@hasna/skills 0.10.19 → 0.10.20

package/bin/index.js

@@ -36868,7 +36868,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.19",
+    version: "0.10.20",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -51052,6 +51052,35 @@ function projectCodexNativeSkillCatalog(response, cwd2) {
     return { name: value.name, path: value.path, enabled: value.enabled, pluginId: value.pluginId ?? null };
   });
 }
+function projectCodexInstalledPlugins(response) {
+  if (!object4(response) || !Array.isArray(response.marketplaces) || !Array.isArray(response.marketplaceLoadErrors) || response.marketplaceLoadErrors.length !== 0 || response.marketplaces.length > MAX_SKILLS)
+    refuse();
+  const plugins = [];
+  for (const marketplace of response.marketplaces) {
+    if (!object4(marketplace) || !scalar(marketplace.name, MAX_NAME_BYTES) || !Array.isArray(marketplace.plugins) || marketplace.plugins.length > MAX_SKILLS)
+      refuse();
+    for (const value of marketplace.plugins) {
+      if (!object4(value) || !scalar(value.id, MAX_PLUGIN_ID_BYTES) || !scalar(value.name, MAX_NAME_BYTES) || value.id !== `${value.name}@${marketplace.name}`)
+        refuse();
+      plugins.push({ ...value, marketplace: marketplace.name });
+    }
+  }
+  return projectCodexInstalledPluginEntries(plugins);
+}
+function projectCodexInstalledPluginEntries(value) {
+  if (!Array.isArray(value) || value.length > MAX_SKILLS)
+    refuse();
+  const ids = new Set;
+  return value.map((item) => {
+    if (!object4(item) || !scalar(item.id, MAX_PLUGIN_ID_BYTES) || !scalar(item.name, MAX_NAME_BYTES) || typeof item.installed !== "boolean" || typeof item.enabled !== "boolean" || item.localVersion !== null && !scalar(item.localVersion, MAX_NAME_BYTES))
+      refuse();
+    const at2 = item.id.lastIndexOf("@");
+    if (at2 < 1 || item.id.slice(0, at2) !== item.name || at2 === item.id.length - 1 || ids.has(item.id))
+      refuse();
+    ids.add(item.id);
+    return { id: item.id, name: item.name, installed: item.installed, enabled: item.enabled, localVersion: item.localVersion ?? null };
+  });
+}
 async function captureCodexNativeSkillCatalog(options, connect = connectCodexHookRpc) {
   if (!absolutePath2(options.cwd) || !absolutePath2(options.home))
     refuse();
@@ -51065,7 +51094,13 @@ async function captureCodexNativeSkillCatalog(options, connect = connectCodexHoo
     if (!SUPPORTED_NAME_CONTROL_VERSIONS.has(rpc.version))
       throw new Error("CODEX_NATIVE_SKILL_CATALOG_UNSUPPORTED_VERSION");
     const response = await rpc.request("skills/list", { cwds: [options.cwd], forceReload: true });
-    return { version: rpc.version, cwd: options.cwd, skills: projectCodexNativeSkillCatalog(response, options.cwd) };
+    const installed = await rpc.request("plugin/installed", { cwds: [options.cwd] });
+    return {
+      version: rpc.version,
+      cwd: options.cwd,
+      skills: projectCodexNativeSkillCatalog(response, options.cwd),
+      plugins: projectCodexInstalledPlugins(installed)
+    };
   } finally {
     await rpc.close();
   }
@@ -51107,14 +51142,14 @@ function isCodexNativeSkillDisabled(skill, rules) {
   }
   return disabled;
 }
-var MAX_SKILLS = 4096, MAX_NAME_BYTES = 1024, MAX_PATH_BYTES = 16384, SUPPORTED_NAME_CONTROL_VERSIONS, object4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value), scalar = (value, max2) => typeof value === "string" && value.length > 0 && value.trim() === value && Buffer.byteLength(value, "utf8") <= max2 && !/[\u0000-\u001f\u007f]/u.test(value), absolutePath2 = (value) => scalar(value, MAX_PATH_BYTES) && isAbsolute10(value);
+var MAX_SKILLS = 4096, MAX_NAME_BYTES = 1024, MAX_PATH_BYTES = 16384, MAX_PLUGIN_ID_BYTES = 1024, SUPPORTED_NAME_CONTROL_VERSIONS, object4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value), scalar = (value, max2) => typeof value === "string" && value.length > 0 && value.trim() === value && Buffer.byteLength(value, "utf8") <= max2 && !/[\u0000-\u001f\u007f]/u.test(value), absolutePath2 = (value) => scalar(value, MAX_PATH_BYTES) && isAbsolute10(value);
 var init_codex_native_skill_catalog = __esm(() => {
   init_codex_hook_rpc();
   SUPPORTED_NAME_CONTROL_VERSIONS = new Set(["codex-cli 0.159.2"]);
 });
 
 // src/lib/codex-plugin-skill-controls.ts
-import { dirname as dirname10, join as join18, resolve as resolve10, sep as sep4 } from "path";
+import { basename as basename5, dirname as dirname10, join as join18, relative as relative4, resolve as resolve10, sep as sep4 } from "path";
 import { lstatSync as lstatSync12, readdirSync as readdirSync6, readlinkSync as readlinkSync3, realpathSync as realpathSync5 } from "fs";
 function refuse2() {
   throw new Error("CODEX_NATIVE_SKILL_IDENTITY_UNSUPPORTED: review native plugin names and hook controls");
@@ -51154,6 +51189,9 @@ function rootControls(root, read2) {
   }
   if (!manifest || typeof manifest !== "object" || Array.isArray(manifest) || !identifier2(manifest.name))
     refuse2();
+  const cacheVersion = basename5(root), declaredVersion = manifest.version === undefined ? "" : typeof manifest.version === "string" ? manifest.version.trim() : null;
+  if (declaredVersion === null || (declaredVersion ? declaredVersion !== cacheVersion : cacheVersion !== CODEX_DEFAULT_AGENT_PLUGIN_VERSION))
+    refuse2();
   if (manifest.hooks !== undefined || manifest.mcpServers !== undefined || manifest.commands !== undefined || manifest.apps !== undefined && manifest.apps !== "./.app.json" || ["hooks", ".mcp.json"].some((path) => lstatSync12(join18(root, path), { throwIfNoEntry: false })))
     refuse2();
   const app = join18(root, ".app.json"), present = lstatSync12(app, { throwIfNoEntry: false });
@@ -51230,22 +51268,48 @@ function reviewedCodexPluginCapabilitiesUnchanged(cache3, controls, read2) {
     return false;
   }
 }
-function reviewCodexPluginSkillControls(catalog, documents, cache3, cwd2, read2) {
+function reviewCodexPluginSkillControls(catalog, documents, cache3, cwd2, read2, rules) {
   if (catalog?.version !== "codex-cli 0.159.2" || catalog.cwd !== cwd2)
     refuse2();
   const skills = projectCodexNativeSkillCatalog({ data: [{ cwd: cwd2, errors: [], skills: catalog.skills }] }, cwd2);
   const allowed = new Set(documents), result2 = [];
-  for (const skill of skills) {
-    if (!allowed.has(skill.path) || !skill.path.startsWith(cache3 + sep4))
+  let installedPlugins;
+  try {
+    installedPlugins = projectCodexInstalledPluginEntries(catalog.plugins ?? []);
+  } catch {
+    refuse2();
+  }
+  const candidates = catalog.plugins === undefined ? skills.map((skill) => skill.path).filter((path) => allowed.has(path)) : allowed;
+  for (const document3 of candidates) {
+    if (!document3.startsWith(cache3 + sep4))
       continue;
-    if (skills.filter((other) => other.name === skill.name).length !== 1)
+    const parsed = identity4(document3, cache3, read2);
+    if (parsed.name === "skills-cli" || parsed.name.endsWith(":skills-cli"))
+      refuse2();
+    const cacheParts = relative4(cache3, parsed.pluginParent).split(sep4);
+    if (cacheParts.length !== 2 || cacheParts.some((part) => !identifier2(part)))
       refuse2();
-    if (!skill.pluginId || skill.name === "skills-cli" || skill.name.endsWith(":skills-cli"))
+    const [marketplace, pluginName] = cacheParts;
+    if (pluginName !== parsed.namespace)
       refuse2();
-    const parsed = identity4(skill.path, cache3, read2);
-    if (parsed.name !== skill.name)
+    const expectedPluginId = `${pluginName}@${marketplace}`;
+    const listed = skills.filter((skill) => skill.path === document3);
+    if (listed.length > 1)
       refuse2();
-    result2.push({ ...parsed, pluginId: skill.pluginId });
+    if (listed.length === 1) {
+      if (listed[0].name !== parsed.name || listed[0].pluginId !== expectedPluginId)
+        refuse2();
+    } else {
+      const installed = installedPlugins.filter((plugin) => plugin.id === expectedPluginId && plugin.name === pluginName);
+      if (installed.length !== 1 || !installed[0].installed || !installed[0].enabled || !installed[0].localVersion)
+        refuse2();
+      if (installed[0].localVersion !== basename5(dirname10(dirname10(dirname10(document3)))))
+        continue;
+      const exactPathDeny = Array.isArray(rules) && rules.some((rule) => rule?.path === document3 && rule?.enabled === false);
+      if (!exactPathDeny || !isCodexNativeSkillDisabled({ name: parsed.name, path: document3, pluginId: expectedPluginId, enabled: true }, rules))
+        refuse2();
+    }
+    result2.push({ ...parsed, pluginId: expectedPluginId });
   }
   if (!result2.length || new Set(result2.map((item) => item.name)).size !== result2.length)
     refuse2();
@@ -51279,7 +51343,7 @@ enabled = false
   }
   return text2;
 }
-var identifier2 = (v) => typeof v === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(v);
+var identifier2 = (v) => typeof v === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(v), CODEX_DEFAULT_AGENT_PLUGIN_VERSION = "1.0.0";
 var init_codex_plugin_skill_controls = __esm(() => {
   init_claude_settings_witness();
   init_codex_native_skill_catalog();
@@ -51794,7 +51858,7 @@ var init_agent_codex = __esm(() => {
 // src/lib/agent-integration.ts
 import { createHash as createHash11, randomUUID as randomUUID5 } from "crypto";
 import { existsSync as existsSync12, lstatSync as lstatSync15, statSync as statSync8, mkdirSync as mkdirSync5, readFileSync as readFileSync13, readdirSync as readdirSync8, opendirSync as opendirSync3, readlinkSync as readlinkSync4, realpathSync as realpathSync6, renameSync as renameSync2, rmdirSync as rmdirSync2, writeFileSync as writeFileSync4, unlinkSync as unlinkSync3, chmodSync, openSync as openSync8, closeSync as closeSync8, fsyncSync as fsyncSync2, fstatSync as fstatSync8, readSync as readSync6, constants as constants8, linkSync } from "fs";
-import { dirname as dirname11, join as join21, resolve as resolve11, relative as relative4, isAbsolute as isAbsolute11, sep as sep5 } from "path";
+import { dirname as dirname11, join as join21, resolve as resolve11, relative as relative5, isAbsolute as isAbsolute11, sep as sep5 } from "path";
 import { homedir as homedir3 } from "os";
 function assertSafePath(path) {
   let cursor = resolve11(path);
@@ -51818,7 +51882,7 @@ function readRootAlias(home, agent) {
   const targetStat = lstatSync15(targetPath, { throwIfNoEntry: false });
   if (!targetStat?.isDirectory())
     throw new Error(`Agent root alias must target an existing directory: ${alias}`);
-  const target = realpathSync6(targetPath), inside = relative4(realHome, target);
+  const target = realpathSync6(targetPath), inside = relative5(realHome, target);
   if (!inside || inside === ".." || inside.startsWith(`..${sep5}`) || isAbsolute11(inside))
     throw new Error(`Agent root alias target must be inside the real home: ${alias}`);
   return { agent, home: realHome, alias, target, link: link2, aliasIdentity: `${stat.dev}:${stat.ino}:${stat.ctimeNs}`, targetIdentity: `${targetStat.dev}:${targetStat.ino}` };
@@ -51836,7 +51900,7 @@ function rootAliases(home, allowed = false) {
 }
 function canonicalAgentPath(path, aliases) {
   const absolute = resolve11(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep5));
-  return binding ? join21(binding.target, relative4(binding.alias, absolute)) : absolute;
+  return binding ? join21(binding.target, relative5(binding.alias, absolute)) : absolute;
 }
 function disabledCodexSkillPaths(config, aliases) {
   const skills = config.skills;
@@ -51907,7 +51971,7 @@ function treeHash(root) {
     const stat = lstatSync15(path);
     if (stat.isSymbolicLink())
       throw new Error(`Refusing symlink in skill: ${path}`);
-    const rel = relative4(root, path);
+    const rel = relative5(root, path);
     if (stat.isDirectory()) {
       hash2.update(`d\x00${rel}\x00`);
       for (const name of readdirSync8(path).sort())
@@ -51958,7 +52022,7 @@ function parseNativeMigrationTargetManifest(input) {
     assertSafePath(projectRoot);
     if (isAbsolute11(item.path) || item.path.includes("\\") || item.path.length === 0 || item.path.includes("\x00"))
       throw new Error(`Native migration target path must be normalized and project-relative: ${item.path}`);
-    const resolved = resolve11(projectRoot, item.path), normalized = relative4(projectRoot, resolved);
+    const resolved = resolve11(projectRoot, item.path), normalized = relative5(projectRoot, resolved);
     if (!normalized || normalized === ".." || normalized.startsWith(`..${sep5}`) || isAbsolute11(normalized) || normalized !== item.path)
       throw new Error(`Native migration target path escapes or is not normalized: ${item.path}`);
     if (!/^[0-9a-f]{64}$/.test(item.treeSha256))
@@ -51980,7 +52044,7 @@ function selectNativeMigrationTargets(inventory, manifest) {
   const identities = new Set;
   const selected = [];
   for (const target of manifest.targets) {
-    const projectRoot = resolve11(target.projectRoot), normalized = relative4(projectRoot, resolve11(projectRoot, target.path));
+    const projectRoot = resolve11(target.projectRoot), normalized = relative5(projectRoot, resolve11(projectRoot, target.path));
     if (!isAbsolute11(target.projectRoot) || projectRoot !== target.projectRoot || !existsSync12(projectRoot) || !lstatSync15(projectRoot).isDirectory())
       throw new Error(`Native migration target project root must be an existing absolute directory: ${target.projectRoot}`);
     assertSafePath(projectRoot);
@@ -52335,7 +52399,7 @@ function planAgentIntegration(options) {
     const bytes = readNativeBytes(path, 1024 * 1024);
     observedNativeSources.push({ path, sha256: sha2(bytes) });
     return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-  }) : policy.bridge?.codexPluginSkills ?? [];
+  }, codexConfig.skills?.config ?? []) : policy.bridge?.codexPluginSkills ?? [];
   const changes = [];
   for (const agent of [...new Set(options.agents)]) {
     if (!INTEGRATION_AGENTS.includes(agent))
@@ -52413,7 +52477,7 @@ function planAgentIntegration(options) {
     profiles: Object.fromEntries([...new Set([...priorAgents, ...options.agents])].sort().map((agent) => [agent, bindings.get(agent)?.profileId ?? policy.bridge?.profiles?.[agent] ?? policy.profileId])),
     disabledBuiltins: options.agents.includes("codex") ? nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor && entry.path.startsWith(canonicalAgentPath(join21(home, ".codex", "skills", ".system"), aliases) + sep5)).map((entry) => ({ path: entry.path, hash: entry.hash })) : policy.bridge?.disabledBuiltins ?? [],
     rootAliases: aliases,
-    ...codexPluginSkills.length ? { codexPluginSkills, codexPluginSkillReview: options.codexNativeCatalog ? { version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, catalogSha256: sha2(JSON.stringify({ version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, skills: projectCodexNativeSkillCatalog({ data: [{ cwd: options.codexNativeCatalog.cwd, errors: [], skills: options.codexNativeCatalog.skills }] }, options.codexNativeCatalog.cwd) })), configSha256: changes.find((change) => change.path === canonicalAgentPath(join21(home, ".codex/config.toml"), aliases))?.before === null ? null : sha2(readOptional(canonicalAgentPath(join21(home, ".codex/config.toml"), aliases)) ?? "") } : policy.bridge?.codexPluginSkillReview } : {},
+    ...codexPluginSkills.length ? { codexPluginSkills, codexPluginSkillReview: options.codexNativeCatalog ? { version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, catalogSha256: sha2(JSON.stringify({ version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, skills: projectCodexNativeSkillCatalog({ data: [{ cwd: options.codexNativeCatalog.cwd, errors: [], skills: options.codexNativeCatalog.skills }] }, options.codexNativeCatalog.cwd), ...options.codexNativeCatalog.plugins === undefined ? {} : { plugins: projectCodexInstalledPluginEntries(options.codexNativeCatalog.plugins) } })), configSha256: changes.find((change) => change.path === canonicalAgentPath(join21(home, ".codex/config.toml"), aliases))?.before === null ? null : sha2(readOptional(canonicalAgentPath(join21(home, ".codex/config.toml"), aliases)) ?? "") } : policy.bridge?.codexPluginSkillReview } : {},
     discovery: { ...policy.bridge?.discovery, ...Object.fromEntries(discoveryAfter.map((binding) => [binding.agent, binding])) }
   } };
   const serializedPolicy = serializeManagedSkillPolicy(nextPolicy);
@@ -53051,7 +53115,7 @@ import {
   writeFileSync as writeFileSync6
 } from "fs";
 import { homedir as homedir4 } from "os";
-import { basename as basename5, dirname as dirname12, join as join25 } from "path";
+import { basename as basename6, dirname as dirname12, join as join25 } from "path";
 function isSkillsOwnershipMarker(marker) {
   return typeof marker === "object" && marker !== null && Object.hasOwn(marker, "managedBy") && marker.managedBy === SYNC_MARKER_MANAGED_BY;
 }
@@ -53285,7 +53349,7 @@ function writeManagedSkillDir(dir, skillMd, options) {
     return { action, path: skillMdPath };
   const parentDir = dirname12(dir);
   mkdirSync7(parentDir, { recursive: true });
-  const transactionDir = mkdtempSync(join25(parentDir, `.hasna-skills-write-${basename5(dir)}-`));
+  const transactionDir = mkdtempSync(join25(parentDir, `.hasna-skills-write-${basename6(dir)}-`));
   const candidateDir = join25(transactionDir, "candidate");
   const backupDir = join25(transactionDir, "backup");
   const candidateSkillMdPath = join25(candidateDir, "SKILL.md");
@@ -54798,7 +54862,7 @@ function directoryNames(path) {
 function snapshotPluginTree(root, options = {}) {
   const chain = ancestors(root), entries = [], files = [], directories = [];
   let bytes = 0, visited = 0;
-  const visit2 = (directory, relative5) => {
+  const visit2 = (directory, relative6) => {
     const before2 = stat(directory);
     pluginNeed(before2 && before2.isDirectory() && !before2.isSymbolicLink(), "Plugin tree must contain real directories");
     const names = directoryNames(directory);
@@ -54806,18 +54870,18 @@ function snapshotPluginTree(root, options = {}) {
     directories.push({ path: directory, stat: before2, names });
     for (const name of names) {
       pluginNeed(++visited <= PLUGIN_PROJECTION_LIMITS.files * 50, "Plugin tree membership exceeds its limit");
-      const path = relative5 ? `${relative5}/${name}` : name;
+      const path = relative6 ? `${relative6}/${name}` : name;
       pluginNeed(new TextEncoder().encode(path).byteLength <= 100 && !/[\\:\x00-\x1f\x7f]/u.test(path), "Plugin entry path exceeds its limit or is unsafe");
       const absolute = join29(directory, name), entryStat = stat(absolute);
       pluginNeed(entryStat, "Plugin tree member disappeared");
-      if (relative5 === "" && name === ".orphaned_at" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
+      if (relative6 === "" && name === ".orphaned_at" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
         const bytes2 = readBytes(absolute, 32, "native-pin");
         pluginNeed(/^[1-9][0-9]{12}$/.test(new TextDecoder().decode(bytes2)), "Malformed native orphan timestamp");
         same3(entryStat, stat(absolute));
         files.push({ path: absolute, stat: entryStat });
         continue;
       }
-      if (relative5 === "" && name === ".in_use" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
+      if (relative6 === "" && name === ".in_use" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
         pluginNeed(entryStat.isDirectory() && !entryStat.isSymbolicLink(), "Native plugin pins require a real directory");
         owner(entryStat);
         const pins = directoryNames(absolute);
@@ -55439,7 +55503,7 @@ var init_plugin_admission = __esm(() => {
 
 // src/lib/plugin-discovery.ts
 import { closeSync as closeSync10, constants as constants10, fstatSync as fstatSync10, lstatSync as lstatSync18, openSync as openSync10, opendirSync as opendirSync5, readSync as readSync8 } from "fs";
-import { basename as basename6, dirname as dirname14, isAbsolute as isAbsolute14, join as join31, resolve as resolve14 } from "path";
+import { basename as basename7, dirname as dirname14, isAbsolute as isAbsolute14, join as join31, resolve as resolve14 } from "path";
 function validateManagedPluginWitnesses(value) {
   pluginNeed(Array.isArray(value) && value.length > 0 && value.length <= PLUGIN_PROJECTION_LIMITS.registrations, "Invalid managed plugin witness collection");
   const seen = new Set;
@@ -55522,7 +55586,7 @@ function hashManagedPluginRegistry(path, managed) {
       pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join31(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
-        const digest = `sha256:${basename6(producer)}`;
+        const digest = `sha256:${basename7(producer)}`;
         const receipt2 = readPluginAdmissionReceipt(witness.storeRoot, witness.bindingId, digest);
         pluginNeed(receipt2.materializedPath === producer, "Managed producer path is not an approved immutable projection");
         if (!verified.has(producer)) {
@@ -55588,7 +55652,7 @@ var init_plugin_discovery = __esm(() => {
 // src/lib/claude-marketplace-registry.ts
 import { createHash as createHash14 } from "crypto";
 import { closeSync as closeSync11, constants as constants11, fstatSync as fstatSync11, lstatSync as lstatSync19, openSync as openSync11, readSync as readSync9 } from "fs";
-import { basename as basename7, dirname as dirname15, isAbsolute as isAbsolute15, resolve as resolve15 } from "path";
+import { basename as basename8, dirname as dirname15, isAbsolute as isAbsolute15, resolve as resolve15 } from "path";
 function need4(value, reason) {
   if (!value)
     throw new Error(`Claude marketplace registry ${reason}`);
@@ -55608,7 +55672,7 @@ function parents2(path) {
 }
 function readRegistry2(path, budget) {
   absolutePath3(path);
-  need4(basename7(path) === "known_marketplaces.json", "requires known_marketplaces.json");
+  need4(basename8(path) === "known_marketplaces.json", "requires known_marketplaces.json");
   need4(Number.isSafeInteger(budget.remaining) && budget.remaining >= 0, "has an invalid byte budget");
   const ancestors2 = parents2(path), initial2 = lstatSync19(path, { bigint: true });
   need4(initial2.isFile() && !initial2.isSymbolicLink() && initial2.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
@@ -56106,7 +56170,7 @@ var init_codex_hook_discovery_recovery = __esm(() => {
 // src/lib/agent-discovery.ts
 import { createHash as createHash17 } from "crypto";
 import { lstatSync as lstatSync21, readFileSync as readFileSync18, readdirSync as readdirSync11, realpathSync as realpathSync7 } from "fs";
-import { basename as basename8, dirname as dirname17, isAbsolute as isAbsolute17, join as join32, resolve as resolve16, sep as sep6 } from "path";
+import { basename as basename9, dirname as dirname17, isAbsolute as isAbsolute17, join as join32, resolve as resolve16, sep as sep6 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual7 } from "util";
 function parseConfig(text3, path, toml = false) {
   try {
@@ -56216,9 +56280,9 @@ function verifyAgentDiscovery(binding, codexRecovery) {
     safe4(root2);
 }
 function assertMarketplaceBinding(binding, source) {
-  if (source.hashMode === "codex-settings-v1" && (binding.agent !== "codex" || binding.method !== "reviewed" || basename8(source.path) !== "config.toml"))
+  if (source.hashMode === "codex-settings-v1" && (binding.agent !== "codex" || binding.method !== "reviewed" || basename9(source.path) !== "config.toml"))
     throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
-  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename9(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
@@ -56501,7 +56565,7 @@ var init_agent_discovery = __esm(() => {
 // src/lib/authoring-path.ts
 import { lstatSync as lstatSync22, realpathSync as realpathSync8 } from "fs";
 import { homedir as homedir7 } from "os";
-import { basename as basename9, dirname as dirname18, join as join33, resolve as resolve17, sep as sep7 } from "path";
+import { basename as basename10, dirname as dirname18, join as join33, resolve as resolve17, sep as sep7 } from "path";
 function pathParts(path) {
   return resolve17(path).split(sep7).filter(Boolean);
 }
@@ -56520,7 +56584,7 @@ function physicalPath(path) {
   let cursor = resolve17(path);
   const suffix = [];
   while (!lstatSync22(cursor, { throwIfNoEntry: false })) {
-    suffix.unshift(basename9(cursor));
+    suffix.unshift(basename10(cursor));
     const parent = dirname18(cursor);
     if (parent === cursor)
       return resolve17(path);
@@ -56615,7 +56679,7 @@ import {
   statSync as statSync11,
   writeFileSync as writeFileSync9
 } from "fs";
-import { basename as basename10, dirname as dirname19, isAbsolute as isAbsolute18, join as join34, normalize as normalize3, relative as relative5, resolve as resolve18, sep as sep8 } from "path";
+import { basename as basename11, dirname as dirname19, isAbsolute as isAbsolute18, join as join34, normalize as normalize3, relative as relative6, resolve as resolve18, sep as sep8 } from "path";
 function getPortableSkillsRoot(options = {}) {
   return resolvePortableSkillsRoot(options, true);
 }
@@ -56763,7 +56827,7 @@ function physicalImportPath(path) {
   let ancestor = resolve18(path);
   const suffix = [];
   while (!existsSync18(ancestor)) {
-    suffix.unshift(basename10(ancestor));
+    suffix.unshift(basename11(ancestor));
     ancestor = dirname19(ancestor);
   }
   return join34(realpathSync9(ancestor), ...suffix);
@@ -56772,7 +56836,7 @@ function assertDisjointImportPaths(source, destination) {
   const sourcePath = realpathSync9(source);
   const destinationPath = physicalImportPath(destination);
   const contains2 = (parent, child) => {
-    const path = relative5(parent, child);
+    const path = relative6(parent, child);
     return path === "" || !isAbsolute18(path) && path !== ".." && !path.startsWith(`..${sep8}`);
   };
   if (contains2(sourcePath, destinationPath) || contains2(destinationPath, sourcePath)) {
@@ -56788,8 +56852,8 @@ function portPortableSkill(sourcePath, options = {}) {
   const explicitName = options.name != null;
   const skillName = normalizeNewPortableSkillName(options.name ?? inferred.name);
   if (isOfficialSkillName(skillName) && !options.allowShadow) {
-    const sourceSlug = safeNormalizeName(basename10(absoluteSource));
-    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename10(absoluteSource)}')` : ""} matches a bundled official skill.`;
+    const sourceSlug = safeNormalizeName(basename11(absoluteSource));
+    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename11(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
   const readOnlyDestination = join34(resolvePortableSkillsRoot(options, false), skillName);
@@ -58998,13 +59062,13 @@ var require_cli_spinners = __commonJS((exports, module) => {
 
 // src/lib/auth-store.ts
 import { chmodSync as chmodSync2, existsSync as existsSync20, mkdirSync as mkdirSync11, readFileSync as readFileSync20, renameSync as renameSync7, statSync as statSync12, unlinkSync as unlinkSync5, writeFileSync as writeFileSync10 } from "fs";
-import { basename as basename11, dirname as dirname20, join as join36 } from "path";
+import { basename as basename12, dirname as dirname20, join as join36 } from "path";
 function getAuthFilePath(env3 = process.env) {
   return skillsCredentialFilePath(env3);
 }
 function getIdentityFilePath(env3 = process.env) {
   const file = skillsCredentialFilePath(env3);
-  return join36(dirname20(file), basename11(file).replace(/^credentials/, "identity") + ".json");
+  return join36(dirname20(file), basename12(file).replace(/^credentials/, "identity") + ".json");
 }
 function getAuthIdentity(env3 = process.env) {
   return readIdentity(env3);
@@ -81028,7 +81092,7 @@ var init_remote_auth = __esm(() => {
 // src/lib/sign-in.ts
 import { createHash as createHash20 } from "crypto";
 import { chmodSync as chmodSync3, mkdirSync as mkdirSync12, readFileSync as readFileSync21, readdirSync as readdirSync14, renameSync as renameSync8, unlinkSync as unlinkSync6, writeFileSync as writeFileSync11 } from "fs";
-import { basename as basename12, dirname as dirname21, join as join37 } from "path";
+import { basename as basename13, dirname as dirname21, join as join37 } from "path";
 function isRecord6(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
@@ -81173,7 +81237,7 @@ async function pollDeviceAuthorization(input2) {
 }
 function pendingDeviceSignInStem(env3) {
   const file2 = skillsCredentialFilePath(env3);
-  return { dir: dirname21(file2), stem: basename12(file2).replace(/^credentials/, "device-login") };
+  return { dir: dirname21(file2), stem: basename13(file2).replace(/^credentials/, "device-login") };
 }
 function pendingDeviceSignInPath(origin, env3 = process.env) {
   const { dir, stem } = pendingDeviceSignInStem(env3);
@@ -82358,9 +82422,9 @@ async function buildSkillContext(input2, options = {}) {
   if (prompt.length > 128 * 1024 || (input2.paths?.length ?? 0) > 100 || (input2.skills?.length ?? 0) > 100) {
     throw new SkillSelectionError("CONTEXT_INPUT_TOO_LARGE", "The Skills context input exceeds its size limit.");
   }
-  const maxChars = options.maxChars ?? 8000;
+  const maxChars = options.maxChars;
   const maxSkills = options.maxSkills ?? 3;
-  if (!Number.isInteger(maxChars) || maxChars < 512 || maxChars > 64000 || !Number.isInteger(maxSkills) || maxSkills < 1 || maxSkills > 20) {
+  if (maxChars !== undefined && (!Number.isInteger(maxChars) || maxChars < 512 || maxChars > 64000) || !Number.isInteger(maxSkills) || maxSkills < 1 || maxSkills > 20) {
     throw new SkillSelectionError("INVALID_CONTEXT_BUDGET", "Context limits must be 512\u201364000 characters and 1\u201320 skills.");
   }
   const profileId = input2.profileId ?? "default";
@@ -82417,7 +82481,7 @@ async function buildSkillContext(input2, options = {}) {
     const { content } = readSelectedDocument(entries);
     const section = `Skill ${selection.slug}@${selection.version} (${selection.bundleDigest}; ${reason})
 ${content}`;
-    if (chars + section.length + (sections.length ? 2 : 0) > maxChars) {
+    if (maxChars !== undefined && chars + section.length + (sections.length ? 2 : 0) > maxChars) {
       omitted.push({ slug: selection.slug, version: selection.version, reason: "context-budget", loadCommand });
       continue;
     }
@@ -82673,7 +82737,7 @@ Preserved original receipt: ${result2.archivePath}` : `Planned one session recon
       reportContextError(error61, options.json);
     }
   });
-  parent.command("context [prompt]").description("Select bounded, versioned skill context for this prompt without running skills").option("--stdin", "Read native hook JSON or a prompt from stdin", false).option("--selection-profile <id>", "Selection profile (separate from the credential --profile)").option("--cached", "Use only an explicitly selected verified cache, at most 24 hours old", false).option("--auto-reconcile-safe", "For managed hooks, archive and renew an expired session only when all loaded selections are unchanged", false).option("--session <id>", "Keep the same skill versions across this session").option("--restore", "Re-emit loaded session context after compaction or resume", false).option("--max-chars <count>", "Maximum injected characters", "8000").option("--max-skills <count>", "Maximum loaded skills", "3").option("--json", "Return context and selection receipts as JSON", false).action(async (prompt, options) => {
+  parent.command("context [prompt]").description("Select bounded, versioned skill context for this prompt without running skills").option("--stdin", "Read native hook JSON or a prompt from stdin", false).option("--selection-profile <id>", "Selection profile (separate from the credential --profile)").option("--cached", "Use only an explicitly selected verified cache, at most 24 hours old", false).option("--auto-reconcile-safe", "For managed hooks, archive and renew an expired session only when all loaded selections are unchanged", false).option("--session <id>", "Keep the same skill versions across this session").option("--restore", "Re-emit loaded session context after compaction or resume", false).option("--max-chars <count>", "Optional maximum injected characters").option("--max-skills <count>", "Maximum loaded skills", "3").option("--json", "Return context and selection receipts as JSON", false).action(async (prompt, options) => {
     try {
       if (options.autoReconcileSafe && !options.cached)
         throw new SkillSelectionError("INVALID_CONTEXT_INPUT", "--auto-reconcile-safe requires --cached.");
@@ -82682,7 +82746,7 @@ Preserved original receipt: ${result2.archivePath}` : `Planned one session recon
       input2.cwd ??= process.cwd();
       input2.sessionId = options.session ?? input2.sessionId;
       input2.restore ||= options.restore;
-      const resolverOptions = { ...contextResolverOptions(options), maxChars: Number(options.maxChars), maxSkills: Number(options.maxSkills) };
+      const resolverOptions = { ...contextResolverOptions(options), ...options.maxChars === undefined ? {} : { maxChars: Number(options.maxChars) }, maxSkills: Number(options.maxSkills) };
       let result2;
       try {
         result2 = await buildSkillContext(input2, resolverOptions);
@@ -91538,7 +91602,7 @@ var init_runs = __esm(() => {
 // src/lib/run-state.ts
 import { createHash as createHash25, randomBytes } from "crypto";
 import { existsSync as existsSync27, mkdirSync as mkdirSync16, readFileSync as readFileSync32, readdirSync as readdirSync18, statSync as statSync16, writeFileSync as writeFileSync16 } from "fs";
-import { extname, join as join46, relative as relative6 } from "path";
+import { extname, join as join46, relative as relative7 } from "path";
 function createSkillRun(params, targetDir = process.cwd()) {
   const now3 = new Date;
   const id2 = createRunId(now3);
@@ -91704,7 +91768,7 @@ function createRunId(now3) {
   return `run_${now3.getTime().toString(36)}_${randomBytes(4).toString("hex")}`;
 }
 function toProjectRelative(targetDir, path) {
-  const rel = relative6(targetDir, path).split(/[\\/]/).join("/");
+  const rel = relative7(targetDir, path).split(/[\\/]/).join("/");
   return rel.startsWith(".") ? rel : `./${rel}`;
 }
 function mimeForPath(path) {
@@ -99000,49 +99064,49 @@ var require_fast_uri = __commonJS((exports, module) => {
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
-  function resolveComponent(base2, relative7, options, skipNormalization) {
+  function resolveComponent(base2, relative8, options, skipNormalization) {
     const target = {};
     if (!skipNormalization) {
       base2 = parse12(serialize(base2, options), options);
-      relative7 = parse12(serialize(relative7, options), options);
+      relative8 = parse12(serialize(relative8, options), options);
     }
     options = options || {};
-    if (!options.tolerant && relative7.scheme) {
-      target.scheme = relative7.scheme;
-      target.userinfo = relative7.userinfo;
-      target.host = relative7.host;
-      target.port = relative7.port;
-      target.path = removeDotSegments(relative7.path || "");
-      target.query = relative7.query;
+    if (!options.tolerant && relative8.scheme) {
+      target.scheme = relative8.scheme;
+      target.userinfo = relative8.userinfo;
+      target.host = relative8.host;
+      target.port = relative8.port;
+      target.path = removeDotSegments(relative8.path || "");
+      target.query = relative8.query;
     } else {
-      if (relative7.userinfo !== undefined || relative7.host !== undefined || relative7.port !== undefined) {
-        target.userinfo = relative7.userinfo;
-        target.host = relative7.host;
-        target.port = relative7.port;
-        target.path = removeDotSegments(relative7.path || "");
-        target.query = relative7.query;
+      if (relative8.userinfo !== undefined || relative8.host !== undefined || relative8.port !== undefined) {
+        target.userinfo = relative8.userinfo;
+        target.host = relative8.host;
+        target.port = relative8.port;
+        target.path = removeDotSegments(relative8.path || "");
+        target.query = relative8.query;
       } else {
-        if (!relative7.path) {
+        if (!relative8.path) {
           target.path = base2.path;
-          if (relative7.query !== undefined) {
-            target.query = relative7.query;
+          if (relative8.query !== undefined) {
+            target.query = relative8.query;
           } else {
             target.query = base2.query;
           }
         } else {
-          if (relative7.path[0] === "/") {
-            target.path = removeDotSegments(relative7.path);
+          if (relative8.path[0] === "/") {
+            target.path = removeDotSegments(relative8.path);
           } else {
             if ((base2.userinfo !== undefined || base2.host !== undefined || base2.port !== undefined) && !base2.path) {
-              target.path = "/" + relative7.path;
+              target.path = "/" + relative8.path;
             } else if (!base2.path) {
-              target.path = relative7.path;
+              target.path = relative8.path;
             } else {
-              target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative7.path;
+              target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative8.path;
             }
             target.path = removeDotSegments(target.path);
           }
-          target.query = relative7.query;
+          target.query = relative8.query;
         }
         target.userinfo = base2.userinfo;
         target.host = base2.host;
@@ -99050,7 +99114,7 @@ var require_fast_uri = __commonJS((exports, module) => {
       }
       target.scheme = base2.scheme;
     }
-    target.fragment = relative7.fragment;
+    target.fragment = relative8.fragment;
     return target;
   }
   function equal(uriA, uriB, options) {
@@ -106930,7 +106994,7 @@ import {
   statSync as statSync18,
   writeFileSync as writeFileSync20
 } from "fs";
-import { dirname as dirname27, join as join52, normalize as normalize4, relative as relative7, sep as sep9 } from "path";
+import { dirname as dirname27, join as join52, normalize as normalize4, relative as relative8, sep as sep9 } from "path";
 function resolveSkillsNativeStorageConfig(env3 = process.env) {
   assertNoRetiredModeEnvVars(env3, {
     app: SKILLS_ENV_NAMESPACE,
@@ -106994,7 +107058,7 @@ function exportSkillsLocalSnapshot(targetDir = process.cwd(), options = {}) {
   if (existsSync31(projectStateDir)) {
     for (const filePath of walkFiles2(projectStateDir)) {
       const bytes = readFileSync35(filePath);
-      const relativePath = toPosix(relative7(targetDir, filePath));
+      const relativePath = toPosix(relative8(targetDir, filePath));
       files.push({
         path: relativePath,
         sizeBytes: bytes.byteLength,
@@ -108197,7 +108261,7 @@ import {
   symlinkSync,
   writeFileSync as writeFileSync23
 } from "fs";
-import { basename as basename13, delimiter, dirname as dirname30, isAbsolute as isAbsolute24, join as join55, relative as relative8, resolve as resolve23, sep as sep10 } from "path";
+import { basename as basename14, delimiter, dirname as dirname30, isAbsolute as isAbsolute24, join as join55, relative as relative9, resolve as resolve23, sep as sep10 } from "path";
 function object9(value, code2) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     throw new Error(code2);
@@ -108207,7 +108271,7 @@ function hash5(bytes) {
   return createHash27("sha256").update(bytes).digest("hex");
 }
 function isWithin(parent, child) {
-  const rel = relative8(parent, child);
+  const rel = relative9(parent, child);
   return rel === "" || !rel.startsWith(`..${sep10}`) && rel !== ".." && !isAbsolute24(rel);
 }
 function entryExists(path) {
@@ -108302,7 +108366,7 @@ function resolveRuntimeLayout(homeInput, pathInput) {
   assertNoSymlinkAncestors(currentPackageRoot);
   if (!isWithin(runtimeRoot, currentPackageRoot))
     throw new Error("ACTIVE_RUNTIME_OUTSIDE_COPYFILE_ROOT");
-  const relativePackage = relative8(runtimeRoot, currentPackageRoot).split(sep10);
+  const relativePackage = relative9(runtimeRoot, currentPackageRoot).split(sep10);
   if (relativePackage.length !== 4 || relativePackage[1] !== "node_modules" || relativePackage[2] !== "@hasna" || relativePackage[3] !== "skills") {
     throw new Error("ACTIVE_RUNTIME_LAYOUT_UNSUPPORTED");
   }
@@ -108856,7 +108920,7 @@ function inspectAliasPackageChain(home, aliasPath, oldLinkTarget, oldTarget, bin
 function validateAliasSource(home, name, actual) {
   const packageRoot = dirname30(dirname30(actual));
   const roots = [join55(home, ".hasna", "skills", "runtime"), join55(home, ".bun", "install"), join55(home, ".local", "lib", "node_modules")];
-  if (basename13(packageRoot) !== "skills" || basename13(dirname30(packageRoot)) !== "@hasna" || !roots.some((root2) => isWithin(root2, packageRoot))) {
+  if (basename14(packageRoot) !== "skills" || basename14(dirname30(packageRoot)) !== "@hasna" || !roots.some((root2) => isWithin(root2, packageRoot))) {
     throw new Error("ALIAS_SOURCE_ROOT_UNSUPPORTED");
   }
   assertOwnedSafePath(packageRoot, home);
@@ -108934,8 +108998,8 @@ function adoptCopyfileAliases(options = {}) {
     for (const item of aliases) {
       if (readlinkSync5(item.path) !== item.oldLinkTarget || realpathSync14(item.path) !== item.oldTarget)
         throw new Error("ALIAS_CHANGED_BEFORE_SWITCH");
-      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename13(item.path)], item.chain, true);
-      const source = validateAliasSource(home, basename13(item.path), item.oldTarget);
+      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename14(item.path)], item.chain, true);
+      const source = validateAliasSource(home, basename14(item.path), item.oldTarget);
       if (source.version !== item.oldVersion || source.binarySha256 !== item.oldBinarySha256)
         throw new Error("ALIAS_SOURCE_DRIFT");
       receipt.state = "switching";
@@ -108944,11 +109008,11 @@ function adoptCopyfileAliases(options = {}) {
       replaceLink(item.path, item.newTarget, item.backupPath, item.oldLinkTarget, item.oldTarget);
       if (realpathSync14(item.path) !== item.newTarget || realpathSync14(item.backupPath) !== item.oldTarget)
         throw new Error("ALIAS_SWITCH_READBACK_MISMATCH");
-      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename13(item.path)], item.chain, true);
+      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename14(item.path)], item.chain, true);
       options.onAliasSwitched?.(item.path);
     }
     for (const item of aliases) {
-      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename13(item.path)], item.chain, true);
+      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename14(item.path)], item.chain, true);
       if (readlinkSync5(item.backupPath) !== item.oldLinkTarget || realpathSync14(item.backupPath) !== item.oldTarget)
         throw new Error("ALIAS_BACKUP_DRIFT");
     }
@@ -108961,16 +109025,16 @@ function adoptCopyfileAliases(options = {}) {
       for (const item of [...aliases].reverse()) {
         try {
           if (!entryExists(item.backupPath)) {
-            inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename13(item.path)], item.chain, true);
-            const source2 = validateAliasSource(home, basename13(item.path), item.oldTarget);
+            inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename14(item.path)], item.chain, true);
+            const source2 = validateAliasSource(home, basename14(item.path), item.oldTarget);
             if (!entryExists(item.path) || readlinkSync5(item.path) !== item.oldLinkTarget || realpathSync14(item.path) !== item.oldTarget || source2.version !== item.oldVersion || source2.binarySha256 !== item.oldBinarySha256)
               failed = true;
             continue;
           }
           if (readlinkSync5(item.backupPath) !== item.oldLinkTarget || realpathSync14(item.backupPath) !== item.oldTarget)
             throw new Error("ALIAS_BACKUP_DRIFT");
-          inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename13(item.path)], item.chain, true);
-          const source = validateAliasSource(home, basename13(item.path), item.oldTarget);
+          inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename14(item.path)], item.chain, true);
+          const source = validateAliasSource(home, basename14(item.path), item.oldTarget);
           if (source.version !== item.oldVersion || source.binarySha256 !== item.oldBinarySha256)
             throw new Error("ALIAS_SOURCE_DRIFT");
           if (realpathSync14(item.path) === item.oldTarget && readlinkSync5(item.path) === item.oldLinkTarget)
@@ -109023,7 +109087,7 @@ function rollbackCopyfileAliases(receiptId, options = {}) {
       throw new Error("ALIAS_RECEIPT_BINDING_INVALID");
     const seen = new Set;
     for (const item of receipt.aliases) {
-      const name = basename13(item.path), target = layout.bin[name];
+      const name = basename14(item.path), target = layout.bin[name];
       if (!target || seen.has(item.path) || !aliasDirs(home).includes(dirname30(item.path)) || item.newTarget !== join55(layout.currentPackageRoot, target) || item.backupPath !== `${item.path}.skills-alias-prev-${receiptId}` || item.chain !== undefined && (!item.chain || typeof item.chain !== "object" || typeof item.chain.packageLinkPath !== "string" || typeof item.chain.packageLinkTarget !== "string")) {
         throw new Error("ALIAS_RECEIPT_LAUNCHER_INVALID");
       }
@@ -109072,7 +109136,7 @@ function rollbackCopyfileAliases(receiptId, options = {}) {
       restored++;
     }
     for (const item of receipt.aliases) {
-      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename13(item.path)], item.chain, true);
+      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename14(item.path)], item.chain, true);
     }
     receipt.state = "rolled-back";
     persistAliasReceipt(receiptPath, receipt);
@@ -109105,7 +109169,7 @@ async function updateCopyfileRuntime(version2, options = {}) {
   const releaseLock = acquireRuntimeLock(layout.runtimeRoot);
   const stagePath = join55(layout.runtimeRoot, `.stage-${version2}-${id2}`);
   const finalPath = join55(layout.runtimeRoot, `${version2}-copyfile`);
-  const launchers = layout.launchers.map((item) => ({ ...item, newTarget: join55(finalPath, "node_modules", "@hasna", "skills", layout.bin[basename13(item.path)]) }));
+  const launchers = layout.launchers.map((item) => ({ ...item, newTarget: join55(finalPath, "node_modules", "@hasna", "skills", layout.bin[basename14(item.path)]) }));
   let switched = [];
   let moved = false;
   try {
@@ -109288,7 +109352,7 @@ function rollbackCopyfileRuntime(receiptId, options = {}) {
     const switched = [];
     const seen = new Set;
     for (const item of receipt.launchers) {
-      const bin = oldBins[basename13(item.path)];
+      const bin = oldBins[basename14(item.path)];
       if (!bin || !isAbsolute24(item.path) || seen.has(item.path) || item.oldTarget !== join55(receipt.currentPackageRoot, bin) || item.newTarget !== join55(receipt.targetPackageRoot, bin) || !/^.+\.skills-prev-[0-9a-f-]{36}$/.test(item.backupPath) || !item.backupPath.startsWith(`${item.path}.skills-prev-`) || typeof item.oldLinkTarget !== "string" || resolve23(dirname30(item.path), item.oldLinkTarget) !== item.oldTarget)
         throw new Error("RECEIPT_LAUNCHER_BINDING_INVALID");
       assertNoSymlinkAncestors(dirname30(item.path));
@@ -109358,7 +109422,7 @@ __export(exports_runtime, {
 });
 import { createHash as createHash28, randomUUID as randomUUID10 } from "crypto";
 import { lstatSync as lstatSync29, mkdirSync as mkdirSync25, readFileSync as readFileSync38, realpathSync as realpathSync15, writeFileSync as writeFileSync24 } from "fs";
-import { basename as basename14, isAbsolute as isAbsolute25, join as join56 } from "path";
+import { basename as basename15, isAbsolute as isAbsolute25, join as join56 } from "path";
 import { createInterface } from "readline";
 function registerRuntime(parent) {
   parent.command("run").argument("<skill>", "Skill name").argument("[args...]", "Arguments to pass to the skill; use -- to end Skills options").allowUnknownOption(true).passThroughOptions(true).option("--json", "Output result as JSON", false).option("--remote", "Run on the configured server, using its catalog and quote", false).option("--target <target>", "Execution target: local or cloud").option("--secret-bindings <path>", "Reviewed, exact-selection local execution vault bindings (JSON file)").option("--secret-bindings-template", "Print a scoped bindings template without resolving secrets or running the skill", false).option("--input <json>", "Structured cloud execution input").option("--skill-version <version>", "Exact selected skill version").option("--selection-profile <id>", "Selected Skills profile").option("--session <id>", "Pinned Skills session").option("--cached", "Use the explicit verified selected cache", false).option("--yes", "Approve the server's quoted credit cost for this run", false).option("--idempotency-key <key>", "Reuse this key when retrying the same remote submission").option("--file <path>", "Attach a local input file to a remote run (repeatable)", (value, prior) => [...prior, value], []).option("--wait", "Poll remote runs until a terminal status", false).option("--poll-interval-ms <ms>", "Remote polling interval in milliseconds", "1000").option("--poll-timeout-ms <ms>", "Maximum time to wait for a remote run", "300000").description("Run a skill directly").action(async (name, args2, options, command) => {
@@ -109871,7 +109935,7 @@ async function handleRun(name, args2, options, separatorBeforeSkill) {
         const info = lstatSync29(path);
         if (!info.isFile() || info.size > 20 * 1024 * 1024)
           throw new Error("Input must be a regular file no larger than 20 MiB");
-        return { name: basename14(path), bytes: new Uint8Array(readFileSync38(path)) };
+        return { name: basename15(path), bytes: new Uint8Array(readFileSync38(path)) };
       });
       describeRemoteFiles(inputFiles);
       client2 = new RemoteSkillsClient(routing.apiKey, routing.apiOrigin);
@@ -111048,7 +111112,7 @@ import {
   statSync as statSync20,
   writeFileSync as writeFileSync25
 } from "fs";
-import { dirname as dirname32, isAbsolute as isAbsolute26, relative as relative9, resolve as resolve24, sep as sep12 } from "path";
+import { dirname as dirname32, isAbsolute as isAbsolute26, relative as relative10, resolve as resolve24, sep as sep12 } from "path";
 function validateStationId(stationId) {
   if (!/^[a-z0-9-]+$/.test(stationId)) {
     throw new StationSnapshotError("INVALID_STATION", `station id must be a slug, got: ${stationId}`);
@@ -111153,7 +111217,7 @@ function writeStationSnapshot(options) {
   const untouched = [];
   for (const plan of plans) {
     const destination = resolve24(repoRoot, plan.destination);
-    const destinationRelative = relative9(repoRoot, destination);
+    const destinationRelative = relative10(repoRoot, destination);
     if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep12) || isAbsolute26(destinationRelative)) {
       throw new StationSnapshotError("DESTINATION_ESCAPE", `destination escapes repo root: ${plan.destination}`);
     }
@@ -112342,7 +112406,7 @@ function registerAgentIntegration(parent) {
   hook.command("agents").option("--json", "Output the adapter capability inventory", false).description("Show maintained native adapters and explicit coverage limits").action(async () => {
     await writeCliOutput(JSON.stringify({ agents: INTEGRATION_AGENTS.map((agent) => ({ agent, bridge: true, ...AGENT_ADAPTERS[agent] })), inventoryOnly: ["codewith", "windsurf", "pi", "amp", "cline", "roo", "copilot"], limitations: ["Cursor prompt hooks gate submission; selected context is injected at session start only.", "Native discovery checks cover known home roots and current project ancestors. External plugin hook injection and arbitrary added directories require separate review.", "Hermes injects selected prompt context, but native pre_llm_call fails open. Exact native hook trust, bundled reseeding opt-out, native payload retirement and a supervised pre-tool guard are required. Child failures block explicitly; native host/supervisor death is not a universal fail-closed guarantee.", "Restart agents and use their normal hook trust controls after installation."] }, null, 2));
   });
-  hook.command("install").option("--agent <agent>", `Agent to configure: ${INTEGRATION_AGENTS.join(", ")}, all`, "all").option("--command <path>", "Skills executable used by the hook (preserves existing binding; new agents use skills)").option("--selection-profile <id>", "Selection profile (preserves existing binding; new agents use default)").option("--include-vendor", "Retained for compatibility; vendor system skills are always inventoried and disabled", false).option("--discovery-inputs <file>", "Advanced reviewed active plugin roots and source hashes for unsupported registrations").option("--codex-native-catalog <file>", "Reviewed native0.159.2 skills/list receipt for exact qualified plugin-name disables").option("--reviewed-cache-alias <path>", "Exact skill-containing vendor cache alias reviewed for this hook plan").option("--allow-root-aliases", "Allow home .claude/.codex aliases to existing directories within this home", false).option("--apply", "Apply the plan, preserving prior configuration in private backups", false).option("--json", "Output a receipt as JSON", false).description("Plan or install one Skills CLI bridge plus native prompt hooks").action(async (options) => {
+  hook.command("install").option("--agent <agent>", `Agent to configure: ${INTEGRATION_AGENTS.join(", ")}, all`, "all").option("--command <path>", "Skills executable used by the hook (preserves existing binding; new agents use skills)").option("--selection-profile <id>", "Selection profile (preserves existing binding; new agents use default)").option("--include-vendor", "Retained for compatibility; vendor system skills are always inventoried and disabled", false).option("--discovery-inputs <file>", "Advanced reviewed active plugin roots and source hashes for unsupported registrations").option("--codex-native-catalog <file>", "Reviewed Codex 0.159.2 skill and installed-plugin receipt for exact qualified-name disables").option("--reviewed-cache-alias <path>", "Exact skill-containing vendor cache alias reviewed for this hook plan").option("--allow-root-aliases", "Allow home .claude/.codex aliases to existing directories within this home", false).option("--apply", "Apply the plan, preserving prior configuration in private backups", false).option("--json", "Output a receipt as JSON", false).description("Plan or install one Skills CLI bridge plus native prompt hooks").action(async (options) => {
     try {
       const discoveryInputs = options.discoveryInputs ? JSON.parse(readFileSync41(options.discoveryInputs, "utf8")) : undefined;
       const plan = planAgentIntegration({ projectDir: process.cwd(), agents: agents(options.agent), command: options.command, profileId: options.selectionProfile, includeVendor: options.includeVendor, discoveryInputs, allowRootAliases: options.allowRootAliases, reviewedCacheAlias: options.reviewedCacheAlias, codexNativeCatalog: options.codexNativeCatalog ? JSON.parse(readFileSync41(options.codexNativeCatalog, "utf8")) : undefined });
@@ -113188,7 +113252,7 @@ var init_hydrate = __esm(() => {
 import { createHash as createHash33, randomUUID as randomUUID12 } from "crypto";
 import { chmodSync as chmodSync5, existsSync as existsSync36, lstatSync as lstatSync33, mkdirSync as mkdirSync29, mkdtempSync as mkdtempSync6, readFileSync as readFileSync43, readdirSync as readdirSync25, renameSync as renameSync14, rmSync as rmSync9, writeFileSync as writeFileSync30 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { dirname as dirname36, isAbsolute as isAbsolute30, join as join62, relative as relative10, resolve as resolve27, sep as sep14 } from "path";
+import { dirname as dirname36, isAbsolute as isAbsolute30, join as join62, relative as relative11, resolve as resolve27, sep as sep14 } from "path";
 function prepareSkill(name, options) {
   const normalized = normalizePortableSkillName(name);
   if (!new RegExp(SEMVER_PATTERN).test(options.version))
@@ -113294,7 +113358,7 @@ function validateRuntimeEntrypoint(candidate2, root2) {
   const entry = candidate2.runtime.entrypoint;
   if (typeof entry !== "string")
     return;
-  const target = resolve27(root2, entry), rel = relative10(root2, target);
+  const target = resolve27(root2, entry), rel = relative11(root2, target);
   if (isAbsolute30(entry) || /^[a-zA-Z]:/.test(entry) || entry.includes("\\") || !rel || rel === ".." || rel.startsWith(`..${sep14}`) || isAbsolute30(rel) || !existsSync36(target) || !lstatSync33(target).isFile()) {
     throw new Error("Executable runtime.entrypoint must name an existing regular file inside the skill directory.");
   }
@@ -113386,11 +113450,11 @@ function snapshot2(root2) {
   const files = [], directories = [];
   const hash6 = createHash33("sha256").update(`${rootStat.dev}:${rootStat.ino}\x00`);
   let count = 0, bytes = 0;
-  const walk2 = (relative11) => {
-    for (const name of readdirSync25(join62(root2, relative11)).sort()) {
-      if (IGNORED.has(name.toLowerCase()) || !relative11 && ROOT_IGNORED.has(name.toLowerCase()))
+  const walk2 = (relative12) => {
+    for (const name of readdirSync25(join62(root2, relative12)).sort()) {
+      if (IGNORED.has(name.toLowerCase()) || !relative12 && ROOT_IGNORED.has(name.toLowerCase()))
         continue;
-      const path = relative11 ? `${relative11}/${name}` : name;
+      const path = relative12 ? `${relative12}/${name}` : name;
       if (++count > 20000)
         throw new Error("Skill exceeds the preparation entry limit (20000).");
       const absolute = join62(root2, path), stat3 = lstatSync33(absolute);
@@ -113809,7 +113873,7 @@ var init_schedule = __esm(() => {
 
 // src/lib/registry-sync.ts
 import { mkdirSync as mkdirSync30, writeFileSync as writeFileSync31 } from "fs";
-import { dirname as dirname37, relative as relative11 } from "path";
+import { dirname as dirname37, relative as relative12 } from "path";
 function createRegistrySyncArtifact(options = {}) {
   const profile = options.profile ?? "all";
   const includeDocs = options.includeDocs ?? true;
@@ -113821,7 +113885,7 @@ function createRegistrySyncArtifact(options = {}) {
   const registry2 = [...loadRegistryProfile(profile)].sort((a, b) => a.name.localeCompare(b.name));
   const skills = registry2.map((skill) => {
     const skillPath = getSkillPath(skill.name);
-    const directory2 = relative11(process.cwd(), skillPath) || skillPath;
+    const directory2 = relative12(process.cwd(), skillPath) || skillPath;
     const validation = includeValidation ? validateSkillDirectory(skill.name, skillPath, skill) : undefined;
     const docs = includeDocs ? buildDocs(skill.name) : undefined;
     return {
@@ -113887,7 +113951,7 @@ var init_registry_sync = __esm(() => {
 
 // src/lib/review-export.ts
 import { constants as constants22, closeSync as closeSync25, existsSync as existsSync37, fstatSync as fstatSync25, fsyncSync as fsyncSync7, lstatSync as lstatSync34, openSync as openSync25, realpathSync as realpathSync18, statSync as statSync23, writeFileSync as writeFileSync32 } from "fs";
-import { basename as basename15, dirname as dirname38, isAbsolute as isAbsolute31, join as join63, parse as parse12, resolve as resolve28, sep as sep15 } from "path";
+import { basename as basename16, dirname as dirname38, isAbsolute as isAbsolute31, join as join63, parse as parse12, resolve as resolve28, sep as sep15 } from "path";
 function exactVersion(spec) {
   const at2 = spec.indexOf("@");
   const slug2 = spec.slice(0, at2);
@@ -113898,7 +113962,7 @@ function exactVersion(spec) {
   return { slug: slug2, version: version2 };
 }
 function assertPrivateDestination(output2) {
-  if (!isAbsolute31(output2) || resolve28(output2) !== output2 || !basename15(output2).endsWith(".tar.gz")) {
+  if (!isAbsolute31(output2) || resolve28(output2) !== output2 || !basename16(output2).endsWith(".tar.gz")) {
     throw new Error("Review output must be an absolute, normalized .tar.gz path.");
   }
   const parent = dirname38(output2);