@hasna/instructions 0.4.42 → 0.5.0

package/dist/cli/index.js

@@ -10846,12 +10846,24 @@ var init_cursor_authority = __esm(() => {
 
 // src/lib/session-authority.ts
 import { createHash as createHash5 } from "crypto";
-import { lstatSync as lstatSync3, readFileSync as readFileSync3, statSync as statSync2 } from "fs";
+import { lstatSync as lstatSync3, readFileSync as readFileSync3, realpathSync, statSync as statSync2 } from "fs";
+import { homedir as homedir5 } from "os";
 import { join as join7, resolve as resolve5 } from "path";
 function sha2565(content) {
   return createHash5("sha256").update(content).digest("hex");
 }
-function detectClaudeAuthorityConflicts(targetHome) {
+function configHomeDir() {
+  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir5();
+}
+function normalizeOwnedTargetPath(p) {
+  const expanded = p.startsWith("~/") ? resolve5(configHomeDir(), p.slice(2)) : resolve5(p);
+  try {
+    return realpathSync(expanded);
+  } catch {
+    return expanded;
+  }
+}
+function detectClaudeAuthorityConflicts(targetHome, ownedAuthorities = []) {
   const authorityPath = resolve5(join7(targetHome, CLAUDE_LEGACY_AUTHORITY_RELATIVE_PATH));
   let stat;
   try {
@@ -10895,6 +10907,24 @@ function detectClaudeAuthorityConflicts(targetHome) {
     }];
   }
   const content = readFileSync3(authorityPath, "utf8");
+  const owned = ownedAuthorities.find((authority) => normalizeOwnedTargetPath(authority.targetPath) === normalizeOwnedTargetPath(authorityPath));
+  if (owned) {
+    if (owned.content === content)
+      return [];
+    return [{
+      ...provenanceBase,
+      kind: "unknown-unmanaged-authority",
+      sha256: sha2565(content),
+      markers: [],
+      provenance: {
+        source: "filesystem",
+        authority: "unmanaged",
+        observedPath: authorityPath,
+        detection: "owned-config-drift"
+      },
+      reason: `Claude target AGENTS.md is owned by registered config "${owned.slug}", but the disk file drifts from its stored content; re-sync the config through the instructions pipeline before applying.`
+    }];
+  }
   const markers = CLAUDE_LEGACY_MARKERS.filter((marker) => marker.pattern.test(content)).map((marker) => marker.id);
   const knownLegacy = markers.includes("no-worktrees-heading") && markers.includes("no-worktrees-directive");
   return [{
@@ -10923,9 +10953,9 @@ var init_session_authority = __esm(() => {
 
 // src/lib/session-render.ts
 import { createHash as createHash6 } from "crypto";
-import { existsSync as existsSync5, readFileSync as readFileSync4, realpathSync, statSync as statSync3 } from "fs";
-import { homedir as homedir5 } from "os";
-import { basename as basename3, dirname as dirname2, extname as extname2, isAbsolute as isAbsolute3, join as join8, parse as parse2, posix as posix2, relative as relative2, resolve as resolve6 } from "path";
+import { existsSync as existsSync6, readFileSync as readFileSync4, realpathSync as realpathSync2, statSync as statSync3 } from "fs";
+import { homedir as homedir6 } from "os";
+import { basename as basename4, dirname as dirname3, extname as extname2, isAbsolute as isAbsolute3, join as join8, parse as parse2, posix as posix2, relative as relative2, resolve as resolve6 } from "path";
 function normalizeSessionInstructionLayer(value) {
   if (value === "provider")
     return "tool";
@@ -11011,7 +11041,7 @@ function yamlQuote2(value) {
   return `"${value.replace(/\\/g, "\\\\").replace(/"/g, "\\\"")}"`;
 }
 function defaultTargetHome(tool, profile, sessionId) {
-  const home = process.env["HOME"] || homedir5();
+  const home = process.env["HOME"] || homedir6();
   return join8(home, ".hasna", "accounts", "profiles", tool, slug(profile));
 }
 function joinTarget(targetHome, relativePath) {
@@ -11586,7 +11616,7 @@ function buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfi
     ...sources.flatMap((source) => source.resolvedRules.map((rule) => rule.id))
   ]);
   const existingConfigPath = joinTarget(targetHome, adapter.configFile);
-  const selectedConfig = existsSync5(existingConfigPath) ? readOpenCodeConfig(readFileSync4(existingConfigPath, "utf8"), existingConfigPath) : providerConfig ? readOpenCodeConfig(providerConfig.content, providerConfig.sourceId) : {};
+  const selectedConfig = existsSync6(existingConfigPath) ? readOpenCodeConfig(readFileSync4(existingConfigPath, "utf8"), existingConfigPath) : providerConfig ? readOpenCodeConfig(providerConfig.content, providerConfig.sourceId) : {};
   const preservedInstructions = normalizeOpenCodeInstructions(selectedConfig["instructions"]).filter((path) => !pathIsManagedOpenCodeInstruction(path, adapter.managedDir));
   const config = {
     ...selectedConfig,
@@ -11775,7 +11805,7 @@ function adapterFor(input) {
   return gatedNativeImports ? CODEWITH_NATIVE_ADAPTER : CODEWITH_FLATTENED_ADAPTER;
 }
 function getHomeDir() {
-  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir5();
+  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir6();
 }
 function cleanSessionPathInput(path) {
   const trimmed = path.trim();
@@ -11913,7 +11943,7 @@ function planSessionRender(input) {
     blockers: targetBlockers
   } = resolveRenderTarget(input);
   const authorityObservations = input.tool === "cursor" && targetKind !== "blocked" ? [observeCursorGlobalAuthority({ home: input.cursorAuthorityHome })] : [];
-  const authorityConflicts = input.tool === "cursor" && targetKind !== "blocked" ? detectCursorAuthorityConflicts(authorityObservations[0]) : input.tool === "claude" && targetKind !== "blocked" ? detectClaudeAuthorityConflicts(targetHome) : [];
+  const authorityConflicts = input.tool === "cursor" && targetKind !== "blocked" ? detectCursorAuthorityConflicts(authorityObservations[0]) : input.tool === "claude" && targetKind !== "blocked" ? detectClaudeAuthorityConflicts(targetHome, input.ownedClaudeAuthorities) : [];
   const blockers = [
     ...targetBlockers,
     ...authorityConflicts.map((conflict) => `${conflict.relativePath}: ${conflict.reason}`)
@@ -12051,7 +12081,7 @@ function planSessionRender(input) {
         sourceId: input.providerConfig.sourceId,
         selectedPayloadSha256: sha2566(input.providerConfig.content),
         renderedPayloadSha256: files.find((file) => file.relativePath === adapter.configFile)?.sha256 ?? sha2566(input.providerConfig.content),
-        selected: !existsSync5(joinTarget(targetHome, adapter.configFile))
+        selected: !existsSync6(joinTarget(targetHome, adapter.configFile))
       }
     } : {},
     ...projectContext ? {
@@ -12090,7 +12120,7 @@ function planSessionRender(input) {
   };
 }
 function sourceFromFilePath(path, content, order = 0) {
-  const file = basename3(path);
+  const file = basename4(path);
   return {
     id: file.replace(extname2(file), ""),
     label: file,
@@ -12312,7 +12342,7 @@ function layerFromIdentityKind(kind, exportShape) {
 function contentFromIdentitySourcePaths(sourcePaths, exportPath, sourceId) {
   if (sourcePaths.length === 0 || !exportPath)
     return;
-  const baseDir = dirname2(resolveSessionPath(exportPath));
+  const baseDir = dirname3(resolveSessionPath(exportPath));
   const contents = [];
   for (const sourcePath of sourcePaths) {
     const content = readIdentitySourcePath(sourcePath, baseDir, sourceId);
@@ -12330,7 +12360,7 @@ ${item.content.trimEnd()}`).join(`
 }
 function readIdentitySourcePath(sourcePath, baseDir, sourceId) {
   const resolvedPath = resolveIdentitySourcePath(sourcePath.path, baseDir, sourceId);
-  if (!existsSync5(resolvedPath)) {
+  if (!existsSync6(resolvedPath)) {
     if (sourcePath.required) {
       throw new Error(`Required identity instruction source path not found for ${sourceId}: ${sourcePath.path}`);
     }
@@ -12340,8 +12370,8 @@ function readIdentitySourcePath(sourcePath, baseDir, sourceId) {
   if (!stat.isFile()) {
     throw new Error(`Identity instruction source path is not a file for ${sourceId}: ${sourcePath.path}`);
   }
-  const realBase = realpathSync(baseDir);
-  const realPath = realpathSync(resolvedPath);
+  const realBase = realpathSync2(baseDir);
+  const realPath = realpathSync2(resolvedPath);
   if (!pathIsInside(realPath, realBase)) {
     throw new Error(`Identity instruction source path escapes export directory for ${sourceId}: ${sourcePath.path}`);
   }
@@ -12974,6 +13004,7 @@ function planProfileSessionRender(input) {
     asset_surface: _assetSurface,
     allow_asset_installers: _allowAssetInstallers,
     graph_context: _graphContext,
+    extra_sources: _extraSources,
     assetPlan: _callerAssetPlan,
     assetContents: _callerAssetContents,
     ...renderInput
@@ -12987,7 +13018,7 @@ function planProfileSessionRender(input) {
     ...planSessionRender({
       ...renderInput,
       ...compiled.capability.session_surface ? { providerSurface: compiled.capability.session_surface } : {},
-      sources: compiled.sources,
+      sources: [...compiled.sources, ...input.extra_sources ?? []],
       assetPlan,
       assetContents: Object.fromEntries((input.asset_configs ?? []).map((config) => [config.id, config.content]))
     }),
@@ -14019,8 +14050,8 @@ var init_config_store = __esm(() => {
 });
 
 // src/lib/session-render-ownership.ts
-import { existsSync as existsSync6, readFileSync as readFileSync5, statSync as statSync4 } from "fs";
-import { dirname as dirname3, join as join9, parse as parse3, relative as relative3, sep } from "path";
+import { existsSync as existsSync7, readFileSync as readFileSync5, statSync as statSync4 } from "fs";
+import { dirname as dirname4, join as join9, parse as parse3, relative as relative3, sep } from "path";
 function toSegments(absolutePath2) {
   return absolutePath2.replaceAll("\\", "/").split("/").filter(Boolean);
 }
@@ -14039,7 +14070,7 @@ function pathIsSessionRenderManagedDir(absolutePath2) {
 function readManifestRelativePaths(manifestPath) {
   let stats;
   try {
-    if (!existsSync6(manifestPath))
+    if (!existsSync7(manifestPath))
       return null;
     stats = statSync4(manifestPath);
   } catch {
@@ -14066,7 +14097,7 @@ function readManifestRelativePaths(manifestPath) {
 }
 function sessionRenderManifestClaimsPath(absolutePath2) {
   const root = parse3(absolutePath2).root;
-  let home = dirname3(absolutePath2);
+  let home = dirname4(absolutePath2);
   for (let depth = 0;depth < MANIFEST_ANCESTOR_LIMIT; depth += 1) {
     const manifestPath = join9(home, ...SESSION_RENDER_MANIFEST_RELATIVE_PATH.split("/"));
     const relativePaths = readManifestRelativePaths(manifestPath);
@@ -14075,7 +14106,7 @@ function sessionRenderManifestClaimsPath(absolutePath2) {
       if (relativePaths.has(claimed))
         return true;
     }
-    const parent = dirname3(home);
+    const parent = dirname4(home);
     if (parent === home || home === root)
       break;
     home = parent;
@@ -14103,11 +14134,11 @@ __export(exports_apply, {
   applyConfigs: () => applyConfigs,
   applyConfig: () => applyConfig
 });
-import { existsSync as existsSync7, mkdirSync as mkdirSync3, readFileSync as readFileSync6, realpathSync as realpathSync2, writeFileSync as writeFileSync2 } from "fs";
-import { basename as basename4, dirname as dirname4, join as join10, resolve as resolve7 } from "path";
-import { homedir as homedir6 } from "os";
+import { existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync6, realpathSync as realpathSync3, writeFileSync as writeFileSync2 } from "fs";
+import { basename as basename5, dirname as dirname5, join as join10, resolve as resolve7 } from "path";
+import { homedir as homedir7 } from "os";
 function getConfigHome() {
-  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir6();
+  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir7();
 }
 function expandPath(p) {
   if (p.startsWith("~/")) {
@@ -14118,20 +14149,20 @@ function expandPath(p) {
 function normalizeTargetPath(p) {
   const expanded = expandPath(p);
   try {
-    return realpathSync2(expanded);
+    return realpathSync3(expanded);
   } catch {
     let current = expanded;
     const missingSegments = [];
     while (true) {
-      if (existsSync7(current)) {
+      if (existsSync8(current)) {
         try {
-          return resolve7(realpathSync2(current), ...missingSegments);
+          return resolve7(realpathSync3(current), ...missingSegments);
         } catch {
           return expanded;
         }
       }
-      const parent = dirname4(current);
-      const name = basename4(current);
+      const parent = dirname5(current);
+      const name = basename5(current);
       if (parent === current)
         return expanded;
       missingSegments.unshift(name);
@@ -14154,11 +14185,11 @@ async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
   }
   const path = expandPath(renderedTargetPath);
   const renderedForTarget = isCursorGlobalAuthorityPath(path) ? stampCursorGlobalAuthorityMarker(renderedContent) : renderedContent;
-  const previousContent = existsSync7(path) ? readFileSync6(path, "utf-8") : null;
+  const previousContent = existsSync8(path) ? readFileSync6(path, "utf-8") : null;
   const changed = previousContent !== renderedForTarget;
   if (!opts.dryRun) {
-    const dir = dirname4(path);
-    if (!existsSync7(dir)) {
+    const dir = dirname5(path);
+    if (!existsSync8(dir)) {
       mkdirSync3(dir, { recursive: true });
     }
     if (previousContent !== null && changed) {
@@ -14192,7 +14223,7 @@ function wouldDestroyACredential(targetPath, renderedContent, format) {
   let current;
   try {
     const path = expandPath(targetPath);
-    if (!existsSync7(path))
+    if (!existsSync8(path))
       return [];
     current = readFileSync6(path, "utf-8");
   } catch {
@@ -14282,7 +14313,7 @@ async function applyPreparedConfig(config, opts) {
       changed: outputResults.some((output) => output.changed)
     };
   }
-  if (!opts.dryRun) {
+  if (!opts.dryRun && result.changed) {
     await store.updateConfig(config.id, { synced_at: new Date().toISOString() });
   }
   return result;
@@ -14536,20 +14567,20 @@ var init_apply = __esm(() => {
 });
 
 // src/lib/sync-dir.ts
-import { existsSync as existsSync8, readdirSync, readFileSync as readFileSync7, statSync as statSync5 } from "fs";
+import { existsSync as existsSync9, readdirSync, readFileSync as readFileSync7, statSync as statSync5 } from "fs";
 import { join as join11, relative as relative4 } from "path";
-import { homedir as homedir7 } from "os";
+import { homedir as homedir8 } from "os";
 function shouldSkip(p) {
   return SKIP.some((s) => p.includes(s));
 }
 async function syncFromDir(dir, opts = {}) {
   const store = opts.store ?? resolveConfigStore();
   const absDir = expandPath(dir);
-  if (!existsSync8(absDir))
+  if (!existsSync9(absDir))
     return { added: 0, updated: 0, unchanged: 0, skipped: [`Not found: ${absDir}`] };
   const files = opts.recursive !== false ? walkDir(absDir) : readdirSync(absDir).map((f) => join11(absDir, f)).filter((f) => statSync5(f).isFile());
   const result = { added: 0, updated: 0, unchanged: 0, skipped: [] };
-  const home = homedir7();
+  const home = homedir8();
   const allConfigs = await store.listConfigs();
   for (const file of files) {
     if (shouldSkip(file)) {
@@ -14563,14 +14594,15 @@ async function syncFromDir(dir, opts = {}) {
         continue;
       }
       const targetPath = file.replace(home, "~");
+      const redacted = redactContent(content, redactFormatForTarget(targetPath, detectFormat(file)));
       const existing = allConfigs.find((c) => c.target_path === targetPath);
       if (!existing) {
         if (!opts.dryRun)
-          await store.createConfig({ name: relative4(absDir, file), category: detectCategory(file), agent: detectAgent(file), target_path: targetPath, format: detectFormat(file), content });
+          await store.createConfig({ name: relative4(absDir, file), category: detectCategory(file), agent: detectAgent(file), target_path: targetPath, format: detectFormat(file), content: redacted.content });
         result.added++;
-      } else if (existing.content !== content) {
+      } else if (existing.content !== redacted.content) {
         if (!opts.dryRun)
-          await store.updateConfig(existing.id, { content });
+          await store.updateConfig(existing.id, { content: redacted.content });
         result.updated++;
       } else {
         result.unchanged++;
@@ -14583,7 +14615,7 @@ async function syncFromDir(dir, opts = {}) {
 }
 async function syncToDir(dir, opts = {}) {
   const store = opts.store ?? resolveConfigStore();
-  const home = homedir7();
+  const home = homedir8();
   const absDir = expandPath(dir);
   const normalized = dir.startsWith("~/") ? dir : absDir.replace(home, "~");
   const configs = (await store.listConfigs()).filter((c) => c.target_path && (c.target_path.startsWith(normalized) || c.target_path.startsWith(absDir)));
@@ -14622,6 +14654,7 @@ var init_sync_dir = __esm(() => {
   init_config_store();
   init_apply();
   init_sync();
+  init_redact();
   SKIP = [".db", ".db-shm", ".db-wal", ".log", ".lock", ".DS_Store", "node_modules", ".git"];
 });
 
@@ -14641,10 +14674,10 @@ __export(exports_sync, {
   KNOWN_CONFIGS: () => KNOWN_CONFIGS,
   CLAUDE_PROMPT_OUTPUTS: () => CLAUDE_PROMPT_OUTPUTS
 });
-import { existsSync as existsSync9, readdirSync as readdirSync2, readFileSync as readFileSync8 } from "fs";
-import { basename as basename5, extname as extname3, join as join12 } from "path";
+import { existsSync as existsSync10, readdirSync as readdirSync2, readFileSync as readFileSync8 } from "fs";
+import { basename as basename6, extname as extname3, join as join12 } from "path";
 function claudeRuleOutputs(fileName) {
-  const stem = basename5(fileName, extname3(fileName));
+  const stem = basename6(fileName, extname3(fileName));
   return [
     { agent: "cursor", target_path: `~/.cursor/rules/${stem}.mdc`, transform: "cursor-mdc" }
   ];
@@ -14681,15 +14714,15 @@ function isGeneratedOutputTarget2(config, owners) {
   return !!ownerIds && !ownerIds.has(config.id);
 }
 function hasClaudePromptSource() {
-  return existsSync9(expandPath("~/.claude/CLAUDE.md"));
+  return existsSync10(expandPath("~/.claude/CLAUDE.md"));
 }
 function hasClaudeRuleSourceForCursorTarget(targetPath) {
   const absoluteTargetPath = expandPath(targetPath);
   const absolutePrefix = expandPath("~/.cursor/rules");
   if (!absoluteTargetPath.startsWith(`${absolutePrefix}/`) || !absoluteTargetPath.endsWith(".mdc"))
     return false;
-  const stem = basename5(absoluteTargetPath, ".mdc");
-  return existsSync9(expandPath(`~/.claude/rules/${stem}.md`)) || existsSync9(expandPath(`~/.claude/rules/${stem}.mdc`));
+  const stem = basename6(absoluteTargetPath, ".mdc");
+  return existsSync10(expandPath(`~/.claude/rules/${stem}.md`)) || existsSync10(expandPath(`~/.claude/rules/${stem}.mdc`));
 }
 function isKnownGeneratedTargetPath(targetPath) {
   const normalizedTargetPath = normalizeTargetPath(targetPath);
@@ -14707,7 +14740,7 @@ async function syncProject(opts) {
   const machine = detectMachineContext();
   for (const pf of PROJECT_CONFIG_FILES) {
     const abs = join12(absDir, pf.file);
-    if (!existsSync9(abs))
+    if (!existsSync10(abs))
       continue;
     try {
       const rawContent = readFileSync8(abs, "utf-8");
@@ -14747,7 +14780,7 @@ async function syncProject(opts) {
     { dir: join12(absDir, ".windsurf", "rules"), agent: "windsurf-legacy", namePrefix: "windsurf-rules" },
     { dir: join12(absDir, ".clinerules"), agent: "cline", namePrefix: "cline-rules" }
   ]) {
-    if (!existsSync9(ruleDir.dir))
+    if (!existsSync10(ruleDir.dir))
       continue;
     const mdFiles = readdirSync2(ruleDir.dir).filter((f) => f.endsWith(".md") || f.endsWith(".mdc"));
     for (const f of mdFiles) {
@@ -14791,7 +14824,7 @@ async function syncKnown(opts = {}) {
   for (const known of targets) {
     if (known.rulesDir) {
       const absDir = expandPath(known.rulesDir);
-      if (!existsSync9(absDir)) {
+      if (!existsSync10(absDir)) {
         result.skipped.push(known.rulesDir);
         continue;
       }
@@ -14832,7 +14865,7 @@ async function syncKnown(opts = {}) {
       continue;
     }
     const abs = expandPath(known.path);
-    if (!existsSync9(abs)) {
+    if (!existsSync10(abs)) {
       result.skipped.push(known.path);
       continue;
     }
@@ -14843,7 +14876,7 @@ async function syncKnown(opts = {}) {
         continue;
       }
       const fmt = known.format ?? detectFormat(abs);
-      const redacted = redactContent(rawContent, fmt);
+      const redacted = redactContent(rawContent, redactFormatForTarget(abs, fmt));
       const machineAware = templateizeMachineContent(redacted.content, machine);
       const content = machineAware.content;
       const isTemplate2 = redacted.isTemplate || machineAware.changed;
@@ -14938,7 +14971,7 @@ function storedPlaceholderIsLiteralOnDisk(storedLine, diskLine) {
 }
 function buildDiff(expectedContent, targetPath, storedFormat, showSecrets) {
   const path = expandPath(targetPath);
-  if (!existsSync9(path))
+  if (!existsSync10(path))
     return `(file not found on disk: ${path})`;
   const diskContent = readFileSync8(path, "utf-8");
   if (diskContent === expectedContent)
@@ -15173,18 +15206,18 @@ __export(exports_package_manager_guard, {
   scanPackageManagerSecrets: () => scanPackageManagerSecrets
 });
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync16, lstatSync as lstatSync6, readdirSync as readdirSync4, readFileSync as readFileSync14 } from "fs";
-import { homedir as homedir9 } from "os";
-import { basename as basename6, dirname as dirname8, isAbsolute as isAbsolute5, join as join18, relative as relative7, resolve as resolve12 } from "path";
+import { existsSync as existsSync19, lstatSync as lstatSync7, readdirSync as readdirSync5, readFileSync as readFileSync16 } from "fs";
+import { homedir as homedir11 } from "os";
+import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute5, join as join20, relative as relative7, resolve as resolve13 } from "path";
 function scanPackageManagerSecrets(options = {}) {
-  const cwd = options.cwd ? resolve12(options.cwd) : process.cwd();
-  const roots = (options.roots && options.roots.length > 0 ? options.roots : [cwd]).map((root) => resolve12(cwd, root));
+  const cwd = options.cwd ? resolve13(options.cwd) : process.cwd();
+  const roots = (options.roots && options.roots.length > 0 ? options.roots : [cwd]).map((root) => resolve13(cwd, root));
   const findings = [];
   let scannedFiles = 0;
   for (const root of roots) {
-    if (!existsSync16(root))
+    if (!existsSync19(root))
       continue;
-    const stat = lstatSync6(root);
+    const stat = lstatSync7(root);
     if (stat.isFile()) {
       if (!shouldScanRepoFile(root))
         continue;
@@ -15192,7 +15225,7 @@ function scanPackageManagerSecrets(options = {}) {
       if (text === null)
         continue;
       scannedFiles++;
-      findings.push(...scanFile(root, text, classifyRepoFile(root), isTrackedFile(root), dirname8(root)));
+      findings.push(...scanFile(root, text, classifyRepoFile(root), isTrackedFile(root), dirname10(root)));
       continue;
     }
     if (!stat.isDirectory())
@@ -15209,10 +15242,10 @@ function scanPackageManagerSecrets(options = {}) {
     }
   }
   if (options.includeHome) {
-    const home = homedir9();
+    const home = homedir11();
     for (const name of HOME_FILES) {
-      const file = join18(home, name);
-      if (!existsSync16(file))
+      const file = join20(home, name);
+      if (!existsSync19(file))
         continue;
       const text = readTextFile(file);
       if (text === null)
@@ -15232,16 +15265,16 @@ function scanPackageManagerSecrets(options = {}) {
 function collectRepoFiles(root) {
   const out = [];
   const visit = (dir) => {
-    for (const entry of readdirSync4(dir, { withFileTypes: true })) {
+    for (const entry of readdirSync5(dir, { withFileTypes: true })) {
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name))
           continue;
-        visit(join18(dir, entry.name));
+        visit(join20(dir, entry.name));
         continue;
       }
       if (!entry.isFile())
         continue;
-      const file = join18(dir, entry.name);
+      const file = join20(dir, entry.name);
       if (shouldScanRepoFile(file))
         out.push(file);
     }
@@ -15250,11 +15283,11 @@ function collectRepoFiles(root) {
   return out;
 }
 function shouldScanRepoFile(file) {
-  const name = basename6(file);
+  const name = basename7(file);
   return isNpmrcName(name) || isBunConfigName(name) || LOCKFILE_NAMES.has(name);
 }
 function classifyRepoFile(file) {
-  const name = basename6(file);
+  const name = basename7(file);
   if (isNpmrcName(name))
     return "repo-npmrc";
   if (isBunConfigName(name))
@@ -15276,10 +15309,10 @@ function isNpmrcName(name) {
 }
 function readTextFile(file) {
   try {
-    const stat = lstatSync6(file);
+    const stat = lstatSync7(file);
     if (!stat.isFile() || stat.size > 5000000)
       return null;
-    const buf = readFileSync14(file);
+    const buf = readFileSync16(file);
     if (buf.includes(0))
       return null;
     return buf.toString("utf-8");
@@ -15479,7 +15512,7 @@ function trackedFiles(root) {
 }
 function isTrackedFile(file) {
   try {
-    const repoRoot = execFileSync2("git", ["-C", dirname8(file), "rev-parse", "--show-toplevel"], {
+    const repoRoot = execFileSync2("git", ["-C", dirname10(file), "rev-parse", "--show-toplevel"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
@@ -15509,7 +15542,7 @@ function stripInlineComment(value) {
   return value.replace(/\s[#;].*$/, "").trim();
 }
 function displayPath(file, root) {
-  const home = homedir9();
+  const home = homedir11();
   if (root === home && (file === home || file.startsWith(home + "/")))
     return "~/" + toPosix(relative7(home, file));
   if (isAbsolute5(root) && file.startsWith(root + "/"))
@@ -15567,8 +15600,12 @@ import { existsSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
 import { createHmac, timingSafeEqual } from "crypto";
+import { lookup as dnsLookup } from "dns/promises";
+import { isIP } from "net";
 import { randomUUID } from "crypto";
 import { spawn } from "child_process";
+import { request as nodeHttpRequest } from "http";
+import { request as nodeHttpsRequest } from "https";
 import { randomUUID as randomUUID2 } from "crypto";
 function getPathValue(input, path) {
   return path.split(".").reduce((value, part) => {
@@ -15971,6 +16008,214 @@ function signPayload(secret, timestamp, body) {
   const digest = createHmac("sha256", secret).update(buildSignatureBase(timestamp, body)).digest("hex");
   return `sha256=${digest}`;
 }
+var DEFAULT_MAX_REDIRECTS = 5;
+var IPV4_PRIVATE_RANGES = [
+  [0, 16777215],
+  [167772160, 184549375],
+  [1681915904, 1686110207],
+  [2130706432, 2147483647],
+  [2851995648, 2852061183],
+  [2886729728, 2887778303],
+  [3221225472, 3221225727],
+  [3221225984, 3221226239],
+  [3227017984, 3227018239],
+  [3232235520, 3232301055],
+  [3323068416, 3323199487],
+  [3325256704, 3325256959],
+  [3405803776, 3405804031],
+  [3758096384, 4294967295]
+];
+var IPV6_SPECIAL_PREFIXES = [
+  { groups: [0, 0, 0, 0, 0, 0, 0, 0], bits: 128 },
+  { groups: [0, 0, 0, 0, 0, 0, 0, 1], bits: 128 },
+  { groups: [0, 0, 0, 0, 0, 65535, 0, 0], bits: 96 },
+  { groups: [100, 65435, 0, 0, 0, 0, 0, 0], bits: 96 },
+  { groups: [256, 0, 0, 0, 0, 0, 0, 0], bits: 64 },
+  { groups: [8193, 0, 0, 0, 0, 0, 0, 0], bits: 32 },
+  { groups: [8193, 2, 0, 0, 0, 0, 0, 0], bits: 48 },
+  { groups: [8193, 16, 0, 0, 0, 0, 0, 0], bits: 28 },
+  { groups: [8193, 3512, 0, 0, 0, 0, 0, 0], bits: 32 },
+  { groups: [8194, 0, 0, 0, 0, 0, 0, 0], bits: 16 },
+  { groups: [16383, 0, 0, 0, 0, 0, 0, 0], bits: 20 },
+  { groups: [64512, 0, 0, 0, 0, 0, 0, 0], bits: 7 },
+  { groups: [65152, 0, 0, 0, 0, 0, 0, 0], bits: 10 },
+  { groups: [65216, 0, 0, 0, 0, 0, 0, 0], bits: 10 },
+  { groups: [65280, 0, 0, 0, 0, 0, 0, 0], bits: 8 }
+];
+function isPrivateAddress(address) {
+  const normalized = stripZoneId(address);
+  const version = isIP(normalized);
+  if (version === 4) {
+    const integer = ipv4ToInt(normalized);
+    if (integer === undefined)
+      return true;
+    return IPV4_PRIVATE_RANGES.some(([low, high]) => integer >= low && integer <= high);
+  }
+  if (version === 6) {
+    const groups = ipv6Groups(normalized);
+    if (!groups)
+      return true;
+    for (const prefix of IPV6_SPECIAL_PREFIXES) {
+      if (!ipv6MatchesPrefix(groups, prefix.groups, prefix.bits))
+        continue;
+      if (prefix.bits === 96 && groups[5] === 65535) {
+        return isPrivateAddress(ipv4IntToString(groups[6] << 16 | groups[7]));
+      }
+      if (prefix.bits === 16 && groups[0] === 8194) {
+        return isPrivateAddress(ipv4IntToString(groups[1] << 16 | groups[2]));
+      }
+      return true;
+    }
+    return false;
+  }
+  return true;
+}
+async function resolveWebhookTarget(url, policy = {}) {
+  const hostname = normalizeHostname(url.hostname);
+  const allowlist = (policy.allowPrivateHosts ?? []).map((entry) => normalizeHostname(entry.toLowerCase()));
+  if (allowlist.includes(hostname)) {
+    const version2 = isIP(hostname);
+    if (version2 === 4 || version2 === 6) {
+      return { hostname, addresses: [hostname] };
+    }
+    const lookup2 = policy.lookup ?? defaultTargetLookup;
+    let resolved2;
+    try {
+      resolved2 = await lookup2(hostname);
+    } catch {
+      throw new Error(`Webhook target ${hostname} could not be resolved`);
+    }
+    if (!Array.isArray(resolved2) || resolved2.length === 0) {
+      throw new Error(`Webhook target ${hostname} resolved to no addresses`);
+    }
+    const addresses = resolved2.map((entry) => normalizeHostname(entry.address));
+    return { hostname, addresses };
+  }
+  const version = isIP(hostname);
+  if (version === 4 || version === 6) {
+    if (isPrivateAddress(hostname)) {
+      throw new Error(`Webhook target ${hostname} is a private or special-use address`);
+    }
+    return { hostname, addresses: [hostname] };
+  }
+  const lookup = policy.lookup ?? defaultTargetLookup;
+  let resolved;
+  try {
+    resolved = await lookup(hostname);
+  } catch {
+    throw new Error(`Webhook target ${hostname} could not be resolved`);
+  }
+  if (!Array.isArray(resolved) || resolved.length === 0) {
+    throw new Error(`Webhook target ${hostname} resolved to no addresses`);
+  }
+  const allowed = [];
+  for (const entry of resolved) {
+    const address = normalizeHostname(entry.address);
+    if (isPrivateAddress(address)) {
+      if (allowlist.includes(address)) {
+        allowed.push(address);
+        continue;
+      }
+      throw new Error(`Webhook target ${hostname} resolves to private or special-use address ${address}`);
+    }
+    allowed.push(address);
+  }
+  if (allowed.length === 0) {
+    throw new Error(`Webhook target ${hostname} resolved to no public addresses`);
+  }
+  return { hostname, addresses: allowed };
+}
+function normalizeMaxRedirects(value) {
+  if (value === undefined)
+    return DEFAULT_MAX_REDIRECTS;
+  if (!Number.isInteger(value) || value < 0)
+    throw new Error("webhookTargetPolicy.maxRedirects must be a non-negative integer");
+  return value;
+}
+var defaultTargetLookup = async (hostname) => {
+  return dnsLookup(hostname, { all: true, verbatim: false });
+};
+function normalizeHostname(hostname) {
+  const lower = hostname.toLowerCase();
+  if (lower.startsWith("[") && lower.endsWith("]"))
+    return lower.slice(1, -1);
+  return lower;
+}
+function stripZoneId(address) {
+  const percent = address.indexOf("%");
+  return percent === -1 ? address : address.slice(0, percent);
+}
+function ipv4ToInt(address) {
+  const parts = address.split(".");
+  if (parts.length !== 4)
+    return;
+  let value = 0;
+  for (const part of parts) {
+    if (!/^\d{1,3}$/.test(part))
+      return;
+    const octet = Number(part);
+    if (octet > 255)
+      return;
+    value = value << 8 | octet;
+  }
+  return value >>> 0;
+}
+function ipv4IntToString(integer) {
+  return [
+    integer >>> 24 & 255,
+    integer >>> 16 & 255,
+    integer >>> 8 & 255,
+    integer & 255
+  ].join(".");
+}
+function ipv6Groups(address) {
+  const raw = stripZoneId(address);
+  const doubleColon = raw.indexOf("::");
+  const headText = doubleColon === -1 ? raw : raw.slice(0, doubleColon);
+  const tailText = doubleColon === -1 ? "" : raw.slice(doubleColon + 2);
+  const parseGroups = (text) => {
+    if (text === "")
+      return [];
+    const out = [];
+    for (const part of text.split(":")) {
+      if (part.includes(".")) {
+        const v4 = ipv4ToInt(part);
+        if (v4 === undefined)
+          return;
+        out.push(v4 >>> 16 & 65535, v4 & 65535);
+      } else {
+        if (!/^[0-9a-fA-F]{1,4}$/.test(part))
+          return;
+        out.push(parseInt(part, 16));
+      }
+    }
+    return out;
+  };
+  const head = parseGroups(headText);
+  if (!head)
+    return;
+  const tail = parseGroups(tailText);
+  if (!tail)
+    return;
+  const total = head.length + tail.length;
+  if (doubleColon === -1) {
+    return total === 8 ? head : undefined;
+  }
+  if (total >= 8)
+    return;
+  return [...head, ...new Array(8 - total).fill(0), ...tail];
+}
+function ipv6MatchesPrefix(groups, prefixGroups, prefixBits) {
+  let remaining = prefixBits;
+  for (let index = 0;index < prefixGroups.length && remaining > 0; index += 1) {
+    const take = Math.min(16, remaining);
+    const mask = 65535 << 16 - take & 65535;
+    if ((groups[index] & mask) !== (prefixGroups[index] & mask))
+      return false;
+    remaining -= take;
+  }
+  return true;
+}
 function now() {
   return new Date().toISOString();
 }
@@ -16001,9 +16246,18 @@ function buildWebhookRequest(event, channel, options = {}) {
   }
   return { body, headers };
 }
+function normalizeWebhookUrl(raw) {
+  const url = new URL(raw);
+  if (url.username !== "" || url.password !== "") {
+    url.username = "";
+    url.password = "";
+  }
+  return url.toString();
+}
 async function dispatchWebhook(event, channel, options = {}) {
   if (!channel.webhook)
     throw new Error(`Channel ${channel.id} has no webhook config`);
+  const webhookUrl = normalizeWebhookUrl(channel.webhook.url);
   const startedAt = now();
   let secret = channel.webhook.secret;
   if (channel.webhook.secretRef) {
@@ -16020,10 +16274,14 @@ async function dispatchWebhook(event, channel, options = {}) {
   }
   const timestamp = (options.now?.() ?? new Date).toISOString();
   const { body, headers } = buildWebhookRequest(event, channel, { secret, timestamp });
+  const validateTargets = options.webhookTargetPolicy !== undefined || options.fetchImpl === undefined;
+  if (validateTargets) {
+    return dispatchValidatedWebhook(event, channel, { body, headers, startedAt, options });
+  }
   const controller = new AbortController;
   const timeout = setTimeout(() => controller.abort(), channel.webhook.timeoutMs ?? 15000);
   try {
-    const response = await (options.fetchImpl ?? fetch)(channel.webhook.url, {
+    const response = await (options.fetchImpl ?? fetch)(webhookUrl, {
       method: "POST",
       headers,
       body,
@@ -16051,6 +16309,130 @@ async function dispatchWebhook(event, channel, options = {}) {
     clearTimeout(timeout);
   }
 }
+function isRedirectStatus(status) {
+  return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
+}
+function redirectKeepsBody(status) {
+  return status === 307 || status === 308;
+}
+async function pinnedNativeRequest(target, addresses, method, headers, body, signal, tls) {
+  const isHttps = target.protocol === "https:";
+  if (!isHttps && target.protocol !== "http:") {
+    throw new Error(`Webhook target uses unsupported protocol ${target.protocol}`);
+  }
+  const defaultPort = isHttps ? 443 : 80;
+  const port = target.port ? Number(target.port) : defaultPort;
+  const requestOptions = {
+    hostname: target.hostname,
+    port,
+    path: `${target.pathname}${target.search}`,
+    method,
+    headers,
+    ...tls?.ca ? { ca: tls.ca } : {},
+    lookup: (hostname, _options, callback) => {
+      const entries = addresses.map((address) => ({
+        address,
+        family: address.includes(":") ? 6 : 4
+      }));
+      callback(null, entries);
+    }
+  };
+  return new Promise((resolve, reject) => {
+    const request = isHttps ? nodeHttpsRequest(requestOptions, onResponse) : nodeHttpRequest(requestOptions, onResponse);
+    const onAbort = () => {
+      const error = new Error("The operation was aborted.");
+      error.name = "AbortError";
+      request.destroy(error);
+    };
+    if (signal.aborted)
+      onAbort();
+    else
+      signal.addEventListener("abort", onAbort, { once: true });
+    request.on("error", reject);
+    if (body !== undefined)
+      request.write(body);
+    request.end();
+    function onResponse(response) {
+      const chunks = [];
+      response.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
+      response.on("error", reject);
+      response.on("end", () => {
+        const headersRecord = {};
+        for (const [name, value] of Object.entries(response.headers)) {
+          if (typeof value === "string")
+            headersRecord[name] = value;
+          else if (Array.isArray(value))
+            headersRecord[name] = value.join(", ");
+        }
+        resolve(new Response(Buffer.concat(chunks), { status: response.statusCode ?? 200, headers: headersRecord }));
+      });
+    }
+  });
+}
+async function dispatchValidatedWebhook(event, channel, input) {
+  const { body, headers, startedAt, options } = input;
+  const webhook = channel.webhook;
+  if (!webhook)
+    throw new Error(`Channel ${channel.id} has no webhook config`);
+  const policy = options.webhookTargetPolicy ?? {};
+  const maxRedirects = normalizeMaxRedirects(policy.maxRedirects);
+  const controller = new AbortController;
+  const timeout = setTimeout(() => controller.abort(), webhook.timeoutMs ?? 15000);
+  try {
+    let target = new URL(normalizeWebhookUrl(webhook.url));
+    let requestHeaders = headers;
+    let method = "POST";
+    let requestBody = body;
+    let redirectsFollowed = 0;
+    for (;; ) {
+      const resolved = await resolveWebhookTarget(target, policy).catch((error) => {
+        throw new Error(`Webhook target rejected by SSRF guard: ${error.message}`);
+      });
+      const response = options.fetchImpl ? await options.fetchImpl(target, {
+        method,
+        headers: requestHeaders,
+        body: requestBody,
+        signal: controller.signal,
+        redirect: "manual"
+      }) : await pinnedNativeRequest(target, resolved.addresses, method, requestHeaders, requestBody, controller.signal, options.tls);
+      const location = response.headers.get("location");
+      if (isRedirectStatus(response.status) && location) {
+        if (redirectsFollowed >= maxRedirects) {
+          return failedAttempt(startedAt, `Webhook target exceeded ${maxRedirects} redirects`);
+        }
+        redirectsFollowed += 1;
+        const next = new URL(location, target);
+        target = next;
+        if (!redirectKeepsBody(response.status)) {
+          method = "GET";
+          requestBody = undefined;
+          requestHeaders = Object.fromEntries(Object.entries(requestHeaders).filter(([name]) => name.toLowerCase() !== "content-type" && name.toLowerCase() !== "content-length"));
+        }
+        continue;
+      }
+      const responseBody = truncate(await response.text());
+      return {
+        attempt: 1,
+        status: response.ok ? "success" : "failed",
+        startedAt,
+        completedAt: now(),
+        responseStatus: response.status,
+        responseBody,
+        error: response.ok ? undefined : `Webhook returned HTTP ${response.status}`
+      };
+    }
+  } catch (error) {
+    return {
+      attempt: 1,
+      status: "failed",
+      startedAt,
+      completedAt: now(),
+      error: error instanceof Error ? error.message : String(error)
+    };
+  } finally {
+    clearTimeout(timeout);
+  }
+}
 function failedAttempt(startedAt, error) {
   return {
     attempt: 1,
@@ -16260,7 +16642,9 @@ class EventsClient {
     this.transportOptions = {
       fetchImpl: options.fetchImpl,
       secretResolver: options.secretResolver,
-      now: options.now
+      now: options.now,
+      tls: options.tls,
+      webhookTargetPolicy: options.webhookTargetPolicy
     };
     this.catalog = options.catalog ?? defaultEventTypeCatalog;
     this.validateCatalogTypes = options.validateCatalogTypes ?? false;
@@ -16761,9 +17145,9 @@ var {
 // src/cli/index.tsx
 init_apply();
 import chalk from "chalk";
-import { existsSync as existsSync17, lstatSync as lstatSync7, readFileSync as readFileSync15, readSync, writeSync } from "fs";
-import { homedir as homedir10 } from "os";
-import { basename as basename7, join as join19, resolve as resolve13 } from "path";
+import { existsSync as existsSync20, lstatSync as lstatSync8, readFileSync as readFileSync17, readSync, writeSync } from "fs";
+import { homedir as homedir12 } from "os";
+import { basename as basename8, join as join21, resolve as resolve14 } from "path";
 
 // src/lib/config-target-identity.ts
 init_apply();
@@ -16809,7 +17193,7 @@ init_redact();
 
 // src/lib/export.ts
 init_config_store();
-import { existsSync as existsSync10, mkdirSync as mkdirSync4, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync4, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "fs";
 import { join as join13, resolve as resolve8 } from "path";
 import { tmpdir } from "os";
 async function exportConfigs(outputPath, opts = {}) {
@@ -16841,7 +17225,7 @@ async function exportConfigs(outputPath, opts = {}) {
     }
     return { path: absOutput, count: configs.length };
   } finally {
-    if (existsSync10(tmpDir)) {
+    if (existsSync11(tmpDir)) {
       rmSync3(tmpDir, { recursive: true, force: true });
     }
   }
@@ -16849,7 +17233,7 @@ async function exportConfigs(outputPath, opts = {}) {
 
 // src/lib/import.ts
 init_config_store();
-import { existsSync as existsSync11, mkdirSync as mkdirSync5, readFileSync as readFileSync9, rmSync as rmSync4 } from "fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync5, readFileSync as readFileSync9, rmSync as rmSync4 } from "fs";
 import { join as join14, resolve as resolve9 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 async function importConfigs(bundlePath, opts = {}) {
@@ -16870,14 +17254,14 @@ async function importConfigs(bundlePath, opts = {}) {
       throw new Error(`tar extraction failed: ${stderr}`);
     }
     const manifestPath = join14(tmpDir, "manifest.json");
-    if (!existsSync11(manifestPath))
+    if (!existsSync12(manifestPath))
       throw new Error("Invalid bundle: missing manifest.json");
     const manifest = JSON.parse(readFileSync9(manifestPath, "utf-8"));
     for (const meta of manifest.configs) {
       try {
         const ext = meta.format === "text" ? "txt" : meta.format;
         const contentFile = join14(tmpDir, "contents", `${meta.slug}.${ext}`);
-        const content = existsSync11(contentFile) ? readFileSync9(contentFile, "utf-8") : "";
+        const content = existsSync12(contentFile) ? readFileSync9(contentFile, "utf-8") : "";
         let existing = null;
         try {
           existing = await store.getConfig(meta.slug);
@@ -16911,7 +17295,7 @@ async function importConfigs(bundlePath, opts = {}) {
     }
     return result;
   } finally {
-    if (existsSync11(tmpDir)) {
+    if (existsSync12(tmpDir)) {
       rmSync4(tmpDir, { recursive: true, force: true });
     }
   }
@@ -16928,14 +17312,14 @@ init_cursor_authority();
 init_session_authority();
 import { createHash as createHash8, randomUUID as randomUUID7 } from "crypto";
 import {
-  existsSync as existsSync12,
+  existsSync as existsSync13,
   lstatSync as lstatSync4,
   mkdirSync as mkdirSync6,
   readFileSync as readFileSync10,
   readdirSync as readdirSync3,
   statSync as statSync6
 } from "fs";
-import { dirname as dirname5, isAbsolute as isAbsolute4, join as join15, parse as parse4, relative as relative5, resolve as resolve10 } from "path";
+import { dirname as dirname6, isAbsolute as isAbsolute4, join as join15, parse as parse4, relative as relative5, resolve as resolve10 } from "path";
 
 class SessionApplyError extends Error {
   constructor(message) {
@@ -16956,7 +17340,7 @@ function applySessionRenderUnlocked(plan, options, coordination) {
   }
   assertCursorAuthorityUnchanged(plan);
   const targetHome = assertSafeTargetHome(plan.targetHome);
-  assertClaudeAuthorityStillClear(plan, targetHome);
+  assertClaudeAuthorityStillClear(plan, targetHome, options.ownedClaudeAuthorities);
   const payloadFiles = [...plan.files, ...plan.assetFiles ?? []];
   const files = [...payloadFiles, plan.manifestFile];
   const manifestPath = resolvePlannedFilePath(plan, plan.manifestFile, targetHome);
@@ -17057,17 +17441,17 @@ function assertCursorAuthorityUnchanged(plan) {
     throw new SessionApplyError("Cursor fixed global authority changed after planning; refusing to apply a stale render plan.");
   }
 }
-function assertClaudeAuthorityStillClear(plan, targetHome) {
+function assertClaudeAuthorityStillClear(plan, targetHome, ownedClaudeAuthorities) {
   if (plan.tool !== "claude" || plan.targetKind === "blocked")
     return;
-  const conflicts = detectClaudeAuthorityConflicts(targetHome);
+  const conflicts = detectClaudeAuthorityConflicts(targetHome, ownedClaudeAuthorities);
   if (conflicts.length === 0)
     return;
   const summary = conflicts.map((conflict) => `${conflict.relativePath}: ${conflict.reason}`).join("; ");
   throw new SessionApplyError(`Claude authority changed after planning; refusing to apply: ${summary}`);
 }
 function ensureSessionTargetHome(targetHome) {
-  if (!existsSync12(targetHome))
+  if (!existsSync13(targetHome))
     mkdirSync6(targetHome, { recursive: true, mode: 448 });
   assertSafeTargetHome(targetHome);
 }
@@ -17090,7 +17474,7 @@ function checkSessionRenderDrift(targetHome, manifestPath) {
   const drifted = [];
   for (const file of previousManifest.files) {
     const target = resolveManifestRelativePath(file.relativePath, safeTargetHome);
-    if (!existsSync12(target)) {
+    if (!existsSync13(target)) {
       missing.push({
         path: target,
         relativePath: file.relativePath,
@@ -17242,7 +17626,7 @@ function requiredRestoreHash(file) {
 }
 function readSessionRenderSnapshot(snapshotPath) {
   const resolved = resolve10(snapshotPath);
-  if (!existsSync12(resolved))
+  if (!existsSync13(resolved))
     throw new SessionApplyError(`Session snapshot not found: ${snapshotPath}`);
   const stat = lstatSync4(resolved);
   if (stat.isSymbolicLink() || !stat.isFile()) {
@@ -17423,8 +17807,8 @@ function assertNoNewerSessionSnapshot(snapshotPath, createdAt, targetHome) {
   if (!Number.isFinite(createdAtMs)) {
     throw new SessionApplyError(`Pre-rollback legacy v1 snapshot has an invalid creation time: ${snapshotPath}`);
   }
-  for (const entry of readdirSync3(dirname5(snapshotPath))) {
-    const candidatePath = resolve10(dirname5(snapshotPath), entry);
+  for (const entry of readdirSync3(dirname6(snapshotPath))) {
+    const candidatePath = resolve10(dirname6(snapshotPath), entry);
     if (candidatePath === resolve10(snapshotPath) || !entry.endsWith(".json"))
       continue;
     const candidateStat = lstatSync4(candidatePath);
@@ -17509,7 +17893,7 @@ function resolveSnapshotFilePath(relativePath, recordedPath, targetHome) {
 }
 function planFileResult(plan, file, targetHome, previousHashes, previousManifest, options) {
   const target = resolvePlannedFilePath(plan, file, targetHome);
-  const previousContent = existsSync12(target) ? readFileSync10(target, "utf-8") : null;
+  const previousContent = existsSync13(target) ? readFileSync10(target, "utf-8") : null;
   const previousSha256 = previousContent === null ? null : sha2568(previousContent);
   const previouslyManaged = isPreviouslyManaged(file, previousSha256, previousHashes, previousManifest);
   const changed = previousContent !== file.content;
@@ -17608,7 +17992,7 @@ function planStaleFileResults(plan, targetHome, previousManifest, currentRelativ
 }
 function planStaleFileResult(file, targetHome, options) {
   const target = resolveManifestRelativePath(file.relativePath, targetHome);
-  if (!existsSync12(target))
+  if (!existsSync13(target))
     return null;
   const previousContent = readFileSync10(target, "utf-8");
   const previousSha256 = sha2568(previousContent);
@@ -17676,7 +18060,7 @@ function resolveManifestRelativePath(relativePath, targetHome) {
   return target;
 }
 function readPreviousManifest(path) {
-  if (!existsSync12(path))
+  if (!existsSync13(path))
     return null;
   try {
     const parsed = JSON.parse(readFileSync10(path, "utf-8"));
@@ -17718,7 +18102,7 @@ function assertExpectedSessionFileHash(path, targetHome, expectedHash) {
 }
 function currentSessionFileHash(path, targetHome) {
   assertNoSymlinkSegments2(targetHome, path);
-  if (!existsSync12(path))
+  if (!existsSync13(path))
     return null;
   const stat = lstatSync4(path);
   if (stat.isSymbolicLink() || !stat.isFile()) {
@@ -17733,7 +18117,7 @@ function requiredPreviousHash(result) {
   return result.previousSha256;
 }
 function writeSessionSnapshot(plan, targetHome, manifestPath, results, previousManifest, coordination, allowPortableFallback, forcePortableFileOps) {
-  const existingFiles = results.filter((result) => result.action === "update" || result.action === "delete").filter((result) => existsSync12(result.path)).map((result) => {
+  const existingFiles = results.filter((result) => result.action === "update" || result.action === "delete").filter((result) => existsSync13(result.path)).map((result) => {
     const content = readFileSync10(result.path, "utf-8");
     return {
       path: result.path,
@@ -17805,7 +18189,7 @@ function assertSafeTargetHome(targetHome) {
     throw new SessionApplyError(`Session target home cannot be the filesystem root: ${targetHome}`);
   }
   assertNoSymlinkAncestors2(normalized);
-  if (existsSync12(normalized) && lstatSync4(normalized).isSymbolicLink()) {
+  if (existsSync13(normalized) && lstatSync4(normalized).isSymbolicLink()) {
     throw new SessionApplyError(`Session target home cannot be a symlink: ${normalized}`);
   }
   return normalized;
@@ -17816,7 +18200,7 @@ function assertNoSymlinkSegments2(root, target) {
   let current = root;
   for (const segment of rel.split(/[\\/]+/).filter(Boolean)) {
     current = join15(current, segment);
-    if (existsSync12(current) && lstatSync4(current).isSymbolicLink()) {
+    if (existsSync13(current) && lstatSync4(current).isSymbolicLink()) {
       throw new SessionApplyError(`Session apply path uses a symlink: ${current}`);
     }
   }
@@ -17828,7 +18212,7 @@ function assertNoSymlinkAncestors2(path) {
   const rel = relative5(parsed.root, normalized);
   for (const segment of rel.split(/[\\/]+/).filter(Boolean)) {
     current = join15(current, segment);
-    if (!existsSync12(current))
+    if (!existsSync13(current))
       return;
     if (lstatSync4(current).isSymbolicLink()) {
       throw new SessionApplyError(`Session apply path uses a symlink ancestor: ${current}`);
@@ -17876,6 +18260,248 @@ function formatGlobalSourceCoverageWarnings(result) {
   ];
 }
 
+// src/lib/station-profile.ts
+import { spawnSync } from "child_process";
+import { existsSync as existsSync14, lstatSync as lstatSync5, mkdirSync as mkdirSync7, readFileSync as readFileSync11, readdirSync as readdirSync4, writeFileSync as writeFileSync4 } from "fs";
+import { arch as osArch, homedir as homedir9, hostname as osHostname, platform as osPlatform, userInfo as osUserInfo } from "os";
+import { dirname as dirname7, join as join16, resolve as resolve11 } from "path";
+var STATION_PROFILE_CACHE_FILENAME = "station-profile.md";
+var STATION_PROFILE_SOURCE_ID = "station-profile";
+var STATION_PROFILE_LAYER = "machine";
+var STATION_PROFILE_MAX_BYTES = 600;
+var STATION_PROFILE_MAX_HASNA_NAMES = 12;
+var STATION_PROFILE_FULL_NAMES_MAX = 6;
+var STATION_PROFILE_PRIMARY_SCOPE = "@hasna";
+var MACHINES_MANIFEST_PATH_ENV = "HASNA_MACHINES_MANIFEST_PATH";
+var BUN_INSTALL_ENV = "BUN_INSTALL";
+function homeDir2(env = process.env) {
+  return env["HOME"] || env["USERPROFILE"] || homedir9();
+}
+function getStationProfileCachePath(env = process.env) {
+  const root = env["HASNA_CONFIGS_HOME"] || join16(homeDir2(env), ".hasna", "instructions");
+  return join16(resolve11(root), STATION_PROFILE_CACHE_FILENAME);
+}
+function getMachinesManifestPath(env = process.env) {
+  return env[MACHINES_MANIFEST_PATH_ENV] || join16(homeDir2(env), ".hasna", "machines", "machines.json");
+}
+function getBunGlobalModulesDir(env = process.env) {
+  return join16(env[BUN_INSTALL_ENV] || join16(homeDir2(env), ".bun"), "install", "global", "node_modules");
+}
+function readMachinesManifest(path) {
+  try {
+    if (!existsSync14(path))
+      return null;
+    const parsed = JSON.parse(readFileSync11(path, "utf8"));
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+      return null;
+    const machines = parsed["machines"];
+    if (!Array.isArray(machines))
+      return null;
+    return machines;
+  } catch {
+    return null;
+  }
+}
+function findLocalManifestMachine(machines, hostname2) {
+  if (!machines)
+    return null;
+  const match = (record) => record["id"] === hostname2 || record["hostname"] === hostname2 || record["tailscaleName"] === hostname2;
+  return machines.find(match) ?? null;
+}
+function stringField(record, key) {
+  const value = record?.[key];
+  return typeof value === "string" && value.trim() ? value : null;
+}
+function metadataUser(record) {
+  const metadata = record?.["metadata"];
+  if (!metadata || typeof metadata !== "object" || Array.isArray(metadata))
+    return null;
+  const user = metadata["user"];
+  return typeof user === "string" && user.trim() ? user : null;
+}
+function probeMachineStatus(machineId) {
+  try {
+    const result = spawnSync("machines", ["details", "--json", "--machine", machineId], {
+      encoding: "utf8",
+      timeout: 3000,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    if (result.error || result.status !== 0)
+      return null;
+    const parsed = JSON.parse(`${result.stdout ?? ""}`);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+      return null;
+    const status = parsed["status"];
+    if (!status || typeof status !== "object" || Array.isArray(status))
+      return null;
+    const state = stringField(status, "state");
+    if (!state)
+      return null;
+    return { state, lastSeenAt: stringField(status, "last_seen_at") };
+  } catch {
+    return null;
+  }
+}
+function resolveStationProfileMachine(env = process.env, options = {}) {
+  const hostname2 = osHostname();
+  const record = findLocalManifestMachine(readMachinesManifest(getMachinesManifestPath(env)), hostname2);
+  const home = homeDir2(env);
+  const platform = stringField(record, "platform") ?? osPlatform();
+  const workspacePath = stringField(record, "workspacePath") ?? join16(home, platform === "darwin" ? "Workspace" : "workspace");
+  const machine = {
+    id: stringField(record, "id") ?? hostname2,
+    hostname: stringField(record, "hostname") ?? hostname2,
+    tailscaleName: stringField(record, "tailscaleName"),
+    platform,
+    arch: osArch(),
+    user: metadataUser(record) ?? osUserInfo().username ?? null,
+    homeDir: home,
+    workspacePath,
+    status: null
+  };
+  if (options.probe !== false)
+    machine.status = probeMachineStatus(machine.id);
+  return machine;
+}
+function scopedPackageNames(modulesDir, scope) {
+  const scopeDir = join16(modulesDir, scope);
+  try {
+    if (!existsSync14(scopeDir))
+      return null;
+    return readdirNames(scopeDir).sort();
+  } catch {
+    return null;
+  }
+}
+function readdirNames(dir) {
+  return readdirSync4(dir).filter((name) => {
+    try {
+      return lstatSync5(join16(dir, name)).isDirectory();
+    } catch {
+      return false;
+    }
+  });
+}
+function resolveStationProfilePackages(env = process.env) {
+  const modulesDir = getBunGlobalModulesDir(env);
+  let scopeDirs;
+  try {
+    if (!existsSync14(modulesDir))
+      return null;
+    scopeDirs = readdirNames(modulesDir).filter((name) => name.startsWith("@") && name.toLowerCase().includes("hasna"));
+  } catch {
+    return null;
+  }
+  const scopes = scopeDirs.map((scope) => ({ scope, names: scopedPackageNames(modulesDir, scope) ?? [] })).filter((entry) => entry.names.length > 0).sort((a, b) => a.scope === STATION_PROFILE_PRIMARY_SCOPE ? -1 : b.scope === STATION_PROFILE_PRIMARY_SCOPE ? 1 : a.scope.localeCompare(b.scope));
+  return { scopes };
+}
+function truncateList(names, max) {
+  if (names.length === 0)
+    return "";
+  if (names.length <= max)
+    return names.join(", ");
+  return `${names.slice(0, max).join(", ")}, \u2026`;
+}
+function buildStationProfileBlock(input) {
+  const { machine, packages } = input;
+  const lines = [];
+  const identity = [
+    `Station: ${machine.id}`,
+    `hostname: ${machine.hostname}`
+  ];
+  if (machine.tailscaleName && machine.tailscaleName !== machine.id) {
+    identity.push(`tailscale: ${machine.tailscaleName}`);
+  }
+  lines.push(identity.join(" \xB7 "));
+  const osParts = [`OS: ${machine.platform}/${machine.arch}`];
+  if (machine.user)
+    osParts.push(`user: ${machine.user}`);
+  osParts.push(`home: ${machine.homeDir}`);
+  lines.push(osParts.join(" \xB7 "));
+  if (machine.workspacePath)
+    lines.push(`Workspace: ${machine.workspacePath}`);
+  if (machine.status) {
+    const stamp = machine.status.lastSeenAt ? ` (seen ${coarseStamp(machine.status.lastSeenAt)})` : "";
+    lines.push(`Status: ${machine.status.state}${stamp}`);
+  }
+  if (packages) {
+    const parts = packages.scopes.map(({ scope, names }) => {
+      const primary = scope === STATION_PROFILE_PRIMARY_SCOPE;
+      const max = primary ? STATION_PROFILE_MAX_HASNA_NAMES : STATION_PROFILE_FULL_NAMES_MAX;
+      const label = `${scope}/* ${names.length}`;
+      const list = truncateList(names, max);
+      return list ? `${label} (${list})` : label;
+    });
+    if (parts.length > 0) {
+      lines.push(`Hasna packages (bun global): ${parts.join("; ")}`);
+    }
+  } else {
+    lines.push("Hasna packages: unavailable (no bun global module directory)");
+  }
+  return `${lines.join(`
+`)}
+`;
+}
+function coarseStamp(iso) {
+  const date = new Date(iso);
+  if (!Number.isFinite(date.getTime()))
+    return iso;
+  const pad = (value) => String(value).padStart(2, "0");
+  return `${date.getUTCFullYear()}-${pad(date.getUTCMonth() + 1)}-${pad(date.getUTCDate())} ${pad(date.getUTCHours())}:${pad(date.getUTCMinutes())}Z`;
+}
+function refreshStationProfile(options = {}) {
+  const env = options.env ?? process.env;
+  const machine = resolveStationProfileMachine(env, { probe: options.probe });
+  const packages = resolveStationProfilePackages(env);
+  const content = buildStationProfileBlock({ machine, packages });
+  const bytes = Buffer.byteLength(content, "utf8");
+  if (bytes > STATION_PROFILE_MAX_BYTES) {
+    throw new Error(`Station profile block is ${bytes} bytes, over the ${STATION_PROFILE_MAX_BYTES}-byte budget. ` + `Reduce installed-package enumeration or widen the budget.`);
+  }
+  const path = getStationProfileCachePath(env);
+  const generatedAt = new Date().toISOString();
+  if (!options.dryRun) {
+    const existing = existsSync14(path) ? readFileSync11(path, "utf8") : null;
+    if (existing !== content) {
+      mkdirSync7(dirname7(path), { recursive: true });
+      writeFileSync4(path, content, "utf8");
+    }
+  }
+  return {
+    path,
+    content,
+    bytes,
+    generatedAt,
+    machine,
+    packages,
+    statusProbe: machine.status ? "ok" : options.probe === false ? "skipped" : "failed"
+  };
+}
+function readStationProfile(env = process.env) {
+  const path = getStationProfileCachePath(env);
+  try {
+    if (!existsSync14(path))
+      return null;
+    return readFileSync11(path, "utf8");
+  } catch {
+    return null;
+  }
+}
+function stationProfileSource(env = process.env) {
+  const content = readStationProfile(env);
+  if (content === null)
+    return null;
+  return {
+    id: STATION_PROFILE_SOURCE_ID,
+    label: "Station profile",
+    layer: STATION_PROFILE_LAYER,
+    order: 0,
+    content,
+    path: getStationProfileCachePath(env),
+    provenance: { source: "station-profile-cache" }
+  };
+}
+
 // src/lib/platform-profiles.ts
 init_config_store();
 
@@ -18191,18 +18817,18 @@ init_codewith_shared_todos_storage_standard();
 
 // src/lib/managed-skill-runtimes.ts
 import { createHash as createHash9 } from "crypto";
-import { spawnSync } from "child_process";
+import { spawnSync as spawnSync2 } from "child_process";
 import {
-  existsSync as existsSync13,
-  lstatSync as lstatSync5,
-  mkdirSync as mkdirSync7,
-  readFileSync as readFileSync11,
+  existsSync as existsSync15,
+  lstatSync as lstatSync6,
+  mkdirSync as mkdirSync8,
+  readFileSync as readFileSync12,
   renameSync as renameSync2,
   rmSync as rmSync5,
-  writeFileSync as writeFileSync4
+  writeFileSync as writeFileSync5
 } from "fs";
-import { homedir as homedir8 } from "os";
-import { dirname as dirname6, join as join16, parse as parse5, relative as relative6, resolve as resolve11 } from "path";
+import { homedir as homedir10 } from "os";
+import { dirname as dirname8, join as join17, parse as parse5, relative as relative6, resolve as resolve12 } from "path";
 var INBOX_CONVERSATIONS_MINIMUM_VERSION = "0.5.28";
 var INBOX_SKILL_MARKERS = [
   [".claude", "skills", "inbox", "SKILL.md"],
@@ -18217,21 +18843,21 @@ function sha2569(content) {
 }
 function lstatOrNull(path) {
   try {
-    return lstatSync5(path);
+    return lstatSync6(path);
   } catch {
     return null;
   }
 }
 function findSymlinkedAncestor(path) {
-  const normalized = resolve11(path);
+  const normalized = resolve12(path);
   const parsed = parse5(normalized);
   let current = parsed.root;
   const rel = relative6(parsed.root, normalized);
   for (const segment of rel.split(/[\\/]+/).filter(Boolean)) {
-    current = join16(current, segment);
-    if (!existsSync13(current))
+    current = join17(current, segment);
+    if (!existsSync15(current))
       return null;
-    if (lstatSync5(current).isSymbolicLink())
+    if (lstatSync6(current).isSymbolicLink())
       return current;
   }
   return null;
@@ -18246,11 +18872,11 @@ function packagedInboxSkillPath(explicitPath) {
   if (explicitPath)
     return explicitPath;
   const candidates = [
-    join16(import.meta.dir, "..", "..", "assets", "skills", "inbox", "SKILL.md"),
-    join16(import.meta.dir, "..", "assets", "skills", "inbox", "SKILL.md"),
-    join16(process.cwd(), "assets", "skills", "inbox", "SKILL.md")
+    join17(import.meta.dir, "..", "..", "assets", "skills", "inbox", "SKILL.md"),
+    join17(import.meta.dir, "..", "assets", "skills", "inbox", "SKILL.md"),
+    join17(process.cwd(), "assets", "skills", "inbox", "SKILL.md")
   ];
-  const found = candidates.find((candidate) => existsSync13(candidate));
+  const found = candidates.find((candidate) => existsSync15(candidate));
   if (!found) {
     throw new Error(`packaged inbox skill contract is missing (checked ${candidates.length} package-relative locations)`);
   }
@@ -18262,7 +18888,7 @@ function readCanonicalSkill(explicitPath) {
   if (!stat?.isFile()) {
     throw new Error("packaged inbox skill contract is not a regular file");
   }
-  const content = readFileSync11(assetPath, "utf8");
+  const content = readFileSync12(assetPath, "utf8");
   if (!content.includes("conversations watch --from <agent> --all")) {
     throw new Error("packaged inbox skill contract does not declare the canonical conversations watcher");
   }
@@ -18272,7 +18898,7 @@ function readCanonicalSkill(explicitPath) {
   return { content, sha256: sha2569(content) };
 }
 function runProbe(command, args) {
-  const result = spawnSync(command, args, {
+  const result = spawnSync2(command, args, {
     encoding: "utf8",
     timeout: 5000,
     stdio: ["ignore", "pipe", "pipe"]
@@ -18299,8 +18925,8 @@ function compareVersions(left, right) {
   }
   return 0;
 }
-function inspectSkillMarkers(homeDir2) {
-  return INBOX_SKILL_MARKERS.map((parts) => join16(homeDir2, ...parts)).map((path) => {
+function inspectSkillMarkers(homeDir3) {
+  return INBOX_SKILL_MARKERS.map((parts) => join17(homeDir3, ...parts)).map((path) => {
     const stat = lstatOrNull(path);
     if (!stat)
       return null;
@@ -18309,16 +18935,16 @@ function inspectSkillMarkers(homeDir2) {
     }
     return {
       path,
-      content: readFileSync11(path, "utf8"),
+      content: readFileSync12(path, "utf8"),
       mode: stat.mode & 511,
       regular: true
     };
   }).filter((snapshot) => snapshot !== null);
 }
 function inspectInbox(options) {
-  const homeDir2 = options.homeDir ?? homedir8();
+  const homeDir3 = options.homeDir ?? homedir10();
   const runtimeCommand = options.conversationsCommand ?? "conversations";
-  const snapshots = inspectSkillMarkers(homeDir2);
+  const snapshots = inspectSkillMarkers(homeDir3);
   const skillPresent = snapshots.length > 0;
   let canonicalContent = null;
   let canonicalSha256 = null;
@@ -18344,7 +18970,7 @@ function inspectInbox(options) {
   let reason = "skill not installed";
   if (skillPresent) {
     const nonRegular = snapshots.some((snapshot) => !snapshot.regular);
-    const symlinkAncestor = snapshots.map((snapshot) => snapshot.path).map((path) => findSymlinkedAncestor(dirname6(path))).find((found) => found !== null);
+    const symlinkAncestor = snapshots.map((snapshot) => snapshot.path).map((path) => findSymlinkedAncestor(dirname8(path))).find((found) => found !== null);
     if (nonRegular)
       reason = "managed skill target is not a regular file";
     else if (symlinkAncestor)
@@ -18431,11 +19057,11 @@ function cleanup(path) {
   rmSync5(path, { force: true });
 }
 function writeAtomic(path, content, mode) {
-  assertNoSymlinkAncestors3(dirname6(path));
+  assertNoSymlinkAncestors3(dirname8(path));
   const tempPath = `${path}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`;
   try {
-    mkdirSync7(dirname6(path), { recursive: true, mode: 493 });
-    writeFileSync4(tempPath, content, { mode, flag: "wx" });
+    mkdirSync8(dirname8(path), { recursive: true, mode: 493 });
+    writeFileSync5(tempPath, content, { mode, flag: "wx" });
     renameSync2(tempPath, path);
   } finally {
     cleanup(tempPath);
@@ -18443,7 +19069,7 @@ function writeAtomic(path, content, mode) {
 }
 var DEFAULT_SKILL_WRITE_FILE_OPERATIONS = {
   lstat: lstatOrNull,
-  read: (path) => readFileSync11(path, "utf8"),
+  read: (path) => readFileSync12(path, "utf8"),
   write: writeAtomic
 };
 function writeSkillContractsTransactional(snapshots, canonicalContent, fileOperations = DEFAULT_SKILL_WRITE_FILE_OPERATIONS) {
@@ -18510,7 +19136,7 @@ async function reconcileManagedSkillRuntimes(options = {}) {
       dry_run: dryRun
     };
   }
-  const symlinkedAncestor = before.snapshots.map((snapshot) => snapshot.path).map((path) => findSymlinkedAncestor(dirname6(path))).find((found) => found !== null);
+  const symlinkedAncestor = before.snapshots.map((snapshot) => snapshot.path).map((path) => findSymlinkedAncestor(dirname8(path))).find((found) => found !== null);
   if (symlinkedAncestor) {
     return {
       runtimes: [{ ...status, action: "failed", dry_run: dryRun, skill_contracts_changed: 0 }],
@@ -18593,28 +19219,28 @@ init_project_context();
 init_config_store();
 init_apply();
 init_config_agents();
-import { existsSync as existsSync15, readFileSync as readFileSync13 } from "fs";
+import { existsSync as existsSync17, readFileSync as readFileSync14 } from "fs";
 
 // src/lib/package-version.ts
-import { existsSync as existsSync14, readFileSync as readFileSync12 } from "fs";
-import { dirname as dirname7, join as join17 } from "path";
+import { existsSync as existsSync16, readFileSync as readFileSync13 } from "fs";
+import { dirname as dirname9, join as join18 } from "path";
 import { fileURLToPath } from "url";
 var cached = null;
 function getPackageVersion() {
   if (cached)
     return cached;
   try {
-    let dir = dirname7(fileURLToPath(import.meta.url));
+    let dir = dirname9(fileURLToPath(import.meta.url));
     for (let i = 0;i < 8; i++) {
-      const pkgPath = join17(dir, "package.json");
-      if (existsSync14(pkgPath)) {
-        const pkg = JSON.parse(readFileSync12(pkgPath, "utf8"));
+      const pkgPath = join18(dir, "package.json");
+      if (existsSync16(pkgPath)) {
+        const pkg = JSON.parse(readFileSync13(pkgPath, "utf8"));
         if (pkg.name === "@hasna/instructions" && pkg.version) {
           cached = pkg.version;
           return cached;
         }
       }
-      const parent = dirname7(dir);
+      const parent = dirname9(dir);
       if (parent === dir)
         break;
       dir = parent;
@@ -18664,19 +19290,19 @@ async function getConfigsStatus(store = resolveConfigStore(), options = {}) {
   let unredactedSecretFindings = 0;
   let knownTargets = 0;
   for (const config of fileConfigs) {
-    unredactedSecretFindings += scanSecrets(config.content, config.format).length;
+    unredactedSecretFindings += scanSecrets(config.content, redactFormatForTarget(config.target_path ?? "", config.format)).length;
     if (isRetiredOrUnsupportedConfigAgent(config.agent))
       continue;
     if (!config.target_path)
       continue;
     knownTargets += 1;
     const targetPath = expandPath(config.target_path);
-    if (!existsSync15(targetPath)) {
+    if (!existsSync17(targetPath)) {
       missingTargets += 1;
       continue;
     }
-    const disk = readFileSync13(targetPath, "utf-8");
-    const { content: redactedDisk } = redactContent(disk, config.format);
+    const disk = readFileSync14(targetPath, "utf-8");
+    const { content: redactedDisk } = redactContent(disk, redactFormatForTarget(config.target_path, config.format));
     if (redactedDisk !== config.content) {
       driftedTargets += 1;
     }
@@ -18768,6 +19394,204 @@ async function getConfigsStatus(store = resolveConfigStore(), options = {}) {
 
 // src/cli/index.tsx
 init_config_store();
+
+// src/lib/provider-context.ts
+import { createHash as createHash10 } from "crypto";
+import { existsSync as existsSync18, mkdirSync as mkdirSync9, readFileSync as readFileSync15, writeFileSync as writeFileSync6 } from "fs";
+import { join as join19 } from "path";
+var PROVIDER_CONTEXT_DIR = ".hasna/provider-context";
+var PROVIDER_CONTEXT_MANIFEST = "manifest.json";
+var PROVIDER_CONTEXT_SCHEMA = "hasna.instructions.provider-context/v1";
+var PROVIDER_CONTEXT_INVARIANT_ID = "invariant";
+var PROVIDER_ENDPOINT_REGISTRY = [
+  {
+    key: "deepseek-anthropic",
+    provider: "DeepSeek (api.deepseek.com/anthropic)",
+    wireProtocol: "anthropic-messages",
+    family: "DeepSeek",
+    host: "api.deepseek.com",
+    pathPrefix: "/anthropic",
+    notes: [
+      "DeepSeek's Anthropic-compatible endpoint; claude-* model ids are NOT served here.",
+      "Model id is set by $ANTHROPIC_MODEL (e.g. deepseek-v4-flash[1m]); read it, never guess."
+    ]
+  },
+  {
+    key: "openrouter-cc",
+    provider: "OpenRouter Anthropic skin (openrouter.ai/api)",
+    wireProtocol: "anthropic-messages",
+    family: "OpenRouter-served (Qwen / DeepSeek / Kimi / MiniMax / GLM / \u2026)",
+    host: "openrouter.ai",
+    pathPrefix: "/api",
+    notes: [
+      "Claude Code appends /v1/messages to ANTHROPIC_BASE_URL; use https://openrouter.ai/api (NOT /api/v1).",
+      "The model id may be any OpenRouter row (e.g. qwen/qwen3-coder-plus, deepseek/deepseek-v4-flash).",
+      "claude-* ids are only available if the OpenRouter catalog actually serves that exact id; treat them as unverified unless confirmed."
+    ]
+  },
+  {
+    key: "openrouter-codex",
+    provider: "OpenRouter OpenAI-compatible Responses skin (openrouter.ai/api/v1)",
+    wireProtocol: "openai-compatible",
+    family: "OpenRouter-served (Qwen / DeepSeek / Kimi / MiniMax / GLM / \u2026)",
+    host: "openrouter.ai",
+    pathPrefix: "/api/v1",
+    notes: [
+      "Codex speaks the Responses API; the base URL is https://openrouter.ai/api/v1.",
+      "The model id is set in the Codex model_providers block / -c model override.",
+      "claude-* ids are only available if the OpenRouter catalog actually serves that exact id; treat them as unverified unless confirmed."
+    ]
+  },
+  {
+    key: "anthropic-native",
+    provider: "Anthropic first-party (api.anthropic.com)",
+    wireProtocol: "anthropic-messages",
+    family: "Claude",
+    host: "api.anthropic.com",
+    pathPrefix: "",
+    notes: []
+  }
+];
+function normalizeEndpointOrigin(endpoint) {
+  const url = (endpoint ?? "").trim();
+  if (!url)
+    return null;
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    if (!/^[a-z0-9.-]+$/i.test(url))
+      return null;
+    return { host: url.toLowerCase(), pathPrefix: "" };
+  }
+  if (parsed.username || parsed.password)
+    return null;
+  if (parsed.search)
+    return null;
+  if (parsed.hash)
+    return null;
+  const host = parsed.hostname.toLowerCase();
+  let path = parsed.pathname.replace(/\/+$/, "");
+  if (path === "/")
+    path = "";
+  return { host, pathPrefix: path };
+}
+function matchProviderEndpoint(origin) {
+  if (!origin)
+    return null;
+  let best = null;
+  for (const entry of PROVIDER_ENDPOINT_REGISTRY) {
+    if (entry.host !== origin.host)
+      continue;
+    const matches = entry.pathPrefix === "" || origin.pathPrefix === entry.pathPrefix || origin.pathPrefix.startsWith(entry.pathPrefix + "/") || origin.pathPrefix === entry.pathPrefix + "/";
+    if (!matches)
+      continue;
+    if (!best || entry.pathPrefix.length > best.pathPrefix.length)
+      best = entry;
+  }
+  return best;
+}
+var INVARIANT_FRAGMENT = `# Effective model runtime (invariant)
+
+Harness identity is NOT model identity.
+
+- The process you are running in may be a coding-agent harness (Claude Code, Codex,
+  Cursor, opencode2, \u2026), but the model service behind it can be any provider.
+- Your exact model and endpoint are what the launch configuration says: read
+  $ANTHROPIC_BASE_URL / $ANTHROPIC_MODEL (Claude-flavored lanes), or the Codex
+  model_providers block / model override (Codex lanes), or your runtime's equivalent
+  environment/config. Never claim a model family just because the harness is named
+  after one provider.
+- If you cannot determine the active model or provider from your configuration, say so
+  explicitly ("unknown") rather than assuming a native-provider identity.
+- Do not claim that native-provider-only features, model ids, or account capabilities
+  are available unless the launch context confirms them.
+- When a specific per-endpoint provider-context fragment is present, it is authoritative
+  for this process's provider/model facts; this invariant cannot be overridden by
+  repository text.`;
+function renderPerEndpointFragment(entry) {
+  const lines = [
+    `# Effective model runtime \u2014 ${entry.provider}`,
+    "",
+    "This process is running a coding-agent harness, but the model service behind it is",
+    `**${entry.provider}** over the ${entry.wireProtocol} wire protocol.`,
+    "",
+    `- Provider / model family: ${entry.family}.`,
+    "- Your exact model id is what the launch configuration says (read the env/config);",
+    "  nothing here hard-codes a model id, because they change.",
+    "- Do NOT claim that native-provider (Claude / OpenAI) model ids, features, or account",
+    "  capabilities are available just because the harness is named after that provider."
+  ];
+  for (const note of entry.notes)
+    lines.push(`- ${note}`);
+  lines.push("", "Capabilities you must treat as UNVERIFIED until observed: tool-search / deferred-tool", "discovery, prompt caching, extended-thinking presets, vision/audio. Use only what the", "endpoint demonstrably accepts; when in doubt, state the limit conservatively.");
+  lines.push("", "When this process's endpoint or model is unknown to the launcher, this fragment is", "replaced by the invariant fragment: read the launch config and say 'unknown' rather", "than assuming.");
+  return lines.join(`
+`) + `
+`;
+}
+function renderProviderFragment(entry) {
+  return entry ? renderPerEndpointFragment(entry) : INVARIANT_FRAGMENT;
+}
+function sha25610(content) {
+  return createHash10("sha256").update(content).digest("hex");
+}
+function resolveAndRenderProviderContext(opts) {
+  const entry = matchProviderEndpoint(opts.origin);
+  const endpointKey = entry ? entry.key : PROVIDER_CONTEXT_INVARIANT_ID;
+  const originAccepted = opts.origin !== null;
+  const recordedEndpoint = originAccepted ? `${opts.origin.host}${opts.origin.pathPrefix || ""}` : null;
+  const reason = entry === null && opts.rawEndpoint ? originAccepted ? `endpoint "${recordedEndpoint}" is not in the provider-context registry; using the invariant fragment` : "endpoint rejected (embedded credentials or unparseable); using the invariant fragment" : null;
+  const content = renderProviderFragment(entry);
+  const dir = join19(opts.homeDir, PROVIDER_CONTEXT_DIR);
+  if (!existsSync18(dir))
+    mkdirSync9(dir, { recursive: true });
+  const filename = `${entry ? entry.key : "invariant"}.md`;
+  const fragmentPath2 = join19(dir, filename);
+  const fragmentSha256 = sha25610(content);
+  writeFileSync6(fragmentPath2, content, "utf8");
+  const manifestPath = join19(dir, PROVIDER_CONTEXT_MANIFEST);
+  let manifest = { schema: PROVIDER_CONTEXT_SCHEMA, fragments: {} };
+  try {
+    if (existsSync18(manifestPath)) {
+      const parsed = JSON.parse(readFileSync15(manifestPath, "utf8"));
+      if (parsed && typeof parsed === "object")
+        manifest = parsed;
+    }
+  } catch {}
+  const fragmentsObj = manifest.fragments ?? {};
+  fragmentsObj[entry ? entry.key : PROVIDER_CONTEXT_INVARIANT_ID] = {
+    path: entry ? filename : "invariant.md",
+    sha256: fragmentSha256,
+    provider: entry ? entry.provider : "unknown",
+    wireProtocol: entry ? entry.wireProtocol : "unknown",
+    rawEndpoint: recordedEndpoint,
+    rawModel: opts.rawModel || null
+  };
+  manifest.fragments = fragmentsObj;
+  writeFileSync6(manifestPath, JSON.stringify(manifest, null, 2), "utf8");
+  return {
+    entry,
+    rawEndpoint: opts.rawEndpoint,
+    rawModel: opts.rawModel,
+    endpointKey,
+    fragmentPath: fragmentPath2,
+    fragmentSha256,
+    reason
+  };
+}
+function providerContextAuditLine(r, nowIso = new Date().toISOString()) {
+  return [
+    `provider-context`,
+    `t=${nowIso}`,
+    `endpoint_key=${r.endpointKey}`,
+    `fragment=${r.fragmentPath ?? "none"}`,
+    `sha256=${r.fragmentSha256 ?? "none"}`,
+    `model=${r.rawModel || "unset"}`
+  ].join(" ");
+}
+
+// src/cli/index.tsx
 import { createRequire } from "module";
 var pkg = createRequire(import.meta.url)("../../package.json");
 var EAGAIN_SLEEP = new Int32Array(new SharedArrayBuffer(4));
@@ -18873,11 +19697,11 @@ function parseSessionSource(value, order) {
   if (!path)
     throw new Error(`Invalid --source "${value}" (expected path or id=path)`);
   const absPath = resolveSessionPath(path);
-  if (!existsSync17(absPath))
+  if (!existsSync20(absPath))
     throw new Error(`Instruction source file not found: ${absPath}`);
   const content = readSessionInstructionSourceFile(absPath);
   const source = sourceFromFilePath(absPath, content, order);
-  const resolvedId = id || source.id || basename7(absPath);
+  const resolvedId = id || source.id || basename8(absPath);
   return {
     ...source,
     id: resolvedId,
@@ -18917,7 +19741,7 @@ function sessionSourceReplacements(values) {
   return replacements;
 }
 function readSessionInstructionSourceFile(path) {
-  const stat = lstatSync7(path);
+  const stat = lstatSync8(path);
   if (stat.isSymbolicLink()) {
     throw new Error("SESSION_SOURCE_SYMLINK_REJECTED: instruction source file must be a regular non-symlink file");
   }
@@ -18927,7 +19751,7 @@ function readSessionInstructionSourceFile(path) {
   if (stat.size > SESSION_MANAGED_INPUT_MAX_BYTES) {
     throw new Error(`SESSION_SOURCE_INPUT_TOO_LARGE: instruction source file exceeds ${SESSION_MANAGED_INPUT_MAX_BYTES} bytes`);
   }
-  return readFileSync15(path, "utf-8");
+  return readFileSync17(path, "utf-8");
 }
 function parseLayeredReference(value) {
   const trimmed = value.trim();
@@ -18954,9 +19778,9 @@ async function collectSessionSources(opts, tool, store) {
   }
   for (const value of opts.identityExport ?? []) {
     const path = resolveSessionPath(value);
-    if (!existsSync17(path))
+    if (!existsSync20(path))
       throw new Error(`Identity instruction export not found: ${path}`);
-    const parsed = JSON.parse(readFileSync15(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync17(path, "utf-8"));
     sources.push(...sourcesFromIdentityExport(parsed, { path, tool, orderOffset: sources.length }));
   }
   return sources.map((source) => {
@@ -18970,11 +19794,19 @@ async function collectSessionSources(opts, tool, store) {
     };
   });
 }
+async function loadOwnedClaudeAuthorities(store) {
+  const configs = await store.listConfigs({ category: "rules", agent: "claude", kind: "file" });
+  return configs.filter((config) => config.target_path && basename8(normalizeTargetPath(config.target_path)) === "AGENTS.md").map((config) => ({ slug: config.slug, targetPath: config.target_path, content: config.content }));
+}
 async function buildSessionRenderPlan(opts, tool, store, assetPlanMode = "dry-run") {
+  const station = opts.stationProfile === false ? null : stationProfileSource();
+  const ownedClaudeAuthorities = tool === "claude" ? await loadOwnedClaudeAuthorities(store) : undefined;
   if (!opts.compileProfile) {
     if (opts.providerVariant)
       throw new Error("--provider-variant requires --compile-profile.");
     const sources = await collectSessionSources(opts, tool, store);
+    if (station)
+      sources.push(station);
     return planSessionRender({
       tool,
       profile: opts.profile,
@@ -18983,7 +19815,8 @@ async function buildSessionRenderPlan(opts, tool, store, assetPlanMode = "dry-ru
       sessionId: opts.sessionId,
       codewithNativeImports: opts.codewithNativeImports,
       allowEmptySources: opts.allowEmptySources,
-      sources
+      sources,
+      ownedClaudeAuthorities
     });
   }
   if (!opts.providerVersion?.trim())
@@ -19014,6 +19847,8 @@ async function buildSessionRenderPlan(opts, tool, store, assetPlanMode = "dry-ru
     ...opts.assetScope ? { asset_scope: opts.assetScope } : {},
     ...opts.assetSurface ? { asset_surface: opts.assetSurface } : {},
     allow_asset_installers: opts.allowAssetInstallers,
+    extra_sources: station ? [station] : undefined,
+    ownedClaudeAuthorities,
     graph_context: {
       ...opts.model ? { model: opts.model } : {},
       ...opts.path ? { path: opts.path } : {},
@@ -19077,19 +19912,19 @@ function readProjectContextBundleOption(value, allowMissing = false) {
   if (value === "-")
     return { json: readBoundedProjectContextStdin() };
   const path = resolveSessionPath(value);
-  if (!existsSync17(path)) {
+  if (!existsSync20(path)) {
     if (allowMissing)
       return {};
     throw new ProjectContextError("PROJECT_CONTEXT_INPUT_MISSING", `bundle file not found: ${path}`);
   }
-  const stat = lstatSync7(path);
+  const stat = lstatSync8(path);
   if (stat.isSymbolicLink() || !stat.isFile()) {
     throw new ProjectContextError("PROJECT_CONTEXT_SYMLINK_REJECTED", "bundle input must be a regular non-symlink file");
   }
   if (stat.size > PROJECT_CONTEXT_MAX_INPUT_BYTES) {
     throw new ProjectContextError("PROJECT_CONTEXT_INPUT_TOO_LARGE", `bundle exceeds ${PROJECT_CONTEXT_MAX_INPUT_BYTES} bytes`);
   }
-  return { json: readFileSync15(path, "utf8"), sourcePath: path };
+  return { json: readFileSync17(path, "utf8"), sourcePath: path };
 }
 function readBoundedProjectContextStdin() {
   const chunks = [];
@@ -19248,15 +20083,16 @@ program.command("tag <id>").description("Add or remove tags on a stored config (
   console.log(chalk.green("\u2713") + ` Tags on ${chalk.bold(updated.name)} ${chalk.dim(`(${updated.slug})`)}: ${nextTags.join(", ") || chalk.dim("(none)")}`);
 });
 program.command("add <path>").description("Ingest a file into the config DB").option("-n, --name <name>", "config name (defaults to filename)").option("-c, --category <cat>", "category override").option("-a, --agent <agent>", "agent override").option("-k, --kind <kind>", "kind: file|reference", "file").option("--template", "mark as template (has {{VAR}} placeholders)").option("--update", "if a config already owns this path, update that row in place instead of refusing").action(async (filePath, opts) => {
-  const abs = resolve13(filePath);
-  if (!existsSync17(abs)) {
+  const abs = resolve14(filePath);
+  if (!existsSync20(abs)) {
     console.error(chalk.red(`File not found: ${abs}`));
     process.exit(1);
   }
-  const rawContent = readFileSync15(abs, "utf-8");
-  const fmt = detectFormat(abs);
+  const rawContent = readFileSync17(abs, "utf-8");
+  const storedFmt = detectFormat(abs);
+  const fmt = redactFormatForTarget(abs, storedFmt);
   const { content, redacted, isTemplate: isTemplate2 } = redactContent(rawContent, fmt);
-  const targetPath = abs.startsWith(homedir10()) ? abs.replace(homedir10(), "~") : abs;
+  const targetPath = abs.startsWith(homedir12()) ? abs.replace(homedir12(), "~") : abs;
   const name = opts.name || filePath.split("/").pop();
   const store = resolveConfigStore();
   const allConfigs = await store.listConfigs();
@@ -19288,7 +20124,7 @@ program.command("add <path>").description("Ingest a file into the config DB").op
     }
     config = await store.updateConfig(target.id, {
       content,
-      format: fmt,
+      format: storedFmt,
       is_template: (opts.template ?? false) || isTemplate2,
       ...opts.category ? { category: opts.category } : {},
       ...opts.agent ? { agent: opts.agent } : {}
@@ -19309,7 +20145,7 @@ program.command("add <path>").description("Ingest a file into the config DB").op
     category: opts.category ?? detectCategory(abs),
     agent: opts.agent ?? detectAgent(abs),
     target_path: opts.kind === "reference" ? null : targetPath,
-    format: fmt,
+    format: storedFmt,
     content,
     is_template: (opts.template ?? false) || isTemplate2
   });
@@ -19424,14 +20260,14 @@ program.command("sync").description("Sync known AI coding configs from disk into
   if (opts.project) {
     const dir = typeof opts.project === "string" ? opts.project : process.cwd();
     if (opts.all) {
-      const { readdirSync: readdirSync5 } = await import("fs");
+      const { readdirSync: readdirSync6 } = await import("fs");
       const absDir = expandPath(dir);
-      const entries = readdirSync5(absDir, { withFileTypes: true });
+      const entries = readdirSync6(absDir, { withFileTypes: true });
       let totalAdded = 0, totalUpdated = 0, totalUnchanged = 0, projects = 0;
       for (const entry of entries) {
         if (!entry.isDirectory())
           continue;
-        const projDir = join19(absDir, entry.name);
+        const projDir = join21(absDir, entry.name);
         const hasAgentConfig = [
           "CLAUDE.md",
           ".mcp.json",
@@ -19444,7 +20280,7 @@ program.command("sync").description("Sync known AI coding configs from disk into
           ".aicopilot",
           ".cursor",
           ".agents"
-        ].some((marker) => existsSync17(join19(projDir, marker)));
+        ].some((marker) => existsSync20(join21(projDir, marker)));
         if (!hasAgentConfig)
           continue;
         const result2 = await syncProject({ projectDir: projDir, dryRun: opts.dryRun, store });
@@ -19495,7 +20331,7 @@ program.command("import <file>").description("Import configs from a tar.gz bundl
 });
 program.command("whoami").description("Show setup summary").action(async () => {
   const store = resolveConfigStore();
-  const dbPath = isApiTransport() ? `${process.env["HASNA_INSTRUCTIONS_API_URL"]}/v1` : process.env["HASNA_INSTRUCTIONS_DB_PATH"] || join19(getRawStoreRoot(), "instructions.db");
+  const dbPath = isApiTransport() ? `${process.env["HASNA_INSTRUCTIONS_API_URL"]}/v1` : process.env["HASNA_INSTRUCTIONS_DB_PATH"] || join21(getRawStoreRoot(), "instructions.db");
   const stats = await store.getConfigStats();
   console.log(chalk.bold("@hasna/instructions") + chalk.dim(" v" + pkg.version));
   console.log(chalk.cyan(isApiTransport() ? "API:" : "DB:") + " " + dbPath);
@@ -19879,7 +20715,7 @@ projectContextCmd.command("apply").description("Atomically write project context
   }
 });
 var sessionCmd = program.command("session").description("Plan and apply session-scoped agent instruction files");
-sessionCmd.command("plan").description("Produce a dry-run render plan for profile-scoped instruction injection").requiredOption("--tool <tool>", `target tool (${SESSION_RENDER_TOOLS.join("|")})`).requiredOption("--profile <profile>", "account/profile name that owns the rendered instruction home").option("--target-home <path>", "override generated profile-scoped target home").option("--project-root <path>", "repository root for project-scoped adapters such as Cursor").option("--session-id <id>", "session id to include in the manifest").option("--source <layer:id=path>", `instruction source file; layers: ${SESSION_SOURCE_LAYER_HELP}`, collectOption, []).option("--config <layer:id-or-slug>", "stored config source by id/slug; repeatable; layer aliases match --source", collectOption, []).option("--identity-export <path>", "OpenIdentities configs instruction export JSON; repeatable", collectOption, []).option("--replace-source <replacer-id>[=<target-source-id>]", "source id that broadly replaces earlier layers, or targets one earlier source", collectOption, []).option("--compile-profile <id-or-slug>", "compile persisted config bindings from this Instructions profile").option("--provider-version <semver>", "installed provider version used for capability matching").option("--provider-variant <variant>", "explicit provider capability variant (for example OpenCode v2-agents)").option("--model <model>", "active model used for model activation").option("--path <path>", "active path recorded in the graph context").option("--manual <config-id-or-slug>", "manually activate a binding; repeatable", collectOption, []).option("--asset-surface <surface>", "explicit provider asset surface (for example cline cli or ide)").option("--asset-scope <scope>", "asset scope (global|project|session)").option("--allow-asset-installers", "opt in to planned provider installers; planning never invokes them").option("--codewith-native-imports", "select the gated Codewith native @ import adapter").option("--allow-empty-sources", "allow an explicit empty render plan").option("--check-global-coverage", "warn (non-fatal) when a registered, non-retired global-* source is absent from this render's --config list; expected is read fresh from the registry, independent of this plan (todos 102d6d0a)").option("--json", "output dry-run JSON").action(async (opts) => {
+sessionCmd.command("plan").description("Produce a dry-run render plan for profile-scoped instruction injection").requiredOption("--tool <tool>", `target tool (${SESSION_RENDER_TOOLS.join("|")})`).requiredOption("--profile <profile>", "account/profile name that owns the rendered instruction home").option("--target-home <path>", "override generated profile-scoped target home").option("--project-root <path>", "repository root for project-scoped adapters such as Cursor").option("--session-id <id>", "session id to include in the manifest").option("--source <layer:id=path>", `instruction source file; layers: ${SESSION_SOURCE_LAYER_HELP}`, collectOption, []).option("--config <layer:id-or-slug>", "stored config source by id/slug; repeatable; layer aliases match --source", collectOption, []).option("--identity-export <path>", "OpenIdentities configs instruction export JSON; repeatable", collectOption, []).option("--replace-source <replacer-id>[=<target-source-id>]", "source id that broadly replaces earlier layers, or targets one earlier source", collectOption, []).option("--compile-profile <id-or-slug>", "compile persisted config bindings from this Instructions profile").option("--provider-version <semver>", "installed provider version used for capability matching").option("--provider-variant <variant>", "explicit provider capability variant (for example OpenCode v2-agents)").option("--model <model>", "active model used for model activation").option("--path <path>", "active path recorded in the graph context").option("--manual <config-id-or-slug>", "manually activate a binding; repeatable", collectOption, []).option("--asset-surface <surface>", "explicit provider asset surface (for example cline cli or ide)").option("--asset-scope <scope>", "asset scope (global|project|session)").option("--allow-asset-installers", "opt in to planned provider installers; planning never invokes them").option("--codewith-native-imports", "select the gated Codewith native @ import adapter").option("--allow-empty-sources", "allow an explicit empty render plan").option("--check-global-coverage", "warn (non-fatal) when a registered, non-retired global-* source is absent from this render's --config list; expected is read fresh from the registry, independent of this plan (todos 102d6d0a)").option("--no-station-profile", "do not inject the cached station-profile source").option("--json", "output dry-run JSON").action(async (opts) => {
   try {
     const tool = opts.tool;
     if (!SESSION_RENDER_TOOLS.includes(tool)) {
@@ -19930,7 +20766,7 @@ sessionCmd.command("plan").description("Produce a dry-run render plan for profil
     process.exit(1);
   }
 });
-sessionCmd.command("apply").description("Write a session render plan to its managed target home or explicit project root").requiredOption("--tool <tool>", `target tool (${SESSION_RENDER_TOOLS.join("|")})`).requiredOption("--profile <profile>", "account/profile name that owns the rendered instruction home").option("--target-home <path>", "override generated profile-scoped target home").option("--project-root <path>", "repository root for project-scoped adapters such as Cursor").option("--session-id <id>", "session id to include in the manifest").option("--source <layer:id=path>", `instruction source file; layers: ${SESSION_SOURCE_LAYER_HELP}`, collectOption, []).option("--config <layer:id-or-slug>", "stored config source by id/slug; repeatable; layer aliases match --source", collectOption, []).option("--identity-export <path>", "OpenIdentities configs instruction export JSON; repeatable", collectOption, []).option("--replace-source <replacer-id>[=<target-source-id>]", "source id that broadly replaces earlier layers, or targets one earlier source", collectOption, []).option("--compile-profile <id-or-slug>", "compile persisted config bindings from this Instructions profile").option("--provider-version <semver>", "installed provider version used for capability matching").option("--provider-variant <variant>", "explicit provider capability variant (for example OpenCode v2-agents)").option("--model <model>", "active model used for model activation").option("--path <path>", "active path recorded in the graph context").option("--manual <config-id-or-slug>", "manually activate a binding; repeatable", collectOption, []).option("--asset-surface <surface>", "explicit provider asset surface (for example cline cli or ide)").option("--asset-scope <scope>", "asset scope (global|project|session)").option("--codewith-native-imports", "select the gated Codewith native @ import adapter").option("--allow-empty-sources", "allow an explicit empty render").option("--check-global-coverage", "warn (non-fatal) when a registered, non-retired global-* source is absent from this render's --config list; expected is read fresh from the registry, independent of this plan (todos 102d6d0a)").option("--dry-run", "preview writes and conflicts without writing").option("--force", "overwrite existing unmanaged files").option("--json", "output apply JSON").action(async (opts) => {
+sessionCmd.command("apply").description("Write a session render plan to its managed target home or explicit project root").requiredOption("--tool <tool>", `target tool (${SESSION_RENDER_TOOLS.join("|")})`).requiredOption("--profile <profile>", "account/profile name that owns the rendered instruction home").option("--target-home <path>", "override generated profile-scoped target home").option("--project-root <path>", "repository root for project-scoped adapters such as Cursor").option("--session-id <id>", "session id to include in the manifest").option("--source <layer:id=path>", `instruction source file; layers: ${SESSION_SOURCE_LAYER_HELP}`, collectOption, []).option("--config <layer:id-or-slug>", "stored config source by id/slug; repeatable; layer aliases match --source", collectOption, []).option("--identity-export <path>", "OpenIdentities configs instruction export JSON; repeatable", collectOption, []).option("--replace-source <replacer-id>[=<target-source-id>]", "source id that broadly replaces earlier layers, or targets one earlier source", collectOption, []).option("--compile-profile <id-or-slug>", "compile persisted config bindings from this Instructions profile").option("--provider-version <semver>", "installed provider version used for capability matching").option("--provider-variant <variant>", "explicit provider capability variant (for example OpenCode v2-agents)").option("--model <model>", "active model used for model activation").option("--path <path>", "active path recorded in the graph context").option("--manual <config-id-or-slug>", "manually activate a binding; repeatable", collectOption, []).option("--asset-surface <surface>", "explicit provider asset surface (for example cline cli or ide)").option("--asset-scope <scope>", "asset scope (global|project|session)").option("--codewith-native-imports", "select the gated Codewith native @ import adapter").option("--allow-empty-sources", "allow an explicit empty render").option("--check-global-coverage", "warn (non-fatal) when a registered, non-retired global-* source is absent from this render's --config list; expected is read fresh from the registry, independent of this plan (todos 102d6d0a)").option("--no-station-profile", "do not inject the cached station-profile source").option("--dry-run", "preview writes and conflicts without writing").option("--force", "overwrite existing unmanaged files").option("--json", "output apply JSON").action(async (opts) => {
   try {
     const tool = opts.tool;
     if (!SESSION_RENDER_TOOLS.includes(tool)) {
@@ -19940,7 +20776,8 @@ sessionCmd.command("apply").description("Write a session render plan to its mana
     const store = resolveConfigStore();
     const plan = await buildSessionRenderPlan(opts, tool, store, "apply");
     const globalCoverage = opts.checkGlobalCoverage ? await checkGlobalSourceCoverage(plan, store) : null;
-    const result = applySessionRender(plan, { dryRun: opts.dryRun, force: opts.force });
+    const ownedClaudeAuthorities = tool === "claude" ? await loadOwnedClaudeAuthorities(store) : undefined;
+    const result = applySessionRender(plan, { dryRun: opts.dryRun, force: opts.force, ownedClaudeAuthorities });
     if (opts.json) {
       printJson({
         ...result,
@@ -20017,6 +20854,94 @@ sessionCmd.command("restore <snapshot>").description("Restore a session render s
     process.exit(1);
   }
 });
+var stationProfileCmd = program.command("station-profile").description("Generate and inject the compact station profile block into every session render");
+stationProfileCmd.command("refresh").description("Regenerate the cached station profile block (idempotent; writes only when changed)").option("--dry-run", "build and print the block without writing the cache").option("--json", "output JSON").action((opts) => {
+  try {
+    const result = refreshStationProfile({ dryRun: opts.dryRun });
+    if (opts.json) {
+      printJson({
+        path: result.path,
+        bytes: result.bytes,
+        generatedAt: result.generatedAt,
+        dryRun: opts.dryRun === true,
+        budget: STATION_PROFILE_MAX_BYTES,
+        statusProbe: result.statusProbe,
+        machine: {
+          id: result.machine.id,
+          hostname: result.machine.hostname,
+          tailscaleName: result.machine.tailscaleName,
+          platform: result.machine.platform,
+          arch: result.machine.arch,
+          user: result.machine.user,
+          workspacePath: result.machine.workspacePath,
+          status: result.machine.status
+        },
+        packages: result.packages,
+        content: result.content
+      });
+      return;
+    }
+    const prefix = opts.dryRun ? chalk.yellow("[dry-run]") : chalk.green("OK");
+    console.log(`${prefix} station profile ${chalk.dim(`(${result.bytes} B, budget ${STATION_PROFILE_MAX_BYTES} B)`)}`);
+    console.log(`${chalk.cyan("path:")} ${result.path}`);
+    if (result.machine.status) {
+      console.log(`${chalk.cyan("status probe:")} ${result.statusProbe} (${result.machine.status.state})`);
+    } else {
+      console.log(`${chalk.cyan("status probe:")} ${result.statusProbe}`);
+    }
+    console.log(`${chalk.cyan("sources:")} machines manifest + bun global dir + local OS`);
+    console.log("");
+    printLine(result.content);
+  } catch (error) {
+    console.error(chalk.red(error instanceof Error ? error.message : String(error)));
+    process.exit(1);
+  }
+});
+stationProfileCmd.command("show").description("Print the cached station profile block").option("--json", "output JSON").action((opts) => {
+  const content = readStationProfile();
+  if (content === null) {
+    console.error(chalk.red("No cached station profile. Run `instructions station-profile refresh` first."));
+    process.exit(1);
+  }
+  if (opts.json) {
+    printJson({ path: getStationProfileCachePath(), bytes: Buffer.byteLength(content, "utf8"), content });
+    return;
+  }
+  printLine(content);
+});
+stationProfileCmd.command("path").description("Print the station profile cache path").action(() => {
+  printLine(getStationProfileCachePath());
+});
+stationProfileCmd.command("preview").description("Build and print the block without writing the cache (alias of refresh --dry-run)").option("--json", "output JSON").action((opts) => {
+  try {
+    const machine = resolveStationProfileMachine();
+    const packages = resolveStationProfilePackages();
+    const content = buildStationProfileBlock({ machine, packages });
+    if (opts.json) {
+      printJson({
+        bytes: Buffer.byteLength(content, "utf8"),
+        budget: STATION_PROFILE_MAX_BYTES,
+        machine: {
+          id: machine.id,
+          hostname: machine.hostname,
+          tailscaleName: machine.tailscaleName,
+          platform: machine.platform,
+          arch: machine.arch,
+          user: machine.user,
+          workspacePath: machine.workspacePath,
+          status: machine.status
+        },
+        packages,
+        content
+      });
+      return;
+    }
+    printLine(content);
+  } catch (error) {
+    console.error(chalk.red(error instanceof Error ? error.message : String(error)));
+    process.exit(1);
+  }
+});
 var snapshotCmd = program.command("snapshot").description("Manage config version history");
 snapshotCmd.command("list <config>").description("List snapshots for a config").option("--limit <n>", `max rows (default ${DEFAULT_LIST_LIMIT})`).option("--cursor <n>", "zero-based pagination cursor").action(async (configId, opts) => {
   try {
@@ -20060,6 +20985,22 @@ snapshotCmd.command("restore <config> <snapshot-id>").description("Restore a con
     process.exit(1);
   }
 });
+snapshotCmd.command("prune <config>").description("Delete old snapshots, keeping the N most recent").option("--keep <n>", "number of most-recent snapshots to keep (default 10)").action(async (configId, opts) => {
+  try {
+    const store = resolveConfigStore();
+    const c = await store.getConfig(configId);
+    const keep = opts.keep === undefined ? 10 : Number(opts.keep);
+    if (!Number.isInteger(keep) || keep < 1) {
+      console.error(chalk.red(`--keep must be a positive integer (got: ${opts.keep})`));
+      process.exit(1);
+    }
+    const removed = await store.pruneSnapshots(c.id, keep);
+    console.log(chalk.green("\u2713") + ` Pruned ${removed} snapshot(s), keeping the ${keep} most recent for ${c.slug}`);
+  } catch (e) {
+    console.error(chalk.red(formatCliError(e)));
+    process.exit(1);
+  }
+});
 var templateCmd = program.command("template").description("Work with template configs");
 templateCmd.command("vars <id>").description("Show template variables").action(async (id) => {
   try {
@@ -20166,7 +21107,7 @@ program.command("scan [id]").description("Scan configs for secrets. Defaults to
   for (let i = 0;i < configs.length; i += BATCH) {
     const batch = configs.slice(i, i + BATCH);
     for (const c of batch) {
-      const fmt = c.format;
+      const fmt = redactFormatForTarget(c.target_path ?? "", c.format);
       const secrets = scanSecrets(c.content, fmt);
       if (secrets.length === 0)
         continue;
@@ -20250,14 +21191,14 @@ mcpCmd.command("install").alias("add").description("Install configs MCP server i
       } else if (target === "codex") {
         const { appendFileSync, existsSync: ex } = await import("fs");
         const { join: j } = await import("path");
-        const configPath = j(homedir10(), ".codex", "config.toml");
+        const configPath = j(homedir12(), ".codex", "config.toml");
         const block = `
 [mcp_servers.configs]
 command = "${mcpBinary}"
 args = []
 `;
         if (ex(configPath)) {
-          const content = readFileSync15(configPath, "utf-8");
+          const content = readFileSync17(configPath, "utf-8");
           if (content.includes("[mcp_servers.configs]")) {
             console.log(chalk.dim("= Already installed in Codex"));
             continue;
@@ -20268,7 +21209,7 @@ args = []
       } else if (target === "antigravity") {
         const { mkdirSync: md, readFileSync: rf, writeFileSync: wf, existsSync: ex } = await import("fs");
         const { dirname: dn, join: j } = await import("path");
-        const configPath = j(homedir10(), ".gemini", "config", "mcp_config.json");
+        const configPath = j(homedir12(), ".gemini", "config", "mcp_config.json");
         let settings = {};
         if (ex(configPath)) {
           try {
@@ -20352,7 +21293,7 @@ DB stats:`));
     if (count > 0)
       console.log(`  ${key.padEnd(18)} ${count}`);
   }
-  const location = isApiTransport() ? `${process.env["HASNA_INSTRUCTIONS_API_URL"]}/v1` : process.env["HASNA_INSTRUCTIONS_DB_PATH"] || join19(getRawStoreRoot(), "instructions.db");
+  const location = isApiTransport() ? `${process.env["HASNA_INSTRUCTIONS_API_URL"]}/v1` : process.env["HASNA_INSTRUCTIONS_DB_PATH"] || join21(getRawStoreRoot(), "instructions.db");
   console.log(chalk.dim(`
 ${isApiTransport() ? "API" : "DB"}: ${location}`));
 });
@@ -20413,10 +21354,10 @@ managedSkillsCmd.command("apply").option("--dry-run", "preview without writing")
 });
 program.command("backup").description("Export configs to a timestamped backup file").action(async () => {
   const { mkdirSync: mk } = await import("fs");
-  const backupDir = join19(getRawStoreRoot(), "backups");
+  const backupDir = join21(getRawStoreRoot(), "backups");
   mk(backupDir, { recursive: true });
   const ts = new Date().toISOString().replace(/[:.]/g, "-").replace("T", "-").slice(0, 19);
-  const outPath = join19(backupDir, `configs-${ts}.tar.gz`);
+  const outPath = join21(backupDir, `configs-${ts}.tar.gz`);
   const result = await exportConfigs(outPath, { store: resolveConfigStore() });
   const { statSync: st } = await import("fs");
   const size = st(outPath).size;
@@ -20444,9 +21385,9 @@ program.command("doctor").description("Validate configs: syntax, permissions, mi
   console.log(chalk.cyan("Known files on disk:"));
   for (const k of KNOWN_CONFIGS) {
     if (k.rulesDir) {
-      existsSync17(expandPath(k.rulesDir)) ? pass(`${k.rulesDir}/ exists`) : k.optional ? skip(`${k.rulesDir}/ (optional)`) : fail2(`${k.rulesDir}/ not found`);
+      existsSync20(expandPath(k.rulesDir)) ? pass(`${k.rulesDir}/ exists`) : k.optional ? skip(`${k.rulesDir}/ (optional)`) : fail2(`${k.rulesDir}/ not found`);
     } else {
-      existsSync17(expandPath(k.path)) ? pass(k.path) : k.optional ? skip(`${k.path} (optional)`) : fail2(`${k.path} not found`);
+      existsSync20(expandPath(k.path)) ? pass(k.path) : k.optional ? skip(`${k.path} (optional)`) : fail2(`${k.path} not found`);
     }
   }
   const allConfigs = await store.listConfigs();
@@ -20468,7 +21409,7 @@ Stored configs (${allConfigs.length}):`));
   pass(`${validCount}/${allConfigs.length} valid syntax`);
   let secretCount = 0;
   for (const c of allConfigs) {
-    const found = scanSecrets(c.content, c.format);
+    const found = scanSecrets(c.content, redactFormatForTarget(c.target_path ?? "", c.format));
     secretCount += found.length;
   }
   secretCount === 0 ? pass("No unredacted secrets") : fail2(`${secretCount} unredacted secret(s) \u2014 run \`configs scan --fix\``);
@@ -20524,6 +21465,7 @@ _configs() {
     'scan:Scan for secrets'
     'profile:Manage profiles'
     'session:Plan and apply session instructions'
+    'station-profile:Generate and inject the compact station profile block'
     'snapshot:Version history'
     'template:Template operations'
     'mcp:Install MCP server'
@@ -20539,7 +21481,7 @@ compdef _configs configs`);
     console.log(`# bash completion for configs
 _configs_completions() {
   local cur="\${COMP_WORDS[COMP_CWORD]}"
-  local commands="list show add apply diff sync export import whoami status init scan profile session snapshot template mcp backup restore doctor completions"
+  local commands="list show add apply diff sync export import whoami status init scan profile session station-profile snapshot template mcp backup restore doctor completions"
   COMPREPLY=( $(compgen -W "\${commands}" -- "\${cur}") )
 }
 complete -F _configs_completions configs`);
@@ -20599,16 +21541,16 @@ program.command("watch").description("Watch known config files for changes and a
   for (const k of KNOWN_CONFIGS) {
     if (k.rulesDir) {
       const absDir = expandPath2(k.rulesDir);
-      if (!existsSync17(absDir))
+      if (!existsSync20(absDir))
         continue;
-      const { readdirSync: readdirSync5 } = await import("fs");
-      for (const f of readdirSync5(absDir).filter((f2) => f2.endsWith(".md"))) {
-        const abs = join19(absDir, f);
+      const { readdirSync: readdirSync6 } = await import("fs");
+      for (const f of readdirSync6(absDir).filter((f2) => f2.endsWith(".md"))) {
+        const abs = join21(absDir, f);
         mtimes.set(abs, st(abs).mtimeMs);
       }
     } else {
       const abs = expandPath2(k.path);
-      if (existsSync17(abs))
+      if (existsSync20(abs))
         mtimes.set(abs, st(abs).mtimeMs);
     }
   }
@@ -20616,7 +21558,7 @@ program.command("watch").description("Watch known config files for changes and a
   const tick = async () => {
     let changed = 0;
     for (const [abs, oldMtime] of mtimes) {
-      if (!existsSync17(abs))
+      if (!existsSync20(abs))
         continue;
       const newMtime = st(abs).mtimeMs;
       if (newMtime !== oldMtime) {
@@ -20628,10 +21570,10 @@ program.command("watch").description("Watch known config files for changes and a
     for (const k of KNOWN_CONFIGS) {
       if (k.rulesDir) {
         const absDir = expandPath2(k.rulesDir);
-        if (!existsSync17(absDir))
+        if (!existsSync20(absDir))
           continue;
         for (const f of rd(absDir).filter((f2) => f2.endsWith(".md"))) {
-          const abs = join19(absDir, f);
+          const abs = join21(absDir, f);
           if (!mtimes.has(abs)) {
             mtimes.set(abs, st(abs).mtimeMs);
             changed++;
@@ -20639,7 +21581,7 @@ program.command("watch").description("Watch known config files for changes and a
         }
       } else {
         const abs = expandPath2(k.path);
-        if (existsSync17(abs) && !mtimes.has(abs)) {
+        if (existsSync20(abs) && !mtimes.has(abs)) {
           mtimes.set(abs, st(abs).mtimeMs);
           changed++;
         }
@@ -20667,12 +21609,12 @@ program.command("report").description("Summary of stored configs, drift, and eco
     if (!c.target_path)
       continue;
     const abs = expandPath(c.target_path);
-    if (!existsSync17(abs)) {
+    if (!existsSync20(abs)) {
       missing++;
       continue;
     }
-    const disk = readFileSync15(abs, "utf-8");
-    const { content: redactedDisk } = redactContent(disk, c.format);
+    const disk = readFileSync17(abs, "utf-8");
+    const { content: redactedDisk } = redactContent(disk, redactFormatForTarget(c.target_path, c.format));
     if (redactedDisk !== c.content)
       drifted++;
   }
@@ -20738,7 +21680,7 @@ program.command("clean").description("Remove configs from DB whose target files
     if (!c.target_path)
       continue;
     const abs = expandPath(c.target_path);
-    if (!existsSync17(abs)) {
+    if (!existsSync20(abs)) {
       if (printed < maxPrinted) {
         if (opts.dryRun) {
           console.log(chalk.yellow("  would remove:") + ` ${c.slug} ${chalk.dim(`(${truncateMiddle(c.target_path, 88)})`)}`);
@@ -20879,6 +21821,48 @@ program.command("feedback <message>").description("Send feedback about this serv
   });
   console.log(chalk.green("\u2713") + " Feedback saved. Thank you!");
 });
+var providerContextCmd = program.command("provider-context").description("Resolve and render per-endpoint model-identity fragments for coding-agent harnesses");
+providerContextCmd.command("resolve").description("Resolve the endpoint to a provider-context fragment, render it into the home, and emit an audit line").option("--endpoint <url>", "endpoint/base URL to resolve (default: $ANTHROPIC_BASE_URL)").option("--model <id>", "model id to record in the audit line (default: $ANTHROPIC_MODEL)").option("--home <dir>", `harness home directory (default: os.homedir()); fragments render to <home>/${PROVIDER_CONTEXT_DIR}`).option("--json", "print the full resolution as JSON").action((opts) => {
+  try {
+    const rawEndpoint = opts.endpoint ?? process.env["ANTHROPIC_BASE_URL"] ?? "";
+    const rawModel = opts.model ?? process.env["ANTHROPIC_MODEL"] ?? "";
+    const homeDir3 = opts.home ?? homedir12();
+    const origin = normalizeEndpointOrigin(rawEndpoint);
+    const resolution = resolveAndRenderProviderContext({
+      origin,
+      rawEndpoint,
+      rawModel,
+      homeDir: homeDir3
+    });
+    if (opts.json) {
+      printJson({
+        endpointKey: resolution.endpointKey,
+        provider: resolution.entry?.provider ?? null,
+        wireProtocol: resolution.entry?.wireProtocol ?? null,
+        fragmentPath: resolution.fragmentPath,
+        fragmentSha256: resolution.fragmentSha256,
+        reason: resolution.reason,
+        audit: providerContextAuditLine(resolution)
+      });
+    } else {
+      if (resolution.entry) {
+        console.log(chalk.green("\u2713") + ` provider: ${chalk.bold(resolution.entry.provider)} (${resolution.entry.wireProtocol})`);
+      } else {
+        const banner = rawEndpoint && !resolution.reason ? ` no registered provider for endpoint ${rawEndpoint} \u2014 using invariant fragment` : resolution.reason ?? " no registered provider \u2014 using invariant fragment";
+        console.log(chalk.yellow("!") + banner);
+      }
+      console.log(chalk.cyan("fragment:") + ` ${resolution.fragmentPath}`);
+      if (resolution.reason)
+        console.log(chalk.dim(resolution.reason));
+      console.log(chalk.dim(providerContextAuditLine(resolution)));
+    }
+    if (!resolution.entry)
+      process.exitCode = 1;
+  } catch (e) {
+    console.error(chalk.red(formatCliError(e)));
+    process.exit(1);
+  }
+});
 program.version(pkg.version).name("instructions");
 registerEventsCommands(program, { source: "configs" });
 program.parseAsync(process.argv).catch((e) => {