@delorenj/skillex 0.1.2 → 0.1.3

package/dist/cli.js

@@ -12023,10 +12023,94 @@ async function migrate(input = {}) {
 
 // src/core/profile-sync.ts
 import { randomUUID as randomUUID9 } from "node:crypto";
-import { constants as constants10 } from "node:fs";
-import { mkdir as mkdir10, open as open13, readdir as readdir21, realpath as realpath22, rename as rename8, symlink as symlink6, unlink as unlink9 } from "node:fs/promises";
-import { join as join31, resolve as resolve17 } from "node:path";
+import { constants as constants11 } from "node:fs";
+import { mkdir as mkdir10, open as open14, readdir as readdir21, realpath as realpath22, rename as rename8, symlink as symlink6, unlink as unlink9 } from "node:fs/promises";
+import { join as join32, resolve as resolve17 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual6 } from "node:util";
+
+// src/core/profile-policy.ts
+import { constants as constants10 } from "node:fs";
+import { open as open13, readFile as readFile12 } from "node:fs/promises";
+import { join as join31 } from "node:path";
+import { parseDocument as parseDocument3 } from "yaml";
+var metadataFiles = /* @__PURE__ */ new Set([
+  ".usage.json",
+  ".usage.json.lock",
+  ".curator_state",
+  ".curator_suppressed",
+  ".sync_state"
+]);
+var metadataDirectories = /* @__PURE__ */ new Set([".curator_backups"]);
+function hermesMetadata(item2) {
+  if (item2.kind === "file") return metadataFiles.has(item2.name);
+  if (item2.kind === "directory") return metadataDirectories.has(item2.name);
+  return false;
+}
+function refuse3(path, message) {
+  return fail(
+    "E_PROFILE_SKILLEX_ONLY",
+    message,
+    {
+      path,
+      fix: "Preserve foreign content outside discovery roots; clear skills.external_dirs through the locked config renderer, then preview skillex profile sync NAME --project PATH --skillex-only. Never delete or adopt local payloads implicitly."
+    },
+    ExitCode.REFUSED
+  );
+}
+async function strictProfile(profile, options) {
+  if (options.skillexOnly !== void 0 && typeof options.skillexOnly !== "boolean")
+    refuse3(profile.root, "skillexOnly must be boolean.");
+  const marker = await entry2(join31(profile.root, ".skillex-only"));
+  if (marker && !marker.info.isFile())
+    refuse3(marker.path, "The strict policy marker must be a regular file.");
+  return options.skillexOnly === true || marker !== void 0;
+}
+async function assertStrictProfile(profile, options, local) {
+  if (!await strictProfile(profile, options)) return false;
+  for (const item2 of local)
+    if (!hermesMetadata(item2))
+      refuse3(item2.path, `Skillex-only profile contains unowned entry ${item2.name}.`);
+  const path = join31(profile.root, "config.yaml");
+  const config = await entry2(path);
+  if (config) {
+    if (!config.info.isFile())
+      refuse3(path, "Strict profile config must be a regular generated file.");
+    const document = parseDocument3(await readFile12(path, "utf8"), { uniqueKeys: true });
+    if (document.errors.length) refuse3(path, "Cannot validate strict skills configuration.");
+    const dirs = document.toJS()?.skills?.external_dirs;
+    if (dirs !== void 0 && (!Array.isArray(dirs) || dirs.length))
+      refuse3(path, "Skillex-only profiles require skills.external_dirs: [].");
+  }
+  const optOut = await entry2(join31(profile.root, ".no-bundled-skills"));
+  if (optOut && !optOut.info.isFile())
+    refuse3(optOut.path, "Bundled opt-out marker must be a regular file.");
+  return true;
+}
+async function publishStrictPolicy(profile) {
+  for (const name of [".no-bundled-skills", ".skillex-only"]) {
+    const path = join31(profile.root, name);
+    const existing = await entry2(path);
+    if (existing) {
+      if (!existing.info.isFile()) refuse3(path, "Policy markers must be regular files.");
+      continue;
+    }
+    const handle = await open13(
+      path,
+      constants10.O_WRONLY | constants10.O_CREAT | constants10.O_EXCL | constants10.O_NOFOLLOW,
+      384
+    );
+    try {
+      await handle.writeFile(
+        "Skillex owns this PM skill projection. Use skillex profile sync; no local installs.\n"
+      );
+      await handle.sync();
+    } finally {
+      await handle.close();
+    }
+  }
+}
+
+// src/core/profile-sync.ts
 function refused3(code, message, path, fix) {
   fail(code, message, { path, fix }, ExitCode.REFUSED);
 }
@@ -12045,14 +12129,14 @@ function receiptOptions(profile, options, scopes = []) {
   const { home, cwd } = normalized;
   const expanded = (value) => resolve17(
     cwd,
-    value === "~" ? home : value.startsWith("~/") ? join31(home, value.slice(2)) : value
+    value === "~" ? home : value.startsWith("~/") ? join32(home, value.slice(2)) : value
   );
   return {
     ...normalized,
     forbiddenRoots: [
       .../* @__PURE__ */ new Set([
         profile.root,
-        join31(home, ".agents"),
+        join32(home, ".agents"),
         ...options.project ? [expanded(options.project)] : [],
         ...options.registryRoot ? [expanded(options.registryRoot)] : [],
         ...scopes.flatMap((scope) => [
@@ -12114,7 +12198,7 @@ async function resolveProjection(options) {
     }
   const locations = /* @__PURE__ */ new Map();
   for (const scope of scopes) {
-    locations.set(join31(scope.registry.root, "all-skills"), "catalog");
+    locations.set(join32(scope.registry.root, "all-skills"), "catalog");
     if (scope.pack) locations.set(scope.pack.path, "pack");
   }
   const sources = [];
@@ -12141,7 +12225,7 @@ async function observations(profile, state) {
     );
   if (root)
     for (const name of (await readdir21(profile.skillsRoot)).sort()) {
-      const path = join31(profile.skillsRoot, name);
+      const path = join32(profile.skillsRoot, name);
       const actual = await entry2(path);
       if (!actual) continue;
       entries.set(name, actual);
@@ -12193,7 +12277,7 @@ async function buildWork(profile, state, options) {
   for (const scope of projection.scopes) {
     for (const protectedRoot of [
       scope.registry.root,
-      ...scope.scope === "project" ? [scope.root] : [join31(scope.root, ".agents")]
+      ...scope.scope === "project" ? [scope.root] : [join32(scope.root, ".agents")]
     ])
       if (within2(profile.skillsRoot, protectedRoot) || within2(protectedRoot, profile.skillsRoot))
         refused3(
@@ -12213,18 +12297,19 @@ async function buildWork(profile, state, options) {
       );
   state = await readProfileState(profile, receiptOptions(profile, options, projection.scopes));
   const observed = await observations(profile, state);
+  await assertStrictProfile(profile, options, observed.local);
   const links = { ...state.data.links };
   const changes = [];
   if (!observed.root) changes.push({ action: "mkdir", path: profile.skillsRoot });
   for (const [name, claim2] of Object.entries(links))
     if (!owned2(observed.entries.get(name), claim2)) {
       delete links[name];
-      changes.push({ action: "release", name, path: join31(profile.skillsRoot, name) });
+      changes.push({ action: "release", name, path: join32(profile.skillsRoot, name) });
     }
   const candidates = [];
   const desiredNames = new Set(projection.desired.map((desired) => desired.name));
   for (const desired of projection.desired) {
-    const path = join31(profile.skillsRoot, desired.name);
+    const path = join32(profile.skillsRoot, desired.name);
     const actual = observed.entries.get(desired.name);
     const recorded = claim(links, desired.name);
     const state2 = actual ? recorded ? lexicalTarget(path, actual.raw ?? "") === desired.target ? "unchanged" : "update" : "shadowed" : "create";
@@ -12241,7 +12326,7 @@ async function buildWork(profile, state, options) {
   }
   for (const name of Object.keys(links).sort())
     if (!desiredNames.has(name))
-      changes.push({ action: "prune", name, path: join31(profile.skillsRoot, name) });
+      changes.push({ action: "prune", name, path: join32(profile.skillsRoot, name) });
   const next = {
     version: 1,
     root: observed.root ? identity(observed.root) : null,
@@ -12279,6 +12364,7 @@ async function inspectProfile(profile, options = {}) {
   }
   try {
     preserved = (await observations(profile, state)).local;
+    await assertStrictProfile(profile, options, preserved);
   } catch (error) {
     const failure6 = asFailure(error);
     findings.push(...failure6.findings);
@@ -12330,9 +12416,9 @@ async function inspectProfile(profile, options = {}) {
 }
 async function flush3(path, expected) {
   await requireIdentity(path, expected);
-  const handle = await open13(
+  const handle = await open14(
     path,
-    constants10.O_RDONLY | constants10.O_DIRECTORY | constants10.O_NOFOLLOW
+    constants11.O_RDONLY | constants11.O_DIRECTORY | constants11.O_NOFOLLOW
   );
   try {
     if (!matches2({ path, info: await handle.stat({ bigint: true }) }, expected))
@@ -12377,7 +12463,7 @@ async function recoverProfile(profile, state, options, mark, findings) {
   if (!pending || !root) return state;
   checkProfileSignal(options);
   await rootGuard(profile, root);
-  const path = join31(profile.skillsRoot, pending.name);
+  const path = join32(profile.skillsRoot, pending.name);
   let current = await entry2(path);
   const parked = await entry2(pending.parked);
   const staged = await entry2(pending.stage);
@@ -12503,8 +12589,8 @@ async function apply2(work, mark, begin) {
         }
       }
       const id = randomUUID9();
-      const stage2 = join31(profile.skillsRoot, `.skillex-tmp-profile-${id}-new`);
-      const parked = join31(profile.skillsRoot, `.skillex-tmp-profile-${id}-old`);
+      const stage2 = join32(profile.skillsRoot, `.skillex-tmp-profile-${id}-new`);
+      const parked = join32(profile.skillsRoot, `.skillex-tmp-profile-${id}-old`);
       await absent(stage2);
       await absent(parked);
       let next;
@@ -12649,7 +12735,7 @@ async function runProfileSync(name, options) {
         { findings, exit: readExit(findings, state.data.pending !== void 0) }
       );
     }
-    if (work && !work.result.changes.length)
+    if (work && !work.result.changes.length && !await strictProfile(profile, options))
       return makeResult(
         "profile sync",
         { ...work.result, project: work.projection.project, dryRun: false, applied },
@@ -12677,6 +12763,8 @@ async function runProfileSync(name, options) {
           });
         }
         await assertProfileIdentity(selected);
+        if (await assertStrictProfile(selected, options, (await observations(selected, state)).local))
+          await publishStrictPolicy(selected);
         const currentProfile = await discoverProfile(name, options);
         if (currentProfile.root !== selected.root || currentProfile.skillsRoot !== selected.skillsRoot)
           refused3(
@@ -12714,21 +12802,21 @@ async function runProfileSync(name, options) {
         const latest = await readProfileState(profile, receiptOptions(profile, options));
         const pending = latest.data.pending;
         if (pending) {
-          const current = await entry2(join31(profile.skillsRoot, pending.name));
+          const current = await entry2(join32(profile.skillsRoot, pending.name));
           if (pending.next && matches2(current, pending.next) && !applied.some((change2) => change2.path === current?.path))
             applied.push({
               action: pending.previous ? "update" : "create",
               name: pending.name,
-              path: join31(profile.skillsRoot, pending.name),
+              path: join32(profile.skillsRoot, pending.name),
               target: pending.next.raw
             });
           if (!pending.next && !current && pending.previous && matches2(await entry2(pending.parked), pending.previous) && !applied.some(
-            (change2) => change2.path === join31(profile.skillsRoot, pending.name)
+            (change2) => change2.path === join32(profile.skillsRoot, pending.name)
           ))
             applied.push({
               action: "prune",
               name: pending.name,
-              path: join31(profile.skillsRoot, pending.name)
+              path: join32(profile.skillsRoot, pending.name)
             });
         }
         state = latest;
@@ -12870,13 +12958,13 @@ async function syncProfile(name, options) {
 
 // src/core/selection-commands.ts
 import { realpath as realpath24, stat as stat5 } from "node:fs/promises";
-import { dirname as dirname21, join as join33, parse as parse4, resolve as resolve19 } from "node:path";
+import { dirname as dirname21, join as join34, parse as parse4, resolve as resolve19 } from "node:path";
 
 // src/core/selection-manifest.ts
 import { randomUUID as randomUUID10 } from "node:crypto";
-import { constants as constants11 } from "node:fs";
-import { link as link7, lstat as lstat19, mkdir as mkdir11, open as open14, realpath as realpath23, rename as rename9, rmdir as rmdir6, unlink as unlink10 } from "node:fs/promises";
-import { dirname as dirname20, join as join32, resolve as resolve18 } from "node:path";
+import { constants as constants12 } from "node:fs";
+import { link as link7, lstat as lstat19, mkdir as mkdir11, open as open15, realpath as realpath23, rename as rename9, rmdir as rmdir6, unlink as unlink10 } from "node:fs/promises";
+import { dirname as dirname20, join as join33, resolve as resolve18 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual7 } from "node:util";
 var SelectionManifestWriteError = class extends SkillexError {
   constructor(error, published) {
@@ -12968,13 +13056,13 @@ async function contextFor3(root) {
       unsafe2(path, "A scope ancestor is missing or is not a real directory.");
     parents2.set(path, info2);
   }
-  const agents = join32(canonical2, ".agents");
+  const agents = join33(canonical2, ".agents");
   const info = await inspect5(agents);
   if (info) {
     if (!info.isDirectory()) unsafe2(agents, "The scope .agents path must be a real directory.");
     parents2.set(agents, info);
   }
-  return { root: canonical2, agents, path: join32(agents, "skills.json"), parents: parents2 };
+  return { root: canonical2, agents, path: join33(agents, "skills.json"), parents: parents2 };
 }
 async function assertParents4(context2) {
   for (const [path, expected] of context2.parents) {
@@ -12991,7 +13079,7 @@ async function readStored2(path) {
   const first = await inspect5(path);
   if (!first) return void 0;
   if (!first.isFile()) unsafe2(path, "The selection declaration must be a real regular file.");
-  const handle = await open14(path, constants11.O_RDONLY | constants11.O_NOFOLLOW);
+  const handle = await open15(path, constants12.O_RDONLY | constants12.O_NOFOLLOW);
   try {
     const before = await handle.stat({ bigint: true });
     if (!before.isFile() || !sameObject2(first, before))
@@ -13063,9 +13151,9 @@ async function assertPrevious2(context2, previous) {
   return current;
 }
 async function flushDirectory2(path, identity5) {
-  const handle = await open14(
+  const handle = await open15(
     path,
-    constants11.O_RDONLY | constants11.O_DIRECTORY | constants11.O_NOFOLLOW
+    constants12.O_RDONLY | constants12.O_DIRECTORY | constants12.O_NOFOLLOW
   );
   try {
     if (!sameObject2(identity5, await handle.stat({ bigint: true })))
@@ -13133,11 +13221,11 @@ async function writeSelectionManifest(previous, raw) {
       await flushDirectory2(context2.root, rootIdentity);
     }
     await assertPrevious2(context2, prior);
-    const path = join32(context2.agents, `.skillex-tmp-${randomUUID10()}`);
+    const path = join33(context2.agents, `.skillex-tmp-${randomUUID10()}`);
     const mode = prior.file ? Number(prior.file.identity.mode & 0o7777n) : 420;
-    const file = await open14(
+    const file = await open15(
       path,
-      constants11.O_WRONLY | constants11.O_CREAT | constants11.O_EXCL | constants11.O_NOFOLLOW,
+      constants12.O_WRONLY | constants12.O_CREAT | constants12.O_EXCL | constants12.O_NOFOLLOW,
       mode
     );
     try {
@@ -13249,7 +13337,7 @@ async function directory(value, cwd, home) {
     fail("E_PROJECT_ROOT", "A project or working directory must be a nonempty path.", {
       fix: "Pass an existing directory as --project or cwd."
     });
-  const expanded = value === "~" ? home : value.startsWith("~/") ? join33(home, value.slice(2)) : value;
+  const expanded = value === "~" ? home : value.startsWith("~/") ? join34(home, value.slice(2)) : value;
   const path = resolve19(cwd, expanded);
   const info = await inspectPath(path);
   if (!info || !(await stat5(path)).isDirectory())
@@ -13262,7 +13350,7 @@ async function directory(value, cwd, home) {
 async function nearestGitRoot(cwd, home) {
   let current = cwd;
   while (current !== home && current !== parse4(current).root) {
-    if (await inspectPath(join33(current, ".git"))) return current;
+    if (await inspectPath(join34(current, ".git"))) return current;
     current = dirname21(current);
   }
   return void 0;
@@ -13429,7 +13517,7 @@ async function prepare3(options, edit) {
         ...options,
         home: target2.home,
         forbiddenRoots: [
-          join33(target2.root, ".agents"),
+          join34(target2.root, ".agents"),
           ...target2.scope === "project" ? [target2.root] : []
         ]
       });
@@ -13584,7 +13672,7 @@ async function setInheritance(enabled, options = {}) {
 
 // src/core/sets.ts
 import { readdir as readdir22 } from "node:fs/promises";
-import { join as join34 } from "node:path";
+import { join as join35 } from "node:path";
 function validateName(name) {
   parseManifest({ sets: [{ name }] }, "set name");
 }
@@ -13601,7 +13689,7 @@ async function listSets(options = {}) {
   const command = "set list";
   try {
     const registry = await discoverRegistry(options);
-    const path = join34(registry.root, "sets");
+    const path = join35(registry.root, "sets");
     const sets = [];
     const failures = [];
     if (await inspectPath(path)) {
@@ -13614,7 +13702,7 @@ async function listSets(options = {}) {
         try {
           sets.push(await readSet(registry.root, entry3.name));
         } catch (error) {
-          failures.push(collectedError(error, join34(path, entry3.name)));
+          failures.push(collectedError(error, join35(path, entry3.name)));
         }
       }
     }
@@ -13636,7 +13724,7 @@ async function showSet(name, options = {}) {
 async function prepareSet(name, names2, operation, options) {
   validateName(name);
   const registry = await discoverRegistry(options);
-  const path = join34(registry.root, "sets", name);
+  const path = join35(registry.root, "sets", name);
   const exists = await inspectPath(path);
   const previous = operation === "create" && !exists ? { kind: "set", name, path, skills: [] } : await readSet(registry.root, name);
   const requested = await requestedSkills(registry.root, names2, path);
@@ -13652,10 +13740,10 @@ async function prepareSet(name, names2, operation, options) {
   const plan2 = await newPlan(registry, composition2, options.dryRun === true);
   await planDirectory(plan2, path);
   for (const skill2 of previous.skills)
-    await inspectCanonicalLink(plan2, join34(path, skill2.name), skill2.path);
+    await inspectCanonicalLink(plan2, join35(path, skill2.name), skill2.path);
   for (const [member, target2] of requested) {
-    if (operation === "add") await planLink(plan2, join34(path, member), target2);
-    else if (operation === "remove") await planUnlink(plan2, join34(path, member), target2);
+    if (operation === "add") await planLink(plan2, join35(path, member), target2);
+    else if (operation === "remove") await planUnlink(plan2, join35(path, member), target2);
   }
   return plan2;
 }
@@ -13671,7 +13759,7 @@ async function removeSetSkills(name, names2, options = {}) {
 
 // src/core/vendor-inspect.ts
 import { readdir as readdir23 } from "node:fs/promises";
-import { join as join35 } from "node:path";
+import { join as join36 } from "node:path";
 
 // src/core/vendor-git.ts
 import { execFile as execFile4 } from "node:child_process";
@@ -14033,19 +14121,19 @@ var Observation = class {
 async function recordedInventory(manifest, observation, options) {
   const recorded = /* @__PURE__ */ new Map();
   const failed2 = /* @__PURE__ */ new Set();
-  const catalog = join35(manifest.registry.root, "all-skills");
+  const catalog = join36(manifest.registry.root, "all-skills");
   for (const entry3 of (await readdir23(catalog, { withFileTypes: true })).sort(
     (a, b) => a.name.localeCompare(b.name)
   )) {
     checkVendorSignal(options);
     if (!isSkillName(entry3.name) || !entry3.isDirectory()) continue;
-    const path = join35(catalog, entry3.name);
+    const path = join36(catalog, entry3.name);
     try {
       const receipt2 = await readVendorProvenance(path);
       if (receipt2) recorded.set(entry3.name, receipt2);
     } catch (error) {
       failed2.add(entry3.name);
-      observation.capture(error, join35(path, ".source.yaml"));
+      observation.capture(error, join36(path, ".source.yaml"));
     }
   }
   return { recorded, failed: failed2 };
@@ -14062,7 +14150,7 @@ function emptySkill(source, manifest, name, upstreamCommit) {
   return {
     name,
     source: source.name,
-    path: join35(manifest.registry.root, "all-skills", name),
+    path: join36(manifest.registry.root, "all-skills", name),
     state: "unknown",
     recordedCommit: null,
     upstreamCommit,
@@ -14443,9 +14531,9 @@ async function inspectVendorStatus(options = {}) {
 
 // src/core/vendor-sync.ts
 import { randomUUID as randomUUID11 } from "node:crypto";
-import { chmod as chmod3, lstat as lstat20, mkdir as mkdir12, open as open15, readdir as readdir24, rename as rename10 } from "node:fs/promises";
-import { dirname as dirname22, join as join36 } from "node:path";
-function refuse3(code, message, path, fix) {
+import { chmod as chmod3, lstat as lstat20, mkdir as mkdir12, open as open16, readdir as readdir24, rename as rename10 } from "node:fs/promises";
+import { dirname as dirname22, join as join37 } from "node:path";
+function refuse4(code, message, path, fix) {
   fail(code, message, { path, fix }, ExitCode.REFUSED);
 }
 function attributed(provenance, source) {
@@ -14455,21 +14543,21 @@ function baseline(provenance) {
   return provenance.digest !== null && (provenance.digestFormat === null || ["skillex-tree-v1", "skillex-tree-v1+symlinks"].includes(provenance.digestFormat));
 }
 async function planSkill(source, skill2, commit, extractedAt, catalog, options) {
-  const path = join36(catalog, skill2.name);
+  const path = join37(catalog, skill2.name);
   const info = await vendorLstat(path);
   let before = null;
   let provenance = null;
   let action = "create";
   if (info) {
     if (info.isSymbolicLink())
-      refuse3(
+      refuse4(
         "E_VENDOR_DESTINATION_LINK",
         "Vendor sync will not replace a linked canonical destination.",
         path,
         "Use the explicit migrate workflow to account for this link and its consumers before vendoring."
       );
     if (!info.isDirectory())
-      refuse3(
+      refuse4(
         "E_VENDOR_DESTINATION_TYPE",
         "The canonical destination is not a real skill directory.",
         path,
@@ -14479,21 +14567,21 @@ async function planSkill(source, skill2, commit, extractedAt, catalog, options)
     const digest = await digestVendorTree(path);
     if (provenance?.type === "vendored") {
       if (!attributed(provenance, source))
-        refuse3(
+        refuse4(
           "E_VENDOR_FOREIGN_SOURCE",
           "The canonical skill is attributed to a different source.",
           path,
           "Correct the declaration or migrate the existing provenance explicitly; adopt does not transfer another vendor's ownership."
         );
       if (!baseline(provenance) && !options.discardLocalEdits)
-        refuse3(
+        refuse4(
           "E_VENDOR_BASELINE_MISSING",
           "The managed skill has no supported baseline digest proving unchanged content.",
           path,
           "Preserve or commit local content, then explicitly use --discard-local-edits to replace this attributed skill; it cannot be implicitly pruned."
         );
       if (baseline(provenance) && (digest !== provenance.digest || provenance.modifiedLocally) && !options.discardLocalEdits)
-        refuse3(
+        refuse4(
           "E_VENDOR_LOCAL_EDITS",
           "The vendored skill has local content or executable-mode edits.",
           path,
@@ -14502,14 +14590,14 @@ async function planSkill(source, skill2, commit, extractedAt, catalog, options)
       action = digest === skill2.digest && !provenance.modifiedLocally && provenance.digest === skill2.digest && provenance.upstreamCommit === commit && provenance.upstreamTree === skill2.tree && provenance.upstreamPath === skill2.upstreamPath && provenance.upstreamVersion === source.version && provenance.extractedAt !== null && baseline(provenance) ? "unchanged" : "update";
     } else {
       if (!options.adopt)
-        refuse3(
+        refuse4(
           "E_VENDOR_UNMANAGED",
           "The canonical skill is not managed by this vendor source.",
           path,
           "Use --adopt to record ownership; if bytes or modes differ from upstream, also use --discard-local-edits after preserving them."
         );
       if (digest !== skill2.digest && !options.discardLocalEdits)
-        refuse3(
+        refuse4(
           "E_VENDOR_LOCAL_EDITS",
           "Adopting this skill would replace local bytes or executable modes.",
           path,
@@ -14519,14 +14607,14 @@ async function planSkill(source, skill2, commit, extractedAt, catalog, options)
     }
     before = await captureVendorTree(path);
     if (before.root.dev !== String((await lstat20(catalog, { bigint: true })).dev))
-      refuse3(
+      refuse4(
         "E_VENDOR_CROSS_DEVICE",
         "The existing skill is mounted on a different filesystem from catalog staging.",
         path,
         "Move the skill into the catalog filesystem before updating it; vendor replacement requires same-filesystem renames."
       );
     if (before.root.dev !== String(info.dev) || before.root.ino !== String(info.ino))
-      refuse3(
+      refuse4(
         "E_VENDOR_CHANGED",
         "The destination changed during preflight.",
         path,
@@ -14565,7 +14653,7 @@ async function planSkill(source, skill2, commit, extractedAt, catalog, options)
 async function prepare4(options, extractedAt) {
   vendorInterrupted(options);
   const manifest = await readVendorSources(options);
-  const catalog = join36(manifest.registry.root, "all-skills");
+  const catalog = join37(manifest.registry.root, "all-skills");
   const journal = await readVendorJournal(manifest.registry, options);
   const selected = selectVendorSources(manifest, options.sources);
   const sources = [];
@@ -14577,7 +14665,7 @@ async function prepare4(options, extractedAt) {
     const checkout = await resolveVendorCheckout(source, options);
     if (!checkout.root) {
       if (!source.optional)
-        refuse3(
+        refuse4(
           "E_SOURCE_CHECKOUT_MISSING",
           `Local checkout ${source.checkout} is unavailable.`,
           manifest.path,
@@ -14630,7 +14718,7 @@ async function prepare4(options, extractedAt) {
       });
     for (const skill2 of upstream.skills) {
       if (names2.has(skill2.name))
-        refuse3(
+        refuse4(
           "E_VENDOR_DUPLICATE_SKILL",
           `Sources ${names2.get(skill2.name)} and ${source.name} select the same canonical skill.`,
           manifest.path,
@@ -14643,7 +14731,7 @@ async function prepare4(options, extractedAt) {
   if (options.prune) {
     for (const name of (await readdir24(catalog)).filter(isSkillName).sort()) {
       if (names2.has(name)) continue;
-      const path = join36(catalog, name);
+      const path = join37(catalog, name);
       if (!(await vendorLstat(path))?.isDirectory()) continue;
       let provenance;
       try {
@@ -14663,14 +14751,14 @@ async function prepare4(options, extractedAt) {
       const source = provenance?.source ? enumerated.get(provenance.source) : void 0;
       if (!provenance || !source || !attributed(provenance, source)) continue;
       if (!baseline(provenance))
-        refuse3(
+        refuse4(
           "E_VENDOR_BASELINE_MISSING",
           "An orphaned managed skill has no supported baseline proving it is safe to prune.",
           path,
           "Restore its verified provenance or remove it explicitly after inspection; --discard-local-edits never authorizes pruning unknown content."
         );
       if (provenance.modifiedLocally || await digestVendorTree(path) !== provenance.digest)
-        refuse3(
+        refuse4(
           "E_VENDOR_LOCAL_EDITS",
           "An orphaned managed skill has local edits and cannot be pruned.",
           path,
@@ -14704,7 +14792,7 @@ async function prepare4(options, extractedAt) {
 }
 async function absent2(path) {
   if (await vendorLstat(path))
-    refuse3(
+    refuse4(
       "E_VENDOR_CHANGED",
       "A destination or recovery path appeared after preflight.",
       path,
@@ -14716,7 +14804,7 @@ async function assertCurrentIntent(prepared, options) {
   const selected = selectVendorSources(current, options.sources);
   const expected = selectVendorSources(prepared.manifest, options.sources);
   if (current.registry.root !== prepared.manifest.registry.root || JSON.stringify(selected) !== JSON.stringify(expected))
-    refuse3(
+    refuse4(
       "E_VENDOR_INTENT_CHANGED",
       "The selected vendor declarations changed during staging.",
       prepared.manifest.path,
@@ -14726,7 +14814,7 @@ async function assertCurrentIntent(prepared, options) {
     const checkout = await resolveVendorCheckout(source, options);
     const previous = prepared.result.sources.find((entry3) => entry3.name === source.name);
     if (!previous || checkout.root !== previous.checkout)
-      refuse3(
+      refuse4(
         "E_VENDOR_INTENT_CHANGED",
         "A selected local checkout mapping changed during staging.",
         prepared.manifest.path,
@@ -14735,7 +14823,7 @@ async function assertCurrentIntent(prepared, options) {
   }
 }
 async function syncDirectory2(path) {
-  const handle = await open15(path, "r");
+  const handle = await open16(path, "r");
   try {
     await handle.sync();
   } finally {
@@ -14750,12 +14838,12 @@ async function stage(plan2, path, catalog, options) {
   for (const entry3 of plan2.entries) {
     vendorInterrupted(options);
     await assertVendorIdentity(path, root);
-    const target2 = join36(path, entry3.path);
+    const target2 = join37(path, entry3.path);
     let parent = dirname22(entry3.path);
     while (parent !== ".") {
       const identity5 = parents2.get(parent);
       if (!identity5) throw new Error(`Unprepared vendor content parent: ${parent}`);
-      await assertVendorIdentity(join36(path, parent), identity5);
+      await assertVendorIdentity(join37(path, parent), identity5);
       parent = dirname22(parent);
     }
     if (entry3.kind === "directory") {
@@ -14763,7 +14851,7 @@ async function stage(plan2, path, catalog, options) {
       await chmod3(target2, 493);
       parents2.set(entry3.path, vendorIdentity(await lstat20(target2, { bigint: true })));
     } else if (entry3.kind === "file") {
-      const handle = await open15(target2, "wx", entry3.mode);
+      const handle = await open16(target2, "wx", entry3.mode);
       try {
         await handle.writeFile(entry3.bytes);
         await handle.chmod(entry3.mode);
@@ -14812,7 +14900,7 @@ async function recover2(snapshot3, findings, options, onWrite) {
       if (published) {
         await assertVendorTree(operation.change.path, operation.after);
         if (stageInfo)
-          refuse3(
+          refuse4(
             "E_VENDOR_RECOVERY_CONFLICT",
             "Both the staged and published paths exist for one prepared skill.",
             operation.change.path,
@@ -14820,7 +14908,7 @@ async function recover2(snapshot3, findings, options, onWrite) {
           );
       } else if (destination) {
         if (!operation.before)
-          refuse3(
+          refuse4(
             "E_VENDOR_RECOVERY_CONFLICT",
             "A foreign destination blocks vendor recovery.",
             operation.change.path,
@@ -14828,7 +14916,7 @@ async function recover2(snapshot3, findings, options, onWrite) {
           );
         await assertVendorTree(operation.change.path, operation.before);
         if (parked)
-          refuse3(
+          refuse4(
             "E_VENDOR_RECOVERY_CONFLICT",
             "Both the old destination and its parked path exist.",
             operation.change.path,
@@ -14836,7 +14924,7 @@ async function recover2(snapshot3, findings, options, onWrite) {
           );
       } else if (!parked && operation.before) {
         if (operation.change.action !== "prune")
-          refuse3(
+          refuse4(
             "E_VENDOR_RECOVERY_CONFLICT",
             "The old and new skill directories are both missing.",
             operation.change.path,
@@ -14909,7 +14997,7 @@ async function syncVendorSources(options = {}) {
     initiallyPending = initialJournal.document !== null;
     fallback = {
       registry,
-      manifest: join36(registry.root, "all-skills", "sources.toml"),
+      manifest: join37(registry.root, "all-skills", "sources.toml"),
       dryRun: options.dryRun === true,
       sources: [],
       changes: [],
@@ -14956,7 +15044,7 @@ async function syncVendorSources(options = {}) {
         }
         prepared = await prepare4(options, extractedAt);
         if (prepared.manifest.registry.root !== initialRoot)
-          refuse3(
+          refuse4(
             "E_CATALOG_CHANGED",
             "Registry discovery changed while waiting for its catalog lock.",
             initialRoot,
@@ -14978,8 +15066,8 @@ async function syncVendorSources(options = {}) {
             change: plan2.change,
             before: plan2.before,
             after: null,
-            stage: plan2.change.action === "prune" ? null : join36(journal.catalog, `.skillex-tmp-vendor-${id}-new`),
-            parked: plan2.before ? join36(journal.catalog, `.skillex-tmp-vendor-${id}-old`) : null
+            stage: plan2.change.action === "prune" ? null : join37(journal.catalog, `.skillex-tmp-vendor-${id}-new`),
+            parked: plan2.before ? join37(journal.catalog, `.skillex-tmp-vendor-${id}-old`) : null
           };
         });
         vendorInterrupted(options);
@@ -15511,14 +15599,18 @@ function registerProfileCommands(program2, output2) {
   ).option(
     "--dry-run",
     "Preview links, preserved entries, and receipts without writing or recovering."
+  ).option(
+    "--skillex-only",
+    "Persist strict catalog-only ownership; refuse local skills and external discovery."
   ).action(async (name, _local, command) => {
-    const { project, dryRun } = command.opts();
+    const { project, dryRun, skillexOnly } = command.opts();
     await run2(
       command,
       (options) => syncProfile(name, {
         ...options,
         project,
-        ...dryRun === void 0 ? {} : { dryRun }
+        ...dryRun === void 0 ? {} : { dryRun },
+        ...skillexOnly === void 0 ? {} : { skillexOnly }
       }),
       syncText
     );