@hasna/instructions 0.5.3 → 0.5.5

package/dist/cli/index.js

@@ -1290,8 +1290,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
       args = args.slice();
       let launchWithNode = false;
       const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
-      function findFile(baseDir, baseName) {
-        const localBin = path.resolve(baseDir, baseName);
+      function findFile(baseDir2, baseName) {
+        const localBin = path.resolve(baseDir2, baseName);
         if (fs.existsSync(localBin))
           return localBin;
         if (sourceExt.includes(path.extname(baseName)))
@@ -2160,19 +2160,122 @@ var init_retired_storage_mode = __esm(() => {
   ];
 });
 
+// ../../node_modules/.bun/@hasna+paths@0.1.0/node_modules/@hasna/paths/dist/index.js
+import { homedir as homedir3 } from "os";
+import { join as join4 } from "path";
+function assertApp2(app) {
+  if (typeof app !== "string" || app.length === 0) {
+    throw new TypeError("paths: app must be a non-empty string");
+  }
+  if (!APP_SLUG_RE2.test(app)) {
+    throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
+  }
+}
+function envOf2(options) {
+  return options.env ?? process.env;
+}
+function envValue2(options, kind) {
+  const value = envOf2(options)[KIND_ENV2[kind]];
+  return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function isMacOS2(platform) {
+  return platform === "darwin";
+}
+function baseDir2(kind, options) {
+  const override = envValue2(options, kind);
+  if (override)
+    return override;
+  const home = options.home ?? homedir3();
+  const platform = options.platform ?? process.platform;
+  if (isMacOS2(platform)) {
+    switch (kind) {
+      case "config":
+      case "data":
+        return join4(home, "Library", "Application Support", "Hasna");
+      case "cache":
+        return join4(home, "Library", "Caches", "Hasna");
+      case "state":
+        return join4(home, "Library", "Logs", "Hasna");
+    }
+  }
+  switch (kind) {
+    case "config":
+      return join4(home, ".config", "hasna");
+    case "data":
+      return join4(home, ".local", "share", "hasna");
+    case "state":
+      return join4(home, ".local", "state", "hasna");
+    case "cache":
+      return join4(home, ".cache", "hasna");
+  }
+}
+function resolvePath2(kind, options) {
+  assertApp2(options.app);
+  const appSegment = options.internal === true ? join4("internal", options.app) : options.app;
+  return join4(baseDir2(kind, options), appSegment);
+}
+function configDir(options) {
+  return resolvePath2("config", options);
+}
+var KIND_ENV2, APP_SLUG_RE2;
+var init_dist = __esm(() => {
+  KIND_ENV2 = {
+    config: "HASNA_CONFIG_HOME",
+    data: "HASNA_DATA_HOME",
+    state: "HASNA_STATE_HOME",
+    cache: "HASNA_CACHE_HOME"
+  };
+  APP_SLUG_RE2 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+});
+
+// src/lib/app-home.ts
+import { existsSync as existsSync3 } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join6, resolve as resolve2 } from "path";
+function homeDir(env = process.env) {
+  return env["HOME"] || env["USERPROFILE"] || homedir5();
+}
+function legacyStoreHome(env = process.env) {
+  return resolve2(join6(homeDir(env), ".hasna", "instructions"));
+}
+function resolverStoreHome(env = process.env) {
+  return configDir({ app: "configs", env, home: env.HOME || env.USERPROFILE || homedir5() });
+}
+function adoptResolverStoreHome(resolved, env = process.env) {
+  const override = env.HASNA_CONFIG_HOME;
+  if (typeof override === "string" && override.trim().length > 0)
+    return true;
+  return existsSync3(join6(resolved, "instructions.db"));
+}
+function exactStoreHome(env = process.env) {
+  const v = env[HASNA_CONFIGS_HOME_ENV];
+  return v && v.trim() ? v.trim() : undefined;
+}
+function getConfigsStoreHome(env = process.env) {
+  const exact = exactStoreHome(env);
+  if (exact)
+    return resolve2(exact);
+  const resolved = resolverStoreHome(env);
+  return adoptResolverStoreHome(resolved, env) ? resolve2(resolved) : legacyStoreHome(env);
+}
+var HASNA_CONFIGS_HOME_ENV = "HASNA_CONFIGS_HOME";
+var init_app_home = __esm(() => {
+  init_dist();
+});
+
 // src/lib/raw-store-root.ts
-import { homedir as homedir2 } from "os";
-import { join as join2, resolve } from "path";
-function getRawStoreRoot() {
-  return resolve(process.env[RAW_STORE_ROOT_ENV] || join2(process.env["HOME"] || homedir2(), ".hasna", "instructions"));
+import { resolve as resolve3 } from "path";
+function getRawStoreRoot(env = process.env) {
+  return resolve3(getConfigsStoreHome(env));
 }
-var RAW_STORE_ROOT_ENV = "HASNA_CONFIGS_HOME";
-var init_raw_store_root = () => {};
+var init_raw_store_root = __esm(() => {
+  init_app_home();
+});
 
 // src/db/database.ts
 import { Database } from "bun:sqlite";
-import { existsSync as existsSync2, mkdirSync, rmSync } from "fs";
-import { join as join3 } from "path";
+import { existsSync as existsSync5, mkdirSync, rmSync } from "fs";
+import { join as join7 } from "path";
 import { randomUUID as randomUUID3 } from "crypto";
 function getDbPath() {
   if (process.env["HASNA_INSTRUCTIONS_DB_PATH"]) {
@@ -2180,7 +2283,7 @@ function getDbPath() {
   }
   const dir = getRawStoreRoot();
   mkdirSync(dir, { recursive: true });
-  return join3(dir, "instructions.db");
+  return join7(dir, "instructions.db");
 }
 function uuid() {
   return randomUUID3();
@@ -2221,7 +2324,7 @@ function resetLocalDatabase() {
   if (dbPath === ":memory:")
     return;
   for (const p of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {
-    if (existsSync2(p))
+    if (existsSync5(p))
       rmSync(p);
   }
 }
@@ -2658,9 +2761,9 @@ var init_template = __esm(() => {
 });
 
 // src/lib/machine.ts
-import { arch as currentArch, homedir as homedir3, hostname as currentHostname, type as currentOsType } from "os";
-import { existsSync as existsSync3 } from "fs";
-import { join as join4 } from "path";
+import { arch as currentArch, homedir as homedir6, hostname as currentHostname, type as currentOsType } from "os";
+import { existsSync as existsSync6 } from "fs";
+import { join as join8 } from "path";
 function normalizeOsFamily(os) {
   const value = (os ?? "").trim().toLowerCase();
   if (value === "darwin" || value === "macos" || value === "mac" || value === "osx")
@@ -2672,11 +2775,11 @@ function normalizeOsFamily(os) {
   return value || "unknown";
 }
 function detectMachineContext(overrides = {}) {
-  const homeDir = overrides.home_dir ?? process.env["CONFIGS_HOME"] ?? process.env["HOME"] ?? homedir3();
+  const homeDir2 = overrides.home_dir ?? process.env["CONFIGS_HOME"] ?? process.env["HOME"] ?? homedir6();
   const os = overrides.os ?? currentOsType();
   const osFamily = normalizeOsFamily(os);
-  const bunBinDir = overrides.bun_bin_dir ?? join4(homeDir, ".bun", "bin");
-  const defaultBunPath = osFamily === "macos" && existsSync3(BREW_BUN_PATH) ? BREW_BUN_PATH : join4(bunBinDir, "bun");
+  const bunBinDir = overrides.bun_bin_dir ?? join8(homeDir2, ".bun", "bin");
+  const defaultBunPath = osFamily === "macos" && existsSync6(BREW_BUN_PATH) ? BREW_BUN_PATH : join8(bunBinDir, "bun");
   return {
     id: "current-machine",
     hostname: overrides.hostname ?? currentHostname(),
@@ -2685,11 +2788,11 @@ function detectMachineContext(overrides = {}) {
     last_applied_at: null,
     created_at: "",
     os_family: osFamily,
-    home_dir: homeDir,
-    workspace_root: overrides.workspace_root ?? join4(homeDir, osFamily === "macos" ? "Workspace" : "workspace"),
+    home_dir: homeDir2,
+    workspace_root: overrides.workspace_root ?? join8(homeDir2, osFamily === "macos" ? "Workspace" : "workspace"),
     bun_bin_dir: bunBinDir,
     bun_path: overrides.bun_path ?? defaultBunPath,
-    path_prefix: overrides.path_prefix ?? (osFamily === "macos" ? `${join4("/opt", "homebrew", "bin")}:${bunBinDir}` : bunBinDir)
+    path_prefix: overrides.path_prefix ?? (osFamily === "macos" ? `${join8("/opt", "homebrew", "bin")}:${bunBinDir}` : bunBinDir)
   };
 }
 function machineContextToVariables(machine) {
@@ -7324,7 +7427,7 @@ import { dlopen, FFIType } from "bun:ffi";
 import {
   closeSync,
   constants,
-  existsSync as existsSync4,
+  existsSync as existsSync7,
   fstatSync,
   fsyncSync,
   lstatSync,
@@ -7337,7 +7440,7 @@ import {
   statSync,
   writeFileSync
 } from "fs";
-import { basename, dirname, isAbsolute, join as join5, parse, relative, resolve as resolve2 } from "path";
+import { basename, dirname, isAbsolute, join as join9, parse, relative, resolve as resolve4 } from "path";
 function managedObservationMaxBytes(relativePath) {
   return SESSION_MANAGED_OUTPUT_PATHS.includes(relativePath) ? SESSION_MANAGED_OUTPUT_MAX_BYTES : FOREIGN_INPUT_MAX_BYTES;
 }
@@ -7417,7 +7520,7 @@ function planProjectContext(input) {
   const inlineMarkerOverhead = nativeImports ? 0 : Buffer.byteLength(buildManagedBlock(bundle, "", `
 `), "utf8");
   const generated = buildCanonicalFragment(bundle, status, ageSeconds, PROJECT_CONTEXT_MAX_RENDERED_BYTES - Math.max(320, inlineMarkerOverhead), PROJECT_CONTEXT_MAX_APPROX_TOKENS - Math.max(80, Math.ceil(inlineMarkerOverhead / 4)));
-  const previousTargetContent = existsSync4(paths.target) ? readUtf8RegularFile(paths.target, workspaceRoot, managedObservationMaxBytes(relativePosix(workspaceRoot, paths.target))) : null;
+  const previousTargetContent = existsSync7(paths.target) ? readUtf8RegularFile(paths.target, workspaceRoot, managedObservationMaxBytes(relativePosix(workspaceRoot, paths.target))) : null;
   const markerParse = parseManagedBlock(previousTargetContent ?? "", input.force === true);
   if (markerParse.block && markerParse.block.id !== bundle.project.id) {
     throw new ProjectContextError("MANAGED_BLOCK_CONFLICT", "managed block belongs to a different project");
@@ -7468,7 +7571,7 @@ function composeProjectContextSessionRender(input) {
     return null;
   const { runtime, workspace_root: workspaceRoot, observed_hashes: observedHashes } = guard;
   const paths = runtimePaths(workspaceRoot, runtime);
-  if (!existsSync4(paths.manifest))
+  if (!existsSync7(paths.manifest))
     return null;
   assertCodewithTargetIsConsumed(workspaceRoot, runtime);
   const manifest = readProjectContextManifest(paths.manifest, workspaceRoot);
@@ -7497,7 +7600,7 @@ function composeProjectContextSessionRender(input) {
   }
   const fragment = readUtf8RegularFile(paths.fragment, workspaceRoot, PROJECT_CONTEXT_MAX_RENDERED_BYTES);
   scanGeneratedContent(fragment);
-  if (!existsSync4(paths.target)) {
+  if (!existsSync7(paths.target)) {
     throw new ProjectContextError("MANAGED_BLOCK_CONFLICT", "project-context provider target is missing while durable context is active");
   }
   const currentTarget = readUtf8RegularFile(paths.target, workspaceRoot, managedObservationMaxBytes(relativePosix(workspaceRoot, paths.target)));
@@ -7508,7 +7611,7 @@ function composeProjectContextSessionRender(input) {
   if (currentMarkers.block.id !== cache.project_id || currentMarkers.block.revision !== cache.revision || currentMarkers.block.hash !== cache.hash) {
     throw new ProjectContextError("MANAGED_BLOCK_CONFLICT", "project-context provider markers differ from the durable cache");
   }
-  const plannedIndexes = input.files.filter((file) => file.role === "index" && resolve2(file.path) === paths.target);
+  const plannedIndexes = input.files.filter((file) => file.role === "index" && resolve4(file.path) === paths.target);
   if (plannedIndexes.length !== 1) {
     throw new ProjectContextError("PROJECT_CONTEXT_MANIFEST_INVALID", "session renderer does not own the selected project-context provider target");
   }
@@ -7566,7 +7669,7 @@ function withProjectContextSessionGuard(guard, action, options = {}) {
     verify();
     return action(null);
   }
-  const lockPath = resolve2(validated.workspace_root, ...PROJECT_CONTEXT_LOCK_PATH.split("/"));
+  const lockPath = resolve4(validated.workspace_root, ...PROJECT_CONTEXT_LOCK_PATH.split("/"));
   const lock = acquireWorkspaceLock(validated.workspace_root, lockPath);
   try {
     verify();
@@ -7592,7 +7695,7 @@ function validateProjectContextSessionGuard(guard) {
     if (!isRecord(observed) || typeof observed.path !== "string") {
       throw new ProjectContextError("PROJECT_CONTEXT_SESSION_STALE", "session project-context guard contains malformed hash metadata");
     }
-    const path = resolve2(observed.path);
+    const path = resolve4(observed.path);
     if (!allowedPaths.has(path) || observedPaths.has(path)) {
       throw new ProjectContextError("PROJECT_CONTEXT_SESSION_STALE", "session project-context guard contains an unexpected or duplicate path");
     }
@@ -7614,7 +7717,7 @@ function validateProjectContextSessionGuard(guard) {
 function applyProjectContext(options) {
   const workspaceRoot = assertSafeWorkspaceRoot(options.workspace_root);
   const now3 = options.now ?? new Date;
-  const lockPath = resolve2(workspaceRoot, ...PROJECT_CONTEXT_LOCK_PATH.split("/"));
+  const lockPath = resolve4(workspaceRoot, ...PROJECT_CONTEXT_LOCK_PATH.split("/"));
   const lock = options.dry_run ? null : acquireWorkspaceLock(workspaceRoot, lockPath, options.test_hooks?.after_lock_open, options.test_hooks?.before_stale_lock_remove, options.test_hooks?.process_start_identity);
   try {
     const resolved = resolveBundleForApply(options, workspaceRoot, now3);
@@ -7761,7 +7864,7 @@ function resolveBundleForApply(options, workspaceRoot, now3) {
   if (!options.expected_project_id) {
     throw new ProjectContextError("PROJECT_CONTEXT_CACHE_ID_REQUIRED", "expected_project_id is required for stale-cache fallback");
   }
-  const cachePath = resolve2(workspaceRoot, ...PROJECT_CONTEXT_CACHE_PATH.split("/"));
+  const cachePath = resolve4(workspaceRoot, ...PROJECT_CONTEXT_CACHE_PATH.split("/"));
   const cache = readProjectContextCache(cachePath, workspaceRoot);
   if (!cache)
     throw new ProjectContextError("PROJECT_CONTEXT_CACHE_MISSING", "no last-known-good project context cache exists");
@@ -7963,7 +8066,7 @@ function findLegacyCodewithWorkspaceSection(workspaceRoot, runtime, content, bun
   if (runtime !== "codewith" || !content)
     return null;
   const sessionManifestPath = runtimePaths(workspaceRoot, runtime).sessionManifest;
-  if (!existsSync4(sessionManifestPath))
+  if (!existsSync7(sessionManifestPath))
     return null;
   const manifest = readSessionManifestRecord(sessionManifestPath, workspaceRoot);
   if (!manifest || manifest["schema"] !== SESSION_RENDER_SCHEMA) {
@@ -8014,7 +8117,7 @@ function assertRevisionOrdering(plan, force) {
   const manifest = readProjectContextManifest(plan.manifest_path, plan.workspace_root);
   if (manifest) {
     const manifestHashHasRecoveryProof = manifest.projectContext.hash === plan.bundle.hash || metadataSnapshotMatchesManifest(plan, manifest);
-    const canonicalStateAlreadyInstalled = cache !== null && canonicalCacheHash === plan.bundle.hash && cache.project_id === plan.bundle.project.id && cache.revision === plan.bundle.revision && plan.marker !== null && plan.marker.id === plan.bundle.project.id && plan.marker.revision === plan.bundle.revision && plan.marker.hash === plan.bundle.hash && existsSync4(plan.fragment_path) && fragmentMatchesBundle(plan.fragment_path, plan.bundle, plan.workspace_root) && manifestHashHasRecoveryProof;
+    const canonicalStateAlreadyInstalled = cache !== null && canonicalCacheHash === plan.bundle.hash && cache.project_id === plan.bundle.project.id && cache.revision === plan.bundle.revision && plan.marker !== null && plan.marker.id === plan.bundle.project.id && plan.marker.revision === plan.bundle.revision && plan.marker.hash === plan.bundle.hash && existsSync7(plan.fragment_path) && fragmentMatchesBundle(plan.fragment_path, plan.bundle, plan.workspace_root) && manifestHashHasRecoveryProof;
     observations.push({
       source: "manifest",
       id: manifest.projectContext.projectId,
@@ -8022,7 +8125,7 @@ function assertRevisionOrdering(plan, force) {
       hash: canonicalStateAlreadyInstalled && manifest.projectContext.projectId === plan.bundle.project.id && manifest.projectContext.revision === plan.bundle.revision ? plan.bundle.hash : normalizePersistedHash(manifest.projectContext.revision, manifest.projectContext.hash)
     });
     const fragmentEntry = manifest.files.find((file) => file.relativePath === PROJECT_CONTEXT_FRAGMENT_PATH);
-    if (fragmentEntry && existsSync4(plan.fragment_path)) {
+    if (fragmentEntry && existsSync7(plan.fragment_path)) {
       const actual = currentFileHash(plan.fragment_path, plan.workspace_root);
       if (actual !== fragmentEntry.sha256 && !fragmentMatchesBundle(plan.fragment_path, plan.bundle, plan.workspace_root) && !force) {
         throw new ProjectContextError("MANAGED_BLOCK_CONFLICT", "canonical project-context fragment changed outside Instructions");
@@ -8117,9 +8220,9 @@ function buildManifest(plan, now3) {
 function buildSessionCompatibilityManifest(plan, now3) {
   const paths = runtimePaths(plan.workspace_root, plan.runtime);
   const tool = manifestTool(plan.runtime);
-  const targetHome = plan.runtime === "codewith" ? resolve2(plan.workspace_root, ".codewith") : plan.workspace_root;
+  const targetHome = plan.runtime === "codewith" ? resolve4(plan.workspace_root, ".codewith") : plan.workspace_root;
   const targetRelativePath = sessionTargetRelativePath(plan.runtime);
-  const existing = existsSync4(paths.sessionManifest) ? readSessionManifestRecord(paths.sessionManifest, plan.workspace_root) : {
+  const existing = existsSync7(paths.sessionManifest) ? readSessionManifestRecord(paths.sessionManifest, plan.workspace_root) : {
     schema: SESSION_RENDER_SCHEMA,
     tool,
     adapterMode: plan.native_imports ? "native-imports" : "flattened-markdown",
@@ -8139,7 +8242,7 @@ function buildSessionCompatibilityManifest(plan, now3) {
     throw new ProjectContextError("PROJECT_CONTEXT_MANIFEST_INVALID", "provider session manifest is malformed or incompatible");
   }
   const existingTargetHome = safeLegacyMetadataString(existing["targetHome"], null);
-  if (existingTargetHome !== null && resolve2(existingTargetHome) !== targetHome) {
+  if (existingTargetHome !== null && resolve4(existingTargetHome) !== targetHome) {
     throw new ProjectContextError("PROJECT_CONTEXT_MANIFEST_INVALID", "provider session manifest targets a different workspace");
   }
   const sources = sanitizeLegacySources(existing["sources"]).filter((source) => source["id"] !== "project-context-bundle");
@@ -8425,9 +8528,9 @@ function writeMetadataSnapshot(plan, now3) {
   const previous = readProjectContextManifest(plan.manifest_path, plan.workspace_root);
   if (!previous || previous.projectContext.revision === plan.bundle.revision && previous.projectContext.hash === plan.bundle.hash)
     return null;
-  const snapshotDir = resolve2(plan.workspace_root, ...PROJECT_CONTEXT_SNAPSHOT_DIR.split("/"));
+  const snapshotDir = resolve4(plan.workspace_root, ...PROJECT_CONTEXT_SNAPSHOT_DIR.split("/"));
   ensureSafeDirectory(snapshotDir, plan.workspace_root, 448);
-  const snapshotPath = resolve2(snapshotDir, `${safeFilename(previous.projectContext.revision)}-${previous.projectContext.hash.slice(-12)}.json`);
+  const snapshotPath = resolve4(snapshotDir, `${safeFilename(previous.projectContext.revision)}-${previous.projectContext.hash.slice(-12)}.json`);
   const snapshot = {
     schema: "hasna.configs.session-render-snapshot/v1",
     kind: "project-context-metadata",
@@ -8443,9 +8546,9 @@ function writeMetadataSnapshot(plan, now3) {
   return snapshotPath;
 }
 function metadataSnapshotMatchesManifest(plan, manifest) {
-  const snapshotDir = resolve2(plan.workspace_root, ...PROJECT_CONTEXT_SNAPSHOT_DIR.split("/"));
-  const snapshotPath = resolve2(snapshotDir, `${safeFilename(manifest.projectContext.revision)}-${manifest.projectContext.hash.slice(-12)}.json`);
-  if (!existsSync4(snapshotPath))
+  const snapshotDir = resolve4(plan.workspace_root, ...PROJECT_CONTEXT_SNAPSHOT_DIR.split("/"));
+  const snapshotPath = resolve4(snapshotDir, `${safeFilename(manifest.projectContext.revision)}-${manifest.projectContext.hash.slice(-12)}.json`);
+  if (!existsSync7(snapshotPath))
     return false;
   const record = readJsonRecord(snapshotPath, plan.workspace_root);
   const result = projectContextMetadataSnapshotSchema.safeParse(record);
@@ -8493,10 +8596,10 @@ function writeProjectContextRollbackSnapshot(plan, now3, outputs) {
       sha256: nextHash
     };
   });
-  const snapshotDir = resolve2(plan.workspace_root, ...SESSION_RENDER_SNAPSHOT_RELATIVE_DIR.split("/"));
+  const snapshotDir = resolve4(plan.workspace_root, ...SESSION_RENDER_SNAPSHOT_RELATIVE_DIR.split("/"));
   ensureSafeDirectory(snapshotDir, plan.workspace_root, 448);
   const timestamp = now3.toISOString().replace(/[:.]/g, "-");
-  const snapshotPath = resolve2(snapshotDir, `${timestamp}-${randomUUID5()}.json`);
+  const snapshotPath = resolve4(snapshotDir, `${timestamp}-${randomUUID5()}.json`);
   const snapshot = {
     schema: "hasna.configs.session-render-snapshot/v2",
     createdAt: now3.toISOString(),
@@ -8514,7 +8617,7 @@ function writeProjectContextRollbackSnapshot(plan, now3, outputs) {
   return snapshotPath;
 }
 function readProjectContextManifest(path, workspaceRoot) {
-  if (!existsSync4(path))
+  if (!existsSync7(path))
     return null;
   const record = readJsonRecord(path, workspaceRoot);
   const result = storedManifestObservationSchema.safeParse(record);
@@ -8529,7 +8632,7 @@ function readProjectContextManifest(path, workspaceRoot) {
   };
 }
 function readProjectContextCache(path, workspaceRoot) {
-  if (!existsSync4(path))
+  if (!existsSync7(path))
     return null;
   const record = readJsonRecord(path, workspaceRoot);
   const result = projectContextCacheSchema.safeParse(record);
@@ -8561,7 +8664,7 @@ function readSessionManifestRecord(path, workspaceRoot) {
   }
 }
 function atomicWriteFile(path, content, workspaceRoot, defaultMode, expectedHash, afterExchange, atomicExchangeUnavailable = false, beforeInstall, portableCreateOnly = false, maxObservedBytes, allowPortableReplacement = false) {
-  const dir = resolve2(path, "..");
+  const dir = resolve4(path, "..");
   ensureSafeDirectory(dir, workspaceRoot, 448);
   assertNoSymlinkSegments(workspaceRoot, path);
   const anchoredOps = portableCreateOnly ? null : resolveAnchoredFsOps();
@@ -8578,7 +8681,7 @@ function atomicWriteFile(path, content, workspaceRoot, defaultMode, expectedHash
   const previous = anchoredFileObservation(directory, targetName);
   const previousMode = previous?.mode ?? defaultMode;
   const tempName = `.project-context-${randomUUID5()}.tmp`;
-  const tempPath = join5(dir, tempName);
+  const tempPath = join9(dir, tempName);
   let fd = null;
   let preserveTemp = false;
   let directoryChanged = false;
@@ -8709,7 +8812,7 @@ function atomicWritePortable(path, content, workspaceRoot, defaultMode, expected
   }
   const dir = dirname(path);
   const directoryIdentity = captureManagedDirectoryIdentity(dir, workspaceRoot);
-  const tempPath = join5(dir, `.project-context-${randomUUID5()}.tmp`);
+  const tempPath = join9(dir, `.project-context-${randomUUID5()}.tmp`);
   let fd = null;
   let tempIdentity = null;
   try {
@@ -8766,7 +8869,7 @@ function atomicWritePortableReplacement(path, content, workspaceRoot, expectedHa
   }
   const dir = dirname(path);
   const directoryIdentity = captureManagedDirectoryIdentity(dir, workspaceRoot);
-  const tempPath = join5(dir, `.project-context-${randomUUID5()}.tmp`);
+  const tempPath = join9(dir, `.project-context-${randomUUID5()}.tmp`);
   const desiredHash = sha2562(content);
   let fd = null;
   let tempIdentity = null;
@@ -8823,7 +8926,7 @@ function portablePreparedHash(tempPath, path, workspaceRoot, maxObservedBytes, s
 function portableFileHash(path, workspaceRoot, maxObservedBytes) {
   if (maxObservedBytes === undefined)
     return currentFileHash(path, workspaceRoot);
-  if (!existsSync4(path))
+  if (!existsSync7(path))
     return null;
   assertNoSymlinkSegments(workspaceRoot, path);
   const stat = lstatSync(path);
@@ -8835,11 +8938,11 @@ function portableFileHash(path, workspaceRoot, maxObservedBytes) {
   return createHash2("sha256").update(readFileSync(path)).digest("hex");
 }
 function writeProjectContextCoordinatedFile(input) {
-  atomicWriteFile(resolve2(input.path), input.content, assertSafeWorkspaceRoot(input.workspace_root), input.default_mode ?? 420, input.expected_hash, undefined, false, input.test_hooks?.before_install, input.force_portable_file_ops ?? false, input.max_observed_bytes, input.allow_portable_replacement ?? false);
+  atomicWriteFile(resolve4(input.path), input.content, assertSafeWorkspaceRoot(input.workspace_root), input.default_mode ?? 420, input.expected_hash, undefined, false, input.test_hooks?.before_install, input.force_portable_file_ops ?? false, input.max_observed_bytes, input.allow_portable_replacement ?? false);
 }
 function removeProjectContextCoordinatedFile(input) {
   const workspaceRoot = assertSafeWorkspaceRoot(input.workspace_root);
-  const path = resolve2(input.path);
+  const path = resolve4(input.path);
   assertNoSymlinkSegments(workspaceRoot, path);
   const dir = dirname(path);
   const anchoredOps = input.force_portable_file_ops ? null : resolveAnchoredFsOps();
@@ -8865,7 +8968,7 @@ function removeProjectContextCoordinatedFile(input) {
       throw new ProjectContextHashRace(`managed path changed during deletion: ${relativePosix(workspaceRoot, path)}`);
     }
     displaced = true;
-    input.test_hooks?.after_displace?.(join5(dir, displacedName));
+    input.test_hooks?.after_displace?.(join9(dir, displacedName));
     const moved = anchoredFileObservation(directory, displacedName);
     if (!moved || moved.dev !== observed.dev || moved.ino !== observed.ino || moved.hash !== input.expected_hash || anchoredFileObservation(directory, targetName) !== null) {
       throw new ProjectContextHashRace(`managed path changed during deletion validation: ${relativePosix(workspaceRoot, path)}`);
@@ -8911,7 +9014,7 @@ function removePortableCoordinatedFile(path, workspaceRoot, expectedHash, maxObs
   }
   const dir = dirname(path);
   const directoryIdentity = captureManagedDirectoryIdentity(dir, workspaceRoot);
-  const displacedPath = join5(dir, `.project-context-delete-${randomUUID5()}.tmp`);
+  const displacedPath = join9(dir, `.project-context-delete-${randomUUID5()}.tmp`);
   let displaced = false;
   try {
     assertManagedDirectoryStable(dir, workspaceRoot, directoryIdentity);
@@ -8922,7 +9025,7 @@ function removePortableCoordinatedFile(path, workspaceRoot, expectedHash, maxObs
     displaced = true;
     afterDisplace?.(displacedPath);
     const moved = lstatSync(displacedPath);
-    if (moved.isSymbolicLink() || !moved.isFile() || moved.dev !== observed.dev || moved.ino !== observed.ino || portableFileHash(displacedPath, workspaceRoot, maxObservedBytes) !== expectedHash || existsSync4(path)) {
+    if (moved.isSymbolicLink() || !moved.isFile() || moved.dev !== observed.dev || moved.ino !== observed.ino || portableFileHash(displacedPath, workspaceRoot, maxObservedBytes) !== expectedHash || existsSync7(path)) {
       throw new ProjectContextHashRace(`managed path changed during portable deletion: ${relativePosix(workspaceRoot, path)}`);
     }
     rmSync2(displacedPath);
@@ -8982,7 +9085,7 @@ function anchoredOpenExclusive(directory, name, mode) {
   const requestedMode = mode & 4095;
   let fd;
   try {
-    fd = openSync(join5(directory.path, name), constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, requestedMode);
+    fd = openSync(join9(directory.path, name), constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, requestedMode);
   } catch {
     throw new ProjectContextHashRace(`could not create prepared managed file in ${relativePosix(directory.workspaceRoot, directory.path)}`);
   }
@@ -9025,7 +9128,7 @@ function anchoredFileObservation(directory, name) {
     const stat = fstatSync(fd);
     if (!stat.isFile())
       throw new ProjectContextHashRace("managed output is not a regular file");
-    const relativePath = relativePosix(directory.workspaceRoot, join5(directory.path, name));
+    const relativePath = relativePosix(directory.workspaceRoot, join9(directory.path, name));
     const maxBytes = directory.maxObservedBytes === undefined ? managedObservationMaxBytes(relativePath) : directory.maxObservedBytes;
     if (maxBytes !== null && stat.size > maxBytes) {
       throw new ProjectContextHashRace(`managed output exceeds the safe read limit: ${relativePath}`);
@@ -9051,7 +9154,7 @@ function anchoredPreparedObservation(directory, name, path, stage) {
   return observed;
 }
 function captureManagedDirectoryIdentity(path, workspaceRoot) {
-  assertNoSymlinkSegments(workspaceRoot, join5(path, ".project-context-directory-guard"));
+  assertNoSymlinkSegments(workspaceRoot, join9(path, ".project-context-directory-guard"));
   let stat;
   try {
     stat = lstatSync(path);
@@ -9064,7 +9167,7 @@ function captureManagedDirectoryIdentity(path, workspaceRoot) {
   return { dev: stat.dev, ino: stat.ino };
 }
 function assertManagedDirectoryStable(path, workspaceRoot, expected) {
-  assertNoSymlinkSegments(workspaceRoot, join5(path, ".project-context-directory-guard"));
+  assertNoSymlinkSegments(workspaceRoot, join9(path, ".project-context-directory-guard"));
   let current;
   try {
     current = lstatSync(path);
@@ -9197,10 +9300,10 @@ function resolveAnchoredFsOps() {
   return null;
 }
 function acquireWorkspaceLock(workspaceRoot, lockPath, afterOpen, beforeStaleRemove, processStartIdentityLookup = processStartIdentity) {
-  const lockDirectory = resolve2(lockPath, "..");
+  const lockDirectory = resolve4(lockPath, "..");
   ensureSafeDirectory(lockDirectory, workspaceRoot, 448);
   assertNoSymlinkSegments(workspaceRoot, lockPath);
-  const tempPath = join5(lockDirectory, `.project-context-lock-${randomUUID5()}.tmp`);
+  const tempPath = join9(lockDirectory, `.project-context-lock-${randomUUID5()}.tmp`);
   let fd = null;
   let openedIdentity = null;
   let openedContentHash = null;
@@ -9234,7 +9337,7 @@ function acquireWorkspaceLock(workspaceRoot, lockPath, afterOpen, beforeStaleRem
       linked = true;
     }
     fsyncDirectory(lockDirectory);
-    if (existsSync4(tempPath)) {
+    if (existsSync7(tempPath)) {
       rmSync2(tempPath);
       fsyncDirectory(lockDirectory);
     }
@@ -9249,7 +9352,7 @@ function acquireWorkspaceLock(workspaceRoot, lockPath, afterOpen, beforeStaleRem
     if (linked && openedIdentity && openedContentHash) {
       removeOwnedLockByInode(lockPath, openedIdentity, openedContentHash);
     }
-    if (!preserveTemp && existsSync4(tempPath)) {
+    if (!preserveTemp && existsSync7(tempPath)) {
       try {
         rmSync2(tempPath);
       } catch {}
@@ -9264,7 +9367,7 @@ function acquireWorkspaceLock(workspaceRoot, lockPath, afterOpen, beforeStaleRem
 }
 function removeOwnedLockByInode(lockPath, identity, expectedHash) {
   try {
-    if (!existsSync4(lockPath))
+    if (!existsSync7(lockPath))
       return;
     const current = lstatSync(lockPath);
     if (current.isSymbolicLink() || current.dev !== identity.dev || current.ino !== identity.ino)
@@ -9272,7 +9375,7 @@ function removeOwnedLockByInode(lockPath, identity, expectedHash) {
     if (expectedHash !== undefined && sha2562(readFileSync(lockPath, "utf8")) !== expectedHash)
       return;
     rmSync2(lockPath);
-    fsyncDirectory(resolve2(lockPath, ".."));
+    fsyncDirectory(resolve4(lockPath, ".."));
   } catch {}
 }
 function observeStaleWorkspaceLock(lockPath, workspaceRoot, processStartIdentityLookup = processStartIdentity) {
@@ -9343,7 +9446,7 @@ function tryTakeoverStaleWorkspaceLock(candidatePath, lockPath, workspaceRoot, c
     const candidateInstalled = !current.isSymbolicLink() && current.dev === candidateIdentity.dev && current.ino === candidateIdentity.ino && currentFileHash(lockPath, workspaceRoot) === candidateHash;
     const staleDisplaced = !displaced.isSymbolicLink() && displaced.dev === stale.identity.dev && displaced.ino === stale.identity.ino && currentFileHash(candidatePath, workspaceRoot) === stale.contentHash;
     if (!candidateInstalled || !staleDisplaced) {
-      if (candidateInstalled && existsSync4(candidatePath)) {
+      if (candidateInstalled && existsSync7(candidatePath)) {
         atomicExchangePaths(candidatePath, lockPath);
         exchanged = false;
         return false;
@@ -9351,13 +9454,13 @@ function tryTakeoverStaleWorkspaceLock(candidatePath, lockPath, workspaceRoot, c
       throw new ProjectContextError("PROJECT_CONTEXT_LOCK_LOST", "workspace lock changed during stale-lock takeover and could not be restored safely");
     }
     rmSync2(candidatePath);
-    fsyncDirectory(resolve2(lockPath, ".."));
+    fsyncDirectory(resolve4(lockPath, ".."));
     exchanged = false;
     return true;
   } catch (error) {
     if (exchanged) {
       try {
-        if (currentFileHash(lockPath, workspaceRoot) === candidateHash && existsSync4(candidatePath)) {
+        if (currentFileHash(lockPath, workspaceRoot) === candidateHash && existsSync7(candidatePath)) {
           atomicExchangePaths(candidatePath, lockPath);
           exchanged = false;
         }
@@ -9370,7 +9473,7 @@ function tryTakeoverStaleWorkspaceLock(candidatePath, lockPath, workspaceRoot, c
   }
 }
 function assertWorkspaceLockHeld(lockPath, lock, workspaceRoot) {
-  if (!existsSync4(lockPath)) {
+  if (!existsSync7(lockPath)) {
     throw new ProjectContextError("PROJECT_CONTEXT_LOCK_LOST", "workspace project-context lock changed during render");
   }
   const current = lstatSync(lockPath);
@@ -9430,8 +9533,8 @@ function releaseWorkspaceLock(lockPath, lock, workspaceRoot) {
     }
     return;
   }
-  const lockDirectory = resolve2(lockPath, "..");
-  const releasePath = join5(lockDirectory, `.project-context-release-${randomUUID5()}.tmp`);
+  const lockDirectory = resolve4(lockPath, "..");
+  const releasePath = join9(lockDirectory, `.project-context-release-${randomUUID5()}.tmp`);
   let releaseFd = null;
   let releaseIdentity = null;
   let releaseHash = null;
@@ -9460,7 +9563,7 @@ function releaseWorkspaceLock(lockPath, lock, workspaceRoot) {
     const releaseInstalled = !installed.isSymbolicLink() && installed.dev === releaseIdentity.dev && installed.ino === releaseIdentity.ino && currentFileHash(lockPath, workspaceRoot) === releaseHash;
     const ownedDisplaced = !displaced.isSymbolicLink() && displaced.dev === lock.identity.dev && displaced.ino === lock.identity.ino && currentFileHash(releasePath, workspaceRoot) === lock.contentHash;
     if (!releaseInstalled || !ownedDisplaced) {
-      if (releaseInstalled && existsSync4(releasePath)) {
+      if (releaseInstalled && existsSync7(releasePath)) {
         atomicExchangePaths(releasePath, lockPath);
         exchanged = false;
       }
@@ -9473,7 +9576,7 @@ function releaseWorkspaceLock(lockPath, lock, workspaceRoot) {
   } catch {
     if (exchanged) {
       try {
-        if (releaseHash && currentFileHash(lockPath, workspaceRoot) === releaseHash && existsSync4(releasePath)) {
+        if (releaseHash && currentFileHash(lockPath, workspaceRoot) === releaseHash && existsSync7(releasePath)) {
           atomicExchangePaths(releasePath, lockPath);
           exchanged = false;
         }
@@ -9485,7 +9588,7 @@ function releaseWorkspaceLock(lockPath, lock, workspaceRoot) {
         closeSync(releaseFd);
       } catch {}
     }
-    if (!exchanged && existsSync4(releasePath)) {
+    if (!exchanged && existsSync7(releasePath)) {
       try {
         rmSync2(releasePath);
       } catch {}
@@ -9511,15 +9614,15 @@ function ensureSafeDirectory(path, workspaceRoot, mode) {
   const segments = rel.split(/[\\/]+/).filter(Boolean);
   let current = workspaceRoot;
   for (const segment of segments) {
-    current = join5(current, segment);
-    if (existsSync4(current)) {
+    current = join9(current, segment);
+    if (existsSync7(current)) {
       if (lstatSync(current).isSymbolicLink())
         throw new ProjectContextError("PROJECT_CONTEXT_SYMLINK_REJECTED", `managed path uses a symlink: ${current}`);
       if (!statSync(current).isDirectory())
         throw new ProjectContextError("PROJECT_CONTEXT_PATH_INVALID", `managed path is not a directory: ${current}`);
     } else {
       mkdirSync2(current, { mode });
-      fsyncDirectory(resolve2(current, ".."));
+      fsyncDirectory(resolve4(current, ".."));
     }
   }
 }
@@ -9575,11 +9678,11 @@ function scanGeneratedContent(content) {
 function runtimePaths(workspaceRoot, runtime) {
   const relativeTarget = runtime === "claude" ? "CLAUDE.md" : runtime === "codewith" ? ".codewith/CODEWITH.md" : "AGENTS.md";
   return {
-    target: resolve2(workspaceRoot, ...relativeTarget.split("/")),
-    fragment: resolve2(workspaceRoot, ...PROJECT_CONTEXT_FRAGMENT_PATH.split("/")),
-    manifest: resolve2(workspaceRoot, ...PROJECT_CONTEXT_MANIFEST_PATH.split("/")),
-    cache: resolve2(workspaceRoot, ...PROJECT_CONTEXT_CACHE_PATH.split("/")),
-    sessionManifest: runtime === "codewith" ? resolve2(workspaceRoot, ".codewith", ".hasna", "session-render-manifest.json") : resolve2(workspaceRoot, ".hasna", "session-render-manifest.json")
+    target: resolve4(workspaceRoot, ...relativeTarget.split("/")),
+    fragment: resolve4(workspaceRoot, ...PROJECT_CONTEXT_FRAGMENT_PATH.split("/")),
+    manifest: resolve4(workspaceRoot, ...PROJECT_CONTEXT_MANIFEST_PATH.split("/")),
+    cache: resolve4(workspaceRoot, ...PROJECT_CONTEXT_CACHE_PATH.split("/")),
+    sessionManifest: runtime === "codewith" ? resolve4(workspaceRoot, ".codewith", ".hasna", "session-render-manifest.json") : resolve4(workspaceRoot, ".hasna", "session-render-manifest.json")
   };
 }
 function projectContextSessionGuardPaths(paths, runtime) {
@@ -9589,7 +9692,7 @@ function projectContextSessionGuardPaths(paths, runtime) {
     paths.fragment,
     paths.target,
     paths.sessionManifest,
-    ...runtime === "codewith" ? [resolve2(paths.target, "..", "CODEWITH.override.md")] : []
+    ...runtime === "codewith" ? [resolve4(paths.target, "..", "CODEWITH.override.md")] : []
   ];
 }
 function sessionTargetRelativePath(runtime) {
@@ -9609,27 +9712,27 @@ function projectContextRuntimeForSessionTool(tool) {
   return null;
 }
 function projectContextWorkspaceForSession(input, runtime) {
-  const targetHome = resolve2(input.target_home);
+  const targetHome = resolve4(input.target_home);
   if (runtime === "codewith") {
     const workspaceRoot = basename(targetHome) === ".codewith" ? dirname(targetHome) : null;
     if (!workspaceRoot)
       return null;
-    if (input.project_root && resolve2(input.project_root) !== workspaceRoot) {
+    if (input.project_root && resolve4(input.project_root) !== workspaceRoot) {
       throw new ProjectContextError("PROJECT_CONTEXT_PATH_INVALID", "Codewith project_root must be the parent workspace of target_home");
     }
-    if (!existsSync4(workspaceRoot) || !lstatSync(workspaceRoot).isDirectory())
+    if (!existsSync7(workspaceRoot) || !lstatSync(workspaceRoot).isDirectory())
       return null;
     return assertSafeWorkspaceRoot(workspaceRoot);
   }
-  if (!existsSync4(targetHome) || !lstatSync(targetHome).isDirectory())
+  if (!existsSync7(targetHome) || !lstatSync(targetHome).isDirectory())
     return null;
   return assertSafeWorkspaceRoot(targetHome);
 }
 function assertCodewithTargetIsConsumed(workspaceRoot, runtime) {
   if (runtime !== "codewith")
     return;
-  const override = resolve2(workspaceRoot, ".codewith", "CODEWITH.override.md");
-  if (!existsSync4(override))
+  const override = resolve4(workspaceRoot, ".codewith", "CODEWITH.override.md");
+  if (!existsSync7(override))
     return;
   assertNoSymlinkSegments(workspaceRoot, override);
   if (!lstatSync(override).isFile())
@@ -9639,10 +9742,10 @@ function assertCodewithTargetIsConsumed(workspaceRoot, runtime) {
 function assertSafeWorkspaceRoot(path) {
   if (!isAbsolute(path))
     throw new ProjectContextError("PROJECT_CONTEXT_PATH_INVALID", "workspace root must be absolute");
-  const normalized = resolve2(path);
+  const normalized = resolve4(path);
   if (normalized === parse(normalized).root)
     throw new ProjectContextError("PROJECT_CONTEXT_PATH_INVALID", "workspace root cannot be the filesystem root");
-  if (!existsSync4(normalized) || !lstatSync(normalized).isDirectory())
+  if (!existsSync7(normalized) || !lstatSync(normalized).isDirectory())
     throw new ProjectContextError("PROJECT_CONTEXT_PATH_INVALID", "workspace root must be an existing directory");
   assertNoSymlinkAncestors(normalized);
   if (lstatSync(normalized).isSymbolicLink())
@@ -9656,18 +9759,18 @@ function assertNoSymlinkSegments(root, target) {
   }
   let current = root;
   for (const segment of rel.split(/[\\/]+/).filter(Boolean)) {
-    current = join5(current, segment);
-    if (existsSync4(current) && lstatSync(current).isSymbolicLink()) {
+    current = join9(current, segment);
+    if (existsSync7(current) && lstatSync(current).isSymbolicLink()) {
       throw new ProjectContextError("PROJECT_CONTEXT_SYMLINK_REJECTED", `managed path uses a symlink: ${current}`);
     }
   }
 }
 function assertNoSymlinkAncestors(path) {
-  const normalized = resolve2(path);
+  const normalized = resolve4(path);
   let current = parse(normalized).root;
   for (const segment of relative(current, normalized).split(/[\\/]+/).filter(Boolean)) {
-    current = join5(current, segment);
-    if (!existsSync4(current))
+    current = join9(current, segment);
+    if (!existsSync7(current))
       return;
     if (lstatSync(current).isSymbolicLink())
       throw new ProjectContextError("PROJECT_CONTEXT_SYMLINK_REJECTED", `workspace ancestor is a symlink: ${current}`);
@@ -9683,7 +9786,7 @@ function readUtf8RegularFile(path, workspaceRoot, maxBytes = FOREIGN_INPUT_MAX_B
   return readFileSync(path, "utf8");
 }
 function currentFileHash(path, workspaceRoot) {
-  if (!existsSync4(path))
+  if (!existsSync7(path))
     return null;
   const relativePath = relativePosix(workspaceRoot, path);
   return sha2562(readUtf8RegularFile(path, workspaceRoot, managedObservationMaxBytes(relativePath)));
@@ -9702,10 +9805,10 @@ function fragmentMatchesBundle(path, bundle, workspaceRoot) {
 }
 function durableSourcePath(path, workspaceRoot) {
   if (!path || path.startsWith("/dev/fd/"))
-    return resolve2(workspaceRoot, ...PROJECT_CONTEXT_CACHE_PATH.split("/"));
-  const normalized = isAbsolute(path) ? resolve2(path) : resolve2(workspaceRoot, path);
+    return resolve4(workspaceRoot, ...PROJECT_CONTEXT_CACHE_PATH.split("/"));
+  const normalized = isAbsolute(path) ? resolve4(path) : resolve4(workspaceRoot, path);
   if (normalized.startsWith("/dev/fd/"))
-    return resolve2(workspaceRoot, ...PROJECT_CONTEXT_CACHE_PATH.split("/"));
+    return resolve4(workspaceRoot, ...PROJECT_CONTEXT_CACHE_PATH.split("/"));
   return normalized;
 }
 function compareRevisions(incoming, previous) {
@@ -10265,7 +10368,7 @@ function compareProviderVersions(left, right) {
 
 // src/lib/asset-plan.ts
 import { createHash as createHash3 } from "crypto";
-import { isAbsolute as isAbsolute2, posix, resolve as resolve3 } from "path";
+import { isAbsolute as isAbsolute2, posix, resolve as resolve5 } from "path";
 function assetCapability(provider, surface, kind, support, strategies, note, providerVersionRange = "*") {
   return Object.freeze({
     schema: ASSET_CAPABILITY_SCHEMA,
@@ -10472,8 +10575,8 @@ function resolveAssetDestination(item, roots) {
   if (!isAbsolute2(root))
     throw new Error(`Asset ${item.assetKey} destination root must be absolute.`);
   const relativePath = safeRelativePath(item.destination.relativePath);
-  const target = resolve3(root, ...relativePath.split("/"));
-  const normalizedRoot = resolve3(root);
+  const target = resolve5(root, ...relativePath.split("/"));
+  const normalizedRoot = resolve5(root);
   if (target === normalizedRoot)
     throw new Error(`Asset ${item.assetKey} destination cannot replace its root.`);
   if (!target.startsWith(`${normalizedRoot}/`))
@@ -10653,13 +10756,13 @@ var init_asset_plan = __esm(() => {
 // src/lib/cursor-authority.ts
 import { createHash as createHash4 } from "crypto";
 import { lstatSync as lstatSync2, readFileSync as readFileSync2 } from "fs";
-import { homedir as homedir4 } from "os";
-import { join as join6, resolve as resolve4 } from "path";
+import { homedir as homedir7 } from "os";
+import { join as join10, resolve as resolve6 } from "path";
 function sha2564(content) {
   return createHash4("sha256").update(content).digest("hex");
 }
-function homeDir() {
-  return process.env["HOME"] || homedir4();
+function homeDir2() {
+  return process.env["HOME"] || homedir7();
 }
 function markerPayload(content, markerLine, markerIndex) {
   const index = markerIndex ?? content.indexOf(markerLine);
@@ -10675,12 +10778,12 @@ function baseObservation(path) {
   };
 }
 function observeCursorGlobalAuthority(options = {}) {
-  const authorityPath = resolve4(join6(options.home ?? homeDir(), CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH));
+  const authorityPath = resolve6(join10(options.home ?? homeDir2(), CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH));
   const readFile2 = options.readFile ?? ((path) => readFileSync2(path, "utf8"));
   return observeCursorGlobalAuthorityPath(authorityPath, readFile2);
 }
 function observeCursorGlobalAuthorityAtPath(authorityPath) {
-  return observeCursorGlobalAuthorityPath(resolve4(authorityPath), (path) => readFileSync2(path, "utf8"));
+  return observeCursorGlobalAuthorityPath(resolve6(authorityPath), (path) => readFileSync2(path, "utf8"));
 }
 function observeCursorGlobalAuthorityPath(authorityPath, readFile2) {
   const base = baseObservation(authorityPath);
@@ -10825,7 +10928,7 @@ function observeCursorGlobalAuthorityPath(authorityPath, readFile2) {
   };
 }
 function isCursorGlobalAuthorityPath(path) {
-  return resolve4(path) === resolve4(join6(homeDir(), CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH));
+  return resolve6(path) === resolve6(join10(homeDir2(), CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH));
 }
 function stampCursorGlobalAuthorityMarker(content) {
   const existing = content.match(CURSOR_GLOBAL_AUTHORITY_MARKER_PATTERN);
@@ -10881,16 +10984,16 @@ var init_cursor_authority = __esm(() => {
 // src/lib/session-authority.ts
 import { createHash as createHash5 } from "crypto";
 import { lstatSync as lstatSync3, readFileSync as readFileSync3, realpathSync, statSync as statSync2 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join7, resolve as resolve5 } from "path";
+import { homedir as homedir8 } from "os";
+import { join as join11, resolve as resolve7 } from "path";
 function sha2565(content) {
   return createHash5("sha256").update(content).digest("hex");
 }
 function configHomeDir() {
-  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir5();
+  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir8();
 }
 function normalizeOwnedTargetPath(p) {
-  const expanded = p.startsWith("~/") ? resolve5(configHomeDir(), p.slice(2)) : resolve5(p);
+  const expanded = p.startsWith("~/") ? resolve7(configHomeDir(), p.slice(2)) : resolve7(p);
   try {
     return realpathSync(expanded);
   } catch {
@@ -10898,7 +11001,7 @@ function normalizeOwnedTargetPath(p) {
   }
 }
 function detectClaudeAuthorityConflicts(targetHome, ownedAuthorities = []) {
-  const authorityPath = resolve5(join7(targetHome, CLAUDE_LEGACY_AUTHORITY_RELATIVE_PATH));
+  const authorityPath = resolve7(join11(targetHome, CLAUDE_LEGACY_AUTHORITY_RELATIVE_PATH));
   let stat;
   try {
     stat = lstatSync3(authorityPath);
@@ -10987,9 +11090,9 @@ var init_session_authority = __esm(() => {
 
 // src/lib/session-render.ts
 import { createHash as createHash6 } from "crypto";
-import { existsSync as existsSync6, readFileSync as readFileSync4, realpathSync as realpathSync2, statSync as statSync3 } from "fs";
-import { homedir as homedir6 } from "os";
-import { basename as basename4, dirname as dirname3, extname as extname2, isAbsolute as isAbsolute3, join as join8, parse as parse2, posix as posix2, relative as relative2, resolve as resolve6 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync4, realpathSync as realpathSync2, statSync as statSync3 } from "fs";
+import { homedir as homedir9 } from "os";
+import { basename as basename4, dirname as dirname3, extname as extname2, isAbsolute as isAbsolute3, join as join12, parse as parse2, posix as posix2, relative as relative2, resolve as resolve8 } from "path";
 function normalizeSessionInstructionLayer(value) {
   if (value === "provider")
     return "tool";
@@ -11075,13 +11178,13 @@ function yamlQuote2(value) {
   return `"${value.replace(/\\/g, "\\\\").replace(/"/g, "\\\"")}"`;
 }
 function defaultTargetHome(tool, profile, sessionId) {
-  const home = process.env["HOME"] || homedir6();
-  return join8(home, ".hasna", "accounts", "profiles", tool, slug(profile));
+  const home = process.env["HOME"] || homedir9();
+  return join12(home, ".hasna", "accounts", "profiles", tool, slug(profile));
 }
 function joinTarget(targetHome, relativePath) {
   const safeTargetHome = assertSafeTargetRoot(targetHome);
   const safeRelativePath2 = assertSafeRelativePath(relativePath);
-  return join8(safeTargetHome, ...safeRelativePath2.split("/"));
+  return join12(safeTargetHome, ...safeRelativePath2.split("/"));
 }
 function makeFile(targetHome, relativePath, role, content, sourceIds) {
   const safeTargetHome = assertSafeTargetRoot(targetHome);
@@ -11650,7 +11753,7 @@ function buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfi
     ...sources.flatMap((source) => source.resolvedRules.map((rule) => rule.id))
   ]);
   const existingConfigPath = joinTarget(targetHome, adapter.configFile);
-  const selectedConfig = existsSync6(existingConfigPath) ? readOpenCodeConfig(readFileSync4(existingConfigPath, "utf8"), existingConfigPath) : providerConfig ? readOpenCodeConfig(providerConfig.content, providerConfig.sourceId) : {};
+  const selectedConfig = existsSync9(existingConfigPath) ? readOpenCodeConfig(readFileSync4(existingConfigPath, "utf8"), existingConfigPath) : providerConfig ? readOpenCodeConfig(providerConfig.content, providerConfig.sourceId) : {};
   const preservedInstructions = normalizeOpenCodeInstructions(selectedConfig["instructions"]).filter((path) => !pathIsManagedOpenCodeInstruction(path, adapter.managedDir));
   const config = {
     ...selectedConfig,
@@ -11839,7 +11942,7 @@ function adapterFor(input) {
   return gatedNativeImports ? CODEWITH_NATIVE_ADAPTER : CODEWITH_FLATTENED_ADAPTER;
 }
 function getHomeDir() {
-  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir6();
+  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir9();
 }
 function cleanSessionPathInput(path) {
   const trimmed = path.trim();
@@ -11854,16 +11957,16 @@ function resolveSessionPath(path) {
     throw new Error("Session render path cannot be empty.");
   const home = getHomeDir();
   if (cleaned === "~")
-    return resolve6(home);
+    return resolve8(home);
   if (cleaned.startsWith("~/"))
-    return resolve6(home, cleaned.slice(2));
+    return resolve8(home, cleaned.slice(2));
   if (cleaned === "{{HOME}}" || cleaned === "${HOME}")
-    return resolve6(home);
+    return resolve8(home);
   if (cleaned.startsWith("{{HOME}}/"))
-    return resolve6(home, cleaned.slice("{{HOME}}/".length));
+    return resolve8(home, cleaned.slice("{{HOME}}/".length));
   if (cleaned.startsWith("${HOME}/"))
-    return resolve6(home, cleaned.slice("${HOME}/".length));
-  return resolve6(cleaned);
+    return resolve8(home, cleaned.slice("${HOME}/".length));
+  return resolve8(cleaned);
 }
 function assertSafeRelativePath(relativePath) {
   if (!relativePath.trim())
@@ -11879,7 +11982,7 @@ function assertSafeRelativePath(relativePath) {
 function assertSafeTargetRoot(targetHome) {
   if (!isAbsolute3(targetHome))
     throw new Error(`Session render target must be an absolute path: ${targetHome}`);
-  const normalized = resolve6(targetHome);
+  const normalized = resolve8(targetHome);
   if (normalized === parse2(normalized).root) {
     throw new Error(`Session render target cannot be the filesystem root: ${targetHome}`);
   }
@@ -12115,7 +12218,7 @@ function planSessionRender(input) {
         sourceId: input.providerConfig.sourceId,
         selectedPayloadSha256: sha2566(input.providerConfig.content),
         renderedPayloadSha256: files.find((file) => file.relativePath === adapter.configFile)?.sha256 ?? sha2566(input.providerConfig.content),
-        selected: !existsSync6(joinTarget(targetHome, adapter.configFile))
+        selected: !existsSync9(joinTarget(targetHome, adapter.configFile))
       }
     } : {},
     ...projectContext ? {
@@ -12376,10 +12479,10 @@ function layerFromIdentityKind(kind, exportShape) {
 function contentFromIdentitySourcePaths(sourcePaths, exportPath, sourceId) {
   if (sourcePaths.length === 0 || !exportPath)
     return;
-  const baseDir = dirname3(resolveSessionPath(exportPath));
+  const baseDir3 = dirname3(resolveSessionPath(exportPath));
   const contents = [];
   for (const sourcePath of sourcePaths) {
-    const content = readIdentitySourcePath(sourcePath, baseDir, sourceId);
+    const content = readIdentitySourcePath(sourcePath, baseDir3, sourceId);
     if (content !== undefined)
       contents.push({ path: sourcePath.path, content });
   }
@@ -12392,9 +12495,9 @@ ${item.content.trimEnd()}`).join(`
 
 `));
 }
-function readIdentitySourcePath(sourcePath, baseDir, sourceId) {
-  const resolvedPath = resolveIdentitySourcePath(sourcePath.path, baseDir, sourceId);
-  if (!existsSync6(resolvedPath)) {
+function readIdentitySourcePath(sourcePath, baseDir3, sourceId) {
+  const resolvedPath = resolveIdentitySourcePath(sourcePath.path, baseDir3, sourceId);
+  if (!existsSync9(resolvedPath)) {
     if (sourcePath.required) {
       throw new Error(`Required identity instruction source path not found for ${sourceId}: ${sourcePath.path}`);
     }
@@ -12404,27 +12507,27 @@ function readIdentitySourcePath(sourcePath, baseDir, sourceId) {
   if (!stat.isFile()) {
     throw new Error(`Identity instruction source path is not a file for ${sourceId}: ${sourcePath.path}`);
   }
-  const realBase = realpathSync2(baseDir);
+  const realBase = realpathSync2(baseDir3);
   const realPath = realpathSync2(resolvedPath);
   if (!pathIsInside(realPath, realBase)) {
     throw new Error(`Identity instruction source path escapes export directory for ${sourceId}: ${sourcePath.path}`);
   }
   return readFileSync4(realPath, "utf-8");
 }
-function resolveIdentitySourcePath(path, baseDir, sourceId) {
+function resolveIdentitySourcePath(path, baseDir3, sourceId) {
   const cleaned = cleanSessionPathInput(path);
   if (!cleaned)
     throw new Error(`Identity instruction source path cannot be empty for ${sourceId}.`);
   if (cleaned.includes("\\"))
     throw new Error(`Identity instruction source path must use POSIX separators for ${sourceId}: ${path}`);
-  const resolvedPath = isAbsolute3(cleaned) ? resolve6(cleaned) : resolve6(baseDir, cleaned);
-  if (!pathIsInside(resolvedPath, resolve6(baseDir))) {
+  const resolvedPath = isAbsolute3(cleaned) ? resolve8(cleaned) : resolve8(baseDir3, cleaned);
+  if (!pathIsInside(resolvedPath, resolve8(baseDir3))) {
     throw new Error(`Identity instruction source path escapes export directory for ${sourceId}: ${path}`);
   }
   return resolvedPath;
 }
-function pathIsInside(path, baseDir) {
-  const rel = relative2(baseDir, path);
+function pathIsInside(path, baseDir3) {
+  const rel = relative2(baseDir3, path);
   return rel === "" || !rel.startsWith("..") && !isAbsolute3(rel);
 }
 function providerTargetsTool(targets, tool) {
@@ -14084,8 +14187,8 @@ var init_config_store = __esm(() => {
 });
 
 // src/lib/session-render-ownership.ts
-import { existsSync as existsSync7, readFileSync as readFileSync5, statSync as statSync4 } from "fs";
-import { dirname as dirname4, join as join9, parse as parse3, relative as relative3, sep } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync5, statSync as statSync4 } from "fs";
+import { dirname as dirname4, join as join13, parse as parse3, relative as relative3, sep } from "path";
 function toSegments(absolutePath2) {
   return absolutePath2.replaceAll("\\", "/").split("/").filter(Boolean);
 }
@@ -14104,7 +14207,7 @@ function pathIsSessionRenderManagedDir(absolutePath2) {
 function readManifestRelativePaths(manifestPath) {
   let stats;
   try {
-    if (!existsSync7(manifestPath))
+    if (!existsSync10(manifestPath))
       return null;
     stats = statSync4(manifestPath);
   } catch {
@@ -14133,7 +14236,7 @@ function sessionRenderManifestClaimsPath(absolutePath2) {
   const root = parse3(absolutePath2).root;
   let home = dirname4(absolutePath2);
   for (let depth = 0;depth < MANIFEST_ANCESTOR_LIMIT; depth += 1) {
-    const manifestPath = join9(home, ...SESSION_RENDER_MANIFEST_RELATIVE_PATH.split("/"));
+    const manifestPath = join13(home, ...SESSION_RENDER_MANIFEST_RELATIVE_PATH.split("/"));
     const relativePaths = readManifestRelativePaths(manifestPath);
     if (relativePaths) {
       const claimed = relative3(home, absolutePath2).split(sep).join("/");
@@ -14168,17 +14271,17 @@ __export(exports_apply, {
   applyConfigs: () => applyConfigs,
   applyConfig: () => applyConfig
 });
-import { existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync6, realpathSync as realpathSync3, writeFileSync as writeFileSync2 } from "fs";
-import { basename as basename5, dirname as dirname5, join as join10, resolve as resolve7 } from "path";
-import { homedir as homedir7 } from "os";
+import { existsSync as existsSync11, mkdirSync as mkdirSync3, readFileSync as readFileSync6, realpathSync as realpathSync3, writeFileSync as writeFileSync2 } from "fs";
+import { basename as basename5, dirname as dirname5, join as join14, resolve as resolve9 } from "path";
+import { homedir as homedir10 } from "os";
 function getConfigHome() {
-  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir7();
+  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir10();
 }
 function expandPath(p) {
   if (p.startsWith("~/")) {
-    return resolve7(getConfigHome(), p.slice(2));
+    return resolve9(getConfigHome(), p.slice(2));
   }
-  return resolve7(p);
+  return resolve9(p);
 }
 function normalizeTargetPath(p) {
   const expanded = expandPath(p);
@@ -14188,9 +14291,9 @@ function normalizeTargetPath(p) {
     let current = expanded;
     const missingSegments = [];
     while (true) {
-      if (existsSync8(current)) {
+      if (existsSync11(current)) {
         try {
-          return resolve7(realpathSync3(current), ...missingSegments);
+          return resolve9(realpathSync3(current), ...missingSegments);
         } catch {
           return expanded;
         }
@@ -14219,11 +14322,11 @@ async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
   }
   const path = expandPath(renderedTargetPath);
   const renderedForTarget = isCursorGlobalAuthorityPath(path) ? stampCursorGlobalAuthorityMarker(renderedContent) : renderedContent;
-  const previousContent = existsSync8(path) ? readFileSync6(path, "utf-8") : null;
+  const previousContent = existsSync11(path) ? readFileSync6(path, "utf-8") : null;
   const changed = previousContent !== renderedForTarget;
   if (!opts.dryRun) {
     const dir = dirname5(path);
-    if (!existsSync8(dir)) {
+    if (!existsSync11(dir)) {
       mkdirSync3(dir, { recursive: true });
     }
     if (previousContent !== null && changed) {
@@ -14257,7 +14360,7 @@ function wouldDestroyACredential(targetPath, renderedContent, format) {
   let current;
   try {
     const path = expandPath(targetPath);
-    if (!existsSync8(path))
+    if (!existsSync11(path))
       return [];
     current = readFileSync6(path, "utf-8");
   } catch {
@@ -14583,7 +14686,7 @@ function sessionRendererOwnsCanonicalTarget(normalized, opts) {
     getConfigHome(),
     opts.vars?.["HOME_DIR"]
   ].filter((home) => typeof home === "string" && home.length > 0));
-  if ([...homes].some((home) => SESSION_RENDER_OWNED_CONFIG_TARGETS.some((relativePath) => normalized === normalizeTargetPath(join10(home, ...relativePath.split("/"))))))
+  if ([...homes].some((home) => SESSION_RENDER_OWNED_CONFIG_TARGETS.some((relativePath) => normalized === normalizeTargetPath(join14(home, ...relativePath.split("/"))))))
     return true;
   return sessionRenderOwnsPath(normalized);
 }
@@ -14601,20 +14704,20 @@ var init_apply = __esm(() => {
 });
 
 // src/lib/sync-dir.ts
-import { existsSync as existsSync9, readdirSync, readFileSync as readFileSync7, statSync as statSync5 } from "fs";
-import { join as join11, relative as relative4 } from "path";
-import { homedir as homedir8 } from "os";
+import { existsSync as existsSync12, readdirSync, readFileSync as readFileSync7, statSync as statSync5 } from "fs";
+import { join as join15, relative as relative4 } from "path";
+import { homedir as homedir11 } from "os";
 function shouldSkip(p) {
   return SKIP.some((s) => p.includes(s));
 }
 async function syncFromDir(dir, opts = {}) {
   const store = opts.store ?? resolveConfigStore();
   const absDir = expandPath(dir);
-  if (!existsSync9(absDir))
+  if (!existsSync12(absDir))
     return { added: 0, updated: 0, unchanged: 0, skipped: [`Not found: ${absDir}`] };
-  const files = opts.recursive !== false ? walkDir(absDir) : readdirSync(absDir).map((f) => join11(absDir, f)).filter((f) => statSync5(f).isFile());
+  const files = opts.recursive !== false ? walkDir(absDir) : readdirSync(absDir).map((f) => join15(absDir, f)).filter((f) => statSync5(f).isFile());
   const result = { added: 0, updated: 0, unchanged: 0, skipped: [] };
-  const home = homedir8();
+  const home = homedir11();
   const allConfigs = await store.listConfigs();
   for (const file of files) {
     if (shouldSkip(file)) {
@@ -14649,7 +14752,7 @@ async function syncFromDir(dir, opts = {}) {
 }
 async function syncToDir(dir, opts = {}) {
   const store = opts.store ?? resolveConfigStore();
-  const home = homedir8();
+  const home = homedir11();
   const absDir = expandPath(dir);
   const normalized = dir.startsWith("~/") ? dir : absDir.replace(home, "~");
   const configs = (await store.listConfigs()).filter((c) => c.target_path && (c.target_path.startsWith(normalized) || c.target_path.startsWith(absDir)));
@@ -14673,7 +14776,7 @@ async function syncToDir(dir, opts = {}) {
 }
 function walkDir(dir, files = []) {
   for (const entry of readdirSync(dir, { withFileTypes: true })) {
-    const full = join11(dir, entry.name);
+    const full = join15(dir, entry.name);
     if (shouldSkip(full))
       continue;
     if (entry.isDirectory())
@@ -14708,8 +14811,8 @@ __export(exports_sync, {
   KNOWN_CONFIGS: () => KNOWN_CONFIGS,
   CLAUDE_PROMPT_OUTPUTS: () => CLAUDE_PROMPT_OUTPUTS
 });
-import { existsSync as existsSync10, readdirSync as readdirSync2, readFileSync as readFileSync8 } from "fs";
-import { basename as basename6, extname as extname3, join as join12 } from "path";
+import { existsSync as existsSync13, readdirSync as readdirSync2, readFileSync as readFileSync8 } from "fs";
+import { basename as basename6, extname as extname3, join as join16 } from "path";
 function claudeRuleOutputs(fileName) {
   const stem = basename6(fileName, extname3(fileName));
   return [
@@ -14748,7 +14851,7 @@ function isGeneratedOutputTarget2(config, owners) {
   return !!ownerIds && !ownerIds.has(config.id);
 }
 function hasClaudePromptSource() {
-  return existsSync10(expandPath("~/.claude/CLAUDE.md"));
+  return existsSync13(expandPath("~/.claude/CLAUDE.md"));
 }
 function hasClaudeRuleSourceForCursorTarget(targetPath) {
   const absoluteTargetPath = expandPath(targetPath);
@@ -14756,7 +14859,7 @@ function hasClaudeRuleSourceForCursorTarget(targetPath) {
   if (!absoluteTargetPath.startsWith(`${absolutePrefix}/`) || !absoluteTargetPath.endsWith(".mdc"))
     return false;
   const stem = basename6(absoluteTargetPath, ".mdc");
-  return existsSync10(expandPath(`~/.claude/rules/${stem}.md`)) || existsSync10(expandPath(`~/.claude/rules/${stem}.mdc`));
+  return existsSync13(expandPath(`~/.claude/rules/${stem}.md`)) || existsSync13(expandPath(`~/.claude/rules/${stem}.mdc`));
 }
 function isKnownGeneratedTargetPath(targetPath) {
   const normalizedTargetPath = normalizeTargetPath(targetPath);
@@ -14773,8 +14876,8 @@ async function syncProject(opts) {
   const allConfigs = await store.listConfigs();
   const machine = detectMachineContext();
   for (const pf of PROJECT_CONFIG_FILES) {
-    const abs = join12(absDir, pf.file);
-    if (!existsSync10(abs))
+    const abs = join16(absDir, pf.file);
+    if (!existsSync13(abs))
       continue;
     try {
       const rawContent = readFileSync8(abs, "utf-8");
@@ -14806,19 +14909,19 @@ async function syncProject(opts) {
     }
   }
   for (const ruleDir of [
-    { dir: join12(absDir, ".claude", "rules"), agent: "claude", namePrefix: "rules" },
-    { dir: join12(absDir, ".agents", "rules"), agent: "antigravity", namePrefix: "antigravity-rules" },
-    { dir: join12(absDir, ".cursor", "rules"), agent: "cursor", namePrefix: "cursor-rules" },
-    { dir: join12(absDir, ".github", "instructions"), agent: "copilot", namePrefix: "copilot-instructions" },
-    { dir: join12(absDir, ".devin", "rules"), agent: "devin", namePrefix: "devin-rules" },
-    { dir: join12(absDir, ".windsurf", "rules"), agent: "windsurf-legacy", namePrefix: "windsurf-rules" },
-    { dir: join12(absDir, ".clinerules"), agent: "cline", namePrefix: "cline-rules" }
+    { dir: join16(absDir, ".claude", "rules"), agent: "claude", namePrefix: "rules" },
+    { dir: join16(absDir, ".agents", "rules"), agent: "antigravity", namePrefix: "antigravity-rules" },
+    { dir: join16(absDir, ".cursor", "rules"), agent: "cursor", namePrefix: "cursor-rules" },
+    { dir: join16(absDir, ".github", "instructions"), agent: "copilot", namePrefix: "copilot-instructions" },
+    { dir: join16(absDir, ".devin", "rules"), agent: "devin", namePrefix: "devin-rules" },
+    { dir: join16(absDir, ".windsurf", "rules"), agent: "windsurf-legacy", namePrefix: "windsurf-rules" },
+    { dir: join16(absDir, ".clinerules"), agent: "cline", namePrefix: "cline-rules" }
   ]) {
-    if (!existsSync10(ruleDir.dir))
+    if (!existsSync13(ruleDir.dir))
       continue;
     const mdFiles = readdirSync2(ruleDir.dir).filter((f) => f.endsWith(".md") || f.endsWith(".mdc"));
     for (const f of mdFiles) {
-      const abs = join12(ruleDir.dir, f);
+      const abs = join16(ruleDir.dir, f);
       const raw = readFileSync8(abs, "utf-8");
       const redacted = redactContent(raw, "markdown");
       const machineAware = templateizeMachineContent(redacted.content, machine);
@@ -14858,14 +14961,14 @@ async function syncKnown(opts = {}) {
   for (const known of targets) {
     if (known.rulesDir) {
       const absDir = expandPath(known.rulesDir);
-      if (!existsSync10(absDir)) {
+      if (!existsSync13(absDir)) {
         result.skipped.push(known.rulesDir);
         continue;
       }
       const extensions = known.rulesExtensions ?? [".md", ".mdc"];
       const ruleFiles = readdirSync2(absDir).filter((f) => extensions.some((ext) => f.endsWith(ext)));
       for (const f of ruleFiles) {
-        const abs2 = join12(absDir, f);
+        const abs2 = join16(absDir, f);
         const targetPath = abs2.replace(home, "~");
         if (existingOutputOwners.has(normalizeTargetPath(targetPath)) || isKnownGeneratedTargetPath(targetPath)) {
           result.skipped.push(`${targetPath} (generated output)`);
@@ -14899,7 +15002,7 @@ async function syncKnown(opts = {}) {
       continue;
     }
     const abs = expandPath(known.path);
-    if (!existsSync10(abs)) {
+    if (!existsSync13(abs)) {
       result.skipped.push(known.path);
       continue;
     }
@@ -15005,7 +15108,7 @@ function storedPlaceholderIsLiteralOnDisk(storedLine, diskLine) {
 }
 function buildDiff(expectedContent, targetPath, storedFormat, showSecrets) {
   const path = expandPath(targetPath);
-  if (!existsSync10(path))
+  if (!existsSync13(path))
     return `(file not found on disk: ${path})`;
   const diskContent = readFileSync8(path, "utf-8");
   if (diskContent === expectedContent)
@@ -15240,16 +15343,16 @@ __export(exports_package_manager_guard, {
   scanPackageManagerSecrets: () => scanPackageManagerSecrets
 });
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync19, lstatSync as lstatSync7, readdirSync as readdirSync5, readFileSync as readFileSync16 } from "fs";
-import { homedir as homedir11 } from "os";
-import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute5, join as join20, relative as relative7, resolve as resolve13 } from "path";
+import { existsSync as existsSync22, lstatSync as lstatSync7, readdirSync as readdirSync5, readFileSync as readFileSync16 } from "fs";
+import { homedir as homedir14 } from "os";
+import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute5, join as join24, relative as relative7, resolve as resolve14 } from "path";
 function scanPackageManagerSecrets(options = {}) {
-  const cwd = options.cwd ? resolve13(options.cwd) : process.cwd();
-  const roots = (options.roots && options.roots.length > 0 ? options.roots : [cwd]).map((root) => resolve13(cwd, root));
+  const cwd = options.cwd ? resolve14(options.cwd) : process.cwd();
+  const roots = (options.roots && options.roots.length > 0 ? options.roots : [cwd]).map((root) => resolve14(cwd, root));
   const findings = [];
   let scannedFiles = 0;
   for (const root of roots) {
-    if (!existsSync19(root))
+    if (!existsSync22(root))
       continue;
     const stat = lstatSync7(root);
     if (stat.isFile()) {
@@ -15276,10 +15379,10 @@ function scanPackageManagerSecrets(options = {}) {
     }
   }
   if (options.includeHome) {
-    const home = homedir11();
+    const home = homedir14();
     for (const name of HOME_FILES) {
-      const file = join20(home, name);
-      if (!existsSync19(file))
+      const file = join24(home, name);
+      if (!existsSync22(file))
         continue;
       const text = readTextFile(file);
       if (text === null)
@@ -15303,12 +15406,12 @@ function collectRepoFiles(root) {
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name))
           continue;
-        visit(join20(dir, entry.name));
+        visit(join24(dir, entry.name));
         continue;
       }
       if (!entry.isFile())
         continue;
-      const file = join20(dir, entry.name);
+      const file = join24(dir, entry.name);
       if (shouldScanRepoFile(file))
         out.push(file);
     }
@@ -15576,7 +15679,7 @@ function stripInlineComment(value) {
   return value.replace(/\s[#;].*$/, "").trim();
 }
 function displayPath(file, root) {
-  const home = homedir11();
+  const home = homedir14();
   if (root === home && (file === home || file.startsWith(home + "/")))
     return "~/" + toPosix(relative7(home, file));
   if (isAbsolute5(root) && file.startsWith(root + "/"))
@@ -15630,7 +15733,11 @@ var init_package_manager_guard = __esm(() => {
 // ../events/dist/commander.js
 import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
 import { Buffer as Buffer2 } from "buffer";
+import { existsSync as existsSync2 } from "fs";
+import { join as join3 } from "path";
 import { existsSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2, resolve } from "path";
 import { homedir } from "os";
 import { join } from "path";
 import { createHmac, timingSafeEqual } from "crypto";
@@ -15736,13 +15843,106 @@ function channelMatchesEvent(channel, event) {
     return true;
   return channel.filters.some((filter) => eventMatchesFilter(event, filter));
 }
+var KIND_ENV = {
+  config: "HASNA_CONFIG_HOME",
+  data: "HASNA_DATA_HOME",
+  state: "HASNA_STATE_HOME",
+  cache: "HASNA_CACHE_HOME"
+};
+var APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function assertApp(app) {
+  if (typeof app !== "string" || app.length === 0) {
+    throw new TypeError("paths: app must be a non-empty string");
+  }
+  if (!APP_SLUG_RE.test(app)) {
+    throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
+  }
+}
+function envOf(options) {
+  return options.env ?? process.env;
+}
+function envValue(options, kind) {
+  const value = envOf(options)[KIND_ENV[kind]];
+  return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function isMacOS(platform) {
+  return platform === "darwin";
+}
+function baseDir(kind, options) {
+  const override = envValue(options, kind);
+  if (override)
+    return override;
+  const home = options.home ?? homedir();
+  const platform = options.platform ?? process.platform;
+  if (isMacOS(platform)) {
+    switch (kind) {
+      case "config":
+      case "data":
+        return join(home, "Library", "Application Support", "Hasna");
+      case "cache":
+        return join(home, "Library", "Caches", "Hasna");
+      case "state":
+        return join(home, "Library", "Logs", "Hasna");
+    }
+  }
+  switch (kind) {
+    case "config":
+      return join(home, ".config", "hasna");
+    case "data":
+      return join(home, ".local", "share", "hasna");
+    case "state":
+      return join(home, ".local", "state", "hasna");
+    case "cache":
+      return join(home, ".cache", "hasna");
+  }
+}
+function resolvePath(kind, options) {
+  assertApp(options.app);
+  const appSegment = options.internal === true ? join("internal", options.app) : options.app;
+  return join(baseDir(kind, options), appSegment);
+}
+function dataDir(options) {
+  return resolvePath("data", options);
+}
 var HASNA_EVENTS_DIR_ENV = "HASNA_EVENTS_DIR";
 var HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME";
+var EVENTS_STORE_SENTINEL_FILE = "events.json";
+function effectiveHome() {
+  return process.env["HOME"] || process.env["USERPROFILE"] || homedir2();
+}
+function legacyHomeDir() {
+  return join2(effectiveHome(), ".hasna", "events");
+}
+function resolverHome() {
+  return dataDir({ app: "events", home: effectiveHome() || undefined });
+}
+function adoptResolverHome(resolved, env = process.env) {
+  const dataOverride = env.HASNA_DATA_HOME;
+  if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
+    return true;
+  return existsSync(join2(resolved, EVENTS_STORE_SENTINEL_FILE));
+}
+function exactEventsHome() {
+  const dir = process.env[HASNA_EVENTS_DIR_ENV];
+  if (dir && dir.trim())
+    return dir.trim();
+  const home = process.env[HASNA_EVENTS_HOME_ENV];
+  if (home && home.trim())
+    return home.trim();
+  return;
+}
+function getEventsHome() {
+  const exact = exactEventsHome();
+  if (exact)
+    return resolve(exact);
+  const resolved = resolverHome();
+  return adoptResolverHome(resolved) ? resolve(resolved) : resolve(legacyHomeDir());
+}
 var LOCAL_JSON_EVENT_CURSOR_PREFIX = "local-json-v1:";
 var DEFAULT_EVENT_PAGE_LIMIT = 100;
 var MAX_EVENT_PAGE_LIMIT = 1000;
 function getEventsDataDir(override) {
-  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join(homedir(), ".hasna", "events");
+  return override || getEventsHome();
 }
 function getActiveEventsDirEnv() {
   if (process.env[HASNA_EVENTS_DIR_ENV])
@@ -15758,12 +15958,12 @@ class JsonEventsStore {
   channelsPath;
   eventsPath;
   deliveriesPath;
-  constructor(dataDir = getEventsDataDir()) {
-    this.dataDir = dataDir;
-    this.runtime = localJsonRuntime(dataDir);
-    this.channelsPath = join(dataDir, "channels.json");
-    this.eventsPath = join(dataDir, "events.json");
-    this.deliveriesPath = join(dataDir, "deliveries.json");
+  constructor(dataDir2 = getEventsDataDir()) {
+    this.dataDir = dataDir2;
+    this.runtime = localJsonRuntime(dataDir2);
+    this.channelsPath = join3(dataDir2, "channels.json");
+    this.eventsPath = join3(dataDir2, "events.json");
+    this.deliveriesPath = join3(dataDir2, "deliveries.json");
   }
   async init() {
     await mkdir(this.dataDir, { recursive: true, mode: 448 });
@@ -15880,7 +16080,7 @@ class JsonEventsStore {
     };
   }
   async ensureArrayFile(path) {
-    if (!existsSync(path)) {
+    if (!existsSync2(path)) {
       await writeFile(path, `[]
 `, { encoding: "utf-8", mode: 384 });
     }
@@ -15910,7 +16110,7 @@ class JsonEventsStore {
     });
   }
 }
-function localJsonRuntime(dataDir = getEventsDataDir()) {
+function localJsonRuntime(dataDir2 = getEventsDataDir()) {
   return {
     mode: "local-files",
     name: "json-events-store",
@@ -15923,7 +16123,7 @@ function localJsonRuntime(dataDir = getEventsDataDir()) {
     durable: true,
     idempotency: "best-effort-local",
     replayCursors: true,
-    description: `Local JSON files in ${dataDir}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
+    description: `Local JSON files in ${dataDir2}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
   };
 }
 function encodeLocalJsonEventCursor(offset, options = {}) {
@@ -15987,8 +16187,8 @@ function assertCursorFilter(name, cursorValue, optionValue) {
 function findEventByIdentity(events, identity) {
   return events.find((event) => identity.id !== undefined && event.id === identity.id || identity.dedupeKey !== undefined && event.dedupeKey === identity.dedupeKey);
 }
-async function getEventsStatus(dataDir) {
-  const store = new JsonEventsStore(dataDir);
+async function getEventsStatus(dataDir2) {
+  const store = new JsonEventsStore(dataDir2);
   await store.init();
   const [channels, events, deliveries] = await Promise.all([
     store.listChannels(),
@@ -16030,9 +16230,9 @@ async function getEventsStatus(dataDir) {
     }
   };
 }
-function statusFile(dataDir, fileName, records) {
-  const path = join(dataDir, fileName);
-  return { path, exists: existsSync(path), records };
+function statusFile(dataDir2, fileName, records) {
+  const path = join3(dataDir2, fileName);
+  return { path, exists: existsSync2(path), records };
 }
 var DEFAULT_SIGNATURE_TOLERANCE_MS = 5 * 60 * 1000;
 function buildSignatureBase(timestamp, body) {
@@ -16371,7 +16571,7 @@ async function pinnedNativeRequest(target, addresses, method, headers, body, sig
       callback(null, entries);
     }
   };
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const request = isHttps ? nodeHttpsRequest(requestOptions, onResponse) : nodeHttpRequest(requestOptions, onResponse);
     const onAbort = () => {
       const error = new Error("The operation was aborted.");
@@ -16398,7 +16598,7 @@ async function pinnedNativeRequest(target, addresses, method, headers, body, sig
           else if (Array.isArray(value))
             headersRecord[name] = value.join(", ");
         }
-        resolve(new Response(Buffer.concat(chunks), { status: response.statusCode ?? 200, headers: headersRecord }));
+        resolve2(new Response(Buffer.concat(chunks), { status: response.statusCode ?? 200, headers: headersRecord }));
       });
     }
   });
@@ -16495,7 +16695,7 @@ async function dispatchCommand(event, channel) {
     HASNA_EVENT_SCHEMA_VERSION: event.schemaVersion,
     HASNA_EVENT_JSON: eventJson
   };
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     const child = spawn(channel.command.command, channel.command.args ?? [], {
       cwd: channel.command.cwd,
       env,
@@ -16513,7 +16713,7 @@ async function dispatchCommand(event, channel) {
     });
     child.on("error", (error) => {
       clearTimeout(timeout);
-      resolve({
+      resolve2({
         attempt: 1,
         status: "failed",
         startedAt,
@@ -16526,7 +16726,7 @@ async function dispatchCommand(event, channel) {
     child.on("close", (code, signal) => {
       clearTimeout(timeout);
       const success = code === 0;
-      resolve({
+      resolve2({
         attempt: 1,
         status: success ? "success" : "failed",
         startedAt,
@@ -17179,9 +17379,9 @@ var {
 // src/cli/index.tsx
 init_apply();
 import chalk from "chalk";
-import { existsSync as existsSync20, lstatSync as lstatSync8, readFileSync as readFileSync17, readSync, writeSync } from "fs";
-import { homedir as homedir12 } from "os";
-import { basename as basename8, join as join21, resolve as resolve14 } from "path";
+import { existsSync as existsSync23, lstatSync as lstatSync8, readFileSync as readFileSync17, readSync, writeSync } from "fs";
+import { homedir as homedir15 } from "os";
+import { basename as basename8, join as join25, resolve as resolve15 } from "path";
 
 // src/lib/config-target-identity.ts
 init_apply();
@@ -17227,15 +17427,15 @@ init_redact();
 
 // src/lib/export.ts
 init_config_store();
-import { existsSync as existsSync11, mkdirSync as mkdirSync4, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "fs";
-import { join as join13, resolve as resolve8 } from "path";
+import { existsSync as existsSync14, mkdirSync as mkdirSync4, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "fs";
+import { join as join17, resolve as resolve10 } from "path";
 import { tmpdir } from "os";
 async function exportConfigs(outputPath, opts = {}) {
   const store = opts.store ?? resolveConfigStore();
   const configs = await store.listConfigs(opts.filter);
-  const absOutput = resolve8(outputPath);
-  const tmpDir = join13(tmpdir(), `configs-export-${Date.now()}`);
-  const contentsDir = join13(tmpDir, "contents");
+  const absOutput = resolve10(outputPath);
+  const tmpDir = join17(tmpdir(), `configs-export-${Date.now()}`);
+  const contentsDir = join17(tmpDir, "contents");
   try {
     mkdirSync4(contentsDir, { recursive: true });
     const manifest = {
@@ -17243,10 +17443,10 @@ async function exportConfigs(outputPath, opts = {}) {
       exported_at: new Date().toISOString(),
       configs: configs.map(({ content: _content, ...meta }) => meta)
     };
-    writeFileSync3(join13(tmpDir, "manifest.json"), JSON.stringify(manifest, null, 2), "utf-8");
+    writeFileSync3(join17(tmpDir, "manifest.json"), JSON.stringify(manifest, null, 2), "utf-8");
     for (const config of configs) {
       const fileName = `${config.slug}.${config.format === "text" ? "txt" : config.format}`;
-      writeFileSync3(join13(contentsDir, fileName), config.content, "utf-8");
+      writeFileSync3(join17(contentsDir, fileName), config.content, "utf-8");
     }
     const proc = Bun.spawn(["tar", "czf", absOutput, "-C", tmpDir, "."], {
       stdout: "pipe",
@@ -17259,7 +17459,7 @@ async function exportConfigs(outputPath, opts = {}) {
     }
     return { path: absOutput, count: configs.length };
   } finally {
-    if (existsSync11(tmpDir)) {
+    if (existsSync14(tmpDir)) {
       rmSync3(tmpDir, { recursive: true, force: true });
     }
   }
@@ -17267,14 +17467,14 @@ async function exportConfigs(outputPath, opts = {}) {
 
 // src/lib/import.ts
 init_config_store();
-import { existsSync as existsSync12, mkdirSync as mkdirSync5, readFileSync as readFileSync9, rmSync as rmSync4 } from "fs";
-import { join as join14, resolve as resolve9 } from "path";
+import { existsSync as existsSync15, mkdirSync as mkdirSync5, readFileSync as readFileSync9, rmSync as rmSync4 } from "fs";
+import { join as join18, resolve as resolve11 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 async function importConfigs(bundlePath, opts = {}) {
   const store = opts.store ?? resolveConfigStore();
   const conflict = opts.conflict ?? "skip";
-  const absPath = resolve9(bundlePath);
-  const tmpDir = join14(tmpdir2(), `configs-import-${Date.now()}`);
+  const absPath = resolve11(bundlePath);
+  const tmpDir = join18(tmpdir2(), `configs-import-${Date.now()}`);
   const result = { created: 0, updated: 0, skipped: 0, errors: [] };
   try {
     mkdirSync5(tmpDir, { recursive: true });
@@ -17287,15 +17487,15 @@ async function importConfigs(bundlePath, opts = {}) {
       const stderr = await new Response(proc.stderr).text();
       throw new Error(`tar extraction failed: ${stderr}`);
     }
-    const manifestPath = join14(tmpDir, "manifest.json");
-    if (!existsSync12(manifestPath))
+    const manifestPath = join18(tmpDir, "manifest.json");
+    if (!existsSync15(manifestPath))
       throw new Error("Invalid bundle: missing manifest.json");
     const manifest = JSON.parse(readFileSync9(manifestPath, "utf-8"));
     for (const meta of manifest.configs) {
       try {
         const ext = meta.format === "text" ? "txt" : meta.format;
-        const contentFile = join14(tmpDir, "contents", `${meta.slug}.${ext}`);
-        const content = existsSync12(contentFile) ? readFileSync9(contentFile, "utf-8") : "";
+        const contentFile = join18(tmpDir, "contents", `${meta.slug}.${ext}`);
+        const content = existsSync15(contentFile) ? readFileSync9(contentFile, "utf-8") : "";
         let existing = null;
         try {
           existing = await store.getConfig(meta.slug);
@@ -17329,7 +17529,7 @@ async function importConfigs(bundlePath, opts = {}) {
     }
     return result;
   } finally {
-    if (existsSync12(tmpDir)) {
+    if (existsSync15(tmpDir)) {
       rmSync4(tmpDir, { recursive: true, force: true });
     }
   }
@@ -17346,14 +17546,14 @@ init_cursor_authority();
 init_session_authority();
 import { createHash as createHash8, randomUUID as randomUUID7 } from "crypto";
 import {
-  existsSync as existsSync13,
+  existsSync as existsSync16,
   lstatSync as lstatSync4,
   mkdirSync as mkdirSync6,
   readFileSync as readFileSync10,
   readdirSync as readdirSync3,
   statSync as statSync6
 } from "fs";
-import { dirname as dirname6, isAbsolute as isAbsolute4, join as join15, parse as parse4, relative as relative5, resolve as resolve10 } from "path";
+import { dirname as dirname6, isAbsolute as isAbsolute4, join as join19, parse as parse4, relative as relative5, resolve as resolve12 } from "path";
 
 class SessionApplyError extends Error {
   constructor(message) {
@@ -17485,13 +17685,13 @@ function assertClaudeAuthorityStillClear(plan, targetHome, ownedClaudeAuthoritie
   throw new SessionApplyError(`Claude authority changed after planning; refusing to apply: ${summary}`);
 }
 function ensureSessionTargetHome(targetHome) {
-  if (!existsSync13(targetHome))
+  if (!existsSync16(targetHome))
     mkdirSync6(targetHome, { recursive: true, mode: 448 });
   assertSafeTargetHome(targetHome);
 }
 function checkSessionRenderDrift(targetHome, manifestPath) {
   const safeTargetHome = assertSafeTargetHome(targetHome);
-  const resolvedManifestPath = manifestPath ? resolveManifestRelativePath(relative5(safeTargetHome, resolve10(manifestPath)), safeTargetHome) : resolve10(safeTargetHome, ".hasna", "session-render-manifest.json");
+  const resolvedManifestPath = manifestPath ? resolveManifestRelativePath(relative5(safeTargetHome, resolve12(manifestPath)), safeTargetHome) : resolve12(safeTargetHome, ".hasna", "session-render-manifest.json");
   const checkedAt = new Date().toISOString();
   const previousManifest = readPreviousManifest(resolvedManifestPath);
   if (!previousManifest) {
@@ -17508,7 +17708,7 @@ function checkSessionRenderDrift(targetHome, manifestPath) {
   const drifted = [];
   for (const file of previousManifest.files) {
     const target = resolveManifestRelativePath(file.relativePath, safeTargetHome);
-    if (!existsSync13(target)) {
+    if (!existsSync16(target)) {
       missing.push({
         path: target,
         relativePath: file.relativePath,
@@ -17541,7 +17741,7 @@ function checkSessionRenderDrift(targetHome, manifestPath) {
 function restoreSessionRenderSnapshot(snapshotPath, options = {}) {
   const snapshot = readSessionRenderSnapshot(snapshotPath);
   const targetHome = assertSafeTargetHome(snapshot.targetHome);
-  const resolvedSnapshotPath = resolve10(snapshotPath);
+  const resolvedSnapshotPath = resolve12(snapshotPath);
   const snapshotRelativePath = relative5(targetHome, resolvedSnapshotPath);
   if (snapshotRelativePath === "" || snapshotRelativePath === ".." || snapshotRelativePath.startsWith("../") || isAbsolute4(snapshotRelativePath)) {
     throw new SessionApplyError("Session snapshot must be stored inside its target home.");
@@ -17659,8 +17859,8 @@ function requiredRestoreHash(file) {
   return file.previousSha256;
 }
 function readSessionRenderSnapshot(snapshotPath) {
-  const resolved = resolve10(snapshotPath);
-  if (!existsSync13(resolved))
+  const resolved = resolve12(snapshotPath);
+  if (!existsSync16(resolved))
     throw new SessionApplyError(`Session snapshot not found: ${snapshotPath}`);
   const stat = lstatSync4(resolved);
   if (stat.isSymbolicLink() || !stat.isFile()) {
@@ -17740,7 +17940,7 @@ function readSessionRenderSnapshot(snapshotPath) {
 }
 function reconstructPreRollbackLegacyV1Snapshot(snapshot, previousFiles, previousManifestFiles, targetHome, snapshotPath) {
   assertNoNewerSessionSnapshot(snapshotPath, snapshot.createdAt, targetHome);
-  const manifestPath = resolve10(snapshot.manifestPath);
+  const manifestPath = resolve12(snapshot.manifestPath);
   const manifestRelativePath = relative5(targetHome, manifestPath).replaceAll("\\", "/");
   resolveSnapshotFilePath(manifestRelativePath, snapshot.manifestPath, targetHome);
   const manifestSha256 = currentSessionFileHash(manifestPath, targetHome);
@@ -17757,7 +17957,7 @@ function reconstructPreRollbackLegacyV1Snapshot(snapshot, previousFiles, previou
     throw new SessionApplyError(`Pre-rollback legacy v1 applied manifest is invalid: ${snapshotPath}`);
   }
   const appliedManifest = parsedManifest;
-  if (appliedManifest.schema !== SESSION_RENDER_SCHEMA || appliedManifest.tool !== snapshot.tool || appliedManifest.profile !== snapshot.profile || typeof appliedManifest.targetHome !== "string" || resolve10(appliedManifest.targetHome) !== targetHome || appliedManifest.targetKind !== "session-home" && appliedManifest.targetKind !== "project-root" || !Array.isArray(appliedManifest.files)) {
+  if (appliedManifest.schema !== SESSION_RENDER_SCHEMA || appliedManifest.tool !== snapshot.tool || appliedManifest.profile !== snapshot.profile || typeof appliedManifest.targetHome !== "string" || resolve12(appliedManifest.targetHome) !== targetHome || appliedManifest.targetKind !== "session-home" && appliedManifest.targetKind !== "project-root" || !Array.isArray(appliedManifest.files)) {
     throw new SessionApplyError(`Pre-rollback legacy v1 applied manifest does not match its snapshot: ${snapshotPath}`);
   }
   const afterFiles = [];
@@ -17842,8 +18042,8 @@ function assertNoNewerSessionSnapshot(snapshotPath, createdAt, targetHome) {
     throw new SessionApplyError(`Pre-rollback legacy v1 snapshot has an invalid creation time: ${snapshotPath}`);
   }
   for (const entry of readdirSync3(dirname6(snapshotPath))) {
-    const candidatePath = resolve10(dirname6(snapshotPath), entry);
-    if (candidatePath === resolve10(snapshotPath) || !entry.endsWith(".json"))
+    const candidatePath = resolve12(dirname6(snapshotPath), entry);
+    if (candidatePath === resolve12(snapshotPath) || !entry.endsWith(".json"))
       continue;
     const candidateStat = lstatSync4(candidatePath);
     if (candidateStat.isSymbolicLink() || !candidateStat.isFile() || candidateStat.size > 32 * 1024 * 1024)
@@ -17851,7 +18051,7 @@ function assertNoNewerSessionSnapshot(snapshotPath, createdAt, targetHome) {
     try {
       const candidate = JSON.parse(readFileSync10(candidatePath, "utf8"));
       const candidateCreatedAtMs = typeof candidate.createdAt === "string" ? Date.parse(candidate.createdAt) : Number.NaN;
-      if ((candidate.schema === "hasna.configs.session-render-snapshot/v1" || candidate.schema === "hasna.configs.session-render-snapshot/v2") && typeof candidate.targetHome === "string" && resolve10(candidate.targetHome) === targetHome && Number.isFinite(candidateCreatedAtMs) && candidateCreatedAtMs >= createdAtMs) {
+      if ((candidate.schema === "hasna.configs.session-render-snapshot/v1" || candidate.schema === "hasna.configs.session-render-snapshot/v2") && typeof candidate.targetHome === "string" && resolve12(candidate.targetHome) === targetHome && Number.isFinite(candidateCreatedAtMs) && candidateCreatedAtMs >= createdAtMs) {
         throw new SessionApplyError(`Cannot restore pre-rollback legacy v1 snapshot after a newer session snapshot exists: ${candidatePath}`);
       }
     } catch (error) {
@@ -17920,14 +18120,14 @@ function inferLegacySnapshotAction(file, previousFiles, previousManifestFiles, p
 }
 function resolveSnapshotFilePath(relativePath, recordedPath, targetHome) {
   const path = resolveManifestRelativePath(relativePath, targetHome);
-  if (resolve10(recordedPath) !== path) {
+  if (resolve12(recordedPath) !== path) {
     throw new SessionApplyError(`Session snapshot file path mismatch for ${relativePath}`);
   }
   return path;
 }
 function planFileResult(plan, file, targetHome, previousHashes, previousManifest, options) {
   const target = resolvePlannedFilePath(plan, file, targetHome);
-  const previousContent = existsSync13(target) ? readFileSync10(target, "utf-8") : null;
+  const previousContent = existsSync16(target) ? readFileSync10(target, "utf-8") : null;
   const previousSha256 = previousContent === null ? null : sha2568(previousContent);
   const previouslyManaged = isPreviouslyManaged(file, previousSha256, previousHashes, previousManifest);
   const changed = previousContent !== file.content;
@@ -18026,7 +18226,7 @@ function planStaleFileResults(plan, targetHome, previousManifest, currentRelativ
 }
 function planStaleFileResult(file, targetHome, options) {
   const target = resolveManifestRelativePath(file.relativePath, targetHome);
-  if (!existsSync13(target))
+  if (!existsSync16(target))
     return null;
   const previousContent = readFileSync10(target, "utf-8");
   const previousSha256 = sha2568(previousContent);
@@ -18073,19 +18273,19 @@ function isPreviouslyManaged(file, previousSha256, previousHashes, previousManif
   return previousHashes.get(file.relativePath) === previousSha256;
 }
 function resolvePlannedFilePath(plan, file, targetHome) {
-  const target = resolve10(targetHome, ...file.relativePath.split("/"));
+  const target = resolve12(targetHome, ...file.relativePath.split("/"));
   const rel = relative5(targetHome, target);
   if (rel === "" || rel === ".." || rel.startsWith("../") || isAbsolute4(rel)) {
     throw new SessionApplyError(`Session file escapes target home: ${file.relativePath}`);
   }
-  if (resolve10(file.path) !== target) {
+  if (resolve12(file.path) !== target) {
     throw new SessionApplyError(`Session file path mismatch for ${file.relativePath}: ${file.path}`);
   }
   assertNoSymlinkSegments2(targetHome, target);
   return target;
 }
 function resolveManifestRelativePath(relativePath, targetHome) {
-  const target = resolve10(targetHome, ...relativePath.split(/[\\/]+/));
+  const target = resolve12(targetHome, ...relativePath.split(/[\\/]+/));
   const rel = relative5(targetHome, target);
   if (rel === "" || rel === ".." || rel.startsWith("../") || isAbsolute4(rel)) {
     throw new SessionApplyError(`Session manifest file escapes target home: ${relativePath}`);
@@ -18094,7 +18294,7 @@ function resolveManifestRelativePath(relativePath, targetHome) {
   return target;
 }
 function readPreviousManifest(path) {
-  if (!existsSync13(path))
+  if (!existsSync16(path))
     return null;
   try {
     const parsed = JSON.parse(readFileSync10(path, "utf-8"));
@@ -18136,7 +18336,7 @@ function assertExpectedSessionFileHash(path, targetHome, expectedHash) {
 }
 function currentSessionFileHash(path, targetHome) {
   assertNoSymlinkSegments2(targetHome, path);
-  if (!existsSync13(path))
+  if (!existsSync16(path))
     return null;
   const stat = lstatSync4(path);
   if (stat.isSymbolicLink() || !stat.isFile()) {
@@ -18151,7 +18351,7 @@ function requiredPreviousHash(result) {
   return result.previousSha256;
 }
 function writeSessionSnapshot(plan, targetHome, manifestPath, results, previousManifest, coordination, allowPortableFallback, forcePortableFileOps) {
-  const existingFiles = results.filter((result) => result.action === "update" || result.action === "delete").filter((result) => existsSync13(result.path)).map((result) => {
+  const existingFiles = results.filter((result) => result.action === "update" || result.action === "delete").filter((result) => existsSync16(result.path)).map((result) => {
     const content = readFileSync10(result.path, "utf-8");
     return {
       path: result.path,
@@ -18170,7 +18370,7 @@ function writeSessionSnapshot(plan, targetHome, manifestPath, results, previousM
     };
   }
   const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
-  const snapshotPath = resolve10(targetHome, ".hasna", "session-render-snapshots", `${timestamp}-${randomUUID7()}.json`);
+  const snapshotPath = resolve12(targetHome, ".hasna", "session-render-snapshots", `${timestamp}-${randomUUID7()}.json`);
   const afterFiles = results.map((result) => {
     if (result.action === "conflict") {
       throw new SessionApplyError(`Cannot snapshot unresolved conflict: ${result.relativePath}`);
@@ -18218,12 +18418,12 @@ function writeSessionSnapshot(plan, targetHome, manifestPath, results, previousM
 function assertSafeTargetHome(targetHome) {
   if (!isAbsolute4(targetHome))
     throw new SessionApplyError(`Session target home must be absolute: ${targetHome}`);
-  const normalized = resolve10(targetHome);
+  const normalized = resolve12(targetHome);
   if (normalized === parse4(normalized).root) {
     throw new SessionApplyError(`Session target home cannot be the filesystem root: ${targetHome}`);
   }
   assertNoSymlinkAncestors2(normalized);
-  if (existsSync13(normalized) && lstatSync4(normalized).isSymbolicLink()) {
+  if (existsSync16(normalized) && lstatSync4(normalized).isSymbolicLink()) {
     throw new SessionApplyError(`Session target home cannot be a symlink: ${normalized}`);
   }
   return normalized;
@@ -18233,20 +18433,20 @@ function assertNoSymlinkSegments2(root, target) {
   const rel = relative5(root, target);
   let current = root;
   for (const segment of rel.split(/[\\/]+/).filter(Boolean)) {
-    current = join15(current, segment);
-    if (existsSync13(current) && lstatSync4(current).isSymbolicLink()) {
+    current = join19(current, segment);
+    if (existsSync16(current) && lstatSync4(current).isSymbolicLink()) {
       throw new SessionApplyError(`Session apply path uses a symlink: ${current}`);
     }
   }
 }
 function assertNoSymlinkAncestors2(path) {
-  const normalized = resolve10(path);
+  const normalized = resolve12(path);
   const parsed = parse4(normalized);
   let current = parsed.root;
   const rel = relative5(parsed.root, normalized);
   for (const segment of rel.split(/[\\/]+/).filter(Boolean)) {
-    current = join15(current, segment);
-    if (!existsSync13(current))
+    current = join19(current, segment);
+    if (!existsSync16(current))
       return;
     if (lstatSync4(current).isSymbolicLink()) {
       throw new SessionApplyError(`Session apply path uses a symlink ancestor: ${current}`);
@@ -18295,10 +18495,11 @@ function formatGlobalSourceCoverageWarnings(result) {
 }
 
 // src/lib/station-profile.ts
+init_raw_store_root();
 import { spawnSync } from "child_process";
-import { existsSync as existsSync14, lstatSync as lstatSync5, mkdirSync as mkdirSync7, readFileSync as readFileSync11, readdirSync as readdirSync4, writeFileSync as writeFileSync4 } from "fs";
-import { arch as osArch, homedir as homedir9, hostname as osHostname, platform as osPlatform, userInfo as osUserInfo } from "os";
-import { dirname as dirname7, join as join16, resolve as resolve11 } from "path";
+import { existsSync as existsSync17, lstatSync as lstatSync5, mkdirSync as mkdirSync7, readFileSync as readFileSync11, readdirSync as readdirSync4, writeFileSync as writeFileSync4 } from "fs";
+import { arch as osArch, homedir as homedir12, hostname as osHostname, platform as osPlatform, userInfo as osUserInfo } from "os";
+import { dirname as dirname7, join as join20 } from "path";
 var STATION_PROFILE_CACHE_FILENAME = "station-profile.md";
 var STATION_PROFILE_SOURCE_ID = "station-profile";
 var STATION_PROFILE_LAYER = "machine";
@@ -18308,22 +18509,21 @@ var STATION_PROFILE_FULL_NAMES_MAX = 6;
 var STATION_PROFILE_PRIMARY_SCOPE = "@hasna";
 var MACHINES_MANIFEST_PATH_ENV = "HASNA_MACHINES_MANIFEST_PATH";
 var BUN_INSTALL_ENV = "BUN_INSTALL";
-function homeDir2(env = process.env) {
-  return env["HOME"] || env["USERPROFILE"] || homedir9();
+function homeDir3(env = process.env) {
+  return env["HOME"] || env["USERPROFILE"] || homedir12();
 }
 function getStationProfileCachePath(env = process.env) {
-  const root = env["HASNA_CONFIGS_HOME"] || join16(homeDir2(env), ".hasna", "instructions");
-  return join16(resolve11(root), STATION_PROFILE_CACHE_FILENAME);
+  return join20(getRawStoreRoot(env), STATION_PROFILE_CACHE_FILENAME);
 }
 function getMachinesManifestPath(env = process.env) {
-  return env[MACHINES_MANIFEST_PATH_ENV] || join16(homeDir2(env), ".hasna", "machines", "machines.json");
+  return env[MACHINES_MANIFEST_PATH_ENV] || join20(homeDir3(env), ".hasna", "machines", "machines.json");
 }
 function getBunGlobalModulesDir(env = process.env) {
-  return join16(env[BUN_INSTALL_ENV] || join16(homeDir2(env), ".bun"), "install", "global", "node_modules");
+  return join20(env[BUN_INSTALL_ENV] || join20(homeDir3(env), ".bun"), "install", "global", "node_modules");
 }
 function readMachinesManifest(path) {
   try {
-    if (!existsSync14(path))
+    if (!existsSync17(path))
       return null;
     const parsed = JSON.parse(readFileSync11(path, "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
@@ -18379,9 +18579,9 @@ function probeMachineStatus(machineId) {
 function resolveStationProfileMachine(env = process.env, options = {}) {
   const hostname2 = osHostname();
   const record = findLocalManifestMachine(readMachinesManifest(getMachinesManifestPath(env)), hostname2);
-  const home = homeDir2(env);
+  const home = homeDir3(env);
   const platform = stringField(record, "platform") ?? osPlatform();
-  const workspacePath = stringField(record, "workspacePath") ?? join16(home, platform === "darwin" ? "Workspace" : "workspace");
+  const workspacePath = stringField(record, "workspacePath") ?? join20(home, platform === "darwin" ? "Workspace" : "workspace");
   const machine = {
     id: stringField(record, "id") ?? hostname2,
     hostname: stringField(record, "hostname") ?? hostname2,
@@ -18398,9 +18598,9 @@ function resolveStationProfileMachine(env = process.env, options = {}) {
   return machine;
 }
 function scopedPackageNames(modulesDir, scope) {
-  const scopeDir = join16(modulesDir, scope);
+  const scopeDir = join20(modulesDir, scope);
   try {
-    if (!existsSync14(scopeDir))
+    if (!existsSync17(scopeDir))
       return null;
     return readdirNames(scopeDir).sort();
   } catch {
@@ -18410,7 +18610,7 @@ function scopedPackageNames(modulesDir, scope) {
 function readdirNames(dir) {
   return readdirSync4(dir).filter((name) => {
     try {
-      return lstatSync5(join16(dir, name)).isDirectory();
+      return lstatSync5(join20(dir, name)).isDirectory();
     } catch {
       return false;
     }
@@ -18420,7 +18620,7 @@ function resolveStationProfilePackages(env = process.env) {
   const modulesDir = getBunGlobalModulesDir(env);
   let scopeDirs;
   try {
-    if (!existsSync14(modulesDir))
+    if (!existsSync17(modulesDir))
       return null;
     scopeDirs = readdirNames(modulesDir).filter((name) => name.startsWith("@") && name.toLowerCase().includes("hasna"));
   } catch {
@@ -18495,7 +18695,7 @@ function refreshStationProfile(options = {}) {
   const path = getStationProfileCachePath(env);
   const generatedAt = new Date().toISOString();
   if (!options.dryRun) {
-    const existing = existsSync14(path) ? readFileSync11(path, "utf8") : null;
+    const existing = existsSync17(path) ? readFileSync11(path, "utf8") : null;
     if (existing !== content) {
       mkdirSync7(dirname7(path), { recursive: true });
       writeFileSync4(path, content, "utf8");
@@ -18514,7 +18714,7 @@ function refreshStationProfile(options = {}) {
 function readStationProfile(env = process.env) {
   const path = getStationProfileCachePath(env);
   try {
-    if (!existsSync14(path))
+    if (!existsSync17(path))
       return null;
     return readFileSync11(path, "utf8");
   } catch {
@@ -18853,7 +19053,7 @@ init_codewith_shared_todos_storage_standard();
 import { createHash as createHash9 } from "crypto";
 import { spawnSync as spawnSync2 } from "child_process";
 import {
-  existsSync as existsSync15,
+  existsSync as existsSync18,
   lstatSync as lstatSync6,
   mkdirSync as mkdirSync8,
   readFileSync as readFileSync12,
@@ -18861,8 +19061,8 @@ import {
   rmSync as rmSync5,
   writeFileSync as writeFileSync5
 } from "fs";
-import { homedir as homedir10 } from "os";
-import { dirname as dirname8, join as join17, parse as parse5, relative as relative6, resolve as resolve12 } from "path";
+import { homedir as homedir13 } from "os";
+import { dirname as dirname8, join as join21, parse as parse5, relative as relative6, resolve as resolve13 } from "path";
 var INBOX_CONVERSATIONS_MINIMUM_VERSION = "0.5.28";
 var INBOX_SKILL_MARKERS = [
   [".claude", "skills", "inbox", "SKILL.md"],
@@ -18883,13 +19083,13 @@ function lstatOrNull(path) {
   }
 }
 function findSymlinkedAncestor(path) {
-  const normalized = resolve12(path);
+  const normalized = resolve13(path);
   const parsed = parse5(normalized);
   let current = parsed.root;
   const rel = relative6(parsed.root, normalized);
   for (const segment of rel.split(/[\\/]+/).filter(Boolean)) {
-    current = join17(current, segment);
-    if (!existsSync15(current))
+    current = join21(current, segment);
+    if (!existsSync18(current))
       return null;
     if (lstatSync6(current).isSymbolicLink())
       return current;
@@ -18906,11 +19106,11 @@ function packagedInboxSkillPath(explicitPath) {
   if (explicitPath)
     return explicitPath;
   const candidates = [
-    join17(import.meta.dir, "..", "..", "assets", "skills", "inbox", "SKILL.md"),
-    join17(import.meta.dir, "..", "assets", "skills", "inbox", "SKILL.md"),
-    join17(process.cwd(), "assets", "skills", "inbox", "SKILL.md")
+    join21(import.meta.dir, "..", "..", "assets", "skills", "inbox", "SKILL.md"),
+    join21(import.meta.dir, "..", "assets", "skills", "inbox", "SKILL.md"),
+    join21(process.cwd(), "assets", "skills", "inbox", "SKILL.md")
   ];
-  const found = candidates.find((candidate) => existsSync15(candidate));
+  const found = candidates.find((candidate) => existsSync18(candidate));
   if (!found) {
     throw new Error(`packaged inbox skill contract is missing (checked ${candidates.length} package-relative locations)`);
   }
@@ -18959,8 +19159,8 @@ function compareVersions(left, right) {
   }
   return 0;
 }
-function inspectSkillMarkers(homeDir3) {
-  return INBOX_SKILL_MARKERS.map((parts) => join17(homeDir3, ...parts)).map((path) => {
+function inspectSkillMarkers(homeDir4) {
+  return INBOX_SKILL_MARKERS.map((parts) => join21(homeDir4, ...parts)).map((path) => {
     const stat = lstatOrNull(path);
     if (!stat)
       return null;
@@ -18976,9 +19176,9 @@ function inspectSkillMarkers(homeDir3) {
   }).filter((snapshot) => snapshot !== null);
 }
 function inspectInbox(options) {
-  const homeDir3 = options.homeDir ?? homedir10();
+  const homeDir4 = options.homeDir ?? homedir13();
   const runtimeCommand = options.conversationsCommand ?? "conversations";
-  const snapshots = inspectSkillMarkers(homeDir3);
+  const snapshots = inspectSkillMarkers(homeDir4);
   const skillPresent = snapshots.length > 0;
   let canonicalContent = null;
   let canonicalSha256 = null;
@@ -19253,11 +19453,11 @@ init_project_context();
 init_config_store();
 init_apply();
 init_config_agents();
-import { existsSync as existsSync17, readFileSync as readFileSync14 } from "fs";
+import { existsSync as existsSync20, readFileSync as readFileSync14 } from "fs";
 
 // src/lib/package-version.ts
-import { existsSync as existsSync16, readFileSync as readFileSync13 } from "fs";
-import { dirname as dirname9, join as join18 } from "path";
+import { existsSync as existsSync19, readFileSync as readFileSync13 } from "fs";
+import { dirname as dirname9, join as join22 } from "path";
 import { fileURLToPath } from "url";
 var cached = null;
 function getPackageVersion() {
@@ -19266,8 +19466,8 @@ function getPackageVersion() {
   try {
     let dir = dirname9(fileURLToPath(import.meta.url));
     for (let i = 0;i < 8; i++) {
-      const pkgPath = join18(dir, "package.json");
-      if (existsSync16(pkgPath)) {
+      const pkgPath = join22(dir, "package.json");
+      if (existsSync19(pkgPath)) {
         const pkg = JSON.parse(readFileSync13(pkgPath, "utf8"));
         if (pkg.name === "@hasna/instructions" && pkg.version) {
           cached = pkg.version;
@@ -19331,7 +19531,7 @@ async function getConfigsStatus(store = resolveConfigStore(), options = {}) {
       continue;
     knownTargets += 1;
     const targetPath = expandPath(config.target_path);
-    if (!existsSync17(targetPath)) {
+    if (!existsSync20(targetPath)) {
       missingTargets += 1;
       continue;
     }
@@ -19431,8 +19631,8 @@ init_config_store();
 
 // src/lib/provider-context.ts
 import { createHash as createHash10 } from "crypto";
-import { existsSync as existsSync18, mkdirSync as mkdirSync9, readFileSync as readFileSync15, writeFileSync as writeFileSync6 } from "fs";
-import { join as join19 } from "path";
+import { existsSync as existsSync21, mkdirSync as mkdirSync9, readFileSync as readFileSync15, writeFileSync as writeFileSync6 } from "fs";
+import { join as join23 } from "path";
 var PROVIDER_CONTEXT_DIR = ".hasna/provider-context";
 var PROVIDER_CONTEXT_MANIFEST = "manifest.json";
 var PROVIDER_CONTEXT_SCHEMA = "hasna.instructions.provider-context/v1";
@@ -19577,17 +19777,17 @@ function resolveAndRenderProviderContext(opts) {
   const recordedEndpoint = originAccepted ? `${opts.origin.host}${opts.origin.pathPrefix || ""}` : null;
   const reason = entry === null && opts.rawEndpoint ? originAccepted ? `endpoint "${recordedEndpoint}" is not in the provider-context registry; using the invariant fragment` : "endpoint rejected (embedded credentials or unparseable); using the invariant fragment" : null;
   const content = renderProviderFragment(entry);
-  const dir = join19(opts.homeDir, PROVIDER_CONTEXT_DIR);
-  if (!existsSync18(dir))
+  const dir = join23(opts.homeDir, PROVIDER_CONTEXT_DIR);
+  if (!existsSync21(dir))
     mkdirSync9(dir, { recursive: true });
   const filename = `${entry ? entry.key : "invariant"}.md`;
-  const fragmentPath2 = join19(dir, filename);
+  const fragmentPath2 = join23(dir, filename);
   const fragmentSha256 = sha25610(content);
   writeFileSync6(fragmentPath2, content, "utf8");
-  const manifestPath = join19(dir, PROVIDER_CONTEXT_MANIFEST);
+  const manifestPath = join23(dir, PROVIDER_CONTEXT_MANIFEST);
   let manifest = { schema: PROVIDER_CONTEXT_SCHEMA, fragments: {} };
   try {
-    if (existsSync18(manifestPath)) {
+    if (existsSync21(manifestPath)) {
       const parsed = JSON.parse(readFileSync15(manifestPath, "utf8"));
       if (parsed && typeof parsed === "object")
         manifest = parsed;
@@ -19731,7 +19931,7 @@ function parseSessionSource(value, order) {
   if (!path)
     throw new Error(`Invalid --source "${value}" (expected path or id=path)`);
   const absPath = resolveSessionPath(path);
-  if (!existsSync20(absPath))
+  if (!existsSync23(absPath))
     throw new Error(`Instruction source file not found: ${absPath}`);
   const content = readSessionInstructionSourceFile(absPath);
   const source = sourceFromFilePath(absPath, content, order);
@@ -19812,7 +20012,7 @@ async function collectSessionSources(opts, tool, store) {
   }
   for (const value of opts.identityExport ?? []) {
     const path = resolveSessionPath(value);
-    if (!existsSync20(path))
+    if (!existsSync23(path))
       throw new Error(`Identity instruction export not found: ${path}`);
     const parsed = JSON.parse(readFileSync17(path, "utf-8"));
     sources.push(...sourcesFromIdentityExport(parsed, { path, tool, orderOffset: sources.length }));
@@ -19946,7 +20146,7 @@ function readProjectContextBundleOption(value, allowMissing = false) {
   if (value === "-")
     return { json: readBoundedProjectContextStdin() };
   const path = resolveSessionPath(value);
-  if (!existsSync20(path)) {
+  if (!existsSync23(path)) {
     if (allowMissing)
       return {};
     throw new ProjectContextError("PROJECT_CONTEXT_INPUT_MISSING", `bundle file not found: ${path}`);
@@ -20117,8 +20317,8 @@ program.command("tag <id>").description("Add or remove tags on a stored config (
   console.log(chalk.green("\u2713") + ` Tags on ${chalk.bold(updated.name)} ${chalk.dim(`(${updated.slug})`)}: ${nextTags.join(", ") || chalk.dim("(none)")}`);
 });
 program.command("add <path>").description("Ingest a file into the config DB").option("-n, --name <name>", "config name (defaults to filename)").option("-c, --category <cat>", "category override").option("-a, --agent <agent>", "agent override").option("-k, --kind <kind>", "kind: file|reference", "file").option("--template", "mark as template (has {{VAR}} placeholders)").option("--update", "if a config already owns this path, update that row in place instead of refusing").action(async (filePath, opts) => {
-  const abs = resolve14(filePath);
-  if (!existsSync20(abs)) {
+  const abs = resolve15(filePath);
+  if (!existsSync23(abs)) {
     console.error(chalk.red(`File not found: ${abs}`));
     process.exit(1);
   }
@@ -20126,7 +20326,7 @@ program.command("add <path>").description("Ingest a file into the config DB").op
   const storedFmt = detectFormat(abs);
   const fmt = redactFormatForTarget(abs, storedFmt);
   const { content, redacted, isTemplate: isTemplate2 } = redactContent(rawContent, fmt);
-  const targetPath = abs.startsWith(homedir12()) ? abs.replace(homedir12(), "~") : abs;
+  const targetPath = abs.startsWith(homedir15()) ? abs.replace(homedir15(), "~") : abs;
   const name = opts.name || filePath.split("/").pop();
   const store = resolveConfigStore();
   const allConfigs = await store.listConfigs();
@@ -20301,7 +20501,7 @@ program.command("sync").description("Sync known AI coding configs from disk into
       for (const entry of entries) {
         if (!entry.isDirectory())
           continue;
-        const projDir = join21(absDir, entry.name);
+        const projDir = join25(absDir, entry.name);
         const hasAgentConfig = [
           "CLAUDE.md",
           ".mcp.json",
@@ -20314,7 +20514,7 @@ program.command("sync").description("Sync known AI coding configs from disk into
           ".aicopilot",
           ".cursor",
           ".agents"
-        ].some((marker) => existsSync20(join21(projDir, marker)));
+        ].some((marker) => existsSync23(join25(projDir, marker)));
         if (!hasAgentConfig)
           continue;
         const result2 = await syncProject({ projectDir: projDir, dryRun: opts.dryRun, store });
@@ -20365,7 +20565,7 @@ program.command("import <file>").description("Import configs from a tar.gz bundl
 });
 program.command("whoami").description("Show setup summary").action(async () => {
   const store = resolveConfigStore();
-  const dbPath = isApiTransport() ? `${process.env["HASNA_INSTRUCTIONS_API_URL"]}/v1` : process.env["HASNA_INSTRUCTIONS_DB_PATH"] || join21(getRawStoreRoot(), "instructions.db");
+  const dbPath = isApiTransport() ? `${process.env["HASNA_INSTRUCTIONS_API_URL"]}/v1` : process.env["HASNA_INSTRUCTIONS_DB_PATH"] || join25(getRawStoreRoot(), "instructions.db");
   const stats = await store.getConfigStats();
   console.log(chalk.bold("@hasna/instructions") + chalk.dim(" v" + pkg.version));
   console.log(chalk.cyan(isApiTransport() ? "API:" : "DB:") + " " + dbPath);
@@ -21244,7 +21444,7 @@ mcpCmd.command("install").alias("add").description("Install configs MCP server i
       } else if (target === "codex") {
         const { appendFileSync, existsSync: ex } = await import("fs");
         const { join: j } = await import("path");
-        const configPath = j(homedir12(), ".codex", "config.toml");
+        const configPath = j(homedir15(), ".codex", "config.toml");
         const block = `
 [mcp_servers.configs]
 command = "${mcpBinary}"
@@ -21262,7 +21462,7 @@ args = []
       } else if (target === "antigravity") {
         const { mkdirSync: md, readFileSync: rf, writeFileSync: wf, existsSync: ex } = await import("fs");
         const { dirname: dn, join: j } = await import("path");
-        const configPath = j(homedir12(), ".gemini", "config", "mcp_config.json");
+        const configPath = j(homedir15(), ".gemini", "config", "mcp_config.json");
         let settings = {};
         if (ex(configPath)) {
           try {
@@ -21346,7 +21546,7 @@ DB stats:`));
     if (count > 0)
       console.log(`  ${key.padEnd(18)} ${count}`);
   }
-  const location = isApiTransport() ? `${process.env["HASNA_INSTRUCTIONS_API_URL"]}/v1` : process.env["HASNA_INSTRUCTIONS_DB_PATH"] || join21(getRawStoreRoot(), "instructions.db");
+  const location = isApiTransport() ? `${process.env["HASNA_INSTRUCTIONS_API_URL"]}/v1` : process.env["HASNA_INSTRUCTIONS_DB_PATH"] || join25(getRawStoreRoot(), "instructions.db");
   console.log(chalk.dim(`
 ${isApiTransport() ? "API" : "DB"}: ${location}`));
 });
@@ -21407,10 +21607,10 @@ managedSkillsCmd.command("apply").option("--dry-run", "preview without writing")
 });
 program.command("backup").description("Export configs to a timestamped backup file").action(async () => {
   const { mkdirSync: mk } = await import("fs");
-  const backupDir = join21(getRawStoreRoot(), "backups");
+  const backupDir = join25(getRawStoreRoot(), "backups");
   mk(backupDir, { recursive: true });
   const ts = new Date().toISOString().replace(/[:.]/g, "-").replace("T", "-").slice(0, 19);
-  const outPath = join21(backupDir, `configs-${ts}.tar.gz`);
+  const outPath = join25(backupDir, `configs-${ts}.tar.gz`);
   const result = await exportConfigs(outPath, { store: resolveConfigStore() });
   const { statSync: st } = await import("fs");
   const size = st(outPath).size;
@@ -21438,9 +21638,9 @@ program.command("doctor").description("Validate configs: syntax, permissions, mi
   console.log(chalk.cyan("Known files on disk:"));
   for (const k of KNOWN_CONFIGS) {
     if (k.rulesDir) {
-      existsSync20(expandPath(k.rulesDir)) ? pass(`${k.rulesDir}/ exists`) : k.optional ? skip(`${k.rulesDir}/ (optional)`) : fail2(`${k.rulesDir}/ not found`);
+      existsSync23(expandPath(k.rulesDir)) ? pass(`${k.rulesDir}/ exists`) : k.optional ? skip(`${k.rulesDir}/ (optional)`) : fail2(`${k.rulesDir}/ not found`);
     } else {
-      existsSync20(expandPath(k.path)) ? pass(k.path) : k.optional ? skip(`${k.path} (optional)`) : fail2(`${k.path} not found`);
+      existsSync23(expandPath(k.path)) ? pass(k.path) : k.optional ? skip(`${k.path} (optional)`) : fail2(`${k.path} not found`);
     }
   }
   const allConfigs = await store.listConfigs();
@@ -21594,16 +21794,16 @@ program.command("watch").description("Watch known config files for changes and a
   for (const k of KNOWN_CONFIGS) {
     if (k.rulesDir) {
       const absDir = expandPath2(k.rulesDir);
-      if (!existsSync20(absDir))
+      if (!existsSync23(absDir))
         continue;
       const { readdirSync: readdirSync6 } = await import("fs");
       for (const f of readdirSync6(absDir).filter((f2) => f2.endsWith(".md"))) {
-        const abs = join21(absDir, f);
+        const abs = join25(absDir, f);
         mtimes.set(abs, st(abs).mtimeMs);
       }
     } else {
       const abs = expandPath2(k.path);
-      if (existsSync20(abs))
+      if (existsSync23(abs))
         mtimes.set(abs, st(abs).mtimeMs);
     }
   }
@@ -21611,7 +21811,7 @@ program.command("watch").description("Watch known config files for changes and a
   const tick = async () => {
     let changed = 0;
     for (const [abs, oldMtime] of mtimes) {
-      if (!existsSync20(abs))
+      if (!existsSync23(abs))
         continue;
       const newMtime = st(abs).mtimeMs;
       if (newMtime !== oldMtime) {
@@ -21623,10 +21823,10 @@ program.command("watch").description("Watch known config files for changes and a
     for (const k of KNOWN_CONFIGS) {
       if (k.rulesDir) {
         const absDir = expandPath2(k.rulesDir);
-        if (!existsSync20(absDir))
+        if (!existsSync23(absDir))
           continue;
         for (const f of rd(absDir).filter((f2) => f2.endsWith(".md"))) {
-          const abs = join21(absDir, f);
+          const abs = join25(absDir, f);
           if (!mtimes.has(abs)) {
             mtimes.set(abs, st(abs).mtimeMs);
             changed++;
@@ -21634,7 +21834,7 @@ program.command("watch").description("Watch known config files for changes and a
         }
       } else {
         const abs = expandPath2(k.path);
-        if (existsSync20(abs) && !mtimes.has(abs)) {
+        if (existsSync23(abs) && !mtimes.has(abs)) {
           mtimes.set(abs, st(abs).mtimeMs);
           changed++;
         }
@@ -21662,7 +21862,7 @@ program.command("report").description("Summary of stored configs, drift, and eco
     if (!c.target_path)
       continue;
     const abs = expandPath(c.target_path);
-    if (!existsSync20(abs)) {
+    if (!existsSync23(abs)) {
       missing++;
       continue;
     }
@@ -21733,7 +21933,7 @@ program.command("clean").description("Remove configs from DB whose target files
     if (!c.target_path)
       continue;
     const abs = expandPath(c.target_path);
-    if (!existsSync20(abs)) {
+    if (!existsSync23(abs)) {
       if (printed < maxPrinted) {
         if (opts.dryRun) {
           console.log(chalk.yellow("  would remove:") + ` ${c.slug} ${chalk.dim(`(${truncateMiddle(c.target_path, 88)})`)}`);
@@ -21879,13 +22079,13 @@ providerContextCmd.command("resolve").description("Resolve the endpoint to a pro
   try {
     const rawEndpoint = opts.endpoint ?? process.env["ANTHROPIC_BASE_URL"] ?? "";
     const rawModel = opts.model ?? process.env["ANTHROPIC_MODEL"] ?? "";
-    const homeDir3 = opts.home ?? homedir12();
+    const homeDir4 = opts.home ?? homedir15();
     const origin = normalizeEndpointOrigin(rawEndpoint);
     const resolution = resolveAndRenderProviderContext({
       origin,
       rawEndpoint,
       rawModel,
-      homeDir: homeDir3
+      homeDir: homeDir4
     });
     if (opts.json) {
       printJson({