@hasna/instructions 0.7.1 → 0.7.4

package/dist/index.js

@@ -16,7 +16,12 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // src/types/index.ts
-var CONFIG_KINDS, CONFIG_CATEGORIES, CONFIG_AGENTS, CONFIG_TRANSFORMS, CONFIG_FORMATS, PROFILE_CONFIG_BINDING_SCHEMA = "hasna.instructions.profile-config-binding/v1", INSTRUCTION_ACTIVATION_MODES, INSTRUCTION_FALLBACKS, PROFILE_ASSET_BINDING_SCHEMA = "hasna.instructions.profile-asset-binding/v1", ASSET_KINDS, ASSET_DESTINATION_STRATEGIES, ASSET_SCOPES, ASSET_UNINSTALL_POLICIES, ASSET_ROLLBACK_POLICIES, INSTRUCTIONS_DOMAIN_ARCHIVE_SCHEMA = "hasna.instructions.domain-archive/v2", ConfigNotFoundError, ProfileNotFoundError, ConfigApplyError, TemplateRenderError;
+function validateExpectedConfigVersion(value) {
+  if (value !== undefined && (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1)) {
+    throw new InvalidExpectedVersionError;
+  }
+}
+var CONFIG_KINDS, CONFIG_CATEGORIES, CONFIG_AGENTS, CONFIG_TRANSFORMS, CONFIG_FORMATS, PROFILE_CONFIG_BINDING_SCHEMA = "hasna.instructions.profile-config-binding/v1", INSTRUCTION_ACTIVATION_MODES, INSTRUCTION_FALLBACKS, PROFILE_ASSET_BINDING_SCHEMA = "hasna.instructions.profile-asset-binding/v1", ASSET_KINDS, ASSET_DESTINATION_STRATEGIES, ASSET_SCOPES, ASSET_UNINSTALL_POLICIES, ASSET_ROLLBACK_POLICIES, INSTRUCTIONS_DOMAIN_ARCHIVE_SCHEMA = "hasna.instructions.domain-archive/v2", InvalidExpectedVersionError, ConfigVersionConflictError, ConfigNotFoundError, ProfileNotFoundError, ConfigApplyError, TemplateRenderError;
 var init_types = __esm(() => {
   CONFIG_KINDS = ["file", "reference"];
   CONFIG_CATEGORIES = [
@@ -33,6 +38,7 @@ var init_types = __esm(() => {
     "claude",
     "codex",
     "opencode",
+    "sumi",
     "cursor",
     "codewith",
     "aicopilot",
@@ -53,6 +59,7 @@ var init_types = __esm(() => {
     "claude-passthrough",
     "codex-flat",
     "opencode-flat",
+    "sumi-flat",
     "cursor-mdc",
     "skill-neutral"
   ];
@@ -71,6 +78,25 @@ var init_types = __esm(() => {
   ASSET_SCOPES = ["global", "project", "session"];
   ASSET_UNINSTALL_POLICIES = ["remove-managed", "retain"];
   ASSET_ROLLBACK_POLICIES = ["snapshot", "installer-receipt", "none"];
+  InvalidExpectedVersionError = class InvalidExpectedVersionError extends Error {
+    code = "INVALID_EXPECTED_VERSION";
+    constructor() {
+      super("expected_version must be a positive safe integer");
+      this.name = "InvalidExpectedVersionError";
+    }
+  };
+  ConfigVersionConflictError = class ConfigVersionConflictError extends Error {
+    config_id;
+    expected_version;
+    code = "CONFIG_VERSION_CONFLICT";
+    status = 409;
+    constructor(config_id, expected_version) {
+      super(`Config version conflict: ${config_id} no longer has expected version ${expected_version}`);
+      this.config_id = config_id;
+      this.expected_version = expected_version;
+      this.name = "ConfigVersionConflictError";
+    }
+  };
   ConfigNotFoundError = class ConfigNotFoundError extends Error {
     constructor(id) {
       super(`Config not found: ${id}`);
@@ -143,6 +169,31 @@ function boundedReadPage(items, total, options = {}) {
 }
 var init_bounded_read = () => {};
 
+// src/lib/instruction-source-policy.ts
+function isRetiredInstructionSource(config) {
+  return config.tags.some((tag) => tag === "retired-global-source" || tag === "retired-instruction-source");
+}
+function instructionSourceRejection(config) {
+  if (isRetiredInstructionSource(config) || config.tags.includes("config-only")) {
+    return "source is retired or explicitly configuration-only";
+  }
+  if (config.category !== "rules")
+    return `category ${config.category} is not an instruction source; classify reviewed prose as rules`;
+  if (config.format !== "markdown" && config.format !== "text")
+    return `format ${config.format} is not instruction prose`;
+  if (config.is_template)
+    return "unresolved templates must be rendered and reviewed before prompt injection";
+  if (!config.content.trim())
+    return "instruction source is empty";
+  if (config.content.includes("\x00"))
+    return "instruction source contains binary content";
+  const target = config.target_path?.split(/[\\/]/).pop() ?? "";
+  if (/\.(?:json|toml|yaml|yml|ini|sh|bash|zsh|fish|js|ts|py|rules)$/i.test(target)) {
+    return "target is an executable, provider policy, or settings file rather than a prompt";
+  }
+  return null;
+}
+
 // src/lib/global-agent-rules-standard.ts
 import { createHash } from "crypto";
 function parseAgentOperatingRulesVersion(content) {
@@ -246,9 +297,13 @@ async function ensureGlobalAgentRulesStandardConfig(store = resolveConfigStore()
   let existing;
   try {
     existing = await store.getConfig(GLOBAL_AGENT_RULES_STANDARD_SLUG);
-  } catch {
+  } catch (error) {
+    if (!(error instanceof ConfigNotFoundError))
+      throw error;
     return await store.createConfig(standardConfigInput(resolveAgentOperatingRulesPayload(null)));
   }
+  if (isRetiredInstructionSource(existing))
+    return existing;
   const payload = resolveAgentOperatingRulesPayload(existing.content);
   const input = standardConfigInput(payload);
   if (existing.content !== input.content || existing.description !== input.description || existing.category !== input.category || existing.agent !== input.agent || existing.format !== input.format || existing.kind !== input.kind || JSON.stringify(existing.tags) !== JSON.stringify(input.tags)) {
@@ -258,6 +313,7 @@ async function ensureGlobalAgentRulesStandardConfig(store = resolveConfigStore()
 }
 var GLOBAL_AGENT_RULES_STANDARD_SLUG = "global-agent-rules-standard", AGENT_OPERATING_RULES_SOURCE_SET_ID = "hasna-global-agent-rules-standard", AGENT_OPERATING_RULES_SOURCE_ID = "hasna-agent-operating-rules", AGENT_OPERATING_RULES_ROLE = "agent-operating-rules", AGENT_OPERATING_RULES_VERSION = "1.1.26", AGENT_OPERATING_RULES_SOURCE_SET_VERSION = "2026-08-11", AGENT_OPERATING_RULES_SEMANTIC_POLICY_KEY = "hasna:agent-operating-rules", AGENT_OPERATING_RULES_SENTINEL_PATTERN, AGENT_OPERATING_RULES_HEADING_PATTERN, AGENT_OPERATING_RULES_PAYLOAD_SHA256 = "486844a3d869e3dabc2f33fd66479d4e2fb0a0d1864a3d8a3dd05669eb3f1b77", AGENT_OPERATING_RULES_UPSTREAM_FILE_SHA256 = "b8e89cdb49e207e5b497ac51384d67022b94fe5645cc9273db60384eb2c2fb32", SCOPED_OPERATIONAL_CONTROL_POLICY_REFERENCE = "hasna-agent-operating-rules/scoped-operational-control/v1", AGENT_OPERATING_RULES_UPSTREAM, SCOPED_OPERATIONAL_CONTROL_POLICY, AGENT_OPERATING_RULES_PROVENANCE, AGENT_OPERATING_RULES_METADATA, GLOBAL_AGENT_RULES_STANDARD_CONTENT;
 var init_global_agent_rules_standard = __esm(() => {
+  init_types();
   init_config_store();
   AGENT_OPERATING_RULES_SENTINEL_PATTERN = /<!--\s*hasna:agent-operating-rules\s+v=([0-9]+\.[0-9]+\.[0-9]+)\s*-->/i;
   AGENT_OPERATING_RULES_HEADING_PATTERN = /^#\s*Hasna Agent Operating Rules\s+\u2014\s+v[0-9]+\.[0-9]+\.[0-9]+\s+\(([0-9]{4}-[0-9]{2}-[0-9]{2})\)/;
@@ -384,21 +440,23 @@ async function ensureCodewithSharedTodosStorageStandardConfig(store = resolveCon
   let config;
   try {
     const existing = await store.getConfig(CODEWITH_SHARED_TODOS_STORAGE_STANDARD_SLUG);
+    if (isRetiredInstructionSource(existing))
+      return existing;
     if (existing.content !== input.content || existing.description !== input.description || existing.category !== input.category || existing.agent !== input.agent || existing.format !== input.format || existing.kind !== input.kind || JSON.stringify(existing.tags) !== JSON.stringify(input.tags)) {
       config = await store.updateConfig(existing.id, input);
     } else {
       config = existing;
     }
-  } catch {
+  } catch (error) {
+    if (!(error instanceof ConfigNotFoundError))
+      throw error;
     config = await store.createConfig(input);
   }
-  for (const profile of await store.listProfiles()) {
-    await store.addConfigToProfile(profile.id, config.id);
-  }
   return config;
 }
 var CODEWITH_SHARED_TODOS_STORAGE_STANDARD_SLUG = "codewith-shared-todos-storage-standard", CODEWITH_SHARED_TODOS_STORAGE_POLICY_REFERENCE = "codewith/shared-todos-storage/v1", CODEWITH_SHARED_TODOS_STORAGE_STANDARD_CONTENT;
 var init_codewith_shared_todos_storage_standard = __esm(() => {
+  init_types();
   init_config_store();
   CODEWITH_SHARED_TODOS_STORAGE_STANDARD_CONTENT = `# Codewith Shared Todos Storage Standard
 
@@ -7292,7 +7350,7 @@ function sha2562(content) {
 function isRecord(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
-var PROJECT_CONTEXT_SCHEMA = "hasna.projects.project_context_bundle.v1", PROJECT_CONTEXT_SCHEMA_V2 = "hasna.projects.project_context_bundle.v2", PROJECT_CONTEXT_SUPPORTED_SCHEMAS, projectContextSchema, PROJECT_CONTEXT_MAX_INPUT_BYTES, PROJECT_CONTEXT_MAX_RENDERED_BYTES, PROJECT_CONTEXT_MAX_APPROX_TOKENS = 1000, PROJECT_CONTEXT_MAX_COMMANDS = 6, PROJECT_CONTEXT_MAX_WARNINGS = 3, PROJECT_CONTEXT_FRAGMENT_PATH = ".hasna/instructions/project-context.md", PROJECT_CONTEXT_MANIFEST_PATH = ".hasna/projects/project-context-manifest.json", PROJECT_CONTEXT_CACHE_PATH = ".hasna/projects/project-context-cache.json", PROJECT_CONTEXT_LOCK_PATH = ".hasna/projects/project-context.lock", PROJECT_CONTEXT_SNAPSHOT_DIR = ".hasna/projects/project-context-snapshots", PROJECT_CONTEXT_CACHE_SCHEMA = "hasna.instructions.project-context-cache/v1", PROJECT_CONTEXT_MANAGED_COMMENT = "Managed by @hasna/configs project context", SESSION_COMPATIBILITY_MANIFEST_MAX_BYTES, FOREIGN_INPUT_MAX_BYTES, SESSION_MANAGED_OUTPUT_MAX_BYTES, SESSION_MANAGED_OUTPUT_PATHS, SESSION_MANAGED_OUTPUT_WARN_BYTES, PROJECT_CONTEXT_LOCK_STALE_MS, LEGACY_CONFIGS_PACKAGE = "@hasna/configs", LEGACY_CONFIGS_COMPAT_VERSION = "0.2.45", LEGACY_CONFIGS_EXECUTABLE = "configs", PROJECT_KINDS, PROJECT_STATUSES, LINK_STATES, RESOLUTION_SOURCES, safeId, nullableId, producerSlug, producerName, safeOptionalDisplay, isoTimestamp, revisionSchema, hashSchema, absolutePath, commandArg, financeText, financeLegalEntity, financeProjectMetadataSchema, commandSchema, projectContextBundleSchema, storedManifestProjectContextSchema, storedManifestFileSchema, storedManifestObservationSchema, projectContextMetadataSnapshotSchema, projectContextCacheSchema, ProjectContextError, ProjectContextHashRace, anchoredFsOps, atomicExchange, atomicExchangeLibraries;
+var PROJECT_CONTEXT_SCHEMA = "hasna.projects.project_context_bundle.v1", PROJECT_CONTEXT_SCHEMA_V2 = "hasna.projects.project_context_bundle.v2", PROJECT_CONTEXT_SUPPORTED_SCHEMAS, projectContextSchema, PROJECT_CONTEXT_MAX_INPUT_BYTES, PROJECT_CONTEXT_MAX_RENDERED_BYTES, PROJECT_CONTEXT_MAX_APPROX_TOKENS = 1000, PROJECT_CONTEXT_MAX_COMMANDS = 6, PROJECT_CONTEXT_MAX_WARNINGS = 3, PROJECT_CONTEXT_FRAGMENT_PATH = ".hasna/instructions/project-context.md", PROJECT_CONTEXT_MANIFEST_PATH = ".hasna/projects/project-context-manifest.json", PROJECT_CONTEXT_CACHE_PATH = ".hasna/projects/project-context-cache.json", PROJECT_CONTEXT_LOCK_PATH = ".hasna/projects/project-context.lock", PROJECT_CONTEXT_SNAPSHOT_DIR = ".hasna/projects/project-context-snapshots", PROJECT_CONTEXT_CACHE_SCHEMA = "hasna.instructions.project-context-cache/v1", PROJECT_CONTEXT_MANAGED_COMMENT = "Managed by @hasna/configs project context", SESSION_COMPATIBILITY_MANIFEST_MAX_BYTES, FOREIGN_INPUT_MAX_BYTES, SESSION_MANAGED_OUTPUT_MAX_BYTES, SESSION_MANAGED_INPUT_MAX_BYTES, SESSION_MANAGED_OUTPUT_PATHS, SESSION_MANAGED_OUTPUT_WARN_BYTES, PROJECT_CONTEXT_LOCK_STALE_MS, LEGACY_CONFIGS_PACKAGE = "@hasna/configs", LEGACY_CONFIGS_COMPAT_VERSION = "0.2.45", LEGACY_CONFIGS_EXECUTABLE = "configs", PROJECT_KINDS, PROJECT_STATUSES, LINK_STATES, RESOLUTION_SOURCES, safeId, nullableId, producerSlug, producerName, safeOptionalDisplay, isoTimestamp, revisionSchema, hashSchema, absolutePath, commandArg, financeText, financeLegalEntity, financeProjectMetadataSchema, commandSchema, projectContextBundleSchema, storedManifestProjectContextSchema, storedManifestFileSchema, storedManifestObservationSchema, projectContextMetadataSnapshotSchema, projectContextCacheSchema, ProjectContextError, ProjectContextHashRace, anchoredFsOps, atomicExchange, atomicExchangeLibraries;
 var init_project_context = __esm(() => {
   init_zod();
   init_redact();
@@ -7305,6 +7363,7 @@ var init_project_context = __esm(() => {
   SESSION_COMPATIBILITY_MANIFEST_MAX_BYTES = 8 * 1024 * 1024;
   FOREIGN_INPUT_MAX_BYTES = 256 * 1024;
   SESSION_MANAGED_OUTPUT_MAX_BYTES = SESSION_COMPATIBILITY_MANIFEST_MAX_BYTES;
+  SESSION_MANAGED_INPUT_MAX_BYTES = SESSION_MANAGED_OUTPUT_MAX_BYTES;
   SESSION_MANAGED_OUTPUT_PATHS = [
     ".hasna/session-render-manifest.json",
     ".codewith/.hasna/session-render-manifest.json",
@@ -7604,6 +7663,9 @@ function buildCodexAgentsMd(source, context = {}) {
 function buildOpenCodeAgentsMd(source, context = {}) {
   return flattenWithRules(source, context);
 }
+function buildSumiAgentsMd(source, context = {}) {
+  return flattenWithRules(source, context);
+}
 function buildCursorMdc(source) {
   const stem = source.target_path ? basename2(source.target_path, extname(source.target_path)) : source.slug;
   const description = source.name || stem;
@@ -7632,6 +7694,8 @@ function applyTransform(source, output, context = {}) {
       return buildCodexAgentsMd(source, context);
     case "opencode-flat":
       return buildOpenCodeAgentsMd(source, context);
+    case "sumi-flat":
+      return buildSumiAgentsMd(source, context);
     case "cursor-mdc":
       return buildCursorMdc(source);
     case "skill-neutral":
@@ -7759,6 +7823,10 @@ function normalizeProfileAssetBinding(value) {
   const rollback = record["rollback"];
   if (!ASSET_ROLLBACK_POLICIES.includes(rollback))
     throw new Error(`Invalid asset rollback policy: ${String(rollback)}`);
+  const nativeAgent = record["nativeAgent"] === undefined ? undefined : normalizeNativeAgentMetadata(record["nativeAgent"]);
+  if (nativeAgent && (kind !== "custom-agent" || strategy !== "emit-file" || !["claude", "sumi", "opencode"].includes(provider))) {
+    throw new Error("nativeAgent metadata requires a supported emitted custom-agent definition.");
+  }
   return {
     schema: PROFILE_ASSET_BINDING_SCHEMA,
     assetKey,
@@ -7778,6 +7846,7 @@ function normalizeProfileAssetBinding(value) {
       root,
       relativePath: nonEmptyString(destinationRecord["relativePath"], "destination.relativePath")
     },
+    ...nativeAgent ? { nativeAgent } : {},
     uninstall,
     rollback
   };
@@ -7853,6 +7922,7 @@ function compileAssetPlan(input) {
         allowed: binding.source.allowed
       },
       destination: binding.destination,
+      ...binding.nativeAgent ? { nativeAgent: binding.nativeAgent } : {},
       support,
       action,
       mutationMode: input.mode,
@@ -7908,6 +7978,18 @@ function validateAssetSourceAndDestination(bundle, binding, diagnostics) {
     pathSafe = false;
     diagnostics.push(diagnostic("error", "ASSET_DESTINATION_UNSAFE", binding.assetKey, error.message));
   }
+  if (pathSafe && binding.kind === "custom-agent" && binding.destination.strategy === "emit-file" && (binding.selector.provider === "claude" || binding.selector.provider === "sumi" || binding.nativeAgent) && (binding.destination.root !== "target-home" || !/^agents\/[A-Za-z0-9][A-Za-z0-9_-]*\.md$/.test(safeRelativePath(binding.destination.relativePath)))) {
+    pathSafe = false;
+    diagnostics.push(diagnostic("error", "ASSET_CUSTOM_AGENT_DESTINATION_UNSUPPORTED", binding.assetKey, "Native custom-agent definitions require agents/<name>.md beneath an explicit target-home."));
+  }
+  if (binding.nativeAgent) {
+    if (posix.basename(binding.destination.relativePath, ".md") !== binding.nativeAgent.name) {
+      diagnostics.push(diagnostic("error", "ASSET_NATIVE_AGENT_NAME_MISMATCH", binding.assetKey, "Native role name must match its destination filename."));
+    }
+    if (/^\uFEFF?---[ \t]*\r?\n/.test(bundle.content)) {
+      diagnostics.push(diagnostic("error", "ASSET_NATIVE_AGENT_DOUBLE_HEADER", binding.assetKey, "Canonical role prose must not already contain frontmatter when nativeAgent metadata is supplied."));
+    }
+  }
   const expectedLocator = bundle.locator;
   if (!binding.source.immutable || binding.source.locator !== expectedLocator) {
     diagnostics.push(diagnostic("error", "ASSET_SOURCE_MUTABLE_OR_UNPINNED", binding.assetKey, `Asset source must be pinned to ${expectedLocator}.`));
@@ -7963,6 +8045,72 @@ function safeRelativePath(value) {
   }
   return normalized;
 }
+function normalizeNativeAgentMetadata(value) {
+  const record = objectRecord(value, "nativeAgent");
+  if (Object.keys(record).some((key) => !["name", "description", "frontmatter"].includes(key)))
+    throw new Error("Unknown nativeAgent metadata field.");
+  const name = nonEmptyString(record["name"], "nativeAgent.name");
+  const description = nonEmptyString(record["description"], "nativeAgent.description");
+  if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(name) || name.length > 128)
+    throw new Error("Invalid nativeAgent.name.");
+  if (description.length > 4096 || /[\r\n\0]/.test(description))
+    throw new Error("Invalid nativeAgent.description.");
+  if (record["frontmatter"] === undefined)
+    return { name, description };
+  const frontmatter = record["frontmatter"];
+  if (typeof frontmatter !== "string" || frontmatter.length > 16384 || frontmatter.includes("\x00"))
+    throw new Error("Invalid nativeAgent.frontmatter.");
+  const match = /^---\r?\n([\s\S]*?)\r?\n---\r?\n$/.exec(frontmatter);
+  if (!match)
+    throw new Error("nativeAgent.frontmatter requires one complete newline-terminated YAML header.");
+  const scalar = (raw) => {
+    if (raw.startsWith('"')) {
+      try {
+        const parsed = JSON.parse(raw);
+        return typeof parsed === "string" ? parsed : undefined;
+      } catch {
+        return;
+      }
+    }
+    if (!/^[A-Za-z0-9][A-Za-z0-9 _.,:;()/?@+-]*$/.test(raw) || /:(?:\s|$)/.test(raw))
+      return;
+    if (/^(?:true|yes|on|y)$/i.test(raw))
+      return true;
+    if (/^(?:false|no|off|n)$/i.test(raw))
+      return false;
+    if (/^null$/i.test(raw))
+      return null;
+    if (/^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?$/.test(raw))
+      return Number(raw);
+    if (/^[0-9]/.test(raw))
+      return;
+    return raw;
+  };
+  const fields = new Map;
+  for (const line of match[1].split(/\r?\n/)) {
+    if (!line.trim() || line.startsWith("#"))
+      continue;
+    const field = /^([A-Za-z][A-Za-z0-9_-]*):[ \t]+(.+)$/.exec(line);
+    if (!field || fields.has(field[1]) || scalar(field[2]) === undefined)
+      throw new Error("nativeAgent.frontmatter requires unambiguous, unique flat scalar fields.");
+    fields.set(field[1], scalar(field[2]));
+  }
+  if (fields.get("name") !== name || fields.get("description") !== description)
+    throw new Error("nativeAgent.frontmatter name and description must match explicit metadata.");
+  return { name, description, frontmatter };
+}
+function renderNativeAgentContent(content, metadata) {
+  if (!metadata)
+    return content;
+  const value = normalizeNativeAgentMetadata(metadata);
+  if (/^\uFEFF?---[ \t]*\r?\n/.test(content))
+    throw new Error("Canonical role prose already contains frontmatter.");
+  return (value.frontmatter ?? `---
+name: ${JSON.stringify(value.name)}
+description: ${JSON.stringify(value.description)}
+---
+`) + content;
+}
 function diagnostic(severity, code, assetKey, message) {
   return { severity, code, assetKey, message };
 }
@@ -8008,6 +8156,7 @@ var init_asset_plan = __esm(() => {
   ASSET_CAPABILITY_DESCRIPTORS = Object.freeze([
     assetCapability("claude", "code", "skill", "supported", ["emit-file"], "Claude Code project or profile skill files."),
     assetCapability("claude", "code", "workflow", "supported", ["emit-file"], "Claude Code command and workflow files."),
+    assetCapability("claude", "code", "custom-agent", "supported", ["emit-file"], "Claude Code Markdown subagents with native frontmatter in agents/.", ">=2.1.276 <3.0.0"),
     assetCapability("claude", "code", "hook", "supported", ["emit-file"], "Claude Code hook configuration fragments."),
     assetCapability("claude", "code", "plugin", "conditional", ["install-marketplace"], "Claude marketplace installation requires an explicit installer."),
     assetCapability("codex", "cli", "skill", "supported", ["emit-file"], "Codex skill bundle files."),
@@ -8018,6 +8167,7 @@ var init_asset_plan = __esm(() => {
     assetCapability("opencode", "cli", "workflow", "supported", ["emit-file"], "OpenCode command/workflow files."),
     assetCapability("opencode", "cli", "plugin", "supported", ["emit-file"], "OpenCode local plugin modules."),
     assetCapability("opencode", "cli", "custom-agent", "supported", ["emit-file"], "OpenCode custom agent files."),
+    assetCapability("sumi", "cli", "custom-agent", "supported", ["emit-file"], "Sumi Markdown agent definitions in its explicit resolved config or project directory.", ">=0.2.22 <0.3.0"),
     assetCapability("codewith", "cli", "skill", "supported", ["emit-file"], "Codewith skill bundle files."),
     assetCapability("codewith", "cli", "plugin", "conditional", ["install-local", "install-marketplace"], "Codewith plugin installation requires an explicit installer."),
     assetCapability("aicopilot", "cli", "skill", "supported", ["emit-file"], "AICopilot discovered skill files."),
@@ -8050,6 +8200,7 @@ var init_asset_plan = __esm(() => {
     codex: "cli",
     cursor: "ide",
     opencode: "cli",
+    sumi: "cli",
     codewith: "cli",
     qwen: "cli",
     aicopilot: "cli",
@@ -8698,9 +8849,19 @@ function skippedSource(source, reason) {
   };
 }
 function normalizeSources(sources, tool, allowEmptySources) {
-  const normalized = sources.map((source, index) => {
+  const providerSkipped = [];
+  const normalized = sources.flatMap((source, index) => {
     if (!source.id.trim())
       throw new Error("Session instruction source id is required.");
+    if (source.targetProviders?.length && !providerTargetsTool(source.targetProviders, tool)) {
+      providerSkipped.push({
+        id: source.id,
+        label: source.label ?? source.id,
+        targetProviders: source.targetProviders,
+        reason: "instruction source targets a different provider"
+      });
+      return [];
+    }
     const floored = applyAgentOperatingRulesFloor(source, source.content ?? "");
     const content = filterProviderOnlyBlocks(floored.content, tool);
     const normalized2 = {
@@ -8719,7 +8880,7 @@ function normalizeSources(sources, tool, allowEmptySources) {
     if (!allowEmptySources && !normalized2.content.trim() && normalized2.resolvedRules.length === 0 && !hasPathReferences) {
       throw new Error(`Session instruction source "${source.id}" is empty. Pass --allow-empty-sources only for explicit empty renders.`);
     }
-    return normalized2;
+    return [normalized2];
   });
   const originalOrder = [...normalized].sort(compareSessionInstructionSources);
   const deduplicated = deduplicateSemanticPolicySources(normalized);
@@ -8727,7 +8888,7 @@ function normalizeSources(sources, tool, allowEmptySources) {
   validateTargetedReplacementSources(originalOrder, ordered, deduplicated.skipped, tool);
   rejectDuplicateSourceSlugs(ordered);
   rejectDuplicateRulePaths(ordered);
-  return { sources: ordered, skipped: deduplicated.skipped };
+  return { sources: ordered, skipped: [...providerSkipped, ...deduplicated.skipped] };
 }
 function compareSessionInstructionSources(a, b) {
   return SESSION_LAYER_RANK[a.resolvedLayer] - SESSION_LAYER_RANK[b.resolvedLayer] || a.resolvedOrder - b.resolvedOrder || a.id.localeCompare(b.id);
@@ -9155,7 +9316,7 @@ function buildCursorRuleFiles(targetHome, adapter, sources) {
     return [sourceFile, ...ruleFiles];
   });
 }
-function buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig) {
+function buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig, projectRoot) {
   const surface = adapter.providerSurface ?? "legacy-dual";
   const fragments = sources.flatMap((source, index) => [
     makeFile(targetHome, fragmentPath(adapter, index, source), "fragment", sectionForSource(source), [source.id]),
@@ -9175,13 +9336,13 @@ function buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfi
   ]);
   const existingConfigPath = joinTarget(targetHome, adapter.configFile);
   const selectedConfig = existsSync5(existingConfigPath) ? readOpenCodeConfig(readFileSync4(existingConfigPath, "utf8"), existingConfigPath) : providerConfig ? readOpenCodeConfig(providerConfig.content, providerConfig.sourceId) : {};
-  const preservedInstructions = normalizeOpenCodeInstructions(selectedConfig["instructions"]).filter((path) => !pathIsManagedOpenCodeInstruction(path, adapter.managedDir));
+  const preservedInstructions = normalizeOpenCodeInstructions(selectedConfig["instructions"]).filter((path) => !pathIsManagedOpenCodeInstruction(path, adapter.managedDir, targetHome, projectRoot));
   const config = {
     ...selectedConfig,
     $schema: typeof selectedConfig["$schema"] === "string" ? selectedConfig["$schema"] : "https://opencode.ai/config.json",
     instructions: [
       ...preservedInstructions,
-      ...fragments.map((file) => file.relativePath)
+      ...fragments.map((file) => file.path)
     ]
   };
   const configSourceIds = [
@@ -9224,9 +9385,62 @@ function normalizeOpenCodeInstructions(value) {
   }
   return value;
 }
-function pathIsManagedOpenCodeInstruction(path, managedDir) {
-  const normalized = posix2.normalize(path.replaceAll("\\", "/")).replace(/^\.\//, "");
-  return normalized === managedDir || normalized.startsWith(`${managedDir}/`);
+function pathIsManagedOpenCodeInstruction(reference, managedDir, targetHome, projectRoot) {
+  const normalizedManagedDir = posix2.normalize(managedDir.replaceAll("\\", "/"));
+  const candidates = canonicalOpenCodeInstructionPaths(reference, targetHome, projectRoot);
+  return candidates.some((candidate) => candidate === normalizedManagedDir || candidate.endsWith(`/${normalizedManagedDir}`) || candidate.includes(`/${normalizedManagedDir}/`));
+}
+function canonicalOpenCodeInstructionPaths(reference, targetHome, projectRoot) {
+  const portable = decodeOpenCodePathEscapes(reference.replaceAll("\\", "/")).replaceAll("\\", "/");
+  if (portable.includes("\x00")) {
+    throw new Error("OpenCode config instruction references cannot contain NUL bytes.");
+  }
+  const windowsAbsolute = /^[A-Za-z]:\//.test(portable);
+  const uriScheme = windowsAbsolute ? null : /^([A-Za-z][A-Za-z0-9+.-]*):/.exec(portable)?.[1]?.toLowerCase();
+  if (uriScheme && uriScheme !== "file")
+    return [];
+  if (uriScheme === "file") {
+    const fileReference = reference.replaceAll("\\", "/");
+    if (!/^file:\/\//i.test(fileReference)) {
+      throw new Error("OpenCode config contains an invalid file URL instruction reference.");
+    }
+    let url;
+    try {
+      url = new URL(fileReference);
+    } catch {
+      throw new Error("OpenCode config contains an invalid file URL instruction reference.");
+    }
+    if (url.protocol !== "file:" || url.username || url.password || url.port || url.search || url.hash) {
+      throw new Error("OpenCode config contains an invalid file URL instruction reference.");
+    }
+    const pathname = decodeOpenCodePathEscapes(url.pathname);
+    if (pathname.includes("\x00")) {
+      throw new Error("OpenCode config instruction references cannot contain NUL bytes.");
+    }
+    const host = url.hostname && url.hostname !== "localhost" ? `//${url.hostname}` : "";
+    return [normalizePortableOpenCodePath(`${host}${pathname}`)];
+  }
+  if (posix2.isAbsolute(portable) || windowsAbsolute || portable.startsWith("//")) {
+    return [normalizePortableOpenCodePath(portable)];
+  }
+  const roots = [
+    ...projectRoot ? [resolveSessionPath(projectRoot)] : [],
+    resolveSessionPath(targetHome)
+  ];
+  return [...new Set(roots.map((root) => normalizePortableOpenCodePath(posix2.join(root.replaceAll("\\", "/"), portable))))];
+}
+function decodeOpenCodePathEscapes(value) {
+  return value.replace(/(?:%[a-fA-F0-9]{2})+/g, (encoded) => {
+    try {
+      return decodeURIComponent(encoded);
+    } catch {
+      return encoded;
+    }
+  });
+}
+function normalizePortableOpenCodePath(value) {
+  const normalized = posix2.normalize(value.replaceAll("\\", "/"));
+  return normalized.startsWith("//") ? `/${normalized.replace(/^\/+/u, "")}` : normalized;
 }
 function buildAntigravityRuleFiles(targetHome, adapter, sources) {
   return sources.flatMap((source, index) => {
@@ -9280,7 +9494,7 @@ function makeAntigravityRuleFile(targetHome, relativePath, content, sourceIds) {
   }
   return file;
 }
-function buildFiles(targetHome, adapter, profile, sources, providerConfig, providerVersion) {
+function buildFiles(targetHome, adapter, profile, sources, providerConfig, providerVersion, projectRoot) {
   switch (adapter.mode) {
     case "native-imports":
       return buildNativeImportFiles(targetHome, adapter, profile, sources, providerVersion);
@@ -9289,7 +9503,7 @@ function buildFiles(targetHome, adapter, profile, sources, providerConfig, provi
     case "cursor-mdc":
       return buildCursorRuleFiles(targetHome, adapter, sources);
     case "opencode-instructions":
-      return buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig);
+      return buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig, projectRoot);
     case "antigravity-rules":
       return buildAntigravityRuleFiles(targetHome, adapter, sources);
     case "provider-rules":
@@ -9318,12 +9532,13 @@ function buildAssetFiles(input, targetHome, blocked) {
     if (!relativePath || relativePath === ".." || relativePath.startsWith("../") || isAbsolute3(relativePath)) {
       throw new Error(`Asset ${item.assetKey} is outside the session snapshot root; use a project-scoped session plan for atomic application.`);
     }
+    const renderedContent = renderNativeAgentContent(content, item.nativeAgent);
     return {
       path,
       relativePath: assertSafeRelativePath(relativePath),
       role: "asset",
-      content,
-      sha256: sha2566(content),
+      content: renderedContent,
+      sha256: sha2566(renderedContent),
       sourceIds: [item.sourceConfigId, item.assetId]
     };
   });
@@ -9332,6 +9547,11 @@ function isNativeProfileSessionTarget(input) {
   return (input.tool === "grok" || input.tool === "devin") && Boolean(input.targetHome?.trim()) && !input.projectRoot;
 }
 function adapterFor(input) {
+  if (input.tool === "sumi" && input.projectRoot) {
+    if (input.providerSurface)
+      throw new Error(`Provider surface ${input.providerSurface} is not valid for Sumi.`);
+    return Object.freeze({ ...SESSION_TOOL_ADAPTERS.sumi, projectScoped: true, envVar: undefined });
+  }
   if (input.tool === "opencode" && input.providerSurface) {
     if (input.providerSurface !== "opencode-config-instructions" && input.providerSurface !== "opencode-agents-md") {
       throw new Error(`Provider surface ${input.providerSurface} is not valid for OpenCode.`);
@@ -9373,7 +9593,7 @@ function adapterFor(input) {
   }
   if (input.tool !== "codewith")
     return SESSION_TOOL_ADAPTERS[input.tool];
-  const gatedNativeImports = input.codewithNativeImports === true || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "1" || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "true";
+  const gatedNativeImports = input.codewithNativeImports ?? (process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "1" || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "true");
   return gatedNativeImports ? CODEWITH_NATIVE_ADAPTER : CODEWITH_FLATTENED_ADAPTER;
 }
 function getHomeDir() {
@@ -9424,6 +9644,13 @@ function assertSafeTargetRoot(targetHome) {
   return normalized;
 }
 function resolveRenderTarget(input, adapter) {
+  if (input.tool === "sumi" && !input.projectRoot && !input.targetHome?.trim()) {
+    return {
+      targetHome: defaultTargetHome(input.tool, input.profile, input.sessionId),
+      targetKind: "blocked",
+      blockers: ["Sumi requires --target-home from `sumi debug paths config`, or --project-root for repository AGENTS.md."]
+    };
+  }
   if (adapter.projectScoped) {
     if (!input.projectRoot) {
       const label = input.tool === "cursor" ? "Cursor rules" : input.tool === "antigravity" ? "Antigravity rules" : `${adapter.description.split(".")[0]} files`;
@@ -9490,7 +9717,7 @@ function resolveSessionTargetOwnership(input, target) {
     tool: input.tool,
     profile: input.profile,
     targetHome: target.targetHome,
-    projectRoot: null,
+    projectRoot: input.tool === "opencode" && input.projectRoot ? resolveSessionPath(input.projectRoot) : null,
     ownedBy: "open-configs",
     canonicalOwner: "instructions",
     writer: {
@@ -9525,6 +9752,14 @@ function planSessionRender(input) {
   const normalized = normalizeSources(input.sources, input.tool, allowEmptySources);
   const composed = composeSources(normalized.sources, input.tool);
   const orderedSources = composed.sources;
+  if (input.tool === "sumi") {
+    for (const source of orderedSources) {
+      const activation = source.metadata?.["activation"];
+      if (source.globs?.length || source.resolvedRules.some((rule) => rule.globs?.length) || activation?.mode && activation.mode !== "always") {
+        throw new Error(`Sumi AGENTS.md cannot preserve conditional activation for source ${source.id}; compile a profile with an explicit supported fallback.`);
+      }
+    }
+  }
   const skippedSources = [
     ...input.skippedSources ?? [],
     ...normalized.skipped,
@@ -9543,7 +9778,7 @@ function planSessionRender(input) {
   if (input.providerConfig && input.tool !== "opencode") {
     throw new Error("Provider base config is supported only for OpenCode session renders.");
   }
-  const baseFiles = blocked ? [] : buildFiles(targetHome, adapter, input.profile, orderedSources, input.providerConfig, input.provider_version);
+  const baseFiles = blocked ? [] : buildFiles(targetHome, adapter, input.profile, orderedSources, input.providerConfig, input.provider_version, input.projectRoot);
   const projectContext = blocked ? null : composeProjectContextSessionRender({
     tool: input.tool,
     adapter_mode: adapter.mode,
@@ -9568,6 +9803,7 @@ function planSessionRender(input) {
     adapterMode: adapter.mode,
     profile: input.profile,
     sessionId: input.sessionId ?? null,
+    ...input.refreshSelector ? { refreshSelector: input.refreshSelector } : {},
     targetHome,
     targetKind,
     targetOwner,
@@ -9643,6 +9879,7 @@ function planSessionRender(input) {
           mutationMode: item.mutationMode,
           destination: item.destination,
           digest: item.source.digest,
+          ...item.nativeAgent ? { nativeAgent: item.nativeAgent } : {},
           exactOnceKey: item.exactOnceKey
         }))
       }
@@ -9741,8 +9978,9 @@ function selectProfileConfigsForSessionRender(configs, tool) {
         skippedSources.push(skippedProfileConfig(config, ["opencode"], "provider settings belong to OpenCode"));
       continue;
     }
-    if (config.category !== "rules") {
-      skippedSources.push(skippedProfileConfig(config, [], config.kind === "reference" ? "reference config is not a provider instruction source" : "profile config is handled by direct config preview/apply"));
+    const sourceRejection = instructionSourceRejection(config);
+    if (sourceRejection) {
+      skippedSources.push(skippedProfileConfig(config, [], sourceRejection));
       continue;
     }
     const output = config.outputs.find((candidate) => candidate.agent === tool);
@@ -9750,7 +9988,7 @@ function selectProfileConfigsForSessionRender(configs, tool) {
       skippedSources.push(skippedProfileConfig(config, [config.agent], "rule targets a different provider"));
       continue;
     }
-    const selectedContent = output ? applyTransform(config, output, { configs }) : config.content;
+    const selectedContent = output ? applyTransform(config, output, { configs: [config] }) : config.content;
     sources.push({
       config,
       source: sourceFromConfig({ ...config, content: selectedContent }, sources.length)
@@ -10159,6 +10397,7 @@ var init_session_render = __esm(() => {
     "codex",
     "cursor",
     "opencode",
+    "sumi",
     "codewith",
     "qwen",
     "aicopilot",
@@ -10247,6 +10486,15 @@ var init_session_render = __esm(() => {
       description: "OpenCode AGENTS.md plus opencode.json instructions pointing at managed fragments.",
       providerSurface: "legacy-dual"
     },
+    sumi: {
+      tool: "sumi",
+      mode: "flattened-markdown",
+      indexFile: "AGENTS.md",
+      managedDir: SESSION_RENDER_INSTRUCTIONS_MANAGED_DIR,
+      envVar: "SUMI_CONFIG_DIR",
+      nativeImports: false,
+      description: "Sumi native AGENTS.md in the explicit resolved config directory or project root."
+    },
     aicopilot: {
       tool: "aicopilot",
       mode: "flattened-markdown",
@@ -10535,12 +10783,22 @@ function compileInstructionGraph(input) {
     const selector = binding.providers?.find((entry) => entry.provider === input.context.provider || entry.provider === "global");
     if (binding.providers?.length && !selector)
       continue;
+    const output = config.outputs.find((entry) => entry.agent === input.context.provider);
+    if (!binding.providers?.length && config.agent !== "global" && config.agent !== input.context.provider && !output) {
+      diagnostics.push({ severity: "info", code: "SOURCE_PROVIDER_NOT_SELECTED", config_id: configId, message: `${config.slug} targets ${config.agent}, not ${input.context.provider}.` });
+      continue;
+    }
     if (selector?.version_range && !providerVersionSatisfies(input.context.provider_version, selector.version_range)) {
       diagnostics.push({ severity: binding.required ? "error" : "warning", code: "PROVIDER_SELECTOR_VERSION_MISMATCH", config_id: configId, message: `${config.slug} requires ${input.context.provider} ${selector.version_range}; current version is ${input.context.provider_version}.` });
       continue;
     }
     if (!activationMatches(binding.activation, config, input.context))
       continue;
+    const rejection = instructionSourceRejection(config);
+    if (rejection) {
+      diagnostics.push({ severity: !binding.required && binding.fallback === "omit" ? "warning" : "error", code: "SOURCE_NOT_INSTRUCTION", config_id: configId, message: `${config.slug}: ${rejection}.` });
+      continue;
+    }
     if (capability2.activation_modes.includes(binding.activation.mode)) {
       selected.add(configId);
       effective.set(configId, binding.activation);
@@ -10615,7 +10873,9 @@ function compileInstructionGraph(input) {
   assertExactOnce(units, artifacts);
   const sources = units.map((unit, index) => {
     const config = configs.get(unit.config_id);
-    return sourceForUnit(config, unit, index);
+    const output = config.outputs.find((entry) => entry.agent === input.context.provider);
+    const content = output ? applyTransform(config, output, { configs: [config] }) : config.content;
+    return sourceForUnit({ ...config, content }, unit, index);
   });
   const planWithoutHash = {
     schema: INSTRUCTION_GRAPH_PLAN_SCHEMA,
@@ -10843,6 +11103,7 @@ var init_instruction_graph = __esm(() => {
   init_types();
   init_session_render();
   init_asset_plan();
+  init_transforms();
   COMMON_FALLBACKS = ["fail", "flatten", "promote-always", "omit"];
   DEFAULT_PROVIDER_CAPABILITIES = Object.freeze({
     claude: capability("claude", ">=1.0.0", "native-import", "CLAUDE.md @ imports plus path-gated rules", {
@@ -10854,6 +11115,7 @@ var init_instruction_graph = __esm(() => {
     codex: capability("codex", ">=0.1.0", "flattened", "AGENTS.md", { asset_surface: "cli" }),
     cursor: capability("cursor", ">=1.0.0", "cursor-rule", ".cursor/rules/*.mdc", { activation_modes: ["always", "glob"], conditional_artifacts: true, asset_surface: "ide" }),
     opencode: capability("opencode", ">=1.0.0", "managed-fragment", "opencode.json instructions", { provider_variant: "v1-instructions", session_surface: "opencode-config-instructions" }),
+    sumi: capability("sumi", ">=0.2.22 <0.3.0", "flattened", "AGENTS.md"),
     codewith: capability("codewith", ">=0.1.0", "flattened", "CODEWITH.md"),
     qwen: capability("qwen", ">=0.1.0", "flattened", "QWEN.md"),
     aicopilot: capability("aicopilot", ">=0.1.0", "flattened", "AICOPILOT.md"),
@@ -13464,6 +13726,7 @@ function listConfigSummariesPage(filter = {}, options = {}, db) {
   })), total, normalized);
 }
 function updateConfig(idOrSlug, input, db) {
+  validateExpectedConfigVersion(input.expected_version);
   const d = db || getDatabase();
   const existing = getConfig(idOrSlug, d);
   const ts = now();
@@ -13519,7 +13782,15 @@ function updateConfig(idOrSlug, input, db) {
   }
   return d.transaction(() => {
     params.push(existing.id);
-    d.run(`UPDATE configs SET ${updates.join(", ")} WHERE id = ?`, params);
+    const condition = input.expected_version === undefined ? "" : " AND version = ?";
+    if (input.expected_version !== undefined)
+      params.push(input.expected_version);
+    const result = d.run(`UPDATE configs SET ${updates.join(", ")} WHERE id = ?${condition}`, params);
+    if (result.changes !== 1) {
+      if (input.expected_version !== undefined)
+        throw new ConfigVersionConflictError(existing.id, input.expected_version);
+      throw new ConfigNotFoundError(existing.id);
+    }
     const updated = getConfigById(existing.id, d);
     createSnapshot(updated.id, updated.content, updated.version, d);
     return updated;
@@ -13638,7 +13909,7 @@ function detectMachineContext(overrides = {}) {
     created_at: "",
     os_family: osFamily,
     home_dir: homeDir6,
-    workspace_root: overrides.workspace_root ?? join10(homeDir6, osFamily === "macos" ? "Workspace" : "workspace"),
+    workspace_root: overrides.workspace_root ?? "",
     bun_bin_dir: bunBinDir,
     bun_path: overrides.bun_path ?? defaultBunPath,
     path_prefix: overrides.path_prefix ?? (osFamily === "macos" ? `${join10("/opt", "homebrew", "bin")}:${bunBinDir}` : bunBinDir)
@@ -13651,7 +13922,7 @@ function machineContextToVariables(machine) {
     OS_FAMILY: machine.os_family,
     ARCH: machine.arch ?? "",
     HOME_DIR: machine.home_dir,
-    WORKSPACE_ROOT: machine.workspace_root,
+    ...machine.workspace_root ? { WORKSPACE_ROOT: machine.workspace_root } : {},
     BUN_BIN_DIR: machine.bun_bin_dir,
     BUN_PATH: machine.bun_path,
     PATH_PREFIX: machine.path_prefix
@@ -14418,7 +14689,9 @@ class CloudConfigStore {
     return data.config;
   }
   async updateConfig(idOrSlug, input) {
-    const { data } = await this.request("PATCH", `/configs/${encodeURIComponent(idOrSlug)}`, input);
+    validateExpectedConfigVersion(input.expected_version);
+    const conditional = input.expected_version !== undefined;
+    const { data } = await this.request(conditional ? "POST" : "PATCH", `/configs/${encodeURIComponent(idOrSlug)}${conditional ? "/conditional-update" : ""}`, input);
     return data.config;
   }
   async deleteConfig(idOrSlug) {
@@ -14495,7 +14768,7 @@ class CloudConfigStore {
       throw new ProfileNotFoundError(idOrSlug);
     return parseBoundedOrLegacyPage(data.configs, data.profile.configs, normalized, "profile membership");
   }
-  async getProfileConfigBindings(idOrSlug) {
+  async getProfileConfigBindings(idOrSlug, options = {}) {
     let routeMissing = false;
     const bindings = await aggregateBoundedCollection("profile config bindings", async (cursor) => {
       const normalized = normalizeBoundedReadOptions({ limit: 100, cursor });
@@ -14508,6 +14781,8 @@ class CloudConfigStore {
     }, (binding) => `${binding.profile_id}\x00${binding.config_id}`);
     if (!routeMissing)
       return bindings;
+    if (options.requireExplicit)
+      throw new Error("HOSTED_BINDINGS_REQUIRED: profile config binding route is unavailable; refusing legacy activation fallback.");
     const profile = await this.getProfile(idOrSlug);
     const configs = await this.getProfileConfigs(idOrSlug);
     return configs.map((config, sort_order) => ({
@@ -14572,7 +14847,7 @@ class CloudConfigStore {
   async removeConfigFromProfile(profileIdOrSlug, configId) {
     await this.request("DELETE", `/profiles/${encodeURIComponent(profileIdOrSlug)}/configs/${encodeURIComponent(configId)}`, undefined, { allow404: true });
   }
-  async getProfileAssetBindings(profileIdOrSlug) {
+  async getProfileAssetBindings(profileIdOrSlug, options = {}) {
     let routeMissing = false;
     const assets = await aggregateBoundedCollection("profile asset bindings", async (cursor) => {
       const normalized = normalizeBoundedReadOptions({ limit: 100, cursor });
@@ -14585,6 +14860,8 @@ class CloudConfigStore {
     }, (asset) => `${asset.profile_id}\x00${asset.binding.assetKey}`);
     if (!routeMissing)
       return assets;
+    if (options.requireExplicit)
+      throw new Error("HOSTED_ASSETS_REQUIRED: profile asset binding route is unavailable; refusing an empty asset fallback.");
     await this.getProfile(profileIdOrSlug);
     return [];
   }
@@ -14709,7 +14986,7 @@ init_types();
 
 // src/status.ts
 init_config_store();
-import { existsSync as existsSync12, readFileSync as readFileSync11 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync10 } from "fs";
 
 // src/lib/apply.ts
 init_types();
@@ -15259,19 +15536,9 @@ function getPackageVersion() {
 }
 
 // src/lib/managed-skill-runtimes.ts
-import { createHash as createHash8 } from "crypto";
-import { spawnSync as spawnSync3 } from "child_process";
-import {
-  existsSync as existsSync11,
-  lstatSync as lstatSync4,
-  mkdirSync as mkdirSync4,
-  readFileSync as readFileSync10,
-  renameSync as renameSync2,
-  rmSync as rmSync3,
-  writeFileSync as writeFileSync3
-} from "fs";
+import { lstatSync as lstatSync4 } from "fs";
 import { homedir as homedir8 } from "os";
-import { dirname as dirname8, join as join14, parse as parse4, relative as relative5, resolve as resolve10 } from "path";
+import { join as join14, resolve as resolve10 } from "path";
 var INBOX_CONVERSATIONS_MINIMUM_VERSION = "0.5.28";
 var INBOX_SKILL_MARKERS = [
   [".claude", "skills", "inbox", "SKILL.md"],
@@ -15280,369 +15547,67 @@ var INBOX_SKILL_MARKERS = [
   [".config", "opencode", "skills", "inbox", "SKILL.md"],
   [".cursor", "skills", "inbox", "SKILL.md"]
 ];
-var REQUIRED_WATCH_FLAGS = ["--from <agent>", "--all", "--full-content"];
-function sha2568(content) {
-  return createHash8("sha256").update(content).digest("hex");
-}
-function lstatOrNull(path) {
-  try {
-    return lstatSync4(path);
-  } catch {
-    return null;
-  }
-}
-function findSymlinkedAncestor(path) {
-  const normalized = resolve10(path);
-  const parsed = parse4(normalized);
-  let current = parsed.root;
-  const rel = relative5(parsed.root, normalized);
-  for (const segment of rel.split(/[\\/]+/).filter(Boolean)) {
+function needsMigrationReview(homeDir6, parts) {
+  let current = resolve10(homeDir6);
+  const absolute = join14(current, ...parts);
+  for (const segment of parts) {
     current = join14(current, segment);
-    if (!existsSync11(current))
-      return null;
-    if (lstatSync4(current).isSymbolicLink())
-      return current;
-  }
-  return null;
-}
-function assertNoSymlinkAncestors2(path) {
-  const found = findSymlinkedAncestor(path);
-  if (found !== null) {
-    throw new Error(`managed skill path uses a symlink ancestor: ${found}`);
-  }
-}
-function packagedInboxSkillPath(explicitPath) {
-  if (explicitPath)
-    return explicitPath;
-  throw new Error("Bundled skill contracts are retired; use the Skills CLI to manage private skills");
-}
-function readCanonicalSkill(explicitPath) {
-  const assetPath = packagedInboxSkillPath(explicitPath);
-  const stat = lstatOrNull(assetPath);
-  if (!stat?.isFile()) {
-    throw new Error("packaged inbox skill contract is not a regular file");
-  }
-  const content = readFileSync10(assetPath, "utf8");
-  if (!content.includes("conversations watch --from <agent> --all")) {
-    throw new Error("packaged inbox skill contract does not declare the canonical conversations watcher");
-  }
-  if (!content.includes("There is no separate")) {
-    throw new Error("packaged inbox skill contract does not retire the legacy executable");
-  }
-  return { content, sha256: sha2568(content) };
-}
-function runProbe(command, args) {
-  const result = spawnSync3(command, args, {
-    encoding: "utf8",
-    timeout: 5000,
-    stdio: ["ignore", "pipe", "pipe"]
-  });
-  if (result.error || result.status !== 0) {
-    return { ok: false, output: "" };
-  }
-  return {
-    ok: true,
-    output: `${result.stdout ?? ""}
-${result.stderr ?? ""}`.trim()
-  };
-}
-function parseVersion(output) {
-  return output.match(/\b(\d+\.\d+\.\d+)\b/)?.[1] ?? null;
-}
-function compareVersions(left, right) {
-  const a = left.split(".").map(Number);
-  const b = right.split(".").map(Number);
-  for (let i = 0;i < Math.max(a.length, b.length); i++) {
-    const delta = (a[i] ?? 0) - (b[i] ?? 0);
-    if (delta !== 0)
-      return delta;
-  }
-  return 0;
-}
-function inspectSkillMarkers(homeDir6) {
-  return INBOX_SKILL_MARKERS.map((parts) => join14(homeDir6, ...parts)).map((path) => {
-    const stat = lstatOrNull(path);
-    if (!stat)
-      return null;
-    if (!stat.isFile()) {
-      return { path, content: null, mode: null, regular: false };
+    let stat;
+    try {
+      stat = lstatSync4(current);
+    } catch (error) {
+      if (error.code === "ENOENT")
+        return false;
+      throw error;
     }
-    return {
-      path,
-      content: readFileSync10(path, "utf8"),
-      mode: stat.mode & 511,
-      regular: true
-    };
-  }).filter((snapshot) => snapshot !== null);
+    if (stat.isSymbolicLink() || current !== absolute && !stat.isDirectory())
+      return true;
+  }
+  return true;
 }
-function inspectInbox(options) {
+function inspectLegacyInbox(options) {
   const homeDir6 = options.homeDir ?? homedir8();
-  const runtimeCommand = options.conversationsCommand ?? "conversations";
-  const snapshots = inspectSkillMarkers(homeDir6);
-  const skillPresent = snapshots.length > 0;
-  let canonicalContent = null;
-  let canonicalSha256 = null;
-  let assetError = null;
-  try {
-    const canonical = readCanonicalSkill(options.assetPath);
-    canonicalContent = canonical.content;
-    canonicalSha256 = canonical.sha256;
-  } catch (error) {
-    assetError = error instanceof Error ? error.message : String(error);
-  }
-  const versionProbe = skillPresent ? runProbe(runtimeCommand, ["--version"]) : { ok: false, output: "" };
-  const helpProbe = versionProbe.ok ? runProbe(runtimeCommand, ["watch", "--help"]) : { ok: false, output: "" };
-  const runtimeVersion = versionProbe.ok ? parseVersion(versionProbe.output) : null;
-  const supportsFrom = helpProbe.ok && helpProbe.output.includes(REQUIRED_WATCH_FLAGS[0]);
-  const supportsAll = helpProbe.ok && helpProbe.output.includes(REQUIRED_WATCH_FLAGS[1]);
-  const supportsFullContent = helpProbe.ok && helpProbe.output.includes(REQUIRED_WATCH_FLAGS[2]);
-  const packageReady = versionProbe.ok && runtimeVersion !== null && compareVersions(runtimeVersion, INBOX_CONVERSATIONS_MINIMUM_VERSION) >= 0 && helpProbe.ok && supportsFrom && supportsAll && supportsFullContent;
-  const heartbeatProbe = skillPresent && packageReady && options.agent ? runProbe(runtimeCommand, ["agents", "heartbeat", "--from", options.agent, "--json"]) : null;
-  const hostedHeartbeat = heartbeatProbe === null ? "unverified" : heartbeatProbe.ok ? "passed" : "failed";
-  const deliveryVerified = hostedHeartbeat === "passed" && options.deliveryVerified === true;
-  const staleMarkers = canonicalContent === null ? snapshots.map((snapshot) => snapshot.path) : snapshots.filter((snapshot) => !snapshot.regular || snapshot.content !== canonicalContent).map((snapshot) => snapshot.path);
-  let reason = "skill not installed";
-  if (skillPresent) {
-    const nonRegular = snapshots.some((snapshot) => !snapshot.regular);
-    const symlinkAncestor = snapshots.map((snapshot) => snapshot.path).map((path) => findSymlinkedAncestor(dirname8(path))).find((found) => found !== null);
-    if (nonRegular)
-      reason = "managed skill target is not a regular file";
-    else if (symlinkAncestor)
-      reason = `managed skill path uses a symlink ancestor: ${symlinkAncestor}`;
-    else if (assetError)
-      reason = assetError;
-    else if (!versionProbe.ok)
-      reason = "conversations command unavailable";
-    else if (!runtimeVersion)
-      reason = "conversations version is unreadable";
-    else if (compareVersions(runtimeVersion, INBOX_CONVERSATIONS_MINIMUM_VERSION) < 0) {
-      reason = `conversations ${runtimeVersion} is older than ${INBOX_CONVERSATIONS_MINIMUM_VERSION}`;
-    } else if (!helpProbe.ok)
-      reason = "conversations watch help is unavailable";
-    else if (!supportsFrom || !supportsAll || !supportsFullContent) {
-      const missing = [
-        !supportsFrom ? "--from" : null,
-        !supportsAll ? "--all" : null,
-        !supportsFullContent ? "--full-content" : null
-      ].filter((flag) => flag !== null);
-      reason = `conversations watch is missing required flags: ${missing.join(", ")}`;
-    } else if (staleMarkers.length > 0)
-      reason = "skill contract stale";
-    else if (hostedHeartbeat === "failed")
-      reason = "hosted heartbeat failed; manual fallback required";
-    else if (hostedHeartbeat === "unverified")
-      reason = "hosted heartbeat unverified; manual fallback required";
-    else if (!deliveryVerified)
-      reason = "hosted heartbeat passed; channel and DM delivery verification required";
-    else
-      reason = "ready";
-  }
+  const markers = INBOX_SKILL_MARKERS.filter((parts) => needsMigrationReview(homeDir6, parts)).map((parts) => join14(homeDir6, ...parts));
+  const present = markers.length > 0;
   return {
-    status: {
-      skill: "inbox",
-      runtime: "conversations watch",
-      minimum_version: INBOX_CONVERSATIONS_MINIMUM_VERSION,
-      skill_present: skillPresent,
-      skill_markers: snapshots.map((snapshot) => snapshot.path),
-      skill_contracts_current: snapshots.length - staleMarkers.length,
-      stale_skill_markers: staleMarkers,
-      expected_skill_sha256: canonicalSha256,
-      runtime_command: runtimeCommand,
-      runtime_present: versionProbe.ok,
-      runtime_version: runtimeVersion,
-      watch_supports_from: supportsFrom,
-      watch_supports_all: supportsAll,
-      watch_supports_full_content: supportsFullContent,
-      hosted_heartbeat: hostedHeartbeat,
-      delivery_verified: deliveryVerified,
-      manual_fallback_ready: skillPresent && staleMarkers.length === 0 && packageReady,
-      healthy: !skillPresent || reason === "ready",
-      reason
-    },
-    canonicalContent,
-    snapshots
+    skill: "inbox",
+    runtime: "conversations watch",
+    minimum_version: INBOX_CONVERSATIONS_MINIMUM_VERSION,
+    skill_present: present,
+    skill_markers: markers,
+    skill_contracts_current: 0,
+    stale_skill_markers: markers,
+    expected_skill_sha256: null,
+    runtime_command: options.conversationsCommand ?? "conversations",
+    runtime_present: false,
+    runtime_version: null,
+    watch_supports_from: false,
+    watch_supports_all: false,
+    watch_supports_full_content: false,
+    hosted_heartbeat: "unverified",
+    delivery_verified: false,
+    manual_fallback_ready: false,
+    healthy: !present,
+    reason: present ? "Native Inbox skill management is retired; use the Skills CLI to review skills migrate native, then sync and load the selected skills" : "No legacy native Inbox skill found; skill availability is managed by the Skills CLI"
   };
 }
 function inspectManagedSkillRuntimes(options = {}) {
-  const runtime = inspectInbox(options).status;
-  const installed = runtime.skill_present ? [runtime] : [];
+  const runtime = inspectLegacyInbox(options);
   return {
     runtimes: [runtime],
-    skills_present: installed.length,
-    healthy: installed.filter((item) => item.healthy).length,
-    missing: installed.filter((item) => !item.healthy).length
-  };
-}
-function runtimeReadyForWrite(status) {
-  return status.runtime_present && status.runtime_version !== null && compareVersions(status.runtime_version, INBOX_CONVERSATIONS_MINIMUM_VERSION) >= 0 && status.watch_supports_from && status.watch_supports_all && status.watch_supports_full_content;
-}
-function projectUpdatedStatus(status, contractCount) {
-  const healthy = status.hosted_heartbeat === "passed" && status.delivery_verified;
-  return {
-    ...status,
-    skill_contracts_current: contractCount,
-    stale_skill_markers: [],
-    manual_fallback_ready: true,
-    healthy,
-    reason: healthy ? "ready" : status.hosted_heartbeat === "failed" ? "hosted heartbeat failed; manual fallback required" : status.hosted_heartbeat === "unverified" ? "hosted heartbeat unverified; manual fallback required" : "hosted heartbeat passed; channel and DM delivery verification required"
+    skills_present: runtime.skill_present ? 1 : 0,
+    healthy: 0,
+    missing: runtime.skill_present ? 1 : 0
   };
 }
-function cleanup(path) {
-  rmSync3(path, { force: true });
-}
-function writeAtomic(path, content, mode) {
-  assertNoSymlinkAncestors2(dirname8(path));
-  const tempPath = `${path}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`;
-  try {
-    mkdirSync4(dirname8(path), { recursive: true, mode: 493 });
-    writeFileSync3(tempPath, content, { mode, flag: "wx" });
-    renameSync2(tempPath, path);
-  } finally {
-    cleanup(tempPath);
-  }
-}
-var DEFAULT_SKILL_WRITE_FILE_OPERATIONS = {
-  lstat: lstatOrNull,
-  read: (path) => readFileSync10(path, "utf8"),
-  write: writeAtomic
-};
-function writeSkillContractsTransactional(snapshots, canonicalContent, fileOperations = DEFAULT_SKILL_WRITE_FILE_OPERATIONS) {
-  const written = [];
-  try {
-    for (const snapshot of snapshots) {
-      const currentStat = fileOperations.lstat(snapshot.path);
-      if (!currentStat?.isFile() || fileOperations.read(snapshot.path) !== snapshot.content) {
-        throw new Error("managed skill changed after inspection; refusing a stale write");
-      }
-      fileOperations.write(snapshot.path, canonicalContent, snapshot.mode);
-      written.push(snapshot);
-    }
-    return { ok: true, error: null, rollback_conflicts: [] };
-  } catch (error) {
-    const rollbackConflicts = [];
-    for (const snapshot of written.reverse()) {
-      const currentStat = fileOperations.lstat(snapshot.path);
-      if (!currentStat?.isFile()) {
-        rollbackConflicts.push(`${snapshot.path}: no longer a regular file`);
-        continue;
-      }
-      let currentContent;
-      try {
-        currentContent = fileOperations.read(snapshot.path);
-      } catch {
-        rollbackConflicts.push(`${snapshot.path}: could not read the current file`);
-        continue;
-      }
-      if (currentContent !== canonicalContent) {
-        rollbackConflicts.push(`${snapshot.path}: changed after this reconciliation wrote it`);
-        continue;
-      }
-      try {
-        fileOperations.write(snapshot.path, snapshot.content, snapshot.mode);
-      } catch {
-        rollbackConflicts.push(`${snapshot.path}: still owned but could not be restored`);
-      }
-    }
-    return {
-      ok: false,
-      error: error instanceof Error ? error.message : String(error),
-      rollback_conflicts: rollbackConflicts
-    };
-  }
-}
 async function reconcileManagedSkillRuntimes(options = {}) {
+  const runtime = inspectLegacyInbox(options);
   const dryRun = options.dryRun ?? false;
-  const before = inspectInbox(options);
-  const status = before.status;
-  if (!status.skill_present) {
-    return {
-      runtimes: [{ ...status, action: "skipped", dry_run: dryRun, skill_contracts_changed: 0 }],
-      changed: 0,
-      failed: 0,
-      dry_run: dryRun
-    };
-  }
-  if (before.snapshots.some((snapshot) => !snapshot.regular)) {
-    return {
-      runtimes: [{ ...status, action: "failed", dry_run: dryRun, skill_contracts_changed: 0 }],
-      changed: 0,
-      failed: 1,
-      dry_run: dryRun
-    };
-  }
-  const symlinkedAncestor = before.snapshots.map((snapshot) => snapshot.path).map((path) => findSymlinkedAncestor(dirname8(path))).find((found) => found !== null);
-  if (symlinkedAncestor) {
-    return {
-      runtimes: [{ ...status, action: "failed", dry_run: dryRun, skill_contracts_changed: 0 }],
-      changed: 0,
-      failed: 1,
-      dry_run: dryRun
-    };
-  }
-  if (!before.canonicalContent || !runtimeReadyForWrite(status)) {
-    return {
-      runtimes: [{ ...status, action: "failed", dry_run: dryRun, skill_contracts_changed: 0 }],
-      changed: 0,
-      failed: 1,
-      dry_run: dryRun
-    };
-  }
-  const staleSnapshots = before.snapshots.filter((snapshot) => snapshot.content !== before.canonicalContent);
-  if (staleSnapshots.length === 0) {
-    return {
-      runtimes: [{ ...status, action: "unchanged", dry_run: dryRun, skill_contracts_changed: 0 }],
-      changed: 0,
-      failed: 0,
-      dry_run: dryRun
-    };
-  }
-  if (dryRun) {
-    const projected = projectUpdatedStatus(status, before.snapshots.length);
-    return {
-      runtimes: [{
-        ...projected,
-        action: "update",
-        dry_run: true,
-        skill_contracts_changed: staleSnapshots.length
-      }],
-      changed: 1,
-      failed: 0,
-      dry_run: true
-    };
-  }
-  const transaction = writeSkillContractsTransactional(staleSnapshots.map((snapshot) => ({
-    path: snapshot.path,
-    content: snapshot.content,
-    mode: snapshot.mode ?? 420
-  })), before.canonicalContent);
-  if (!transaction.ok) {
-    const rollbackConflictReason = transaction.rollback_conflicts.length > 0 ? `; rollback conflicts: ${transaction.rollback_conflicts.join("; ")}` : "";
-    const reason = `${transaction.error ?? "managed skill reconciliation failed"}${rollbackConflictReason}`;
-    return {
-      runtimes: [{
-        ...status,
-        action: "failed",
-        dry_run: false,
-        skill_contracts_changed: 0,
-        reason
-      }],
-      changed: 0,
-      failed: 1,
-      dry_run: false
-    };
-  }
-  const after = inspectInbox(options).status;
-  const accepted = after.healthy || after.manual_fallback_ready;
   return {
-    runtimes: [{
-      ...after,
-      action: accepted ? "update" : "failed",
-      dry_run: false,
-      skill_contracts_changed: accepted ? staleSnapshots.length : 0
-    }],
-    changed: accepted ? 1 : 0,
-    failed: accepted ? 0 : 1,
-    dry_run: false
+    runtimes: [{ ...runtime, action: runtime.skill_present ? "failed" : "skipped", dry_run: dryRun, skill_contracts_changed: 0 }],
+    changed: 0,
+    failed: runtime.skill_present ? 1 : 0,
+    dry_run: dryRun
   };
 }
 
@@ -15706,11 +15671,11 @@ async function getConfigsStatus(store = resolveConfigStore(), options = {}) {
       continue;
     knownTargets += 1;
     const targetPath = expandPath(config.target_path);
-    if (!existsSync12(targetPath)) {
+    if (!existsSync11(targetPath)) {
       missingTargets += 1;
       continue;
     }
-    const disk = readFileSync11(targetPath, "utf-8");
+    const disk = readFileSync10(targetPath, "utf-8");
     const { content: redactedDisk } = redactContent(disk, redactFormatForTarget(config.target_path, config.format));
     if (redactedDisk !== config.content) {
       driftedTargets += 1;
@@ -15801,8 +15766,8 @@ async function getConfigsStatus(store = resolveConfigStore(), options = {}) {
   };
 }
 // src/lib/provider-context.ts
-import { createHash as createHash9 } from "crypto";
-import { existsSync as existsSync13, mkdirSync as mkdirSync5, readFileSync as readFileSync12, writeFileSync as writeFileSync4 } from "fs";
+import { createHash as createHash8 } from "crypto";
+import { existsSync as existsSync12, mkdirSync as mkdirSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync3 } from "fs";
 import { join as join15 } from "path";
 var PROVIDER_CONTEXT_DIR = ".hasna/provider-context";
 var PROVIDER_CONTEXT_MANIFEST = "manifest.json";
@@ -15938,8 +15903,8 @@ function renderPerEndpointFragment(entry) {
 function renderProviderFragment(entry) {
   return entry ? renderPerEndpointFragment(entry) : INVARIANT_FRAGMENT;
 }
-function sha2569(content) {
-  return createHash9("sha256").update(content).digest("hex");
+function sha2568(content) {
+  return createHash8("sha256").update(content).digest("hex");
 }
 function resolveAndRenderProviderContext(opts) {
   const entry = matchProviderEndpoint(opts.origin);
@@ -15949,17 +15914,17 @@ function resolveAndRenderProviderContext(opts) {
   const reason = entry === null && opts.rawEndpoint ? originAccepted ? `endpoint "${recordedEndpoint}" is not in the provider-context registry; using the invariant fragment` : "endpoint rejected (embedded credentials or unparseable); using the invariant fragment" : null;
   const content = renderProviderFragment(entry);
   const dir = join15(opts.homeDir, PROVIDER_CONTEXT_DIR);
-  if (!existsSync13(dir))
-    mkdirSync5(dir, { recursive: true });
+  if (!existsSync12(dir))
+    mkdirSync4(dir, { recursive: true });
   const filename = `${entry ? entry.key : "invariant"}.md`;
   const fragmentPath2 = join15(dir, filename);
-  const fragmentSha256 = sha2569(content);
-  writeFileSync4(fragmentPath2, content, "utf8");
+  const fragmentSha256 = sha2568(content);
+  writeFileSync3(fragmentPath2, content, "utf8");
   const manifestPath = join15(dir, PROVIDER_CONTEXT_MANIFEST);
   let manifest = { schema: PROVIDER_CONTEXT_SCHEMA, fragments: {} };
   try {
-    if (existsSync13(manifestPath)) {
-      const parsed = JSON.parse(readFileSync12(manifestPath, "utf8"));
+    if (existsSync12(manifestPath)) {
+      const parsed = JSON.parse(readFileSync11(manifestPath, "utf8"));
       if (parsed && typeof parsed === "object")
         manifest = parsed;
     }
@@ -15974,7 +15939,7 @@ function resolveAndRenderProviderContext(opts) {
     rawModel: opts.rawModel || null
   };
   manifest.fragments = fragmentsObj;
-  writeFileSync4(manifestPath, JSON.stringify(manifest, null, 2), "utf8");
+  writeFileSync3(manifestPath, JSON.stringify(manifest, null, 2), "utf8");
   return {
     entry,
     rawEndpoint: opts.rawEndpoint,
@@ -16074,10 +16039,10 @@ init_session_render();
 
 // src/lib/station-profile.ts
 init_raw_store_root();
-import { spawnSync as spawnSync4 } from "child_process";
-import { existsSync as existsSync14, lstatSync as lstatSync5, mkdirSync as mkdirSync6, readFileSync as readFileSync13, readdirSync as readdirSync2, writeFileSync as writeFileSync5 } from "fs";
+import { spawnSync as spawnSync3 } from "child_process";
+import { existsSync as existsSync13, lstatSync as lstatSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync12, readdirSync as readdirSync2, writeFileSync as writeFileSync4 } from "fs";
 import { arch as osArch, homedir as homedir9, hostname as osHostname3, platform as osPlatform, userInfo as osUserInfo } from "os";
-import { dirname as dirname9, join as join16 } from "path";
+import { dirname as dirname8, join as join16 } from "path";
 var STATION_PROFILE_CACHE_FILENAME = "station-profile.md";
 var STATION_PROFILE_SOURCE_ID = "station-profile";
 var STATION_PROFILE_LAYER = "machine";
@@ -16101,9 +16066,9 @@ function getBunGlobalModulesDir(env = process.env) {
 }
 function readMachinesManifest(path) {
   try {
-    if (!existsSync14(path))
+    if (!existsSync13(path))
       return null;
-    const parsed = JSON.parse(readFileSync13(path, "utf8"));
+    const parsed = JSON.parse(readFileSync12(path, "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
       return null;
     const machines = parsed["machines"];
@@ -16133,7 +16098,7 @@ function metadataUser(record) {
 }
 function probeMachineStatus(machineId) {
   try {
-    const result = spawnSync4("machines", ["details", "--json", "--machine", machineId], {
+    const result = spawnSync3("machines", ["details", "--json", "--machine", machineId], {
       encoding: "utf8",
       timeout: 3000,
       stdio: ["ignore", "pipe", "pipe"]
@@ -16159,7 +16124,7 @@ function resolveStationProfileMachine(env = process.env, options = {}) {
   const record = findLocalManifestMachine(readMachinesManifest(getMachinesManifestPath(env)), hostname2);
   const home = homeDir6(env);
   const platform = stringField(record, "platform") ?? osPlatform();
-  const workspacePath = stringField(record, "workspacePath") ?? join16(home, platform === "darwin" ? "Workspace" : "workspace");
+  const workspacePath = stringField(record, "workspacePath");
   const machine = {
     id: stringField(record, "id") ?? hostname2,
     hostname: stringField(record, "hostname") ?? hostname2,
@@ -16178,7 +16143,7 @@ function resolveStationProfileMachine(env = process.env, options = {}) {
 function scopedPackageNames(modulesDir, scope) {
   const scopeDir = join16(modulesDir, scope);
   try {
-    if (!existsSync14(scopeDir))
+    if (!existsSync13(scopeDir))
       return null;
     return readdirNames(scopeDir).sort();
   } catch {
@@ -16198,7 +16163,7 @@ function resolveStationProfilePackages(env = process.env) {
   const modulesDir = getBunGlobalModulesDir(env);
   let scopeDirs;
   try {
-    if (!existsSync14(modulesDir))
+    if (!existsSync13(modulesDir))
       return null;
     scopeDirs = readdirNames(modulesDir).filter((name) => name.startsWith("@") && name.toLowerCase().includes("hasna"));
   } catch {
@@ -16273,10 +16238,10 @@ function refreshStationProfile(options = {}) {
   const path = getStationProfileCachePath(env);
   const generatedAt = new Date().toISOString();
   if (!options.dryRun) {
-    const existing = existsSync14(path) ? readFileSync13(path, "utf8") : null;
+    const existing = existsSync13(path) ? readFileSync12(path, "utf8") : null;
     if (existing !== content) {
-      mkdirSync6(dirname9(path), { recursive: true });
-      writeFileSync5(path, content, "utf8");
+      mkdirSync5(dirname8(path), { recursive: true });
+      writeFileSync4(path, content, "utf8");
     }
   }
   return {
@@ -16292,9 +16257,9 @@ function refreshStationProfile(options = {}) {
 function readStationProfile(env = process.env) {
   const path = getStationProfileCachePath(env);
   try {
-    if (!existsSync14(path))
+    if (!existsSync13(path))
       return null;
-    return readFileSync13(path, "utf8");
+    return readFileSync12(path, "utf8");
   } catch {
     return null;
   }
@@ -16318,23 +16283,172 @@ function stationProfileSource(env = process.env) {
 init_instruction_graph();
 init_asset_plan();
 
+// src/lib/harness-discovery.ts
+import { accessSync, constants as constants2, lstatSync as lstatSync6, realpathSync as realpathSync4, statSync as statSync5 } from "fs";
+import { homedir as homedir10 } from "os";
+import { delimiter, dirname as dirname9, isAbsolute as isAbsolute7, join as join17, resolve as resolve11 } from "path";
+var HARNESS_DISCOVERY_SCHEMA = "hasna.instructions.harness-discovery/v1";
+var DISCOVERABLE_HARNESSES = ["claude", "codex", "opencode", "sumi"];
+function pathInput(value, home) {
+  if (!value || value !== value.trim() || /[\x00-\x1f\x7f]/.test(value))
+    throw new Error("Harness paths must be nonempty and contain no surrounding whitespace or control characters.");
+  if (value.split("/").some((segment) => segment === "." || segment === ".."))
+    throw new Error("Harness paths must not contain dot segments; normalizing them can change a symlink destination.");
+  let path = value;
+  if (home) {
+    for (const prefix of ["~", "{{HOME}}", "{{HOME_DIR}}", "${HOME}"]) {
+      if (path === prefix)
+        path = home;
+      else if (path.startsWith(`${prefix}/`))
+        path = join17(home, path.slice(prefix.length + 1));
+    }
+  }
+  if (!isAbsolute7(path))
+    throw new Error("Harness paths must be absolute or explicitly relative to the owner home (~/ or {{HOME_DIR}}/).");
+  return resolve11(path);
+}
+function observe(path) {
+  let symlink = false;
+  let viaSymlink = false;
+  for (let parent = dirname9(path);parent !== dirname9(parent); parent = dirname9(parent)) {
+    try {
+      if (lstatSync6(parent).isSymbolicLink()) {
+        viaSymlink = true;
+        break;
+      }
+    } catch {}
+  }
+  try {
+    symlink = lstatSync6(path).isSymbolicLink();
+    const stat = statSync5(path);
+    return { path, state: "present", realPath: realpathSync4(path), symlink, viaSymlink: viaSymlink || symlink, type: stat.isFile() ? "file" : stat.isDirectory() ? "directory" : "other" };
+  } catch (error) {
+    const missing = error.code === "ENOENT";
+    return { path, state: missing ? symlink ? "dangling-symlink" : "missing" : "unreadable", realPath: null, symlink, viaSymlink: viaSymlink || symlink, type: null };
+  }
+}
+function executableAt(path) {
+  const observation = observe(path);
+  if (observation.type !== "file")
+    return null;
+  try {
+    accessSync(path, constants2.X_OK);
+    return observation;
+  } catch {
+    return null;
+  }
+}
+function configSelection(tool, home, env, override) {
+  if (override !== undefined)
+    return { path: pathInput(override, home), source: "override" };
+  const key = { claude: "CLAUDE_CONFIG_DIR", codex: "CODEX_HOME", opencode: "OPENCODE_CONFIG_DIR", sumi: "SUMI_CONFIG_DIR" }[tool];
+  const nativePath = (value, selector) => {
+    try {
+      return pathInput(value);
+    } catch {
+      throw new Error(`${selector} is present but is not an unambiguous absolute native path; supply the reviewed runtime path explicitly.`);
+    }
+  };
+  if (env[key] !== undefined && !(tool === "codex" && env[key] === ""))
+    return { path: nativePath(env[key], key), source: key };
+  if (tool === "claude" || tool === "codex")
+    return { path: join17(home, `.${tool}`), source: "native-default" };
+  if (env.XDG_CONFIG_HOME !== undefined)
+    return { path: join17(nativePath(env.XDG_CONFIG_HOME, "XDG_CONFIG_HOME"), tool), source: "XDG_CONFIG_HOME" };
+  if (tool === "sumi") {
+    if (env.SUMI_HOME !== undefined)
+      return { path: join17(nativePath(env.SUMI_HOME, "SUMI_HOME"), "config"), source: "SUMI_HOME" };
+    return null;
+  }
+  return { path: join17(home, ".config", tool), source: "native-default" };
+}
+function discoverHarnesses(options = {}) {
+  const env = options.env ?? process.env;
+  const home = pathInput(options.ownerHome ?? env.HOME ?? env.USERPROFILE ?? homedir10());
+  const project = options.projectRoot === undefined ? null : observe(pathInput(options.projectRoot, home));
+  const variables = { HOME_DIR: home };
+  if (project)
+    variables.PROJECT_ROOT = project.path;
+  const tools = DISCOVERABLE_HARNESSES.map((tool) => {
+    const diagnostics = [];
+    const override = options.overrides?.[tool];
+    let executable = null;
+    let executableSource = null;
+    if (override?.executable !== undefined) {
+      executable = executableAt(pathInput(override.executable, home));
+      executableSource = "override";
+      if (!executable)
+        diagnostics.push("Explicit executable is missing, unreadable, not a file, or not executable; PATH fallback is disabled.");
+    } else {
+      for (const directory of (env.PATH ?? "").split(delimiter)) {
+        if (!isAbsolute7(directory)) {
+          const warning = "Relative or empty PATH entries were ignored; this is an absolute-path candidate inventory, not proof of the launcher's selected executable.";
+          if (!diagnostics.includes(warning))
+            diagnostics.push(warning);
+          continue;
+        }
+        let validated;
+        try {
+          validated = pathInput(directory);
+        } catch {
+          diagnostics.push("An ambiguous PATH directory was ignored; use an explicit executable override after reviewing its native path.");
+          continue;
+        }
+        executable = executableAt(join17(validated, tool));
+        if (executable) {
+          executableSource = "PATH";
+          break;
+        }
+      }
+    }
+    let selected = null;
+    let configError = false;
+    try {
+      selected = configSelection(tool, home, env, override?.configDir);
+    } catch (error) {
+      if (override?.configDir !== undefined)
+        throw error;
+      configError = true;
+      diagnostics.push(`Config root unresolved: ${error.message}`);
+    }
+    const config = selected ? { ...observe(selected.path), source: selected.source } : null;
+    const filename = tool === "claude" ? "CLAUDE.md" : "AGENTS.md";
+    const globalPrompt = config ? observe(join17(config.path, filename)) : null;
+    const promptOverrides = tool === "codex" ? [...new Set([config?.path, project?.path].filter((path) => !!path))].map((path) => observe(join17(path, "AGENTS.override.md"))) : [];
+    if (!config && !configError)
+      diagnostics.push("Config root unresolved: supply the actual `sumi debug paths config` result as a configDir override; no runtime or migration was invoked.");
+    if (executable) {
+      variables[`${tool.toUpperCase()}_EXECUTABLE`] = executable.path;
+      if (config)
+        variables[`${tool.toUpperCase()}_CONFIG_DIR`] = config.path;
+    }
+    const linkedGlobal = !!globalPrompt?.viaSymlink || !!config?.viaSymlink;
+    const hasOverride = promptOverrides.some((path) => path.state !== "missing" || path.viaSymlink);
+    const scopeReviewRequired = linkedGlobal || hasOverride;
+    if (linkedGlobal)
+      diagnostics.push("Global config or prompt resolves through a symlink; preserve its lexical path and review the destination scope before planning writes.");
+    if (hasOverride)
+      diagnostics.push("A Codex AGENTS.override.md candidate may take precedence; review its native loader behavior and scope before applying AGENTS.md.");
+    return { tool, status: executable ? "executable-found" : "absent", executable, executableSource, versionEvidence: "not-probed", config, globalPrompt, projectPrompt: project ? observe(join17(project.path, filename)) : null, promptOverrides, scopeReviewRequired, diagnostics };
+  });
+  return { schema: HARNESS_DISCOVERY_SCHEMA, ownerHome: observe(home), projectRoot: project, tools, templateVariables: variables };
+}
 // src/lib/session-apply.ts
 init_project_context();
 init_session_render_state();
 init_session_render();
 init_cursor_authority();
 init_session_authority();
-import { createHash as createHash10, randomUUID as randomUUID4 } from "crypto";
+import { createHash as createHash9, randomUUID as randomUUID4 } from "crypto";
 import {
-  existsSync as existsSync15,
-  lstatSync as lstatSync6,
-  mkdirSync as mkdirSync7,
-  readFileSync as readFileSync14,
+  existsSync as existsSync14,
+  lstatSync as lstatSync7,
+  mkdirSync as mkdirSync6,
+  readFileSync as readFileSync13,
   readdirSync as readdirSync3,
-  statSync as statSync5
+  statSync as statSync6
 } from "fs";
-import { dirname as dirname10, isAbsolute as isAbsolute7, join as join17, parse as parse5, relative as relative6, resolve as resolve11 } from "path";
-
+import { dirname as dirname10, isAbsolute as isAbsolute8, join as join18, parse as parse4, posix as posix3, relative as relative5, resolve as resolve12 } from "path";
 class SessionApplyError extends Error {
   constructor(message) {
     super(message);
@@ -16356,15 +16470,23 @@ function applySessionRenderUnlocked(plan, options, coordination) {
   const targetHome = assertSafeTargetHome(plan.targetHome);
   assertClaudeAuthorityStillClear(plan, targetHome, options.ownedClaudeAuthorities);
   const payloadFiles = [...plan.files, ...plan.assetFiles ?? []];
-  const files = [...payloadFiles, plan.manifestFile];
   const manifestPath = resolvePlannedFilePath(plan, plan.manifestFile, targetHome);
+  assertManifestPrecondition(manifestPath, targetHome, options.expectedManifestSha256);
   const previousManifest = readPreviousManifest(manifestPath);
   const previousHashes = previousManifest ? new Map(previousManifest.files.map((file) => [file.relativePath, file.sha256])) : new Map;
+  const adoptions = validateFileAdoptions(plan, targetHome, previousHashes, options);
+  const adoptedHashes = new Map(adoptions.map((entry) => [entry.relativePath, entry.preimageSha256]));
+  const reconciliations = validateFileReconciliations(plan, targetHome, previousManifest, options);
+  const reconciledHashes = new Map(reconciliations.map((entry) => [entry.relativePath, entry.preimageSha256]));
+  const retirements = validateFileRetirements(plan, targetHome, previousManifest, options);
+  const retiredHashes = new Map(retirements.map((entry) => [entry.relativePath, entry.preimageSha256]));
+  const manifestFile = manifestWithFileProvenance(plan, previousManifest, adoptions, reconciliations, retirements);
+  const files = [...payloadFiles, manifestFile];
   const currentRelativePaths = new Set(files.map((file) => file.relativePath));
   const drift = checkSessionRenderDrift(targetHome, manifestPath);
   const results = [
-    ...files.map((file) => planFileResult(plan, file, targetHome, previousHashes, previousManifest, options)),
-    ...planStaleFileResults(plan, targetHome, previousManifest, currentRelativePaths, options)
+    ...files.map((file) => planFileResult(plan, file, targetHome, previousHashes, previousManifest, options, adoptedHashes, reconciledHashes)),
+    ...planStaleFileResults(plan, targetHome, previousManifest, currentRelativePaths, options, retiredHashes)
   ];
   assertNotSilentManagedWipeout(plan, results);
   const conflicts = results.filter((result) => result.action === "conflict");
@@ -16386,7 +16508,10 @@ function applySessionRenderUnlocked(plan, options, coordination) {
       skippedSources: plan.manifest.skippedSources,
       files: results,
       conflicts,
-      drift
+      drift,
+      adoptions,
+      reconciliations,
+      retirements
     };
   }
   let snapshotPath = null;
@@ -16399,10 +16524,16 @@ function applySessionRenderUnlocked(plan, options, coordination) {
   if (!options.dryRun) {
     const allowPortableFallback = coordination === null;
     const forcePortableFileOps = options.test_hooks?.force_portable_file_ops ?? false;
+    assertManifestPrecondition(manifestPath, targetHome, options.expectedManifestSha256);
     ensureSessionTargetHome(targetHome);
-    rollback = writeSessionSnapshot(plan, targetHome, manifestPath, results, previousManifest, coordination, allowPortableFallback, forcePortableFileOps);
+    rollback = writeSessionSnapshot(plan, targetHome, manifestPath, results, previousManifest, coordination, allowPortableFallback, forcePortableFileOps, adoptions, reconciliations, retirements);
     snapshotPath = rollback.snapshotPath;
     options.test_hooks?.before_apply_writes?.({ plan, results });
+    assertManifestPrecondition(manifestPath, targetHome, options.expectedManifestSha256);
+    for (const result of results) {
+      assertExpectedSessionFileHash(result.path, targetHome, result.previousSha256);
+      coordination?.assert_held();
+    }
     const resultsByPath = new Map(results.map((result) => [result.path, result]));
     for (const file of payloadFiles) {
       applyPlannedFile(plan, file, targetHome, resultsByPath, coordination, allowPortableFallback, forcePortableFileOps);
@@ -16422,7 +16553,7 @@ function applySessionRenderUnlocked(plan, options, coordination) {
       });
       coordination?.assert_held();
     }
-    applyPlannedFile(plan, plan.manifestFile, targetHome, resultsByPath, coordination, allowPortableFallback, forcePortableFileOps);
+    applyPlannedFile(plan, manifestFile, targetHome, resultsByPath, coordination, allowPortableFallback, forcePortableFileOps);
   }
   return {
     dryRun: options.dryRun ?? false,
@@ -16436,9 +16567,233 @@ function applySessionRenderUnlocked(plan, options, coordination) {
     skippedSources: plan.manifest.skippedSources,
     files: results,
     conflicts,
-    drift
+    drift,
+    adoptions,
+    reconciliations,
+    retirements
   };
 }
+function assertManifestPrecondition(path, targetHome, expected) {
+  if (expected === undefined)
+    return;
+  if (!/^[a-f0-9]{64}$/.test(expected)) {
+    throw new SessionApplyError("Expected session manifest SHA-256 must contain 64 lowercase hexadecimal characters.");
+  }
+  if (currentSessionFileHash(path, targetHome) !== expected) {
+    throw new SessionApplyError("Session manifest SHA-256 precondition failed; reload the manifest and resolve a new plan.");
+  }
+}
+function validateFileAdoptions(plan, targetHome, previousHashes, options) {
+  const requests = options.adoptFiles ?? [];
+  if (!Array.isArray(requests))
+    throw new SessionApplyError("Session file adoptions must be an array.");
+  if (requests.length > 0 && options.force) {
+    throw new SessionApplyError("Exact file adoption cannot be combined with force.");
+  }
+  const seen = new Set;
+  return requests.map((request) => {
+    if (!request || typeof request.relativePath !== "string" || typeof request.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(request.sha256)) {
+      throw new SessionApplyError("Each file adoption requires a plan-relative path and a 64-character lowercase SHA-256.");
+    }
+    if (seen.has(request.relativePath)) {
+      throw new SessionApplyError(`Duplicate file adoption target: ${request.relativePath}`);
+    }
+    seen.add(request.relativePath);
+    const candidates = exactPreimageCandidates(plan).filter((file2) => file2.relativePath === request.relativePath);
+    if (candidates.length !== 1 || candidates[0].role === "manifest") {
+      throw new SessionApplyError(`File adoption target is not a unique planned instruction output: ${request.relativePath}`);
+    }
+    const file = candidates[0];
+    const path = resolvePlannedFilePath(plan, file, targetHome);
+    if (previousHashes.has(file.relativePath) || sessionRenderOwnsPath(path)) {
+      throw new SessionApplyError(`File adoption target is already managed: ${request.relativePath}`);
+    }
+    const observedSha256 = readExactFilePreimage(path, targetHome, request, "adoption");
+    return {
+      path,
+      relativePath: file.relativePath,
+      preimageSha256: observedSha256,
+      renderedSha256: file.sha256,
+      sourceIds: [...file.sourceIds]
+    };
+  });
+}
+function exactPreimageCandidates(plan) {
+  const customAgentPaths = new Set((plan.assetPlan?.assets ?? []).filter((asset) => asset.kind === "custom-agent" && asset.support === "supported" && asset.action === "write" && asset.destination.strategy === "emit-file").map((asset) => posix3.normalize(asset.destination.relativePath)));
+  return [...plan.files, ...(plan.assetFiles ?? []).filter((file) => customAgentPaths.has(file.relativePath))];
+}
+function readExactFilePreimage(path, targetHome, request, operation) {
+  if (currentSessionFileHash(path, targetHome) === null) {
+    throw new SessionApplyError(`File ${operation} target does not exist: ${request.relativePath}`);
+  }
+  const bytes = readFileSync13(path);
+  if (!bytes.equals(Buffer.from(bytes.toString("utf8"), "utf8"))) {
+    throw new SessionApplyError(`File ${operation} target must contain losslessly restorable UTF-8: ${request.relativePath}`);
+  }
+  const observedSha256 = createHash9("sha256").update(bytes).digest("hex");
+  if (observedSha256 !== request.sha256) {
+    throw new SessionApplyError(`File ${operation} SHA-256 precondition failed: ${request.relativePath}`);
+  }
+  return observedSha256;
+}
+function validateFileReconciliations(plan, targetHome, previousManifest, options) {
+  const requests = options.reconcileFiles ?? [];
+  if (!Array.isArray(requests))
+    throw new SessionApplyError("Session file reconciliations must be an array.");
+  if (requests.length === 0)
+    return [];
+  if (options.force)
+    throw new SessionApplyError("Exact file reconciliation cannot be combined with force.");
+  if (options.expectedManifestSha256 === undefined) {
+    throw new SessionApplyError("Exact file reconciliation requires an expected manifest SHA-256 precondition.");
+  }
+  if (!previousManifest || previousManifest.targetOwner?.writer?.id !== SESSION_RENDERER_OWNER_ID || previousManifest.tool !== plan.tool || previousManifest.targetHome !== targetHome) {
+    throw new SessionApplyError("File reconciliation requires this renderer's manifest for the same tool and target home.");
+  }
+  const seen = new Set;
+  return requests.map((request) => {
+    if (!request || typeof request.relativePath !== "string" || typeof request.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(request.sha256)) {
+      throw new SessionApplyError("Each file reconciliation requires a plan-relative path and a 64-character lowercase SHA-256.");
+    }
+    if (seen.has(request.relativePath)) {
+      throw new SessionApplyError(`Duplicate file reconciliation target: ${request.relativePath}`);
+    }
+    seen.add(request.relativePath);
+    const candidates = exactPreimageCandidates(plan).filter((file2) => file2.relativePath === request.relativePath);
+    if (candidates.length !== 1 || candidates[0].role === "manifest") {
+      throw new SessionApplyError(`File reconciliation target is not a unique planned instruction output: ${request.relativePath}`);
+    }
+    const file = candidates[0];
+    const path = resolvePlannedFilePath(plan, file, targetHome);
+    const owned = previousManifest.files.filter((entry) => entry.relativePath === file.relativePath);
+    if (owned.length !== 1 || owned[0].path !== path || owned[0].role !== file.role || !/^[a-f0-9]{64}$/.test(owned[0].sha256)) {
+      throw new SessionApplyError(`File reconciliation target is not owned by the observed manifest: ${request.relativePath}`);
+    }
+    const observedSha256 = readExactFilePreimage(path, targetHome, request, "reconciliation");
+    if (observedSha256 === owned[0].sha256) {
+      throw new SessionApplyError(`File reconciliation target has no managed drift: ${request.relativePath}`);
+    }
+    if (observedSha256 === file.sha256) {
+      throw new SessionApplyError(`File reconciliation target already matches the planned output: ${request.relativePath}`);
+    }
+    return {
+      path,
+      relativePath: file.relativePath,
+      preimageSha256: observedSha256,
+      renderedSha256: file.sha256,
+      previousManagedSha256: owned[0].sha256,
+      sourceIds: [...file.sourceIds]
+    };
+  });
+}
+function validateFileRetirements(plan, targetHome, previousManifest, options) {
+  const requests = options.retireFiles ?? [];
+  if (!Array.isArray(requests))
+    throw new SessionApplyError("Session file retirements must be an array.");
+  if (requests.length === 0)
+    return [];
+  if (options.force)
+    throw new SessionApplyError("Exact file retirement cannot be combined with force.");
+  if (options.expectedManifestSha256 === undefined) {
+    throw new SessionApplyError("Exact file retirement requires an expected manifest SHA-256 precondition.");
+  }
+  if (!previousManifest || previousManifest.targetOwner?.writer?.id !== SESSION_RENDERER_OWNER_ID || previousManifest.tool !== plan.tool || previousManifest.targetHome !== targetHome) {
+    throw new SessionApplyError("File retirement requires this renderer's manifest for the same tool and target home.");
+  }
+  const seen = new Set;
+  return requests.map((request) => {
+    if (!request || typeof request.relativePath !== "string" || typeof request.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(request.sha256)) {
+      throw new SessionApplyError("Each file retirement requires a plan-relative path and a 64-character lowercase SHA-256.");
+    }
+    if (seen.has(request.relativePath))
+      throw new SessionApplyError(`Duplicate file retirement target: ${request.relativePath}`);
+    seen.add(request.relativePath);
+    if (plan.allFiles.some((file) => file.relativePath === request.relativePath)) {
+      throw new SessionApplyError(`File retirement target is retained by the new plan: ${request.relativePath}`);
+    }
+    const owned = previousManifest.files.filter((entry) => entry.relativePath === request.relativePath);
+    const path = resolveManifestRelativePath(request.relativePath, targetHome);
+    if (owned.length !== 1 || owned[0].path !== path || !/^[a-f0-9]{64}$/.test(owned[0].sha256) || !Array.isArray(owned[0].sourceIds) || owned[0].sourceIds.some((id) => typeof id !== "string") || !isPlanManagedFile(plan, request.relativePath, owned[0].role) && owned[0].role !== "asset") {
+      throw new SessionApplyError(`File retirement target is not an obsolete managed fragment, rule, or asset: ${request.relativePath}`);
+    }
+    return {
+      path,
+      relativePath: request.relativePath,
+      preimageSha256: readExactFilePreimage(path, targetHome, request, "retirement"),
+      previousManagedSha256: owned[0].sha256,
+      sourceIds: [...owned[0].sourceIds]
+    };
+  });
+}
+function manifestWithFileProvenance(plan, previousManifest, adoptions, reconciliations, retirements) {
+  if (adoptions.length === 0 && previousManifest?.adoptions === undefined && reconciliations.length === 0 && previousManifest?.reconciliations === undefined && retirements.length === 0 && previousManifest?.retirements === undefined)
+    return plan.manifestFile;
+  if (previousManifest?.adoptions !== undefined && !Array.isArray(previousManifest.adoptions)) {
+    throw new SessionApplyError("Previous session manifest adoption provenance is invalid.");
+  }
+  const entries = new Map;
+  for (const entry of [
+    ...previousManifest?.adoptions ?? [],
+    ...adoptions.map(({ path: _path, ...receipt }) => receipt)
+  ]) {
+    if (!entry || typeof entry.relativePath !== "string" || !/^[a-f0-9]{64}$/.test(entry.preimageSha256) || !/^[a-f0-9]{64}$/.test(entry.renderedSha256) || !Array.isArray(entry.sourceIds) || entry.sourceIds.some((id) => typeof id !== "string")) {
+      throw new SessionApplyError("Previous session manifest adoption provenance is invalid.");
+    }
+    resolveManifestRelativePath(entry.relativePath, plan.targetHome);
+    const previous = entries.get(entry.relativePath);
+    if (previous && JSON.stringify(previous) !== JSON.stringify(entry)) {
+      throw new SessionApplyError(`Conflicting session file adoption provenance: ${entry.relativePath}`);
+    }
+    entries.set(entry.relativePath, entry);
+  }
+  if (previousManifest?.reconciliations !== undefined && !Array.isArray(previousManifest.reconciliations)) {
+    throw new SessionApplyError("Previous session manifest reconciliation provenance is invalid.");
+  }
+  const reconciledEntries = new Map;
+  for (const entry of [
+    ...previousManifest?.reconciliations ?? [],
+    ...reconciliations.map(({ path: _path, ...receipt }) => receipt)
+  ]) {
+    if (!entry || typeof entry.relativePath !== "string" || !/^[a-f0-9]{64}$/.test(entry.preimageSha256) || !/^[a-f0-9]{64}$/.test(entry.renderedSha256) || !/^[a-f0-9]{64}$/.test(entry.previousManagedSha256) || !Array.isArray(entry.sourceIds) || entry.sourceIds.some((id) => typeof id !== "string")) {
+      throw new SessionApplyError("Previous session manifest reconciliation provenance is invalid.");
+    }
+    resolveManifestRelativePath(entry.relativePath, plan.targetHome);
+    const canonical = {
+      relativePath: entry.relativePath,
+      preimageSha256: entry.preimageSha256,
+      renderedSha256: entry.renderedSha256,
+      previousManagedSha256: entry.previousManagedSha256,
+      sourceIds: [...entry.sourceIds]
+    };
+    reconciledEntries.set(JSON.stringify(canonical), canonical);
+  }
+  if (previousManifest?.retirements !== undefined && !Array.isArray(previousManifest.retirements)) {
+    throw new SessionApplyError("Previous session manifest retirement provenance is invalid.");
+  }
+  const retiredEntries = new Map;
+  for (const entry of [...previousManifest?.retirements ?? [], ...retirements.map(({ path: _path, ...receipt }) => receipt)]) {
+    if (!entry || typeof entry.relativePath !== "string" || !/^[a-f0-9]{64}$/.test(entry.preimageSha256) || !/^[a-f0-9]{64}$/.test(entry.previousManagedSha256) || !Array.isArray(entry.sourceIds) || entry.sourceIds.some((id) => typeof id !== "string")) {
+      throw new SessionApplyError("Previous session manifest retirement provenance is invalid.");
+    }
+    resolveManifestRelativePath(entry.relativePath, plan.targetHome);
+    const canonical = {
+      relativePath: entry.relativePath,
+      preimageSha256: entry.preimageSha256,
+      previousManagedSha256: entry.previousManagedSha256,
+      sourceIds: [...entry.sourceIds]
+    };
+    retiredEntries.set(JSON.stringify(canonical), canonical);
+  }
+  const manifest = {
+    ...plan.manifest,
+    ...adoptions.length > 0 || previousManifest?.adoptions !== undefined ? { adoptions: [...entries.values()] } : {},
+    ...reconciliations.length > 0 || previousManifest?.reconciliations !== undefined ? { reconciliations: [...reconciledEntries.values()] } : {},
+    ...retirements.length > 0 || previousManifest?.retirements !== undefined ? { retirements: [...retiredEntries.values()] } : {}
+  };
+  const content = `${JSON.stringify(manifest, null, 2)}
+`;
+  return { ...plan.manifestFile, content, sha256: sha2569(content) };
+}
 function assertCursorAuthorityUnchanged(plan) {
   if (plan.tool !== "cursor" || plan.targetKind === "blocked")
     return;
@@ -16465,13 +16820,13 @@ function assertClaudeAuthorityStillClear(plan, targetHome, ownedClaudeAuthoritie
   throw new SessionApplyError(`Claude authority changed after planning; refusing to apply: ${summary}`);
 }
 function ensureSessionTargetHome(targetHome) {
-  if (!existsSync15(targetHome))
-    mkdirSync7(targetHome, { recursive: true, mode: 448 });
+  if (!existsSync14(targetHome))
+    mkdirSync6(targetHome, { recursive: true, mode: 448 });
   assertSafeTargetHome(targetHome);
 }
 function checkSessionRenderDrift(targetHome, manifestPath) {
   const safeTargetHome = assertSafeTargetHome(targetHome);
-  const resolvedManifestPath = manifestPath ? resolveManifestRelativePath(relative6(safeTargetHome, resolve11(manifestPath)), safeTargetHome) : resolve11(safeTargetHome, ".hasna", "session-render-manifest.json");
+  const resolvedManifestPath = manifestPath ? resolveManifestRelativePath(relative5(safeTargetHome, resolve12(manifestPath)), safeTargetHome) : resolve12(safeTargetHome, ".hasna", "session-render-manifest.json");
   const checkedAt = new Date().toISOString();
   const previousManifest = readPreviousManifest(resolvedManifestPath);
   if (!previousManifest) {
@@ -16488,7 +16843,7 @@ function checkSessionRenderDrift(targetHome, manifestPath) {
   const drifted = [];
   for (const file of previousManifest.files) {
     const target = resolveManifestRelativePath(file.relativePath, safeTargetHome);
-    if (!existsSync15(target)) {
+    if (!existsSync14(target)) {
       missing.push({
         path: target,
         relativePath: file.relativePath,
@@ -16498,7 +16853,7 @@ function checkSessionRenderDrift(targetHome, manifestPath) {
       });
       continue;
     }
-    const actualSha256 = sha25610(readFileSync14(target, "utf-8"));
+    const actualSha256 = sha2569(readFileSync13(target, "utf-8"));
     if (actualSha256 !== file.sha256) {
       drifted.push({
         path: target,
@@ -16521,13 +16876,13 @@ function checkSessionRenderDrift(targetHome, manifestPath) {
 function restoreSessionRenderSnapshot(snapshotPath, options = {}) {
   const snapshot = readSessionRenderSnapshot(snapshotPath);
   const targetHome = assertSafeTargetHome(snapshot.targetHome);
-  const resolvedSnapshotPath = resolve11(snapshotPath);
+  const resolvedSnapshotPath = resolve12(snapshotPath);
   const snapshotDir = getSessionRenderSnapshotDir(targetHome);
-  const snapshotDirRelative = relative6(snapshotDir, resolvedSnapshotPath);
-  const insideSnapshotDir = snapshotDirRelative !== ".." && !snapshotDirRelative.startsWith("../") && !isAbsolute7(snapshotDirRelative);
+  const snapshotDirRelative = relative5(snapshotDir, resolvedSnapshotPath);
+  const insideSnapshotDir = snapshotDirRelative !== ".." && !snapshotDirRelative.startsWith("../") && !isAbsolute8(snapshotDirRelative);
   if (!insideSnapshotDir) {
-    const snapshotRelativePath = relative6(targetHome, resolvedSnapshotPath);
-    if (snapshotRelativePath === "" || snapshotRelativePath === ".." || snapshotRelativePath.startsWith("../") || isAbsolute7(snapshotRelativePath)) {
+    const snapshotRelativePath = relative5(targetHome, resolvedSnapshotPath);
+    if (snapshotRelativePath === "" || snapshotRelativePath === ".." || snapshotRelativePath.startsWith("../") || isAbsolute8(snapshotRelativePath)) {
       throw new SessionApplyError("Session snapshot must be stored inside its session-render snapshot location.");
     }
   }
@@ -16644,19 +16999,19 @@ function requiredRestoreHash(file) {
   return file.previousSha256;
 }
 function readSessionRenderSnapshot(snapshotPath) {
-  const resolved = resolve11(snapshotPath);
-  if (!existsSync15(resolved))
+  const resolved = resolve12(snapshotPath);
+  if (!existsSync14(resolved))
     throw new SessionApplyError(`Session snapshot not found: ${snapshotPath}`);
-  const stat = lstatSync6(resolved);
+  const stat = lstatSync7(resolved);
   if (stat.isSymbolicLink() || !stat.isFile()) {
     throw new SessionApplyError(`Session snapshot is not a regular file: ${snapshotPath}`);
   }
-  if (statSync5(resolved).size > 32 * 1024 * 1024) {
+  if (statSync6(resolved).size > 32 * 1024 * 1024) {
     throw new SessionApplyError(`Session snapshot exceeds the 32 MiB restore limit: ${snapshotPath}`);
   }
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync14(resolved, "utf8"));
+    parsed = JSON.parse(readFileSync13(resolved, "utf8"));
   } catch {
     throw new SessionApplyError(`Session snapshot is not valid JSON: ${snapshotPath}`);
   }
@@ -16678,7 +17033,7 @@ function readSessionRenderSnapshot(snapshotPath) {
   const previousManifest = snapshot.previousManifest;
   const previousFiles = new Map;
   for (const file of snapshot.files) {
-    if (!file || typeof file.relativePath !== "string" || typeof file.path !== "string" || typeof file.sha256 !== "string" || typeof file.content !== "string" || sha25610(file.content) !== file.sha256) {
+    if (!file || typeof file.relativePath !== "string" || typeof file.path !== "string" || typeof file.sha256 !== "string" || typeof file.content !== "string" || sha2569(file.content) !== file.sha256) {
       throw new SessionApplyError(`Session snapshot previous file metadata is invalid: ${snapshotPath}`);
     }
     resolveSnapshotFilePath(file.relativePath, file.path, targetHome);
@@ -16725,8 +17080,8 @@ function readSessionRenderSnapshot(snapshotPath) {
 }
 function reconstructPreRollbackLegacyV1Snapshot(snapshot, previousFiles, previousManifestFiles, targetHome, snapshotPath) {
   assertNoNewerSessionSnapshot(snapshotPath, snapshot.createdAt, targetHome);
-  const manifestPath = resolve11(snapshot.manifestPath);
-  const manifestRelativePath = relative6(targetHome, manifestPath).replaceAll("\\", "/");
+  const manifestPath = resolve12(snapshot.manifestPath);
+  const manifestRelativePath = relative5(targetHome, manifestPath).replaceAll("\\", "/");
   resolveSnapshotFilePath(manifestRelativePath, snapshot.manifestPath, targetHome);
   const manifestSha256 = currentSessionFileHash(manifestPath, targetHome);
   if (manifestSha256 === null) {
@@ -16734,7 +17089,7 @@ function reconstructPreRollbackLegacyV1Snapshot(snapshot, previousFiles, previou
   }
   let parsedManifest;
   try {
-    parsedManifest = JSON.parse(readFileSync14(manifestPath, "utf8"));
+    parsedManifest = JSON.parse(readFileSync13(manifestPath, "utf8"));
   } catch {
     throw new SessionApplyError(`Pre-rollback legacy v1 applied manifest is not valid JSON: ${snapshotPath}`);
   }
@@ -16742,7 +17097,7 @@ function reconstructPreRollbackLegacyV1Snapshot(snapshot, previousFiles, previou
     throw new SessionApplyError(`Pre-rollback legacy v1 applied manifest is invalid: ${snapshotPath}`);
   }
   const appliedManifest = parsedManifest;
-  if (appliedManifest.schema !== SESSION_RENDER_SCHEMA || appliedManifest.tool !== snapshot.tool || appliedManifest.profile !== snapshot.profile || typeof appliedManifest.targetHome !== "string" || resolve11(appliedManifest.targetHome) !== targetHome || appliedManifest.targetKind !== "session-home" && appliedManifest.targetKind !== "project-root" || !Array.isArray(appliedManifest.files)) {
+  if (appliedManifest.schema !== SESSION_RENDER_SCHEMA || appliedManifest.tool !== snapshot.tool || appliedManifest.profile !== snapshot.profile || typeof appliedManifest.targetHome !== "string" || resolve12(appliedManifest.targetHome) !== targetHome || appliedManifest.targetKind !== "session-home" && appliedManifest.targetKind !== "project-root" || !Array.isArray(appliedManifest.files)) {
     throw new SessionApplyError(`Pre-rollback legacy v1 applied manifest does not match its snapshot: ${snapshotPath}`);
   }
   const afterFiles = [];
@@ -16827,16 +17182,16 @@ function assertNoNewerSessionSnapshot(snapshotPath, createdAt, targetHome) {
     throw new SessionApplyError(`Pre-rollback legacy v1 snapshot has an invalid creation time: ${snapshotPath}`);
   }
   for (const entry of readdirSync3(dirname10(snapshotPath))) {
-    const candidatePath = resolve11(dirname10(snapshotPath), entry);
-    if (candidatePath === resolve11(snapshotPath) || !entry.endsWith(".json"))
+    const candidatePath = resolve12(dirname10(snapshotPath), entry);
+    if (candidatePath === resolve12(snapshotPath) || !entry.endsWith(".json"))
       continue;
-    const candidateStat = lstatSync6(candidatePath);
+    const candidateStat = lstatSync7(candidatePath);
     if (candidateStat.isSymbolicLink() || !candidateStat.isFile() || candidateStat.size > 32 * 1024 * 1024)
       continue;
     try {
-      const candidate = JSON.parse(readFileSync14(candidatePath, "utf8"));
+      const candidate = JSON.parse(readFileSync13(candidatePath, "utf8"));
       const candidateCreatedAtMs = typeof candidate.createdAt === "string" ? Date.parse(candidate.createdAt) : Number.NaN;
-      if ((candidate.schema === "hasna.configs.session-render-snapshot/v1" || candidate.schema === "hasna.configs.session-render-snapshot/v2") && typeof candidate.targetHome === "string" && resolve11(candidate.targetHome) === targetHome && Number.isFinite(candidateCreatedAtMs) && candidateCreatedAtMs >= createdAtMs) {
+      if ((candidate.schema === "hasna.configs.session-render-snapshot/v1" || candidate.schema === "hasna.configs.session-render-snapshot/v2") && typeof candidate.targetHome === "string" && resolve12(candidate.targetHome) === targetHome && Number.isFinite(candidateCreatedAtMs) && candidateCreatedAtMs >= createdAtMs) {
         throw new SessionApplyError(`Cannot restore pre-rollback legacy v1 snapshot after a newer session snapshot exists: ${candidatePath}`);
       }
     } catch (error) {
@@ -16894,7 +17249,7 @@ function inferLegacySnapshotAction(file, previousFiles, previousManifestFiles, p
     return "create";
   }
   if (file.role === "manifest" && previousManifest) {
-    const previousManifestSha256 = sha25610(`${JSON.stringify(previousManifest, null, 2)}
+    const previousManifestSha256 = sha2569(`${JSON.stringify(previousManifest, null, 2)}
 `);
     if (previousManifestSha256 !== file.sha256) {
       throw new SessionApplyError(`Cannot infer legacy v1 manifest action without a before-image: ${file.relativePath}`);
@@ -16905,17 +17260,34 @@ function inferLegacySnapshotAction(file, previousFiles, previousManifestFiles, p
 }
 function resolveSnapshotFilePath(relativePath, recordedPath, targetHome) {
   const path = resolveManifestRelativePath(relativePath, targetHome);
-  if (resolve11(recordedPath) !== path) {
+  if (resolve12(recordedPath) !== path) {
     throw new SessionApplyError(`Session snapshot file path mismatch for ${relativePath}`);
   }
   return path;
 }
-function planFileResult(plan, file, targetHome, previousHashes, previousManifest, options) {
+function planFileResult(plan, file, targetHome, previousHashes, previousManifest, options, adoptedHashes, reconciledHashes) {
   const target = resolvePlannedFilePath(plan, file, targetHome);
-  const previousContent = existsSync15(target) ? readFileSync14(target, "utf-8") : null;
-  const previousSha256 = previousContent === null ? null : sha25610(previousContent);
+  const previousContent = existsSync14(target) ? readFileSync13(target, "utf-8") : null;
+  const previousSha256 = previousContent === null ? null : sha2569(previousContent);
   const previouslyManaged = isPreviouslyManaged(file, previousSha256, previousHashes, previousManifest);
   const changed = previousContent !== file.content;
+  const exactSha256 = adoptedHashes.get(file.relativePath) ?? reconciledHashes.get(file.relativePath);
+  if (exactSha256 !== undefined) {
+    const operation = adoptedHashes.has(file.relativePath) ? "adoption" : "reconciliation";
+    if (previousSha256 !== exactSha256) {
+      throw new SessionApplyError(`File ${operation} SHA-256 precondition failed: ${file.relativePath}`);
+    }
+    return {
+      path: target,
+      relativePath: file.relativePath,
+      role: file.role,
+      action: "update",
+      changed,
+      previousSha256,
+      newSha256: file.sha256,
+      reason: `exact observed SHA-256 ${operation}`
+    };
+  }
   if (previousContent !== null && !options.force && !previouslyManaged) {
     return {
       path: target,
@@ -17004,17 +17376,55 @@ function isPlanManagedFile(plan, relativePath, role) {
     return true;
   return plan.tool === "claude" && role === "rule" && relativePath.startsWith("rules/");
 }
-function planStaleFileResults(plan, targetHome, previousManifest, currentRelativePaths, options) {
+function planStaleFileResults(plan, targetHome, previousManifest, currentRelativePaths, options, retiredHashes) {
   if (!previousManifest)
     return [];
-  return previousManifest.files.filter((file) => !currentRelativePaths.has(file.relativePath)).filter((file) => isPlanManagedFile(plan, file.relativePath, file.role)).map((file) => planStaleFileResult(file, targetHome, options)).filter((result) => result !== null);
+  return previousManifest.files.filter((file) => !currentRelativePaths.has(file.relativePath)).filter((file) => isPlanManagedFile(plan, file.relativePath, file.role) || file.role === "asset" || retiredHashes.has(file.relativePath)).map((file) => planStaleFileResult(file, targetHome, options, retiredHashes.get(file.relativePath))).filter((result) => result !== null);
 }
-function planStaleFileResult(file, targetHome, options) {
+function planStaleFileResult(file, targetHome, options, retiredHash) {
   const target = resolveManifestRelativePath(file.relativePath, targetHome);
-  if (!existsSync15(target))
-    return null;
-  const previousContent = readFileSync14(target, "utf-8");
-  const previousSha256 = sha25610(previousContent);
+  if (!existsSync14(target)) {
+    if (file.role !== "asset")
+      return null;
+    return {
+      path: target,
+      relativePath: file.relativePath,
+      role: file.role,
+      action: "conflict",
+      changed: true,
+      previousSha256: null,
+      newSha256: "",
+      reason: "obsolete managed asset is missing; preserve manifest ownership until its reviewed preimage is restored and retired exactly"
+    };
+  }
+  const previousContent = readFileSync13(target, "utf-8");
+  const previousSha256 = sha2569(previousContent);
+  if (retiredHash !== undefined) {
+    if (previousSha256 !== retiredHash)
+      throw new SessionApplyError(`File retirement preimage changed after validation: ${file.relativePath}`);
+    return {
+      path: target,
+      relativePath: file.relativePath,
+      role: file.role,
+      action: "delete",
+      changed: true,
+      previousSha256,
+      newSha256: "",
+      reason: "exact reviewed obsolete managed file retired"
+    };
+  }
+  if (file.role === "asset") {
+    return {
+      path: target,
+      relativePath: file.relativePath,
+      role: file.role,
+      action: "conflict",
+      changed: true,
+      previousSha256,
+      newSha256: "",
+      reason: "obsolete managed asset requires exact retirement; preserve ownership until --retire-file and --expected-manifest-sha256 are supplied"
+    };
+  }
   if (!options.force && previousSha256 !== file.sha256) {
     return {
       path: target,
@@ -17058,31 +17468,31 @@ function isPreviouslyManaged(file, previousSha256, previousHashes, previousManif
   return previousHashes.get(file.relativePath) === previousSha256;
 }
 function resolvePlannedFilePath(plan, file, targetHome) {
-  const target = resolve11(targetHome, ...file.relativePath.split("/"));
-  const rel = relative6(targetHome, target);
-  if (rel === "" || rel === ".." || rel.startsWith("../") || isAbsolute7(rel)) {
+  const target = resolve12(targetHome, ...file.relativePath.split("/"));
+  const rel = relative5(targetHome, target);
+  if (rel === "" || rel === ".." || rel.startsWith("../") || isAbsolute8(rel)) {
     throw new SessionApplyError(`Session file escapes target home: ${file.relativePath}`);
   }
-  if (resolve11(file.path) !== target) {
+  if (resolve12(file.path) !== target) {
     throw new SessionApplyError(`Session file path mismatch for ${file.relativePath}: ${file.path}`);
   }
   assertNoSymlinkSegments2(targetHome, target);
   return target;
 }
 function resolveManifestRelativePath(relativePath, targetHome) {
-  const target = resolve11(targetHome, ...relativePath.split(/[\\/]+/));
-  const rel = relative6(targetHome, target);
-  if (rel === "" || rel === ".." || rel.startsWith("../") || isAbsolute7(rel)) {
+  const target = resolve12(targetHome, ...relativePath.split(/[\\/]+/));
+  const rel = relative5(targetHome, target);
+  if (rel === "" || rel === ".." || rel.startsWith("../") || isAbsolute8(rel)) {
     throw new SessionApplyError(`Session manifest file escapes target home: ${relativePath}`);
   }
   assertNoSymlinkSegments2(targetHome, target);
   return target;
 }
 function readPreviousManifest(path) {
-  if (!existsSync15(path))
+  if (!existsSync14(path))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync14(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync13(path, "utf-8"));
     if (parsed.schema !== SESSION_RENDER_SCHEMA)
       return null;
     if (!Array.isArray(parsed.files))
@@ -17116,18 +17526,18 @@ function applyPlannedFile(plan, file, targetHome, resultsByPath, coordination, a
 function assertExpectedSessionFileHash(path, targetHome, expectedHash) {
   const actualHash = currentSessionFileHash(path, targetHome);
   if (actualHash !== expectedHash) {
-    throw new SessionApplyError(`Session apply path changed after planning: ${relative6(targetHome, path)}`);
+    throw new SessionApplyError(`Session apply path changed after planning: ${relative5(targetHome, path)}`);
   }
 }
 function currentSessionFileHash(path, targetHome) {
   assertNoSymlinkSegments2(targetHome, path);
-  if (!existsSync15(path))
+  if (!existsSync14(path))
     return null;
-  const stat = lstatSync6(path);
+  const stat = lstatSync7(path);
   if (stat.isSymbolicLink() || !stat.isFile()) {
     throw new SessionApplyError(`Session apply path is not a regular file: ${path}`);
   }
-  return sha25610(readFileSync14(path, "utf-8"));
+  return sha2569(readFileSync13(path, "utf-8"));
 }
 function requiredPreviousHash(result) {
   if (result.previousSha256 === null) {
@@ -17135,14 +17545,18 @@ function requiredPreviousHash(result) {
   }
   return result.previousSha256;
 }
-function writeSessionSnapshot(plan, targetHome, manifestPath, results, previousManifest, coordination, allowPortableFallback, forcePortableFileOps) {
-  const existingFiles = results.filter((result) => result.action === "update" || result.action === "delete").filter((result) => existsSync15(result.path)).map((result) => {
-    const content = readFileSync14(result.path, "utf-8");
+function writeSessionSnapshot(plan, targetHome, manifestPath, results, previousManifest, coordination, allowPortableFallback, forcePortableFileOps, adoptions, reconciliations, retirements) {
+  const existingFiles = results.filter((result) => result.action === "update" || result.action === "delete").map((result) => {
+    assertExpectedSessionFileHash(result.path, targetHome, result.previousSha256);
+    const content = readFileSync13(result.path, "utf-8");
+    if (sha2569(content) !== result.previousSha256) {
+      throw new SessionApplyError(`Session snapshot preimage changed after planning: ${result.relativePath}`);
+    }
     return {
       path: result.path,
       relativePath: result.relativePath,
       role: result.role,
-      sha256: sha25610(content),
+      sha256: sha2569(content),
       content
     };
   });
@@ -17155,7 +17569,7 @@ function writeSessionSnapshot(plan, targetHome, manifestPath, results, previousM
     };
   }
   const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
-  const snapshotPath = join17(getSessionRenderSnapshotDir(targetHome), `${timestamp}-${randomUUID4()}.json`);
+  const snapshotPath = join18(getSessionRenderSnapshotDir(targetHome), `${timestamp}-${randomUUID4()}.json`);
   const afterFiles = results.map((result) => {
     if (result.action === "conflict") {
       throw new SessionApplyError(`Cannot snapshot unresolved conflict: ${result.relativePath}`);
@@ -17178,13 +17592,20 @@ function writeSessionSnapshot(plan, targetHome, manifestPath, results, previousM
     manifestPath,
     previousManifest,
     files: existingFiles,
-    afterFiles
+    afterFiles,
+    ...adoptions.length > 0 ? { adoptions } : {},
+    ...reconciliations.length > 0 ? { reconciliations } : {},
+    ...retirements.length > 0 ? { retirements } : {}
   };
+  const snapshotContent = `${JSON.stringify(snapshot, null, 2)}
+`;
+  if ((adoptions.length > 0 || reconciliations.length > 0 || retirements.length > 0) && Buffer.byteLength(snapshotContent, "utf8") > 32 * 1024 * 1024) {
+    throw new SessionApplyError("Exact file preimage snapshot exceeds the 32 MiB restore limit.");
+  }
   coordination?.assert_held();
   writeProjectContextCoordinatedFile({
     path: snapshotPath,
-    content: `${JSON.stringify(snapshot, null, 2)}
-`,
+    content: snapshotContent,
     workspace_root: sessionRenderSnapshotWorkspaceRoot(targetHome),
     default_mode: 384,
     expected_hash: null,
@@ -17201,45 +17622,262 @@ function writeSessionSnapshot(plan, targetHome, manifestPath, results, previousM
   };
 }
 function assertSafeTargetHome(targetHome) {
-  if (!isAbsolute7(targetHome))
+  if (!isAbsolute8(targetHome))
     throw new SessionApplyError(`Session target home must be absolute: ${targetHome}`);
-  const normalized = resolve11(targetHome);
-  if (normalized === parse5(normalized).root) {
+  const normalized = resolve12(targetHome);
+  if (normalized === parse4(normalized).root) {
     throw new SessionApplyError(`Session target home cannot be the filesystem root: ${targetHome}`);
   }
-  assertNoSymlinkAncestors3(normalized);
-  if (existsSync15(normalized) && lstatSync6(normalized).isSymbolicLink()) {
+  assertNoSymlinkAncestors2(normalized);
+  if (existsSync14(normalized) && lstatSync7(normalized).isSymbolicLink()) {
     throw new SessionApplyError(`Session target home cannot be a symlink: ${normalized}`);
   }
   return normalized;
 }
 function assertNoSymlinkSegments2(root, target) {
-  assertNoSymlinkAncestors3(root);
-  const rel = relative6(root, target);
+  assertNoSymlinkAncestors2(root);
+  const rel = relative5(root, target);
   let current = root;
   for (const segment of rel.split(/[\\/]+/).filter(Boolean)) {
-    current = join17(current, segment);
-    if (existsSync15(current) && lstatSync6(current).isSymbolicLink()) {
+    current = join18(current, segment);
+    if (existsSync14(current) && lstatSync7(current).isSymbolicLink()) {
       throw new SessionApplyError(`Session apply path uses a symlink: ${current}`);
     }
   }
 }
-function assertNoSymlinkAncestors3(path) {
-  const normalized = resolve11(path);
-  const parsed = parse5(normalized);
+function assertNoSymlinkAncestors2(path) {
+  const normalized = resolve12(path);
+  const parsed = parse4(normalized);
   let current = parsed.root;
-  const rel = relative6(parsed.root, normalized);
+  const rel = relative5(parsed.root, normalized);
   for (const segment of rel.split(/[\\/]+/).filter(Boolean)) {
-    current = join17(current, segment);
-    if (!existsSync15(current))
+    current = join18(current, segment);
+    if (!existsSync14(current))
       return;
-    if (lstatSync6(current).isSymbolicLink()) {
+    if (lstatSync7(current).isSymbolicLink()) {
       throw new SessionApplyError(`Session apply path uses a symlink ancestor: ${current}`);
     }
   }
 }
-function sha25610(content) {
-  return createHash10("sha256").update(content).digest("hex");
+function sha2569(content) {
+  return createHash9("sha256").update(content).digest("hex");
+}
+// src/lib/session-refresh.ts
+init_zod();
+import { createHash as createHash10 } from "crypto";
+import { closeSync as closeSync4, constants as constants3, fstatSync as fstatSync4, lstatSync as lstatSync8, openSync as openSync4, readFileSync as readFileSync14 } from "fs";
+import { basename as basename6, dirname as dirname11, isAbsolute as isAbsolute9, join as join19, parse as parse5, resolve as resolve13 } from "path";
+
+// src/lib/global-source-coverage.ts
+var GLOBAL_SOURCE_SLUG_PREFIX = "global-";
+function expectedGlobalSourceSlugs(registryConfigs) {
+  return registryConfigs.filter((c) => c.slug.startsWith(GLOBAL_SOURCE_SLUG_PREFIX)).filter((c) => instructionSourceRejection(c) === null).map((c) => c.slug).sort();
+}
+function accountedGlobalSourceSlugs(manifest) {
+  return [...manifest.sources, ...manifest.skippedSources].map((source) => source.id).filter((id) => id.startsWith(GLOBAL_SOURCE_SLUG_PREFIX));
+}
+function computeGlobalSourceCoverage(registryConfigs, configuredSlugs) {
+  const expected = expectedGlobalSourceSlugs(registryConfigs);
+  const expectedSet = new Set(expected);
+  const configuredSet = new Set(configuredSlugs);
+  const missing = expected.filter((slug2) => !configuredSet.has(slug2));
+  const unexpected = [...configuredSet].filter((slug2) => slug2.startsWith(GLOBAL_SOURCE_SLUG_PREFIX) && !expectedSet.has(slug2)).sort();
+  return {
+    expectedSlugs: expected,
+    excludedSources: registryConfigs.filter((config) => config.slug.startsWith(GLOBAL_SOURCE_SLUG_PREFIX)).flatMap((config) => {
+      const reason = instructionSourceRejection(config);
+      return reason ? [{ slug: config.slug, reason }] : [];
+    }).sort((left, right) => left.slug.localeCompare(right.slug)),
+    configuredSlugs: [...configuredSet].sort(),
+    missingSlugs: missing,
+    unexpectedSlugs: unexpected,
+    complete: missing.length === 0
+  };
+}
+
+// src/lib/session-refresh.ts
+init_instruction_graph();
+init_project_context();
+init_session_render();
+var nonempty = exports_external.string().min(1).max(4096);
+var selectorSchema = exports_external.object({
+  schema: exports_external.literal("hasna.instructions.hosted-profile-selector/v1"),
+  authority: nonempty,
+  profileId: nonempty,
+  providerVersion: nonempty,
+  providerVariant: nonempty.optional(),
+  model: nonempty.optional(),
+  path: nonempty.optional(),
+  manual: exports_external.array(nonempty).max(256),
+  codewithNativeImports: exports_external.boolean(),
+  allowEmptySources: exports_external.boolean(),
+  stationProfile: exports_external.boolean(),
+  checkGlobalCoverage: exports_external.boolean(),
+  assetSurface: nonempty.optional(),
+  assetScope: exports_external.enum(["global", "project", "session"]).optional()
+}).strict();
+function authority(value) {
+  const url = new URL(value);
+  if (url.username || url.password || url.search || url.hash || !["https:", "http:"].includes(url.protocol)) {
+    throw new Error("SESSION_REFRESH_AUTHORITY_INVALID: expected a credential-free Instructions API authority.");
+  }
+  return url.toString().replace(/\/$/, "");
+}
+function normalizeSessionHostedProfileSelector(value) {
+  const parsed = selectorSchema.parse(value);
+  return { ...parsed, authority: authority(parsed.authority) };
+}
+function assertHostedProfileBindings(profileId, configs, bindings) {
+  const configIds = new Set(configs.map((config) => config.id));
+  const bindingIds = new Set(bindings.map((binding) => binding.config_id));
+  if (configIds.size !== configs.length || bindingIds.size !== bindings.length || bindings.some((binding) => binding.profile_id !== profileId || !configIds.has(binding.config_id)) || [...configIds].some((id) => !bindingIds.has(id))) {
+    throw new Error("HOSTED_PROFILE_BINDINGS_INCOMPLETE: exact one-to-one config membership and explicit profile bindings are required; refusing legacy activation fallback.");
+  }
+  for (const row of bindings) {
+    const raw = row.binding;
+    const invalid = () => new Error("HOSTED_PROFILE_BINDINGS_INVALID: each hosted binding must contain a complete explicit schema, activation, required flag and fallback; refusing legacy activation defaults.");
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+      throw invalid();
+    const record = raw;
+    if (!["schema", "activation", "required", "fallback"].every((key) => Object.hasOwn(record, key)) || typeof record["required"] !== "boolean")
+      throw invalid();
+    try {
+      normalizeProfileConfigBinding(record);
+    } catch {
+      throw invalid();
+    }
+  }
+}
+function readManagedManifest(targetHome) {
+  const path = join19(targetHome, SESSION_RENDER_MANIFEST_RELATIVE_PATH);
+  let ancestor = dirname11(path);
+  while (true) {
+    const stat = lstatSync8(ancestor);
+    if (stat.isSymbolicLink() || !stat.isDirectory())
+      throw new Error("SESSION_REFRESH_PATH_INVALID: managed target uses a symlink or non-directory ancestor.");
+    const parent = dirname11(ancestor);
+    if (parent === ancestor)
+      break;
+    ancestor = parent;
+  }
+  const fd = openSync4(path, constants3.O_RDONLY | constants3.O_NOFOLLOW);
+  let raw;
+  try {
+    const stat = fstatSync4(fd);
+    if (!stat.isFile() || stat.size > SESSION_MANAGED_INPUT_MAX_BYTES)
+      throw new Error("SESSION_REFRESH_MANIFEST_INVALID: expected a bounded regular manifest file.");
+    raw = readFileSync14(fd);
+    if (raw.byteLength > SESSION_MANAGED_INPUT_MAX_BYTES)
+      throw new Error("SESSION_REFRESH_MANIFEST_INVALID: manifest grew beyond the read limit.");
+  } finally {
+    closeSync4(fd);
+  }
+  const manifest = JSON.parse(raw.toString("utf8"));
+  if (manifest.schema !== SESSION_RENDER_SCHEMA || !SESSION_RENDER_TOOLS.includes(manifest.tool) || manifest.targetHome !== targetHome || !manifest.profile?.trim() || !["session-home", "project-root"].includes(manifest.targetKind) || !Array.isArray(manifest.files) || !manifest.refreshSelector || manifest.targetOwner?.writer?.id !== SESSION_RENDERER_OWNER_ID || manifest.targetOwner?.targetHome !== targetHome) {
+    throw new Error("SESSION_REFRESH_MANIFEST_INVALID: target is not an owned hosted profile render; apply a hosted --compile-profile first.");
+  }
+  const recordedProjectRoot = manifest.targetOwner.projectRoot;
+  if (recordedProjectRoot !== null && recordedProjectRoot !== undefined) {
+    if (typeof recordedProjectRoot !== "string" || !isAbsolute9(recordedProjectRoot)) {
+      throw new Error("SESSION_REFRESH_MANIFEST_INVALID: recorded project root must be an absolute path.");
+    }
+    const normalizedProjectRoot = resolve13(recordedProjectRoot);
+    if (normalizedProjectRoot === parse5(normalizedProjectRoot).root || manifest.targetKind === "project-root" && normalizedProjectRoot !== targetHome || manifest.targetKind === "session-home" && manifest.tool !== "opencode") {
+      throw new Error("SESSION_REFRESH_MANIFEST_INVALID: recorded project root does not match the managed target.");
+    }
+    manifest.targetOwner.projectRoot = normalizedProjectRoot;
+  } else if (manifest.targetKind === "project-root") {
+    throw new Error("SESSION_REFRESH_MANIFEST_INVALID: project-scoped render is missing its recorded project root.");
+  }
+  manifest.refreshSelector = normalizeSessionHostedProfileSelector(manifest.refreshSelector);
+  return { manifest, sha256: createHash10("sha256").update(raw).digest("hex") };
+}
+async function refreshSessionRender(input) {
+  const { store } = input;
+  if (store.mode !== "api" || !store.v1BaseUrl)
+    throw new Error("SESSION_REFRESH_HOSTED_REQUIRED: refresh requires the configured hosted Instructions API.");
+  const targetHome = resolve13(input.targetHome);
+  if (targetHome === parse5(targetHome).root)
+    throw new Error("SESSION_REFRESH_PATH_INVALID: filesystem root is not a managed target.");
+  const previous = readManagedManifest(targetHome);
+  const selector = previous.manifest.refreshSelector;
+  if (authority(store.v1BaseUrl) !== selector.authority)
+    throw new Error("SESSION_REFRESH_AUTHORITY_MISMATCH: configured API differs from the recorded profile authority.");
+  const profile = await store.getProfile(selector.profileId);
+  if (profile.id !== selector.profileId)
+    throw new Error("SESSION_REFRESH_PROFILE_MISMATCH: hosted profile identity changed.");
+  const [configs, bindings, assetBindings] = await Promise.all([
+    store.getProfileConfigs(profile.id),
+    store.getProfileConfigBindings(profile.id, { requireExplicit: true }),
+    store.getProfileAssetBindings(profile.id, { requireExplicit: true })
+  ]);
+  assertHostedProfileBindings(profile.id, configs, bindings);
+  if (configs.length > 2048 || bindings.length > 8192 || assetBindings.length > 1024)
+    throw new Error("SESSION_REFRESH_INPUT_LIMIT: hosted profile exceeds refresh bounds.");
+  const totalBytes = configs.reduce((sum, config) => sum + Buffer.byteLength(config.content), 0);
+  if (totalBytes > SESSION_MANAGED_INPUT_MAX_BYTES)
+    throw new Error("SESSION_REFRESH_INPUT_LIMIT: hosted instruction payload exceeds refresh byte bounds.");
+  const assetConfigs = await Promise.all([...new Set(assetBindings.map((binding) => binding.source_config_id))].map((id) => store.getConfigById(id)));
+  if (assetConfigs.reduce((sum, config) => sum + Buffer.byteLength(config.content), totalBytes) > SESSION_MANAGED_INPUT_MAX_BYTES)
+    throw new Error("SESSION_REFRESH_INPUT_LIMIT: hosted source and asset payload exceeds refresh byte bounds.");
+  let ownedClaudeAuthorities;
+  if (previous.manifest.tool === "claude") {
+    ownedClaudeAuthorities = (await store.listConfigs({ category: "rules", agent: "claude", kind: "file" })).filter((config) => config.target_path && basename6(normalizeTargetPath(config.target_path)) === "AGENTS.md").map((config) => ({ slug: config.slug, targetPath: config.target_path, content: config.content }));
+  }
+  const station = selector.stationProfile ? stationProfileSource() : null;
+  const plan = planProfileSessionRender({
+    tool: previous.manifest.tool,
+    profile: previous.manifest.profile,
+    profile_id: profile.id,
+    provider_version: selector.providerVersion,
+    targetHome,
+    ...previous.manifest.targetKind === "project-root" ? { projectRoot: targetHome } : previous.manifest.targetOwner.projectRoot ? { projectRoot: previous.manifest.targetOwner.projectRoot } : {},
+    sessionId: previous.manifest.sessionId ?? undefined,
+    refreshSelector: selector,
+    codewithNativeImports: selector.codewithNativeImports,
+    allowEmptySources: selector.allowEmptySources,
+    configs,
+    bindings,
+    asset_configs: assetConfigs,
+    asset_bindings: assetBindings,
+    asset_plan_mode: "apply",
+    asset_scope: selector.assetScope,
+    asset_surface: selector.assetSurface,
+    extra_sources: station ? [station] : undefined,
+    ownedClaudeAuthorities,
+    graph_context: {
+      ...selector.providerVariant ? { provider_variant: selector.providerVariant } : {},
+      ...selector.model ? { model: selector.model } : {},
+      ...selector.path ? { path: selector.path } : {},
+      ...selector.manual.length ? { manual: selector.manual } : {}
+    }
+  });
+  if (selector.checkGlobalCoverage) {
+    const coverage = computeGlobalSourceCoverage(await store.listConfigs({}), accountedGlobalSourceSlugs(plan.manifest));
+    if (!coverage.complete)
+      throw new Error(`SESSION_REFRESH_COVERAGE_INCOMPLETE: ${coverage.missingSlugs.length} registered global sources are absent.`);
+  }
+  const preview = applySessionRender(plan, { dryRun: true, expectedManifestSha256: previous.sha256, ownedClaudeAuthorities });
+  const common = { checkedAt: new Date().toISOString(), targetHome, selector, sourceHash: plan.manifest.sourceHash };
+  if (preview.conflicts.length)
+    return { ...common, status: "blocked", apply: preview };
+  if (!preview.drift.clean)
+    throw new Error("SESSION_REFRESH_DRIFT: generated files changed or disappeared since their last managed render.");
+  const sameSources = previous.manifest.sourceHash === plan.manifest.sourceHash;
+  const samePayloads = preview.files.filter((file) => file.role !== "manifest").every((file) => file.action === "unchanged");
+  if (sameSources && samePayloads) {
+    if (readManagedManifest(targetHome).sha256 !== previous.sha256 || !checkSessionRenderDrift(targetHome).clean)
+      throw new Error("SESSION_REFRESH_DRIFT: managed target changed during refresh.");
+    return { ...common, status: "unchanged", apply: { ...preview, files: preview.files.map((file) => file.role === "manifest" ? { ...file, action: "unchanged", changed: false, newSha256: previous.sha256, reason: "hosted sources and generated payloads unchanged" } : file) } };
+  }
+  if (input.dryRun)
+    return { ...common, status: "dry-run", apply: preview };
+  const applied = applySessionRender(plan, { expectedManifestSha256: previous.sha256, ownedClaudeAuthorities });
+  if (applied.conflicts.length)
+    return { ...common, status: "blocked", apply: applied };
+  if (!applied.applied || !checkSessionRenderDrift(targetHome).clean)
+    throw new Error("SESSION_REFRESH_READBACK_FAILED: applied instructions did not verify against their manifest.");
+  return { ...common, status: "updated", apply: applied };
 }
 
 // src/index.ts
@@ -17248,9 +17886,11 @@ init_transforms();
 init_machine();
 
 // src/lib/platform-profiles.ts
+init_types();
 init_config_store();
 
 // src/lib/project-dashboard-standard.ts
+init_types();
 init_config_store();
 var PROJECT_DASHBOARD_STANDARD_SLUG = "agent-managed-project-dashboard-standard";
 var PROJECT_DASHBOARD_PROFILE_VARIABLES = {
@@ -17343,11 +17983,15 @@ async function ensureProjectDashboardStandardConfig(store = resolveConfigStore()
   };
   try {
     const existing = await store.getConfig(PROJECT_DASHBOARD_STANDARD_SLUG);
+    if (isRetiredInstructionSource(existing))
+      return existing;
     if (existing.content !== input.content || existing.description !== input.description || existing.category !== input.category || existing.agent !== input.agent || existing.format !== input.format || existing.kind !== input.kind) {
       return await store.updateConfig(existing.id, input);
     }
     return existing;
-  } catch {
+  } catch (error) {
+    if (!(error instanceof ConfigNotFoundError))
+      throw error;
     return await store.createConfig(input);
   }
 }
@@ -17360,10 +18004,9 @@ function profileHasSelectors2(profile) {
 var PLATFORM_PROFILE_PRESETS = [
   {
     name: "linux-arm64",
-    description: "Default Linux arm64 profile for linux-node-a/linux-node-b-style machines",
-    selectors: { os: ["linux"], arch: ["arm64"], hostnames: ["linux-node-a", "linux-node-b", "station01"] },
+    description: "Default reviewed instruction profile for Linux arm64",
+    selectors: { os: ["linux"], arch: ["arm64"] },
     variables: {
-      WORKSPACE_ROOT: "{{HOME_DIR}}/workspace",
       BUN_BIN_DIR: "{{HOME_DIR}}/.bun/bin",
       BUN_PATH: "{{BUN_BIN_DIR}}/bun",
       PATH_PREFIX: "{{BUN_BIN_DIR}}",
@@ -17372,10 +18015,9 @@ var PLATFORM_PROFILE_PRESETS = [
   },
   {
     name: "macos-arm64",
-    description: "Default macOS arm64 profile for macos-node-a/macos-node-b-style machines",
-    selectors: { os: ["macos"], arch: ["arm64"], hostnames: ["macos-node-a", "macos-node-b"] },
+    description: "Default reviewed instruction profile for macOS arm64",
+    selectors: { os: ["macos"], arch: ["arm64"] },
     variables: {
-      WORKSPACE_ROOT: "{{HOME_DIR}}/Workspace",
       BUN_BIN_DIR: "{{HOME_DIR}}/.bun/bin",
       BUN_PATH: "/opt/homebrew/bin/bun",
       PATH_PREFIX: "/opt/homebrew/bin:{{BUN_BIN_DIR}}",
@@ -17384,12 +18026,21 @@ var PLATFORM_PROFILE_PRESETS = [
   }
 ];
 async function ensurePlatformProfiles(store = resolveConfigStore()) {
-  const configs = await store.listConfigs();
   const ensured = [];
-  for (const preset of PLATFORM_PROFILE_PRESETS) {
-    let profile;
+  const existingProfiles = await Promise.all(PLATFORM_PROFILE_PRESETS.map(async (preset) => {
     try {
-      profile = await store.getProfile(preset.name);
+      return await store.getProfile(preset.name);
+    } catch (error) {
+      if (error instanceof ProfileNotFoundError)
+        return null;
+      throw error;
+    }
+  }));
+  for (const [index, preset] of PLATFORM_PROFILE_PRESETS.entries()) {
+    let profile;
+    const existing = existingProfiles[index];
+    if (existing) {
+      profile = existing;
       const selectors = mergeProfileSelectors(preset.selectors, profile.selectors);
       const variables = mergeProfileVariables(preset.variables, profile.variables);
       if (JSON.stringify(selectors) !== JSON.stringify(profile.selectors) || JSON.stringify(variables) !== JSON.stringify(profile.variables)) {
@@ -17399,12 +18050,9 @@ async function ensurePlatformProfiles(store = resolveConfigStore()) {
           variables
         });
       }
-    } catch {
+    } else {
       profile = await store.createProfile(preset);
     }
-    for (const config of configs) {
-      await store.addConfigToProfile(profile.id, config.id);
-    }
     ensured.push(profile);
   }
   return ensured;
@@ -17438,6 +18086,7 @@ function mergeUnique(preset, existing) {
 init_global_agent_rules_standard();
 
 // src/lib/dangerous-operation-guard-standard.ts
+init_types();
 init_config_store();
 var DANGEROUS_OPERATION_GUARD_STANDARD_SLUG = "dangerous-operation-guard-standard";
 var DANGEROUS_OPERATION_GUARD_STANDARD_CONTENT = `# Dangerous Operation Guard Standard
@@ -17549,11 +18198,15 @@ async function ensureDangerousOperationGuardStandardConfig(store = resolveConfig
   };
   try {
     const existing = await store.getConfig(DANGEROUS_OPERATION_GUARD_STANDARD_SLUG);
+    if (isRetiredInstructionSource(existing))
+      return existing;
     if (existing.content !== input.content || existing.description !== input.description || existing.category !== input.category || existing.agent !== input.agent || existing.format !== input.format || existing.kind !== input.kind || JSON.stringify(existing.tags) !== JSON.stringify(input.tags)) {
       return await store.updateConfig(existing.id, input);
     }
     return existing;
-  } catch {
+  } catch (error) {
+    if (!(error instanceof ConfigNotFoundError))
+      throw error;
     return await store.createConfig(input);
   }
 }
@@ -17563,8 +18216,8 @@ init_codewith_shared_todos_storage_standard();
 
 // src/lib/sync.ts
 init_config_store();
-import { existsSync as existsSync17, readdirSync as readdirSync5, readFileSync as readFileSync16 } from "fs";
-import { basename as basename6, extname as extname3, join as join19 } from "path";
+import { existsSync as existsSync16, readdirSync as readdirSync5, readFileSync as readFileSync16 } from "fs";
+import { basename as basename7, extname as extname3, join as join21 } from "path";
 init_config_agents();
 init_redact();
 init_machine();
@@ -17572,8 +18225,8 @@ init_transforms();
 
 // src/lib/sync-dir.ts
 init_config_store();
-import { existsSync as existsSync16, readdirSync as readdirSync4, readFileSync as readFileSync15, statSync as statSync6 } from "fs";
-import { join as join18, relative as relative7 } from "path";
+import { existsSync as existsSync15, readdirSync as readdirSync4, readFileSync as readFileSync15, statSync as statSync7 } from "fs";
+import { join as join20, relative as relative6 } from "path";
 init_redact();
 var SKIP = [".db", ".db-shm", ".db-wal", ".log", ".lock", ".DS_Store", "node_modules", ".git"];
 function shouldSkip(p) {
@@ -17582,9 +18235,9 @@ function shouldSkip(p) {
 async function syncFromDir(dir, opts = {}) {
   const store = opts.store ?? resolveConfigStore();
   const absDir = expandPath(dir);
-  if (!existsSync16(absDir))
+  if (!existsSync15(absDir))
     return { added: 0, updated: 0, unchanged: 0, skipped: [`Not found: ${absDir}`] };
-  const files = opts.recursive !== false ? walkDir(absDir) : readdirSync4(absDir).map((f) => join18(absDir, f)).filter((f) => statSync6(f).isFile());
+  const files = opts.recursive !== false ? walkDir(absDir) : readdirSync4(absDir).map((f) => join20(absDir, f)).filter((f) => statSync7(f).isFile());
   const result = { added: 0, updated: 0, unchanged: 0, skipped: [] };
   const allConfigs = await store.listConfigs();
   for (const file of files) {
@@ -17603,7 +18256,7 @@ async function syncFromDir(dir, opts = {}) {
       const existing = allConfigs.find((c) => c.target_path === targetPath);
       if (!existing) {
         if (!opts.dryRun)
-          await store.createConfig({ name: relative7(absDir, file), category: detectCategory(file), agent: detectAgent(file), target_path: targetPath, format: detectFormat(file), content: redacted.content });
+          await store.createConfig({ name: relative6(absDir, file), category: detectCategory(file), agent: detectAgent(file), target_path: targetPath, format: detectFormat(file), content: redacted.content });
         result.added++;
       } else if (existing.content !== redacted.content) {
         if (!opts.dryRun)
@@ -17643,7 +18296,7 @@ async function syncToDir(dir, opts = {}) {
 }
 function walkDir(dir, files = []) {
   for (const entry of readdirSync4(dir, { withFileTypes: true })) {
-    const full = join18(dir, entry.name);
+    const full = join20(dir, entry.name);
     if (shouldSkip(full))
       continue;
     if (entry.isDirectory())
@@ -17665,7 +18318,7 @@ var CLAUDE_PROMPT_OUTPUTS = [
   { agent: "qwen", target_path: "~/.qwen/QWEN.md", transform: "codex-flat" }
 ];
 function claudeRuleOutputs(fileName) {
-  const stem = basename6(fileName, extname3(fileName));
+  const stem = basename7(fileName, extname3(fileName));
   return [
     { agent: "cursor", target_path: `~/.cursor/rules/${stem}.mdc`, transform: "cursor-mdc" }
   ];
@@ -17704,15 +18357,15 @@ function isGeneratedOutputTarget2(config, owners) {
   return !!ownerIds && !ownerIds.has(config.id);
 }
 function hasClaudePromptSource() {
-  return existsSync17(expandPath("~/.claude/CLAUDE.md"));
+  return existsSync16(expandPath("~/.claude/CLAUDE.md"));
 }
 function hasClaudeRuleSourceForCursorTarget(targetPath) {
   const absoluteTargetPath = expandPath(targetPath);
   const absolutePrefix = expandPath("~/.cursor/rules");
   if (!absoluteTargetPath.startsWith(`${absolutePrefix}/`) || !absoluteTargetPath.endsWith(".mdc"))
     return false;
-  const stem = basename6(absoluteTargetPath, ".mdc");
-  return existsSync17(expandPath(`~/.claude/rules/${stem}.md`)) || existsSync17(expandPath(`~/.claude/rules/${stem}.mdc`));
+  const stem = basename7(absoluteTargetPath, ".mdc");
+  return existsSync16(expandPath(`~/.claude/rules/${stem}.md`)) || existsSync16(expandPath(`~/.claude/rules/${stem}.mdc`));
 }
 function isKnownGeneratedTargetPath(targetPath) {
   const normalizedTargetPath = normalizeTargetPath(targetPath);
@@ -17777,8 +18430,8 @@ async function syncProject(opts) {
   const allConfigs = await store.listConfigs();
   const machine = detectMachineContext();
   for (const pf of PROJECT_CONFIG_FILES) {
-    const abs = join19(absDir, pf.file);
-    if (!existsSync17(abs))
+    const abs = join21(absDir, pf.file);
+    if (!existsSync16(abs))
       continue;
     try {
       const rawContent = readFileSync16(abs, "utf-8");
@@ -17810,19 +18463,19 @@ async function syncProject(opts) {
     }
   }
   for (const ruleDir of [
-    { dir: join19(absDir, ".claude", "rules"), agent: "claude", namePrefix: "rules" },
-    { dir: join19(absDir, ".agents", "rules"), agent: "antigravity", namePrefix: "antigravity-rules" },
-    { dir: join19(absDir, ".cursor", "rules"), agent: "cursor", namePrefix: "cursor-rules" },
-    { dir: join19(absDir, ".github", "instructions"), agent: "copilot", namePrefix: "copilot-instructions" },
-    { dir: join19(absDir, ".devin", "rules"), agent: "devin", namePrefix: "devin-rules" },
-    { dir: join19(absDir, ".windsurf", "rules"), agent: "windsurf-legacy", namePrefix: "windsurf-rules" },
-    { dir: join19(absDir, ".clinerules"), agent: "cline", namePrefix: "cline-rules" }
+    { dir: join21(absDir, ".claude", "rules"), agent: "claude", namePrefix: "rules" },
+    { dir: join21(absDir, ".agents", "rules"), agent: "antigravity", namePrefix: "antigravity-rules" },
+    { dir: join21(absDir, ".cursor", "rules"), agent: "cursor", namePrefix: "cursor-rules" },
+    { dir: join21(absDir, ".github", "instructions"), agent: "copilot", namePrefix: "copilot-instructions" },
+    { dir: join21(absDir, ".devin", "rules"), agent: "devin", namePrefix: "devin-rules" },
+    { dir: join21(absDir, ".windsurf", "rules"), agent: "windsurf-legacy", namePrefix: "windsurf-rules" },
+    { dir: join21(absDir, ".clinerules"), agent: "cline", namePrefix: "cline-rules" }
   ]) {
-    if (!existsSync17(ruleDir.dir))
+    if (!existsSync16(ruleDir.dir))
       continue;
     const mdFiles = readdirSync5(ruleDir.dir).filter((f) => f.endsWith(".md") || f.endsWith(".mdc"));
     for (const f of mdFiles) {
-      const abs = join19(ruleDir.dir, f);
+      const abs = join21(ruleDir.dir, f);
       const raw = readFileSync16(abs, "utf-8");
       const redacted = redactContent(raw, "markdown");
       const machineAware = templateizeMachineContent(redacted.content, machine);
@@ -17862,14 +18515,14 @@ async function syncKnown(opts = {}) {
   for (const known of targets) {
     if (known.rulesDir) {
       const absDir = expandPath(known.rulesDir);
-      if (!existsSync17(absDir)) {
+      if (!existsSync16(absDir)) {
         result.skipped.push(known.rulesDir);
         continue;
       }
       const extensions = known.rulesExtensions ?? [".md", ".mdc"];
       const ruleFiles = readdirSync5(absDir).filter((f) => extensions.some((ext) => f.endsWith(ext)));
       for (const f of ruleFiles) {
-        const abs2 = join19(absDir, f);
+        const abs2 = join21(absDir, f);
         const targetPath = abs2.replace(home, "~");
         if (existingOutputOwners.has(normalizeTargetPath(targetPath)) || isKnownGeneratedTargetPath(targetPath)) {
           result.skipped.push(`${targetPath} (generated output)`);
@@ -17903,7 +18556,7 @@ async function syncKnown(opts = {}) {
       continue;
     }
     const abs = expandPath(known.path);
-    if (!existsSync17(abs)) {
+    if (!existsSync16(abs)) {
       result.skipped.push(known.path);
       continue;
     }
@@ -18011,7 +18664,7 @@ function storedPlaceholderIsLiteralOnDisk(storedLine, diskLine) {
 }
 function buildDiff(expectedContent, targetPath, storedFormat, showSecrets) {
   const path = expandPath(targetPath);
-  if (!existsSync17(path))
+  if (!existsSync16(path))
     return `(file not found on disk: ${path})`;
   const diskContent = readFileSync16(path, "utf-8");
   if (diskContent === expectedContent)
@@ -18174,8 +18827,8 @@ function detectFormat(filePath) {
 init_types();
 init_config_store();
 import { createHash as createHash11 } from "crypto";
-import { existsSync as existsSync18, mkdirSync as mkdirSync8, mkdtempSync, rmSync as rmSync4, writeFileSync as writeFileSync6 } from "fs";
-import { dirname as dirname11, join as join20, resolve as resolve12 } from "path";
+import { existsSync as existsSync17, mkdirSync as mkdirSync7, mkdtempSync, rmSync as rmSync3, writeFileSync as writeFileSync5 } from "fs";
+import { dirname as dirname12, join as join22, resolve as resolve14 } from "path";
 import { tmpdir } from "os";
 var ARCHIVE_EXCLUSIONS = [
   {
@@ -18197,7 +18850,7 @@ var ARCHIVE_EXCLUSIONS = [
 function compareText(left, right) {
   return left < right ? -1 : left > right ? 1 : 0;
 }
-function sha25611(value) {
+function sha25610(value) {
   return createHash11("sha256").update(value).digest("hex");
 }
 function canonicalize(value) {
@@ -18322,19 +18975,19 @@ function computeIntegrity(domain, options) {
     machines: collections.machines.length
   };
   const hashes = {
-    configs: sha25611(canonicalDomainJson(collections.configs)),
-    config_snapshots: sha25611(canonicalDomainJson(collections.config_snapshots)),
-    profiles: sha25611(canonicalDomainJson(collections.profiles)),
-    profile_config_bindings: sha25611(canonicalDomainJson(collections.profile_config_bindings)),
-    profile_asset_bindings: sha25611(canonicalDomainJson(collections.profile_asset_bindings)),
-    machines: sha25611(canonicalDomainJson(collections.machines))
+    configs: sha25610(canonicalDomainJson(collections.configs)),
+    config_snapshots: sha25610(canonicalDomainJson(collections.config_snapshots)),
+    profiles: sha25610(canonicalDomainJson(collections.profiles)),
+    profile_config_bindings: sha25610(canonicalDomainJson(collections.profile_config_bindings)),
+    profile_asset_bindings: sha25610(canonicalDomainJson(collections.profile_asset_bindings)),
+    machines: sha25610(canonicalDomainJson(collections.machines))
   };
   return {
     algorithm: "sha256",
     canonicalization: options.canonicalization,
     counts,
     hashes,
-    domain_sha256: sha25611(canonicalDomainJson({ counts, hashes }))
+    domain_sha256: sha25610(canonicalDomainJson({ counts, hashes }))
   };
 }
 function computeDomainIntegrity(domain) {
@@ -18505,19 +19158,19 @@ async function exportConfigs(outputPath, opts = {}) {
     exported_at: new Date().toISOString(),
     payload: {
       path: "domain.json",
-      sha256: sha25611(payload),
+      sha256: sha25610(payload),
       size_bytes: Buffer.byteLength(payload)
     },
     integrity,
     exclusions: ARCHIVE_EXCLUSIONS
   };
-  const absOutput = resolve12(outputPath);
-  mkdirSync8(dirname11(absOutput), { recursive: true });
-  const stagingDir = mkdtempSync(join20(tmpdir(), "instructions-domain-export-"));
+  const absOutput = resolve14(outputPath);
+  mkdirSync7(dirname12(absOutput), { recursive: true });
+  const stagingDir = mkdtempSync(join22(tmpdir(), "instructions-domain-export-"));
   try {
-    writeFileSync6(join20(stagingDir, "manifest.json"), `${JSON.stringify(manifest, null, 2)}
+    writeFileSync5(join22(stagingDir, "manifest.json"), `${JSON.stringify(manifest, null, 2)}
 `, "utf-8");
-    writeFileSync6(join20(stagingDir, "domain.json"), payload, "utf-8");
+    writeFileSync5(join22(stagingDir, "domain.json"), payload, "utf-8");
     const proc = Bun.spawn(["tar", "czf", absOutput, "-C", stagingDir, "manifest.json", "domain.json"], {
       stdout: "pipe",
       stderr: "pipe"
@@ -18529,15 +19182,15 @@ async function exportConfigs(outputPath, opts = {}) {
     }
     return { path: absOutput, count: domain.configs.length, counts: integrity.counts, integrity };
   } finally {
-    if (existsSync18(stagingDir))
-      rmSync4(stagingDir, { recursive: true, force: true });
+    if (existsSync17(stagingDir))
+      rmSync3(stagingDir, { recursive: true, force: true });
   }
 }
 // src/lib/import.ts
 init_types();
 init_config_store();
 import { createHash as createHash12 } from "crypto";
-import { resolve as resolve13 } from "path";
+import { resolve as resolve15 } from "path";
 function compareText2(left, right) {
   return left < right ? -1 : left > right ? 1 : 0;
 }
@@ -18561,7 +19214,7 @@ function emptyResult() {
     integrity: null
   };
 }
-function sha25612(value) {
+function sha25611(value) {
   return createHash12("sha256").update(value).digest("hex");
 }
 function normalizeMemberName(name) {
@@ -18632,7 +19285,7 @@ async function readV2(reader, manifest) {
     throw new Error("Invalid v2 archive manifest");
   }
   const payload = await reader.read("domain.json");
-  if (Buffer.byteLength(payload) !== manifest.payload.size_bytes || sha25612(payload) !== manifest.payload.sha256) {
+  if (Buffer.byteLength(payload) !== manifest.payload.size_bytes || sha25611(payload) !== manifest.payload.sha256) {
     throw new Error("Archive integrity failure: domain payload hash or size does not match the manifest");
   }
   const domain = validateInstructionsDomainArchive(JSON.parse(payload));
@@ -18825,7 +19478,7 @@ async function importV1(reader, manifest, store, conflict) {
 async function importConfigs(bundlePath, opts = {}) {
   const store = opts.store ?? resolveConfigStore();
   const conflict = opts.conflict ?? "skip";
-  const reader = await openArchive(resolve13(bundlePath));
+  const reader = await openArchive(resolve15(bundlePath));
   const manifestText = await reader.read("manifest.json");
   let manifest;
   try {
@@ -18853,9 +19506,9 @@ init_redact();
 
 // src/lib/package-manager-guard.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync19, lstatSync as lstatSync7, readdirSync as readdirSync6, readFileSync as readFileSync17 } from "fs";
-import { homedir as homedir10 } from "os";
-import { basename as basename7, dirname as dirname12, isAbsolute as isAbsolute8, join as join21, relative as relative8, resolve as resolve14 } from "path";
+import { existsSync as existsSync18, lstatSync as lstatSync9, readdirSync as readdirSync6, readFileSync as readFileSync17 } from "fs";
+import { homedir as homedir11 } from "os";
+import { basename as basename8, dirname as dirname13, isAbsolute as isAbsolute10, join as join23, relative as relative7, resolve as resolve16 } from "path";
 var SKIP_DIRS = new Set([
   ".git",
   "node_modules",
@@ -18892,14 +19545,14 @@ var TOKEN_VALUE_PATTERNS = [
   { re: /xoxb-[0-9]+-[A-Za-z0-9-]+/, rule: "literal-slack-token", detail: "literal Slack token-like value" }
 ];
 function scanPackageManagerSecrets(options = {}) {
-  const cwd = options.cwd ? resolve14(options.cwd) : process.cwd();
-  const roots = (options.roots && options.roots.length > 0 ? options.roots : [cwd]).map((root) => resolve14(cwd, root));
+  const cwd = options.cwd ? resolve16(options.cwd) : process.cwd();
+  const roots = (options.roots && options.roots.length > 0 ? options.roots : [cwd]).map((root) => resolve16(cwd, root));
   const findings = [];
   let scannedFiles = 0;
   for (const root of roots) {
-    if (!existsSync19(root))
+    if (!existsSync18(root))
       continue;
-    const stat = lstatSync7(root);
+    const stat = lstatSync9(root);
     if (stat.isFile()) {
       if (!shouldScanRepoFile(root))
         continue;
@@ -18907,14 +19560,14 @@ function scanPackageManagerSecrets(options = {}) {
       if (text === null)
         continue;
       scannedFiles++;
-      findings.push(...scanFile(root, text, classifyRepoFile(root), isTrackedFile(root), dirname12(root)));
+      findings.push(...scanFile(root, text, classifyRepoFile(root), isTrackedFile(root), dirname13(root)));
       continue;
     }
     if (!stat.isDirectory())
       continue;
     const tracked = trackedFiles(root);
     for (const file of collectRepoFiles(root)) {
-      const rel = toPosix(relative8(root, file));
+      const rel = toPosix(relative7(root, file));
       const isTracked = tracked.has(rel);
       const text = readTextFile(file);
       if (text === null)
@@ -18924,10 +19577,10 @@ function scanPackageManagerSecrets(options = {}) {
     }
   }
   if (options.includeHome) {
-    const home = homedir10();
+    const home = homedir11();
     for (const name of HOME_FILES) {
-      const file = join21(home, name);
-      if (!existsSync19(file))
+      const file = join23(home, name);
+      if (!existsSync18(file))
         continue;
       const text = readTextFile(file);
       if (text === null)
@@ -18951,12 +19604,12 @@ function collectRepoFiles(root) {
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name))
           continue;
-        visit(join21(dir, entry.name));
+        visit(join23(dir, entry.name));
         continue;
       }
       if (!entry.isFile())
         continue;
-      const file = join21(dir, entry.name);
+      const file = join23(dir, entry.name);
       if (shouldScanRepoFile(file))
         out.push(file);
     }
@@ -18965,11 +19618,11 @@ function collectRepoFiles(root) {
   return out;
 }
 function shouldScanRepoFile(file) {
-  const name = basename7(file);
+  const name = basename8(file);
   return isNpmrcName(name) || isBunConfigName(name) || LOCKFILE_NAMES.has(name);
 }
 function classifyRepoFile(file) {
-  const name = basename7(file);
+  const name = basename8(file);
   if (isNpmrcName(name))
     return "repo-npmrc";
   if (isBunConfigName(name))
@@ -18991,7 +19644,7 @@ function isNpmrcName(name) {
 }
 function readTextFile(file) {
   try {
-    const stat = lstatSync7(file);
+    const stat = lstatSync9(file);
     if (!stat.isFile() || stat.size > 5000000)
       return null;
     const buf = readFileSync17(file);
@@ -19194,11 +19847,11 @@ function trackedFiles(root) {
 }
 function isTrackedFile(file) {
   try {
-    const repoRoot = execFileSync2("git", ["-C", dirname12(file), "rev-parse", "--show-toplevel"], {
+    const repoRoot = execFileSync2("git", ["-C", dirname13(file), "rev-parse", "--show-toplevel"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
-    const rel = toPosix(relative8(repoRoot, file));
+    const rel = toPosix(relative7(repoRoot, file));
     execFileSync2("git", ["-C", repoRoot, "ls-files", "--error-unmatch", "--", rel], {
       stdio: ["ignore", "ignore", "ignore"]
     });
@@ -19224,19 +19877,20 @@ function stripInlineComment(value) {
   return value.replace(/\s[#;].*$/, "").trim();
 }
 function displayPath(file, root) {
-  const home = homedir10();
+  const home = homedir11();
   if (root === home && (file === home || file.startsWith(home + "/")))
-    return "~/" + toPosix(relative8(home, file));
-  if (isAbsolute8(root) && file.startsWith(root + "/"))
-    return toPosix(relative8(root, file));
+    return "~/" + toPosix(relative7(home, file));
+  if (isAbsolute10(root) && file.startsWith(root + "/"))
+    return toPosix(relative7(root, file));
   if (file === home || file.startsWith(home + "/"))
-    return "~/" + toPosix(relative8(home, file));
+    return "~/" + toPosix(relative7(home, file));
   return file;
 }
 function toPosix(path) {
   return path.split("\\").join("/");
 }
 export {
+  validateExpectedConfigVersion,
   uuid,
   transformSkillContent,
   templateizeMachineContent,
@@ -19269,9 +19923,11 @@ export {
   renderTemplatePreview,
   renderTemplate,
   renderProviderFragment,
+  renderNativeAgentContent,
   renderMachineAwareContentPreview,
   renderMachineAwareContent,
   refreshStationProfile,
+  refreshSessionRender,
   redactContent,
   reconcileManagedSkillRuntimes,
   readStationProfile,
@@ -19285,6 +19941,7 @@ export {
   parseProjectContextBundle,
   parseAgentOperatingRulesVersion,
   now,
+  normalizeSessionHostedProfileSelector,
   normalizeProfileConfigBinding,
   normalizeProfileAssetBinding,
   normalizeOsFamily,
@@ -19315,6 +19972,7 @@ export {
   ensureGlobalAgentRulesStandardConfig,
   ensureDangerousOperationGuardStandardConfig,
   ensureCodewithSharedTodosStorageStandardConfig,
+  discoverHarnesses,
   diffConfig,
   detectMachineContext,
   detectFormat,
@@ -19331,6 +19989,7 @@ export {
   compareAgentOperatingRulesVersions,
   cleanSessionPathInput,
   checkSessionRenderDrift,
+  buildSumiAgentsMd,
   buildStationProfileBlock,
   buildOpenCodeAgentsMd,
   buildCursorMdc,
@@ -19390,6 +20049,7 @@ export {
   LEGACY_CONFIGS_EXECUTABLE,
   LEGACY_CONFIGS_COMPAT_VERSION,
   KNOWN_CONFIGS,
+  InvalidExpectedVersionError,
   InstructionGraphValidationError,
   INSTRUCTION_GRAPH_PLAN_SCHEMA,
   INSTRUCTION_FALLBACKS,
@@ -19398,10 +20058,13 @@ export {
   INSTRUCTIONS_LOCAL_OPT_IN_ENV,
   INSTRUCTIONS_DOMAIN_ARCHIVE_SCHEMA,
   INBOX_CONVERSATIONS_MINIMUM_VERSION,
+  HARNESS_DISCOVERY_SCHEMA,
   GLOBAL_AGENT_RULES_STANDARD_SLUG,
   GLOBAL_AGENT_RULES_STANDARD_CONTENT,
+  DISCOVERABLE_HARNESSES,
   DANGEROUS_OPERATION_GUARD_STANDARD_SLUG,
   DANGEROUS_OPERATION_GUARD_STANDARD_CONTENT,
+  ConfigVersionConflictError,
   ConfigNotFoundError,
   ConfigApplyError,
   CloudConfigStore,