@hasna/instructions 0.7.2 → 0.7.4

package/README.md

@@ -67,6 +67,19 @@ instructions package-manager-scan --fail-on-findings .
 instructions package-manager-scan --home --fail-on-findings .
 ```
 
+Skills are managed through the Skills CLI. Profile application and bootstrap do
+not inspect, install or repair native Inbox skill payloads, and do not send
+Conversations heartbeats. Their legacy `--from` and `--delivery-verified` flags
+remain accepted for compatibility but perform no verification.
+
+`instructions managed-skills status` and `instructions managed-skills apply`
+are deprecated, read-only migration reports. They return a failure when legacy
+Inbox paths remain and preserve those paths, including symlinks. Use the Skills
+CLI to review `skills migrate native`, then sync and load the selected skills.
+An empty legacy inventory does not verify hosted skill selection or runtime
+delivery. The exported inspection/reconciliation helpers behave the same way;
+an explicit legacy `assetPath` no longer enables native payload writes.
+
 Collection commands are compact by default to keep agent terminals and context
 small. Human output is capped at 20 rows unless you pass `--limit`; use
 `--cursor` to continue from the next page. Detail is explicit:

package/dist/chunks/{apply-ps6jjt6k.js → apply-1gyr8r0x.js}

@@ -8,8 +8,8 @@ import {
   getConfigHome,
   normalizeTargetPath,
   previewConfigs
-} from "./index-ape24zc0.js";
-import"./index-pq18fdbj.js";
+} from "./index-n9arv47w.js";
+import"./index-dwagz53p.js";
 import"./index-35z65jsa.js";
 import"./index-27az1qb1.js";
 import"./index-nnwp92tk.js";

package/dist/chunks/{apply-wj7wh5km.js → apply-fyfzqc7s.js}

@@ -8,8 +8,8 @@ import {
   getConfigHome,
   normalizeTargetPath,
   previewConfigs
-} from "./index-y8410ve0.js";
-import"./index-n6nh6f5r.js";
+} from "./index-6sbmg1vc.js";
+import"./index-enh4yv85.js";
 import"./index-preyvj8n.js";
 import"./index-fpeyzn3n.js";
 import"./index-bsan4c16.js";

package/dist/chunks/{index-y8410ve0.js → index-6sbmg1vc.js}

@@ -18,7 +18,7 @@ import {
   resolveProfileVariables,
   scanSecrets,
   stampCursorGlobalAuthorityMarker
-} from "./index-n6nh6f5r.js";
+} from "./index-enh4yv85.js";
 import {
   ConfigApplyError,
   parseTemplateVars

package/dist/chunks/{index-18j7x3xw.js → index-axs3yftz.js}

@@ -5,7 +5,7 @@ import {
   expandPath,
   getConfigHome,
   normalizeTargetPath
-} from "./index-y8410ve0.js";
+} from "./index-6sbmg1vc.js";
 import {
   applyTransform,
   detectMachineContext,
@@ -16,7 +16,7 @@ import {
   resolveConfigStore,
   retiredOrUnsupportedAgentReason,
   templateizeMachineContent
-} from "./index-n6nh6f5r.js";
+} from "./index-enh4yv85.js";
 
 // src/lib/sync.ts
 import { existsSync as existsSync2, readdirSync as readdirSync2, readFileSync as readFileSync2 } from "fs";

package/dist/chunks/{index-pq18fdbj.js → index-dwagz53p.js}

@@ -373,6 +373,7 @@ function assetCapability(provider, surface, kind, support, strategies, note, pro
 var ASSET_CAPABILITY_DESCRIPTORS = Object.freeze([
   assetCapability("claude", "code", "skill", "supported", ["emit-file"], "Claude Code project or profile skill files."),
   assetCapability("claude", "code", "workflow", "supported", ["emit-file"], "Claude Code command and workflow files."),
+  assetCapability("claude", "code", "custom-agent", "supported", ["emit-file"], "Claude Code Markdown subagents with native frontmatter in agents/.", ">=2.1.276 <3.0.0"),
   assetCapability("claude", "code", "hook", "supported", ["emit-file"], "Claude Code hook configuration fragments."),
   assetCapability("claude", "code", "plugin", "conditional", ["install-marketplace"], "Claude marketplace installation requires an explicit installer."),
   assetCapability("codex", "cli", "skill", "supported", ["emit-file"], "Codex skill bundle files."),
@@ -383,6 +384,7 @@ var ASSET_CAPABILITY_DESCRIPTORS = Object.freeze([
   assetCapability("opencode", "cli", "workflow", "supported", ["emit-file"], "OpenCode command/workflow files."),
   assetCapability("opencode", "cli", "plugin", "supported", ["emit-file"], "OpenCode local plugin modules."),
   assetCapability("opencode", "cli", "custom-agent", "supported", ["emit-file"], "OpenCode custom agent files."),
+  assetCapability("sumi", "cli", "custom-agent", "supported", ["emit-file"], "Sumi Markdown agent definitions in its explicit resolved config or project directory.", ">=0.2.22 <0.3.0"),
   assetCapability("codewith", "cli", "skill", "supported", ["emit-file"], "Codewith skill bundle files."),
   assetCapability("codewith", "cli", "plugin", "conditional", ["install-local", "install-marketplace"], "Codewith plugin installation requires an explicit installer."),
   assetCapability("aicopilot", "cli", "skill", "supported", ["emit-file"], "AICopilot discovered skill files."),
@@ -465,6 +467,10 @@ function normalizeProfileAssetBinding(value) {
   const rollback = record["rollback"];
   if (!ASSET_ROLLBACK_POLICIES.includes(rollback))
     throw new Error(`Invalid asset rollback policy: ${String(rollback)}`);
+  const nativeAgent = record["nativeAgent"] === undefined ? undefined : normalizeNativeAgentMetadata(record["nativeAgent"]);
+  if (nativeAgent && (kind !== "custom-agent" || strategy !== "emit-file" || !["claude", "sumi", "opencode"].includes(provider))) {
+    throw new Error("nativeAgent metadata requires a supported emitted custom-agent definition.");
+  }
   return {
     schema: PROFILE_ASSET_BINDING_SCHEMA,
     assetKey,
@@ -484,10 +490,65 @@ function normalizeProfileAssetBinding(value) {
       root,
       relativePath: nonEmptyString(destinationRecord["relativePath"], "destination.relativePath")
     },
+    ...nativeAgent ? { nativeAgent } : {},
     uninstall,
     rollback
   };
 }
+function normalizeNativeAgentMetadata(value) {
+  const record = objectRecord(value, "nativeAgent");
+  if (Object.keys(record).some((key) => !["name", "description", "frontmatter"].includes(key)))
+    throw new Error("Unknown nativeAgent metadata field.");
+  const name = nonEmptyString(record["name"], "nativeAgent.name");
+  const description = nonEmptyString(record["description"], "nativeAgent.description");
+  if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(name) || name.length > 128)
+    throw new Error("Invalid nativeAgent.name.");
+  if (description.length > 4096 || /[\r\n\0]/.test(description))
+    throw new Error("Invalid nativeAgent.description.");
+  if (record["frontmatter"] === undefined)
+    return { name, description };
+  const frontmatter = record["frontmatter"];
+  if (typeof frontmatter !== "string" || frontmatter.length > 16384 || frontmatter.includes("\x00"))
+    throw new Error("Invalid nativeAgent.frontmatter.");
+  const match = /^---\r?\n([\s\S]*?)\r?\n---\r?\n$/.exec(frontmatter);
+  if (!match)
+    throw new Error("nativeAgent.frontmatter requires one complete newline-terminated YAML header.");
+  const scalar = (raw) => {
+    if (raw.startsWith('"')) {
+      try {
+        const parsed = JSON.parse(raw);
+        return typeof parsed === "string" ? parsed : undefined;
+      } catch {
+        return;
+      }
+    }
+    if (!/^[A-Za-z0-9][A-Za-z0-9 _.,:;()/?@+-]*$/.test(raw) || /:(?:\s|$)/.test(raw))
+      return;
+    if (/^(?:true|yes|on|y)$/i.test(raw))
+      return true;
+    if (/^(?:false|no|off|n)$/i.test(raw))
+      return false;
+    if (/^null$/i.test(raw))
+      return null;
+    if (/^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?$/.test(raw))
+      return Number(raw);
+    if (/^[0-9]/.test(raw))
+      return;
+    return raw;
+  };
+  const fields = new Map;
+  for (const line of match[1].split(/\r?\n/)) {
+    if (!line.trim() || line.startsWith("#"))
+      continue;
+    const field = /^([A-Za-z][A-Za-z0-9_-]*):[ \t]+(.+)$/.exec(line);
+    if (!field || fields.has(field[1]) || scalar(field[2]) === undefined)
+      throw new Error("nativeAgent.frontmatter requires unambiguous, unique flat scalar fields.");
+    fields.set(field[1], scalar(field[2]));
+  }
+  if (fields.get("name") !== name || fields.get("description") !== description)
+    throw new Error("nativeAgent.frontmatter name and description must match explicit metadata.");
+  return { name, description, frontmatter };
+}
 function parseJson(value) {
   try {
     return JSON.parse(value);
@@ -2123,7 +2184,7 @@ function isNotFoundHttpError2(err) {
 var localStoreModulePromise = null;
 function localStoreModule() {
   if (!localStoreModulePromise)
-    localStoreModulePromise = import("./local-1c1qxzvx.js");
+    localStoreModulePromise = import("./local-5dsm856v.js");
   return localStoreModulePromise;
 }
 
@@ -7344,7 +7405,7 @@ function detectMachineContext(overrides = {}) {
     created_at: "",
     os_family: osFamily,
     home_dir: homeDir4,
-    workspace_root: overrides.workspace_root ?? join5(homeDir4, osFamily === "macos" ? "Workspace" : "workspace"),
+    workspace_root: overrides.workspace_root ?? "",
     bun_bin_dir: bunBinDir,
     bun_path: overrides.bun_path ?? defaultBunPath,
     path_prefix: overrides.path_prefix ?? (osFamily === "macos" ? `${join5("/opt", "homebrew", "bin")}:${bunBinDir}` : bunBinDir)
@@ -7357,7 +7418,7 @@ function machineContextToVariables(machine) {
     OS_FAMILY: machine.os_family,
     ARCH: machine.arch ?? "",
     HOME_DIR: machine.home_dir,
-    WORKSPACE_ROOT: machine.workspace_root,
+    ...machine.workspace_root ? { WORKSPACE_ROOT: machine.workspace_root } : {},
     BUN_BIN_DIR: machine.bun_bin_dir,
     BUN_PATH: machine.bun_path,
     PATH_PREFIX: machine.path_prefix

package/dist/chunks/{index-n6nh6f5r.js → index-enh4yv85.js}

@@ -7510,6 +7510,7 @@ function assetCapability(provider, surface, kind, support, strategies, note, pro
 var ASSET_CAPABILITY_DESCRIPTORS = Object.freeze([
   assetCapability("claude", "code", "skill", "supported", ["emit-file"], "Claude Code project or profile skill files."),
   assetCapability("claude", "code", "workflow", "supported", ["emit-file"], "Claude Code command and workflow files."),
+  assetCapability("claude", "code", "custom-agent", "supported", ["emit-file"], "Claude Code Markdown subagents with native frontmatter in agents/.", ">=2.1.276 <3.0.0"),
   assetCapability("claude", "code", "hook", "supported", ["emit-file"], "Claude Code hook configuration fragments."),
   assetCapability("claude", "code", "plugin", "conditional", ["install-marketplace"], "Claude marketplace installation requires an explicit installer."),
   assetCapability("codex", "cli", "skill", "supported", ["emit-file"], "Codex skill bundle files."),
@@ -7520,6 +7521,7 @@ var ASSET_CAPABILITY_DESCRIPTORS = Object.freeze([
   assetCapability("opencode", "cli", "workflow", "supported", ["emit-file"], "OpenCode command/workflow files."),
   assetCapability("opencode", "cli", "plugin", "supported", ["emit-file"], "OpenCode local plugin modules."),
   assetCapability("opencode", "cli", "custom-agent", "supported", ["emit-file"], "OpenCode custom agent files."),
+  assetCapability("sumi", "cli", "custom-agent", "supported", ["emit-file"], "Sumi Markdown agent definitions in its explicit resolved config or project directory.", ">=0.2.22 <0.3.0"),
   assetCapability("codewith", "cli", "skill", "supported", ["emit-file"], "Codewith skill bundle files."),
   assetCapability("codewith", "cli", "plugin", "conditional", ["install-local", "install-marketplace"], "Codewith plugin installation requires an explicit installer."),
   assetCapability("aicopilot", "cli", "skill", "supported", ["emit-file"], "AICopilot discovered skill files."),
@@ -7623,6 +7625,10 @@ function normalizeProfileAssetBinding(value) {
   const rollback = record["rollback"];
   if (!ASSET_ROLLBACK_POLICIES.includes(rollback))
     throw new Error(`Invalid asset rollback policy: ${String(rollback)}`);
+  const nativeAgent = record["nativeAgent"] === undefined ? undefined : normalizeNativeAgentMetadata(record["nativeAgent"]);
+  if (nativeAgent && (kind !== "custom-agent" || strategy !== "emit-file" || !["claude", "sumi", "opencode"].includes(provider))) {
+    throw new Error("nativeAgent metadata requires a supported emitted custom-agent definition.");
+  }
   return {
     schema: PROFILE_ASSET_BINDING_SCHEMA,
     assetKey,
@@ -7642,6 +7648,7 @@ function normalizeProfileAssetBinding(value) {
       root,
       relativePath: nonEmptyString(destinationRecord["relativePath"], "destination.relativePath")
     },
+    ...nativeAgent ? { nativeAgent } : {},
     uninstall,
     rollback
   };
@@ -7717,6 +7724,7 @@ function compileAssetPlan(input) {
         allowed: binding.source.allowed
       },
       destination: binding.destination,
+      ...binding.nativeAgent ? { nativeAgent: binding.nativeAgent } : {},
       support,
       action,
       mutationMode: input.mode,
@@ -7781,6 +7789,18 @@ function validateAssetSourceAndDestination(bundle, binding, diagnostics) {
     pathSafe = false;
     diagnostics.push(diagnostic("error", "ASSET_DESTINATION_UNSAFE", binding.assetKey, error.message));
   }
+  if (pathSafe && binding.kind === "custom-agent" && binding.destination.strategy === "emit-file" && (binding.selector.provider === "claude" || binding.selector.provider === "sumi" || binding.nativeAgent) && (binding.destination.root !== "target-home" || !/^agents\/[A-Za-z0-9][A-Za-z0-9_-]*\.md$/.test(safeRelativePath(binding.destination.relativePath)))) {
+    pathSafe = false;
+    diagnostics.push(diagnostic("error", "ASSET_CUSTOM_AGENT_DESTINATION_UNSUPPORTED", binding.assetKey, "Native custom-agent definitions require agents/<name>.md beneath an explicit target-home."));
+  }
+  if (binding.nativeAgent) {
+    if (posix.basename(binding.destination.relativePath, ".md") !== binding.nativeAgent.name) {
+      diagnostics.push(diagnostic("error", "ASSET_NATIVE_AGENT_NAME_MISMATCH", binding.assetKey, "Native role name must match its destination filename."));
+    }
+    if (/^\uFEFF?---[ \t]*\r?\n/.test(bundle.content)) {
+      diagnostics.push(diagnostic("error", "ASSET_NATIVE_AGENT_DOUBLE_HEADER", binding.assetKey, "Canonical role prose must not already contain frontmatter when nativeAgent metadata is supplied."));
+    }
+  }
   const expectedLocator = bundle.locator;
   if (!binding.source.immutable || binding.source.locator !== expectedLocator) {
     diagnostics.push(diagnostic("error", "ASSET_SOURCE_MUTABLE_OR_UNPINNED", binding.assetKey, `Asset source must be pinned to ${expectedLocator}.`));
@@ -7836,6 +7856,72 @@ function safeRelativePath(value) {
   }
   return normalized;
 }
+function normalizeNativeAgentMetadata(value) {
+  const record = objectRecord(value, "nativeAgent");
+  if (Object.keys(record).some((key) => !["name", "description", "frontmatter"].includes(key)))
+    throw new Error("Unknown nativeAgent metadata field.");
+  const name = nonEmptyString(record["name"], "nativeAgent.name");
+  const description = nonEmptyString(record["description"], "nativeAgent.description");
+  if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(name) || name.length > 128)
+    throw new Error("Invalid nativeAgent.name.");
+  if (description.length > 4096 || /[\r\n\0]/.test(description))
+    throw new Error("Invalid nativeAgent.description.");
+  if (record["frontmatter"] === undefined)
+    return { name, description };
+  const frontmatter = record["frontmatter"];
+  if (typeof frontmatter !== "string" || frontmatter.length > 16384 || frontmatter.includes("\x00"))
+    throw new Error("Invalid nativeAgent.frontmatter.");
+  const match = /^---\r?\n([\s\S]*?)\r?\n---\r?\n$/.exec(frontmatter);
+  if (!match)
+    throw new Error("nativeAgent.frontmatter requires one complete newline-terminated YAML header.");
+  const scalar = (raw) => {
+    if (raw.startsWith('"')) {
+      try {
+        const parsed = JSON.parse(raw);
+        return typeof parsed === "string" ? parsed : undefined;
+      } catch {
+        return;
+      }
+    }
+    if (!/^[A-Za-z0-9][A-Za-z0-9 _.,:;()/?@+-]*$/.test(raw) || /:(?:\s|$)/.test(raw))
+      return;
+    if (/^(?:true|yes|on|y)$/i.test(raw))
+      return true;
+    if (/^(?:false|no|off|n)$/i.test(raw))
+      return false;
+    if (/^null$/i.test(raw))
+      return null;
+    if (/^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?$/.test(raw))
+      return Number(raw);
+    if (/^[0-9]/.test(raw))
+      return;
+    return raw;
+  };
+  const fields = new Map;
+  for (const line of match[1].split(/\r?\n/)) {
+    if (!line.trim() || line.startsWith("#"))
+      continue;
+    const field = /^([A-Za-z][A-Za-z0-9_-]*):[ \t]+(.+)$/.exec(line);
+    if (!field || fields.has(field[1]) || scalar(field[2]) === undefined)
+      throw new Error("nativeAgent.frontmatter requires unambiguous, unique flat scalar fields.");
+    fields.set(field[1], scalar(field[2]));
+  }
+  if (fields.get("name") !== name || fields.get("description") !== description)
+    throw new Error("nativeAgent.frontmatter name and description must match explicit metadata.");
+  return { name, description, frontmatter };
+}
+function renderNativeAgentContent(content, metadata) {
+  if (!metadata)
+    return content;
+  const value = normalizeNativeAgentMetadata(metadata);
+  if (/^\uFEFF?---[ \t]*\r?\n/.test(content))
+    throw new Error("Canonical role prose already contains frontmatter.");
+  return (value.frontmatter ?? `---
+name: ${JSON.stringify(value.name)}
+description: ${JSON.stringify(value.description)}
+---
+`) + content;
+}
 function diagnostic(severity, code, assetKey, message) {
   return { severity, code, assetKey, message };
 }
@@ -9066,7 +9152,7 @@ function buildCursorRuleFiles(targetHome, adapter, sources) {
     return [sourceFile, ...ruleFiles];
   });
 }
-function buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig) {
+function buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig, projectRoot) {
   const surface = adapter.providerSurface ?? "legacy-dual";
   const fragments = sources.flatMap((source, index) => [
     makeFile(targetHome, fragmentPath(adapter, index, source), "fragment", sectionForSource(source), [source.id]),
@@ -9086,13 +9172,13 @@ function buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfi
   ]);
   const existingConfigPath = joinTarget(targetHome, adapter.configFile);
   const selectedConfig = existsSync4(existingConfigPath) ? readOpenCodeConfig(readFileSync4(existingConfigPath, "utf8"), existingConfigPath) : providerConfig ? readOpenCodeConfig(providerConfig.content, providerConfig.sourceId) : {};
-  const preservedInstructions = normalizeOpenCodeInstructions(selectedConfig["instructions"]).filter((path) => !pathIsManagedOpenCodeInstruction(path, adapter.managedDir));
+  const preservedInstructions = normalizeOpenCodeInstructions(selectedConfig["instructions"]).filter((path) => !pathIsManagedOpenCodeInstruction(path, adapter.managedDir, targetHome, projectRoot));
   const config = {
     ...selectedConfig,
     $schema: typeof selectedConfig["$schema"] === "string" ? selectedConfig["$schema"] : "https://opencode.ai/config.json",
     instructions: [
       ...preservedInstructions,
-      ...fragments.map((file) => file.relativePath)
+      ...fragments.map((file) => file.path)
     ]
   };
   const configSourceIds = [
@@ -9135,9 +9221,62 @@ function normalizeOpenCodeInstructions(value) {
   }
   return value;
 }
-function pathIsManagedOpenCodeInstruction(path, managedDir) {
-  const normalized = posix2.normalize(path.replaceAll("\\", "/")).replace(/^\.\//, "");
-  return normalized === managedDir || normalized.startsWith(`${managedDir}/`);
+function pathIsManagedOpenCodeInstruction(reference, managedDir, targetHome, projectRoot) {
+  const normalizedManagedDir = posix2.normalize(managedDir.replaceAll("\\", "/"));
+  const candidates = canonicalOpenCodeInstructionPaths(reference, targetHome, projectRoot);
+  return candidates.some((candidate) => candidate === normalizedManagedDir || candidate.endsWith(`/${normalizedManagedDir}`) || candidate.includes(`/${normalizedManagedDir}/`));
+}
+function canonicalOpenCodeInstructionPaths(reference, targetHome, projectRoot) {
+  const portable = decodeOpenCodePathEscapes(reference.replaceAll("\\", "/")).replaceAll("\\", "/");
+  if (portable.includes("\x00")) {
+    throw new Error("OpenCode config instruction references cannot contain NUL bytes.");
+  }
+  const windowsAbsolute = /^[A-Za-z]:\//.test(portable);
+  const uriScheme = windowsAbsolute ? null : /^([A-Za-z][A-Za-z0-9+.-]*):/.exec(portable)?.[1]?.toLowerCase();
+  if (uriScheme && uriScheme !== "file")
+    return [];
+  if (uriScheme === "file") {
+    const fileReference = reference.replaceAll("\\", "/");
+    if (!/^file:\/\//i.test(fileReference)) {
+      throw new Error("OpenCode config contains an invalid file URL instruction reference.");
+    }
+    let url;
+    try {
+      url = new URL(fileReference);
+    } catch {
+      throw new Error("OpenCode config contains an invalid file URL instruction reference.");
+    }
+    if (url.protocol !== "file:" || url.username || url.password || url.port || url.search || url.hash) {
+      throw new Error("OpenCode config contains an invalid file URL instruction reference.");
+    }
+    const pathname = decodeOpenCodePathEscapes(url.pathname);
+    if (pathname.includes("\x00")) {
+      throw new Error("OpenCode config instruction references cannot contain NUL bytes.");
+    }
+    const host = url.hostname && url.hostname !== "localhost" ? `//${url.hostname}` : "";
+    return [normalizePortableOpenCodePath(`${host}${pathname}`)];
+  }
+  if (posix2.isAbsolute(portable) || windowsAbsolute || portable.startsWith("//")) {
+    return [normalizePortableOpenCodePath(portable)];
+  }
+  const roots = [
+    ...projectRoot ? [resolveSessionPath(projectRoot)] : [],
+    resolveSessionPath(targetHome)
+  ];
+  return [...new Set(roots.map((root) => normalizePortableOpenCodePath(posix2.join(root.replaceAll("\\", "/"), portable))))];
+}
+function decodeOpenCodePathEscapes(value) {
+  return value.replace(/(?:%[a-fA-F0-9]{2})+/g, (encoded) => {
+    try {
+      return decodeURIComponent(encoded);
+    } catch {
+      return encoded;
+    }
+  });
+}
+function normalizePortableOpenCodePath(value) {
+  const normalized = posix2.normalize(value.replaceAll("\\", "/"));
+  return normalized.startsWith("//") ? `/${normalized.replace(/^\/+/u, "")}` : normalized;
 }
 function buildAntigravityRuleFiles(targetHome, adapter, sources) {
   return sources.flatMap((source, index) => {
@@ -9191,7 +9330,7 @@ function makeAntigravityRuleFile(targetHome, relativePath, content, sourceIds) {
   }
   return file;
 }
-function buildFiles(targetHome, adapter, profile, sources, providerConfig, providerVersion) {
+function buildFiles(targetHome, adapter, profile, sources, providerConfig, providerVersion, projectRoot) {
   switch (adapter.mode) {
     case "native-imports":
       return buildNativeImportFiles(targetHome, adapter, profile, sources, providerVersion);
@@ -9200,7 +9339,7 @@ function buildFiles(targetHome, adapter, profile, sources, providerConfig, provi
     case "cursor-mdc":
       return buildCursorRuleFiles(targetHome, adapter, sources);
     case "opencode-instructions":
-      return buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig);
+      return buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig, projectRoot);
     case "antigravity-rules":
       return buildAntigravityRuleFiles(targetHome, adapter, sources);
     case "provider-rules":
@@ -9229,12 +9368,13 @@ function buildAssetFiles(input, targetHome, blocked) {
     if (!relativePath || relativePath === ".." || relativePath.startsWith("../") || isAbsolute3(relativePath)) {
       throw new Error(`Asset ${item.assetKey} is outside the session snapshot root; use a project-scoped session plan for atomic application.`);
     }
+    const renderedContent = renderNativeAgentContent(content, item.nativeAgent);
     return {
       path,
       relativePath: assertSafeRelativePath(relativePath),
       role: "asset",
-      content,
-      sha256: sha2565(content),
+      content: renderedContent,
+      sha256: sha2565(renderedContent),
       sourceIds: [item.sourceConfigId, item.assetId]
     };
   });
@@ -9413,7 +9553,7 @@ function resolveSessionTargetOwnership(input, target) {
     tool: input.tool,
     profile: input.profile,
     targetHome: target.targetHome,
-    projectRoot: null,
+    projectRoot: input.tool === "opencode" && input.projectRoot ? resolveSessionPath(input.projectRoot) : null,
     ownedBy: "open-configs",
     canonicalOwner: "instructions",
     writer: {
@@ -9474,7 +9614,7 @@ function planSessionRender(input) {
   if (input.providerConfig && input.tool !== "opencode") {
     throw new Error("Provider base config is supported only for OpenCode session renders.");
   }
-  const baseFiles = blocked ? [] : buildFiles(targetHome, adapter, input.profile, orderedSources, input.providerConfig, input.provider_version);
+  const baseFiles = blocked ? [] : buildFiles(targetHome, adapter, input.profile, orderedSources, input.providerConfig, input.provider_version, input.projectRoot);
   const projectContext = blocked ? null : composeProjectContextSessionRender({
     tool: input.tool,
     adapter_mode: adapter.mode,
@@ -9575,6 +9715,7 @@ function planSessionRender(input) {
           mutationMode: item.mutationMode,
           destination: item.destination,
           digest: item.source.digest,
+          ...item.nativeAgent ? { nativeAgent: item.nativeAgent } : {},
           exactOnceKey: item.exactOnceKey
         }))
       }
@@ -11911,7 +12052,7 @@ function formatCliError(err, env = process.env) {
 var localStoreModulePromise = null;
 function localStoreModule() {
   if (!localStoreModulePromise)
-    localStoreModulePromise = import("./local-hc67bynj.js");
+    localStoreModulePromise = import("./local-yxsbs8x3.js");
   return localStoreModulePromise;
 }
 
@@ -12723,7 +12864,7 @@ function detectMachineContext(overrides = {}) {
     created_at: "",
     os_family: osFamily,
     home_dir: homeDir4,
-    workspace_root: overrides.workspace_root ?? join7(homeDir4, osFamily === "macos" ? "Workspace" : "workspace"),
+    workspace_root: overrides.workspace_root ?? "",
     bun_bin_dir: bunBinDir,
     bun_path: overrides.bun_path ?? defaultBunPath,
     path_prefix: overrides.path_prefix ?? (osFamily === "macos" ? `${join7("/opt", "homebrew", "bin")}:${bunBinDir}` : bunBinDir)
@@ -12736,7 +12877,7 @@ function machineContextToVariables(machine) {
     OS_FAMILY: machine.os_family,
     ARCH: machine.arch ?? "",
     HOME_DIR: machine.home_dir,
-    WORKSPACE_ROOT: machine.workspace_root,
+    ...machine.workspace_root ? { WORKSPACE_ROOT: machine.workspace_root } : {},
     BUN_BIN_DIR: machine.bun_bin_dir,
     BUN_PATH: machine.bun_path,
     PATH_PREFIX: machine.path_prefix

package/dist/chunks/{index-ape24zc0.js → index-n9arv47w.js}

@@ -15,7 +15,7 @@ import {
   resolveConfigStore,
   resolveProfileVariables,
   stampCursorGlobalAuthorityMarker
-} from "./index-pq18fdbj.js";
+} from "./index-dwagz53p.js";
 import {
   isSecretVarName,
   redactFormatForTarget,

package/dist/chunks/{index-ek15201v.js → index-z27xp7fh.js}

@@ -5,7 +5,7 @@ import {
   expandPath,
   getConfigHome,
   normalizeTargetPath
-} from "./index-ape24zc0.js";
+} from "./index-n9arv47w.js";
 import {
   applyTransform,
   detectMachineContext,
@@ -13,7 +13,7 @@ import {
   resolveConfigStore,
   retiredOrUnsupportedAgentReason,
   templateizeMachineContent
-} from "./index-pq18fdbj.js";
+} from "./index-dwagz53p.js";
 import {
   isSecretVarName,
   redactContent,

package/dist/chunks/{local-1c1qxzvx.js → local-5dsm856v.js}

@@ -14,7 +14,7 @@ import {
   normalizeOsFamily,
   normalizeProfileAssetBinding,
   normalizeProfileConfigBinding
-} from "./index-pq18fdbj.js";
+} from "./index-dwagz53p.js";
 import"./index-35z65jsa.js";
 import {
   ConfigNotFoundError,

package/dist/chunks/{local-hc67bynj.js → local-yxsbs8x3.js}

@@ -7,7 +7,7 @@ import {
   normalizeOsFamily,
   normalizeProfileAssetBinding,
   normalizeProfileConfigBinding
-} from "./index-n6nh6f5r.js";
+} from "./index-enh4yv85.js";
 import {
   ConfigNotFoundError,
   ConfigVersionConflictError,

package/dist/chunks/{sync-azd9t4p8.js → sync-6r1v8hd3.js}

@@ -12,9 +12,9 @@ import {
   syncProject,
   syncToDir,
   syncToDisk
-} from "./index-18j7x3xw.js";
-import"./index-y8410ve0.js";
-import"./index-n6nh6f5r.js";
+} from "./index-axs3yftz.js";
+import"./index-6sbmg1vc.js";
+import"./index-enh4yv85.js";
 import"./index-preyvj8n.js";
 import"./index-fpeyzn3n.js";
 import"./index-bsan4c16.js";

package/dist/chunks/{sync-12m3vs6g.js → sync-k3pab4s6.js}

@@ -12,9 +12,9 @@ import {
   syncProject,
   syncToDir,
   syncToDisk
-} from "./index-ek15201v.js";
-import"./index-ape24zc0.js";
-import"./index-pq18fdbj.js";
+} from "./index-z27xp7fh.js";
+import"./index-n9arv47w.js";
+import"./index-dwagz53p.js";
 import"./index-35z65jsa.js";
 import"./index-27az1qb1.js";
 import"./index-nnwp92tk.js";