function resolveSelectionWithManifests(options = {}, proposed = /* @__PURE
 }
 
 // src/core/reconciliation.ts
-var runFile = promisify(execFile);
+var runFile = promisify2(execFile2);
 var lockResource = "skillex:activation:v2";
 function errorResult(command, error) {
   return makeResult(command, null, {
@@ -4129,7 +4211,7 @@ async function buildScope(scope, options, forbiddenRoots) {
     }
     return { identity: owned3, children };
   };
-  const awaitableNames = rootEntry?.info.isDirectory() ? await readdir9(physicalPath(root, recovery)) : [];
+  const awaitableNames = rootEntry?.info.isDirectory() ? await readdir10(physicalPath(root, recovery)) : [];
   if (!rootEntry) {
     operations.push({
       path: root,
@@ -4905,7 +4987,7 @@ async function observeScope(location2, resolved, manifest, options, forbiddenRoo
   const entries = [];
   if (observedRoot.observation.reachable && ["directory", "link"].includes(observedRoot.observation.kind)) {
     try {
-      const names2 = (await readdir10(root)).sort();
+      const names2 = (await readdir11(root)).sort();
       for (const name of names2) {
         cancelled(options);
         const path = join17(root, name);
@@ -5251,14 +5333,14 @@ async function explainSkill(name, options = {}) {
 }
 
 // src/core/doctor-sources.ts
-import { readdir as readdir12, readFile as readFile9, realpath as realpath15 } from "node:fs/promises";
+import { readdir as readdir13, readFile as readFile10, realpath as realpath15 } from "node:fs/promises";
 import { basename as basename4, dirname as dirname11, join as join20, relative as relative8, sep as sep7 } from "node:path";
 import { parse as parseToml4 } from "smol-toml";
 
 // src/core/vendor-provenance.ts
 import { createHash as createHash6 } from "node:crypto";
 import { constants as constants4 } from "node:fs";
-import { lstat as lstat13, open as open7, readdir as readdir11 } from "node:fs/promises";
+import { lstat as lstat13, open as open7, readdir as readdir12 } from "node:fs/promises";
 import { join as join19, relative as relative7, sep as sep6 } from "node:path";
 import { stringify as stringify2 } from "yaml";
 
@@ -5770,7 +5852,7 @@ async function digestVendorTree(skillPath) {
     const before = await lstat13(directory2);
     if (!before.isDirectory())
       unsafe(directory2, "Vendored skill directories must be real directories.");
-    for (const name of (await readdir11(directory2)).sort()) {
+    for (const name of (await readdir12(directory2)).sort()) {
       if (directory2 === root && name === ".source.yaml") continue;
       const path = join19(directory2, name);
       if (administration.has(name))
@@ -5822,7 +5904,7 @@ async function digestRecordedSkill(skillPath, provenance) {
 async function appendRegularContent(root, path, entries) {
   const info = await lstat13(path);
   if (info.isDirectory()) {
-    for (const name of (await readdir11(path)).sort()) {
+    for (const name of (await readdir12(path)).sort()) {
       if (administration.has(name))
         unsafe(join19(path, name), "Repository administration is not vendored skill content.");
       await appendRegularContent(root, join19(path, name), entries);
@@ -6066,7 +6148,7 @@ async function inspectDoctorSources(registry) {
   };
   await attempt(catalog, async () => {
     await requireDirectory(catalog, "E_NO_REGISTRY");
-    for (const name of (await readdir12(catalog)).sort()) {
+    for (const name of (await readdir13(catalog)).sort()) {
       if (name === ".git") continue;
       const path = join20(catalog, name);
       await attempt(path, async () => {
@@ -6097,7 +6179,7 @@ async function inspectDoctorSources(registry) {
   });
   const packManifests = [];
   const walk = async (directory2) => {
-    const names2 = await attempt(directory2, () => readdir12(directory2));
+    const names2 = await attempt(directory2, () => readdir13(directory2));
     for (const name of (names2 ?? []).sort()) {
       if (name === ".git") continue;
       const path = join20(directory2, name);
@@ -6132,7 +6214,7 @@ async function inspectDoctorSources(registry) {
       if (!await inspectPath(root)) return;
       await requireDirectory(root, "E_COMPOSITION_ROOT");
       await walk(root);
-      for (const name of (await readdir12(root)).sort()) {
+      for (const name of (await readdir13(root)).sort()) {
         if (!isSkillName(name)) continue;
         const path = join20(root, name);
         const info = await inspectPath(path);
@@ -6144,7 +6226,7 @@ async function inspectDoctorSources(registry) {
         if (kind2 !== "sets" || !info.isDirectory()) continue;
         data2.sets++;
         const members2 = await attempt(path, () => setMembers(registry.root, name));
-        const names2 = members2?.names ?? (await readdir12(path, { withFileTypes: true })).filter((item2) => item2.isSymbolicLink() && isSkillName(item2.name)).map((item2) => item2.name);
+        const names2 = members2?.names ?? (await readdir13(path, { withFileTypes: true })).filter((item2) => item2.isSymbolicLink() && isSkillName(item2.name)).map((item2) => item2.name);
         for (const member of names2)
           await attempt(join20(path, member), () => setMemberTarget(registry.root, path, member));
       }
@@ -6182,7 +6264,7 @@ async function inspectDoctorSources(registry) {
   return { data: data2, findings, exits };
 }
 async function toml(path, code) {
-  const bytes = await readFile9(path);
+  const bytes = await readFile10(path);
   try {
     return parseToml4(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
   } catch {
@@ -6194,8 +6276,8 @@ async function toml(path, code) {
 }
 
 // src/core/doctor-writers.ts
-import { execFile as execFile2 } from "node:child_process";
-import { readdir as readdir13, readFile as readFile10, realpath as realpath16, stat as stat3 } from "node:fs/promises";
+import { execFile as execFile3 } from "node:child_process";
+import { readdir as readdir14, readFile as readFile11, realpath as realpath16, stat as stat3 } from "node:fs/promises";
 import { homedir as homedir8 } from "node:os";
 import { basename as basename5, dirname as dirname12, join as join21, resolve as resolve11 } from "node:path";
 import { parse as parseToml5 } from "smol-toml";
@@ -6417,12 +6499,12 @@ async function inspectDoctorWriters(options, registries, scopes) {
   };
   const serviceRoot = join21(configHome, "systemd", "user");
   try {
-    for (const entry3 of await readdir13(serviceRoot, { withFileTypes: true })) {
+    for (const entry3 of await readdir14(serviceRoot, { withFileTypes: true })) {
       const path = join21(serviceRoot, entry3.name);
       if (entry3.name.endsWith(".service")) candidates.set(path, "service");
       else if (entry3.isDirectory() && entry3.name.endsWith(".service.d")) {
         try {
-          for (const file of await readdir13(path))
+          for (const file of await readdir14(path))
             if (file.endsWith(".conf")) candidates.set(join21(path, file), "service");
         } catch {
           unavailable(path, "Cannot inspect user service overrides.");
@@ -6442,7 +6524,7 @@ async function inspectDoctorWriters(options, registries, scopes) {
         unavailable(path, "Writer configuration is not a bounded regular file.");
         continue;
       }
-      const content = new TextDecoder("utf-8", { fatal: true }).decode(await readFile10(path));
+      const content = new TextDecoder("utf-8", { fatal: true }).decode(await readFile11(path));
       const lines = content.split(/\r?\n/);
       if (kind2 === "service") {
         for (const [index, line] of lines.entries()) {
@@ -6520,7 +6602,7 @@ async function inspectDoctorWriters(options, registries, scopes) {
 }
 async function boundedSnapshot(options, env) {
   const observation = options.processSnapshot ? options.processSnapshot() : new Promise((accept, reject) => {
-    execFile2(
+    execFile3(
       "ps",
       ["-axo", "pid=,args="],
       { env, timeout: timeoutMs, maxBuffer: maxProcessBytes, encoding: "utf8" },
@@ -6690,14 +6772,14 @@ import { realpath as realpath21, stat as stat4 } from "node:fs/promises";
 // src/core/migration-activation.ts
 import { createHash as createHash8, randomUUID as randomUUID6 } from "node:crypto";
 import { constants as constants6 } from "node:fs";
-import { mkdir as mkdir7, open as open9, readdir as readdir16, realpath as realpath18, rename as rename5, symlink as symlink4 } from "node:fs/promises";
+import { mkdir as mkdir7, open as open9, readdir as readdir17, realpath as realpath18, rename as rename5, symlink as symlink4 } from "node:fs/promises";
 import { dirname as dirname16, isAbsolute as isAbsolute7, join as join25, parse as parse3, relative as relative10, resolve as resolve14 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual4 } from "node:util";
 
 // src/core/migration-activation-state.ts
 import { createHash as createHash7 } from "node:crypto";
 import { constants as constants5 } from "node:fs";
-import { lstat as lstat14, open as open8, readdir as readdir14, readlink as readlink4, rmdir as rmdir4, unlink as unlink6 } from "node:fs/promises";
+import { lstat as lstat14, open as open8, readdir as readdir15, readlink as readlink4, rmdir as rmdir4, unlink as unlink6 } from "node:fs/promises";
 import { dirname as dirname13, isAbsolute as isAbsolute5, join as join22, relative as relative9, resolve as resolve12 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual2 } from "node:util";
 import { parseDocument as parseDocument2 } from "yaml";
@@ -6739,7 +6821,7 @@ async function captureMigrationNode(path) {
   const children = {};
   let hash4 = null;
   if (before.isDirectory()) {
-    const names2 = await readdir14(path, { encoding: "buffer" });
+    const names2 = await readdir15(path, { encoding: "buffer" });
     if (names2.length > 1e4)
       migrationRefusal(path, "A migration directory exceeds the bounded inventory limit.");
     for (const bytes of names2.sort(Buffer.compare)) {
@@ -6955,7 +7037,7 @@ function migrationAbsolute(value, home, cwd) {
 }
 
 // src/core/profile-discovery.ts
-import { lstat as lstat15, readdir as readdir15, readlink as readlink5, realpath as realpath17 } from "node:fs/promises";
+import { lstat as lstat15, readdir as readdir16, readlink as readlink5, realpath as realpath17 } from "node:fs/promises";
 import { homedir as homedir9 } from "node:os";
 import { basename as basename6, dirname as dirname14, join as join23, resolve as resolve13 } from "node:path";
 var namePattern = /^[a-z0-9][a-z0-9_-]{0,63}$/;
@@ -7198,7 +7280,7 @@ async function discoverProfiles(options = {}) {
   await canonicalDirectory(directory2, false);
   let names2;
   try {
-    names2 = (await readdir15(directory2, { withFileTypes: true })).filter(
+    names2 = (await readdir16(directory2, { withFileTypes: true })).filter(
       (entry3) => entry3.name !== "default" && namePattern.test(entry3.name) && (entry3.isDirectory() || entry3.isSymbolicLink())
     ).map((entry3) => entry3.name).sort();
   } catch (error) {
@@ -7770,7 +7852,7 @@ async function collectArtifacts(plan2) {
     await guard(plan2.target, join25(parent, "child"));
     const current = await entry2(parent);
     if (!current) continue;
-    for (const name of await readdir16(parent)) {
+    for (const name of await readdir17(parent)) {
       if (!/^\.skillex-tmp-migration-[a-f0-9-]+-(?:new|old)$/.test(name)) continue;
       const path = join25(parent, name);
       if (path === pending?.stage || path === pending?.parked) continue;
@@ -8313,7 +8395,7 @@ async function finishPending(target2, state, begin = () => {
     verified: state.data.verified
   });
 }
-async function execute(target2, operation, state, mark, begin) {
+async function execute2(target2, operation, state, mark, begin) {
   check(target2.options);
   await guard(target2, operation.item.path);
   for (const proof of operation.proofs) await assertMigrationNode(proof.path, proof.node);
@@ -8590,7 +8672,7 @@ async function migrateActivation(options = {}) {
               "The migration item did not converge after publication."
             );
           attempted.add(operation.item.id);
-          state = await execute(
+          state = await execute2(
             selected,
             operation,
             current.state,
@@ -8857,7 +8939,7 @@ import {
   lstat as lstat16,
   mkdir as mkdir8,
   open as open10,
-  readdir as readdir17,
+  readdir as readdir18,
   readlink as readlink6,
   rename as rename6,
   rmdir as rmdir5,
@@ -8952,6 +9034,7 @@ async function captureMigrationTree(root) {
   const initial = await migrationLstat(root);
   if (!initial) return null;
   const entries = [];
+  const excluded = [];
   const evidence2 = [];
   const visit = async (path, relpath) => {
     const before = await lstat16(path, { bigint: true });
@@ -8974,14 +9057,19 @@ async function captureMigrationTree(root) {
       target: target2 ?? null
     });
     if (id.kind === "directory") {
-      for (const name of (await readdir17(path)).sort()) {
+      for (const name of (await readdir18(path)).sort()) {
         if ([".git", ".hg", ".svn"].includes(name))
           migrationFailure2(
             join27(path, name),
             "A definition or composition contains repository administration; map its authored content explicitly.",
             "E_MIGRATION_CONTENT"
           );
-        await visit(join27(path, name), relpath ? join27(relpath, name) : name);
+        const child = relpath ? join27(relpath, name) : name;
+        if (generatedName(name)) {
+          excluded.push(child);
+          continue;
+        }
+        await visit(join27(path, name), child);
       }
     }
     if (!stable2(before, await lstat16(path, { bigint: true })))
@@ -8992,9 +9080,23 @@ async function captureMigrationTree(root) {
     migrationFailure2(root, "Source root was replaced while it was inspected.");
   return {
     entries,
-    evidence: { root: identity3(initial), entries: evidence2, digest: migrationTreeDigest(entries) }
+    evidence: { root: identity3(initial), entries: evidence2, digest: migrationTreeDigest(entries) },
+    excluded
   };
 }
+function refuseExcludedRemoval(path, tree) {
+  const first = tree.excluded[0];
+  if (first === void 0) return;
+  fail(
+    "E_MIGRATION_RUNTIME_CONTENT",
+    `Migration would remove generated build, cache, or runtime content it never migrates: ${tree.excluded.join(", ")}`,
+    {
+      path: join27(path, first),
+      fix: "Remove only verified generated entries (their tools rebuild them), or move them elsewhere, then rerun the migration preview."
+    },
+    ExitCode.REFUSED
+  );
+}
 async function assertMigrationIdentity(path, expected) {
   if (!equalIdentity2(await migrationLstat(path), expected))
     migrationFailure2(path, "A migration entry changed identity.");
@@ -9104,6 +9206,7 @@ async function removeMigrationTree(path, expected) {
   const currentTree = await captureMigrationTree(path);
   if (!currentTree) return;
   await assertMigrationIdentity(path, expected.root);
+  refuseExcludedRemoval(path, currentTree);
   for (const current of currentTree.evidence.entries) {
     const known = expected.entries.find((entry3) => entry3.path === current.path);
     if (!known || JSON.stringify(known) !== JSON.stringify(current))
@@ -9210,6 +9313,7 @@ async function publishMigrationOperation(operation) {
   } else {
     if (destination) {
       await assertMigrationTree(operation.path, operation.before);
+      refuseExcludedRemoval(operation.path, destination);
       if (!operation.parked || parked)
         migrationFailure2(operation.path, "Cannot park the original migration entry safely.");
       await assertMigrationTree(operation.parked, null);
@@ -10356,7 +10460,7 @@ async function migrateManifest(options, nameMap = {}) {
 
 // src/core/migration-registry.ts
 import { createHash as createHash10 } from "node:crypto";
-import { lstat as lstat18, readdir as readdir18, realpath as realpath20 } from "node:fs/promises";
+import { lstat as lstat18, readdir as readdir19, realpath as realpath20 } from "node:fs/promises";
 import { basename as basename8, dirname as dirname19, isAbsolute as isAbsolute10, join as join29, relative as relative13, sep as sep9 } from "node:path";
 import { parse as parseToml7, stringify as stringifyToml2 } from "smol-toml";
 function record8(value) {
@@ -10374,7 +10478,7 @@ function payloadDigest(entries) {
 async function sameCaseOnlyEntry(source, destination, before) {
   if (dirname19(source) !== dirname19(destination) || basename8(source) === basename8(destination) || basename8(source).toLowerCase() !== basename8(destination).toLowerCase())
     return false;
-  const names2 = await readdir18(dirname19(source));
+  const names2 = await readdir19(dirname19(source));
   if (!names2.includes(basename8(source)) || names2.includes(basename8(destination))) return false;
   const destinationTree = await captureMigrationTree(destination);
   return JSON.stringify(destinationTree?.evidence) === JSON.stringify(before);
@@ -10454,6 +10558,26 @@ function refuse2(path, code, message) {
     ExitCode.REFUSED
   );
 }
+var runtimeContentFix = "Remove only verified generated entries (their tools rebuild them), or move them outside the composition, then rerun the migration preview.";
+function runtimeContentMessage(holder) {
+  return `A ${holder} contains generated build, cache, or runtime content that migration never carries or removes.`;
+}
+function hiddenPath(path) {
+  return path.split(sep9).some((part) => part.startsWith(".") || part.startsWith("_"));
+}
+function skippedDetail(skipped, where) {
+  return skipped.length ? [
+    `Generated build, cache, or runtime entries ${where} are not definition content: they are not copied, not carried, and stay at the source: ${skipped.join(", ")}`
+  ] : [];
+}
+function runtimeContent(path, holder) {
+  fail(
+    "E_MIGRATION_RUNTIME_CONTENT",
+    runtimeContentMessage(holder),
+    { path, fix: runtimeContentFix },
+    ExitCode.REFUSED
+  );
+}
 function safeKey(value) {
   const parts = value.split("/");
   return !!value && !value.includes("\\") && ![...value].some(
@@ -10588,21 +10712,15 @@ async function importDefinition(plan2, lexicalSource, preferred, selected) {
   if (metadata2.provenance) plan2.provenance[lexicalSource] = metadata2.provenance;
   const tree = selected ? {
     entries: selected,
-    evidence: { ...captured.evidence, digest: migrationTreeDigest(selected) }
+    evidence: { ...captured.evidence, digest: migrationTreeDigest(selected) },
+    excluded: captured.excluded
   } : captured;
-  const runtime = tree.entries.find(
-    (entry3) => entry3.path.split(sep9).some((part) => part === "__pycache__" || /\.py[co]$/.test(part))
-  );
-  if (runtime)
-    fail(
-      "E_MIGRATION_RUNTIME_CONTENT",
-      "A candidate definition contains generated Python cache content.",
-      {
-        path: join29(lexicalSource, runtime.path),
-        fix: "Remove only verified generated Python cache entries from the source, then rerun the migration preview."
-      },
-      ExitCode.REFUSED
-    );
+  const skipped = selected ? captured.excluded.filter(
+    (item2) => selected.some(
+      (entry3) => entry3.kind === "directory" && entry3.path !== "" && item2.startsWith(`${entry3.path}${sep9}`)
+    )
+  ) : captured.excluded;
+  plan2.skipped.set(lexicalSource, skipped);
   const expected = mapped(plan2.options.mapping?.digests, plan2, lexicalSource) ?? mapped(plan2.options.mapping?.digests, plan2, source);
   if (expected !== void 0 && expected !== tree.evidence.digest)
     refuse2(
@@ -10655,7 +10773,8 @@ async function importDefinition(plan2, lexicalSource, preferred, selected) {
       details: [
         `source: ${lexicalSource}`,
         `canonical name: ${name}`,
-        "All captured definition bytes, support entries, modes, and provenance are preserved; internal absolute links are made portable."
+        skipped.length ? "Every authored definition byte, support entry, mode, and provenance is preserved; internal absolute links are made portable." : "All captured definition bytes, support entries, modes, and provenance are preserved; internal absolute links are made portable.",
+        ...skippedDetail(skipped, "at this source")
       ],
       dependsOn: []
     };
@@ -10675,7 +10794,8 @@ async function importDefinition(plan2, lexicalSource, preferred, selected) {
     beforeDigest: tree.evidence.digest,
     afterDigest: reused.digest,
     details: [
-      dependency ? "Definition is retained at its canonical destination before its original composition entry is replaced." : "Existing canonical authored payload is identical; differing original provenance is preserved separately in the migration receipt."
+      dependency ? "Definition is retained at its canonical destination before its original composition entry is replaced." : "Existing canonical authored payload is identical; differing original provenance is preserved separately in the migration receipt.",
+      ...skippedDetail(skipped, "at this source")
     ],
     dependsOn: dependency ? [dependency] : []
   });
@@ -10835,6 +10955,8 @@ async function composition(plan2, path, kind2) {
           "E_MIGRATION_REFERENCE",
           "A null reference mapping cannot remove a real definition; name and preserve its content instead."
         );
+      const generated = before.excluded.find((item3) => item3.startsWith(`${definition}${sep9}`));
+      if (generated !== void 0) runtimeContent(join29(path, generated), "candidate definition");
       const skill2 = await importDefinition(plan2, lexical, basename8(definition));
       members2.push({
         relativePath: definition,
@@ -10849,7 +10971,9 @@ async function composition(plan2, path, kind2) {
     }
   }
   for (const entry3 of tree.entries) {
-    if (!entry3.path || entry3.kind !== "link" || definitionRoots.some((parent) => entry3.path.startsWith(`${parent}${sep9}`)))
+    if (!entry3.path || entry3.kind !== "link" || // A hidden link is outside the composition's namespace: never a member, never rewritten,
+    // and its referent (often installer-owned) is never imported into the catalog.
+    hiddenPath(entry3.path) || definitionRoots.some((parent) => entry3.path.startsWith(`${parent}${sep9}`)))
       continue;
     const lexical = join29(path, entry3.path);
     const explicitReference = mapped(plan2.options.mapping?.references, plan2, lexical);
@@ -10913,7 +11037,7 @@ async function composition(plan2, path, kind2) {
     if (kind2 === "pack" || dirname19(member.relativePath) !== ".")
       entries.push(memberLink(plan2, destination, member.relativePath, member.name));
   }
-  let selected = members2.map((member) => member.name);
+  let selected = members2.filter((member) => !hiddenPath(member.relativePath)).map((member) => member.name);
   if (kind2 === "pack") {
     const declared = [];
     if (raw.freeform !== void 0 && (!record8(raw.freeform) || !Array.isArray(raw.freeform.skills) || !raw.freeform.skills.every((item3) => typeof item3 === "string")))
@@ -11065,6 +11189,18 @@ async function composition(plan2, path, kind2) {
   entries = entries.sort((a, b) => a.path.localeCompare(b.path));
   const afterDigest = migrationTreeDigest(entries);
   const changed3 = destination !== path || before.evidence.digest !== afterDigest;
+  if (changed3)
+    for (const item3 of before.excluded) {
+      if (definitionRoots.some((root) => item3.startsWith(`${root}${sep9}`))) continue;
+      finding(
+        plan2,
+        join29(path, item3),
+        "E_MIGRATION_RUNTIME_CONTENT",
+        runtimeContentMessage("composition"),
+        runtimeContentFix
+      );
+      hasBlocker = true;
+    }
   const dependencies = [
     ...new Set(members2.flatMap((member) => member.dependency ? [member.dependency] : []))
   ];
@@ -11132,12 +11268,13 @@ async function prepare2(registry, options, previousNames = {}, previousProvenanc
     provenance: { ...previousProvenance },
     externalRoots: new Set(previousExternalRoots),
     canonical: /* @__PURE__ */ new Map(),
-    imported: /* @__PURE__ */ new Map()
+    imported: /* @__PURE__ */ new Map(),
+    skipped: /* @__PURE__ */ new Map()
   };
   const catalog = join29(registry.root, "all-skills");
   const links = [];
   const retiredAliases = [];
-  for (const entry3 of (await readdir18(catalog, { withFileTypes: true })).sort(
+  for (const entry3 of (await readdir19(catalog, { withFileTypes: true })).sort(
     (a, b) => a.name.localeCompare(b.name)
   )) {
     interrupted2(options);
@@ -11210,7 +11347,10 @@ async function prepare2(registry, options, previousNames = {}, previousProvenanc
           state: "ready",
           beforeDigest: before.evidence.digest,
           afterDigest: skill2.digest,
-          details: [
+          details: plan2.skipped.get(path)?.length ? [
+            "Identical authored definition content is retained at the canonical target; retire only this exact alias after composition rewrites.",
+            ...skippedDetail(plan2.skipped.get(path) ?? [], "at the alias source")
+          ] : [
             "Identical definition content is retained at the canonical target; retire only this exact alias after composition rewrites."
           ],
           dependsOn: skill2.dependency ? [skill2.dependency] : []
@@ -11240,7 +11380,7 @@ async function prepare2(registry, options, previousNames = {}, previousProvenanc
       blocked3(plan2, root, new Error("Composition family root must be a real directory."));
       continue;
     }
-    for (const entry3 of (await readdir18(root, { withFileTypes: true })).sort(
+    for (const entry3 of (await readdir19(root, { withFileTypes: true })).sort(
       (a, b) => a.name.localeCompare(b.name)
     )) {
       const path = join29(root, entry3.name);
@@ -11262,7 +11402,7 @@ async function prepare2(registry, options, previousNames = {}, previousProvenanc
         else if (await inspectPath(join29(path, "pack.toml"))) await composition(plan2, path, "pack");
         else {
           const versions = [];
-          for (const child of await readdir18(path, { withFileTypes: true }))
+          for (const child of await readdir19(path, { withFileTypes: true }))
             if ((child.isDirectory() || child.isSymbolicLink()) && await inspectPath(join29(path, child.name, "pack.toml")))
               versions.push(child.name);
           if (versions.length)
@@ -11532,7 +11672,7 @@ async function migrateRegistry(options = {}) {
 // src/core/migration-sources.ts
 import { createHash as createHash11, randomUUID as randomUUID8 } from "node:crypto";
 import { constants as constants9 } from "node:fs";
-import { link as link6, open as open12, readdir as readdir19, unlink as unlink8 } from "node:fs/promises";
+import { link as link6, open as open12, readdir as readdir20, unlink as unlink8 } from "node:fs/promises";
 import { basename as basename9, join as join30 } from "node:path";
 var binding3 = { namespace: "migrations", targetParts: ["all-skills", "sources.toml"] };
 var prefix = ".skillex-tmp-migrate-sources-";
@@ -11551,7 +11691,7 @@ function refused2(path, message) {
 async function validateProvenance(registry, text2, path) {
   const sources = parseVendorSourcesText(text2, path);
   const catalog = join30(registry.root, "all-skills");
-  for (const name of (await readdir19(catalog)).sort()) {
+  for (const name of (await readdir20(catalog)).sort()) {
     const skill2 = join30(catalog, name);
     if (!(await inspectPath(skill2))?.isDirectory() || !await inspectPath(join30(skill2, "SKILL.md")))
       continue;
@@ -11583,7 +11723,7 @@ async function migrateSources(input) {
       const old = snapshot3.document?.data;
       if (old && (old.version !== 1 || typeof old.source !== "string" || typeof old.digest !== "string" || !/^sha256:[a-f0-9]{64}$/.test(old.digest) || !["pending", "verified"].includes(old.phase) || typeof old.stage !== "string" || basename9(old.stage) !== old.stage || !new RegExp(`^${prefix}[a-f0-9-]{36}$`).test(old.stage) || !/^\d+$/.test(old.dev) || !/^\d+$/.test(old.ino)))
         refused2(snapshot3.path, "The source migration receipt is malformed.");
-      const artifacts = (await readdir19(catalog)).filter((name) => name.startsWith(prefix));
+      const artifacts = (await readdir20(catalog)).filter((name) => name.startsWith(prefix));
       const unknown = artifacts.filter((name) => name !== old?.stage || old.phase !== "pending");
       if (unknown.length)
         return makeResult("migrate sources", data2, {
@@ -11883,10 +12023,94 @@ async function migrate(input = {}) {
 
 // src/core/profile-sync.ts
 import { randomUUID as randomUUID9 } from "node:crypto";
-import { constants as constants10 } from "node:fs";
-import { mkdir as mkdir10, open as open13, readdir as readdir20, realpath as realpath22, rename as rename8, symlink as symlink6, unlink as unlink9 } from "node:fs/promises";
-import { join as join31, resolve as resolve17 } from "node:path";
+import { constants as constants11 } from "node:fs";
+import { mkdir as mkdir10, open as open14, readdir as readdir21, realpath as realpath22, rename as rename8, symlink as symlink6, unlink as unlink9 } from "node:fs/promises";
+import { join as join32, resolve as resolve17 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual6 } from "node:util";
+
+// src/core/profile-policy.ts
+import { constants as constants10 } from "node:fs";
+import { open as open13, readFile as readFile12 } from "node:fs/promises";
+import { join as join31 } from "node:path";
+import { parseDocument as parseDocument3 } from "yaml";
+var metadataFiles = /* @__PURE__ */ new Set([
+  ".usage.json",
+  ".usage.json.lock",
+  ".curator_state",
+  ".curator_suppressed",
+  ".sync_state"
+]);
+var metadataDirectories = /* @__PURE__ */ new Set([".curator_backups"]);
+function hermesMetadata(item2) {
+  if (item2.kind === "file") return metadataFiles.has(item2.name);
+  if (item2.kind === "directory") return metadataDirectories.has(item2.name);
+  return false;
+}
+function refuse3(path, message) {
+  return fail(
+    "E_PROFILE_SKILLEX_ONLY",
+    message,
+    {
+      path,
+      fix: "Preserve foreign content outside discovery roots; clear skills.external_dirs through the locked config renderer, then preview skillex profile sync NAME --project PATH --skillex-only. Never delete or adopt local payloads implicitly."
+    },
+    ExitCode.REFUSED
+  );
+}
+async function strictProfile(profile, options) {
+  if (options.skillexOnly !== void 0 && typeof options.skillexOnly !== "boolean")
+    refuse3(profile.root, "skillexOnly must be boolean.");
+  const marker = await entry2(join31(profile.root, ".skillex-only"));
+  if (marker && !marker.info.isFile())
+    refuse3(marker.path, "The strict policy marker must be a regular file.");
+  return options.skillexOnly === true || marker !== void 0;
+}
+async function assertStrictProfile(profile, options, local) {
+  if (!await strictProfile(profile, options)) return false;
+  for (const item2 of local)
+    if (!hermesMetadata(item2))
+      refuse3(item2.path, `Skillex-only profile contains unowned entry ${item2.name}.`);
+  const path = join31(profile.root, "config.yaml");
+  const config = await entry2(path);
+  if (config) {
+    if (!config.info.isFile())
+      refuse3(path, "Strict profile config must be a regular generated file.");
+    const document = parseDocument3(await readFile12(path, "utf8"), { uniqueKeys: true });
+    if (document.errors.length) refuse3(path, "Cannot validate strict skills configuration.");
+    const dirs = document.toJS()?.skills?.external_dirs;
+    if (dirs !== void 0 && (!Array.isArray(dirs) || dirs.length))
+      refuse3(path, "Skillex-only profiles require skills.external_dirs: [].");
+  }
+  const optOut = await entry2(join31(profile.root, ".no-bundled-skills"));
+  if (optOut && !optOut.info.isFile())
+    refuse3(optOut.path, "Bundled opt-out marker must be a regular file.");
+  return true;
+}
+async function publishStrictPolicy(profile) {
+  for (const name of [".no-bundled-skills", ".skillex-only"]) {
+    const path = join31(profile.root, name);
+    const existing = await entry2(path);
+    if (existing) {
+      if (!existing.info.isFile()) refuse3(path, "Policy markers must be regular files.");
+      continue;
+    }
+    const handle = await open13(
+      path,
+      constants10.O_WRONLY | constants10.O_CREAT | constants10.O_EXCL | constants10.O_NOFOLLOW,
+      384
+    );
+    try {
+      await handle.writeFile(
+        "Skillex owns this PM skill projection. Use skillex profile sync; no local installs.\n"
+      );
+      await handle.sync();
+    } finally {
+      await handle.close();
+    }
+  }
+}
+
+// src/core/profile-sync.ts
 function refused3(code, message, path, fix) {
   fail(code, message, { path, fix }, ExitCode.REFUSED);
 }
@@ -11905,14 +12129,14 @@ function receiptOptions(profile, options, scopes = []) {
   const { home, cwd } = normalized;
   const expanded = (value) => resolve17(
     cwd,
-    value === "~" ? home : value.startsWith("~/") ? join31(home, value.slice(2)) : value
+    value === "~" ? home : value.startsWith("~/") ? join32(home, value.slice(2)) : value
   );
   return {
     ...normalized,
     forbiddenRoots: [
       .../* @__PURE__ */ new Set([
         profile.root,
-        join31(home, ".agents"),
+        join32(home, ".agents"),
         ...options.project ? [expanded(options.project)] : [],
         ...options.registryRoot ? [expanded(options.registryRoot)] : [],
         ...scopes.flatMap((scope) => [
@@ -11974,7 +12198,7 @@ async function resolveProjection(options) {
     }
   const locations = /* @__PURE__ */ new Map();
   for (const scope of scopes) {
-    locations.set(join31(scope.registry.root, "all-skills"), "catalog");
+    locations.set(join32(scope.registry.root, "all-skills"), "catalog");
     if (scope.pack) locations.set(scope.pack.path, "pack");
   }
   const sources = [];
@@ -12000,8 +12224,8 @@ async function observations(profile, state) {
       "Use the explicit migrate workflow to replace this whole-root alias or conflicting file while preserving profile content."
     );
   if (root)
-    for (const name of (await readdir20(profile.skillsRoot)).sort()) {
-      const path = join31(profile.skillsRoot, name);
+    for (const name of (await readdir21(profile.skillsRoot)).sort()) {
+      const path = join32(profile.skillsRoot, name);
       const actual = await entry2(path);
       if (!actual) continue;
       entries.set(name, actual);
@@ -12053,7 +12277,7 @@ async function buildWork(profile, state, options) {
   for (const scope of projection.scopes) {
     for (const protectedRoot of [
       scope.registry.root,
-      ...scope.scope === "project" ? [scope.root] : [join31(scope.root, ".agents")]
+      ...scope.scope === "project" ? [scope.root] : [join32(scope.root, ".agents")]
     ])
       if (within2(profile.skillsRoot, protectedRoot) || within2(protectedRoot, profile.skillsRoot))
         refused3(
@@ -12073,18 +12297,19 @@ async function buildWork(profile, state, options) {
       );
   state = await readProfileState(profile, receiptOptions(profile, options, projection.scopes));
   const observed = await observations(profile, state);
+  await assertStrictProfile(profile, options, observed.local);
   const links = { ...state.data.links };
   const changes = [];
   if (!observed.root) changes.push({ action: "mkdir", path: profile.skillsRoot });
   for (const [name, claim2] of Object.entries(links))
     if (!owned2(observed.entries.get(name), claim2)) {
       delete links[name];
-      changes.push({ action: "release", name, path: join31(profile.skillsRoot, name) });
+      changes.push({ action: "release", name, path: join32(profile.skillsRoot, name) });
     }
   const candidates = [];
   const desiredNames = new Set(projection.desired.map((desired) => desired.name));
   for (const desired of projection.desired) {
-    const path = join31(profile.skillsRoot, desired.name);
+    const path = join32(profile.skillsRoot, desired.name);
     const actual = observed.entries.get(desired.name);
     const recorded = claim(links, desired.name);
     const state2 = actual ? recorded ? lexicalTarget(path, actual.raw ?? "") === desired.target ? "unchanged" : "update" : "shadowed" : "create";
@@ -12101,7 +12326,7 @@ async function buildWork(profile, state, options) {
   }
   for (const name of Object.keys(links).sort())
     if (!desiredNames.has(name))
-      changes.push({ action: "prune", name, path: join31(profile.skillsRoot, name) });
+      changes.push({ action: "prune", name, path: join32(profile.skillsRoot, name) });
   const next = {
     version: 1,
     root: observed.root ? identity(observed.root) : null,
@@ -12139,6 +12364,7 @@ async function inspectProfile(profile, options = {}) {
   }
   try {
     preserved = (await observations(profile, state)).local;
+    await assertStrictProfile(profile, options, preserved);
   } catch (error) {
     const failure6 = asFailure(error);
     findings.push(...failure6.findings);
@@ -12190,9 +12416,9 @@ async function inspectProfile(profile, options = {}) {
 }
 async function flush3(path, expected) {
   await requireIdentity(path, expected);
-  const handle = await open13(
+  const handle = await open14(
     path,
-    constants10.O_RDONLY | constants10.O_DIRECTORY | constants10.O_NOFOLLOW
+    constants11.O_RDONLY | constants11.O_DIRECTORY | constants11.O_NOFOLLOW
   );
   try {
     if (!matches2({ path, info: await handle.stat({ bigint: true }) }, expected))
@@ -12237,7 +12463,7 @@ async function recoverProfile(profile, state, options, mark, findings) {
   if (!pending || !root) return state;
   checkProfileSignal(options);
   await rootGuard(profile, root);
-  const path = join31(profile.skillsRoot, pending.name);
+  const path = join32(profile.skillsRoot, pending.name);
   let current = await entry2(path);
   const parked = await entry2(pending.parked);
   const staged = await entry2(pending.stage);
@@ -12363,8 +12589,8 @@ async function apply2(work, mark, begin) {
         }
       }
       const id = randomUUID9();
-      const stage2 = join31(profile.skillsRoot, `.skillex-tmp-profile-${id}-new`);
-      const parked = join31(profile.skillsRoot, `.skillex-tmp-profile-${id}-old`);
+      const stage2 = join32(profile.skillsRoot, `.skillex-tmp-profile-${id}-new`);
+      const parked = join32(profile.skillsRoot, `.skillex-tmp-profile-${id}-old`);
       await absent(stage2);
       await absent(parked);
       let next;
@@ -12509,7 +12735,7 @@ async function runProfileSync(name, options) {
         { findings, exit: readExit(findings, state.data.pending !== void 0) }
       );
     }
-    if (work && !work.result.changes.length)
+    if (work && !work.result.changes.length && !await strictProfile(profile, options))
       return makeResult(
         "profile sync",
         { ...work.result, project: work.projection.project, dryRun: false, applied },
@@ -12537,6 +12763,8 @@ async function runProfileSync(name, options) {
           });
         }
         await assertProfileIdentity(selected);
+        if (await assertStrictProfile(selected, options, (await observations(selected, state)).local))
+          await publishStrictPolicy(selected);
         const currentProfile = await discoverProfile(name, options);
         if (currentProfile.root !== selected.root || currentProfile.skillsRoot !== selected.skillsRoot)
           refused3(
@@ -12574,21 +12802,21 @@ async function runProfileSync(name, options) {
         const latest = await readProfileState(profile, receiptOptions(profile, options));
         const pending = latest.data.pending;
         if (pending) {
-          const current = await entry2(join31(profile.skillsRoot, pending.name));
+          const current = await entry2(join32(profile.skillsRoot, pending.name));
           if (pending.next && matches2(current, pending.next) && !applied.some((change2) => change2.path === current?.path))
             applied.push({
               action: pending.previous ? "update" : "create",
               name: pending.name,
-              path: join31(profile.skillsRoot, pending.name),
+              path: join32(profile.skillsRoot, pending.name),
               target: pending.next.raw
             });
           if (!pending.next && !current && pending.previous && matches2(await entry2(pending.parked), pending.previous) && !applied.some(
-            (change2) => change2.path === join31(profile.skillsRoot, pending.name)
+            (change2) => change2.path === join32(profile.skillsRoot, pending.name)
           ))
             applied.push({
               action: "prune",
               name: pending.name,
-              path: join31(profile.skillsRoot, pending.name)
+              path: join32(profile.skillsRoot, pending.name)
             });
         }
         state = latest;
@@ -12730,13 +12958,13 @@ async function syncProfile(name, options) {
 
 // src/core/selection-commands.ts
 import { realpath as realpath24, stat as stat5 } from "node:fs/promises";
-import { dirname as dirname21, join as join33, parse as parse4, resolve as resolve19 } from "node:path";
+import { dirname as dirname21, join as join34, parse as parse4, resolve as resolve19 } from "node:path";
 
 // src/core/selection-manifest.ts
 import { randomUUID as randomUUID10 } from "node:crypto";
-import { constants as constants11 } from "node:fs";
-import { link as link7, lstat as lstat19, mkdir as mkdir11, open as open14, realpath as realpath23, rename as rename9, rmdir as rmdir6, unlink as unlink10 } from "node:fs/promises";
-import { dirname as dirname20, join as join32, resolve as resolve18 } from "node:path";
+import { constants as constants12 } from "node:fs";
+import { link as link7, lstat as lstat19, mkdir as mkdir11, open as open15, realpath as realpath23, rename as rename9, rmdir as rmdir6, unlink as unlink10 } from "node:fs/promises";
+import { dirname as dirname20, join as join33, resolve as resolve18 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual7 } from "node:util";
 var SelectionManifestWriteError = class extends SkillexError {
   constructor(error, published) {
@@ -12828,13 +13056,13 @@ async function contextFor3(root) {
       unsafe2(path, "A scope ancestor is missing or is not a real directory.");
     parents2.set(path, info2);
   }
-  const agents = join32(canonical2, ".agents");
+  const agents = join33(canonical2, ".agents");
   const info = await inspect5(agents);
   if (info) {
     if (!info.isDirectory()) unsafe2(agents, "The scope .agents path must be a real directory.");
     parents2.set(agents, info);
   }
-  return { root: canonical2, agents, path: join32(agents, "skills.json"), parents: parents2 };
+  return { root: canonical2, agents, path: join33(agents, "skills.json"), parents: parents2 };
 }
 async function assertParents4(context2) {
   for (const [path, expected] of context2.parents) {
@@ -12851,7 +13079,7 @@ async function readStored2(path) {
   const first = await inspect5(path);
   if (!first) return void 0;
   if (!first.isFile()) unsafe2(path, "The selection declaration must be a real regular file.");
-  const handle = await open14(path, constants11.O_RDONLY | constants11.O_NOFOLLOW);
+  const handle = await open15(path, constants12.O_RDONLY | constants12.O_NOFOLLOW);
   try {
     const before = await handle.stat({ bigint: true });
     if (!before.isFile() || !sameObject2(first, before))
@@ -12923,9 +13151,9 @@ async function assertPrevious2(context2, previous) {
   return current;
 }
 async function flushDirectory2(path, identity5) {
-  const handle = await open14(
+  const handle = await open15(
     path,
-    constants11.O_RDONLY | constants11.O_DIRECTORY | constants11.O_NOFOLLOW
+    constants12.O_RDONLY | constants12.O_DIRECTORY | constants12.O_NOFOLLOW
   );
   try {
     if (!sameObject2(identity5, await handle.stat({ bigint: true })))
@@ -12993,11 +13221,11 @@ async function writeSelectionManifest(previous, raw) {
       await flushDirectory2(context2.root, rootIdentity);
     }
     await assertPrevious2(context2, prior);
-    const path = join32(context2.agents, `.skillex-tmp-${randomUUID10()}`);
+    const path = join33(context2.agents, `.skillex-tmp-${randomUUID10()}`);
     const mode = prior.file ? Number(prior.file.identity.mode & 0o7777n) : 420;
-    const file = await open14(
+    const file = await open15(
       path,
-      constants11.O_WRONLY | constants11.O_CREAT | constants11.O_EXCL | constants11.O_NOFOLLOW,
+      constants12.O_WRONLY | constants12.O_CREAT | constants12.O_EXCL | constants12.O_NOFOLLOW,
       mode
     );
     try {
@@ -13109,7 +13337,7 @@ async function directory(value, cwd, home) {
     fail("E_PROJECT_ROOT", "A project or working directory must be a nonempty path.", {
       fix: "Pass an existing directory as --project or cwd."
     });
-  const expanded = value === "~" ? home : value.startsWith("~/") ? join33(home, value.slice(2)) : value;
+  const expanded = value === "~" ? home : value.startsWith("~/") ? join34(home, value.slice(2)) : value;
   const path = resolve19(cwd, expanded);
   const info = await inspectPath(path);
   if (!info || !(await stat5(path)).isDirectory())
@@ -13122,7 +13350,7 @@ async function directory(value, cwd, home) {
 async function nearestGitRoot(cwd, home) {
   let current = cwd;
   while (current !== home && current !== parse4(current).root) {
-    if (await inspectPath(join33(current, ".git"))) return current;
+    if (await inspectPath(join34(current, ".git"))) return current;
     current = dirname21(current);
   }
   return void 0;
@@ -13289,7 +13517,7 @@ async function prepare3(options, edit) {
         ...options,
         home: target2.home,
         forbiddenRoots: [
-          join33(target2.root, ".agents"),
+          join34(target2.root, ".agents"),
           ...target2.scope === "project" ? [target2.root] : []
         ]
       });
@@ -13443,8 +13671,8 @@ async function setInheritance(enabled, options = {}) {
 }
 
 // src/core/sets.ts
-import { readdir as readdir21 } from "node:fs/promises";
-import { join as join34 } from "node:path";
+import { readdir as readdir22 } from "node:fs/promises";
+import { join as join35 } from "node:path";
 function validateName(name) {
   parseManifest({ sets: [{ name }] }, "set name");
 }
@@ -13461,12 +13689,12 @@ async function listSets(options = {}) {
   const command = "set list";
   try {
     const registry = await discoverRegistry(options);
-    const path = join34(registry.root, "sets");
+    const path = join35(registry.root, "sets");
     const sets = [];
     const failures = [];
     if (await inspectPath(path)) {
       await requireDirectory(path, "E_SET_MISSING");
-      for (const entry3 of (await readdir21(path, { withFileTypes: true })).sort(
+      for (const entry3 of (await readdir22(path, { withFileTypes: true })).sort(
         (a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0
       )) {
         if (entry3.name.startsWith(".") || entry3.name.startsWith("_") || !entry3.isDirectory() && !entry3.isSymbolicLink())
@@ -13474,7 +13702,7 @@ async function listSets(options = {}) {
         try {
           sets.push(await readSet(registry.root, entry3.name));
         } catch (error) {
-          failures.push(collectedError(error, join34(path, entry3.name)));
+          failures.push(collectedError(error, join35(path, entry3.name)));
         }
       }
     }
@@ -13496,7 +13724,7 @@ async function showSet(name, options = {}) {
 async function prepareSet(name, names2, operation, options) {
   validateName(name);
   const registry = await discoverRegistry(options);
-  const path = join34(registry.root, "sets", name);
+  const path = join35(registry.root, "sets", name);
   const exists = await inspectPath(path);
   const previous = operation === "create" && !exists ? { kind: "set", name, path, skills: [] } : await readSet(registry.root, name);
   const requested = await requestedSkills(registry.root, names2, path);
@@ -13512,10 +13740,10 @@ async function prepareSet(name, names2, operation, options) {
   const plan2 = await newPlan(registry, composition2, options.dryRun === true);
   await planDirectory(plan2, path);
   for (const skill2 of previous.skills)
-    await inspectCanonicalLink(plan2, join34(path, skill2.name), skill2.path);
+    await inspectCanonicalLink(plan2, join35(path, skill2.name), skill2.path);
   for (const [member, target2] of requested) {
-    if (operation === "add") await planLink(plan2, join34(path, member), target2);
-    else if (operation === "remove") await planUnlink(plan2, join34(path, member), target2);
+    if (operation === "add") await planLink(plan2, join35(path, member), target2);
+    else if (operation === "remove") await planUnlink(plan2, join35(path, member), target2);
   }
   return plan2;
 }
@@ -13530,15 +13758,15 @@ async function removeSetSkills(name, names2, options = {}) {
 }
 
 // src/core/vendor-inspect.ts
-import { readdir as readdir22 } from "node:fs/promises";
-import { join as join35 } from "node:path";
+import { readdir as readdir23 } from "node:fs/promises";
+import { join as join36 } from "node:path";
 
 // src/core/vendor-git.ts
-import { execFile as execFile3 } from "node:child_process";
+import { execFile as execFile4 } from "node:child_process";
 import { realpath as realpath25 } from "node:fs/promises";
 import { posix } from "node:path";
-import { promisify as promisify2 } from "node:util";
-var execute2 = promisify2(execFile3);
+import { promisify as promisify3 } from "node:util";
+var execute3 = promisify3(execFile4);
 var oidPattern = /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/;
 function vendorInterrupted(options) {
   if (options.signal?.aborted) {
@@ -13568,7 +13796,7 @@ function gitEnvironment(options) {
 async function git(root, args2, options, missingRef = false, allowAbsent = false) {
   vendorInterrupted(options);
   try {
-    const result = await execute2(
+    const result = await execute3(
       "git",
       ["--no-lazy-fetch", "-c", "protocol.allow=never", "-C", root, ...args2],
       {
@@ -13893,19 +14121,19 @@ var Observation = class {
 async function recordedInventory(manifest, observation, options) {
   const recorded = /* @__PURE__ */ new Map();
   const failed2 = /* @__PURE__ */ new Set();
-  const catalog = join35(manifest.registry.root, "all-skills");
-  for (const entry3 of (await readdir22(catalog, { withFileTypes: true })).sort(
+  const catalog = join36(manifest.registry.root, "all-skills");
+  for (const entry3 of (await readdir23(catalog, { withFileTypes: true })).sort(
     (a, b) => a.name.localeCompare(b.name)
   )) {
     checkVendorSignal(options);
     if (!isSkillName(entry3.name) || !entry3.isDirectory()) continue;
-    const path = join35(catalog, entry3.name);
+    const path = join36(catalog, entry3.name);
     try {
       const receipt2 = await readVendorProvenance(path);
       if (receipt2) recorded.set(entry3.name, receipt2);
     } catch (error) {
       failed2.add(entry3.name);
-      observation.capture(error, join35(path, ".source.yaml"));
+      observation.capture(error, join36(path, ".source.yaml"));
     }
   }
   return { recorded, failed: failed2 };
@@ -13922,7 +14150,7 @@ function emptySkill(source, manifest, name, upstreamCommit) {
   return {
     name,
     source: source.name,
-    path: join35(manifest.registry.root, "all-skills", name),
+    path: join36(manifest.registry.root, "all-skills", name),
     state: "unknown",
     recordedCommit: null,
     upstreamCommit,
@@ -14303,9 +14531,9 @@ async function inspectVendorStatus(options = {}) {
 
 // src/core/vendor-sync.ts
 import { randomUUID as randomUUID11 } from "node:crypto";
-import { chmod as chmod3, lstat as lstat20, mkdir as mkdir12, open as open15, readdir as readdir23, rename as rename10 } from "node:fs/promises";
-import { dirname as dirname22, join as join36 } from "node:path";
-function refuse3(code, message, path, fix) {
+import { chmod as chmod3, lstat as lstat20, mkdir as mkdir12, open as open16, readdir as readdir24, rename as rename10 } from "node:fs/promises";
+import { dirname as dirname22, join as join37 } from "node:path";
+function refuse4(code, message, path, fix) {
   fail(code, message, { path, fix }, ExitCode.REFUSED);
 }
 function attributed(provenance, source) {
@@ -14315,21 +14543,21 @@ function baseline(provenance) {
   return provenance.digest !== null && (provenance.digestFormat === null || ["skillex-tree-v1", "skillex-tree-v1+symlinks"].includes(provenance.digestFormat));
 }
 async function planSkill(source, skill2, commit, extractedAt, catalog, options) {
-  const path = join36(catalog, skill2.name);
+  const path = join37(catalog, skill2.name);
   const info = await vendorLstat(path);
   let before = null;
   let provenance = null;
   let action = "create";
   if (info) {
     if (info.isSymbolicLink())
-      refuse3(
+      refuse4(
         "E_VENDOR_DESTINATION_LINK",
         "Vendor sync will not replace a linked canonical destination.",
         path,
         "Use the explicit migrate workflow to account for this link and its consumers before vendoring."
       );
     if (!info.isDirectory())
-      refuse3(
+      refuse4(
         "E_VENDOR_DESTINATION_TYPE",
         "The canonical destination is not a real skill directory.",
         path,
@@ -14339,21 +14567,21 @@ async function planSkill(source, skill2, commit, extractedAt, catalog, options)
     const digest = await digestVendorTree(path);
     if (provenance?.type === "vendored") {
       if (!attributed(provenance, source))
-        refuse3(
+        refuse4(
           "E_VENDOR_FOREIGN_SOURCE",
           "The canonical skill is attributed to a different source.",
           path,
           "Correct the declaration or migrate the existing provenance explicitly; adopt does not transfer another vendor's ownership."
         );
       if (!baseline(provenance) && !options.discardLocalEdits)
-        refuse3(
+        refuse4(
           "E_VENDOR_BASELINE_MISSING",
           "The managed skill has no supported baseline digest proving unchanged content.",
           path,
           "Preserve or commit local content, then explicitly use --discard-local-edits to replace this attributed skill; it cannot be implicitly pruned."
         );
       if (baseline(provenance) && (digest !== provenance.digest || provenance.modifiedLocally) && !options.discardLocalEdits)
-        refuse3(
+        refuse4(
           "E_VENDOR_LOCAL_EDITS",
           "The vendored skill has local content or executable-mode edits.",
           path,
@@ -14362,14 +14590,14 @@ async function planSkill(source, skill2, commit, extractedAt, catalog, options)
       action = digest === skill2.digest && !provenance.modifiedLocally && provenance.digest === skill2.digest && provenance.upstreamCommit === commit && provenance.upstreamTree === skill2.tree && provenance.upstreamPath === skill2.upstreamPath && provenance.upstreamVersion === source.version && provenance.extractedAt !== null && baseline(provenance) ? "unchanged" : "update";
     } else {
       if (!options.adopt)
-        refuse3(
+        refuse4(
           "E_VENDOR_UNMANAGED",
           "The canonical skill is not managed by this vendor source.",
           path,
           "Use --adopt to record ownership; if bytes or modes differ from upstream, also use --discard-local-edits after preserving them."
         );
       if (digest !== skill2.digest && !options.discardLocalEdits)
-        refuse3(
+        refuse4(
           "E_VENDOR_LOCAL_EDITS",
           "Adopting this skill would replace local bytes or executable modes.",
           path,
@@ -14379,14 +14607,14 @@ async function planSkill(source, skill2, commit, extractedAt, catalog, options)
     }
     before = await captureVendorTree(path);
     if (before.root.dev !== String((await lstat20(catalog, { bigint: true })).dev))
-      refuse3(
+      refuse4(
         "E_VENDOR_CROSS_DEVICE",
         "The existing skill is mounted on a different filesystem from catalog staging.",
         path,
         "Move the skill into the catalog filesystem before updating it; vendor replacement requires same-filesystem renames."
       );
     if (before.root.dev !== String(info.dev) || before.root.ino !== String(info.ino))
-      refuse3(
+      refuse4(
         "E_VENDOR_CHANGED",
         "The destination changed during preflight.",
         path,
@@ -14425,7 +14653,7 @@ async function planSkill(source, skill2, commit, extractedAt, catalog, options)
 async function prepare4(options, extractedAt) {
   vendorInterrupted(options);
   const manifest = await readVendorSources(options);
-  const catalog = join36(manifest.registry.root, "all-skills");
+  const catalog = join37(manifest.registry.root, "all-skills");
   const journal = await readVendorJournal(manifest.registry, options);
   const selected = selectVendorSources(manifest, options.sources);
   const sources = [];
@@ -14437,7 +14665,7 @@ async function prepare4(options, extractedAt) {
     const checkout = await resolveVendorCheckout(source, options);
     if (!checkout.root) {
       if (!source.optional)
-        refuse3(
+        refuse4(
           "E_SOURCE_CHECKOUT_MISSING",
           `Local checkout ${source.checkout} is unavailable.`,
           manifest.path,
@@ -14490,7 +14718,7 @@ async function prepare4(options, extractedAt) {
       });
     for (const skill2 of upstream.skills) {
       if (names2.has(skill2.name))
-        refuse3(
+        refuse4(
           "E_VENDOR_DUPLICATE_SKILL",
           `Sources ${names2.get(skill2.name)} and ${source.name} select the same canonical skill.`,
           manifest.path,
@@ -14501,9 +14729,9 @@ async function prepare4(options, extractedAt) {
     }
   }
   if (options.prune) {
-    for (const name of (await readdir23(catalog)).filter(isSkillName).sort()) {
+    for (const name of (await readdir24(catalog)).filter(isSkillName).sort()) {
       if (names2.has(name)) continue;
-      const path = join36(catalog, name);
+      const path = join37(catalog, name);
       if (!(await vendorLstat(path))?.isDirectory()) continue;
       let provenance;
       try {
@@ -14523,14 +14751,14 @@ async function prepare4(options, extractedAt) {
       const source = provenance?.source ? enumerated.get(provenance.source) : void 0;
       if (!provenance || !source || !attributed(provenance, source)) continue;
       if (!baseline(provenance))
-        refuse3(
+        refuse4(
           "E_VENDOR_BASELINE_MISSING",
           "An orphaned managed skill has no supported baseline proving it is safe to prune.",
           path,
           "Restore its verified provenance or remove it explicitly after inspection; --discard-local-edits never authorizes pruning unknown content."
         );
       if (provenance.modifiedLocally || await digestVendorTree(path) !== provenance.digest)
-        refuse3(
+        refuse4(
           "E_VENDOR_LOCAL_EDITS",
           "An orphaned managed skill has local edits and cannot be pruned.",
           path,
@@ -14564,7 +14792,7 @@ async function prepare4(options, extractedAt) {
 }
 async function absent2(path) {
   if (await vendorLstat(path))
-    refuse3(
+    refuse4(
       "E_VENDOR_CHANGED",
       "A destination or recovery path appeared after preflight.",
       path,
@@ -14576,7 +14804,7 @@ async function assertCurrentIntent(prepared, options) {
   const selected = selectVendorSources(current, options.sources);
   const expected = selectVendorSources(prepared.manifest, options.sources);
   if (current.registry.root !== prepared.manifest.registry.root || JSON.stringify(selected) !== JSON.stringify(expected))
-    refuse3(
+    refuse4(
       "E_VENDOR_INTENT_CHANGED",
       "The selected vendor declarations changed during staging.",
       prepared.manifest.path,
@@ -14586,7 +14814,7 @@ async function assertCurrentIntent(prepared, options) {
     const checkout = await resolveVendorCheckout(source, options);
     const previous = prepared.result.sources.find((entry3) => entry3.name === source.name);
     if (!previous || checkout.root !== previous.checkout)
-      refuse3(
+      refuse4(
         "E_VENDOR_INTENT_CHANGED",
         "A selected local checkout mapping changed during staging.",
         prepared.manifest.path,
@@ -14595,7 +14823,7 @@ async function assertCurrentIntent(prepared, options) {
   }
 }
 async function syncDirectory2(path) {
-  const handle = await open15(path, "r");
+  const handle = await open16(path, "r");
   try {
     await handle.sync();
   } finally {
@@ -14610,12 +14838,12 @@ async function stage(plan2, path, catalog, options) {
   for (const entry3 of plan2.entries) {
     vendorInterrupted(options);
     await assertVendorIdentity(path, root);
-    const target2 = join36(path, entry3.path);
+    const target2 = join37(path, entry3.path);
     let parent = dirname22(entry3.path);
     while (parent !== ".") {
       const identity5 = parents2.get(parent);
       if (!identity5) throw new Error(`Unprepared vendor content parent: ${parent}`);
-      await assertVendorIdentity(join36(path, parent), identity5);
+      await assertVendorIdentity(join37(path, parent), identity5);
       parent = dirname22(parent);
     }
     if (entry3.kind === "directory") {
@@ -14623,7 +14851,7 @@ async function stage(plan2, path, catalog, options) {
       await chmod3(target2, 493);
       parents2.set(entry3.path, vendorIdentity(await lstat20(target2, { bigint: true })));
     } else if (entry3.kind === "file") {
-      const handle = await open15(target2, "wx", entry3.mode);
+      const handle = await open16(target2, "wx", entry3.mode);
       try {
         await handle.writeFile(entry3.bytes);
         await handle.chmod(entry3.mode);
@@ -14672,7 +14900,7 @@ async function recover2(snapshot3, findings, options, onWrite) {
       if (published) {
         await assertVendorTree(operation.change.path, operation.after);
         if (stageInfo)
-          refuse3(
+          refuse4(
             "E_VENDOR_RECOVERY_CONFLICT",
             "Both the staged and published paths exist for one prepared skill.",
             operation.change.path,
@@ -14680,7 +14908,7 @@ async function recover2(snapshot3, findings, options, onWrite) {
           );
       } else if (destination) {
         if (!operation.before)
-          refuse3(
+          refuse4(
             "E_VENDOR_RECOVERY_CONFLICT",
             "A foreign destination blocks vendor recovery.",
             operation.change.path,
@@ -14688,7 +14916,7 @@ async function recover2(snapshot3, findings, options, onWrite) {
           );
         await assertVendorTree(operation.change.path, operation.before);
         if (parked)
-          refuse3(
+          refuse4(
             "E_VENDOR_RECOVERY_CONFLICT",
             "Both the old destination and its parked path exist.",
             operation.change.path,
@@ -14696,7 +14924,7 @@ async function recover2(snapshot3, findings, options, onWrite) {
           );
       } else if (!parked && operation.before) {
         if (operation.change.action !== "prune")
-          refuse3(
+          refuse4(
             "E_VENDOR_RECOVERY_CONFLICT",
             "The old and new skill directories are both missing.",
             operation.change.path,
@@ -14769,7 +14997,7 @@ async function syncVendorSources(options = {}) {
     initiallyPending = initialJournal.document !== null;
     fallback = {
       registry,
-      manifest: join36(registry.root, "all-skills", "sources.toml"),
+      manifest: join37(registry.root, "all-skills", "sources.toml"),
       dryRun: options.dryRun === true,
       sources: [],
       changes: [],
@@ -14816,7 +15044,7 @@ async function syncVendorSources(options = {}) {
         }
         prepared = await prepare4(options, extractedAt);
         if (prepared.manifest.registry.root !== initialRoot)
-          refuse3(
+          refuse4(
             "E_CATALOG_CHANGED",
             "Registry discovery changed while waiting for its catalog lock.",
             initialRoot,
@@ -14838,8 +15066,8 @@ async function syncVendorSources(options = {}) {
             change: plan2.change,
             before: plan2.before,
             after: null,
-            stage: plan2.change.action === "prune" ? null : join36(journal.catalog, `.skillex-tmp-vendor-${id}-new`),
-            parked: plan2.before ? join36(journal.catalog, `.skillex-tmp-vendor-${id}-old`) : null
+            stage: plan2.change.action === "prune" ? null : join37(journal.catalog, `.skillex-tmp-vendor-${id}-new`),
+            parked: plan2.before ? join37(journal.catalog, `.skillex-tmp-vendor-${id}-old`) : null
           };
         });
         vendorInterrupted(options);
@@ -15371,14 +15599,18 @@ function registerProfileCommands(program2, output2) {
   ).option(
     "--dry-run",
     "Preview links, preserved entries, and receipts without writing or recovering."
+  ).option(
+    "--skillex-only",
+    "Persist strict catalog-only ownership; refuse local skills and external discovery."
   ).action(async (name, _local, command) => {
-    const { project, dryRun } = command.opts();
+    const { project, dryRun, skillexOnly } = command.opts();
     await run2(
       command,
       (options) => syncProfile(name, {
         ...options,
         project,
-        ...dryRun === void 0 ? {} : { dryRun }
+        ...dryRun === void 0 ? {} : { dryRun },
+        ...skillexOnly === void 0 ? {} : { skillexOnly }
       }),
       syncText
     );