@hasna/skills 0.10.24 → 0.10.26

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.24",
+    version: "0.10.26",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -38266,6 +38266,18 @@ function assertAgentPolicyCollections(policy) {
       if (control.appSha256 !== undefined)
         requireBound(typeof control.appSha256 === "string" && /^[a-f0-9]{64}$/.test(control.appSha256));
     }
+  if (bridge.codexInactivePlugins !== undefined) {
+    const controls = array3(bridge.codexInactivePlugins, 4096), ids = new Set;
+    requireBound(controls.length === 0 || object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === "codex-cli 0.160.0" && typeof bridge.codexPluginSkillReview.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(bridge.codexPluginSkillReview.catalogSha256));
+    for (const control of controls) {
+      requireBound(object4(control) && Object.keys(control).every((key) => ["pluginId", "namespace", "pluginParent", "sourceType", "sourceSha256"].includes(key)));
+      text(control.pluginId, 1024);
+      text(control.namespace, 64);
+      text(control.pluginParent);
+      requireBound(!ids.has(control.pluginId) && isAbsolute3(control.pluginParent) && resolve2(control.pluginParent) === control.pluginParent && ["local", "git", "npm"].includes(control.sourceType) && typeof control.sourceSha256 === "string" && /^[a-f0-9]{64}$/.test(control.sourceSha256));
+      ids.add(control.pluginId);
+    }
+  }
   if (bridge.disabledBuiltins !== undefined)
     for (const builtin of array3(bridge.disabledBuiltins, AGENT_POLICY_LIMITS.builtinNames)) {
       requireBound(object4(builtin));
@@ -38278,6 +38290,25 @@ function assertAgentPolicyCollections(policy) {
     text(agent, 128);
     requireBound(object4(value));
     text(value.agent, 128);
+    if (value.codexInstallationInputs !== undefined) {
+      const proof = record3(value.codexInstallationInputs, 4), inputs = array3(proof.plugins, 4096), ids = new Set;
+      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && proof.version === "codex-cli 0.160.0" && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
+      for (const input2 of inputs) {
+        requireBound(object4(input2) && Object.keys(input2).every((key) => ["pluginId", "namespace", "pluginParent", "sourceRoot", "sourceSha256"].includes(key)));
+        text(input2.pluginId, 1024);
+        text(input2.namespace, 64);
+        text(input2.pluginParent);
+        text(input2.sourceRoot);
+        requireBound(!ids.has(input2.pluginId) && [input2.pluginParent, input2.sourceRoot].every((path) => isAbsolute3(path) && resolve2(path) === path) && typeof input2.sourceSha256 === "string" && /^[a-f0-9]{64}$/.test(input2.sourceSha256));
+        ids.add(input2.pluginId);
+      }
+      if (proof.directories !== undefined)
+        for (const directory of array3(proof.directories, AGENT_POLICY_LIMITS.discoveryDirectories)) {
+          requireBound(object4(directory));
+          text(directory.path);
+          requireBound(directory.sha256 === null || typeof directory.sha256 === "string" && /^[a-f0-9]{64}$/.test(directory.sha256));
+        }
+    }
     for (const root of array3(value.roots, AGENT_POLICY_LIMITS.discoveryRoots))
       text(root);
     for (const source of array3(value.sources, AGENT_POLICY_LIMITS.discoverySources)) {
@@ -45378,7 +45409,7 @@ function safe(path) {
 function same(before, after) {
   return Boolean(after && after.isDirectory() && before.dev === after.dev && before.ino === after.ino && before.mtimeMs === after.mtimeMs && before.ctimeMs === after.ctimeMs);
 }
-function capture(path, budget) {
+function capture(path, budget, excludedRoots) {
   safe(path);
   const root = lstatSync5(path, { throwIfNoEntry: false });
   if (!root)
@@ -45407,7 +45438,7 @@ function capture(path, budget) {
       budget.bytes += Buffer.byteLength(row);
       need(budget.bytes <= AGENT_POLICY_LIMITS.discoveryDirectoryBytes, "Native discovery directory metadata limit exceeded");
       hash2.update(row);
-      if (stat.isDirectory())
+      if (stat.isDirectory() && !excludedRoots.includes(child))
         walk(child, childRelative, stat, depth + 1);
     }
     need(same(before, lstatSync5(current, { throwIfNoEntry: false })), "Native discovery directory changed while reading");
@@ -45416,16 +45447,18 @@ function capture(path, budget) {
   safe(path);
   return { path, sha256: hash2.digest("hex") };
 }
-function captureDiscoveryDirectories(paths) {
+function captureDiscoveryDirectories(paths, excludedRoots = []) {
   need(Array.isArray(paths) && paths.length <= AGENT_POLICY_LIMITS.discoveryDirectories && new Set(paths).size === paths.length, "Invalid native discovery directory collection");
   const budget = { entries: 0, bytes: 0 };
-  return paths.map((path) => capture(path, budget));
+  for (const root of excludedRoots)
+    safe(root);
+  return paths.map((path) => capture(path, budget, excludedRoots));
 }
-function verifyDiscoveryDirectories(directories) {
+function verifyDiscoveryDirectories(directories, excludedRoots = []) {
   need(Array.isArray(directories) && directories.length <= AGENT_POLICY_LIMITS.discoveryDirectories, "Invalid native discovery directory collection");
   for (const directory of directories)
     need(directory && typeof directory === "object" && (directory.sha256 === null || typeof directory.sha256 === "string" && /^[a-f0-9]{64}$/.test(directory.sha256)), "Invalid native discovery directory digest");
-  const current = captureDiscoveryDirectories(directories.map((directory) => directory.path));
+  const current = captureDiscoveryDirectories(directories.map((directory) => directory.path), excludedRoots);
   for (let i = 0;i < directories.length; i++)
     need(current[i].sha256 === directories[i].sha256, `Native discovery directory membership changed; run skills hook install with a fresh discovery review: ${directories[i].path}`);
 }
@@ -47413,6 +47446,17 @@ function hashClaudeSettingsReplacementV3(text2, budget) {
   budget.remaining -= bytes;
   return settingsDigest(text2, 3);
 }
+function hashNativeJsonControls(text2, excludedMetadata) {
+  need2(Buffer.byteLength(text2) <= CLAUDE_SETTINGS_WITNESS_LIMITS.bytes, "exceeds its byte limit");
+  const value = parse8(text2);
+  value.entries = value.entries.filter(([key, child]) => {
+    if (key !== excludedMetadata)
+      return true;
+    need2(child.kind === "string" && child.value.length <= 128, "has invalid version metadata");
+    return false;
+  });
+  return createHash8("sha256").update("hasna.skills.native-json-controls.v1\x00").update(JSON.stringify(canonical2(value))).digest("hex");
+}
 var CLAUDE_SETTINGS_WITNESS_LIMITS, sameFile = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, BOOLEAN_PREFERENCES, ENUM_PREFERENCES, BUILTIN_MODEL_SELECTIONS, PERSISTED_EFFORT_LEVELS;
 var init_claude_settings_witness = __esm(() => {
   CLAUDE_SETTINGS_WITNESS_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
@@ -47499,12 +47543,47 @@ var init_codex_hook_rpc = __esm(() => {
 });
 
 // src/lib/codex-native-skill-catalog.ts
+function codexPluginSourceIsConfigControlled(plugin) {
+  const remoteRealms = ["openai-curated-remote", "created-by-me-remote", "workspace-directory", "workspace-shared-with-me", "workspace-shared-with-me-private", "workspace-shared-with-me-unlisted"];
+  return Boolean(plugin.sourceType && ["local", "git", "npm"].includes(plugin.sourceType) && plugin.sourceSha256 && /^[a-f0-9]{64}$/.test(plugin.sourceSha256) && !plugin.remotePluginId && !remoteRealms.includes(plugin.id.slice(plugin.id.lastIndexOf("@") + 1)));
+}
 var init_codex_native_skill_catalog = __esm(() => {
   init_codex_hook_rpc();
   init_codex_native_compatibility();
+  init_claude_settings_witness();
 });
 
 // src/lib/codex-plugin-skill-controls.ts
+import { basename as basename5, dirname as dirname10, join as join16, relative as relative4, resolve as resolve9, sep as sep4 } from "path";
+import { lstatSync as lstatSync11, readdirSync as readdirSync6, readlinkSync as readlinkSync3, realpathSync as realpathSync3 } from "fs";
+function refuse() {
+  throw new Error("CODEX_NATIVE_SKILL_IDENTITY_UNSUPPORTED: review native plugin names and hook controls");
+}
+function sourceInputUnchanged(input2, cache, read) {
+  try {
+    const parts = relative4(cache, input2.pluginParent).split(sep4);
+    if (parts.length !== 2 || parts.some((part) => !identifier2(part)) || parts[1] !== input2.namespace || input2.pluginId !== `${parts[1]}@${parts[0]}` || !codexPluginSourceIsConfigControlled({ id: input2.pluginId, sourceType: "local", sourceSha256: input2.sourceSha256 }) || input2.sourceSha256 !== hashNativeJsonControls(JSON.stringify({ type: "local", path: input2.sourceRoot })) || resolve9(input2.sourceRoot) !== input2.sourceRoot || !lstatSync11(input2.sourceRoot).isDirectory() || realpathSync3(input2.sourceRoot) !== input2.sourceRoot || input2.sourceRoot === cache || input2.sourceRoot.startsWith(cache + sep4) || cache.startsWith(input2.sourceRoot + sep4))
+      return false;
+    const path = join16(input2.sourceRoot, ".codex-plugin/plugin.json"), stat = lstatSync11(path);
+    if (!stat.isFile() || stat.size > 1024 * 1024 || realpathSync3(path) !== path)
+      return false;
+    const text2 = read(path);
+    hashNativeJsonControls(text2);
+    const manifest = JSON.parse(text2);
+    return Boolean(manifest && typeof manifest === "object" && !Array.isArray(manifest) && manifest.name === input2.namespace);
+  } catch {
+    return false;
+  }
+}
+function reviewedCodexPluginSourceRoots(cache, inputs, read) {
+  if (!Array.isArray(inputs) || inputs.length > 4096 || new Set(inputs.map((input2) => input2.pluginId)).size !== inputs.length || new Set(inputs.map((input2) => input2.sourceRoot)).size !== inputs.length || inputs.some((input2) => !sourceInputUnchanged(input2, cache, read)))
+    refuse();
+  const roots = inputs.map((input2) => input2.sourceRoot);
+  if (roots.some((root) => roots.some((other) => root !== other && root.startsWith(other + sep4))))
+    refuse();
+  return roots;
+}
+var identifier2 = (v) => typeof v === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(v);
 var init_codex_plugin_skill_controls = __esm(() => {
   init_claude_settings_witness();
   init_codex_native_compatibility();
@@ -47759,8 +47838,8 @@ var init_codex_settings_witness = __esm(() => {
 });
 
 // src/lib/managed-policy.ts
-import { closeSync as closeSync9, constants as constants6, fstatSync as fstatSync9, lstatSync as lstatSync11, openSync as openSync9, readSync as readSync5 } from "fs";
-import { join as join16 } from "path";
+import { closeSync as closeSync9, constants as constants6, fstatSync as fstatSync9, lstatSync as lstatSync12, openSync as openSync9, readSync as readSync5 } from "fs";
+import { join as join17 } from "path";
 function refusal(reason = "is unreadable") {
   return new SkillSelectionError("INVALID_AGENT_POLICY", `The Skills agent loading policy ${reason}; refusing legacy fallback.`);
 }
@@ -47785,10 +47864,10 @@ function parseManagedSkillPolicy(text2) {
   return value;
 }
 function readManagedSkillPolicySnapshot(dataDir2 = getDataDirReadOnly()) {
-  const path = join16(dataDir2, "agent-policy.json");
+  const path = join17(dataDir2, "agent-policy.json");
   let descriptor, observed = false;
   try {
-    const stat = lstatSync11(path);
+    const stat = lstatSync12(path);
     observed = true;
     if (!stat.isFile() || stat.isSymbolicLink())
       throw refusal();
@@ -47814,7 +47893,7 @@ function readManagedSkillPolicySnapshot(dataDir2 = getDataDirReadOnly()) {
     return { text: text2, value: parseManagedSkillPolicy(text2) };
   } catch (error61) {
     if (error61.code === "ENOENT" && !observed) {
-      if (lstatSync11(path, { throwIfNoEntry: false }) === undefined)
+      if (lstatSync12(path, { throwIfNoEntry: false }) === undefined)
         return null;
     }
     if (error61 instanceof SkillSelectionError)
@@ -47916,12 +47995,12 @@ var init_skill_aliases = __esm(() => {
 
 // src/lib/project-state.ts
 import { existsSync as existsSync8, mkdirSync as mkdirSync5, readFileSync as readFileSync12, writeFileSync as writeFileSync4 } from "fs";
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 function getProjectStateDir(targetDir = process.cwd()) {
-  return join17(targetDir, SKILLS_PROJECT_DIR);
+  return join18(targetDir, SKILLS_PROJECT_DIR);
 }
 function getProjectConfigPath(targetDir = process.cwd()) {
-  return join17(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
+  return join18(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
 }
 function loadProjectConfig(targetDir = process.cwd()) {
   const path = getProjectConfigPath(targetDir);
@@ -48037,7 +48116,7 @@ var init_project_state = __esm(() => {
 
 // src/lib/installer.ts
 import { existsSync as existsSync9, readFileSync as readFileSync13, rmSync } from "fs";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 import { homedir as homedir2 } from "os";
 function getSkillPath(name) {
   const skillName = normalizeSkillName(getCanonicalSkillName(name));
@@ -48047,7 +48126,7 @@ function getSkillPath(name) {
   const extensionPath = findExtensionSkillPath(skillName);
   if (extensionPath)
     return extensionPath;
-  return join18(getPortableSkillsRoot(), skillName);
+  return join19(getPortableSkillsRoot(), skillName);
 }
 function getCanonicalSkillName(name) {
   return getSkill(name)?.name ?? resolveSkillAlias(normalizeSkillSlug(name));
@@ -48101,11 +48180,11 @@ function getAgentSkillsDir(agent, scope = "global", projectDir) {
   const base = projectDir || process.cwd();
   switch (agent) {
     case "pi":
-      return scope === "project" ? join18(base, ".pi", "skills") : join18(homedir2(), ".pi", "agent", "skills");
+      return scope === "project" ? join19(base, ".pi", "skills") : join19(homedir2(), ".pi", "agent", "skills");
     case "opencode":
-      return scope === "project" ? join18(base, ".opencode", "skills") : join18(homedir2(), ".config", "opencode", "skills");
+      return scope === "project" ? join19(base, ".opencode", "skills") : join19(homedir2(), ".config", "opencode", "skills");
     default:
-      return scope === "project" ? join18(base, `.${agent}`, "skills") : join18(homedir2(), `.${agent}`, "skills");
+      return scope === "project" ? join19(base, `.${agent}`, "skills") : join19(homedir2(), `.${agent}`, "skills");
   }
 }
 function warnMissingDependencies(name, targetDir) {
@@ -48120,7 +48199,7 @@ function warnMissingDependencies(name, targetDir) {
   }
 }
 function readBundledSkillVersion(name) {
-  const pkgPath = join18(getSkillPath(name), "package.json");
+  const pkgPath = join19(getSkillPath(name), "package.json");
   if (!existsSync9(pkgPath))
     return "unknown";
   try {
@@ -48189,11 +48268,11 @@ var init_skill_doc_file = __esm(() => {
 
 // src/lib/skillinfo.ts
 import { existsSync as existsSync10, readFileSync as readFileSync14 } from "fs";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 function isInstructionSkillDir(skillPath, meta3) {
   if (meta3?.kind === "instruction")
     return true;
-  const skillMdPath = join19(skillPath, "SKILL.md");
+  const skillMdPath = join20(skillPath, "SKILL.md");
   if (!existsSync10(skillMdPath))
     return false;
   try {
@@ -48207,9 +48286,9 @@ function getSkillDocs(name) {
   if (!existsSync10(skillPath))
     return null;
   return {
-    skillMd: readIfExists(join19(skillPath, "SKILL.md")),
-    readme: readIfExists(join19(skillPath, "README.md")),
-    claudeMd: readIfExists(join19(skillPath, "CLAUDE.md"))
+    skillMd: readIfExists(join20(skillPath, "SKILL.md")),
+    readme: readIfExists(join20(skillPath, "README.md")),
+    claudeMd: readIfExists(join20(skillPath, "CLAUDE.md"))
   };
 }
 function getSkillBestDoc(name, file2) {
@@ -48225,14 +48304,14 @@ function getSkillRequirements(name) {
     return null;
   const texts = [];
   for (const file2 of ["SKILL.md", "README.md", "CLAUDE.md", ".env.example", ".env.local.example"]) {
-    const content = readIfExists(join19(skillPath, file2));
+    const content = readIfExists(join20(skillPath, file2));
     if (content)
       texts.push(content);
   }
   const meta3 = getSkill(name);
   let dependencies = {};
   try {
-    dependencies = JSON.parse(readFileSync14(join19(skillPath, "package.json"), "utf8")).dependencies || {};
+    dependencies = JSON.parse(readFileSync14(join20(skillPath, "package.json"), "utf8")).dependencies || {};
   } catch {}
   return getSkillRequirementsFromContent(name, texts, dependencies, meta3);
 }
@@ -48294,7 +48373,7 @@ async function runSkill(name, args, options = {}) {
       error: `Skill '${name}' is an instruction skill (kind: instruction) and is not runnable. Instruction skills are consumed by coding agents via SKILL.md, not executed with 'skills run'.`
     };
   }
-  const pkgPath = join19(skillPath, "package.json");
+  const pkgPath = join20(skillPath, "package.json");
   if (!existsSync10(pkgPath)) {
     return { exitCode: 1, error: `No package.json in skill '${name}'` };
   }
@@ -48314,12 +48393,12 @@ async function runSkill(name, args, options = {}) {
   } catch {
     return { exitCode: 1, error: `Failed to parse package.json for skill '${name}'` };
   }
-  const entryPath = join19(skillPath, entryPoint2);
+  const entryPath = join20(skillPath, entryPoint2);
   if (!existsSync10(entryPath)) {
     return { exitCode: 1, error: `Entry point '${entryPoint2}' not found in skill '${name}'` };
   }
   const env = { ...process.env, ...options.env };
-  if (!existsSync10(join19(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
+  if (!existsSync10(join20(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
     const failure = await prepareSkillDependencies(skillPath, env, options.preparationTimeoutMs);
     if (failure)
       return failure;
@@ -48345,7 +48424,7 @@ async function runSkill(name, args, options = {}) {
 function detectProjectSkills(cwd = process.cwd()) {
   let pkg;
   try {
-    pkg = JSON.parse(readFileSync14(join19(cwd, "package.json"), "utf8"));
+    pkg = JSON.parse(readFileSync14(join20(cwd, "package.json"), "utf8"));
   } catch {
     return { detected: [], recommended: [] };
   }
@@ -48633,11 +48712,11 @@ var init_plugin_projection = __esm(() => {
 });
 
 // src/lib/plugin-projection-store.ts
-import { constants as constants7, closeSync as closeSync10, fchmodSync, fstatSync as fstatSync10, fsyncSync as fsyncSync2, linkSync, lstatSync as lstatSync12, mkdirSync as mkdirSync6, openSync as openSync10, opendirSync as opendirSync2, readSync as readSync6, renameSync as renameSync2, rmdirSync as rmdirSync2, rmSync as rmSync2, unlinkSync as unlinkSync3, writeSync as writeSync2 } from "fs";
-import { dirname as dirname10, isAbsolute as isAbsolute9, join as join20, parse as parse9, resolve as resolve9 } from "path";
+import { constants as constants7, closeSync as closeSync10, fchmodSync, fstatSync as fstatSync10, fsyncSync as fsyncSync2, linkSync, lstatSync as lstatSync13, mkdirSync as mkdirSync6, openSync as openSync10, opendirSync as opendirSync2, readSync as readSync6, renameSync as renameSync2, rmdirSync as rmdirSync2, rmSync as rmSync2, unlinkSync as unlinkSync3, writeSync as writeSync2 } from "fs";
+import { dirname as dirname11, isAbsolute as isAbsolute9, join as join21, parse as parse9, resolve as resolve10 } from "path";
 function stat(path) {
   try {
-    return lstatSync12(path, { bigint: true });
+    return lstatSync13(path, { bigint: true });
   } catch (error61) {
     if (missing(error61))
       return null;
@@ -48645,7 +48724,7 @@ function stat(path) {
   }
 }
 function canonical5(path) {
-  pluginNeed(typeof path === "string" && path.length <= 8192 && isAbsolute9(path) && resolve9(path) === path && !/[\x00-\x1f\x7f]/.test(path), "Plugin storage paths must be canonical absolute paths");
+  pluginNeed(typeof path === "string" && path.length <= 8192 && isAbsolute9(path) && resolve10(path) === path && !/[\x00-\x1f\x7f]/.test(path), "Plugin storage paths must be canonical absolute paths");
 }
 function owner(stats, system = false) {
   const current = uid();
@@ -48656,11 +48735,11 @@ function same3(left, right, identityOnly = false) {
 }
 function ancestors(path, create = false) {
   canonical5(path);
-  const result = [], parent = dirname10(path), filesystemRoot = parse9(parent).root;
+  const result = [], parent = dirname11(path), filesystemRoot = parse9(parent).root;
   let current = filesystemRoot;
   for (const segment of ["", ...parent.slice(filesystemRoot.length).split("/").filter(Boolean)]) {
     if (segment)
-      current = join20(current, segment);
+      current = join21(current, segment);
     let currentStat = stat(current);
     if (!currentStat && create) {
       try {
@@ -48758,7 +48837,7 @@ function directoryNames(path) {
 function snapshotPluginTree(root, options = {}) {
   const chain = ancestors(root), entries = [], files = [], directories = [];
   let bytes = 0, visited = 0;
-  const visit3 = (directory, relative4) => {
+  const visit3 = (directory, relative5) => {
     const before = stat(directory);
     pluginNeed(before && before.isDirectory() && !before.isSymbolicLink(), "Plugin tree must contain real directories");
     const names = directoryNames(directory);
@@ -48766,18 +48845,18 @@ function snapshotPluginTree(root, options = {}) {
     directories.push({ path: directory, stat: before, names });
     for (const name of names) {
       pluginNeed(++visited <= PLUGIN_PROJECTION_LIMITS.files * 50, "Plugin tree membership exceeds its limit");
-      const path = relative4 ? `${relative4}/${name}` : name;
+      const path = relative5 ? `${relative5}/${name}` : name;
       pluginNeed(new TextEncoder().encode(path).byteLength <= 100 && !/[\\:\x00-\x1f\x7f]/u.test(path), "Plugin entry path exceeds its limit or is unsafe");
-      const absolute = join20(directory, name), entryStat = stat(absolute);
+      const absolute = join21(directory, name), entryStat = stat(absolute);
       pluginNeed(entryStat, "Plugin tree member disappeared");
-      if (relative4 === "" && name === ".orphaned_at" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
+      if (relative5 === "" && name === ".orphaned_at" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
         const bytes2 = readBytes(absolute, 32, "native-pin");
         pluginNeed(/^[1-9][0-9]{12}$/.test(new TextDecoder().decode(bytes2)), "Malformed native orphan timestamp");
         same3(entryStat, stat(absolute));
         files.push({ path: absolute, stat: entryStat });
         continue;
       }
-      if (relative4 === "" && name === ".in_use" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
+      if (relative5 === "" && name === ".in_use" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
         pluginNeed(entryStat.isDirectory() && !entryStat.isSymbolicLink(), "Native plugin pins require a real directory");
         owner(entryStat);
         const pins = directoryNames(absolute);
@@ -48785,7 +48864,7 @@ function snapshotPluginTree(root, options = {}) {
         directories.push({ path: absolute, stat: entryStat, names: pins });
         for (const pin of pins) {
           pluginNeed(/^[1-9][0-9]{0,9}$/.test(pin) && Number(pin) <= 2147483647, "Unrecognized native plugin pin name");
-          const pinPath = join20(absolute, pin), pinStat = stat(pinPath);
+          const pinPath = join21(absolute, pin), pinStat = stat(pinPath);
           pluginNeed(pinStat, "Native plugin pin disappeared");
           const bytes2 = readBytes(pinPath, 4096, "native-pin");
           let value;
@@ -48882,7 +48961,7 @@ var init_selected_manifest = __esm(() => {
 });
 
 // src/lib/plugin-admission.ts
-import { isAbsolute as isAbsolute10, join as join21, resolve as resolve10 } from "path";
+import { isAbsolute as isAbsolute10, join as join22, resolve as resolve11 } from "path";
 function validatePluginTarget(value) {
   pluginKeys(value, ["schemaVersion", "pluginId", "registrations", "native", "resolver"]);
   pluginNeed(value.schemaVersion === 1, "Invalid plugin admission target");
@@ -48892,7 +48971,7 @@ function validatePluginTarget(value) {
   for (const registration of value.registrations) {
     pluginKeys(registration, ["scope", "projectPath"]);
     pluginNeed(registration.scope === "user" || registration.scope === "project", "Unsupported plugin registration scope");
-    pluginNeed(registration.scope === "user" ? registration.projectPath === null : typeof registration.projectPath === "string" && isAbsolute10(registration.projectPath) && resolve10(registration.projectPath) === registration.projectPath, "Plugin scope requires its exact project path");
+    pluginNeed(registration.scope === "user" ? registration.projectPath === null : typeof registration.projectPath === "string" && isAbsolute10(registration.projectPath) && resolve11(registration.projectPath) === registration.projectPath, "Plugin scope requires its exact project path");
     const key = JSON.stringify([registration.scope, registration.projectPath]);
     pluginNeed(!scopes.has(key), "Duplicate plugin registration scope");
     scopes.add(key);
@@ -48900,7 +48979,7 @@ function validatePluginTarget(value) {
   for (const key of ["native", "resolver"]) {
     pluginKeys(value[key], key === "native" ? ["version", "executable", "digest"] : ["executable", "digest"]);
     pluginText(value[key].executable);
-    pluginNeed(isAbsolute10(value[key].executable) && resolve10(value[key].executable) === value[key].executable, "Plugin executable must have a canonical absolute path");
+    pluginNeed(isAbsolute10(value[key].executable) && resolve11(value[key].executable) === value[key].executable, "Plugin executable must have a canonical absolute path");
     pluginDigest(value[key].digest);
   }
   pluginNeed(["2.1.274", "2.1.276"].includes(value.native.version), "Plugin admission requires a certified Claude command-source runtime (2.1.274 or 2.1.276)");
@@ -49043,12 +49122,12 @@ function pluginResolverCommand(binding) {
 }
 function pluginBindingPath(storeRoot, id) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id), "Invalid plugin binding identifier");
-  return join21(storeRoot, "bindings", `${id}.json`);
+  return join22(storeRoot, "bindings", `${id}.json`);
 }
 function pluginReceiptPath(storeRoot, id, digest) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id), "Invalid plugin binding identifier");
   pluginDigest(digest);
-  return join21(storeRoot, "receipts", id, `${digest.slice(7)}.json`);
+  return join22(storeRoot, "receipts", id, `${digest.slice(7)}.json`);
 }
 function readPluginBinding(storeRoot, id) {
   const value = readPluginJson(pluginBindingPath(storeRoot, id));
@@ -49068,7 +49147,7 @@ function readPluginAdmissionReceipt(storeRoot, id, digest) {
   pluginNeed(receipt.plan.bindingId === id && receipt.plan.planDigest === digest, "Plugin receipt identity differs from its filename");
   const binding = readPluginBinding(storeRoot, id);
   pluginNeed(canonicalJson(binding) === canonicalJson(receipt.plan.binding) && receipt.plan.sourceCommand === pluginResolverCommand(binding), "Plugin receipt binding changed");
-  pluginNeed(receipt.materializedPath === join21(storeRoot, "objects", id, digest.slice(7)), "Plugin receipt points outside its immutable materialization");
+  pluginNeed(receipt.materializedPath === join22(storeRoot, "objects", id, digest.slice(7)), "Plugin receipt points outside its immutable materialization");
   pluginText(receipt.admittedAt, 64);
   pluginNeed(Number.isFinite(Date.parse(receipt.admittedAt)), "Invalid plugin admission time");
   return receipt;
@@ -49085,8 +49164,8 @@ var init_plugin_admission = __esm(() => {
 });
 
 // src/lib/plugin-discovery.ts
-import { closeSync as closeSync11, constants as constants8, fstatSync as fstatSync11, lstatSync as lstatSync13, openSync as openSync11, opendirSync as opendirSync3, readSync as readSync7 } from "fs";
-import { basename as basename5, dirname as dirname11, isAbsolute as isAbsolute11, join as join22, resolve as resolve11 } from "path";
+import { closeSync as closeSync11, constants as constants8, fstatSync as fstatSync11, lstatSync as lstatSync14, openSync as openSync11, opendirSync as opendirSync3, readSync as readSync7 } from "fs";
+import { basename as basename6, dirname as dirname12, isAbsolute as isAbsolute11, join as join23, resolve as resolve12 } from "path";
 function validateManagedPluginWitnesses(value) {
   pluginNeed(Array.isArray(value) && value.length > 0 && value.length <= PLUGIN_PROJECTION_LIMITS.registrations, "Invalid managed plugin witness collection");
   const seen = new Set;
@@ -49095,21 +49174,21 @@ function validateManagedPluginWitnesses(value) {
     pluginNeed(typeof item.bindingId === "string" && /^[a-f0-9]{64}$/.test(item.bindingId) && !seen.has(item.bindingId), "Invalid or duplicate managed plugin witness");
     seen.add(item.bindingId);
     pluginText(item.storeRoot);
-    pluginNeed(isAbsolute11(item.storeRoot) && resolve11(item.storeRoot) === item.storeRoot, "Invalid plugin receipt store path");
+    pluginNeed(isAbsolute11(item.storeRoot) && resolve12(item.storeRoot) === item.storeRoot, "Invalid plugin receipt store path");
   }
 }
 function safe3(path) {
   pluginText(path);
-  pluginNeed(isAbsolute11(path) && resolve11(path) === path, "Invalid plugin registry path");
-  for (let at = path;; at = dirname11(at)) {
-    pluginNeed(!lstatSync13(at, { throwIfNoEntry: false })?.isSymbolicLink(), "Plugin registry path traverses a symlink");
-    if (at === dirname11(at))
+  pluginNeed(isAbsolute11(path) && resolve12(path) === path, "Invalid plugin registry path");
+  for (let at = path;; at = dirname12(at)) {
+    pluginNeed(!lstatSync14(at, { throwIfNoEntry: false })?.isSymbolicLink(), "Plugin registry path traverses a symlink");
+    if (at === dirname12(at))
       break;
   }
 }
 function readRegistry(path) {
   safe3(path);
-  const initial = lstatSync13(path);
+  const initial = lstatSync14(path);
   pluginNeed(initial.isFile() && initial.size <= 1024 * 1024, "Plugin registry is not a bounded regular file");
   const fd = openSync11(path, constants8.O_RDONLY | constants8.O_NOFOLLOW | constants8.O_NONBLOCK);
   try {
@@ -49123,7 +49202,7 @@ function readRegistry(path) {
         break;
       length += count;
     }
-    const after = fstatSync11(fd), current = lstatSync13(path);
+    const after = fstatSync11(fd), current = lstatSync14(path);
     safe3(path);
     pluginNeed(length <= 1024 * 1024 && length === opened.size && after.size === opened.size && after.mtimeMs === opened.mtimeMs && after.ctimeMs === opened.ctimeMs && current.dev === opened.dev && current.ino === opened.ino && current.mtimeMs === opened.mtimeMs && current.ctimeMs === opened.ctimeMs, "Plugin registry changed during read");
     let value;
@@ -49153,7 +49232,7 @@ function hashManagedPluginRegistry(path, managed) {
     seen.add(target.pluginId);
     const rows = plugins[target.pluginId];
     pluginNeed(Array.isArray(rows) && rows.length === target.registrations.length, "Managed plugin registration membership changed");
-    const [name, market] = target.pluginId.split("@"), cacheRoot = join22(dirname11(path), "cache", market, name);
+    const [name, market] = target.pluginId.split("@"), cacheRoot = join23(dirname12(path), "cache", market, name);
     const scopes = new Set, approvals = new Map, currentFiles = new Map;
     plugins[target.pluginId] = rows.map((row) => {
       pluginNeed(pluginObject(row), "Invalid managed plugin registration");
@@ -49166,10 +49245,10 @@ function hashManagedPluginRegistry(path, managed) {
       pluginText(row.sourceProducerPath);
       pluginText(row.lastUpdated, 64);
       pluginNeed(Number.isFinite(Date.parse(row.lastUpdated)), "Invalid managed plugin update timestamp");
-      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join22(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
+      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join23(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
-        const digest = `sha256:${basename5(producer)}`;
+        const digest = `sha256:${basename6(producer)}`;
         const receipt2 = readPluginAdmissionReceipt(witness.storeRoot, witness.bindingId, digest);
         pluginNeed(receipt2.materializedPath === producer, "Managed producer path is not an approved immutable projection");
         if (!verified.has(producer)) {
@@ -49196,7 +49275,7 @@ function hashManagedPluginRegistry(path, managed) {
       return Object.fromEntries(Object.entries(row).filter(([key]) => !["version", "installPath", "sourceProducerPath", "previousProducerPaths", "lastUpdated"].includes(key)));
     });
     safe3(cacheRoot);
-    const before = lstatSync13(cacheRoot);
+    const before = lstatSync14(cacheRoot);
     pluginNeed(before.isDirectory(), "Invalid managed plugin cache root");
     const directory = opendirSync3(cacheRoot), names = [];
     try {
@@ -49209,17 +49288,17 @@ function hashManagedPluginRegistry(path, managed) {
       directory.closeSync();
     }
     for (const version2 of names.sort()) {
-      const files = pluginFileWitnesses(snapshotPluginTree(join22(cacheRoot, version2), { nativeRuntime: `claude-${target.native.version}` }));
+      const files = pluginFileWitnesses(snapshotPluginTree(join23(cacheRoot, version2), { nativeRuntime: `claude-${target.native.version}` }));
       verifiedBytes += files.reduce((total, file2) => total + file2.size, 0);
       pluginNeed(verifiedBytes <= 256 * 1024 * 1024, "Managed plugin verification exceeds its aggregate byte budget");
       const serialized = JSON.stringify(files);
-      const expected = currentFiles.get(join22(cacheRoot, version2));
+      const expected = currentFiles.get(join23(cacheRoot, version2));
       pluginNeed(expected === undefined || serialized === expected, "Current native cache differs from its exact registered producer receipt");
       pluginNeed([...approvals.values()].some((receipt) => nativeVersionMatches(version2, receipt) && JSON.stringify(receipt.plan.files) === serialized), "A retained native plugin cache version differs from every approved projection");
     }
     for (const row of rows)
       pluginNeed(names.includes(row.version), "Managed native plugin installation is missing");
-    const after = lstatSync13(cacheRoot);
+    const after = lstatSync14(cacheRoot);
     safe3(cacheRoot);
     pluginNeed(before.dev === after.dev && before.ino === after.ino && before.mtimeMs === after.mtimeMs && before.ctimeMs === after.ctimeMs, "Managed cache version membership changed during verification");
   }
@@ -49234,30 +49313,30 @@ var init_plugin_discovery = __esm(() => {
 
 // src/lib/claude-marketplace-registry.ts
 import { createHash as createHash13 } from "crypto";
-import { closeSync as closeSync12, constants as constants9, fstatSync as fstatSync12, lstatSync as lstatSync14, openSync as openSync12, readSync as readSync8 } from "fs";
-import { basename as basename6, dirname as dirname12, isAbsolute as isAbsolute12, resolve as resolve12 } from "path";
+import { closeSync as closeSync12, constants as constants9, fstatSync as fstatSync12, lstatSync as lstatSync15, openSync as openSync12, readSync as readSync8 } from "fs";
+import { basename as basename7, dirname as dirname13, isAbsolute as isAbsolute12, resolve as resolve13 } from "path";
 function need5(value, reason) {
   if (!value)
     throw new Error(`Claude marketplace registry ${reason}`);
 }
 function absolutePath2(value) {
-  need5(typeof value === "string" && value.length > 0 && value.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute12(value) && resolve12(value) === value, "requires a normalized absolute path");
+  need5(typeof value === "string" && value.length > 0 && value.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute12(value) && resolve13(value) === value, "requires a normalized absolute path");
 }
 function parents2(path) {
   const result = [];
-  for (let at = dirname12(path);; at = dirname12(at)) {
-    const stat2 = lstatSync14(at, { bigint: true });
+  for (let at = dirname13(path);; at = dirname13(at)) {
+    const stat2 = lstatSync15(at, { bigint: true });
     need5(stat2.isDirectory() && !stat2.isSymbolicLink(), "path traverses a symlink or non-directory");
     result.push([at, stat2]);
-    if (at === dirname12(at))
+    if (at === dirname13(at))
       return result;
   }
 }
 function readRegistry2(path, budget) {
   absolutePath2(path);
-  need5(basename6(path) === "known_marketplaces.json", "requires known_marketplaces.json");
+  need5(basename7(path) === "known_marketplaces.json", "requires known_marketplaces.json");
   need5(Number.isSafeInteger(budget.remaining) && budget.remaining >= 0, "has an invalid byte budget");
-  const ancestors2 = parents2(path), initial = lstatSync14(path, { bigint: true });
+  const ancestors2 = parents2(path), initial = lstatSync15(path, { bigint: true });
   need5(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
   need5(initial.size <= BigInt(budget.remaining), "exceeds its aggregate byte limit");
   const fd = openSync12(path, constants9.O_RDONLY | constants9.O_NOFOLLOW | constants9.O_NONBLOCK);
@@ -49272,10 +49351,10 @@ function readRegistry2(path, budget) {
         break;
       length += count;
     }
-    const after = fstatSync12(fd, { bigint: true }), current = lstatSync14(path, { bigint: true });
+    const after = fstatSync12(fd, { bigint: true }), current = lstatSync15(path, { bigint: true });
     need5(current.isFile() && sameFile2(opened, after) && sameFile2(after, current) && BigInt(length) === opened.size, "changed during read");
     for (const [ancestor, before] of ancestors2) {
-      const now = lstatSync14(ancestor, { bigint: true });
+      const now = lstatSync15(ancestor, { bigint: true });
       need5(now.isDirectory() && before.dev === now.dev && before.ino === now.ino && before.mode === now.mode, "parent changed during read");
     }
     budget.remaining -= length;
@@ -49415,26 +49494,26 @@ var init_claude_marketplace_registry = __esm(() => {
 });
 
 // src/lib/codex-hook-trust-files.ts
-import { closeSync as closeSync13, constants as constants10, fstatSync as fstatSync13, fsyncSync as fsyncSync3, lstatSync as lstatSync15, openSync as openSync13, readSync as readSync9, writeFileSync as writeFileSync5 } from "fs";
+import { closeSync as closeSync13, constants as constants10, fstatSync as fstatSync13, fsyncSync as fsyncSync3, lstatSync as lstatSync16, openSync as openSync13, readSync as readSync9, writeFileSync as writeFileSync5 } from "fs";
 import { createHash as createHash14 } from "crypto";
-import { dirname as dirname13 } from "path";
+import { dirname as dirname14 } from "path";
 function need6(value, code) {
   if (!value)
     throw new Error(`CODEX_HOOK_TRUST_${code}`);
 }
 function safeParents(file2) {
-  for (let p = dirname13(file2);; p = dirname13(p)) {
-    const s = lstatSync15(p);
+  for (let p = dirname14(file2);; p = dirname14(p)) {
+    const s = lstatSync16(p);
     need6(s.isDirectory() && !s.isSymbolicLink(), "UNSAFE_PARENT");
     need6((s.mode & 18) === 0 || s.uid === 0 && (s.mode & 512) !== 0, "UNSAFE_PARENT");
-    if (dirname13(p) === p)
+    if (dirname14(p) === p)
       break;
   }
 }
 function snapshot(file2, privateFile = false, options = {}) {
   const readOnlyPackage = options.readOnlyPackage === true && !privateFile;
   safeParents(file2);
-  const initial = lstatSync15(file2, { bigint: true });
+  const initial = lstatSync16(file2, { bigint: true });
   need6(initial.isFile() && initial.uid === BigInt(process.getuid()) && (initial.nlink === 1n || readOnlyPackage && initial.nlink > 1n) && (initial.mode & 0o022n) === 0n && (!privateFile || (initial.mode & 0o777n) === 0o600n), "UNSAFE_FILE");
   need6(initial.size <= 8n * 1024n * 1024n, "FILE_BOUND");
   const fd = openSync13(file2, constants10.O_RDONLY | constants10.O_NOFOLLOW | constants10.O_NONBLOCK);
@@ -49449,7 +49528,7 @@ function snapshot(file2, privateFile = false, options = {}) {
         break;
       length += n2;
     }
-    need6(length === Number(before.size) && sameStat(before, fstatSync13(fd, { bigint: true })) && sameStat(before, lstatSync15(file2, { bigint: true })), "INPUT_CHANGED");
+    need6(length === Number(before.size) && sameStat(before, fstatSync13(fd, { bigint: true })) && sameStat(before, lstatSync16(file2, { bigint: true })), "INPUT_CHANGED");
     const content = bytes.subarray(0, length), text2 = new TextDecoder("utf-8", { fatal: true }).decode(content);
     return { file: file2, privateFile, readOnlyPackage, text: text2, bytes: content, stat: before, sha256: createHash14("sha256").update(content).digest("hex") };
   } finally {
@@ -49504,8 +49583,8 @@ var init_codex_hook_discovery_recovery = __esm(() => {
 
 // src/lib/agent-discovery.ts
 import { createHash as createHash16 } from "crypto";
-import { lstatSync as lstatSync16, readFileSync as readFileSync15, readdirSync as readdirSync6, realpathSync as realpathSync3 } from "fs";
-import { basename as basename7, dirname as dirname14, isAbsolute as isAbsolute13, join as join23, resolve as resolve13, sep as sep4 } from "path";
+import { lstatSync as lstatSync17, readFileSync as readFileSync15, readdirSync as readdirSync7, realpathSync as realpathSync4 } from "fs";
+import { basename as basename8, dirname as dirname15, isAbsolute as isAbsolute13, join as join24, resolve as resolve14, sep as sep5 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
 function parseConfig(text2, path, toml = false) {
   try {
@@ -49520,10 +49599,10 @@ function parseConfig(text2, path, toml = false) {
 function safe4(path) {
   if (!isAbsolute13(path) || path.includes("\x00"))
     throw new Error("Expected an absolute native discovery path");
-  for (let cursor = path;; cursor = dirname14(cursor)) {
-    if (lstatSync16(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
+  for (let cursor = path;; cursor = dirname15(cursor)) {
+    if (lstatSync17(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
       throw new Error(`Refusing symlink native discovery input: ${cursor}`);
-    if (dirname14(cursor) === cursor)
+    if (dirname15(cursor) === cursor)
       break;
   }
 }
@@ -49531,7 +49610,7 @@ function read(path, changes) {
   safe4(path);
   if (changes?.has(path))
     return changes.get(path);
-  const stat2 = lstatSync16(path, { throwIfNoEntry: false });
+  const stat2 = lstatSync17(path, { throwIfNoEntry: false });
   if (!stat2)
     return null;
   if (!stat2.isFile() || stat2.size > 16 * 1024 * 1024)
@@ -49605,8 +49684,16 @@ function verifyAgentDiscovery(binding, codexRecovery) {
     throw new Error("Invalid native discovery binding");
   if (binding.agent === "hermes" && !binding.directories?.length)
     throw new Error("Hermes discovery requires directory membership coverage; run skills hook install with a fresh discovery review");
-  if (binding.directories !== undefined)
-    verifyDiscoveryDirectories(binding.directories);
+  const installationRoots = codexInstallationRoots(binding);
+  const installationInput = (path) => installationRoots.some((root) => path === root || path.startsWith(root + sep5));
+  if (binding.directories !== undefined) {
+    const projected2 = binding.codexInstallationInputs?.directories ?? [];
+    const ancestors2 = binding.directories.filter((directory) => installationRoots.some((root) => root.startsWith(directory.path + sep5)));
+    if (projected2.length !== ancestors2.length || projected2.some((directory) => !ancestors2.some((original) => original.path === directory.path)))
+      throw new Error("Missing installation input directory projection");
+    verifyDiscoveryDirectories(binding.directories.filter((directory) => !installationInput(directory.path) && !ancestors2.includes(directory)));
+    verifyDiscoveryDirectories(projected2, installationRoots);
+  }
   const budget = discoveryByteBudget();
   for (const source of binding.sources) {
     assertMarketplaceBinding(binding, source);
@@ -49616,6 +49703,10 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       throw new Error("Invalid native discovery projection");
     if (source.sha256 !== null && !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Invalid native discovery digest");
+    if (installationInput(source.path)) {
+      safe4(source.path);
+      continue;
+    }
     const current = projected(source, undefined, budget);
     if (current !== source.sha256 && !verifiesCodexHookDiscoverySource(binding, source, current, codexRecovery))
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
@@ -49623,19 +49714,40 @@ function verifyAgentDiscovery(binding, codexRecovery) {
   for (const root of binding.roots)
     safe4(root);
 }
+function codexInstallationRoots(binding) {
+  const proof = binding.codexInstallationInputs;
+  if (proof === undefined)
+    return [];
+  if (binding.agent !== "codex" || binding.method !== "reviewed" || proof.version !== "codex-cli 0.160.0" || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
+    throw new Error("Invalid native installation input proof");
+  const cache = dirname15(dirname15(proof.plugins[0].pluginParent));
+  const config2 = join24(dirname15(dirname15(cache)), "config.toml"), home = dirname15(dirname15(dirname15(cache)));
+  const configSource = binding.sources.find((source) => source.path === config2 && source.sha256 !== null && (!source.format || source.format === "toml" && source.fields?.includes("plugins")));
+  const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join24(home, path));
+  if (!configSource || proof.plugins.some((input2) => nativeRoots.some((root) => root === input2.sourceRoot || root.startsWith(input2.sourceRoot + sep5) || input2.sourceRoot.startsWith(root + sep5)) || binding.sources.some((source) => basename8(source.path) === "config.toml" && (source.path === input2.sourceRoot || source.path.startsWith(input2.sourceRoot + sep5)))))
+    throw new Error("Native installation input overlaps configuration or loading roots");
+  if (proof.plugins.some((input2) => dirname15(dirname15(input2.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join24(input2.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
+    throw new Error("Missing native installation input source witness");
+  return reviewedCodexPluginSourceRoots(cache, proof.plugins, (path) => {
+    const text2 = read(path);
+    if (text2 === null)
+      throw new Error("Missing native installation input");
+    return text2;
+  });
+}
 function assertMarketplaceBinding(binding, source) {
-  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2") && (binding.agent !== "codex" || binding.method !== "reviewed" || basename7(source.path) !== "config.toml"))
+  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2") && (binding.agent !== "codex" || binding.method !== "reviewed" || basename8(source.path) !== "config.toml"))
     throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
-  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename7(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
 }
 function agentDiscoveryConfigPath(home, agent) {
-  return join23(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
+  return join24(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
 }
 function resolveAgentDiscovery(options) {
-  const canonical6 = options.canonical ?? resolve13, home = resolve13(options.home), agent = options.agent;
+  const canonical6 = options.canonical ?? resolve14, home = resolve14(options.home), agent = options.agent;
   const sources = [], roots = new Set, builtinNames = [];
   const witness = (path, format, fields2) => {
     const source = { path: canonical6(path), sha256: null, ...format ? { format, fields: fields2 } : {} };
@@ -49652,7 +49764,7 @@ function resolveAgentDiscovery(options) {
     throw new Error(`Native discovery is unresolved (${agent}: ${detail}); provide a reviewed --discovery-inputs file`);
   };
   if (agent === "hermes") {
-    const profile = witness(join23(home, ".hermes/active_profile"));
+    const profile = witness(join24(home, ".hermes/active_profile"));
     if (profile?.trim() && profile.trim() !== "default")
       unresolved("a non-default profile is active");
     const declared = config2.skills?.external_dirs ?? [], paths = typeof declared === "string" ? [declared] : declared;
@@ -49666,7 +49778,7 @@ function resolveAgentDiscovery(options) {
         continue;
       if (normalized.startsWith("~") && normalized !== "~" && !normalized.startsWith("~/"))
         unresolved("user-specific tilde expansion requires a separate discovery adapter");
-      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join23(home, normalized.slice(2)) : resolve13(home, ".hermes", normalized);
+      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join24(home, normalized.slice(2)) : resolve14(home, ".hermes", normalized);
       safe4(path);
       roots.add(path);
     }
@@ -49675,24 +49787,24 @@ function resolveAgentDiscovery(options) {
     const executable = Bun.which("gemini");
     if (executable) {
       let packageRoot;
-      for (let directory = dirname14(realpathSync3(executable)), depth = 0;depth < 8; directory = dirname14(directory), depth++) {
-        const path = join23(directory, "package.json"), raw = read(path);
+      for (let directory = dirname15(realpathSync4(executable)), depth = 0;depth < 8; directory = dirname15(directory), depth++) {
+        const path = join24(directory, "package.json"), raw = read(path);
         if (raw !== null && parseConfig(raw, path).name === "@google/gemini-cli") {
           packageRoot = directory;
           witness(path);
           break;
         }
-        if (dirname14(directory) === directory)
+        if (dirname15(directory) === directory)
           break;
       }
       if (!packageRoot)
         unresolved("installed Gemini package layout is not recognized");
-      const builtinRoot = join23(packageRoot, "bundle/builtin");
+      const builtinRoot = join24(packageRoot, "bundle/builtin");
       safe4(builtinRoot);
-      if (!lstatSync16(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
+      if (!lstatSync17(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
         unresolved("installed Gemini builtin root is missing");
-      for (const name of readdirSync6(builtinRoot).sort()) {
-        const text2 = witness(join23(builtinRoot, name, "SKILL.md"));
+      for (const name of readdirSync7(builtinRoot).sort()) {
+        const text2 = witness(join24(builtinRoot, name, "SKILL.md"));
         const match = text2?.match(/^---\r?\n[\s\S]*?^name:\s*([a-z0-9][a-z0-9-]*)\s*$/m);
         if (!match?.[1] || builtinNames.includes(match[1]))
           unresolved("installed Gemini builtin name is missing or ambiguous");
@@ -49734,39 +49846,39 @@ function resolveAgentDiscovery(options) {
   function plugin(root) {
     root = canonical6(root);
     safe4(root);
-    const manifestPath = join23(root, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
+    const manifestPath = join24(root, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
     const raw = witness(manifestPath);
     if (raw === null)
       unresolved("plugin manifest missing");
     const manifest = parseConfig(raw, manifestPath);
-    const hooks = witness(join23(root, "hooks/hooks.json"));
+    const hooks = witness(join24(root, "hooks/hooks.json"));
     if (manifest.hooks !== undefined || hooks !== null)
       unresolved("plugin hooks require a separate no-skill-injection review");
-    const commands = join23(root, "commands");
+    const commands = join24(root, "commands");
     safe4(commands);
-    if (agent === "claude" && (manifest.commands !== undefined || lstatSync16(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync6(commands).length))
+    if (agent === "claude" && (manifest.commands !== undefined || lstatSync17(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(commands).length))
       unresolved("legacy command discovery requires retirement or a dedicated format adapter");
-    const rootSkill = witness(join23(root, "SKILL.md"));
+    const rootSkill = witness(join24(root, "SKILL.md"));
     if (rootSkill !== null)
       roots.add(root);
     const declared = manifest.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
     if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
       unresolved("unsupported plugin skill paths");
     if (agent === "claude")
-      roots.add(join23(root, "skills"));
+      roots.add(join24(root, "skills"));
     for (const value of declared) {
-      const path = resolve13(root, value);
-      if (path !== root && !path.startsWith(root + sep4))
+      const path = resolve14(root, value);
+      if (path !== root && !path.startsWith(root + sep5))
         unresolved("plugin skill path escapes its root");
-      roots.add(path.endsWith(`${sep4}SKILL.md`) ? dirname14(path) : path);
+      roots.add(path.endsWith(`${sep5}SKILL.md`) ? dirname15(path) : path);
     }
   }
   if (agent === "claude") {
-    const registrations = witness(join23(home, ".claude/plugins/installed_plugins.json"));
-    const installed = registrations === null ? {} : parseConfig(registrations, join23(home, ".claude/plugins/installed_plugins.json")).plugins;
-    const commands = canonical6(join23(home, ".claude/commands"));
+    const registrations = witness(join24(home, ".claude/plugins/installed_plugins.json"));
+    const installed = registrations === null ? {} : parseConfig(registrations, join24(home, ".claude/plugins/installed_plugins.json")).plugins;
+    const commands = canonical6(join24(home, ".claude/commands"));
     safe4(commands);
-    if (lstatSync16(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync6(commands).length)
+    if (lstatSync17(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(commands).length)
       unresolved("legacy home command discovery requires a dedicated format adapter");
     for (const [id, enabled] of Object.entries(config2.enabledPlugins ?? {})) {
       if (enabled === false)
@@ -49788,16 +49900,16 @@ function resolveAgentDiscovery(options) {
       const market = config2.marketplaces?.[marketplace] ?? (marketplace === "personal" ? { source_type: "local", source: home } : undefined);
       if (split < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute13(market.source))
         unresolved("enabled plugin marketplace is not an explicit local source");
-      const catalogText = witness(join23(market.source, ".agents/plugins/marketplace.json"));
+      const catalogText = witness(join24(market.source, ".agents/plugins/marketplace.json"));
       if (catalogText === null)
         unresolved("marketplace catalog missing");
-      const catalog = parseConfig(catalogText, join23(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
+      const catalog = parseConfig(catalogText, join24(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
       if (matches.length !== 1 || matches[0]?.source?.source !== "local" || typeof matches[0]?.source?.path !== "string")
         unresolved("plugin catalog source is missing or ambiguous");
-      plugin(resolve13(market.source, matches[0].source.path));
+      plugin(resolve14(market.source, matches[0].source.path));
     }
   } else if (agent === "opencode") {
-    if (witness(join23(home, ".config/opencode/opencode.jsonc")) !== null || witness(join23(home, ".config/opencode/config.json")) !== null)
+    if (witness(join24(home, ".config/opencode/opencode.jsonc")) !== null || witness(join24(home, ".config/opencode/config.json")) !== null)
       unresolved("additional config layers require review");
     if ((config2.plugin?.length ?? 0) > 0 || config2.skills?.urls?.length)
       unresolved("external plugin or remote skill source");
@@ -49806,14 +49918,14 @@ function resolveAgentDiscovery(options) {
         unresolved("relative or malformed added skill root");
       roots.add(path);
     }
-    const localPlugins = join23(home, ".config/opencode/plugins");
+    const localPlugins = join24(home, ".config/opencode/plugins");
     safe4(localPlugins);
-    if (lstatSync16(localPlugins, { throwIfNoEntry: false }) && readdirSync6(localPlugins).some((name) => name !== "skills-cli.js"))
+    if (lstatSync17(localPlugins, { throwIfNoEntry: false }) && readdirSync7(localPlugins).some((name) => name !== "skills-cli.js"))
       unresolved("additional local plugin hooks require review");
   } else if (agent === "hermes") {
-    for (const directory of [join23(home, ".hermes/plugins"), join23(home, ".hermes/hermes-agent")]) {
+    for (const directory of [join24(home, ".hermes/plugins"), join24(home, ".hermes/hermes-agent")]) {
       safe4(directory);
-      if (lstatSync16(directory, { throwIfNoEntry: false }))
+      if (lstatSync17(directory, { throwIfNoEntry: false }))
         unresolved("installed runtime/plugin discovery requires reviewed source bindings");
     }
     if (Bun.which("hermes") || Object.keys(config2.plugins ?? {}).length)
@@ -49821,24 +49933,24 @@ function resolveAgentDiscovery(options) {
   } else if (agent === "gemini") {
     if (Object.keys(config2.extensions ?? {}).length || config2.skills?.paths?.length)
       unresolved("custom extension or skill paths");
-    const directory = join23(home, ".gemini/extensions");
+    const directory = join24(home, ".gemini/extensions");
     safe4(directory);
-    if (lstatSync16(directory, { throwIfNoEntry: false }))
-      for (const name of readdirSync6(directory)) {
-        const root = join23(directory, name);
+    if (lstatSync17(directory, { throwIfNoEntry: false }))
+      for (const name of readdirSync7(directory)) {
+        const root = join24(directory, name);
         safe4(root);
-        if (!lstatSync16(root)?.isDirectory())
+        if (!lstatSync17(root)?.isDirectory())
           continue;
-        const raw = witness(join23(root, "gemini-extension.json"));
+        const raw = witness(join24(root, "gemini-extension.json"));
         if (raw === null)
           unresolved("extension registration missing");
-        const manifest = parseConfig(raw, join23(root, "gemini-extension.json"));
-        if (manifest.hooks !== undefined || witness(join23(root, "hooks/hooks.json")) !== null || witness(join23(root, ".gemini-extension-install.json")) !== null)
+        const manifest = parseConfig(raw, join24(root, "gemini-extension.json"));
+        if (manifest.hooks !== undefined || witness(join24(root, "hooks/hooks.json")) !== null || witness(join24(root, ".gemini-extension-install.json")) !== null)
           unresolved("extension hooks or linked registration require review");
-        roots.add(join23(root, "skills"));
+        roots.add(join24(root, "skills"));
       }
   }
-  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join23(home, ".hermes/plugins"), join23(home, ".hermes/hermes-agent")].map((path) => canonical6(path))) } : {} };
+  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join24(home, ".hermes/plugins"), join24(home, ".hermes/hermes-agent")].map((path) => canonical6(path))) } : {} };
 }
 var digest = (text2) => createHash16("sha256").update(text2).digest("hex");
 var init_agent_discovery = __esm(() => {
@@ -49853,15 +49965,17 @@ var init_agent_discovery = __esm(() => {
   init_claude_settings_witness();
   init_codex_hook_discovery_recovery();
   init_codex_settings_witness();
+  init_codex_plugin_skill_controls();
+  init_native_discovery_roots();
   init_agent_discovery_directories();
 });
 
 // src/lib/authoring-path.ts
-import { lstatSync as lstatSync17, realpathSync as realpathSync4 } from "fs";
+import { lstatSync as lstatSync18, realpathSync as realpathSync5 } from "fs";
 import { homedir as homedir3 } from "os";
-import { basename as basename8, dirname as dirname15, join as join24, resolve as resolve14, sep as sep5 } from "path";
+import { basename as basename9, dirname as dirname16, join as join25, resolve as resolve15, sep as sep6 } from "path";
 function pathParts(path) {
-  return resolve14(path).split(sep5).filter(Boolean);
+  return resolve15(path).split(sep6).filter(Boolean);
 }
 function nativeRootMatch(path) {
   const parts = pathParts(path);
@@ -49875,24 +49989,24 @@ function nativeRootMatch(path) {
   return;
 }
 function physicalPath(path) {
-  let cursor = resolve14(path);
+  let cursor = resolve15(path);
   const suffix = [];
-  while (!lstatSync17(cursor, { throwIfNoEntry: false })) {
-    suffix.unshift(basename8(cursor));
-    const parent = dirname15(cursor);
+  while (!lstatSync18(cursor, { throwIfNoEntry: false })) {
+    suffix.unshift(basename9(cursor));
+    const parent = dirname16(cursor);
     if (parent === cursor)
-      return resolve14(path);
+      return resolve15(path);
     cursor = parent;
   }
-  return resolve14(realpathSync4(cursor), ...suffix);
+  return resolve15(realpathSync5(cursor), ...suffix);
 }
 function contains(root, path) {
-  return path === root || path.startsWith(root + sep5);
+  return path === root || path.startsWith(root + sep6);
 }
 function configuredRoots(home, explicitHome) {
-  const homeData = join24(home, ".hasna", "skills");
+  const homeData = join25(home, ".hasna", "skills");
   const homePolicy = readManagedSkillPolicySnapshot(homeData);
-  const configuredPolicy = !explicitHome && resolve14(getDataDirReadOnly()) !== resolve14(homeData) ? readManagedSkillPolicySnapshot(getDataDirReadOnly()) : null;
+  const configuredPolicy = !explicitHome && resolve15(getDataDirReadOnly()) !== resolve15(homeData) ? readManagedSkillPolicySnapshot(getDataDirReadOnly()) : null;
   const policy = homePolicy ?? configuredPolicy;
   const bridge = policy?.value.bridge;
   if (bridge && (typeof bridge.home !== "string" || physicalPath(bridge.home) !== physicalPath(home))) {
@@ -49921,8 +50035,8 @@ function configuredRoots(home, explicitHome) {
       admitBinding(binding);
       continue;
     }
-    const nativeHome = join24(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
-    if (!lstatSync17(nativeHome, { throwIfNoEntry: false }))
+    const nativeHome = join25(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
+    if (!lstatSync18(nativeHome, { throwIfNoEntry: false }))
       continue;
     roots.push(...resolveAgentDiscovery({ home, agent, canonical: physicalPath }).roots);
   }
@@ -49931,22 +50045,22 @@ function configuredRoots(home, explicitHome) {
 function assertPortableAuthoringPath(path, options = {}) {
   if (typeof path !== "string" || !path || path.includes("\x00"))
     throw new Error("Invalid portable authoring path");
-  const lexical = resolve14(path);
+  const lexical = resolve15(path);
   const physical = physicalPath(lexical);
   const candidates = [lexical, physical];
   let native = candidates.map(nativeRootMatch).find(Boolean);
-  const home = resolve14(options.homeDir ?? homedir3());
-  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join24(home, ...parts));
-  defaults.push(join24(home, ".codex/plugins/cache"), join24(home, ".claude/plugins/cache"), join24(home, ".claude/plugins/synced"), join24(home, ".gemini/extensions"));
+  const home = resolve15(options.homeDir ?? homedir3());
+  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join25(home, ...parts));
+  defaults.push(join25(home, ".codex/plugins/cache"), join25(home, ".claude/plugins/cache"), join25(home, ".claude/plugins/synced"), join25(home, ".gemini/extensions"));
   for (const root of defaults) {
-    if (candidates.some((candidate) => contains(resolve14(root), candidate) || contains(physicalPath(root), candidate)))
+    if (candidates.some((candidate) => contains(resolve15(root), candidate) || contains(physicalPath(root), candidate)))
       native ??= root;
   }
   if (native) {
     throw new Error(`Refusing portable Skills authoring below native discovery root '${native}': ${lexical}. Set HASNA_SKILLS_DIR to a private authoring corpus outside native roots.`);
   }
   for (const root of configuredRoots(home, options.homeDir !== undefined)) {
-    if (candidates.some((candidate) => contains(resolve14(root), candidate) || contains(physicalPath(root), candidate))) {
+    if (candidates.some((candidate) => contains(resolve15(root), candidate) || contains(physicalPath(root), candidate))) {
       throw new Error(`Refusing portable Skills authoring below configured native discovery root: ${lexical}`);
     }
   }
@@ -49966,29 +50080,29 @@ import {
   existsSync as existsSync11,
   mkdirSync as mkdirSync7,
   mkdtempSync,
-  readdirSync as readdirSync7,
-  realpathSync as realpathSync5,
+  readdirSync as readdirSync8,
+  realpathSync as realpathSync6,
   renameSync as renameSync3,
   rmSync as rmSync3,
   statSync as statSync7,
   writeFileSync as writeFileSync6
 } from "fs";
-import { basename as basename9, dirname as dirname16, isAbsolute as isAbsolute14, join as join25, normalize as normalize3, relative as relative4, resolve as resolve15, sep as sep6 } from "path";
+import { basename as basename10, dirname as dirname17, isAbsolute as isAbsolute14, join as join26, normalize as normalize3, relative as relative5, resolve as resolve16, sep as sep7 } from "path";
 function getPortableSkillsRoot(options = {}) {
   return resolvePortableSkillsRoot(options, true);
 }
 function resolvePortableSkillsRoot(options, migrate) {
   if (options.rootDir)
     return options.rootDir;
-  const appDir = options.homeDir ? join25(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
-  const cache = join25(appDir, SKILLS_CACHE_DIRNAME);
+  const appDir = options.homeDir ? join26(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
+  const cache = join26(appDir, SKILLS_CACHE_DIRNAME);
   if (isOwnerLayoutMigrated(appDir) && safeIsDirectory(cache))
     return cache;
-  const installed = join25(appDir, INSTALLED_SKILLS_DIRNAME);
+  const installed = join26(appDir, INSTALLED_SKILLS_DIRNAME);
   return installed;
 }
 function getPortableSkillPath(name, options = {}) {
-  return join25(getPortableSkillsRoot(options), normalizePortableSkillName(name));
+  return join26(getPortableSkillsRoot(options), normalizePortableSkillName(name));
 }
 function findPortableSkill(name, options = {}) {
   let normalized;
@@ -50011,10 +50125,10 @@ function listPortableSkills(options = {}) {
   if (!safeIsDirectory(root))
     return [];
   const skills = [];
-  for (const entry of readdirSync7(root).sort()) {
+  for (const entry of readdirSync8(root).sort()) {
     if (entry.startsWith("."))
       continue;
-    const path = join25(root, entry);
+    const path = join26(root, entry);
     if (!safeIsDirectory(path))
       continue;
     try {
@@ -50047,9 +50161,9 @@ function isOfficialSkillName(name) {
 function scaffoldPortableSkill(name, options = {}) {
   const skillName = normalizeNewPortableSkillName(name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join25(readOnlyRoot, skillName), options);
+  assertPortableAuthoringPath(join26(readOnlyRoot, skillName), options);
   const root = getPortableSkillsRoot(options);
-  const skillPath = join25(root, skillName);
+  const skillPath = join26(root, skillName);
   assertPortableAuthoringPath(skillPath, options);
   if (existsSync11(skillPath)) {
     if (!options.overwrite)
@@ -50068,20 +50182,20 @@ function scaffoldPortableSkill(name, options = {}) {
   return { name: skillName, path: skillPath, manifest, created: true };
 }
 function physicalImportPath(path) {
-  let ancestor = resolve15(path);
+  let ancestor = resolve16(path);
   const suffix = [];
   while (!existsSync11(ancestor)) {
-    suffix.unshift(basename9(ancestor));
-    ancestor = dirname16(ancestor);
+    suffix.unshift(basename10(ancestor));
+    ancestor = dirname17(ancestor);
   }
-  return join25(realpathSync5(ancestor), ...suffix);
+  return join26(realpathSync6(ancestor), ...suffix);
 }
 function assertDisjointImportPaths(source, destination) {
-  const sourcePath = realpathSync5(source);
+  const sourcePath = realpathSync6(source);
   const destinationPath = physicalImportPath(destination);
   const contains2 = (parent, child) => {
-    const path = relative4(parent, child);
-    return path === "" || !isAbsolute14(path) && path !== ".." && !path.startsWith(`..${sep6}`);
+    const path = relative5(parent, child);
+    return path === "" || !isAbsolute14(path) && path !== ".." && !path.startsWith(`..${sep7}`);
   };
   if (contains2(sourcePath, destinationPath) || contains2(destinationPath, sourcePath)) {
     throw new Error("Source and destination skill directories must not overlap");
@@ -50096,15 +50210,15 @@ function portPortableSkill(sourcePath, options = {}) {
   const explicitName = options.name != null;
   const skillName = normalizeNewPortableSkillName(options.name ?? inferred.name);
   if (isOfficialSkillName(skillName) && !options.allowShadow) {
-    const sourceSlug = safeNormalizeName(basename9(absoluteSource));
-    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename9(absoluteSource)}')` : ""} matches a bundled official skill.`;
+    const sourceSlug = safeNormalizeName(basename10(absoluteSource));
+    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename10(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
-  const readOnlyDestination = join25(resolvePortableSkillsRoot(options, false), skillName);
+  const readOnlyDestination = join26(resolvePortableSkillsRoot(options, false), skillName);
   assertPortableAuthoringPath(readOnlyDestination, options);
   assertDisjointImportPaths(absoluteSource, readOnlyDestination);
   const root = getPortableSkillsRoot(options);
-  const destination = join25(root, skillName);
+  const destination = join26(root, skillName);
   assertPortableAuthoringPath(destination, options);
   assertDisjointImportPaths(absoluteSource, destination);
   if (existsSync11(destination)) {
@@ -50112,7 +50226,7 @@ function portPortableSkill(sourcePath, options = {}) {
       throw new Error(`Skill '${skillName}' already exists at ${destination}`);
     rmSync3(destination, { recursive: true, force: true });
   }
-  mkdirSync7(dirname16(destination), { recursive: true });
+  mkdirSync7(dirname17(destination), { recursive: true });
   copySkillDirectory(absoluteSource, destination);
   const base = {
     ...inferred,
@@ -50136,8 +50250,8 @@ function validatePortableSkillDirectory(name, skillPath) {
   const warnings = [...base.warnings];
   let manifest;
   if (existsSync11(skillPath)) {
-    const skillJsonPath = join25(skillPath, "skill.json");
-    const skillMdPath = join25(skillPath, "SKILL.md");
+    const skillJsonPath = join26(skillPath, "skill.json");
+    const skillMdPath = join26(skillPath, "SKILL.md");
     if (!existsSync11(skillJsonPath) && !existsSync11(skillMdPath)) {
       add3(issues, "portable.manifest_missing", "Missing portable manifest: expected SKILL.md frontmatter and/or skill.json");
     }
@@ -50157,7 +50271,7 @@ function validatePortableSkillDirectory(name, skillPath) {
         add3(issues, "portable.version_missing", "Portable manifest missing version");
       }
       const contractIssues = validatePortableManifestContract(manifest, {
-        strict: existsSync11(join25(skillPath, "skill.json")),
+        strict: existsSync11(join26(skillPath, "skill.json")),
         skillPath
       });
       for (const issue2 of contractIssues)
@@ -50197,7 +50311,7 @@ function validatePortableSkillDirectory(name, skillPath) {
               add3(issues, "portable.command_entry_unsafe", `Command '${command.name}' entry '${command.entry}' must stay inside the skill directory`);
               continue;
             }
-            const entryPath = join25(skillPath, command.entry);
+            const entryPath = join26(skillPath, command.entry);
             if (!existsSync11(entryPath))
               add3(issues, "portable.command_entry_missing", `Command '${command.name}' entry '${command.entry}' is missing`);
             else if (statSync7(entryPath).isDirectory())
@@ -50208,7 +50322,7 @@ function validatePortableSkillDirectory(name, skillPath) {
     } catch (error61) {
       add3(issues, "portable.manifest_invalid", error61.message);
     }
-    if (manifest?.kind !== "instruction" && !existsSync11(join25(skillPath, "AGENTS.md"))) {
+    if (manifest?.kind !== "instruction" && !existsSync11(join26(skillPath, "AGENTS.md"))) {
       add3(issues, "portable.agents_missing", "Missing AGENTS.md with build-out instructions for coding agents");
     }
   }
@@ -50435,8 +50549,8 @@ var init_search = __esm(() => {
 });
 
 // src/lib/registry.ts
-import { existsSync as existsSync12, readFileSync as readFileSync16, readdirSync as readdirSync8 } from "fs";
-import { join as join26 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync16, readdirSync as readdirSync9 } from "fs";
+import { join as join27 } from "path";
 function parseSkillMdFrontmatter(content) {
   const match = content.match(/^---\n([\s\S]*?)\n---/);
   if (!match)
@@ -50473,11 +50587,11 @@ function discoverSkillsInDir(dir, source = "custom") {
     return [];
   const result = [];
   try {
-    const entries = readdirSync8(dir, { withFileTypes: true });
+    const entries = readdirSync9(dir, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillMdPath = join26(dir, entry.name, "SKILL.md");
+      const skillMdPath = join27(dir, entry.name, "SKILL.md");
       if (!existsSync12(skillMdPath))
         continue;
       let content;
@@ -50497,7 +50611,7 @@ function discoverSkillsInDir(dir, source = "custom") {
         category: fm.category || "Development Tools",
         tags: fm.tags || [],
         ...fm.kind ? { kind: fm.kind } : {},
-        ...isHostedMetadataSkillDir(join26(dir, entry.name)) ? { serverOwned: true } : {},
+        ...isHostedMetadataSkillDir(join27(dir, entry.name)) ? { serverOwned: true } : {},
         source
       });
     }
@@ -50509,12 +50623,12 @@ function findExtensionSkillPath(name) {
   if (!config2.extensionsDir || !existsSync12(config2.extensionsDir))
     return null;
   try {
-    const entries = readdirSync8(config2.extensionsDir, { withFileTypes: true });
+    const entries = readdirSync9(config2.extensionsDir, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillDir = join26(config2.extensionsDir, entry.name);
-      const skillMdPath = join26(skillDir, "SKILL.md");
+      const skillDir = join27(config2.extensionsDir, entry.name);
+      const skillMdPath = join27(skillDir, "SKILL.md");
       if (!existsSync12(skillMdPath))
         continue;
       let content;
@@ -51712,13 +51826,13 @@ var init_remote_workspace_leave = __esm(() => {
 
 // src/lib/auth-store.ts
 import { chmodSync, existsSync as existsSync13, mkdirSync as mkdirSync8, readFileSync as readFileSync17, renameSync as renameSync4, statSync as statSync8, unlinkSync as unlinkSync4, writeFileSync as writeFileSync7 } from "fs";
-import { basename as basename10, dirname as dirname17, join as join27 } from "path";
+import { basename as basename11, dirname as dirname18, join as join28 } from "path";
 function getAuthFilePath(env = process.env) {
   return skillsCredentialFilePath(env);
 }
 function getIdentityFilePath(env = process.env) {
   const file2 = skillsCredentialFilePath(env);
-  return join27(dirname17(file2), basename10(file2).replace(/^credentials/, "identity") + ".json");
+  return join28(dirname18(file2), basename11(file2).replace(/^credentials/, "identity") + ".json");
 }
 function getApiUrl(action, env = process.env, options = {}) {
   return requireSkillsApiOrigin(action, env, options);
@@ -51946,10 +52060,10 @@ async function readQuoteUnavailableCode(response) {
   let timer;
   let deadlineExceeded = false;
   const expired = Symbol("quote body deadline");
-  const deadline = new Promise((resolve16) => {
+  const deadline = new Promise((resolve17) => {
     timer = setTimeout(() => {
       deadlineExceeded = true;
-      resolve16(expired);
+      resolve17(expired);
       reader.cancel().catch(() => {});
     }, 1500);
   });
@@ -53432,12 +53546,12 @@ class RemotePrivatePublicationsClient {
       previous = view;
       if (!["queued", "verifying"].includes(view.state) || Date.now() >= until)
         return view;
-      await new Promise((resolve16) => {
+      await new Promise((resolve17) => {
         const timer = setTimeout(done, Math.min(1000, until - Date.now()));
         function done() {
           clearTimeout(timer);
           options.signal?.removeEventListener("abort", done);
-          resolve16();
+          resolve17();
         }
         options.signal?.addEventListener("abort", done, { once: true });
       });
@@ -53725,10 +53839,10 @@ var init_remote_auth = __esm(() => {
 });
 
 // src/lib/workspace-profile.ts
-import { constants as constants11, closeSync as closeSync14, fstatSync as fstatSync14, lstatSync as lstatSync18, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync2, openSync as openSync14, readFileSync as readFileSync18, renameSync as renameSync5, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "fs";
+import { constants as constants11, closeSync as closeSync14, fstatSync as fstatSync14, lstatSync as lstatSync19, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync2, openSync as openSync14, readFileSync as readFileSync18, renameSync as renameSync5, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "fs";
 function stat2(path) {
   try {
-    return lstatSync18(path);
+    return lstatSync19(path);
   } catch (error61) {
     if (error61.code === "ENOENT")
       return null;
@@ -53957,8 +54071,8 @@ var init_recurring_customer = __esm(() => {
 });
 
 // src/lib/recurring-recovery.ts
-import { constants as constants12, closeSync as closeSync15, fsyncSync as fsyncSync4, fstatSync as fstatSync15, lstatSync as lstatSync19, mkdirSync as mkdirSync10, openSync as openSync15, readSync as readSync10, realpathSync as realpathSync6, renameSync as renameSync6, unlinkSync as unlinkSync5, writeFileSync as writeFileSync9 } from "fs";
-import { dirname as dirname18, isAbsolute as isAbsolute15, join as join28, resolve as resolve16 } from "path";
+import { constants as constants12, closeSync as closeSync15, fsyncSync as fsyncSync4, fstatSync as fstatSync15, lstatSync as lstatSync20, mkdirSync as mkdirSync10, openSync as openSync15, readSync as readSync10, realpathSync as realpathSync7, renameSync as renameSync6, unlinkSync as unlinkSync5, writeFileSync as writeFileSync9 } from "fs";
+import { dirname as dirname19, isAbsolute as isAbsolute15, join as join29, resolve as resolve17 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 
 class RecoveryOwner {
@@ -53966,33 +54080,33 @@ class RecoveryOwner {
   parents = [];
   constructor(directory) {
     this.directory = directory;
-    if (!isAbsolute15(directory) || resolve16(directory) !== directory || realpathSync6(directory) !== directory)
+    if (!isAbsolute15(directory) || resolve17(directory) !== directory || realpathSync7(directory) !== directory)
       invalid5();
-    for (let path = directory;; path = dirname18(path)) {
-      const stat3 = lstatSync19(path);
+    for (let path = directory;; path = dirname19(path)) {
+      const stat3 = lstatSync20(path);
       if (!stat3.isDirectory() || stat3.isSymbolicLink())
         invalid5();
       this.parents.push({ path, dev: stat3.dev, ino: stat3.ino });
-      if (path === dirname18(path))
+      if (path === dirname19(path))
         break;
     }
     this.assert();
   }
   assert() {
-    if (realpathSync6(this.directory) !== this.directory)
+    if (realpathSync7(this.directory) !== this.directory)
       invalid5();
     for (const prior of this.parents) {
-      const now = lstatSync19(prior.path);
+      const now = lstatSync20(prior.path);
       if (!now.isDirectory() || now.isSymbolicLink() || now.dev !== prior.dev || now.ino !== prior.ino)
         invalid5();
     }
-    const own2 = lstatSync19(this.directory);
+    const own2 = lstatSync20(this.directory);
     if ((own2.mode & 511) !== 448 || (own2.mode & 3584) !== 0 || process.getuid && own2.uid !== process.getuid())
       invalid5();
   }
   read(name) {
     this.assert();
-    const fd = openSync15(join28(this.directory, name), constants12.O_RDONLY | constants12.O_NOFOLLOW | constants12.O_NONBLOCK);
+    const fd = openSync15(join29(this.directory, name), constants12.O_RDONLY | constants12.O_NOFOLLOW | constants12.O_NONBLOCK);
     try {
       const before = fstatSync15(fd);
       if (!before.isFile() || before.nlink !== 1 || (before.mode & 4095) !== 384 || before.size < 1 || before.size > 8192 || process.getuid && before.uid !== process.getuid())
@@ -54005,7 +54119,7 @@ class RecoveryOwner {
           break;
         size += n2;
       }
-      const after = fstatSync15(fd), path = lstatSync19(join28(this.directory, name));
+      const after = fstatSync15(fd), path = lstatSync20(join29(this.directory, name));
       if (size !== before.size || after.size !== before.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs || path.dev !== before.dev || path.ino !== before.ino || !path.isFile() || path.isSymbolicLink())
         invalid5();
       this.assert();
@@ -54018,7 +54132,7 @@ class RecoveryOwner {
     this.assert();
     const bytes = canonicalJson2(value, 8192) + `
 `;
-    const fd = openSync15(join28(this.directory, name), constants12.O_WRONLY | constants12.O_CREAT | constants12.O_EXCL | constants12.O_NOFOLLOW, 384);
+    const fd = openSync15(join29(this.directory, name), constants12.O_WRONLY | constants12.O_CREAT | constants12.O_EXCL | constants12.O_NOFOLLOW, 384);
     try {
       writeFileSync9(fd, bytes);
       fsyncSync4(fd);
@@ -54045,14 +54159,14 @@ class RecoveryOwner {
     if (this.read("state.json") !== expected)
       invalid5();
     this.assert();
-    renameSync6(join28(this.directory, name), join28(this.directory, "state.json"));
+    renameSync6(join29(this.directory, name), join29(this.directory, "state.json"));
     this.sync();
   }
   async locked(action) {
     this.assert();
     let fd;
     try {
-      fd = openSync15(join28(this.directory, "operation.lock"), constants12.O_WRONLY | constants12.O_CREAT | constants12.O_EXCL | constants12.O_NOFOLLOW, 384);
+      fd = openSync15(join29(this.directory, "operation.lock"), constants12.O_WRONLY | constants12.O_CREAT | constants12.O_EXCL | constants12.O_NOFOLLOW, 384);
     } catch {
       throw new RecurringCustomerError("RECURRING_RECOVERY_BUSY", "Recovery is locked. Confirm the original process has stopped before explicitly reconciling the retained lock; no request was retried.");
     }
@@ -54065,10 +54179,10 @@ class RecoveryOwner {
     } finally {
       closeSync15(fd);
       this.assert();
-      const now = lstatSync19(join28(this.directory, "operation.lock"));
+      const now = lstatSync20(join29(this.directory, "operation.lock"));
       if (owner2.dev !== now.dev || owner2.ino !== now.ino || !now.isFile() || now.isSymbolicLink())
         invalid5();
-      unlinkSync5(join28(this.directory, "operation.lock"));
+      unlinkSync5(join29(this.directory, "operation.lock"));
       this.sync();
     }
   }
@@ -54101,7 +54215,7 @@ function base(customer, organizationId) {
   };
 }
 function create(directory, intent) {
-  if (!isAbsolute15(directory) || resolve16(directory) !== directory || realpathSync6(dirname18(directory)) !== dirname18(directory))
+  if (!isAbsolute15(directory) || resolve17(directory) !== directory || realpathSync7(dirname19(directory)) !== dirname19(directory))
     invalid5();
   mkdirSync10(directory, { mode: 448 });
   const owner2 = new RecoveryOwner(directory), checked = intentSchema.parse(intent), intentSha256 = canonicalJsonSha256(checked);
@@ -56199,20 +56313,20 @@ var init_credential_state = __esm(() => {
 
 // src/lib/run-state.ts
 import { createHash as createHash19, randomBytes } from "crypto";
-import { existsSync as existsSync14, mkdirSync as mkdirSync11, readFileSync as readFileSync19, readdirSync as readdirSync9, statSync as statSync9, writeFileSync as writeFileSync10 } from "fs";
-import { extname, join as join29, relative as relative5 } from "path";
+import { existsSync as existsSync14, mkdirSync as mkdirSync11, readFileSync as readFileSync19, readdirSync as readdirSync10, statSync as statSync9, writeFileSync as writeFileSync10 } from "fs";
+import { extname, join as join30, relative as relative6 } from "path";
 function createSkillRun(params, targetDir = process.cwd()) {
   const now = new Date;
   const id = createRunId(now);
   const day = now.toISOString().slice(0, 10);
   const skillName = normalizeSkillName(params.skill);
   const root = getProjectStateDir(targetDir);
-  const runDir = join29(root, "runs", day, id);
-  const logsDir = join29(runDir, "logs");
-  const exportDir = join29(root, "exports", skillName, id);
+  const runDir = join30(root, "runs", day, id);
+  const logsDir = join30(runDir, "logs");
+  const exportDir = join30(root, "exports", skillName, id);
   mkdirSync11(logsDir, { recursive: true });
   mkdirSync11(exportDir, { recursive: true });
-  mkdirSync11(join29(root, "tmp"), { recursive: true });
+  mkdirSync11(join30(root, "tmp"), { recursive: true });
   const record10 = {
     id,
     skill: skillName,
@@ -56264,22 +56378,22 @@ function updateSkillRun(context2, patch) {
   return context2.record;
 }
 function writeRunLogs(context2, stdout = "", stderr = "") {
-  writeFileSync10(join29(context2.logsDir, "stdout.log"), stdout);
-  writeFileSync10(join29(context2.logsDir, "stderr.log"), stderr);
+  writeFileSync10(join30(context2.logsDir, "stdout.log"), stdout);
+  writeFileSync10(join30(context2.logsDir, "stderr.log"), stderr);
 }
 function appendRunEvent(context2, event, data = {}) {
   const line = JSON.stringify({ ts: new Date().toISOString(), event, ...data }) + `
 `;
-  const path = join29(context2.runDir, "events.ndjson");
+  const path = join30(context2.runDir, "events.ndjson");
   const previous = existsSync14(path) ? readFileSync19(path, "utf-8") : "";
   writeFileSync10(path, previous + line);
 }
 function findSkillRun(runId, targetDir = process.cwd()) {
-  const runsRoot = join29(getProjectStateDir(targetDir), "runs");
+  const runsRoot = join30(getProjectStateDir(targetDir), "runs");
   if (!existsSync14(runsRoot))
     return null;
-  for (const day of readdirSync9(runsRoot)) {
-    const record10 = readRunRecord(join29(runsRoot, day, runId));
+  for (const day of readdirSync10(runsRoot)) {
+    const record10 = readRunRecord(join30(runsRoot, day, runId));
     if (record10)
       return record10;
   }
@@ -56296,11 +56410,11 @@ function skillRunEnv(context2) {
   };
 }
 function writeRunRecord(context2) {
-  writeFileSync10(join29(context2.runDir, "run.json"), JSON.stringify(context2.record, null, 2) + `
+  writeFileSync10(join30(context2.runDir, "run.json"), JSON.stringify(context2.record, null, 2) + `
 `);
 }
 function writeArtifactsManifest(context2, artifacts) {
-  writeFileSync10(join29(context2.runDir, "artifacts.json"), JSON.stringify({ runId: context2.record.id, artifacts }, null, 2) + `
+  writeFileSync10(join30(context2.runDir, "artifacts.json"), JSON.stringify({ runId: context2.record.id, artifacts }, null, 2) + `
 `);
 }
 function collectRunArtifacts(context2) {
@@ -56320,7 +56434,7 @@ function collectRunArtifacts(context2) {
   return artifacts.sort((a, b) => a.path.localeCompare(b.path));
 }
 function readRunRecord(runDir) {
-  const path = join29(runDir, "run.json");
+  const path = join30(runDir, "run.json");
   if (!existsSync14(path))
     return null;
   try {
@@ -56331,8 +56445,8 @@ function readRunRecord(runDir) {
 }
 function walkFiles(dir) {
   const files = [];
-  for (const entry of readdirSync9(dir)) {
-    const full = join29(dir, entry);
+  for (const entry of readdirSync10(dir)) {
+    const full = join30(dir, entry);
     if (statSync9(full).isDirectory())
       files.push(...walkFiles(full));
     else
@@ -56344,7 +56458,7 @@ function createRunId(now) {
   return `run_${now.getTime().toString(36)}_${randomBytes(4).toString("hex")}`;
 }
 function toProjectRelative(targetDir, path) {
-  const rel = relative5(targetDir, path).split(/[\\/]/).join("/");
+  const rel = relative6(targetDir, path).split(/[\\/]/).join("/");
   return rel.startsWith(".") ? rel : `./${rel}`;
 }
 function mimeForPath(path) {
@@ -56589,7 +56703,7 @@ import { closeSync as closeSync16, fstatSync as fstatSync16, openSync as openSyn
 import { O_NOFOLLOW as O_NOFOLLOW3, O_NONBLOCK as O_NONBLOCK3, O_RDONLY as O_RDONLY3 } from "constants";
 import { createRequire as createRequire2 } from "module";
 import { hostname as osHostname2 } from "os";
-import { isAbsolute as isAbsolute17, join as join30 } from "path";
+import { isAbsolute as isAbsolute17, join as join31 } from "path";
 import { createRequire as createRequire22 } from "module";
 function envToken2(name) {
   return name.toUpperCase().replace(/-/g, "_");
@@ -56620,14 +56734,14 @@ function hasnaHomeDir2(env) {
   if (override)
     return override;
   const home = homeDir2(env);
-  return home ? join30(home, HASNA_HOME_DIR2) : null;
+  return home ? join31(home, HASNA_HOME_DIR2) : null;
 }
 function appConfigDir2(name, env) {
   const configRoot = absoluteOverride2(env, HASNA_CONFIG_HOME_ENV_KEY2);
   if (configRoot)
-    return join30(configRoot, name);
+    return join31(configRoot, name);
   const root = hasnaHomeDir2(env);
-  return root ? join30(root, name, CONFIG_SUBDIR2) : null;
+  return root ? join31(root, name, CONFIG_SUBDIR2) : null;
 }
 function credentialDiskSourceList2(name, env, profile = null) {
   if (!SAFE_APP_SLUG2.test(name))
@@ -56636,7 +56750,7 @@ function credentialDiskSourceList2(name, env, profile = null) {
   if (!directory2)
     return [];
   const file2 = profile ? `${CREDENTIALS_FILE2}-${profile}` : CREDENTIALS_FILE2;
-  return [{ path: join30(directory2, file2), tier: "disk" }];
+  return [{ path: join31(directory2, file2), tier: "disk" }];
 }
 function credentialDiskSources2(name, env) {
   return credentialDiskSourceList2(name, env, null).map((s) => s.path);
@@ -57750,7 +57864,7 @@ function createSecretsClientFromEnv(env = process.env, overrides = {}) {
   });
   return new SecretsClient({ ...clientOverrides, baseUrl, apiKey });
 }
-var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), CREDENTIAL_PROFILE_ENV_KEY2 = "HASNA_PROFILE", CredentialResolutionError2, CredentialFileUnsafeError2, HASNA_HOME_ENV_KEY2 = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY2 = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY2 = "HASNA_STATION", HASNA_HOME_DIR2 = ".hasna", CONFIG_SUBDIR2 = "config", CREDENTIALS_FILE2 = "credentials", KEYCHAIN_SECURITY_BIN2 = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX2 = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS2 = 44, KEYCHAIN_SPAWN_TIMEOUT_MS2 = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG2, SAFE_PROFILE2, ILLEGAL_IN_HEADER_VALUE2, VAULT_POINTER_SHAPE2, CREDENTIAL_SHAPED_KEY2, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE = "caller-supplied CredentialProvider", AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN2 = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN2, DNS_LABEL_PATTERN2, ClientTransportConfigurationError2, HasnaHttpError, DEFAULT_RETRY_STATUSES, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2, defaultSleep = (ms) => new Promise((resolve17) => setTimeout(resolve17, ms)), init_transport2, MAX_CREDENTIAL_FILE_BYTES22, INSPECT_CUSTOM22, CREDENTIAL_SEAL22, AMBIENT_ENVIRONMENT22, SECRETS_PACKAGE_SPECIFIER2, requireSecretsSdk22, IDEMPOTENT_METHODS22, AUTHORITY_OVERRIDE_HEADERS22, init_storage, PATHS_RESOLVER_APP_SLUG_RE2, SQLITE_SIDECAR_FILES, LEGACY_SERVICE_FILES, init_data_dir, SecretsTestIsolationError, TEST_ENTRYPOINT_RE, init_test_isolation, init_client, ApiError;
+var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), CREDENTIAL_PROFILE_ENV_KEY2 = "HASNA_PROFILE", CredentialResolutionError2, CredentialFileUnsafeError2, HASNA_HOME_ENV_KEY2 = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY2 = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY2 = "HASNA_STATION", HASNA_HOME_DIR2 = ".hasna", CONFIG_SUBDIR2 = "config", CREDENTIALS_FILE2 = "credentials", KEYCHAIN_SECURITY_BIN2 = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX2 = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS2 = 44, KEYCHAIN_SPAWN_TIMEOUT_MS2 = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG2, SAFE_PROFILE2, ILLEGAL_IN_HEADER_VALUE2, VAULT_POINTER_SHAPE2, CREDENTIAL_SHAPED_KEY2, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE = "caller-supplied CredentialProvider", AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN2 = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN2, DNS_LABEL_PATTERN2, ClientTransportConfigurationError2, HasnaHttpError, DEFAULT_RETRY_STATUSES, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2, defaultSleep = (ms) => new Promise((resolve18) => setTimeout(resolve18, ms)), init_transport2, MAX_CREDENTIAL_FILE_BYTES22, INSPECT_CUSTOM22, CREDENTIAL_SEAL22, AMBIENT_ENVIRONMENT22, SECRETS_PACKAGE_SPECIFIER2, requireSecretsSdk22, IDEMPOTENT_METHODS22, AUTHORITY_OVERRIDE_HEADERS22, init_storage, PATHS_RESOLVER_APP_SLUG_RE2, SQLITE_SIDECAR_FILES, LEGACY_SERVICE_FILES, init_data_dir, SecretsTestIsolationError, TEST_ENTRYPOINT_RE, init_test_isolation, init_client, ApiError;
 var init_sdk = __esm(() => {
   init_transport2 = __esm2(() => {
     CredentialResolutionError2 = class CredentialResolutionError3 extends Error {
@@ -57885,25 +57999,25 @@ var init_sdk = __esm(() => {
 });
 
 // src/lib/execution-secrets.ts
-import { constants as constants13, closeSync as closeSync17, fstatSync as fstatSync17, openSync as openSync17, readSync as readSync11, realpathSync as realpathSync7 } from "fs";
+import { constants as constants13, closeSync as closeSync17, fstatSync as fstatSync17, openSync as openSync17, readSync as readSync11, realpathSync as realpathSync8 } from "fs";
 import { hostname as stationHostname } from "os";
 function selectedSecretBindingsTemplate(scope, names, createClient = createSecretsClientFromEnv) {
   let secretsAuthority;
   try {
     secretsAuthority = createClient().baseUrl;
   } catch {
-    return refuse("LOCAL_SECRET_UNAVAILABLE", "Configure the Secrets CLI authority and authentication before preparing execution bindings.");
+    return refuse2("LOCAL_SECRET_UNAVAILABLE", "Configure the Secrets CLI authority and authentication before preparing execution bindings.");
   }
   const { authority, workspaceId, profileRevision, slug: slug2, version: version2, bundleDigest } = scope.selection;
   return {
     schema: "hasna.skills-secret-bindings.v1",
     selection: { authority, workspaceId, profileId: scope.profileId, profileRevision, slug: slug2, version: version2, bundleDigest },
-    consumer: { stationId: process.env.HASNA_STATION || stationHostname(), workspaceDirectory: realpathSync7(scope.cwd) },
+    consumer: { stationId: process.env.HASNA_STATION || stationHostname(), workspaceDirectory: realpathSync8(scope.cwd) },
     secretsAuthority,
     bindings: Object.fromEntries(names.map((name) => [name, ""]))
   };
 }
-function refuse(code2, message) {
+function refuse2(code2, message) {
   throw new SkillSelectionError(code2, message);
 }
 function record10(value) {
@@ -57912,48 +58026,48 @@ function record10(value) {
 function exactKeys2(value, keys) {
   return Object.keys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
 }
-function identifier2(value) {
+function identifier3(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 2048 && !/[\x00-\x20\x7f]/.test(value);
 }
 function declaredSecretNames(value) {
   if (value === undefined)
     return [];
   if (!Array.isArray(value) || value.length > 32 || value.some((name) => typeof name !== "string" || !/^[A-Z][A-Z0-9_]{0,127}$/.test(name)) || new Set(value).size !== value.length) {
-    return refuse("INVALID_SKILL_MANIFEST", "Runtime environment references must be unique uppercase identifiers (at most 32).");
+    return refuse2("INVALID_SKILL_MANIFEST", "Runtime environment references must be unique uppercase identifiers (at most 32).");
   }
   if (value.some((name) => /^(?:PATH|HOME|TMPDIR|TEMP|TMP|LANG|LC_ALL|TERM|SHELL|ENV|BASH_ENV|IFS|NODE_OPTIONS|NODE_PATH)$/.test(name) || /^(?:SKILLS_|BUN_|PYTHON|LD_|DYLD_)/.test(name))) {
-    return refuse("INVALID_SKILL_MANIFEST", "Runtime environment references cannot override execution controls.");
+    return refuse2("INVALID_SKILL_MANIFEST", "Runtime environment references cannot override execution controls.");
   }
   return value;
 }
 function validateSelectedSecretBindings(value, scope, names) {
   if (!record10(value) || !exactKeys2(value, ["schema", "selection", "consumer", "secretsAuthority", "bindings"]) || value.schema !== "hasna.skills-secret-bindings.v1" || !record10(value.selection) || !exactKeys2(value.selection, ["authority", "workspaceId", "profileId", "profileRevision", "slug", "version", "bundleDigest"]) || !record10(value.consumer) || !exactKeys2(value.consumer, ["stationId", "workspaceDirectory"]) || !record10(value.bindings)) {
-    return refuse("INVALID_SECRET_BINDINGS", "Secret bindings do not match the hasna.skills-secret-bindings.v1 contract.");
+    return refuse2("INVALID_SECRET_BINDINGS", "Secret bindings do not match the hasna.skills-secret-bindings.v1 contract.");
   }
   for (const [key, expected] of Object.entries({ authority: scope.selection.authority, workspaceId: scope.selection.workspaceId, profileId: scope.profileId, profileRevision: scope.selection.profileRevision, slug: scope.selection.slug, version: scope.selection.version, bundleDigest: scope.selection.bundleDigest })) {
     if (value.selection[key] !== expected)
-      return refuse("SECRET_BINDING_SCOPE_MISMATCH", "Secret bindings do not match the exact selected authority, workspace, profile, revision, version and digest.");
+      return refuse2("SECRET_BINDING_SCOPE_MISMATCH", "Secret bindings do not match the exact selected authority, workspace, profile, revision, version and digest.");
   }
   let workspaceDirectory;
   try {
-    workspaceDirectory = realpathSync7(scope.cwd);
+    workspaceDirectory = realpathSync8(scope.cwd);
   } catch {
-    return refuse("SECRET_BINDING_CONSUMER_MISMATCH", "The execution workspace cannot be resolved.");
+    return refuse2("SECRET_BINDING_CONSUMER_MISMATCH", "The execution workspace cannot be resolved.");
   }
   if (value.consumer.stationId !== (process.env.HASNA_STATION || stationHostname()) || value.consumer.workspaceDirectory !== workspaceDirectory) {
-    return refuse("SECRET_BINDING_CONSUMER_MISMATCH", "Secret bindings do not match this station and canonical workspace directory.");
+    return refuse2("SECRET_BINDING_CONSUMER_MISMATCH", "Secret bindings do not match this station and canonical workspace directory.");
   }
   try {
-    if (!identifier2(value.secretsAuthority))
+    if (!identifier3(value.secretsAuthority))
       throw new Error;
     const url2 = new URL(value.secretsAuthority);
     if (url2.protocol !== "https:" && !(url2.protocol === "http:" && ["127.0.0.1", "[::1]", "localhost"].includes(url2.hostname)) || url2.username || url2.password || url2.search || url2.hash || !url2.pathname.endsWith("/v1") || url2.href !== value.secretsAuthority)
       throw new Error;
   } catch {
-    return refuse("INVALID_SECRET_BINDINGS", "Secret bindings require a canonical HTTPS Secrets /v1 authority (loopback HTTP is allowed).");
+    return refuse2("INVALID_SECRET_BINDINGS", "Secret bindings require a canonical HTTPS Secrets /v1 authority (loopback HTTP is allowed).");
   }
-  if (!exactKeys2(value.bindings, names) || Object.values(value.bindings).some((key) => !identifier2(key) || !/^[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(key) || key.split("/").some((part) => !part || part === "." || part === ".."))) {
-    return refuse("INVALID_SECRET_BINDINGS", "Bind every declared environment name exactly once to a vault key; undeclared bindings and values are refused.");
+  if (!exactKeys2(value.bindings, names) || Object.values(value.bindings).some((key) => !identifier3(key) || !/^[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(key) || key.split("/").some((part) => !part || part === "." || part === ".."))) {
+    return refuse2("INVALID_SECRET_BINDINGS", "Bind every declared environment name exactly once to a vault key; undeclared bindings and values are refused.");
   }
   return structuredClone(value);
 }
@@ -57964,10 +58078,10 @@ async function resolveSelectedSecrets(bindings, createClient = createSecretsClie
   try {
     client = createClient();
   } catch {
-    return refuse("LOCAL_SECRET_UNAVAILABLE", "The configured Secrets client could not authenticate. No ambient credential fallback was attempted.");
+    return refuse2("LOCAL_SECRET_UNAVAILABLE", "The configured Secrets client could not authenticate. No ambient credential fallback was attempted.");
   }
   if (client.baseUrl !== bindings.secretsAuthority)
-    return refuse("SECRET_BINDING_AUTHORITY_MISMATCH", "The configured Secrets authority differs from the reviewed binding. No secret was requested.");
+    return refuse2("SECRET_BINDING_AUTHORITY_MISMATCH", "The configured Secrets authority differs from the reviewed binding. No secret was requested.");
   const env = {};
   const signal = AbortSignal.timeout(15000);
   try {
@@ -57979,7 +58093,7 @@ async function resolveSelectedSecrets(bindings, createClient = createSecretsClie
     }
     return env;
   } catch {
-    return refuse("LOCAL_SECRET_UNAVAILABLE", "A declared secret could not be resolved, was invalid, or has expired. The skill was not started; no fallback was attempted.");
+    return refuse2("LOCAL_SECRET_UNAVAILABLE", "A declared secret could not be resolved, was invalid, or has expired. The skill was not started; no fallback was attempted.");
   }
 }
 function redactExecutionSecrets(text3, env) {
@@ -58129,8 +58243,8 @@ __export(exports_selected_run, {
 });
 import { createHash as createHash20 } from "crypto";
 import { spawn } from "child_process";
-import { mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync11, realpathSync as realpathSync8 } from "fs";
-import { dirname as dirname19, join as join31, resolve as resolve17 } from "path";
+import { mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync11, realpathSync as realpathSync9 } from "fs";
+import { dirname as dirname20, join as join32, resolve as resolve18 } from "path";
 import { tmpdir, hostname as stationHostname2 } from "os";
 async function resolveSelectedRun(spec, profileId, options = {}) {
   const context2 = await resolveSelectionContext(profileId, options);
@@ -58210,7 +58324,7 @@ async function executeSelectedLocal(selected, options = {}) {
         throw new SkillSelectionError("INVALID_SECRET_BINDINGS", "Explicit environment values must be bounded strings without NUL bytes.");
       secretEnv[name] = value;
     }
-  const runDirectory = mkdtempSync3(join31(tmpdir(), "skills-execution-"));
+  const runDirectory = mkdtempSync3(join32(tmpdir(), "skills-execution-"));
   const paths = new SkillEntryPaths;
   for (const entry of entries) {
     paths.add(entry.path, 100, () => {
@@ -58218,12 +58332,12 @@ async function executeSelectedLocal(selected, options = {}) {
     }, () => {
       throw new SkillSelectionError("INVALID_BUNDLE_PATH", "The execution bundle path exceeds its limit.");
     });
-    const destination = join31(runDirectory, entry.path);
-    mkdirSync12(dirname19(destination), { recursive: true, mode: 448 });
+    const destination = join32(runDirectory, entry.path);
+    mkdirSync12(dirname20(destination), { recursive: true, mode: 448 });
     writeFileSync11(destination, entry.bytes, { flag: "wx", mode: entry.mode & 511 });
   }
   env.SKILLS_INPUT_JSON = input2;
-  env.SKILLS_WORKSPACE_DIR = resolve17(options.cwd ?? process.cwd());
+  env.SKILLS_WORKSPACE_DIR = resolve18(options.cwd ?? process.cwd());
   env.SKILLS_RUN_DIR = runDirectory;
   if (runtime.version) {
     const version2 = await subprocess([executable, ...runtimeName === "bun" ? ["--no-env-file"] : [], "--version"], runDirectory, env, "", Math.min(timeoutMs, 5000));
@@ -58236,7 +58350,7 @@ async function executeSelectedLocal(selected, options = {}) {
     const { authority: authority2, workspaceId, profileRevision, slug: slug2, version: version2, bundleDigest } = selection2;
     const request2 = {
       selection: { authority: authority2, workspaceId, profileId, profileRevision, slug: slug2, version: version2, bundleDigest },
-      consumer: { stationId: process.env.HASNA_STATION || stationHostname2(), workspaceDirectory: realpathSync8(options.cwd ?? process.cwd()) }
+      consumer: { stationId: process.env.HASNA_STATION || stationHostname2(), workspaceDirectory: realpathSync9(options.cwd ?? process.cwd()) }
     };
     const grant = await (options.resolveExecutionGrant ?? resolveExecutionGrant)(request2);
     if (!grant || !grantIdentifier(grant.policyRevision) || !grantIdentifier(grant.grantId))
@@ -58246,7 +58360,7 @@ async function executeSelectedLocal(selected, options = {}) {
   }
   if (bindings)
     secretEnv = await resolveSelectedSecrets(bindings, options.createSecretsClient);
-  const result = await subprocess([executable, ...runtimeName === "bun" ? ["--no-env-file"] : [], join31(runDirectory, declaredEntry), ...args], runDirectory, { ...env, ...secretEnv }, input2, timeoutMs);
+  const result = await subprocess([executable, ...runtimeName === "bun" ? ["--no-env-file"] : [], join32(runDirectory, declaredEntry), ...args], runDirectory, { ...env, ...secretEnv }, input2, timeoutMs);
   result.stdout = redactExecutionSecrets(result.stdout, secretEnv);
   result.stderr = redactExecutionSecrets(result.stderr, secretEnv);
   const receipt = {
@@ -58259,7 +58373,7 @@ async function executeSelectedLocal(selected, options = {}) {
     ...bindings ? { secretBinding: { schema: bindings.schema, selection: bindings.selection, consumer: bindings.consumer, secretsAuthority: bindings.secretsAuthority, bindings: bindings.bindings } } : {},
     ...result
   };
-  writeFileSync11(join31(runDirectory, ".execution-receipt.json"), JSON.stringify({ ...receipt, stdout: undefined, stderr: undefined }), { mode: 384 });
+  writeFileSync11(join32(runDirectory, ".execution-receipt.json"), JSON.stringify({ ...receipt, stdout: undefined, stderr: undefined }), { mode: 384 });
   return receipt;
 }
 async function subprocess(command, cwd, env, input2, timeoutMs) {
@@ -58448,8 +58562,8 @@ var init_blog_article = __esm(() => {
 });
 
 // src/mcp/operation-tools.ts
-import { existsSync as existsSync15, readdirSync as readdirSync10, statSync as statSync10 } from "fs";
-import { join as join32 } from "path";
+import { existsSync as existsSync15, readdirSync as readdirSync11, statSync as statSync10 } from "fs";
+import { join as join33 } from "path";
 function registerOperationTools(server) {
   server.registerTool("cloud_skill_eligibility", {
     title: "Cloud Skill Eligibility",
@@ -58925,8 +59039,8 @@ function registerOperationTools(server) {
       let skillCount = 0;
       if (exists) {
         try {
-          skillCount = readdirSync10(agentSkillsPath).filter((f) => {
-            const full = join32(agentSkillsPath, f);
+          skillCount = readdirSync11(agentSkillsPath).filter((f) => {
+            const full = join33(agentSkillsPath, f);
             return !f.startsWith(".") && statSync10(full).isDirectory();
           }).length;
         } catch {}
@@ -58994,14 +59108,14 @@ var init_operation_tools = __esm(() => {
 
 // src/lib/feedback.ts
 import { appendFileSync, existsSync as existsSync16, mkdirSync as mkdirSync13 } from "fs";
-import { dirname as dirname20, join as join33 } from "path";
+import { dirname as dirname21, join as join34 } from "path";
 import { Database } from "bun:sqlite";
 function getFeedbackDbPath() {
-  return join33(getDataDir(), "skills.db");
+  return join34(getDataDir(), "skills.db");
 }
 function getFeedbackDb() {
   const dbPath = getFeedbackDbPath();
-  const dir = dirname20(dbPath);
+  const dir = dirname21(dbPath);
   if (!existsSync16(dir))
     mkdirSync13(dir, { recursive: true });
   const db = new Database(dbPath);
@@ -59029,8 +59143,8 @@ function saveFeedback(input2) {
     throw new Error("Feedback message is required");
   const category = input2.category ?? "general";
   if (isApiMode()) {
-    const path = join33(getDataDir(), "feedback.jsonl");
-    const dir = dirname20(path);
+    const path = join34(getDataDir(), "feedback.jsonl");
+    const dir = dirname21(path);
     if (!existsSync16(dir))
       mkdirSync13(dir, { recursive: true });
     appendFileSync(path, JSON.stringify({ message, category, email: input2.email ?? null, agent: input2.agent ?? null, version: input2.version ?? null, createdAt: new Date().toISOString() }) + `
@@ -59194,9 +59308,9 @@ var init_resource_meta_tools = __esm(() => {
 
 // src/lib/scheduler.ts
 import { existsSync as existsSync17, readFileSync as readFileSync21, writeFileSync as writeFileSync12, mkdirSync as mkdirSync14 } from "fs";
-import { join as join34 } from "path";
+import { join as join35 } from "path";
 function getSchedulesPath(targetDir = process.cwd()) {
-  return join34(targetDir, ".skills", "schedules.json");
+  return join35(targetDir, ".skills", "schedules.json");
 }
 function loadSchedules(targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
@@ -59209,7 +59323,7 @@ function loadSchedules(targetDir = process.cwd()) {
 }
 function saveSchedules(data, targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
-  const dir = join34(targetDir, ".skills");
+  const dir = join35(targetDir, ".skills");
   if (!existsSync17(dir))
     mkdirSync14(dir, { recursive: true });
   writeFileSync12(path, JSON.stringify(data, null, 2));
@@ -59486,11 +59600,11 @@ import {
   existsSync as existsSync18,
   mkdirSync as mkdirSync15,
   readFileSync as readFileSync22,
-  readdirSync as readdirSync11,
+  readdirSync as readdirSync12,
   statSync as statSync11,
   writeFileSync as writeFileSync13
 } from "fs";
-import { dirname as dirname21, join as join35, normalize as normalize4, relative as relative6, sep as sep7 } from "path";
+import { dirname as dirname22, join as join36, normalize as normalize4, relative as relative7, sep as sep8 } from "path";
 function resolveSkillsNativeStorageConfig(env = process.env) {
   assertNoRetiredModeEnvVars(env, {
     app: SKILLS_ENV_NAMESPACE,
@@ -59531,7 +59645,7 @@ function getSkillsNativeStorageStatus(options = {}) {
     local: {
       dataDir: getDataDir(),
       projectStateDir: getProjectStateDir(targetDir),
-      feedbackDbPath: join35(getDataDir(), "skills.db")
+      feedbackDbPath: join36(getDataDir(), "skills.db")
     },
     remote: {
       databaseConfigured: Boolean(config2.databaseUrl),
@@ -59554,7 +59668,7 @@ function exportSkillsLocalSnapshot(targetDir = process.cwd(), options = {}) {
   if (existsSync18(projectStateDir)) {
     for (const filePath of walkFiles2(projectStateDir)) {
       const bytes = readFileSync22(filePath);
-      const relativePath = toPosix(relative6(targetDir, filePath));
+      const relativePath = toPosix(relative7(targetDir, filePath));
       files.push({
         path: relativePath,
         sizeBytes: bytes.byteLength,
@@ -59611,8 +59725,8 @@ function parsePositiveInteger(value) {
 }
 function walkFiles2(dir) {
   const files = [];
-  for (const entry of readdirSync11(dir)) {
-    const full = join35(dir, entry);
+  for (const entry of readdirSync12(dir)) {
+    const full = join36(dir, entry);
     const stats = statSync11(full);
     if (stats.isDirectory())
       files.push(...walkFiles2(full));
@@ -59850,20 +59964,20 @@ var init_private_publication_customer = __esm(() => {
 });
 
 // src/lib/private-publication-recovery.ts
-import { constants as constants14, closeSync as closeSync18, fsyncSync as fsyncSync5, fstatSync as fstatSync18, lstatSync as lstatSync20, mkdirSync as mkdirSync16, openSync as openSync18, readSync as readSync12, realpathSync as realpathSync9, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync14 } from "fs";
-import { dirname as dirname22, isAbsolute as isAbsolute18, join as join36, resolve as resolve18 } from "path";
+import { constants as constants14, closeSync as closeSync18, fsyncSync as fsyncSync5, fstatSync as fstatSync18, lstatSync as lstatSync21, mkdirSync as mkdirSync16, openSync as openSync18, readSync as readSync12, realpathSync as realpathSync10, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync14 } from "fs";
+import { dirname as dirname23, isAbsolute as isAbsolute18, join as join37, resolve as resolve19 } from "path";
 import { randomUUID as randomUUID3 } from "crypto";
 function safeDirectory(directory2) {
-  if (!isAbsolute18(directory2) || directory2 !== resolve18(directory2) || realpathSync9(directory2) !== directory2)
+  if (!isAbsolute18(directory2) || directory2 !== resolve19(directory2) || realpathSync10(directory2) !== directory2)
     return fail2();
-  for (let path = directory2;; path = dirname22(path)) {
-    const stat3 = lstatSync20(path);
+  for (let path = directory2;; path = dirname23(path)) {
+    const stat3 = lstatSync21(path);
     if (!stat3.isDirectory() || stat3.isSymbolicLink())
       return fail2();
-    if (path === dirname22(path))
+    if (path === dirname23(path))
       break;
   }
-  const own2 = lstatSync20(directory2);
+  const own2 = lstatSync21(directory2);
   if ((own2.mode & 63) !== 0 || process.getuid && own2.uid !== process.getuid())
     return fail2();
   return { dev: own2.dev, ino: own2.ino };
@@ -59874,7 +59988,7 @@ function unchangedDirectory(directory2, identity3) {
     return fail2();
 }
 function readOwned(directory2, name, max) {
-  const identity3 = safeDirectory(directory2), file2 = join36(directory2, name);
+  const identity3 = safeDirectory(directory2), file2 = join37(directory2, name);
   const fd = openSync18(file2, constants14.O_RDONLY | constants14.O_NOFOLLOW);
   try {
     const stat3 = fstatSync18(fd);
@@ -59898,7 +60012,7 @@ function readOwned(directory2, name, max) {
   }
 }
 function writeOwned(directory2, name, bytes) {
-  const fd = openSync18(join36(directory2, name), constants14.O_WRONLY | constants14.O_CREAT | constants14.O_EXCL | constants14.O_NOFOLLOW, 384);
+  const fd = openSync18(join37(directory2, name), constants14.O_WRONLY | constants14.O_CREAT | constants14.O_EXCL | constants14.O_NOFOLLOW, 384);
   try {
     writeFileSync14(fd, bytes);
     fsyncSync5(fd);
@@ -59911,7 +60025,7 @@ function save(directory2, value) {
   writeOwned(directory2, temporary, JSON.stringify(value) + `
 `);
   unchangedDirectory(directory2, identity3);
-  renameSync7(join36(directory2, temporary), join36(directory2, "receipt.json"));
+  renameSync7(join37(directory2, temporary), join37(directory2, "receipt.json"));
   const fd = openSync18(directory2, constants14.O_RDONLY | constants14.O_NOFOLLOW);
   try {
     fsyncSync5(fd);
@@ -59924,7 +60038,7 @@ function bind(client, receipt) {
     throw new PrivatePublicationError("PUBLICATION_IDENTITY_CHANGED", "The fresh session does not match the recovery directory's server, account and membership.");
 }
 async function locked(directory2, action) {
-  const identity3 = safeDirectory(directory2), file2 = join36(directory2, "operation.lock");
+  const identity3 = safeDirectory(directory2), file2 = join37(directory2, "operation.lock");
   let fd;
   try {
     fd = openSync18(file2, constants14.O_WRONLY | constants14.O_CREAT | constants14.O_EXCL | constants14.O_NOFOLLOW, 384);
@@ -59940,7 +60054,7 @@ async function locked(directory2, action) {
   } finally {
     closeSync18(fd);
     unchangedDirectory(directory2, identity3);
-    const now = lstatSync20(file2);
+    const now = lstatSync21(file2);
     if (now.dev !== lock.dev || now.ino !== lock.ino || !now.isFile() || now.isSymbolicLink())
       fail2();
     unlinkSync6(file2);
@@ -59992,11 +60106,11 @@ async function preparePrivatePublication(client, sourceDirectory, recoveryDirect
     phase: "prepared",
     intent: null
   };
-  if (!isAbsolute18(recoveryDirectory) || resolve18(recoveryDirectory) !== recoveryDirectory || realpathSync9(dirname22(recoveryDirectory)) !== dirname22(recoveryDirectory))
+  if (!isAbsolute18(recoveryDirectory) || resolve19(recoveryDirectory) !== recoveryDirectory || realpathSync10(dirname23(recoveryDirectory)) !== dirname23(recoveryDirectory))
     return fail2();
   mkdirSync16(recoveryDirectory, { mode: 448 });
   safeDirectory(recoveryDirectory);
-  const parent = openSync18(dirname22(recoveryDirectory), constants14.O_RDONLY | constants14.O_NOFOLLOW);
+  const parent = openSync18(dirname23(recoveryDirectory), constants14.O_RDONLY | constants14.O_NOFOLLOW);
   try {
     fsyncSync5(parent);
   } finally {
@@ -60808,7 +60922,7 @@ var RequestError, nonJoinedHeaders, validHeaderName, isHttpWhitespace = (code2)
     request2[bodyBufferKey] = buffered;
     return Promise.resolve(buffered);
   }
-  const promise3 = new Promise((resolve19, reject) => {
+  const promise3 = new Promise((resolve20, reject) => {
     const chunks = [];
     let settled = false;
     const finish = (callback) => {
@@ -60830,7 +60944,7 @@ var RequestError, nonJoinedHeaders, validHeaderName, isHttpWhitespace = (code2)
           reject(error61 ?? normalizeAbortError(request2, incoming));
         else {
           request2[bodyBufferKey] = recovered;
-          resolve19(recovered);
+          resolve20(recovered);
         }
       });
       return true;
@@ -60842,7 +60956,7 @@ var RequestError, nonJoinedHeaders, validHeaderName, isHttpWhitespace = (code2)
       finish(() => {
         const buffer = chunks.length === 1 ? chunks[0] : Buffer.concat(chunks);
         request2[bodyBufferKey] = buffer;
-        resolve19(buffer);
+        resolve20(buffer);
       });
     };
     const onError = (error61) => {
@@ -61116,7 +61230,7 @@ var RequestError, nonJoinedHeaders, validHeaderName, isHttpWhitespace = (code2)
         });
         if (!chunk) {
           if (i === 1) {
-            await new Promise((resolve19) => setTimeout(resolve19));
+            await new Promise((resolve20) => setTimeout(resolve20));
             maxReadCount = 3;
             continue;
           }
@@ -62346,9 +62460,9 @@ data:
       const initRequest = messages.find((m) => isInitializeRequest(m));
       const clientProtocolVersion = initRequest ? initRequest.params.protocolVersion : req.headers.get("mcp-protocol-version") ?? DEFAULT_NEGOTIATED_PROTOCOL_VERSION;
       if (this._enableJsonResponse) {
-        return new Promise((resolve19) => {
+        return new Promise((resolve20) => {
           this._streamMapping.set(streamId, {
-            resolveJson: resolve19,
+            resolveJson: resolve20,
             cleanup: () => {
               this._streamMapping.delete(streamId);
             }
@@ -62717,19 +62831,19 @@ async function connectMcpForNode() {
   return { server: server2, transport };
 }
 function readBody(req) {
-  return new Promise((resolve19, reject) => {
+  return new Promise((resolve20, reject) => {
     const chunks = [];
     req.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
     req.on("end", () => {
       const raw = Buffer.concat(chunks).toString("utf-8");
       if (!raw.trim()) {
-        resolve19(undefined);
+        resolve20(undefined);
         return;
       }
       try {
-        resolve19(JSON.parse(raw));
+        resolve20(JSON.parse(raw));
       } catch {
-        resolve19(undefined);
+        resolve20(undefined);
       }
     });
     req.on("error", reject);
@@ -62771,9 +62885,9 @@ async function startSkillsMcpHttpServer(options = {}) {
       }
     }
   });
-  await new Promise((resolve19, reject) => {
+  await new Promise((resolve20, reject) => {
     httpServer.once("error", reject);
-    httpServer.listen(port, hostname4, () => resolve19());
+    httpServer.listen(port, hostname4, () => resolve20());
   });
   const address = httpServer.address();
   const listenPort = typeof address === "object" && address ? address.port : port;