@hasna/skills 0.10.46 → 0.10.48

package/dist/index.js

@@ -3724,10 +3724,10 @@ var require_resolve_block_map = __commonJS((exports) => {
     let offset = bm.offset;
     let commentEnd = null;
     for (const collItem of bm.items) {
-      const { start, key, sep: sep2, value } = collItem;
+      const { start, key, sep: sep3, value } = collItem;
       const keyProps = resolveProps.resolveProps(start, {
         indicator: "explicit-key-ind",
-        next: key ?? sep2?.[0],
+        next: key ?? sep3?.[0],
         offset,
         onError,
         parentIndent: bm.indent,
@@ -3741,7 +3741,7 @@ var require_resolve_block_map = __commonJS((exports) => {
           else if ("indent" in key && key.indent !== bm.indent)
             onError(offset, "BAD_INDENT", startColMsg);
         }
-        if (!keyProps.anchor && !keyProps.tag && !sep2) {
+        if (!keyProps.anchor && !keyProps.tag && !sep3) {
           commentEnd = keyProps.end;
           if (keyProps.comment) {
             if (map.comment)
@@ -3766,7 +3766,7 @@ var require_resolve_block_map = __commonJS((exports) => {
       ctx.atKey = false;
       if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
         onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-      const valueProps = resolveProps.resolveProps(sep2 ?? [], {
+      const valueProps = resolveProps.resolveProps(sep3 ?? [], {
         indicator: "map-value-ind",
         next: value,
         offset: keyNode.range[2],
@@ -3782,7 +3782,7 @@ var require_resolve_block_map = __commonJS((exports) => {
           if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
             onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
         }
-        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep2, null, valueProps, onError);
+        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep3, null, valueProps, onError);
         if (ctx.schema.compat)
           utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError);
         offset = valueNode.range[2];
@@ -3868,7 +3868,7 @@ var require_resolve_end = __commonJS((exports) => {
     let comment = "";
     if (end) {
       let hasSpace = false;
-      let sep2 = "";
+      let sep3 = "";
       for (const token of end) {
         const { source, type } = token;
         switch (type) {
@@ -3882,13 +3882,13 @@ var require_resolve_end = __commonJS((exports) => {
             if (!comment)
               comment = cb;
             else
-              comment += sep2 + cb;
-            sep2 = "";
+              comment += sep3 + cb;
+            sep3 = "";
             break;
           }
           case "newline":
             if (comment)
-              sep2 += source;
+              sep3 += source;
             hasSpace = true;
             break;
           default:
@@ -3928,18 +3928,18 @@ var require_resolve_flow_collection = __commonJS((exports) => {
     let offset = fc.offset + fc.start.source.length;
     for (let i = 0;i < fc.items.length; ++i) {
       const collItem = fc.items[i];
-      const { start, key, sep: sep2, value } = collItem;
+      const { start, key, sep: sep3, value } = collItem;
       const props = resolveProps.resolveProps(start, {
         flow: fcName,
         indicator: "explicit-key-ind",
-        next: key ?? sep2?.[0],
+        next: key ?? sep3?.[0],
         offset,
         onError,
         parentIndent: fc.indent,
         startOnNewline: false
       });
       if (!props.found) {
-        if (!props.anchor && !props.tag && !sep2 && !value) {
+        if (!props.anchor && !props.tag && !sep3 && !value) {
           if (i === 0 && props.comma)
             onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
           else if (i < fc.items.length - 1)
@@ -3991,8 +3991,8 @@ var require_resolve_flow_collection = __commonJS((exports) => {
           }
         }
       }
-      if (!isMap && !sep2 && !props.found) {
-        const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep2, null, props, onError);
+      if (!isMap && !sep3 && !props.found) {
+        const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep3, null, props, onError);
         coll.items.push(valueNode);
         offset = valueNode.range[2];
         if (isBlock(value))
@@ -4004,7 +4004,7 @@ var require_resolve_flow_collection = __commonJS((exports) => {
         if (isBlock(key))
           onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
         ctx.atKey = false;
-        const valueProps = resolveProps.resolveProps(sep2 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep3 ?? [], {
           flow: fcName,
           indicator: "map-value-ind",
           next: value,
@@ -4015,8 +4015,8 @@ var require_resolve_flow_collection = __commonJS((exports) => {
         });
         if (valueProps.found) {
           if (!isMap && !props.found && ctx.options.strict) {
-            if (sep2)
-              for (const st of sep2) {
+            if (sep3)
+              for (const st of sep3) {
                 if (st === valueProps.found)
                   break;
                 if (st.type === "newline") {
@@ -4033,7 +4033,7 @@ var require_resolve_flow_collection = __commonJS((exports) => {
           else
             onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
         }
-        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep2, null, valueProps, onError) : null;
+        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep3, null, valueProps, onError) : null;
         if (valueNode) {
           if (isBlock(value))
             onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -4210,7 +4210,7 @@ var require_resolve_block_scalar = __commonJS((exports) => {
         chompStart = i + 1;
     }
     let value = "";
-    let sep2 = "";
+    let sep3 = "";
     let prevMoreIndented = false;
     for (let i = 0;i < contentStart; ++i)
       value += lines[i][0].slice(trimIndent) + `
@@ -4228,33 +4228,33 @@ var require_resolve_block_scalar = __commonJS((exports) => {
         indent = "";
       }
       if (type === Scalar.Scalar.BLOCK_LITERAL) {
-        value += sep2 + indent.slice(trimIndent) + content;
-        sep2 = `
+        value += sep3 + indent.slice(trimIndent) + content;
+        sep3 = `
 `;
       } else if (indent.length > trimIndent || content[0] === "\t") {
-        if (sep2 === " ")
-          sep2 = `
+        if (sep3 === " ")
+          sep3 = `
 `;
-        else if (!prevMoreIndented && sep2 === `
+        else if (!prevMoreIndented && sep3 === `
 `)
-          sep2 = `
+          sep3 = `
 
 `;
-        value += sep2 + indent.slice(trimIndent) + content;
-        sep2 = `
+        value += sep3 + indent.slice(trimIndent) + content;
+        sep3 = `
 `;
         prevMoreIndented = true;
       } else if (content === "") {
-        if (sep2 === `
+        if (sep3 === `
 `)
           value += `
 `;
         else
-          sep2 = `
+          sep3 = `
 `;
       } else {
-        value += sep2 + content;
-        sep2 = " ";
+        value += sep3 + content;
+        sep3 = " ";
         prevMoreIndented = false;
       }
     }
@@ -4435,27 +4435,27 @@ var require_resolve_flow_scalar = __commonJS((exports) => {
     if (!match)
       return source;
     let res = match[1];
-    let sep2 = " ";
+    let sep3 = " ";
     let pos = first.lastIndex;
     line.lastIndex = pos;
     while (match = line.exec(source)) {
       if (match[1] === "") {
-        if (sep2 === `
+        if (sep3 === `
 `)
-          res += sep2;
+          res += sep3;
         else
-          sep2 = `
+          sep3 = `
 `;
       } else {
-        res += sep2 + match[1];
-        sep2 = " ";
+        res += sep3 + match[1];
+        sep3 = " ";
       }
       pos = line.lastIndex;
     }
     const last = /[ \t]*(.*)/sy;
     last.lastIndex = pos;
     match = last.exec(source);
-    return res + sep2 + (match?.[1] ?? "");
+    return res + sep3 + (match?.[1] ?? "");
   }
   function doubleQuotedValue(source, onError) {
     let res = "";
@@ -5236,14 +5236,14 @@ var require_cst_stringify = __commonJS((exports) => {
       }
     }
   }
-  function stringifyItem({ start, key, sep: sep2, value }) {
+  function stringifyItem({ start, key, sep: sep3, value }) {
     let res = "";
     for (const st of start)
       res += st.source;
     if (key)
       res += stringifyToken(key);
-    if (sep2)
-      for (const st of sep2)
+    if (sep3)
+      for (const st of sep3)
         res += st.source;
     if (value)
       res += stringifyToken(value);
@@ -6391,18 +6391,18 @@ var require_parser = __commonJS((exports) => {
       if (this.type === "map-value-ind") {
         const prev = getPrevProps(this.peek(2));
         const start = getFirstKeyStartProps(prev);
-        let sep2;
+        let sep3;
         if (scalar.end) {
-          sep2 = scalar.end;
-          sep2.push(this.sourceToken);
+          sep3 = scalar.end;
+          sep3.push(this.sourceToken);
           delete scalar.end;
         } else
-          sep2 = [this.sourceToken];
+          sep3 = [this.sourceToken];
         const map = {
           type: "block-map",
           offset: scalar.offset,
           indent: scalar.indent,
-          items: [{ start, key: scalar, sep: sep2 }]
+          items: [{ start, key: scalar, sep: sep3 }]
         };
         this.onKeyLine = true;
         this.stack[this.stack.length - 1] = map;
@@ -6556,15 +6556,15 @@ var require_parser = __commonJS((exports) => {
               } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                 const start2 = getFirstKeyStartProps(it.start);
                 const key = it.key;
-                const sep2 = it.sep;
-                sep2.push(this.sourceToken);
+                const sep3 = it.sep;
+                sep3.push(this.sourceToken);
                 delete it.key;
                 delete it.sep;
                 this.stack.push({
                   type: "block-map",
                   offset: this.offset,
                   indent: this.indent,
-                  items: [{ start: start2, key, sep: sep2 }]
+                  items: [{ start: start2, key, sep: sep3 }]
                 });
               } else if (start.length > 0) {
                 it.sep = it.sep.concat(start, this.sourceToken);
@@ -6758,13 +6758,13 @@ var require_parser = __commonJS((exports) => {
           const prev = getPrevProps(parent);
           const start = getFirstKeyStartProps(prev);
           fixFlowSeqItems(fc);
-          const sep2 = fc.end.splice(1, fc.end.length);
-          sep2.push(this.sourceToken);
+          const sep3 = fc.end.splice(1, fc.end.length);
+          sep3.push(this.sourceToken);
           const map = {
             type: "block-map",
             offset: fc.offset,
             indent: fc.indent,
-            items: [{ start, key: fc, sep: sep2 }]
+            items: [{ start, key: fc, sep: sep3 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -6989,7 +6989,7 @@ var require_public_api = __commonJS((exports) => {
 
 // src/lib/registry.ts
 import { existsSync as existsSync15, readFileSync as readFileSync20, readdirSync as readdirSync12 } from "fs";
-import { join as join34 } from "path";
+import { join as join35 } from "path";
 
 // src/lib/config.ts
 import { existsSync as existsSync2, readFileSync, writeFileSync, mkdirSync } from "fs";
@@ -7262,7 +7262,7 @@ import {
   statSync as statSync11,
   writeFileSync as writeFileSync9
 } from "fs";
-import { basename as basename12, dirname as dirname21, isAbsolute as isAbsolute19, join as join33, normalize as normalize4, relative as relative7, resolve as resolve20, sep as sep9 } from "path";
+import { basename as basename12, dirname as dirname21, isAbsolute as isAbsolute19, join as join34, normalize as normalize4, relative as relative7, resolve as resolve20, sep as sep10 } from "path";
 
 // src/lib/registry-data/index.ts
 var SKILLS = [];
@@ -8922,7 +8922,7 @@ var NATIVE_SKILL_ROOTS = [
 // src/lib/authoring-path.ts
 import { lstatSync as lstatSync25, realpathSync as realpathSync11 } from "fs";
 import { homedir as homedir6 } from "os";
-import { basename as basename11, dirname as dirname20, join as join32, resolve as resolve19, sep as sep8 } from "path";
+import { basename as basename11, dirname as dirname20, join as join33, resolve as resolve19, sep as sep9 } from "path";
 
 // src/lib/agent-adapters.ts
 var INTEGRATION_AGENTS = ["claude", "codex", "gemini", "opencode", "cursor", "hermes", "sumi"];
@@ -9355,7 +9355,7 @@ function upgradeSumiSettingsWitness(previous, reviewedSettingsPath) {
 }
 
 // src/lib/agent-policy-limits.ts
-import { basename as basename3, isAbsolute as isAbsolute3, resolve as resolve3 } from "path";
+import { basename as basename3, isAbsolute as isAbsolute3, join as join7, resolve as resolve3, sep as sep2 } from "path";
 var AGENT_POLICY_LIMITS = Object.freeze({ bytes: 1024 * 1024, agents: 16, discoverySources: 2048, discoveryRawSourceBytes: 64 * 1024 * 1024, discoveryRawTotalBytes: 256 * 1024 * 1024, discoveryPathLinks: 40, discoveryPathSteps: 256, discoveryPathSourceMetadataBytes: 64 * 1024, discoveryPathTotalMetadataBytes: 8 * 1024 * 1024, discoveryRoots: 512, discoveryDirectories: 64, discoveryDirectoryEntries: 20000, discoveryDirectoryBytes: 8 * 1024 * 1024, builtinNames: 2048, rootAliases: 2, fields: 64, pathCharacters: 4096 });
 function object(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
@@ -9497,7 +9497,9 @@ function assertAgentPolicyCollections(policy) {
       text(source.path);
       requireBound(source.sha256 === null || typeof source.sha256 === "string" && /^[a-f0-9]{64}$/.test(source.sha256));
       if (source.hashMode !== undefined)
-        requireBound(["bytes", "path-bytes", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+        requireBound(["bytes", "path-bytes", "claude-plugin-manifest-v1", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+      if (source.hashMode === "claude-plugin-manifest-v1")
+        requireBound(agent === "claude" && value.agent === "claude" && ["automatic", "reviewed"].includes(value.method) && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute3(source.path) && resolve3(source.path) === source.path && source.path.endsWith(join7(sep2, ".claude-plugin", "plugin.json")) && source.managedPlugins === undefined);
       if (source.hashMode === "sumi-settings-v1")
         requireBound(agent === "sumi" && value.agent === "sumi" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute3(source.path) && resolve3(source.path) === source.path && basename3(source.path) === "sumi.json");
       if (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4"))
@@ -9536,9 +9538,9 @@ function assertAgentPolicyCollections(policy) {
 }
 
 // src/lib/agent-discovery.ts
-import { createHash as createHash22 } from "crypto";
+import { createHash as createHash23 } from "crypto";
 import { lstatSync as lstatSync24, readFileSync as readFileSync19, readdirSync as readdirSync10, realpathSync as realpathSync10 } from "fs";
-import { basename as basename10, dirname as dirname19, isAbsolute as isAbsolute18, join as join31, resolve as resolve18, sep as sep7 } from "path";
+import { basename as basename10, dirname as dirname19, isAbsolute as isAbsolute18, join as join32, resolve as resolve18, sep as sep8 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual7 } from "util";
 
 // node_modules/yaml/dist/index.js
@@ -9588,7 +9590,7 @@ var $visit = visit.visit;
 var $visitAsync = visit.visitAsync;
 
 // src/lib/agent-hermes.ts
-import { dirname as dirname4, isAbsolute as isAbsolute4, join as join7, resolve as resolve4 } from "path";
+import { dirname as dirname4, isAbsolute as isAbsolute4, join as join8, resolve as resolve4 } from "path";
 import { lstatSync as lstatSync4, readFileSync as readFileSync6, opendirSync } from "fs";
 var HERMES_OPT_OUT = ".no-bundled-skills";
 var EVENTS = ["pre_llm_call", "pre_tool_call"];
@@ -9662,7 +9664,7 @@ function assertHermesEnvironment(home) {
       throw new Error(`NATIVE_SKILL_DRIFT: Hermes ${variable} requires a dedicated discovery adapter; unset it before using this adapter`);
   }
   const selected = process.env.HERMES_HOME?.trim();
-  if (selected && (!isAbsolute4(selected) || resolve4(selected) !== join7(resolve4(home), ".hermes")))
+  if (selected && (!isAbsolute4(selected) || resolve4(selected) !== join8(resolve4(home), ".hermes")))
     throw new Error("NATIVE_SKILL_DRIFT: custom Hermes homes/profiles require their own reviewed bridge");
   if (process.env.HERMES_ENABLE_PROJECT_PLUGINS?.trim() && !["0", "false", "no", "off"].includes(process.env.HERMES_ENABLE_PROJECT_PLUGINS.trim().toLowerCase()))
     throw new Error("NATIVE_SKILL_DRIFT: Hermes project plugins require a dedicated discovery review");
@@ -9683,11 +9685,11 @@ function read(path) {
 }
 function assertHermesProtection(home, config, command, profile, supervisor) {
   assertHermesEnvironment(home);
-  if (read(join7(home, ".hermes", HERMES_OPT_OUT)) === null)
+  if (read(join8(home, ".hermes", HERMES_OPT_OUT)) === null)
     throw new Error("NATIVE_SKILL_DRIFT: Hermes bundled skill reseeding is not disabled; run skills hook install");
   if (!supervisor || !isAbsolute4(supervisor.path) || supervisor.runtime !== process.execPath || read(supervisor.path) !== renderHermesSupervisor(command, profile))
     throw new Error("NATIVE_SKILL_DRIFT: Hermes owned supervisor changed; run skills hook install");
-  const raw = read(join7(home, ".hermes/shell-hooks-allowlist.json"));
+  const raw = read(join8(home, ".hermes/shell-hooks-allowlist.json"));
   let trust;
   try {
     trust = raw === null ? undefined : JSON.parse(raw);
@@ -9730,15 +9732,15 @@ function assertNoHermesLegacyShadow(root) {
         throw new Error("NATIVE_SKILL_DRIFT: unsupported Hermes legacy discovery input");
       return;
     }
-    if (lstatSync4(join7(path, "skills-cli.md"), { throwIfNoEntry: false }))
+    if (lstatSync4(join8(path, "skills-cli.md"), { throwIfNoEntry: false }))
       throw new Error("NATIVE_SKILL_DRIFT: legacy Hermes skills-cli.md can shadow the owned bridge; preserve and retire it before continuing");
-    const hasDescriptor = Boolean(lstatSync4(join7(path, "SKILL.md"), { throwIfNoEntry: false }));
+    const hasDescriptor = Boolean(lstatSync4(join8(path, "SKILL.md"), { throwIfNoEntry: false }));
     const directory = opendirSync(path);
     try {
       for (let child = directory.readSync();child; child = directory.readSync()) {
         if (hasDescriptor && ["references", "templates", "assets", "scripts"].includes(child.name))
           continue;
-        scan(join7(path, child.name), depth + 1);
+        scan(join8(path, child.name), depth + 1);
       }
     } finally {
       directory.closeSync();
@@ -9797,7 +9799,7 @@ if (failed) process.exitCode = 2;
 // src/lib/agent-discovery-directories.ts
 import { createHash as createHash4 } from "crypto";
 import { lstatSync as lstatSync5, opendirSync as opendirSync2 } from "fs";
-import { dirname as dirname5, isAbsolute as isAbsolute5, join as join8, resolve as resolve5 } from "path";
+import { dirname as dirname5, isAbsolute as isAbsolute5, join as join9, resolve as resolve5 } from "path";
 function need2(value, message) {
   if (!value)
     throw new Error(message);
@@ -9835,7 +9837,7 @@ function capture(path, budget2, excludedRoots, omittedRoots = [], rows) {
     }
     need2(new Set(names).size === names.length, "Ambiguous native discovery directory names");
     for (const name of names.sort()) {
-      const child = join8(current, name), childRelative = relative2 ? `${relative2}/${name}` : name;
+      const child = join9(current, name), childRelative = relative2 ? `${relative2}/${name}` : name;
       if (omittedRoots.includes(child))
         continue;
       need2(child.length <= AGENT_POLICY_LIMITS.pathCharacters, "Native discovery directory path limit exceeded");
@@ -9883,7 +9885,7 @@ function verifyDiscoveryDirectoryProjection(directories, omittedRoots) {
       need2(Array.isArray(value) && value.length === 2 && typeof value[0] === "string" && value[0] && !isAbsolute5(value[0]) && !value[0].split("/").some((part) => !part || part === "." || part === "..") && ["file", "directory"].includes(value[1]) && row === JSON.stringify(value) + `
 `, "Invalid reviewed directory member");
       hash.update(row);
-      const path = join8(directory.path, value[0]);
+      const path = join9(directory.path, value[0]);
       if (!omittedRoots.some((root) => path === root || path.startsWith(root + "/")))
         kept.push(row);
     }
@@ -9981,7 +9983,7 @@ function hashRawDiscoveryFile(path, budget2, changes) {
 // src/lib/agent-discovery-path-bytes.ts
 import { createHash as createHash6 } from "crypto";
 import { lstatSync as lstatSync7, readlinkSync } from "fs";
-import { dirname as dirname7, isAbsolute as isAbsolute7, join as join9, parse as parse2, resolve as resolve7, sep as sep2 } from "path";
+import { dirname as dirname7, isAbsolute as isAbsolute7, join as join10, parse as parse2, resolve as resolve7, sep as sep3 } from "path";
 function identity2(stat, mutable = false) {
   return {
     dev: String(stat.dev),
@@ -9999,7 +10001,7 @@ function canonical2(path) {
 function trace(path) {
   canonical2(path);
   const rows = [], paths = [];
-  let metadataBytes = 0, steps = 0, links = 0, cursor = parse2(path).root, pending = path.slice(cursor.length).split(sep2);
+  let metadataBytes = 0, steps = 0, links = 0, cursor = parse2(path).root, pending = path.slice(cursor.length).split(sep3);
   function record2(path2, row) {
     const value = { path: path2, ...row };
     metadataBytes += Buffer.byteLength(JSON.stringify(value));
@@ -10025,7 +10027,7 @@ function trace(path) {
       cursor = dirname7(cursor);
       continue;
     }
-    const candidate = join9(cursor, component);
+    const candidate = join10(cursor, component);
     if (candidate.length > AGENT_POLICY_LIMITS.pathCharacters)
       throw new Error("Discovery resolved path length limit exceeded");
     const stat = lstatSync7(candidate, { bigint: true, throwIfNoEntry: false });
@@ -10047,7 +10049,7 @@ function trace(path) {
         root();
       }
       const remainder = isAbsolute7(target) ? target.slice(parse2(target).root.length) : target;
-      pending = [...remainder.split(sep2), ...pending];
+      pending = [...remainder.split(sep3), ...pending];
       if (pending.length + steps > AGENT_POLICY_LIMITS.discoveryPathSteps)
         throw new Error("Discovery path step limit exceeded");
       continue;
@@ -10071,7 +10073,7 @@ function hashDiscoveryPathFile(path, budget2, changes) {
   let createsMissingPath = false;
   if (before.missing !== null && changes) {
     for (const target of changes.keys()) {
-      if (target === before.missing || target.startsWith(before.missing + sep2)) {
+      if (target === before.missing || target.startsWith(before.missing + sep3)) {
         createsMissingPath = true;
         break;
       }
@@ -10092,26 +10094,161 @@ function hashDiscoveryPathFile(path, budget2, changes) {
   return createHash6("sha256").update(JSON.stringify({ version: 1, path, rows: before.rows, content })).digest("hex");
 }
 
+// src/lib/claude-plugin-manifest-witness.ts
+import { createHash as createHash7 } from "crypto";
+var CLAUDE_PLUGIN_MANIFEST_LIMITS = Object.freeze({ bytes: 1024 * 1024, depth: 32, nodes: 65536, stringCharacters: 16384 });
+function requireValue(value, reason) {
+  if (!value)
+    throw new Error("Claude plugin manifest " + reason);
+}
+function parse3(text2) {
+  requireValue(Buffer.byteLength(text2, "utf8") <= CLAUDE_PLUGIN_MANIFEST_LIMITS.bytes, "exceeds its byte limit");
+  let at = 0, nodes = 0;
+  const numberPattern = /-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/y;
+  const space = () => {
+    while (at < text2.length && /[\x20\t\r\n]/.test(text2[at]))
+      at++;
+  };
+  function string() {
+    requireValue(text2[at] === '"', "contains invalid JSON");
+    const start = at++;
+    while (at < text2.length) {
+      const character = text2[at++];
+      if (character === '"') {
+        let value2;
+        try {
+          value2 = JSON.parse(text2.slice(start, at));
+        } catch {
+          throw new Error("Claude plugin manifest contains invalid JSON string");
+        }
+        requireValue(value2.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters, "exceeds its string limit");
+        return value2;
+      }
+      if (character === "\\")
+        at++;
+    }
+    throw new Error("Claude plugin manifest contains an unterminated JSON string");
+  }
+  function value(depth) {
+    requireValue(depth <= CLAUDE_PLUGIN_MANIFEST_LIMITS.depth && ++nodes <= CLAUDE_PLUGIN_MANIFEST_LIMITS.nodes, "exceeds its nesting or node limit");
+    space();
+    const character = text2[at];
+    if (character === '"')
+      return { kind: "string", value: string() };
+    if (character === "{" || character === "[") {
+      at++;
+      space();
+      const object3 = character === "{", end = object3 ? "}" : "]", entries = [], items = [], keys = new Set;
+      if (text2[at] !== end)
+        while (true) {
+          if (object3) {
+            space();
+            const key = string();
+            requireValue(!keys.has(key), "contains a duplicate JSON key");
+            keys.add(key);
+            space();
+            requireValue(text2[at++] === ":", "contains invalid JSON");
+            entries.push([key, value(depth + 1)]);
+          } else
+            items.push(value(depth + 1));
+          space();
+          if (text2[at] === end)
+            break;
+          requireValue(text2[at++] === ",", "contains invalid JSON");
+        }
+      at++;
+      return object3 ? { kind: "object", entries } : { kind: "array", items };
+    }
+    for (const literal of ["true", "false", "null"])
+      if (text2.startsWith(literal, at)) {
+        at += literal.length;
+        return { kind: "literal", value: literal };
+      }
+    numberPattern.lastIndex = at;
+    const number = numberPattern.exec(text2);
+    requireValue(number, "contains invalid JSON");
+    at += number[0].length;
+    return { kind: "number", value: number[0] };
+  }
+  const root = value(0);
+  space();
+  requireValue(at === text2.length && root.kind === "object", "requires a JSON object without trailing content");
+  return root;
+}
+function canonical3(value) {
+  if (value.kind === "string")
+    return JSON.stringify(value.value);
+  if (value.kind === "number")
+    return value.value;
+  if (value.kind === "literal")
+    return value.value;
+  if (value.kind === "array")
+    return "[" + value.items.map(canonical3).join(",") + "]";
+  return "{" + value.entries.map(([key, item]) => JSON.stringify(key) + ":" + canonical3(item)).join(",") + "}";
+}
+var DESCRIPTIVE_FIELDS = new Set(["description", "version", "author", "homepage", "repository", "license", "keywords"]);
+function validateText(value, field) {
+  requireValue(value?.kind === "string" && value.value.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters, "has an invalid " + field + " field");
+}
+function validateDescriptiveFields(manifest) {
+  const values = new Map(manifest.entries);
+  for (const field of ["description", "version", "homepage", "license"]) {
+    const value = values.get(field);
+    if (value !== undefined)
+      validateText(value, field);
+  }
+  const author = values.get("author");
+  if (author !== undefined) {
+    if (author.kind === "string")
+      validateText(author, "author");
+    else {
+      requireValue(author.kind === "object" && author.entries.every(([key, value]) => ["name", "email", "url"].includes(key) && value.kind === "string" && value.value.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters), "has an invalid author field");
+    }
+  }
+  const repository = values.get("repository");
+  if (repository !== undefined) {
+    if (repository.kind === "string")
+      validateText(repository, "repository");
+    else
+      requireValue(repository.kind === "object" && repository.entries.every(([key, value]) => ["type", "url", "directory"].includes(key) && value.kind === "string" && value.value.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters), "has an invalid repository field");
+  }
+  const keywords = values.get("keywords");
+  if (keywords !== undefined)
+    requireValue(keywords.kind === "array" && keywords.items.every((value) => value.kind === "string" && value.value.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters), "has an invalid keywords field");
+}
+function hashClaudePluginManifest(text2) {
+  const manifest = parse3(text2);
+  validateDescriptiveFields(manifest);
+  const discovery = { kind: "object", entries: manifest.entries.filter(([key]) => !DESCRIPTIVE_FIELDS.has(key)) };
+  return createHash7("sha256").update(canonical3(discovery)).digest("hex");
+}
+function projectReviewedClaudePluginManifest(text2, reviewedSha256) {
+  if (!/^[a-f0-9]{64}$/.test(reviewedSha256) || createHash7("sha256").update(text2).digest("hex") !== reviewedSha256) {
+    throw new Error("Reviewed Claude plugin manifest changed before semantic projection");
+  }
+  return hashClaudePluginManifest(text2);
+}
+
 // src/lib/plugin-discovery.ts
 import { closeSync as closeSync12, constants as constants12, fstatSync as fstatSync12, lstatSync as lstatSync22, openSync as openSync12, opendirSync as opendirSync5, readSync as readSync10 } from "fs";
-import { basename as basename8, dirname as dirname17, isAbsolute as isAbsolute16, join as join30, resolve as resolve16 } from "path";
+import { basename as basename8, dirname as dirname17, isAbsolute as isAbsolute16, join as join31, resolve as resolve16 } from "path";
 
 // src/lib/plugin-admission.ts
 import { homedir as homedir5 } from "os";
-import { isAbsolute as isAbsolute15, join as join29, resolve as resolve15 } from "path";
+import { isAbsolute as isAbsolute15, join as join30, resolve as resolve15 } from "path";
 
 // src/lib/selection-cache.ts
-import { createHash as createHash8, randomUUID } from "crypto";
+import { createHash as createHash9, randomUUID } from "crypto";
 import { spawnSync } from "child_process";
 import { closeSync as closeSync3, constants as constants3, fstatSync as fstatSync3, fsyncSync, linkSync, lstatSync as lstatSync8, mkdirSync as mkdirSync3, openSync as openSync3, readFileSync as readFileSync8, readlinkSync as readlinkSync2, readSync as readSync3, renameSync, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
 import { hostname } from "os";
-import { dirname as dirname8, join as join11, parse as parse3, resolve as resolve8 } from "path";
+import { dirname as dirname8, join as join12, parse as parse4, resolve as resolve8 } from "path";
 import { isDeepStrictEqual } from "util";
 
 // src/lib/skill-bundle.ts
-import { createHash as createHash7 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 import { readFileSync as readFileSync7, readdirSync as readdirSync4, statSync as statSync5 } from "fs";
-import { join as join10, relative as relative2 } from "path";
+import { join as join11, relative as relative2 } from "path";
 import { createGunzip } from "zlib";
 var BLOCK = 512;
 var ANY_SEGMENT_EXCLUDES = new Set([
@@ -10264,7 +10401,7 @@ function ownBytes(view) {
   return out;
 }
 function sha256Hex(bytes) {
-  return createHash7("sha256").update(bytes).digest("hex");
+  return createHash8("sha256").update(bytes).digest("hex");
 }
 function collectSkillBundleEntries(dir) {
   const entries = [];
@@ -10273,7 +10410,7 @@ function collectSkillBundleEntries(dir) {
 }
 function walk(root, current, out) {
   for (const entry of readdirSync4(current, { withFileTypes: true })) {
-    const absolute = join10(current, entry.name);
+    const absolute = join11(current, entry.name);
     const rel = relative2(root, absolute).split("\\").join("/");
     const isRootLevel = !rel.includes("/");
     if (ANY_SEGMENT_EXCLUDES.has(entry.name.toLowerCase()))
@@ -10748,17 +10885,17 @@ class SkillSelectionError extends Error {
 var MAX_CACHED_PROFILE_AGE_MS = 24 * 60 * 60 * 1000;
 var SELECTION_LOCK_FILE = "selection.lock.json";
 function selectionCacheRoot(options = {}) {
-  return resolve8(options.cacheDir ?? join11(getDataDirReadOnly(), "selection-cache"));
+  return resolve8(options.cacheDir ?? join12(getDataDirReadOnly(), "selection-cache"));
 }
 function selectionKey(selection) {
   validateSelection(selection);
   return hash([selection.authority, selection.workspaceId, selection.slug, selection.version, selection.bundleDigest]);
 }
 function hash(value) {
-  return createHash8("sha256").update(JSON.stringify(value)).digest("hex");
+  return createHash9("sha256").update(JSON.stringify(value)).digest("hex");
 }
 function validateSelection(selection) {
-  if (!selection || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(selection.slug) || !isValidSkillVersion(selection.version) || !/^sha256:[a-f0-9]{64}$/.test(selection.bundleDigest) || typeof selection.workspaceId !== "string" || !selection.workspaceId.trim() || typeof selection.profileRevision !== "string" || !selection.profileRevision.trim()) {
+  if (!selection || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(selection.slug) || !isValidSkillVersion(selection.version) || !/^sha256:[a-f0-9]{64}$/.test(selection.bundleDigest) || typeof selection.workspaceId !== "string" || !selection.workspaceId.trim() || selection.authorizationEpoch !== undefined && (typeof selection.authorizationEpoch !== "string" || !/^[a-f0-9]{32}$/.test(selection.authorizationEpoch)) || typeof selection.profileRevision !== "string" || !selection.profileRevision.trim()) {
     throw new SkillSelectionError("INVALID_SELECTION", "A skill selection must carry an exact version, digest, workspace and profile revision.");
   }
   const aliasError = selectionAliasError([selection]);
@@ -10792,15 +10929,15 @@ function validateResolvedProfile(profile, authority) {
 }
 function selectionBundlePath(selection, options = {}) {
   validateSelection(selection);
-  return join11(selectionCacheRoot(options), "objects", hash(selection.authority), hash(selection.workspaceId), `${selection.bundleDigest.slice(7)}.tar.gz`);
+  return join12(selectionCacheRoot(options), "objects", hash(selection.authority), hash(selection.workspaceId), `${selection.bundleDigest.slice(7)}.tar.gz`);
 }
 function assertRegularPath(path, createParents = false) {
   const absolute = resolve8(path);
-  const root = parse3(absolute).root;
+  const root = parse4(absolute).root;
   let cursor = root;
   const segments = absolute.slice(root.length).split("/");
   for (let index = 0;index < segments.length; index++) {
-    cursor = join11(cursor, segments[index]);
+    cursor = join12(cursor, segments[index]);
     try {
       const stat = lstatSync8(cursor);
       if (stat.isSymbolicLink() || index < segments.length - 1 && !stat.isDirectory()) {
@@ -10852,7 +10989,7 @@ function writeSelectionJson(path, value) {
 }
 function atomicWrite(path, bytes, mode, durable = false) {
   assertRegularPath(path, true);
-  const temporary = join11(dirname8(path), `.selection-${randomUUID()}.tmp`);
+  const temporary = join12(dirname8(path), `.selection-${randomUUID()}.tmp`);
   try {
     const fd = openSync3(temporary, constants3.O_WRONLY | constants3.O_CREAT | constants3.O_EXCL | constants3.O_NOFOLLOW, mode);
     try {
@@ -10884,17 +11021,21 @@ function readSelectionJson(path) {
     throw new SkillSelectionError("INVALID_RECEIPT", "The Skills selection receipt is unreadable; sync the profile again.");
   }
 }
-async function verifiedEntries(selection, bytes) {
+async function verifiedEntries(selection, bytes, signal, deadline) {
   if (`sha256:${sha256Hex(bytes)}` !== selection.bundleDigest)
     throw new SkillSelectionError("BUNDLE_DIGEST_MISMATCH", "The skill bundle does not match its selected digest.");
-  const bundle = await inspectSkillBundle(bytes);
+  const remaining = deadline === undefined ? undefined : Math.floor(deadline - performance.now());
+  signal?.throwIfAborted();
+  if (remaining !== undefined && remaining <= 0)
+    throw new SkillSelectionError("SKILLS_API_UNAVAILABLE", "Skills session authorization deadline exceeded.");
+  const bundle = await inspectSkillBundle(bytes, { signal, ...remaining === undefined ? {} : { limits: { timeoutMs: remaining } } });
   return bundle.entries;
 }
 async function readCachedSelection(selection, options = {}) {
   const bytes = readRegularFile(selectionBundlePath(selection, options), SKILL_BUNDLE_INSPECTION_LIMITS.compressedBytes);
   return bytes ? verifiedEntries(selection, bytes) : null;
 }
-async function cacheSelectionBundle(selection, response, options = {}) {
+async function verifySelectionBundleResponse(selection, response, signal, deadline) {
   validateSelection(selection);
   if (!response?.ok)
     throw new SkillSelectionError("BUNDLE_UNAVAILABLE", `The selected skill bundle is unavailable${response ? ` (HTTP ${response.status})` : ""}.`);
@@ -10904,15 +11045,27 @@ async function cacheSelectionBundle(selection, response, options = {}) {
     await response.body?.cancel();
     throw new SkillSelectionError("BUNDLE_IDENTITY_MISMATCH", "The returned bundle does not match the selected version and digest.");
   }
+  const epoch = response.headers.get("X-Skill-Authorization-Epoch");
+  if (selection.authorizationEpoch !== undefined && epoch !== selection.authorizationEpoch) {
+    response.body?.cancel().catch(() => {});
+    throw new SkillSelectionError("SESSION_RECONCILIATION_REQUIRED", "The selected bundle lifecycle authorization changed or is unavailable.");
+  }
   const maximum = SKILL_BUNDLE_INSPECTION_LIMITS.compressedBytes;
   const reader = response.body?.getReader();
   if (!reader)
     throw new SkillSelectionError("BUNDLE_UNAVAILABLE", "The selected bundle response has no body.");
+  signal?.throwIfAborted();
+  const abort = () => {
+    reader.cancel().catch(() => {});
+  };
+  signal?.addEventListener("abort", abort, { once: true });
   const chunks = [];
   let length = 0;
   try {
     while (true) {
+      signal?.throwIfAborted();
       const next = await reader.read();
+      signal?.throwIfAborted();
       if (next.done)
         break;
       length += next.value.byteLength;
@@ -10921,9 +11074,10 @@ async function cacheSelectionBundle(selection, response, options = {}) {
       chunks.push(next.value);
     }
   } catch (error) {
-    await reader.cancel().catch(() => {});
+    reader.cancel().catch(() => {});
     throw error;
   } finally {
+    signal?.removeEventListener("abort", abort);
     reader.releaseLock();
   }
   const bytes = new Uint8Array(length);
@@ -10932,7 +11086,12 @@ async function cacheSelectionBundle(selection, response, options = {}) {
     bytes.set(chunk, offset);
     offset += chunk.byteLength;
   }
-  const entries = await verifiedEntries(selection, bytes);
+  const entries = await verifiedEntries(selection, bytes, signal, deadline);
+  return { bytes, entries };
+}
+async function cacheSelectionBundle(selection, response, options = {}) {
+  const { bytes, entries } = await verifySelectionBundleResponse(selection, response);
+  const maximum = SKILL_BUNDLE_INSPECTION_LIMITS.compressedBytes;
   const path = selectionBundlePath(selection, options);
   const existing = readRegularFile(path, maximum);
   if (existing)
@@ -10942,7 +11101,7 @@ async function cacheSelectionBundle(selection, response, options = {}) {
   return entries;
 }
 function profilePath(profileId, options) {
-  return join11(selectionCacheRoot(options), "profiles", `${hash(profileId)}.json`);
+  return join12(selectionCacheRoot(options), "profiles", `${hash(profileId)}.json`);
 }
 function activateSelectionProfile(profile, options = {}) {
   validateResolvedProfile(profile);
@@ -10974,7 +11133,7 @@ function assertFreshCachedProfile(receipt, options = {}) {
   }
 }
 function projectSelectionLockPath(projectDir) {
-  return join11(resolve8(projectDir), ".skills", SELECTION_LOCK_FILE);
+  return join12(resolve8(projectDir), ".skills", SELECTION_LOCK_FILE);
 }
 function readProjectSelection(projectDir) {
   const receipt = readSelectionJson(projectSelectionLockPath(projectDir));
@@ -10985,7 +11144,7 @@ function readProjectSelection(projectDir) {
 function sessionReceiptPath(sessionId, options = {}) {
   if (!sessionId.trim() || sessionId.length > MAX_SKILL_SESSION_ID_CHARS)
     throw new SkillSelectionError("INVALID_SESSION", `A Skills session id must contain 1\u2013${MAX_SKILL_SESSION_ID_CHARS} characters.`);
-  return join11(selectionCacheRoot(options), "sessions", `${hash(sessionId)}.json`);
+  return join12(selectionCacheRoot(options), "sessions", `${hash(sessionId)}.json`);
 }
 function skillSessionGeneration(receipt) {
   return receipt.generation ?? 0;
@@ -11191,9 +11350,9 @@ function archiveSessionLock(lock, receipt, explicitLocalHost) {
     const currentReceipt = readSkillSessionSnapshotIfExists(lock.marker.sessionId, cacheOptions);
     if (currentReceipt?.sha256 !== receipt?.sha256 || currentReceipt?.generation !== receipt?.generation)
       return null;
-    const directory = join11(dirname8(dirname8(lock.path)), "session-lock-recoveries", randomUUID());
-    const archivePath = join11(directory, "original.write-lock");
-    const recordPath = join11(directory, "recovery.json");
+    const directory = join12(dirname8(dirname8(lock.path)), "session-lock-recoveries", randomUUID());
+    const archivePath = join12(directory, "original.write-lock");
+    const recordPath = join12(directory, "recovery.json");
     assertRegularPath(archivePath, true);
     archiveBytes(recordPath, Buffer.from(`${JSON.stringify({
       schemaVersion: 1,
@@ -11218,7 +11377,7 @@ function archiveSessionLock(lock, receipt, explicitLocalHost) {
       moved = true;
       const archivedPaths = [archivePath];
       if (finalLock.stagingPath) {
-        const publicationPath = join11(directory, "publication.write-lock");
+        const publicationPath = join12(directory, "publication.write-lock");
         renameSync(finalLock.stagingPath, publicationPath);
         archivedPaths.push(publicationPath);
       }
@@ -11384,8 +11543,8 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
     if (before.receipt.profile.authority !== replacement.profile.authority || before.receipt.profile.workspaceId !== replacement.profile.workspaceId) {
       throw new SkillSelectionError("PROFILE_IDENTITY_MISMATCH", "A session reconciliation cannot change its Skills authority or workspace.");
     }
-    const directory = join11(selectionCacheRoot(options), "session-reconciliations", randomUUID());
-    const archivePath = join11(directory, "original.json"), replacementPath = join11(directory, "replacement.json"), receiptPath = join11(directory, "receipt.json");
+    const directory = join12(selectionCacheRoot(options), "session-reconciliations", randomUUID());
+    const archivePath = join12(directory, "original.json"), replacementPath = join12(directory, "replacement.json"), receiptPath = join12(directory, "receipt.json");
     const afterSha256 = sha256Hex(bytes);
     archiveBytes(archivePath, before.bytes);
     archiveBytes(replacementPath, bytes);
@@ -11413,7 +11572,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.46",
+  version: "0.10.48",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -11555,7 +11714,7 @@ import { createRequire } from "module";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { closeSync as closeSync4, fstatSync as fstatSync4, lstatSync as lstatSync9, openSync as openSync4, readFileSync as readFileSync9, realpathSync as realpathSync2, statSync as statSync6 } from "fs";
 import { O_NOFOLLOW, O_NONBLOCK, O_RDONLY } from "constants";
-import { basename as basename4, dirname as dirname9, join as join12, relative as relative3, sep as sep3 } from "path";
+import { basename as basename4, dirname as dirname9, join as join13, relative as relative3, sep as sep4 } from "path";
 import { fileURLToPath, pathToFileURL } from "url";
 function envToken(name) {
   return name.toUpperCase().replace(/-/g, "_");
@@ -11633,7 +11792,7 @@ var PACKAGE = "@hasna/secrets";
 var MAX_PACKAGE_BYTES = 1024 * 1024;
 function entryPoint(directory) {
   const root = realpathSync2(directory);
-  const fd = openSync4(join12(root, "package.json"), O_RDONLY | O_NOFOLLOW | O_NONBLOCK);
+  const fd = openSync4(join13(root, "package.json"), O_RDONLY | O_NOFOLLOW | O_NONBLOCK);
   let pkg;
   try {
     const stat = fstatSync4(fd);
@@ -11653,9 +11812,9 @@ function entryPoint(directory) {
   if (/[\\%?#\0]/.test(target) || parts.some((part) => !part || part === "." || part === ".." || part === "node_modules")) {
     throw new Error("Invalid Secrets import export");
   }
-  const file = realpathSync2(join12(root, ...parts));
+  const file = realpathSync2(join13(root, ...parts));
   const within = relative3(root, file);
-  if (!within || within === ".." || within.startsWith(`..${sep3}`) || !statSync6(file).isFile()) {
+  if (!within || within === ".." || within.startsWith(`..${sep4}`) || !statSync6(file).isFile()) {
     throw new Error("Secrets import export escapes its package or is not a file");
   }
   return pathToFileURL(file).href;
@@ -11664,7 +11823,7 @@ function resolveInstalledSecrets(parentUrl) {
   let directory = dirname9(fileURLToPath(parentUrl));
   for (;; ) {
     if (basename4(directory) !== "node_modules") {
-      const candidate = join12(directory, "node_modules", PACKAGE);
+      const candidate = join13(directory, "node_modules", PACKAGE);
       let absent = false;
       try {
         lstatSync9(candidate);
@@ -12811,7 +12970,7 @@ class MissingSkillsFleetError extends Error {
 }
 
 // src/lib/remote-files.ts
-import { createHash as createHash9 } from "crypto";
+import { createHash as createHash10 } from "crypto";
 var MAX_REMOTE_FILE_BYTES = 64 * 1024 * 1024;
 function describeRemoteFiles(files) {
   if (files.length > 10)
@@ -12829,9 +12988,9 @@ function describeRemoteFiles(files) {
   });
 }
 function sha256(bytes) {
-  return createHash9("sha256").update(bytes).digest("hex");
+  return createHash10("sha256").update(bytes).digest("hex");
 }
-async function readBoundedResponse(response, maximum) {
+async function readBoundedResponse(response, maximum, signal) {
   if (!Number.isSafeInteger(maximum) || maximum < 0 || maximum > MAX_REMOTE_FILE_BYTES)
     throw new Error("Invalid artifact size limit");
   const length = response.headers.get("content-length");
@@ -12842,11 +13001,18 @@ async function readBoundedResponse(response, maximum) {
   const reader = response.body?.getReader();
   if (!reader)
     return new Uint8Array;
+  signal?.throwIfAborted();
+  const abort = () => {
+    reader.cancel().catch(() => {});
+  };
+  signal?.addEventListener("abort", abort, { once: true });
   const chunks = [];
   let size = 0;
   try {
     while (true) {
+      signal?.throwIfAborted();
       const next = await reader.read();
+      signal?.throwIfAborted();
       if (next.done)
         break;
       size += next.value.byteLength;
@@ -12858,6 +13024,7 @@ async function readBoundedResponse(response, maximum) {
     await reader.cancel().catch(() => {});
     throw error;
   } finally {
+    signal?.removeEventListener("abort", abort);
     reader.releaseLock();
   }
   const bytes = new Uint8Array(size);
@@ -12899,10 +13066,12 @@ function validateSelection2(value) {
 
 class HttpProfileClient {
   key;
+  signal;
   authority;
   origin;
-  constructor(key, origin) {
+  constructor(key, origin, signal) {
     this.key = key;
+    this.signal = signal;
     if (!key.trim())
       throw new Error("A Skills credential is required");
     this.origin = normalizeSkillsApiOrigin(origin);
@@ -12916,7 +13085,7 @@ class HttpProfileClient {
         ...init,
         redirect: "error",
         credentials: "omit",
-        signal: AbortSignal.timeout(15000),
+        signal: this.signal ? AbortSignal.any([this.signal, AbortSignal.timeout(15000)]) : AbortSignal.timeout(15000),
         headers: {
           "Content-Type": "application/json",
           "User-Agent": `hasna-skills/${package_default.version}`,
@@ -12941,22 +13110,28 @@ class HttpProfileClient {
   }
   async read(response, limit = MAX_PROFILE_DOCUMENT_BYTES) {
     try {
-      return JSON.parse(new TextDecoder().decode(await readBoundedResponse(response, limit)));
+      return JSON.parse(new TextDecoder().decode(await readBoundedResponse(response, limit, this.signal)));
     } catch {
       invalid();
     }
   }
+  async supportsPinRenewal() {
+    const result = await this.read(await this.request("/capabilities"));
+    if (!object3(result) || !Array.isArray(result.capabilities))
+      invalid();
+    return result.capabilities.includes("skills.session-pin-renewal");
+  }
   async resolveProfile(id) {
     if (!identifier(id))
       throw new Error("Invalid selection profile id");
-    const result = await this.read(await this.request(`/profiles/${encodeURIComponent(id)}/resolve`), MAX_RESOLVED_PROFILE_BYTES);
+    const result = await this.read(await this.request(`/profiles/${encodeURIComponent(id)}/resolve?pinAuthorization=epoch-v1`), MAX_RESOLVED_PROFILE_BYTES);
     if (!object3(result) || result.profileId !== id || result.authority !== this.authority || !identifier(result.workspaceId) || !identifier(result.profileRevision) || !Array.isArray(result.selections) || result.selections.length > MAX_PROFILE_SELECTIONS)
       invalid();
     const seen = new Set;
     for (const entry of result.selections) {
       validateSelection2(entry);
       const item = entry;
-      if (seen.has(item.slug) || item.authority !== this.authority || item.workspaceId !== result.workspaceId || item.profileRevision !== result.profileRevision)
+      if (item.authorizationEpoch !== undefined && (typeof item.authorizationEpoch !== "string" || !/^[a-f0-9]{32}$/.test(item.authorizationEpoch)) || seen.has(item.slug) || item.authority !== this.authority || item.workspaceId !== result.workspaceId || item.profileRevision !== result.profileRevision)
         invalid();
       seen.add(item.slug);
     }
@@ -13003,7 +13178,7 @@ class HttpProfileClient {
     return this.request(`/skills/${encodeURIComponent(slug)}/versions/${encodeURIComponent(version)}/bundle`);
   }
 }
-async function createProfileClient() {
+async function createProfileClient(signal) {
   let connection;
   try {
     connection = await resolveSkillsConnection();
@@ -13015,12 +13190,12 @@ async function createProfileClient() {
   }
   if (!connection)
     throw new Error("Selection profiles require a configured Skills API");
-  return new HttpProfileClient(connection.apiKey, connection.apiOrigin);
+  return new HttpProfileClient(connection.apiKey, connection.apiOrigin, signal);
 }
 
 // src/lib/dependency-preparation.ts
 import { constants as constants5, closeSync as closeSync6, fstatSync as fstatSync6, lstatSync as lstatSync11, mkdirSync as mkdirSync4, openSync as openSync6, readFileSync as readFileSync10, readdirSync as readdirSync5, rmdirSync, unlinkSync as unlinkSync2, ftruncateSync, writeSync } from "fs";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 
 // src/lib/preparation-process.ts
 function capturePreparationProcess(child, platform = process.platform, signalGroup = (pid, signal) => process.kill(pid, signal)) {
@@ -13067,15 +13242,15 @@ var DEPENDENCY_PREPARATION_MARKER = ".skills-dependency-preparation";
 var RECOVERY = "Skill dependency preparation is incomplete. Confirm no installer is running, successfully run bun install --no-save in the skill directory, then remove only .skills-dependency-preparation. See docs/skill-standard.md#recovering-interrupted-dependency-preparation.";
 function hasDependencyPreparationMarker(skillPath) {
   try {
-    lstatSync11(join13(skillPath, DEPENDENCY_PREPARATION_MARKER));
+    lstatSync11(join14(skillPath, DEPENDENCY_PREPARATION_MARKER));
     return true;
   } catch (error) {
     return error.code !== "ENOENT";
   }
 }
 function claimPreparation(skillPath) {
-  const marker = join13(skillPath, DEPENDENCY_PREPARATION_MARKER);
-  const state = join13(marker, "state.json"), active = join13(marker, "active");
+  const marker = join14(skillPath, DEPENDENCY_PREPARATION_MARKER);
+  const state = join14(marker, "state.json"), active = join14(marker, "active");
   let created = false;
   try {
     mkdirSync4(marker, { mode: 448 });
@@ -13227,14 +13402,14 @@ async function prepareSkillDependencies(skillPath, env, timeoutMs = DEFAULT_PREP
 
 // src/lib/skillinfo.ts
 import { existsSync as existsSync13, readFileSync as readFileSync18 } from "fs";
-import { join as join27 } from "path";
+import { join as join28 } from "path";
 
 // src/lib/codex-corpus-write.ts
 import { KernelLock } from "@hasna/contracts/kernel-lock";
 import { execFileSync } from "child_process";
-import { createHash as createHash10 } from "crypto";
+import { createHash as createHash11 } from "crypto";
 import { accessSync, constants as constants6, lstatSync as lstatSync12, readFileSync as readFileSync11, realpathSync as realpathSync3, statSync as statSync7 } from "fs";
-import { basename as basename5, delimiter, dirname as dirname10, isAbsolute as isAbsolute9, join as join14, relative as relative4, resolve as resolve9, sep as sep4 } from "path";
+import { basename as basename5, delimiter, dirname as dirname10, isAbsolute as isAbsolute9, join as join15, relative as relative4, resolve as resolve9, sep as sep5 } from "path";
 var KEY = ".native-corpus-admission";
 var fail = () => {
   throw new Error("CODEX_CORPUS_ADMISSION_REQUIRED: verified native admission and its existing shared lock are required");
@@ -13243,7 +13418,7 @@ function physicalTarget(path) {
   const suffix = [];
   for (let cursor = path;; cursor = dirname10(cursor)) {
     try {
-      return join14(realpathSync3(cursor), ...suffix);
+      return join15(realpathSync3(cursor), ...suffix);
     } catch (error) {
       if (error.code !== "ENOENT" || cursor === dirname10(cursor))
         throw error;
@@ -13264,17 +13439,17 @@ function codexCorpusRootForPath(path) {
   const selectedRoots = selected && isAbsolute9(selected) ? [resolve9(selected), physicalTarget(resolve9(selected))] : [];
   const classify = (candidate) => {
     const checked = (root2) => {
-      if (candidate === root2 || candidate === join14(root2, `${KEY}.flock-v1`))
+      if (candidate === root2 || candidate === join15(root2, `${KEY}.flock-v1`))
         fail();
       return root2;
     };
     for (const root2 of selectedRoots) {
       const distance = relative4(root2, candidate);
-      if (distance === "" || !distance.startsWith(`..${sep4}`) && distance !== ".." && !isAbsolute9(distance))
+      if (distance === "" || !distance.startsWith(`..${sep5}`) && distance !== ".." && !isAbsolute9(distance))
         return checked(root2);
     }
     for (let cursor = candidate;cursor !== dirname10(cursor); cursor = dirname10(cursor)) {
-      if (cursor.endsWith(`${sep4}.codex`))
+      if (cursor.endsWith(`${sep5}.codex`))
         return checked(cursor);
     }
     return;
@@ -13301,8 +13476,8 @@ function executable(options) {
   let found;
   if (isAbsolute9(command))
     found = command;
-  else if (!command.includes(sep4)) {
-    found = (process.env.PATH ?? "").split(delimiter).filter(isAbsolute9).map((dir) => join14(dir, command)).find((candidate) => {
+  else if (!command.includes(sep5)) {
+    found = (process.env.PATH ?? "").split(delimiter).filter(isAbsolute9).map((dir) => join15(dir, command)).find((candidate) => {
       try {
         accessSync(candidate, constants6.X_OK);
         return true;
@@ -13316,7 +13491,7 @@ function executable(options) {
   const path = realpathSync3(found), initial = statSync7(path, { bigint: true });
   if (!initial.isFile() || (initial.mode & 0o022n) !== 0n || (initial.mode & 0o111n) === 0n || initial.uid !== BigInt(process.getuid()) && initial.uid !== 0n)
     return fail();
-  const hash2 = () => createHash10("sha256").update(readFileSync11(path)).digest("hex");
+  const hash2 = () => createHash11("sha256").update(readFileSync11(path)).digest("hex");
   const digest = hash2();
   if (options.codexSha256 && digest !== options.codexSha256)
     return fail();
@@ -13353,7 +13528,7 @@ function acquireCodexCorpusWrite(roots, options) {
     for (const { root } of held) {
       assertCurrent();
       native.assertCurrent();
-      const rootIdentity = identity3(root), lockIdentity = identity3(join14(root, `${KEY}.flock-v1`));
+      const rootIdentity = identity3(root), lockIdentity = identity3(join15(root, `${KEY}.flock-v1`));
       assertCurrent();
       const output = execFileSync(native.path, ["corpus-admission-inspect", "--home", root], {
         encoding: "utf8",
@@ -13392,7 +13567,7 @@ function withCodexCorpusWrite(roots, run, options = {}) {
 
 // src/lib/installer.ts
 import { existsSync as existsSync12, readFileSync as readFileSync17, rmSync as rmSync2 } from "fs";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 import { homedir as homedir4 } from "os";
 
 // src/lib/agent-sync.ts
@@ -13410,10 +13585,10 @@ import {
   writeFileSync as writeFileSync7
 } from "fs";
 import { homedir as homedir3 } from "os";
-import { basename as basename7, dirname as dirname15, join as join23 } from "path";
+import { basename as basename7, dirname as dirname15, join as join25 } from "path";
 
 // src/lib/codex-plugin-skill-controls.ts
-import { createHash as createHash11 } from "crypto";
+import { createHash as createHash12 } from "crypto";
 
 // src/lib/codex-local-mcp-controls.ts
 function isCodexLocalStdioMcpServer(name, server) {
@@ -13482,7 +13657,7 @@ function isCodexLocalStdioMcpServer(name, server) {
 }
 
 // src/lib/codex-plugin-skill-controls.ts
-import { basename as basename6, dirname as dirname11, join as join16, relative as relative5, resolve as resolve10, sep as sep5 } from "path";
+import { basename as basename6, dirname as dirname11, join as join17, relative as relative5, resolve as resolve10, sep as sep6 } from "path";
 import { lstatSync as lstatSync13, readdirSync as readdirSync6, readlinkSync as readlinkSync3, realpathSync as realpathSync6 } from "fs";
 
 // src/lib/codex-native-compatibility.ts
@@ -13509,7 +13684,7 @@ import { realpathSync as realpathSync5 } from "fs";
 import { isAbsolute as isAbsolute11, normalize as normalize2 } from "path";
 
 // src/lib/codex-hook-rpc.ts
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 import { execFile, spawn } from "child_process";
 import { realpathSync as realpathSync4, statSync as statSync8 } from "fs";
 import { isAbsolute as isAbsolute10 } from "path";
@@ -13541,7 +13716,7 @@ async function connectCodexHookRpc(options) {
     delete env.CODEX_HOME;
   else
     env.CODEX_HOME = options.codexHome;
-  const corpusLease = acquireCodexCorpusWrite([options.codexHome ?? join15(options.home, ".codex")], { codexCommand: binary });
+  const corpusLease = acquireCodexCorpusWrite([options.codexHome ?? join16(options.home, ".codex")], { codexCommand: binary });
   const child = spawn(binary, ["app-server", "--strict-config", "--stdio"], {
     cwd: options.home,
     env,
@@ -13821,7 +13996,7 @@ function remoteInstallationMatches(parent, remotePluginId, read2) {
   try {
     if (!remotePluginIdentifier(remotePluginId) || !lstatSync13(parent).isDirectory() || realpathSync6(parent) !== parent)
       return false;
-    const path = join16(parent, ".codex-remote-plugin-install.json"), stat = lstatSync13(path, { throwIfNoEntry: false });
+    const path = join17(parent, ".codex-remote-plugin-install.json"), stat = lstatSync13(path, { throwIfNoEntry: false });
     if (!stat?.isFile() || stat.isSymbolicLink() || stat.size > 16384)
       return false;
     const text2 = read2(path);
@@ -13897,8 +14072,8 @@ function isBundledCleanupHooks(root, namespace, value) {
   return true;
 }
 function rootControls(root, read2) {
-  const manifestPath = join16(root, ".codex-plugin/plugin.json"), manifestFile = lstatSync13(manifestPath, { throwIfNoEntry: false });
-  if (!lstatSync13(join16(root, ".codex-plugin"), { throwIfNoEntry: false })?.isDirectory() || !manifestFile?.isFile() || manifestFile.size > 1024 * 1024)
+  const manifestPath = join17(root, ".codex-plugin/plugin.json"), manifestFile = lstatSync13(manifestPath, { throwIfNoEntry: false });
+  if (!lstatSync13(join17(root, ".codex-plugin"), { throwIfNoEntry: false })?.isDirectory() || !manifestFile?.isFile() || manifestFile.size > 1024 * 1024)
     refuse2();
   let manifest, manifestSha256;
   try {
@@ -13913,9 +14088,9 @@ function rootControls(root, read2) {
   const cacheVersion = basename6(root), declaredVersion = manifest.version === undefined ? "" : typeof manifest.version === "string" ? manifest.version.trim() : null;
   if (declaredVersion === null || (declaredVersion ? declaredVersion !== cacheVersion : cacheVersion !== CODEX_DEFAULT_AGENT_PLUGIN_VERSION))
     refuse2();
-  if (manifest.hooks !== undefined && !isBundledCleanupHooks(root, manifest.name, manifest.hooks) || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync13(join16(root, "hooks"), { throwIfNoEntry: false }))
+  if (manifest.hooks !== undefined && !isBundledCleanupHooks(root, manifest.name, manifest.hooks) || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync13(join17(root, "hooks"), { throwIfNoEntry: false }))
     refuse2();
-  const mcp = join16(root, ".mcp.json"), mcpPresent = lstatSync13(mcp, { throwIfNoEntry: false });
+  const mcp = join17(root, ".mcp.json"), mcpPresent = lstatSync13(mcp, { throwIfNoEntry: false });
   if (manifest.hooks !== undefined && (manifest.mcpServers !== undefined || mcpPresent))
     refuse2();
   if (mcpPresent && (!mcpPresent.isFile() || mcpPresent.isSymbolicLink() || mcpPresent.size > 1024 * 1024 || realpathSync6(mcp) !== mcp))
@@ -13923,7 +14098,7 @@ function rootControls(root, read2) {
   if (Boolean(mcpPresent) !== (manifest.mcpServers !== undefined))
     refuse2();
   const mcpSha256 = mcpPresent ? mcpControls(mcp, read2) : undefined;
-  const app = join16(root, ".app.json"), present = lstatSync13(app, { throwIfNoEntry: false });
+  const app = join17(root, ".app.json"), present = lstatSync13(app, { throwIfNoEntry: false });
   if (present && (!present.isFile() || present.isSymbolicLink() || present.size > 1024 * 1024))
     refuse2();
   if (manifest.apps !== undefined && !present)
@@ -13932,7 +14107,7 @@ function rootControls(root, read2) {
   return { namespace: manifest.name, manifestSha256, ...appSha256 ? { appSha256 } : {}, ...mcpSha256 ? { mcpSha256 } : {} };
 }
 function documentIdentity(document2, cache, read2) {
-  if (!document2.startsWith(cache + sep5) || !document2.endsWith(sep5 + "SKILL.md"))
+  if (!document2.startsWith(cache + sep6) || !document2.endsWith(sep6 + "SKILL.md"))
     refuse2();
   const text2 = read2(document2);
   if (Buffer.byteLength(text2) > 1024 * 1024)
@@ -13955,12 +14130,12 @@ function documentIdentity(document2, cache, read2) {
   }
   if (!front || typeof front !== "object" || !identifier2(front.name) || typeof front.description !== "string" || !front.description.trim())
     refuse2();
-  for (let root = dirname11(document2), depth = 0;root.startsWith(cache + sep5) && depth < 12; root = dirname11(root), depth++) {
-    const path = join16(root, ".codex-plugin", "plugin.json");
+  for (let root = dirname11(document2), depth = 0;root.startsWith(cache + sep6) && depth < 12; root = dirname11(root), depth++) {
+    const path = join17(root, ".codex-plugin", "plugin.json");
     if (!lstatSync13(path, { throwIfNoEntry: false }))
       continue;
     const manifestFile = lstatSync13(path);
-    if (!lstatSync13(join16(root, ".codex-plugin")).isDirectory() || !manifestFile.isFile() || manifestFile.size > 1024 * 1024)
+    if (!lstatSync13(join17(root, ".codex-plugin")).isDirectory() || !manifestFile.isFile() || manifestFile.size > 1024 * 1024)
       refuse2();
     let manifest;
     try {
@@ -13987,13 +14162,13 @@ function identity4(document2, cache, read2) {
   return { name: parsed.name, pluginParent: parsed.pluginParent, ...controls };
 }
 function classifyCodexPluginCacheDocument(document2, cache, read2) {
-  if (!document2.startsWith(cache + sep5))
+  if (!document2.startsWith(cache + sep6))
     return null;
   try {
     const located = documentIdentity(document2, cache, read2), parsed = identity4(document2, cache, read2);
-    if (!lstatSync13(document2).isFile() || realpathSync6(document2) !== document2 || realpathSync6(located.root) !== located.root || realpathSync6(located.pluginParent) !== located.pluginParent || realpathSync6(join16(located.root, ".codex-plugin/plugin.json")) !== join16(located.root, ".codex-plugin/plugin.json"))
+    if (!lstatSync13(document2).isFile() || realpathSync6(document2) !== document2 || realpathSync6(located.root) !== located.root || realpathSync6(located.pluginParent) !== located.pluginParent || realpathSync6(join17(located.root, ".codex-plugin/plugin.json")) !== join17(located.root, ".codex-plugin/plugin.json"))
       return null;
-    const parts = relative5(cache, parsed.pluginParent).split(sep5);
+    const parts = relative5(cache, parsed.pluginParent).split(sep6);
     if (parts.length !== 2 || parts.some((part) => !identifier2(part)) || parts[1] !== parsed.namespace)
       return null;
     return { name: parsed.name, namespace: parsed.namespace, pluginId: `${parts[1]}@${parts[0]}`, pluginParent: parsed.pluginParent, root: located.root, manifestSha256: parsed.manifestSha256 };
@@ -14003,7 +14178,7 @@ function classifyCodexPluginCacheDocument(document2, cache, read2) {
 }
 function reviewedDisabledCodexPluginParent(cache, parent, controls, rules) {
   try {
-    const parts = relative5(cache, parent).split(sep5), enrolled = controls.filter((control) => control.pluginParent === parent);
+    const parts = relative5(cache, parent).split(sep6), enrolled = controls.filter((control) => control.pluginParent === parent);
     if (resolve10(parent) !== parent || parts.length !== 2 || parts.some((part) => !identifier2(part)) || !enrolled.length || !Array.isArray(rules))
       return false;
     for (let cursor = parent;; cursor = dirname11(cursor)) {
@@ -14013,7 +14188,7 @@ function reviewedDisabledCodexPluginParent(cache, parent, controls, rules) {
       if (dirname11(cursor) === cursor)
         break;
     }
-    return enrolled.every((control) => control.namespace === parts[1] && control.pluginId === `${parts[1]}@${parts[0]}` && remotePluginIdentifier(control.remotePluginId) && control.skillsOnly === true && !control.appSha256 && !control.mcpSha256 && control.name.startsWith(control.namespace + ":") && /^[a-f0-9]{64}$/.test(control.manifestSha256) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === control.name && rule.enabled === false) && !rules.some((rule) => (typeof rule?.name === "string" && rule.name.trim() === control.name || typeof rule?.path === "string" && (rule.path === parent || rule.path.startsWith(parent + sep5))) && rule.enabled !== false));
+    return enrolled.every((control) => control.namespace === parts[1] && control.pluginId === `${parts[1]}@${parts[0]}` && remotePluginIdentifier(control.remotePluginId) && control.skillsOnly === true && !control.appSha256 && !control.mcpSha256 && control.name.startsWith(control.namespace + ":") && /^[a-f0-9]{64}$/.test(control.manifestSha256) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === control.name && rule.enabled === false) && !rules.some((rule) => (typeof rule?.name === "string" && rule.name.trim() === control.name || typeof rule?.path === "string" && (rule.path === parent || rule.path.startsWith(parent + sep6))) && rule.enabled !== false));
   } catch {
     return false;
   }
@@ -14023,7 +14198,7 @@ function absentDisabledCodexPluginParent(cache, parent, controls, rules) {
 }
 function reviewedRetiredCodexRoot(cache, root, controls, rules, read2, allowAbsent = false) {
   try {
-    const parent = dirname11(root), parts = relative5(cache, parent).split(sep5), enrolled = controls.filter((control) => control.pluginParent === parent);
+    const parent = dirname11(root), parts = relative5(cache, parent).split(sep6), enrolled = controls.filter((control) => control.pluginParent === parent);
     if (resolve10(root) !== root || parts.length !== 2 || parts.some((part) => !identifier2(part)) || !basename6(root) || basename6(root) === "latest" || !enrolled.length || !Array.isArray(rules))
       return false;
     for (let cursor = root;; cursor = dirname11(cursor)) {
@@ -14033,14 +14208,14 @@ function reviewedRetiredCodexRoot(cache, root, controls, rules, read2, allowAbse
       if (dirname11(cursor) === cursor)
         break;
     }
-    if (!enrolled.every((control) => control.namespace === parts[1] && control.pluginId === `${parts[1]}@${parts[0]}` && remotePluginIdentifier(control.remotePluginId) && control.skillsOnly === true && !control.appSha256 && !control.mcpSha256 && control.name.startsWith(control.namespace + ":") && /^[a-f0-9]{64}$/.test(control.manifestSha256) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === control.name && rule.enabled === false) && !rules.some((rule) => (typeof rule?.name === "string" && rule.name.trim() === control.name || typeof rule?.path === "string" && (rule.path === parent || rule.path === root || rule.path.startsWith(root + sep5))) && rule.enabled !== false)))
+    if (!enrolled.every((control) => control.namespace === parts[1] && control.pluginId === `${parts[1]}@${parts[0]}` && remotePluginIdentifier(control.remotePluginId) && control.skillsOnly === true && !control.appSha256 && !control.mcpSha256 && control.name.startsWith(control.namespace + ":") && /^[a-f0-9]{64}$/.test(control.manifestSha256) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === control.name && rule.enabled === false) && !rules.some((rule) => (typeof rule?.name === "string" && rule.name.trim() === control.name || typeof rule?.path === "string" && (rule.path === parent || rule.path === root || rule.path.startsWith(root + sep6))) && rule.enabled !== false)))
       return false;
     if (!lstatSync13(root, { throwIfNoEntry: false }))
       return allowAbsent && (lstatSync13(parent, { throwIfNoEntry: false }) ? enrolled.every((control) => remoteInstallationMatches(parent, control.remotePluginId, read2)) : absentDisabledCodexPluginParent(cache, parent, controls, rules));
     if (!enrolled.every((control) => remoteInstallationMatches(parent, control.remotePluginId, read2)))
       return false;
     const parsed = rootControls(root, read2);
-    if (JSON.parse(read2(join16(root, ".codex-plugin/plugin.json"))).hooks !== undefined)
+    if (JSON.parse(read2(join17(root, ".codex-plugin/plugin.json"))).hooks !== undefined)
       return false;
     if (!enrolled.some((control) => control.namespace === parsed.namespace && control.manifestSha256 === parsed.manifestSha256 && !parsed.appSha256 && !parsed.mcpSha256))
       return false;
@@ -14048,7 +14223,7 @@ function reviewedRetiredCodexRoot(cache, root, controls, rules, read2, allowAbse
     const emptySkills = (directory, depth) => depth <= 64 && readdirSync6(directory).every((name) => {
       if (++entries > 4096 || name === "SKILL.md")
         return false;
-      const path = join16(directory, name), stat = lstatSync13(path);
+      const path = join17(directory, name), stat = lstatSync13(path);
       return !stat.isSymbolicLink() && (stat.isFile() || stat.isDirectory() && emptySkills(path, depth + 1));
     });
     return emptySkills(root, 0);
@@ -14064,7 +14239,7 @@ function reviewedCodexPluginCapabilitiesUnchanged(cache, controls, read2, rules)
     for (const parent of new Set(controls.map((control) => control.pluginParent))) {
       if (absentDisabledCodexPluginParent(cache, parent, controls, rules))
         continue;
-      if (!parent.startsWith(cache + sep5) || !lstatSync13(parent, { throwIfNoEntry: false })?.isDirectory() || realpathSync6(parent) !== parent)
+      if (!parent.startsWith(cache + sep6) || !lstatSync13(parent, { throwIfNoEntry: false })?.isDirectory() || realpathSync6(parent) !== parent)
         return false;
       for (const control of controls.filter((control2) => control2.pluginParent === parent)) {
         if (control.remotePluginId !== undefined && !remoteInstallationMatches(parent, control.remotePluginId, read2))
@@ -14075,7 +14250,7 @@ function reviewedCodexPluginCapabilitiesUnchanged(cache, controls, read2, rules)
       if (entries > 4096)
         return false;
       for (const name of names) {
-        let root = join16(parent, name), stat = lstatSync13(root);
+        let root = join17(parent, name), stat = lstatSync13(root);
         if (stat.isSymbolicLink()) {
           const target = resolve10(parent, readlinkSync3(root));
           if (name !== "latest" || dirname11(target) !== parent || !lstatSync13(target).isDirectory() || realpathSync6(target) !== target)
@@ -14083,7 +14258,7 @@ function reviewedCodexPluginCapabilitiesUnchanged(cache, controls, read2, rules)
           root = target;
           stat = lstatSync13(root);
         }
-        if (!stat.isDirectory() || ![".codex-plugin/plugin.json", ".app.json", "hooks", ".mcp.json"].some((path) => lstatSync13(join16(root, path), { throwIfNoEntry: false })))
+        if (!stat.isDirectory() || ![".codex-plugin/plugin.json", ".app.json", "hooks", ".mcp.json"].some((path) => lstatSync13(join17(root, path), { throwIfNoEntry: false })))
           continue;
         const parsed = rootControls(root, read2);
         if (!controls.some((control) => control.pluginParent === parent && control.namespace === parsed.namespace && control.manifestSha256 === parsed.manifestSha256 && control.appSha256 === parsed.appSha256 && control.mcpSha256 === parsed.mcpSha256))
@@ -14113,12 +14288,12 @@ function reviewCodexPluginControls(catalog, documents, cache, cwd, read2, rules,
   }
   const candidates = catalog.plugins === undefined ? skills.map((skill) => skill.path).filter((path) => allowed.has(path)) : allowed;
   for (const document2 of candidates) {
-    if (!document2.startsWith(cache + sep5))
+    if (!document2.startsWith(cache + sep6))
       continue;
     const located = documentIdentity(document2, cache, read2);
     if (located.name === "skills-cli" || located.name.endsWith(":skills-cli"))
       refuse2();
-    const cacheParts = relative5(cache, located.pluginParent).split(sep5);
+    const cacheParts = relative5(cache, located.pluginParent).split(sep6);
     if (cacheParts.length !== 2 || cacheParts.some((part) => !identifier2(part)))
       refuse2();
     const [marketplace, pluginName] = cacheParts;
@@ -14131,8 +14306,8 @@ function reviewCodexPluginControls(catalog, documents, cache, cwd, read2, rules,
     const installed = installedPlugins.filter((plugin) => plugin.id === expectedPluginId && plugin.name === pluginName);
     if (catalog.version === "codex-cli 0.160.0" && installed.length === 1 && installed[0].installed && installed[0].localVersion === basename6(located.root) && installed[0].sourceType === "local" && codexPluginSourceIsConfigControlled(installed[0])) {
       const plugin = installed[0], input = { pluginId: expectedPluginId, namespace: located.namespace, pluginParent: located.pluginParent, sourceRoot: plugin.sourcePath, sourceSha256: plugin.sourceSha256 };
-      if (input.sourceRoot !== located.root && !input.sourceRoot.startsWith(cache + sep5) && (lstatSync13(input.sourceRoot, { throwIfNoEntry: false }) || documents.some((path) => path.startsWith(input.sourceRoot + sep5)))) {
-        if (skills.some((skill) => skill.path === input.sourceRoot || skill.path.startsWith(input.sourceRoot + sep5)) || !sourceInputUnchanged(input, cache, read2))
+      if (input.sourceRoot !== located.root && !input.sourceRoot.startsWith(cache + sep6) && (lstatSync13(input.sourceRoot, { throwIfNoEntry: false }) || documents.some((path) => path.startsWith(input.sourceRoot + sep6)))) {
+        if (skills.some((skill) => skill.path === input.sourceRoot || skill.path.startsWith(input.sourceRoot + sep6)) || !sourceInputUnchanged(input, cache, read2))
           refuse2();
         sourceInputs.set(expectedPluginId, input);
       }
@@ -14142,7 +14317,7 @@ function reviewCodexPluginControls(catalog, documents, cache, cwd, read2, rules,
       if (!Array.isArray(rules))
         refuse2();
       const exactPathDeny = rules.some((rule) => rule?.path === document2 && rule?.enabled === false);
-      if (!lstatSync13(document2).isFile() || realpathSync6(document2) !== document2 || realpathSync6(located.root) !== located.root || realpathSync6(located.pluginParent) !== located.pluginParent || realpathSync6(join16(located.root, ".codex-plugin/plugin.json")) !== join16(located.root, ".codex-plugin/plugin.json") || !exactPathDeny || rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === located.name && rule?.enabled !== false) || !isCodexNativeSkillDisabled({ name: located.name, path: document2, pluginId: expectedPluginId, enabled: true }, rules))
+      if (!lstatSync13(document2).isFile() || realpathSync6(document2) !== document2 || realpathSync6(located.root) !== located.root || realpathSync6(located.pluginParent) !== located.pluginParent || realpathSync6(join17(located.root, ".codex-plugin/plugin.json")) !== join17(located.root, ".codex-plugin/plugin.json") || !exactPathDeny || rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === located.name && rule?.enabled !== false) || !isCodexNativeSkillDisabled({ name: located.name, path: document2, pluginId: expectedPluginId, enabled: true }, rules))
         refuse2();
       inertDocuments.add(document2);
       const plugin = installed[0];
@@ -14171,7 +14346,7 @@ function reviewCodexPluginControls(catalog, documents, cache, cwd, read2, rules,
       const exactPathDeny = Array.isArray(rules) && rules.some((rule) => rule?.path === document2 && rule?.enabled === false);
       const nativeSkill = { name: parsed.name, path: document2, pluginId: expectedPluginId, enabled: true };
       const denial = denials.find((item) => item.path === document2);
-      const explicitDeny = denial !== undefined && remotePluginId !== undefined && catalog.version === "codex-cli 0.160.0" && denial.name === parsed.name && denial.sha256 === createHash11("sha256").update(read2(document2)).digest("hex") && Array.isArray(rules) && !rules.some((rule) => (rule?.path === document2 || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document2 && rule.enabled === false);
+      const explicitDeny = denial !== undefined && remotePluginId !== undefined && catalog.version === "codex-cli 0.160.0" && denial.name === parsed.name && denial.sha256 === createHash12("sha256").update(read2(document2)).digest("hex") && Array.isArray(rules) && !rules.some((rule) => (rule?.path === document2 || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document2 && rule.enabled === false);
       if (denial && !explicitDeny)
         refuse2();
       if (explicitDeny)
@@ -14180,21 +14355,21 @@ function reviewCodexPluginControls(catalog, documents, cache, cwd, read2, rules,
       if (!explicitDeny && (!exactPathDeny && !plannedPathDeny || !isCodexNativeSkillDisabled(nativeSkill, rules)))
         refuse2();
     }
-    const skillsOnly = !parsed.appSha256 && !parsed.mcpSha256 && JSON.parse(read2(join16(located.root, ".codex-plugin/plugin.json"))).hooks === undefined;
+    const skillsOnly = !parsed.appSha256 && !parsed.mcpSha256 && JSON.parse(read2(join17(located.root, ".codex-plugin/plugin.json"))).hooks === undefined;
     result.push({ ...parsed, pluginId: expectedPluginId, ...remotePluginId ? { remotePluginId } : {}, ...skillsOnly ? { skillsOnly: true } : {} });
   }
   if (usedDenials.size !== denials.length)
     refuse2();
-  if (!result.length && documents.some((document2) => document2.startsWith(cache + sep5) && !inertDocuments.has(document2)) || new Set(result.map((item) => item.name)).size !== result.length)
+  if (!result.length && documents.some((document2) => document2.startsWith(cache + sep6) && !inertDocuments.has(document2)) || new Set(result.map((item) => item.name)).size !== result.length)
     refuse2();
   return { skills: result, inactivePlugins: [...inactivePlugins.values()], sourceInputs: [...sourceInputs.values()] };
 }
 function sourceInputUnchanged(input, cache, read2) {
   try {
-    const parts = relative5(cache, input.pluginParent).split(sep5);
-    if (parts.length !== 2 || parts.some((part) => !identifier2(part)) || parts[1] !== input.namespace || input.pluginId !== `${parts[1]}@${parts[0]}` || !codexPluginSourceIsConfigControlled({ id: input.pluginId, sourceType: "local", sourceSha256: input.sourceSha256 }) || input.sourceSha256 !== hashNativeJsonControls(JSON.stringify({ type: "local", path: input.sourceRoot })) || resolve10(input.sourceRoot) !== input.sourceRoot || !lstatSync13(input.sourceRoot).isDirectory() || realpathSync6(input.sourceRoot) !== input.sourceRoot || input.sourceRoot === cache || input.sourceRoot.startsWith(cache + sep5) || cache.startsWith(input.sourceRoot + sep5))
+    const parts = relative5(cache, input.pluginParent).split(sep6);
+    if (parts.length !== 2 || parts.some((part) => !identifier2(part)) || parts[1] !== input.namespace || input.pluginId !== `${parts[1]}@${parts[0]}` || !codexPluginSourceIsConfigControlled({ id: input.pluginId, sourceType: "local", sourceSha256: input.sourceSha256 }) || input.sourceSha256 !== hashNativeJsonControls(JSON.stringify({ type: "local", path: input.sourceRoot })) || resolve10(input.sourceRoot) !== input.sourceRoot || !lstatSync13(input.sourceRoot).isDirectory() || realpathSync6(input.sourceRoot) !== input.sourceRoot || input.sourceRoot === cache || input.sourceRoot.startsWith(cache + sep6) || cache.startsWith(input.sourceRoot + sep6))
       return false;
-    const path = join16(input.sourceRoot, ".codex-plugin/plugin.json"), stat = lstatSync13(path);
+    const path = join17(input.sourceRoot, ".codex-plugin/plugin.json"), stat = lstatSync13(path);
     if (!stat.isFile() || stat.size > 1024 * 1024 || realpathSync6(path) !== path)
       return false;
     const text2 = read2(path);
@@ -14209,7 +14384,7 @@ function reviewedCodexPluginSourceRoots(cache, inputs, read2) {
   if (!Array.isArray(inputs) || inputs.length > 4096 || new Set(inputs.map((input) => input.pluginId)).size !== inputs.length || new Set(inputs.map((input) => input.sourceRoot)).size !== inputs.length || inputs.some((input) => !sourceInputUnchanged(input, cache, read2)))
     refuse2();
   const roots = inputs.map((input) => input.sourceRoot);
-  if (roots.some((root) => roots.some((other) => root !== other && root.startsWith(other + sep5))))
+  if (roots.some((root) => roots.some((other) => root !== other && root.startsWith(other + sep6))))
     refuse2();
   return roots;
 }
@@ -14218,9 +14393,9 @@ function isReviewedCodexPluginInactive(document2, cache, controls, pluginSetting
     return false;
   try {
     const parsed = documentIdentity(document2, cache, read2), matches = controls.filter((control2) => control2.pluginParent === parsed.pluginParent && control2.namespace === parsed.namespace);
-    if (matches.length !== 1 || !lstatSync13(document2).isFile() || realpathSync6(document2) !== document2 || realpathSync6(parsed.root) !== parsed.root || realpathSync6(parsed.pluginParent) !== parsed.pluginParent || realpathSync6(join16(parsed.root, ".codex-plugin/plugin.json")) !== join16(parsed.root, ".codex-plugin/plugin.json"))
+    if (matches.length !== 1 || !lstatSync13(document2).isFile() || realpathSync6(document2) !== document2 || realpathSync6(parsed.root) !== parsed.root || realpathSync6(parsed.pluginParent) !== parsed.pluginParent || realpathSync6(join17(parsed.root, ".codex-plugin/plugin.json")) !== join17(parsed.root, ".codex-plugin/plugin.json"))
       return false;
-    const control = matches[0], parts = relative5(cache, parsed.pluginParent).split(sep5);
+    const control = matches[0], parts = relative5(cache, parsed.pluginParent).split(sep6);
     if (parts.length !== 2 || parts.some((part) => !identifier2(part)) || parts[1] !== parsed.namespace || control.pluginId !== `${parts[1]}@${parts[0]}` || !codexPluginSourceIsConfigControlled({ ...control, id: control.pluginId }) || !Object.hasOwn(pluginSettings, control.pluginId) || pluginSettings[control.pluginId]?.enabled !== false)
       return false;
     return !rules.some((rule) => (rule?.path === document2 || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule?.enabled !== false);
@@ -14229,7 +14404,7 @@ function isReviewedCodexPluginInactive(document2, cache, controls, pluginSetting
   }
 }
 function isReviewedCodexPluginSkillDisabled(document2, cache, controls, rules, read2) {
-  if (!document2.startsWith(cache + sep5) || !Array.isArray(controls) || controls.length > 4096)
+  if (!document2.startsWith(cache + sep6) || !Array.isArray(controls) || controls.length > 4096)
     return false;
   let parsed;
   try {
@@ -14258,9 +14433,9 @@ enabled = false
 }
 
 // src/lib/codex-native-skill-policy.ts
-import { createHash as createHash12, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash13, randomUUID as randomUUID2 } from "crypto";
 import { closeSync as closeSync7, constants as constants7, fstatSync as fstatSync7, fsyncSync as fsyncSync2, lstatSync as lstatSync14, mkdirSync as mkdirSync5, openSync as openSync7, readFileSync as readFileSync12, readSync as readSync5, readlinkSync as readlinkSync4, realpathSync as realpathSync7, renameSync as renameSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync4 } from "fs";
-import { dirname as dirname12, isAbsolute as isAbsolute12, join as join17, resolve as resolve11 } from "path";
+import { dirname as dirname12, isAbsolute as isAbsolute12, join as join18, resolve as resolve11 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
 var CODEX_NATIVE_POLICY_CAPABILITY = "host-path-allowlist-v1";
 var CODEX_NATIVE_POLICY_RECEIPT_SCHEMA = "skills.codex-native-policy-acceptance/v1";
@@ -14386,7 +14561,7 @@ function verifyCodexNativeBridgeDocument(path, expectedContent, expectedSha256)
   if (realpathSync7.native(path) !== path)
     refuse3("NATIVE_SKILL_POLICY_BRIDGE_UNVERIFIED", "the bridge document real path differs from its lexical path");
   const bytes = readBounded(path, MAX_BRIDGE_DOCUMENT_BYTES, "the bridge document");
-  const sha2562 = createHash12("sha256").update(bytes).digest("hex");
+  const sha2562 = createHash13("sha256").update(bytes).digest("hex");
   if (!bytes.equals(Buffer.from(expectedContent, "utf8")) || sha2562 !== expectedSha256)
     refuse3("NATIVE_SKILL_POLICY_BRIDGE_UNVERIFIED", "the bridge document bytes differ from the managed bridge");
   return { path, sha256: sha2562 };
@@ -14469,7 +14644,7 @@ function executableWitness(path) {
 var witnessKey = (path, witness) => JSON.stringify([path, witness.dev, witness.ino, witness.size, witness.mtimeNs, witness.ctimeNs, witness.uid]);
 var executableDigestMemory = new Map;
 function executableCachePath(dataDir2) {
-  return join17(resolve11(dataDir2), "agent-hooks", "codex-native-policy-executable-cache.json");
+  return join18(resolve11(dataDir2), "agent-hooks", "codex-native-policy-executable-cache.json");
 }
 var currentUid = () => process.getuid?.() ?? -1;
 function readTrustedCacheBytes(path, ownerUid) {
@@ -14632,7 +14807,7 @@ function assertOperatorTrustRoot(dataDir2) {
   };
   checkDirectory(resolve11(dataDir2), "the Skills data directory", true);
   checkDirectory(dirname12(executableCachePath(dataDir2)), "the agent-hooks directory", false);
-  check(join17(resolve11(dataDir2), "agent-policy.json"), "the managed policy", true);
+  check(join18(resolve11(dataDir2), "agent-policy.json"), "the managed policy", true);
   check(executableCachePath(dataDir2), "the executable identity cache", false);
 }
 function runCodexNativePolicyHelper(request) {
@@ -14803,7 +14978,7 @@ function defaultProcessInspector() {
   return { platform: process.platform, arch: process.arch, pid: process.pid, parentOf: () => null, startTime: () => null, executablePath: () => null };
 }
 function codexNativePolicyReceiptPath(dataDir2) {
-  return join17(resolve11(dataDir2), "agent-hooks", "codex-native-policy-acceptance.json");
+  return join18(resolve11(dataDir2), "agent-hooks", "codex-native-policy-acceptance.json");
 }
 function recordCodexNativePolicyAcceptance(dataDir2, verification, accepted) {
   const path = codexNativePolicyReceiptPath(dataDir2), directory = dirname12(path);
@@ -14854,8 +15029,8 @@ function recordCodexNativePolicyAcceptance(dataDir2, verification, accepted) {
 }
 
 // src/lib/codex-settings-witness-v1.ts
-import { createHash as createHash13 } from "crypto";
-var sha = (text2) => createHash13("sha256").update(text2).digest("hex");
+import { createHash as createHash14 } from "crypto";
+var sha = (text2) => createHash14("sha256").update(text2).digest("hex");
 var EFFORT = new Set(["none", "minimal", "low", "medium", "high", "xhigh"]);
 var VERBOSITY = new Set(["low", "medium", "high"]);
 function need3(value) {
@@ -14901,7 +15076,7 @@ function numericTokens(text2) {
   }
   return result;
 }
-function canonical3(value, depth = 0, budget2 = { remaining: 65536 }) {
+function canonical4(value, depth = 0, budget2 = { remaining: 65536 }) {
   need3(depth <= 32 && --budget2.remaining >= 0);
   if (value === null)
     return ["null"];
@@ -14918,9 +15093,9 @@ function canonical3(value, depth = 0, budget2 = { remaining: 65536 }) {
     return ["date", value.toISOString()];
   }
   if (Array.isArray(value))
-    return ["array", value.map((child) => canonical3(child, depth + 1, budget2))];
+    return ["array", value.map((child) => canonical4(child, depth + 1, budget2))];
   need3(value && typeof value === "object");
-  return ["object", Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, child]) => [key, canonical3(child, depth + 1, budget2)])];
+  return ["object", Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, child]) => [key, canonical4(child, depth + 1, budget2)])];
 }
 function hashCodexSettingsReplacement(text2, budget2 = { remaining: 256 * 1024 * 1024 }) {
   need3(Buffer.byteLength(text2) <= 1024 * 1024 && budget2.remaining >= Buffer.byteLength(text2));
@@ -14941,7 +15116,7 @@ function hashCodexSettingsReplacement(text2, budget2 = { remaining: 256 * 1024 *
       need3(typeof config[key] === "string" && values.has(config[key]));
       delete config[key];
     }
-  return sha(`hasna.skills.codex-settings.v1\x00${JSON.stringify([canonical3(config), numericTokens(text2)])}`);
+  return sha(`hasna.skills.codex-settings.v1\x00${JSON.stringify([canonical4(config), numericTokens(text2)])}`);
 }
 function captureCodexSettings(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
   const text2 = readNativeSettingsWitnessFile(path, budget2, "config.toml");
@@ -15012,9 +15187,9 @@ function projectRegularCodexMcp(config, source) {
 }
 
 // src/lib/codex-settings-witness.ts
-import { createHash as createHash14 } from "crypto";
+import { createHash as createHash15 } from "crypto";
 import { isDeepStrictEqual as isDeepStrictEqual4 } from "util";
-var sha2 = (text2) => createHash14("sha256").update(text2).digest("hex");
+var sha2 = (text2) => createHash15("sha256").update(text2).digest("hex");
 var EFFORT2 = new Set(["none", "minimal", "low", "medium", "high", "xhigh"]);
 var VERBOSITY2 = new Set(["low", "medium", "high"]);
 var MODEL = /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,127}$/;
@@ -15069,7 +15244,7 @@ function numericTokens2(text2) {
   }
   return result.sort();
 }
-function canonical4(value, depth = 0, budget2 = { remaining: 65536 }) {
+function canonical5(value, depth = 0, budget2 = { remaining: 65536 }) {
   need4(depth <= 32 && --budget2.remaining >= 0);
   if (value === null)
     return ["null"];
@@ -15086,9 +15261,9 @@ function canonical4(value, depth = 0, budget2 = { remaining: 65536 }) {
     return ["date", value.toISOString()];
   }
   if (Array.isArray(value))
-    return ["array", value.map((child) => canonical4(child, depth + 1, budget2))];
+    return ["array", value.map((child) => canonical5(child, depth + 1, budget2))];
   need4(isRecord3(value));
-  return ["object", Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, child]) => [key, canonical4(child, depth + 1, budget2)])];
+  return ["object", Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, child]) => [key, canonical5(child, depth + 1, budget2)])];
 }
 function normalize3(config, version = 2) {
   if (isRecord3(config.hooks)) {
@@ -15262,7 +15437,7 @@ function settingsDigest2(text2, version = 2) {
   const mcp = version >= 3 ? projectRegularCodexMcp(config, text2) : { config, numericSource: text2 };
   const projected = version === 4 ? projectModelAvailabilityNux(mcp.config, mcp.numericSource) : mcp;
   normalize3(projected.config, version);
-  return sha2(`hasna.skills.codex-settings.v${version}\x00${JSON.stringify([canonical4(projected.config), numericTokens2(projected.numericSource)])}`);
+  return sha2(`hasna.skills.codex-settings.v${version}\x00${JSON.stringify([canonical5(projected.config), numericTokens2(projected.numericSource)])}`);
 }
 function hashCodexSettingsReplacementV2(text2, budget2 = { remaining: 256 * 1024 * 1024 }) {
   need4(Buffer.byteLength(text2) <= 1024 * 1024 && budget2.remaining >= Buffer.byteLength(text2));
@@ -15326,15 +15501,15 @@ function upgradeCodexSettingsWitnessV4(previous, reviewedSettingsPath) {
 }
 
 // src/lib/agent-integration.ts
-import { createHash as createHash17, randomUUID as randomUUID3 } from "crypto";
+import { createHash as createHash18, randomUUID as randomUUID3 } from "crypto";
 import { isDeepStrictEqual as isDeepStrictEqual6 } from "util";
 import { existsSync as existsSync9, lstatSync as lstatSync19, statSync as statSync9, mkdirSync as mkdirSync6, readFileSync as readFileSync14, readdirSync as readdirSync8, opendirSync as opendirSync3, readlinkSync as readlinkSync5, realpathSync as realpathSync9, renameSync as renameSync3, rmdirSync as rmdirSync2, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4, chmodSync, openSync as openSync10, closeSync as closeSync10, fsyncSync as fsyncSync4, fstatSync as fstatSync10, readSync as readSync8, constants as constants10, linkSync as linkSync2 } from "fs";
-import { dirname as dirname14, join as join21, resolve as resolve13, relative as relative6, isAbsolute as isAbsolute13, sep as sep6 } from "path";
+import { dirname as dirname14, join as join23, resolve as resolve13, relative as relative6, isAbsolute as isAbsolute13, sep as sep7 } from "path";
 import { homedir as homedir2 } from "os";
 
 // src/lib/managed-policy.ts
 import { closeSync as closeSync8, constants as constants8, fstatSync as fstatSync8, lstatSync as lstatSync15, openSync as openSync8, readSync as readSync6 } from "fs";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 function refusal(reason = "is unreadable") {
   return new SkillSelectionError("INVALID_AGENT_POLICY", `The Skills agent loading policy ${reason}; refusing legacy fallback.`);
 }
@@ -15365,7 +15540,7 @@ function serializeManagedSkillPolicy(value) {
   return text2;
 }
 function readManagedSkillPolicySnapshot(dataDir2 = getDataDirReadOnly()) {
-  const path = join18(dataDir2, "agent-policy.json");
+  const path = join19(dataDir2, "agent-policy.json");
   let descriptor, observed = false;
   try {
     const stat = lstatSync15(path);
@@ -15413,9 +15588,9 @@ function requiresCliSkillLoading(dataDir2 = getDataDirReadOnly()) {
 }
 
 // src/lib/agent-bridge.ts
-import { createHash as createHash15 } from "crypto";
+import { createHash as createHash16 } from "crypto";
 import { lstatSync as lstatSync16, readFileSync as readFileSync13, readdirSync as readdirSync7 } from "fs";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 var CLI_BRIDGE_NAME = "skills-cli";
 var CLI_BRIDGE_VERSION = 1;
 var markdown = `---
@@ -15432,7 +15607,7 @@ Use the Skills CLI as the skill authority for this station.
 
 This bridge contains no skill payloads. Do not copy skill content into agent-native skill directories or load other native skill copies. If a Skills command refuses authority, selection, integrity, or native drift, report that refusal and use its repair guidance; do not substitute bundled or stale local content. Explicit local draft authoring remains available.
 `;
-var CLI_BRIDGE_DIGEST = createHash15("sha256").update(markdown).digest("hex");
+var CLI_BRIDGE_DIGEST = createHash16("sha256").update(markdown).digest("hex");
 var CLI_BRIDGE_FILES = Object.freeze({
   "SKILL.md": markdown,
   ".hasna-skills.json": `${JSON.stringify({ managedBy: "@hasna/skills", kind: "cli-bridge", version: CLI_BRIDGE_VERSION, protocol: "selection-v1", contentSha256: CLI_BRIDGE_DIGEST }, null, 2)}
@@ -15447,7 +15622,7 @@ function isOwnedCliBridge(path, expectedPaths) {
     if (JSON.stringify(readdirSync7(path).sort()) !== JSON.stringify(Object.keys(CLI_BRIDGE_FILES).sort()))
       return false;
     return Object.entries(CLI_BRIDGE_FILES).every(([name, content]) => {
-      const file = join19(path, name), stat = lstatSync16(file);
+      const file = join20(path, name), stat = lstatSync16(file);
       return stat.isFile() && !stat.isSymbolicLink() && stat.size === Buffer.byteLength(content) && readFileSync13(file, "utf8") === content;
     });
   } catch {
@@ -15725,36 +15900,36 @@ function disableCodexBundledSkills(text2) {
 
 // src/lib/agent-sumi.ts
 import { existsSync as existsSync8, lstatSync as lstatSync17, realpathSync as realpathSync8 } from "fs";
-import { join as join20, resolve as resolve12 } from "path";
+import { join as join21, resolve as resolve12 } from "path";
 function sumiConfigDirectory(home, env = process.env) {
   for (const key of ["SUMI_CONFIG", "SUMI_CONFIG_CONTENT"])
     if (env[key] !== undefined)
       throw new Error(`Sumi ${key} requires a dedicated discovery adapter; unset it before Skills integration`);
   const selected = (key) => env[key]?.trim() ? env[key] : undefined;
-  const expand = (value) => resolve12(value === "~" ? home : value.startsWith("~/") ? join20(home, value.slice(2)) : value);
+  const expand = (value) => resolve12(value === "~" ? home : value.startsWith("~/") ? join21(home, value.slice(2)) : value);
   const explicit = selected("SUMI_CONFIG_DIR");
   const xdg = selected("XDG_CONFIG_HOME");
   const custom = selected("SUMI_HOME");
-  const canonical5 = explicit ? expand(explicit) : xdg ? join20(expand(xdg), "sumi") : join20(custom ? expand(custom) : join20(home, ".hasna-internal/sumi"), "config");
+  const canonical6 = explicit ? expand(explicit) : xdg ? join21(expand(xdg), "sumi") : join21(custom ? expand(custom) : join21(home, ".hasna-internal/sumi"), "config");
   if (explicit || xdg || custom)
-    return canonical5;
-  const legacy = join20(home, ".config/sumi");
-  const a = lstatSync17(canonical5, { throwIfNoEntry: false }), b = lstatSync17(legacy, { throwIfNoEntry: false });
-  if (a && b && realpathSync8(canonical5) !== realpathSync8(legacy))
+    return canonical6;
+  const legacy = join21(home, ".config/sumi");
+  const a = lstatSync17(canonical6, { throwIfNoEntry: false }), b = lstatSync17(legacy, { throwIfNoEntry: false });
+  if (a && b && realpathSync8(canonical6) !== realpathSync8(legacy))
     throw new Error("Sumi config roots conflict; complete native home adoption before Skills integration");
-  const path = a ? canonical5 : b ? legacy : canonical5;
+  const path = a ? canonical6 : b ? legacy : canonical6;
   if (!existsSync8(path))
     return path;
   const physical = realpathSync8(path);
-  if ((a?.isSymbolicLink() || b?.isSymbolicLink()) && ![canonical5, legacy].includes(physical))
+  if ((a?.isSymbolicLink() || b?.isSymbolicLink()) && ![canonical6, legacy].includes(physical))
     throw new Error("Sumi config alias must resolve to its canonical or legacy root");
   return physical;
 }
 function sumiBridgeRoot(home) {
-  return join20(sumiConfigDirectory(home), "skills");
+  return join21(sumiConfigDirectory(home), "skills");
 }
 function sumiConfigPath(home) {
-  return join20(sumiConfigDirectory(home), "sumi.json");
+  return join21(sumiConfigDirectory(home), "sumi.json");
 }
 function renderSumiPlugin(command, profile) {
   return renderSumiPluginVersion(command, profile, false);
@@ -15847,7 +16022,7 @@ var SUMI_SKILL_PERMISSIONS = [
 
 // src/lib/codex-hook-trust-files.ts
 import { closeSync as closeSync9, constants as constants9, fstatSync as fstatSync9, fsyncSync as fsyncSync3, lstatSync as lstatSync18, openSync as openSync9, readSync as readSync7, writeFileSync as writeFileSync5 } from "fs";
-import { createHash as createHash16 } from "crypto";
+import { createHash as createHash17 } from "crypto";
 import { dirname as dirname13 } from "path";
 function need5(value, code) {
   if (!value)
@@ -15883,7 +16058,7 @@ function snapshot(file, privateFile = false, options = {}) {
     }
     need5(length === Number(before.size) && sameStat(before, fstatSync9(fd, { bigint: true })) && sameStat(before, lstatSync18(file, { bigint: true })), "INPUT_CHANGED");
     const content = bytes.subarray(0, length), text2 = new TextDecoder("utf-8", { fatal: true }).decode(content);
-    return { file, privateFile, readOnlyPackage, text: text2, bytes: content, stat: before, sha256: createHash16("sha256").update(content).digest("hex") };
+    return { file, privateFile, readOnlyPackage, text: text2, bytes: content, stat: before, sha256: createHash17("sha256").update(content).digest("hex") };
   } finally {
     closeSync9(fd);
   }
@@ -15894,7 +16069,7 @@ function unchanged2(before) {
 }
 
 // src/lib/agent-integration.ts
-var sha3 = (data) => createHash17("sha256").update(data).digest("hex");
+var sha3 = (data) => createHash18("sha256").update(data).digest("hex");
 var ROOTS = NATIVE_SKILL_ROOTS;
 function hasTrustedDarwinAcl(fd, allowDenyOnly = false) {
   try {
@@ -15972,7 +16147,7 @@ function isSystemRootAlias(path) {
   }
 }
 function canonicalSystemPath(path) {
-  const absolute = resolve13(path), root = `/${absolute.split(sep6)[1]}`;
+  const absolute = resolve13(path), root = `/${absolute.split(sep7)[1]}`;
   if (process.platform !== "darwin" || !["/var", "/tmp", "/etc"].includes(root) || !lstatSync19(root, { throwIfNoEntry: false })?.isSymbolicLink())
     return absolute;
   if (!isSystemRootAlias(root))
@@ -15992,7 +16167,7 @@ function assertSafePath(path) {
 }
 function readRootAlias(home, agent) {
   assertSafePath(home);
-  const realHome = realpathSync9(home), alias = join21(realHome, `.${agent}`);
+  const realHome = realpathSync9(home), alias = join23(realHome, `.${agent}`);
   const stat = lstatSync19(alias, { throwIfNoEntry: false, bigint: true });
   if (!stat?.isSymbolicLink())
     throw new Error(`Agent root alias changed after planning: ${alias}`);
@@ -16002,7 +16177,7 @@ function readRootAlias(home, agent) {
   if (!targetStat?.isDirectory())
     throw new Error(`Agent root alias must target an existing directory: ${alias}`);
   const target = realpathSync9(targetPath), inside = relative6(realHome, target);
-  if (!inside || inside === ".." || inside.startsWith(`..${sep6}`) || isAbsolute13(inside))
+  if (!inside || inside === ".." || inside.startsWith(`..${sep7}`) || isAbsolute13(inside))
     throw new Error(`Agent root alias target must be inside the real home: ${alias}`);
   return { agent, home: realHome, alias, target, link, aliasIdentity: `${stat.dev}:${stat.ino}:${stat.ctimeNs}`, targetIdentity: `${targetStat.dev}:${targetStat.ino}` };
 }
@@ -16011,15 +16186,15 @@ function rootAliases(home, allowed = false) {
     return [];
   const result = [];
   for (const agent of ["claude", "codex"])
-    if (lstatSync19(join21(home, `.${agent}`), { throwIfNoEntry: false })?.isSymbolicLink())
+    if (lstatSync19(join23(home, `.${agent}`), { throwIfNoEntry: false })?.isSymbolicLink())
       result.push(readRootAlias(home, agent));
-  if (result.some((item, index) => result.slice(index + 1).some((other) => item.target === other.target || item.target.startsWith(other.target + sep6) || other.target.startsWith(item.target + sep6))))
+  if (result.some((item, index) => result.slice(index + 1).some((other) => item.target === other.target || item.target.startsWith(other.target + sep7) || other.target.startsWith(item.target + sep7))))
     throw new Error("Agent root alias targets must not overlap");
   return result;
 }
 function canonicalAgentPath(path, aliases) {
-  const absolute = canonicalSystemPath(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep6));
-  return binding ? join21(binding.target, relative6(binding.alias, absolute)) : absolute;
+  const absolute = canonicalSystemPath(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep7));
+  return binding ? join23(binding.target, relative6(binding.alias, absolute)) : absolute;
 }
 function disabledCodexSkillPaths(config, aliases) {
   const skills = config.skills;
@@ -16042,7 +16217,7 @@ function disabledCodexSkillPaths(config, aliases) {
     } catch {
       continue;
     }
-    if (!document2.endsWith(`${sep6}SKILL.md`))
+    if (!document2.endsWith(`${sep7}SKILL.md`))
       continue;
     settings.set(document2, [...settings.get(document2) ?? [], entry.enabled === false]);
   }
@@ -16050,7 +16225,7 @@ function disabledCodexSkillPaths(config, aliases) {
 }
 function recheckRootAliases(aliases) {
   for (const binding of aliases) {
-    if (!["claude", "codex"].includes(binding.agent) || binding.alias !== join21(binding.home, `.${binding.agent}`))
+    if (!["claude", "codex"].includes(binding.agent) || binding.alias !== join23(binding.home, `.${binding.agent}`))
       throw new Error("Invalid agent root alias binding");
     const current = readRootAlias(binding.home, binding.agent);
     if (JSON.stringify(current) !== JSON.stringify(binding))
@@ -16088,7 +16263,7 @@ function readNativeBytes(path, maximum = 64 * 1024 * 1024) {
   }
 }
 function treeHash(root) {
-  const hash2 = createHash17("sha256");
+  const hash2 = createHash18("sha256");
   let bytes = 0, files = 0;
   function visit2(path) {
     const stat = lstatSync19(path);
@@ -16098,7 +16273,7 @@ function treeHash(root) {
     if (stat.isDirectory()) {
       hash2.update(`d\x00${rel}\x00`);
       for (const name of readdirSync8(path).sort())
-        visit2(join21(path, name));
+        visit2(join23(path, name));
       return;
     }
     if (!stat.isFile())
@@ -16126,7 +16301,7 @@ function selectNativeMigrationTargets(inventory, manifest) {
     if (!existsSync9(projectRoot) || !lstatSync19(projectRoot).isDirectory())
       throw new Error(`Native migration target project root must be an existing absolute directory: ${target.projectRoot}`);
     assertSafePath(projectRoot);
-    if (isAbsolute13(target.path) || target.path.includes("\\") || target.path.includes("\x00") || !normalized || normalized === ".." || normalized.startsWith(`..${sep6}`) || normalized !== target.path || !/^[0-9a-f]{64}$/.test(target.treeSha256))
+    if (isAbsolute13(target.path) || target.path.includes("\\") || target.path.includes("\x00") || !normalized || normalized === ".." || normalized.startsWith(`..${sep7}`) || normalized !== target.path || !/^[0-9a-f]{64}$/.test(target.treeSha256))
       throw new Error(`Invalid native migration target: ${target.path}`);
     const identity5 = `${target.agent}\x00${canonicalSystemPath(projectRoot)}\x00${normalized}`;
     if (identities.has(identity5))
@@ -16162,7 +16337,7 @@ function projectAncestorDirectories(projects) {
 }
 function isCodexSkillDiscoveryInput(path) {
   for (let cursor = canonicalSystemPath(path);cursor !== dirname14(cursor); cursor = dirname14(cursor)) {
-    if (ROOTS.some(([agent, root]) => agent === "codex" && cursor.endsWith(join21(sep6, root))))
+    if (ROOTS.some(([agent, root]) => agent === "codex" && cursor.endsWith(join23(sep7, root))))
       return true;
   }
   return false;
@@ -16179,18 +16354,18 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
   const selectedAgents = options.agents ? new Set(options.agents) : undefined;
   const includesAgent = (agent) => !selectedAgents || selectedAgents.has(agent);
   const rootDefinitions = selectedAgents ? ROOTS.filter(([agent, path]) => selectedAgents.has(agent) || selectedAgents.has("hermes") && agent === "codex" && path === ".agents/skills") : ROOTS;
-  const roots = rootDefinitions.map(([agent, path]) => [agent, canonicalAgentPath(join21(home, path), aliases)]);
-  const bridgePaths = Object.entries(AGENT_ADAPTERS).filter(([agent]) => agent !== "sumi" || includesAgent("sumi")).map(([agent, adapter]) => canonicalAgentPath(join21(agent === "sumi" ? sumiBridgeRoot(home) : join21(home, adapter.root), CLI_BRIDGE_NAME), aliases));
+  const roots = rootDefinitions.map(([agent, path]) => [agent, canonicalAgentPath(join23(home, path), aliases)]);
+  const bridgePaths = Object.entries(AGENT_ADAPTERS).filter(([agent]) => agent !== "sumi" || includesAgent("sumi")).map(([agent, adapter]) => canonicalAgentPath(join23(agent === "sumi" ? sumiBridgeRoot(home) : join23(home, adapter.root), CLI_BRIDGE_NAME), aliases));
   for (const project of projectAncestorDirectories([...options.projectDirs ?? [], ...options.projectDir ? [options.projectDir] : []])) {
     for (const [agent, path] of rootDefinitions)
-      roots.push([agent, canonicalAgentPath(join21(project, path), aliases)]);
+      roots.push([agent, canonicalAgentPath(join23(project, path), aliases)]);
     if (selectedAgents?.has("sumi"))
       for (const directory of [".claude", ".agents"])
         for (const name of ["skill", "skills"])
-          roots.push(["sumi", canonicalAgentPath(join21(project, directory, name), aliases)]);
+          roots.push(["sumi", canonicalAgentPath(join23(project, directory, name), aliases)]);
   }
   const installationInputs = options.codexInstallationInputRoots ?? [];
-  if (installationInputs.some((input) => resolve13(input) !== input || realpathSync9(input) !== input || roots.some(([agent, path]) => agent === "codex" && (path === input || path.startsWith(input + sep6) || input.startsWith(path + sep6)))))
+  if (installationInputs.some((input) => resolve13(input) !== input || realpathSync9(input) !== input || roots.some(([agent, path]) => agent === "codex" && (path === input || path.startsWith(input + sep7) || input.startsWith(path + sep7)))))
     throw new Error("Native installation input overlaps an unconditional skill-loading root");
   const entries = [], seen = new Set;
   const cacheScans = new Map, maxAliasProofEntries = 1e4;
@@ -16216,7 +16391,7 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     if (!scan?.complete || scan.entries > maxAliasProofEntries)
       return false;
     if (scan.hasSkills) {
-      const targetSkills = entries.filter((entry) => entry.agent === agent && entry.vendor && (entry.path === target || entry.path.startsWith(target + sep6)));
+      const targetSkills = entries.filter((entry) => entry.agent === agent && entry.vendor && (entry.path === target || entry.path.startsWith(target + sep7)));
       if (path === reviewedCacheAlias && targetSkills.length > 0)
         reviewedCacheAliasFound = true;
       if (agent === "codex" && targetSkills.length > 0 && targetSkills.every((entry) => disabledVendorPaths.has(entry.path) || options.disabledVendorSkill?.(entry) === true))
@@ -16231,7 +16406,7 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
       admit(path);
     const scan = { complete: true, hasSkills: false, entries: 1 };
     assertSafePath(path);
-    if (configuredRoot && agent === "codex" && installationInputs.some((root) => path === root || path.startsWith(`${root}${sep6}`)))
+    if (configuredRoot && agent === "codex" && installationInputs.some((root) => path === root || path.startsWith(`${root}${sep7}`)))
       return scan;
     if (!existsSync9(path))
       return scan;
@@ -16243,21 +16418,21 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     }
     if (!stat.isDirectory())
       throw new Error(`Unsupported native discovery entry: ${path}`);
-    if (existsSync9(join21(path, "SKILL.md"))) {
+    if (existsSync9(join23(path, "SKILL.md"))) {
       scan.hasSkills = true;
       if (seen.has(path))
         return scan;
       seen.add(path);
       let managed = false;
-      const marker = join21(path, ".hasna-skills.json");
+      const marker = join23(path, ".hasna-skills.json");
       if (existsSync9(marker)) {
         try {
           managed = JSON.parse(readFileSync14(marker, "utf8")).managedBy === "@hasna/skills";
         } catch {}
       }
       const bridge = (!vendor || agent === "sumi") && isOwnedCliBridge(path, bridgePaths);
-      const rootAlias = aliases.find((item) => path === item.target || path.startsWith(item.target + sep6));
-      entries.push({ agent, path, hash: treeHash(path), managed, vendor, ...agent === "codex" || isCodexSkillDiscoveryInput(path) ? { codexHome: process.env.CODEX_HOME ?? join21(home, ".codex") } : {}, ...agent === "codex" && path.startsWith(canonicalAgentPath(join21(home, ".codex", "skills", ".system"), aliases) + sep6) ? { system: true } : {}, ...bridge ? { bridge: true, bridgeHome: resolve13(home) } : {}, ...rootAlias ? { rootAlias } : {} });
+      const rootAlias = aliases.find((item) => path === item.target || path.startsWith(item.target + sep7));
+      entries.push({ agent, path, hash: treeHash(path), managed, vendor, ...agent === "codex" || isCodexSkillDiscoveryInput(path) ? { codexHome: process.env.CODEX_HOME ?? join23(home, ".codex") } : {}, ...agent === "codex" && path.startsWith(canonicalAgentPath(join23(home, ".codex", "skills", ".system"), aliases) + sep7) ? { system: true } : {}, ...bridge ? { bridge: true, bridgeHome: resolve13(home) } : {}, ...rootAlias ? { rootAlias } : {} });
       return scan;
     }
     if (depth > (agent === "sumi" ? 32 : vendor ? 32 : 3))
@@ -16266,7 +16441,7 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     try {
       let child;
       while ((child = directory.readSync()) !== null) {
-        admit(join21(path, child.name));
+        admit(join23(path, child.name));
         children.push(child);
       }
     } finally {
@@ -16278,12 +16453,12 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     for (const { name } of children) {
       if (name === "node_modules")
         continue;
-      if (name.startsWith(".") && name !== ".system" && agent !== "hermes" && agent !== "sumi" && !(options.guardHermes && `${path}${sep6}`.includes(`${sep6}.agents${sep6}skills${sep6}`)))
+      if (name.startsWith(".") && name !== ".system" && agent !== "hermes" && agent !== "sumi" && !(options.guardHermes && `${path}${sep7}`.includes(`${sep7}.agents${sep7}skills${sep7}`)))
         continue;
       const isVendor = vendor || name === ".system";
       if (isVendor && !options.includeVendor)
         continue;
-      const child = join21(path, name);
+      const child = join23(path, name);
       if (isVendor && lstatSync19(child, { throwIfNoEntry: false })?.isSymbolicLink()) {
         const target = statSync9(child, { throwIfNoEntry: false });
         if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(agent, child, path)) {
@@ -16301,7 +16476,7 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     return scan;
   }
   function scanRoot(agent, path, vendor = false, pluginCache = false, configuredRoot = false) {
-    if (agent === "hermes" || options.guardHermes && `${path}${sep6}`.includes(`${sep6}.agents${sep6}skills${sep6}`))
+    if (agent === "hermes" || options.guardHermes && `${path}${sep7}`.includes(`${sep7}.agents${sep7}skills${sep7}`))
       assertNoHermesLegacyShadow(path);
     if (!visit2(agent, path, vendor, 0, pluginCache, false, configuredRoot).complete)
       throw new Error(`Native skill discovery limit exceeded; review this root before continuing: ${path}`);
@@ -16310,11 +16485,11 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     scanRoot(agent, path);
   if (options.includeVendor) {
     for (const agent of ["codex", "claude"].filter(includesAgent))
-      scanRoot(agent, canonicalAgentPath(join21(home, `.${agent}`, "plugins", "cache"), aliases), true, true);
+      scanRoot(agent, canonicalAgentPath(join23(home, `.${agent}`, "plugins", "cache"), aliases), true, true);
     if (includesAgent("claude"))
-      scanRoot("claude", canonicalAgentPath(join21(home, ".claude", "plugins", "synced"), aliases), true);
+      scanRoot("claude", canonicalAgentPath(join23(home, ".claude", "plugins", "synced"), aliases), true);
     if (includesAgent("gemini"))
-      scanRoot("gemini", join21(home, ".gemini", "extensions"), true);
+      scanRoot("gemini", join23(home, ".gemini", "extensions"), true);
   }
   const configured = options.configured ? INTEGRATION_AGENTS.filter(includesAgent).flatMap((agent) => resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, canonical: (path) => canonicalAgentPath(path, aliases) }).roots.map((path) => ({ agent, path }))) : [];
   for (const root of [...options.agentRoots ?? [], ...configured])
@@ -16427,14 +16602,14 @@ function configureHooks(config, agent, command, profileId, nativeReady) {
 function disableCodexSkills(text2, skills, aliases, bridgePath) {
   const bundled = disableCodexBundledSkills(text2);
   let result = normalizeCodexInlinePathConfig(bundled);
-  const bridgeSelector = (entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME || typeof entry.path === "string" && [resolve13(bridgePath), resolve13(join21(bridgePath, "SKILL.md"))].includes(canonicalAgentPath(entry.path, aliases));
+  const bridgeSelector = (entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME || typeof entry.path === "string" && [resolve13(bridgePath), resolve13(join23(bridgePath, "SKILL.md"))].includes(canonicalAgentPath(entry.path, aliases));
   const previousConfig = Bun.TOML.parse(bundled).skills?.config;
   if (previousConfig !== undefined && (!Array.isArray(previousConfig) || previousConfig.some((entry) => !entry || typeof entry !== "object" || entry.path !== undefined && entry.name !== undefined)))
     throw new Error("Codex skill controls require one path or name selector per [[skills.config]] entry; review ambiguous entries before running skills hook install");
   const bridgeNeedsRepair = previousConfig?.some((entry) => entry.enabled === false && bridgeSelector(entry));
   const selections = [...skills.filter((entry) => entry.agent === "codex" && !entry.bridge).map((skill) => ({ path: skill.path, enabled: false })), { path: bridgePath, enabled: true }];
   for (const skill of selections) {
-    const path = join21(skill.path, "SKILL.md");
+    const path = join23(skill.path, "SKILL.md");
     let found = false;
     result = result.replace(CODEX_SKILL_CONFIG_SECTIONS, (section) => {
       const parsed = Bun.TOML.parse(section);
@@ -16461,7 +16636,7 @@ enabled = false
 }
 function assertCodexInstallationInputs(home, projectDirs, inputs) {
   const nativeRoots = [home, ...projectAncestorDirectories(projectDirs)].flatMap((directory) => ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => resolve13(directory, path)));
-  if (inputs.some((input) => nativeRoots.some((root) => root === input || root.startsWith(input + sep6) || input.startsWith(root + sep6))))
+  if (inputs.some((input) => nativeRoots.some((root) => root === input || root.startsWith(input + sep7) || input.startsWith(root + sep7))))
     throw new Error("Native installation input overlaps an unconditional skill-loading root");
 }
 function planAgentIntegration(options) {
@@ -16469,7 +16644,7 @@ function planAgentIntegration(options) {
     throw new Error("Explicit Codex skill denials require a fresh native catalog and discovery review");
   const home = options.home ?? homedir2(), dataDir2 = options.dataDir ?? getDataDirReadOnly();
   const aliases = rootAliases(home, options.allowRootAliases);
-  const policyPath = join21(dataDir2, "agent-policy.json");
+  const policyPath = join23(dataDir2, "agent-policy.json");
   assertSafePath(policyPath);
   const priorSnapshot = readManagedSkillPolicySnapshot(dataDir2), previousPolicy = priorSnapshot?.text ?? null, policy = priorSnapshot?.value ?? {};
   if (policy.bridge !== undefined && (!policy.bridge || typeof policy.bridge !== "object" || Array.isArray(policy.bridge)))
@@ -16501,28 +16676,28 @@ function planAgentIntegration(options) {
     }
     return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases) });
   });
-  const codexConfigBefore = options.agents.includes("codex") ? readOptional(canonicalAgentPath(join21(home, ".codex", "config.toml"), aliases)) : null;
+  const codexConfigBefore = options.agents.includes("codex") ? readOptional(canonicalAgentPath(join23(home, ".codex", "config.toml"), aliases)) : null;
   const codexConfig = Bun.TOML.parse(codexConfigBefore ?? "");
   const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases, reviewedCacheAlias: options.reviewedCacheAlias, disabledVendorPaths: disabledCodexSkillPaths(codexConfig, aliases) });
-  const codexPathConfig = options.agents.includes("codex") ? disableCodexSkills(codexConfigBefore ?? "", nativeSkills, aliases, canonicalAgentPath(join21(home, ".codex/skills", CLI_BRIDGE_NAME), aliases)) : undefined;
+  const codexPathConfig = options.agents.includes("codex") ? disableCodexSkills(codexConfigBefore ?? "", nativeSkills, aliases, canonicalAgentPath(join23(home, ".codex/skills", CLI_BRIDGE_NAME), aliases)) : undefined;
   const plannedCodexRules = codexPathConfig === undefined ? undefined : Bun.TOML.parse(codexPathConfig).skills?.config ?? [];
   const observedNativeSources = [];
-  const codexPluginControls = options.codexNativeCatalog ? reviewCodexPluginControls(options.codexNativeCatalog, nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor).map((entry) => join21(entry.path, "SKILL.md")), canonicalAgentPath(join21(home, ".codex/plugins/cache"), aliases), resolve13(options.projectDir ?? home), (path) => {
+  const codexPluginControls = options.codexNativeCatalog ? reviewCodexPluginControls(options.codexNativeCatalog, nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor).map((entry) => join23(entry.path, "SKILL.md")), canonicalAgentPath(join23(home, ".codex/plugins/cache"), aliases), resolve13(options.projectDir ?? home), (path) => {
     const bytes = readNativeBytes(path, 1024 * 1024);
     observedNativeSources.push({ path, sha256: sha3(bytes) });
     return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
   }, codexConfig.skills?.config ?? [], codexConfig.plugins, plannedCodexRules, options.codexSkillDenials) : { skills: policy.bridge?.codexPluginSkills ?? [], inactivePlugins: policy.bridge?.codexInactivePlugins ?? [], sourceInputs: policy.bridge?.discovery?.codex?.codexInstallationInputs?.plugins ?? [] };
-  const cache = canonicalAgentPath(join21(home, ".codex/plugins/cache"), aliases);
+  const cache = canonicalAgentPath(join23(home, ".codex/plugins/cache"), aliases);
   const retired = (policy.bridge?.codexPluginSkills ?? []).filter((control) => absentDisabledCodexPluginParent(cache, control.pluginParent, policy.bridge.codexPluginSkills, codexConfig.skills?.config ?? []));
   for (const denial of options.codexSkillDenials ?? []) {
     const control = codexPluginControls.skills.find((item) => item.name === denial.name);
     if (!control)
       throw new Error("Explicit Codex denial did not resolve a reviewed identity");
-    const root = join21(control.pluginParent, relative6(control.pluginParent, denial.path).split(sep6)[0]);
+    const root = join23(control.pluginParent, relative6(control.pluginParent, denial.path).split(sep7)[0]);
     const review = options.discoveryInputs.agents.find((item) => item.agent === "codex");
-    for (const path of [join21(root, ".app.json"), join21(root, ".mcp.json"), join21(root, "hooks")])
+    for (const path of [join23(root, ".app.json"), join23(root, ".mcp.json"), join23(root, "hooks")])
       observedNativeSources.push({ path, sha256: nativeSourceDigest(path) });
-    const files = [join21(root, ".codex-plugin/plugin.json"), ...control.appSha256 ? [join21(root, ".app.json")] : [], ...control.mcpSha256 ? [join21(root, ".mcp.json")] : []];
+    const files = [join23(root, ".codex-plugin/plugin.json"), ...control.appSha256 ? [join23(root, ".app.json")] : [], ...control.mcpSha256 ? [join23(root, ".mcp.json")] : []];
     for (const path of files)
       if (!review?.sources.some((source) => source.path === path && source.format === undefined && source.fields === undefined && [undefined, "bytes"].includes(source.hashMode) && source.sha256 === sha3(readNativeBytes(path, 1024 * 1024))))
         throw new Error("Explicit Codex denial requires current full manifest and capability discovery witnesses");
@@ -16531,12 +16706,12 @@ function planAgentIntegration(options) {
   for (const discovery of discoveries)
     if (discovery.agent === "codex" && discovery.method === "reviewed")
       discovery.codexDisabledPluginSkills = codexPluginSkills;
-  if (options.agents.includes("codex") && !options.codexNativeCatalog && codexPluginSkills.length && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join21(home, ".codex/plugins/cache"), aliases), codexPluginSkills, (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? [])) {
+  if (options.agents.includes("codex") && !options.codexNativeCatalog && codexPluginSkills.length && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join23(home, ".codex/plugins/cache"), aliases), codexPluginSkills, (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? [])) {
     throw new Error("NATIVE_SKILL_DRIFT: reviewed native plugin capability controls changed; provide a fresh native catalog and discovery review");
   }
   const codexInactivePlugins = codexPluginControls.inactivePlugins;
   const codexDiscovery = discoveries.find((binding) => binding.agent === "codex");
-  const codexPluginSourceInputs = codexPluginControls.sourceInputs.filter((input) => codexDiscovery?.method === "reviewed" && codexDiscovery.roots.some((root) => root === input.sourceRoot || root.startsWith(input.sourceRoot + sep6) || input.sourceRoot.startsWith(root + sep6)) && codexDiscovery.sources.some((source) => source.path === join21(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined));
+  const codexPluginSourceInputs = codexPluginControls.sourceInputs.filter((input) => codexDiscovery?.method === "reviewed" && codexDiscovery.roots.some((root) => root === input.sourceRoot || root.startsWith(input.sourceRoot + sep7) || input.sourceRoot.startsWith(root + sep7)) && codexDiscovery.sources.some((source) => source.path === join23(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined));
   assertCodexInstallationInputs(home, [options.projectDir ?? home], codexPluginSourceInputs.map((input) => input.sourceRoot));
   const changes = [];
   let observedSettings;
@@ -16545,19 +16720,19 @@ function planAgentIntegration(options) {
       throw new Error(`Unsupported agent: ${agent}`);
     const { command, profileId: profileId2 } = bindings.get(agent);
     const adapter = AGENT_ADAPTERS[agent];
-    const bridgePath = canonicalAgentPath(join21(agent === "sumi" ? sumiBridgeRoot(home) : join21(home, adapter.root), CLI_BRIDGE_NAME), aliases);
+    const bridgePath = canonicalAgentPath(join23(agent === "sumi" ? sumiBridgeRoot(home) : join23(home, adapter.root), CLI_BRIDGE_NAME), aliases);
     assertSafePath(bridgePath);
     if (existsSync9(bridgePath) && !isOwnedCliBridge(bridgePath, [bridgePath]))
       throw new Error(`Refusing to overwrite an unrecognized or modified Skills bridge: ${bridgePath}`);
     for (const [name, after2] of Object.entries(CLI_BRIDGE_FILES)) {
-      const path2 = join21(bridgePath, name), before2 = readOptional(path2);
+      const path2 = join23(bridgePath, name), before2 = readOptional(path2);
       if (before2 !== after2)
         changes.push({ path: path2, before: before2, after: after2 });
     }
-    const path = canonicalAgentPath(agent === "sumi" ? sumiConfigPath(home) : join21(home, adapter.config), aliases);
+    const path = canonicalAgentPath(agent === "sumi" ? sumiConfigPath(home) : join23(home, adapter.config), aliases);
     const before = readOptional(path);
     if (agent === "hermes") {
-      const supervisorPath = join21(dataDir2, "agent-hooks", "hermes.js"), supervisorBefore = readOptional(supervisorPath), supervisorAfter = renderHermesSupervisor(command, profileId2);
+      const supervisorPath = join23(dataDir2, "agent-hooks", "hermes.js"), supervisorBefore = readOptional(supervisorPath), supervisorAfter = renderHermesSupervisor(command, profileId2);
       const priorCommand = policy.bridge?.commands?.hermes, priorProfile = policy.bridge?.profiles?.hermes ?? policy.profileId;
       const previous = policy.bridge?.supervisors?.hermes;
       if (supervisorBefore !== null && supervisorBefore !== supervisorAfter && !(previous?.path === supervisorPath && typeof priorCommand === "string" && typeof priorProfile === "string" && supervisorBefore === renderHermesSupervisor(priorCommand, priorProfile)))
@@ -16568,7 +16743,7 @@ function planAgentIntegration(options) {
       const after2 = configureHermesHooks(before, supervisor, previous);
       if (before !== after2)
         changes.push({ path, before, after: after2 });
-      const optOut = join21(home, ".hermes", HERMES_OPT_OUT), optOutBefore = readOptional(optOut);
+      const optOut = join23(home, ".hermes", HERMES_OPT_OUT), optOutBefore = readOptional(optOut);
       if (optOutBefore === null)
         changes.push({ path: optOut, before: null, after: `Managed by @hasna/skills: bundled native skill reseeding is disabled.
 ` });
@@ -16579,7 +16754,7 @@ function planAgentIntegration(options) {
       if (config.permissions !== undefined && (!Array.isArray(config.permissions) || config.permissions.some((rule) => !rule || typeof rule.action !== "string" || typeof rule.resource !== "string" || !["allow", "deny", "ask"].includes(rule.effect))))
         throw new Error("Expected Sumi native permission rules");
       config.permissions = [...(config.permissions ?? []).filter((rule) => rule.action !== "skill"), ...SUMI_SKILL_PERMISSIONS];
-      const pluginPath = join21(sumiConfigDirectory(home), "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
+      const pluginPath = join23(sumiConfigDirectory(home), "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
       const pluginAfter = renderSumiPlugin(command, profileId2);
       const priorCommand = policy.bridge?.commands?.sumi, priorProfile = policy.bridge?.profiles?.sumi ?? policy.profileId;
       if (pluginBefore !== null && pluginBefore !== pluginAfter && !(typeof priorCommand === "string" && typeof priorProfile === "string" && isManagedSumiPlugin(pluginBefore, priorCommand, priorProfile)))
@@ -16591,7 +16766,7 @@ function planAgentIntegration(options) {
       if (!permission || typeof permission !== "object" || Array.isArray(permission))
         throw new Error("Expected OpenCode permission object");
       config.permission = { ...permission, skill: { "*": "deny", [CLI_BRIDGE_NAME]: "allow" } };
-      const pluginPath = join21(home, ".config", "opencode", "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
+      const pluginPath = join23(home, ".config", "opencode", "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
       const pluginAfter = renderOpenCodePlugin(command, profileId2);
       const priorCommand = policy.bridge?.commands?.opencode;
       const ownedPrevious = typeof priorCommand === "string" && typeof policy.profileId === "string" && pluginBefore === renderOpenCodePlugin(priorCommand, policy.bridge?.profiles?.opencode ?? policy.profileId);
@@ -16608,7 +16783,7 @@ function planAgentIntegration(options) {
     if (before !== after)
       changes.push({ path, before, after });
     if (agent === "codex") {
-      const configPath = canonicalAgentPath(join21(home, ".codex", "config.toml"), aliases), previous = readOptional(configPath);
+      const configPath = canonicalAgentPath(join23(home, ".codex", "config.toml"), aliases), previous = readOptional(configPath);
       if (previous !== codexConfigBefore)
         throw new Error(`Configuration changed during planning: ${configPath}`);
       const next = disableReviewedCodexPluginNames(codexPathConfig, codexPluginSkills);
@@ -16620,16 +16795,16 @@ function planAgentIntegration(options) {
       }
     }
   }
-  const codexPluginSkillReview = options.codexNativeCatalog ? { version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, catalogSha256: sha3(JSON.stringify({ version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, skills: projectCodexNativeSkillCatalog({ data: [{ cwd: options.codexNativeCatalog.cwd, errors: [], skills: options.codexNativeCatalog.skills }] }, options.codexNativeCatalog.cwd), ...options.codexNativeCatalog.plugins === undefined ? {} : { plugins: projectCodexInstalledPluginEntries(options.codexNativeCatalog.plugins) } })), configSha256: changes.find((change) => change.path === canonicalAgentPath(join21(home, ".codex/config.toml"), aliases))?.before === null ? null : sha3(readOptional(canonicalAgentPath(join21(home, ".codex/config.toml"), aliases)) ?? "") } : policy.bridge?.codexPluginSkillReview;
+  const codexPluginSkillReview = options.codexNativeCatalog ? { version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, catalogSha256: sha3(JSON.stringify({ version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, skills: projectCodexNativeSkillCatalog({ data: [{ cwd: options.codexNativeCatalog.cwd, errors: [], skills: options.codexNativeCatalog.skills }] }, options.codexNativeCatalog.cwd), ...options.codexNativeCatalog.plugins === undefined ? {} : { plugins: projectCodexInstalledPluginEntries(options.codexNativeCatalog.plugins) } })), configSha256: changes.find((change) => change.path === canonicalAgentPath(join23(home, ".codex/config.toml"), aliases))?.before === null ? null : sha3(readOptional(canonicalAgentPath(join23(home, ".codex/config.toml"), aliases)) ?? "") } : policy.bridge?.codexPluginSkillReview;
   const discoveryAfter = discoveries.map((binding) => {
     const rebound = rebindAgentDiscovery(binding, new Map(changes.map((change) => [change.path, change.after])));
     if (binding.agent !== "codex")
       return rebound;
     const { codexInstallationInputs: previousInputs, ...current } = rebound;
     const inputs = codexPluginSourceInputs.map((input) => input.sourceRoot);
-    const directories = options.codexNativeCatalog || !previousInputs ? captureDiscoveryDirectories((binding.directories ?? []).filter((directory) => inputs.some((root) => root.startsWith(directory.path + sep6))).map((directory) => directory.path), inputs) : previousInputs.directories;
+    const directories = options.codexNativeCatalog || !previousInputs ? captureDiscoveryDirectories((binding.directories ?? []).filter((directory) => inputs.some((root) => root.startsWith(directory.path + sep7))).map((directory) => directory.path), inputs) : previousInputs.directories;
     const installed = codexPluginSourceInputs.length ? { ...current, codexInstallationInputs: { version: "codex-cli 0.160.0", catalogSha256: codexPluginSkillReview.catalogSha256, plugins: codexPluginSourceInputs, ...directories?.length ? { directories } : {} } } : current;
-    return captureRetiredCodexDiscovery(installed, codexPluginSkills, Bun.TOML.parse(changes.find((change) => change.path === canonicalAgentPath(join21(home, ".codex/config.toml"), aliases))?.after ?? codexConfigBefore ?? "").skills?.config ?? []);
+    return captureRetiredCodexDiscovery(installed, codexPluginSkills, Bun.TOML.parse(changes.find((change) => change.path === canonicalAgentPath(join23(home, ".codex/config.toml"), aliases))?.after ?? codexConfigBefore ?? "").skills?.config ?? []);
   });
   const nextPolicy = { ...policy, version: 1, loading: "cli", profileId, bridge: {
     ...policy.bridge,
@@ -16638,10 +16813,10 @@ function planAgentIntegration(options) {
     agents: [...new Set([...priorAgents, ...options.agents])].sort(),
     home: resolve13(home),
     includeVendor: true,
-    ...options.agents.includes("hermes") ? { supervisors: { ...policy.bridge?.supervisors, hermes: { path: join21(dataDir2, "agent-hooks", "hermes.js"), runtime: process.execPath, sha256: sha3(renderHermesSupervisor(bindings.get("hermes").command, bindings.get("hermes").profileId)) } } } : {},
+    ...options.agents.includes("hermes") ? { supervisors: { ...policy.bridge?.supervisors, hermes: { path: join23(dataDir2, "agent-hooks", "hermes.js"), runtime: process.execPath, sha256: sha3(renderHermesSupervisor(bindings.get("hermes").command, bindings.get("hermes").profileId)) } } } : {},
     commands: { ...policy.bridge?.commands, ...Object.fromEntries([...bindings].map(([agent, binding]) => [agent, binding.command])) },
     profiles: Object.fromEntries([...new Set([...priorAgents, ...options.agents])].sort().map((agent) => [agent, bindings.get(agent)?.profileId ?? policy.bridge?.profiles?.[agent] ?? policy.profileId])),
-    disabledBuiltins: options.agents.includes("codex") ? nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor && entry.path.startsWith(canonicalAgentPath(join21(home, ".codex", "skills", ".system"), aliases) + sep6)).map((entry) => ({ path: entry.path, hash: entry.hash })) : policy.bridge?.disabledBuiltins ?? [],
+    disabledBuiltins: options.agents.includes("codex") ? nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor && entry.path.startsWith(canonicalAgentPath(join23(home, ".codex", "skills", ".system"), aliases) + sep7)).map((entry) => ({ path: entry.path, hash: entry.hash })) : policy.bridge?.disabledBuiltins ?? [],
     rootAliases: aliases,
     ...options.codexNativeCatalog || codexPluginSkills.length || codexInactivePlugins.length || codexPluginSourceInputs.length ? { codexPluginSkills, codexInactivePlugins, codexPluginSkillReview } : {},
     discovery: { ...policy.bridge?.discovery, ...Object.fromEntries(discoveryAfter.map((binding) => [binding.agent, binding])) }
@@ -16693,10 +16868,10 @@ function projectedHookExecutable(command, expectedResolved) {
     if (expectedResolved !== undefined && resolved !== expectedResolved)
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     const resolvedParentIdentity = parents2(resolved);
-    const manifest = snapshot(join21(dirname14(dirname14(resolved)), "package.json"), false, { readOnlyPackage: true });
+    const manifest = snapshot(join23(dirname14(dirname14(resolved)), "package.json"), false, { readOnlyPackage: true });
     projectedHookAcl(manifest.file, manifest.stat);
     const pkg = JSON.parse(manifest.text);
-    if (pkg.name !== "@hasna/skills" || !/^\d+\.\d+\.\d+$/.test(pkg.version) || pkg.bin?.skills !== "bin/index.js" || resolved !== join21(dirname14(manifest.file), "bin/index.js"))
+    if (pkg.name !== "@hasna/skills" || !/^\d+\.\d+\.\d+$/.test(pkg.version) || pkg.bin?.skills !== "bin/index.js" || resolved !== join23(dirname14(manifest.file), "bin/index.js"))
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     const cli = snapshot(resolved, false, { readOnlyPackage: true });
     projectedHookAcl(cli.file, cli.stat);
@@ -16733,7 +16908,7 @@ function planClaudeManagedHookProjection(options) {
     hookProjectionRefusal("TARGET_INVALID");
   }
   const home = resolve13(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
-  const policyPath = join21(dataDir2, "agent-policy.json");
+  const policyPath = join23(dataDir2, "agent-policy.json");
   let policyBytes, settingsBytes, settingsPath, command, profile;
   try {
     policyBytes = readNativeBytes(policyPath, 1024 * 1024);
@@ -16741,7 +16916,7 @@ function planClaudeManagedHookProjection(options) {
     if (!snapshot2 || snapshot2.text !== policyBytes.toString("utf8"))
       hookProjectionRefusal("SOURCE_UNVERIFIED");
     const binding = snapshot2.value.bridge;
-    settingsPath = canonicalAgentPath(join21(home, AGENT_ADAPTERS.claude.config), binding?.rootAliases ?? []);
+    settingsPath = canonicalAgentPath(join23(home, AGENT_ADAPTERS.claude.config), binding?.rootAliases ?? []);
     settingsBytes = readNativeBytes(settingsPath, 1024 * 1024);
     command = binding?.commands?.claude;
     profile = binding?.profiles?.claude;
@@ -16824,12 +16999,12 @@ function planClaudePreToolUseHookUpdate(options) {
   return planClaudeHookEventsUpdate({ ...options, events: ["PreToolUse"] });
 }
 function claudeSettingsConsumers(home, path, discoveries, aliases) {
-  const canonical5 = (value) => canonicalAgentPath(value, aliases);
+  const canonical6 = (value) => canonicalAgentPath(value, aliases);
   const containsSettings = (root) => {
-    const distance = relative6(canonical5(root), path);
-    return distance === "" || distance !== ".." && !distance.startsWith(`..${sep6}`) && !isAbsolute13(distance);
+    const distance = relative6(canonical6(root), path);
+    return distance === "" || distance !== ".." && !distance.startsWith(`..${sep7}`) && !isAbsolute13(distance);
   };
-  return discoveries.filter((binding) => binding.agent === "claude" || binding.agent === "opencode" || canonical5(join21(home, AGENT_ADAPTERS[binding.agent].config)) === path || binding.sources.some((source) => canonical5(source.path) === path) || binding.roots.some(containsSettings) || binding.directories?.some((directory) => containsSettings(directory.path))).map((binding) => binding.agent);
+  return discoveries.filter((binding) => binding.agent === "claude" || binding.agent === "opencode" || canonical6(join23(home, AGENT_ADAPTERS[binding.agent].config)) === path || binding.sources.some((source) => canonical6(source.path) === path) || binding.roots.some(containsSettings) || binding.directories?.some((directory) => containsSettings(directory.path))).map((binding) => binding.agent);
 }
 function verifyCoordinatedDiscovery(binding, home, aliases) {
   try {
@@ -16847,7 +17022,7 @@ function verifyCoordinatedDiscovery(binding, home, aliases) {
 }
 function planClaudeHookEventsUpdate(options) {
   const home = resolve13(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
-  const policyPath = join21(dataDir2, "agent-policy.json");
+  const policyPath = join23(dataDir2, "agent-policy.json");
   assertSafePath(policyPath);
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2)
@@ -16858,7 +17033,7 @@ function planClaudeHookEventsUpdate(options) {
   }
   const aliases = bridge.rootAliases ?? [];
   recheckRootAliases(aliases);
-  const path = canonicalAgentPath(join21(home, ".claude", "settings.json"), aliases);
+  const path = canonicalAgentPath(join23(home, ".claude", "settings.json"), aliases);
   assertSafePath(path);
   const before = lstatSync19(path, { throwIfNoEntry: false }) ? new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(readNativeBytes(path, 1024 * 1024)) : null;
   if ((before === null ? "absent" : sha3(before)) !== options.expectedSettingsSha256)
@@ -16936,7 +17111,7 @@ function planAgentSettingsWitnessUpgrade(options) {
   const binding = policy.bridge?.discovery?.[options.agent];
   if (!binding || binding.agent !== options.agent || binding.method !== "reviewed")
     throw new Error("Settings witness upgrade requires an existing reviewed native binding");
-  const configPath = canonicalAgentPath(options.agent === "sumi" ? sumiConfigPath(home) : join21(home, options.agent === "claude" ? ".claude/settings.json" : ".codex/config.toml"), aliases);
+  const configPath = canonicalAgentPath(options.agent === "sumi" ? sumiConfigPath(home) : join23(home, options.agent === "claude" ? ".claude/settings.json" : ".codex/config.toml"), aliases);
   const settings = readOptional(configPath);
   if (settings === null || sha3(settings) !== options.expectedSettingsSha256)
     throw new Error("Native settings preimage changed");
@@ -16987,7 +17162,7 @@ function planAgentSettingsWitnessUpgrade(options) {
   const replacement = { ...binding, sources: rebound };
   verifyAgentDiscovery(replacement);
   const after = serializeManagedSkillPolicy({ ...policy, bridge: { ...policy.bridge, discovery: { ...policy.bridge.discovery, [options.agent]: replacement } } });
-  return { dataDir: dataDir2, profileId: policy.profileId, changes: [{ path: join21(dataDir2, "agent-policy.json"), before: snapshot2.text, after }], nativeSkills: [], observedPolicy: { path: join21(dataDir2, "agent-policy.json"), before: snapshot2.text }, observedSettings: { path: configPath, before: settings }, discoveryBefore: [replacement], discoveryAfter: [replacement], rootAliases: aliases, managedAgentChecks: { home, agents: [options.agent] }, settingsWitnessUpgrade: { agent: options.agent, path: configPath, fromHashMode: previous.hashMode ?? "bytes", fromSha256: previous.sha256, toHashMode: next.hashMode, toSha256: next.sha256, reviewedPreimage: options.reviewedPreimage, currentSettingsSha256: options.expectedSettingsSha256, replacedWitnesses: replaced.map((source) => ({ hashMode: source.hashMode ?? "bytes", sha256: source.sha256 })) } };
+  return { dataDir: dataDir2, profileId: policy.profileId, changes: [{ path: join23(dataDir2, "agent-policy.json"), before: snapshot2.text, after }], nativeSkills: [], observedPolicy: { path: join23(dataDir2, "agent-policy.json"), before: snapshot2.text }, observedSettings: { path: configPath, before: settings }, discoveryBefore: [replacement], discoveryAfter: [replacement], rootAliases: aliases, managedAgentChecks: { home, agents: [options.agent] }, settingsWitnessUpgrade: { agent: options.agent, path: configPath, fromHashMode: previous.hashMode ?? "bytes", fromSha256: previous.sha256, toHashMode: next.hashMode, toSha256: next.sha256, reviewedPreimage: options.reviewedPreimage, currentSettingsSha256: options.expectedSettingsSha256, replacedWitnesses: replaced.map((source) => ({ hashMode: source.hashMode ?? "bytes", sha256: source.sha256 })) } };
 }
 function applyAgentIntegration(plan, options = {}) {
   const roots = plan.changes.flatMap((change) => {
@@ -17003,7 +17178,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
       throw new Error("Native identity source changed after planning");
   if (plan.observedSettings && readOptional(plan.observedSettings.path) !== plan.observedSettings.before)
     throw new Error("Native settings changed after witness planning");
-  const policyPath = join21(plan.dataDir, "agent-policy.json");
+  const policyPath = join23(plan.dataDir, "agent-policy.json");
   assertSafePath(policyPath);
   const currentText = (path) => resolve13(path) === resolve13(policyPath) ? readManagedSkillPolicySnapshot(plan.dataDir)?.text ?? null : readOptional(path);
   readManagedSkillPolicySnapshot(plan.dataDir);
@@ -17038,7 +17213,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
   for (const change of plan.changes)
     if (currentText(change.path) !== change.before)
       throw new Error(`Configuration changed after planning: ${change.path}`);
-  const backupRoot = join21(plan.dataDir, "migration", randomUUID3()), backups = [], written = [], createdDirectories = new Set;
+  const backupRoot = join23(plan.dataDir, "migration", randomUUID3()), backups = [], written = [], createdDirectories = new Set;
   if (!plan.changes.length) {
     assertCurrent();
     recheckRootAliases(aliases);
@@ -17049,7 +17224,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
   chmodSync(backupRoot, 448);
   for (const [index, change] of plan.changes.entries())
     if (change.before !== null) {
-      const backup = join21(backupRoot, `${index}-${sha3(change.path).slice(0, 12)}.backup`);
+      const backup = join23(backupRoot, `${index}-${sha3(change.path).slice(0, 12)}.backup`);
       writeFileSync6(backup, change.before, { mode: 384, flag: "wx" });
       if (readFileSync14(backup, "utf8") !== change.before)
         throw new Error("Native configuration preservation readback failed");
@@ -17082,7 +17257,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
     }
     for (const agent of plan.managedAgentChecks?.agents ?? [])
       assertManagedAgentBridge(agent, { home: plan.managedAgentChecks.home, dataDir: plan.dataDir, projectDir: plan.managedAgentChecks.home });
-    atomicWrite2(join21(backupRoot, "receipt.json"), JSON.stringify({ version: 1, changes: written.map((change) => ({ path: change.path, beforeHash: change.before === null ? null : sha3(change.before), afterHash: sha3(change.after) })), backups, ...aliases.length ? { rootAliases: aliases } : {} }) + `
+    atomicWrite2(join23(backupRoot, "receipt.json"), JSON.stringify({ version: 1, changes: written.map((change) => ({ path: change.path, beforeHash: change.before === null ? null : sha3(change.before), afterHash: sha3(change.after) })), backups, ...aliases.length ? { rootAliases: aliases } : {} }) + `
 `);
   } catch (error) {
     assertCurrent();
@@ -17145,7 +17320,7 @@ function archiveNativeSkills(inventory, options) {
   const selected = options.targetManifest ? selectNativeMigrationTargets(inventory, options.targetManifest) : inventory.filter((entry) => !entry.bridge && !entry.system && (entry.vendor ? options.includeVendor : entry.managed || options.includeUnmanaged));
   const roots = selected.flatMap((entry) => {
     const root = (entry.rootAlias?.agent === "codex" ? entry.rootAlias.alias : undefined) ?? codexCorpusRootForPath(entry.path);
-    const owner = entry.codexHome ?? (entry.agent === "codex" && entry.bridgeHome ? join21(entry.bridgeHome, ".codex") : undefined);
+    const owner = entry.codexHome ?? (entry.agent === "codex" && entry.bridgeHome ? join23(entry.bridgeHome, ".codex") : undefined);
     if (!root && !owner && (entry.agent === "codex" || isCodexSkillDiscoveryInput(entry.path)))
       throw new Error("CODEX_CORPUS_ROOT_UNVERIFIED");
     return [...new Set([root, owner].filter((value) => value !== undefined))];
@@ -17160,7 +17335,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
   recheckRootAliases(aliases);
   for (const entry of inventory.filter((entry2) => entry2.bridge)) {
     const adapter = AGENT_ADAPTERS[entry.agent];
-    const expected = adapter && entry.bridgeHome ? canonicalAgentPath(join21(entry.agent === "sumi" ? sumiBridgeRoot(entry.bridgeHome) : join21(entry.bridgeHome, adapter.root), CLI_BRIDGE_NAME), aliases) : undefined;
+    const expected = adapter && entry.bridgeHome ? canonicalAgentPath(join23(entry.agent === "sumi" ? sumiBridgeRoot(entry.bridgeHome) : join23(entry.bridgeHome, adapter.root), CLI_BRIDGE_NAME), aliases) : undefined;
     if (!expected || treeHash(entry.path) !== entry.hash || !isOwnedCliBridge(entry.path, [expected]))
       throw new Error(`Skills bridge changed after planning: ${entry.path}`);
   }
@@ -17171,11 +17346,11 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
   const targetManifest = options.targetManifest ? { schema: options.targetManifest.schema, digest: options.targetManifest.digest, targetCount: options.targetManifest.targets.length } : undefined;
   if (!selected.length)
     return { entries: [], ...targetManifest ? { targetManifest } : {}, ...aliases.length ? { rootAliases: aliases } : {} };
-  const operationId = randomUUID3(), archiveRoot = join21(options.dataDir ?? getDataDir(), "migration", operationId, "native"), receiptPath = join21(archiveRoot, "receipt.json");
+  const operationId = randomUUID3(), archiveRoot = join23(options.dataDir ?? getDataDir(), "migration", operationId, "native"), receiptPath = join23(archiveRoot, "receipt.json");
   const entries = selected.map((entry, index) => ({
-    source: entry.vendor ? join21(entry.path, "SKILL.md") : entry.path,
-    archive: join21(archiveRoot, `${index}-${sha3(entry.path).slice(0, 12)}`),
-    hash: entry.vendor ? sha3(readNativeBytes(join21(entry.path, "SKILL.md"))) : entry.hash,
+    source: entry.vendor ? join23(entry.path, "SKILL.md") : entry.path,
+    archive: join23(archiveRoot, `${index}-${sha3(entry.path).slice(0, 12)}`),
+    hash: entry.vendor ? sha3(readNativeBytes(join23(entry.path, "SKILL.md"))) : entry.hash,
     ...entry.vendor ? { discoveryOnly: true } : {},
     status: "planned"
   }));
@@ -17282,9 +17457,9 @@ function isInertCodexPluginCacheCopy(entry, cache, allowedHostPaths, read2) {
   try {
     if (entry.agent !== "codex" || !entry.vendor || entry.bridge || entry.system)
       return false;
-    const document2 = join21(entry.path, "SKILL.md");
+    const document2 = join23(entry.path, "SKILL.md");
     const inside = relative6(cache, entry.path);
-    if (!inside || isAbsolute13(inside) || inside.split(sep6).some((segment) => segment === ".."))
+    if (!inside || isAbsolute13(inside) || inside.split(sep7).some((segment) => segment === ".."))
       return false;
     assertSafePath(entry.path);
     if (!lstatSync19(cache).isDirectory() || !lstatSync19(entry.path).isDirectory() || !lstatSync19(document2).isFile())
@@ -17305,7 +17480,7 @@ function assertManagedAgentBridge(agent, options = {}) {
 }
 function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscovery) {
   const home = resolve13(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
-  assertSafePath(join21(dataDir2, "agent-policy.json"));
+  assertSafePath(join23(dataDir2, "agent-policy.json"));
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2)
     throw new Error("NATIVE_SKILL_DRIFT: install the Skills bridge with skills hook install");
@@ -17316,14 +17491,14 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
   if (!Array.isArray(aliases))
     throw new Error("NATIVE_SKILL_DRIFT: invalid root alias binding");
   recheckRootAliases(aliases);
-  const expected = canonicalAgentPath(join21(agent === "sumi" ? sumiBridgeRoot(home) : join21(home, AGENT_ADAPTERS[agent].root), CLI_BRIDGE_NAME), aliases);
+  const expected = canonicalAgentPath(join23(agent === "sumi" ? sumiBridgeRoot(home) : join23(home, AGENT_ADAPTERS[agent].root), CLI_BRIDGE_NAME), aliases);
   if (!isOwnedCliBridge(expected, [expected]))
     throw new Error("NATIVE_SKILL_DRIFT: the native Skills bridge is missing or modified; repair it before continuing");
   const roots = projectAncestorDirectories([options.projectDir ?? process.cwd(), ...options.projectDirs ?? [], ...agent === "hermes" && process.env.TERMINAL_CWD ? [process.cwd()] : []]);
-  const visible = (entry) => entry.agent === agent || ["codex", "gemini", "opencode", "hermes", "sumi"].includes(agent) && entry.path.includes(`${sep6}.agents${sep6}skills${sep6}`) || ["opencode", "sumi"].includes(agent) && entry.agent === "claude";
+  const visible = (entry) => entry.agent === agent || ["codex", "gemini", "opencode", "hermes", "sumi"].includes(agent) && entry.path.includes(`${sep7}.agents${sep7}skills${sep7}`) || ["opencode", "sumi"].includes(agent) && entry.agent === "claude";
   const discovery = provenDiscovery ?? binding.discovery?.[agent];
   assertProjectDiscovery(agent, [...roots], home, (path) => canonicalAgentPath(path, aliases), discovery);
-  const configPath = canonicalAgentPath(agent === "sumi" ? sumiConfigPath(home) : join21(home, AGENT_ADAPTERS[agent].config), aliases), config = agent === "hermes" ? parseHermesConfig(readOptional(configPath)) : jsonObject(readOptional(configPath), configPath);
+  const configPath = canonicalAgentPath(agent === "sumi" ? sumiConfigPath(home) : join23(home, AGENT_ADAPTERS[agent].config), aliases), config = agent === "hermes" ? parseHermesConfig(readOptional(configPath)) : jsonObject(readOptional(configPath), configPath);
   const command = binding.commands?.[agent], profile = binding.profiles?.[agent];
   if (typeof command !== "string" || typeof profile !== "string")
     throw new Error("NATIVE_SKILL_DRIFT: the native hook command/profile binding is missing");
@@ -17331,14 +17506,14 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
     throw new Error("NATIVE_SKILL_DRIFT: the hook selection profile differs from its managed binding; restart the native client after reviewing skills hook install");
   if (agent === "hermes") {
     const supervisor = binding.supervisors?.hermes;
-    if (supervisor?.path !== join21(dataDir2, "agent-hooks", "hermes.js") || supervisor?.sha256 !== sha3(renderHermesSupervisor(command, profile)))
+    if (supervisor?.path !== join23(dataDir2, "agent-hooks", "hermes.js") || supervisor?.sha256 !== sha3(renderHermesSupervisor(command, profile)))
       throw new Error("NATIVE_SKILL_DRIFT: Hermes supervisor binding changed; run skills hook install");
     assertHermesProtection(home, config, command, profile, supervisor);
   } else if (agent === "sumi") {
-    if (JSON.stringify(config.permissions?.filter((rule) => rule.action === "skill")) !== JSON.stringify(SUMI_SKILL_PERMISSIONS) || !isManagedSumiPlugin(readOptional(join21(sumiConfigDirectory(home), "plugins", "skills-cli.js")), command, profile))
+    if (JSON.stringify(config.permissions?.filter((rule) => rule.action === "skill")) !== JSON.stringify(SUMI_SKILL_PERMISSIONS) || !isManagedSumiPlugin(readOptional(join23(sumiConfigDirectory(home), "plugins", "skills-cli.js")), command, profile))
       throw new Error("NATIVE_SKILL_DRIFT: Sumi bridge protection changed; run skills hook install");
   } else if (agent === "opencode") {
-    if (JSON.stringify(config.permission?.skill) !== JSON.stringify({ "*": "deny", [CLI_BRIDGE_NAME]: "allow" }) || readOptional(join21(home, ".config", "opencode", "plugins", "skills-cli.js")) !== renderOpenCodePlugin(command, profile))
+    if (JSON.stringify(config.permission?.skill) !== JSON.stringify({ "*": "deny", [CLI_BRIDGE_NAME]: "allow" }) || readOptional(join23(home, ".config", "opencode", "plugins", "skills-cli.js")) !== renderOpenCodePlugin(command, profile))
       throw new Error("NATIVE_SKILL_DRIFT: OpenCode bridge protection changed; run skills hook install");
   } else {
     const required = {};
@@ -17355,42 +17530,42 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
     if (agent === "gemini" && (config.hooksConfig?.enabled === false || config.skills?.enabled !== true || !["antigravity-support", "skill-creator"].every((name) => config.skills?.disabled?.includes(name)) || config.skills?.disabled?.includes(CLI_BRIDGE_NAME)))
       throw new Error("NATIVE_SKILL_DRIFT: Gemini bridge or bundled-skill protection changed; run skills hook install");
   }
-  const codexPath = canonicalAgentPath(join21(home, ".codex", "config.toml"), aliases);
+  const codexPath = canonicalAgentPath(join23(home, ".codex", "config.toml"), aliases);
   if (options.codexDiscoveryRecovery && (agent !== "codex" || options.codexDiscoveryRecovery.configPath !== codexPath))
     throw new Error("NATIVE_SKILL_DRIFT: Codex trust recovery names a different configuration root");
   const codexConfig = agent === "codex" ? Bun.TOML.parse(readOptional(codexPath) ?? "") : {};
   if (agent === "codex" && codexConfig.skills?.bundled?.enabled !== false)
     throw new Error("NATIVE_SKILL_DRIFT: Codex bundled skill reseeding is not disabled (skills.bundled.enabled); run skills hook install");
-  const setting = (path) => (codexConfig.skills?.config ?? []).filter((entry) => typeof entry.path === "string" && [path, join21(path, "SKILL.md")].includes(canonicalAgentPath(entry.path, aliases)));
+  const setting = (path) => (codexConfig.skills?.config ?? []).filter((entry) => typeof entry.path === "string" && [path, join23(path, "SKILL.md")].includes(canonicalAgentPath(entry.path, aliases)));
   if (agent === "codex" && [...setting(expected), ...(codexConfig.skills?.config ?? []).filter((entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME)].some((entry) => entry.enabled === false))
     throw new Error("NATIVE_SKILL_DRIFT: the Codex CLI bridge is disabled; run skills hook install");
-  if (agent === "codex" && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join21(home, ".codex/plugins/cache"), aliases), binding.codexPluginSkills ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? []))
+  if (agent === "codex" && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join23(home, ".codex/plugins/cache"), aliases), binding.codexPluginSkills ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? []))
     throw new Error("NATIVE_SKILL_DRIFT: reviewed native plugin capability controls changed; run skills hook install with a fresh discovery review");
   const disabledPlugin = (entry) => {
     if (agent !== "codex" || !entry.vendor)
       return false;
-    const document2 = join21(entry.path, "SKILL.md"), cache = canonicalAgentPath(join21(home, ".codex/plugins/cache"), aliases), read2 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024));
+    const document2 = join23(entry.path, "SKILL.md"), cache = canonicalAgentPath(join23(home, ".codex/plugins/cache"), aliases), read2 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024));
     return isReviewedCodexPluginInactive(document2, cache, binding.codexInactivePlugins ?? [], codexConfig.plugins, codexConfig.skills?.config ?? [], read2) || isReviewedCodexPluginSkillDisabled(document2, cache, binding.codexPluginSkills ?? [], codexConfig.skills?.config, read2);
   };
   const disabledPaths = new Set(disabledCodexSkillPaths(codexConfig, aliases));
   const disabledVendorSkill = (entry) => {
     if (agent !== "codex" || !entry.vendor)
       return false;
-    if ((binding.codexPluginSkills ?? []).some((control) => entry.path.startsWith(control.pluginParent + sep6)))
+    if ((binding.codexPluginSkills ?? []).some((control) => entry.path.startsWith(control.pluginParent + sep7)))
       return disabledPlugin(entry);
     if (disabledPlugin(entry))
       return true;
     if (!disabledPaths.has(entry.path))
       return false;
-    if (entry.path.startsWith(canonicalAgentPath(join21(home, ".codex", "plugins", "cache"), aliases) + sep6))
+    if (entry.path.startsWith(canonicalAgentPath(join23(home, ".codex", "plugins", "cache"), aliases) + sep7))
       return true;
-    const runtimeCache = canonicalAgentPath(join21(home, ".cache", "codex-runtimes"), aliases);
-    if (entry.path.startsWith(runtimeCache + sep6) && discovery?.method === "automatic" && discovery.roots.some((root) => entry.path.startsWith(root + sep6)))
+    const runtimeCache = canonicalAgentPath(join23(home, ".cache", "codex-runtimes"), aliases);
+    if (entry.path.startsWith(runtimeCache + sep7) && discovery?.method === "automatic" && discovery.roots.some((root) => entry.path.startsWith(root + sep7)))
       return true;
-    const bundledMarketplaces = canonicalAgentPath(join21(home, ".codex", ".tmp", "bundled-marketplaces"), aliases);
-    if (entry.path.startsWith(bundledMarketplaces + sep6) && discovery?.method === "automatic" && discovery.roots.some((root) => entry.path.startsWith(root + sep6)))
+    const bundledMarketplaces = canonicalAgentPath(join23(home, ".codex", ".tmp", "bundled-marketplaces"), aliases);
+    if (entry.path.startsWith(bundledMarketplaces + sep7) && discovery?.method === "automatic" && discovery.roots.some((root) => entry.path.startsWith(root + sep7)))
       return true;
-    if (!entry.path.startsWith(canonicalAgentPath(join21(home, ".codex", "skills", ".system"), aliases) + sep6))
+    if (!entry.path.startsWith(canonicalAgentPath(join23(home, ".codex", "skills", ".system"), aliases) + sep7))
       return false;
     return Array.isArray(binding.disabledBuiltins) && binding.disabledBuiltins.some((item) => item.path === entry.path && item.hash === entry.hash);
   };
@@ -17413,7 +17588,7 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
   let installationInputRoots = [];
   if (agent === "codex") {
     try {
-      installationInputRoots = reviewedCodexPluginSourceRoots(canonicalAgentPath(join21(home, ".codex/plugins/cache"), aliases), discovery.codexInstallationInputs?.plugins ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)));
+      installationInputRoots = reviewedCodexPluginSourceRoots(canonicalAgentPath(join23(home, ".codex/plugins/cache"), aliases), discovery.codexInstallationInputs?.plugins ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)));
     } catch {
       throw new Error("NATIVE_SKILL_DRIFT: native installation input identity changed; review discovery and catalog");
     }
@@ -17423,7 +17598,7 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
   let adapterRefusal, inert = [];
   if (agent === "codex" && unexpected.length && options.codexNativePolicy) {
     const { inspector, helperRunner, deadlineMs, ...envelope } = options.codexNativePolicy;
-    const cache = canonicalAgentPath(join21(home, ".codex", "plugins", "cache"), aliases), read2 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), bridgeDocument = join21(expected, "SKILL.md");
+    const cache = canonicalAgentPath(join23(home, ".codex", "plugins", "cache"), aliases), read2 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), bridgeDocument = join23(expected, "SKILL.md");
     try {
       const claimed = parseCodexNativeHookEnvelope(envelope, bridgeDocument).policy;
       inert = unexpected.filter((entry) => isInertCodexPluginCacheCopy(entry, cache, claimed.allowedHostPaths, read2));
@@ -17464,7 +17639,7 @@ function isSkillsOwnershipMarker(marker) {
   return typeof marker === "object" && marker !== null && Object.hasOwn(marker, "managedBy") && marker.managedBy === SYNC_MARKER_MANAGED_BY;
 }
 function hasSkillsOwnershipMarker(dir) {
-  const path = join23(dir, SYNC_MARKER_FILE);
+  const path = join25(dir, SYNC_MARKER_FILE);
   try {
     if (!lstatSync20(path).isFile())
       return false;
@@ -17488,9 +17663,9 @@ function resolveSyncAgents(arg) {
 function agentGlobalSkillsDir(agent, homeDir2 = homedir3()) {
   switch (agent) {
     case "opencode":
-      return join23(homeDir2, ".config", "opencode", "skills");
+      return join25(homeDir2, ".config", "opencode", "skills");
     default:
-      return join23(homeDir2, `.${agent}`, "skills");
+      return join25(homeDir2, `.${agent}`, "skills");
   }
 }
 function adaptSkillMdForAgent(skillMd, agent) {
@@ -17549,7 +17724,7 @@ function resolveSyncCorpus(options = {}) {
 function packageSourceRoots(source) {
   const roots = [];
   for (const sub of ["skills"]) {
-    const candidate = join23(source, sub);
+    const candidate = join25(source, sub);
     if (existsSync10(candidate) && isDirectory(candidate))
       roots.push(candidate);
   }
@@ -17565,10 +17740,10 @@ function containsSkillDirectories(path) {
     return false;
   }
   return entries.some((entry) => {
-    const candidate = join23(path, entry);
+    const candidate = join25(path, entry);
     if (!isDirectory(candidate))
       return false;
-    return existsSync10(join23(candidate, "SKILL.md")) || existsSync10(join23(candidate, "skill.json")) || existsSync10(join23(candidate, "package.json"));
+    return existsSync10(join25(candidate, "SKILL.md")) || existsSync10(join25(candidate, "skill.json")) || existsSync10(join25(candidate, "package.json"));
   });
 }
 function isDirectory(path) {
@@ -17608,7 +17783,7 @@ function syncSkillsToAgents(options = {}) {
         actions.push({
           skill: name,
           agent,
-          path: join23(agentGlobalSkillsDir(agent, homeDir2), name, "SKILL.md"),
+          path: join25(agentGlobalSkillsDir(agent, homeDir2), name, "SKILL.md"),
           action: "skip",
           reason: "not found in this machine's corpus"
         });
@@ -17640,7 +17815,7 @@ function syncSkillsToAgents(options = {}) {
 }
 function writeManagedAgentSkill(params) {
   const homeDir2 = params.homeDir ?? homedir3();
-  const dir = join23(agentGlobalSkillsDir(params.agent, homeDir2), params.skill);
+  const dir = join25(agentGlobalSkillsDir(params.agent, homeDir2), params.skill);
   const result = writeManagedSkillDir(dir, params.skillMd, {
     skill: params.skill,
     source: params.source,
@@ -17663,8 +17838,8 @@ function writeManagedSkillDir(dir, skillMd, options) {
   return withCodexCorpusWrite(root ? [root] : [], (assertCurrent) => writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent), options);
 }
 function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
-  const skillMdPath = join23(dir, "SKILL.md");
-  const markerPath = join23(dir, SYNC_MARKER_FILE);
+  const skillMdPath = join25(dir, "SKILL.md");
+  const markerPath = join25(dir, SYNC_MARKER_FILE);
   const dirExists = existsSync10(dir);
   const managed = hasSkillsOwnershipMarker(dir);
   const hasSkillMd = existsSync10(skillMdPath);
@@ -17702,11 +17877,11 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
     return { action, path: skillMdPath };
   const parentDir = dirname15(dir);
   mkdirSync7(parentDir, { recursive: true });
-  const transactionDir = mkdtempSync(join23(parentDir, `.hasna-skills-write-${basename7(dir)}-`));
-  const candidateDir = join23(transactionDir, "candidate");
-  const backupDir = join23(transactionDir, "backup");
-  const candidateSkillMdPath = join23(candidateDir, "SKILL.md");
-  const candidateMarkerPath = join23(candidateDir, SYNC_MARKER_FILE);
+  const transactionDir = mkdtempSync(join25(parentDir, `.hasna-skills-write-${basename7(dir)}-`));
+  const candidateDir = join25(transactionDir, "candidate");
+  const backupDir = join25(transactionDir, "backup");
+  const candidateSkillMdPath = join25(candidateDir, "SKILL.md");
+  const candidateMarkerPath = join25(candidateDir, SYNC_MARKER_FILE);
   const marker = {
     managedBy: SYNC_MARKER_MANAGED_BY,
     skill: options.skill,
@@ -17764,12 +17939,12 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
   return { action, path: skillMdPath };
 }
 function removeManagedAgentSkill(skill, agent, homeDir2 = homedir3(), options = {}) {
-  const dir = join23(agentGlobalSkillsDir(agent, homeDir2), skill);
+  const dir = join25(agentGlobalSkillsDir(agent, homeDir2), skill);
   const root = codexCorpusRootForPath(dir);
   return withCodexCorpusWrite(root ? [root] : [], () => removeManagedAgentSkillUnlocked(skill, agent, homeDir2, options), options);
 }
 function removeManagedAgentSkillUnlocked(skill, agent, homeDir2 = homedir3(), options = {}) {
-  const dir = join23(agentGlobalSkillsDir(agent, homeDir2), skill);
+  const dir = join25(agentGlobalSkillsDir(agent, homeDir2), skill);
   if (!hasSkillsOwnershipMarker(dir))
     return false;
   rmSync(dir, { recursive: true, force: true });
@@ -17777,7 +17952,7 @@ function removeManagedAgentSkillUnlocked(skill, agent, homeDir2 = homedir3(), op
 }
 function sourceSkillMd(skillPath, name, description, kind, preferBundledDocs = false) {
   if (kind === undefined || kind === "instruction" || preferBundledDocs) {
-    const skillMdPath = join23(skillPath, "SKILL.md");
+    const skillMdPath = join25(skillPath, "SKILL.md");
     if (existsSync10(skillMdPath))
       return readFileSync15(skillMdPath, "utf-8");
   }
@@ -17820,7 +17995,7 @@ function resolveSkillAlias(name) {
 
 // src/lib/project-state.ts
 import { existsSync as existsSync11, mkdirSync as mkdirSync8, readFileSync as readFileSync16, writeFileSync as writeFileSync8 } from "fs";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 var VALID_PIN_SOURCES = [
   "official",
   "custom",
@@ -17835,10 +18010,10 @@ var SKILLS_PROJECT_DIR = ".skills";
 var PROJECT_CONFIG_FILE = "project.json";
 var DEFAULT_EXPORT_DIR = ".skills/exports";
 function getProjectStateDir(targetDir = process.cwd()) {
-  return join25(targetDir, SKILLS_PROJECT_DIR);
+  return join26(targetDir, SKILLS_PROJECT_DIR);
 }
 function getProjectConfigPath(targetDir = process.cwd()) {
-  return join25(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
+  return join26(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
 }
 function loadProjectConfig(targetDir = process.cwd()) {
   const path = getProjectConfigPath(targetDir);
@@ -17967,7 +18142,7 @@ function getSkillPath(name) {
   const extensionPath = findExtensionSkillPath(skillName);
   if (extensionPath)
     return extensionPath;
-  return join26(getPortableSkillsRoot(), skillName);
+  return join27(getPortableSkillsRoot(), skillName);
 }
 function getCanonicalSkillName(name) {
   return getSkill(name)?.name ?? resolveSkillAlias(normalizeSkillSlug(name));
@@ -18030,7 +18205,7 @@ function createLocalSkillManifest(name, generateSkillMd) {
   if (!existsSync12(sourcePath))
     return null;
   let skillMd = "";
-  const skillMdPath = join26(sourcePath, "SKILL.md");
+  const skillMdPath = join27(sourcePath, "SKILL.md");
   if (existsSync12(skillMdPath)) {
     skillMd = readFileSync17(skillMdPath, "utf-8");
   } else if (generateSkillMd) {
@@ -18104,16 +18279,16 @@ function getAgentSkillsDir(agent, scope = "global", projectDir) {
   const base = projectDir || process.cwd();
   switch (agent) {
     case "pi":
-      return scope === "project" ? join26(base, ".pi", "skills") : join26(homedir4(), ".pi", "agent", "skills");
+      return scope === "project" ? join27(base, ".pi", "skills") : join27(homedir4(), ".pi", "agent", "skills");
     case "opencode":
-      return scope === "project" ? join26(base, ".opencode", "skills") : join26(homedir4(), ".config", "opencode", "skills");
+      return scope === "project" ? join27(base, ".opencode", "skills") : join27(homedir4(), ".config", "opencode", "skills");
     default:
-      return scope === "project" ? join26(base, `.${agent}`, "skills") : join26(homedir4(), `.${agent}`, "skills");
+      return scope === "project" ? join27(base, `.${agent}`, "skills") : join27(homedir4(), `.${agent}`, "skills");
   }
 }
 function getAgentSkillPath(name, agent, scope = "global", projectDir) {
   const skillName = normalizeSkillName(getCanonicalSkillName(name));
-  return join26(getAgentSkillsDir(agent, scope, projectDir), skillName);
+  return join27(getAgentSkillsDir(agent, scope, projectDir), skillName);
 }
 function installSkillForAgent(name, options, generateSkillMd) {
   assertNativeExportAllowed();
@@ -18156,7 +18331,7 @@ function removeSkillForAgentUnlocked(name, options) {
 }
 function resolveAgentSkillMd(name, generateSkillMd) {
   const sourcePath = getSkillPath(name);
-  const skillMdPath = join26(sourcePath, "SKILL.md");
+  const skillMdPath = join27(sourcePath, "SKILL.md");
   if (existsSync12(skillMdPath))
     return readFileSync17(skillMdPath, "utf-8");
   if (generateSkillMd)
@@ -18191,7 +18366,7 @@ function generateMinimalSkillMd(name) {
     "---",
     ""
   ].filter(Boolean);
-  const fallbackDoc = readFileIfExists(join26(sourcePath, "README.md")) || readFileIfExists(join26(sourcePath, "CLAUDE.md"));
+  const fallbackDoc = readFileIfExists(join27(sourcePath, "README.md")) || readFileIfExists(join27(sourcePath, "CLAUDE.md"));
   if (fallbackDoc)
     return `${frontmatter.join(`
 `)}${fallbackDoc.trim()}
@@ -18210,7 +18385,7 @@ skills run ${canonicalName}
 `;
 }
 function readBundledSkillVersion(name) {
-  const pkgPath = join26(getSkillPath(name), "package.json");
+  const pkgPath = join27(getSkillPath(name), "package.json");
   if (!existsSync12(pkgPath))
     return "unknown";
   try {
@@ -18265,7 +18440,7 @@ function selectSkillDoc(docs, file) {
 function isInstructionSkillDir(skillPath, meta) {
   if (meta?.kind === "instruction")
     return true;
-  const skillMdPath = join27(skillPath, "SKILL.md");
+  const skillMdPath = join28(skillPath, "SKILL.md");
   if (!existsSync13(skillMdPath))
     return false;
   try {
@@ -18295,9 +18470,9 @@ function getSkillDocs(name) {
   if (!existsSync13(skillPath))
     return null;
   return {
-    skillMd: readIfExists(join27(skillPath, "SKILL.md")),
-    readme: readIfExists(join27(skillPath, "README.md")),
-    claudeMd: readIfExists(join27(skillPath, "CLAUDE.md"))
+    skillMd: readIfExists(join28(skillPath, "SKILL.md")),
+    readme: readIfExists(join28(skillPath, "README.md")),
+    claudeMd: readIfExists(join28(skillPath, "CLAUDE.md"))
   };
 }
 function getSkillBestDoc(name, file) {
@@ -18313,14 +18488,14 @@ function getSkillRequirements(name) {
     return null;
   const texts = [];
   for (const file of ["SKILL.md", "README.md", "CLAUDE.md", ".env.example", ".env.local.example"]) {
-    const content = readIfExists(join27(skillPath, file));
+    const content = readIfExists(join28(skillPath, file));
     if (content)
       texts.push(content);
   }
   const meta = getSkill(name);
   let dependencies = {};
   try {
-    dependencies = JSON.parse(readFileSync18(join27(skillPath, "package.json"), "utf8")).dependencies || {};
+    dependencies = JSON.parse(readFileSync18(join28(skillPath, "package.json"), "utf8")).dependencies || {};
   } catch {}
   return getSkillRequirementsFromContent(name, texts, dependencies, meta);
 }
@@ -18382,7 +18557,7 @@ async function runSkill(name, args, options = {}) {
       error: `Skill '${name}' is an instruction skill (kind: instruction) and is not runnable. Instruction skills are consumed by coding agents via SKILL.md, not executed with 'skills run'.`
     };
   }
-  const pkgPath = join27(skillPath, "package.json");
+  const pkgPath = join28(skillPath, "package.json");
   if (!existsSync13(pkgPath)) {
     return { exitCode: 1, error: `No package.json in skill '${name}'` };
   }
@@ -18402,12 +18577,12 @@ async function runSkill(name, args, options = {}) {
   } catch {
     return { exitCode: 1, error: `Failed to parse package.json for skill '${name}'` };
   }
-  const entryPath = join27(skillPath, entryPoint2);
+  const entryPath = join28(skillPath, entryPoint2);
   if (!existsSync13(entryPath)) {
     return { exitCode: 1, error: `Entry point '${entryPoint2}' not found in skill '${name}'` };
   }
   const env = { ...process.env, ...options.env };
-  if (!existsSync13(join27(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
+  if (!existsSync13(join28(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
     const failure = await prepareSkillDependencies(skillPath, env, options.preparationTimeoutMs);
     if (failure)
       return failure;
@@ -18485,10 +18660,10 @@ function generateSkillMd(name) {
     "---"
   ].join(`
 `);
-  const readme = readIfExists(join27(skillPath, "README.md"));
-  const claudeMd = readIfExists(join27(skillPath, "CLAUDE.md"));
+  const readme = readIfExists(join28(skillPath, "README.md"));
+  const claudeMd = readIfExists(join28(skillPath, "CLAUDE.md"));
   let cliCommand = null;
-  const pkgPath = join27(skillPath, "package.json");
+  const pkgPath = join28(skillPath, "package.json");
   if (existsSync13(pkgPath)) {
     try {
       const pkg = JSON.parse(readFileSync18(pkgPath, "utf-8"));
@@ -18694,7 +18869,7 @@ function exactProfileSelection(spec, profile) {
 }
 
 // src/lib/plugin-projection.ts
-import { createHash as createHash18 } from "crypto";
+import { createHash as createHash19 } from "crypto";
 import { posix } from "path";
 var PLUGIN_PROJECTION_MANIFEST = "plugin-projection.json";
 var PLUGIN_PROJECTION_LIMITS = Object.freeze({ files: 1024, bytes: 64 * 1024 * 1024, fileBytes: 16 * 1024 * 1024, metadataBytes: 512 * 1024, registrations: 64, history: 128 });
@@ -18705,7 +18880,7 @@ function pluginNeed(value, message) {
   if (!value)
     pluginRefusal(message);
 }
-var pluginHash = (bytes) => createHash18("sha256").update(bytes).digest("hex");
+var pluginHash = (bytes) => createHash19("sha256").update(bytes).digest("hex");
 function pluginObject(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
@@ -18721,7 +18896,7 @@ function pluginId(value) {
 function pluginDigest(value) {
   pluginNeed(typeof value === "string" && /^sha256:[a-f0-9]{64}$/.test(value), "Invalid plugin tree digest");
 }
-function parse4(bytes) {
+function parse5(bytes) {
   pluginNeed(bytes.byteLength <= PLUGIN_PROJECTION_LIMITS.metadataBytes, "Plugin metadata exceeds its limit");
   try {
     return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
@@ -18812,7 +18987,7 @@ function buildPluginProjection(entries) {
   pluginFileWitnesses(entries);
   const contract = entries.filter((item) => item.path === PLUGIN_PROJECTION_MANIFEST);
   pluginNeed(contract.length === 1, "The selected bundle has no unique plugin projection manifest");
-  const manifest = parse4(contract[0].bytes);
+  const manifest = parse5(contract[0].bytes);
   validatePluginManifest(manifest);
   const original = entries.filter((item) => item.path.startsWith("original/")).map((item) => ({ ...item, path: item.path.slice(9) }));
   pluginNeed(!original.some((item) => [".in_use", ".orphaned_at", ".gcs-sha", ".links_materialized"].some((path) => within(item.path, path))), "Original plugin packages cannot supply native runtime metadata");
@@ -18820,7 +18995,7 @@ function buildPluginProjection(entries) {
   pluginNeed(originalTreeDigest === manifest.upstream.treeDigest, "The original plugin package differs from its immutable provenance");
   const native = original.find((item) => item.path === ".claude-plugin/plugin.json");
   pluginNeed(native, "The original plugin manifest is missing");
-  const config = parse4(native.bytes);
+  const config = parse5(native.bytes);
   pluginKeys(config, MANIFEST_FIELDS);
   pluginNeed(config.name === manifest.pluginId.split("@")[0] && (manifest.upstream.version === null ? !Object.hasOwn(config, "version") : config.version === manifest.upstream.version), "Original plugin identity differs from its contract");
   const skillRoots = ["skills", ...declaredPaths(config.skills)], commandRoots = ["commands", ...declaredPaths(config.commands)];
@@ -18864,7 +19039,7 @@ function buildPluginProjection(entries) {
     if (item.path === native.path)
       continue;
     if (item.path.toLowerCase() === "package.json") {
-      const pkg = parse4(item.bytes);
+      const pkg = parse5(item.bytes);
       pluginNeed(pluginObject(pkg), "Invalid plugin package metadata");
       for (const key of ["scripts", "dependencies", "optionalDependencies", "devDependencies", "peerDependencies", "workspaces", "bundledDependencies", "bundleDependencies", "packageManager"])
         pluginNeed(pkg[key] === undefined, "Upstream package installation is outside plugin admission");
@@ -18893,9 +19068,9 @@ function buildPluginProjection(entries) {
 }
 
 // src/lib/plugin-projection-store.ts
-import { createHash as createHash19, randomUUID as randomUUID4 } from "crypto";
+import { createHash as createHash20, randomUUID as randomUUID4 } from "crypto";
 import { constants as constants11, closeSync as closeSync11, fchmodSync, fstatSync as fstatSync11, fsyncSync as fsyncSync5, linkSync as linkSync3, lstatSync as lstatSync21, mkdirSync as mkdirSync9, openSync as openSync11, opendirSync as opendirSync4, readSync as readSync9, renameSync as renameSync5, rmdirSync as rmdirSync3, rmSync as rmSync3, unlinkSync as unlinkSync5, writeSync as writeSync2 } from "fs";
-import { dirname as dirname16, isAbsolute as isAbsolute14, join as join28, parse as parse5, resolve as resolve14 } from "path";
+import { dirname as dirname16, isAbsolute as isAbsolute14, join as join29, parse as parse6, resolve as resolve14 } from "path";
 var READ_FLAGS = constants11.O_RDONLY | constants11.O_NOFOLLOW | constants11.O_NONBLOCK;
 var WRITE_FLAGS = constants11.O_WRONLY | constants11.O_CREAT | constants11.O_EXCL | constants11.O_NOFOLLOW | constants11.O_NONBLOCK;
 var uid = () => typeof process.getuid === "function" ? BigInt(process.getuid()) : undefined;
@@ -18909,7 +19084,7 @@ function stat(path) {
     return pluginRefusal("Cannot inspect plugin filesystem entry");
   }
 }
-function canonical5(path) {
+function canonical6(path) {
   pluginNeed(typeof path === "string" && path.length <= 8192 && isAbsolute14(path) && resolve14(path) === path && !/[\x00-\x1f\x7f]/.test(path), "Plugin storage paths must be canonical absolute paths");
 }
 function owner(stats, system = false) {
@@ -18920,12 +19095,12 @@ function same3(left, right, identityOnly = false) {
   pluginNeed(right && left.dev === right.dev && left.ino === right.ino && left.mode === right.mode && left.uid === right.uid && left.gid === right.gid && (identityOnly || left.size === right.size && left.nlink === right.nlink && left.mtimeNs === right.mtimeNs && left.ctimeNs === right.ctimeNs), "Plugin filesystem entry changed during access");
 }
 function ancestors(path, create = false) {
-  canonical5(path);
-  const result = [], parent = dirname16(path), filesystemRoot = parse5(parent).root;
+  canonical6(path);
+  const result = [], parent = dirname16(path), filesystemRoot = parse6(parent).root;
   let current = filesystemRoot;
   for (const segment of ["", ...parent.slice(filesystemRoot.length).split("/").filter(Boolean)]) {
     if (segment)
-      current = join28(current, segment);
+      current = join29(current, segment);
     let currentStat = stat(current);
     if (!currentStat && create) {
       try {
@@ -19040,7 +19215,7 @@ function snapshotPluginTree(root, options = {}) {
       pluginNeed(++visited <= PLUGIN_PROJECTION_LIMITS.files * 50, "Plugin tree membership exceeds its limit");
       const path = relative7 ? `${relative7}/${name}` : name;
       pluginNeed(new TextEncoder().encode(path).byteLength <= 100 && !/[\\:\x00-\x1f\x7f]/u.test(path), "Plugin entry path exceeds its limit or is unsafe");
-      const absolute = join28(directory, name), entryStat = stat(absolute);
+      const absolute = join29(directory, name), entryStat = stat(absolute);
       pluginNeed(entryStat, "Plugin tree member disappeared");
       if (relative7 === "" && name === ".orphaned_at" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
         const bytes2 = readBytes(absolute, 32, "native-pin");
@@ -19057,7 +19232,7 @@ function snapshotPluginTree(root, options = {}) {
         directories.push({ path: absolute, stat: entryStat, names: pins });
         for (const pin of pins) {
           pluginNeed(/^[1-9][0-9]{0,9}$/.test(pin) && Number(pin) <= 2147483647, "Unrecognized native plugin pin name");
-          const pinPath = join28(absolute, pin), pinStat = stat(pinPath);
+          const pinPath = join29(absolute, pin), pinStat = stat(pinPath);
           pluginNeed(pinStat, "Native plugin pin disappeared");
           const bytes2 = readBytes(pinPath, 4096, "native-pin");
           let value;
@@ -19155,7 +19330,7 @@ function materializePluginTree(root, entries) {
     mkdirSync9(staging, { mode: 448 });
     staged = stat(staging);
     for (const entry of entries) {
-      const path = join28(staging, entry.path);
+      const path = join29(staging, entry.path);
       ancestors(path, true);
       writeExclusive(path, entry.bytes, entry.mode);
     }
@@ -19235,7 +19410,7 @@ function pluginExecutableDigest(path) {
     const opened = fstatSync11(fd, { bigint: true });
     same3(before, opened);
     fileShape(opened, maximum, "executable");
-    const hash2 = createHash19("sha256"), buffer = new Uint8Array(64 * 1024);
+    const hash2 = createHash20("sha256"), buffer = new Uint8Array(64 * 1024);
     let remaining = Number(opened.size);
     while (remaining > 0) {
       const count = readSync9(fd, buffer, 0, Math.min(buffer.byteLength, remaining), null);
@@ -19282,7 +19457,7 @@ function describeEntries(entries) {
 
 // src/lib/plugin-admission.ts
 function pluginAdmissionRoot() {
-  return join29(homedir5(), ".hasna", "skills", "plugin-admission");
+  return join30(homedir5(), ".hasna", "skills", "plugin-admission");
 }
 function validatePluginTarget(value) {
   pluginKeys(value, ["schemaVersion", "pluginId", "registrations", "native", "resolver"]);
@@ -19458,12 +19633,12 @@ function root(options) {
 }
 function pluginBindingPath(storeRoot, id) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id), "Invalid plugin binding identifier");
-  return join29(storeRoot, "bindings", `${id}.json`);
+  return join30(storeRoot, "bindings", `${id}.json`);
 }
 function pluginReceiptPath(storeRoot, id, digest) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id), "Invalid plugin binding identifier");
   pluginDigest(digest);
-  return join29(storeRoot, "receipts", id, `${digest.slice(7)}.json`);
+  return join30(storeRoot, "receipts", id, `${digest.slice(7)}.json`);
 }
 function readPluginBinding(storeRoot, id) {
   const value = readPluginJson(pluginBindingPath(storeRoot, id));
@@ -19483,7 +19658,7 @@ function readPluginAdmissionReceipt(storeRoot, id, digest) {
   pluginNeed(receipt.plan.bindingId === id && receipt.plan.planDigest === digest, "Plugin receipt identity differs from its filename");
   const binding = readPluginBinding(storeRoot, id);
   pluginNeed(canonicalJson(binding) === canonicalJson(receipt.plan.binding) && receipt.plan.sourceCommand === pluginResolverCommand(binding), "Plugin receipt binding changed");
-  pluginNeed(receipt.materializedPath === join29(storeRoot, "objects", id, digest.slice(7)), "Plugin receipt points outside its immutable materialization");
+  pluginNeed(receipt.materializedPath === join30(storeRoot, "objects", id, digest.slice(7)), "Plugin receipt points outside its immutable materialization");
   pluginText(receipt.admittedAt, 64);
   pluginNeed(Number.isFinite(Date.parse(receipt.admittedAt)), "Invalid plugin admission time");
   return receipt;
@@ -19624,7 +19799,7 @@ async function admitPlugin(spec, profileId, target, approvedDigest, approvedEvid
   const { plan, projection } = await candidate(spec, profileId, target, options);
   pluginNeed(plan.planDigest === approvedDigest, "The plugin plan changed since review; obtain and review a new plan");
   pluginNeed(plan.evidenceDigest === approvedEvidenceDigest, "The plugin routing evidence changed since review; obtain and review a new plan");
-  const store = root(options), materializedPath = join29(store, "objects", plan.bindingId, plan.planDigest.slice(7));
+  const store = root(options), materializedPath = join30(store, "objects", plan.bindingId, plan.planDigest.slice(7));
   materializePluginTree(materializedPath, projection.files);
   writePluginJsonImmutable(pluginBindingPath(store, plan.bindingId), plan.binding);
   const path = pluginReceiptPath(store, plan.bindingId, plan.planDigest), existing = readPluginJson(path);
@@ -19716,7 +19891,7 @@ function hashManagedPluginRegistry(path, managed) {
     seen.add(target.pluginId);
     const rows = plugins[target.pluginId];
     pluginNeed(Array.isArray(rows) && rows.length === target.registrations.length, "Managed plugin registration membership changed");
-    const [name, market] = target.pluginId.split("@"), cacheRoot = join30(dirname17(path), "cache", market, name);
+    const [name, market] = target.pluginId.split("@"), cacheRoot = join31(dirname17(path), "cache", market, name);
     const scopes = new Set, approvals = new Map, currentFiles = new Map;
     plugins[target.pluginId] = rows.map((row) => {
       pluginNeed(pluginObject(row), "Invalid managed plugin registration");
@@ -19729,7 +19904,7 @@ function hashManagedPluginRegistry(path, managed) {
       pluginText(row.sourceProducerPath);
       pluginText(row.lastUpdated, 64);
       pluginNeed(Number.isFinite(Date.parse(row.lastUpdated)), "Invalid managed plugin update timestamp");
-      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join30(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
+      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join31(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
         const digest = `sha256:${basename8(producer)}`;
@@ -19772,11 +19947,11 @@ function hashManagedPluginRegistry(path, managed) {
       directory.closeSync();
     }
     for (const version of names.sort()) {
-      const files = pluginFileWitnesses(snapshotPluginTree(join30(cacheRoot, version), { nativeRuntime: `claude-${target.native.version}` }));
+      const files = pluginFileWitnesses(snapshotPluginTree(join31(cacheRoot, version), { nativeRuntime: `claude-${target.native.version}` }));
       verifiedBytes += files.reduce((total, file) => total + file.size, 0);
       pluginNeed(verifiedBytes <= 256 * 1024 * 1024, "Managed plugin verification exceeds its aggregate byte budget");
       const serialized = JSON.stringify(files);
-      const expected = currentFiles.get(join30(cacheRoot, version));
+      const expected = currentFiles.get(join31(cacheRoot, version));
       pluginNeed(expected === undefined || serialized === expected, "Current native cache differs from its exact registered producer receipt");
       pluginNeed([...approvals.values()].some((receipt) => nativeVersionMatches(version, receipt) && JSON.stringify(receipt.plan.files) === serialized), "A retained native plugin cache version differs from every approved projection");
     }
@@ -19794,7 +19969,7 @@ function captureManagedPluginRegistry(path, managedPlugins) {
 }
 
 // src/lib/claude-marketplace-registry.ts
-import { createHash as createHash20 } from "crypto";
+import { createHash as createHash21 } from "crypto";
 import { closeSync as closeSync13, constants as constants13, fstatSync as fstatSync13, lstatSync as lstatSync23, openSync as openSync13, readSync as readSync11 } from "fs";
 import { basename as basename9, dirname as dirname18, isAbsolute as isAbsolute17, resolve as resolve17 } from "path";
 var CLAUDE_MARKETPLACE_REGISTRY_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
@@ -19851,7 +20026,7 @@ function readRegistry2(path, budget2) {
     closeSync13(fd);
   }
 }
-function parse6(text2) {
+function parse7(text2) {
   let at = 0, nodes = 0;
   const numberPattern = /-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/y;
   const space = () => {
@@ -19960,22 +20135,22 @@ function normalizeRow(row, version = 1) {
   row.entries = row.entries.map(([key, value]) => [key, key === "lastUpdated" ? { kind: "validated-update-time" } : value]);
 }
 function captureClaudeMarketplaceRegistry(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
-  const value = parse6(readRegistry2(path, budget2));
+  const value = parse7(readRegistry2(path, budget2));
   for (const [, row] of value.entries)
     normalizeRow(row);
-  const sha2562 = createHash20("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
+  const sha2562 = createHash21("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry", sha256: sha2562 };
 }
 function captureClaudeMarketplaceRegistryV2(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
-  const value = parse6(readRegistry2(path, budget2));
+  const value = parse7(readRegistry2(path, budget2));
   for (const [, row] of value.entries)
     normalizeRow(row, 2);
-  const sha2562 = createHash20("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
+  const sha2562 = createHash21("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry-v2", sha256: sha2562 };
 }
 
 // src/lib/codex-hook-discovery-recovery.ts
-import { createHash as createHash21 } from "crypto";
+import { createHash as createHash22 } from "crypto";
 
 // src/lib/codex-hook-additions-review.ts
 var events = { UserPromptSubmit: ["userPromptSubmit", "user_prompt_submit"], SessionStart: ["sessionStart", "session_start"], SubagentStart: ["subagentStart", "subagent_start"] };
@@ -19983,7 +20158,7 @@ var matchedEvents = { ...events, PreToolUse: ["preToolUse", "pre_tool_use"] };
 var proofs = new WeakMap;
 
 // src/lib/codex-hook-discovery-recovery.ts
-var sha4 = (text2) => createHash21("sha256").update(text2).digest("hex");
+var sha4 = (text2) => createHash22("sha256").update(text2).digest("hex");
 var fields = [...CODEX_DISCOVERY_PROJECTION_FIELDS];
 var proofs2 = new WeakMap;
 function assertCodexHookDiscoveryRecovery(binding, witness) {
@@ -20002,7 +20177,7 @@ function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witnes
 }
 
 // src/lib/agent-discovery.ts
-var digest = (text2) => createHash22("sha256").update(text2).digest("hex");
+var digest = (text2) => createHash23("sha256").update(text2).digest("hex");
 function parseConfig(text2, path, toml = false) {
   try {
     const value = toml ? Bun.TOML.parse(text2) : JSON.parse(text2);
@@ -20088,6 +20263,12 @@ function projected(source, changes, budget2 = discoveryByteBudget()) {
       throw new Error("Managed plugin registry witnesses require verified native registrations");
     return hashManagedPluginRegistry(source.path, source.managedPlugins);
   }
+  if (source.hashMode === "claude-plugin-manifest-v1") {
+    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || changes?.has(source.path))
+      throw new Error("Claude plugin manifest witnesses require a native discovery source without synthetic changes");
+    const text3 = read2(source.path);
+    return text3 === null ? null : hashClaudePluginManifest(text3);
+  }
   if (source.managedPlugins !== undefined)
     throw new Error("Managed plugin rules require a typed registry witness");
   if (source.hashMode !== undefined) {
@@ -20114,7 +20295,7 @@ function absentCodexSkillRoots(binding) {
     throw new Error("Invalid disabled Codex discovery proof");
   if (binding.method !== "reviewed" || controls.every((control) => lstatSync24(control.pluginParent, { throwIfNoEntry: false })))
     return [];
-  const cache = dirname19(dirname19(controls[0].pluginParent)), config = join31(dirname19(dirname19(cache)), "config.toml");
+  const cache = dirname19(dirname19(controls[0].pluginParent)), config = join32(dirname19(dirname19(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || projected(source) !== source.sha256)
     throw new Error("Missing current disabled Codex configuration witness");
@@ -20122,8 +20303,8 @@ function absentCodexSkillRoots(binding) {
   return [...new Set(controls.map((control) => control.pluginParent))].filter((parent) => !codexDirectHookSelects(cache, parent) && absentDisabledCodexPluginParent(cache, parent, controls, rules));
 }
 function codexDirectHookSelects(cache, root2) {
-  const codex = dirname19(dirname19(cache)), config = Bun.TOML.parse(read2(join31(codex, "config.toml")) ?? "");
-  const hooks = read2(join31(codex, "hooks.json"));
+  const codex = dirname19(dirname19(cache)), config = Bun.TOML.parse(read2(join32(codex, "config.toml")) ?? "");
+  const hooks = read2(join32(codex, "hooks.json"));
   if (hooks !== null)
     hashNativeJsonControls(hooks);
   return JSON.stringify(config.hooks ?? {}).includes(root2) || hooks !== null && JSON.stringify(JSON.parse(hooks)).includes(root2);
@@ -20135,7 +20316,7 @@ function retiredCodexRoots(binding) {
   const controls = binding.codexDisabledPluginSkills;
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !Array.isArray(controls) || !controls.length || !Array.isArray(proof.roots) || proof.roots.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.roots).size !== proof.roots.length || !Array.isArray(proof.directories) || proof.parents !== undefined && (!Array.isArray(proof.parents) || proof.parents.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.parents).size !== proof.parents.length) || !proof.roots.length && !proof.parents?.length)
     throw new Error("Invalid retired Codex materialization proof");
-  const cache = dirname19(dirname19(controls[0].pluginParent)), config = join31(dirname19(dirname19(cache)), "config.toml");
+  const cache = dirname19(dirname19(controls[0].pluginParent)), config = join32(dirname19(dirname19(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || projected(source) !== source.sha256)
     throw new Error("Missing current retired Codex configuration witness");
@@ -20143,7 +20324,7 @@ function retiredCodexRoots(binding) {
   if ((proof.parents ?? []).some((parent) => codexDirectHookSelects(cache, parent) || !reviewedDisabledCodexPluginParent(cache, parent, controls, rules)) || !reviewedCodexPluginCapabilitiesUnchanged(cache, controls, (path) => read2(path), rules))
     throw new Error("Retired Codex parent capabilities changed");
   for (const root2 of proof.roots) {
-    const manifest = binding.sources.find((source2) => source2.path === join31(root2, ".codex-plugin/plugin.json") && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && [undefined, "bytes"].includes(source2.hashMode));
+    const manifest = binding.sources.find((source2) => source2.path === join32(root2, ".codex-plugin/plugin.json") && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && [undefined, "bytes"].includes(source2.hashMode));
     if (!manifest || codexDirectHookSelects(cache, root2) || !reviewedRetiredCodexRoot(cache, root2, controls, rules, (path) => read2(path), true))
       throw new Error("Retired Codex materialization changed");
   }
@@ -20153,14 +20334,14 @@ function captureRetiredCodexDiscovery(binding, controls, rules) {
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !controls.length)
     return binding;
   const cache = dirname19(dirname19(controls[0].pluginParent));
-  const candidates = binding.sources.filter((source) => source.path.endsWith(sep7 + ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined && [undefined, "bytes"].includes(source.hashMode)).map((source) => dirname19(dirname19(source.path)));
+  const candidates = binding.sources.filter((source) => source.path.endsWith(sep8 + ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined && [undefined, "bytes"].includes(source.hashMode)).map((source) => dirname19(dirname19(source.path)));
   const roots = [...new Set(candidates)].filter((root2) => !codexDirectHookSelects(cache, root2) && reviewedRetiredCodexRoot(cache, root2, controls, rules, (path) => read2(path), binding.codexRetiredMaterializations?.roots.includes(root2) ?? false)).sort();
   const parents3 = reviewedCodexPluginCapabilitiesUnchanged(cache, controls, (path) => read2(path), rules) ? [...new Set(controls.map((control) => control.pluginParent))].filter((parent) => !codexDirectHookSelects(cache, parent) && reviewedDisabledCodexPluginParent(cache, parent, controls, rules)).sort() : [];
   const { codexRetiredMaterializations: previous, ...current } = binding;
   if (!roots.length && !parents3.length)
     return current;
   const installation = codexInstallationRoots(binding);
-  const directories = (binding.directories ?? []).filter((directory) => !installation.some((root2) => directory.path === root2 || directory.path.startsWith(root2 + sep7) || root2.startsWith(directory.path + sep7)));
+  const directories = (binding.directories ?? []).filter((directory) => !installation.some((root2) => directory.path === root2 || directory.path.startsWith(root2 + sep8) || root2.startsWith(directory.path + sep8)));
   if (previous && isDeepStrictEqual7(previous.roots, roots) && isDeepStrictEqual7(previous.parents, parents3) && isDeepStrictEqual7(previous.directories.map((item) => item.path), directories.map((item) => item.path)))
     return { ...current, codexRetiredMaterializations: previous };
   return { ...current, codexRetiredMaterializations: { roots, parents: parents3, directories: captureDiscoveryDirectoryProjection(directories.map((item) => item.path), roots) } };
@@ -20172,17 +20353,17 @@ function absentRetiredClaudeRoots(binding) {
   for (const source of binding.sources) {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.sha256 === null)
       continue;
-    const marker = sep7 + ".claude" + sep7 + "plugins" + sep7 + "cache" + sep7, at = source.path.indexOf(marker);
+    const marker = sep8 + ".claude" + sep8 + "plugins" + sep8 + "cache" + sep8, at = source.path.indexOf(marker);
     if (at < 0 || source.path.indexOf(marker, at + 1) >= 0)
       continue;
-    const cache = source.path.slice(0, at + marker.length - 1), parts = source.path.slice(at + marker.length).split(sep7);
+    const cache = source.path.slice(0, at + marker.length - 1), parts = source.path.slice(at + marker.length).split(sep8);
     if (parts.length < 4 || parts.slice(0, 3).some((part) => !part || part === "." || part === ".."))
       continue;
-    const root2 = join31(cache, ...parts.slice(0, 3));
+    const root2 = join32(cache, ...parts.slice(0, 3));
     safe4(root2);
     if (lstatSync24(root2, { throwIfNoEntry: false }))
       continue;
-    const claude = dirname19(dirname19(cache)), settings = join31(claude, "settings.json"), registry = join31(claude, "plugins/installed_plugins.json");
+    const claude = dirname19(dirname19(cache)), settings = join32(claude, "settings.json"), registry = join32(claude, "plugins/installed_plugins.json");
     const full = (path) => binding.sources.find((item) => item.path === path && item.sha256 !== null && item.format === undefined && item.fields === undefined);
     const configSource = full(settings), registrySource = full(registry);
     if (!configSource || !registrySource || projected(configSource) !== configSource.sha256 || projected(registrySource) !== registrySource.sha256)
@@ -20201,10 +20382,10 @@ function absentRetiredClaudeRoots(binding) {
     const active = rows[0].installPath;
     if (rows[0].version !== basename10(active) || resolve18(active) !== active || dirname19(active) !== dirname19(root2) || active === root2 || !lstatSync24(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync10(active) !== active)
       continue;
-    const activeManifest = full(join31(active, ".claude-plugin/plugin.json"));
+    const activeManifest = full(join32(active, ".claude-plugin/plugin.json"));
     if (!activeManifest || projected(activeManifest) !== activeManifest.sha256)
       continue;
-    if (Object.values(installed.plugins).some((value) => !Array.isArray(value) || value.some((row) => !row || typeof row.installPath !== "string" || row.installPath === root2 || row.installPath.startsWith(root2 + sep7) || root2.startsWith(row.installPath + sep7))))
+    if (Object.values(installed.plugins).some((value) => !Array.isArray(value) || value.some((row) => !row || typeof row.installPath !== "string" || row.installPath === root2 || row.installPath.startsWith(root2 + sep8) || root2.startsWith(row.installPath + sep8))))
       continue;
     result.add(root2);
   }
@@ -20219,10 +20400,10 @@ function verifyAgentDiscovery(binding, codexRecovery) {
     throw new Error("Hermes discovery requires directory membership coverage; run skills hook install with a fresh discovery review");
   const installationRoots = codexInstallationRoots(binding);
   const retiredRoots = retiredCodexRoots(binding);
-  const installationInput = (path) => installationRoots.some((root2) => path === root2 || path.startsWith(root2 + sep7));
+  const installationInput = (path) => installationRoots.some((root2) => path === root2 || path.startsWith(root2 + sep8));
   if (binding.directories !== undefined) {
     const projected2 = binding.codexInstallationInputs?.directories ?? [];
-    const ancestors2 = binding.directories.filter((directory) => installationRoots.some((root2) => root2.startsWith(directory.path + sep7)));
+    const ancestors2 = binding.directories.filter((directory) => installationRoots.some((root2) => root2.startsWith(directory.path + sep8)));
     if (projected2.length !== ancestors2.length || projected2.some((directory) => !ancestors2.some((original) => original.path === directory.path)))
       throw new Error("Missing installation input directory projection");
     const ordinary = binding.directories.filter((directory) => !installationInput(directory.path) && !ancestors2.includes(directory));
@@ -20258,7 +20439,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       safe4(source.path);
       continue;
     }
-    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep7)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
+    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
       safe4(source.path);
       continue;
     }
@@ -20281,12 +20462,12 @@ function codexInstallationRoots(binding) {
   if (binding.agent !== "codex" || binding.method !== "reviewed" || proof.version !== "codex-cli 0.160.0" || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
     throw new Error("Invalid native installation input proof");
   const cache = dirname19(dirname19(proof.plugins[0].pluginParent));
-  const config = join31(dirname19(dirname19(cache)), "config.toml"), home = dirname19(dirname19(dirname19(cache)));
+  const config = join32(dirname19(dirname19(cache)), "config.toml"), home = dirname19(dirname19(dirname19(cache)));
   const configSource = binding.sources.find((source) => source.path === config && source.sha256 !== null && (!source.format || source.format === "toml" && source.fields?.includes("plugins")));
-  const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join31(home, path));
-  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep7) || input.sourceRoot.startsWith(root2 + sep7)) || binding.sources.some((source) => basename10(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep7)))))
+  const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join32(home, path));
+  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep8) || input.sourceRoot.startsWith(root2 + sep8)) || binding.sources.some((source) => basename10(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep8)))))
     throw new Error("Native installation input overlaps configuration or loading roots");
-  if (proof.plugins.some((input) => dirname19(dirname19(input.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join31(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
+  if (proof.plugins.some((input) => dirname19(dirname19(input.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join32(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
     throw new Error("Missing native installation input source witness");
   return reviewedCodexPluginSourceRoots(cache, proof.plugins, (path) => {
     const text2 = read2(path);
@@ -20296,6 +20477,8 @@ function codexInstallationRoots(binding) {
   });
 }
 function assertMarketplaceBinding(binding, source) {
+  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename10(source.path) !== "plugin.json" || !source.path.endsWith(join32(sep8, ".claude-plugin", "plugin.json"))))
+    throw new Error("Claude plugin manifest witnesses require Claude plugin discovery");
   if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename10(source.path) !== "sumi.json"))
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
   if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename10(source.path) !== "config.toml"))
@@ -20310,7 +20493,7 @@ function rebindAgentDiscovery(binding, changes) {
   const installationRoots = codexInstallationRoots(binding), absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredCodexRoots(binding).filter((root2) => !lstatSync24(root2, { throwIfNoEntry: false }))];
   const rebound = { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
-    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep7)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep7)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)))
+    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep8)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)))
       return source;
     const sha2562 = projected(source, changes, budget2);
     if (!changes.has(source.path) && sha2562 !== source.sha256)
@@ -20336,8 +20519,8 @@ function captureDiscoveryPathSources(paths) {
   const budget2 = discoveryByteBudget();
   return paths.map((path) => ({ path, hashMode: "path-bytes", sha256: hashDiscoveryPathFile(path, budget2) }));
 }
-function assertProjectDiscovery(agent, directories, home, canonical6 = resolve18, reviewed) {
-  const homeConfigPath = canonical6(agentDiscoveryConfigPath(home, agent));
+function assertProjectDiscovery(agent, directories, home, canonical7 = resolve18, reviewed) {
+  const homeConfigPath = canonical7(agentDiscoveryConfigPath(home, agent));
   for (const directory of directories) {
     const isHome = resolve18(directory) === resolve18(home);
     if (agent === "hermes") {
@@ -20348,7 +20531,7 @@ function assertProjectDiscovery(agent, directories, home, canonical6 = resolve18
       continue;
     const paths = agent === "claude" ? [...isHome ? [] : [".claude/settings.json"], ".claude/settings.local.json"] : agent === "codex" ? [".codex/config.toml"] : agent === "gemini" ? [".gemini/settings.json"] : agent === "opencode" ? ["opencode.json", "opencode.jsonc", ".opencode/opencode.json", ".opencode/opencode.jsonc"] : agent === "sumi" ? ["sumi.json", "sumi.jsonc", ".sumi/sumi.json", ".sumi/sumi.jsonc"] : [".cursor/hooks.json"];
     for (const suffix of paths) {
-      const path = canonical6(join31(directory, suffix)), raw = read2(path);
+      const path = canonical7(join32(directory, suffix)), raw = read2(path);
       if (raw === null)
         continue;
       const isRootAliasedHomeConfig = agent === "claude" && suffix === ".claude/settings.json" || agent === "codex" && suffix === ".codex/config.toml";
@@ -20364,7 +20547,7 @@ function assertProjectDiscovery(agent, directories, home, canonical6 = resolve18
         const managed = reviewed.sources.flatMap((source) => source.hashMode === "claude-plugin-registry" ? source.managedPlugins ?? [] : []);
         if (exact && projected(exact) === exact.sha256 && managed.length) {
           const bindings = managed.map((item) => readPluginBinding(item.storeRoot, item.bindingId));
-          admittedPlugins = Object.entries(config.enabledPlugins).every(([id, enabled]) => typeof enabled === "boolean" && bindings.some((binding) => binding.target.pluginId === id && binding.target.registrations.some((scope) => scope.scope === "project" && scope.projectPath === canonical6(directory))));
+          admittedPlugins = Object.entries(config.enabledPlugins).every(([id, enabled]) => typeof enabled === "boolean" && bindings.some((binding) => binding.target.pluginId === id && binding.target.registrations.some((scope) => scope.scope === "project" && scope.projectPath === canonical7(directory))));
         }
       }
       if (keys.some((key) => config[key] !== undefined && !(key === "enabledPlugins" && admittedPlugins)) || config.disableAllHooks === true || config.disableBundledSkills === false || config.hooksConfig?.enabled === false || config.permission?.skill !== undefined || config.permissions?.deny?.some((rule) => typeof rule === "string" && /^Skill(?:\(|$)/.test(rule)))
@@ -20372,13 +20555,13 @@ function assertProjectDiscovery(agent, directories, home, canonical6 = resolve18
     }
     if (agent === "sumi")
       for (const name of ["plugin", "plugins"]) {
-        const path = canonical6(join31(directory, ".sumi", name));
+        const path = canonical7(join32(directory, ".sumi", name));
         safe4(path);
         if (lstatSync24(path, { throwIfNoEntry: false })?.isDirectory() && readdirSync10(path).length)
           throw new Error(`NATIVE_SKILL_DRIFT: project Sumi plugins require a dedicated discovery review: ${path}`);
       }
     if (agent === "claude") {
-      const commands = canonical6(join31(directory, ".claude/commands"));
+      const commands = canonical7(join32(directory, ".claude/commands"));
       safe4(commands);
       if (lstatSync24(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync10(commands).length)
         throw new Error("NATIVE_SKILL_DRIFT: legacy project command discovery requires a dedicated format adapter");
@@ -20388,13 +20571,13 @@ function assertProjectDiscovery(agent, directories, home, canonical6 = resolve18
 function agentDiscoveryConfigPath(home, agent) {
   if (agent === "sumi")
     return sumiConfigPath(home);
-  return join31(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
+  return join32(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
 }
 function resolveAgentDiscovery(options) {
-  const canonical6 = options.canonical ?? resolve18, home = resolve18(options.home), agent = options.agent;
+  const canonical7 = options.canonical ?? resolve18, home = resolve18(options.home), agent = options.agent;
   const sources = [], roots = new Set, builtinNames = [];
-  const witness = (path, format, fields2) => {
-    const source = { path: canonical6(path), sha256: null, ...format ? { format, fields: fields2 } : {} };
+  const witness = (path, format, fields2, hashMode) => {
+    const source = { path: canonical7(path), sha256: null, ...format ? { format, fields: fields2 } : {}, ...hashMode ? { hashMode } : {} };
     source.sha256 = projected(source);
     sources.push(source);
     return read2(source.path);
@@ -20407,31 +20590,34 @@ function resolveAgentDiscovery(options) {
   const unresolved = (detail) => {
     throw new Error(`Native discovery is unresolved (${agent}: ${detail}); provide a reviewed --discovery-inputs file`);
   };
+  if (options.reviewed && (options.reviewed.version !== 1 || !Array.isArray(options.reviewed.agents) || options.reviewed.agents.some((item) => !item || typeof item !== "object") || new Set(options.reviewed.agents.map((item) => item.agent)).size !== options.reviewed.agents.length))
+    throw new Error("Invalid --discovery-inputs version or agents");
+  const review = options.reviewed?.agents.find((item) => item.agent === agent);
   if (agent === "sumi") {
     const directory = sumiConfigDirectory(home);
-    if (witness(join31(directory, "sumi.jsonc")) !== null)
+    if (witness(join32(directory, "sumi.jsonc")) !== null)
       unresolved("JSONC configuration requires a supported format adapter");
-    for (const root2 of [directory, join31(home, ".claude"), join31(home, ".agents")])
+    for (const root2 of [directory, join32(home, ".claude"), join32(home, ".agents")])
       for (const name of ["skill", "skills"])
-        roots.add(canonical6(join31(root2, name)));
+        roots.add(canonical7(join32(root2, name)));
     if (config.skills !== undefined && (!Array.isArray(config.skills) || config.skills.some((path) => typeof path !== "string")))
       unresolved("skills must be a string array");
     for (const value of config.skills ?? []) {
       if (typeof value !== "string" || /[\0$]/.test(value) || !value || !(isAbsolute18(value) || value.startsWith("~/")))
         unresolved("remote or relative skill sources need a dedicated discovery adapter");
-      roots.add(canonical6(value.startsWith("~/") ? join31(home, value.slice(2)) : value));
+      roots.add(canonical7(value.startsWith("~/") ? join32(home, value.slice(2)) : value));
     }
     for (const key of ["plugin", "plugins"])
       if (config[key] !== undefined && !Array.isArray(config[key]))
         unresolved(`${key} must be an array`);
-    const plugins = [join31(directory, "plugin"), join31(directory, "plugins")];
+    const plugins = [join32(directory, "plugin"), join32(directory, "plugins")];
     for (const path of plugins) {
       safe4(path);
       if (lstatSync24(path, { throwIfNoEntry: false })?.isDirectory())
         for (const name of readdirSync10(path).sort()) {
           if (name === "skills-cli.js" && path === plugins[1])
             continue;
-          const target = join31(path, name);
+          const target = join32(path, name);
           if (!lstatSync24(target).isFile())
             unresolved("local plugin packages need a dedicated discovery adapter");
           witness(target);
@@ -20444,7 +20630,7 @@ function resolveAgentDiscovery(options) {
     }
   }
   if (agent === "hermes") {
-    const profile = witness(join31(home, ".hermes/active_profile"));
+    const profile = witness(join32(home, ".hermes/active_profile"));
     if (profile?.trim() && profile.trim() !== "default")
       unresolved("a non-default profile is active");
     const declared = config.skills?.external_dirs ?? [], paths = typeof declared === "string" ? [declared] : declared;
@@ -20458,7 +20644,7 @@ function resolveAgentDiscovery(options) {
         continue;
       if (normalized.startsWith("~") && normalized !== "~" && !normalized.startsWith("~/"))
         unresolved("user-specific tilde expansion requires a separate discovery adapter");
-      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join31(home, normalized.slice(2)) : resolve18(home, ".hermes", normalized);
+      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join32(home, normalized.slice(2)) : resolve18(home, ".hermes", normalized);
       safe4(path);
       roots.add(path);
     }
@@ -20468,7 +20654,7 @@ function resolveAgentDiscovery(options) {
     if (executable2) {
       let packageRoot;
       for (let directory = dirname19(realpathSync10(executable2)), depth = 0;depth < 8; directory = dirname19(directory), depth++) {
-        const path = join31(directory, "package.json"), raw = read2(path);
+        const path = join32(directory, "package.json"), raw = read2(path);
         if (raw !== null && parseConfig(raw, path).name === "@google/gemini-cli") {
           packageRoot = directory;
           witness(path);
@@ -20479,12 +20665,12 @@ function resolveAgentDiscovery(options) {
       }
       if (!packageRoot)
         unresolved("installed Gemini package layout is not recognized");
-      const builtinRoot = join31(packageRoot, "bundle/builtin");
+      const builtinRoot = join32(packageRoot, "bundle/builtin");
       safe4(builtinRoot);
       if (!lstatSync24(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
         unresolved("installed Gemini builtin root is missing");
       for (const name of readdirSync10(builtinRoot).sort()) {
-        const text2 = witness(join31(builtinRoot, name, "SKILL.md"));
+        const text2 = witness(join32(builtinRoot, name, "SKILL.md"));
         const match = text2?.match(/^---\r?\n[\s\S]*?^name:\s*([a-z0-9][a-z0-9-]*)\s*$/m);
         if (!match?.[1] || builtinNames.includes(match[1]))
           unresolved("installed Gemini builtin name is missing or ambiguous");
@@ -20497,18 +20683,15 @@ function resolveAgentDiscovery(options) {
     if (retained.agent !== agent || retained.method !== "reviewed")
       unresolved("invalid retained review");
     verifyAgentDiscovery(retained);
-    if (!retained.sources.some((source) => source.path === canonical6(configPath) && source.format === undefined && source.fields === undefined))
+    if (!retained.sources.some((source) => source.path === canonical7(configPath) && source.format === undefined && source.fields === undefined))
       unresolved("retained review is missing the full agent configuration source");
-    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical6(configPath)))
+    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
       unresolved("retained settings witness names another configuration source");
-    const covered = supersedesSettingsProjection(agent, retained.sources, canonical6(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical6(configPath), source)) : sources;
+    const covered = supersedesSettingsProjection(agent, retained.sources, canonical7(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical7(configPath), source)) : sources;
     if (covered.some((source) => !retained.sources.some((saved) => isDeepStrictEqual7(saved, source))) || [...roots].some((root2) => !retained.roots.includes(root2)) || agent === "gemini" && JSON.stringify(retained.builtinNames) !== JSON.stringify(builtinNames))
       unresolved("retained review is missing current runtime discovery coverage");
     return retained;
   }
-  if (options.reviewed && (options.reviewed.version !== 1 || !Array.isArray(options.reviewed.agents) || options.reviewed.agents.some((item) => !item || typeof item !== "object") || new Set(options.reviewed.agents.map((item) => item.agent)).size !== options.reviewed.agents.length))
-    throw new Error("Invalid --discovery-inputs version or agents");
-  const review = options.reviewed?.agents.find((item) => item.agent === agent);
   if (review) {
     if (review.pluginHooks !== "reviewed-no-skill-injection" || !Array.isArray(review.sources) || !review.sources.length || !Array.isArray(review.roots))
       throw new Error("Discovery review must bind sources and confirm plugin hooks do not inject retired skills");
@@ -20516,47 +20699,77 @@ function resolveAgentDiscovery(options) {
     if (review.sources.some((source) => source.format !== undefined || source.fields !== undefined))
       throw new Error("Explicit discovery reviews require full source-file hashes");
     verifyAgentDiscovery(supplied);
-    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical6(configPath)))
+    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
       throw new Error("Semantic settings witnesses must name the configured agent configuration source");
-    if (!review.sources.some((source) => source.path === canonical6(configPath)))
+    if (!review.sources.some((source) => source.path === canonical7(configPath)))
       throw new Error("Discovery review must include the agent configuration source");
-    const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical6(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical6(configPath), source)) : sources;
-    return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: [...reviewedSources, ...review.sources], ...agent === "gemini" ? { builtinNames } : {} };
+    const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical7(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical7(configPath), source)) : sources;
+    const reviewedSourcesWithManifestProjection = review.sources.map((source) => {
+      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename10(source.path) !== "plugin.json" || !source.path.endsWith(join32(sep8, ".claude-plugin", "plugin.json")))
+        return source;
+      const pluginRoot = dirname19(dirname19(source.path)), hooksPath = join32(pluginRoot, "hooks/hooks.json");
+      const hookStat = lstatSync24(hooksPath, { throwIfNoEntry: false });
+      const text2 = read2(source.path);
+      if (text2 === null)
+        throw new Error("Reviewed Claude plugin manifest is missing");
+      const manifestSha256 = projectReviewedClaudePluginManifest(text2, source.sha256 ?? "");
+      const manifest = JSON.parse(text2);
+      if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+        throw new Error("Reviewed Claude plugin manifest must be an object");
+      const reviewedHookPaths = new Set;
+      if (hookStat)
+        reviewedHookPaths.add(hooksPath);
+      if (manifest.hooks !== undefined) {
+        if (typeof manifest.hooks !== "string")
+          throw new Error("Reviewed Claude plugin manifest has an unsupported hooks target");
+        const declaredHookPath = resolve18(pluginRoot, manifest.hooks);
+        if (!declaredHookPath.startsWith(pluginRoot + sep8))
+          throw new Error("Reviewed Claude plugin hooks target escapes its root");
+        reviewedHookPaths.add(declaredHookPath);
+      }
+      for (const hooksFile of reviewedHookPaths)
+        if (!review.sources.some((hook) => hook.path === canonical7(hooksFile) && hook.sha256 !== null && hook.format === undefined && hook.fields === undefined && hook.managedPlugins === undefined && (hook.hashMode === undefined || hook.hashMode === "bytes")))
+          throw new Error("Reviewed Claude plugin manifest requires separately reviewed exact hook file sources");
+      return { path: source.path, sha256: manifestSha256, hashMode: "claude-plugin-manifest-v1" };
+    });
+    const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
+    const unique = combined.filter((source, index) => combined.findIndex((candidate2) => isDeepStrictEqual7(candidate2, source)) === index);
+    return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };
   }
   function plugin(root2) {
-    root2 = canonical6(root2);
+    root2 = canonical7(root2);
     safe4(root2);
-    const manifestPath = join31(root2, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
-    const raw = witness(manifestPath);
+    const manifestPath = join32(root2, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
+    const raw = witness(manifestPath, undefined, undefined, agent === "claude" ? "claude-plugin-manifest-v1" : undefined);
     if (raw === null)
       unresolved("plugin manifest missing");
     const manifest = parseConfig(raw, manifestPath);
-    const hooks = witness(join31(root2, "hooks/hooks.json"));
+    const hooks = witness(join32(root2, "hooks/hooks.json"));
     if (manifest.hooks !== undefined || hooks !== null)
       unresolved("plugin hooks require a separate no-skill-injection review");
-    const commands = join31(root2, "commands");
+    const commands = join32(root2, "commands");
     safe4(commands);
     if (agent === "claude" && (manifest.commands !== undefined || lstatSync24(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync10(commands).length))
       unresolved("legacy command discovery requires retirement or a dedicated format adapter");
-    const rootSkill = witness(join31(root2, "SKILL.md"));
+    const rootSkill = witness(join32(root2, "SKILL.md"));
     if (rootSkill !== null)
       roots.add(root2);
     const declared = manifest.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
     if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
       unresolved("unsupported plugin skill paths");
     if (agent === "claude")
-      roots.add(join31(root2, "skills"));
+      roots.add(join32(root2, "skills"));
     for (const value of declared) {
       const path = resolve18(root2, value);
-      if (path !== root2 && !path.startsWith(root2 + sep7))
+      if (path !== root2 && !path.startsWith(root2 + sep8))
         unresolved("plugin skill path escapes its root");
-      roots.add(path.endsWith(`${sep7}SKILL.md`) ? dirname19(path) : path);
+      roots.add(path.endsWith(`${sep8}SKILL.md`) ? dirname19(path) : path);
     }
   }
   if (agent === "claude") {
-    const registrations = witness(join31(home, ".claude/plugins/installed_plugins.json"));
-    const installed = registrations === null ? {} : parseConfig(registrations, join31(home, ".claude/plugins/installed_plugins.json")).plugins;
-    const commands = canonical6(join31(home, ".claude/commands"));
+    const registrations = witness(join32(home, ".claude/plugins/installed_plugins.json"));
+    const installed = registrations === null ? {} : parseConfig(registrations, join32(home, ".claude/plugins/installed_plugins.json")).plugins;
+    const commands = canonical7(join32(home, ".claude/commands"));
     safe4(commands);
     if (lstatSync24(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync10(commands).length)
       unresolved("legacy home command discovery requires a dedicated format adapter");
@@ -20580,16 +20793,16 @@ function resolveAgentDiscovery(options) {
       const market = config.marketplaces?.[marketplace] ?? (marketplace === "personal" ? { source_type: "local", source: home } : undefined);
       if (split < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute18(market.source))
         unresolved("enabled plugin marketplace is not an explicit local source");
-      const catalogText = witness(join31(market.source, ".agents/plugins/marketplace.json"));
+      const catalogText = witness(join32(market.source, ".agents/plugins/marketplace.json"));
       if (catalogText === null)
         unresolved("marketplace catalog missing");
-      const catalog = parseConfig(catalogText, join31(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
+      const catalog = parseConfig(catalogText, join32(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
       if (matches.length !== 1 || matches[0]?.source?.source !== "local" || typeof matches[0]?.source?.path !== "string")
         unresolved("plugin catalog source is missing or ambiguous");
       plugin(resolve18(market.source, matches[0].source.path));
     }
   } else if (agent === "opencode") {
-    if (witness(join31(home, ".config/opencode/opencode.jsonc")) !== null || witness(join31(home, ".config/opencode/config.json")) !== null)
+    if (witness(join32(home, ".config/opencode/opencode.jsonc")) !== null || witness(join32(home, ".config/opencode/config.json")) !== null)
       unresolved("additional config layers require review");
     if ((config.plugin?.length ?? 0) > 0 || config.skills?.urls?.length)
       unresolved("external plugin or remote skill source");
@@ -20598,15 +20811,15 @@ function resolveAgentDiscovery(options) {
         unresolved("relative or malformed added skill root");
       roots.add(path);
     }
-    const localPlugins = join31(home, ".config/opencode/plugins");
+    const localPlugins = join32(home, ".config/opencode/plugins");
     safe4(localPlugins);
     if (lstatSync24(localPlugins, { throwIfNoEntry: false }) && readdirSync10(localPlugins).some((name) => name !== "skills-cli.js"))
       unresolved("additional local plugin hooks require review");
   } else if (agent === "sumi") {
-    if ((config.plugin?.length ?? 0) > 0 || (config.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical6(configPath) && source.path !== canonical6(join31(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
+    if ((config.plugin?.length ?? 0) > 0 || (config.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical7(configPath) && source.path !== canonical7(join32(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
       unresolved("external or foreign local plugins require review");
   } else if (agent === "hermes") {
-    for (const directory of [join31(home, ".hermes/plugins"), join31(home, ".hermes/hermes-agent")]) {
+    for (const directory of [join32(home, ".hermes/plugins"), join32(home, ".hermes/hermes-agent")]) {
       safe4(directory);
       if (lstatSync24(directory, { throwIfNoEntry: false }))
         unresolved("installed runtime/plugin discovery requires reviewed source bindings");
@@ -20616,30 +20829,30 @@ function resolveAgentDiscovery(options) {
   } else if (agent === "gemini") {
     if (Object.keys(config.extensions ?? {}).length || config.skills?.paths?.length)
       unresolved("custom extension or skill paths");
-    const directory = join31(home, ".gemini/extensions");
+    const directory = join32(home, ".gemini/extensions");
     safe4(directory);
     if (lstatSync24(directory, { throwIfNoEntry: false }))
       for (const name of readdirSync10(directory)) {
-        const root2 = join31(directory, name);
+        const root2 = join32(directory, name);
         safe4(root2);
         if (!lstatSync24(root2)?.isDirectory())
           continue;
-        const raw = witness(join31(root2, "gemini-extension.json"));
+        const raw = witness(join32(root2, "gemini-extension.json"));
         if (raw === null)
           unresolved("extension registration missing");
-        const manifest = parseConfig(raw, join31(root2, "gemini-extension.json"));
-        if (manifest.hooks !== undefined || witness(join31(root2, "hooks/hooks.json")) !== null || witness(join31(root2, ".gemini-extension-install.json")) !== null)
+        const manifest = parseConfig(raw, join32(root2, "gemini-extension.json"));
+        if (manifest.hooks !== undefined || witness(join32(root2, "hooks/hooks.json")) !== null || witness(join32(root2, ".gemini-extension-install.json")) !== null)
           unresolved("extension hooks or linked registration require review");
-        roots.add(join31(root2, "skills"));
+        roots.add(join32(root2, "skills"));
       }
   }
-  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join31(home, ".hermes/plugins"), join31(home, ".hermes/hermes-agent")].map((path) => canonical6(path))) } : {} };
+  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join32(home, ".hermes/plugins"), join32(home, ".hermes/hermes-agent")].map((path) => canonical7(path))) } : {} };
 }
 
 // src/lib/authoring-path.ts
 var NATIVE_DISCOVERY_ROOTS = NATIVE_SKILL_ROOTS.map(([, path]) => path.split("/"));
 function pathParts(path) {
-  return resolve19(path).split(sep8).filter(Boolean);
+  return resolve19(path).split(sep9).filter(Boolean);
 }
 function nativeRootMatch(path) {
   const parts = pathParts(path);
@@ -20665,10 +20878,10 @@ function physicalPath(path) {
   return resolve19(realpathSync11(cursor), ...suffix);
 }
 function contains(root2, path) {
-  return path === root2 || path.startsWith(root2 + sep8);
+  return path === root2 || path.startsWith(root2 + sep9);
 }
 function configuredRoots(home, explicitHome) {
-  const homeData = join32(home, ".hasna", "skills");
+  const homeData = join33(home, ".hasna", "skills");
   const homePolicy = readManagedSkillPolicySnapshot(homeData);
   const configuredPolicy = !explicitHome && resolve19(getDataDirReadOnly()) !== resolve19(homeData) ? readManagedSkillPolicySnapshot(getDataDirReadOnly()) : null;
   const policy = homePolicy ?? configuredPolicy;
@@ -20699,7 +20912,7 @@ function configuredRoots(home, explicitHome) {
       admitBinding(binding);
       continue;
     }
-    const nativeHome = join32(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
+    const nativeHome = join33(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
     if (!lstatSync25(nativeHome, { throwIfNoEntry: false }))
       continue;
     roots.push(...resolveAgentDiscovery({ home, agent, canonical: physicalPath }).roots);
@@ -20714,8 +20927,8 @@ function assertPortableAuthoringPath(path, options = {}) {
   const candidates = [lexical, physical];
   let native = candidates.map(nativeRootMatch).find(Boolean);
   const home = resolve19(options.homeDir ?? homedir6());
-  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join32(home, ...parts));
-  defaults.push(join32(home, ".codex/plugins/cache"), join32(home, ".claude/plugins/cache"), join32(home, ".claude/plugins/synced"), join32(home, ".gemini/extensions"));
+  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join33(home, ...parts));
+  defaults.push(join33(home, ".codex/plugins/cache"), join33(home, ".claude/plugins/cache"), join33(home, ".claude/plugins/synced"), join33(home, ".gemini/extensions"));
   for (const root2 of defaults) {
     if (candidates.some((candidate2) => contains(resolve19(root2), candidate2) || contains(physicalPath(root2), candidate2)))
       native ??= root2;
@@ -20736,15 +20949,15 @@ function getPortableSkillsRoot(options = {}) {
 function resolvePortableSkillsRoot(options, migrate) {
   if (options.rootDir)
     return options.rootDir;
-  const appDir = options.homeDir ? join33(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
-  const cache = join33(appDir, SKILLS_CACHE_DIRNAME);
+  const appDir = options.homeDir ? join34(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
+  const cache = join34(appDir, SKILLS_CACHE_DIRNAME);
   if (isOwnerLayoutMigrated(appDir) && safeIsDirectory(cache))
     return cache;
-  const installed = join33(appDir, INSTALLED_SKILLS_DIRNAME);
+  const installed = join34(appDir, INSTALLED_SKILLS_DIRNAME);
   return installed;
 }
 function getPortableSkillPath(name, options = {}) {
-  return join33(getPortableSkillsRoot(options), normalizePortableSkillName(name));
+  return join34(getPortableSkillsRoot(options), normalizePortableSkillName(name));
 }
 function findPortableSkill(name, options = {}) {
   let normalized;
@@ -20770,7 +20983,7 @@ function listPortableSkills(options = {}) {
   for (const entry of readdirSync11(root2).sort()) {
     if (entry.startsWith("."))
       continue;
-    const path = join33(root2, entry);
+    const path = join34(root2, entry);
     if (!safeIsDirectory(path))
       continue;
     try {
@@ -20804,9 +21017,9 @@ function isOfficialSkillName(name) {
 function scaffoldPortableSkill(name, options = {}) {
   const skillName = normalizeNewPortableSkillName(name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join33(readOnlyRoot, skillName), options);
+  assertPortableAuthoringPath(join34(readOnlyRoot, skillName), options);
   const root2 = getPortableSkillsRoot(options);
-  const skillPath = join33(root2, skillName);
+  const skillPath = join34(root2, skillName);
   assertPortableAuthoringPath(skillPath, options);
   if (existsSync14(skillPath)) {
     if (!options.overwrite)
@@ -20840,7 +21053,7 @@ function portPortableSkillDirectory(sourceDir, options = {}) {
   const skipped = [];
   const entries = readdirSync11(absoluteSource, { withFileTypes: true }).map((entry) => entry.name).filter((entryName) => !entryName.startsWith(".")).sort();
   for (const entryName of entries) {
-    const childPath = join33(absoluteSource, entryName);
+    const childPath = join34(absoluteSource, entryName);
     if (!safeIsDirectory(childPath))
       continue;
     if (!isSkillCandidate(childPath)) {
@@ -20869,7 +21082,7 @@ function portPortableSkillDirectory(sourceDir, options = {}) {
   };
 }
 function isSkillCandidate(dir) {
-  return existsSync14(join33(dir, "SKILL.md")) || existsSync14(join33(dir, "skill.json")) || existsSync14(join33(dir, "package.json"));
+  return existsSync14(join34(dir, "SKILL.md")) || existsSync14(join34(dir, "skill.json")) || existsSync14(join34(dir, "package.json"));
 }
 function physicalImportPath(path) {
   let ancestor = resolve20(path);
@@ -20878,14 +21091,14 @@ function physicalImportPath(path) {
     suffix.unshift(basename12(ancestor));
     ancestor = dirname21(ancestor);
   }
-  return join33(realpathSync12(ancestor), ...suffix);
+  return join34(realpathSync12(ancestor), ...suffix);
 }
 function assertDisjointImportPaths(source, destination) {
   const sourcePath = realpathSync12(source);
   const destinationPath = physicalImportPath(destination);
   const contains2 = (parent, child) => {
     const path = relative7(parent, child);
-    return path === "" || !isAbsolute19(path) && path !== ".." && !path.startsWith(`..${sep9}`);
+    return path === "" || !isAbsolute19(path) && path !== ".." && !path.startsWith(`..${sep10}`);
   };
   if (contains2(sourcePath, destinationPath) || contains2(destinationPath, sourcePath)) {
     throw new Error("Source and destination skill directories must not overlap");
@@ -20904,11 +21117,11 @@ function portPortableSkill(sourcePath, options = {}) {
     const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename12(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
-  const readOnlyDestination = join33(resolvePortableSkillsRoot(options, false), skillName);
+  const readOnlyDestination = join34(resolvePortableSkillsRoot(options, false), skillName);
   assertPortableAuthoringPath(readOnlyDestination, options);
   assertDisjointImportPaths(absoluteSource, readOnlyDestination);
   const root2 = getPortableSkillsRoot(options);
-  const destination = join33(root2, skillName);
+  const destination = join34(root2, skillName);
   assertPortableAuthoringPath(destination, options);
   assertDisjointImportPaths(absoluteSource, destination);
   if (existsSync14(destination)) {
@@ -20953,13 +21166,13 @@ function buildCorpusManifest(input, name) {
 function writeCorpusSkill(input, options = {}) {
   const name = normalizePortableSkillName(input.name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join33(readOnlyRoot, name), options);
+  assertPortableAuthoringPath(join34(readOnlyRoot, name), options);
   const root2 = getPortableSkillsRoot(options);
-  const skillPath = join33(root2, name);
+  const skillPath = join34(root2, name);
   assertPortableAuthoringPath(skillPath, options);
   const created = !existsSync14(skillPath);
   mkdirSync10(skillPath, { recursive: true });
-  writeFileSync9(join33(skillPath, "SKILL.md"), input.skillMd);
+  writeFileSync9(join34(skillPath, "SKILL.md"), input.skillMd);
   const manifest = buildCorpusManifest(input, name);
   writeSkillJsonWithHash(skillPath, manifest);
   return { name, path: skillPath, manifest, created };
@@ -20967,22 +21180,22 @@ function writeCorpusSkill(input, options = {}) {
 function installCorpusSkillAtomically(input, options = {}) {
   const name = normalizePortableSkillName(input.name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join33(readOnlyRoot, name), options);
+  assertPortableAuthoringPath(join34(readOnlyRoot, name), options);
   const root2 = getPortableSkillsRoot(options);
-  const target = join33(root2, name);
+  const target = join34(root2, name);
   assertPortableAuthoringPath(target, options);
   const created = !existsSync14(target);
   mkdirSync10(root2, { recursive: true });
-  const staging = mkdtempSync2(join33(root2, `.pull-${name}-`));
+  const staging = mkdtempSync2(join34(root2, `.pull-${name}-`));
   let moved = false;
   let backup = null;
   try {
-    writeFileSync9(join33(staging, "SKILL.md"), input.skillMd);
+    writeFileSync9(join34(staging, "SKILL.md"), input.skillMd);
     const manifest = buildCorpusManifest(input, name);
     writeSkillJsonWithHash(staging, manifest);
     if (existsSync14(target)) {
-      backup = mkdtempSync2(join33(root2, `.pull-backup-${name}-`));
-      renameSync6(target, join33(backup, name));
+      backup = mkdtempSync2(join34(root2, `.pull-backup-${name}-`));
+      renameSync6(target, join34(backup, name));
       moved = true;
     }
     renameSync6(staging, target);
@@ -20991,9 +21204,9 @@ function installCorpusSkillAtomically(input, options = {}) {
     return { name, path: target, manifest, created };
   } catch (error) {
     rmSync4(staging, { recursive: true, force: true });
-    if (moved && backup && existsSync14(join33(backup, name))) {
+    if (moved && backup && existsSync14(join34(backup, name))) {
       try {
-        renameSync6(join33(backup, name), target);
+        renameSync6(join34(backup, name), target);
       } catch {}
     }
     throw error;
@@ -21006,8 +21219,8 @@ function validatePortableSkillDirectory(name, skillPath) {
   const warnings = [...base.warnings];
   let manifest;
   if (existsSync14(skillPath)) {
-    const skillJsonPath = join33(skillPath, "skill.json");
-    const skillMdPath = join33(skillPath, "SKILL.md");
+    const skillJsonPath = join34(skillPath, "skill.json");
+    const skillMdPath = join34(skillPath, "SKILL.md");
     if (!existsSync14(skillJsonPath) && !existsSync14(skillMdPath)) {
       add3(issues, "portable.manifest_missing", "Missing portable manifest: expected SKILL.md frontmatter and/or skill.json");
     }
@@ -21027,7 +21240,7 @@ function validatePortableSkillDirectory(name, skillPath) {
         add3(issues, "portable.version_missing", "Portable manifest missing version");
       }
       const contractIssues = validatePortableManifestContract(manifest, {
-        strict: existsSync14(join33(skillPath, "skill.json")),
+        strict: existsSync14(join34(skillPath, "skill.json")),
         skillPath
       });
       for (const issue of contractIssues)
@@ -21067,7 +21280,7 @@ function validatePortableSkillDirectory(name, skillPath) {
               add3(issues, "portable.command_entry_unsafe", `Command '${command.name}' entry '${command.entry}' must stay inside the skill directory`);
               continue;
             }
-            const entryPath = join33(skillPath, command.entry);
+            const entryPath = join34(skillPath, command.entry);
             if (!existsSync14(entryPath))
               add3(issues, "portable.command_entry_missing", `Command '${command.name}' entry '${command.entry}' is missing`);
             else if (statSync11(entryPath).isDirectory())
@@ -21078,7 +21291,7 @@ function validatePortableSkillDirectory(name, skillPath) {
     } catch (error) {
       add3(issues, "portable.manifest_invalid", error.message);
     }
-    if (manifest?.kind !== "instruction" && !existsSync14(join33(skillPath, "AGENTS.md"))) {
+    if (manifest?.kind !== "instruction" && !existsSync14(join34(skillPath, "AGENTS.md"))) {
       add3(issues, "portable.agents_missing", "Missing AGENTS.md with build-out instructions for coding agents");
     }
   }
@@ -21114,12 +21327,12 @@ async function runPortableSkill(name, args, options = {}) {
   if (!isSafeRelativePath2(command.entry)) {
     return { exitCode: 1, error: `Portable skill '${name}' command entry is unsafe` };
   }
-  const entryPath = join33(skill.path, command.entry);
+  const entryPath = join34(skill.path, command.entry);
   if (!existsSync14(entryPath)) {
     return { exitCode: 1, error: `Entry point '${command.entry}' not found in portable skill '${name}'` };
   }
-  const pkgPath = join33(skill.path, "package.json");
-  const nodeModules = join33(skill.path, "node_modules");
+  const pkgPath = join34(skill.path, "package.json");
+  const nodeModules = join34(skill.path, "node_modules");
   if (existsSync14(pkgPath) && !existsSync14(nodeModules) && hasPackageDependencies(pkgPath)) {
     const install = Bun.spawn(["bun", "install", "--no-save"], {
       cwd: skill.path,
@@ -21376,7 +21589,7 @@ function discoverSkillsInDir(dir, source = "custom") {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillMdPath = join34(dir, entry.name, "SKILL.md");
+      const skillMdPath = join35(dir, entry.name, "SKILL.md");
       if (!existsSync15(skillMdPath))
         continue;
       let content;
@@ -21396,7 +21609,7 @@ function discoverSkillsInDir(dir, source = "custom") {
         category: fm.category || "Development Tools",
         tags: fm.tags || [],
         ...fm.kind ? { kind: fm.kind } : {},
-        ...isHostedMetadataSkillDir(join34(dir, entry.name)) ? { serverOwned: true } : {},
+        ...isHostedMetadataSkillDir(join35(dir, entry.name)) ? { serverOwned: true } : {},
         source
       });
     }
@@ -21412,8 +21625,8 @@ function findExtensionSkillPath(name) {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillDir = join34(config.extensionsDir, entry.name);
-      const skillMdPath = join34(skillDir, "SKILL.md");
+      const skillDir = join35(config.extensionsDir, entry.name);
+      const skillMdPath = join35(skillDir, "SKILL.md");
       if (!existsSync15(skillMdPath))
         continue;
       let content;
@@ -21482,21 +21695,21 @@ function getAllTags(catalog) {
   return Array.from(tagSet).sort();
 }
 // src/lib/run-state.ts
-import { createHash as createHash23, randomBytes } from "crypto";
+import { createHash as createHash24, randomBytes } from "crypto";
 import { existsSync as existsSync16, mkdirSync as mkdirSync11, readFileSync as readFileSync21, readdirSync as readdirSync13, statSync as statSync12, writeFileSync as writeFileSync10 } from "fs";
-import { extname, join as join35, relative as relative8 } from "path";
+import { extname, join as join36, relative as relative8 } from "path";
 function createSkillRun(params, targetDir = process.cwd()) {
   const now = new Date;
   const id = createRunId(now);
   const day = now.toISOString().slice(0, 10);
   const skillName = normalizeSkillName(params.skill);
   const root2 = getProjectStateDir(targetDir);
-  const runDir = join35(root2, "runs", day, id);
-  const logsDir = join35(runDir, "logs");
-  const exportDir = join35(root2, "exports", skillName, id);
+  const runDir = join36(root2, "runs", day, id);
+  const logsDir = join36(runDir, "logs");
+  const exportDir = join36(root2, "exports", skillName, id);
   mkdirSync11(logsDir, { recursive: true });
   mkdirSync11(exportDir, { recursive: true });
-  mkdirSync11(join35(root2, "tmp"), { recursive: true });
+  mkdirSync11(join36(root2, "tmp"), { recursive: true });
   const record3 = {
     id,
     skill: skillName,
@@ -21548,27 +21761,27 @@ function updateSkillRun(context, patch) {
   return context.record;
 }
 function writeRunLogs(context, stdout = "", stderr = "") {
-  writeFileSync10(join35(context.logsDir, "stdout.log"), stdout);
-  writeFileSync10(join35(context.logsDir, "stderr.log"), stderr);
+  writeFileSync10(join36(context.logsDir, "stdout.log"), stdout);
+  writeFileSync10(join36(context.logsDir, "stderr.log"), stderr);
 }
 function appendRunEvent(context, event, data = {}) {
   const line = JSON.stringify({ ts: new Date().toISOString(), event, ...data }) + `
 `;
-  const path = join35(context.runDir, "events.ndjson");
+  const path = join36(context.runDir, "events.ndjson");
   const previous = existsSync16(path) ? readFileSync21(path, "utf-8") : "";
   writeFileSync10(path, previous + line);
 }
 function listSkillRuns(targetDir = process.cwd(), limit = 50) {
-  const runsRoot = join35(getProjectStateDir(targetDir), "runs");
+  const runsRoot = join36(getProjectStateDir(targetDir), "runs");
   if (!existsSync16(runsRoot))
     return [];
   const records = [];
   for (const day of readdirSync13(runsRoot).sort().reverse()) {
-    const dayDir = join35(runsRoot, day);
+    const dayDir = join36(runsRoot, day);
     if (!statSync12(dayDir).isDirectory())
       continue;
     for (const runId of readdirSync13(dayDir).sort().reverse()) {
-      const record3 = readRunRecord(join35(dayDir, runId));
+      const record3 = readRunRecord(join36(dayDir, runId));
       if (record3)
         records.push(record3);
       if (records.length >= limit)
@@ -21578,25 +21791,25 @@ function listSkillRuns(targetDir = process.cwd(), limit = 50) {
   return records;
 }
 function findSkillRun(runId, targetDir = process.cwd()) {
-  const runsRoot = join35(getProjectStateDir(targetDir), "runs");
+  const runsRoot = join36(getProjectStateDir(targetDir), "runs");
   if (!existsSync16(runsRoot))
     return null;
   for (const day of readdirSync13(runsRoot)) {
-    const record3 = readRunRecord(join35(runsRoot, day, runId));
+    const record3 = readRunRecord(join36(runsRoot, day, runId));
     if (record3)
       return record3;
   }
   return null;
 }
 function getRunExportDir(runId, skill, targetDir = process.cwd()) {
-  return join35(getProjectStateDir(targetDir), "exports", normalizeSkillName(skill), runId);
+  return join36(getProjectStateDir(targetDir), "exports", normalizeSkillName(skill), runId);
 }
 function writeRunRecord(context) {
-  writeFileSync10(join35(context.runDir, "run.json"), JSON.stringify(context.record, null, 2) + `
+  writeFileSync10(join36(context.runDir, "run.json"), JSON.stringify(context.record, null, 2) + `
 `);
 }
 function writeArtifactsManifest(context, artifacts) {
-  writeFileSync10(join35(context.runDir, "artifacts.json"), JSON.stringify({ runId: context.record.id, artifacts }, null, 2) + `
+  writeFileSync10(join36(context.runDir, "artifacts.json"), JSON.stringify({ runId: context.record.id, artifacts }, null, 2) + `
 `);
 }
 function collectRunArtifacts(context) {
@@ -21609,14 +21822,14 @@ function collectRunArtifacts(context) {
     artifacts.push({
       path: toProjectRelative(context.targetDir, path),
       mime: mimeForPath(path),
-      sha256: createHash23("sha256").update(bytes).digest("hex"),
+      sha256: createHash24("sha256").update(bytes).digest("hex"),
       sizeBytes: stat2.size
     });
   }
   return artifacts.sort((a, b) => a.path.localeCompare(b.path));
 }
 function readRunRecord(runDir) {
-  const path = join35(runDir, "run.json");
+  const path = join36(runDir, "run.json");
   if (!existsSync16(path))
     return null;
   try {
@@ -21628,7 +21841,7 @@ function readRunRecord(runDir) {
 function walkFiles(dir) {
   const files = [];
   for (const entry of readdirSync13(dir)) {
-    const full = join35(dir, entry);
+    const full = join36(dir, entry);
     if (statSync12(full).isDirectory())
       files.push(...walkFiles(full));
     else
@@ -21737,7 +21950,7 @@ __export(exports_external, {
   pipe: () => pipe,
   partialRecord: () => partialRecord,
   parseAsync: () => parseAsync2,
-  parse: () => parse9,
+  parse: () => parse10,
   overwrite: () => _overwrite,
   output: () => output,
   optional: () => optional,
@@ -21957,7 +22170,7 @@ __export(exports_core2, {
   prettifyError: () => prettifyError,
   parseURLObject: () => parseURLObject,
   parseAsync: () => parseAsync,
-  parse: () => parse7,
+  parse: () => parse8,
   meta: () => meta,
   mergeValues: () => mergeValues,
   memoizer: () => memoizer,
@@ -23411,7 +23624,7 @@ var _parse = (_Err) => {
   };
   return fn;
 };
-var parse7 = /* @__PURE__ */ _parse($ZodRealError);
+var parse8 = /* @__PURE__ */ _parse($ZodRealError);
 var _parseAsync = (_Err) => {
   const fn = async (schema, value, _ctx, params) => {
     const ctx = _ctx ? { ..._ctx, async: true } : { async: true };
@@ -23482,18 +23695,18 @@ var validateAsync = async (schema, value, _ctx) => {
   return result.issues.length === 0;
 };
 var _encode = (_Err) => {
-  const parse8 = _parse(_Err);
+  const parse9 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
     const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
-    return parse8(schema, value, ctx, finalizeParams(fn, _params));
+    return parse9(schema, value, ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
 var encode = /* @__PURE__ */ _encode($ZodRealError);
 var _decode = (_Err) => {
-  const parse8 = _parse(_Err);
+  const parse9 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
-    return parse8(schema, value, _ctx, finalizeParams(fn, _params));
+    return parse9(schema, value, _ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
@@ -26416,10 +26629,10 @@ var $ZodFunction = /* @__PURE__ */ $constructor("$ZodFunction", (inst, def) => {
       throw new Error("implement() must be called with a function");
     }
     return Object.defineProperty(function(...args) {
-      const parsedArgs = inst._def.input ? parse7(inst._def.input, args) : args;
+      const parsedArgs = inst._def.input ? parse8(inst._def.input, args) : args;
       const result = Reflect.apply(func, this, parsedArgs);
       if (inst._def.output) {
-        return parse7(inst._def.output, result);
+        return parse8(inst._def.output, result);
       }
       return result;
     }, "_zod", { value: inst._zod, enumerable: false });
@@ -38057,7 +38270,7 @@ var ZodRealError = /* @__PURE__ */ $constructor("ZodError", initializer2, undefi
 });
 
 // node_modules/zod/v4/classic/parse.js
-var parse9 = /* @__PURE__ */ _parse(ZodRealError);
+var parse10 = /* @__PURE__ */ _parse(ZodRealError);
 var parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
 var safeParse2 = /* @__PURE__ */ _safeParse(ZodRealError);
 var safeParseAsync2 = /* @__PURE__ */ _safeParseAsync(ZodRealError);
@@ -38193,7 +38406,7 @@ var ZodType = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
     exports_util.own(this, "~standard", value);
   },
   parse: function _parse2(data, params) {
-    return parse9(this, data, params, { callee: _parse2 });
+    return parse10(this, data, params, { callee: _parse2 });
   },
   parseAsync: async function _parseAsync2(data, params) {
     return await parseAsync2(this, data, params, { callee: _parseAsync2 });
@@ -41028,7 +41241,7 @@ function clone2(value) {
   return value === undefined ? undefined : JSON.parse(JSON.stringify(value));
 }
 // src/lib/canonical-json.ts
-import { createHash as createHash24 } from "crypto";
+import { createHash as createHash25 } from "crypto";
 function canonicalJson2(value, maximumBytes = 2 * 1024 * 1024) {
   return canonicalJsonAtDepth(value, maximumBytes, 64);
 }
@@ -41072,7 +41285,7 @@ function canonicalJsonAtDepth(value, maximumBytes, maximumDepth) {
   return visit3(value, 0);
 }
 function canonicalJsonSha256(value, maximumBytes) {
-  return createHash24("sha256").update(canonicalJson2(value, maximumBytes)).digest("hex");
+  return createHash25("sha256").update(canonicalJson2(value, maximumBytes)).digest("hex");
 }
 
 // src/lib/remote-recurring-contract.ts
@@ -43136,9 +43349,9 @@ async function createRemoteSkillsClient(env = process.env) {
 }
 // src/lib/scheduler.ts
 import { existsSync as existsSync17, readFileSync as readFileSync23, writeFileSync as writeFileSync11, mkdirSync as mkdirSync12 } from "fs";
-import { join as join36 } from "path";
+import { join as join37 } from "path";
 function getSchedulesPath(targetDir = process.cwd()) {
-  return join36(targetDir, ".skills", "schedules.json");
+  return join37(targetDir, ".skills", "schedules.json");
 }
 function loadSchedules(targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
@@ -43151,7 +43364,7 @@ function loadSchedules(targetDir = process.cwd()) {
 }
 function saveSchedules(data, targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
-  const dir = join36(targetDir, ".skills");
+  const dir = join37(targetDir, ".skills");
   if (!existsSync17(dir))
     mkdirSync12(dir, { recursive: true });
   writeFileSync11(path, JSON.stringify(data, null, 2));
@@ -43339,7 +43552,7 @@ function recordScheduleRun(id, status, targetDir) {
   saveSchedules(data, targetDir);
 }
 // src/lib/revision.ts
-import { createHash as createHash25 } from "crypto";
+import { createHash as createHash26 } from "crypto";
 var REVISION_ID_PATTERN = /^[0-9a-f]{64}$/;
 function revisionIdOf(content) {
   const canonicalContent = {
@@ -43360,15 +43573,15 @@ function revisionIdOf(content) {
     canonicalContent.archiveReason = content.archiveReason ?? null;
     canonicalContent.replacementSlug = content.replacementSlug ?? null;
   }
-  const canonical6 = JSON.stringify(canonicalContent);
-  return createHash25("sha256").update(canonical6).digest("hex");
+  const canonical7 = JSON.stringify(canonicalContent);
+  return createHash26("sha256").update(canonical7).digest("hex");
 }
 function revisionIdOfRecord(record8) {
   return revisionIdOf(record8);
 }
 // src/lib/pull.ts
 import { existsSync as existsSync18, mkdirSync as mkdirSync13, mkdtempSync as mkdtempSync3, readFileSync as readFileSync25, renameSync as renameSync7, rmSync as rmSync5, writeFileSync as writeFileSync12 } from "fs";
-import { dirname as dirname22, join as join37 } from "path";
+import { dirname as dirname22, join as join38 } from "path";
 
 // src/lib/skill-bundles.ts
 import { createHmac, timingSafeEqual } from "crypto";
@@ -43462,7 +43675,7 @@ async function pullOne(client2, rawName, corpusOptions, verify) {
       return reconcileTombstone(slug2, corpusOptions);
     }
     if (bundleResponse.status === 404) {
-      const marker = readPullMarker(join37(getPortableSkillsRoot(corpusOptions), slug2));
+      const marker = readPullMarker(join38(getPortableSkillsRoot(corpusOptions), slug2));
       if (isPublishedInstallMarker(marker)) {
         return { name: slug2, success: true, purged: true, removed: false };
       }
@@ -43501,7 +43714,7 @@ async function pullOne(client2, rawName, corpusOptions, verify) {
     return { name: slug2, success: false, error: `Skill '${slug2}' was not found on the configured Skills instance.` };
   }
   if (!meta3?.revisionId) {
-    const marker = readPullMarker(join37(getPortableSkillsRoot(corpusOptions), slug2));
+    const marker = readPullMarker(join38(getPortableSkillsRoot(corpusOptions), slug2));
     if (isPublishedInstallMarker(marker)) {
       return { name: slug2, success: true, purged: true, removed: false };
     }
@@ -43558,7 +43771,7 @@ function provenRevision(meta3, slug2, bundle2) {
   return declared;
 }
 function reconcileTombstone(slug2, corpusOptions) {
-  const target = join37(getPortableSkillsRoot(corpusOptions), slug2);
+  const target = join38(getPortableSkillsRoot(corpusOptions), slug2);
   if (!hasSkillsOwnershipMarker(target)) {
     return { name: slug2, success: true, tombstoned: true, removed: false, leftInPlace: true };
   }
@@ -43567,7 +43780,7 @@ function reconcileTombstone(slug2, corpusOptions) {
 }
 function readPullMarker(dir) {
   try {
-    return JSON.parse(readFileSync25(join37(dir, PULL_MARKER_FILE), "utf-8"));
+    return JSON.parse(readFileSync25(join38(dir, PULL_MARKER_FILE), "utf-8"));
   } catch {
     return null;
   }
@@ -43702,14 +43915,14 @@ function verifyBundleResponseBytes(buffer, response, verify = {}) {
 function installBundleAtomically(name, entries, options = {}, marker = {}) {
   const root2 = getPortableSkillsRoot(options);
   mkdirSync13(root2, { recursive: true });
-  const target = join37(root2, name);
+  const target = join38(root2, name);
   const created = !existsSync18(target);
-  const staging = mkdtempSync3(join37(root2, `.pull-${name}-`));
+  const staging = mkdtempSync3(join38(root2, `.pull-${name}-`));
   let moved = false;
   let backup = null;
   try {
     for (const entry of entries) {
-      const destination = join37(staging, entry.path);
+      const destination = join38(staging, entry.path);
       mkdirSync13(dirname22(destination), { recursive: true });
       writeFileSync12(destination, entry.bytes, { mode: entry.mode });
     }
@@ -43722,8 +43935,8 @@ function installBundleAtomically(name, entries, options = {}, marker = {}) {
       ...marker.revisionId ? { revisionId: marker.revisionId } : {}
     });
     if (existsSync18(target)) {
-      backup = mkdtempSync3(join37(root2, `.pull-backup-${name}-`));
-      renameSync7(target, join37(backup, name));
+      backup = mkdtempSync3(join38(root2, `.pull-backup-${name}-`));
+      renameSync7(target, join38(backup, name));
       moved = true;
     }
     renameSync7(staging, target);
@@ -43731,9 +43944,9 @@ function installBundleAtomically(name, entries, options = {}, marker = {}) {
       rmSync5(backup, { recursive: true, force: true });
   } catch (error61) {
     rmSync5(staging, { recursive: true, force: true });
-    if (moved && backup && existsSync18(join37(backup, name))) {
+    if (moved && backup && existsSync18(join38(backup, name))) {
       try {
-        renameSync7(join37(backup, name), target);
+        renameSync7(join38(backup, name), target);
       } catch {}
     }
     throw error61;
@@ -43752,7 +43965,7 @@ function writePullMarker(dir, record8) {
     ...record8.revisionId ? { revisionId: record8.revisionId } : {},
     syncedAt: new Date().toISOString()
   };
-  writeFileSync12(join37(dir, PULL_MARKER_FILE), `${JSON.stringify(marker, null, 2)}
+  writeFileSync12(join38(dir, PULL_MARKER_FILE), `${JSON.stringify(marker, null, 2)}
 `);
 }
 async function safeMeta(client2, slug2) {
@@ -43902,7 +44115,7 @@ async function requestInvitationEmail(origin, action, input2) {
 }
 
 // src/lib/remote-private-publications.ts
-import { createHash as createHash26 } from "crypto";
+import { createHash as createHash27 } from "crypto";
 var PRIVATE_PUBLICATION_MAX_BYTES = 16 * 1024 * 1024;
 var failures2 = {
   INVALID_REQUEST: [400, "The publication request is invalid."],
@@ -43949,7 +44162,7 @@ var hash3 = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v);
 var record9 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
 var exact = (v, keys) => record9(v) && Object.keys(v).sort().join(",") === keys.sort().join(",");
 var date5 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v));
-var publicationSha256 = (bytes) => createHash26("sha256").update(bytes).digest("hex");
+var publicationSha256 = (bytes) => createHash27("sha256").update(bytes).digest("hex");
 function checkedPublicationDeclaration(value) {
   if (!exact(value, ["idempotencyKey", "version", "expectedCurrentVersionId", "manifestText", "archiveSha256", "archiveByteSize"]) || !publicationUuid(value.idempotencyKey) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || typeof value.manifestText !== "string" || Buffer.byteLength(value.manifestText) > 16384 || !hash3(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES)
     return bad();
@@ -45756,10 +45969,10 @@ function clone3(value) {
 }
 // src/lib/feedback.ts
 import { appendFileSync, existsSync as existsSync19, mkdirSync as mkdirSync15 } from "fs";
-import { dirname as dirname24, join as join38 } from "path";
+import { dirname as dirname24, join as join39 } from "path";
 import { Database } from "bun:sqlite";
 function getFeedbackDbPath() {
-  return join38(getDataDir(), "skills.db");
+  return join39(getDataDir(), "skills.db");
 }
 function getFeedbackDb() {
   const dbPath = getFeedbackDbPath();
@@ -45791,7 +46004,7 @@ function saveFeedback(input2) {
     throw new Error("Feedback message is required");
   const category = input2.category ?? "general";
   if (isApiMode()) {
-    const path = join38(getDataDir(), "feedback.jsonl");
+    const path = join39(getDataDir(), "feedback.jsonl");
     const dir = dirname24(path);
     if (!existsSync19(dir))
       mkdirSync15(dir, { recursive: true });
@@ -45815,7 +46028,7 @@ function isApiMode(env = process.env) {
   }
 }
 // src/lib/native-storage.ts
-import { createHash as createHash27, createHmac as createHmac2 } from "crypto";
+import { createHash as createHash28, createHmac as createHmac2 } from "crypto";
 import {
   existsSync as existsSync20,
   mkdirSync as mkdirSync16,
@@ -45824,7 +46037,7 @@ import {
   statSync as statSync13,
   writeFileSync as writeFileSync14
 } from "fs";
-import { dirname as dirname25, join as join39, normalize as normalize5, relative as relative10, sep as sep10 } from "path";
+import { dirname as dirname25, join as join40, normalize as normalize5, relative as relative10, sep as sep11 } from "path";
 var SKILLS_STORAGE_TABLES = [
   "skills_sync_records",
   "skills_sync_cursors"
@@ -45961,7 +46174,7 @@ function getSkillsNativeStorageStatus(options = {}) {
     local: {
       dataDir: getDataDir(),
       projectStateDir: getProjectStateDir(targetDir),
-      feedbackDbPath: join39(getDataDir(), "skills.db")
+      feedbackDbPath: join40(getDataDir(), "skills.db")
     },
     remote: {
       databaseConfigured: Boolean(config2.databaseUrl),
@@ -45991,7 +46204,7 @@ function exportSkillsLocalSnapshot(targetDir = process.cwd(), options = {}) {
       files.push({
         path: relativePath,
         sizeBytes: bytes.byteLength,
-        sha256: createHash27("sha256").update(bytes).digest("hex"),
+        sha256: createHash28("sha256").update(bytes).digest("hex"),
         ...options.includeFileContents ? { contentBase64: Buffer.from(bytes).toString("base64") } : {}
       });
     }
@@ -46016,7 +46229,7 @@ function importSkillsLocalSnapshot(snapshot2, targetDir = process.cwd(), options
       continue;
     }
     const bytes = Buffer.from(file2.contentBase64, "base64");
-    const hash4 = createHash27("sha256").update(bytes).digest("hex");
+    const hash4 = createHash28("sha256").update(bytes).digest("hex");
     if (hash4 !== file2.sha256) {
       throw new Error(`Snapshot file checksum mismatch: ${file2.path}`);
     }
@@ -46318,7 +46531,7 @@ function parsePositiveInteger(value) {
 function walkFiles2(dir) {
   const files = [];
   for (const entry of readdirSync14(dir)) {
-    const full = join39(dir, entry);
+    const full = join40(dir, entry);
     const stats = statSync13(full);
     if (stats.isDirectory())
       files.push(...walkFiles2(full));
@@ -46329,13 +46542,13 @@ function walkFiles2(dir) {
 }
 function resolveSnapshotPath(targetDir, snapshotPath) {
   const normalizedPath = normalize5(snapshotPath);
-  if (normalizedPath.startsWith("..") || normalizedPath.includes(`${sep10}..${sep10}`) || normalizedPath.startsWith(sep10)) {
+  if (normalizedPath.startsWith("..") || normalizedPath.includes(`${sep11}..${sep11}`) || normalizedPath.startsWith(sep11)) {
     throw new Error(`Unsafe snapshot path: ${snapshotPath}`);
   }
   if (!toPosix(normalizedPath).startsWith(".skills/")) {
     throw new Error(`Snapshot path must stay inside .skills: ${snapshotPath}`);
   }
-  return join39(targetDir, normalizedPath);
+  return join40(targetDir, normalizedPath);
 }
 function normalizeS3Prefix(prefix) {
   return (prefix ?? "").trim().replace(/^\/+|\/+$/g, "");
@@ -46348,7 +46561,7 @@ function toIsoString(value) {
   return Number.isNaN(date6.getTime()) ? value : date6.toISOString();
 }
 function sha256Hex2(value) {
-  return createHash27("sha256").update(value).digest("hex");
+  return createHash28("sha256").update(value).digest("hex");
 }
 function normalizeHeaders(headers) {
   const result = {};
@@ -46400,7 +46613,7 @@ function toArrayBuffer(bytes) {
   return buffer;
 }
 // src/lib/station-snapshot.ts
-import { createHash as createHash28 } from "crypto";
+import { createHash as createHash29 } from "crypto";
 import {
   copyFileSync,
   mkdirSync as mkdirSync17,
@@ -46408,12 +46621,12 @@ import {
   statSync as statSync15,
   writeFileSync as writeFileSync15
 } from "fs";
-import { dirname as dirname26, isAbsolute as isAbsolute21, relative as relative11, resolve as resolve21, sep as sep12 } from "path";
+import { dirname as dirname26, isAbsolute as isAbsolute21, relative as relative11, resolve as resolve21, sep as sep13 } from "path";
 
 // src/lib/portable-snapshot-filter.ts
 import { readdirSync as readdirSync15, statSync as statSync14 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join40, sep as sep11 } from "path";
+import { join as join41, sep as sep12 } from "path";
 var SYNC_HOMES = [
   { name: "skills", subClass: "skills", agent: null },
   { name: "custom", subClass: "custom", agent: null },
@@ -46506,16 +46719,16 @@ function isPortableWithinSkill(relativeParts) {
 function homePathFor(definition, homesRoot) {
   const home = homesRoot ?? homedir7();
   if (definition.subClass === "skills" || definition.subClass === "custom") {
-    return join40(skillsDataRootForHome(home), definition.name);
+    return join41(skillsDataRootForHome(home), definition.name);
   }
   if (definition.agent === "opencode") {
-    return join40(home, ".config", "opencode", "skills");
+    return join41(home, ".config", "opencode", "skills");
   }
-  return join40(home, `.${definition.agent}`, "skills");
+  return join41(home, `.${definition.agent}`, "skills");
 }
 function destinationFor(definition, stationId, relativePath) {
-  const category = definition.subClass === "agent-homes" ? join40("agent-homes", definition.agent ?? "") : definition.name;
-  return join40("resources", stationId, "skills", category, ...relativePath.split(sep11));
+  const category = definition.subClass === "agent-homes" ? join41("agent-homes", definition.agent ?? "") : definition.name;
+  return join41("resources", stationId, "skills", category, ...relativePath.split(sep12));
 }
 function walkEntries(absoluteRoot) {
   let entries;
@@ -46526,7 +46739,7 @@ function walkEntries(absoluteRoot) {
   }
   const output2 = [];
   for (const entry of entries) {
-    const childFull = join40(absoluteRoot, entry.name);
+    const childFull = join41(absoluteRoot, entry.name);
     if (entry.isSymbolicLink()) {
       output2.push({ kind: "symlink", relativePath: entry.name, fullPath: childFull });
       continue;
@@ -46537,7 +46750,7 @@ function walkEntries(absoluteRoot) {
       }
       const nested = walkEntries(childFull);
       for (const item of nested) {
-        output2.push({ ...item, relativePath: join40(entry.name, item.relativePath) });
+        output2.push({ ...item, relativePath: join41(entry.name, item.relativePath) });
       }
       continue;
     }
@@ -46575,7 +46788,7 @@ function validateStationId(stationId) {
   }
 }
 function sha256File(filePath) {
-  return createHash28("sha256").update(readFileSync27(filePath)).digest("hex");
+  return createHash29("sha256").update(readFileSync27(filePath)).digest("hex");
 }
 function scanHome(definition, homesRoot) {
   const homePath = homePathFor(definition, homesRoot);
@@ -46583,7 +46796,7 @@ function scanHome(definition, homesRoot) {
   const portable = [];
   const skipped = [];
   for (const entry of entries) {
-    const relativeParts = entry.relativePath.split(sep12);
+    const relativeParts = entry.relativePath.split(sep13);
     const fileName = relativeParts[relativeParts.length - 1];
     if (entry.kind === "symlink") {
       skipped.push({ relativePath: entry.relativePath, reason: "symlink" });
@@ -46674,7 +46887,7 @@ function writeStationSnapshot(options) {
   for (const plan of plans) {
     const destination = resolve21(repoRoot, plan.destination);
     const destinationRelative = relative11(repoRoot, destination);
-    if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep12) || isAbsolute21(destinationRelative)) {
+    if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep13) || isAbsolute21(destinationRelative)) {
       throw new StationSnapshotError("DESTINATION_ESCAPE", `destination escapes repo root: ${plan.destination}`);
     }
     let existingDigest = null;
@@ -46726,7 +46939,7 @@ function writeStationSnapshot(options) {
   };
 }
 // src/lib/station-hydrate.ts
-import { createHash as createHash29 } from "crypto";
+import { createHash as createHash30 } from "crypto";
 import {
   copyFileSync as copyFileSync2,
   mkdirSync as mkdirSync18,
@@ -46735,7 +46948,7 @@ import {
   statSync as statSync16,
   writeFileSync as writeFileSync16
 } from "fs";
-import { dirname as dirname27, join as join41, resolve as resolve22, sep as sep13 } from "path";
+import { dirname as dirname27, join as join42, resolve as resolve22, sep as sep14 } from "path";
 var STATION_HYDRATION_MANIFEST_SCHEMA = "hasna.fleet-resources.skills-hydration-manifest/v1";
 var STATION_HYDRATION_PRODUCER = { name: "@hasna/skills", version: package_default.version };
 var MANIFEST_HASH_KEY_SEP = String.fromCharCode(0);
@@ -46743,11 +46956,11 @@ function fail2(code2, message, detail = []) {
   throw new StationSnapshotError(code2, message, detail);
 }
 function snapshotRootFor(repoRoot, stationId) {
-  return join41(repoRoot, "resources", stationId, "skills");
+  return join42(repoRoot, "resources", stationId, "skills");
 }
 function readSnapshotManifest(repoRoot, stationId) {
   const snapshotRoot = snapshotRootFor(repoRoot, stationId);
-  const manifestPath = join41(snapshotRoot, "sync-manifest.json");
+  const manifestPath = join42(snapshotRoot, "sync-manifest.json");
   let manifest;
   try {
     manifest = JSON.parse(readFileSync28(manifestPath, "utf8"));
@@ -46774,7 +46987,7 @@ function planStationHydration(stationId, repoRoot) {
   const hashMismatches = [];
   const skippedByRule = [];
   for (const agent of SYNC_AGENTS) {
-    const agentRoot = join41(snapshotRoot, "agent-homes", agent);
+    const agentRoot = join42(snapshotRoot, "agent-homes", agent);
     let identEntries;
     try {
       identEntries = readdirSync16(agentRoot, { withFileTypes: true });
@@ -46785,10 +46998,10 @@ function planStationHydration(stationId, repoRoot) {
       if (!identEntry.isDirectory() || identEntry.name.startsWith(".")) {
         continue;
       }
-      const identRoot = join41(agentRoot, identEntry.name);
+      const identRoot = join42(agentRoot, identEntry.name);
       const entries = walkEntries(identRoot);
       for (const entry of entries) {
-        const relativeParts = [identEntry.name, ...entry.relativePath.split(sep13)];
+        const relativeParts = [identEntry.name, ...entry.relativePath.split(sep14)];
         if (entry.kind === "symlink") {
           symlinks.push({ ident: identEntry.name, agent, relativePath: entry.relativePath });
           continue;
@@ -46812,8 +47025,8 @@ function planStationHydration(stationId, repoRoot) {
           });
           continue;
         }
-        const withinIdent = relativeParts.slice(1).join(sep13);
-        const homeRelative = relativeParts.join(sep13);
+        const withinIdent = relativeParts.slice(1).join(sep14);
+        const homeRelative = relativeParts.join(sep14);
         if (REFUSED_SCANNER_FLAGGED.has(homeRelative)) {
           skippedByRule.push({
             ident: identEntry.name,
@@ -46932,7 +47145,7 @@ function skillSha256(skill) {
     return sha256File(skill.files[0].winner.fullPath);
   }
   const joined = skill.files.map((file2) => sha256File(file2.winner.fullPath));
-  return createHash29("sha256").update(joined.sort().join(`
+  return createHash30("sha256").update(joined.sort().join(`
 `)).digest("hex");
 }
 function writeStationHydration(options) {
@@ -46970,7 +47183,7 @@ function writeStationHydration(options) {
   const toWrite = [];
   for (const skill of plan.winners) {
     for (const file2 of skill.files) {
-      const destination = join41(cacheRoot, skill.ident, file2.withinIdent);
+      const destination = join42(cacheRoot, skill.ident, file2.withinIdent);
       const digest3 = sha256File(file2.winner.fullPath);
       let existingDigest = null;
       try {
@@ -47012,7 +47225,7 @@ function writeStationHydration(options) {
     },
     skills: resultSkills
   };
-  const hydrationManifestPath = join41(dirname27(cacheRoot), `hydration-${options.stationId}.json`);
+  const hydrationManifestPath = join42(dirname27(cacheRoot), `hydration-${options.stationId}.json`);
   mkdirSync18(dirname27(hydrationManifestPath), { recursive: true });
   writeFileSync16(hydrationManifestPath, `${JSON.stringify(hydration, null, 2)}
 `);
@@ -47025,7 +47238,7 @@ function writeStationHydration(options) {
 }
 // src/lib/private-publication-recovery.ts
 import { constants as constants14, closeSync as closeSync14, fsyncSync as fsyncSync6, fstatSync as fstatSync14, lstatSync as lstatSync26, mkdirSync as mkdirSync19, openSync as openSync14, readSync as readSync12, realpathSync as realpathSync13, renameSync as renameSync8, unlinkSync as unlinkSync6, writeFileSync as writeFileSync17 } from "fs";
-import { dirname as dirname28, isAbsolute as isAbsolute22, join as join42, resolve as resolve23 } from "path";
+import { dirname as dirname28, isAbsolute as isAbsolute22, join as join43, resolve as resolve23 } from "path";
 import { randomUUID as randomUUID5 } from "crypto";
 var fail3 = () => {
   throw new PrivatePublicationError("PUBLICATION_RECOVERY_INVALID", "The recovery directory is invalid or changed. Preserve it and inspect the existing intent; do not start a replacement automatically.");
@@ -47051,7 +47264,7 @@ function unchangedDirectory(directory2, identity5) {
     return fail3();
 }
 function readOwned(directory2, name, max) {
-  const identity5 = safeDirectory(directory2), file2 = join42(directory2, name);
+  const identity5 = safeDirectory(directory2), file2 = join43(directory2, name);
   const fd = openSync14(file2, constants14.O_RDONLY | constants14.O_NOFOLLOW);
   try {
     const stat2 = fstatSync14(fd);
@@ -47075,7 +47288,7 @@ function readOwned(directory2, name, max) {
   }
 }
 function writeOwned(directory2, name, bytes) {
-  const fd = openSync14(join42(directory2, name), constants14.O_WRONLY | constants14.O_CREAT | constants14.O_EXCL | constants14.O_NOFOLLOW, 384);
+  const fd = openSync14(join43(directory2, name), constants14.O_WRONLY | constants14.O_CREAT | constants14.O_EXCL | constants14.O_NOFOLLOW, 384);
   try {
     writeFileSync17(fd, bytes);
     fsyncSync6(fd);
@@ -47088,7 +47301,7 @@ function save(directory2, value) {
   writeOwned(directory2, temporary, JSON.stringify(value) + `
 `);
   unchangedDirectory(directory2, identity5);
-  renameSync8(join42(directory2, temporary), join42(directory2, "receipt.json"));
+  renameSync8(join43(directory2, temporary), join43(directory2, "receipt.json"));
   const fd = openSync14(directory2, constants14.O_RDONLY | constants14.O_NOFOLLOW);
   try {
     fsyncSync6(fd);
@@ -47101,7 +47314,7 @@ function bind(client2, receipt) {
     throw new PrivatePublicationError("PUBLICATION_IDENTITY_CHANGED", "The fresh session does not match the recovery directory's server, account and membership.");
 }
 async function locked(directory2, action) {
-  const identity5 = safeDirectory(directory2), file2 = join42(directory2, "operation.lock");
+  const identity5 = safeDirectory(directory2), file2 = join43(directory2, "operation.lock");
   let fd;
   try {
     fd = openSync14(file2, constants14.O_WRONLY | constants14.O_CREAT | constants14.O_EXCL | constants14.O_NOFOLLOW, 384);
@@ -47260,7 +47473,7 @@ async function inspectLocked(client2, directory2, cancel) {
   return privatePublicationResult(directory2, receipt);
 }
 // src/lib/skill-context.ts
-import { createHash as createHash30 } from "crypto";
+import { createHash as createHash31 } from "crypto";
 import { resolve as resolve24 } from "path";
 function words(value) {
   return new Set(value.toLowerCase().match(/[a-z0-9]+/g) ?? []);
@@ -47353,7 +47566,7 @@ ${content}`;
 `);
   const receipt = {
     schemaVersion: 1,
-    id: createHash30("sha256").update(JSON.stringify({ profile: profile.profileRevision, sessionId, selections, omitted })).digest("hex"),
+    id: createHash31("sha256").update(JSON.stringify({ profile: profile.profileRevision, sessionId, selections, omitted })).digest("hex"),
     profileId: profile.profileId,
     profileRevision: profile.profileRevision,
     authority: profile.authority,
@@ -47369,9 +47582,9 @@ ${content}`;
   return { context: context2, selections, omitted, receipt };
 }
 // src/lib/session-reconciliation.ts
-import { createHash as createHash31 } from "crypto";
+import { createHash as createHash32 } from "crypto";
 var SESSION_RECONCILIATION_PLAN_TTL_MS = 5 * 60 * 1000;
-var digest3 = (value) => createHash31("sha256").update(JSON.stringify(value)).digest("hex");
+var digest3 = (value) => createHash32("sha256").update(JSON.stringify(value)).digest("hex");
 function exactTimestamp(value) {
   const parsed = value === undefined ? Number.NaN : Date.parse(value);
   if (!Number.isFinite(parsed) || new Date(parsed).toISOString() !== value) {