@first-tree-ai/context-tree 0.1.7-alpha.202609010710 → 0.1.7

package/dist/cli/index.mjs

@@ -3,7 +3,7 @@ import { createRequire } from "node:module";
 import path, { basename, dirname, isAbsolute, join, parse, posix, relative, resolve, sep } from "node:path";
 import { EventEmitter } from "node:events";
 import childProcess, { spawnSync } from "node:child_process";
-import fs, { chmodSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, symlinkSync, writeFileSync } from "node:fs";
+import fs, { chmodSync, copyFileSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, symlinkSync, writeFileSync } from "node:fs";
 import process$1 from "node:process";
 import { stripVTControlCharacters } from "node:util";
 import { homedir, tmpdir } from "node:os";
@@ -7240,6 +7240,448 @@ function refine(fn, _params = {}) {
 function superRefine(fn, params) {
 	return /* @__PURE__ */ _superRefine(fn, params);
 }
+const CONTEXT_TREE_ROOT_NODE_MAX_BYTES = 16 * 1024;
+const VALIDATION_CODES = {
+	rootMissing: "TREE_ROOT_MISSING",
+	rootNodeInvalid: "TREE_ROOT_NODE_INVALID",
+	rootOnlyFields: "TREE_ROOT_ONLY_FIELDS",
+	directoryNodeMissing: "TREE_DIRECTORY_NODE_MISSING",
+	frontmatterMissing: "TREE_FRONTMATTER_MISSING",
+	frontmatterParse: "TREE_FRONTMATTER_PARSE",
+	titleMissing: "TREE_TITLE_MISSING",
+	titleInvalid: "TREE_TITLE_INVALID",
+	descriptionInvalid: "TREE_DESCRIPTION_INVALID",
+	softLinksInvalid: "TREE_SOFT_LINKS_INVALID",
+	softLinkBroken: "TREE_SOFT_LINK_BROKEN",
+	softLinkPathEscape: "TREE_SOFT_LINK_PATH_ESCAPE",
+	markdownPathEscape: "TREE_MARKDOWN_LINK_PATH_ESCAPE",
+	markdownFileSymlinkBroken: "TREE_MARKDOWN_FILE_SYMLINK_BROKEN",
+	markdownFileSymlinkUnsupported: "TREE_MARKDOWN_FILE_SYMLINK_UNSUPPORTED",
+	markdownFilePathEscape: "TREE_MARKDOWN_FILE_PATH_ESCAPE",
+	markdownFileContentClassMismatch: "TREE_MARKDOWN_FILE_CONTENT_CLASS_MISMATCH",
+	directorySymlinkUnsupported: "TREE_DIRECTORY_SYMLINK_UNSUPPORTED",
+	directorySymlinkPathEscape: "TREE_DIRECTORY_SYMLINK_PATH_ESCAPE"
+};
+const CLI_ERROR_CODES = {
+	corruptConnection: "CORRUPT_CONNECTION",
+	dirtyTree: "DIRTY_TREE",
+	failed: "CONTEXT_TREE_FAILED",
+	githubAuth: "GITHUB_AUTH",
+	invalidTree: "INVALID_TREE",
+	noConnection: "NO_CONNECTION",
+	publishIncomplete: "PUBLISH_INCOMPLETE",
+	repositoryExists: "REPOSITORY_EXISTS",
+	staleConnection: "STALE_CONNECTION",
+	writeOutdated: "WRITE_OUTDATED"
+};
+function hasUnsafeCharacter(value) {
+	return [...value].some((character) => {
+		const code = character.codePointAt(0);
+		return code !== void 0 && (code <= 31 || code === 127 || code === 8232 || code === 8233);
+	});
+}
+const absoluteSingleLinePathSchema = string$2().superRefine((value, context) => {
+	if (!isAbsolute(value) || value.trim() !== value || hasUnsafeCharacter(value)) context.addIssue({
+		code: "custom",
+		message: "Paths must be absolute single-line values."
+	});
+});
+const credentialFreeRepositoryUrlSchema = string$2().superRefine((value, context) => {
+	if (value.trim() !== value || hasUnsafeCharacter(value) || value.includes("\\")) {
+		context.addIssue({
+			code: "custom",
+			message: "Repository URLs must be canonical single-line values."
+		});
+		return;
+	}
+	if (value.includes("?") || value.includes("#")) {
+		context.addIssue({
+			code: "custom",
+			message: "Repository URLs must not contain a query or fragment."
+		});
+		return;
+	}
+	if (/^(?:[a-z\d._-]+@)?[a-z\d.-]+:[^\s/][^\s]*$/iu.test(value)) return;
+	try {
+		const parsed = new URL(value);
+		if (parsed.protocol !== "http:" && parsed.protocol !== "https:" && parsed.protocol !== "ssh:" || !parsed.hostname || parsed.pathname.split("/").every((part) => part.length === 0) || parsed.password || (parsed.protocol === "http:" || parsed.protocol === "https:") && parsed.username) throw new Error("invalid transport");
+	} catch {
+		context.addIssue({
+			code: "custom",
+			message: "Repository URLs must use credential-free HTTP(S), ssh://, or scp-like SSH syntax."
+		});
+	}
+});
+const treeNameSchema = string$2().superRefine((value, context) => {
+	if (!/^[A-Za-z\d][A-Za-z\d._-]{0,99}$/u.test(value) || /\.git$/iu.test(value)) context.addIssue({
+		code: "custom",
+		message: "Tree name must be a safe single path segment."
+	});
+});
+const githubRepositoryIdentitySchema = string$2().superRefine((value, context) => {
+	const parts = value.split("/");
+	const [owner, name] = parts;
+	if (parts.length !== 2 || owner === void 0 || name === void 0 || !/^[A-Za-z\d](?:[A-Za-z\d-]{0,37}[A-Za-z\d])?$/u.test(owner) || !treeNameSchema.safeParse(name).success) context.addIssue({
+		code: "custom",
+		message: "Repository must be an explicit GitHub OWNER/REPO identity."
+	});
+});
+const contextTreeRootNodeSchema = object({
+	frontmatter: object({
+		schemaVersion: literal(1),
+		title: string$2().trim().min(1),
+		description: string$2().trim().min(1).optional(),
+		soft_links: array(string$2().trim().min(1)).min(1).optional()
+	}).loose(),
+	body: string$2().trim().min(1, "Root NODE.md must contain repository-wide context.")
+});
+const contextContentClassSchema = _enum([
+	"normal",
+	"member",
+	"repo-infra"
+]);
+const treeValidationFindingSchema = object({
+	code: _enum(VALIDATION_CODES),
+	message: string$2(),
+	path: string$2(),
+	target: string$2().optional()
+}).strict();
+const contextContentClassCountsSchema = object({
+	normal: number().int().nonnegative(),
+	member: number().int().nonnegative(),
+	"repo-infra": number().int().nonnegative()
+}).strict();
+const SKILL_HOSTS = ["claude", "codex"];
+const skillHostSchema = _enum(SKILL_HOSTS);
+const skillInstallationSchema = object({
+	host: skillHostSchema,
+	path: absoluteSingleLinePathSchema,
+	skills: array(string$2().trim().min(1))
+}).strict();
+const skillInstallSkipSchema = object({
+	host: skillHostSchema,
+	reason: string$2().trim().min(1)
+}).strict();
+object({
+	installed: array(skillInstallationSchema),
+	schemaVersion: literal(1),
+	skipped: array(skillInstallSkipSchema),
+	version: string$2().trim().min(1)
+}).strict();
+const contextTreeReadCommonFields = {
+	contentClass: contextContentClassSchema,
+	kind: _enum(["directory", "file"]),
+	path: string$2()
+};
+const contextTreeReadNodeSchema = object({
+	body: string$2(),
+	frontmatter: record(string$2(), unknown()),
+	...contextTreeReadCommonFields
+}).strict();
+object({
+	children: array(object({
+		description: string$2().optional(),
+		title: string$2(),
+		...contextTreeReadCommonFields
+	}).strict()),
+	node: contextTreeReadNodeSchema,
+	root: string$2(),
+	schemaVersion: literal(1),
+	target: string$2()
+}).strict();
+object({
+	findings: array(treeValidationFindingSchema),
+	ok: boolean(),
+	root: string$2(),
+	scannedByContentClass: contextContentClassCountsSchema,
+	schemaVersion: literal(1)
+}).strict();
+const contextTreeStateSchema = discriminatedUnion("kind", [object({
+	kind: literal("local"),
+	path: absoluteSingleLinePathSchema
+}).strict(), object({
+	kind: literal("github"),
+	path: absoluteSingleLinePathSchema,
+	repository: githubRepositoryIdentitySchema
+}).strict()]);
+const contextTreeConnectionSchema = object({
+	projectPath: absoluteSingleLinePathSchema,
+	tree: contextTreeStateSchema
+}).strict();
+object({
+	schemaVersion: literal(1),
+	tree: contextTreeStateSchema
+}).strict();
+/** Whether the project's AGENTS.md pointer was created, rewritten, or left alone. */
+const projectPointerOutcomeSchema = _enum([
+	"written",
+	"updated",
+	"skipped"
+]);
+object({
+	branch: string$2().trim().min(1),
+	commitSha: string$2(),
+	created: boolean(),
+	pointer: projectPointerOutcomeSchema,
+	schemaVersion: literal(1),
+	title: string$2().trim().min(1),
+	treePath: absoluteSingleLinePathSchema
+}).strict();
+object({
+	pointer: projectPointerOutcomeSchema,
+	schemaVersion: literal(1),
+	tree: contextTreeStateSchema
+}).strict();
+const managedTreeListingEntrySchema = object({
+	name: treeNameSchema,
+	tree: contextTreeStateSchema
+}).strict();
+object({
+	schemaVersion: literal(1),
+	trees: array(managedTreeListingEntrySchema)
+}).strict();
+object({
+	branch: string$2().trim().min(1),
+	schemaVersion: literal(1),
+	sha: string$2(),
+	tree: contextTreeStateSchema
+}).strict();
+object({
+	schemaVersion: literal(1),
+	worktreePath: absoluteSingleLinePathSchema
+}).strict();
+object({
+	branch: string$2().trim().min(1),
+	schemaVersion: literal(1),
+	sha: string$2()
+}).strict();
+object({
+	branch: string$2().trim().min(1),
+	repository: githubRepositoryIdentitySchema,
+	schemaVersion: literal(1),
+	sha: string$2(),
+	url: credentialFreeRepositoryUrlSchema
+}).strict();
+object({
+	error: object({
+		code: _enum(CLI_ERROR_CODES),
+		message: string$2()
+	}).strict(),
+	ok: literal(false),
+	schemaVersion: literal(1)
+}).strict();
+//#endregion
+//#region src/core/internal/errors.ts
+/**
+* A failure the CLI reports with a specific machine-readable code. Anything
+* thrown as a plain Error is reported as CONTEXT_TREE_FAILED instead.
+*/
+var ContextTreeError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.name = "ContextTreeError";
+		this.code = code;
+	}
+};
+//#endregion
+//#region src/core/internal/git.ts
+function defaultRunner(command, args) {
+	const result = spawnSync(command, args, {
+		encoding: "utf8",
+		stdio: [
+			"ignore",
+			"pipe",
+			"pipe"
+		]
+	});
+	return {
+		status: result.status,
+		stderr: typeof result.stderr === "string" ? result.stderr : "",
+		stdout: typeof result.stdout === "string" ? result.stdout : ""
+	};
+}
+/** A failed Git or `gh` operation. Messages never include the argv. */
+var CommandError = class extends Error {
+	command;
+	status;
+	stderr;
+	constructor(command, status, stderr, message) {
+		const detail = sanitizeCommandOutput(stderr).trim();
+		super(detail.length > 0 ? `${message}: ${detail}` : message);
+		this.name = "CommandError";
+		this.command = command;
+		this.status = status;
+		this.stderr = detail;
+	}
+};
+/** Remove credentials and common access-token shapes before surfacing subprocess output. */
+function sanitizeCommandOutput(value) {
+	return value.replace(/((?:https?|ssh):\/\/)[^\s/@]+@/giu, "$1<redacted>@").replace(/\b(?:gh[opsu]_[A-Za-z\d_]{20,}|github_pat_[A-Za-z\d_]{20,})\b/gu, "<redacted>").replace(/(authorization\s*:\s*(?:bearer|token)\s+)[^\s]+/giu, "$1<redacted>");
+}
+function trimOutput(value) {
+	return value.trim();
+}
+function execute(runner, command, args, message) {
+	const result = runner(command, args);
+	if (result.status !== 0) throw new CommandError(command, result.status, result.stderr, message);
+	return trimOutput(result.stdout);
+}
+/** Run a Git command that is not scoped by `-C`, such as `git init <path>`. */
+function gitCommand(args, options = {}) {
+	return execute(options.runner ?? defaultRunner, "git", args, options.message ?? "A Git operation failed.");
+}
+/** Run `git -C <root> <args>` and return trimmed stdout, throwing on failure. */
+function git(root, args, options = {}) {
+	return execute(options.runner ?? defaultRunner, "git", [
+		"-C",
+		root,
+		...args
+	], options.message ?? "A Git operation failed.");
+}
+/** Run `git -C <root> <args>` and return trimmed stdout, or undefined on failure. */
+function optionalGit(root, args, runner = defaultRunner) {
+	const result = runner("git", [
+		"-C",
+		root,
+		...args
+	]);
+	if (result.status !== 0) return void 0;
+	return trimOutput(result.stdout);
+}
+/** Run `gh <args>` and return trimmed stdout, throwing on failure. */
+function gh(args, options = {}) {
+	return execute(options.runner ?? defaultRunner, "gh", args, options.message ?? "A GitHub CLI operation failed.");
+}
+//#endregion
+//#region src/core/internal/github-repository.ts
+const ORIGIN_MESSAGE = "Context Tree origin must identify a credential-free GitHub OWNER/REPO repository.";
+function canonicalGitHubRepositoryUrl(repository) {
+	githubRepositoryIdentitySchema.parse(repository);
+	return `https://github.com/${repository}.git`;
+}
+/** Derive OWNER/REPO from a github.com origin, rejecting anything else. */
+function gitHubRepositoryFromOriginUrl(origin) {
+	if (!credentialFreeRepositoryUrlSchema.safeParse(origin).success) throw new Error(ORIGIN_MESSAGE);
+	let owner;
+	let name;
+	const scp = /^(?:git@)?github\.com:([^/]+)\/(.+)$/iu.exec(origin);
+	if (scp !== null) [, owner, name] = scp;
+	else {
+		const url = URL.parse(origin);
+		if (url === null || url.hostname.toLowerCase() !== "github.com") throw new Error(ORIGIN_MESSAGE);
+		[owner, name] = url.pathname.replace(/^\/+|\/+$/gu, "").split("/");
+	}
+	const repository = `${owner ?? ""}/${(name ?? "").replace(/\.git$/iu, "")}`;
+	if (!githubRepositoryIdentitySchema.safeParse(repository).success) throw new Error(ORIGIN_MESSAGE);
+	return repository;
+}
+//#endregion
+//#region src/core/path.ts
+function isPathInside(root, target) {
+	const path = relative(root, target);
+	return path === "" || !path.startsWith("..") && !isAbsolute(path);
+}
+function resolveTreeRoot(path) {
+	const absolute = resolve(path);
+	const entry = lstatSync(absolute);
+	if (entry.isSymbolicLink() || !entry.isDirectory()) throw new Error(`Context Tree root must be a real directory: ${path}`);
+	return realpathSync(absolute);
+}
+/** Resolve a directory while rejecting symlinks in user-controlled path components. */
+function realDirectoryWithoutSymlinks(path, label) {
+	const absolute = resolve(path);
+	const parsed = parse(absolute);
+	const parts = absolute.slice(parsed.root.length).split(sep).filter(Boolean);
+	let current = parsed.root;
+	for (const [index, part] of parts.entries()) {
+		current = resolve(current, part);
+		if (lstatSync(current).isSymbolicLink()) if (index === 0) current = realpathSync(current);
+		else throw new Error(`${label} must contain no symlink component.`);
+	}
+	if (!lstatSync(current).isDirectory()) throw new Error(`${label} must be a directory.`);
+	return realpathSync(current);
+}
+function toPosixPath(path) {
+	return path.replace(/\\/gu, "/");
+}
+//#endregion
+//#region src/core/internal/project.ts
+/**
+* Projects are identified solely by their canonical local root. A Git
+* repository without an origin, a non-Git directory, a Git worktree, and a
+* separate clone are all independent checkouts with their own canonical root.
+*/
+function canonicalProjectRoot(path, runner) {
+	const directory = realDirectoryWithoutSymlinks(path, "Project path");
+	const toplevel = optionalGit(directory, ["rev-parse", "--show-toplevel"], runner);
+	if (toplevel === void 0 || toplevel.length === 0) return directory;
+	return realpathSync(toplevel);
+}
+//#endregion
+//#region src/core/internal/project-pointer.ts
+const BEGIN = "<!-- context-tree:begin -->";
+const END = "<!-- context-tree:end -->";
+function pointerBlock(treePath) {
+	return [
+		BEGIN,
+		"## Context Tree",
+		"",
+		`This project is connected to a Context Tree at \`${treePath}\`.`,
+		"",
+		"Read the decisions and constraints that bear on a task before planning or",
+		"changing code, and record durable decisions there. Use the `context-tree-read`",
+		"and `context-tree-write` skills rather than editing the tree by hand.",
+		END
+	].join("\n");
+}
+/** A real regular file, a real absent path, or a refusal. */
+function regularFileContent(path) {
+	const entry = lstatSync(path, { throwIfNoEntry: false });
+	if (entry === void 0) return void 0;
+	if (entry.isSymbolicLink() || !entry.isFile()) throw new Error(`Refusing to write the Context Tree pointer through a symlink or non-file: ${path}`);
+	return readFileSync(path, "utf8");
+}
+/**
+* Record the connected tree in the project's own `AGENTS.md`, so any agent that reads
+* instruction files knows the tree exists without a host-specific session hook.
+*
+* Idempotent: a delimited block is rewritten in place, never appended twice, so
+* switching the connected tree updates the existing pointer. All other content is
+* preserved, and an existing regular `CLAUDE.md` is left alone.
+*/
+function writeProjectPointer(projectPath, treePath) {
+	const agentsPath = join(projectPath, "AGENTS.md");
+	const block = pointerBlock(treePath);
+	const existing = regularFileContent(agentsPath);
+	if (existing === void 0) {
+		writeFileSync(agentsPath, `# AGENTS.md\n\n${block}\n`, {
+			encoding: "utf8",
+			mode: 420
+		});
+		linkClaudeMarkdown(projectPath);
+		return "written";
+	}
+	const start = existing.indexOf(BEGIN);
+	const end = existing.indexOf(END);
+	if (start !== -1 && end > start) {
+		const replaced = `${existing.slice(0, start)}${block}${existing.slice(end + 25)}`;
+		if (replaced === existing) return "skipped";
+		writeFileSync(agentsPath, replaced, { encoding: "utf8" });
+		return "updated";
+	}
+	writeFileSync(agentsPath, `${existing}${existing.endsWith("\n\n") ? "" : existing.endsWith("\n") ? "\n" : "\n\n"}${block}\n`, { encoding: "utf8" });
+	linkClaudeMarkdown(projectPath);
+	return "written";
+}
+/** Point CLAUDE.md at AGENTS.md only when the project has no CLAUDE.md of its own. */
+function linkClaudeMarkdown(projectPath) {
+	const claudePath = join(projectPath, "CLAUDE.md");
+	if (lstatSync(claudePath, { throwIfNoEntry: false }) !== void 0) return;
+	try {
+		symlinkSync("AGENTS.md", claudePath, "file");
+	} catch {}
+}
 //#endregion
 //#region node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js
 var require_identity = /* @__PURE__ */ __commonJSMin(((exports) => {
@@ -13728,557 +14170,220 @@ var require_public_api = /* @__PURE__ */ __commonJSMin(((exports) => {
 	var identity = require_identity();
 	var lineCounter = require_line_counter();
 	var parser = require_parser();
-	function parseOptions(options) {
-		const prettyErrors = options.prettyErrors !== false;
-		return {
-			lineCounter: options.lineCounter || prettyErrors && new lineCounter.LineCounter() || null,
-			prettyErrors
-		};
-	}
-	/**
-	* Parse the input as a stream of YAML documents.
-	*
-	* Documents should be separated from each other by `...` or `---` marker lines.
-	*
-	* @returns If an empty `docs` array is returned, it will be of type
-	*   EmptyStream and contain additional stream information. In
-	*   TypeScript, you should use `'empty' in docs` as a type guard for it.
-	*/
-	function parseAllDocuments(source, options = {}) {
-		const { lineCounter, prettyErrors } = parseOptions(options);
-		const parser$1 = new parser.Parser(lineCounter?.addNewLine);
-		const composer$1 = new composer.Composer(options);
-		const docs = Array.from(composer$1.compose(parser$1.parse(source)));
-		if (prettyErrors && lineCounter) for (const doc of docs) {
-			doc.errors.forEach(errors.prettifyError(source, lineCounter));
-			doc.warnings.forEach(errors.prettifyError(source, lineCounter));
-		}
-		if (docs.length > 0) return docs;
-		return Object.assign([], { empty: true }, composer$1.streamInfo());
-	}
-	/** Parse an input string into a single YAML.Document */
-	function parseDocument(source, options = {}) {
-		const { lineCounter, prettyErrors } = parseOptions(options);
-		const parser$1 = new parser.Parser(lineCounter?.addNewLine);
-		const composer$1 = new composer.Composer(options);
-		let doc = null;
-		for (const _doc of composer$1.compose(parser$1.parse(source), true, source.length)) if (!doc) doc = _doc;
-		else if (doc.options.logLevel !== "silent") {
-			doc.errors.push(new errors.YAMLParseError(_doc.range.slice(0, 2), "MULTIPLE_DOCS", "Source contains multiple documents; please use YAML.parseAllDocuments()"));
-			break;
-		}
-		if (prettyErrors && lineCounter) {
-			doc.errors.forEach(errors.prettifyError(source, lineCounter));
-			doc.warnings.forEach(errors.prettifyError(source, lineCounter));
-		}
-		return doc;
-	}
-	function parse(src, reviver, options) {
-		let _reviver = void 0;
-		if (typeof reviver === "function") _reviver = reviver;
-		else if (options === void 0 && reviver && typeof reviver === "object") options = reviver;
-		const doc = parseDocument(src, options);
-		if (!doc) return null;
-		doc.warnings.forEach((warning) => log.warn(doc.options.logLevel, warning));
-		if (doc.errors.length > 0) if (doc.options.logLevel !== "silent") throw doc.errors[0];
-		else doc.errors = [];
-		return doc.toJS(Object.assign({ reviver: _reviver }, options));
-	}
-	function stringify(value, replacer, options) {
-		let _replacer = null;
-		if (typeof replacer === "function" || Array.isArray(replacer)) _replacer = replacer;
-		else if (options === void 0 && replacer) options = replacer;
-		if (typeof options === "string") options = options.length;
-		if (typeof options === "number") {
-			const indent = Math.round(options);
-			options = indent < 1 ? void 0 : indent > 8 ? { indent: 8 } : { indent };
-		}
-		if (value === void 0) {
-			const { keepUndefined } = options ?? replacer ?? {};
-			if (!keepUndefined) return void 0;
-		}
-		if (identity.isDocument(value) && !_replacer) return value.toString(options);
-		return new Document.Document(value, _replacer, options).toString(options);
-	}
-	exports.parse = parse;
-	exports.parseAllDocuments = parseAllDocuments;
-	exports.parseDocument = parseDocument;
-	exports.stringify = stringify;
-}));
-//#endregion
-//#region src/internal/value.ts
-var import_dist = (/* @__PURE__ */ __commonJSMin(((exports) => {
-	var composer = require_composer();
-	var Document = require_Document();
-	var Schema = require_Schema();
-	var errors = require_errors();
-	var Alias = require_Alias();
-	var identity = require_identity();
-	var Pair = require_Pair();
-	var Scalar = require_Scalar();
-	var YAMLMap = require_YAMLMap();
-	var YAMLSeq = require_YAMLSeq();
-	require_cst();
-	var lexer = require_lexer();
-	var lineCounter = require_line_counter();
-	var parser = require_parser();
-	var publicApi = require_public_api();
-	var visit = require_visit();
-	exports.Composer = composer.Composer;
-	exports.Document = Document.Document;
-	exports.Schema = Schema.Schema;
-	exports.YAMLError = errors.YAMLError;
-	exports.YAMLParseError = errors.YAMLParseError;
-	exports.YAMLWarning = errors.YAMLWarning;
-	exports.Alias = Alias.Alias;
-	exports.isAlias = identity.isAlias;
-	exports.isCollection = identity.isCollection;
-	exports.isDocument = identity.isDocument;
-	exports.isMap = identity.isMap;
-	exports.isNode = identity.isNode;
-	exports.isPair = identity.isPair;
-	exports.isScalar = identity.isScalar;
-	exports.isSeq = identity.isSeq;
-	exports.Pair = Pair.Pair;
-	exports.Scalar = Scalar.Scalar;
-	exports.YAMLMap = YAMLMap.YAMLMap;
-	exports.YAMLSeq = YAMLSeq.YAMLSeq;
-	exports.Lexer = lexer.Lexer;
-	exports.LineCounter = lineCounter.LineCounter;
-	exports.Parser = parser.Parser;
-	exports.parse = publicApi.parse;
-	exports.parseAllDocuments = publicApi.parseAllDocuments;
-	exports.parseDocument = publicApi.parseDocument;
-	exports.stringify = publicApi.stringify;
-	exports.visit = visit.visit;
-	exports.visitAsync = visit.visitAsync;
-})))();
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-//#endregion
-//#region src/internal/frontmatter.ts
-function parseYamlMapping(source) {
-	const value = (0, import_dist.parse)(source);
-	if (!isRecord(value)) throw new Error("frontmatter must be a YAML mapping");
-	return value;
-}
-function readLine(source, start) {
-	const newline = source.indexOf("\n", start);
-	const end = newline === -1 ? source.length : newline + 1;
-	const contentEnd = newline === -1 ? source.length : source.charCodeAt(newline - 1) === 13 ? newline - 1 : newline;
-	return {
-		end,
-		start,
-		value: source.slice(start, contentEnd)
-	};
-}
-function parseMarkdownFrontmatter(source) {
-	const opening = readLine(source, 0);
-	if (opening.value !== "---") return {
-		body: source,
-		data: null,
-		frontmatter: "missing"
-	};
-	let closing;
-	let lineStart = opening.end;
-	while (lineStart < source.length) {
-		const line = readLine(source, lineStart);
-		if (line.value === "---") {
-			closing = line;
-			break;
-		}
-		lineStart = line.end;
-	}
-	if (closing === void 0) return {
-		body: "",
-		data: null,
-		error: "frontmatter closing delimiter is missing",
-		frontmatter: "invalid"
-	};
-	const body = source.slice(closing.end);
-	try {
-		return {
-			body,
-			data: parseYamlMapping(source.slice(opening.end, closing.start)),
-			frontmatter: "valid"
-		};
-	} catch (error) {
+	function parseOptions(options) {
+		const prettyErrors = options.prettyErrors !== false;
 		return {
-			body,
-			data: null,
-			error: error instanceof Error ? error.message : String(error),
-			frontmatter: "invalid"
+			lineCounter: options.lineCounter || prettyErrors && new lineCounter.LineCounter() || null,
+			prettyErrors
 		};
 	}
-}
-const CONTEXT_TREE_ROOT_NODE_MAX_BYTES = 16 * 1024;
-const VALIDATION_CODES = {
-	rootMissing: "TREE_ROOT_MISSING",
-	rootNodeInvalid: "TREE_ROOT_NODE_INVALID",
-	rootOnlyFields: "TREE_ROOT_ONLY_FIELDS",
-	directoryNodeMissing: "TREE_DIRECTORY_NODE_MISSING",
-	frontmatterMissing: "TREE_FRONTMATTER_MISSING",
-	frontmatterParse: "TREE_FRONTMATTER_PARSE",
-	titleMissing: "TREE_TITLE_MISSING",
-	titleInvalid: "TREE_TITLE_INVALID",
-	descriptionInvalid: "TREE_DESCRIPTION_INVALID",
-	softLinksInvalid: "TREE_SOFT_LINKS_INVALID",
-	softLinkBroken: "TREE_SOFT_LINK_BROKEN",
-	softLinkPathEscape: "TREE_SOFT_LINK_PATH_ESCAPE",
-	markdownPathEscape: "TREE_MARKDOWN_LINK_PATH_ESCAPE",
-	markdownFileSymlinkBroken: "TREE_MARKDOWN_FILE_SYMLINK_BROKEN",
-	markdownFileSymlinkUnsupported: "TREE_MARKDOWN_FILE_SYMLINK_UNSUPPORTED",
-	markdownFilePathEscape: "TREE_MARKDOWN_FILE_PATH_ESCAPE",
-	markdownFileContentClassMismatch: "TREE_MARKDOWN_FILE_CONTENT_CLASS_MISMATCH",
-	directorySymlinkUnsupported: "TREE_DIRECTORY_SYMLINK_UNSUPPORTED",
-	directorySymlinkPathEscape: "TREE_DIRECTORY_SYMLINK_PATH_ESCAPE"
-};
-const CLI_ERROR_CODES = {
-	corruptConnection: "CORRUPT_CONNECTION",
-	dirtyTree: "DIRTY_TREE",
-	failed: "CONTEXT_TREE_FAILED",
-	githubAuth: "GITHUB_AUTH",
-	invalidTree: "INVALID_TREE",
-	noConnection: "NO_CONNECTION",
-	publishIncomplete: "PUBLISH_INCOMPLETE",
-	repositoryExists: "REPOSITORY_EXISTS",
-	staleConnection: "STALE_CONNECTION",
-	writeOutdated: "WRITE_OUTDATED"
-};
-function hasUnsafeCharacter(value) {
-	return [...value].some((character) => {
-		const code = character.codePointAt(0);
-		return code !== void 0 && (code <= 31 || code === 127 || code === 8232 || code === 8233);
-	});
-}
-const absoluteSingleLinePathSchema = string$2().superRefine((value, context) => {
-	if (!isAbsolute(value) || value.trim() !== value || hasUnsafeCharacter(value)) context.addIssue({
-		code: "custom",
-		message: "Paths must be absolute single-line values."
-	});
-});
-const credentialFreeRepositoryUrlSchema = string$2().superRefine((value, context) => {
-	if (value.trim() !== value || hasUnsafeCharacter(value) || value.includes("\\")) {
-		context.addIssue({
-			code: "custom",
-			message: "Repository URLs must be canonical single-line values."
-		});
-		return;
-	}
-	if (value.includes("?") || value.includes("#")) {
-		context.addIssue({
-			code: "custom",
-			message: "Repository URLs must not contain a query or fragment."
-		});
-		return;
-	}
-	if (/^(?:[a-z\d._-]+@)?[a-z\d.-]+:[^\s/][^\s]*$/iu.test(value)) return;
-	try {
-		const parsed = new URL(value);
-		if (parsed.protocol !== "http:" && parsed.protocol !== "https:" && parsed.protocol !== "ssh:" || !parsed.hostname || parsed.pathname.split("/").every((part) => part.length === 0) || parsed.password || (parsed.protocol === "http:" || parsed.protocol === "https:") && parsed.username) throw new Error("invalid transport");
-	} catch {
-		context.addIssue({
-			code: "custom",
-			message: "Repository URLs must use credential-free HTTP(S), ssh://, or scp-like SSH syntax."
-		});
+	/**
+	* Parse the input as a stream of YAML documents.
+	*
+	* Documents should be separated from each other by `...` or `---` marker lines.
+	*
+	* @returns If an empty `docs` array is returned, it will be of type
+	*   EmptyStream and contain additional stream information. In
+	*   TypeScript, you should use `'empty' in docs` as a type guard for it.
+	*/
+	function parseAllDocuments(source, options = {}) {
+		const { lineCounter, prettyErrors } = parseOptions(options);
+		const parser$1 = new parser.Parser(lineCounter?.addNewLine);
+		const composer$1 = new composer.Composer(options);
+		const docs = Array.from(composer$1.compose(parser$1.parse(source)));
+		if (prettyErrors && lineCounter) for (const doc of docs) {
+			doc.errors.forEach(errors.prettifyError(source, lineCounter));
+			doc.warnings.forEach(errors.prettifyError(source, lineCounter));
+		}
+		if (docs.length > 0) return docs;
+		return Object.assign([], { empty: true }, composer$1.streamInfo());
 	}
-});
-const treeNameSchema = string$2().superRefine((value, context) => {
-	if (!/^[A-Za-z\d][A-Za-z\d._-]{0,99}$/u.test(value) || /\.git$/iu.test(value)) context.addIssue({
-		code: "custom",
-		message: "Tree name must be a safe single path segment."
-	});
-});
-const githubRepositoryIdentitySchema = string$2().superRefine((value, context) => {
-	const parts = value.split("/");
-	const [owner, name] = parts;
-	if (parts.length !== 2 || owner === void 0 || name === void 0 || !/^[A-Za-z\d](?:[A-Za-z\d-]{0,37}[A-Za-z\d])?$/u.test(owner) || !treeNameSchema.safeParse(name).success) context.addIssue({
-		code: "custom",
-		message: "Repository must be an explicit GitHub OWNER/REPO identity."
-	});
-});
-const contextTreeRootNodeSchema = object({
-	frontmatter: object({
-		schemaVersion: literal(1),
-		title: string$2().trim().min(1),
-		description: string$2().trim().min(1).optional(),
-		soft_links: array(string$2().trim().min(1)).min(1).optional()
-	}).loose(),
-	body: string$2().trim().min(1, "Root NODE.md must contain repository-wide context.")
-});
-function parseContextTreeRootNode(markdown) {
-	if (Buffer.byteLength(markdown, "utf8") > 16384) throw new Error(`Root NODE.md exceeds the ${CONTEXT_TREE_ROOT_NODE_MAX_BYTES}-byte limit.`);
-	const document = parseMarkdownFrontmatter(markdown);
-	if (document.frontmatter === "missing") throw new Error("Root NODE.md must contain YAML frontmatter.");
-	if (document.frontmatter === "invalid") throw new Error(`Root NODE.md frontmatter is invalid: ${document.error}`);
-	return contextTreeRootNodeSchema.parse({
-		frontmatter: document.data,
-		body: document.body
-	});
-}
-const contextContentClassSchema = _enum([
-	"normal",
-	"member",
-	"repo-infra"
-]);
-const treeValidationFindingSchema = object({
-	code: _enum(VALIDATION_CODES),
-	message: string$2(),
-	path: string$2(),
-	target: string$2().optional()
-}).strict();
-const contextContentClassCountsSchema = object({
-	normal: number().int().nonnegative(),
-	member: number().int().nonnegative(),
-	"repo-infra": number().int().nonnegative()
-}).strict();
-object({
-	content: string$2(),
-	schemaVersion: literal(1)
-}).strict();
-const contextTreeReadCommonFields = {
-	contentClass: contextContentClassSchema,
-	kind: _enum(["directory", "file"]),
-	path: string$2()
-};
-const contextTreeReadNodeSchema = object({
-	body: string$2(),
-	frontmatter: record(string$2(), unknown()),
-	...contextTreeReadCommonFields
-}).strict();
-object({
-	children: array(object({
-		description: string$2().optional(),
-		title: string$2(),
-		...contextTreeReadCommonFields
-	}).strict()),
-	node: contextTreeReadNodeSchema,
-	root: string$2(),
-	schemaVersion: literal(1),
-	target: string$2()
-}).strict();
-object({
-	findings: array(treeValidationFindingSchema),
-	ok: boolean(),
-	root: string$2(),
-	scannedByContentClass: contextContentClassCountsSchema,
-	schemaVersion: literal(1)
-}).strict();
-const contextTreeStateSchema = discriminatedUnion("kind", [object({
-	kind: literal("local"),
-	path: absoluteSingleLinePathSchema
-}).strict(), object({
-	kind: literal("github"),
-	path: absoluteSingleLinePathSchema,
-	repository: githubRepositoryIdentitySchema
-}).strict()]);
-const contextTreeConnectionSchema = object({
-	projectPath: absoluteSingleLinePathSchema,
-	tree: contextTreeStateSchema
-}).strict();
-object({
-	schemaVersion: literal(1),
-	tree: contextTreeStateSchema
-}).strict();
-object({
-	branch: string$2().trim().min(1),
-	commitSha: string$2(),
-	created: boolean(),
-	schemaVersion: literal(1),
-	title: string$2().trim().min(1),
-	treePath: absoluteSingleLinePathSchema
-}).strict();
-const managedTreeListingEntrySchema = object({
-	name: treeNameSchema,
-	tree: contextTreeStateSchema
-}).strict();
-object({
-	schemaVersion: literal(1),
-	trees: array(managedTreeListingEntrySchema)
-}).strict();
-object({
-	branch: string$2().trim().min(1),
-	schemaVersion: literal(1),
-	sha: string$2(),
-	tree: contextTreeStateSchema
-}).strict();
-object({
-	schemaVersion: literal(1),
-	worktreePath: absoluteSingleLinePathSchema
-}).strict();
-object({
-	branch: string$2().trim().min(1),
-	schemaVersion: literal(1),
-	sha: string$2()
-}).strict();
-object({
-	branch: string$2().trim().min(1),
-	repository: githubRepositoryIdentitySchema,
-	schemaVersion: literal(1),
-	sha: string$2(),
-	url: credentialFreeRepositoryUrlSchema
-}).strict();
-object({
-	error: object({
-		code: _enum(CLI_ERROR_CODES),
-		message: string$2()
-	}).strict(),
-	ok: literal(false),
-	schemaVersion: literal(1)
-}).strict();
-//#endregion
-//#region src/core/internal/errors.ts
-/**
-* A failure the CLI reports with a specific machine-readable code. Anything
-* thrown as a plain Error is reported as CONTEXT_TREE_FAILED instead.
-*/
-var ContextTreeError = class extends Error {
-	code;
-	constructor(code, message) {
-		super(message);
-		this.name = "ContextTreeError";
-		this.code = code;
+	/** Parse an input string into a single YAML.Document */
+	function parseDocument(source, options = {}) {
+		const { lineCounter, prettyErrors } = parseOptions(options);
+		const parser$1 = new parser.Parser(lineCounter?.addNewLine);
+		const composer$1 = new composer.Composer(options);
+		let doc = null;
+		for (const _doc of composer$1.compose(parser$1.parse(source), true, source.length)) if (!doc) doc = _doc;
+		else if (doc.options.logLevel !== "silent") {
+			doc.errors.push(new errors.YAMLParseError(_doc.range.slice(0, 2), "MULTIPLE_DOCS", "Source contains multiple documents; please use YAML.parseAllDocuments()"));
+			break;
+		}
+		if (prettyErrors && lineCounter) {
+			doc.errors.forEach(errors.prettifyError(source, lineCounter));
+			doc.warnings.forEach(errors.prettifyError(source, lineCounter));
+		}
+		return doc;
 	}
-};
-//#endregion
-//#region src/core/internal/git.ts
-function defaultRunner(command, args) {
-	const result = spawnSync(command, args, {
-		encoding: "utf8",
-		stdio: [
-			"ignore",
-			"pipe",
-			"pipe"
-		]
-	});
-	return {
-		status: result.status,
-		stderr: typeof result.stderr === "string" ? result.stderr : "",
-		stdout: typeof result.stdout === "string" ? result.stdout : ""
-	};
-}
-/** A failed Git or `gh` operation. Messages never include the argv. */
-var CommandError = class extends Error {
-	command;
-	status;
-	stderr;
-	constructor(command, status, stderr, message) {
-		const detail = sanitizeCommandOutput(stderr).trim();
-		super(detail.length > 0 ? `${message}: ${detail}` : message);
-		this.name = "CommandError";
-		this.command = command;
-		this.status = status;
-		this.stderr = detail;
+	function parse(src, reviver, options) {
+		let _reviver = void 0;
+		if (typeof reviver === "function") _reviver = reviver;
+		else if (options === void 0 && reviver && typeof reviver === "object") options = reviver;
+		const doc = parseDocument(src, options);
+		if (!doc) return null;
+		doc.warnings.forEach((warning) => log.warn(doc.options.logLevel, warning));
+		if (doc.errors.length > 0) if (doc.options.logLevel !== "silent") throw doc.errors[0];
+		else doc.errors = [];
+		return doc.toJS(Object.assign({ reviver: _reviver }, options));
 	}
-};
-/** Remove credentials and common access-token shapes before surfacing subprocess output. */
-function sanitizeCommandOutput(value) {
-	return value.replace(/((?:https?|ssh):\/\/)[^\s/@]+@/giu, "$1<redacted>@").replace(/\b(?:gh[opsu]_[A-Za-z\d_]{20,}|github_pat_[A-Za-z\d_]{20,})\b/gu, "<redacted>").replace(/(authorization\s*:\s*(?:bearer|token)\s+)[^\s]+/giu, "$1<redacted>");
-}
-function trimOutput(value) {
-	return value.trim();
-}
-function execute(runner, command, args, message) {
-	const result = runner(command, args);
-	if (result.status !== 0) throw new CommandError(command, result.status, result.stderr, message);
-	return trimOutput(result.stdout);
-}
-/** Run a Git command that is not scoped by `-C`, such as `git init <path>`. */
-function gitCommand(args, options = {}) {
-	return execute(options.runner ?? defaultRunner, "git", args, options.message ?? "A Git operation failed.");
-}
-/** Run `git -C <root> <args>` and return trimmed stdout, throwing on failure. */
-function git(root, args, options = {}) {
-	return execute(options.runner ?? defaultRunner, "git", [
-		"-C",
-		root,
-		...args
-	], options.message ?? "A Git operation failed.");
-}
-/** Run `git -C <root> <args>` and return trimmed stdout, or undefined on failure. */
-function optionalGit(root, args, runner = defaultRunner) {
-	const result = runner("git", [
-		"-C",
-		root,
-		...args
-	]);
-	if (result.status !== 0) return void 0;
-	return trimOutput(result.stdout);
-}
-/** Run `gh <args>` and return trimmed stdout, throwing on failure. */
-function gh(args, options = {}) {
-	return execute(options.runner ?? defaultRunner, "gh", args, options.message ?? "A GitHub CLI operation failed.");
-}
-//#endregion
-//#region src/core/internal/github-repository.ts
-const ORIGIN_MESSAGE = "Context Tree origin must identify a credential-free GitHub OWNER/REPO repository.";
-function canonicalGitHubRepositoryUrl(repository) {
-	githubRepositoryIdentitySchema.parse(repository);
-	return `https://github.com/${repository}.git`;
-}
-/** Derive OWNER/REPO from a github.com origin, rejecting anything else. */
-function gitHubRepositoryFromOriginUrl(origin) {
-	if (!credentialFreeRepositoryUrlSchema.safeParse(origin).success) throw new Error(ORIGIN_MESSAGE);
-	let owner;
-	let name;
-	const scp = /^(?:git@)?github\.com:([^/]+)\/(.+)$/iu.exec(origin);
-	if (scp !== null) [, owner, name] = scp;
-	else {
-		const url = URL.parse(origin);
-		if (url === null || url.hostname.toLowerCase() !== "github.com") throw new Error(ORIGIN_MESSAGE);
-		[owner, name] = url.pathname.replace(/^\/+|\/+$/gu, "").split("/");
+	function stringify(value, replacer, options) {
+		let _replacer = null;
+		if (typeof replacer === "function" || Array.isArray(replacer)) _replacer = replacer;
+		else if (options === void 0 && replacer) options = replacer;
+		if (typeof options === "string") options = options.length;
+		if (typeof options === "number") {
+			const indent = Math.round(options);
+			options = indent < 1 ? void 0 : indent > 8 ? { indent: 8 } : { indent };
+		}
+		if (value === void 0) {
+			const { keepUndefined } = options ?? replacer ?? {};
+			if (!keepUndefined) return void 0;
+		}
+		if (identity.isDocument(value) && !_replacer) return value.toString(options);
+		return new Document.Document(value, _replacer, options).toString(options);
 	}
-	const repository = `${owner ?? ""}/${(name ?? "").replace(/\.git$/iu, "")}`;
-	if (!githubRepositoryIdentitySchema.safeParse(repository).success) throw new Error(ORIGIN_MESSAGE);
-	return repository;
+	exports.parse = parse;
+	exports.parseAllDocuments = parseAllDocuments;
+	exports.parseDocument = parseDocument;
+	exports.stringify = stringify;
+}));
+//#endregion
+//#region src/internal/value.ts
+var import_dist = (/* @__PURE__ */ __commonJSMin(((exports) => {
+	var composer = require_composer();
+	var Document = require_Document();
+	var Schema = require_Schema();
+	var errors = require_errors();
+	var Alias = require_Alias();
+	var identity = require_identity();
+	var Pair = require_Pair();
+	var Scalar = require_Scalar();
+	var YAMLMap = require_YAMLMap();
+	var YAMLSeq = require_YAMLSeq();
+	require_cst();
+	var lexer = require_lexer();
+	var lineCounter = require_line_counter();
+	var parser = require_parser();
+	var publicApi = require_public_api();
+	var visit = require_visit();
+	exports.Composer = composer.Composer;
+	exports.Document = Document.Document;
+	exports.Schema = Schema.Schema;
+	exports.YAMLError = errors.YAMLError;
+	exports.YAMLParseError = errors.YAMLParseError;
+	exports.YAMLWarning = errors.YAMLWarning;
+	exports.Alias = Alias.Alias;
+	exports.isAlias = identity.isAlias;
+	exports.isCollection = identity.isCollection;
+	exports.isDocument = identity.isDocument;
+	exports.isMap = identity.isMap;
+	exports.isNode = identity.isNode;
+	exports.isPair = identity.isPair;
+	exports.isScalar = identity.isScalar;
+	exports.isSeq = identity.isSeq;
+	exports.Pair = Pair.Pair;
+	exports.Scalar = Scalar.Scalar;
+	exports.YAMLMap = YAMLMap.YAMLMap;
+	exports.YAMLSeq = YAMLSeq.YAMLSeq;
+	exports.Lexer = lexer.Lexer;
+	exports.LineCounter = lineCounter.LineCounter;
+	exports.Parser = parser.Parser;
+	exports.parse = publicApi.parse;
+	exports.parseAllDocuments = publicApi.parseAllDocuments;
+	exports.parseDocument = publicApi.parseDocument;
+	exports.stringify = publicApi.stringify;
+	exports.visit = visit.visit;
+	exports.visitAsync = visit.visitAsync;
+})))();
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 //#endregion
-//#region src/core/path.ts
-function isPathInside(root, target) {
-	const path = relative(root, target);
-	return path === "" || !path.startsWith("..") && !isAbsolute(path);
+//#region src/internal/frontmatter.ts
+function parseYamlMapping(source) {
+	const value = (0, import_dist.parse)(source);
+	if (!isRecord(value)) throw new Error("frontmatter must be a YAML mapping");
+	return value;
 }
-function resolveTreeRoot(path) {
-	const absolute = resolve(path);
-	const entry = lstatSync(absolute);
-	if (entry.isSymbolicLink() || !entry.isDirectory()) throw new Error(`Context Tree root must be a real directory: ${path}`);
-	return realpathSync(absolute);
+function readLine(source, start) {
+	const newline = source.indexOf("\n", start);
+	const end = newline === -1 ? source.length : newline + 1;
+	const contentEnd = newline === -1 ? source.length : source.charCodeAt(newline - 1) === 13 ? newline - 1 : newline;
+	return {
+		end,
+		start,
+		value: source.slice(start, contentEnd)
+	};
 }
-/** Resolve a directory while rejecting symlinks in user-controlled path components. */
-function realDirectoryWithoutSymlinks(path, label) {
-	const absolute = resolve(path);
-	const parsed = parse(absolute);
-	const parts = absolute.slice(parsed.root.length).split(sep).filter(Boolean);
-	let current = parsed.root;
-	for (const [index, part] of parts.entries()) {
-		current = resolve(current, part);
-		if (lstatSync(current).isSymbolicLink()) if (index === 0) current = realpathSync(current);
-		else throw new Error(`${label} must contain no symlink component.`);
+function parseMarkdownFrontmatter(source) {
+	const opening = readLine(source, 0);
+	if (opening.value !== "---") return {
+		body: source,
+		data: null,
+		frontmatter: "missing"
+	};
+	let closing;
+	let lineStart = opening.end;
+	while (lineStart < source.length) {
+		const line = readLine(source, lineStart);
+		if (line.value === "---") {
+			closing = line;
+			break;
+		}
+		lineStart = line.end;
+	}
+	if (closing === void 0) return {
+		body: "",
+		data: null,
+		error: "frontmatter closing delimiter is missing",
+		frontmatter: "invalid"
+	};
+	const body = source.slice(closing.end);
+	try {
+		return {
+			body,
+			data: parseYamlMapping(source.slice(opening.end, closing.start)),
+			frontmatter: "valid"
+		};
+	} catch (error) {
+		return {
+			body,
+			data: null,
+			error: error instanceof Error ? error.message : String(error),
+			frontmatter: "invalid"
+		};
 	}
-	if (!lstatSync(current).isDirectory()) throw new Error(`${label} must be a directory.`);
-	return realpathSync(current);
 }
-function toPosixPath(path) {
-	return path.replace(/\\/gu, "/");
+//#endregion
+//#region src/core/internal/filesystem.ts
+function readUtf8File(path) {
+	return new TextDecoder("utf-8", { fatal: true }).decode(readFileSync(path));
 }
 //#endregion
-//#region src/core/internal/project.ts
+//#region src/core/internal/root-node.ts
 /**
-* Projects are identified solely by their canonical local root. A Git
-* repository without an origin, a non-Git directory, a Git worktree, and a
-* separate clone are all independent checkouts with their own canonical root.
+* The one root NODE.md reader. Verification and tree-state resolution both need
+* it, and they must agree on the fail-closed file guard, so it lives here rather
+* than in either caller: tree-state already imports verify, so a shared helper
+* in verify would close a cycle.
 */
-function canonicalProjectRoot(path, runner) {
-	const directory = realDirectoryWithoutSymlinks(path, "Project path");
-	const toplevel = optionalGit(directory, ["rev-parse", "--show-toplevel"], runner);
-	if (toplevel === void 0 || toplevel.length === 0) return directory;
-	return realpathSync(toplevel);
+/** Parse root NODE.md content, bounding size before any YAML or Markdown work. */
+function parseContextTreeRootNode(markdown) {
+	if (Buffer.byteLength(markdown, "utf8") > 16384) throw new Error(`Root NODE.md exceeds the ${CONTEXT_TREE_ROOT_NODE_MAX_BYTES}-byte limit.`);
+	const document = parseMarkdownFrontmatter(markdown);
+	if (document.frontmatter === "missing") throw new Error("Root NODE.md must contain YAML frontmatter.");
+	if (document.frontmatter === "invalid") throw new Error(`Root NODE.md frontmatter is invalid: ${document.error}`);
+	return contextTreeRootNodeSchema.parse({
+		frontmatter: document.data,
+		body: document.body
+	});
 }
-//#endregion
-//#region src/core/internal/filesystem.ts
-function readUtf8File(path) {
-	return new TextDecoder("utf-8", { fatal: true }).decode(readFileSync(path));
+/** Read and parse a tree's root NODE.md, refusing symlinked or irregular files. */
+function readRootNode(root) {
+	const path = join(root, "NODE.md");
+	const entry = lstatSync(path);
+	if (entry.isSymbolicLink() || !entry.isFile()) throw new Error("Root NODE.md must be a regular file and must not be a symlink.");
+	return parseContextTreeRootNode(readUtf8File(path));
 }
 //#endregion
 //#region src/core/internal/content-class.ts
@@ -25264,16 +25369,13 @@ function collectNodeValidationFindings(treeRoot) {
 //#endregion
 //#region src/core/verify.ts
 function rootNodeFindings(root) {
-	const path = join(root, "NODE.md");
-	if (!existsSync(path)) return [{
+	if (!existsSync(join(root, "NODE.md"))) return [{
 		code: VALIDATION_CODES.rootMissing,
 		message: "root NODE.md is missing",
 		path: "NODE.md"
 	}];
 	try {
-		const entry = lstatSync(path);
-		if (entry.isSymbolicLink() || !entry.isFile()) throw new Error("Root NODE.md must be a regular file and must not be a symlink.");
-		parseContextTreeRootNode(readUtf8File(path));
+		readRootNode(root);
 		return [];
 	} catch (error) {
 		return [{
@@ -25320,13 +25422,6 @@ function exactGitRoot(treePath, runner) {
 	if (realpathSync(toplevel) !== root) throw new Error("Context Tree path must be the real Git root.");
 	return root;
 }
-/** Parse the root NODE.md, refusing symlinked or irregular files. */
-function parseRootNode(root) {
-	const path = join(root, "NODE.md");
-	const entry = lstatSync(path);
-	if (entry.isSymbolicLink() || !entry.isFile()) throw new Error("Context Tree root NODE.md must be a regular file.");
-	return parseContextTreeRootNode(readUtf8File(path));
-}
 /**
 * Validate a clean checkout without inferring state from mutable Git remotes.
 * Uncommitted changes and invalid content each get their own code so callers
@@ -25365,7 +25460,7 @@ const connectionsFileSchema = object({
 }).strict();
 const DUPLICATE_MESSAGE = "Duplicate Context Tree connection records exist for this project.";
 const NO_CONNECTION_MESSAGE = "No Context Tree connection exists for this project; run context-tree create or connect.";
-function realHome() {
+function realHome$1() {
 	try {
 		return realpathSync(homedir());
 	} catch {
@@ -25374,7 +25469,7 @@ function realHome() {
 }
 /** Create a managed application directory below the home directory, failing closed on symlinks. */
 function ensureManagedDirectory(...segments) {
-	let current = realHome();
+	let current = realHome$1();
 	for (const segment of segments) {
 		current = join(current, segment);
 		const entry = lstatSync(current, { throwIfNoEntry: false });
@@ -25388,10 +25483,10 @@ function ensureManagedDirectory(...segments) {
 }
 /** The managed namespace without creating it; listing must not create an absent directory. */
 function managedTreesPath() {
-	return join(realHome(), ".context-tree", "trees");
+	return join(realHome$1(), ".context-tree", "trees");
 }
 function connectionsPath() {
-	return join(realHome(), ".context-tree", "connections.json");
+	return join(realHome$1(), ".context-tree", "connections.json");
 }
 function managedTreesRoot() {
 	return ensureManagedDirectory(".context-tree", "trees");
@@ -25565,24 +25660,26 @@ function realManagedDirectory(name, destination) {
 * clean, fully valid Git checkout at an explicit disk path in place.
 */
 function connectProject(options, runner) {
-	if ("treePath" in options) {
-		const tree = classifyCheckout(options.treePath, runner);
-		return upsertConnection({
+	/** Store the connection, then record it in the project so any agent can find it. */
+	const connect = (tree) => {
+		const result = upsertConnection({
 			projectPath: options.projectPath,
 			tree
 		}, runner);
-	}
+		return {
+			pointer: writeProjectPointer(canonicalProjectRoot(options.projectPath, runner), result.tree.path),
+			schemaVersion: 1,
+			tree: result.tree
+		};
+	};
+	if ("treePath" in options) return connect(classifyCheckout(options.treePath, runner));
 	const treesRoot = managedTreesRoot();
 	if (!options.target.includes("/")) {
 		const name = managedName(options.target);
 		const destination = join(treesRoot, name);
 		if (!existsSync(destination)) throw new Error(`No managed Context Tree named ${name} exists.`);
 		realManagedDirectory(name, destination);
-		const tree = classifyCheckout(destination, runner);
-		return upsertConnection({
-			projectPath: options.projectPath,
-			tree
-		}, runner);
+		return connect(classifyCheckout(destination, runner));
 	}
 	const repository = githubRepositoryIdentitySchema.parse(options.target);
 	const repositoryName = repository.split("/")[1];
@@ -25593,10 +25690,7 @@ function connectProject(options, runner) {
 		realManagedDirectory(name, destination);
 		const tree = classifyCheckout(destination, runner);
 		if (tree.kind !== "github" || !sameRepository(tree.repository, repository)) throw new Error(`Managed Context Tree name ${name} is already used by a different tree.`);
-		return upsertConnection({
-			projectPath: options.projectPath,
-			tree
-		}, runner);
+		return connect(tree);
 	}
 	mkdirSync(destination, { mode: 448 });
 	try {
@@ -25614,10 +25708,7 @@ function connectProject(options, runner) {
 		});
 		const tree = classifyCheckout(destination, runner);
 		if (tree.kind !== "github" || !sameRepository(tree.repository, repository)) throw new Error("The cloned Context Tree origin does not match the requested repository.");
-		return upsertConnection({
-			projectPath: options.projectPath,
-			tree
-		}, runner);
+		return connect(tree);
 	} catch (error) {
 		rmSync(destination, {
 			force: true,
@@ -25768,7 +25859,7 @@ function projectName(canonicalRoot) {
 	const normalized = basename(canonicalRoot).toLowerCase().replace(/[^a-z\d._-]+/gu, "-").replace(/-{2,}/gu, "-").replace(/^[-.]+/u, "").replace(/[-.]+$/u, "").slice(0, 40);
 	return /^[a-z\d]/u.test(normalized) ? normalized : "project";
 }
-function existingCreateResult(destination, runner) {
+function existingCreateResult(canonical, destination, runner) {
 	return {
 		branch: git(destination, [
 			"symbolic-ref",
@@ -25783,8 +25874,9 @@ function existingCreateResult(destination, runner) {
 			runner
 		}),
 		created: false,
+		pointer: writeProjectPointer(canonical, destination),
 		schemaVersion: 1,
-		title: parseRootNode(destination).frontmatter.title,
+		title: readRootNode(destination).frontmatter.title,
 		treePath: destination
 	};
 }
@@ -25798,7 +25890,7 @@ function createProject(projectPath, runner) {
 	if (existsSync(destination)) {
 		const entry = lstatSync(destination);
 		if (entry.isSymbolicLink() || !entry.isDirectory() || current === void 0) throw new Error(`Managed Context Tree name ${name} is occupied; run context-tree connect ${name}.`);
-		return existingCreateResult(destination, runner);
+		return existingCreateResult(canonical, destination, runner);
 	}
 	mkdirSync(destination, { mode: 448 });
 	try {
@@ -25818,6 +25910,7 @@ function createProject(projectPath, runner) {
 			branch: scaffold.branch,
 			commitSha: scaffold.commit,
 			created: true,
+			pointer: writeProjectPointer(canonical, scaffold.root),
 			schemaVersion: 1,
 			title: name,
 			treePath: scaffold.root
@@ -25831,6 +25924,115 @@ function createProject(projectPath, runner) {
 	}
 }
 //#endregion
+//#region src/core/install.ts
+/** Per-host configuration directory, relative to the home directory or to a project root. */
+const HOST_CONFIG_DIRECTORY = {
+	claude: ".claude",
+	codex: ".codex"
+};
+/** Every supported host keeps user skills in the same subdirectory of its configuration directory. */
+const SKILLS_DIRECTORY = "skills";
+/** Only directories carrying this prefix are ever replaced or removed. */
+const OWNED_SKILL_PREFIX = "context-tree-";
+function realHome() {
+	try {
+		return realpathSync(homedir());
+	} catch {
+		return homedir();
+	}
+}
+/** Create a directory below `root`, failing closed on symlinks and non-directories. */
+function ensureRealDirectory(root, segments) {
+	let current = root;
+	for (const segment of segments) {
+		current = join(current, segment);
+		const entry = lstatSync(current, { throwIfNoEntry: false });
+		if (entry === void 0) {
+			mkdirSync(current, { mode: 448 });
+			continue;
+		}
+		if (entry.isSymbolicLink() || !entry.isDirectory()) throw new Error(`Context Tree skill directory must be a real directory: ${current}`);
+	}
+	return current;
+}
+/** Copy a packaged skill tree, refusing to read or write through symlinks. Skills are never executable. */
+function copyRealTree(source, destination) {
+	const entry = lstatSync(source);
+	if (entry.isSymbolicLink()) throw new Error(`Refusing to install a symlinked skill entry: ${source}`);
+	if (entry.isDirectory()) {
+		mkdirSync(destination, {
+			mode: 448,
+			recursive: true
+		});
+		for (const child of readdirSync(source)) copyRealTree(join(source, child), join(destination, child));
+		return;
+	}
+	if (!entry.isFile()) throw new Error(`Refusing to install a non-regular skill entry: ${source}`);
+	copyFileSync(source, destination);
+	chmodSync(destination, 420);
+}
+/** Packaged skill directory names, e.g. `context-tree-read`. */
+function packagedSkillNames(skillsRoot) {
+	return readdirSync(skillsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory() && entry.name.startsWith(OWNED_SKILL_PREFIX)).map((entry) => entry.name).sort();
+}
+/** Resolve one host's destination, or the reason it was skipped. */
+function hostDestination(host, root, isProjectInstall) {
+	const configDirectory = HOST_CONFIG_DIRECTORY[host];
+	if (!isProjectInstall) {
+		const hostRoot = join(root, configDirectory);
+		const entry = lstatSync(hostRoot, { throwIfNoEntry: false });
+		if (entry === void 0) return { reason: `${hostRoot} does not exist; install ${host} first, then run context-tree install.` };
+		if (entry.isSymbolicLink() || !entry.isDirectory()) return { reason: `${hostRoot} is not a real directory.` };
+	}
+	return { destination: ensureRealDirectory(root, [configDirectory, SKILLS_DIRECTORY]) };
+}
+/**
+* Copy the packaged skills into each requested host's skill directory.
+*
+* Existing `context-tree-*` directories are replaced; that is the upgrade path. Skill
+* directories the package does not own are never touched. A project install always
+* creates its target, because the caller named it.
+*/
+function installSkills(options = {}) {
+	const skillsRoot = resolvePackagedResource("skills");
+	const skills = packagedSkillNames(skillsRoot);
+	if (skills.length === 0) throw new Error("Packaged skills are missing; reinstall @first-tree-ai/context-tree.");
+	const hosts = options.hosts === void 0 || options.hosts.length === 0 ? SKILL_HOSTS : options.hosts;
+	const projectRoot = options.projectPath === void 0 ? void 0 : resolve(options.projectPath);
+	const root = projectRoot ?? realHome();
+	const installed = [];
+	const skipped = [];
+	for (const host of hosts) {
+		const resolved = hostDestination(host, root, projectRoot !== void 0);
+		if ("reason" in resolved) {
+			skipped.push({
+				host,
+				reason: resolved.reason
+			});
+			continue;
+		}
+		for (const skill of skills) {
+			const target = join(resolved.destination, skill);
+			if (lstatSync(target, { throwIfNoEntry: false }) !== void 0) rmSync(target, {
+				force: true,
+				recursive: true
+			});
+			copyRealTree(join(skillsRoot, skill), target);
+		}
+		installed.push({
+			host,
+			path: resolved.destination,
+			skills
+		});
+	}
+	return {
+		installed,
+		schemaVersion: 1,
+		skipped,
+		version: readPackageVersion()
+	};
+}
+//#endregion
 //#region src/core/publish.ts
 function authenticatedAccount(runner) {
 	let login;
@@ -25922,6 +26124,76 @@ function publishProject(projectPath, options = {}, runner) {
 	};
 }
 //#endregion
+//#region src/core/read.ts
+function normalizeTreeTarget(value) {
+	if (!value || value === ".") return "";
+	const normalized = posix.normalize(toPosixPath(value).replace(/^\.\//u, ""));
+	if (normalized === ".." || normalized.startsWith("../") || normalized.startsWith("/")) throw new Error(`Read target is outside the Context Tree: ${value}`);
+	return normalized.replace(/\/$/u, "");
+}
+function canonicalTarget(root, path) {
+	const requested = normalizeTreeTarget(path);
+	const semanticPath = requested === "NODE.md" ? "" : requested.endsWith("/NODE.md") ? dirname(requested) : requested;
+	if (classifyContextContent(semanticPath) === "repo-infra") throw new Error(`Read target is repository infrastructure: ${requested || "."}`);
+	const absolutePath = resolve(root, semanticPath);
+	if (!isPathInside(root, absolutePath)) throw new Error("Read target escapes the Context Tree root.");
+	const entry = lstatSync(absolutePath);
+	if (entry.isSymbolicLink() || !entry.isDirectory() && !entry.isFile()) throw new Error(`Read target must be a real file or directory: ${requested || "."}`);
+	if (realpathSync(absolutePath) !== absolutePath) throw new Error(`Read target must not traverse a symlink: ${requested || "."}`);
+	const relativePath = toPosixPath(relative(root, absolutePath));
+	if (entry.isFile() && !absolutePath.endsWith(".md")) throw new Error(`Read target must be a Markdown file or indexed directory: ${requested || "."}`);
+	return {
+		absolutePath,
+		kind: entry.isDirectory() ? "directory" : "file",
+		relativePath
+	};
+}
+function readNode(path, relativePath, kind) {
+	const documentPath = kind === "directory" ? join(path, "NODE.md") : path;
+	const entry = lstatSync(documentPath);
+	if (entry.isSymbolicLink() || !entry.isFile()) throw new Error(`Context Tree document must be a regular file: ${relativePath || "NODE.md"}`);
+	const document = readNodeDocument(documentPath);
+	if (document === null) throw new Error(`Context Tree document has invalid or missing metadata: ${relativePath || "."}`);
+	return {
+		body: document.body,
+		contentClass: classifyContextContent(relativePath),
+		frontmatter: document.frontmatter,
+		kind,
+		path: relativePath || "."
+	};
+}
+function childSummary(root, parentPath, name) {
+	const absolutePath = join(parentPath, name);
+	const relativePath = toPosixPath(relative(root, absolutePath));
+	const contentClass = classifyContextContent(relativePath);
+	if (contentClass === "repo-infra") return null;
+	const entry = lstatSync(absolutePath);
+	if (entry.isSymbolicLink()) return null;
+	const kind = entry.isDirectory() ? "directory" : entry.isFile() && name.endsWith(".md") && name !== "NODE.md" ? "file" : null;
+	if (kind === null) return null;
+	const document = readNodeDocument(kind === "directory" ? join(absolutePath, "NODE.md") : absolutePath);
+	if (document === null) throw new Error(`Context Tree child has invalid or missing metadata: ${relativePath}`);
+	return {
+		contentClass,
+		...document.description === void 0 ? {} : { description: document.description },
+		kind,
+		path: relativePath,
+		title: document.title
+	};
+}
+function readTree(treePath, path) {
+	const root = resolveTreeRoot(treePath);
+	const target = canonicalTarget(root, path);
+	const node = readNode(target.absolutePath, target.relativePath, target.kind);
+	return {
+		children: target.kind === "file" ? [] : readdirSync(target.absolutePath).map((name) => childSummary(root, target.absolutePath, name)).filter((child) => child !== null).sort((left, right) => left.path.localeCompare(right.path)),
+		node,
+		root,
+		schemaVersion: 1,
+		target: target.relativePath || "."
+	};
+}
+//#endregion
 //#region src/core/sync.ts
 /**
 * Local trees report their checked-out state without network access. GitHub
@@ -25963,10 +26235,13 @@ function syncProject(projectPath, runner) {
 //#endregion
 //#region src/core/write.ts
 const TASK_BRANCH_PREFIX = "context-tree/write/";
+/** A prepared worktree left untouched for longer than this is treated as abandoned. */
+const ABANDONED_WRITE_AGE_MS = 1440 * 60 * 1e3;
 /** Synchronize first, then create an isolated task worktree at the exact HEAD. */
 function prepareContextWrite(projectPath, runner) {
 	const synchronized = syncProject(projectPath, runner);
 	const root = synchronized.tree.path;
+	reclaimAbandonedWrites(root, synchronized.branch, runner);
 	const destination = mkdtempSync(join(tmpdir(), "context-tree-write-"));
 	const taskBranch = `${TASK_BRANCH_PREFIX}${basename(destination)}`;
 	try {
@@ -26108,83 +26383,81 @@ function removeWorktree(root, worktreePath, taskBranch, runner) {
 		runner
 	});
 }
-//#endregion
-//#region src/core/policy.ts
-function readContextTreePolicy() {
-	return {
-		content: readFileSync(resolvePackagedResource("policy", "context-tree-policy.md"), "utf8"),
-		schemaVersion: 1
-	};
-}
-//#endregion
-//#region src/core/read.ts
-function normalizeTreeTarget(value) {
-	if (!value || value === ".") return "";
-	const normalized = posix.normalize(toPosixPath(value).replace(/^\.\//u, ""));
-	if (normalized === ".." || normalized.startsWith("../") || normalized.startsWith("/")) throw new Error(`Read target is outside the Context Tree: ${value}`);
-	return normalized.replace(/\/$/u, "");
-}
-function canonicalTarget(root, path) {
-	const requested = normalizeTreeTarget(path);
-	const semanticPath = requested === "NODE.md" ? "" : requested.endsWith("/NODE.md") ? dirname(requested) : requested;
-	if (classifyContextContent(semanticPath) === "repo-infra") throw new Error(`Read target is repository infrastructure: ${requested || "."}`);
-	const absolutePath = resolve(root, semanticPath);
-	if (!isPathInside(root, absolutePath)) throw new Error("Read target escapes the Context Tree root.");
-	const entry = lstatSync(absolutePath);
-	if (entry.isSymbolicLink() || !entry.isDirectory() && !entry.isFile()) throw new Error(`Read target must be a real file or directory: ${requested || "."}`);
-	if (realpathSync(absolutePath) !== absolutePath) throw new Error(`Read target must not traverse a symlink: ${requested || "."}`);
-	const relativePath = toPosixPath(relative(root, absolutePath));
-	if (entry.isFile() && !absolutePath.endsWith(".md")) throw new Error(`Read target must be a Markdown file or indexed directory: ${requested || "."}`);
-	return {
-		absolutePath,
-		kind: entry.isDirectory() ? "directory" : "file",
-		relativePath
-	};
-}
-function readNode(path, relativePath, kind) {
-	const documentPath = kind === "directory" ? join(path, "NODE.md") : path;
-	const entry = lstatSync(documentPath);
-	if (entry.isSymbolicLink() || !entry.isFile()) throw new Error(`Context Tree document must be a regular file: ${relativePath || "NODE.md"}`);
-	const document = readNodeDocument(documentPath);
-	if (document === null) throw new Error(`Context Tree document has invalid or missing metadata: ${relativePath || "."}`);
-	return {
-		body: document.body,
-		contentClass: classifyContextContent(relativePath),
-		frontmatter: document.frontmatter,
-		kind,
-		path: relativePath || "."
-	};
+/** Map every reserved write branch that still has a registered worktree to its path. */
+function listWriteWorktrees(root, runner) {
+	const paths = /* @__PURE__ */ new Map();
+	const output = optionalGit(root, [
+		"worktree",
+		"list",
+		"--porcelain"
+	], runner);
+	if (output === void 0) return paths;
+	let path;
+	for (const record of output.split("\n")) {
+		if (record.startsWith("worktree ")) {
+			path = record.slice(9).trim();
+			continue;
+		}
+		if (!record.startsWith("branch refs/heads/")) continue;
+		const branch = record.slice(18).trim();
+		if (path !== void 0 && branch.startsWith(TASK_BRANCH_PREFIX)) paths.set(branch, path);
+	}
+	return paths;
 }
-function childSummary(root, parentPath, name) {
-	const absolutePath = join(parentPath, name);
-	const relativePath = toPosixPath(relative(root, absolutePath));
-	const contentClass = classifyContextContent(relativePath);
-	if (contentClass === "repo-infra") return null;
-	const entry = lstatSync(absolutePath);
-	if (entry.isSymbolicLink()) return null;
-	const kind = entry.isDirectory() ? "directory" : entry.isFile() && name.endsWith(".md") && name !== "NODE.md" ? "file" : null;
-	if (kind === null) return null;
-	const document = readNodeDocument(kind === "directory" ? join(absolutePath, "NODE.md") : absolutePath);
-	if (document === null) throw new Error(`Context Tree child has invalid or missing metadata: ${relativePath}`);
-	return {
-		contentClass,
-		...document.description === void 0 ? {} : { description: document.description },
-		kind,
-		path: relativePath,
-		title: document.title
-	};
+function millisecondsSinceModification(path) {
+	try {
+		return Date.now() - statSync(path).mtimeMs;
+	} catch {
+		return;
+	}
 }
-function readTree(treePath, path) {
-	const root = resolveTreeRoot(treePath);
-	const target = canonicalTarget(root, path);
-	const node = readNode(target.absolutePath, target.relativePath, target.kind);
-	return {
-		children: target.kind === "file" ? [] : readdirSync(target.absolutePath).map((name) => childSummary(root, target.absolutePath, name)).filter((child) => child !== null).sort((left, right) => left.path.localeCompare(right.path)),
-		node,
-		root,
-		schemaVersion: 1,
-		target: target.relativePath || "."
-	};
+/**
+* A preparation is abandoned only when it carries no commit the connected
+* checkout lacks, has no pending edits, and has gone untouched. Every unknown
+* answer preserves the worktree, so a `WRITE_OUTDATED` commit awaiting its
+* retry and a concurrent preparation both survive.
+*/
+function isAbandonedWrite(root, branch, checkoutBranch, path, runner) {
+	if (optionalGit(root, [
+		"rev-list",
+		"--count",
+		branch,
+		"--not",
+		checkoutBranch
+	], runner) !== "0") return false;
+	if (path === void 0) return true;
+	const age = millisecondsSinceModification(path);
+	if (age === void 0 || age < ABANDONED_WRITE_AGE_MS) return false;
+	return optionalGit(path, [
+		"status",
+		"--porcelain",
+		"--untracked-files=all"
+	], runner) === "";
+}
+/** Reclaim earlier preparations that were never finished. Every step is best effort. */
+function reclaimAbandonedWrites(root, checkoutBranch, runner) {
+	optionalGit(root, ["worktree", "prune"], runner);
+	const paths = listWriteWorktrees(root, runner);
+	const branches = optionalGit(root, [
+		"for-each-ref",
+		"--format=%(refname:short)",
+		`refs/heads/${TASK_BRANCH_PREFIX}`
+	], runner);
+	if (branches === void 0) return;
+	for (const branch of branches.split("\n").filter((value) => value.length > 0)) {
+		const path = paths.get(branch);
+		if (!isAbandonedWrite(root, branch, checkoutBranch, path, runner)) continue;
+		if (path !== void 0) optionalGit(root, [
+			"worktree",
+			"remove",
+			path
+		], runner);
+		optionalGit(root, [
+			"branch",
+			"-D",
+			branch
+		], runner);
+	}
 }
 //#endregion
 //#region src/cli/api.ts
@@ -26254,8 +26527,11 @@ function createContextTreeCli(io = defaultIo) {
 		line(io, JSON.stringify(result));
 		if (!result.ok) process.exitCode = 1;
 	});
-	program.command("policy").description("Print the canonical packaged Context Tree policy.").action(() => {
-		line(io, JSON.stringify(readContextTreePolicy()));
+	program.command("install").description("Install the packaged Context Tree skills into each agent's skill directory.").option("--host <host>", "restrict to one host: claude, codex, or all", "all").option("--project <path>", "install below this project root instead of the home directory").action((options) => {
+		const request = {};
+		if (options.host !== "all") request.hosts = [skillHostSchema.parse(options.host)];
+		if (options.project !== void 0) request.projectPath = resolve(io.cwd(), options.project);
+		line(io, JSON.stringify(installSkills(request)));
 	});
 	return program;
 }