@hasna/skills 0.10.46 → 0.10.48

package/dist/sdk/index.js

@@ -3724,10 +3724,10 @@ var require_resolve_block_map = __commonJS((exports) => {
     let offset = bm.offset;
     let commentEnd = null;
     for (const collItem of bm.items) {
-      const { start, key, sep: sep4, value } = collItem;
+      const { start, key, sep: sep5, value } = collItem;
       const keyProps = resolveProps.resolveProps(start, {
         indicator: "explicit-key-ind",
-        next: key ?? sep4?.[0],
+        next: key ?? sep5?.[0],
         offset,
         onError,
         parentIndent: bm.indent,
@@ -3741,7 +3741,7 @@ var require_resolve_block_map = __commonJS((exports) => {
           else if ("indent" in key && key.indent !== bm.indent)
             onError(offset, "BAD_INDENT", startColMsg);
         }
-        if (!keyProps.anchor && !keyProps.tag && !sep4) {
+        if (!keyProps.anchor && !keyProps.tag && !sep5) {
           commentEnd = keyProps.end;
           if (keyProps.comment) {
             if (map.comment)
@@ -3766,7 +3766,7 @@ var require_resolve_block_map = __commonJS((exports) => {
       ctx.atKey = false;
       if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
         onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-      const valueProps = resolveProps.resolveProps(sep4 ?? [], {
+      const valueProps = resolveProps.resolveProps(sep5 ?? [], {
         indicator: "map-value-ind",
         next: value,
         offset: keyNode.range[2],
@@ -3782,7 +3782,7 @@ var require_resolve_block_map = __commonJS((exports) => {
           if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
             onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
         }
-        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep4, null, valueProps, onError);
+        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep5, null, valueProps, onError);
         if (ctx.schema.compat)
           utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError);
         offset = valueNode.range[2];
@@ -3868,7 +3868,7 @@ var require_resolve_end = __commonJS((exports) => {
     let comment = "";
     if (end) {
       let hasSpace = false;
-      let sep4 = "";
+      let sep5 = "";
       for (const token of end) {
         const { source, type } = token;
         switch (type) {
@@ -3882,13 +3882,13 @@ var require_resolve_end = __commonJS((exports) => {
             if (!comment)
               comment = cb;
             else
-              comment += sep4 + cb;
-            sep4 = "";
+              comment += sep5 + cb;
+            sep5 = "";
             break;
           }
           case "newline":
             if (comment)
-              sep4 += source;
+              sep5 += source;
             hasSpace = true;
             break;
           default:
@@ -3928,18 +3928,18 @@ var require_resolve_flow_collection = __commonJS((exports) => {
     let offset = fc.offset + fc.start.source.length;
     for (let i = 0;i < fc.items.length; ++i) {
       const collItem = fc.items[i];
-      const { start, key, sep: sep4, value } = collItem;
+      const { start, key, sep: sep5, value } = collItem;
       const props = resolveProps.resolveProps(start, {
         flow: fcName,
         indicator: "explicit-key-ind",
-        next: key ?? sep4?.[0],
+        next: key ?? sep5?.[0],
         offset,
         onError,
         parentIndent: fc.indent,
         startOnNewline: false
       });
       if (!props.found) {
-        if (!props.anchor && !props.tag && !sep4 && !value) {
+        if (!props.anchor && !props.tag && !sep5 && !value) {
           if (i === 0 && props.comma)
             onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
           else if (i < fc.items.length - 1)
@@ -3991,8 +3991,8 @@ var require_resolve_flow_collection = __commonJS((exports) => {
           }
         }
       }
-      if (!isMap && !sep4 && !props.found) {
-        const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep4, null, props, onError);
+      if (!isMap && !sep5 && !props.found) {
+        const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep5, null, props, onError);
         coll.items.push(valueNode);
         offset = valueNode.range[2];
         if (isBlock(value))
@@ -4004,7 +4004,7 @@ var require_resolve_flow_collection = __commonJS((exports) => {
         if (isBlock(key))
           onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
         ctx.atKey = false;
-        const valueProps = resolveProps.resolveProps(sep4 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep5 ?? [], {
           flow: fcName,
           indicator: "map-value-ind",
           next: value,
@@ -4015,8 +4015,8 @@ var require_resolve_flow_collection = __commonJS((exports) => {
         });
         if (valueProps.found) {
           if (!isMap && !props.found && ctx.options.strict) {
-            if (sep4)
-              for (const st of sep4) {
+            if (sep5)
+              for (const st of sep5) {
                 if (st === valueProps.found)
                   break;
                 if (st.type === "newline") {
@@ -4033,7 +4033,7 @@ var require_resolve_flow_collection = __commonJS((exports) => {
           else
             onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
         }
-        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep4, null, valueProps, onError) : null;
+        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep5, null, valueProps, onError) : null;
         if (valueNode) {
           if (isBlock(value))
             onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -4210,7 +4210,7 @@ var require_resolve_block_scalar = __commonJS((exports) => {
         chompStart = i + 1;
     }
     let value = "";
-    let sep4 = "";
+    let sep5 = "";
     let prevMoreIndented = false;
     for (let i = 0;i < contentStart; ++i)
       value += lines[i][0].slice(trimIndent) + `
@@ -4228,33 +4228,33 @@ var require_resolve_block_scalar = __commonJS((exports) => {
         indent = "";
       }
       if (type === Scalar.Scalar.BLOCK_LITERAL) {
-        value += sep4 + indent.slice(trimIndent) + content;
-        sep4 = `
+        value += sep5 + indent.slice(trimIndent) + content;
+        sep5 = `
 `;
       } else if (indent.length > trimIndent || content[0] === "\t") {
-        if (sep4 === " ")
-          sep4 = `
+        if (sep5 === " ")
+          sep5 = `
 `;
-        else if (!prevMoreIndented && sep4 === `
+        else if (!prevMoreIndented && sep5 === `
 `)
-          sep4 = `
+          sep5 = `
 
 `;
-        value += sep4 + indent.slice(trimIndent) + content;
-        sep4 = `
+        value += sep5 + indent.slice(trimIndent) + content;
+        sep5 = `
 `;
         prevMoreIndented = true;
       } else if (content === "") {
-        if (sep4 === `
+        if (sep5 === `
 `)
           value += `
 `;
         else
-          sep4 = `
+          sep5 = `
 `;
       } else {
-        value += sep4 + content;
-        sep4 = " ";
+        value += sep5 + content;
+        sep5 = " ";
         prevMoreIndented = false;
       }
     }
@@ -4435,27 +4435,27 @@ var require_resolve_flow_scalar = __commonJS((exports) => {
     if (!match)
       return source;
     let res = match[1];
-    let sep4 = " ";
+    let sep5 = " ";
     let pos = first.lastIndex;
     line.lastIndex = pos;
     while (match = line.exec(source)) {
       if (match[1] === "") {
-        if (sep4 === `
+        if (sep5 === `
 `)
-          res += sep4;
+          res += sep5;
         else
-          sep4 = `
+          sep5 = `
 `;
       } else {
-        res += sep4 + match[1];
-        sep4 = " ";
+        res += sep5 + match[1];
+        sep5 = " ";
       }
       pos = line.lastIndex;
     }
     const last = /[ \t]*(.*)/sy;
     last.lastIndex = pos;
     match = last.exec(source);
-    return res + sep4 + (match?.[1] ?? "");
+    return res + sep5 + (match?.[1] ?? "");
   }
   function doubleQuotedValue(source, onError) {
     let res = "";
@@ -5236,14 +5236,14 @@ var require_cst_stringify = __commonJS((exports) => {
       }
     }
   }
-  function stringifyItem({ start, key, sep: sep4, value }) {
+  function stringifyItem({ start, key, sep: sep5, value }) {
     let res = "";
     for (const st of start)
       res += st.source;
     if (key)
       res += stringifyToken(key);
-    if (sep4)
-      for (const st of sep4)
+    if (sep5)
+      for (const st of sep5)
         res += st.source;
     if (value)
       res += stringifyToken(value);
@@ -6391,18 +6391,18 @@ var require_parser = __commonJS((exports) => {
       if (this.type === "map-value-ind") {
         const prev = getPrevProps(this.peek(2));
         const start = getFirstKeyStartProps(prev);
-        let sep4;
+        let sep5;
         if (scalar2.end) {
-          sep4 = scalar2.end;
-          sep4.push(this.sourceToken);
+          sep5 = scalar2.end;
+          sep5.push(this.sourceToken);
           delete scalar2.end;
         } else
-          sep4 = [this.sourceToken];
+          sep5 = [this.sourceToken];
         const map = {
           type: "block-map",
           offset: scalar2.offset,
           indent: scalar2.indent,
-          items: [{ start, key: scalar2, sep: sep4 }]
+          items: [{ start, key: scalar2, sep: sep5 }]
         };
         this.onKeyLine = true;
         this.stack[this.stack.length - 1] = map;
@@ -6556,15 +6556,15 @@ var require_parser = __commonJS((exports) => {
               } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                 const start2 = getFirstKeyStartProps(it.start);
                 const key = it.key;
-                const sep4 = it.sep;
-                sep4.push(this.sourceToken);
+                const sep5 = it.sep;
+                sep5.push(this.sourceToken);
                 delete it.key;
                 delete it.sep;
                 this.stack.push({
                   type: "block-map",
                   offset: this.offset,
                   indent: this.indent,
-                  items: [{ start: start2, key, sep: sep4 }]
+                  items: [{ start: start2, key, sep: sep5 }]
                 });
               } else if (start.length > 0) {
                 it.sep = it.sep.concat(start, this.sourceToken);
@@ -6758,13 +6758,13 @@ var require_parser = __commonJS((exports) => {
           const prev = getPrevProps(parent);
           const start = getFirstKeyStartProps(prev);
           fixFlowSeqItems(fc);
-          const sep4 = fc.end.splice(1, fc.end.length);
-          sep4.push(this.sourceToken);
+          const sep5 = fc.end.splice(1, fc.end.length);
+          sep5.push(this.sourceToken);
           const map = {
             type: "block-map",
             offset: fc.offset,
             indent: fc.indent,
-            items: [{ start, key: fc, sep: sep4 }]
+            items: [{ start, key: fc, sep: sep5 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -9003,8 +9003,8 @@ var require_client = __commonJS((exports) => {
 // node_modules/@smithy/core/dist-cjs/submodules/config/index.js
 var require_config = __commonJS((exports) => {
   var { homedir: homedir7 } = __require("os");
-  var { sep: sep10, join: join4 } = __require("path");
-  var { createHash: createHash25 } = __require("crypto");
+  var { sep: sep11, join: join4 } = __require("path");
+  var { createHash: createHash26 } = __require("crypto");
   var { readFile: readFile$1 } = __require("fs/promises");
   var { IniSectionType } = require_dist_cjs();
   var { normalizeProvider } = require_client();
@@ -9143,7 +9143,7 @@ var require_config = __commonJS((exports) => {
     return "DEFAULT";
   };
   var getHomeDir = () => {
-    const { HOME, USERPROFILE, HOMEPATH, HOMEDRIVE = `C:${sep10}` } = process.env;
+    const { HOME, USERPROFILE, HOMEPATH, HOMEDRIVE = `C:${sep11}` } = process.env;
     if (HOME)
       return HOME;
     if (USERPROFILE)
@@ -9159,7 +9159,7 @@ var require_config = __commonJS((exports) => {
   var DEFAULT_PROFILE = "default";
   var getProfileName = (init) => init.profile || process.env[ENV_PROFILE] || DEFAULT_PROFILE;
   var getSSOTokenFilepath = (id2) => {
-    const hasher = createHash25("sha1");
+    const hasher = createHash26("sha1");
     const cacheName = hasher.update(id2).digest("hex");
     return join4(getHomeDir(), ".aws", "sso", "cache", `${cacheName}.json`);
   };
@@ -10511,7 +10511,7 @@ var require_endpoints = __commonJS((exports) => {
 
 // node_modules/@smithy/core/dist-cjs/submodules/serde/index.js
 var require_serde = __commonJS((exports) => {
-  var { createHmac: createHmac2, createHash: createHash25, getRandomValues } = __require("crypto");
+  var { createHmac: createHmac2, createHash: createHash26, getRandomValues } = __require("crypto");
   var { hasOwn: hasOwn2, HttpResponse } = require_transport();
   exports.hasOwn = hasOwn2;
   var { ReadStream, lstatSync: lstatSync26, fstatSync: fstatSync4 } = __require("fs");
@@ -11416,7 +11416,7 @@ var require_serde = __commonJS((exports) => {
       return Promise.resolve(this.hash.digest());
     }
     reset() {
-      this.hash = this.secret ? createHmac2(this.algorithmIdentifier, castSourceData(this.secret)) : createHash25(this.algorithmIdentifier);
+      this.hash = this.secret ? createHmac2(this.algorithmIdentifier, castSourceData(this.secret)) : createHash26(this.algorithmIdentifier);
     }
   }
   function castSourceData(toCast, encoding) {
@@ -12155,7 +12155,7 @@ var require_checksum = __commonJS((exports) => {
   var { createReadStream } = __require("fs");
   var { Writable } = __require("stream");
   var { toUint8Array, concatBytes } = require_serde();
-  var { createHash: createHash25, createHmac: createHmac2 } = __require("crypto");
+  var { createHash: createHash26, createHmac: createHmac2 } = __require("crypto");
   var zlib = __require("zlib");
   async function blobReader(blob, onChunk, chunkSize = 1024 * 1024) {
     const size = blob.size;
@@ -12320,7 +12320,7 @@ var require_checksum = __commonJS((exports) => {
   }
   var hasNativeCrypto$1 = (() => {
     try {
-      createHash25("md5");
+      createHash26("md5");
       return true;
     } catch {
       return false;
@@ -12330,7 +12330,7 @@ var require_checksum = __commonJS((exports) => {
   function buildNativeClass$2() {
     return class Md5Node2 {
       digestLength = 16;
-      hash = createHash25("md5");
+      hash = createHash26("md5");
       update(data) {
         this.hash.update(toUint8Array(data));
       }
@@ -12339,7 +12339,7 @@ var require_checksum = __commonJS((exports) => {
         return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
       }
       reset() {
-        this.hash = createHash25("md5");
+        this.hash = createHash26("md5");
       }
     };
   }
@@ -12629,7 +12629,7 @@ var require_checksum = __commonJS((exports) => {
   ]);
   var hasNativeCrypto = (() => {
     try {
-      createHash25("sha256");
+      createHash26("sha256");
       return true;
     } catch {
       return false;
@@ -12669,7 +12669,7 @@ var require_checksum = __commonJS((exports) => {
         this.finished = false;
       }
       createHash() {
-        return this.secret ? createHmac2("sha256", toBuffer(this.secret)) : createHash25("sha256");
+        return this.secret ? createHmac2("sha256", toBuffer(this.secret)) : createHash26("sha256");
       }
     };
   }
@@ -17515,8 +17515,8 @@ More information can be found at: https://a.co/c895JFp`);
   };
   var createUserAgentStringParsingProvider = ({ serviceId, clientVersion }) => async (config) => {
     const module2 = require_es5();
-    const parse7 = module2.parse ?? module2.default.parse ?? (() => "");
-    const parsedUA = typeof window !== "undefined" && window?.navigator?.userAgent ? parse7(window.navigator.userAgent) : undefined;
+    const parse8 = module2.parse ?? module2.default.parse ?? (() => "");
+    const parsedUA = typeof window !== "undefined" && window?.navigator?.userAgent ? parse8(window.navigator.userAgent) : undefined;
     const sections = [
       ["aws-sdk-js", clientVersion],
       ["ua", "2.1"],
@@ -18166,7 +18166,7 @@ ${toHex(hashedRequest)}`;
     return hash2.digest();
   };
   var getCanonicalHeaders = ({ headers }, unsignableHeaders, signableHeaders) => {
-    const canonical6 = {};
+    const canonical7 = {};
     for (const headerName of Object.keys(headers).sort()) {
       if (headers[headerName] == undefined) {
         continue;
@@ -18177,9 +18177,9 @@ ${toHex(hashedRequest)}`;
           continue;
         }
       }
-      canonical6[canonicalHeaderName] = headers[headerName].trim().replace(/\s+/g, " ");
+      canonical7[canonicalHeaderName] = headers[headerName].trim().replace(/\s+/g, " ");
     }
-    return canonical6;
+    return canonical7;
   };
   var getPayloadHash = async ({ headers, body }, hashConstructor) => {
     for (const headerName in headers) {
@@ -18542,7 +18542,7 @@ var require_dist_cjs4 = __commonJS((exports) => {
 var require_util = __commonJS((exports) => {
   var { buildQueryString } = require_protocols();
   var validate = (str) => typeof str === "string" && str.indexOf("arn:") === 0 && str.split(":").length >= 6;
-  var parse7 = (arn) => {
+  var parse8 = (arn) => {
     const segments = arn.split(":");
     if (segments.length < 6 || segments[0] !== "arn")
       throw new Error("Malformed ARN");
@@ -18592,7 +18592,7 @@ var require_util = __commonJS((exports) => {
   }
   exports.build = build;
   exports.formatUrl = formatUrl;
-  exports.parse = parse7;
+  exports.parse = parse8;
   exports.validate = validate;
 });
 
@@ -21700,12 +21700,12 @@ var require_protocols2 = __commonJS((exports) => {
       return expandToDecimal(numericString) === expandToDecimal(String(value));
     }
     const normalized = numericString.replace(/(\.\d*?)0+$/, "$1").replace(/\.$/, "");
-    const canonical6 = String(value);
-    if (normalized === canonical6) {
+    const canonical7 = String(value);
+    if (normalized === canonical7) {
       return true;
     }
-    if (/[eE]/.test(canonical6)) {
-      return normalized === expandToDecimal(canonical6);
+    if (/[eE]/.test(canonical7)) {
+      return normalized === expandToDecimal(canonical7);
     }
     return false;
   }
@@ -29443,10 +29443,10 @@ var require_signin = __commonJS((exports) => {
 });
 
 // node_modules/@aws-sdk/credential-provider-ini/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
-import { createHash as createHash25, createPrivateKey, createPublicKey, sign } from "crypto";
+import { createHash as createHash26, createPrivateKey, createPublicKey, sign } from "crypto";
 import { promises as fs2 } from "fs";
 import { homedir as homedir7 } from "os";
-import { dirname as dirname23, join as join37 } from "path";
+import { dirname as dirname23, join as join38 } from "path";
 var import_config28, import_protocols3, LoginCredentialsFetcher;
 var init_LoginCredentialsFetcher = __esm(() => {
   import_config28 = __toESM(require_config(), 1);
@@ -29613,10 +29613,10 @@ var init_LoginCredentialsFetcher = __esm(() => {
       await fs2.writeFile(tokenFilePath, JSON.stringify(token, null, 2), "utf8");
     }
     getTokenFilePath() {
-      const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join37(homedir7(), ".aws", "login", "cache");
+      const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join38(homedir7(), ".aws", "login", "cache");
       const loginSessionBytes = Buffer.from(this.loginSession, "utf8");
-      const loginSessionSha256 = createHash25("sha256").update(loginSessionBytes).digest("hex");
-      return join37(directory, `${loginSessionSha256}.json`);
+      const loginSessionSha256 = createHash26("sha256").update(loginSessionBytes).digest("hex");
+      return join38(directory, `${loginSessionSha256}.json`);
     }
     derToRawSignature(derSignature) {
       let offset = 2;
@@ -31067,7 +31067,7 @@ import { existsSync as existsSync22 } from "fs";
 import { join as join210 } from "path";
 import { existsSync as existsSync17 } from "fs";
 import { homedir as homedir8 } from "os";
-import { join as join41, resolve as resolve22 } from "path";
+import { join as join42, resolve as resolve22 } from "path";
 import { homedir as pathsResolverHomedir2 } from "os";
 import { join as pathsResolverJoin2 } from "path";
 import { createHmac as createHmac4, timingSafeEqual as timingSafeEqual3 } from "crypto";
@@ -31228,7 +31228,7 @@ function effectiveHome2() {
   return process.env["HOME"] || process.env["USERPROFILE"] || homedir8();
 }
 function legacyHomeDir() {
-  return join41(effectiveHome2(), ".hasna", "events");
+  return join42(effectiveHome2(), ".hasna", "events");
 }
 function resolverHome() {
   return dataDir2({ app: "events", home: effectiveHome2() || undefined });
@@ -31237,7 +31237,7 @@ function adoptResolverHome(resolved, env = process.env) {
   const dataOverride = env.HASNA_DATA_HOME;
   if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
     return true;
-  return existsSync17(join41(resolved, EVENTS_STORE_SENTINEL_FILE));
+  return existsSync17(join42(resolved, EVENTS_STORE_SENTINEL_FILE));
 }
 function exactEventsHome() {
   const dir = process.env[HASNA_EVENTS_DIR_ENV];
@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.46",
+  version: "0.10.48",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -32525,7 +32525,7 @@ function describeRemoteFiles(files) {
 function sha256(bytes) {
   return createHash("sha256").update(bytes).digest("hex");
 }
-async function readBoundedResponse(response, maximum) {
+async function readBoundedResponse(response, maximum, signal) {
   if (!Number.isSafeInteger(maximum) || maximum < 0 || maximum > MAX_REMOTE_FILE_BYTES)
     throw new Error("Invalid artifact size limit");
   const length = response.headers.get("content-length");
@@ -32536,11 +32536,18 @@ async function readBoundedResponse(response, maximum) {
   const reader = response.body?.getReader();
   if (!reader)
     return new Uint8Array;
+  signal?.throwIfAborted();
+  const abort = () => {
+    reader.cancel().catch(() => {});
+  };
+  signal?.addEventListener("abort", abort, { once: true });
   const chunks = [];
   let size = 0;
   try {
     while (true) {
+      signal?.throwIfAborted();
       const next = await reader.read();
+      signal?.throwIfAborted();
       if (next.done)
         break;
       size += next.value.byteLength;
@@ -32552,6 +32559,7 @@ async function readBoundedResponse(response, maximum) {
     await reader.cancel().catch(() => {});
     throw error;
   } finally {
+    signal?.removeEventListener("abort", abort);
     reader.releaseLock();
   }
   const bytes = new Uint8Array(size);
@@ -34927,7 +34935,7 @@ function hash(value) {
   return createHash3("sha256").update(JSON.stringify(value)).digest("hex");
 }
 function validateSelection(selection) {
-  if (!selection || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(selection.slug) || !isValidSkillVersion(selection.version) || !/^sha256:[a-f0-9]{64}$/.test(selection.bundleDigest) || typeof selection.workspaceId !== "string" || !selection.workspaceId.trim() || typeof selection.profileRevision !== "string" || !selection.profileRevision.trim()) {
+  if (!selection || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(selection.slug) || !isValidSkillVersion(selection.version) || !/^sha256:[a-f0-9]{64}$/.test(selection.bundleDigest) || typeof selection.workspaceId !== "string" || !selection.workspaceId.trim() || selection.authorizationEpoch !== undefined && (typeof selection.authorizationEpoch !== "string" || !/^[a-f0-9]{32}$/.test(selection.authorizationEpoch)) || typeof selection.profileRevision !== "string" || !selection.profileRevision.trim()) {
     throw new SkillSelectionError("INVALID_SELECTION", "A skill selection must carry an exact version, digest, workspace and profile revision.");
   }
   const aliasError = selectionAliasError([selection]);
@@ -35053,17 +35061,21 @@ function readSelectionJson(path) {
     throw new SkillSelectionError("INVALID_RECEIPT", "The Skills selection receipt is unreadable; sync the profile again.");
   }
 }
-async function verifiedEntries(selection, bytes) {
+async function verifiedEntries(selection, bytes, signal, deadline) {
   if (`sha256:${sha256Hex(bytes)}` !== selection.bundleDigest)
     throw new SkillSelectionError("BUNDLE_DIGEST_MISMATCH", "The skill bundle does not match its selected digest.");
-  const bundle = await inspectSkillBundle(bytes);
+  const remaining = deadline === undefined ? undefined : Math.floor(deadline - performance.now());
+  signal?.throwIfAborted();
+  if (remaining !== undefined && remaining <= 0)
+    throw new SkillSelectionError("SKILLS_API_UNAVAILABLE", "Skills session authorization deadline exceeded.");
+  const bundle = await inspectSkillBundle(bytes, { signal, ...remaining === undefined ? {} : { limits: { timeoutMs: remaining } } });
   return bundle.entries;
 }
 async function readCachedSelection(selection, options = {}) {
   const bytes = readRegularFile(selectionBundlePath(selection, options), SKILL_BUNDLE_INSPECTION_LIMITS.compressedBytes);
   return bytes ? verifiedEntries(selection, bytes) : null;
 }
-async function cacheSelectionBundle(selection, response, options = {}) {
+async function verifySelectionBundleResponse(selection, response, signal, deadline) {
   validateSelection(selection);
   if (!response?.ok)
     throw new SkillSelectionError("BUNDLE_UNAVAILABLE", `The selected skill bundle is unavailable${response ? ` (HTTP ${response.status})` : ""}.`);
@@ -35073,15 +35085,27 @@ async function cacheSelectionBundle(selection, response, options = {}) {
     await response.body?.cancel();
     throw new SkillSelectionError("BUNDLE_IDENTITY_MISMATCH", "The returned bundle does not match the selected version and digest.");
   }
+  const epoch = response.headers.get("X-Skill-Authorization-Epoch");
+  if (selection.authorizationEpoch !== undefined && epoch !== selection.authorizationEpoch) {
+    response.body?.cancel().catch(() => {});
+    throw new SkillSelectionError("SESSION_RECONCILIATION_REQUIRED", "The selected bundle lifecycle authorization changed or is unavailable.");
+  }
   const maximum = SKILL_BUNDLE_INSPECTION_LIMITS.compressedBytes;
   const reader = response.body?.getReader();
   if (!reader)
     throw new SkillSelectionError("BUNDLE_UNAVAILABLE", "The selected bundle response has no body.");
+  signal?.throwIfAborted();
+  const abort = () => {
+    reader.cancel().catch(() => {});
+  };
+  signal?.addEventListener("abort", abort, { once: true });
   const chunks = [];
   let length = 0;
   try {
     while (true) {
+      signal?.throwIfAborted();
       const next = await reader.read();
+      signal?.throwIfAborted();
       if (next.done)
         break;
       length += next.value.byteLength;
@@ -35090,9 +35114,10 @@ async function cacheSelectionBundle(selection, response, options = {}) {
       chunks.push(next.value);
     }
   } catch (error) {
-    await reader.cancel().catch(() => {});
+    reader.cancel().catch(() => {});
     throw error;
   } finally {
+    signal?.removeEventListener("abort", abort);
     reader.releaseLock();
   }
   const bytes = new Uint8Array(length);
@@ -35101,7 +35126,12 @@ async function cacheSelectionBundle(selection, response, options = {}) {
     bytes.set(chunk, offset);
     offset += chunk.byteLength;
   }
-  const entries = await verifiedEntries(selection, bytes);
+  const entries = await verifiedEntries(selection, bytes, signal, deadline);
+  return { bytes, entries };
+}
+async function cacheSelectionBundle(selection, response, options = {}) {
+  const { bytes, entries } = await verifySelectionBundleResponse(selection, response);
+  const maximum = SKILL_BUNDLE_INSPECTION_LIMITS.compressedBytes;
   const path = selectionBundlePath(selection, options);
   const existing = readRegularFile(path, maximum);
   if (existing)
@@ -37301,10 +37331,12 @@ function validateSelection2(value) {
 
 class HttpProfileClient {
   key;
+  signal;
   authority;
   origin;
-  constructor(key, origin) {
+  constructor(key, origin, signal) {
     this.key = key;
+    this.signal = signal;
     if (!key.trim())
       throw new Error("A Skills credential is required");
     this.origin = normalizeSkillsApiOrigin(origin);
@@ -37318,7 +37350,7 @@ class HttpProfileClient {
         ...init,
         redirect: "error",
         credentials: "omit",
-        signal: AbortSignal.timeout(15000),
+        signal: this.signal ? AbortSignal.any([this.signal, AbortSignal.timeout(15000)]) : AbortSignal.timeout(15000),
         headers: {
           "Content-Type": "application/json",
           "User-Agent": `hasna-skills/${package_default.version}`,
@@ -37343,22 +37375,28 @@ class HttpProfileClient {
   }
   async read(response, limit = MAX_PROFILE_DOCUMENT_BYTES) {
     try {
-      return JSON.parse(new TextDecoder().decode(await readBoundedResponse(response, limit)));
+      return JSON.parse(new TextDecoder().decode(await readBoundedResponse(response, limit, this.signal)));
     } catch {
       invalid2();
     }
   }
+  async supportsPinRenewal() {
+    const result = await this.read(await this.request("/capabilities"));
+    if (!object(result) || !Array.isArray(result.capabilities))
+      invalid2();
+    return result.capabilities.includes("skills.session-pin-renewal");
+  }
   async resolveProfile(id2) {
     if (!identifier2(id2))
       throw new Error("Invalid selection profile id");
-    const result = await this.read(await this.request(`/profiles/${encodeURIComponent(id2)}/resolve`), MAX_RESOLVED_PROFILE_BYTES);
+    const result = await this.read(await this.request(`/profiles/${encodeURIComponent(id2)}/resolve?pinAuthorization=epoch-v1`), MAX_RESOLVED_PROFILE_BYTES);
     if (!object(result) || result.profileId !== id2 || result.authority !== this.authority || !identifier2(result.workspaceId) || !identifier2(result.profileRevision) || !Array.isArray(result.selections) || result.selections.length > MAX_PROFILE_SELECTIONS)
       invalid2();
     const seen = new Set;
     for (const entry of result.selections) {
       validateSelection2(entry);
       const item = entry;
-      if (seen.has(item.slug) || item.authority !== this.authority || item.workspaceId !== result.workspaceId || item.profileRevision !== result.profileRevision)
+      if (item.authorizationEpoch !== undefined && (typeof item.authorizationEpoch !== "string" || !/^[a-f0-9]{32}$/.test(item.authorizationEpoch)) || seen.has(item.slug) || item.authority !== this.authority || item.workspaceId !== result.workspaceId || item.profileRevision !== result.profileRevision)
         invalid2();
       seen.add(item.slug);
     }
@@ -37405,7 +37443,7 @@ class HttpProfileClient {
     return this.request(`/skills/${encodeURIComponent(slug)}/versions/${encodeURIComponent(version)}/bundle`);
   }
 }
-async function createProfileClient() {
+async function createProfileClient(signal) {
   let connection;
   try {
     connection = await resolveSkillsConnection();
@@ -37417,7 +37455,7 @@ async function createProfileClient() {
   }
   if (!connection)
     throw new Error("Selection profiles require a configured Skills API");
-  return new HttpProfileClient(connection.apiKey, connection.apiOrigin);
+  return new HttpProfileClient(connection.apiKey, connection.apiOrigin, signal);
 }
 // src/lib/session-reconciliation.ts
 import { createHash as createHash4 } from "crypto";
@@ -37516,10 +37554,10 @@ async function reconcileSkillSession(input, options = {}) {
   return { applied: true, plan, planDigest, ...result };
 }
 // src/lib/selected-run.ts
-import { createHash as createHash24 } from "crypto";
+import { createHash as createHash25 } from "crypto";
 import { spawn as spawn2 } from "child_process";
 import { mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync10, realpathSync as realpathSync14 } from "fs";
-import { dirname as dirname22, join as join36, resolve as resolve21 } from "path";
+import { dirname as dirname22, join as join37, resolve as resolve21 } from "path";
 import { tmpdir, hostname as stationHostname2 } from "os";
 
 // src/lib/dependency-preparation.ts
@@ -37731,7 +37769,7 @@ async function prepareSkillDependencies(skillPath, env, timeoutMs = DEFAULT_PREP
 
 // src/lib/skillinfo.ts
 import { existsSync as existsSync15, readFileSync as readFileSync23 } from "fs";
-import { join as join35 } from "path";
+import { join as join36 } from "path";
 
 // src/lib/codex-corpus-write.ts
 import { KernelLock } from "@hasna/contracts/kernel-lock";
@@ -37896,7 +37934,7 @@ function withCodexCorpusWrite(roots, run, options = {}) {
 
 // src/lib/installer.ts
 import { existsSync as existsSync14, readFileSync as readFileSync22, rmSync as rmSync4 } from "fs";
-import { join as join34 } from "path";
+import { join as join35 } from "path";
 import { homedir as homedir6 } from "os";
 
 // src/lib/agent-sync.ts
@@ -37914,7 +37952,7 @@ import {
   writeFileSync as writeFileSync8
 } from "fs";
 import { homedir as homedir5 } from "os";
-import { basename as basename12, dirname as dirname21, join as join31 } from "path";
+import { basename as basename12, dirname as dirname21, join as join32 } from "path";
 
 // src/lib/sumi-settings-witness.ts
 import { createHash as createHash7 } from "crypto";
@@ -40214,18 +40252,18 @@ var NATIVE_SKILL_ROOTS = [
 ];
 
 // src/lib/agent-integration.ts
-import { createHash as createHash22, randomUUID as randomUUID4 } from "crypto";
+import { createHash as createHash23, randomUUID as randomUUID4 } from "crypto";
 import { isDeepStrictEqual as isDeepStrictEqual8 } from "util";
 import { existsSync as existsSync7, lstatSync as lstatSync22, statSync as statSync7, mkdirSync as mkdirSync6, readFileSync as readFileSync16, readdirSync as readdirSync8, opendirSync as opendirSync5, readlinkSync as readlinkSync5, realpathSync as realpathSync10, renameSync as renameSync4, rmdirSync as rmdirSync3, writeFileSync as writeFileSync5, unlinkSync as unlinkSync5, chmodSync, openSync as openSync17, closeSync as closeSync17, fsyncSync as fsyncSync5, fstatSync as fstatSync17, readSync as readSync12, constants as constants14, linkSync as linkSync3 } from "fs";
-import { dirname as dirname17, join as join26, resolve as resolve18, relative as relative5, isAbsolute as isAbsolute19, sep as sep6 } from "path";
+import { dirname as dirname17, join as join27, resolve as resolve18, relative as relative5, isAbsolute as isAbsolute19, sep as sep7 } from "path";
 import { homedir as homedir3 } from "os";
 
 // src/lib/managed-policy.ts
 import { closeSync as closeSync11, constants as constants8, fstatSync as fstatSync11, lstatSync as lstatSync9, openSync as openSync11, readSync as readSync6 } from "fs";
-import { join as join14 } from "path";
+import { join as join15 } from "path";
 
 // src/lib/agent-policy-limits.ts
-import { basename as basename5, isAbsolute as isAbsolute8, resolve as resolve7 } from "path";
+import { basename as basename5, isAbsolute as isAbsolute8, join as join14, resolve as resolve7, sep as sep4 } from "path";
 var AGENT_POLICY_LIMITS = Object.freeze({ bytes: 1024 * 1024, agents: 16, discoverySources: 2048, discoveryRawSourceBytes: 64 * 1024 * 1024, discoveryRawTotalBytes: 256 * 1024 * 1024, discoveryPathLinks: 40, discoveryPathSteps: 256, discoveryPathSourceMetadataBytes: 64 * 1024, discoveryPathTotalMetadataBytes: 8 * 1024 * 1024, discoveryRoots: 512, discoveryDirectories: 64, discoveryDirectoryEntries: 20000, discoveryDirectoryBytes: 8 * 1024 * 1024, builtinNames: 2048, rootAliases: 2, fields: 64, pathCharacters: 4096 });
 function object4(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
@@ -40367,7 +40405,9 @@ function assertAgentPolicyCollections(policy) {
       text(source.path);
       requireBound(source.sha256 === null || typeof source.sha256 === "string" && /^[a-f0-9]{64}$/.test(source.sha256));
       if (source.hashMode !== undefined)
-        requireBound(["bytes", "path-bytes", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+        requireBound(["bytes", "path-bytes", "claude-plugin-manifest-v1", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+      if (source.hashMode === "claude-plugin-manifest-v1")
+        requireBound(agent === "claude" && value.agent === "claude" && ["automatic", "reviewed"].includes(value.method) && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && source.path.endsWith(join14(sep4, ".claude-plugin", "plugin.json")) && source.managedPlugins === undefined);
       if (source.hashMode === "sumi-settings-v1")
         requireBound(agent === "sumi" && value.agent === "sumi" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && basename5(source.path) === "sumi.json");
       if (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4"))
@@ -40436,7 +40476,7 @@ function serializeManagedSkillPolicy(value) {
   return text2;
 }
 function readManagedSkillPolicySnapshot(dataDir2 = getDataDirReadOnly()) {
-  const path = join14(dataDir2, "agent-policy.json");
+  const path = join15(dataDir2, "agent-policy.json");
   let descriptor, observed = false;
   try {
     const stat = lstatSync9(path);
@@ -40486,7 +40526,7 @@ function requiresCliSkillLoading(dataDir2 = getDataDirReadOnly()) {
 // src/lib/agent-bridge.ts
 import { createHash as createHash12 } from "crypto";
 import { lstatSync as lstatSync10, readFileSync as readFileSync11, readdirSync as readdirSync4 } from "fs";
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 var CLI_BRIDGE_NAME = "skills-cli";
 var CLI_BRIDGE_VERSION = 1;
 var markdown = `---
@@ -40518,7 +40558,7 @@ function isOwnedCliBridge(path, expectedPaths) {
     if (JSON.stringify(readdirSync4(path).sort()) !== JSON.stringify(Object.keys(CLI_BRIDGE_FILES).sort()))
       return false;
     return Object.entries(CLI_BRIDGE_FILES).every(([name, content]) => {
-      const file = join15(path, name), stat = lstatSync10(file);
+      const file = join16(path, name), stat = lstatSync10(file);
       return stat.isFile() && !stat.isSymbolicLink() && stat.size === Buffer.byteLength(content) && readFileSync11(file, "utf8") === content;
     });
   } catch {
@@ -40527,9 +40567,9 @@ function isOwnedCliBridge(path, expectedPaths) {
 }
 
 // src/lib/agent-discovery.ts
-import { createHash as createHash21 } from "crypto";
+import { createHash as createHash22 } from "crypto";
 import { lstatSync as lstatSync21, readFileSync as readFileSync15, readdirSync as readdirSync7, realpathSync as realpathSync9 } from "fs";
-import { basename as basename8, dirname as dirname16, isAbsolute as isAbsolute18, join as join25, resolve as resolve17, sep as sep5 } from "path";
+import { basename as basename8, dirname as dirname16, isAbsolute as isAbsolute18, join as join26, resolve as resolve17, sep as sep6 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual6 } from "util";
 
 // node_modules/yaml/dist/index.js
@@ -40579,7 +40619,7 @@ var $visit = visit.visit;
 var $visitAsync = visit.visitAsync;
 
 // src/lib/agent-hermes.ts
-import { dirname as dirname8, isAbsolute as isAbsolute9, join as join16, resolve as resolve8 } from "path";
+import { dirname as dirname8, isAbsolute as isAbsolute9, join as join17, resolve as resolve8 } from "path";
 import { lstatSync as lstatSync11, readFileSync as readFileSync12, opendirSync } from "fs";
 var HERMES_OPT_OUT = ".no-bundled-skills";
 var EVENTS = ["pre_llm_call", "pre_tool_call"];
@@ -40653,7 +40693,7 @@ function assertHermesEnvironment(home) {
       throw new Error(`NATIVE_SKILL_DRIFT: Hermes ${variable} requires a dedicated discovery adapter; unset it before using this adapter`);
   }
   const selected = process.env.HERMES_HOME?.trim();
-  if (selected && (!isAbsolute9(selected) || resolve8(selected) !== join16(resolve8(home), ".hermes")))
+  if (selected && (!isAbsolute9(selected) || resolve8(selected) !== join17(resolve8(home), ".hermes")))
     throw new Error("NATIVE_SKILL_DRIFT: custom Hermes homes/profiles require their own reviewed bridge");
   if (process.env.HERMES_ENABLE_PROJECT_PLUGINS?.trim() && !["0", "false", "no", "off"].includes(process.env.HERMES_ENABLE_PROJECT_PLUGINS.trim().toLowerCase()))
     throw new Error("NATIVE_SKILL_DRIFT: Hermes project plugins require a dedicated discovery review");
@@ -40674,11 +40714,11 @@ function read(path) {
 }
 function assertHermesProtection(home, config, command, profile, supervisor) {
   assertHermesEnvironment(home);
-  if (read(join16(home, ".hermes", HERMES_OPT_OUT)) === null)
+  if (read(join17(home, ".hermes", HERMES_OPT_OUT)) === null)
     throw new Error("NATIVE_SKILL_DRIFT: Hermes bundled skill reseeding is not disabled; run skills hook install");
   if (!supervisor || !isAbsolute9(supervisor.path) || supervisor.runtime !== process.execPath || read(supervisor.path) !== renderHermesSupervisor(command, profile))
     throw new Error("NATIVE_SKILL_DRIFT: Hermes owned supervisor changed; run skills hook install");
-  const raw = read(join16(home, ".hermes/shell-hooks-allowlist.json"));
+  const raw = read(join17(home, ".hermes/shell-hooks-allowlist.json"));
   let trust;
   try {
     trust = raw === null ? undefined : JSON.parse(raw);
@@ -40721,15 +40761,15 @@ function assertNoHermesLegacyShadow(root) {
         throw new Error("NATIVE_SKILL_DRIFT: unsupported Hermes legacy discovery input");
       return;
     }
-    if (lstatSync11(join16(path, "skills-cli.md"), { throwIfNoEntry: false }))
+    if (lstatSync11(join17(path, "skills-cli.md"), { throwIfNoEntry: false }))
       throw new Error("NATIVE_SKILL_DRIFT: legacy Hermes skills-cli.md can shadow the owned bridge; preserve and retire it before continuing");
-    const hasDescriptor = Boolean(lstatSync11(join16(path, "SKILL.md"), { throwIfNoEntry: false }));
+    const hasDescriptor = Boolean(lstatSync11(join17(path, "SKILL.md"), { throwIfNoEntry: false }));
     const directory = opendirSync(path);
     try {
       for (let child = directory.readSync();child; child = directory.readSync()) {
         if (hasDescriptor && ["references", "templates", "assets", "scripts"].includes(child.name))
           continue;
-        scan(join16(path, child.name), depth + 1);
+        scan(join17(path, child.name), depth + 1);
       }
     } finally {
       directory.closeSync();
@@ -40788,7 +40828,7 @@ if (failed) process.exitCode = 2;
 // src/lib/agent-discovery-directories.ts
 import { createHash as createHash13 } from "crypto";
 import { lstatSync as lstatSync12, opendirSync as opendirSync2 } from "fs";
-import { dirname as dirname9, isAbsolute as isAbsolute10, join as join17, resolve as resolve9 } from "path";
+import { dirname as dirname9, isAbsolute as isAbsolute10, join as join18, resolve as resolve9 } from "path";
 function need4(value, message) {
   if (!value)
     throw new Error(message);
@@ -40826,7 +40866,7 @@ function capture(path, budget2, excludedRoots, omittedRoots = [], rows) {
     }
     need4(new Set(names).size === names.length, "Ambiguous native discovery directory names");
     for (const name of names.sort()) {
-      const child = join17(current, name), childRelative = relative5 ? `${relative5}/${name}` : name;
+      const child = join18(current, name), childRelative = relative5 ? `${relative5}/${name}` : name;
       if (omittedRoots.includes(child))
         continue;
       need4(child.length <= AGENT_POLICY_LIMITS.pathCharacters, "Native discovery directory path limit exceeded");
@@ -40874,7 +40914,7 @@ function verifyDiscoveryDirectoryProjection(directories, omittedRoots) {
       need4(Array.isArray(value) && value.length === 2 && typeof value[0] === "string" && value[0] && !isAbsolute10(value[0]) && !value[0].split("/").some((part) => !part || part === "." || part === "..") && ["file", "directory"].includes(value[1]) && row === JSON.stringify(value) + `
 `, "Invalid reviewed directory member");
       hash2.update(row);
-      const path = join17(directory.path, value[0]);
+      const path = join18(directory.path, value[0]);
       if (!omittedRoots.some((root) => path === root || path.startsWith(root + "/")))
         kept.push(row);
     }
@@ -40972,7 +41012,7 @@ function hashRawDiscoveryFile(path, budget2, changes) {
 // src/lib/agent-discovery-path-bytes.ts
 import { createHash as createHash15 } from "crypto";
 import { lstatSync as lstatSync14, readlinkSync as readlinkSync4 } from "fs";
-import { dirname as dirname11, isAbsolute as isAbsolute12, join as join18, parse as parse3, resolve as resolve11, sep as sep4 } from "path";
+import { dirname as dirname11, isAbsolute as isAbsolute12, join as join19, parse as parse3, resolve as resolve11, sep as sep5 } from "path";
 function identity4(stat, mutable = false) {
   return {
     dev: String(stat.dev),
@@ -40990,7 +41030,7 @@ function canonical4(path) {
 function trace(path) {
   canonical4(path);
   const rows = [], paths = [];
-  let metadataBytes = 0, steps = 0, links = 0, cursor = parse3(path).root, pending = path.slice(cursor.length).split(sep4);
+  let metadataBytes = 0, steps = 0, links = 0, cursor = parse3(path).root, pending = path.slice(cursor.length).split(sep5);
   function record4(path2, row) {
     const value = { path: path2, ...row };
     metadataBytes += Buffer.byteLength(JSON.stringify(value));
@@ -41016,7 +41056,7 @@ function trace(path) {
       cursor = dirname11(cursor);
       continue;
     }
-    const candidate = join18(cursor, component);
+    const candidate = join19(cursor, component);
     if (candidate.length > AGENT_POLICY_LIMITS.pathCharacters)
       throw new Error("Discovery resolved path length limit exceeded");
     const stat = lstatSync14(candidate, { bigint: true, throwIfNoEntry: false });
@@ -41038,7 +41078,7 @@ function trace(path) {
         root();
       }
       const remainder = isAbsolute12(target) ? target.slice(parse3(target).root.length) : target;
-      pending = [...remainder.split(sep4), ...pending];
+      pending = [...remainder.split(sep5), ...pending];
       if (pending.length + steps > AGENT_POLICY_LIMITS.discoveryPathSteps)
         throw new Error("Discovery path step limit exceeded");
       continue;
@@ -41062,7 +41102,7 @@ function hashDiscoveryPathFile(path, budget2, changes) {
   let createsMissingPath = false;
   if (before.missing !== null && changes) {
     for (const target of changes.keys()) {
-      if (target === before.missing || target.startsWith(before.missing + sep4)) {
+      if (target === before.missing || target.startsWith(before.missing + sep5)) {
         createsMissingPath = true;
         break;
       }
@@ -41083,16 +41123,151 @@ function hashDiscoveryPathFile(path, budget2, changes) {
   return createHash15("sha256").update(JSON.stringify({ version: 1, path, rows: before.rows, content })).digest("hex");
 }
 
+// src/lib/claude-plugin-manifest-witness.ts
+import { createHash as createHash16 } from "crypto";
+var CLAUDE_PLUGIN_MANIFEST_LIMITS = Object.freeze({ bytes: 1024 * 1024, depth: 32, nodes: 65536, stringCharacters: 16384 });
+function requireValue(value, reason) {
+  if (!value)
+    throw new Error("Claude plugin manifest " + reason);
+}
+function parse4(text2) {
+  requireValue(Buffer.byteLength(text2, "utf8") <= CLAUDE_PLUGIN_MANIFEST_LIMITS.bytes, "exceeds its byte limit");
+  let at = 0, nodes = 0;
+  const numberPattern = /-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/y;
+  const space = () => {
+    while (at < text2.length && /[\x20\t\r\n]/.test(text2[at]))
+      at++;
+  };
+  function string() {
+    requireValue(text2[at] === '"', "contains invalid JSON");
+    const start = at++;
+    while (at < text2.length) {
+      const character = text2[at++];
+      if (character === '"') {
+        let value2;
+        try {
+          value2 = JSON.parse(text2.slice(start, at));
+        } catch {
+          throw new Error("Claude plugin manifest contains invalid JSON string");
+        }
+        requireValue(value2.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters, "exceeds its string limit");
+        return value2;
+      }
+      if (character === "\\")
+        at++;
+    }
+    throw new Error("Claude plugin manifest contains an unterminated JSON string");
+  }
+  function value(depth) {
+    requireValue(depth <= CLAUDE_PLUGIN_MANIFEST_LIMITS.depth && ++nodes <= CLAUDE_PLUGIN_MANIFEST_LIMITS.nodes, "exceeds its nesting or node limit");
+    space();
+    const character = text2[at];
+    if (character === '"')
+      return { kind: "string", value: string() };
+    if (character === "{" || character === "[") {
+      at++;
+      space();
+      const object6 = character === "{", end = object6 ? "}" : "]", entries = [], items = [], keys2 = new Set;
+      if (text2[at] !== end)
+        while (true) {
+          if (object6) {
+            space();
+            const key = string();
+            requireValue(!keys2.has(key), "contains a duplicate JSON key");
+            keys2.add(key);
+            space();
+            requireValue(text2[at++] === ":", "contains invalid JSON");
+            entries.push([key, value(depth + 1)]);
+          } else
+            items.push(value(depth + 1));
+          space();
+          if (text2[at] === end)
+            break;
+          requireValue(text2[at++] === ",", "contains invalid JSON");
+        }
+      at++;
+      return object6 ? { kind: "object", entries } : { kind: "array", items };
+    }
+    for (const literal of ["true", "false", "null"])
+      if (text2.startsWith(literal, at)) {
+        at += literal.length;
+        return { kind: "literal", value: literal };
+      }
+    numberPattern.lastIndex = at;
+    const number = numberPattern.exec(text2);
+    requireValue(number, "contains invalid JSON");
+    at += number[0].length;
+    return { kind: "number", value: number[0] };
+  }
+  const root = value(0);
+  space();
+  requireValue(at === text2.length && root.kind === "object", "requires a JSON object without trailing content");
+  return root;
+}
+function canonical5(value) {
+  if (value.kind === "string")
+    return JSON.stringify(value.value);
+  if (value.kind === "number")
+    return value.value;
+  if (value.kind === "literal")
+    return value.value;
+  if (value.kind === "array")
+    return "[" + value.items.map(canonical5).join(",") + "]";
+  return "{" + value.entries.map(([key, item]) => JSON.stringify(key) + ":" + canonical5(item)).join(",") + "}";
+}
+var DESCRIPTIVE_FIELDS = new Set(["description", "version", "author", "homepage", "repository", "license", "keywords"]);
+function validateText(value, field) {
+  requireValue(value?.kind === "string" && value.value.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters, "has an invalid " + field + " field");
+}
+function validateDescriptiveFields(manifest) {
+  const values = new Map(manifest.entries);
+  for (const field of ["description", "version", "homepage", "license"]) {
+    const value = values.get(field);
+    if (value !== undefined)
+      validateText(value, field);
+  }
+  const author = values.get("author");
+  if (author !== undefined) {
+    if (author.kind === "string")
+      validateText(author, "author");
+    else {
+      requireValue(author.kind === "object" && author.entries.every(([key, value]) => ["name", "email", "url"].includes(key) && value.kind === "string" && value.value.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters), "has an invalid author field");
+    }
+  }
+  const repository = values.get("repository");
+  if (repository !== undefined) {
+    if (repository.kind === "string")
+      validateText(repository, "repository");
+    else
+      requireValue(repository.kind === "object" && repository.entries.every(([key, value]) => ["type", "url", "directory"].includes(key) && value.kind === "string" && value.value.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters), "has an invalid repository field");
+  }
+  const keywords = values.get("keywords");
+  if (keywords !== undefined)
+    requireValue(keywords.kind === "array" && keywords.items.every((value) => value.kind === "string" && value.value.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters), "has an invalid keywords field");
+}
+function hashClaudePluginManifest(text2) {
+  const manifest = parse4(text2);
+  validateDescriptiveFields(manifest);
+  const discovery = { kind: "object", entries: manifest.entries.filter(([key]) => !DESCRIPTIVE_FIELDS.has(key)) };
+  return createHash16("sha256").update(canonical5(discovery)).digest("hex");
+}
+function projectReviewedClaudePluginManifest(text2, reviewedSha256) {
+  if (!/^[a-f0-9]{64}$/.test(reviewedSha256) || createHash16("sha256").update(text2).digest("hex") !== reviewedSha256) {
+    throw new Error("Reviewed Claude plugin manifest changed before semantic projection");
+  }
+  return hashClaudePluginManifest(text2);
+}
+
 // src/lib/plugin-discovery.ts
 import { closeSync as closeSync14, constants as constants11, fstatSync as fstatSync14, lstatSync as lstatSync17, openSync as openSync14, opendirSync as opendirSync4, readSync as readSync9 } from "fs";
-import { basename as basename6, dirname as dirname13, isAbsolute as isAbsolute16, join as join23, resolve as resolve14 } from "path";
+import { basename as basename6, dirname as dirname13, isAbsolute as isAbsolute16, join as join24, resolve as resolve14 } from "path";
 
 // src/lib/plugin-admission.ts
 import { homedir as homedir2 } from "os";
-import { isAbsolute as isAbsolute15, join as join22, resolve as resolve13 } from "path";
+import { isAbsolute as isAbsolute15, join as join23, resolve as resolve13 } from "path";
 
 // src/lib/plugin-projection.ts
-import { createHash as createHash16 } from "crypto";
+import { createHash as createHash17 } from "crypto";
 import { posix as posix2 } from "path";
 var PLUGIN_PROJECTION_MANIFEST = "plugin-projection.json";
 var PLUGIN_PROJECTION_LIMITS = Object.freeze({ files: 1024, bytes: 64 * 1024 * 1024, fileBytes: 16 * 1024 * 1024, metadataBytes: 512 * 1024, registrations: 64, history: 128 });
@@ -41103,7 +41278,7 @@ function pluginNeed(value, message) {
   if (!value)
     pluginRefusal(message);
 }
-var pluginHash = (bytes) => createHash16("sha256").update(bytes).digest("hex");
+var pluginHash = (bytes) => createHash17("sha256").update(bytes).digest("hex");
 function pluginObject(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
@@ -41119,7 +41294,7 @@ function pluginId(value) {
 function pluginDigest(value) {
   pluginNeed(typeof value === "string" && /^sha256:[a-f0-9]{64}$/.test(value), "Invalid plugin tree digest");
 }
-function parse4(bytes) {
+function parse5(bytes) {
   pluginNeed(bytes.byteLength <= PLUGIN_PROJECTION_LIMITS.metadataBytes, "Plugin metadata exceeds its limit");
   try {
     return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
@@ -41210,7 +41385,7 @@ function buildPluginProjection(entries) {
   pluginFileWitnesses(entries);
   const contract = entries.filter((item) => item.path === PLUGIN_PROJECTION_MANIFEST);
   pluginNeed(contract.length === 1, "The selected bundle has no unique plugin projection manifest");
-  const manifest = parse4(contract[0].bytes);
+  const manifest = parse5(contract[0].bytes);
   validatePluginManifest(manifest);
   const original = entries.filter((item) => item.path.startsWith("original/")).map((item) => ({ ...item, path: item.path.slice(9) }));
   pluginNeed(!original.some((item) => [".in_use", ".orphaned_at", ".gcs-sha", ".links_materialized"].some((path) => within(item.path, path))), "Original plugin packages cannot supply native runtime metadata");
@@ -41218,7 +41393,7 @@ function buildPluginProjection(entries) {
   pluginNeed(originalTreeDigest === manifest.upstream.treeDigest, "The original plugin package differs from its immutable provenance");
   const native = original.find((item) => item.path === ".claude-plugin/plugin.json");
   pluginNeed(native, "The original plugin manifest is missing");
-  const config = parse4(native.bytes);
+  const config = parse5(native.bytes);
   pluginKeys(config, MANIFEST_FIELDS);
   pluginNeed(config.name === manifest.pluginId.split("@")[0] && (manifest.upstream.version === null ? !Object.hasOwn(config, "version") : config.version === manifest.upstream.version), "Original plugin identity differs from its contract");
   const skillRoots = ["skills", ...declaredPaths(config.skills)], commandRoots = ["commands", ...declaredPaths(config.commands)];
@@ -41262,7 +41437,7 @@ function buildPluginProjection(entries) {
     if (item.path === native.path)
       continue;
     if (item.path.toLowerCase() === "package.json") {
-      const pkg = parse4(item.bytes);
+      const pkg = parse5(item.bytes);
       pluginNeed(pluginObject(pkg), "Invalid plugin package metadata");
       for (const key of ["scripts", "dependencies", "optionalDependencies", "devDependencies", "peerDependencies", "workspaces", "bundledDependencies", "bundleDependencies", "packageManager"])
         pluginNeed(pkg[key] === undefined, "Upstream package installation is outside plugin admission");
@@ -41291,9 +41466,9 @@ function buildPluginProjection(entries) {
 }
 
 // src/lib/plugin-projection-store.ts
-import { createHash as createHash17, randomUUID as randomUUID3 } from "crypto";
+import { createHash as createHash18, randomUUID as randomUUID3 } from "crypto";
 import { constants as constants10, closeSync as closeSync13, fchmodSync, fstatSync as fstatSync13, fsyncSync as fsyncSync3, linkSync as linkSync2, lstatSync as lstatSync15, mkdirSync as mkdirSync5, openSync as openSync13, opendirSync as opendirSync3, readSync as readSync8, renameSync as renameSync3, rmdirSync as rmdirSync2, rmSync, unlinkSync as unlinkSync4, writeSync as writeSync2 } from "fs";
-import { dirname as dirname12, isAbsolute as isAbsolute13, join as join19, parse as parse5, resolve as resolve12 } from "path";
+import { dirname as dirname12, isAbsolute as isAbsolute13, join as join20, parse as parse6, resolve as resolve12 } from "path";
 var READ_FLAGS = constants10.O_RDONLY | constants10.O_NOFOLLOW | constants10.O_NONBLOCK;
 var WRITE_FLAGS = constants10.O_WRONLY | constants10.O_CREAT | constants10.O_EXCL | constants10.O_NOFOLLOW | constants10.O_NONBLOCK;
 var uid = () => typeof process.getuid === "function" ? BigInt(process.getuid()) : undefined;
@@ -41307,7 +41482,7 @@ function stat(path) {
     return pluginRefusal("Cannot inspect plugin filesystem entry");
   }
 }
-function canonical5(path) {
+function canonical6(path) {
   pluginNeed(typeof path === "string" && path.length <= 8192 && isAbsolute13(path) && resolve12(path) === path && !/[\x00-\x1f\x7f]/.test(path), "Plugin storage paths must be canonical absolute paths");
 }
 function owner(stats, system = false) {
@@ -41318,12 +41493,12 @@ function same3(left, right, identityOnly = false) {
   pluginNeed(right && left.dev === right.dev && left.ino === right.ino && left.mode === right.mode && left.uid === right.uid && left.gid === right.gid && (identityOnly || left.size === right.size && left.nlink === right.nlink && left.mtimeNs === right.mtimeNs && left.ctimeNs === right.ctimeNs), "Plugin filesystem entry changed during access");
 }
 function ancestors(path, create = false) {
-  canonical5(path);
-  const result = [], parent = dirname12(path), filesystemRoot = parse5(parent).root;
+  canonical6(path);
+  const result = [], parent = dirname12(path), filesystemRoot = parse6(parent).root;
   let current = filesystemRoot;
   for (const segment of ["", ...parent.slice(filesystemRoot.length).split("/").filter(Boolean)]) {
     if (segment)
-      current = join19(current, segment);
+      current = join20(current, segment);
     let currentStat = stat(current);
     if (!currentStat && create) {
       try {
@@ -41438,7 +41613,7 @@ function snapshotPluginTree(root, options = {}) {
       pluginNeed(++visited <= PLUGIN_PROJECTION_LIMITS.files * 50, "Plugin tree membership exceeds its limit");
       const path = relative5 ? `${relative5}/${name}` : name;
       pluginNeed(new TextEncoder().encode(path).byteLength <= 100 && !/[\\:\x00-\x1f\x7f]/u.test(path), "Plugin entry path exceeds its limit or is unsafe");
-      const absolute = join19(directory, name), entryStat = stat(absolute);
+      const absolute = join20(directory, name), entryStat = stat(absolute);
       pluginNeed(entryStat, "Plugin tree member disappeared");
       if (relative5 === "" && name === ".orphaned_at" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
         const bytes2 = readBytes(absolute, 32, "native-pin");
@@ -41455,7 +41630,7 @@ function snapshotPluginTree(root, options = {}) {
         directories.push({ path: absolute, stat: entryStat, names: pins });
         for (const pin of pins) {
           pluginNeed(/^[1-9][0-9]{0,9}$/.test(pin) && Number(pin) <= 2147483647, "Unrecognized native plugin pin name");
-          const pinPath = join19(absolute, pin), pinStat = stat(pinPath);
+          const pinPath = join20(absolute, pin), pinStat = stat(pinPath);
           pluginNeed(pinStat, "Native plugin pin disappeared");
           const bytes2 = readBytes(pinPath, 4096, "native-pin");
           let value;
@@ -41553,7 +41728,7 @@ function materializePluginTree(root, entries) {
     mkdirSync5(staging, { mode: 448 });
     staged = stat(staging);
     for (const entry of entries) {
-      const path = join19(staging, entry.path);
+      const path = join20(staging, entry.path);
       ancestors(path, true);
       writeExclusive(path, entry.bytes, entry.mode);
     }
@@ -41633,7 +41808,7 @@ function pluginExecutableDigest(path) {
     const opened = fstatSync13(fd, { bigint: true });
     same3(before, opened);
     fileShape(opened, maximum, "executable");
-    const hash2 = createHash17("sha256"), buffer = new Uint8Array(64 * 1024);
+    const hash2 = createHash18("sha256"), buffer = new Uint8Array(64 * 1024);
     let remaining = Number(opened.size);
     while (remaining > 0) {
       const count = readSync8(fd, buffer, 0, Math.min(buffer.byteLength, remaining), null);
@@ -41658,11 +41833,11 @@ function pluginExecutableDigest(path) {
 
 // src/lib/skill-validation.ts
 import { existsSync as existsSync5, lstatSync as lstatSync16, readFileSync as readFileSync14, readdirSync as readdirSync6, statSync as statSync6 } from "fs";
-import { isAbsolute as isAbsolute14, join as join21, normalize as normalize3 } from "path";
+import { isAbsolute as isAbsolute14, join as join22, normalize as normalize3 } from "path";
 
 // src/lib/hosted-skill-set.ts
 import { existsSync as existsSync4, readFileSync as readFileSync13, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 var HOSTED_RUNTIMES = new Set(["hosted"]);
 var HOSTED_SOURCES = new Set(["remote", "private-hosted"]);
 function normalizeMarker(value) {
@@ -41675,7 +41850,7 @@ function isHostedMetadataPackage(pkg) {
   return HOSTED_RUNTIMES.has(normalizeMarker(skills.runtime)) || HOSTED_SOURCES.has(normalizeMarker(skills.source));
 }
 function isHostedMetadataSkillDir(skillDir) {
-  const pkgPath = join20(skillDir, "package.json");
+  const pkgPath = join21(skillDir, "package.json");
   if (!existsSync4(pkgPath))
     return false;
   try {
@@ -41775,7 +41950,7 @@ function validateRuntimeEntry(skillPath, entrypoint, issues, warnings) {
   const parts = entrypoint.split("/");
   let current = skillPath;
   for (let index = 0;index < parts.length; index++) {
-    current = join21(current, parts[index]);
+    current = join22(current, parts[index]);
     let info;
     try {
       info = lstatSync16(current);
@@ -41891,7 +42066,7 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
     add(issues, "skill.name_invalid", `Skill name '${bareName}' must use lowercase letters, numbers, dots, underscores, or hyphens`);
   }
   for (const entry of readdirSync6(skillPath).sort()) {
-    const entryPath = join21(skillPath, entry);
+    const entryPath = join22(skillPath, entry);
     if (RESERVED_SKILL_ENTRIES.has(entry)) {
       add(issues, "skill.reserved_file", `Reserved file '${entry}' is not allowed in skill packages`);
     }
@@ -41903,13 +42078,13 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
     }
   }
   for (const docFile of DOC_FILES) {
-    if (existsSync5(join21(skillPath, docFile)))
+    if (existsSync5(join22(skillPath, docFile)))
       metadata.docFiles.push(docFile);
   }
   if (metadata.docFiles.length === 0) {
     add(issues, "skill.docs_missing", "Missing documentation file: expected SKILL.md, README.md, or CLAUDE.md");
   }
-  const skillMdPath = join21(skillPath, "SKILL.md");
+  const skillMdPath = join22(skillPath, "SKILL.md");
   if (existsSync5(skillMdPath)) {
     const frontmatter = parseSkillFrontmatter(readFileSync14(skillMdPath, "utf-8"));
     if (!frontmatter) {
@@ -41953,7 +42128,7 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
   }
   metadata.kind = resolvedKind;
   const isInstruction = resolvedKind === "instruction";
-  const pkgPath = join21(skillPath, "package.json");
+  const pkgPath = join22(skillPath, "package.json");
   if (!existsSync5(pkgPath)) {
     if (!isInstruction)
       add(issues, "package.missing", "Missing package.json");
@@ -42012,7 +42187,7 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
               add(issues, "package.bin_target_unsafe", `package.json bin '${command}' target '${target}' must stay inside the skill directory`);
               continue;
             }
-            const targetPath = join21(skillPath, target);
+            const targetPath = join22(skillPath, target);
             if (!existsSync5(targetPath)) {
               add(warnings, "package.bin_target_missing", `package.json bin '${command}' target '${target}' is not present before build`);
             } else if (statSync6(targetPath).isDirectory()) {
@@ -42030,9 +42205,9 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
     metadata.runtime = "none";
   } else {
     metadata.runtime = hostedMetadata ? "hosted" : "local";
-    const srcDir = join21(skillPath, "src");
+    const srcDir = join22(skillPath, "src");
     let declaredEntrypoint;
-    const manifestPath = join21(skillPath, "skill.json");
+    const manifestPath = join22(skillPath, "skill.json");
     if (!hostedMetadata && existsSync5(manifestPath)) {
       try {
         const manifest = asRecord(readJsonFile(manifestPath));
@@ -42049,10 +42224,10 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
       validateRuntimeEntry(skillPath, declaredEntrypoint, issues, warnings);
     } else if (!existsSync5(srcDir)) {
       add(issues, "skill.src_missing", "Missing src/ directory");
-    } else if (!existsSync5(join21(srcDir, "index.ts")) && !existsSync5(join21(srcDir, "index.js"))) {
+    } else if (!existsSync5(join22(srcDir, "index.ts")) && !existsSync5(join22(srcDir, "index.js"))) {
       add(issues, "skill.src_index_missing", "Missing src/index.ts or src/index.js");
     } else {
-      const indexPath = existsSync5(join21(srcDir, "index.ts")) ? join21(srcDir, "index.ts") : join21(srcDir, "index.js");
+      const indexPath = existsSync5(join22(srcDir, "index.ts")) ? join22(srcDir, "index.ts") : join22(srcDir, "index.js");
       const size = statSync6(indexPath).size;
       if (size < 50)
         add(warnings, "skill.src_index_minimal", `Source entry point is very small (${size}B)`);
@@ -42077,7 +42252,7 @@ function validateRegistryConsistency(registry, skillsDir) {
     return false;
   })));
   const skillDirs = existsSync5(skillsDir) ? readdirSync6(skillsDir).filter((entry) => {
-    const fullPath = join21(skillsDir, entry);
+    const fullPath = join22(skillsDir, entry);
     return !entry.startsWith(".") && entry !== "_common" && statSync6(fullPath).isDirectory();
   }) : [];
   const directoryNames2 = new Set(skillDirs);
@@ -42116,7 +42291,7 @@ function describeEntries(entries) {
 
 // src/lib/plugin-admission.ts
 function pluginAdmissionRoot() {
-  return join22(homedir2(), ".hasna", "skills", "plugin-admission");
+  return join23(homedir2(), ".hasna", "skills", "plugin-admission");
 }
 function validatePluginTarget(value) {
   pluginKeys(value, ["schemaVersion", "pluginId", "registrations", "native", "resolver"]);
@@ -42292,12 +42467,12 @@ function root(options) {
 }
 function pluginBindingPath(storeRoot, id2) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id2), "Invalid plugin binding identifier");
-  return join22(storeRoot, "bindings", `${id2}.json`);
+  return join23(storeRoot, "bindings", `${id2}.json`);
 }
 function pluginReceiptPath(storeRoot, id2, digest2) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id2), "Invalid plugin binding identifier");
   pluginDigest(digest2);
-  return join22(storeRoot, "receipts", id2, `${digest2.slice(7)}.json`);
+  return join23(storeRoot, "receipts", id2, `${digest2.slice(7)}.json`);
 }
 function readPluginBinding(storeRoot, id2) {
   const value = readPluginJson(pluginBindingPath(storeRoot, id2));
@@ -42317,7 +42492,7 @@ function readPluginAdmissionReceipt(storeRoot, id2, digest2) {
   pluginNeed(receipt.plan.bindingId === id2 && receipt.plan.planDigest === digest2, "Plugin receipt identity differs from its filename");
   const binding = readPluginBinding(storeRoot, id2);
   pluginNeed(canonicalJson(binding) === canonicalJson(receipt.plan.binding) && receipt.plan.sourceCommand === pluginResolverCommand(binding), "Plugin receipt binding changed");
-  pluginNeed(receipt.materializedPath === join22(storeRoot, "objects", id2, digest2.slice(7)), "Plugin receipt points outside its immutable materialization");
+  pluginNeed(receipt.materializedPath === join23(storeRoot, "objects", id2, digest2.slice(7)), "Plugin receipt points outside its immutable materialization");
   pluginText(receipt.admittedAt, 64);
   pluginNeed(Number.isFinite(Date.parse(receipt.admittedAt)), "Invalid plugin admission time");
   return receipt;
@@ -42458,7 +42633,7 @@ async function admitPlugin(spec, profileId, target, approvedDigest, approvedEvid
   const { plan, projection } = await candidate(spec, profileId, target, options);
   pluginNeed(plan.planDigest === approvedDigest, "The plugin plan changed since review; obtain and review a new plan");
   pluginNeed(plan.evidenceDigest === approvedEvidenceDigest, "The plugin routing evidence changed since review; obtain and review a new plan");
-  const store = root(options), materializedPath = join22(store, "objects", plan.bindingId, plan.planDigest.slice(7));
+  const store = root(options), materializedPath = join23(store, "objects", plan.bindingId, plan.planDigest.slice(7));
   materializePluginTree(materializedPath, projection.files);
   writePluginJsonImmutable(pluginBindingPath(store, plan.bindingId), plan.binding);
   const path = pluginReceiptPath(store, plan.bindingId, plan.planDigest), existing = readPluginJson(path);
@@ -42550,7 +42725,7 @@ function hashManagedPluginRegistry(path, managed) {
     seen.add(target.pluginId);
     const rows = plugins[target.pluginId];
     pluginNeed(Array.isArray(rows) && rows.length === target.registrations.length, "Managed plugin registration membership changed");
-    const [name, market] = target.pluginId.split("@"), cacheRoot = join23(dirname13(path), "cache", market, name);
+    const [name, market] = target.pluginId.split("@"), cacheRoot = join24(dirname13(path), "cache", market, name);
     const scopes = new Set, approvals = new Map, currentFiles = new Map;
     plugins[target.pluginId] = rows.map((row) => {
       pluginNeed(pluginObject(row), "Invalid managed plugin registration");
@@ -42563,7 +42738,7 @@ function hashManagedPluginRegistry(path, managed) {
       pluginText(row.sourceProducerPath);
       pluginText(row.lastUpdated, 64);
       pluginNeed(Number.isFinite(Date.parse(row.lastUpdated)), "Invalid managed plugin update timestamp");
-      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join23(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
+      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join24(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
         const digest2 = `sha256:${basename6(producer)}`;
@@ -42606,11 +42781,11 @@ function hashManagedPluginRegistry(path, managed) {
       directory.closeSync();
     }
     for (const version of names.sort()) {
-      const files = pluginFileWitnesses(snapshotPluginTree(join23(cacheRoot, version), { nativeRuntime: `claude-${target.native.version}` }));
+      const files = pluginFileWitnesses(snapshotPluginTree(join24(cacheRoot, version), { nativeRuntime: `claude-${target.native.version}` }));
       verifiedBytes += files.reduce((total, file) => total + file.size, 0);
       pluginNeed(verifiedBytes <= 256 * 1024 * 1024, "Managed plugin verification exceeds its aggregate byte budget");
       const serialized = JSON.stringify(files);
-      const expected = currentFiles.get(join23(cacheRoot, version));
+      const expected = currentFiles.get(join24(cacheRoot, version));
       pluginNeed(expected === undefined || serialized === expected, "Current native cache differs from its exact registered producer receipt");
       pluginNeed([...approvals.values()].some((receipt) => nativeVersionMatches(version, receipt) && JSON.stringify(receipt.plan.files) === serialized), "A retained native plugin cache version differs from every approved projection");
     }
@@ -42628,7 +42803,7 @@ function captureManagedPluginRegistry(path, managedPlugins) {
 }
 
 // src/lib/claude-marketplace-registry.ts
-import { createHash as createHash18 } from "crypto";
+import { createHash as createHash19 } from "crypto";
 import { closeSync as closeSync15, constants as constants12, fstatSync as fstatSync15, lstatSync as lstatSync18, openSync as openSync15, readSync as readSync10 } from "fs";
 import { basename as basename7, dirname as dirname14, isAbsolute as isAbsolute17, resolve as resolve15 } from "path";
 var CLAUDE_MARKETPLACE_REGISTRY_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
@@ -42685,7 +42860,7 @@ function readRegistry2(path, budget2) {
     closeSync15(fd);
   }
 }
-function parse6(text2) {
+function parse7(text2) {
   let at = 0, nodes = 0;
   const numberPattern = /-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/y;
   const space = () => {
@@ -42794,26 +42969,26 @@ function normalizeRow(row, version = 1) {
   row.entries = row.entries.map(([key, value]) => [key, key === "lastUpdated" ? { kind: "validated-update-time" } : value]);
 }
 function captureClaudeMarketplaceRegistry(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
-  const value = parse6(readRegistry2(path, budget2));
+  const value = parse7(readRegistry2(path, budget2));
   for (const [, row] of value.entries)
     normalizeRow(row);
-  const sha2562 = createHash18("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
+  const sha2562 = createHash19("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry", sha256: sha2562 };
 }
 function captureClaudeMarketplaceRegistryV2(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
-  const value = parse6(readRegistry2(path, budget2));
+  const value = parse7(readRegistry2(path, budget2));
   for (const [, row] of value.entries)
     normalizeRow(row, 2);
-  const sha2562 = createHash18("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
+  const sha2562 = createHash19("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry-v2", sha256: sha2562 };
 }
 
 // src/lib/codex-hook-discovery-recovery.ts
-import { createHash as createHash20 } from "crypto";
+import { createHash as createHash21 } from "crypto";
 
 // src/lib/codex-hook-trust-files.ts
 import { closeSync as closeSync16, constants as constants13, fstatSync as fstatSync16, fsyncSync as fsyncSync4, lstatSync as lstatSync19, openSync as openSync16, readSync as readSync11, writeFileSync as writeFileSync4 } from "fs";
-import { createHash as createHash19 } from "crypto";
+import { createHash as createHash20 } from "crypto";
 import { dirname as dirname15 } from "path";
 function need6(value, code) {
   if (!value)
@@ -42849,7 +43024,7 @@ function snapshot(file, privateFile = false, options = {}) {
     }
     need6(length === Number(before.size) && sameStat(before, fstatSync16(fd, { bigint: true })) && sameStat(before, lstatSync19(file, { bigint: true })), "INPUT_CHANGED");
     const content = bytes.subarray(0, length), text2 = new TextDecoder("utf-8", { fatal: true }).decode(content);
-    return { file, privateFile, readOnlyPackage, text: text2, bytes: content, stat: before, sha256: createHash19("sha256").update(content).digest("hex") };
+    return { file, privateFile, readOnlyPackage, text: text2, bytes: content, stat: before, sha256: createHash20("sha256").update(content).digest("hex") };
   } finally {
     closeSync16(fd);
   }
@@ -42865,7 +43040,7 @@ var matchedEvents = { ...events, PreToolUse: ["preToolUse", "pre_tool_use"] };
 var proofs = new WeakMap;
 
 // src/lib/codex-hook-discovery-recovery.ts
-var sha3 = (text2) => createHash20("sha256").update(text2).digest("hex");
+var sha3 = (text2) => createHash21("sha256").update(text2).digest("hex");
 var fields = [...CODEX_DISCOVERY_PROJECTION_FIELDS];
 var proofs2 = new WeakMap;
 function assertCodexHookDiscoveryRecovery(binding, witness) {
@@ -42885,36 +43060,36 @@ function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witnes
 
 // src/lib/agent-sumi.ts
 import { existsSync as existsSync6, lstatSync as lstatSync20, realpathSync as realpathSync8 } from "fs";
-import { join as join24, resolve as resolve16 } from "path";
+import { join as join25, resolve as resolve16 } from "path";
 function sumiConfigDirectory(home, env = process.env) {
   for (const key of ["SUMI_CONFIG", "SUMI_CONFIG_CONTENT"])
     if (env[key] !== undefined)
       throw new Error(`Sumi ${key} requires a dedicated discovery adapter; unset it before Skills integration`);
   const selected = (key) => env[key]?.trim() ? env[key] : undefined;
-  const expand = (value) => resolve16(value === "~" ? home : value.startsWith("~/") ? join24(home, value.slice(2)) : value);
+  const expand = (value) => resolve16(value === "~" ? home : value.startsWith("~/") ? join25(home, value.slice(2)) : value);
   const explicit = selected("SUMI_CONFIG_DIR");
   const xdg = selected("XDG_CONFIG_HOME");
   const custom = selected("SUMI_HOME");
-  const canonical6 = explicit ? expand(explicit) : xdg ? join24(expand(xdg), "sumi") : join24(custom ? expand(custom) : join24(home, ".hasna-internal/sumi"), "config");
+  const canonical7 = explicit ? expand(explicit) : xdg ? join25(expand(xdg), "sumi") : join25(custom ? expand(custom) : join25(home, ".hasna-internal/sumi"), "config");
   if (explicit || xdg || custom)
-    return canonical6;
-  const legacy = join24(home, ".config/sumi");
-  const a = lstatSync20(canonical6, { throwIfNoEntry: false }), b = lstatSync20(legacy, { throwIfNoEntry: false });
-  if (a && b && realpathSync8(canonical6) !== realpathSync8(legacy))
+    return canonical7;
+  const legacy = join25(home, ".config/sumi");
+  const a = lstatSync20(canonical7, { throwIfNoEntry: false }), b = lstatSync20(legacy, { throwIfNoEntry: false });
+  if (a && b && realpathSync8(canonical7) !== realpathSync8(legacy))
     throw new Error("Sumi config roots conflict; complete native home adoption before Skills integration");
-  const path = a ? canonical6 : b ? legacy : canonical6;
+  const path = a ? canonical7 : b ? legacy : canonical7;
   if (!existsSync6(path))
     return path;
   const physical = realpathSync8(path);
-  if ((a?.isSymbolicLink() || b?.isSymbolicLink()) && ![canonical6, legacy].includes(physical))
+  if ((a?.isSymbolicLink() || b?.isSymbolicLink()) && ![canonical7, legacy].includes(physical))
     throw new Error("Sumi config alias must resolve to its canonical or legacy root");
   return physical;
 }
 function sumiBridgeRoot(home) {
-  return join24(sumiConfigDirectory(home), "skills");
+  return join25(sumiConfigDirectory(home), "skills");
 }
 function sumiConfigPath(home) {
-  return join24(sumiConfigDirectory(home), "sumi.json");
+  return join25(sumiConfigDirectory(home), "sumi.json");
 }
 function renderSumiPlugin(command, profile) {
   return renderSumiPluginVersion(command, profile, false);
@@ -43006,7 +43181,7 @@ var SUMI_SKILL_PERMISSIONS = [
 ];
 
 // src/lib/agent-discovery.ts
-var digest2 = (text2) => createHash21("sha256").update(text2).digest("hex");
+var digest2 = (text2) => createHash22("sha256").update(text2).digest("hex");
 function parseConfig(text2, path, toml = false) {
   try {
     const value = toml ? Bun.TOML.parse(text2) : JSON.parse(text2);
@@ -43092,6 +43267,12 @@ function projected(source, changes, budget2 = discoveryByteBudget()) {
       throw new Error("Managed plugin registry witnesses require verified native registrations");
     return hashManagedPluginRegistry(source.path, source.managedPlugins);
   }
+  if (source.hashMode === "claude-plugin-manifest-v1") {
+    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || changes?.has(source.path))
+      throw new Error("Claude plugin manifest witnesses require a native discovery source without synthetic changes");
+    const text3 = read2(source.path);
+    return text3 === null ? null : hashClaudePluginManifest(text3);
+  }
   if (source.managedPlugins !== undefined)
     throw new Error("Managed plugin rules require a typed registry witness");
   if (source.hashMode !== undefined) {
@@ -43118,7 +43299,7 @@ function absentCodexSkillRoots(binding) {
     throw new Error("Invalid disabled Codex discovery proof");
   if (binding.method !== "reviewed" || controls.every((control) => lstatSync21(control.pluginParent, { throwIfNoEntry: false })))
     return [];
-  const cache = dirname16(dirname16(controls[0].pluginParent)), config = join25(dirname16(dirname16(cache)), "config.toml");
+  const cache = dirname16(dirname16(controls[0].pluginParent)), config = join26(dirname16(dirname16(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || projected(source) !== source.sha256)
     throw new Error("Missing current disabled Codex configuration witness");
@@ -43126,8 +43307,8 @@ function absentCodexSkillRoots(binding) {
   return [...new Set(controls.map((control) => control.pluginParent))].filter((parent) => !codexDirectHookSelects(cache, parent) && absentDisabledCodexPluginParent(cache, parent, controls, rules));
 }
 function codexDirectHookSelects(cache, root2) {
-  const codex = dirname16(dirname16(cache)), config = Bun.TOML.parse(read2(join25(codex, "config.toml")) ?? "");
-  const hooks = read2(join25(codex, "hooks.json"));
+  const codex = dirname16(dirname16(cache)), config = Bun.TOML.parse(read2(join26(codex, "config.toml")) ?? "");
+  const hooks = read2(join26(codex, "hooks.json"));
   if (hooks !== null)
     hashNativeJsonControls(hooks);
   return JSON.stringify(config.hooks ?? {}).includes(root2) || hooks !== null && JSON.stringify(JSON.parse(hooks)).includes(root2);
@@ -43139,7 +43320,7 @@ function retiredCodexRoots(binding) {
   const controls = binding.codexDisabledPluginSkills;
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !Array.isArray(controls) || !controls.length || !Array.isArray(proof.roots) || proof.roots.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.roots).size !== proof.roots.length || !Array.isArray(proof.directories) || proof.parents !== undefined && (!Array.isArray(proof.parents) || proof.parents.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.parents).size !== proof.parents.length) || !proof.roots.length && !proof.parents?.length)
     throw new Error("Invalid retired Codex materialization proof");
-  const cache = dirname16(dirname16(controls[0].pluginParent)), config = join25(dirname16(dirname16(cache)), "config.toml");
+  const cache = dirname16(dirname16(controls[0].pluginParent)), config = join26(dirname16(dirname16(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || projected(source) !== source.sha256)
     throw new Error("Missing current retired Codex configuration witness");
@@ -43147,7 +43328,7 @@ function retiredCodexRoots(binding) {
   if ((proof.parents ?? []).some((parent) => codexDirectHookSelects(cache, parent) || !reviewedDisabledCodexPluginParent(cache, parent, controls, rules)) || !reviewedCodexPluginCapabilitiesUnchanged(cache, controls, (path) => read2(path), rules))
     throw new Error("Retired Codex parent capabilities changed");
   for (const root2 of proof.roots) {
-    const manifest = binding.sources.find((source2) => source2.path === join25(root2, ".codex-plugin/plugin.json") && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && [undefined, "bytes"].includes(source2.hashMode));
+    const manifest = binding.sources.find((source2) => source2.path === join26(root2, ".codex-plugin/plugin.json") && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && [undefined, "bytes"].includes(source2.hashMode));
     if (!manifest || codexDirectHookSelects(cache, root2) || !reviewedRetiredCodexRoot(cache, root2, controls, rules, (path) => read2(path), true))
       throw new Error("Retired Codex materialization changed");
   }
@@ -43157,14 +43338,14 @@ function captureRetiredCodexDiscovery(binding, controls, rules) {
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !controls.length)
     return binding;
   const cache = dirname16(dirname16(controls[0].pluginParent));
-  const candidates = binding.sources.filter((source) => source.path.endsWith(sep5 + ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined && [undefined, "bytes"].includes(source.hashMode)).map((source) => dirname16(dirname16(source.path)));
+  const candidates = binding.sources.filter((source) => source.path.endsWith(sep6 + ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined && [undefined, "bytes"].includes(source.hashMode)).map((source) => dirname16(dirname16(source.path)));
   const roots = [...new Set(candidates)].filter((root2) => !codexDirectHookSelects(cache, root2) && reviewedRetiredCodexRoot(cache, root2, controls, rules, (path) => read2(path), binding.codexRetiredMaterializations?.roots.includes(root2) ?? false)).sort();
   const parents3 = reviewedCodexPluginCapabilitiesUnchanged(cache, controls, (path) => read2(path), rules) ? [...new Set(controls.map((control) => control.pluginParent))].filter((parent) => !codexDirectHookSelects(cache, parent) && reviewedDisabledCodexPluginParent(cache, parent, controls, rules)).sort() : [];
   const { codexRetiredMaterializations: previous, ...current } = binding;
   if (!roots.length && !parents3.length)
     return current;
   const installation = codexInstallationRoots(binding);
-  const directories = (binding.directories ?? []).filter((directory) => !installation.some((root2) => directory.path === root2 || directory.path.startsWith(root2 + sep5) || root2.startsWith(directory.path + sep5)));
+  const directories = (binding.directories ?? []).filter((directory) => !installation.some((root2) => directory.path === root2 || directory.path.startsWith(root2 + sep6) || root2.startsWith(directory.path + sep6)));
   if (previous && isDeepStrictEqual6(previous.roots, roots) && isDeepStrictEqual6(previous.parents, parents3) && isDeepStrictEqual6(previous.directories.map((item) => item.path), directories.map((item) => item.path)))
     return { ...current, codexRetiredMaterializations: previous };
   return { ...current, codexRetiredMaterializations: { roots, parents: parents3, directories: captureDiscoveryDirectoryProjection(directories.map((item) => item.path), roots) } };
@@ -43176,17 +43357,17 @@ function absentRetiredClaudeRoots(binding) {
   for (const source of binding.sources) {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.sha256 === null)
       continue;
-    const marker = sep5 + ".claude" + sep5 + "plugins" + sep5 + "cache" + sep5, at = source.path.indexOf(marker);
+    const marker = sep6 + ".claude" + sep6 + "plugins" + sep6 + "cache" + sep6, at = source.path.indexOf(marker);
     if (at < 0 || source.path.indexOf(marker, at + 1) >= 0)
       continue;
-    const cache = source.path.slice(0, at + marker.length - 1), parts = source.path.slice(at + marker.length).split(sep5);
+    const cache = source.path.slice(0, at + marker.length - 1), parts = source.path.slice(at + marker.length).split(sep6);
     if (parts.length < 4 || parts.slice(0, 3).some((part) => !part || part === "." || part === ".."))
       continue;
-    const root2 = join25(cache, ...parts.slice(0, 3));
+    const root2 = join26(cache, ...parts.slice(0, 3));
     safe4(root2);
     if (lstatSync21(root2, { throwIfNoEntry: false }))
       continue;
-    const claude = dirname16(dirname16(cache)), settings = join25(claude, "settings.json"), registry = join25(claude, "plugins/installed_plugins.json");
+    const claude = dirname16(dirname16(cache)), settings = join26(claude, "settings.json"), registry = join26(claude, "plugins/installed_plugins.json");
     const full = (path) => binding.sources.find((item) => item.path === path && item.sha256 !== null && item.format === undefined && item.fields === undefined);
     const configSource = full(settings), registrySource = full(registry);
     if (!configSource || !registrySource || projected(configSource) !== configSource.sha256 || projected(registrySource) !== registrySource.sha256)
@@ -43205,10 +43386,10 @@ function absentRetiredClaudeRoots(binding) {
     const active = rows[0].installPath;
     if (rows[0].version !== basename8(active) || resolve17(active) !== active || dirname16(active) !== dirname16(root2) || active === root2 || !lstatSync21(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync9(active) !== active)
       continue;
-    const activeManifest = full(join25(active, ".claude-plugin/plugin.json"));
+    const activeManifest = full(join26(active, ".claude-plugin/plugin.json"));
     if (!activeManifest || projected(activeManifest) !== activeManifest.sha256)
       continue;
-    if (Object.values(installed.plugins).some((value) => !Array.isArray(value) || value.some((row) => !row || typeof row.installPath !== "string" || row.installPath === root2 || row.installPath.startsWith(root2 + sep5) || root2.startsWith(row.installPath + sep5))))
+    if (Object.values(installed.plugins).some((value) => !Array.isArray(value) || value.some((row) => !row || typeof row.installPath !== "string" || row.installPath === root2 || row.installPath.startsWith(root2 + sep6) || root2.startsWith(row.installPath + sep6))))
       continue;
     result.add(root2);
   }
@@ -43223,10 +43404,10 @@ function verifyAgentDiscovery(binding, codexRecovery) {
     throw new Error("Hermes discovery requires directory membership coverage; run skills hook install with a fresh discovery review");
   const installationRoots = codexInstallationRoots(binding);
   const retiredRoots = retiredCodexRoots(binding);
-  const installationInput = (path) => installationRoots.some((root2) => path === root2 || path.startsWith(root2 + sep5));
+  const installationInput = (path) => installationRoots.some((root2) => path === root2 || path.startsWith(root2 + sep6));
   if (binding.directories !== undefined) {
     const projected2 = binding.codexInstallationInputs?.directories ?? [];
-    const ancestors2 = binding.directories.filter((directory) => installationRoots.some((root2) => root2.startsWith(directory.path + sep5)));
+    const ancestors2 = binding.directories.filter((directory) => installationRoots.some((root2) => root2.startsWith(directory.path + sep6)));
     if (projected2.length !== ancestors2.length || projected2.some((directory) => !ancestors2.some((original) => original.path === directory.path)))
       throw new Error("Missing installation input directory projection");
     const ordinary = binding.directories.filter((directory) => !installationInput(directory.path) && !ancestors2.includes(directory));
@@ -43262,7 +43443,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       safe4(source.path);
       continue;
     }
-    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep5)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
+    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep6)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
       safe4(source.path);
       continue;
     }
@@ -43285,12 +43466,12 @@ function codexInstallationRoots(binding) {
   if (binding.agent !== "codex" || binding.method !== "reviewed" || proof.version !== "codex-cli 0.160.0" || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
     throw new Error("Invalid native installation input proof");
   const cache = dirname16(dirname16(proof.plugins[0].pluginParent));
-  const config = join25(dirname16(dirname16(cache)), "config.toml"), home = dirname16(dirname16(dirname16(cache)));
+  const config = join26(dirname16(dirname16(cache)), "config.toml"), home = dirname16(dirname16(dirname16(cache)));
   const configSource = binding.sources.find((source) => source.path === config && source.sha256 !== null && (!source.format || source.format === "toml" && source.fields?.includes("plugins")));
-  const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join25(home, path));
-  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep5) || input.sourceRoot.startsWith(root2 + sep5)) || binding.sources.some((source) => basename8(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep5)))))
+  const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join26(home, path));
+  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep6) || input.sourceRoot.startsWith(root2 + sep6)) || binding.sources.some((source) => basename8(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep6)))))
     throw new Error("Native installation input overlaps configuration or loading roots");
-  if (proof.plugins.some((input) => dirname16(dirname16(input.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join25(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
+  if (proof.plugins.some((input) => dirname16(dirname16(input.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join26(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
     throw new Error("Missing native installation input source witness");
   return reviewedCodexPluginSourceRoots(cache, proof.plugins, (path) => {
     const text2 = read2(path);
@@ -43300,6 +43481,8 @@ function codexInstallationRoots(binding) {
   });
 }
 function assertMarketplaceBinding(binding, source) {
+  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename8(source.path) !== "plugin.json" || !source.path.endsWith(join26(sep6, ".claude-plugin", "plugin.json"))))
+    throw new Error("Claude plugin manifest witnesses require Claude plugin discovery");
   if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename8(source.path) !== "sumi.json"))
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
   if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename8(source.path) !== "config.toml"))
@@ -43314,7 +43497,7 @@ function rebindAgentDiscovery(binding, changes) {
   const installationRoots = codexInstallationRoots(binding), absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredCodexRoots(binding).filter((root2) => !lstatSync21(root2, { throwIfNoEntry: false }))];
   const rebound = { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
-    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep5)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep5)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)))
+    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep6)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep6)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)))
       return source;
     const sha2562 = projected(source, changes, budget2);
     if (!changes.has(source.path) && sha2562 !== source.sha256)
@@ -43340,8 +43523,8 @@ function captureDiscoveryPathSources(paths) {
   const budget2 = discoveryByteBudget();
   return paths.map((path) => ({ path, hashMode: "path-bytes", sha256: hashDiscoveryPathFile(path, budget2) }));
 }
-function assertProjectDiscovery(agent, directories, home, canonical6 = resolve17, reviewed) {
-  const homeConfigPath = canonical6(agentDiscoveryConfigPath(home, agent));
+function assertProjectDiscovery(agent, directories, home, canonical7 = resolve17, reviewed) {
+  const homeConfigPath = canonical7(agentDiscoveryConfigPath(home, agent));
   for (const directory of directories) {
     const isHome = resolve17(directory) === resolve17(home);
     if (agent === "hermes") {
@@ -43352,7 +43535,7 @@ function assertProjectDiscovery(agent, directories, home, canonical6 = resolve17
       continue;
     const paths = agent === "claude" ? [...isHome ? [] : [".claude/settings.json"], ".claude/settings.local.json"] : agent === "codex" ? [".codex/config.toml"] : agent === "gemini" ? [".gemini/settings.json"] : agent === "opencode" ? ["opencode.json", "opencode.jsonc", ".opencode/opencode.json", ".opencode/opencode.jsonc"] : agent === "sumi" ? ["sumi.json", "sumi.jsonc", ".sumi/sumi.json", ".sumi/sumi.jsonc"] : [".cursor/hooks.json"];
     for (const suffix of paths) {
-      const path = canonical6(join25(directory, suffix)), raw = read2(path);
+      const path = canonical7(join26(directory, suffix)), raw = read2(path);
       if (raw === null)
         continue;
       const isRootAliasedHomeConfig = agent === "claude" && suffix === ".claude/settings.json" || agent === "codex" && suffix === ".codex/config.toml";
@@ -43368,7 +43551,7 @@ function assertProjectDiscovery(agent, directories, home, canonical6 = resolve17
         const managed = reviewed.sources.flatMap((source) => source.hashMode === "claude-plugin-registry" ? source.managedPlugins ?? [] : []);
         if (exact && projected(exact) === exact.sha256 && managed.length) {
           const bindings = managed.map((item) => readPluginBinding(item.storeRoot, item.bindingId));
-          admittedPlugins = Object.entries(config.enabledPlugins).every(([id2, enabled]) => typeof enabled === "boolean" && bindings.some((binding) => binding.target.pluginId === id2 && binding.target.registrations.some((scope) => scope.scope === "project" && scope.projectPath === canonical6(directory))));
+          admittedPlugins = Object.entries(config.enabledPlugins).every(([id2, enabled]) => typeof enabled === "boolean" && bindings.some((binding) => binding.target.pluginId === id2 && binding.target.registrations.some((scope) => scope.scope === "project" && scope.projectPath === canonical7(directory))));
         }
       }
       if (keys2.some((key) => config[key] !== undefined && !(key === "enabledPlugins" && admittedPlugins)) || config.disableAllHooks === true || config.disableBundledSkills === false || config.hooksConfig?.enabled === false || config.permission?.skill !== undefined || config.permissions?.deny?.some((rule) => typeof rule === "string" && /^Skill(?:\(|$)/.test(rule)))
@@ -43376,13 +43559,13 @@ function assertProjectDiscovery(agent, directories, home, canonical6 = resolve17
     }
     if (agent === "sumi")
       for (const name of ["plugin", "plugins"]) {
-        const path = canonical6(join25(directory, ".sumi", name));
+        const path = canonical7(join26(directory, ".sumi", name));
         safe4(path);
         if (lstatSync21(path, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(path).length)
           throw new Error(`NATIVE_SKILL_DRIFT: project Sumi plugins require a dedicated discovery review: ${path}`);
       }
     if (agent === "claude") {
-      const commands = canonical6(join25(directory, ".claude/commands"));
+      const commands = canonical7(join26(directory, ".claude/commands"));
       safe4(commands);
       if (lstatSync21(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(commands).length)
         throw new Error("NATIVE_SKILL_DRIFT: legacy project command discovery requires a dedicated format adapter");
@@ -43392,13 +43575,13 @@ function assertProjectDiscovery(agent, directories, home, canonical6 = resolve17
 function agentDiscoveryConfigPath(home, agent) {
   if (agent === "sumi")
     return sumiConfigPath(home);
-  return join25(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
+  return join26(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
 }
 function resolveAgentDiscovery(options) {
-  const canonical6 = options.canonical ?? resolve17, home = resolve17(options.home), agent = options.agent;
+  const canonical7 = options.canonical ?? resolve17, home = resolve17(options.home), agent = options.agent;
   const sources = [], roots = new Set, builtinNames = [];
-  const witness = (path, format, fields2) => {
-    const source = { path: canonical6(path), sha256: null, ...format ? { format, fields: fields2 } : {} };
+  const witness = (path, format, fields2, hashMode) => {
+    const source = { path: canonical7(path), sha256: null, ...format ? { format, fields: fields2 } : {}, ...hashMode ? { hashMode } : {} };
     source.sha256 = projected(source);
     sources.push(source);
     return read2(source.path);
@@ -43411,31 +43594,34 @@ function resolveAgentDiscovery(options) {
   const unresolved = (detail) => {
     throw new Error(`Native discovery is unresolved (${agent}: ${detail}); provide a reviewed --discovery-inputs file`);
   };
+  if (options.reviewed && (options.reviewed.version !== 1 || !Array.isArray(options.reviewed.agents) || options.reviewed.agents.some((item) => !item || typeof item !== "object") || new Set(options.reviewed.agents.map((item) => item.agent)).size !== options.reviewed.agents.length))
+    throw new Error("Invalid --discovery-inputs version or agents");
+  const review = options.reviewed?.agents.find((item) => item.agent === agent);
   if (agent === "sumi") {
     const directory = sumiConfigDirectory(home);
-    if (witness(join25(directory, "sumi.jsonc")) !== null)
+    if (witness(join26(directory, "sumi.jsonc")) !== null)
       unresolved("JSONC configuration requires a supported format adapter");
-    for (const root2 of [directory, join25(home, ".claude"), join25(home, ".agents")])
+    for (const root2 of [directory, join26(home, ".claude"), join26(home, ".agents")])
       for (const name of ["skill", "skills"])
-        roots.add(canonical6(join25(root2, name)));
+        roots.add(canonical7(join26(root2, name)));
     if (config.skills !== undefined && (!Array.isArray(config.skills) || config.skills.some((path) => typeof path !== "string")))
       unresolved("skills must be a string array");
     for (const value of config.skills ?? []) {
       if (typeof value !== "string" || /[\0$]/.test(value) || !value || !(isAbsolute18(value) || value.startsWith("~/")))
         unresolved("remote or relative skill sources need a dedicated discovery adapter");
-      roots.add(canonical6(value.startsWith("~/") ? join25(home, value.slice(2)) : value));
+      roots.add(canonical7(value.startsWith("~/") ? join26(home, value.slice(2)) : value));
     }
     for (const key of ["plugin", "plugins"])
       if (config[key] !== undefined && !Array.isArray(config[key]))
         unresolved(`${key} must be an array`);
-    const plugins = [join25(directory, "plugin"), join25(directory, "plugins")];
+    const plugins = [join26(directory, "plugin"), join26(directory, "plugins")];
     for (const path of plugins) {
       safe4(path);
       if (lstatSync21(path, { throwIfNoEntry: false })?.isDirectory())
         for (const name of readdirSync7(path).sort()) {
           if (name === "skills-cli.js" && path === plugins[1])
             continue;
-          const target = join25(path, name);
+          const target = join26(path, name);
           if (!lstatSync21(target).isFile())
             unresolved("local plugin packages need a dedicated discovery adapter");
           witness(target);
@@ -43448,7 +43634,7 @@ function resolveAgentDiscovery(options) {
     }
   }
   if (agent === "hermes") {
-    const profile = witness(join25(home, ".hermes/active_profile"));
+    const profile = witness(join26(home, ".hermes/active_profile"));
     if (profile?.trim() && profile.trim() !== "default")
       unresolved("a non-default profile is active");
     const declared = config.skills?.external_dirs ?? [], paths = typeof declared === "string" ? [declared] : declared;
@@ -43462,7 +43648,7 @@ function resolveAgentDiscovery(options) {
         continue;
       if (normalized.startsWith("~") && normalized !== "~" && !normalized.startsWith("~/"))
         unresolved("user-specific tilde expansion requires a separate discovery adapter");
-      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join25(home, normalized.slice(2)) : resolve17(home, ".hermes", normalized);
+      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join26(home, normalized.slice(2)) : resolve17(home, ".hermes", normalized);
       safe4(path);
       roots.add(path);
     }
@@ -43472,7 +43658,7 @@ function resolveAgentDiscovery(options) {
     if (executable2) {
       let packageRoot;
       for (let directory = dirname16(realpathSync9(executable2)), depth = 0;depth < 8; directory = dirname16(directory), depth++) {
-        const path = join25(directory, "package.json"), raw = read2(path);
+        const path = join26(directory, "package.json"), raw = read2(path);
         if (raw !== null && parseConfig(raw, path).name === "@google/gemini-cli") {
           packageRoot = directory;
           witness(path);
@@ -43483,12 +43669,12 @@ function resolveAgentDiscovery(options) {
       }
       if (!packageRoot)
         unresolved("installed Gemini package layout is not recognized");
-      const builtinRoot = join25(packageRoot, "bundle/builtin");
+      const builtinRoot = join26(packageRoot, "bundle/builtin");
       safe4(builtinRoot);
       if (!lstatSync21(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
         unresolved("installed Gemini builtin root is missing");
       for (const name of readdirSync7(builtinRoot).sort()) {
-        const text2 = witness(join25(builtinRoot, name, "SKILL.md"));
+        const text2 = witness(join26(builtinRoot, name, "SKILL.md"));
         const match = text2?.match(/^---\r?\n[\s\S]*?^name:\s*([a-z0-9][a-z0-9-]*)\s*$/m);
         if (!match?.[1] || builtinNames.includes(match[1]))
           unresolved("installed Gemini builtin name is missing or ambiguous");
@@ -43501,18 +43687,15 @@ function resolveAgentDiscovery(options) {
     if (retained.agent !== agent || retained.method !== "reviewed")
       unresolved("invalid retained review");
     verifyAgentDiscovery(retained);
-    if (!retained.sources.some((source) => source.path === canonical6(configPath) && source.format === undefined && source.fields === undefined))
+    if (!retained.sources.some((source) => source.path === canonical7(configPath) && source.format === undefined && source.fields === undefined))
       unresolved("retained review is missing the full agent configuration source");
-    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical6(configPath)))
+    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
       unresolved("retained settings witness names another configuration source");
-    const covered = supersedesSettingsProjection(agent, retained.sources, canonical6(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical6(configPath), source)) : sources;
+    const covered = supersedesSettingsProjection(agent, retained.sources, canonical7(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical7(configPath), source)) : sources;
     if (covered.some((source) => !retained.sources.some((saved) => isDeepStrictEqual6(saved, source))) || [...roots].some((root2) => !retained.roots.includes(root2)) || agent === "gemini" && JSON.stringify(retained.builtinNames) !== JSON.stringify(builtinNames))
       unresolved("retained review is missing current runtime discovery coverage");
     return retained;
   }
-  if (options.reviewed && (options.reviewed.version !== 1 || !Array.isArray(options.reviewed.agents) || options.reviewed.agents.some((item) => !item || typeof item !== "object") || new Set(options.reviewed.agents.map((item) => item.agent)).size !== options.reviewed.agents.length))
-    throw new Error("Invalid --discovery-inputs version or agents");
-  const review = options.reviewed?.agents.find((item) => item.agent === agent);
   if (review) {
     if (review.pluginHooks !== "reviewed-no-skill-injection" || !Array.isArray(review.sources) || !review.sources.length || !Array.isArray(review.roots))
       throw new Error("Discovery review must bind sources and confirm plugin hooks do not inject retired skills");
@@ -43520,47 +43703,77 @@ function resolveAgentDiscovery(options) {
     if (review.sources.some((source) => source.format !== undefined || source.fields !== undefined))
       throw new Error("Explicit discovery reviews require full source-file hashes");
     verifyAgentDiscovery(supplied);
-    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical6(configPath)))
+    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
       throw new Error("Semantic settings witnesses must name the configured agent configuration source");
-    if (!review.sources.some((source) => source.path === canonical6(configPath)))
+    if (!review.sources.some((source) => source.path === canonical7(configPath)))
       throw new Error("Discovery review must include the agent configuration source");
-    const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical6(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical6(configPath), source)) : sources;
-    return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: [...reviewedSources, ...review.sources], ...agent === "gemini" ? { builtinNames } : {} };
+    const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical7(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical7(configPath), source)) : sources;
+    const reviewedSourcesWithManifestProjection = review.sources.map((source) => {
+      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename8(source.path) !== "plugin.json" || !source.path.endsWith(join26(sep6, ".claude-plugin", "plugin.json")))
+        return source;
+      const pluginRoot = dirname16(dirname16(source.path)), hooksPath = join26(pluginRoot, "hooks/hooks.json");
+      const hookStat = lstatSync21(hooksPath, { throwIfNoEntry: false });
+      const text2 = read2(source.path);
+      if (text2 === null)
+        throw new Error("Reviewed Claude plugin manifest is missing");
+      const manifestSha256 = projectReviewedClaudePluginManifest(text2, source.sha256 ?? "");
+      const manifest = JSON.parse(text2);
+      if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+        throw new Error("Reviewed Claude plugin manifest must be an object");
+      const reviewedHookPaths = new Set;
+      if (hookStat)
+        reviewedHookPaths.add(hooksPath);
+      if (manifest.hooks !== undefined) {
+        if (typeof manifest.hooks !== "string")
+          throw new Error("Reviewed Claude plugin manifest has an unsupported hooks target");
+        const declaredHookPath = resolve17(pluginRoot, manifest.hooks);
+        if (!declaredHookPath.startsWith(pluginRoot + sep6))
+          throw new Error("Reviewed Claude plugin hooks target escapes its root");
+        reviewedHookPaths.add(declaredHookPath);
+      }
+      for (const hooksFile of reviewedHookPaths)
+        if (!review.sources.some((hook) => hook.path === canonical7(hooksFile) && hook.sha256 !== null && hook.format === undefined && hook.fields === undefined && hook.managedPlugins === undefined && (hook.hashMode === undefined || hook.hashMode === "bytes")))
+          throw new Error("Reviewed Claude plugin manifest requires separately reviewed exact hook file sources");
+      return { path: source.path, sha256: manifestSha256, hashMode: "claude-plugin-manifest-v1" };
+    });
+    const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
+    const unique = combined.filter((source, index) => combined.findIndex((candidate2) => isDeepStrictEqual6(candidate2, source)) === index);
+    return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };
   }
   function plugin(root2) {
-    root2 = canonical6(root2);
+    root2 = canonical7(root2);
     safe4(root2);
-    const manifestPath = join25(root2, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
-    const raw = witness(manifestPath);
+    const manifestPath = join26(root2, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
+    const raw = witness(manifestPath, undefined, undefined, agent === "claude" ? "claude-plugin-manifest-v1" : undefined);
     if (raw === null)
       unresolved("plugin manifest missing");
     const manifest = parseConfig(raw, manifestPath);
-    const hooks = witness(join25(root2, "hooks/hooks.json"));
+    const hooks = witness(join26(root2, "hooks/hooks.json"));
     if (manifest.hooks !== undefined || hooks !== null)
       unresolved("plugin hooks require a separate no-skill-injection review");
-    const commands = join25(root2, "commands");
+    const commands = join26(root2, "commands");
     safe4(commands);
     if (agent === "claude" && (manifest.commands !== undefined || lstatSync21(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(commands).length))
       unresolved("legacy command discovery requires retirement or a dedicated format adapter");
-    const rootSkill = witness(join25(root2, "SKILL.md"));
+    const rootSkill = witness(join26(root2, "SKILL.md"));
     if (rootSkill !== null)
       roots.add(root2);
     const declared = manifest.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
     if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
       unresolved("unsupported plugin skill paths");
     if (agent === "claude")
-      roots.add(join25(root2, "skills"));
+      roots.add(join26(root2, "skills"));
     for (const value of declared) {
       const path = resolve17(root2, value);
-      if (path !== root2 && !path.startsWith(root2 + sep5))
+      if (path !== root2 && !path.startsWith(root2 + sep6))
         unresolved("plugin skill path escapes its root");
-      roots.add(path.endsWith(`${sep5}SKILL.md`) ? dirname16(path) : path);
+      roots.add(path.endsWith(`${sep6}SKILL.md`) ? dirname16(path) : path);
     }
   }
   if (agent === "claude") {
-    const registrations = witness(join25(home, ".claude/plugins/installed_plugins.json"));
-    const installed = registrations === null ? {} : parseConfig(registrations, join25(home, ".claude/plugins/installed_plugins.json")).plugins;
-    const commands = canonical6(join25(home, ".claude/commands"));
+    const registrations = witness(join26(home, ".claude/plugins/installed_plugins.json"));
+    const installed = registrations === null ? {} : parseConfig(registrations, join26(home, ".claude/plugins/installed_plugins.json")).plugins;
+    const commands = canonical7(join26(home, ".claude/commands"));
     safe4(commands);
     if (lstatSync21(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(commands).length)
       unresolved("legacy home command discovery requires a dedicated format adapter");
@@ -43584,16 +43797,16 @@ function resolveAgentDiscovery(options) {
       const market = config.marketplaces?.[marketplace] ?? (marketplace === "personal" ? { source_type: "local", source: home } : undefined);
       if (split < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute18(market.source))
         unresolved("enabled plugin marketplace is not an explicit local source");
-      const catalogText = witness(join25(market.source, ".agents/plugins/marketplace.json"));
+      const catalogText = witness(join26(market.source, ".agents/plugins/marketplace.json"));
       if (catalogText === null)
         unresolved("marketplace catalog missing");
-      const catalog = parseConfig(catalogText, join25(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
+      const catalog = parseConfig(catalogText, join26(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
       if (matches.length !== 1 || matches[0]?.source?.source !== "local" || typeof matches[0]?.source?.path !== "string")
         unresolved("plugin catalog source is missing or ambiguous");
       plugin(resolve17(market.source, matches[0].source.path));
     }
   } else if (agent === "opencode") {
-    if (witness(join25(home, ".config/opencode/opencode.jsonc")) !== null || witness(join25(home, ".config/opencode/config.json")) !== null)
+    if (witness(join26(home, ".config/opencode/opencode.jsonc")) !== null || witness(join26(home, ".config/opencode/config.json")) !== null)
       unresolved("additional config layers require review");
     if ((config.plugin?.length ?? 0) > 0 || config.skills?.urls?.length)
       unresolved("external plugin or remote skill source");
@@ -43602,15 +43815,15 @@ function resolveAgentDiscovery(options) {
         unresolved("relative or malformed added skill root");
       roots.add(path);
     }
-    const localPlugins = join25(home, ".config/opencode/plugins");
+    const localPlugins = join26(home, ".config/opencode/plugins");
     safe4(localPlugins);
     if (lstatSync21(localPlugins, { throwIfNoEntry: false }) && readdirSync7(localPlugins).some((name) => name !== "skills-cli.js"))
       unresolved("additional local plugin hooks require review");
   } else if (agent === "sumi") {
-    if ((config.plugin?.length ?? 0) > 0 || (config.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical6(configPath) && source.path !== canonical6(join25(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
+    if ((config.plugin?.length ?? 0) > 0 || (config.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical7(configPath) && source.path !== canonical7(join26(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
       unresolved("external or foreign local plugins require review");
   } else if (agent === "hermes") {
-    for (const directory of [join25(home, ".hermes/plugins"), join25(home, ".hermes/hermes-agent")]) {
+    for (const directory of [join26(home, ".hermes/plugins"), join26(home, ".hermes/hermes-agent")]) {
       safe4(directory);
       if (lstatSync21(directory, { throwIfNoEntry: false }))
         unresolved("installed runtime/plugin discovery requires reviewed source bindings");
@@ -43620,24 +43833,24 @@ function resolveAgentDiscovery(options) {
   } else if (agent === "gemini") {
     if (Object.keys(config.extensions ?? {}).length || config.skills?.paths?.length)
       unresolved("custom extension or skill paths");
-    const directory = join25(home, ".gemini/extensions");
+    const directory = join26(home, ".gemini/extensions");
     safe4(directory);
     if (lstatSync21(directory, { throwIfNoEntry: false }))
       for (const name of readdirSync7(directory)) {
-        const root2 = join25(directory, name);
+        const root2 = join26(directory, name);
         safe4(root2);
         if (!lstatSync21(root2)?.isDirectory())
           continue;
-        const raw = witness(join25(root2, "gemini-extension.json"));
+        const raw = witness(join26(root2, "gemini-extension.json"));
         if (raw === null)
           unresolved("extension registration missing");
-        const manifest = parseConfig(raw, join25(root2, "gemini-extension.json"));
-        if (manifest.hooks !== undefined || witness(join25(root2, "hooks/hooks.json")) !== null || witness(join25(root2, ".gemini-extension-install.json")) !== null)
+        const manifest = parseConfig(raw, join26(root2, "gemini-extension.json"));
+        if (manifest.hooks !== undefined || witness(join26(root2, "hooks/hooks.json")) !== null || witness(join26(root2, ".gemini-extension-install.json")) !== null)
           unresolved("extension hooks or linked registration require review");
-        roots.add(join25(root2, "skills"));
+        roots.add(join26(root2, "skills"));
       }
   }
-  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join25(home, ".hermes/plugins"), join25(home, ".hermes/hermes-agent")].map((path) => canonical6(path))) } : {} };
+  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join26(home, ".hermes/plugins"), join26(home, ".hermes/hermes-agent")].map((path) => canonical7(path))) } : {} };
 }
 
 // src/lib/agent-adapters.ts
@@ -43976,7 +44189,7 @@ function disableCodexBundledSkills(text2) {
 }
 
 // src/lib/agent-integration.ts
-var sha4 = (data) => createHash22("sha256").update(data).digest("hex");
+var sha4 = (data) => createHash23("sha256").update(data).digest("hex");
 var ROOTS = NATIVE_SKILL_ROOTS;
 function hasTrustedDarwinAcl(fd, allowDenyOnly = false) {
   try {
@@ -44054,7 +44267,7 @@ function isSystemRootAlias(path) {
   }
 }
 function canonicalSystemPath(path) {
-  const absolute = resolve18(path), root2 = `/${absolute.split(sep6)[1]}`;
+  const absolute = resolve18(path), root2 = `/${absolute.split(sep7)[1]}`;
   if (process.platform !== "darwin" || !["/var", "/tmp", "/etc"].includes(root2) || !lstatSync22(root2, { throwIfNoEntry: false })?.isSymbolicLink())
     return absolute;
   if (!isSystemRootAlias(root2))
@@ -44074,7 +44287,7 @@ function assertSafePath(path) {
 }
 function readRootAlias(home, agent) {
   assertSafePath(home);
-  const realHome = realpathSync10(home), alias = join26(realHome, `.${agent}`);
+  const realHome = realpathSync10(home), alias = join27(realHome, `.${agent}`);
   const stat2 = lstatSync22(alias, { throwIfNoEntry: false, bigint: true });
   if (!stat2?.isSymbolicLink())
     throw new Error(`Agent root alias changed after planning: ${alias}`);
@@ -44084,7 +44297,7 @@ function readRootAlias(home, agent) {
   if (!targetStat?.isDirectory())
     throw new Error(`Agent root alias must target an existing directory: ${alias}`);
   const target = realpathSync10(targetPath), inside = relative5(realHome, target);
-  if (!inside || inside === ".." || inside.startsWith(`..${sep6}`) || isAbsolute19(inside))
+  if (!inside || inside === ".." || inside.startsWith(`..${sep7}`) || isAbsolute19(inside))
     throw new Error(`Agent root alias target must be inside the real home: ${alias}`);
   return { agent, home: realHome, alias, target, link, aliasIdentity: `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}`, targetIdentity: `${targetStat.dev}:${targetStat.ino}` };
 }
@@ -44093,15 +44306,15 @@ function rootAliases(home, allowed = false) {
     return [];
   const result = [];
   for (const agent of ["claude", "codex"])
-    if (lstatSync22(join26(home, `.${agent}`), { throwIfNoEntry: false })?.isSymbolicLink())
+    if (lstatSync22(join27(home, `.${agent}`), { throwIfNoEntry: false })?.isSymbolicLink())
       result.push(readRootAlias(home, agent));
-  if (result.some((item, index) => result.slice(index + 1).some((other) => item.target === other.target || item.target.startsWith(other.target + sep6) || other.target.startsWith(item.target + sep6))))
+  if (result.some((item, index) => result.slice(index + 1).some((other) => item.target === other.target || item.target.startsWith(other.target + sep7) || other.target.startsWith(item.target + sep7))))
     throw new Error("Agent root alias targets must not overlap");
   return result;
 }
 function canonicalAgentPath(path, aliases) {
-  const absolute = canonicalSystemPath(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep6));
-  return binding ? join26(binding.target, relative5(binding.alias, absolute)) : absolute;
+  const absolute = canonicalSystemPath(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep7));
+  return binding ? join27(binding.target, relative5(binding.alias, absolute)) : absolute;
 }
 function disabledCodexSkillPaths(config, aliases) {
   const skills = config.skills;
@@ -44124,7 +44337,7 @@ function disabledCodexSkillPaths(config, aliases) {
     } catch {
       continue;
     }
-    if (!document2.endsWith(`${sep6}SKILL.md`))
+    if (!document2.endsWith(`${sep7}SKILL.md`))
       continue;
     settings.set(document2, [...settings.get(document2) ?? [], entry.enabled === false]);
   }
@@ -44132,7 +44345,7 @@ function disabledCodexSkillPaths(config, aliases) {
 }
 function recheckRootAliases(aliases) {
   for (const binding of aliases) {
-    if (!["claude", "codex"].includes(binding.agent) || binding.alias !== join26(binding.home, `.${binding.agent}`))
+    if (!["claude", "codex"].includes(binding.agent) || binding.alias !== join27(binding.home, `.${binding.agent}`))
       throw new Error("Invalid agent root alias binding");
     const current = readRootAlias(binding.home, binding.agent);
     if (JSON.stringify(current) !== JSON.stringify(binding))
@@ -44170,7 +44383,7 @@ function readNativeBytes(path, maximum = 64 * 1024 * 1024) {
   }
 }
 function treeHash(root2) {
-  const hash2 = createHash22("sha256");
+  const hash2 = createHash23("sha256");
   let bytes = 0, files = 0;
   function visit2(path) {
     const stat2 = lstatSync22(path);
@@ -44180,7 +44393,7 @@ function treeHash(root2) {
     if (stat2.isDirectory()) {
       hash2.update(`d\x00${rel}\x00`);
       for (const name of readdirSync8(path).sort())
-        visit2(join26(path, name));
+        visit2(join27(path, name));
       return;
     }
     if (!stat2.isFile())
@@ -44208,7 +44421,7 @@ function selectNativeMigrationTargets(inventory, manifest) {
     if (!existsSync7(projectRoot) || !lstatSync22(projectRoot).isDirectory())
       throw new Error(`Native migration target project root must be an existing absolute directory: ${target.projectRoot}`);
     assertSafePath(projectRoot);
-    if (isAbsolute19(target.path) || target.path.includes("\\") || target.path.includes("\x00") || !normalized || normalized === ".." || normalized.startsWith(`..${sep6}`) || normalized !== target.path || !/^[0-9a-f]{64}$/.test(target.treeSha256))
+    if (isAbsolute19(target.path) || target.path.includes("\\") || target.path.includes("\x00") || !normalized || normalized === ".." || normalized.startsWith(`..${sep7}`) || normalized !== target.path || !/^[0-9a-f]{64}$/.test(target.treeSha256))
       throw new Error(`Invalid native migration target: ${target.path}`);
     const identity5 = `${target.agent}\x00${canonicalSystemPath(projectRoot)}\x00${normalized}`;
     if (identities.has(identity5))
@@ -44244,7 +44457,7 @@ function projectAncestorDirectories(projects) {
 }
 function isCodexSkillDiscoveryInput(path) {
   for (let cursor = canonicalSystemPath(path);cursor !== dirname17(cursor); cursor = dirname17(cursor)) {
-    if (ROOTS.some(([agent, root2]) => agent === "codex" && cursor.endsWith(join26(sep6, root2))))
+    if (ROOTS.some(([agent, root2]) => agent === "codex" && cursor.endsWith(join27(sep7, root2))))
       return true;
   }
   return false;
@@ -44261,18 +44474,18 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
   const selectedAgents = options.agents ? new Set(options.agents) : undefined;
   const includesAgent = (agent) => !selectedAgents || selectedAgents.has(agent);
   const rootDefinitions = selectedAgents ? ROOTS.filter(([agent, path]) => selectedAgents.has(agent) || selectedAgents.has("hermes") && agent === "codex" && path === ".agents/skills") : ROOTS;
-  const roots = rootDefinitions.map(([agent, path]) => [agent, canonicalAgentPath(join26(home, path), aliases)]);
-  const bridgePaths = Object.entries(AGENT_ADAPTERS).filter(([agent]) => agent !== "sumi" || includesAgent("sumi")).map(([agent, adapter]) => canonicalAgentPath(join26(agent === "sumi" ? sumiBridgeRoot(home) : join26(home, adapter.root), CLI_BRIDGE_NAME), aliases));
+  const roots = rootDefinitions.map(([agent, path]) => [agent, canonicalAgentPath(join27(home, path), aliases)]);
+  const bridgePaths = Object.entries(AGENT_ADAPTERS).filter(([agent]) => agent !== "sumi" || includesAgent("sumi")).map(([agent, adapter]) => canonicalAgentPath(join27(agent === "sumi" ? sumiBridgeRoot(home) : join27(home, adapter.root), CLI_BRIDGE_NAME), aliases));
   for (const project of projectAncestorDirectories([...options.projectDirs ?? [], ...options.projectDir ? [options.projectDir] : []])) {
     for (const [agent, path] of rootDefinitions)
-      roots.push([agent, canonicalAgentPath(join26(project, path), aliases)]);
+      roots.push([agent, canonicalAgentPath(join27(project, path), aliases)]);
     if (selectedAgents?.has("sumi"))
       for (const directory of [".claude", ".agents"])
         for (const name of ["skill", "skills"])
-          roots.push(["sumi", canonicalAgentPath(join26(project, directory, name), aliases)]);
+          roots.push(["sumi", canonicalAgentPath(join27(project, directory, name), aliases)]);
   }
   const installationInputs = options.codexInstallationInputRoots ?? [];
-  if (installationInputs.some((input) => resolve18(input) !== input || realpathSync10(input) !== input || roots.some(([agent, path]) => agent === "codex" && (path === input || path.startsWith(input + sep6) || input.startsWith(path + sep6)))))
+  if (installationInputs.some((input) => resolve18(input) !== input || realpathSync10(input) !== input || roots.some(([agent, path]) => agent === "codex" && (path === input || path.startsWith(input + sep7) || input.startsWith(path + sep7)))))
     throw new Error("Native installation input overlaps an unconditional skill-loading root");
   const entries = [], seen = new Set;
   const cacheScans = new Map, maxAliasProofEntries = 1e4;
@@ -44298,7 +44511,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
     if (!scan?.complete || scan.entries > maxAliasProofEntries)
       return false;
     if (scan.hasSkills) {
-      const targetSkills = entries.filter((entry) => entry.agent === agent && entry.vendor && (entry.path === target || entry.path.startsWith(target + sep6)));
+      const targetSkills = entries.filter((entry) => entry.agent === agent && entry.vendor && (entry.path === target || entry.path.startsWith(target + sep7)));
       if (path === reviewedCacheAlias && targetSkills.length > 0)
         reviewedCacheAliasFound = true;
       if (agent === "codex" && targetSkills.length > 0 && targetSkills.every((entry) => disabledVendorPaths.has(entry.path) || options.disabledVendorSkill?.(entry) === true))
@@ -44313,7 +44526,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
       admit(path);
     const scan = { complete: true, hasSkills: false, entries: 1 };
     assertSafePath(path);
-    if (configuredRoot && agent === "codex" && installationInputs.some((root2) => path === root2 || path.startsWith(`${root2}${sep6}`)))
+    if (configuredRoot && agent === "codex" && installationInputs.some((root2) => path === root2 || path.startsWith(`${root2}${sep7}`)))
       return scan;
     if (!existsSync7(path))
       return scan;
@@ -44325,21 +44538,21 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
     }
     if (!stat2.isDirectory())
       throw new Error(`Unsupported native discovery entry: ${path}`);
-    if (existsSync7(join26(path, "SKILL.md"))) {
+    if (existsSync7(join27(path, "SKILL.md"))) {
       scan.hasSkills = true;
       if (seen.has(path))
         return scan;
       seen.add(path);
       let managed = false;
-      const marker = join26(path, ".hasna-skills.json");
+      const marker = join27(path, ".hasna-skills.json");
       if (existsSync7(marker)) {
         try {
           managed = JSON.parse(readFileSync16(marker, "utf8")).managedBy === "@hasna/skills";
         } catch {}
       }
       const bridge = (!vendor || agent === "sumi") && isOwnedCliBridge(path, bridgePaths);
-      const rootAlias = aliases.find((item) => path === item.target || path.startsWith(item.target + sep6));
-      entries.push({ agent, path, hash: treeHash(path), managed, vendor, ...agent === "codex" || isCodexSkillDiscoveryInput(path) ? { codexHome: process.env.CODEX_HOME ?? join26(home, ".codex") } : {}, ...agent === "codex" && path.startsWith(canonicalAgentPath(join26(home, ".codex", "skills", ".system"), aliases) + sep6) ? { system: true } : {}, ...bridge ? { bridge: true, bridgeHome: resolve18(home) } : {}, ...rootAlias ? { rootAlias } : {} });
+      const rootAlias = aliases.find((item) => path === item.target || path.startsWith(item.target + sep7));
+      entries.push({ agent, path, hash: treeHash(path), managed, vendor, ...agent === "codex" || isCodexSkillDiscoveryInput(path) ? { codexHome: process.env.CODEX_HOME ?? join27(home, ".codex") } : {}, ...agent === "codex" && path.startsWith(canonicalAgentPath(join27(home, ".codex", "skills", ".system"), aliases) + sep7) ? { system: true } : {}, ...bridge ? { bridge: true, bridgeHome: resolve18(home) } : {}, ...rootAlias ? { rootAlias } : {} });
       return scan;
     }
     if (depth > (agent === "sumi" ? 32 : vendor ? 32 : 3))
@@ -44348,7 +44561,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
     try {
       let child;
       while ((child = directory.readSync()) !== null) {
-        admit(join26(path, child.name));
+        admit(join27(path, child.name));
         children.push(child);
       }
     } finally {
@@ -44360,12 +44573,12 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
     for (const { name } of children) {
       if (name === "node_modules")
         continue;
-      if (name.startsWith(".") && name !== ".system" && agent !== "hermes" && agent !== "sumi" && !(options.guardHermes && `${path}${sep6}`.includes(`${sep6}.agents${sep6}skills${sep6}`)))
+      if (name.startsWith(".") && name !== ".system" && agent !== "hermes" && agent !== "sumi" && !(options.guardHermes && `${path}${sep7}`.includes(`${sep7}.agents${sep7}skills${sep7}`)))
         continue;
       const isVendor = vendor || name === ".system";
       if (isVendor && !options.includeVendor)
         continue;
-      const child = join26(path, name);
+      const child = join27(path, name);
       if (isVendor && lstatSync22(child, { throwIfNoEntry: false })?.isSymbolicLink()) {
         const target = statSync7(child, { throwIfNoEntry: false });
         if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(agent, child, path)) {
@@ -44383,7 +44596,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
     return scan;
   }
   function scanRoot(agent, path, vendor = false, pluginCache = false, configuredRoot = false) {
-    if (agent === "hermes" || options.guardHermes && `${path}${sep6}`.includes(`${sep6}.agents${sep6}skills${sep6}`))
+    if (agent === "hermes" || options.guardHermes && `${path}${sep7}`.includes(`${sep7}.agents${sep7}skills${sep7}`))
       assertNoHermesLegacyShadow(path);
     if (!visit2(agent, path, vendor, 0, pluginCache, false, configuredRoot).complete)
       throw new Error(`Native skill discovery limit exceeded; review this root before continuing: ${path}`);
@@ -44392,11 +44605,11 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
     scanRoot(agent, path);
   if (options.includeVendor) {
     for (const agent of ["codex", "claude"].filter(includesAgent))
-      scanRoot(agent, canonicalAgentPath(join26(home, `.${agent}`, "plugins", "cache"), aliases), true, true);
+      scanRoot(agent, canonicalAgentPath(join27(home, `.${agent}`, "plugins", "cache"), aliases), true, true);
     if (includesAgent("claude"))
-      scanRoot("claude", canonicalAgentPath(join26(home, ".claude", "plugins", "synced"), aliases), true);
+      scanRoot("claude", canonicalAgentPath(join27(home, ".claude", "plugins", "synced"), aliases), true);
     if (includesAgent("gemini"))
-      scanRoot("gemini", join26(home, ".gemini", "extensions"), true);
+      scanRoot("gemini", join27(home, ".gemini", "extensions"), true);
   }
   const configured = options.configured ? INTEGRATION_AGENTS.filter(includesAgent).flatMap((agent) => resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, canonical: (path) => canonicalAgentPath(path, aliases) }).roots.map((path) => ({ agent, path }))) : [];
   for (const root2 of [...options.agentRoots ?? [], ...configured])
@@ -44509,14 +44722,14 @@ function configureHooks(config, agent, command, profileId, nativeReady) {
 function disableCodexSkills(text2, skills, aliases, bridgePath) {
   const bundled = disableCodexBundledSkills(text2);
   let result = normalizeCodexInlinePathConfig(bundled);
-  const bridgeSelector = (entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME || typeof entry.path === "string" && [resolve18(bridgePath), resolve18(join26(bridgePath, "SKILL.md"))].includes(canonicalAgentPath(entry.path, aliases));
+  const bridgeSelector = (entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME || typeof entry.path === "string" && [resolve18(bridgePath), resolve18(join27(bridgePath, "SKILL.md"))].includes(canonicalAgentPath(entry.path, aliases));
   const previousConfig = Bun.TOML.parse(bundled).skills?.config;
   if (previousConfig !== undefined && (!Array.isArray(previousConfig) || previousConfig.some((entry) => !entry || typeof entry !== "object" || entry.path !== undefined && entry.name !== undefined)))
     throw new Error("Codex skill controls require one path or name selector per [[skills.config]] entry; review ambiguous entries before running skills hook install");
   const bridgeNeedsRepair = previousConfig?.some((entry) => entry.enabled === false && bridgeSelector(entry));
   const selections = [...skills.filter((entry) => entry.agent === "codex" && !entry.bridge).map((skill) => ({ path: skill.path, enabled: false })), { path: bridgePath, enabled: true }];
   for (const skill of selections) {
-    const path = join26(skill.path, "SKILL.md");
+    const path = join27(skill.path, "SKILL.md");
     let found = false;
     result = result.replace(CODEX_SKILL_CONFIG_SECTIONS, (section) => {
       const parsed = Bun.TOML.parse(section);
@@ -44543,7 +44756,7 @@ enabled = false
 }
 function assertCodexInstallationInputs(home, projectDirs, inputs) {
   const nativeRoots = [home, ...projectAncestorDirectories(projectDirs)].flatMap((directory) => ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => resolve18(directory, path)));
-  if (inputs.some((input) => nativeRoots.some((root2) => root2 === input || root2.startsWith(input + sep6) || input.startsWith(root2 + sep6))))
+  if (inputs.some((input) => nativeRoots.some((root2) => root2 === input || root2.startsWith(input + sep7) || input.startsWith(root2 + sep7))))
     throw new Error("Native installation input overlaps an unconditional skill-loading root");
 }
 function planAgentIntegration(options) {
@@ -44551,7 +44764,7 @@ function planAgentIntegration(options) {
     throw new Error("Explicit Codex skill denials require a fresh native catalog and discovery review");
   const home = options.home ?? homedir3(), dataDir2 = options.dataDir ?? getDataDirReadOnly();
   const aliases = rootAliases(home, options.allowRootAliases);
-  const policyPath = join26(dataDir2, "agent-policy.json");
+  const policyPath = join27(dataDir2, "agent-policy.json");
   assertSafePath(policyPath);
   const priorSnapshot = readManagedSkillPolicySnapshot(dataDir2), previousPolicy = priorSnapshot?.text ?? null, policy = priorSnapshot?.value ?? {};
   if (policy.bridge !== undefined && (!policy.bridge || typeof policy.bridge !== "object" || Array.isArray(policy.bridge)))
@@ -44583,28 +44796,28 @@ function planAgentIntegration(options) {
     }
     return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases) });
   });
-  const codexConfigBefore = options.agents.includes("codex") ? readOptional(canonicalAgentPath(join26(home, ".codex", "config.toml"), aliases)) : null;
+  const codexConfigBefore = options.agents.includes("codex") ? readOptional(canonicalAgentPath(join27(home, ".codex", "config.toml"), aliases)) : null;
   const codexConfig = Bun.TOML.parse(codexConfigBefore ?? "");
   const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases, reviewedCacheAlias: options.reviewedCacheAlias, disabledVendorPaths: disabledCodexSkillPaths(codexConfig, aliases) });
-  const codexPathConfig = options.agents.includes("codex") ? disableCodexSkills(codexConfigBefore ?? "", nativeSkills, aliases, canonicalAgentPath(join26(home, ".codex/skills", CLI_BRIDGE_NAME), aliases)) : undefined;
+  const codexPathConfig = options.agents.includes("codex") ? disableCodexSkills(codexConfigBefore ?? "", nativeSkills, aliases, canonicalAgentPath(join27(home, ".codex/skills", CLI_BRIDGE_NAME), aliases)) : undefined;
   const plannedCodexRules = codexPathConfig === undefined ? undefined : Bun.TOML.parse(codexPathConfig).skills?.config ?? [];
   const observedNativeSources = [];
-  const codexPluginControls = options.codexNativeCatalog ? reviewCodexPluginControls(options.codexNativeCatalog, nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor).map((entry) => join26(entry.path, "SKILL.md")), canonicalAgentPath(join26(home, ".codex/plugins/cache"), aliases), resolve18(options.projectDir ?? home), (path) => {
+  const codexPluginControls = options.codexNativeCatalog ? reviewCodexPluginControls(options.codexNativeCatalog, nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor).map((entry) => join27(entry.path, "SKILL.md")), canonicalAgentPath(join27(home, ".codex/plugins/cache"), aliases), resolve18(options.projectDir ?? home), (path) => {
     const bytes = readNativeBytes(path, 1024 * 1024);
     observedNativeSources.push({ path, sha256: sha4(bytes) });
     return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
   }, codexConfig.skills?.config ?? [], codexConfig.plugins, plannedCodexRules, options.codexSkillDenials) : { skills: policy.bridge?.codexPluginSkills ?? [], inactivePlugins: policy.bridge?.codexInactivePlugins ?? [], sourceInputs: policy.bridge?.discovery?.codex?.codexInstallationInputs?.plugins ?? [] };
-  const cache = canonicalAgentPath(join26(home, ".codex/plugins/cache"), aliases);
+  const cache = canonicalAgentPath(join27(home, ".codex/plugins/cache"), aliases);
   const retired = (policy.bridge?.codexPluginSkills ?? []).filter((control) => absentDisabledCodexPluginParent(cache, control.pluginParent, policy.bridge.codexPluginSkills, codexConfig.skills?.config ?? []));
   for (const denial of options.codexSkillDenials ?? []) {
     const control = codexPluginControls.skills.find((item) => item.name === denial.name);
     if (!control)
       throw new Error("Explicit Codex denial did not resolve a reviewed identity");
-    const root2 = join26(control.pluginParent, relative5(control.pluginParent, denial.path).split(sep6)[0]);
+    const root2 = join27(control.pluginParent, relative5(control.pluginParent, denial.path).split(sep7)[0]);
     const review = options.discoveryInputs.agents.find((item) => item.agent === "codex");
-    for (const path of [join26(root2, ".app.json"), join26(root2, ".mcp.json"), join26(root2, "hooks")])
+    for (const path of [join27(root2, ".app.json"), join27(root2, ".mcp.json"), join27(root2, "hooks")])
       observedNativeSources.push({ path, sha256: nativeSourceDigest(path) });
-    const files = [join26(root2, ".codex-plugin/plugin.json"), ...control.appSha256 ? [join26(root2, ".app.json")] : [], ...control.mcpSha256 ? [join26(root2, ".mcp.json")] : []];
+    const files = [join27(root2, ".codex-plugin/plugin.json"), ...control.appSha256 ? [join27(root2, ".app.json")] : [], ...control.mcpSha256 ? [join27(root2, ".mcp.json")] : []];
     for (const path of files)
       if (!review?.sources.some((source) => source.path === path && source.format === undefined && source.fields === undefined && [undefined, "bytes"].includes(source.hashMode) && source.sha256 === sha4(readNativeBytes(path, 1024 * 1024))))
         throw new Error("Explicit Codex denial requires current full manifest and capability discovery witnesses");
@@ -44613,12 +44826,12 @@ function planAgentIntegration(options) {
   for (const discovery of discoveries)
     if (discovery.agent === "codex" && discovery.method === "reviewed")
       discovery.codexDisabledPluginSkills = codexPluginSkills;
-  if (options.agents.includes("codex") && !options.codexNativeCatalog && codexPluginSkills.length && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join26(home, ".codex/plugins/cache"), aliases), codexPluginSkills, (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? [])) {
+  if (options.agents.includes("codex") && !options.codexNativeCatalog && codexPluginSkills.length && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join27(home, ".codex/plugins/cache"), aliases), codexPluginSkills, (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? [])) {
     throw new Error("NATIVE_SKILL_DRIFT: reviewed native plugin capability controls changed; provide a fresh native catalog and discovery review");
   }
   const codexInactivePlugins = codexPluginControls.inactivePlugins;
   const codexDiscovery = discoveries.find((binding) => binding.agent === "codex");
-  const codexPluginSourceInputs = codexPluginControls.sourceInputs.filter((input) => codexDiscovery?.method === "reviewed" && codexDiscovery.roots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep6) || input.sourceRoot.startsWith(root2 + sep6)) && codexDiscovery.sources.some((source) => source.path === join26(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined));
+  const codexPluginSourceInputs = codexPluginControls.sourceInputs.filter((input) => codexDiscovery?.method === "reviewed" && codexDiscovery.roots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep7) || input.sourceRoot.startsWith(root2 + sep7)) && codexDiscovery.sources.some((source) => source.path === join27(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined));
   assertCodexInstallationInputs(home, [options.projectDir ?? home], codexPluginSourceInputs.map((input) => input.sourceRoot));
   const changes = [];
   let observedSettings;
@@ -44627,19 +44840,19 @@ function planAgentIntegration(options) {
       throw new Error(`Unsupported agent: ${agent}`);
     const { command, profileId: profileId2 } = bindings.get(agent);
     const adapter = AGENT_ADAPTERS[agent];
-    const bridgePath = canonicalAgentPath(join26(agent === "sumi" ? sumiBridgeRoot(home) : join26(home, adapter.root), CLI_BRIDGE_NAME), aliases);
+    const bridgePath = canonicalAgentPath(join27(agent === "sumi" ? sumiBridgeRoot(home) : join27(home, adapter.root), CLI_BRIDGE_NAME), aliases);
     assertSafePath(bridgePath);
     if (existsSync7(bridgePath) && !isOwnedCliBridge(bridgePath, [bridgePath]))
       throw new Error(`Refusing to overwrite an unrecognized or modified Skills bridge: ${bridgePath}`);
     for (const [name, after2] of Object.entries(CLI_BRIDGE_FILES)) {
-      const path2 = join26(bridgePath, name), before2 = readOptional(path2);
+      const path2 = join27(bridgePath, name), before2 = readOptional(path2);
       if (before2 !== after2)
         changes.push({ path: path2, before: before2, after: after2 });
     }
-    const path = canonicalAgentPath(agent === "sumi" ? sumiConfigPath(home) : join26(home, adapter.config), aliases);
+    const path = canonicalAgentPath(agent === "sumi" ? sumiConfigPath(home) : join27(home, adapter.config), aliases);
     const before = readOptional(path);
     if (agent === "hermes") {
-      const supervisorPath = join26(dataDir2, "agent-hooks", "hermes.js"), supervisorBefore = readOptional(supervisorPath), supervisorAfter = renderHermesSupervisor(command, profileId2);
+      const supervisorPath = join27(dataDir2, "agent-hooks", "hermes.js"), supervisorBefore = readOptional(supervisorPath), supervisorAfter = renderHermesSupervisor(command, profileId2);
       const priorCommand = policy.bridge?.commands?.hermes, priorProfile = policy.bridge?.profiles?.hermes ?? policy.profileId;
       const previous = policy.bridge?.supervisors?.hermes;
       if (supervisorBefore !== null && supervisorBefore !== supervisorAfter && !(previous?.path === supervisorPath && typeof priorCommand === "string" && typeof priorProfile === "string" && supervisorBefore === renderHermesSupervisor(priorCommand, priorProfile)))
@@ -44650,7 +44863,7 @@ function planAgentIntegration(options) {
       const after2 = configureHermesHooks(before, supervisor, previous);
       if (before !== after2)
         changes.push({ path, before, after: after2 });
-      const optOut = join26(home, ".hermes", HERMES_OPT_OUT), optOutBefore = readOptional(optOut);
+      const optOut = join27(home, ".hermes", HERMES_OPT_OUT), optOutBefore = readOptional(optOut);
       if (optOutBefore === null)
         changes.push({ path: optOut, before: null, after: `Managed by @hasna/skills: bundled native skill reseeding is disabled.
 ` });
@@ -44661,7 +44874,7 @@ function planAgentIntegration(options) {
       if (config.permissions !== undefined && (!Array.isArray(config.permissions) || config.permissions.some((rule) => !rule || typeof rule.action !== "string" || typeof rule.resource !== "string" || !["allow", "deny", "ask"].includes(rule.effect))))
         throw new Error("Expected Sumi native permission rules");
       config.permissions = [...(config.permissions ?? []).filter((rule) => rule.action !== "skill"), ...SUMI_SKILL_PERMISSIONS];
-      const pluginPath = join26(sumiConfigDirectory(home), "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
+      const pluginPath = join27(sumiConfigDirectory(home), "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
       const pluginAfter = renderSumiPlugin(command, profileId2);
       const priorCommand = policy.bridge?.commands?.sumi, priorProfile = policy.bridge?.profiles?.sumi ?? policy.profileId;
       if (pluginBefore !== null && pluginBefore !== pluginAfter && !(typeof priorCommand === "string" && typeof priorProfile === "string" && isManagedSumiPlugin(pluginBefore, priorCommand, priorProfile)))
@@ -44673,7 +44886,7 @@ function planAgentIntegration(options) {
       if (!permission || typeof permission !== "object" || Array.isArray(permission))
         throw new Error("Expected OpenCode permission object");
       config.permission = { ...permission, skill: { "*": "deny", [CLI_BRIDGE_NAME]: "allow" } };
-      const pluginPath = join26(home, ".config", "opencode", "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
+      const pluginPath = join27(home, ".config", "opencode", "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
       const pluginAfter = renderOpenCodePlugin(command, profileId2);
       const priorCommand = policy.bridge?.commands?.opencode;
       const ownedPrevious = typeof priorCommand === "string" && typeof policy.profileId === "string" && pluginBefore === renderOpenCodePlugin(priorCommand, policy.bridge?.profiles?.opencode ?? policy.profileId);
@@ -44690,7 +44903,7 @@ function planAgentIntegration(options) {
     if (before !== after)
       changes.push({ path, before, after });
     if (agent === "codex") {
-      const configPath = canonicalAgentPath(join26(home, ".codex", "config.toml"), aliases), previous = readOptional(configPath);
+      const configPath = canonicalAgentPath(join27(home, ".codex", "config.toml"), aliases), previous = readOptional(configPath);
       if (previous !== codexConfigBefore)
         throw new Error(`Configuration changed during planning: ${configPath}`);
       const next = disableReviewedCodexPluginNames(codexPathConfig, codexPluginSkills);
@@ -44702,16 +44915,16 @@ function planAgentIntegration(options) {
       }
     }
   }
-  const codexPluginSkillReview = options.codexNativeCatalog ? { version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, catalogSha256: sha4(JSON.stringify({ version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, skills: projectCodexNativeSkillCatalog({ data: [{ cwd: options.codexNativeCatalog.cwd, errors: [], skills: options.codexNativeCatalog.skills }] }, options.codexNativeCatalog.cwd), ...options.codexNativeCatalog.plugins === undefined ? {} : { plugins: projectCodexInstalledPluginEntries(options.codexNativeCatalog.plugins) } })), configSha256: changes.find((change) => change.path === canonicalAgentPath(join26(home, ".codex/config.toml"), aliases))?.before === null ? null : sha4(readOptional(canonicalAgentPath(join26(home, ".codex/config.toml"), aliases)) ?? "") } : policy.bridge?.codexPluginSkillReview;
+  const codexPluginSkillReview = options.codexNativeCatalog ? { version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, catalogSha256: sha4(JSON.stringify({ version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, skills: projectCodexNativeSkillCatalog({ data: [{ cwd: options.codexNativeCatalog.cwd, errors: [], skills: options.codexNativeCatalog.skills }] }, options.codexNativeCatalog.cwd), ...options.codexNativeCatalog.plugins === undefined ? {} : { plugins: projectCodexInstalledPluginEntries(options.codexNativeCatalog.plugins) } })), configSha256: changes.find((change) => change.path === canonicalAgentPath(join27(home, ".codex/config.toml"), aliases))?.before === null ? null : sha4(readOptional(canonicalAgentPath(join27(home, ".codex/config.toml"), aliases)) ?? "") } : policy.bridge?.codexPluginSkillReview;
   const discoveryAfter = discoveries.map((binding) => {
     const rebound = rebindAgentDiscovery(binding, new Map(changes.map((change) => [change.path, change.after])));
     if (binding.agent !== "codex")
       return rebound;
     const { codexInstallationInputs: previousInputs, ...current } = rebound;
     const inputs = codexPluginSourceInputs.map((input) => input.sourceRoot);
-    const directories = options.codexNativeCatalog || !previousInputs ? captureDiscoveryDirectories((binding.directories ?? []).filter((directory) => inputs.some((root2) => root2.startsWith(directory.path + sep6))).map((directory) => directory.path), inputs) : previousInputs.directories;
+    const directories = options.codexNativeCatalog || !previousInputs ? captureDiscoveryDirectories((binding.directories ?? []).filter((directory) => inputs.some((root2) => root2.startsWith(directory.path + sep7))).map((directory) => directory.path), inputs) : previousInputs.directories;
     const installed = codexPluginSourceInputs.length ? { ...current, codexInstallationInputs: { version: "codex-cli 0.160.0", catalogSha256: codexPluginSkillReview.catalogSha256, plugins: codexPluginSourceInputs, ...directories?.length ? { directories } : {} } } : current;
-    return captureRetiredCodexDiscovery(installed, codexPluginSkills, Bun.TOML.parse(changes.find((change) => change.path === canonicalAgentPath(join26(home, ".codex/config.toml"), aliases))?.after ?? codexConfigBefore ?? "").skills?.config ?? []);
+    return captureRetiredCodexDiscovery(installed, codexPluginSkills, Bun.TOML.parse(changes.find((change) => change.path === canonicalAgentPath(join27(home, ".codex/config.toml"), aliases))?.after ?? codexConfigBefore ?? "").skills?.config ?? []);
   });
   const nextPolicy = { ...policy, version: 1, loading: "cli", profileId, bridge: {
     ...policy.bridge,
@@ -44720,10 +44933,10 @@ function planAgentIntegration(options) {
     agents: [...new Set([...priorAgents, ...options.agents])].sort(),
     home: resolve18(home),
     includeVendor: true,
-    ...options.agents.includes("hermes") ? { supervisors: { ...policy.bridge?.supervisors, hermes: { path: join26(dataDir2, "agent-hooks", "hermes.js"), runtime: process.execPath, sha256: sha4(renderHermesSupervisor(bindings.get("hermes").command, bindings.get("hermes").profileId)) } } } : {},
+    ...options.agents.includes("hermes") ? { supervisors: { ...policy.bridge?.supervisors, hermes: { path: join27(dataDir2, "agent-hooks", "hermes.js"), runtime: process.execPath, sha256: sha4(renderHermesSupervisor(bindings.get("hermes").command, bindings.get("hermes").profileId)) } } } : {},
     commands: { ...policy.bridge?.commands, ...Object.fromEntries([...bindings].map(([agent, binding]) => [agent, binding.command])) },
     profiles: Object.fromEntries([...new Set([...priorAgents, ...options.agents])].sort().map((agent) => [agent, bindings.get(agent)?.profileId ?? policy.bridge?.profiles?.[agent] ?? policy.profileId])),
-    disabledBuiltins: options.agents.includes("codex") ? nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor && entry.path.startsWith(canonicalAgentPath(join26(home, ".codex", "skills", ".system"), aliases) + sep6)).map((entry) => ({ path: entry.path, hash: entry.hash })) : policy.bridge?.disabledBuiltins ?? [],
+    disabledBuiltins: options.agents.includes("codex") ? nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor && entry.path.startsWith(canonicalAgentPath(join27(home, ".codex", "skills", ".system"), aliases) + sep7)).map((entry) => ({ path: entry.path, hash: entry.hash })) : policy.bridge?.disabledBuiltins ?? [],
     rootAliases: aliases,
     ...options.codexNativeCatalog || codexPluginSkills.length || codexInactivePlugins.length || codexPluginSourceInputs.length ? { codexPluginSkills, codexInactivePlugins, codexPluginSkillReview } : {},
     discovery: { ...policy.bridge?.discovery, ...Object.fromEntries(discoveryAfter.map((binding) => [binding.agent, binding])) }
@@ -44775,10 +44988,10 @@ function projectedHookExecutable(command, expectedResolved) {
     if (expectedResolved !== undefined && resolved !== expectedResolved)
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     const resolvedParentIdentity = parents3(resolved);
-    const manifest = snapshot(join26(dirname17(dirname17(resolved)), "package.json"), false, { readOnlyPackage: true });
+    const manifest = snapshot(join27(dirname17(dirname17(resolved)), "package.json"), false, { readOnlyPackage: true });
     projectedHookAcl(manifest.file, manifest.stat);
     const pkg = JSON.parse(manifest.text);
-    if (pkg.name !== "@hasna/skills" || !/^\d+\.\d+\.\d+$/.test(pkg.version) || pkg.bin?.skills !== "bin/index.js" || resolved !== join26(dirname17(manifest.file), "bin/index.js"))
+    if (pkg.name !== "@hasna/skills" || !/^\d+\.\d+\.\d+$/.test(pkg.version) || pkg.bin?.skills !== "bin/index.js" || resolved !== join27(dirname17(manifest.file), "bin/index.js"))
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     const cli = snapshot(resolved, false, { readOnlyPackage: true });
     projectedHookAcl(cli.file, cli.stat);
@@ -44815,7 +45028,7 @@ function planClaudeManagedHookProjection(options) {
     hookProjectionRefusal("TARGET_INVALID");
   }
   const home = resolve18(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
-  const policyPath = join26(dataDir2, "agent-policy.json");
+  const policyPath = join27(dataDir2, "agent-policy.json");
   let policyBytes, settingsBytes, settingsPath, command, profile;
   try {
     policyBytes = readNativeBytes(policyPath, 1024 * 1024);
@@ -44823,7 +45036,7 @@ function planClaudeManagedHookProjection(options) {
     if (!snapshot2 || snapshot2.text !== policyBytes.toString("utf8"))
       hookProjectionRefusal("SOURCE_UNVERIFIED");
     const binding = snapshot2.value.bridge;
-    settingsPath = canonicalAgentPath(join26(home, AGENT_ADAPTERS.claude.config), binding?.rootAliases ?? []);
+    settingsPath = canonicalAgentPath(join27(home, AGENT_ADAPTERS.claude.config), binding?.rootAliases ?? []);
     settingsBytes = readNativeBytes(settingsPath, 1024 * 1024);
     command = binding?.commands?.claude;
     profile = binding?.profiles?.claude;
@@ -44906,12 +45119,12 @@ function planClaudePreToolUseHookUpdate(options) {
   return planClaudeHookEventsUpdate({ ...options, events: ["PreToolUse"] });
 }
 function claudeSettingsConsumers(home, path, discoveries, aliases) {
-  const canonical6 = (value) => canonicalAgentPath(value, aliases);
+  const canonical7 = (value) => canonicalAgentPath(value, aliases);
   const containsSettings = (root2) => {
-    const distance = relative5(canonical6(root2), path);
-    return distance === "" || distance !== ".." && !distance.startsWith(`..${sep6}`) && !isAbsolute19(distance);
+    const distance = relative5(canonical7(root2), path);
+    return distance === "" || distance !== ".." && !distance.startsWith(`..${sep7}`) && !isAbsolute19(distance);
   };
-  return discoveries.filter((binding) => binding.agent === "claude" || binding.agent === "opencode" || canonical6(join26(home, AGENT_ADAPTERS[binding.agent].config)) === path || binding.sources.some((source) => canonical6(source.path) === path) || binding.roots.some(containsSettings) || binding.directories?.some((directory) => containsSettings(directory.path))).map((binding) => binding.agent);
+  return discoveries.filter((binding) => binding.agent === "claude" || binding.agent === "opencode" || canonical7(join27(home, AGENT_ADAPTERS[binding.agent].config)) === path || binding.sources.some((source) => canonical7(source.path) === path) || binding.roots.some(containsSettings) || binding.directories?.some((directory) => containsSettings(directory.path))).map((binding) => binding.agent);
 }
 function verifyCoordinatedDiscovery(binding, home, aliases) {
   try {
@@ -44929,7 +45142,7 @@ function verifyCoordinatedDiscovery(binding, home, aliases) {
 }
 function planClaudeHookEventsUpdate(options) {
   const home = resolve18(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
-  const policyPath = join26(dataDir2, "agent-policy.json");
+  const policyPath = join27(dataDir2, "agent-policy.json");
   assertSafePath(policyPath);
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2)
@@ -44940,7 +45153,7 @@ function planClaudeHookEventsUpdate(options) {
   }
   const aliases = bridge.rootAliases ?? [];
   recheckRootAliases(aliases);
-  const path = canonicalAgentPath(join26(home, ".claude", "settings.json"), aliases);
+  const path = canonicalAgentPath(join27(home, ".claude", "settings.json"), aliases);
   assertSafePath(path);
   const before = lstatSync22(path, { throwIfNoEntry: false }) ? new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(readNativeBytes(path, 1024 * 1024)) : null;
   if ((before === null ? "absent" : sha4(before)) !== options.expectedSettingsSha256)
@@ -45018,7 +45231,7 @@ function planAgentSettingsWitnessUpgrade(options) {
   const binding = policy.bridge?.discovery?.[options.agent];
   if (!binding || binding.agent !== options.agent || binding.method !== "reviewed")
     throw new Error("Settings witness upgrade requires an existing reviewed native binding");
-  const configPath = canonicalAgentPath(options.agent === "sumi" ? sumiConfigPath(home) : join26(home, options.agent === "claude" ? ".claude/settings.json" : ".codex/config.toml"), aliases);
+  const configPath = canonicalAgentPath(options.agent === "sumi" ? sumiConfigPath(home) : join27(home, options.agent === "claude" ? ".claude/settings.json" : ".codex/config.toml"), aliases);
   const settings = readOptional(configPath);
   if (settings === null || sha4(settings) !== options.expectedSettingsSha256)
     throw new Error("Native settings preimage changed");
@@ -45069,7 +45282,7 @@ function planAgentSettingsWitnessUpgrade(options) {
   const replacement = { ...binding, sources: rebound };
   verifyAgentDiscovery(replacement);
   const after = serializeManagedSkillPolicy({ ...policy, bridge: { ...policy.bridge, discovery: { ...policy.bridge.discovery, [options.agent]: replacement } } });
-  return { dataDir: dataDir2, profileId: policy.profileId, changes: [{ path: join26(dataDir2, "agent-policy.json"), before: snapshot2.text, after }], nativeSkills: [], observedPolicy: { path: join26(dataDir2, "agent-policy.json"), before: snapshot2.text }, observedSettings: { path: configPath, before: settings }, discoveryBefore: [replacement], discoveryAfter: [replacement], rootAliases: aliases, managedAgentChecks: { home, agents: [options.agent] }, settingsWitnessUpgrade: { agent: options.agent, path: configPath, fromHashMode: previous.hashMode ?? "bytes", fromSha256: previous.sha256, toHashMode: next.hashMode, toSha256: next.sha256, reviewedPreimage: options.reviewedPreimage, currentSettingsSha256: options.expectedSettingsSha256, replacedWitnesses: replaced.map((source) => ({ hashMode: source.hashMode ?? "bytes", sha256: source.sha256 })) } };
+  return { dataDir: dataDir2, profileId: policy.profileId, changes: [{ path: join27(dataDir2, "agent-policy.json"), before: snapshot2.text, after }], nativeSkills: [], observedPolicy: { path: join27(dataDir2, "agent-policy.json"), before: snapshot2.text }, observedSettings: { path: configPath, before: settings }, discoveryBefore: [replacement], discoveryAfter: [replacement], rootAliases: aliases, managedAgentChecks: { home, agents: [options.agent] }, settingsWitnessUpgrade: { agent: options.agent, path: configPath, fromHashMode: previous.hashMode ?? "bytes", fromSha256: previous.sha256, toHashMode: next.hashMode, toSha256: next.sha256, reviewedPreimage: options.reviewedPreimage, currentSettingsSha256: options.expectedSettingsSha256, replacedWitnesses: replaced.map((source) => ({ hashMode: source.hashMode ?? "bytes", sha256: source.sha256 })) } };
 }
 function applyAgentIntegration(plan, options = {}) {
   const roots = plan.changes.flatMap((change) => {
@@ -45085,7 +45298,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
       throw new Error("Native identity source changed after planning");
   if (plan.observedSettings && readOptional(plan.observedSettings.path) !== plan.observedSettings.before)
     throw new Error("Native settings changed after witness planning");
-  const policyPath = join26(plan.dataDir, "agent-policy.json");
+  const policyPath = join27(plan.dataDir, "agent-policy.json");
   assertSafePath(policyPath);
   const currentText = (path) => resolve18(path) === resolve18(policyPath) ? readManagedSkillPolicySnapshot(plan.dataDir)?.text ?? null : readOptional(path);
   readManagedSkillPolicySnapshot(plan.dataDir);
@@ -45120,7 +45333,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
   for (const change of plan.changes)
     if (currentText(change.path) !== change.before)
       throw new Error(`Configuration changed after planning: ${change.path}`);
-  const backupRoot = join26(plan.dataDir, "migration", randomUUID4()), backups = [], written = [], createdDirectories = new Set;
+  const backupRoot = join27(plan.dataDir, "migration", randomUUID4()), backups = [], written = [], createdDirectories = new Set;
   if (!plan.changes.length) {
     assertCurrent();
     recheckRootAliases(aliases);
@@ -45131,7 +45344,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
   chmodSync(backupRoot, 448);
   for (const [index, change] of plan.changes.entries())
     if (change.before !== null) {
-      const backup = join26(backupRoot, `${index}-${sha4(change.path).slice(0, 12)}.backup`);
+      const backup = join27(backupRoot, `${index}-${sha4(change.path).slice(0, 12)}.backup`);
       writeFileSync5(backup, change.before, { mode: 384, flag: "wx" });
       if (readFileSync16(backup, "utf8") !== change.before)
         throw new Error("Native configuration preservation readback failed");
@@ -45164,7 +45377,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
     }
     for (const agent of plan.managedAgentChecks?.agents ?? [])
       assertManagedAgentBridge(agent, { home: plan.managedAgentChecks.home, dataDir: plan.dataDir, projectDir: plan.managedAgentChecks.home });
-    atomicWrite2(join26(backupRoot, "receipt.json"), JSON.stringify({ version: 1, changes: written.map((change) => ({ path: change.path, beforeHash: change.before === null ? null : sha4(change.before), afterHash: sha4(change.after) })), backups, ...aliases.length ? { rootAliases: aliases } : {} }) + `
+    atomicWrite2(join27(backupRoot, "receipt.json"), JSON.stringify({ version: 1, changes: written.map((change) => ({ path: change.path, beforeHash: change.before === null ? null : sha4(change.before), afterHash: sha4(change.after) })), backups, ...aliases.length ? { rootAliases: aliases } : {} }) + `
 `);
   } catch (error) {
     assertCurrent();
@@ -45227,7 +45440,7 @@ function archiveNativeSkills(inventory, options) {
   const selected = options.targetManifest ? selectNativeMigrationTargets(inventory, options.targetManifest) : inventory.filter((entry) => !entry.bridge && !entry.system && (entry.vendor ? options.includeVendor : entry.managed || options.includeUnmanaged));
   const roots = selected.flatMap((entry) => {
     const root2 = (entry.rootAlias?.agent === "codex" ? entry.rootAlias.alias : undefined) ?? codexCorpusRootForPath(entry.path);
-    const owner2 = entry.codexHome ?? (entry.agent === "codex" && entry.bridgeHome ? join26(entry.bridgeHome, ".codex") : undefined);
+    const owner2 = entry.codexHome ?? (entry.agent === "codex" && entry.bridgeHome ? join27(entry.bridgeHome, ".codex") : undefined);
     if (!root2 && !owner2 && (entry.agent === "codex" || isCodexSkillDiscoveryInput(entry.path)))
       throw new Error("CODEX_CORPUS_ROOT_UNVERIFIED");
     return [...new Set([root2, owner2].filter((value) => value !== undefined))];
@@ -45242,7 +45455,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
   recheckRootAliases(aliases);
   for (const entry of inventory.filter((entry2) => entry2.bridge)) {
     const adapter = AGENT_ADAPTERS[entry.agent];
-    const expected = adapter && entry.bridgeHome ? canonicalAgentPath(join26(entry.agent === "sumi" ? sumiBridgeRoot(entry.bridgeHome) : join26(entry.bridgeHome, adapter.root), CLI_BRIDGE_NAME), aliases) : undefined;
+    const expected = adapter && entry.bridgeHome ? canonicalAgentPath(join27(entry.agent === "sumi" ? sumiBridgeRoot(entry.bridgeHome) : join27(entry.bridgeHome, adapter.root), CLI_BRIDGE_NAME), aliases) : undefined;
     if (!expected || treeHash(entry.path) !== entry.hash || !isOwnedCliBridge(entry.path, [expected]))
       throw new Error(`Skills bridge changed after planning: ${entry.path}`);
   }
@@ -45253,11 +45466,11 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
   const targetManifest = options.targetManifest ? { schema: options.targetManifest.schema, digest: options.targetManifest.digest, targetCount: options.targetManifest.targets.length } : undefined;
   if (!selected.length)
     return { entries: [], ...targetManifest ? { targetManifest } : {}, ...aliases.length ? { rootAliases: aliases } : {} };
-  const operationId = randomUUID4(), archiveRoot = join26(options.dataDir ?? getDataDir(), "migration", operationId, "native"), receiptPath = join26(archiveRoot, "receipt.json");
+  const operationId = randomUUID4(), archiveRoot = join27(options.dataDir ?? getDataDir(), "migration", operationId, "native"), receiptPath = join27(archiveRoot, "receipt.json");
   const entries = selected.map((entry, index) => ({
-    source: entry.vendor ? join26(entry.path, "SKILL.md") : entry.path,
-    archive: join26(archiveRoot, `${index}-${sha4(entry.path).slice(0, 12)}`),
-    hash: entry.vendor ? sha4(readNativeBytes(join26(entry.path, "SKILL.md"))) : entry.hash,
+    source: entry.vendor ? join27(entry.path, "SKILL.md") : entry.path,
+    archive: join27(archiveRoot, `${index}-${sha4(entry.path).slice(0, 12)}`),
+    hash: entry.vendor ? sha4(readNativeBytes(join27(entry.path, "SKILL.md"))) : entry.hash,
     ...entry.vendor ? { discoveryOnly: true } : {},
     status: "planned"
   }));
@@ -45364,9 +45577,9 @@ function isInertCodexPluginCacheCopy(entry, cache, allowedHostPaths, read3) {
   try {
     if (entry.agent !== "codex" || !entry.vendor || entry.bridge || entry.system)
       return false;
-    const document2 = join26(entry.path, "SKILL.md");
+    const document2 = join27(entry.path, "SKILL.md");
     const inside = relative5(cache, entry.path);
-    if (!inside || isAbsolute19(inside) || inside.split(sep6).some((segment) => segment === ".."))
+    if (!inside || isAbsolute19(inside) || inside.split(sep7).some((segment) => segment === ".."))
       return false;
     assertSafePath(entry.path);
     if (!lstatSync22(cache).isDirectory() || !lstatSync22(entry.path).isDirectory() || !lstatSync22(document2).isFile())
@@ -45387,7 +45600,7 @@ function assertManagedAgentBridge(agent, options = {}) {
 }
 function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscovery) {
   const home = resolve18(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
-  assertSafePath(join26(dataDir2, "agent-policy.json"));
+  assertSafePath(join27(dataDir2, "agent-policy.json"));
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2)
     throw new Error("NATIVE_SKILL_DRIFT: install the Skills bridge with skills hook install");
@@ -45398,14 +45611,14 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
   if (!Array.isArray(aliases))
     throw new Error("NATIVE_SKILL_DRIFT: invalid root alias binding");
   recheckRootAliases(aliases);
-  const expected = canonicalAgentPath(join26(agent === "sumi" ? sumiBridgeRoot(home) : join26(home, AGENT_ADAPTERS[agent].root), CLI_BRIDGE_NAME), aliases);
+  const expected = canonicalAgentPath(join27(agent === "sumi" ? sumiBridgeRoot(home) : join27(home, AGENT_ADAPTERS[agent].root), CLI_BRIDGE_NAME), aliases);
   if (!isOwnedCliBridge(expected, [expected]))
     throw new Error("NATIVE_SKILL_DRIFT: the native Skills bridge is missing or modified; repair it before continuing");
   const roots = projectAncestorDirectories([options.projectDir ?? process.cwd(), ...options.projectDirs ?? [], ...agent === "hermes" && process.env.TERMINAL_CWD ? [process.cwd()] : []]);
-  const visible = (entry) => entry.agent === agent || ["codex", "gemini", "opencode", "hermes", "sumi"].includes(agent) && entry.path.includes(`${sep6}.agents${sep6}skills${sep6}`) || ["opencode", "sumi"].includes(agent) && entry.agent === "claude";
+  const visible = (entry) => entry.agent === agent || ["codex", "gemini", "opencode", "hermes", "sumi"].includes(agent) && entry.path.includes(`${sep7}.agents${sep7}skills${sep7}`) || ["opencode", "sumi"].includes(agent) && entry.agent === "claude";
   const discovery = provenDiscovery ?? binding.discovery?.[agent];
   assertProjectDiscovery(agent, [...roots], home, (path) => canonicalAgentPath(path, aliases), discovery);
-  const configPath = canonicalAgentPath(agent === "sumi" ? sumiConfigPath(home) : join26(home, AGENT_ADAPTERS[agent].config), aliases), config = agent === "hermes" ? parseHermesConfig(readOptional(configPath)) : jsonObject(readOptional(configPath), configPath);
+  const configPath = canonicalAgentPath(agent === "sumi" ? sumiConfigPath(home) : join27(home, AGENT_ADAPTERS[agent].config), aliases), config = agent === "hermes" ? parseHermesConfig(readOptional(configPath)) : jsonObject(readOptional(configPath), configPath);
   const command = binding.commands?.[agent], profile = binding.profiles?.[agent];
   if (typeof command !== "string" || typeof profile !== "string")
     throw new Error("NATIVE_SKILL_DRIFT: the native hook command/profile binding is missing");
@@ -45413,14 +45626,14 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
     throw new Error("NATIVE_SKILL_DRIFT: the hook selection profile differs from its managed binding; restart the native client after reviewing skills hook install");
   if (agent === "hermes") {
     const supervisor = binding.supervisors?.hermes;
-    if (supervisor?.path !== join26(dataDir2, "agent-hooks", "hermes.js") || supervisor?.sha256 !== sha4(renderHermesSupervisor(command, profile)))
+    if (supervisor?.path !== join27(dataDir2, "agent-hooks", "hermes.js") || supervisor?.sha256 !== sha4(renderHermesSupervisor(command, profile)))
       throw new Error("NATIVE_SKILL_DRIFT: Hermes supervisor binding changed; run skills hook install");
     assertHermesProtection(home, config, command, profile, supervisor);
   } else if (agent === "sumi") {
-    if (JSON.stringify(config.permissions?.filter((rule) => rule.action === "skill")) !== JSON.stringify(SUMI_SKILL_PERMISSIONS) || !isManagedSumiPlugin(readOptional(join26(sumiConfigDirectory(home), "plugins", "skills-cli.js")), command, profile))
+    if (JSON.stringify(config.permissions?.filter((rule) => rule.action === "skill")) !== JSON.stringify(SUMI_SKILL_PERMISSIONS) || !isManagedSumiPlugin(readOptional(join27(sumiConfigDirectory(home), "plugins", "skills-cli.js")), command, profile))
       throw new Error("NATIVE_SKILL_DRIFT: Sumi bridge protection changed; run skills hook install");
   } else if (agent === "opencode") {
-    if (JSON.stringify(config.permission?.skill) !== JSON.stringify({ "*": "deny", [CLI_BRIDGE_NAME]: "allow" }) || readOptional(join26(home, ".config", "opencode", "plugins", "skills-cli.js")) !== renderOpenCodePlugin(command, profile))
+    if (JSON.stringify(config.permission?.skill) !== JSON.stringify({ "*": "deny", [CLI_BRIDGE_NAME]: "allow" }) || readOptional(join27(home, ".config", "opencode", "plugins", "skills-cli.js")) !== renderOpenCodePlugin(command, profile))
       throw new Error("NATIVE_SKILL_DRIFT: OpenCode bridge protection changed; run skills hook install");
   } else {
     const required = {};
@@ -45437,42 +45650,42 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
     if (agent === "gemini" && (config.hooksConfig?.enabled === false || config.skills?.enabled !== true || !["antigravity-support", "skill-creator"].every((name) => config.skills?.disabled?.includes(name)) || config.skills?.disabled?.includes(CLI_BRIDGE_NAME)))
       throw new Error("NATIVE_SKILL_DRIFT: Gemini bridge or bundled-skill protection changed; run skills hook install");
   }
-  const codexPath = canonicalAgentPath(join26(home, ".codex", "config.toml"), aliases);
+  const codexPath = canonicalAgentPath(join27(home, ".codex", "config.toml"), aliases);
   if (options.codexDiscoveryRecovery && (agent !== "codex" || options.codexDiscoveryRecovery.configPath !== codexPath))
     throw new Error("NATIVE_SKILL_DRIFT: Codex trust recovery names a different configuration root");
   const codexConfig = agent === "codex" ? Bun.TOML.parse(readOptional(codexPath) ?? "") : {};
   if (agent === "codex" && codexConfig.skills?.bundled?.enabled !== false)
     throw new Error("NATIVE_SKILL_DRIFT: Codex bundled skill reseeding is not disabled (skills.bundled.enabled); run skills hook install");
-  const setting = (path) => (codexConfig.skills?.config ?? []).filter((entry) => typeof entry.path === "string" && [path, join26(path, "SKILL.md")].includes(canonicalAgentPath(entry.path, aliases)));
+  const setting = (path) => (codexConfig.skills?.config ?? []).filter((entry) => typeof entry.path === "string" && [path, join27(path, "SKILL.md")].includes(canonicalAgentPath(entry.path, aliases)));
   if (agent === "codex" && [...setting(expected), ...(codexConfig.skills?.config ?? []).filter((entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME)].some((entry) => entry.enabled === false))
     throw new Error("NATIVE_SKILL_DRIFT: the Codex CLI bridge is disabled; run skills hook install");
-  if (agent === "codex" && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join26(home, ".codex/plugins/cache"), aliases), binding.codexPluginSkills ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? []))
+  if (agent === "codex" && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join27(home, ".codex/plugins/cache"), aliases), binding.codexPluginSkills ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? []))
     throw new Error("NATIVE_SKILL_DRIFT: reviewed native plugin capability controls changed; run skills hook install with a fresh discovery review");
   const disabledPlugin = (entry) => {
     if (agent !== "codex" || !entry.vendor)
       return false;
-    const document2 = join26(entry.path, "SKILL.md"), cache = canonicalAgentPath(join26(home, ".codex/plugins/cache"), aliases), read3 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024));
+    const document2 = join27(entry.path, "SKILL.md"), cache = canonicalAgentPath(join27(home, ".codex/plugins/cache"), aliases), read3 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024));
     return isReviewedCodexPluginInactive(document2, cache, binding.codexInactivePlugins ?? [], codexConfig.plugins, codexConfig.skills?.config ?? [], read3) || isReviewedCodexPluginSkillDisabled(document2, cache, binding.codexPluginSkills ?? [], codexConfig.skills?.config, read3);
   };
   const disabledPaths = new Set(disabledCodexSkillPaths(codexConfig, aliases));
   const disabledVendorSkill = (entry) => {
     if (agent !== "codex" || !entry.vendor)
       return false;
-    if ((binding.codexPluginSkills ?? []).some((control) => entry.path.startsWith(control.pluginParent + sep6)))
+    if ((binding.codexPluginSkills ?? []).some((control) => entry.path.startsWith(control.pluginParent + sep7)))
       return disabledPlugin(entry);
     if (disabledPlugin(entry))
       return true;
     if (!disabledPaths.has(entry.path))
       return false;
-    if (entry.path.startsWith(canonicalAgentPath(join26(home, ".codex", "plugins", "cache"), aliases) + sep6))
+    if (entry.path.startsWith(canonicalAgentPath(join27(home, ".codex", "plugins", "cache"), aliases) + sep7))
       return true;
-    const runtimeCache = canonicalAgentPath(join26(home, ".cache", "codex-runtimes"), aliases);
-    if (entry.path.startsWith(runtimeCache + sep6) && discovery?.method === "automatic" && discovery.roots.some((root2) => entry.path.startsWith(root2 + sep6)))
+    const runtimeCache = canonicalAgentPath(join27(home, ".cache", "codex-runtimes"), aliases);
+    if (entry.path.startsWith(runtimeCache + sep7) && discovery?.method === "automatic" && discovery.roots.some((root2) => entry.path.startsWith(root2 + sep7)))
       return true;
-    const bundledMarketplaces = canonicalAgentPath(join26(home, ".codex", ".tmp", "bundled-marketplaces"), aliases);
-    if (entry.path.startsWith(bundledMarketplaces + sep6) && discovery?.method === "automatic" && discovery.roots.some((root2) => entry.path.startsWith(root2 + sep6)))
+    const bundledMarketplaces = canonicalAgentPath(join27(home, ".codex", ".tmp", "bundled-marketplaces"), aliases);
+    if (entry.path.startsWith(bundledMarketplaces + sep7) && discovery?.method === "automatic" && discovery.roots.some((root2) => entry.path.startsWith(root2 + sep7)))
       return true;
-    if (!entry.path.startsWith(canonicalAgentPath(join26(home, ".codex", "skills", ".system"), aliases) + sep6))
+    if (!entry.path.startsWith(canonicalAgentPath(join27(home, ".codex", "skills", ".system"), aliases) + sep7))
       return false;
     return Array.isArray(binding.disabledBuiltins) && binding.disabledBuiltins.some((item) => item.path === entry.path && item.hash === entry.hash);
   };
@@ -45495,7 +45708,7 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
   let installationInputRoots = [];
   if (agent === "codex") {
     try {
-      installationInputRoots = reviewedCodexPluginSourceRoots(canonicalAgentPath(join26(home, ".codex/plugins/cache"), aliases), discovery.codexInstallationInputs?.plugins ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)));
+      installationInputRoots = reviewedCodexPluginSourceRoots(canonicalAgentPath(join27(home, ".codex/plugins/cache"), aliases), discovery.codexInstallationInputs?.plugins ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)));
     } catch {
       throw new Error("NATIVE_SKILL_DRIFT: native installation input identity changed; review discovery and catalog");
     }
@@ -45505,7 +45718,7 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
   let adapterRefusal, inert = [];
   if (agent === "codex" && unexpected.length && options.codexNativePolicy) {
     const { inspector, helperRunner, deadlineMs, ...envelope } = options.codexNativePolicy;
-    const cache = canonicalAgentPath(join26(home, ".codex", "plugins", "cache"), aliases), read3 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), bridgeDocument = join26(expected, "SKILL.md");
+    const cache = canonicalAgentPath(join27(home, ".codex", "plugins", "cache"), aliases), read3 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), bridgeDocument = join27(expected, "SKILL.md");
     try {
       const claimed = parseCodexNativeHookEnvelope(envelope, bridgeDocument).policy;
       inert = unexpected.filter((entry) => isInertCodexPluginCacheCopy(entry, cache, claimed.allowedHostPaths, read3));
@@ -45545,15 +45758,15 @@ import {
   statSync as statSync10,
   writeFileSync as writeFileSync7
 } from "fs";
-import { basename as basename11, dirname as dirname20, isAbsolute as isAbsolute20, join as join30, normalize as normalize4, relative as relative7, resolve as resolve20, sep as sep9 } from "path";
+import { basename as basename11, dirname as dirname20, isAbsolute as isAbsolute20, join as join31, normalize as normalize4, relative as relative7, resolve as resolve20, sep as sep10 } from "path";
 
 // src/lib/registry-data/index.ts
 var SKILLS = [];
 
 // src/lib/skill-hash.ts
-import { createHash as createHash23 } from "crypto";
+import { createHash as createHash24 } from "crypto";
 import { existsSync as existsSync8, readdirSync as readdirSync9, readFileSync as readFileSync17, statSync as statSync8 } from "fs";
-import { join as join27, sep as sep7 } from "path";
+import { join as join28, sep as sep8 } from "path";
 var CONTENT_HASH_ALGORITHM = "sha256";
 var HASH_EXCLUDE_DIRS = new Set([".git", "node_modules", "dist", "build", ".turbo"]);
 function excludedHashEntry(name, directory) {
@@ -45615,7 +45828,7 @@ function collectBundleFiles(skillPath) {
     if (seen.has(entry))
       continue;
     seen.add(entry);
-    const absolute = join27(skillPath, entry);
+    const absolute = join28(skillPath, entry);
     if (!existsSync8(absolute))
       continue;
     if (statSync8(absolute).isDirectory())
@@ -45629,7 +45842,7 @@ function collectDirectory(files, dir, rel) {
   for (const entry of readdirSync9(dir).sort()) {
     if (entry.startsWith("."))
       continue;
-    const absolute = join27(dir, entry);
+    const absolute = join28(dir, entry);
     const childRel = `${rel}/${entry}`;
     let stats;
     try {
@@ -45650,7 +45863,7 @@ function collectDirectory(files, dir, rel) {
 }
 function collectFile(files, absolute, rel) {
   const buffer = readFileSync17(absolute);
-  files.push(normalizeBundleFile(rel.split(sep7).join("/"), buffer));
+  files.push(normalizeBundleFile(rel.split(sep8).join("/"), buffer));
 }
 function normalizeBundleFile(rel, buffer) {
   if (rel === "skill.json") {
@@ -45675,13 +45888,13 @@ function* bundleHashParts(files) {
   yield new TextEncoder().encode("\x00");
 }
 function hashBundleFiles(files) {
-  const hash2 = createHash23(CONTENT_HASH_ALGORITHM);
+  const hash2 = createHash24(CONTENT_HASH_ALGORITHM);
   for (const part of bundleHashParts(files))
     hash2.update(part);
   return hash2.digest("hex");
 }
 async function hashBundleFilesCooperatively(files, check) {
-  const hash2 = createHash23(CONTENT_HASH_ALGORITHM);
+  const hash2 = createHash24(CONTENT_HASH_ALGORITHM);
   let bytesSinceYield = 0;
   for (const part of bundleHashParts(files)) {
     for (let offset = 0;offset < part.byteLength; offset += 64 * 1024) {
@@ -46070,7 +46283,7 @@ import {
   realpathSync as realpathSync11,
   writeFileSync as writeFileSync6
 } from "fs";
-import { basename as basename9, dirname as dirname18, join as join28, relative as relative6 } from "path";
+import { basename as basename9, dirname as dirname18, join as join29, relative as relative6 } from "path";
 var ANY_SEGMENT_COPY_EXCLUDES = new Set([
   ".git",
   ".DS_Store",
@@ -46127,9 +46340,9 @@ function readPortableSkillManifestForImport(skillPath) {
   return readManifest(skillPath, basename9(skillPath), normalizeNewPortableSkillName);
 }
 function readManifest(skillPath, fallbackName, normalizeName) {
-  const skillJsonPath = join28(skillPath, "skill.json");
-  const skillMdPath = join28(skillPath, "SKILL.md");
-  const pkgPath = join28(skillPath, "package.json");
+  const skillJsonPath = join29(skillPath, "skill.json");
+  const skillMdPath = join29(skillPath, "SKILL.md");
+  const pkgPath = join29(skillPath, "package.json");
   const jsonManifest = existsSync9(skillJsonPath) ? readJsonObject(skillJsonPath) : undefined;
   const frontmatter = existsSync9(skillMdPath) ? parseSkillFrontmatter(readFileSync18(skillMdPath, "utf-8")) ?? undefined : undefined;
   const pkg = existsSync9(pkgPath) ? readJsonObject(pkgPath) : undefined;
@@ -46161,9 +46374,9 @@ function parseSkillKind(value) {
   return;
 }
 function readDeclaredSkillVersion(skillPath) {
-  const skillJsonPath = join28(skillPath, "skill.json");
-  const skillMdPath = join28(skillPath, "SKILL.md");
-  const pkgPath = join28(skillPath, "package.json");
+  const skillJsonPath = join29(skillPath, "skill.json");
+  const skillMdPath = join29(skillPath, "SKILL.md");
+  const pkgPath = join29(skillPath, "package.json");
   const jsonManifest = existsSync9(skillJsonPath) ? readJsonObject(skillJsonPath) : undefined;
   const frontmatter = existsSync9(skillMdPath) ? parseSkillFrontmatter(readFileSync18(skillMdPath, "utf-8")) ?? undefined : undefined;
   const pkg = existsSync9(pkgPath) ? readJsonObject(pkgPath) : undefined;
@@ -46187,7 +46400,7 @@ function createInstructionManifest(name, options) {
 }
 function writeInstructionSkillTemplate(skillPath, manifest) {
   mkdirSync7(skillPath, { recursive: true });
-  writeFileSync6(join28(skillPath, "SKILL.md"), renderInstructionSkillMd(manifest));
+  writeFileSync6(join29(skillPath, "SKILL.md"), renderInstructionSkillMd(manifest));
   writeSkillJsonWithHash(skillPath, manifest);
 }
 function renderInstructionSkillMd(manifest) {
@@ -46237,12 +46450,12 @@ function createPortableManifest(name, options) {
   };
 }
 function writePortableSkillTemplate(skillPath, manifest) {
-  mkdirSync7(join28(skillPath, "src"), { recursive: true });
-  writeFileSync6(join28(skillPath, "SKILL.md"), renderSkillMd(manifest));
-  writeFileSync6(join28(skillPath, "AGENTS.md"), renderAgentsMd(manifest));
-  writeFileSync6(join28(skillPath, "package.json"), renderPackageJson(manifest));
-  writeFileSync6(join28(skillPath, "tsconfig.json"), renderTsconfig());
-  writeFileSync6(join28(skillPath, "src", "index.ts"), renderEntrypoint(manifest));
+  mkdirSync7(join29(skillPath, "src"), { recursive: true });
+  writeFileSync6(join29(skillPath, "SKILL.md"), renderSkillMd(manifest));
+  writeFileSync6(join29(skillPath, "AGENTS.md"), renderAgentsMd(manifest));
+  writeFileSync6(join29(skillPath, "package.json"), renderPackageJson(manifest));
+  writeFileSync6(join29(skillPath, "tsconfig.json"), renderTsconfig());
+  writeFileSync6(join29(skillPath, "src", "index.ts"), renderEntrypoint(manifest));
   writeSkillJsonWithHash(skillPath, manifest);
 }
 function fillContractDefaults(manifest, entrypoint) {
@@ -46267,7 +46480,7 @@ function writeSkillJsonWithHash(skillPath, manifest) {
       content_hash: undefined
     }
   };
-  writeFileSync6(join28(skillPath, "skill.json"), `${JSON.stringify({ ...existing, ...renderSkillJsonObject(withoutHash) }, null, 2)}
+  writeFileSync6(join29(skillPath, "skill.json"), `${JSON.stringify({ ...existing, ...renderSkillJsonObject(withoutHash) }, null, 2)}
 `);
   const hash2 = computeContentHash(skillPath);
   const withHash = {
@@ -46277,12 +46490,12 @@ function writeSkillJsonWithHash(skillPath, manifest) {
       content_hash: hash2
     }
   };
-  writeFileSync6(join28(skillPath, "skill.json"), `${JSON.stringify({ ...existing, ...renderSkillJsonObject(withHash) }, null, 2)}
+  writeFileSync6(join29(skillPath, "skill.json"), `${JSON.stringify({ ...existing, ...renderSkillJsonObject(withHash) }, null, 2)}
 `);
   return withHash;
 }
 function readExistingSkillJson(skillPath) {
-  const path = join28(skillPath, "skill.json");
+  const path = join29(skillPath, "skill.json");
   if (!existsSync9(path))
     return {};
   try {
@@ -46316,24 +46529,24 @@ function ensurePortableSkillFiles(skillPath, manifest) {
     tags: next.tags?.length ? next.tags : ["custom", next.name]
   };
   const entry = next.commands[0]?.entry ?? "src/index.ts";
-  if (entry && !existsSync9(join28(skillPath, entry))) {
-    mkdirSync7(dirname18(join28(skillPath, entry)), { recursive: true });
-    writeFileSync6(join28(skillPath, entry), renderEntrypoint(next));
+  if (entry && !existsSync9(join29(skillPath, entry))) {
+    mkdirSync7(dirname18(join29(skillPath, entry)), { recursive: true });
+    writeFileSync6(join29(skillPath, entry), renderEntrypoint(next));
   }
-  if (!existsSync9(join28(skillPath, "SKILL.md")))
-    writeFileSync6(join28(skillPath, "SKILL.md"), renderSkillMd(next));
+  if (!existsSync9(join29(skillPath, "SKILL.md")))
+    writeFileSync6(join29(skillPath, "SKILL.md"), renderSkillMd(next));
   else
-    writeFileSync6(join28(skillPath, "SKILL.md"), ensureSkillMdFrontmatter(readFileSync18(join28(skillPath, "SKILL.md"), "utf-8"), next));
-  if (!existsSync9(join28(skillPath, "AGENTS.md")))
-    writeFileSync6(join28(skillPath, "AGENTS.md"), renderAgentsMd(next));
+    writeFileSync6(join29(skillPath, "SKILL.md"), ensureSkillMdFrontmatter(readFileSync18(join29(skillPath, "SKILL.md"), "utf-8"), next));
+  if (!existsSync9(join29(skillPath, "AGENTS.md")))
+    writeFileSync6(join29(skillPath, "AGENTS.md"), renderAgentsMd(next));
   ensurePackageJson(skillPath, next);
-  if (!existsSync9(join28(skillPath, "tsconfig.json")))
-    writeFileSync6(join28(skillPath, "tsconfig.json"), renderTsconfig());
+  if (!existsSync9(join29(skillPath, "tsconfig.json")))
+    writeFileSync6(join29(skillPath, "tsconfig.json"), renderTsconfig());
   writeSkillJsonWithHash(skillPath, next);
   return readPortableSkillManifest(skillPath, next.name);
 }
 function ensurePackageJson(skillPath, manifest) {
-  const pkgPath = join28(skillPath, "package.json");
+  const pkgPath = join29(skillPath, "package.json");
   const first = manifest.commands[0] ?? { name: manifest.name, entry: "src/index.ts" };
   const commandName = normalizePortableSkillName(first.name || manifest.name);
   const entry = (first.entry ?? "src/index.ts").replace(/^\.\//, "");
@@ -46380,17 +46593,17 @@ function ensureInstructionSkillFiles(skillPath, manifest) {
     inputs: [],
     commands: []
   };
-  if (!existsSync9(join28(skillPath, "SKILL.md"))) {
-    writeFileSync6(join28(skillPath, "SKILL.md"), renderSkillMd(next));
+  if (!existsSync9(join29(skillPath, "SKILL.md"))) {
+    writeFileSync6(join29(skillPath, "SKILL.md"), renderSkillMd(next));
   } else {
-    const path = join28(skillPath, "SKILL.md");
+    const path = join29(skillPath, "SKILL.md");
     const content = readFileSync18(path, "utf8");
     const declaredName = parseSkillFrontmatter(content)?.name;
     if (declaredName && declaredName !== next.name) {
       writeFileSync6(path, renameInstructionFrontmatter(content, next.name));
     }
   }
-  const packagePath = join28(skillPath, "package.json");
+  const packagePath = join29(skillPath, "package.json");
   if (existsSync9(packagePath)) {
     const pkg = readJsonObject(packagePath);
     if (typeof pkg.name === "string" && pkg.name !== next.name) {
@@ -46716,10 +46929,10 @@ function escapeJsString(value) {
 // src/lib/authoring-path.ts
 import { lstatSync as lstatSync24, realpathSync as realpathSync12 } from "fs";
 import { homedir as homedir4 } from "os";
-import { basename as basename10, dirname as dirname19, join as join29, resolve as resolve19, sep as sep8 } from "path";
+import { basename as basename10, dirname as dirname19, join as join30, resolve as resolve19, sep as sep9 } from "path";
 var NATIVE_DISCOVERY_ROOTS = NATIVE_SKILL_ROOTS.map(([, path]) => path.split("/"));
 function pathParts(path) {
-  return resolve19(path).split(sep8).filter(Boolean);
+  return resolve19(path).split(sep9).filter(Boolean);
 }
 function nativeRootMatch(path) {
   const parts = pathParts(path);
@@ -46745,10 +46958,10 @@ function physicalPath(path) {
   return resolve19(realpathSync12(cursor), ...suffix);
 }
 function contains(root2, path) {
-  return path === root2 || path.startsWith(root2 + sep8);
+  return path === root2 || path.startsWith(root2 + sep9);
 }
 function configuredRoots(home, explicitHome) {
-  const homeData = join29(home, ".hasna", "skills");
+  const homeData = join30(home, ".hasna", "skills");
   const homePolicy = readManagedSkillPolicySnapshot(homeData);
   const configuredPolicy = !explicitHome && resolve19(getDataDirReadOnly()) !== resolve19(homeData) ? readManagedSkillPolicySnapshot(getDataDirReadOnly()) : null;
   const policy = homePolicy ?? configuredPolicy;
@@ -46779,7 +46992,7 @@ function configuredRoots(home, explicitHome) {
       admitBinding(binding);
       continue;
     }
-    const nativeHome = join29(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
+    const nativeHome = join30(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
     if (!lstatSync24(nativeHome, { throwIfNoEntry: false }))
       continue;
     roots.push(...resolveAgentDiscovery({ home, agent, canonical: physicalPath }).roots);
@@ -46794,8 +47007,8 @@ function assertPortableAuthoringPath(path, options = {}) {
   const candidates = [lexical, physical];
   let native = candidates.map(nativeRootMatch).find(Boolean);
   const home = resolve19(options.homeDir ?? homedir4());
-  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join29(home, ...parts));
-  defaults.push(join29(home, ".codex/plugins/cache"), join29(home, ".claude/plugins/cache"), join29(home, ".claude/plugins/synced"), join29(home, ".gemini/extensions"));
+  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join30(home, ...parts));
+  defaults.push(join30(home, ".codex/plugins/cache"), join30(home, ".claude/plugins/cache"), join30(home, ".claude/plugins/synced"), join30(home, ".gemini/extensions"));
   for (const root2 of defaults) {
     if (candidates.some((candidate2) => contains(resolve19(root2), candidate2) || contains(physicalPath(root2), candidate2)))
       native ??= root2;
@@ -46816,15 +47029,15 @@ function getPortableSkillsRoot(options = {}) {
 function resolvePortableSkillsRoot(options, migrate) {
   if (options.rootDir)
     return options.rootDir;
-  const appDir = options.homeDir ? join30(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
-  const cache = join30(appDir, SKILLS_CACHE_DIRNAME);
+  const appDir = options.homeDir ? join31(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
+  const cache = join31(appDir, SKILLS_CACHE_DIRNAME);
   if (isOwnerLayoutMigrated(appDir) && safeIsDirectory(cache))
     return cache;
-  const installed = join30(appDir, INSTALLED_SKILLS_DIRNAME);
+  const installed = join31(appDir, INSTALLED_SKILLS_DIRNAME);
   return installed;
 }
 function getPortableSkillPath(name, options = {}) {
-  return join30(getPortableSkillsRoot(options), normalizePortableSkillName(name));
+  return join31(getPortableSkillsRoot(options), normalizePortableSkillName(name));
 }
 function findPortableSkill(name, options = {}) {
   let normalized;
@@ -46850,7 +47063,7 @@ function listPortableSkills(options = {}) {
   for (const entry of readdirSync10(root2).sort()) {
     if (entry.startsWith("."))
       continue;
-    const path = join30(root2, entry);
+    const path = join31(root2, entry);
     if (!safeIsDirectory(path))
       continue;
     try {
@@ -46884,9 +47097,9 @@ function isOfficialSkillName(name) {
 function scaffoldPortableSkill(name, options = {}) {
   const skillName = normalizeNewPortableSkillName(name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join30(readOnlyRoot, skillName), options);
+  assertPortableAuthoringPath(join31(readOnlyRoot, skillName), options);
   const root2 = getPortableSkillsRoot(options);
-  const skillPath = join30(root2, skillName);
+  const skillPath = join31(root2, skillName);
   assertPortableAuthoringPath(skillPath, options);
   if (existsSync10(skillPath)) {
     if (!options.overwrite)
@@ -46920,7 +47133,7 @@ function portPortableSkillDirectory(sourceDir, options = {}) {
   const skipped = [];
   const entries = readdirSync10(absoluteSource, { withFileTypes: true }).map((entry) => entry.name).filter((entryName) => !entryName.startsWith(".")).sort();
   for (const entryName of entries) {
-    const childPath = join30(absoluteSource, entryName);
+    const childPath = join31(absoluteSource, entryName);
     if (!safeIsDirectory(childPath))
       continue;
     if (!isSkillCandidate(childPath)) {
@@ -46949,7 +47162,7 @@ function portPortableSkillDirectory(sourceDir, options = {}) {
   };
 }
 function isSkillCandidate(dir) {
-  return existsSync10(join30(dir, "SKILL.md")) || existsSync10(join30(dir, "skill.json")) || existsSync10(join30(dir, "package.json"));
+  return existsSync10(join31(dir, "SKILL.md")) || existsSync10(join31(dir, "skill.json")) || existsSync10(join31(dir, "package.json"));
 }
 function physicalImportPath(path) {
   let ancestor = resolve20(path);
@@ -46958,14 +47171,14 @@ function physicalImportPath(path) {
     suffix.unshift(basename11(ancestor));
     ancestor = dirname20(ancestor);
   }
-  return join30(realpathSync13(ancestor), ...suffix);
+  return join31(realpathSync13(ancestor), ...suffix);
 }
 function assertDisjointImportPaths(source, destination) {
   const sourcePath = realpathSync13(source);
   const destinationPath = physicalImportPath(destination);
   const contains2 = (parent, child) => {
     const path = relative7(parent, child);
-    return path === "" || !isAbsolute20(path) && path !== ".." && !path.startsWith(`..${sep9}`);
+    return path === "" || !isAbsolute20(path) && path !== ".." && !path.startsWith(`..${sep10}`);
   };
   if (contains2(sourcePath, destinationPath) || contains2(destinationPath, sourcePath)) {
     throw new Error("Source and destination skill directories must not overlap");
@@ -46984,11 +47197,11 @@ function portPortableSkill(sourcePath, options = {}) {
     const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename11(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
-  const readOnlyDestination = join30(resolvePortableSkillsRoot(options, false), skillName);
+  const readOnlyDestination = join31(resolvePortableSkillsRoot(options, false), skillName);
   assertPortableAuthoringPath(readOnlyDestination, options);
   assertDisjointImportPaths(absoluteSource, readOnlyDestination);
   const root2 = getPortableSkillsRoot(options);
-  const destination = join30(root2, skillName);
+  const destination = join31(root2, skillName);
   assertPortableAuthoringPath(destination, options);
   assertDisjointImportPaths(absoluteSource, destination);
   if (existsSync10(destination)) {
@@ -47033,13 +47246,13 @@ function buildCorpusManifest(input, name) {
 function writeCorpusSkill(input, options = {}) {
   const name = normalizePortableSkillName(input.name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join30(readOnlyRoot, name), options);
+  assertPortableAuthoringPath(join31(readOnlyRoot, name), options);
   const root2 = getPortableSkillsRoot(options);
-  const skillPath = join30(root2, name);
+  const skillPath = join31(root2, name);
   assertPortableAuthoringPath(skillPath, options);
   const created = !existsSync10(skillPath);
   mkdirSync8(skillPath, { recursive: true });
-  writeFileSync7(join30(skillPath, "SKILL.md"), input.skillMd);
+  writeFileSync7(join31(skillPath, "SKILL.md"), input.skillMd);
   const manifest = buildCorpusManifest(input, name);
   writeSkillJsonWithHash(skillPath, manifest);
   return { name, path: skillPath, manifest, created };
@@ -47047,22 +47260,22 @@ function writeCorpusSkill(input, options = {}) {
 function installCorpusSkillAtomically(input, options = {}) {
   const name = normalizePortableSkillName(input.name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join30(readOnlyRoot, name), options);
+  assertPortableAuthoringPath(join31(readOnlyRoot, name), options);
   const root2 = getPortableSkillsRoot(options);
-  const target = join30(root2, name);
+  const target = join31(root2, name);
   assertPortableAuthoringPath(target, options);
   const created = !existsSync10(target);
   mkdirSync8(root2, { recursive: true });
-  const staging = mkdtempSync(join30(root2, `.pull-${name}-`));
+  const staging = mkdtempSync(join31(root2, `.pull-${name}-`));
   let moved = false;
   let backup = null;
   try {
-    writeFileSync7(join30(staging, "SKILL.md"), input.skillMd);
+    writeFileSync7(join31(staging, "SKILL.md"), input.skillMd);
     const manifest = buildCorpusManifest(input, name);
     writeSkillJsonWithHash(staging, manifest);
     if (existsSync10(target)) {
-      backup = mkdtempSync(join30(root2, `.pull-backup-${name}-`));
-      renameSync5(target, join30(backup, name));
+      backup = mkdtempSync(join31(root2, `.pull-backup-${name}-`));
+      renameSync5(target, join31(backup, name));
       moved = true;
     }
     renameSync5(staging, target);
@@ -47071,9 +47284,9 @@ function installCorpusSkillAtomically(input, options = {}) {
     return { name, path: target, manifest, created };
   } catch (error) {
     rmSync2(staging, { recursive: true, force: true });
-    if (moved && backup && existsSync10(join30(backup, name))) {
+    if (moved && backup && existsSync10(join31(backup, name))) {
       try {
-        renameSync5(join30(backup, name), target);
+        renameSync5(join31(backup, name), target);
       } catch {}
     }
     throw error;
@@ -47086,8 +47299,8 @@ function validatePortableSkillDirectory(name, skillPath) {
   const warnings = [...base.warnings];
   let manifest;
   if (existsSync10(skillPath)) {
-    const skillJsonPath = join30(skillPath, "skill.json");
-    const skillMdPath = join30(skillPath, "SKILL.md");
+    const skillJsonPath = join31(skillPath, "skill.json");
+    const skillMdPath = join31(skillPath, "SKILL.md");
     if (!existsSync10(skillJsonPath) && !existsSync10(skillMdPath)) {
       add3(issues, "portable.manifest_missing", "Missing portable manifest: expected SKILL.md frontmatter and/or skill.json");
     }
@@ -47107,7 +47320,7 @@ function validatePortableSkillDirectory(name, skillPath) {
         add3(issues, "portable.version_missing", "Portable manifest missing version");
       }
       const contractIssues = validatePortableManifestContract(manifest, {
-        strict: existsSync10(join30(skillPath, "skill.json")),
+        strict: existsSync10(join31(skillPath, "skill.json")),
         skillPath
       });
       for (const issue of contractIssues)
@@ -47147,7 +47360,7 @@ function validatePortableSkillDirectory(name, skillPath) {
               add3(issues, "portable.command_entry_unsafe", `Command '${command.name}' entry '${command.entry}' must stay inside the skill directory`);
               continue;
             }
-            const entryPath = join30(skillPath, command.entry);
+            const entryPath = join31(skillPath, command.entry);
             if (!existsSync10(entryPath))
               add3(issues, "portable.command_entry_missing", `Command '${command.name}' entry '${command.entry}' is missing`);
             else if (statSync10(entryPath).isDirectory())
@@ -47158,7 +47371,7 @@ function validatePortableSkillDirectory(name, skillPath) {
     } catch (error) {
       add3(issues, "portable.manifest_invalid", error.message);
     }
-    if (manifest?.kind !== "instruction" && !existsSync10(join30(skillPath, "AGENTS.md"))) {
+    if (manifest?.kind !== "instruction" && !existsSync10(join31(skillPath, "AGENTS.md"))) {
       add3(issues, "portable.agents_missing", "Missing AGENTS.md with build-out instructions for coding agents");
     }
   }
@@ -47194,12 +47407,12 @@ async function runPortableSkill(name, args, options = {}) {
   if (!isSafeRelativePath2(command.entry)) {
     return { exitCode: 1, error: `Portable skill '${name}' command entry is unsafe` };
   }
-  const entryPath = join30(skill.path, command.entry);
+  const entryPath = join31(skill.path, command.entry);
   if (!existsSync10(entryPath)) {
     return { exitCode: 1, error: `Entry point '${command.entry}' not found in portable skill '${name}'` };
   }
-  const pkgPath = join30(skill.path, "package.json");
-  const nodeModules = join30(skill.path, "node_modules");
+  const pkgPath = join31(skill.path, "package.json");
+  const nodeModules = join31(skill.path, "node_modules");
   if (existsSync10(pkgPath) && !existsSync10(nodeModules) && hasPackageDependencies(pkgPath)) {
     const install = Bun.spawn(["bun", "install", "--no-save"], {
       cwd: skill.path,
@@ -47271,7 +47484,7 @@ function isSkillsOwnershipMarker(marker) {
   return typeof marker === "object" && marker !== null && Object.hasOwn(marker, "managedBy") && marker.managedBy === SYNC_MARKER_MANAGED_BY;
 }
 function hasSkillsOwnershipMarker(dir) {
-  const path = join31(dir, SYNC_MARKER_FILE);
+  const path = join32(dir, SYNC_MARKER_FILE);
   try {
     if (!lstatSync25(path).isFile())
       return false;
@@ -47295,9 +47508,9 @@ function resolveSyncAgents(arg) {
 function agentGlobalSkillsDir(agent, homeDir3 = homedir5()) {
   switch (agent) {
     case "opencode":
-      return join31(homeDir3, ".config", "opencode", "skills");
+      return join32(homeDir3, ".config", "opencode", "skills");
     default:
-      return join31(homeDir3, `.${agent}`, "skills");
+      return join32(homeDir3, `.${agent}`, "skills");
   }
 }
 function adaptSkillMdForAgent(skillMd, agent) {
@@ -47356,7 +47569,7 @@ function resolveSyncCorpus(options = {}) {
 function packageSourceRoots(source) {
   const roots = [];
   for (const sub of ["skills"]) {
-    const candidate2 = join31(source, sub);
+    const candidate2 = join32(source, sub);
     if (existsSync11(candidate2) && isDirectory(candidate2))
       roots.push(candidate2);
   }
@@ -47372,10 +47585,10 @@ function containsSkillDirectories(path) {
     return false;
   }
   return entries.some((entry) => {
-    const candidate2 = join31(path, entry);
+    const candidate2 = join32(path, entry);
     if (!isDirectory(candidate2))
       return false;
-    return existsSync11(join31(candidate2, "SKILL.md")) || existsSync11(join31(candidate2, "skill.json")) || existsSync11(join31(candidate2, "package.json"));
+    return existsSync11(join32(candidate2, "SKILL.md")) || existsSync11(join32(candidate2, "skill.json")) || existsSync11(join32(candidate2, "package.json"));
   });
 }
 function isDirectory(path) {
@@ -47415,7 +47628,7 @@ function syncSkillsToAgents(options = {}) {
         actions.push({
           skill: name,
           agent,
-          path: join31(agentGlobalSkillsDir(agent, homeDir3), name, "SKILL.md"),
+          path: join32(agentGlobalSkillsDir(agent, homeDir3), name, "SKILL.md"),
           action: "skip",
           reason: "not found in this machine's corpus"
         });
@@ -47447,7 +47660,7 @@ function syncSkillsToAgents(options = {}) {
 }
 function writeManagedAgentSkill(params) {
   const homeDir3 = params.homeDir ?? homedir5();
-  const dir = join31(agentGlobalSkillsDir(params.agent, homeDir3), params.skill);
+  const dir = join32(agentGlobalSkillsDir(params.agent, homeDir3), params.skill);
   const result = writeManagedSkillDir(dir, params.skillMd, {
     skill: params.skill,
     source: params.source,
@@ -47470,8 +47683,8 @@ function writeManagedSkillDir(dir, skillMd, options) {
   return withCodexCorpusWrite(root2 ? [root2] : [], (assertCurrent) => writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent), options);
 }
 function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
-  const skillMdPath = join31(dir, "SKILL.md");
-  const markerPath = join31(dir, SYNC_MARKER_FILE);
+  const skillMdPath = join32(dir, "SKILL.md");
+  const markerPath = join32(dir, SYNC_MARKER_FILE);
   const dirExists = existsSync11(dir);
   const managed = hasSkillsOwnershipMarker(dir);
   const hasSkillMd = existsSync11(skillMdPath);
@@ -47509,11 +47722,11 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
     return { action, path: skillMdPath };
   const parentDir = dirname21(dir);
   mkdirSync9(parentDir, { recursive: true });
-  const transactionDir = mkdtempSync2(join31(parentDir, `.hasna-skills-write-${basename12(dir)}-`));
-  const candidateDir = join31(transactionDir, "candidate");
-  const backupDir = join31(transactionDir, "backup");
-  const candidateSkillMdPath = join31(candidateDir, "SKILL.md");
-  const candidateMarkerPath = join31(candidateDir, SYNC_MARKER_FILE);
+  const transactionDir = mkdtempSync2(join32(parentDir, `.hasna-skills-write-${basename12(dir)}-`));
+  const candidateDir = join32(transactionDir, "candidate");
+  const backupDir = join32(transactionDir, "backup");
+  const candidateSkillMdPath = join32(candidateDir, "SKILL.md");
+  const candidateMarkerPath = join32(candidateDir, SYNC_MARKER_FILE);
   const marker = {
     managedBy: SYNC_MARKER_MANAGED_BY,
     skill: options.skill,
@@ -47571,12 +47784,12 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
   return { action, path: skillMdPath };
 }
 function removeManagedAgentSkill(skill, agent, homeDir3 = homedir5(), options = {}) {
-  const dir = join31(agentGlobalSkillsDir(agent, homeDir3), skill);
+  const dir = join32(agentGlobalSkillsDir(agent, homeDir3), skill);
   const root2 = codexCorpusRootForPath(dir);
   return withCodexCorpusWrite(root2 ? [root2] : [], () => removeManagedAgentSkillUnlocked(skill, agent, homeDir3, options), options);
 }
 function removeManagedAgentSkillUnlocked(skill, agent, homeDir3 = homedir5(), options = {}) {
-  const dir = join31(agentGlobalSkillsDir(agent, homeDir3), skill);
+  const dir = join32(agentGlobalSkillsDir(agent, homeDir3), skill);
   if (!hasSkillsOwnershipMarker(dir))
     return false;
   rmSync3(dir, { recursive: true, force: true });
@@ -47584,7 +47797,7 @@ function removeManagedAgentSkillUnlocked(skill, agent, homeDir3 = homedir5(), op
 }
 function sourceSkillMd(skillPath, name, description, kind, preferBundledDocs = false) {
   if (kind === undefined || kind === "instruction" || preferBundledDocs) {
-    const skillMdPath = join31(skillPath, "SKILL.md");
+    const skillMdPath = join32(skillPath, "SKILL.md");
     if (existsSync11(skillMdPath))
       return readFileSync19(skillMdPath, "utf-8");
   }
@@ -47617,7 +47830,7 @@ function normalizeSkillName(name) {
 
 // src/lib/registry.ts
 import { existsSync as existsSync12, readFileSync as readFileSync20, readdirSync as readdirSync12 } from "fs";
-import { join as join32 } from "path";
+import { join as join33 } from "path";
 
 // src/lib/registry-merge.ts
 var SKILL_SOURCE_PRECEDENCE = {
@@ -47827,7 +48040,7 @@ function discoverSkillsInDir(dir, source = "custom") {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillMdPath = join32(dir, entry.name, "SKILL.md");
+      const skillMdPath = join33(dir, entry.name, "SKILL.md");
       if (!existsSync12(skillMdPath))
         continue;
       let content;
@@ -47847,7 +48060,7 @@ function discoverSkillsInDir(dir, source = "custom") {
         category: fm.category || "Development Tools",
         tags: fm.tags || [],
         ...fm.kind ? { kind: fm.kind } : {},
-        ...isHostedMetadataSkillDir(join32(dir, entry.name)) ? { serverOwned: true } : {},
+        ...isHostedMetadataSkillDir(join33(dir, entry.name)) ? { serverOwned: true } : {},
         source
       });
     }
@@ -47863,8 +48076,8 @@ function findExtensionSkillPath(name) {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillDir = join32(config.extensionsDir, entry.name);
-      const skillMdPath = join32(skillDir, "SKILL.md");
+      const skillDir = join33(config.extensionsDir, entry.name);
+      const skillMdPath = join33(skillDir, "SKILL.md");
       if (!existsSync12(skillMdPath))
         continue;
       let content;
@@ -47935,7 +48148,7 @@ function getAllTags(catalog) {
 
 // src/lib/project-state.ts
 import { existsSync as existsSync13, mkdirSync as mkdirSync10, readFileSync as readFileSync21, writeFileSync as writeFileSync9 } from "fs";
-import { join as join33 } from "path";
+import { join as join34 } from "path";
 var VALID_PIN_SOURCES = [
   "official",
   "custom",
@@ -47950,10 +48163,10 @@ var SKILLS_PROJECT_DIR = ".skills";
 var PROJECT_CONFIG_FILE = "project.json";
 var DEFAULT_EXPORT_DIR = ".skills/exports";
 function getProjectStateDir(targetDir = process.cwd()) {
-  return join33(targetDir, SKILLS_PROJECT_DIR);
+  return join34(targetDir, SKILLS_PROJECT_DIR);
 }
 function getProjectConfigPath(targetDir = process.cwd()) {
-  return join33(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
+  return join34(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
 }
 function loadProjectConfig(targetDir = process.cwd()) {
   const path = getProjectConfigPath(targetDir);
@@ -48082,7 +48295,7 @@ function getSkillPath(name) {
   const extensionPath = findExtensionSkillPath(skillName);
   if (extensionPath)
     return extensionPath;
-  return join34(getPortableSkillsRoot(), skillName);
+  return join35(getPortableSkillsRoot(), skillName);
 }
 function getCanonicalSkillName(name) {
   return getSkill(name)?.name ?? resolveSkillAlias(normalizeSkillSlug(name));
@@ -48145,7 +48358,7 @@ function createLocalSkillManifest(name, generateSkillMd) {
   if (!existsSync14(sourcePath))
     return null;
   let skillMd = "";
-  const skillMdPath = join34(sourcePath, "SKILL.md");
+  const skillMdPath = join35(sourcePath, "SKILL.md");
   if (existsSync14(skillMdPath)) {
     skillMd = readFileSync22(skillMdPath, "utf-8");
   } else if (generateSkillMd) {
@@ -48219,16 +48432,16 @@ function getAgentSkillsDir(agent, scope = "global", projectDir) {
   const base = projectDir || process.cwd();
   switch (agent) {
     case "pi":
-      return scope === "project" ? join34(base, ".pi", "skills") : join34(homedir6(), ".pi", "agent", "skills");
+      return scope === "project" ? join35(base, ".pi", "skills") : join35(homedir6(), ".pi", "agent", "skills");
     case "opencode":
-      return scope === "project" ? join34(base, ".opencode", "skills") : join34(homedir6(), ".config", "opencode", "skills");
+      return scope === "project" ? join35(base, ".opencode", "skills") : join35(homedir6(), ".config", "opencode", "skills");
     default:
-      return scope === "project" ? join34(base, `.${agent}`, "skills") : join34(homedir6(), `.${agent}`, "skills");
+      return scope === "project" ? join35(base, `.${agent}`, "skills") : join35(homedir6(), `.${agent}`, "skills");
   }
 }
 function getAgentSkillPath(name, agent, scope = "global", projectDir) {
   const skillName = normalizeSkillName(getCanonicalSkillName(name));
-  return join34(getAgentSkillsDir(agent, scope, projectDir), skillName);
+  return join35(getAgentSkillsDir(agent, scope, projectDir), skillName);
 }
 function installSkillForAgent(name, options, generateSkillMd) {
   assertNativeExportAllowed();
@@ -48271,7 +48484,7 @@ function removeSkillForAgentUnlocked(name, options) {
 }
 function resolveAgentSkillMd(name, generateSkillMd) {
   const sourcePath = getSkillPath(name);
-  const skillMdPath = join34(sourcePath, "SKILL.md");
+  const skillMdPath = join35(sourcePath, "SKILL.md");
   if (existsSync14(skillMdPath))
     return readFileSync22(skillMdPath, "utf-8");
   if (generateSkillMd)
@@ -48306,7 +48519,7 @@ function generateMinimalSkillMd(name) {
     "---",
     ""
   ].filter(Boolean);
-  const fallbackDoc = readFileIfExists(join34(sourcePath, "README.md")) || readFileIfExists(join34(sourcePath, "CLAUDE.md"));
+  const fallbackDoc = readFileIfExists(join35(sourcePath, "README.md")) || readFileIfExists(join35(sourcePath, "CLAUDE.md"));
   if (fallbackDoc)
     return `${frontmatter.join(`
 `)}${fallbackDoc.trim()}
@@ -48325,7 +48538,7 @@ skills run ${canonicalName}
 `;
 }
 function readBundledSkillVersion(name) {
-  const pkgPath = join34(getSkillPath(name), "package.json");
+  const pkgPath = join35(getSkillPath(name), "package.json");
   if (!existsSync14(pkgPath))
     return "unknown";
   try {
@@ -48380,7 +48593,7 @@ function selectSkillDoc(docs, file) {
 function isInstructionSkillDir(skillPath, meta) {
   if (meta?.kind === "instruction")
     return true;
-  const skillMdPath = join35(skillPath, "SKILL.md");
+  const skillMdPath = join36(skillPath, "SKILL.md");
   if (!existsSync15(skillMdPath))
     return false;
   try {
@@ -48410,9 +48623,9 @@ function getSkillDocs(name) {
   if (!existsSync15(skillPath))
     return null;
   return {
-    skillMd: readIfExists(join35(skillPath, "SKILL.md")),
-    readme: readIfExists(join35(skillPath, "README.md")),
-    claudeMd: readIfExists(join35(skillPath, "CLAUDE.md"))
+    skillMd: readIfExists(join36(skillPath, "SKILL.md")),
+    readme: readIfExists(join36(skillPath, "README.md")),
+    claudeMd: readIfExists(join36(skillPath, "CLAUDE.md"))
   };
 }
 function getSkillBestDoc(name, file) {
@@ -48428,14 +48641,14 @@ function getSkillRequirements(name) {
     return null;
   const texts = [];
   for (const file of ["SKILL.md", "README.md", "CLAUDE.md", ".env.example", ".env.local.example"]) {
-    const content = readIfExists(join35(skillPath, file));
+    const content = readIfExists(join36(skillPath, file));
     if (content)
       texts.push(content);
   }
   const meta = getSkill(name);
   let dependencies = {};
   try {
-    dependencies = JSON.parse(readFileSync23(join35(skillPath, "package.json"), "utf8")).dependencies || {};
+    dependencies = JSON.parse(readFileSync23(join36(skillPath, "package.json"), "utf8")).dependencies || {};
   } catch {}
   return getSkillRequirementsFromContent(name, texts, dependencies, meta);
 }
@@ -48497,7 +48710,7 @@ async function runSkill(name, args, options = {}) {
       error: `Skill '${name}' is an instruction skill (kind: instruction) and is not runnable. Instruction skills are consumed by coding agents via SKILL.md, not executed with 'skills run'.`
     };
   }
-  const pkgPath = join35(skillPath, "package.json");
+  const pkgPath = join36(skillPath, "package.json");
   if (!existsSync15(pkgPath)) {
     return { exitCode: 1, error: `No package.json in skill '${name}'` };
   }
@@ -48517,12 +48730,12 @@ async function runSkill(name, args, options = {}) {
   } catch {
     return { exitCode: 1, error: `Failed to parse package.json for skill '${name}'` };
   }
-  const entryPath = join35(skillPath, entryPoint2);
+  const entryPath = join36(skillPath, entryPoint2);
   if (!existsSync15(entryPath)) {
     return { exitCode: 1, error: `Entry point '${entryPoint2}' not found in skill '${name}'` };
   }
   const env = { ...process.env, ...options.env };
-  if (!existsSync15(join35(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
+  if (!existsSync15(join36(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
     const failure = await prepareSkillDependencies(skillPath, env, options.preparationTimeoutMs);
     if (failure)
       return failure;
@@ -48600,10 +48813,10 @@ function generateSkillMd(name) {
     "---"
   ].join(`
 `);
-  const readme = readIfExists(join35(skillPath, "README.md"));
-  const claudeMd = readIfExists(join35(skillPath, "CLAUDE.md"));
+  const readme = readIfExists(join36(skillPath, "README.md"));
+  const claudeMd = readIfExists(join36(skillPath, "CLAUDE.md"));
   let cliCommand = null;
-  const pkgPath = join35(skillPath, "package.json");
+  const pkgPath = join36(skillPath, "package.json");
   if (existsSync15(pkgPath)) {
     try {
       const pkg = JSON.parse(readFileSync23(pkgPath, "utf-8"));
@@ -48887,7 +49100,7 @@ async function executeSelectedLocal(selected, options = {}) {
         throw new SkillSelectionError("INVALID_SECRET_BINDINGS", "Explicit environment values must be bounded strings without NUL bytes.");
       secretEnv[name] = value;
     }
-  const runDirectory = mkdtempSync3(join36(tmpdir(), "skills-execution-"));
+  const runDirectory = mkdtempSync3(join37(tmpdir(), "skills-execution-"));
   const paths = new SkillEntryPaths;
   for (const entry of entries) {
     paths.add(entry.path, 100, () => {
@@ -48895,7 +49108,7 @@ async function executeSelectedLocal(selected, options = {}) {
     }, () => {
       throw new SkillSelectionError("INVALID_BUNDLE_PATH", "The execution bundle path exceeds its limit.");
     });
-    const destination = join36(runDirectory, entry.path);
+    const destination = join37(runDirectory, entry.path);
     mkdirSync11(dirname22(destination), { recursive: true, mode: 448 });
     writeFileSync10(destination, entry.bytes, { flag: "wx", mode: entry.mode & 511 });
   }
@@ -48923,20 +49136,20 @@ async function executeSelectedLocal(selected, options = {}) {
   }
   if (bindings)
     secretEnv = await resolveSelectedSecrets(bindings, options.createSecretsClient);
-  const result = await subprocess([executable2, ...runtimeName === "bun" ? ["--no-env-file"] : [], join36(runDirectory, declaredEntry), ...args], runDirectory, { ...env, ...secretEnv }, input, timeoutMs);
+  const result = await subprocess([executable2, ...runtimeName === "bun" ? ["--no-env-file"] : [], join37(runDirectory, declaredEntry), ...args], runDirectory, { ...env, ...secretEnv }, input, timeoutMs);
   result.stdout = redactExecutionSecrets(result.stdout, secretEnv);
   result.stderr = redactExecutionSecrets(result.stderr, secretEnv);
   const receipt = {
     selection: selection2,
     target: "local",
     runtime: runtimeName,
-    inputDigest: `sha256:${createHash24("sha256").update(input).digest("hex")}`,
+    inputDigest: `sha256:${createHash25("sha256").update(input).digest("hex")}`,
     runDirectory,
     ...executionGrant ? { executionGrant } : {},
     ...bindings ? { secretBinding: { schema: bindings.schema, selection: bindings.selection, consumer: bindings.consumer, secretsAuthority: bindings.secretsAuthority, bindings: bindings.bindings } } : {},
     ...result
   };
-  writeFileSync10(join36(runDirectory, ".execution-receipt.json"), JSON.stringify({ ...receipt, stdout: undefined, stderr: undefined }), { mode: 384 });
+  writeFileSync10(join37(runDirectory, ".execution-receipt.json"), JSON.stringify({ ...receipt, stdout: undefined, stderr: undefined }), { mode: 384 });
   return receipt;
 }
 async function subprocess(command, cwd, env, input, timeoutMs) {
@@ -49456,7 +49669,7 @@ var { booleanSelector, SelectorType: SelectorType2 } = require_config();
 var { setFeature: setFeature2 } = require_client2();
 var { httpSigningMiddlewareOptions } = require_dist_cjs2();
 var { Readable } = __require("stream");
-var { validate, parse: parse7 } = require_util();
+var { validate, parse: parse8 } = require_util();
 var { AwsRestXmlProtocol } = require_protocols2();
 var { NormalizedSchema } = require_schema4();
 var CONTENT_LENGTH_HEADER = "content-length";
@@ -58220,7 +58433,7 @@ var import_node_http_handler2 = __toESM(require_dist_cjs6(), 1);
 
 // node_modules/@aws-sdk/checksums/dist-cjs/submodules/sha/index.js
 var { toUint8Array: toUint8Array2, concatBytes } = require_serde();
-var { createHmac: createHmac2, createHash: createHash26 } = __require("crypto");
+var { createHmac: createHmac2, createHash: createHash27 } = __require("crypto");
 var { Sha256: Sha2562, Sha256Js, Sha256Node } = require_checksum();
 var BLOCK2 = 64;
 var DIGEST_LENGTH = 20;
@@ -58389,7 +58602,7 @@ class Sha1Js {
 }
 var hasNativeCrypto = (() => {
   try {
-    createHash26("sha1");
+    createHash27("sha1");
     return true;
   } catch {
     return false;
@@ -58429,7 +58642,7 @@ function buildNativeClass() {
       this.finished = false;
     }
     createHash() {
-      return this.secret ? createHmac2("sha1", toBuffer(this.secret)) : createHash26("sha1");
+      return this.secret ? createHmac2("sha1", toBuffer(this.secret)) : createHash27("sha1");
     }
   };
 }
@@ -59001,7 +59214,7 @@ import { mkdirSync as mkdirSync13 } from "fs";
 import { dirname as dirname26 } from "path";
 
 // src/server/database-url.ts
-import { isAbsolute as isAbsolute21, join as join38 } from "path";
+import { isAbsolute as isAbsolute21, join as join39 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 var DEFAULT_SQLITE_FILENAME2 = "server.db";
 var SQLITE_MEMORY_PATH = ":memory:";
@@ -59010,7 +59223,7 @@ var SQLITE_SCHEMES = new Set(["sqlite", "sqlite3", "file"]);
 var MEMORY_SCHEMES = new Set(["memory"]);
 var SQLITE_EXTENSIONS = [".db", ".sqlite", ".sqlite3", ".db3"];
 function defaultSqlitePath() {
-  return join38(getDataDir(), DEFAULT_SQLITE_FILENAME2);
+  return join39(getDataDir(), DEFAULT_SQLITE_FILENAME2);
 }
 function resolveDatabaseTarget(raw) {
   const value = raw?.trim();
@@ -59037,7 +59250,7 @@ function resolveDatabaseTarget(raw) {
     throw new Error(`unsupported database scheme "${scheme}:". Supported: postgres://, postgresql://, sqlite:, file:, ` + `an absolute or relative path to a .db/.sqlite file, ":memory:", or "memory:" (non-durable, tests only). ` + `Leave the setting empty to use the default SQLite database at ${defaultSqlitePath()}.`);
   }
   if (looksLikeSqlitePath(value)) {
-    const path = isAbsolute21(value) ? value : join38(process.cwd(), value);
+    const path = isAbsolute21(value) ? value : join39(process.cwd(), value);
     return { kind: "sqlite", path, durable: true, label: `sqlite (${path})` };
   }
   throw new Error(`could not resolve a database backend from "${value}". Use postgres://\u2026, sqlite:\u2026, an absolute or ` + `relative path ending in ${SQLITE_EXTENSIONS.join("/")}, ":memory:", or leave it empty for the ` + `default SQLite database at ${defaultSqlitePath()}.`);
@@ -59061,7 +59274,7 @@ function sqlitePathFromUrl(value, scheme) {
     }
     return rest.slice(2).replace(/^\/\/+/, "/");
   }
-  return isAbsolute21(rest) ? rest : join38(process.cwd(), rest);
+  return isAbsolute21(rest) ? rest : join39(process.cwd(), rest);
 }
 function looksLikeSqlitePath(value) {
   if (value.includes("/"))
@@ -59294,12 +59507,12 @@ class PostgresSkillSelectionStore {
 // src/server/sqlite-store.ts
 import { randomUUID as randomUUID8 } from "crypto";
 import { mkdirSync as mkdirSync12, readFileSync as readFileSync25, readdirSync as readdirSync13 } from "fs";
-import { dirname as dirname25, join as join40 } from "path";
+import { dirname as dirname25, join as join41 } from "path";
 
 // src/server/auth.ts
-import { createHash as createHash27 } from "crypto";
+import { createHash as createHash28 } from "crypto";
 function hashApiKey(token) {
-  return createHash27("sha256").update(token).digest("hex");
+  return createHash28("sha256").update(token).digest("hex");
 }
 function bearerToken(request2) {
   const header = request2.headers.get("authorization") || "";
@@ -59353,15 +59566,15 @@ function permitsSkillsRoute(principal, method, resource) {
 
 // src/server/migrations-dir.ts
 import { existsSync as existsSync16 } from "fs";
-import { dirname as dirname24, join as join39 } from "path";
+import { dirname as dirname24, join as join40 } from "path";
 var MIGRATION_DIALECTS = ["postgres", "sqlite"];
 var MAX_WALK_UP = 6;
 function findMigrationsRoot(startDirs = defaultStartDirs()) {
   for (const start of startDirs) {
     let dir = start;
     for (let level = 0;level < MAX_WALK_UP; level += 1) {
-      const candidate2 = join39(dir, "migrations");
-      if (MIGRATION_DIALECTS.some((dialect) => existsSync16(join39(candidate2, dialect))))
+      const candidate2 = join40(dir, "migrations");
+      if (MIGRATION_DIALECTS.some((dialect) => existsSync16(join40(candidate2, dialect))))
         return candidate2;
       const parent = dirname24(dir);
       if (parent === dir)
@@ -59375,7 +59588,7 @@ function resolveMigrationsDir(dialect, root4 = findMigrationsRoot()) {
   if (!root4) {
     throw new Error(`could not locate the migrations directory for dialect "${dialect}". ` + `Expected a migrations/${dialect}/ folder alongside the package root.`);
   }
-  const dir = join39(root4, dialect);
+  const dir = join40(root4, dialect);
   if (!existsSync16(dir)) {
     throw new Error(`migrations directory not found: ${dir}`);
   }
@@ -59471,6 +59684,7 @@ function rowToSkill(row) {
     revisionNumber: Number(row.revision_number ?? 0),
     ...row.tombstoned_at ? { tombstonedAt: dateString(row.tombstoned_at) } : {},
     ...row.tombstone_purge_after ? { tombstonePurgeAfter: dateString(row.tombstone_purge_after) } : {},
+    ...typeof row.authorization_epoch === "string" ? { authorizationEpoch: row.authorization_epoch } : {},
     lifecycle: row.lifecycle === "archived" ? "archived" : "active",
     ...row.archived_at ? { archivedAt: dateString(row.archived_at) } : {},
     ...row.archive_reason ? { archiveReason: String(row.archive_reason) } : {},
@@ -59482,6 +59696,7 @@ function rowToPublishedSelectionState(row) {
     slug: String(row.slug),
     version: String(row.version),
     current: row.skill_exists ? {
+      ...typeof row.authorization_epoch === "string" ? { authorizationEpoch: row.authorization_epoch } : {},
       lifecycle: row.lifecycle === "archived" ? "archived" : "active",
       ...row.tombstoned_at ? { tombstonedAt: dateString(row.tombstoned_at) } : {}
     } : null,
@@ -59621,7 +59836,7 @@ function validOperatorScopeEnrollmentInput(input) {
 }
 
 // src/lib/revision.ts
-import { createHash as createHash28 } from "crypto";
+import { createHash as createHash29 } from "crypto";
 var REVISION_ID_PATTERN = /^[0-9a-f]{64}$/;
 function revisionIdOf(content) {
   const canonicalContent = {
@@ -59642,8 +59857,8 @@ function revisionIdOf(content) {
     canonicalContent.archiveReason = content.archiveReason ?? null;
     canonicalContent.replacementSlug = content.replacementSlug ?? null;
   }
-  const canonical6 = JSON.stringify(canonicalContent);
-  return createHash28("sha256").update(canonical6).digest("hex");
+  const canonical7 = JSON.stringify(canonicalContent);
+  return createHash29("sha256").update(canonical7).digest("hex");
 }
 function revisionIdOfRecord(record4) {
   return revisionIdOf(record4);
@@ -60125,7 +60340,7 @@ class SqliteSkillsStore {
           continue;
         insertTag.run(orgId, input.slug, tag);
       }
-      return rowToSkill(row);
+      return this.getSkillSync(input.principal, input.slug);
     })();
   }
   async listSkills(principal) {
@@ -60162,7 +60377,7 @@ class SqliteSkillsStore {
       const row = this.get("UPDATE skills_registry SET lifecycle=?, archived_at=?, archive_reason=?, replacement_slug=?, revision_id=?, revision_number=revision_number+1, updated_at=? WHERE org_id=? AND slug=? AND tombstoned_at IS NULL AND revision_id=? RETURNING *", [next2.lifecycle, next2.archivedAt ?? null, next2.archiveReason ?? null, next2.replacementSlug ?? null, revisionIdOfRecord(next2), next2.updatedAt, principal.orgId, slug, current.revisionId]);
       if (!row)
         throw new SkillRevisionConflictError(slug, expectedRevisionId, this.getSkillSync(principal, slug)?.revisionId ?? null);
-      return rowToSkill(row);
+      return this.getSkillSync(principal, slug);
     }).immediate();
   }
   getSkillSync(principal, slug) {
@@ -60233,7 +60448,7 @@ class SqliteSkillsStore {
          SET tombstoned_at = ?, tombstone_purge_after = ?, updated_at = ?
          WHERE org_id = ? AND slug = ?
          RETURNING *`, [tombstonedAt, purgeAfter, tombstonedAt, principal.orgId, slug]);
-      return rowToSkill(row);
+      return this.getSkillSync(principal, slug);
     })();
   }
   async purgeExpiredTombstones(principal) {
@@ -60270,7 +60485,7 @@ class SqliteSkillsStore {
       return [];
     const requested = JSON.stringify(selections2.map(({ slug, version: version2 }) => ({ slug, version: version2 })));
     return this.all(`SELECT json_extract(q.value, '$.slug') AS slug, json_extract(q.value, '$.version') AS version,
-         r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at,
+         r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at, r.authorization_epoch,
          v.bundle_sha256, b.sha256 IS NOT NULL AS bundle_available
        FROM json_each(?) q
        LEFT JOIN skills_registry r ON r.org_id = ? AND r.slug = json_extract(q.value, '$.slug')
@@ -60347,7 +60562,7 @@ function applySqliteMigrations(db, migrationsDir = resolveMigrationsDir("sqlite"
   const appliedNow = [];
   for (const file of files) {
     const version2 = file.replace(/\.sql$/, "");
-    const text2 = readFileSync25(join40(migrationsDir, file), "utf8");
+    const text2 = readFileSync25(join41(migrationsDir, file), "utf8");
     const apply = db.transaction(() => {
       const already = db.query("SELECT 1 AS present FROM schema_migrations WHERE version = ? LIMIT 1").get(version2);
       if (already)
@@ -60727,7 +60942,7 @@ function nextMonthPrefix(monthPrefix) {
 }
 
 // src/server/skills-api.ts
-import { createHash as createHash29 } from "crypto";
+import { createHash as createHash30 } from "crypto";
 var SLUG_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
 var SHA256_HEX2 = /^[0-9a-f]{64}$/;
 var MAX_SLUG_LENGTH = 128;
@@ -60917,7 +61132,7 @@ async function parsePublishRequest(request2, config) {
     if (bundleBytes.byteLength === 0) {
       throw new SkillRequestError(400, "BUNDLE_EMPTY", "the uploaded bundle is empty");
     }
-    const sha2562 = createHash29("sha256").update(bundleBytes).digest("hex");
+    const sha2562 = createHash30("sha256").update(bundleBytes).digest("hex");
     const claimed = optionalString(manifest.bundleSha256);
     if (claimed)
       assertSha2562(claimed);
@@ -61032,7 +61247,7 @@ async function readPublishedBundle(store, artifactStorage, principal, slug) {
   if (!bytes) {
     throw new SkillRequestError(503, "BUNDLE_BACKEND_UNAVAILABLE", "bundle storage backend unavailable");
   }
-  const actual = createHash29("sha256").update(bytes).digest("hex");
+  const actual = createHash30("sha256").update(bytes).digest("hex");
   if (actual !== record4.bundleSha256) {
     throw new SkillRequestError(500, "BUNDLE_DIGEST_DRIFT", `stored bundle for '${slug}' hashes to ${actual} but was published as ${record4.bundleSha256}`);
   }
@@ -61180,11 +61395,11 @@ async function readSkillVersionBundle(store, artifactStorage, principal, slug, v
   const bytes = await artifactStorage.readBundle(bundle2);
   if (!bytes)
     throw new SkillRequestError(503, "BUNDLE_BACKEND_UNAVAILABLE", "bundle storage backend unavailable");
-  const actual = createHash29("sha256").update(bytes).digest("hex");
+  const actual = createHash30("sha256").update(bytes).digest("hex");
   if (actual !== found.bundleSha256) {
     throw new SkillRequestError(500, "BUNDLE_DIGEST_DRIFT", `stored bundle for '${slug}@${version2}' hashes to ${actual} but was published as ${found.bundleSha256}`);
   }
-  return { version: found, bytes };
+  return { version: found, bytes, authorizationEpoch: resolved.record.authorizationEpoch };
 }
 function publishVersionOf(manifest) {
   const version2 = optionalString(manifest.version);
@@ -61424,6 +61639,7 @@ async function validatePublished(store, principal, selections2) {
     if (!state2.bundleAvailable)
       throw new SkillRequestError(503, "SELECTION_BUNDLE_UNAVAILABLE", "Selected bundle is unavailable");
   }
+  return states;
 }
 async function body2(request2, limit) {
   if (!request2.body)
@@ -61484,6 +61700,7 @@ async function handleProfileApi(store, principal, request2, parts, config) {
       capabilities: [
         "skills.registry",
         "skills.versions",
+        "skills.session-pin-renewal",
         ...store.selectionStore && store.executionGrantStore ? ["skills.execution-grants"] : [],
         ...store.selectionStore ? ["skills.profiles", "skills.station-state"] : []
       ],
@@ -61529,6 +61746,7 @@ async function handleProfileApi(store, principal, request2, parts, config) {
     const authority2 = skillsApiRequestUrl(normalizeSkillsApiOrigin(config.publicBaseUrl), "/api/v1/").replace(/\/+$/, "");
     const revision = "x".repeat(128);
     const projected2 = resolvedProfileSnapshot({ id: id2, workspaceId: principal.orgId, revision, selections: selections2 }, authority2);
+    projected2.selections = projected2.selections.map((selection2) => ({ ...selection2, authorizationEpoch: "0".repeat(32) }));
     if (profileDocumentBytes(projected2) > MAX_RESOLVED_PROFILE_BYTES || profileDocumentBytes({ profileId: id2, profileRevision: revision, selections: selections2 }) > Math.min(config.requestBodyLimitBytes, MAX_PROFILE_DOCUMENT_BYTES)) {
       throw new SkillRequestError(413, "PROFILE_TOO_LARGE", "The complete resolved profile and station/session receipts must fit the advertised profile limits");
     }
@@ -61550,7 +61768,17 @@ async function handleProfileApi(store, principal, request2, parts, config) {
     const result = resolvedProfileSnapshot(profile2, authority2);
     if (result.selections.length > MAX_PROFILE_SELECTIONS || profileDocumentBytes(result) > MAX_RESOLVED_PROFILE_BYTES)
       throw new SkillRequestError(413, "PROFILE_TOO_LARGE", "Resolved profile exceeds the advertised profile limits");
-    await validatePublished(store, principal, profile2.selections);
+    const states = await validatePublished(store, principal, profile2.selections);
+    if (new URL(request2.url).searchParams.get("pinAuthorization") === "epoch-v1") {
+      result.selections = result.selections.map((selection2, index) => {
+        const epoch = states[index].current?.authorizationEpoch;
+        if (!epoch || !/^[a-f0-9]{32}$/.test(epoch))
+          throw new SkillRequestError(503, "PIN_AUTHORIZATION_UNAVAILABLE", "The selection lifecycle fence is unavailable");
+        return { ...selection2, authorizationEpoch: epoch };
+      });
+    }
+    if (profileDocumentBytes(result) > MAX_RESOLVED_PROFILE_BYTES)
+      throw new SkillRequestError(413, "PROFILE_TOO_LARGE", "Resolved profile exceeds the advertised profile limits");
     return json2(result, 200, profile2.revision);
   }
   if (resource === "stations" && parts.length === 3 && child === "state") {
@@ -61883,7 +62111,7 @@ class RuntimeExecutionStore {
 }
 
 // src/sdk/execution/admission.ts
-import { createHash as createHash31 } from "crypto";
+import { createHash as createHash32 } from "crypto";
 
 // src/sdk/execution/image-profile.ts
 class ImageProfileResolutionError extends Error {
@@ -62495,11 +62723,11 @@ function ownedAdmission(admission) {
   };
 }
 function digestInput(input) {
-  return createHash31("sha256").update(canonicalJson2(input)).digest("hex");
+  return createHash32("sha256").update(canonicalJson2(input)).digest("hex");
 }
 
 // src/sdk/execution/dispatchers/ecs.ts
-import { createHash as createHash32 } from "crypto";
+import { createHash as createHash33 } from "crypto";
 
 // src/sdk/execution/state-machine.ts
 var LEGAL_TRANSITIONS = {
@@ -65899,13 +66127,13 @@ function observedTask(states, taskArn) {
   return state2.lastStatus === "STOPPED" || LIVE_TASK_STATUSES.has(state2.lastStatus) ? state2 : undefined;
 }
 function clientTokenFor(runId3, attemptId) {
-  return createHash32("sha256").update(`${runId3}\x00${attemptId}`).digest("hex").slice(0, CLIENT_TOKEN_BYTES * 2);
+  return createHash33("sha256").update(`${runId3}\x00${attemptId}`).digest("hex").slice(0, CLIENT_TOKEN_BYTES * 2);
 }
 function startedByFor(runId3, attemptNumber) {
   return `skills-exec/${runId3}/a${attemptNumber}`;
 }
 function requestDigestFor(admission, attemptId) {
-  return createHash32("sha256").update(canonicalJson2({ admission, attemptId })).digest("hex");
+  return createHash33("sha256").update(canonicalJson2({ admission, attemptId })).digest("hex");
 }
 
 class EcsDispatcher {
@@ -66201,10 +66429,10 @@ function validText(value) {
 }
 
 // src/server/runtime-policy.ts
-import { createHash as createHash34, createHmac as createHmac3, timingSafeEqual as timingSafeEqual2 } from "crypto";
+import { createHash as createHash35, createHmac as createHmac3, timingSafeEqual as timingSafeEqual2 } from "crypto";
 
 // src/server/runtime-pure-contract.ts
-import { createHash as createHash33 } from "crypto";
+import { createHash as createHash34 } from "crypto";
 var PURE_DESCRIPTOR = Object.freeze({
   id: "regex-test.v1",
   runtime: "bun",
@@ -66228,7 +66456,7 @@ var PURE_LIMITS = Object.freeze({
   maxArtifactsBytes: 0,
   maxConcurrency: 1
 });
-var hash2 = (bytes) => createHash33("sha256").update(bytes).digest("hex");
+var hash2 = (bytes) => createHash34("sha256").update(bytes).digest("hex");
 var object7 = (v2) => {
   if (!v2 || typeof v2 !== "object" || Array.isArray(v2))
     throw Error("Pure contract requires an object");
@@ -66457,7 +66685,7 @@ function verifyRuntimeToken(token, key, admission, attempt, now = Date.now()) {
   const actual = Buffer.from(token);
   return actual.length === expected.length && timingSafeEqual2(actual, expected);
 }
-var hashBytes = (bytes) => createHash34("sha256").update(bytes).digest("hex");
+var hashBytes = (bytes) => createHash35("sha256").update(bytes).digest("hex");
 
 // src/server/runtime-api.ts
 async function createRuntimeService(options) {
@@ -67274,6 +67502,7 @@ class MemorySkillsStore {
       updatedAt: now,
       revisionId: revisionIdOfRecord(recordFieldsOf(input, carriedBundle, carriedSkillMd)),
       revisionNumber: (previous?.revisionNumber ?? 0) + 1,
+      authorizationEpoch: previous?.authorizationEpoch ?? randomUUID10().replaceAll("-", ""),
       lifecycle: previous?.lifecycle ?? "active",
       ...previous?.archivedAt ? { archivedAt: previous.archivedAt } : {},
       ...previous?.archiveReason ? { archiveReason: previous.archiveReason } : {},
@@ -67317,6 +67546,7 @@ class MemorySkillsStore {
         slug,
         version: version2,
         current: current?.orgId === principal.orgId ? {
+          authorizationEpoch: current.authorizationEpoch,
           lifecycle: current.lifecycle,
           ...current.tombstonedAt ? { tombstonedAt: current.tombstonedAt } : {}
         } : null,
@@ -67345,6 +67575,7 @@ class MemorySkillsStore {
     }
     const next2 = {
       ...current,
+      authorizationEpoch: current.lifecycle === patch.lifecycle ? current.authorizationEpoch : randomUUID10().replaceAll("-", ""),
       lifecycle: patch.lifecycle,
       updatedAt: nowIso(),
       revisionId: revisionIdOfRecord({ ...current, lifecycle: patch.lifecycle, archiveReason: patch.reason, replacementSlug: patch.replacementSlug }),
@@ -67389,7 +67620,7 @@ class MemorySkillsStore {
     if (!current.tombstonedAt) {
       const tombstoned = nowIso();
       const purgeAfter = new Date(Date.now() + tombstoneWindowMs).toISOString();
-      const next2 = { ...current, tombstonedAt: tombstoned, tombstonePurgeAfter: purgeAfter, updatedAt: tombstoned };
+      const next2 = { ...current, authorizationEpoch: randomUUID10().replaceAll("-", ""), tombstonedAt: tombstoned, tombstonePurgeAfter: purgeAfter, updatedAt: tombstoned };
       this.skills.set(skillKey(principal.orgId, slug), next2);
       return next2;
     }
@@ -68143,7 +68374,7 @@ class PostgresSkillsStore {
     const requested = JSON.stringify(selections2.map(({ slug, version: version2 }) => ({ slug, version: version2 })));
     const rows = await this.sql`
       SELECT q.value->>'slug' AS slug, q.value->>'version' AS version,
-        r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at,
+        r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at, r.authorization_epoch,
         v.bundle_sha256, b.sha256 IS NOT NULL AS bundle_available
       FROM jsonb_array_elements(${requested}::text::jsonb) WITH ORDINALITY AS q(value, ordinal)
       LEFT JOIN skills_registry r ON r.org_id = ${principal.orgId} AND r.slug = q.value->>'slug'
@@ -68439,13 +68670,14 @@ async function handleApiV1(store, governanceStore, principal, request2, parts, c
       return json4(skillVersionPayload(version2, current));
     }
     if (request2.method === "GET" && id2 && subresource === "versions" && childId && parts[4] === "bundle" && !parts[5]) {
-      const { version: version2, bytes } = await readSkillVersionBundle(store, artifactStorage, principal, id2, childId);
+      const { version: version2, bytes, authorizationEpoch } = await readSkillVersionBundle(store, artifactStorage, principal, id2, childId);
       const headers = {
         "Content-Type": "application/gzip",
         "Content-Length": String(bytes.byteLength),
         "Content-Disposition": `attachment; filename="${version2.slug}-${version2.version}.tar.gz"`,
         "X-Skill-Bundle-Sha256": version2.bundleSha256,
         "X-Skill-Version": version2.version,
+        ...authorizationEpoch ? { "X-Skill-Authorization-Epoch": authorizationEpoch } : {},
         ETag: `"${version2.bundleSha256}"`,
         "Cache-Control": "no-store"
       };
@@ -72829,7 +73061,7 @@ var localRunExecutor = {
 // src/sdk/storage.ts
 var artifactStorageSeam = ArtifactStorage;
 // src/sdk/outputs.ts
-import { createHash as createHash35 } from "crypto";
+import { createHash as createHash36 } from "crypto";
 class DatabaseOnlyObjectStore {
   usesS3 = false;
   async materialize(run, artifact, body4) {
@@ -72876,7 +73108,7 @@ function createGovernedArtifactWriter(options) {
       const stamped = {
         ...meta,
         byteSize: outputBytes,
-        sha256: createHash35("sha256").update(persistedBytes).digest("hex"),
+        sha256: createHash36("sha256").update(persistedBytes).digest("hex"),
         visibility: options.visibility ?? config.defaultVisibility,
         ...config.artifactTtlSeconds !== undefined ? { expiresAt: expiresAtFor(createdAt, config.artifactTtlSeconds) } : {}
       };
@@ -73117,7 +73349,7 @@ __export(exports_external2, {
   pipe: () => pipe,
   partialRecord: () => partialRecord,
   parseAsync: () => parseAsync2,
-  parse: () => parse10,
+  parse: () => parse11,
   overwrite: () => _overwrite,
   output: () => output,
   optional: () => optional,
@@ -73337,7 +73569,7 @@ __export(exports_core2, {
   prettifyError: () => prettifyError,
   parseURLObject: () => parseURLObject,
   parseAsync: () => parseAsync,
-  parse: () => parse8,
+  parse: () => parse9,
   meta: () => meta,
   mergeValues: () => mergeValues2,
   memoizer: () => memoizer,
@@ -74791,7 +75023,7 @@ var _parse = (_Err) => {
   };
   return fn;
 };
-var parse8 = /* @__PURE__ */ _parse($ZodRealError);
+var parse9 = /* @__PURE__ */ _parse($ZodRealError);
 var _parseAsync = (_Err) => {
   const fn = async (schema, value, _ctx, params) => {
     const ctx = _ctx ? { ..._ctx, async: true } : { async: true };
@@ -74862,18 +75094,18 @@ var validateAsync = async (schema, value, _ctx) => {
   return result.issues.length === 0;
 };
 var _encode = (_Err) => {
-  const parse9 = _parse(_Err);
+  const parse10 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
     const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
-    return parse9(schema, value, ctx, finalizeParams(fn, _params));
+    return parse10(schema, value, ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
 var encode = /* @__PURE__ */ _encode($ZodRealError);
 var _decode = (_Err) => {
-  const parse9 = _parse(_Err);
+  const parse10 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
-    return parse9(schema, value, _ctx, finalizeParams(fn, _params));
+    return parse10(schema, value, _ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
@@ -77796,10 +78028,10 @@ var $ZodFunction = /* @__PURE__ */ $constructor("$ZodFunction", (inst, def) => {
       throw new Error("implement() must be called with a function");
     }
     return Object.defineProperty(function(...args) {
-      const parsedArgs = inst._def.input ? parse8(inst._def.input, args) : args;
+      const parsedArgs = inst._def.input ? parse9(inst._def.input, args) : args;
       const result = Reflect.apply(func, this, parsedArgs);
       if (inst._def.output) {
-        return parse8(inst._def.output, result);
+        return parse9(inst._def.output, result);
       }
       return result;
     }, "_zod", { value: inst._zod, enumerable: false });
@@ -89437,7 +89669,7 @@ var ZodRealError = /* @__PURE__ */ $constructor("ZodError", initializer2, undefi
 });
 
 // node_modules/zod/v4/classic/parse.js
-var parse10 = /* @__PURE__ */ _parse(ZodRealError);
+var parse11 = /* @__PURE__ */ _parse(ZodRealError);
 var parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
 var safeParse3 = /* @__PURE__ */ _safeParse(ZodRealError);
 var safeParseAsync2 = /* @__PURE__ */ _safeParseAsync(ZodRealError);
@@ -89573,7 +89805,7 @@ var ZodType2 = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
     exports_util.own(this, "~standard", value);
   },
   parse: function _parse2(data, params) {
-    return parse10(this, data, params, { callee: _parse2 });
+    return parse11(this, data, params, { callee: _parse2 });
   },
   parseAsync: async function _parseAsync2(data, params) {
     return await parseAsync2(this, data, params, { callee: _parseAsync2 });
@@ -91643,7 +91875,7 @@ function date4(params) {
   return _coercedDate(ZodDate2, params);
 }
 // src/lib/canonical-json.ts
-import { createHash as createHash36 } from "crypto";
+import { createHash as createHash37 } from "crypto";
 function canonicalJson3(value, maximumBytes = 2 * 1024 * 1024) {
   return canonicalJsonAtDepth(value, maximumBytes, 64);
 }
@@ -91687,7 +91919,7 @@ function canonicalJsonAtDepth(value, maximumBytes, maximumDepth) {
   return visit3(value, 0);
 }
 function canonicalJsonSha256(value, maximumBytes) {
-  return createHash36("sha256").update(canonicalJson3(value, maximumBytes)).digest("hex");
+  return createHash37("sha256").update(canonicalJson3(value, maximumBytes)).digest("hex");
 }
 
 // src/lib/remote-recurring-contract.ts
@@ -93801,7 +94033,7 @@ async function requestInvitationEmail(origin, action, input2) {
 }
 
 // src/lib/remote-private-publications.ts
-import { createHash as createHash37 } from "crypto";
+import { createHash as createHash38 } from "crypto";
 var PRIVATE_PUBLICATION_MAX_BYTES = 16 * 1024 * 1024;
 var failures2 = {
   INVALID_REQUEST: [400, "The publication request is invalid."],
@@ -93848,7 +94080,7 @@ var hash4 = (v2) => typeof v2 === "string" && /^[a-f0-9]{64}$/.test(v2);
 var record10 = (v2) => !!v2 && typeof v2 === "object" && !Array.isArray(v2);
 var exact = (v2, keys3) => record10(v2) && Object.keys(v2).sort().join(",") === keys3.sort().join(",");
 var date5 = (v2) => typeof v2 === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v2) && Number.isFinite(Date.parse(v2));
-var publicationSha256 = (bytes) => createHash37("sha256").update(bytes).digest("hex");
+var publicationSha256 = (bytes) => createHash38("sha256").update(bytes).digest("hex");
 function checkedPublicationDeclaration(value) {
   if (!exact(value, ["idempotencyKey", "version", "expectedCurrentVersionId", "manifestText", "archiveSha256", "archiveByteSize"]) || !publicationUuid(value.idempotencyKey) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || typeof value.manifestText !== "string" || Buffer.byteLength(value.manifestText) > 16384 || !hash4(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES)
     return bad();
@@ -94331,7 +94563,7 @@ class RemoteSkillsAuthClient {
 }
 // src/lib/private-publication-recovery.ts
 import { constants as constants15, closeSync as closeSync18, fsyncSync as fsyncSync6, fstatSync as fstatSync18, lstatSync as lstatSync26, mkdirSync as mkdirSync15, openSync as openSync18, readSync as readSync13, realpathSync as realpathSync15, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname28, isAbsolute as isAbsolute22, join as join42, resolve as resolve23 } from "path";
+import { dirname as dirname28, isAbsolute as isAbsolute22, join as join43, resolve as resolve23 } from "path";
 import { randomUUID as randomUUID12 } from "crypto";
 var fail2 = () => {
   throw new PrivatePublicationError("PUBLICATION_RECOVERY_INVALID", "The recovery directory is invalid or changed. Preserve it and inspect the existing intent; do not start a replacement automatically.");
@@ -94357,7 +94589,7 @@ function unchangedDirectory(directory, identity5) {
     return fail2();
 }
 function readOwned(directory, name, max) {
-  const identity5 = safeDirectory(directory), file2 = join42(directory, name);
+  const identity5 = safeDirectory(directory), file2 = join43(directory, name);
   const fd = openSync18(file2, constants15.O_RDONLY | constants15.O_NOFOLLOW);
   try {
     const stat2 = fstatSync18(fd);
@@ -94381,7 +94613,7 @@ function readOwned(directory, name, max) {
   }
 }
 function writeOwned(directory, name, bytes) {
-  const fd = openSync18(join42(directory, name), constants15.O_WRONLY | constants15.O_CREAT | constants15.O_EXCL | constants15.O_NOFOLLOW, 384);
+  const fd = openSync18(join43(directory, name), constants15.O_WRONLY | constants15.O_CREAT | constants15.O_EXCL | constants15.O_NOFOLLOW, 384);
   try {
     writeFileSync11(fd, bytes);
     fsyncSync6(fd);
@@ -94394,7 +94626,7 @@ function save(directory, value) {
   writeOwned(directory, temporary, JSON.stringify(value) + `
 `);
   unchangedDirectory(directory, identity5);
-  renameSync7(join42(directory, temporary), join42(directory, "receipt.json"));
+  renameSync7(join43(directory, temporary), join43(directory, "receipt.json"));
   const fd = openSync18(directory, constants15.O_RDONLY | constants15.O_NOFOLLOW);
   try {
     fsyncSync6(fd);
@@ -94407,7 +94639,7 @@ function bind(client2, receipt) {
     throw new PrivatePublicationError("PUBLICATION_IDENTITY_CHANGED", "The fresh session does not match the recovery directory's server, account and membership.");
 }
 async function locked(directory, action) {
-  const identity5 = safeDirectory(directory), file2 = join42(directory, "operation.lock");
+  const identity5 = safeDirectory(directory), file2 = join43(directory, "operation.lock");
   let fd;
   try {
     fd = openSync18(file2, constants15.O_WRONLY | constants15.O_CREAT | constants15.O_EXCL | constants15.O_NOFOLLOW, 384);