@hasna/skills 0.10.51 → 0.10.52

package/dist/sdk/index.js

@@ -5267,8 +5267,8 @@ var require_cst_visit = __commonJS((exports) => {
   visit.REMOVE = REMOVE;
   visit.itemAtPath = (cst, path) => {
     let item = cst;
-    for (const [field, index] of path) {
-      const tok = item?.[field];
+    for (const [field2, index] of path) {
+      const tok = item?.[field2];
       if (tok && "items" in tok) {
         item = tok.items[index];
       } else
@@ -5278,8 +5278,8 @@ var require_cst_visit = __commonJS((exports) => {
   };
   visit.parentCollection = (cst, path) => {
     const parent = visit.itemAtPath(cst, path.slice(0, -1));
-    const field = path[path.length - 1][0];
-    const coll = parent?.[field];
+    const field2 = path[path.length - 1][0];
+    const coll = parent?.[field2];
     if (coll && "items" in coll)
       return coll;
     throw new Error("Parent collection not found");
@@ -5288,11 +5288,11 @@ var require_cst_visit = __commonJS((exports) => {
     let ctrl = visitor(item, path);
     if (typeof ctrl === "symbol")
       return ctrl;
-    for (const field of ["key", "value"]) {
-      const token = item[field];
+    for (const field2 of ["key", "value"]) {
+      const token = item[field2];
       if (token && "items" in token) {
         for (let i = 0;i < token.items.length; ++i) {
-          const ci = _visit(Object.freeze(path.concat([[field, i]])), token.items[i], visitor);
+          const ci = _visit(Object.freeze(path.concat([[field2, i]])), token.items[i], visitor);
           if (typeof ci === "number")
             i = ci - 1;
           else if (ci === BREAK)
@@ -5302,7 +5302,7 @@ var require_cst_visit = __commonJS((exports) => {
             i -= 1;
           }
         }
-        if (typeof ctrl === "function" && field === "key")
+        if (typeof ctrl === "function" && field2 === "key")
           ctrl = ctrl(item, path);
       }
     }
@@ -5728,9 +5728,9 @@ var require_lexer = __commonJS((exports) => {
       }
     }
     *parseQuotedScalar() {
-      const quote = this.charAt(0);
-      let end = this.buffer.indexOf(quote, this.pos + 1);
-      if (quote === "'") {
+      const quote2 = this.charAt(0);
+      let end = this.buffer.indexOf(quote2, this.pos + 1);
+      if (quote2 === "'") {
         while (end !== -1 && this.buffer[end + 1] === "'")
           end = this.buffer.indexOf("'", end + 2);
       } else {
@@ -8209,7 +8209,7 @@ var require_client = __commonJS((exports) => {
     };
   };
   var sleep = (seconds) => {
-    return new Promise((resolve22) => setTimeout(resolve22, seconds * 1000));
+    return new Promise((resolve24) => setTimeout(resolve24, seconds * 1000));
   };
   var waiterServiceDefaults = {
     minDelay: 2,
@@ -8264,14 +8264,14 @@ var require_client = __commonJS((exports) => {
         }
         await sleep(delayMs / 1000);
       }
-      const { state, reason } = await acceptorChecks(client2, input);
-      if (reason) {
-        const message = createMessageFromResponse(reason);
+      const { state, reason: reason2 } = await acceptorChecks(client2, input);
+      if (reason2) {
+        const message = createMessageFromResponse(reason2);
         observedResponses[message] |= 0;
         observedResponses[message] += 1;
       }
       if (state !== WaiterState.RETRY) {
-        return { state, reason, final: reason, observedResponses };
+        return { state, reason: reason2, final: reason2, observedResponses };
       }
       currentAttempt += 1;
       if (!didWarn403 && Date.now() >= warn403Time) {
@@ -8295,18 +8295,18 @@ var require_client = __commonJS((exports) => {
       warningLogger.warn(`@smithy/util-waiter WARN - 403 status code encountered during waiter polling.`);
     }
   };
-  var createMessageFromResponse = (reason) => {
-    const status = reason?.$response?.statusCode ?? reason?.$metadata?.httpStatusCode;
-    if (reason?.$responseBodyText) {
-      return `${status ? status + ": " : ""}Deserialization error for body: ${reason.$responseBodyText}`;
+  var createMessageFromResponse = (reason2) => {
+    const status = reason2?.$response?.statusCode ?? reason2?.$metadata?.httpStatusCode;
+    if (reason2?.$responseBodyText) {
+      return `${status ? status + ": " : ""}Deserialization error for body: ${reason2.$responseBodyText}`;
     }
     if (status) {
-      if (reason?.$response || reason?.message) {
-        return `${status ?? "Unknown"}: ${reason?.message}`;
+      if (reason2?.$response || reason2?.message) {
+        return `${status ?? "Unknown"}: ${reason2?.message}`;
       }
       return `${status}: OK`;
     }
-    return String(reason?.message ?? JSON.stringify(reason, getCircularReplacer()) ?? "Unknown");
+    return String(reason2?.message ?? JSON.stringify(reason2, getCircularReplacer()) ?? "Unknown");
   };
   var exponentialBackoffWithJitter = (minDelayMs, maxDelayMs, attempt, waitUntil) => {
     const attemptCountCeiling = Math.log(maxDelayMs / minDelayMs) / Math.log(2) + 1;
@@ -8338,8 +8338,8 @@ var require_client = __commonJS((exports) => {
   };
   var abortTimeout = (abortSignal) => {
     let onAbort;
-    const promise = new Promise((resolve22) => {
-      onAbort = () => resolve22({ state: WaiterState.ABORTED });
+    const promise = new Promise((resolve24) => {
+      onAbort = () => resolve24({ state: WaiterState.ABORTED });
       if (typeof abortSignal.addEventListener === "function") {
         abortSignal.addEventListener("abort", onAbort);
       } else {
@@ -9004,7 +9004,7 @@ var require_client = __commonJS((exports) => {
 var require_config = __commonJS((exports) => {
   var { homedir: homedir7 } = __require("os");
   var { sep: sep11, join: join4 } = __require("path");
-  var { createHash: createHash27 } = __require("crypto");
+  var { createHash: createHash28 } = __require("crypto");
   var { readFile: readFile$1 } = __require("fs/promises");
   var { IniSectionType } = require_dist_cjs();
   var { normalizeProvider } = require_client();
@@ -9159,7 +9159,7 @@ var require_config = __commonJS((exports) => {
   var DEFAULT_PROFILE = "default";
   var getProfileName = (init) => init.profile || process.env[ENV_PROFILE] || DEFAULT_PROFILE;
   var getSSOTokenFilepath = (id2) => {
-    const hasher = createHash27("sha1");
+    const hasher = createHash28("sha1");
     const cacheName = hasher.update(id2).digest("hex");
     return join4(getHomeDir(), ".aws", "sso", "cache", `${cacheName}.json`);
   };
@@ -9477,7 +9477,7 @@ var require_config = __commonJS((exports) => {
   };
   var imdsRequest = async (options) => {
     const { request: request2 } = __require("http");
-    return new Promise((resolve22, reject) => {
+    return new Promise((resolve24, reject) => {
       const req = request2({
         hostname: options.hostname,
         port: options.port,
@@ -9505,7 +9505,7 @@ var require_config = __commonJS((exports) => {
         const chunks = [];
         res.on("data", (chunk) => chunks.push(chunk));
         res.on("end", () => {
-          resolve22(Buffer.concat(chunks));
+          resolve24(Buffer.concat(chunks));
           req.destroy();
         });
       });
@@ -10511,7 +10511,7 @@ var require_endpoints = __commonJS((exports) => {
 
 // node_modules/@smithy/core/dist-cjs/submodules/serde/index.js
 var require_serde = __commonJS((exports) => {
-  var { createHmac: createHmac2, createHash: createHash27, getRandomValues } = __require("crypto");
+  var { createHmac: createHmac2, createHash: createHash28, getRandomValues } = __require("crypto");
   var { hasOwn: hasOwn2, HttpResponse } = require_transport();
   exports.hasOwn = hasOwn2;
   var { ReadStream, lstatSync: lstatSync27, fstatSync: fstatSync4 } = __require("fs");
@@ -11416,7 +11416,7 @@ var require_serde = __commonJS((exports) => {
       return Promise.resolve(this.hash.digest());
     }
     reset() {
-      this.hash = this.secret ? createHmac2(this.algorithmIdentifier, castSourceData(this.secret)) : createHash27(this.algorithmIdentifier);
+      this.hash = this.secret ? createHmac2(this.algorithmIdentifier, castSourceData(this.secret)) : createHash28(this.algorithmIdentifier);
     }
   }
   function castSourceData(toCast, encoding) {
@@ -11861,7 +11861,7 @@ ${value}\r
     if (isReadableStream(stream)) {
       return headStream$1(stream, bytes);
     }
-    return new Promise((resolve22, reject) => {
+    return new Promise((resolve24, reject) => {
       const collector = new Collector$1;
       collector.limit = bytes;
       stream.pipe(collector);
@@ -11872,7 +11872,7 @@ ${value}\r
       collector.on("error", reject);
       collector.on("finish", function() {
         const bytes2 = concatBytes(this.buffers);
-        resolve22(bytes2);
+        resolve24(bytes2);
       });
     });
   };
@@ -11986,7 +11986,7 @@ ${value}\r
     if (isReadableStream(stream)) {
       return collectReadableStream(stream);
     }
-    return new Promise((resolve22, reject) => {
+    return new Promise((resolve24, reject) => {
       const collector = new Collector;
       const nodeStream = stream;
       nodeStream.pipe(collector);
@@ -11997,7 +11997,7 @@ ${value}\r
       collector.on("error", reject);
       collector.on("finish", function() {
         const bytes = concatBytes(this.bufferedBytes);
-        resolve22(bytes);
+        resolve24(bytes);
       });
     });
   };
@@ -12155,7 +12155,7 @@ var require_checksum = __commonJS((exports) => {
   var { createReadStream } = __require("fs");
   var { Writable } = __require("stream");
   var { toUint8Array, concatBytes } = require_serde();
-  var { createHash: createHash27, createHmac: createHmac2 } = __require("crypto");
+  var { createHash: createHash28, createHmac: createHmac2 } = __require("crypto");
   var zlib = __require("zlib");
   async function blobReader(blob, onChunk, chunkSize = 1024 * 1024) {
     const size = blob.size;
@@ -12189,7 +12189,7 @@ var require_checksum = __commonJS((exports) => {
       callback();
     }
   }
-  var fileStreamHasher = (hashCtor, fileStream) => new Promise((resolve22, reject) => {
+  var fileStreamHasher = (hashCtor, fileStream) => new Promise((resolve24, reject) => {
     if (!isReadStream(fileStream)) {
       reject(new Error("Unable to calculate hash for non-file streams."));
       return;
@@ -12207,7 +12207,7 @@ var require_checksum = __commonJS((exports) => {
     });
     hashCalculator.on("error", reject);
     hashCalculator.on("finish", function() {
-      hash2.digest().then(resolve22).catch(reject);
+      hash2.digest().then(resolve24).catch(reject);
     });
   });
   var isReadStream = (stream) => typeof stream.path === "string";
@@ -12218,14 +12218,14 @@ var require_checksum = __commonJS((exports) => {
     const hash2 = new hashCtor;
     const hashCalculator = new HashCalculator(hash2);
     readableStream.pipe(hashCalculator);
-    return new Promise((resolve22, reject) => {
+    return new Promise((resolve24, reject) => {
       readableStream.on("error", (err) => {
         hashCalculator.end();
         reject(err);
       });
       hashCalculator.on("error", reject);
       hashCalculator.on("finish", () => {
-        hash2.digest().then(resolve22).catch(reject);
+        hash2.digest().then(resolve24).catch(reject);
       });
     });
   };
@@ -12320,7 +12320,7 @@ var require_checksum = __commonJS((exports) => {
   }
   var hasNativeCrypto$1 = (() => {
     try {
-      createHash27("md5");
+      createHash28("md5");
       return true;
     } catch {
       return false;
@@ -12330,7 +12330,7 @@ var require_checksum = __commonJS((exports) => {
   function buildNativeClass$2() {
     return class Md5Node2 {
       digestLength = 16;
-      hash = createHash27("md5");
+      hash = createHash28("md5");
       update(data) {
         this.hash.update(toUint8Array(data));
       }
@@ -12339,7 +12339,7 @@ var require_checksum = __commonJS((exports) => {
         return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
       }
       reset() {
-        this.hash = createHash27("md5");
+        this.hash = createHash28("md5");
       }
     };
   }
@@ -12629,7 +12629,7 @@ var require_checksum = __commonJS((exports) => {
   ]);
   var hasNativeCrypto = (() => {
     try {
-      createHash27("sha256");
+      createHash28("sha256");
       return true;
     } catch {
       return false;
@@ -12669,7 +12669,7 @@ var require_checksum = __commonJS((exports) => {
         this.finished = false;
       }
       createHash() {
-        return this.secret ? createHmac2("sha256", toBuffer(this.secret)) : createHash27("sha256");
+        return this.secret ? createHmac2("sha256", toBuffer(this.secret)) : createHash28("sha256");
       }
     };
   }
@@ -13334,7 +13334,7 @@ var require_event_streams = __commonJS((exports) => {
       streamEnded = true;
     });
     while (!generationEnded) {
-      const value = await new Promise((resolve22) => setTimeout(() => resolve22(records.shift()), 0));
+      const value = await new Promise((resolve24) => setTimeout(() => resolve24(records.shift()), 0));
       if (value) {
         yield value;
       }
@@ -14542,8 +14542,8 @@ var require_protocols = __commonJS((exports) => {
       fields2.forEach(this.setField.bind(this));
       this.encoding = encoding;
     }
-    setField(field2) {
-      this.entries[field2.name.toLowerCase()] = field2;
+    setField(field3) {
+      this.entries[field3.name.toLowerCase()] = field3;
     }
     getField(name) {
       return this.entries[name.toLowerCase()];
@@ -14552,7 +14552,7 @@ var require_protocols = __commonJS((exports) => {
       delete this.entries[name.toLowerCase()];
     }
     getByType(kind) {
-      return Object.values(this.entries).filter((field2) => field2.kind === kind);
+      return Object.values(this.entries).filter((field3) => field3.kind === kind);
     }
   }
   var getHttpHandlerExtensionConfiguration = (runtimeConfig) => {
@@ -14852,7 +14852,7 @@ var require_retry = __commonJS((exports) => {
       }
     };
   }
-  var cooldown = (ms) => new Promise((resolve22) => setTimeout(resolve22, ms));
+  var cooldown = (ms) => new Promise((resolve24) => setTimeout(resolve24, ms));
   var isRetryStrategyV2 = (retryStrategy) => typeof retryStrategy.acquireInitialRetryToken !== "undefined" && typeof retryStrategy.refreshRetryTokenForRetry !== "undefined" && typeof retryStrategy.recordSuccess !== "undefined";
   var getRetryErrorInfo = (error, logger) => {
     const errorInfo = {
@@ -14951,7 +14951,7 @@ var require_retry = __commonJS((exports) => {
       this.refillTokenBucket();
       while (amount > this.availableTokens) {
         const delay = (amount - this.availableTokens) / this.fillRate * 1000;
-        await new Promise((resolve22) => DefaultRateLimiter.setTimeoutFn(resolve22, delay));
+        await new Promise((resolve24) => DefaultRateLimiter.setTimeoutFn(resolve24, delay));
         this.refillTokenBucket();
       }
       this.availableTokens = this.availableTokens - amount;
@@ -15293,7 +15293,7 @@ var require_retry = __commonJS((exports) => {
             const delayFromResponse = getDelayFromRetryAfterHeader(err.$response);
             const delay = Math.max(delayFromResponse || 0, delayFromDecider);
             totalDelay += delay;
-            await new Promise((resolve22) => setTimeout(resolve22, delay));
+            await new Promise((resolve24) => setTimeout(resolve24, delay));
             continue;
           }
           if (!err.$metadata) {
@@ -18166,7 +18166,7 @@ ${toHex(hashedRequest)}`;
     return hash2.digest();
   };
   var getCanonicalHeaders = ({ headers }, unsignableHeaders, signableHeaders) => {
-    const canonical7 = {};
+    const canonical8 = {};
     for (const headerName of Object.keys(headers).sort()) {
       if (headers[headerName] == undefined) {
         continue;
@@ -18177,9 +18177,9 @@ ${toHex(hashedRequest)}`;
           continue;
         }
       }
-      canonical7[canonicalHeaderName] = headers[headerName].trim().replace(/\s+/g, " ");
+      canonical8[canonicalHeaderName] = headers[headerName].trim().replace(/\s+/g, " ");
     }
-    return canonical7;
+    return canonical8;
   };
   var getPayloadHash = async ({ headers, body }, hashConstructor) => {
     for (const headerName in headers) {
@@ -20175,7 +20175,7 @@ var require_cbor = __commonJS((exports) => {
     const { memberSchemas, encodedKeys, memberNames } = cache;
     const z = encodedKeys.length;
     const result = {};
-    let unknownKey;
+    let unknownKey2;
     let unknownValue;
     let unknownCount = 0;
     let hasType = false;
@@ -20197,7 +20197,7 @@ var require_cbor = __commonJS((exports) => {
         if (key === "__type" && typeof val === "string") {
           hasType = true;
         } else {
-          unknownKey = key;
+          unknownKey2 = key;
           unknownValue = val;
           ++unknownCount;
         }
@@ -20212,7 +20212,7 @@ var require_cbor = __commonJS((exports) => {
         break;
       }
       if (resultEmpty && unknownCount === 1) {
-        result.$unknown = [unknownKey, unknownValue];
+        result.$unknown = [unknownKey2, unknownValue];
       }
     } else if (hasType) {
       pos = startPos;
@@ -20360,7 +20360,7 @@ var require_cbor = __commonJS((exports) => {
       const z = encodedKeys.length;
       const isUnion = ns.isUnionSchema();
       const result = {};
-      let unknownKey;
+      let unknownKey2;
       let unknownValue;
       let unknownCount = 0;
       let hint = 0;
@@ -20376,7 +20376,7 @@ var require_cbor = __commonJS((exports) => {
               break;
             }
             if (resultEmpty && unknownCount === 1) {
-              result.$unknown = [unknownKey, unknownValue];
+              result.$unknown = [unknownKey2, unknownValue];
             }
           }
           return result;
@@ -20395,7 +20395,7 @@ var require_cbor = __commonJS((exports) => {
           const key = readUtf8String();
           const val = readValue(NormalizedSchema.of(15));
           if (key !== "__type") {
-            unknownKey = key;
+            unknownKey2 = key;
             unknownValue = val;
             ++unknownCount;
           }
@@ -21110,8 +21110,8 @@ var require_dist_cjs5 = __commonJS((exports) => {
       this.attributes[name] = value;
       return this;
     }
-    addChildNode(child) {
-      this.children.push(child);
+    addChildNode(child2) {
+      this.children.push(child2);
       return this;
     }
     removeAttribute(name) {
@@ -21122,8 +21122,8 @@ var require_dist_cjs5 = __commonJS((exports) => {
       this.name = name;
       return this;
     }
-    c(child) {
-      this.children.push(child);
+    c(child2) {
+      this.children.push(child2);
       return this;
     }
     a(name, value) {
@@ -21132,9 +21132,9 @@ var require_dist_cjs5 = __commonJS((exports) => {
       }
       return this;
     }
-    cc(input, field2, withName = field2) {
-      if (input[field2] != null) {
-        const node = XmlNode.of(field2, input[field2]).withName(withName);
+    cc(input, field3, withName = field3) {
+      if (input[field3] != null) {
+        const node = XmlNode.of(field3, input[field3]).withName(withName);
         this.c(node);
       }
     }
@@ -21240,10 +21240,10 @@ var require_dist_cjs5 = __commonJS((exports) => {
     }
     readAttrValue() {
       const p = this;
-      const quote2 = p.x[p.i];
+      const quote3 = p.x[p.i];
       ++p.i;
       let value = "";
-      while (p.i < p.z && p.x[p.i] !== quote2) {
+      while (p.i < p.z && p.x[p.i] !== quote3) {
         value += p.x[p.i++];
       }
       ++p.i;
@@ -21350,18 +21350,18 @@ var require_dist_cjs5 = __commonJS((exports) => {
         }
         obj["#text"] = "#text" in obj ? obj["#text"] + text2 : text2;
       }
-      for (const child of childTags) {
-        if (child.tag === "__proto__") {
+      for (const child2 of childTags) {
+        if (child2.tag === "__proto__") {
           writeKey(obj);
         }
-        if (child.tag in obj) {
-          if (Array.isArray(obj[child.tag])) {
-            obj[child.tag].push(child.value);
+        if (child2.tag in obj) {
+          if (Array.isArray(obj[child2.tag])) {
+            obj[child2.tag].push(child2.value);
           } else {
-            obj[child.tag] = [obj[child.tag], child.value];
+            obj[child2.tag] = [obj[child2.tag], child2.value];
           }
         } else {
-          obj[child.tag] = child.value;
+          obj[child2.tag] = child2.value;
         }
       }
       for (const [k, v] of Object.entries(attrs)) {
@@ -21700,12 +21700,12 @@ var require_protocols2 = __commonJS((exports) => {
       return expandToDecimal(numericString) === expandToDecimal(String(value));
     }
     const normalized = numericString.replace(/(\.\d*?)0+$/, "$1").replace(/\.$/, "");
-    const canonical7 = String(value);
-    if (normalized === canonical7) {
+    const canonical8 = String(value);
+    if (normalized === canonical8) {
       return true;
     }
-    if (/[eE]/.test(canonical7)) {
-      return normalized === expandToDecimal(canonical7);
+    if (/[eE]/.test(canonical8)) {
+      return normalized === expandToDecimal(canonical8);
     }
     return false;
   }
@@ -24646,7 +24646,7 @@ var init_node_http = () => {};
 
 // node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/httpRequest.js
 function httpRequest(options) {
-  return new Promise((resolve22, reject) => {
+  return new Promise((resolve24, reject) => {
     const req = node_http.request({
       method: "GET",
       ...options,
@@ -24671,7 +24671,7 @@ function httpRequest(options) {
         chunks.push(chunk);
       });
       res.on("end", () => {
-        resolve22(Buffer.concat(chunks));
+        resolve24(Buffer.concat(chunks));
         req.destroy();
       });
     });
@@ -25036,15 +25036,15 @@ var require_dist_cjs6 = __commonJS((exports) => {
   var { Readable: Readable2 } = __require("stream");
   var http2 = __require("http2");
   function buildAbortError(abortSignal) {
-    const reason = abortSignal && typeof abortSignal === "object" && "reason" in abortSignal ? abortSignal.reason : undefined;
-    if (reason) {
-      if (reason instanceof Error) {
+    const reason2 = abortSignal && typeof abortSignal === "object" && "reason" in abortSignal ? abortSignal.reason : undefined;
+    if (reason2) {
+      if (reason2 instanceof Error) {
         const abortError3 = new Error("Request aborted");
         abortError3.name = "AbortError";
-        abortError3.cause = reason;
+        abortError3.cause = reason2;
         return abortError3;
       }
-      const abortError2 = new Error(String(reason));
+      const abortError2 = new Error(String(reason2));
       abortError2.name = "AbortError";
       return abortError2;
     }
@@ -25168,21 +25168,21 @@ var require_dist_cjs6 = __commonJS((exports) => {
     let sendBody = true;
     if (!externalAgent && expect === "100-continue") {
       sendBody = await Promise.race([
-        new Promise((resolve22) => {
-          timeoutId = Number(timing.setTimeout(() => resolve22(true), Math.max(MIN_WAIT_TIME, maxContinueTimeoutMs)));
+        new Promise((resolve24) => {
+          timeoutId = Number(timing.setTimeout(() => resolve24(true), Math.max(MIN_WAIT_TIME, maxContinueTimeoutMs)));
         }),
-        new Promise((resolve22) => {
+        new Promise((resolve24) => {
           httpRequest2.on("continue", () => {
             timing.clearTimeout(timeoutId);
-            resolve22(true);
+            resolve24(true);
           });
           httpRequest2.on("response", () => {
             timing.clearTimeout(timeoutId);
-            resolve22(false);
+            resolve24(false);
           });
           httpRequest2.on("error", () => {
             timing.clearTimeout(timeoutId);
-            resolve22(false);
+            resolve24(false);
           });
         })
       ]);
@@ -25198,8 +25198,8 @@ var require_dist_cjs6 = __commonJS((exports) => {
     }
     if (body) {
       const isBuffer = Buffer.isBuffer(body);
-      const isString = typeof body === "string";
-      if (isBuffer || isString) {
+      const isString2 = typeof body === "string";
+      if (isBuffer || isString2) {
         if (isBuffer && body.byteLength === 0) {
           httpRequest2.end();
         } else {
@@ -25259,13 +25259,13 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       return socketWarningTimestamp;
     }
     constructor(options) {
-      this.configProvider = new Promise((resolve22, reject) => {
+      this.configProvider = new Promise((resolve24, reject) => {
         if (typeof options === "function") {
           options().then((_options) => {
-            resolve22(this.resolveDefaultConfig(_options));
+            resolve24(this.resolveDefaultConfig(_options));
           }).catch(reject);
         } else {
-          resolve22(this.resolveDefaultConfig(options));
+          resolve24(this.resolveDefaultConfig(options));
         }
       });
     }
@@ -25297,7 +25297,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
           timing.clearTimeout(socketTimeoutId);
           timing.clearTimeout(keepAliveTimeoutId);
         };
-        const resolve22 = async (arg) => {
+        const resolve24 = async (arg) => {
           await writeRequestBodyPromise;
           clearTimeouts();
           _resolve(arg);
@@ -25361,7 +25361,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             headers: getTransformedHeaders(res.headers),
             body: res
           });
-          resolve22({ response: httpResponse });
+          resolve24({ response: httpResponse });
         });
         req.on("error", (err) => {
           if (NODEJS_TIMEOUT_ERROR_CODES.includes(err.code)) {
@@ -25693,13 +25693,13 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       return new NodeHttp2Handler(instanceOrOptions);
     }
     constructor(options) {
-      this.configProvider = new Promise((resolve22, reject) => {
+      this.configProvider = new Promise((resolve24, reject) => {
         if (typeof options === "function") {
           options().then((opts) => {
-            resolve22(opts || {});
+            resolve24(opts || {});
           }).catch(reject);
         } else {
-          resolve22(options || {});
+          resolve24(options || {});
         }
       });
     }
@@ -25724,7 +25724,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       return new Promise((_resolve, _reject) => {
         let fulfilled = false;
         let writeRequestBodyPromise = undefined;
-        const resolve22 = async (arg) => {
+        const resolve24 = async (arg) => {
           await writeRequestBodyPromise;
           _resolve(arg);
         };
@@ -25809,7 +25809,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             body: clientHttp2Stream
           });
           fulfilled = true;
-          resolve22({ response: httpResponse });
+          resolve24({ response: httpResponse });
           if (useIsolatedSession) {
             session.close();
             clientHttp2Stream.on("end", () => {
@@ -25942,7 +25942,7 @@ var retryWrapper = (toRetry, maxRetries, delayMs) => {
       try {
         return await toRetry();
       } catch (e3) {
-        await new Promise((resolve22) => setTimeout(resolve22, delayMs));
+        await new Promise((resolve24) => setTimeout(resolve24, delayMs));
       }
     }
     return await toRetry();
@@ -29443,10 +29443,10 @@ var require_signin = __commonJS((exports) => {
 });
 
 // node_modules/@aws-sdk/credential-provider-ini/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
-import { createHash as createHash27, createPrivateKey, createPublicKey, sign } from "crypto";
+import { createHash as createHash28, createPrivateKey, createPublicKey, sign } from "crypto";
 import { promises as fs2 } from "fs";
 import { homedir as homedir7 } from "os";
-import { dirname as dirname23, join as join38 } from "path";
+import { dirname as dirname24, join as join38 } from "path";
 var import_config28, import_protocols3, LoginCredentialsFetcher;
 var init_LoginCredentialsFetcher = __esm(() => {
   import_config28 = __toESM(require_config(), 1);
@@ -29606,7 +29606,7 @@ var init_LoginCredentialsFetcher = __esm(() => {
     }
     async saveToken(token) {
       const tokenFilePath = this.getTokenFilePath();
-      const directory = dirname23(tokenFilePath);
+      const directory = dirname24(tokenFilePath);
       try {
         await fs2.mkdir(directory, { recursive: true });
       } catch (error) {}
@@ -29615,7 +29615,7 @@ var init_LoginCredentialsFetcher = __esm(() => {
     getTokenFilePath() {
       const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join38(homedir7(), ".aws", "login", "cache");
       const loginSessionBytes = Buffer.from(this.loginSession, "utf8");
-      const loginSessionSha256 = createHash27("sha256").update(loginSessionBytes).digest("hex");
+      const loginSessionSha256 = createHash28("sha256").update(loginSessionBytes).digest("hex");
       return join38(directory, `${loginSessionSha256}.json`);
     }
     derToRawSignature(derSignature) {
@@ -31067,7 +31067,7 @@ import { existsSync as existsSync22 } from "fs";
 import { join as join210 } from "path";
 import { existsSync as existsSync17 } from "fs";
 import { homedir as homedir8 } from "os";
-import { join as join42, resolve as resolve22 } from "path";
+import { join as join42, resolve as resolve24 } from "path";
 import { homedir as pathsResolverHomedir2 } from "os";
 import { join as pathsResolverJoin2 } from "path";
 import { createHmac as createHmac4, timingSafeEqual as timingSafeEqual3 } from "crypto";
@@ -31251,9 +31251,9 @@ function exactEventsHome() {
 function getEventsHome() {
   const exact = exactEventsHome();
   if (exact)
-    return resolve22(exact);
+    return resolve24(exact);
   const resolved = resolverHome();
-  return adoptResolverHome(resolved) ? resolve22(resolved) : resolve22(legacyHomeDir());
+  return adoptResolverHome(resolved) ? resolve24(resolved) : resolve24(legacyHomeDir());
 }
 function getEventsDataDir(override) {
   return override || getEventsHome();
@@ -31793,7 +31793,7 @@ async function pinnedNativeRequest(target, addresses, method, headers, body4, si
       callback(null, entries);
     }
   };
-  return new Promise((resolve23, reject) => {
+  return new Promise((resolve25, reject) => {
     const request2 = isHttps ? nodeHttpsRequest(requestOptions, onResponse) : nodeHttpRequest(requestOptions, onResponse);
     const onAbort = () => {
       const error = new Error("The operation was aborted.");
@@ -31820,7 +31820,7 @@ async function pinnedNativeRequest(target, addresses, method, headers, body4, si
           else if (Array.isArray(value))
             headersRecord[name] = value.join(", ");
         }
-        resolve23(new Response(Buffer.concat(chunks), { status: response.statusCode ?? 200, headers: headersRecord }));
+        resolve25(new Response(Buffer.concat(chunks), { status: response.statusCode ?? 200, headers: headersRecord }));
       });
     }
   });
@@ -31917,25 +31917,25 @@ async function dispatchCommand(event, channel) {
     HASNA_EVENT_SCHEMA_VERSION: event.schemaVersion,
     HASNA_EVENT_JSON: eventJson
   };
-  return new Promise((resolve23) => {
-    const child = spawn3(channel.command.command, channel.command.args ?? [], {
+  return new Promise((resolve25) => {
+    const child2 = spawn3(channel.command.command, channel.command.args ?? [], {
       cwd: channel.command.cwd,
       env,
       stdio: ["pipe", "pipe", "pipe"]
     });
     let stdout = "";
     let stderr = "";
-    const timeout = setTimeout(() => child.kill("SIGTERM"), channel.command.timeoutMs ?? 15000);
-    child.stdin.end(eventJson);
-    child.stdout.on("data", (chunk) => {
+    const timeout = setTimeout(() => child2.kill("SIGTERM"), channel.command.timeoutMs ?? 15000);
+    child2.stdin.end(eventJson);
+    child2.stdout.on("data", (chunk) => {
       stdout += chunk.toString();
     });
-    child.stderr.on("data", (chunk) => {
+    child2.stderr.on("data", (chunk) => {
       stderr += chunk.toString();
     });
-    child.on("error", (error) => {
+    child2.on("error", (error) => {
       clearTimeout(timeout);
-      resolve23({
+      resolve25({
         attempt: 1,
         status: "failed",
         startedAt,
@@ -31945,10 +31945,10 @@ async function dispatchCommand(event, channel) {
         error: error.message
       });
     });
-    child.on("close", (code, signal) => {
+    child2.on("close", (code, signal) => {
       clearTimeout(timeout);
       const success = code === 0;
-      resolve23({
+      resolve25({
         attempt: 1,
         status: success ? "success" : "failed",
         startedAt,
@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.51",
+  version: "0.10.52",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -34672,7 +34672,14 @@ async function inspectSkillBundle(bundle, options = {}) {
     decoder.destroy(terminalError);
   };
   const onAbort = () => stop("BUNDLE_ABORTED");
-  const timer = setTimeout(() => stop("BUNDLE_TIMEOUT"), Math.max(1, deadline - performance.now()));
+  const expire = () => {
+    const remaining = deadline - performance.now();
+    if (remaining > 0)
+      timer = setTimeout(expire, Math.max(1, Math.ceil(remaining)));
+    else
+      stop("BUNDLE_TIMEOUT");
+  };
+  let timer = setTimeout(expire, Math.max(1, Math.ceil(deadline - performance.now())));
   signal?.addEventListener("abort", onAbort, { once: true });
   let decompressedByteSize = 0;
   let bytesSinceYield = 0;
@@ -34916,8 +34923,8 @@ function profileSelectionSnapshot(selections) {
 // src/lib/selection-cache.ts
 class SkillSelectionError extends Error {
   code;
-  constructor(code, message) {
-    super(message);
+  constructor(code, message, options) {
+    super(message, options);
     this.code = code;
     this.name = "SkillSelectionError";
   }
@@ -35051,8 +35058,8 @@ function atomicWrite(path, bytes, mode, durable = false) {
     }
   }
 }
-function readSelectionJson(path) {
-  const bytes = readRegularFile(path, MAX_PROFILE_DOCUMENT_BYTES);
+function readSelectionJson(path, maximumBytes = MAX_PROFILE_DOCUMENT_BYTES) {
+  const bytes = readRegularFile(path, Math.min(maximumBytes, MAX_PROFILE_DOCUMENT_BYTES));
   if (!bytes)
     return null;
   try {
@@ -35064,10 +35071,10 @@ function readSelectionJson(path) {
 async function verifiedEntries(selection, bytes, signal, deadline) {
   if (`sha256:${sha256Hex(bytes)}` !== selection.bundleDigest)
     throw new SkillSelectionError("BUNDLE_DIGEST_MISMATCH", "The skill bundle does not match its selected digest.");
-  const remaining = deadline === undefined ? undefined : Math.floor(deadline - performance.now());
+  const remaining = deadline === undefined ? undefined : Math.ceil(deadline - performance.now());
   signal?.throwIfAborted();
   if (remaining !== undefined && remaining <= 0)
-    throw new SkillSelectionError("SKILLS_API_UNAVAILABLE", "Skills session authorization deadline exceeded.");
+    throw new SkillBundleInspectionError("BUNDLE_TIMEOUT", "Bundle inspection deadline exceeded");
   const bundle = await inspectSkillBundle(bytes, { signal, ...remaining === undefined ? {} : { limits: { timeoutMs: remaining } } });
   return bundle.entries;
 }
@@ -37311,6 +37318,10 @@ function identifier2(value) {
 function invalid2() {
   throw new Error("The Skills API returned an invalid profile response");
 }
+function unavailable(error, message) {
+  const name = error?.name;
+  return new SkillSelectionError("SKILLS_API_UNAVAILABLE", message, name === "AbortError" || name === "TimeoutError" ? { cause: new DOMException("The Skills API request was cut short", name) } : undefined);
+}
 function validateSelection2(value) {
   if (!object(value) || !identifier2(value.slug) || typeof value.version !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(value.version) || value.version.includes("..") || typeof value.bundleDigest !== "string" || !/^sha256:[a-f0-9]{64}$/.test(value.bundleDigest))
     invalid2();
@@ -37358,8 +37369,8 @@ class HttpProfileClient {
           ...init.headers
         }
       });
-    } catch {
-      throw new SkillSelectionError("SKILLS_API_UNAVAILABLE", "Unable to reach the configured Skills API");
+    } catch (error) {
+      throw unavailable(error, "Unable to reach the configured Skills API");
     }
     if (!response.ok) {
       response.body?.cancel().catch(() => {});
@@ -37376,7 +37387,9 @@ class HttpProfileClient {
   async read(response, limit = MAX_PROFILE_DOCUMENT_BYTES) {
     try {
       return JSON.parse(new TextDecoder().decode(await readBoundedResponse(response, limit, this.signal)));
-    } catch {
+    } catch (error) {
+      if (this.signal?.aborted)
+        throw unavailable(this.signal.reason ?? error, "The Skills API response was cut short");
       invalid2();
     }
   }
@@ -37493,6 +37506,8 @@ function inspectSkillSession(sessionId, options = {}) {
     loadedCount: receipt.loaded.length
   };
 }
+var SESSION_RENEWAL_REFUSAL_TTL_MS = 5 * 60 * 1000;
+var SESSION_RENEWAL_REFUSAL_MAX_BYTES = 4 * 1024;
 async function reconcileSkillSession(input, options = {}) {
   if (![input.fromProfile, input.fromRevision, input.selectionProfile, input.profileRevision].every((value) => typeof value === "string" && value.trim()) || !/^[a-f0-9]{64}$/.test(input.receiptSha256)) {
     throw new SkillSelectionError("INVALID_SESSION_RECONCILIATION", "Name the exact old receipt SHA256, old profile/revision and intended target profile/revision.");
@@ -37554,10 +37569,10 @@ async function reconcileSkillSession(input, options = {}) {
   return { applied: true, plan, planDigest, ...result };
 }
 // src/lib/selected-run.ts
-import { createHash as createHash26 } from "crypto";
+import { createHash as createHash27 } from "crypto";
 import { spawn as spawn2 } from "child_process";
 import { mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync10, realpathSync as realpathSync15 } from "fs";
-import { dirname as dirname22, join as join37, resolve as resolve21 } from "path";
+import { dirname as dirname23, join as join37, resolve as resolve23 } from "path";
 import { tmpdir, hostname as stationHostname2 } from "os";
 
 // src/lib/dependency-preparation.ts
@@ -37952,7 +37967,7 @@ import {
   writeFileSync as writeFileSync8
 } from "fs";
 import { homedir as homedir5 } from "os";
-import { basename as basename12, dirname as dirname21, join as join32 } from "path";
+import { basename as basename13, dirname as dirname22, join as join32 } from "path";
 
 // src/lib/sumi-settings-witness.ts
 import { createHash as createHash7 } from "crypto";
@@ -38089,6 +38104,10 @@ function parse2(text) {
   need(root.entries.length <= CLAUDE_SETTINGS_WITNESS_LIMITS.rows, "exceeds its settings field limit");
   return root;
 }
+function parseNativeJsonObject(text) {
+  need(typeof text === "string" && Buffer.byteLength(text) <= CLAUDE_SETTINGS_WITNESS_LIMITS.bytes, "exceeds its byte limit");
+  return parse2(text);
+}
 var BOOLEAN_PREFERENCES = new Set([
   "autoScrollEnabled",
   "axScreenReader",
@@ -40278,10 +40297,10 @@ var NATIVE_SKILL_ROOTS = [
 ];
 
 // src/lib/agent-integration.ts
-import { createHash as createHash24, randomUUID as randomUUID4 } from "crypto";
+import { createHash as createHash25, randomUUID as randomUUID4 } from "crypto";
 import { isDeepStrictEqual as isDeepStrictEqual8 } from "util";
-import { existsSync as existsSync7, lstatSync as lstatSync23, statSync as statSync7, mkdirSync as mkdirSync6, readFileSync as readFileSync17, readdirSync as readdirSync8, opendirSync as opendirSync5, readlinkSync as readlinkSync6, realpathSync as realpathSync11, renameSync as renameSync4, rmdirSync as rmdirSync3, writeFileSync as writeFileSync5, unlinkSync as unlinkSync5, chmodSync, openSync as openSync18, closeSync as closeSync18, fsyncSync as fsyncSync6, fstatSync as fstatSync18, readSync as readSync12, constants as constants15, linkSync as linkSync3 } from "fs";
-import { dirname as dirname17, join as join27, resolve as resolve18, relative as relative5, isAbsolute as isAbsolute20, sep as sep7 } from "path";
+import { existsSync as existsSync7, lstatSync as lstatSync23, statSync as statSync7, mkdirSync as mkdirSync6, readFileSync as readFileSync17, readdirSync as readdirSync8, opendirSync as opendirSync5, readlinkSync as readlinkSync7, realpathSync as realpathSync11, renameSync as renameSync4, rmdirSync as rmdirSync3, writeFileSync as writeFileSync5, unlinkSync as unlinkSync5, chmodSync, openSync as openSync18, closeSync as closeSync18, fsyncSync as fsyncSync6, fstatSync as fstatSync18, readSync as readSync12, constants as constants15, linkSync as linkSync3 } from "fs";
+import { dirname as dirname18, join as join27, resolve as resolve20, relative as relative5, isAbsolute as isAbsolute22, sep as sep7 } from "path";
 import { homedir as homedir3 } from "os";
 
 // src/lib/managed-policy.ts
@@ -40289,7 +40308,202 @@ import { closeSync as closeSync11, constants as constants8, fstatSync as fstatSy
 import { join as join15 } from "path";
 
 // src/lib/agent-policy-limits.ts
-import { basename as basename5, isAbsolute as isAbsolute8, join as join14, resolve as resolve7, sep as sep4 } from "path";
+import { basename as basename6, isAbsolute as isAbsolute9, join as join14, resolve as resolve8, sep as sep4 } from "path";
+
+// src/lib/claude-marketplace-entry-witness.ts
+import { createHash as createHash12 } from "crypto";
+import { basename as basename5, dirname as dirname8, isAbsolute as isAbsolute8, resolve as resolve7 } from "path";
+var CLAUDE_MARKETPLACE_ENTRY_HASH_MODE = "claude-marketplace-entry-v1";
+var DOMAIN = "hasna.skills.claude-marketplace-entry.v1\x00";
+var PATH_CHARACTERS = 4096;
+var NAME = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+function need4(value, reason) {
+  if (!value)
+    throw new Error(`Claude marketplace entry witness ${reason}`);
+}
+var bounded = (key) => key.length > 64 ? `${key.slice(0, 64)}...` : key;
+var quote = (text) => JSON.stringify(text).replace(/[^\x20-\x7e]/g, (character) => `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`);
+var child = (path, key) => path + (/^[A-Za-z0-9_$-]{1,64}$/.test(key) ? `.${key}` : `[${JSON.stringify(bounded(key))}]`);
+function unknownKey(selector, path, key) {
+  throw new Error(path === null ? `${CLAUDE_MARKETPLACE_ENTRY_HASH_MODE}: unknown top-level key ${quote(bounded(key))} in ${selector.marketplace}` : `${CLAUDE_MARKETPLACE_ENTRY_HASH_MODE}: unknown key ${quote(child(path, key))} in ${selector.marketplace}`);
+}
+function knownKeys(object4, allowed, selector, path) {
+  for (const [key] of object4.entries)
+    if (!allowed.has(key))
+      unknownKey(selector, path, key);
+}
+var reason = (error) => String(error?.message ?? error).replace(/^Claude settings witness /, "");
+var MARKETPLACE_KEYS = new Set(["$schema", "name", "owner", "plugins", "description", "version", "metadata", "forceRemoveDeletedPlugins", "allowCrossMarketplaceDependenciesOn", "renames"]);
+var MARKETPLACE_METADATA_KEYS = new Set(["description", "version", "pluginRoot"]);
+var ENTRY_BOUND_KEYS = new Set([
+  "name",
+  "source",
+  "strict",
+  "defaultEnabled",
+  "dependencies",
+  "relevance",
+  "headers",
+  "headersHelper",
+  "settings",
+  "userConfig",
+  "types",
+  "channels",
+  "skills",
+  "commands",
+  "agents",
+  "hooks",
+  "mcpServers",
+  "lspServers",
+  "outputStyles",
+  "workflows",
+  "experimental",
+  "themes",
+  "monitors"
+]);
+var ENTRY_OMITTED_KEYS = new Set(["$schema", "description", "version", "author", "homepage", "repository", "license", "keywords", "category", "tags", "displayName", "metadata"]);
+var EXPERIMENTAL_KEYS = new Set(["themes", "monitors", "evals"]);
+var SOURCE_KEYS = Object.freeze({
+  github: ["source", "repo", "ref", "sha"],
+  url: ["source", "url", "ref", "sha", "path"],
+  "git-subdir": ["source", "url", "path", "ref", "sha"],
+  npm: ["source", "package", "version", "registry"],
+  archive: ["source", "url", "sha256"],
+  command: ["source", "command", "timeout", "mode"]
+});
+var field = (object4, key) => object4.entries.find(([name]) => name === key)?.[1];
+var isString = (value) => value?.kind === "string";
+var isBoolean = (value) => value?.kind === "literal" && (value.value === "true" || value.value === "false");
+var stringArray = (value) => value?.kind === "array" && value.items.every(isString);
+var stringObject = (value) => value?.kind === "object" && value.entries.every(([, item]) => isString(item));
+function claudeMarketplaceEntrySourceValid(source) {
+  const path = source?.path;
+  return typeof path === "string" && path.length > 0 && path.length <= PATH_CHARACTERS && !/[\x00-\x1f\x7f]/.test(path) && isAbsolute8(path) && resolve7(path) === path && basename5(path) === "marketplace.json" && basename5(dirname8(path)) === ".claude-plugin" && typeof source.marketplace === "string" && NAME.test(source.marketplace) && !source.marketplace.includes("..") && typeof source.plugin === "string" && NAME.test(source.plugin);
+}
+function canonical4(value) {
+  if (value.kind === "string")
+    return JSON.stringify(value.value);
+  if (value.kind === "number" || value.kind === "literal")
+    return value.value;
+  if (value.kind === "array")
+    return "[" + value.items.map(canonical4).join(",") + "]";
+  return "{" + [...value.entries].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, item]) => JSON.stringify(key) + ":" + canonical4(item)).join(",") + "}";
+}
+function validateMarketplace(root, selector) {
+  knownKeys(root, MARKETPLACE_KEYS, selector, null);
+  const name = field(root, "name");
+  need4(isString(name) && name.value === selector.marketplace, "marketplace name does not match the reviewed binding");
+  for (const key of ["$schema", "description", "version"]) {
+    const value = field(root, key);
+    need4(value === undefined || isString(value), `has an invalid marketplace ${key}`);
+  }
+  const owner = field(root, "owner");
+  need4(owner === undefined || owner.kind === "object", "has an invalid marketplace owner");
+  const metadata = field(root, "metadata");
+  if (metadata !== undefined) {
+    need4(metadata.kind === "object", "has an invalid marketplace metadata object");
+    knownKeys(metadata, MARKETPLACE_METADATA_KEYS, selector, "metadata");
+    for (const [key, value] of metadata.entries)
+      need4(isString(value), `has an invalid marketplace metadata.${key}`);
+  }
+  const remove = field(root, "forceRemoveDeletedPlugins");
+  need4(remove === undefined || isBoolean(remove), "has an invalid forceRemoveDeletedPlugins value");
+  const cross = field(root, "allowCrossMarketplaceDependenciesOn");
+  need4(cross === undefined || stringArray(cross), "has an invalid allowCrossMarketplaceDependenciesOn value");
+  const renames = field(root, "renames");
+  if (renames !== undefined) {
+    need4(renames.kind === "object" && renames.entries.every(([, target]) => isString(target) || target.kind === "literal" && target.value === "null"), "has an invalid renames map");
+    need4(!renames.entries.some(([from]) => from.toLowerCase() === selector.plugin.toLowerCase()), "plugin id is redirected by the marketplace renames map");
+  }
+}
+function validateSource(source, selector, path) {
+  if (isString(source)) {
+    need4(source.value.length > 0, "has an empty plugin source");
+    return;
+  }
+  need4(source?.kind === "object", "has an invalid plugin source");
+  const type = field(source, "source");
+  need4(isString(type) && Object.hasOwn(SOURCE_KEYS, type.value), "has an unreviewed plugin source type");
+  knownKeys(source, new Set(SOURCE_KEYS[type.value]), selector, path);
+}
+function projectEntry(entry, selector) {
+  const path = `plugins[${selector.plugin}]`;
+  knownKeys(entry, { has: (key) => ENTRY_BOUND_KEYS.has(key) || ENTRY_OMITTED_KEYS.has(key) }, selector, path);
+  const name = field(entry, "name");
+  need4(isString(name) && name.value === selector.plugin, "selected entry name does not match");
+  validateSource(field(entry, "source"), selector, `${path}.source`);
+  for (const key of ["strict", "defaultEnabled"]) {
+    const value = field(entry, key);
+    need4(value === undefined || isBoolean(value), `has an invalid entry ${key}`);
+  }
+  const headersHelper = field(entry, "headersHelper");
+  need4(headersHelper === undefined || isString(headersHelper), "has an invalid entry headersHelper");
+  const experimental = field(entry, "experimental");
+  if (experimental !== undefined) {
+    need4(experimental.kind === "object", "has an invalid entry experimental object");
+    knownKeys(experimental, EXPERIMENTAL_KEYS, selector, `${path}.experimental`);
+  }
+  for (const key of ["$schema", "description", "version", "homepage", "license", "category", "displayName"]) {
+    const value = field(entry, key);
+    need4(value === undefined || isString(value), `has an invalid entry ${key}`);
+  }
+  for (const [key, keys2] of [["author", new Set(["name", "email", "url"])], ["repository", new Set(["type", "url", "directory"])]]) {
+    const value = field(entry, key);
+    if (value?.kind === "object")
+      knownKeys(value, keys2, selector, `${path}.${key}`);
+    need4(value === undefined || isString(value) || stringObject(value), `has an invalid entry ${key}`);
+  }
+  for (const key of ["keywords", "tags"]) {
+    const value = field(entry, key);
+    need4(value === undefined || stringArray(value), `has an invalid entry ${key}`);
+  }
+  const metadata = field(entry, "metadata");
+  need4(metadata === undefined || metadata.kind === "object", "has an invalid entry metadata object");
+  return { kind: "object", entries: entry.entries.filter(([key]) => ENTRY_BOUND_KEYS.has(key)) };
+}
+function hashClaudeMarketplaceEntry(text, selector) {
+  need4(selector && typeof selector.marketplace === "string" && NAME.test(selector.marketplace) && !selector.marketplace.includes("..") && typeof selector.plugin === "string" && NAME.test(selector.plugin), "requires an exact marketplace and plugin name");
+  let root;
+  try {
+    root = parseNativeJsonObject(text);
+  } catch (error) {
+    throw new Error(`Claude marketplace entry witness cannot parse marketplace.json: ${reason(error)}`);
+  }
+  validateMarketplace(root, selector);
+  const plugins = field(root, "plugins");
+  need4(plugins?.kind === "array", "requires a plugins array");
+  const entryName = (item) => {
+    if (item.kind !== "object")
+      return;
+    const name = field(item, "name");
+    return isString(name) ? name.value : undefined;
+  };
+  const exact = plugins.items.filter((item) => entryName(item) === selector.plugin);
+  const folded = plugins.items.filter((item) => entryName(item)?.toLowerCase() === selector.plugin.toLowerCase());
+  need4(exact.length > 0, "selected plugin entry is missing");
+  need4(exact.length === 1 && folded.length === 1, "selected plugin entry is duplicated or ambiguous");
+  const entry = projectEntry(exact[0], selector);
+  const metadata = field(root, "metadata"), pluginRoot = metadata?.kind === "object" ? field(metadata, "pluginRoot") : undefined;
+  const nullValue = { kind: "literal", value: "null" };
+  const marketplace = { kind: "object", entries: [
+    ["name", field(root, "name")],
+    ["pluginRoot", pluginRoot ?? nullValue],
+    ["allowCrossMarketplaceDependenciesOn", field(root, "allowCrossMarketplaceDependenciesOn") ?? nullValue]
+  ] };
+  const projection = { kind: "object", entries: [["marketplace", marketplace], ["plugin", entry]] };
+  return createHash12("sha256").update(DOMAIN).update(canonical4(projection)).digest("hex");
+}
+function captureClaudeMarketplaceEntry(path, marketplace, plugin, budget2 = { remaining: 256 * 1024 * 1024 }) {
+  need4(claudeMarketplaceEntrySourceValid({ path, marketplace, plugin }), "requires a normalized absolute .claude-plugin/marketplace.json path and exact names");
+  let text;
+  try {
+    text = readNativeSettingsWitnessFile(path, budget2, "marketplace.json");
+  } catch (error) {
+    throw new Error(`Claude marketplace entry witness cannot read marketplace.json: ${reason(error)}`);
+  }
+  return { path, hashMode: CLAUDE_MARKETPLACE_ENTRY_HASH_MODE, marketplace, plugin, sha256: hashClaudeMarketplaceEntry(text, { marketplace, plugin }) };
+}
+
+// src/lib/agent-policy-limits.ts
 var AGENT_POLICY_LIMITS = Object.freeze({ bytes: 1024 * 1024, agents: 16, discoverySources: 2048, discoveryRawSourceBytes: 64 * 1024 * 1024, discoveryRawTotalBytes: 256 * 1024 * 1024, discoveryPathLinks: 40, discoveryPathSteps: 256, discoveryPathSourceMetadataBytes: 64 * 1024, discoveryPathTotalMetadataBytes: 8 * 1024 * 1024, discoveryRoots: 512, discoveryDirectories: 64, discoveryDirectoryEntries: 20000, discoveryDirectoryBytes: 8 * 1024 * 1024, builtinNames: 2048, rootAliases: 2, fields: 64, pathCharacters: 4096 });
 function object4(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
@@ -40343,7 +40557,7 @@ function assertAgentPolicyCollections(policy) {
       text(control.pluginId, 1024);
       text(control.namespace, 64);
       text(control.pluginParent);
-      requireBound(isAbsolute8(control.pluginParent) && resolve7(control.pluginParent) === control.pluginParent && /^[a-f0-9]{64}$/.test(control.manifestSha256));
+      requireBound(isAbsolute9(control.pluginParent) && resolve8(control.pluginParent) === control.pluginParent && /^[a-f0-9]{64}$/.test(control.manifestSha256));
       if (control.remotePluginId !== undefined)
         requireBound(typeof control.remotePluginId === "string" && /^[A-Za-z0-9_~-]{1,1024}$/.test(control.remotePluginId));
       if (control.skillsOnly !== undefined)
@@ -40361,10 +40575,18 @@ function assertAgentPolicyCollections(policy) {
       text(control.pluginId, 1024);
       text(control.namespace, 64);
       text(control.pluginParent);
-      requireBound(!ids.has(control.pluginId) && isAbsolute8(control.pluginParent) && resolve7(control.pluginParent) === control.pluginParent && ["local", "git", "npm"].includes(control.sourceType) && typeof control.sourceSha256 === "string" && /^[a-f0-9]{64}$/.test(control.sourceSha256));
+      requireBound(!ids.has(control.pluginId) && isAbsolute9(control.pluginParent) && resolve8(control.pluginParent) === control.pluginParent && ["local", "git", "npm"].includes(control.sourceType) && typeof control.sourceSha256 === "string" && /^[a-f0-9]{64}$/.test(control.sourceSha256));
       ids.add(control.pluginId);
     }
   }
+  if (bridge.discoveryExecutables !== undefined)
+    for (const [agent, executable2] of Object.entries(record3(bridge.discoveryExecutables, AGENT_POLICY_LIMITS.agents))) {
+      requireBound(agent === "gemini" && object4(executable2) && Object.keys(executable2).length === 3 && executable2.command === "gemini");
+      for (const path of [executable2.path, executable2.target]) {
+        text(path);
+        requireBound(!/[\x00-\x1f\x7f-\x9f\u200e\u200f\u202a-\u202e\u2066-\u2069]/.test(path) && isAbsolute9(path) && resolve8(path) === path);
+      }
+    }
   if (bridge.disabledBuiltins !== undefined)
     for (const builtin of array(bridge.disabledBuiltins, AGENT_POLICY_LIMITS.builtinNames)) {
       requireBound(object4(builtin));
@@ -40390,11 +40612,11 @@ function assertAgentPolicyCollections(policy) {
       requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && Object.keys(proof).every((key) => ["roots", "parents", "directories"].includes(key)) && roots.length + parents2.length > 0 && new Set(roots).size === roots.length && new Set(parents2).size === parents2.length);
       for (const root of roots) {
         text(root);
-        requireBound(isAbsolute8(root) && resolve7(root) === root);
+        requireBound(isAbsolute9(root) && resolve8(root) === root);
       }
       for (const parent of parents2) {
         text(parent);
-        requireBound(isAbsolute8(parent) && resolve7(parent) === parent);
+        requireBound(isAbsolute9(parent) && resolve8(parent) === parent);
       }
       for (const directory of array(proof.directories, AGENT_POLICY_LIMITS.discoveryDirectories)) {
         requireBound(object4(directory));
@@ -40414,7 +40636,7 @@ function assertAgentPolicyCollections(policy) {
         text(input.namespace, 64);
         text(input.pluginParent);
         text(input.sourceRoot);
-        requireBound(!ids.has(input.pluginId) && [input.pluginParent, input.sourceRoot].every((path) => isAbsolute8(path) && resolve7(path) === path) && typeof input.sourceSha256 === "string" && /^[a-f0-9]{64}$/.test(input.sourceSha256));
+        requireBound(!ids.has(input.pluginId) && [input.pluginParent, input.sourceRoot].every((path) => isAbsolute9(path) && resolve8(path) === path) && typeof input.sourceSha256 === "string" && /^[a-f0-9]{64}$/.test(input.sourceSha256));
         ids.add(input.pluginId);
       }
       if (proof.directories !== undefined)
@@ -40431,17 +40653,19 @@ function assertAgentPolicyCollections(policy) {
       text(source.path);
       requireBound(source.sha256 === null || typeof source.sha256 === "string" && /^[a-f0-9]{64}$/.test(source.sha256));
       if (source.hashMode !== undefined)
-        requireBound(["bytes", "path-bytes", "claude-plugin-manifest-v1", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-settings-v4", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+        requireBound(["bytes", "path-bytes", "claude-plugin-manifest-v1", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-settings-v4", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1", "claude-marketplace-entry-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
       if (source.hashMode === "claude-plugin-manifest-v1")
-        requireBound(agent === "claude" && value.agent === "claude" && ["automatic", "reviewed"].includes(value.method) && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && source.path.endsWith(join14(sep4, ".claude-plugin", "plugin.json")) && source.managedPlugins === undefined);
+        requireBound(agent === "claude" && value.agent === "claude" && ["automatic", "reviewed"].includes(value.method) && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute9(source.path) && resolve8(source.path) === source.path && source.path.endsWith(join14(sep4, ".claude-plugin", "plugin.json")) && source.managedPlugins === undefined);
       if (source.hashMode === "sumi-settings-v1")
-        requireBound(agent === "sumi" && value.agent === "sumi" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && basename5(source.path) === "sumi.json");
+        requireBound(agent === "sumi" && value.agent === "sumi" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute9(source.path) && resolve8(source.path) === source.path && basename6(source.path) === "sumi.json");
       if (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4"))
-        requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && basename5(source.path) === "config.toml");
+        requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute9(source.path) && resolve8(source.path) === source.path && basename6(source.path) === "config.toml");
       if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4"))
-        requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && basename5(source.path) === "settings.json");
+        requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute9(source.path) && resolve8(source.path) === source.path && basename6(source.path) === "settings.json");
       if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2")
-        requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && basename5(source.path) === "known_marketplaces.json");
+        requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute9(source.path) && resolve8(source.path) === source.path && basename6(source.path) === "known_marketplaces.json");
+      if (source.hashMode === "claude-marketplace-entry-v1")
+        requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && claudeMarketplaceEntrySourceValid(source));
       if (source.hashMode === "claude-plugin-registry") {
         requireBound(agent === "claude");
         const managed = array(source.managedPlugins, 64);
@@ -40456,8 +40680,8 @@ function assertAgentPolicyCollections(policy) {
       if (source.format !== undefined)
         requireBound(["json", "toml", "yaml"].includes(source.format));
       if (source.fields !== undefined)
-        for (const field of array(source.fields, AGENT_POLICY_LIMITS.fields))
-          text(field, 256);
+        for (const field2 of array(source.fields, AGENT_POLICY_LIMITS.fields))
+          text(field2, 256);
     }
     if (value.directories !== undefined)
       for (const directory of array(value.directories, AGENT_POLICY_LIMITS.discoveryDirectories)) {
@@ -40472,8 +40696,8 @@ function assertAgentPolicyCollections(policy) {
 }
 
 // src/lib/managed-policy.ts
-function refusal(reason = "is unreadable") {
-  return new SkillSelectionError("INVALID_AGENT_POLICY", `The Skills agent loading policy ${reason}; refusing legacy fallback.`);
+function refusal(reason2 = "is unreadable") {
+  return new SkillSelectionError("INVALID_AGENT_POLICY", `The Skills agent loading policy ${reason2}; refusing legacy fallback.`);
 }
 function parseManagedSkillPolicy(text2) {
   if (Buffer.byteLength(text2) > AGENT_POLICY_LIMITS.bytes)
@@ -40550,7 +40774,7 @@ function requiresCliSkillLoading(dataDir2 = getDataDirReadOnly()) {
 }
 
 // src/lib/agent-bridge.ts
-import { createHash as createHash12 } from "crypto";
+import { createHash as createHash13 } from "crypto";
 import { lstatSync as lstatSync10, readFileSync as readFileSync11, readdirSync as readdirSync4 } from "fs";
 import { join as join16 } from "path";
 var CLI_BRIDGE_NAME = "skills-cli";
@@ -40569,7 +40793,7 @@ Use the Skills CLI as the skill authority for this station.
 
 This bridge contains no skill payloads. Do not copy skill content into agent-native skill directories or load other native skill copies. If a Skills command refuses authority, selection, integrity, or native drift, report that refusal and use its repair guidance; do not substitute bundled or stale local content. Explicit local draft authoring remains available.
 `;
-var CLI_BRIDGE_DIGEST = createHash12("sha256").update(markdown).digest("hex");
+var CLI_BRIDGE_DIGEST = createHash13("sha256").update(markdown).digest("hex");
 var CLI_BRIDGE_FILES = Object.freeze({
   "SKILL.md": markdown,
   ".hasna-skills.json": `${JSON.stringify({ managedBy: "@hasna/skills", kind: "cli-bridge", version: CLI_BRIDGE_VERSION, protocol: "selection-v1", contentSha256: CLI_BRIDGE_DIGEST }, null, 2)}
@@ -40593,9 +40817,9 @@ function isOwnedCliBridge(path, expectedPaths) {
 }
 
 // src/lib/agent-discovery.ts
-import { createHash as createHash22 } from "crypto";
+import { createHash as createHash23 } from "crypto";
 import { lstatSync as lstatSync21, readFileSync as readFileSync15, readdirSync as readdirSync7, realpathSync as realpathSync9 } from "fs";
-import { basename as basename8, dirname as dirname16, isAbsolute as isAbsolute18, join as join26, resolve as resolve17, sep as sep6 } from "path";
+import { basename as basename9, dirname as dirname17, isAbsolute as isAbsolute20, join as join26, resolve as resolve19, sep as sep6 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual6 } from "util";
 
 // node_modules/yaml/dist/index.js
@@ -40645,7 +40869,7 @@ var $visit = visit.visit;
 var $visitAsync = visit.visitAsync;
 
 // src/lib/agent-hermes.ts
-import { dirname as dirname8, isAbsolute as isAbsolute9, join as join17, resolve as resolve8 } from "path";
+import { dirname as dirname9, isAbsolute as isAbsolute10, join as join17, resolve as resolve9 } from "path";
 import { lstatSync as lstatSync11, readFileSync as readFileSync12, opendirSync } from "fs";
 var HERMES_OPT_OUT = ".no-bundled-skills";
 var EVENTS = ["pre_llm_call", "pre_tool_call"];
@@ -40683,7 +40907,7 @@ function quoted(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
 function hermesHookDefinitions(supervisor) {
-  if (!isAbsolute9(supervisor.runtime) || !isAbsolute9(supervisor.path))
+  if (!isAbsolute10(supervisor.runtime) || !isAbsolute10(supervisor.path))
     throw new Error("Expected absolute Hermes supervisor paths");
   const entry = (event) => ({ command: `${quoted(supervisor.runtime)} ${quoted(supervisor.path)} --event ${event}`, timeout: 15, ...event === "pre_tool_call" ? { fail_closed: true } : {} });
   return { pre_llm_call: entry("pre_llm_call"), pre_tool_call: entry("pre_tool_call") };
@@ -40719,16 +40943,16 @@ function assertHermesEnvironment(home) {
       throw new Error(`NATIVE_SKILL_DRIFT: Hermes ${variable} requires a dedicated discovery adapter; unset it before using this adapter`);
   }
   const selected = process.env.HERMES_HOME?.trim();
-  if (selected && (!isAbsolute9(selected) || resolve8(selected) !== join17(resolve8(home), ".hermes")))
+  if (selected && (!isAbsolute10(selected) || resolve9(selected) !== join17(resolve9(home), ".hermes")))
     throw new Error("NATIVE_SKILL_DRIFT: custom Hermes homes/profiles require their own reviewed bridge");
   if (process.env.HERMES_ENABLE_PROJECT_PLUGINS?.trim() && !["0", "false", "no", "off"].includes(process.env.HERMES_ENABLE_PROJECT_PLUGINS.trim().toLowerCase()))
     throw new Error("NATIVE_SKILL_DRIFT: Hermes project plugins require a dedicated discovery review");
 }
 function read(path) {
-  for (let current = path;; current = dirname8(current)) {
+  for (let current = path;; current = dirname9(current)) {
     if (lstatSync11(current, { throwIfNoEntry: false })?.isSymbolicLink())
       throw new Error("NATIVE_SKILL_DRIFT: symlink Hermes protection input");
-    if (dirname8(current) === current)
+    if (dirname9(current) === current)
       break;
   }
   const stat = lstatSync11(path, { throwIfNoEntry: false });
@@ -40742,7 +40966,7 @@ function assertHermesProtection(home, config, command, profile, supervisor) {
   assertHermesEnvironment(home);
   if (read(join17(home, ".hermes", HERMES_OPT_OUT)) === null)
     throw new Error("NATIVE_SKILL_DRIFT: Hermes bundled skill reseeding is not disabled; run skills hook install");
-  if (!supervisor || !isAbsolute9(supervisor.path) || supervisor.runtime !== process.execPath || read(supervisor.path) !== renderHermesSupervisor(command, profile))
+  if (!supervisor || !isAbsolute10(supervisor.path) || supervisor.runtime !== process.execPath || read(supervisor.path) !== renderHermesSupervisor(command, profile))
     throw new Error("NATIVE_SKILL_DRIFT: Hermes owned supervisor changed; run skills hook install");
   const raw = read(join17(home, ".hermes/shell-hooks-allowlist.json"));
   let trust;
@@ -40768,10 +40992,10 @@ function assertHermesProtection(home, config, command, profile, supervisor) {
 }
 function assertNoHermesLegacyShadow(root) {
   let entries = 0;
-  for (let cursor = resolve8(root);; cursor = dirname8(cursor)) {
+  for (let cursor = resolve9(root);; cursor = dirname9(cursor)) {
     if (lstatSync11(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
       throw new Error("NATIVE_SKILL_DRIFT: symlink Hermes legacy discovery root");
-    if (dirname8(cursor) === cursor)
+    if (dirname9(cursor) === cursor)
       break;
   }
   function scan(path, depth) {
@@ -40792,10 +41016,10 @@ function assertNoHermesLegacyShadow(root) {
     const hasDescriptor = Boolean(lstatSync11(join17(path, "SKILL.md"), { throwIfNoEntry: false }));
     const directory = opendirSync(path);
     try {
-      for (let child = directory.readSync();child; child = directory.readSync()) {
-        if (hasDescriptor && ["references", "templates", "assets", "scripts"].includes(child.name))
+      for (let child2 = directory.readSync();child2; child2 = directory.readSync()) {
+        if (hasDescriptor && ["references", "templates", "assets", "scripts"].includes(child2.name))
           continue;
-        scan(join17(path, child.name), depth + 1);
+        scan(join17(path, child2.name), depth + 1);
       }
     } finally {
       directory.closeSync();
@@ -40852,18 +41076,18 @@ if (failed) process.exitCode = 2;
 }
 
 // src/lib/agent-discovery-directories.ts
-import { createHash as createHash13 } from "crypto";
+import { createHash as createHash14 } from "crypto";
 import { lstatSync as lstatSync12, opendirSync as opendirSync2 } from "fs";
-import { dirname as dirname9, isAbsolute as isAbsolute10, join as join18, resolve as resolve9 } from "path";
-function need4(value, message) {
+import { dirname as dirname10, isAbsolute as isAbsolute11, join as join18, resolve as resolve10 } from "path";
+function need5(value, message) {
   if (!value)
     throw new Error(message);
 }
 function safe(path) {
-  need4(typeof path === "string" && path.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute10(path) && resolve9(path) === path && !path.includes("\x00"), "Expected a canonical absolute discovery directory path");
-  for (let cursor = path;; cursor = dirname9(cursor)) {
-    need4(!lstatSync12(cursor, { throwIfNoEntry: false })?.isSymbolicLink(), "Refusing symlink native discovery directory");
-    if (dirname9(cursor) === cursor)
+  need5(typeof path === "string" && path.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute11(path) && resolve10(path) === path && !path.includes("\x00"), "Expected a canonical absolute discovery directory path");
+  for (let cursor = path;; cursor = dirname10(cursor)) {
+    need5(!lstatSync12(cursor, { throwIfNoEntry: false })?.isSymbolicLink(), "Refusing symlink native discovery directory");
+    if (dirname10(cursor) === cursor)
       break;
   }
 }
@@ -40877,45 +41101,45 @@ function capture(path, budget2, excludedRoots, omittedRoots = [], rows) {
   const root = lstatSync12(path, { throwIfNoEntry: false });
   if (!root)
     return { path, sha256: null };
-  need4(root.isDirectory(), "Unsupported native discovery directory input");
-  const hash2 = createHash13("sha256");
+  need5(root.isDirectory(), "Unsupported native discovery directory input");
+  const hash2 = createHash14("sha256");
   function walk2(current, relative5, before, depth) {
-    need4(depth <= 64, "Native discovery directory depth limit exceeded");
+    need5(depth <= 64, "Native discovery directory depth limit exceeded");
     const names = [], directory = opendirSync2(current);
     try {
       for (let entry = directory.readSync();entry; entry = directory.readSync()) {
-        need4(++budget2.entries <= AGENT_POLICY_LIMITS.discoveryDirectoryEntries, "Native discovery directory entry limit exceeded");
+        need5(++budget2.entries <= AGENT_POLICY_LIMITS.discoveryDirectoryEntries, "Native discovery directory entry limit exceeded");
         names.push(entry.name);
       }
     } finally {
       directory.closeSync();
     }
-    need4(new Set(names).size === names.length, "Ambiguous native discovery directory names");
+    need5(new Set(names).size === names.length, "Ambiguous native discovery directory names");
     for (const name of names.sort()) {
-      const child = join18(current, name), childRelative = relative5 ? `${relative5}/${name}` : name;
-      if (omittedRoots.includes(child))
+      const child2 = join18(current, name), childRelative = relative5 ? `${relative5}/${name}` : name;
+      if (omittedRoots.includes(child2))
         continue;
-      need4(child.length <= AGENT_POLICY_LIMITS.pathCharacters, "Native discovery directory path limit exceeded");
-      const stat = lstatSync12(child);
-      need4(stat.isFile() || stat.isDirectory(), "Refusing symlink or special native discovery directory member");
+      need5(child2.length <= AGENT_POLICY_LIMITS.pathCharacters, "Native discovery directory path limit exceeded");
+      const stat = lstatSync12(child2);
+      need5(stat.isFile() || stat.isDirectory(), "Refusing symlink or special native discovery directory member");
       const row = JSON.stringify([childRelative, stat.isDirectory() ? "directory" : "file"]) + `
 `;
       budget2.bytes += Buffer.byteLength(row);
-      need4(budget2.bytes <= AGENT_POLICY_LIMITS.discoveryDirectoryBytes, "Native discovery directory metadata limit exceeded");
+      need5(budget2.bytes <= AGENT_POLICY_LIMITS.discoveryDirectoryBytes, "Native discovery directory metadata limit exceeded");
       hash2.update(row);
       rows?.push(row);
-      if (stat.isDirectory() && !excludedRoots.includes(child))
-        walk2(child, childRelative, stat, depth + 1);
+      if (stat.isDirectory() && !excludedRoots.includes(child2))
+        walk2(child2, childRelative, stat, depth + 1);
     }
-    need4(same(before, lstatSync12(current, { throwIfNoEntry: false })), "Native discovery directory changed while reading");
+    need5(same(before, lstatSync12(current, { throwIfNoEntry: false })), "Native discovery directory changed while reading");
   }
   walk2(path, "", root, 0);
   safe(path);
   return { path, sha256: hash2.digest("hex") };
 }
 function captureDiscoveryDirectoryProjection(paths, omittedRoots) {
-  need4(Array.isArray(paths) && paths.length <= AGENT_POLICY_LIMITS.discoveryDirectories && new Set(paths).size === paths.length, "Invalid projected discovery directory collection");
-  need4(omittedRoots.length <= AGENT_POLICY_LIMITS.discoveryRoots && new Set(omittedRoots).size === omittedRoots.length, "Invalid inactive discovery roots");
+  need5(Array.isArray(paths) && paths.length <= AGENT_POLICY_LIMITS.discoveryDirectories && new Set(paths).size === paths.length, "Invalid projected discovery directory collection");
+  need5(omittedRoots.length <= AGENT_POLICY_LIMITS.discoveryRoots && new Set(omittedRoots).size === omittedRoots.length, "Invalid inactive discovery roots");
   for (const root of omittedRoots)
     safe(root);
   const budget2 = { entries: 0, bytes: 0 };
@@ -40925,62 +41149,62 @@ function captureDiscoveryDirectoryProjection(paths, omittedRoots) {
   });
 }
 function verifyDiscoveryDirectoryProjection(directories, omittedRoots) {
-  need4(directories.length <= AGENT_POLICY_LIMITS.discoveryDirectories, "Invalid projected discovery directory collection");
+  need5(directories.length <= AGENT_POLICY_LIMITS.discoveryDirectories, "Invalid projected discovery directory collection");
   let count = 0, bytes = 0;
   const expected = directories.map((directory) => {
     safe(directory.path);
-    need4(Array.isArray(directory.entries), "Missing reviewed directory membership inventory");
-    const hash2 = createHash13("sha256");
+    need5(Array.isArray(directory.entries), "Missing reviewed directory membership inventory");
+    const hash2 = createHash14("sha256");
     const kept = [];
     for (const row of directory.entries) {
-      need4(typeof row === "string" && ++count <= AGENT_POLICY_LIMITS.discoveryDirectoryEntries, "Invalid reviewed directory membership rows");
+      need5(typeof row === "string" && ++count <= AGENT_POLICY_LIMITS.discoveryDirectoryEntries, "Invalid reviewed directory membership rows");
       bytes += Buffer.byteLength(row);
-      need4(bytes <= AGENT_POLICY_LIMITS.discoveryDirectoryBytes, "Reviewed directory membership byte limit exceeded");
+      need5(bytes <= AGENT_POLICY_LIMITS.discoveryDirectoryBytes, "Reviewed directory membership byte limit exceeded");
       const value = JSON.parse(row);
-      need4(Array.isArray(value) && value.length === 2 && typeof value[0] === "string" && value[0] && !isAbsolute10(value[0]) && !value[0].split("/").some((part) => !part || part === "." || part === "..") && ["file", "directory"].includes(value[1]) && row === JSON.stringify(value) + `
+      need5(Array.isArray(value) && value.length === 2 && typeof value[0] === "string" && value[0] && !isAbsolute11(value[0]) && !value[0].split("/").some((part) => !part || part === "." || part === "..") && ["file", "directory"].includes(value[1]) && row === JSON.stringify(value) + `
 `, "Invalid reviewed directory member");
       hash2.update(row);
       const path = join18(directory.path, value[0]);
       if (!omittedRoots.some((root) => path === root || path.startsWith(root + "/")))
         kept.push(row);
     }
-    need4(directory.sha256 === null ? directory.entries.length === 0 : hash2.digest("hex") === directory.sha256, "Reviewed directory inventory does not match its fingerprint");
+    need5(directory.sha256 === null ? directory.entries.length === 0 : hash2.digest("hex") === directory.sha256, "Reviewed directory inventory does not match its fingerprint");
     const absent = omittedRoots.some((root) => directory.path === root || directory.path.startsWith(root + "/"));
-    return { path: directory.path, sha256: absent || directory.sha256 === null ? null : createHash13("sha256").update(kept.join("")).digest("hex") };
+    return { path: directory.path, sha256: absent || directory.sha256 === null ? null : createHash14("sha256").update(kept.join("")).digest("hex") };
   });
   const current = captureDiscoveryDirectoryProjection(directories.map((item) => item.path), omittedRoots);
-  need4(current.every((item, index) => item.sha256 === expected[index].sha256), "Native discovery directory membership changed outside retired Codex roots");
+  need5(current.every((item, index) => item.sha256 === expected[index].sha256), "Native discovery directory membership changed outside retired Codex roots");
 }
 function captureDiscoveryDirectories(paths, excludedRoots = []) {
-  need4(Array.isArray(paths) && paths.length <= AGENT_POLICY_LIMITS.discoveryDirectories && new Set(paths).size === paths.length, "Invalid native discovery directory collection");
+  need5(Array.isArray(paths) && paths.length <= AGENT_POLICY_LIMITS.discoveryDirectories && new Set(paths).size === paths.length, "Invalid native discovery directory collection");
   const budget2 = { entries: 0, bytes: 0 };
   for (const root of excludedRoots)
     safe(root);
   return paths.map((path) => capture(path, budget2, excludedRoots));
 }
 function verifyDiscoveryDirectories(directories, excludedRoots = []) {
-  need4(Array.isArray(directories) && directories.length <= AGENT_POLICY_LIMITS.discoveryDirectories, "Invalid native discovery directory collection");
+  need5(Array.isArray(directories) && directories.length <= AGENT_POLICY_LIMITS.discoveryDirectories, "Invalid native discovery directory collection");
   for (const directory of directories)
-    need4(directory && typeof directory === "object" && (directory.sha256 === null || typeof directory.sha256 === "string" && /^[a-f0-9]{64}$/.test(directory.sha256)), "Invalid native discovery directory digest");
+    need5(directory && typeof directory === "object" && (directory.sha256 === null || typeof directory.sha256 === "string" && /^[a-f0-9]{64}$/.test(directory.sha256)), "Invalid native discovery directory digest");
   const current = captureDiscoveryDirectories(directories.map((directory) => directory.path), excludedRoots);
   for (let i = 0;i < directories.length; i++)
-    need4(current[i].sha256 === directories[i].sha256, `Native discovery directory membership changed; run skills hook install with a fresh discovery review: ${directories[i].path}`);
+    need5(current[i].sha256 === directories[i].sha256, `Native discovery directory membership changed; run skills hook install with a fresh discovery review: ${directories[i].path}`);
 }
 
 // src/lib/agent-discovery-bytes.ts
-import { createHash as createHash14 } from "crypto";
+import { createHash as createHash15 } from "crypto";
 import { closeSync as closeSync12, constants as constants9, fstatSync as fstatSync12, lstatSync as lstatSync13, openSync as openSync12, readSync as readSync7 } from "fs";
-import { dirname as dirname10, isAbsolute as isAbsolute11, resolve as resolve10 } from "path";
+import { dirname as dirname11, isAbsolute as isAbsolute12, resolve as resolve11 } from "path";
 function discoveryByteBudget() {
   return { remaining: AGENT_POLICY_LIMITS.discoveryRawTotalBytes };
 }
 function safe2(path) {
-  if (typeof path !== "string" || !isAbsolute11(path) || path !== resolve10(path) || path.length > AGENT_POLICY_LIMITS.pathCharacters || path.includes("\x00"))
+  if (typeof path !== "string" || !isAbsolute12(path) || path !== resolve11(path) || path.length > AGENT_POLICY_LIMITS.pathCharacters || path.includes("\x00"))
     throw new Error("Expected a canonical absolute raw discovery path");
-  for (let cursor = path;; cursor = dirname10(cursor)) {
+  for (let cursor = path;; cursor = dirname11(cursor)) {
     if (lstatSync13(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
       throw new Error("Refusing symlink raw discovery input");
-    if (dirname10(cursor) === cursor)
+    if (dirname11(cursor) === cursor)
       break;
   }
 }
@@ -40999,7 +41223,7 @@ function hashRawDiscoveryFile(path, budget2, changes) {
     if (bytes > AGENT_POLICY_LIMITS.discoveryRawSourceBytes)
       throw new Error("Raw discovery file byte limit exceeded");
     consume(budget2, bytes);
-    return createHash14("sha256").update(text2).digest("hex");
+    return createHash15("sha256").update(text2).digest("hex");
   }
   const initial = lstatSync13(path, { throwIfNoEntry: false });
   if (!initial)
@@ -41013,7 +41237,7 @@ function hashRawDiscoveryFile(path, budget2, changes) {
     const opened = fstatSync12(fd);
     if (!opened.isFile() || !same2(initial, opened))
       throw new Error("Raw discovery input changed during open");
-    const hash2 = createHash14("sha256"), buffer = Buffer.alloc(64 * 1024);
+    const hash2 = createHash15("sha256"), buffer = Buffer.alloc(64 * 1024);
     let bytes = 0;
     while (true) {
       const count = readSync7(fd, buffer, 0, Math.min(buffer.length, AGENT_POLICY_LIMITS.discoveryRawSourceBytes - bytes + 1), null);
@@ -41036,9 +41260,9 @@ function hashRawDiscoveryFile(path, budget2, changes) {
 }
 
 // src/lib/agent-discovery-path-bytes.ts
-import { createHash as createHash15 } from "crypto";
+import { createHash as createHash16 } from "crypto";
 import { lstatSync as lstatSync14, readlinkSync as readlinkSync4 } from "fs";
-import { dirname as dirname11, isAbsolute as isAbsolute12, join as join19, parse as parse3, resolve as resolve11, sep as sep5 } from "path";
+import { dirname as dirname12, isAbsolute as isAbsolute13, join as join19, parse as parse3, resolve as resolve12, sep as sep5 } from "path";
 function identity4(stat, mutable = false) {
   return {
     dev: String(stat.dev),
@@ -41049,12 +41273,12 @@ function identity4(stat, mutable = false) {
     ...mutable ? { size: String(stat.size), mtimeNs: String(stat.mtimeNs), ctimeNs: String(stat.ctimeNs) } : {}
   };
 }
-function canonical4(path) {
-  if (typeof path !== "string" || !isAbsolute12(path) || path !== resolve11(path) || path.length > AGENT_POLICY_LIMITS.pathCharacters || path.includes("\x00") || Buffer.from(path).toString("utf8") !== path)
+function canonical5(path) {
+  if (typeof path !== "string" || !isAbsolute13(path) || path !== resolve12(path) || path.length > AGENT_POLICY_LIMITS.pathCharacters || path.includes("\x00") || Buffer.from(path).toString("utf8") !== path)
     throw new Error("Expected a canonical absolute discovery path");
 }
 function trace(path) {
-  canonical4(path);
+  canonical5(path);
   const rows = [], paths = [];
   let metadataBytes = 0, steps = 0, links = 0, cursor = parse3(path).root, pending = path.slice(cursor.length).split(sep5);
   function record4(path2, row) {
@@ -41079,7 +41303,7 @@ function trace(path) {
     if (!component || component === ".")
       continue;
     if (component === "..") {
-      cursor = dirname11(cursor);
+      cursor = dirname12(cursor);
       continue;
     }
     const candidate = join19(cursor, component);
@@ -41099,11 +41323,11 @@ function trace(path) {
       if (!target || target.includes("\x00") || Buffer.byteLength(target) > AGENT_POLICY_LIMITS.pathCharacters || !after.isSymbolicLink() || JSON.stringify(identity4(stat, true)) !== JSON.stringify(identity4(after, true)))
         throw new Error("Discovery link changed during read");
       record4(candidate, { type: "link", target, ...identity4(stat, true) });
-      if (isAbsolute12(target)) {
+      if (isAbsolute13(target)) {
         cursor = parse3(target).root;
         root();
       }
-      const remainder = isAbsolute12(target) ? target.slice(parse3(target).root.length) : target;
+      const remainder = isAbsolute13(target) ? target.slice(parse3(target).root.length) : target;
       pending = [...remainder.split(sep5), ...pending];
       if (pending.length + steps > AGENT_POLICY_LIMITS.discoveryPathSteps)
         throw new Error("Discovery path step limit exceeded");
@@ -41146,15 +41370,15 @@ function hashDiscoveryPathFile(path, budget2, changes) {
   const after = trace(path);
   if (JSON.stringify(before.rows) !== JSON.stringify(after.rows) || before.file !== after.file)
     throw new Error("Discovery path input changed during read");
-  return createHash15("sha256").update(JSON.stringify({ version: 1, path, rows: before.rows, content })).digest("hex");
+  return createHash16("sha256").update(JSON.stringify({ version: 1, path, rows: before.rows, content })).digest("hex");
 }
 
 // src/lib/claude-plugin-manifest-witness.ts
-import { createHash as createHash16 } from "crypto";
+import { createHash as createHash17 } from "crypto";
 var CLAUDE_PLUGIN_MANIFEST_LIMITS = Object.freeze({ bytes: 1024 * 1024, depth: 32, nodes: 65536, stringCharacters: 16384 });
-function requireValue(value, reason) {
+function requireValue(value, reason2) {
   if (!value)
-    throw new Error("Claude plugin manifest " + reason);
+    throw new Error("Claude plugin manifest " + reason2);
 }
 function parse4(text2) {
   requireValue(Buffer.byteLength(text2, "utf8") <= CLAUDE_PLUGIN_MANIFEST_LIMITS.bytes, "exceeds its byte limit");
@@ -41230,7 +41454,7 @@ function parse4(text2) {
   requireValue(at === text2.length && root.kind === "object", "requires a JSON object without trailing content");
   return root;
 }
-function canonical5(value) {
+function canonical6(value) {
   if (value.kind === "string")
     return JSON.stringify(value.value);
   if (value.kind === "number")
@@ -41238,19 +41462,19 @@ function canonical5(value) {
   if (value.kind === "literal")
     return value.value;
   if (value.kind === "array")
-    return "[" + value.items.map(canonical5).join(",") + "]";
-  return "{" + value.entries.map(([key, item]) => JSON.stringify(key) + ":" + canonical5(item)).join(",") + "}";
+    return "[" + value.items.map(canonical6).join(",") + "]";
+  return "{" + value.entries.map(([key, item]) => JSON.stringify(key) + ":" + canonical6(item)).join(",") + "}";
 }
 var DESCRIPTIVE_FIELDS = new Set(["description", "version", "author", "homepage", "repository", "license", "keywords"]);
-function validateText(value, field) {
-  requireValue(value?.kind === "string" && value.value.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters, "has an invalid " + field + " field");
+function validateText(value, field2) {
+  requireValue(value?.kind === "string" && value.value.length <= CLAUDE_PLUGIN_MANIFEST_LIMITS.stringCharacters, "has an invalid " + field2 + " field");
 }
 function validateDescriptiveFields(manifest) {
   const values = new Map(manifest.entries);
-  for (const field of ["description", "version", "homepage", "license"]) {
-    const value = values.get(field);
+  for (const field2 of ["description", "version", "homepage", "license"]) {
+    const value = values.get(field2);
     if (value !== undefined)
-      validateText(value, field);
+      validateText(value, field2);
   }
   const author = values.get("author");
   if (author !== undefined) {
@@ -41275,10 +41499,10 @@ function hashClaudePluginManifest(text2) {
   const manifest = parse4(text2);
   validateDescriptiveFields(manifest);
   const discovery = { kind: "object", entries: manifest.entries.filter(([key]) => !DESCRIPTIVE_FIELDS.has(key)) };
-  return createHash16("sha256").update(canonical5(discovery)).digest("hex");
+  return createHash17("sha256").update(canonical6(discovery)).digest("hex");
 }
 function projectReviewedClaudePluginManifest(text2, reviewedSha256) {
-  if (!/^[a-f0-9]{64}$/.test(reviewedSha256) || createHash16("sha256").update(text2).digest("hex") !== reviewedSha256) {
+  if (!/^[a-f0-9]{64}$/.test(reviewedSha256) || createHash17("sha256").update(text2).digest("hex") !== reviewedSha256) {
     throw new Error("Reviewed Claude plugin manifest changed before semantic projection");
   }
   return hashClaudePluginManifest(text2);
@@ -41286,14 +41510,14 @@ function projectReviewedClaudePluginManifest(text2, reviewedSha256) {
 
 // src/lib/plugin-discovery.ts
 import { closeSync as closeSync14, constants as constants11, fstatSync as fstatSync14, lstatSync as lstatSync17, openSync as openSync14, opendirSync as opendirSync4, readSync as readSync9 } from "fs";
-import { basename as basename6, dirname as dirname13, isAbsolute as isAbsolute16, join as join24, resolve as resolve14 } from "path";
+import { basename as basename7, dirname as dirname14, isAbsolute as isAbsolute17, join as join24, resolve as resolve15 } from "path";
 
 // src/lib/plugin-admission.ts
 import { homedir as homedir2 } from "os";
-import { isAbsolute as isAbsolute15, join as join23, resolve as resolve13 } from "path";
+import { isAbsolute as isAbsolute16, join as join23, resolve as resolve14 } from "path";
 
 // src/lib/plugin-projection.ts
-import { createHash as createHash17 } from "crypto";
+import { createHash as createHash18 } from "crypto";
 import { posix as posix2 } from "path";
 var PLUGIN_PROJECTION_MANIFEST = "plugin-projection.json";
 var PLUGIN_PROJECTION_LIMITS = Object.freeze({ files: 1024, bytes: 64 * 1024 * 1024, fileBytes: 16 * 1024 * 1024, metadataBytes: 512 * 1024, registrations: 64, history: 128 });
@@ -41304,7 +41528,7 @@ function pluginNeed(value, message) {
   if (!value)
     pluginRefusal(message);
 }
-var pluginHash = (bytes) => createHash17("sha256").update(bytes).digest("hex");
+var pluginHash = (bytes) => createHash18("sha256").update(bytes).digest("hex");
 function pluginObject(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
@@ -41492,9 +41716,9 @@ function buildPluginProjection(entries) {
 }
 
 // src/lib/plugin-projection-store.ts
-import { createHash as createHash18, randomUUID as randomUUID3 } from "crypto";
+import { createHash as createHash19, randomUUID as randomUUID3 } from "crypto";
 import { constants as constants10, closeSync as closeSync13, fchmodSync, fstatSync as fstatSync13, fsyncSync as fsyncSync3, linkSync as linkSync2, lstatSync as lstatSync15, mkdirSync as mkdirSync5, openSync as openSync13, opendirSync as opendirSync3, readSync as readSync8, renameSync as renameSync3, rmdirSync as rmdirSync2, rmSync, unlinkSync as unlinkSync4, writeSync as writeSync2 } from "fs";
-import { dirname as dirname12, isAbsolute as isAbsolute13, join as join20, parse as parse6, resolve as resolve12 } from "path";
+import { dirname as dirname13, isAbsolute as isAbsolute14, join as join20, parse as parse6, resolve as resolve13 } from "path";
 var READ_FLAGS = constants10.O_RDONLY | constants10.O_NOFOLLOW | constants10.O_NONBLOCK;
 var WRITE_FLAGS = constants10.O_WRONLY | constants10.O_CREAT | constants10.O_EXCL | constants10.O_NOFOLLOW | constants10.O_NONBLOCK;
 var uid = () => typeof process.getuid === "function" ? BigInt(process.getuid()) : undefined;
@@ -41508,8 +41732,8 @@ function stat(path) {
     return pluginRefusal("Cannot inspect plugin filesystem entry");
   }
 }
-function canonical6(path) {
-  pluginNeed(typeof path === "string" && path.length <= 8192 && isAbsolute13(path) && resolve12(path) === path && !/[\x00-\x1f\x7f]/.test(path), "Plugin storage paths must be canonical absolute paths");
+function canonical7(path) {
+  pluginNeed(typeof path === "string" && path.length <= 8192 && isAbsolute14(path) && resolve13(path) === path && !/[\x00-\x1f\x7f]/.test(path), "Plugin storage paths must be canonical absolute paths");
 }
 function owner(stats, system = false) {
   const current = uid();
@@ -41519,8 +41743,8 @@ function same3(left, right, identityOnly = false) {
   pluginNeed(right && left.dev === right.dev && left.ino === right.ino && left.mode === right.mode && left.uid === right.uid && left.gid === right.gid && (identityOnly || left.size === right.size && left.nlink === right.nlink && left.mtimeNs === right.mtimeNs && left.ctimeNs === right.ctimeNs), "Plugin filesystem entry changed during access");
 }
 function ancestors(path, create = false) {
-  canonical6(path);
-  const result = [], parent = dirname12(path), filesystemRoot = parse6(parent).root;
+  canonical7(path);
+  const result = [], parent = dirname13(path), filesystemRoot = parse6(parent).root;
   let current = filesystemRoot;
   for (const segment of ["", ...parent.slice(filesystemRoot.length).split("/").filter(Boolean)]) {
     if (segment)
@@ -41548,7 +41772,7 @@ function verifyAncestors(chain, identityOnly = true) {
 }
 function privateParent(path) {
   const chain = ancestors(path, true), parent = chain.at(-1);
-  pluginNeed(parent && parent.path === dirname12(path), "Plugin storage parent is unavailable");
+  pluginNeed(parent && parent.path === dirname13(path), "Plugin storage parent is unavailable");
   owner(parent.stat);
   pluginNeed((parent.stat.mode & 0o7777n) === 0o700n, "Plugin storage parent must have mode 0700");
   return chain;
@@ -41834,7 +42058,7 @@ function pluginExecutableDigest(path) {
     const opened = fstatSync13(fd, { bigint: true });
     same3(before, opened);
     fileShape(opened, maximum, "executable");
-    const hash2 = createHash18("sha256"), buffer = new Uint8Array(64 * 1024);
+    const hash2 = createHash19("sha256"), buffer = new Uint8Array(64 * 1024);
     let remaining = Number(opened.size);
     while (remaining > 0) {
       const count = readSync8(fd, buffer, 0, Math.min(buffer.byteLength, remaining), null);
@@ -41859,7 +42083,7 @@ function pluginExecutableDigest(path) {
 
 // src/lib/skill-validation.ts
 import { existsSync as existsSync5, lstatSync as lstatSync16, readFileSync as readFileSync14, readdirSync as readdirSync6, statSync as statSync6 } from "fs";
-import { isAbsolute as isAbsolute14, join as join22, normalize as normalize3 } from "path";
+import { isAbsolute as isAbsolute15, join as join22, normalize as normalize3 } from "path";
 
 // src/lib/hosted-skill-set.ts
 import { existsSync as existsSync4, readFileSync as readFileSync13, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
@@ -41963,7 +42187,7 @@ function sortMessages(messages) {
   return [...messages].sort((a, b) => a.code.localeCompare(b.code) || a.message.localeCompare(b.message));
 }
 function isSafeRelativePath(value) {
-  if (!value.trim() || isAbsolute14(value))
+  if (!value.trim() || isAbsolute15(value))
     return false;
   const normalized = normalize3(value).replace(/\\/g, "/");
   return normalized !== ".." && !normalized.startsWith("../") && !normalized.includes("/../");
@@ -42328,7 +42552,7 @@ function validatePluginTarget(value) {
   for (const registration of value.registrations) {
     pluginKeys(registration, ["scope", "projectPath"]);
     pluginNeed(registration.scope === "user" || registration.scope === "project", "Unsupported plugin registration scope");
-    pluginNeed(registration.scope === "user" ? registration.projectPath === null : typeof registration.projectPath === "string" && isAbsolute15(registration.projectPath) && resolve13(registration.projectPath) === registration.projectPath, "Plugin scope requires its exact project path");
+    pluginNeed(registration.scope === "user" ? registration.projectPath === null : typeof registration.projectPath === "string" && isAbsolute16(registration.projectPath) && resolve14(registration.projectPath) === registration.projectPath, "Plugin scope requires its exact project path");
     const key = JSON.stringify([registration.scope, registration.projectPath]);
     pluginNeed(!scopes.has(key), "Duplicate plugin registration scope");
     scopes.add(key);
@@ -42336,7 +42560,7 @@ function validatePluginTarget(value) {
   for (const key of ["native", "resolver"]) {
     pluginKeys(value[key], key === "native" ? ["version", "executable", "digest"] : ["executable", "digest"]);
     pluginText(value[key].executable);
-    pluginNeed(isAbsolute15(value[key].executable) && resolve13(value[key].executable) === value[key].executable, "Plugin executable must have a canonical absolute path");
+    pluginNeed(isAbsolute16(value[key].executable) && resolve14(value[key].executable) === value[key].executable, "Plugin executable must have a canonical absolute path");
     pluginDigest(value[key].digest);
   }
   pluginNeed(["2.1.274", "2.1.276"].includes(value.native.version), "Plugin admission requires a certified Claude command-source runtime (2.1.274 or 2.1.276)");
@@ -42481,14 +42705,14 @@ function validatePlan(value) {
   pluginNeed(observedEvidenceDigest(plan.observation) === plan.evidenceDigest, "Plugin receipt observed evidence changed");
   pluginNeed(identityDigest(plan) === plan.planDigest, "Plugin receipt immutable identity changed");
 }
-var quote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+var quote2 = (value) => `'${value.replaceAll("'", "'\\''")}'`;
 var resolverGuard = 'exec 9<"$1"; actual=$(/usr/bin/sha256sum /proc/self/fd/9); actual=${actual%% *}; [ "sha256:$actual" = "$2" ]; exec /proc/self/fd/9 integration plugin resolve --binding "$3"';
 function pluginResolverCommand(binding) {
-  return `${quote("/bin/sh")} -eu -c ${quote(resolverGuard)} plugin-resolver ${quote(binding.target.resolver.executable)} ${quote(binding.target.resolver.digest)} ${quote(bindingId(binding))}`;
+  return `${quote2("/bin/sh")} -eu -c ${quote2(resolverGuard)} plugin-resolver ${quote2(binding.target.resolver.executable)} ${quote2(binding.target.resolver.digest)} ${quote2(bindingId(binding))}`;
 }
 function root(options) {
   const path = options.storeRoot ?? pluginAdmissionRoot();
-  pluginNeed(isAbsolute15(path) && resolve13(path) === path, "Invalid plugin admission store root");
+  pluginNeed(isAbsolute16(path) && resolve14(path) === path, "Invalid plugin admission store root");
   return path;
 }
 function pluginBindingPath(storeRoot, id2) {
@@ -42693,15 +42917,15 @@ function validateManagedPluginWitnesses(value) {
     pluginNeed(typeof item.bindingId === "string" && /^[a-f0-9]{64}$/.test(item.bindingId) && !seen.has(item.bindingId), "Invalid or duplicate managed plugin witness");
     seen.add(item.bindingId);
     pluginText(item.storeRoot);
-    pluginNeed(isAbsolute16(item.storeRoot) && resolve14(item.storeRoot) === item.storeRoot, "Invalid plugin receipt store path");
+    pluginNeed(isAbsolute17(item.storeRoot) && resolve15(item.storeRoot) === item.storeRoot, "Invalid plugin receipt store path");
   }
 }
 function safe3(path) {
   pluginText(path);
-  pluginNeed(isAbsolute16(path) && resolve14(path) === path, "Invalid plugin registry path");
-  for (let at = path;; at = dirname13(at)) {
+  pluginNeed(isAbsolute17(path) && resolve15(path) === path, "Invalid plugin registry path");
+  for (let at = path;; at = dirname14(at)) {
     pluginNeed(!lstatSync17(at, { throwIfNoEntry: false })?.isSymbolicLink(), "Plugin registry path traverses a symlink");
-    if (at === dirname13(at))
+    if (at === dirname14(at))
       break;
   }
 }
@@ -42751,7 +42975,7 @@ function hashManagedPluginRegistry(path, managed) {
     seen.add(target.pluginId);
     const rows = plugins[target.pluginId];
     pluginNeed(Array.isArray(rows) && rows.length === target.registrations.length, "Managed plugin registration membership changed");
-    const [name, market] = target.pluginId.split("@"), cacheRoot = join24(dirname13(path), "cache", market, name);
+    const [name, market] = target.pluginId.split("@"), cacheRoot = join24(dirname14(path), "cache", market, name);
     const scopes = new Set, approvals = new Map, currentFiles = new Map;
     plugins[target.pluginId] = rows.map((row) => {
       pluginNeed(pluginObject(row), "Invalid managed plugin registration");
@@ -42767,7 +42991,7 @@ function hashManagedPluginRegistry(path, managed) {
       pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join24(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
-        const digest2 = `sha256:${basename6(producer)}`;
+        const digest2 = `sha256:${basename7(producer)}`;
         const receipt2 = readPluginAdmissionReceipt(witness.storeRoot, witness.bindingId, digest2);
         pluginNeed(receipt2.materializedPath === producer, "Managed producer path is not an approved immutable projection");
         if (!verified.has(producer)) {
@@ -42829,39 +43053,39 @@ function captureManagedPluginRegistry(path, managedPlugins) {
 }
 
 // src/lib/claude-marketplace-registry.ts
-import { createHash as createHash19 } from "crypto";
+import { createHash as createHash20 } from "crypto";
 import { closeSync as closeSync15, constants as constants12, fstatSync as fstatSync15, lstatSync as lstatSync18, openSync as openSync15, readSync as readSync10 } from "fs";
-import { basename as basename7, dirname as dirname14, isAbsolute as isAbsolute17, resolve as resolve15 } from "path";
+import { basename as basename8, dirname as dirname15, isAbsolute as isAbsolute18, resolve as resolve16 } from "path";
 var CLAUDE_MARKETPLACE_REGISTRY_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
-function need5(value, reason) {
+function need6(value, reason2) {
   if (!value)
-    throw new Error(`Claude marketplace registry ${reason}`);
+    throw new Error(`Claude marketplace registry ${reason2}`);
 }
 function absolutePath3(value) {
-  need5(typeof value === "string" && value.length > 0 && value.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute17(value) && resolve15(value) === value, "requires a normalized absolute path");
+  need6(typeof value === "string" && value.length > 0 && value.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute18(value) && resolve16(value) === value, "requires a normalized absolute path");
 }
 var sameFile2 = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs;
 function parents2(path) {
   const result = [];
-  for (let at = dirname14(path);; at = dirname14(at)) {
+  for (let at = dirname15(path);; at = dirname15(at)) {
     const stat2 = lstatSync18(at, { bigint: true });
-    need5(stat2.isDirectory() && !stat2.isSymbolicLink(), "path traverses a symlink or non-directory");
+    need6(stat2.isDirectory() && !stat2.isSymbolicLink(), "path traverses a symlink or non-directory");
     result.push([at, stat2]);
-    if (at === dirname14(at))
+    if (at === dirname15(at))
       return result;
   }
 }
 function readRegistry2(path, budget2) {
   absolutePath3(path);
-  need5(basename7(path) === "known_marketplaces.json", "requires known_marketplaces.json");
-  need5(Number.isSafeInteger(budget2.remaining) && budget2.remaining >= 0, "has an invalid byte budget");
+  need6(basename8(path) === "known_marketplaces.json", "requires known_marketplaces.json");
+  need6(Number.isSafeInteger(budget2.remaining) && budget2.remaining >= 0, "has an invalid byte budget");
   const ancestors2 = parents2(path), initial = lstatSync18(path, { bigint: true });
-  need5(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
-  need5(initial.size <= BigInt(budget2.remaining), "exceeds its aggregate byte limit");
+  need6(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
+  need6(initial.size <= BigInt(budget2.remaining), "exceeds its aggregate byte limit");
   const fd = openSync15(path, constants12.O_RDONLY | constants12.O_NOFOLLOW | constants12.O_NONBLOCK);
   try {
     const opened = fstatSync15(fd, { bigint: true });
-    need5(opened.isFile() && sameFile2(initial, opened), "changed during open");
+    need6(opened.isFile() && sameFile2(initial, opened), "changed during open");
     const bytes = Buffer.alloc(Number(opened.size) + 1);
     let length = 0;
     while (length < bytes.length) {
@@ -42871,10 +43095,10 @@ function readRegistry2(path, budget2) {
       length += count;
     }
     const after = fstatSync15(fd, { bigint: true }), current = lstatSync18(path, { bigint: true });
-    need5(current.isFile() && sameFile2(opened, after) && sameFile2(after, current) && BigInt(length) === opened.size, "changed during read");
+    need6(current.isFile() && sameFile2(opened, after) && sameFile2(after, current) && BigInt(length) === opened.size, "changed during read");
     for (const [ancestor, before] of ancestors2) {
       const now = lstatSync18(ancestor, { bigint: true });
-      need5(now.isDirectory() && before.dev === now.dev && before.ino === now.ino && before.mode === now.mode, "parent changed during read");
+      need6(now.isDirectory() && before.dev === now.dev && before.ino === now.ino && before.mode === now.mode, "parent changed during read");
     }
     budget2.remaining -= length;
     try {
@@ -42894,7 +43118,7 @@ function parse7(text2) {
       at++;
   };
   function string() {
-    need5(text2[at] === '"', "contains invalid JSON");
+    need6(text2[at] === '"', "contains invalid JSON");
     const start = at++;
     while (at < text2.length) {
       const character = text2[at++];
@@ -42905,7 +43129,7 @@ function parse7(text2) {
         } catch {
           throw new Error("Claude marketplace registry contains invalid JSON string");
         }
-        need5(value2.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.stringCharacters, "exceeds its string limit");
+        need6(value2.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.stringCharacters, "exceeds its string limit");
         return value2;
       }
       if (character === "\\")
@@ -42914,7 +43138,7 @@ function parse7(text2) {
     throw new Error("Claude marketplace registry contains an unterminated JSON string");
   }
   function value(depth) {
-    need5(depth <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.depth && ++nodes <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.nodes, "exceeds its nesting or node limit");
+    need6(depth <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.depth && ++nodes <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.nodes, "exceeds its nesting or node limit");
     space();
     const character = text2[at];
     if (character === '"')
@@ -42928,17 +43152,17 @@ function parse7(text2) {
           if (object6) {
             space();
             const key = string();
-            need5(!keys2.has(key), "contains a duplicate JSON key");
+            need6(!keys2.has(key), "contains a duplicate JSON key");
             keys2.add(key);
             space();
-            need5(text2[at++] === ":", "contains invalid JSON");
+            need6(text2[at++] === ":", "contains invalid JSON");
             entries.push([key, value(depth + 1)]);
           } else
             items.push(value(depth + 1));
           space();
           if (text2[at] === end)
             break;
-          need5(text2[at++] === ",", "contains invalid JSON");
+          need6(text2[at++] === ",", "contains invalid JSON");
         }
       at++;
       return object6 ? { kind: "object", entries } : { kind: "array", items };
@@ -42950,96 +43174,112 @@ function parse7(text2) {
       }
     numberPattern.lastIndex = at;
     const number = numberPattern.exec(text2);
-    need5(number, "contains invalid JSON");
+    need6(number, "contains invalid JSON");
     at += number[0].length;
     return { kind: "number", value: number[0] };
   }
   const root2 = value(0);
   space();
-  need5(at === text2.length && root2.kind === "object", "requires a JSON object without trailing content");
-  need5(root2.entries.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.rows, "exceeds its marketplace row limit");
+  need6(at === text2.length && root2.kind === "object", "requires a JSON object without trailing content");
+  need6(root2.entries.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.rows, "exceeds its marketplace row limit");
   return root2;
 }
 function exactKeys2(value, keys2) {
   return value?.kind === "object" && value.entries.length === keys2.length && value.entries.every(([key]) => keys2.includes(key));
 }
-var field = (object6, key) => object6.entries.find(([name]) => name === key)?.[1];
+var field2 = (object6, key) => object6.entries.find(([name]) => name === key)?.[1];
 function textField(value) {
-  need5(value?.kind === "string" && value.value.length > 0 && !/[\x00-\x1f\x7f]/.test(value.value), "contains an invalid recognized field");
+  need6(value?.kind === "string" && value.value.length > 0 && !/[\x00-\x1f\x7f]/.test(value.value), "contains an invalid recognized field");
   return value.value;
 }
 function normalizeRow(row, version = 1) {
   if (!exactKeys2(row, ["source", "installLocation", "lastUpdated"])) {
     if (version !== 2 || !exactKeys2(row, ["source", "installLocation", "lastUpdated", "autoUpdate"]))
       return;
-    const autoUpdate = field(row, "autoUpdate");
-    need5(autoUpdate?.kind === "literal" && (autoUpdate.value === "true" || autoUpdate.value === "false"), "contains an invalid automatic-update preference");
+    const autoUpdate = field2(row, "autoUpdate");
+    need6(autoUpdate?.kind === "literal" && (autoUpdate.value === "true" || autoUpdate.value === "false"), "contains an invalid automatic-update preference");
   }
-  const source = field(row, "source");
+  const source = field2(row, "source");
   if (source?.kind !== "object")
     return;
-  const type = field(source, "source");
+  const type = field2(source, "source");
   if (type?.kind !== "string" || !["github", "directory"].includes(type.value))
     return;
   const location = type.value === "github" ? "repo" : "path";
   if (!exactKeys2(source, ["source", location]))
     return;
-  const sourceLocation = textField(field(source, location));
+  const sourceLocation = textField(field2(source, location));
   if (type.value === "directory")
     absolutePath3(sourceLocation);
-  absolutePath3(textField(field(row, "installLocation")));
-  const updated = textField(field(row, "lastUpdated"));
-  need5(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(updated), "contains an invalid recognized update timestamp");
+  absolutePath3(textField(field2(row, "installLocation")));
+  const updated = textField(field2(row, "lastUpdated"));
+  need6(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(updated), "contains an invalid recognized update timestamp");
   const millis = Date.parse(updated);
-  need5(Number.isFinite(millis) && new Date(millis).toISOString() === updated, "contains an invalid recognized update timestamp");
+  need6(Number.isFinite(millis) && new Date(millis).toISOString() === updated, "contains an invalid recognized update timestamp");
   row.entries = row.entries.map(([key, value]) => [key, key === "lastUpdated" ? { kind: "validated-update-time" } : value]);
 }
 function captureClaudeMarketplaceRegistry(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
   const value = parse7(readRegistry2(path, budget2));
   for (const [, row] of value.entries)
     normalizeRow(row);
-  const sha2562 = createHash19("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
+  const sha2562 = createHash20("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry", sha256: sha2562 };
 }
 function captureClaudeMarketplaceRegistryV2(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
   const value = parse7(readRegistry2(path, budget2));
   for (const [, row] of value.entries)
     normalizeRow(row, 2);
-  const sha2562 = createHash19("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
+  const sha2562 = createHash20("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry-v2", sha256: sha2562 };
 }
 
 // src/lib/codex-hook-discovery-recovery.ts
-import { createHash as createHash21 } from "crypto";
+import { createHash as createHash22 } from "crypto";
 
 // src/lib/codex-hook-trust-files.ts
-import { closeSync as closeSync16, constants as constants13, fstatSync as fstatSync16, fsyncSync as fsyncSync4, lstatSync as lstatSync19, openSync as openSync16, readSync as readSync11, writeFileSync as writeFileSync4 } from "fs";
-import { createHash as createHash20 } from "crypto";
-import { dirname as dirname15 } from "path";
-function need6(value, code) {
+import { closeSync as closeSync16, constants as constants13, fstatSync as fstatSync16, fsyncSync as fsyncSync4, lstatSync as lstatSync19, openSync as openSync16, readlinkSync as readlinkSync5, readSync as readSync11, writeFileSync as writeFileSync4 } from "fs";
+import { createHash as createHash21 } from "crypto";
+import { dirname as dirname16, isAbsolute as isAbsolute19, resolve as resolve17 } from "path";
+function need7(value, code) {
   if (!value)
     throw new Error(`CODEX_HOOK_TRUST_${code}`);
 }
 var sameStat = (a, b) => ["dev", "ino", "uid", "nlink", "mode", "size", "mtimeNs", "ctimeNs"].every((key) => a[key] === b[key]);
+function trustedAncestorOwner(uid2) {
+  return BigInt(uid2) === 0n || BigInt(uid2) === BigInt(process.getuid());
+}
 function safeParents(file) {
-  for (let p = dirname15(file);; p = dirname15(p)) {
+  for (let p = dirname16(file);; p = dirname16(p)) {
     const s = lstatSync19(p);
-    need6(s.isDirectory() && !s.isSymbolicLink(), "UNSAFE_PARENT");
-    need6((s.mode & 18) === 0 || s.uid === 0 && (s.mode & 512) !== 0, "UNSAFE_PARENT");
-    if (dirname15(p) === p)
+    need7(s.isDirectory() && !s.isSymbolicLink() && trustedAncestorOwner(s.uid), "UNSAFE_PARENT");
+    need7((s.mode & 18) === 0 || s.uid === 0 && (s.mode & 512) !== 0, "UNSAFE_PARENT");
+    if (dirname16(p) === p)
       break;
   }
 }
+function directAliasTarget(link) {
+  const text2 = readlinkSync5(link), parts = text2.split("/");
+  let first = 0;
+  if (isAbsolute19(text2))
+    first = 1;
+  else
+    while (parts[first] === "..")
+      first++;
+  const names = parts.slice(first);
+  if (!names.length || names.some((part) => part === "" || part === "." || part === ".."))
+    return;
+  return resolve17(dirname16(link), text2);
+}
 function snapshot(file, privateFile = false, options = {}) {
   const readOnlyPackage = options.readOnlyPackage === true && !privateFile;
   safeParents(file);
   const initial = lstatSync19(file, { bigint: true });
-  need6(initial.isFile() && initial.uid === BigInt(process.getuid()) && (initial.nlink === 1n || readOnlyPackage && initial.nlink > 1n) && (initial.mode & 0o022n) === 0n && (!privateFile || (initial.mode & 0o777n) === 0o600n), "UNSAFE_FILE");
-  need6(initial.size <= 8n * 1024n * 1024n, "FILE_BOUND");
+  need7(initial.isFile() && initial.uid === BigInt(process.getuid()) && (initial.nlink === 1n || readOnlyPackage && initial.nlink > 1n) && (initial.mode & 0o022n) === 0n && (!privateFile || (initial.mode & 0o777n) === 0o600n), "UNSAFE_FILE");
+  need7(initial.size <= 8n * 1024n * 1024n, "FILE_BOUND");
   const fd = openSync16(file, constants13.O_RDONLY | constants13.O_NOFOLLOW | constants13.O_NONBLOCK);
   try {
     const before = fstatSync16(fd, { bigint: true });
-    need6(sameStat(initial, before), "INPUT_CHANGED");
+    need7(sameStat(initial, before), "INPUT_CHANGED");
     const bytes = Buffer.alloc(Number(before.size) + 1);
     let length = 0;
     while (length < bytes.length) {
@@ -43048,16 +43288,16 @@ function snapshot(file, privateFile = false, options = {}) {
         break;
       length += n2;
     }
-    need6(length === Number(before.size) && sameStat(before, fstatSync16(fd, { bigint: true })) && sameStat(before, lstatSync19(file, { bigint: true })), "INPUT_CHANGED");
+    need7(length === Number(before.size) && sameStat(before, fstatSync16(fd, { bigint: true })) && sameStat(before, lstatSync19(file, { bigint: true })), "INPUT_CHANGED");
     const content = bytes.subarray(0, length), text2 = new TextDecoder("utf-8", { fatal: true }).decode(content);
-    return { file, privateFile, readOnlyPackage, text: text2, bytes: content, stat: before, sha256: createHash20("sha256").update(content).digest("hex") };
+    return { file, privateFile, readOnlyPackage, text: text2, bytes: content, stat: before, sha256: createHash21("sha256").update(content).digest("hex") };
   } finally {
     closeSync16(fd);
   }
 }
 function unchanged2(before) {
   const after = snapshot(before.file, before.privateFile, before.readOnlyPackage ? { readOnlyPackage: true } : {});
-  need6(sameStat(before.stat, after.stat) && after.sha256 === before.sha256, "INPUT_CHANGED");
+  need7(sameStat(before.stat, after.stat) && after.sha256 === before.sha256, "INPUT_CHANGED");
 }
 
 // src/lib/codex-hook-additions-review.ts
@@ -43066,12 +43306,12 @@ var matchedEvents = { ...events, PreToolUse: ["preToolUse", "pre_tool_use"] };
 var proofs = new WeakMap;
 
 // src/lib/codex-hook-discovery-recovery.ts
-var sha3 = (text2) => createHash21("sha256").update(text2).digest("hex");
+var sha3 = (text2) => createHash22("sha256").update(text2).digest("hex");
 var fields = [...CODEX_DISCOVERY_PROJECTION_FIELDS];
 var proofs2 = new WeakMap;
 function assertCodexHookDiscoveryRecovery(binding, witness) {
   const proof = proofs2.get(witness);
-  need6(!!proof && binding.agent === "codex" && witness.discoverySha256 === sha3(JSON.stringify(binding)), "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
+  need7(!!proof && binding.agent === "codex" && witness.discoverySha256 === sha3(JSON.stringify(binding)), "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
   unchanged2(proof.before);
   unchanged2(proof.current);
   proof.recheckAdditions();
@@ -43080,34 +43320,34 @@ function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witnes
   if (!witness || source.path !== witness.configPath || source.hashMode !== "bytes")
     return false;
   assertCodexHookDiscoveryRecovery(binding, witness);
-  need6(source.sha256 === witness.beforeSha256 && currentDigest === witness.currentSha256, "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
+  need7(source.sha256 === witness.beforeSha256 && currentDigest === witness.currentSha256, "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
   return true;
 }
 
 // src/lib/agent-sumi.ts
 import { existsSync as existsSync6, lstatSync as lstatSync20, realpathSync as realpathSync8 } from "fs";
-import { join as join25, resolve as resolve16 } from "path";
+import { join as join25, resolve as resolve18 } from "path";
 function sumiConfigDirectory(home, env = process.env) {
   for (const key of ["SUMI_CONFIG", "SUMI_CONFIG_CONTENT"])
     if (env[key] !== undefined)
       throw new Error(`Sumi ${key} requires a dedicated discovery adapter; unset it before Skills integration`);
   const selected = (key) => env[key]?.trim() ? env[key] : undefined;
-  const expand = (value) => resolve16(value === "~" ? home : value.startsWith("~/") ? join25(home, value.slice(2)) : value);
+  const expand = (value) => resolve18(value === "~" ? home : value.startsWith("~/") ? join25(home, value.slice(2)) : value);
   const explicit = selected("SUMI_CONFIG_DIR");
   const xdg = selected("XDG_CONFIG_HOME");
   const custom = selected("SUMI_HOME");
-  const canonical7 = explicit ? expand(explicit) : xdg ? join25(expand(xdg), "sumi") : join25(custom ? expand(custom) : join25(home, ".hasna-internal/sumi"), "config");
+  const canonical8 = explicit ? expand(explicit) : xdg ? join25(expand(xdg), "sumi") : join25(custom ? expand(custom) : join25(home, ".hasna-internal/sumi"), "config");
   if (explicit || xdg || custom)
-    return canonical7;
+    return canonical8;
   const legacy = join25(home, ".config/sumi");
-  const a = lstatSync20(canonical7, { throwIfNoEntry: false }), b = lstatSync20(legacy, { throwIfNoEntry: false });
-  if (a && b && realpathSync8(canonical7) !== realpathSync8(legacy))
+  const a = lstatSync20(canonical8, { throwIfNoEntry: false }), b = lstatSync20(legacy, { throwIfNoEntry: false });
+  if (a && b && realpathSync8(canonical8) !== realpathSync8(legacy))
     throw new Error("Sumi config roots conflict; complete native home adoption before Skills integration");
-  const path = a ? canonical7 : b ? legacy : canonical7;
+  const path = a ? canonical8 : b ? legacy : canonical8;
   if (!existsSync6(path))
     return path;
   const physical = realpathSync8(path);
-  if ((a?.isSymbolicLink() || b?.isSymbolicLink()) && ![canonical7, legacy].includes(physical))
+  if ((a?.isSymbolicLink() || b?.isSymbolicLink()) && ![canonical8, legacy].includes(physical))
     throw new Error("Sumi config alias must resolve to its canonical or legacy root");
   return physical;
 }
@@ -43207,7 +43447,38 @@ var SUMI_SKILL_PERMISSIONS = [
 ];
 
 // src/lib/agent-discovery.ts
-var digest2 = (text2) => createHash22("sha256").update(text2).digest("hex");
+var DISCOVERY_RUNTIME_COMMANDS = Object.freeze({ gemini: "gemini" });
+var DISCOVERY_ROOT_UNRESOLVED = "DISCOVERY_ROOT_UNRESOLVED";
+function discoveryRootUnresolved(agent, command, detail) {
+  return new Error(`${DISCOVERY_ROOT_UNRESOLVED}: ${agent} discovery cannot resolve its "${command}" executable: ${detail}. The reviewed discovery is unchanged; this is an environment gap, not drift.`);
+}
+function isDiscoveryRootUnresolved(error) {
+  return error instanceof Error && error.message.startsWith(`${DISCOVERY_ROOT_UNRESOLVED}: `);
+}
+var quotedPath = (path) => JSON.stringify(path).replace(/[^\x20-\x7e]/g, (character) => `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`);
+var realpathOrNull = (path) => {
+  try {
+    return realpathSync9(path);
+  } catch {
+    return null;
+  }
+};
+function discoveryExecutable(agent) {
+  const command = DISCOVERY_RUNTIME_COMMANDS[agent];
+  const found = command ? Bun.which(command) : null;
+  if (!command || !found)
+    return null;
+  const path = resolve19(found), target = realpathOrNull(path);
+  return target === null ? null : { command, path, target };
+}
+function recordedDiscoveryExecutable(agent, recorded) {
+  const command = DISCOVERY_RUNTIME_COMMANDS[agent];
+  if (!command || recorded.command !== command)
+    throw new Error(`Recorded ${agent} discovery executable names another command`);
+  const target = realpathOrNull(recorded.path);
+  return target === null ? null : { command, path: recorded.path, target };
+}
+var digest2 = (text2) => createHash23("sha256").update(text2).digest("hex");
 function parseConfig(text2, path, toml = false) {
   try {
     const value = toml ? Bun.TOML.parse(text2) : JSON.parse(text2);
@@ -43219,12 +43490,12 @@ function parseConfig(text2, path, toml = false) {
   }
 }
 function safe4(path) {
-  if (!isAbsolute18(path) || path.includes("\x00"))
+  if (!isAbsolute20(path) || path.includes("\x00"))
     throw new Error("Expected an absolute native discovery path");
-  for (let cursor = path;; cursor = dirname16(cursor)) {
+  for (let cursor = path;; cursor = dirname17(cursor)) {
     if (lstatSync21(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
       throw new Error(`Refusing symlink native discovery input: ${cursor}`);
-    if (dirname16(cursor) === cursor)
+    if (dirname17(cursor) === cursor)
       break;
   }
 }
@@ -43243,7 +43514,7 @@ function projectNativeDiscoveryFields(text2, format, fields2, path) {
   const object6 = format === "yaml" ? parseHermesConfig(text2) : parseConfig(text2, path, format === "toml");
   if (!object6 || typeof object6 !== "object" || Array.isArray(object6))
     throw new Error("Expected native discovery configuration object");
-  return digest2(JSON.stringify(Object.fromEntries(fields2.map((field2) => [field2, object6[field2] ?? null]))));
+  return digest2(JSON.stringify(Object.fromEntries(fields2.map((field3) => [field3, object6[field3] ?? null]))));
 }
 function isSupersededSettingsProjection(agent, configPath, source) {
   if (agent === "sumi")
@@ -43288,6 +43559,14 @@ function projected(source, changes, budget2 = discoveryByteBudget()) {
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
     return sha2562;
   }
+  if (source.hashMode === "claude-marketplace-entry-v1") {
+    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256) || changes?.has(source.path) || !claudeMarketplaceEntrySourceValid(source))
+      throw new Error("Claude marketplace entry witnesses require an exact reviewed entry without synthetic changes");
+    const sha2562 = captureClaudeMarketplaceEntry(source.path, source.marketplace, source.plugin, budget2).sha256;
+    if (sha2562 !== source.sha256)
+      throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
+    return sha2562;
+  }
   if (source.hashMode === "claude-plugin-registry") {
     if (source.format !== undefined || source.fields !== undefined || !source.managedPlugins || changes?.has(source.path))
       throw new Error("Managed plugin registry witnesses require verified native registrations");
@@ -43325,7 +43604,7 @@ function absentCodexSkillRoots(binding) {
     throw new Error("Invalid disabled Codex discovery proof");
   if (binding.method !== "reviewed" || controls.every((control) => lstatSync21(control.pluginParent, { throwIfNoEntry: false })))
     return [];
-  const cache = dirname16(dirname16(controls[0].pluginParent)), config = join26(dirname16(dirname16(cache)), "config.toml");
+  const cache = dirname17(dirname17(controls[0].pluginParent)), config = join26(dirname17(dirname17(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || projected(source) !== source.sha256)
     throw new Error("Missing current disabled Codex configuration witness");
@@ -43333,7 +43612,7 @@ function absentCodexSkillRoots(binding) {
   return [...new Set(controls.map((control) => control.pluginParent))].filter((parent) => !codexDirectHookSelects(cache, parent) && absentDisabledCodexPluginParent(cache, parent, controls, rules));
 }
 function codexDirectHookSelects(cache, root2) {
-  const codex = dirname16(dirname16(cache)), config = Bun.TOML.parse(read2(join26(codex, "config.toml")) ?? "");
+  const codex = dirname17(dirname17(cache)), config = Bun.TOML.parse(read2(join26(codex, "config.toml")) ?? "");
   const hooks = read2(join26(codex, "hooks.json"));
   if (hooks !== null)
     hashNativeJsonControls(hooks);
@@ -43346,7 +43625,7 @@ function retiredCodexRoots(binding) {
   const controls = binding.codexDisabledPluginSkills;
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !Array.isArray(controls) || !controls.length || !Array.isArray(proof.roots) || proof.roots.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.roots).size !== proof.roots.length || !Array.isArray(proof.directories) || proof.parents !== undefined && (!Array.isArray(proof.parents) || proof.parents.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.parents).size !== proof.parents.length) || !proof.roots.length && !proof.parents?.length)
     throw new Error("Invalid retired Codex materialization proof");
-  const cache = dirname16(dirname16(controls[0].pluginParent)), config = join26(dirname16(dirname16(cache)), "config.toml");
+  const cache = dirname17(dirname17(controls[0].pluginParent)), config = join26(dirname17(dirname17(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || projected(source) !== source.sha256)
     throw new Error("Missing current retired Codex configuration witness");
@@ -43363,8 +43642,8 @@ function retiredCodexRoots(binding) {
 function captureRetiredCodexDiscovery(binding, controls, rules) {
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !controls.length)
     return binding;
-  const cache = dirname16(dirname16(controls[0].pluginParent));
-  const candidates = binding.sources.filter((source) => source.path.endsWith(sep6 + ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined && [undefined, "bytes"].includes(source.hashMode)).map((source) => dirname16(dirname16(source.path)));
+  const cache = dirname17(dirname17(controls[0].pluginParent));
+  const candidates = binding.sources.filter((source) => source.path.endsWith(sep6 + ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined && [undefined, "bytes"].includes(source.hashMode)).map((source) => dirname17(dirname17(source.path)));
   const roots = [...new Set(candidates)].filter((root2) => !codexDirectHookSelects(cache, root2) && reviewedRetiredCodexRoot(cache, root2, controls, rules, (path) => read2(path), binding.codexRetiredMaterializations?.roots.includes(root2) ?? false)).sort();
   const parents3 = reviewedCodexPluginCapabilitiesUnchanged(cache, controls, (path) => read2(path), rules) ? [...new Set(controls.map((control) => control.pluginParent))].filter((parent) => !codexDirectHookSelects(cache, parent) && reviewedDisabledCodexPluginParent(cache, parent, controls, rules)).sort() : [];
   const { codexRetiredMaterializations: previous, ...current } = binding;
@@ -43393,7 +43672,7 @@ function absentRetiredClaudeRoots(binding) {
     safe4(root2);
     if (lstatSync21(root2, { throwIfNoEntry: false }))
       continue;
-    const claude = dirname16(dirname16(cache)), settings = join26(claude, "settings.json"), registry = join26(claude, "plugins/installed_plugins.json");
+    const claude = dirname17(dirname17(cache)), settings = join26(claude, "settings.json"), registry = join26(claude, "plugins/installed_plugins.json");
     const full = (path) => binding.sources.find((item) => item.path === path && item.sha256 !== null && item.format === undefined && item.fields === undefined);
     const configSource = full(settings), registrySource = full(registry);
     if (!configSource || !registrySource || projected(configSource) !== configSource.sha256 || projected(registrySource) !== registrySource.sha256)
@@ -43410,7 +43689,7 @@ function absentRetiredClaudeRoots(binding) {
     if (!Array.isArray(rows) || rows.length !== 1 || rows[0]?.scope !== "user" || typeof rows[0]?.installPath !== "string")
       continue;
     const active = rows[0].installPath;
-    if (rows[0].version !== basename8(active) || resolve17(active) !== active || dirname16(active) !== dirname16(root2) || active === root2 || !lstatSync21(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync9(active) !== active)
+    if (rows[0].version !== basename9(active) || resolve19(active) !== active || dirname17(active) !== dirname17(root2) || active === root2 || !lstatSync21(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync9(active) !== active)
       continue;
     const activeManifest = full(join26(active, ".claude-plugin/plugin.json"));
     if (!activeManifest || projected(activeManifest) !== activeManifest.sha256)
@@ -43461,7 +43740,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
     assertMarketplaceBinding(binding, source);
     if (source.hashMode === "claude-plugin-registry" && binding.agent !== "claude")
       throw new Error("Managed Claude registry witnesses cannot apply to another agent");
-    if (source.format !== undefined && (!["json", "toml", "yaml"].includes(source.format) || !Array.isArray(source.fields) || !source.fields.length || source.fields.length > 64 || source.fields.some((field2) => typeof field2 !== "string" || !field2)))
+    if (source.format !== undefined && (!["json", "toml", "yaml"].includes(source.format) || !Array.isArray(source.fields) || !source.fields.length || source.fields.length > 64 || source.fields.some((field3) => typeof field3 !== "string" || !field3)))
       throw new Error("Invalid native discovery projection");
     if (source.sha256 !== null && !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Invalid native discovery digest");
@@ -43491,13 +43770,13 @@ function codexInstallationRoots(binding) {
     return [];
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !supportsCodexNativeCapability(proof.version, "installed-plugin-review") || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
     throw new Error("Invalid native installation input proof");
-  const cache = dirname16(dirname16(proof.plugins[0].pluginParent));
-  const config = join26(dirname16(dirname16(cache)), "config.toml"), home = dirname16(dirname16(dirname16(cache)));
+  const cache = dirname17(dirname17(proof.plugins[0].pluginParent));
+  const config = join26(dirname17(dirname17(cache)), "config.toml"), home = dirname17(dirname17(dirname17(cache)));
   const configSource = binding.sources.find((source) => source.path === config && source.sha256 !== null && (!source.format || source.format === "toml" && source.fields?.includes("plugins")));
   const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join26(home, path));
-  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep6) || input.sourceRoot.startsWith(root2 + sep6)) || binding.sources.some((source) => basename8(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep6)))))
+  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep6) || input.sourceRoot.startsWith(root2 + sep6)) || binding.sources.some((source) => basename9(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep6)))))
     throw new Error("Native installation input overlaps configuration or loading roots");
-  if (proof.plugins.some((input) => dirname16(dirname16(input.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join26(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
+  if (proof.plugins.some((input) => dirname17(dirname17(input.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join26(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
     throw new Error("Missing native installation input source witness");
   return reviewedCodexPluginSourceRoots(cache, proof.plugins, (path) => {
     const text2 = read2(path);
@@ -43507,16 +43786,18 @@ function codexInstallationRoots(binding) {
   });
 }
 function assertMarketplaceBinding(binding, source) {
-  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename8(source.path) !== "plugin.json" || !source.path.endsWith(join26(sep6, ".claude-plugin", "plugin.json"))))
+  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename9(source.path) !== "plugin.json" || !source.path.endsWith(join26(sep6, ".claude-plugin", "plugin.json"))))
     throw new Error("Claude plugin manifest witnesses require Claude plugin discovery");
-  if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename8(source.path) !== "sumi.json"))
+  if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename9(source.path) !== "sumi.json"))
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
-  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename8(source.path) !== "config.toml"))
+  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename9(source.path) !== "config.toml"))
     throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
-  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename9(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
+  if (source.hashMode === "claude-marketplace-entry-v1" && (binding.agent !== "claude" || binding.method !== "reviewed" || !claudeMarketplaceEntrySourceValid(source)))
+    throw new Error("Claude marketplace entry witnesses require explicit reviewed Claude discovery of one named entry");
 }
 function rebindAgentDiscovery(binding, changes) {
   const budget2 = discoveryByteBudget();
@@ -43549,10 +43830,10 @@ function captureDiscoveryPathSources(paths) {
   const budget2 = discoveryByteBudget();
   return paths.map((path) => ({ path, hashMode: "path-bytes", sha256: hashDiscoveryPathFile(path, budget2) }));
 }
-function assertProjectDiscovery(agent, directories, home, canonical7 = resolve17, reviewed) {
-  const homeConfigPath = canonical7(agentDiscoveryConfigPath(home, agent));
+function assertProjectDiscovery(agent, directories, home, canonical8 = resolve19, reviewed) {
+  const homeConfigPath = canonical8(agentDiscoveryConfigPath(home, agent));
   for (const directory of directories) {
-    const isHome = resolve17(directory) === resolve17(home);
+    const isHome = resolve19(directory) === resolve19(home);
     if (agent === "hermes") {
       assertHermesEnvironment(home);
       continue;
@@ -43561,7 +43842,7 @@ function assertProjectDiscovery(agent, directories, home, canonical7 = resolve17
       continue;
     const paths = agent === "claude" ? [...isHome ? [] : [".claude/settings.json"], ".claude/settings.local.json"] : agent === "codex" ? [".codex/config.toml"] : agent === "gemini" ? [".gemini/settings.json"] : agent === "opencode" ? ["opencode.json", "opencode.jsonc", ".opencode/opencode.json", ".opencode/opencode.jsonc"] : agent === "sumi" ? ["sumi.json", "sumi.jsonc", ".sumi/sumi.json", ".sumi/sumi.jsonc"] : [".cursor/hooks.json"];
     for (const suffix of paths) {
-      const path = canonical7(join26(directory, suffix)), raw = read2(path);
+      const path = canonical8(join26(directory, suffix)), raw = read2(path);
       if (raw === null)
         continue;
       const isRootAliasedHomeConfig = agent === "claude" && suffix === ".claude/settings.json" || agent === "codex" && suffix === ".codex/config.toml";
@@ -43577,7 +43858,7 @@ function assertProjectDiscovery(agent, directories, home, canonical7 = resolve17
         const managed = reviewed.sources.flatMap((source) => source.hashMode === "claude-plugin-registry" ? source.managedPlugins ?? [] : []);
         if (exact && projected(exact) === exact.sha256 && managed.length) {
           const bindings = managed.map((item) => readPluginBinding(item.storeRoot, item.bindingId));
-          admittedPlugins = Object.entries(config.enabledPlugins).every(([id2, enabled]) => typeof enabled === "boolean" && bindings.some((binding) => binding.target.pluginId === id2 && binding.target.registrations.some((scope) => scope.scope === "project" && scope.projectPath === canonical7(directory))));
+          admittedPlugins = Object.entries(config.enabledPlugins).every(([id2, enabled]) => typeof enabled === "boolean" && bindings.some((binding) => binding.target.pluginId === id2 && binding.target.registrations.some((scope) => scope.scope === "project" && scope.projectPath === canonical8(directory))));
         }
       }
       if (keys2.some((key) => config[key] !== undefined && !(key === "enabledPlugins" && admittedPlugins)) || config.disableAllHooks === true || config.disableBundledSkills === false || config.hooksConfig?.enabled === false || config.permission?.skill !== undefined || config.permissions?.deny?.some((rule) => typeof rule === "string" && /^Skill(?:\(|$)/.test(rule)))
@@ -43585,13 +43866,13 @@ function assertProjectDiscovery(agent, directories, home, canonical7 = resolve17
     }
     if (agent === "sumi")
       for (const name of ["plugin", "plugins"]) {
-        const path = canonical7(join26(directory, ".sumi", name));
+        const path = canonical8(join26(directory, ".sumi", name));
         safe4(path);
         if (lstatSync21(path, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(path).length)
           throw new Error(`NATIVE_SKILL_DRIFT: project Sumi plugins require a dedicated discovery review: ${path}`);
       }
     if (agent === "claude") {
-      const commands = canonical7(join26(directory, ".claude/commands"));
+      const commands = canonical8(join26(directory, ".claude/commands"));
       safe4(commands);
       if (lstatSync21(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(commands).length)
         throw new Error("NATIVE_SKILL_DRIFT: legacy project command discovery requires a dedicated format adapter");
@@ -43603,11 +43884,37 @@ function agentDiscoveryConfigPath(home, agent) {
     return sumiConfigPath(home);
   return join26(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
 }
+function verifyAutomaticDiscoveryClosure(binding, options) {
+  const command = DISCOVERY_RUNTIME_COMMANDS[binding.agent], recorded = options.executable;
+  const onPath = discoveryExecutable(binding.agent);
+  let runtime, gap;
+  if (recorded) {
+    runtime = recordedDiscoveryExecutable(binding.agent, recorded);
+    if (runtime && runtime.target !== recorded.target)
+      throw new Error(`${options.change}: the recorded ${binding.agent} executable now resolves to ${quotedPath(runtime.target)}, not the reviewed ${quotedPath(recorded.target)}`);
+    if (onPath && onPath.target !== recorded.target)
+      throw new Error(`${options.change}: the "${command}" on this process's PATH resolves to ${quotedPath(onPath.target)}, not the reviewed ${quotedPath(recorded.target)}`);
+    if (!runtime)
+      gap = `the recorded executable ${quotedPath(recorded.path)} no longer resolves. Restore it, or review the change with skills hook install`;
+  } else {
+    runtime = onPath;
+    if (!runtime)
+      gap = "it is not on this process's PATH, and the reviewed policy has no recorded executable path. Run with the PATH used for the review, or run skills hook install there to record it";
+  }
+  const current = resolveAgentDiscovery({ home: options.home, agent: binding.agent, canonical: options.canonical, executable: runtime });
+  if (JSON.stringify(current) === JSON.stringify(binding))
+    return;
+  const reviewedWithRuntime = (binding.builtinNames?.length ?? 0) > 0 || binding.sources.some((source) => basename9(source.path) === "package.json");
+  const otherwiseCurrent = current.method === binding.method && JSON.stringify(current.roots) === JSON.stringify(binding.roots) && JSON.stringify(current.directories) === JSON.stringify(binding.directories) && current.sources.every((source) => binding.sources.some((saved) => isDeepStrictEqual6(saved, source)));
+  if (command && gap && runtime === null && reviewedWithRuntime && otherwiseCurrent)
+    throw discoveryRootUnresolved(binding.agent, command, gap);
+  throw new Error(options.change);
+}
 function resolveAgentDiscovery(options) {
-  const canonical7 = options.canonical ?? resolve17, home = resolve17(options.home), agent = options.agent;
+  const canonical8 = options.canonical ?? resolve19, home = resolve19(options.home), agent = options.agent;
   const sources = [], roots = new Set, builtinNames = [];
   const witness = (path, format, fields2, hashMode) => {
-    const source = { path: canonical7(path), sha256: null, ...format ? { format, fields: fields2 } : {}, ...hashMode ? { hashMode } : {} };
+    const source = { path: canonical8(path), sha256: null, ...format ? { format, fields: fields2 } : {}, ...hashMode ? { hashMode } : {} };
     source.sha256 = projected(source);
     sources.push(source);
     return read2(source.path);
@@ -43629,13 +43936,13 @@ function resolveAgentDiscovery(options) {
       unresolved("JSONC configuration requires a supported format adapter");
     for (const root2 of [directory, join26(home, ".claude"), join26(home, ".agents")])
       for (const name of ["skill", "skills"])
-        roots.add(canonical7(join26(root2, name)));
+        roots.add(canonical8(join26(root2, name)));
     if (config.skills !== undefined && (!Array.isArray(config.skills) || config.skills.some((path) => typeof path !== "string")))
       unresolved("skills must be a string array");
     for (const value of config.skills ?? []) {
-      if (typeof value !== "string" || /[\0$]/.test(value) || !value || !(isAbsolute18(value) || value.startsWith("~/")))
+      if (typeof value !== "string" || /[\0$]/.test(value) || !value || !(isAbsolute20(value) || value.startsWith("~/")))
         unresolved("remote or relative skill sources need a dedicated discovery adapter");
-      roots.add(canonical7(value.startsWith("~/") ? join26(home, value.slice(2)) : value));
+      roots.add(canonical8(value.startsWith("~/") ? join26(home, value.slice(2)) : value));
     }
     for (const key of ["plugin", "plugins"])
       if (config[key] !== undefined && !Array.isArray(config[key]))
@@ -43674,23 +43981,23 @@ function resolveAgentDiscovery(options) {
         continue;
       if (normalized.startsWith("~") && normalized !== "~" && !normalized.startsWith("~/"))
         unresolved("user-specific tilde expansion requires a separate discovery adapter");
-      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join26(home, normalized.slice(2)) : resolve17(home, ".hermes", normalized);
+      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join26(home, normalized.slice(2)) : resolve19(home, ".hermes", normalized);
       safe4(path);
       roots.add(path);
     }
   }
   if (agent === "gemini") {
-    const executable2 = Bun.which("gemini");
+    const executable2 = options.executable === undefined ? discoveryExecutable(agent) : options.executable;
     if (executable2) {
       let packageRoot;
-      for (let directory = dirname16(realpathSync9(executable2)), depth = 0;depth < 8; directory = dirname16(directory), depth++) {
+      for (let directory = dirname17(executable2.target), depth = 0;depth < 8; directory = dirname17(directory), depth++) {
         const path = join26(directory, "package.json"), raw = read2(path);
         if (raw !== null && parseConfig(raw, path).name === "@google/gemini-cli") {
           packageRoot = directory;
           witness(path);
           break;
         }
-        if (dirname16(directory) === directory)
+        if (dirname17(directory) === directory)
           break;
       }
       if (!packageRoot)
@@ -43713,11 +44020,11 @@ function resolveAgentDiscovery(options) {
     if (retained.agent !== agent || retained.method !== "reviewed")
       unresolved("invalid retained review");
     verifyAgentDiscovery(retained);
-    if (!retained.sources.some((source) => source.path === canonical7(configPath) && source.format === undefined && source.fields === undefined))
+    if (!retained.sources.some((source) => source.path === canonical8(configPath) && source.format === undefined && source.fields === undefined))
       unresolved("retained review is missing the full agent configuration source");
-    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
+    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical8(configPath)))
       unresolved("retained settings witness names another configuration source");
-    const covered = supersedesSettingsProjection(agent, retained.sources, canonical7(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical7(configPath), source)) : sources;
+    const covered = supersedesSettingsProjection(agent, retained.sources, canonical8(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical8(configPath), source)) : sources;
     if (covered.some((source) => !retained.sources.some((saved) => isDeepStrictEqual6(saved, source))) || [...roots].some((root2) => !retained.roots.includes(root2)) || agent === "gemini" && JSON.stringify(retained.builtinNames) !== JSON.stringify(builtinNames))
       unresolved("retained review is missing current runtime discovery coverage");
     return retained;
@@ -43729,15 +44036,15 @@ function resolveAgentDiscovery(options) {
     if (review.sources.some((source) => source.format !== undefined || source.fields !== undefined))
       throw new Error("Explicit discovery reviews require full source-file hashes");
     verifyAgentDiscovery(supplied);
-    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
+    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical8(configPath)))
       throw new Error("Semantic settings witnesses must name the configured agent configuration source");
-    if (!review.sources.some((source) => source.path === canonical7(configPath)))
+    if (!review.sources.some((source) => source.path === canonical8(configPath)))
       throw new Error("Discovery review must include the agent configuration source");
-    const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical7(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical7(configPath), source)) : sources;
+    const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical8(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical8(configPath), source)) : sources;
     const reviewedSourcesWithManifestProjection = review.sources.map((source) => {
-      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename8(source.path) !== "plugin.json" || !source.path.endsWith(join26(sep6, ".claude-plugin", "plugin.json")))
+      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename9(source.path) !== "plugin.json" || !source.path.endsWith(join26(sep6, ".claude-plugin", "plugin.json")))
         return source;
-      const pluginRoot = dirname16(dirname16(source.path)), hooksPath = join26(pluginRoot, "hooks/hooks.json");
+      const pluginRoot = dirname17(dirname17(source.path)), hooksPath = join26(pluginRoot, "hooks/hooks.json");
       const hookStat = lstatSync21(hooksPath, { throwIfNoEntry: false });
       const text2 = read2(source.path);
       if (text2 === null)
@@ -43752,13 +44059,13 @@ function resolveAgentDiscovery(options) {
       if (manifest.hooks !== undefined) {
         if (typeof manifest.hooks !== "string")
           throw new Error("Reviewed Claude plugin manifest has an unsupported hooks target");
-        const declaredHookPath = resolve17(pluginRoot, manifest.hooks);
+        const declaredHookPath = resolve19(pluginRoot, manifest.hooks);
         if (!declaredHookPath.startsWith(pluginRoot + sep6))
           throw new Error("Reviewed Claude plugin hooks target escapes its root");
         reviewedHookPaths.add(declaredHookPath);
       }
       for (const hooksFile of reviewedHookPaths)
-        if (!review.sources.some((hook) => hook.path === canonical7(hooksFile) && hook.sha256 !== null && hook.format === undefined && hook.fields === undefined && hook.managedPlugins === undefined && (hook.hashMode === undefined || hook.hashMode === "bytes")))
+        if (!review.sources.some((hook) => hook.path === canonical8(hooksFile) && hook.sha256 !== null && hook.format === undefined && hook.fields === undefined && hook.managedPlugins === undefined && (hook.hashMode === undefined || hook.hashMode === "bytes")))
           throw new Error("Reviewed Claude plugin manifest requires separately reviewed exact hook file sources");
       return { path: source.path, sha256: manifestSha256, hashMode: "claude-plugin-manifest-v1" };
     });
@@ -43767,7 +44074,7 @@ function resolveAgentDiscovery(options) {
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };
   }
   function plugin(root2) {
-    root2 = canonical7(root2);
+    root2 = canonical8(root2);
     safe4(root2);
     const manifestPath = join26(root2, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
     const raw = witness(manifestPath, undefined, undefined, agent === "claude" ? "claude-plugin-manifest-v1" : undefined);
@@ -43790,16 +44097,16 @@ function resolveAgentDiscovery(options) {
     if (agent === "claude")
       roots.add(join26(root2, "skills"));
     for (const value of declared) {
-      const path = resolve17(root2, value);
+      const path = resolve19(root2, value);
       if (path !== root2 && !path.startsWith(root2 + sep6))
         unresolved("plugin skill path escapes its root");
-      roots.add(path.endsWith(`${sep6}SKILL.md`) ? dirname16(path) : path);
+      roots.add(path.endsWith(`${sep6}SKILL.md`) ? dirname17(path) : path);
     }
   }
   if (agent === "claude") {
     const registrations = witness(join26(home, ".claude/plugins/installed_plugins.json"));
     const installed = registrations === null ? {} : parseConfig(registrations, join26(home, ".claude/plugins/installed_plugins.json")).plugins;
-    const commands = canonical7(join26(home, ".claude/commands"));
+    const commands = canonical8(join26(home, ".claude/commands"));
     safe4(commands);
     if (lstatSync21(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(commands).length)
       unresolved("legacy home command discovery requires a dedicated format adapter");
@@ -43821,7 +44128,7 @@ function resolveAgentDiscovery(options) {
         unresolved("unsupported plugin enablement");
       const split = id2.lastIndexOf("@"), name = id2.slice(0, split), marketplace = id2.slice(split + 1);
       const market = config.marketplaces?.[marketplace] ?? (marketplace === "personal" ? { source_type: "local", source: home } : undefined);
-      if (split < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute18(market.source))
+      if (split < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute20(market.source))
         unresolved("enabled plugin marketplace is not an explicit local source");
       const catalogText = witness(join26(market.source, ".agents/plugins/marketplace.json"));
       if (catalogText === null)
@@ -43829,7 +44136,7 @@ function resolveAgentDiscovery(options) {
       const catalog = parseConfig(catalogText, join26(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
       if (matches.length !== 1 || matches[0]?.source?.source !== "local" || typeof matches[0]?.source?.path !== "string")
         unresolved("plugin catalog source is missing or ambiguous");
-      plugin(resolve17(market.source, matches[0].source.path));
+      plugin(resolve19(market.source, matches[0].source.path));
     }
   } else if (agent === "opencode") {
     if (witness(join26(home, ".config/opencode/opencode.jsonc")) !== null || witness(join26(home, ".config/opencode/config.json")) !== null)
@@ -43837,7 +44144,7 @@ function resolveAgentDiscovery(options) {
     if ((config.plugin?.length ?? 0) > 0 || config.skills?.urls?.length)
       unresolved("external plugin or remote skill source");
     for (const path of config.skills?.paths ?? []) {
-      if (typeof path !== "string" || !isAbsolute18(path))
+      if (typeof path !== "string" || !isAbsolute20(path))
         unresolved("relative or malformed added skill root");
       roots.add(path);
     }
@@ -43846,7 +44153,7 @@ function resolveAgentDiscovery(options) {
     if (lstatSync21(localPlugins, { throwIfNoEntry: false }) && readdirSync7(localPlugins).some((name) => name !== "skills-cli.js"))
       unresolved("additional local plugin hooks require review");
   } else if (agent === "sumi") {
-    if ((config.plugin?.length ?? 0) > 0 || (config.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical7(configPath) && source.path !== canonical7(join26(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
+    if ((config.plugin?.length ?? 0) > 0 || (config.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical8(configPath) && source.path !== canonical8(join26(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
       unresolved("external or foreign local plugins require review");
   } else if (agent === "hermes") {
     for (const directory of [join26(home, ".hermes/plugins"), join26(home, ".hermes/hermes-agent")]) {
@@ -43876,7 +44183,7 @@ function resolveAgentDiscovery(options) {
         roots.add(join26(root2, "skills"));
       }
   }
-  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join26(home, ".hermes/plugins"), join26(home, ".hermes/hermes-agent")].map((path) => canonical7(path))) } : {} };
+  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join26(home, ".hermes/plugins"), join26(home, ".hermes/hermes-agent")].map((path) => canonical8(path))) } : {} };
 }
 
 // src/lib/agent-adapters.ts
@@ -43952,29 +44259,29 @@ var CODEX_SKILL_CONFIG_SECTIONS = /^\[\[skills\.config\]\][^\n]*(?:\n(?!\s*\[)[^
 var codexPathConfigRefusal = () => new Error("Codex skill path controls require ordinary [[skills.config]] TOML tables or a native single-line inline array; preserve and review unsupported inline, dotted, or malformed definitions before running skills hook install");
 function splitTopLevel(value, delimiter2) {
   const result = [];
-  let start = 0, square = 0, curly = 0, quote2 = null, escaped = false;
+  let start = 0, square = 0, curly = 0, quote3 = null, escaped = false;
   for (let index = 0;index < value.length; index++) {
     const char = value[index];
-    if (quote2 === "double") {
+    if (quote3 === "double") {
       if (escaped)
         escaped = false;
       else if (char === "\\")
         escaped = true;
       else if (char === '"')
-        quote2 = null;
+        quote3 = null;
       continue;
     }
-    if (quote2 === "literal") {
+    if (quote3 === "literal") {
       if (char === "'")
-        quote2 = null;
+        quote3 = null;
       continue;
     }
     if (char === '"') {
-      quote2 = "double";
+      quote3 = "double";
       continue;
     }
     if (char === "'") {
-      quote2 = "literal";
+      quote3 = "literal";
       continue;
     }
     if (char === "[")
@@ -43992,7 +44299,7 @@ function splitTopLevel(value, delimiter2) {
       start = index + 1;
     }
   }
-  if (quote2 !== null || square !== 0 || curly !== 0)
+  if (quote3 !== null || square !== 0 || curly !== 0)
     return null;
   result.push(value.slice(start));
   return result;
@@ -44000,29 +44307,29 @@ function splitTopLevel(value, delimiter2) {
 function inlineArrayEnd(value) {
   if (!value.startsWith("["))
     return null;
-  let square = 0, curly = 0, quote2 = null, escaped = false;
+  let square = 0, curly = 0, quote3 = null, escaped = false;
   for (let index = 0;index < value.length; index++) {
     const char = value[index];
-    if (quote2 === "double") {
+    if (quote3 === "double") {
       if (escaped)
         escaped = false;
       else if (char === "\\")
         escaped = true;
       else if (char === '"')
-        quote2 = null;
+        quote3 = null;
       continue;
     }
-    if (quote2 === "literal") {
+    if (quote3 === "literal") {
       if (char === "'")
-        quote2 = null;
+        quote3 = null;
       continue;
     }
     if (char === '"') {
-      quote2 = "double";
+      quote3 = "double";
       continue;
     }
     if (char === "'") {
-      quote2 = "literal";
+      quote3 = "literal";
       continue;
     }
     if (char === "[")
@@ -44059,7 +44366,7 @@ function inlineRowsAsTables(value, newline) {
     const fields2 = splitTopLevel(row.slice(1, -1), ",");
     if (!fields2)
       return null;
-    const lines = fields2.map((field2) => field2.trim()).filter(Boolean);
+    const lines = fields2.map((field3) => field3.trim()).filter(Boolean);
     if (lines.some((line) => !/^(?:path|name|enabled)\s*=/.test(line)))
       return null;
     const keys2 = lines.map((line) => line.slice(0, line.indexOf("=")).trim());
@@ -44084,27 +44391,27 @@ function normalizeCodexInlinePathConfig(text2) {
   const matches = [];
   for (const assignment of text2.matchAll(/^([ \t]*config[ \t]*=[ \t]*)(.*?)(\r?)$/gm)) {
     const rawValue = assignment[2].trimEnd();
-    let quote2 = null, escaped = false, comment = "";
+    let quote3 = null, escaped = false, comment = "";
     for (let index = 0;index < rawValue.length; index++) {
       const char = rawValue[index];
-      if (quote2 === "double") {
+      if (quote3 === "double") {
         if (escaped)
           escaped = false;
         else if (char === "\\")
           escaped = true;
         else if (char === '"')
-          quote2 = null;
+          quote3 = null;
         continue;
       }
-      if (quote2 === "literal") {
+      if (quote3 === "literal") {
         if (char === "'")
-          quote2 = null;
+          quote3 = null;
         continue;
       }
       if (char === '"')
-        quote2 = "double";
+        quote3 = "double";
       else if (char === "'")
-        quote2 = "literal";
+        quote3 = "literal";
       else if (char === "#") {
         comment = rawValue.slice(index);
         break;
@@ -44215,9 +44522,9 @@ function disableCodexBundledSkills(text2) {
 }
 
 // src/cli/commands/runtime-launcher.ts
-import { createHash as createHash23 } from "crypto";
-import { closeSync as closeSync17, constants as constants14, fchmodSync as fchmodSync2, fstatSync as fstatSync17, fsyncSync as fsyncSync5, lstatSync as lstatSync22, openSync as openSync17, readFileSync as readFileSync16, readlinkSync as readlinkSync5, realpathSync as realpathSync10, symlinkSync, writeSync as writeSync3 } from "fs";
-import { isAbsolute as isAbsolute19 } from "path";
+import { createHash as createHash24 } from "crypto";
+import { closeSync as closeSync17, constants as constants14, fchmodSync as fchmodSync2, fstatSync as fstatSync17, fsyncSync as fsyncSync5, lstatSync as lstatSync22, openSync as openSync17, readFileSync as readFileSync16, readlinkSync as readlinkSync6, realpathSync as realpathSync10, symlinkSync, writeSync as writeSync3 } from "fs";
+import { isAbsolute as isAbsolute21 } from "path";
 var PINNED_LAUNCHER_SCHEMA = "hasna-skills-pinned-launcher-v1";
 var LAUNCH_CWD_VARIABLE = "HASNA_SKILLS_LAUNCH_CWD";
 var PINNED_LAUNCHER_BUN_FLAGS = ["--config=/dev/null", "--no-env-file", "--no-macros", "--no-install"];
@@ -44258,10 +44565,10 @@ var PINNED_LAUNCHER_ENV_PREFIXES = ["HASNA", "SKILLS", "SKILL", "MCP", "XDG", "L
 var ENV_PREFIX = new RegExp(`^(${PINNED_LAUNCHER_ENV_PREFIXES.join("|")})_`);
 var ENV_EXACT = new Set(PINNED_LAUNCHER_ENV_NAMES);
 function sha2562(bytes) {
-  return createHash23("sha256").update(bytes).digest("hex");
+  return createHash24("sha256").update(bytes).digest("hex");
 }
 function assertLauncherPath(value, code) {
-  if (typeof value !== "string" || !isAbsolute19(value) || /['\x00-\x1f\x7f]/.test(value))
+  if (typeof value !== "string" || !isAbsolute21(value) || /['\x00-\x1f\x7f]/.test(value))
     throw new Error(code);
 }
 function renderPinnedLauncher(binding) {
@@ -44351,7 +44658,7 @@ function assertPinnedLauncherRuntimeSafe(runtime) {
 }
 
 // src/lib/agent-integration.ts
-var sha4 = (data) => createHash24("sha256").update(data).digest("hex");
+var sha4 = (data) => createHash25("sha256").update(data).digest("hex");
 var ROOTS = NATIVE_SKILL_ROOTS;
 function hasTrustedDarwinAcl(fd, allowDenyOnly = false) {
   try {
@@ -44401,9 +44708,10 @@ function isSystemRootAlias(path) {
     return false;
   const target = `/private${path}`, link = `private${path}`;
   const identity5 = (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}:${stat2.uid}:${stat2.mode}`;
+  const directoryIdentity = (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.uid}:${stat2.mode}`;
   try {
     const before = lstatSync23(path, { bigint: true });
-    if (!before.isSymbolicLink() || before.uid !== 0n || readlinkSync6(path) !== link)
+    if (!before.isSymbolicLink() || before.uid !== 0n || readlinkSync7(path) !== link)
       return false;
     const directories = ["/", "/private", target].map((directory) => {
       const stat2 = lstatSync23(directory, { bigint: true });
@@ -44416,20 +44724,20 @@ function isSystemRootAlias(path) {
         throw new Error("Unprotected system temporary directory");
       const fd = openSync18(directory, constants15.O_RDONLY | constants15.O_DIRECTORY | constants15.O_NOFOLLOW);
       try {
-        if (identity5(fstatSync18(fd, { bigint: true })) !== identity5(stat2) || !hasTrustedDarwinAcl(fd) || identity5(fstatSync18(fd, { bigint: true })) !== identity5(stat2))
+        if (directoryIdentity(fstatSync18(fd, { bigint: true })) !== directoryIdentity(stat2) || !hasTrustedDarwinAcl(fd) || directoryIdentity(fstatSync18(fd, { bigint: true })) !== directoryIdentity(stat2))
           throw new Error("Unverified system alias directory ACL");
       } finally {
         closeSync18(fd);
       }
-      return { directory, identity: identity5(stat2) };
+      return { directory, identity: directoryIdentity(stat2) };
     });
-    return realpathSync11(path) === target && readlinkSync6(path) === link && identity5(lstatSync23(path, { bigint: true })) === identity5(before) && directories.every((item) => identity5(lstatSync23(item.directory, { bigint: true })) === item.identity);
+    return realpathSync11(path) === target && readlinkSync7(path) === link && identity5(lstatSync23(path, { bigint: true })) === identity5(before) && directories.every((item) => directoryIdentity(lstatSync23(item.directory, { bigint: true })) === item.identity);
   } catch {
     return false;
   }
 }
 function canonicalSystemPath(path) {
-  const absolute = resolve18(path), root2 = `/${absolute.split(sep7)[1]}`;
+  const absolute = resolve20(path), root2 = `/${absolute.split(sep7)[1]}`;
   if (process.platform !== "darwin" || !["/var", "/tmp", "/etc"].includes(root2) || !lstatSync23(root2, { throwIfNoEntry: false })?.isSymbolicLink())
     return absolute;
   if (!isSystemRootAlias(root2))
@@ -44437,11 +44745,11 @@ function canonicalSystemPath(path) {
   return `/private${absolute}`;
 }
 function assertSafePath(path) {
-  let cursor = resolve18(path);
+  let cursor = resolve20(path);
   while (true) {
     if (lstatSync23(cursor, { throwIfNoEntry: false })?.isSymbolicLink() && !isSystemRootAlias(cursor))
       throw new Error(`Refusing symlink path: ${cursor}`);
-    const parent = dirname17(cursor);
+    const parent = dirname18(cursor);
     if (parent === cursor)
       return;
     cursor = parent;
@@ -44453,13 +44761,13 @@ function readRootAlias(home, agent) {
   const stat2 = lstatSync23(alias, { throwIfNoEntry: false, bigint: true });
   if (!stat2?.isSymbolicLink())
     throw new Error(`Agent root alias changed after planning: ${alias}`);
-  const link = readlinkSync6(alias), targetPath = resolve18(dirname17(alias), link);
+  const link = readlinkSync7(alias), targetPath = resolve20(dirname18(alias), link);
   assertSafePath(targetPath);
   const targetStat = lstatSync23(targetPath, { throwIfNoEntry: false });
   if (!targetStat?.isDirectory())
     throw new Error(`Agent root alias must target an existing directory: ${alias}`);
   const target = realpathSync11(targetPath), inside = relative5(realHome, target);
-  if (!inside || inside === ".." || inside.startsWith(`..${sep7}`) || isAbsolute20(inside))
+  if (!inside || inside === ".." || inside.startsWith(`..${sep7}`) || isAbsolute22(inside))
     throw new Error(`Agent root alias target must be inside the real home: ${alias}`);
   return { agent, home: realHome, alias, target, link, aliasIdentity: `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}`, targetIdentity: `${targetStat.dev}:${targetStat.ino}` };
 }
@@ -44485,13 +44793,13 @@ function disabledCodexSkillPaths(config, aliases) {
   const rows = skills.config;
   if (!Array.isArray(rows))
     return [];
-  if (rows.some((entry) => !entry || typeof entry !== "object" || Array.isArray(entry) || typeof entry.enabled !== "boolean" || entry.path !== undefined === (entry.name !== undefined) || entry.path !== undefined && (typeof entry.path !== "string" || !isAbsolute20(entry.path)) || entry.name !== undefined && (typeof entry.name !== "string" || !entry.name.trim())))
+  if (rows.some((entry) => !entry || typeof entry !== "object" || Array.isArray(entry) || typeof entry.enabled !== "boolean" || entry.path !== undefined === (entry.name !== undefined) || entry.path !== undefined && (typeof entry.path !== "string" || !isAbsolute22(entry.path)) || entry.name !== undefined && (typeof entry.name !== "string" || !entry.name.trim())))
     return [];
   if (rows.some((entry) => entry.name !== undefined && entry.enabled !== false))
     return [];
   const settings = new Map;
   for (const entry of rows) {
-    if (typeof entry.path !== "string" || !isAbsolute20(entry.path))
+    if (typeof entry.path !== "string" || !isAbsolute22(entry.path))
       continue;
     let document2;
     try {
@@ -44503,7 +44811,7 @@ function disabledCodexSkillPaths(config, aliases) {
       continue;
     settings.set(document2, [...settings.get(document2) ?? [], entry.enabled === false]);
   }
-  return [...settings].filter(([, values]) => values.length === 1 && values[0] === true).map(([document2]) => dirname17(document2));
+  return [...settings].filter(([, values]) => values.length === 1 && values[0] === true).map(([document2]) => dirname18(document2));
 }
 function recheckRootAliases(aliases) {
   for (const binding of aliases) {
@@ -44545,7 +44853,7 @@ function readNativeBytes(path, maximum = 64 * 1024 * 1024) {
   }
 }
 function treeHash(root2) {
-  const hash2 = createHash24("sha256");
+  const hash2 = createHash25("sha256");
   let bytes = 0, files = 0;
   function visit2(path) {
     const stat2 = lstatSync23(path);
@@ -44577,20 +44885,20 @@ function selectNativeMigrationTargets(inventory, manifest) {
   const identities = new Set;
   const selected = [];
   for (const target of manifest.targets) {
-    if (!isAbsolute20(target.projectRoot) || resolve18(target.projectRoot) !== target.projectRoot)
+    if (!isAbsolute22(target.projectRoot) || resolve20(target.projectRoot) !== target.projectRoot)
       throw new Error(`Native migration target project root must be an existing absolute directory: ${target.projectRoot}`);
-    const projectRoot = canonicalSystemPath(target.projectRoot), normalized = relative5(projectRoot, resolve18(projectRoot, target.path));
+    const projectRoot = canonicalSystemPath(target.projectRoot), normalized = relative5(projectRoot, resolve20(projectRoot, target.path));
     if (!existsSync7(projectRoot) || !lstatSync23(projectRoot).isDirectory())
       throw new Error(`Native migration target project root must be an existing absolute directory: ${target.projectRoot}`);
     assertSafePath(projectRoot);
-    if (isAbsolute20(target.path) || target.path.includes("\\") || target.path.includes("\x00") || !normalized || normalized === ".." || normalized.startsWith(`..${sep7}`) || normalized !== target.path || !/^[0-9a-f]{64}$/.test(target.treeSha256))
+    if (isAbsolute22(target.path) || target.path.includes("\\") || target.path.includes("\x00") || !normalized || normalized === ".." || normalized.startsWith(`..${sep7}`) || normalized !== target.path || !/^[0-9a-f]{64}$/.test(target.treeSha256))
       throw new Error(`Invalid native migration target: ${target.path}`);
     const identity5 = `${target.agent}\x00${canonicalSystemPath(projectRoot)}\x00${normalized}`;
     if (identities.has(identity5))
       throw new Error(`Duplicate native migration target: ${target.path}`);
     identities.add(identity5);
-    const expected = canonicalSystemPath(resolve18(target.projectRoot, target.path));
-    const matches = inventory.filter((entry2) => entry2.agent === target.agent && resolve18(entry2.path) === expected);
+    const expected = canonicalSystemPath(resolve20(target.projectRoot, target.path));
+    const matches = inventory.filter((entry2) => entry2.agent === target.agent && resolve20(entry2.path) === expected);
     if (matches.length !== 1)
       throw new Error(`Native migration target was not found exactly once: ${target.agent} ${target.projectRoot}/${target.path}`);
     const entry = matches[0];
@@ -44609,7 +44917,7 @@ function projectAncestorDirectories(projects) {
       if (depth >= 100)
         throw new Error("NATIVE_SKILL_DRIFT: project ancestor discovery limit exceeded");
       directories.add(path);
-      const parent = dirname17(path);
+      const parent = dirname18(path);
       if (parent === path)
         break;
       path = parent;
@@ -44618,7 +44926,7 @@ function projectAncestorDirectories(projects) {
   return [...directories];
 }
 function isCodexSkillDiscoveryInput(path) {
-  for (let cursor = canonicalSystemPath(path);cursor !== dirname17(cursor); cursor = dirname17(cursor)) {
+  for (let cursor = canonicalSystemPath(path);cursor !== dirname18(cursor); cursor = dirname18(cursor)) {
     if (ROOTS.some(([agent, root2]) => agent === "codex" && cursor.endsWith(join27(sep7, root2))))
       return true;
   }
@@ -44626,9 +44934,9 @@ function isCodexSkillDiscoveryInput(path) {
 }
 function inventoryNativeSkills(home = homedir3(), options = {}) {
   home = canonicalSystemPath(home);
-  if (options.reviewedCacheAlias !== undefined && (!options.includeVendor || !isAbsolute20(options.reviewedCacheAlias) || resolve18(options.reviewedCacheAlias) !== options.reviewedCacheAlias))
+  if (options.reviewedCacheAlias !== undefined && (!options.includeVendor || !isAbsolute22(options.reviewedCacheAlias) || resolve20(options.reviewedCacheAlias) !== options.reviewedCacheAlias))
     throw new Error("A reviewed cache alias requires vendor inventory and an exact absolute path");
-  if (options.disabledVendorPaths?.some((path) => !isAbsolute20(path) || resolve18(path) !== path))
+  if (options.disabledVendorPaths?.some((path) => !isAbsolute22(path) || resolve20(path) !== path))
     throw new Error("Disabled vendor paths must be exact absolute paths");
   const reviewedCacheAlias = options.reviewedCacheAlias === undefined ? undefined : canonicalSystemPath(options.reviewedCacheAlias);
   const disabledVendorPaths = new Set((options.disabledVendorPaths ?? []).map(canonicalSystemPath));
@@ -44647,7 +44955,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
           roots.push(["sumi", canonicalAgentPath(join27(project, directory, name), aliases)]);
   }
   const installationInputs = options.codexInstallationInputRoots ?? [];
-  if (installationInputs.some((input) => resolve18(input) !== input || realpathSync11(input) !== input || roots.some(([agent, path]) => agent === "codex" && (path === input || path.startsWith(input + sep7) || input.startsWith(path + sep7)))))
+  if (installationInputs.some((input) => resolve20(input) !== input || realpathSync11(input) !== input || roots.some(([agent, path]) => agent === "codex" && (path === input || path.startsWith(input + sep7) || input.startsWith(path + sep7)))))
     throw new Error("Native installation input overlaps an unconditional skill-loading root");
   const entries = [], seen = new Set;
   const cacheScans = new Map, maxAliasProofEntries = 1e4;
@@ -44661,11 +44969,11 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
   }
   let reviewedCacheAliasFound = false;
   function verifiedSiblingCacheAlias(agent, path, parent) {
-    const link = readlinkSync6(path), lexicalTarget = resolve18(parent, link);
-    if (isAbsolute20(link) ? link !== lexicalTarget : dirname17(link) !== ".")
+    const link = readlinkSync7(path), lexicalTarget = resolve20(parent, link);
+    if (isAbsolute22(link) ? link !== lexicalTarget : dirname18(link) !== ".")
       return false;
     const target = canonicalSystemPath(lexicalTarget);
-    if (dirname17(target) !== parent)
+    if (dirname18(target) !== parent)
       return false;
     if (!lstatSync23(target, { throwIfNoEntry: false })?.isDirectory())
       return false;
@@ -44714,17 +45022,17 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
       }
       const bridge = (!vendor || agent === "sumi") && isOwnedCliBridge(path, bridgePaths);
       const rootAlias = aliases.find((item) => path === item.target || path.startsWith(item.target + sep7));
-      entries.push({ agent, path, hash: treeHash(path), managed, vendor, ...agent === "codex" || isCodexSkillDiscoveryInput(path) ? { codexHome: process.env.CODEX_HOME ?? join27(home, ".codex") } : {}, ...agent === "codex" && path.startsWith(canonicalAgentPath(join27(home, ".codex", "skills", ".system"), aliases) + sep7) ? { system: true } : {}, ...bridge ? { bridge: true, bridgeHome: resolve18(home) } : {}, ...rootAlias ? { rootAlias } : {} });
+      entries.push({ agent, path, hash: treeHash(path), managed, vendor, ...agent === "codex" || isCodexSkillDiscoveryInput(path) ? { codexHome: process.env.CODEX_HOME ?? join27(home, ".codex") } : {}, ...agent === "codex" && path.startsWith(canonicalAgentPath(join27(home, ".codex", "skills", ".system"), aliases) + sep7) ? { system: true } : {}, ...bridge ? { bridge: true, bridgeHome: resolve20(home) } : {}, ...rootAlias ? { rootAlias } : {} });
       return scan;
     }
     if (depth > (agent === "sumi" ? 32 : vendor ? 32 : 3))
       return { ...scan, complete: false };
     const children = [], directory = opendirSync5(path);
     try {
-      let child;
-      while ((child = directory.readSync()) !== null) {
-        admit(join27(path, child.name));
-        children.push(child);
+      let child2;
+      while ((child2 = directory.readSync()) !== null) {
+        admit(join27(path, child2.name));
+        children.push(child2);
       }
     } finally {
       directory.closeSync();
@@ -44740,15 +45048,15 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
       const isVendor = vendor || name === ".system";
       if (isVendor && !options.includeVendor)
         continue;
-      const child = join27(path, name);
-      if (isVendor && lstatSync23(child, { throwIfNoEntry: false })?.isSymbolicLink()) {
-        const target = statSync7(child, { throwIfNoEntry: false });
-        if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(agent, child, path)) {
+      const child2 = join27(path, name);
+      if (isVendor && lstatSync23(child2, { throwIfNoEntry: false })?.isSymbolicLink()) {
+        const target = statSync7(child2, { throwIfNoEntry: false });
+        if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(agent, child2, path)) {
           scan.entries++;
           continue;
         }
       }
-      const childScan = visit2(agent, child, isVendor, depth + 1, pluginCache, true, configuredRoot);
+      const childScan = visit2(agent, child2, isVendor, depth + 1, pluginCache, true, configuredRoot);
       scan.complete &&= childScan.complete;
       scan.hasSkills ||= childScan.hasSkills;
       scan.entries += childScan.entries;
@@ -44884,7 +45192,7 @@ function configureHooks(config, agent, command, profileId, nativeReady) {
 function disableCodexSkills(text2, skills, aliases, bridgePath) {
   const bundled = disableCodexBundledSkills(text2);
   let result = normalizeCodexInlinePathConfig(bundled);
-  const bridgeSelector = (entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME || typeof entry.path === "string" && [resolve18(bridgePath), resolve18(join27(bridgePath, "SKILL.md"))].includes(canonicalAgentPath(entry.path, aliases));
+  const bridgeSelector = (entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME || typeof entry.path === "string" && [resolve20(bridgePath), resolve20(join27(bridgePath, "SKILL.md"))].includes(canonicalAgentPath(entry.path, aliases));
   const previousConfig = Bun.TOML.parse(bundled).skills?.config;
   if (previousConfig !== undefined && (!Array.isArray(previousConfig) || previousConfig.some((entry) => !entry || typeof entry !== "object" || entry.path !== undefined && entry.name !== undefined)))
     throw new Error("Codex skill controls require one path or name selector per [[skills.config]] entry; review ambiguous entries before running skills hook install");
@@ -44896,7 +45204,7 @@ function disableCodexSkills(text2, skills, aliases, bridgePath) {
     result = result.replace(CODEX_SKILL_CONFIG_SECTIONS, (section) => {
       const parsed = Bun.TOML.parse(section);
       const declared = parsed.skills?.config?.[0];
-      if (!declared || !(skill.enabled && bridgeSelector(declared)) && !(typeof declared.path === "string" && [resolve18(path), resolve18(skill.path)].includes(canonicalAgentPath(declared.path, aliases))))
+      if (!declared || !(skill.enabled && bridgeSelector(declared)) && !(typeof declared.path === "string" && [resolve20(path), resolve20(skill.path)].includes(canonicalAgentPath(declared.path, aliases))))
         return section;
       found = true;
       return /^\s*enabled\s*=/m.test(section) ? section.replace(/^\s*enabled\s*=.*$/m, `enabled = ${skill.enabled}`) : `${section.trimEnd()}
@@ -44917,7 +45225,7 @@ enabled = false
   return result;
 }
 function assertCodexInstallationInputs(home, projectDirs, inputs) {
-  const nativeRoots = [home, ...projectAncestorDirectories(projectDirs)].flatMap((directory) => ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => resolve18(directory, path)));
+  const nativeRoots = [home, ...projectAncestorDirectories(projectDirs)].flatMap((directory) => ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => resolve20(directory, path)));
   if (inputs.some((input) => nativeRoots.some((root2) => root2 === input || root2.startsWith(input + sep7) || input.startsWith(root2 + sep7))))
     throw new Error("Native installation input overlaps an unconditional skill-loading root");
 }
@@ -44933,9 +45241,9 @@ function planAgentIntegration(options) {
     throw new Error("Invalid existing Skills bridge policy");
   if (policy.bridge?.agents !== undefined && (!Array.isArray(policy.bridge.agents) || policy.bridge.agents.some((agent) => !INTEGRATION_AGENTS.includes(agent))))
     throw new Error("Invalid existing bridge agent inventory");
-  for (const field2 of ["commands", "profiles"])
-    if (policy.bridge?.[field2] !== undefined && (!policy.bridge[field2] || typeof policy.bridge[field2] !== "object" || Array.isArray(policy.bridge[field2]) || Object.entries(policy.bridge[field2]).some(([key, value]) => !INTEGRATION_AGENTS.includes(key) || typeof value !== "string" || !value || value.includes("\x00"))))
-      throw new Error(`Invalid existing bridge ${field2} binding`);
+  for (const field3 of ["commands", "profiles"])
+    if (policy.bridge?.[field3] !== undefined && (!policy.bridge[field3] || typeof policy.bridge[field3] !== "object" || Array.isArray(policy.bridge[field3]) || Object.entries(policy.bridge[field3]).some(([key, value]) => !INTEGRATION_AGENTS.includes(key) || typeof value !== "string" || !value || value.includes("\x00"))))
+      throw new Error(`Invalid existing bridge ${field3} binding`);
   const priorAgents = policy.bridge?.agents ?? [];
   const profileId = options.profileId ?? policy.profileId ?? "default";
   const validateProfile = (value) => {
@@ -44950,13 +45258,18 @@ function planAgentIntegration(options) {
     return [agent, { command, profileId: profileId2 }];
   }));
   const retainedAgents = [];
+  const priorExecutables = policy.bridge?.discoveryExecutables ?? {};
+  const executables = new Map;
   const discoveries = [...new Set(options.agents)].map((agent) => {
+    const prior = priorExecutables[agent];
+    const executable2 = discoveryExecutable(agent) ?? (prior ? recordedDiscoveryExecutable(agent, prior) : null);
+    executables.set(agent, executable2);
     const retainedReview = options.discoveryInputs === undefined && policy.bridge?.discovery?.[agent]?.method === "reviewed" ? { ...policy.bridge.discovery[agent], ...agent === "codex" ? { codexDisabledPluginSkills: policy.bridge.codexPluginSkills ?? [] } : {} } : undefined;
     if (retainedReview) {
       assertManagedAgentBridge(agent, { home, dataDir: dataDir2, projectDir: options.projectDir ?? home });
       retainedAgents.push(agent);
     }
-    return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases) });
+    return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases), executable: executable2 });
   });
   const codexConfigBefore = options.agents.includes("codex") ? readOptional(canonicalAgentPath(join27(home, ".codex", "config.toml"), aliases)) : null;
   const codexConfig = Bun.TOML.parse(codexConfigBefore ?? "");
@@ -44964,7 +45277,7 @@ function planAgentIntegration(options) {
   const codexPathConfig = options.agents.includes("codex") ? disableCodexSkills(codexConfigBefore ?? "", nativeSkills, aliases, canonicalAgentPath(join27(home, ".codex/skills", CLI_BRIDGE_NAME), aliases)) : undefined;
   const plannedCodexRules = codexPathConfig === undefined ? undefined : Bun.TOML.parse(codexPathConfig).skills?.config ?? [];
   const observedNativeSources = [];
-  const codexPluginControls = options.codexNativeCatalog ? reviewCodexPluginControls(options.codexNativeCatalog, nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor).map((entry) => join27(entry.path, "SKILL.md")), canonicalAgentPath(join27(home, ".codex/plugins/cache"), aliases), resolve18(options.projectDir ?? home), (path) => {
+  const codexPluginControls = options.codexNativeCatalog ? reviewCodexPluginControls(options.codexNativeCatalog, nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor).map((entry) => join27(entry.path, "SKILL.md")), canonicalAgentPath(join27(home, ".codex/plugins/cache"), aliases), resolve20(options.projectDir ?? home), (path) => {
     const bytes = readNativeBytes(path, 1024 * 1024);
     observedNativeSources.push({ path, sha256: sha4(bytes) });
     return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
@@ -45093,7 +45406,7 @@ function planAgentIntegration(options) {
     version: CLI_BRIDGE_VERSION,
     digest: CLI_BRIDGE_DIGEST,
     agents: [...new Set([...priorAgents, ...options.agents])].sort(),
-    home: resolve18(home),
+    home: resolve20(home),
     includeVendor: true,
     ...options.agents.includes("hermes") ? { supervisors: { ...policy.bridge?.supervisors, hermes: { path: join27(dataDir2, "agent-hooks", "hermes.js"), runtime: process.execPath, sha256: sha4(renderHermesSupervisor(bindings.get("hermes").command, bindings.get("hermes").profileId)) } } } : {},
     commands: { ...policy.bridge?.commands, ...Object.fromEntries([...bindings].map(([agent, binding]) => [agent, binding.command])) },
@@ -45103,19 +45416,30 @@ function planAgentIntegration(options) {
     ...options.codexNativeCatalog || codexPluginSkills.length || codexInactivePlugins.length || codexPluginSourceInputs.length ? { codexPluginSkills, codexInactivePlugins, codexPluginSkillReview } : {},
     discovery: { ...policy.bridge?.discovery, ...Object.fromEntries(discoveryAfter.map((binding) => [binding.agent, binding])) }
   } };
+  const discoveryExecutables = { ...priorExecutables };
+  for (const [agent, executable2] of executables) {
+    if (executable2)
+      discoveryExecutables[agent] = executable2;
+    else
+      delete discoveryExecutables[agent];
+  }
+  if (Object.keys(discoveryExecutables).length)
+    nextPolicy.bridge.discoveryExecutables = discoveryExecutables;
+  else
+    delete nextPolicy.bridge.discoveryExecutables;
   const serializedPolicy = serializeManagedSkillPolicy(nextPolicy);
   if (JSON.stringify(policy) !== JSON.stringify(nextPolicy))
     changes.push({ path: policyPath, before: previousPolicy, after: serializedPolicy });
   recheckRootAliases(aliases);
   return { dataDir: dataDir2, profileId, changes, nativeSkills, ...observedSettings ? { observedSettings } : {}, ...observedNativeSources.length ? { observedNativeSources } : {}, ...nextPolicy.bridge.codexPluginSkillReview ? { codexPluginSkillReview: nextPolicy.bridge.codexPluginSkillReview } : {}, observedPolicy: { path: policyPath, before: previousPolicy }, discoveryBefore: discoveries, discoveryAfter, ...aliases.length ? { rootAliases: aliases } : {}, ...retainedAgents.length ? { retainedReviewChecks: { home, projectDir: options.projectDir ?? home, agents: retainedAgents } } : {} };
 }
-function hookProjectionRefusal(reason) {
-  throw new Error(`CLAUDE_MANAGED_HOOK_${reason}`);
+function hookProjectionRefusal(reason2) {
+  throw new Error(`CLAUDE_MANAGED_HOOK_${reason2}`);
 }
 function projectedHookAcl(path, observed) {
   if (process.platform !== "darwin")
     return;
-  const identity5 = (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}:${stat2.uid}:${stat2.mode}:${stat2.nlink}:${stat2.size}:${stat2.mtimeNs}`;
+  const identity5 = observed.isDirectory() ? (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.uid}:${stat2.mode}` : (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}:${stat2.uid}:${stat2.mode}:${stat2.nlink}:${stat2.size}:${stat2.mtimeNs}`;
   const fd = openSync18(path, constants15.O_RDONLY | constants15.O_NOFOLLOW | constants15.O_NONBLOCK | (observed.isDirectory() ? constants15.O_DIRECTORY : 0));
   try {
     if (identity5(fstatSync18(fd, { bigint: true })) !== identity5(observed) || !hasTrustedDarwinAcl(fd, true) || identity5(fstatSync18(fd, { bigint: true })) !== identity5(observed) || identity5(lstatSync23(path, { bigint: true })) !== identity5(observed))
@@ -45126,18 +45450,18 @@ function projectedHookAcl(path, observed) {
 }
 function projectedHookExecutable(command, expectedResolved) {
   try {
-    if (!isAbsolute20(command) || /[\0\r\n]/.test(command) || resolve18(command) !== command)
+    if (!isAbsolute22(command) || /[\0\r\n]/.test(command) || resolve20(command) !== command)
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     command = canonicalSystemPath(command);
     const parents3 = (file = command) => {
       const result = [];
-      for (let path = dirname17(file);; path = dirname17(path)) {
+      for (let path = dirname18(file);; path = dirname18(path)) {
         const stat2 = lstatSync23(path, { bigint: true });
-        if (!stat2.isDirectory() || (stat2.mode & 0o022n) !== 0n && !(stat2.uid === 0n && (stat2.mode & 0o1000n) !== 0n))
+        if (!stat2.isDirectory() || !trustedAncestorOwner(stat2.uid) || (stat2.mode & 0o022n) !== 0n && !(stat2.uid === 0n && (stat2.mode & 0o1000n) !== 0n))
           hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
         projectedHookAcl(path, stat2);
         result.push(`${path}:${stat2.dev}:${stat2.ino}:${stat2.uid}:${stat2.mode}`);
-        if (dirname17(path) === path)
+        if (dirname18(path) === path)
           break;
       }
       return result;
@@ -45147,22 +45471,33 @@ function projectedHookExecutable(command, expectedResolved) {
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     const linkIdentity = (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.mode}:${stat2.uid}:${stat2.ctimeNs}`;
     const target = resolveLauncherCommand(command), resolved = target.entry;
+    const direct = () => link.isSymbolicLink() ? directAliasTarget(command) === target.physical : target.physical === command;
+    if (!direct())
+      hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     if (expectedResolved !== undefined && resolved !== expectedResolved)
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     let launcher, launcherParentIdentity;
+    let runtime;
     if (target.pinned) {
       launcherParentIdentity = parents3(target.physical);
       launcher = snapshot(target.physical, false);
       projectedHookAcl(launcher.file, launcher.stat);
       if (launcher.sha256 !== target.pinned.sha256 || (launcher.stat.mode & 0o100n) === 0n)
         hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
-      assertPinnedLauncherRuntimeSafe(target.pinned.runtime);
+      const path = target.pinned.runtime;
+      assertPinnedLauncherRuntimeSafe(path);
+      if (resolve20(path) !== path)
+        hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
+      runtime = { path, parents: parents3(path), stat: lstatSync23(path, { bigint: true }) };
+      if (!runtime.stat.isFile())
+        hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
+      projectedHookAcl(path, runtime.stat);
     }
     const resolvedParentIdentity = parents3(resolved);
-    const manifest = snapshot(join27(dirname17(dirname17(resolved)), "package.json"), false, { readOnlyPackage: true });
+    const manifest = snapshot(join27(dirname18(dirname18(resolved)), "package.json"), false, { readOnlyPackage: true });
     projectedHookAcl(manifest.file, manifest.stat);
     const pkg = JSON.parse(manifest.text);
-    if (pkg.name !== "@hasna/skills" || !/^\d+\.\d+\.\d+$/.test(pkg.version) || pkg.bin?.skills !== "bin/index.js" || resolved !== join27(dirname17(manifest.file), "bin/index.js"))
+    if (pkg.name !== "@hasna/skills" || !/^\d+\.\d+\.\d+$/.test(pkg.version) || pkg.bin?.skills !== "bin/index.js" || resolved !== join27(dirname18(manifest.file), "bin/index.js"))
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     const cli = snapshot(resolved, false, { readOnlyPackage: true });
     projectedHookAcl(cli.file, cli.stat);
@@ -45171,7 +45506,7 @@ function projectedHookExecutable(command, expectedResolved) {
     const recheck = () => {
       try {
         const again = resolveLauncherCommand(command);
-        if (again.entry !== resolved || again.physical !== target.physical || linkIdentity(lstatSync23(command, { bigint: true })) !== linkIdentity(link) || !isDeepStrictEqual8(parents3(), parentIdentity) || !isDeepStrictEqual8(parents3(resolved), resolvedParentIdentity))
+        if (again.entry !== resolved || again.physical !== target.physical || linkIdentity(lstatSync23(command, { bigint: true })) !== linkIdentity(link) || !direct() || !isDeepStrictEqual8(parents3(), parentIdentity) || !isDeepStrictEqual8(parents3(resolved), resolvedParentIdentity))
           hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
         if (launcher) {
           if (!isDeepStrictEqual8(parents3(target.physical), launcherParentIdentity))
@@ -45179,6 +45514,12 @@ function projectedHookExecutable(command, expectedResolved) {
           projectedHookAcl(launcher.file, launcher.stat);
           unchanged2(launcher);
         }
+        if (runtime) {
+          assertPinnedLauncherRuntimeSafe(runtime.path);
+          if (!isDeepStrictEqual8(parents3(runtime.path), runtime.parents))
+            hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
+          projectedHookAcl(runtime.path, runtime.stat);
+        }
         projectedHookAcl(cli.file, cli.stat);
         projectedHookAcl(manifest.file, manifest.stat);
         unchanged2(cli);
@@ -45205,7 +45546,7 @@ function planClaudeManagedHookProjection(options) {
   } catch {
     hookProjectionRefusal("TARGET_INVALID");
   }
-  const home = resolve18(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
+  const home = resolve20(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
   const policyPath = join27(dataDir2, "agent-policy.json");
   let policyBytes, settingsBytes, settingsPath, command, profile;
   try {
@@ -45297,29 +45638,28 @@ function planClaudePreToolUseHookUpdate(options) {
   return planClaudeHookEventsUpdate({ ...options, events: ["PreToolUse"] });
 }
 function claudeSettingsConsumers(home, path, discoveries, aliases) {
-  const canonical7 = (value) => canonicalAgentPath(value, aliases);
+  const canonical8 = (value) => canonicalAgentPath(value, aliases);
   const containsSettings = (root2) => {
-    const distance = relative5(canonical7(root2), path);
-    return distance === "" || distance !== ".." && !distance.startsWith(`..${sep7}`) && !isAbsolute20(distance);
+    const distance = relative5(canonical8(root2), path);
+    return distance === "" || distance !== ".." && !distance.startsWith(`..${sep7}`) && !isAbsolute22(distance);
   };
-  return discoveries.filter((binding) => binding.agent === "claude" || binding.agent === "opencode" || canonical7(join27(home, AGENT_ADAPTERS[binding.agent].config)) === path || binding.sources.some((source) => canonical7(source.path) === path) || binding.roots.some(containsSettings) || binding.directories?.some((directory) => containsSettings(directory.path))).map((binding) => binding.agent);
+  return discoveries.filter((binding) => binding.agent === "claude" || binding.agent === "opencode" || canonical8(join27(home, AGENT_ADAPTERS[binding.agent].config)) === path || binding.sources.some((source) => canonical8(source.path) === path) || binding.roots.some(containsSettings) || binding.directories?.some((directory) => containsSettings(directory.path))).map((binding) => binding.agent);
 }
-function verifyCoordinatedDiscovery(binding, home, aliases) {
+function verifyCoordinatedDiscovery(binding, home, aliases, executable2) {
   try {
     if (binding.method !== "automatic" && binding.method !== "reviewed")
       throw new Error("Invalid managed discovery method");
     verifyAgentDiscovery(binding);
-    if (binding.method === "automatic") {
-      const current = resolveAgentDiscovery({ home, agent: binding.agent, canonical: (path) => canonicalAgentPath(path, aliases) });
-      if (JSON.stringify(current) !== JSON.stringify(binding))
-        throw new Error("Configured native discovery roots changed during Claude update");
-    }
+    if (binding.method === "automatic")
+      verifyAutomaticDiscoveryClosure(binding, { home, canonical: (path) => canonicalAgentPath(path, aliases), change: "Configured native discovery roots changed during Claude update", executable: executable2 });
   } catch (error) {
+    if (isDiscoveryRootUnresolved(error))
+      throw error;
     throw new Error(`NATIVE_SKILL_DRIFT: ${error.message}`);
   }
 }
 function planClaudeHookEventsUpdate(options) {
-  const home = resolve18(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
+  const home = resolve20(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
   const policyPath = join27(dataDir2, "agent-policy.json");
   assertSafePath(policyPath);
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
@@ -45345,8 +45685,9 @@ function planClaudeHookEventsUpdate(options) {
   });
   if (discoveries.length !== agents.length || !agents.includes("claude"))
     throw new Error("Missing managed Claude discovery coverage");
+  const discoveryExecutables = bridge.discoveryExecutables;
   for (const binding of discoveries)
-    verifyCoordinatedDiscovery(binding, home, aliases);
+    verifyCoordinatedDiscovery(binding, home, aliases, discoveryExecutables?.[binding.agent]);
   const consumers = claudeSettingsConsumers(home, path, discoveries, aliases);
   for (const agent of consumers)
     assertManagedAgentBridge(agent, { home, dataDir: dataDir2, projectDir: home });
@@ -45381,13 +45722,14 @@ function planClaudeHookEventsUpdate(options) {
     observedPolicy: { path: policyPath, before: snapshot2.text },
     discoveryBefore: discoveries,
     discoveryAfter,
+    ...discoveryExecutables ? { discoveryExecutables } : {},
     rootAliases: aliases,
     managedAgentChecks: { home, agents: consumers }
   };
 }
 function atomicWrite2(path, content) {
   assertSafePath(path);
-  mkdirSync6(dirname17(path), { recursive: true, mode: 448 });
+  mkdirSync6(dirname18(path), { recursive: true, mode: 448 });
   const temporary = `${path}.skills-${randomUUID4()}`;
   try {
     writeFileSync5(temporary, content, { mode: 384, flag: "wx" });
@@ -45402,7 +45744,7 @@ function planAgentSettingsWitnessUpgrade(options) {
     throw new Error("Invalid Codex witness target version");
   if (options.targetClaudeVersion !== undefined && (options.agent !== "claude" || ![3, 4].includes(options.targetClaudeVersion)))
     throw new Error("Invalid Claude witness target version");
-  const home = resolve18(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
+  const home = resolve20(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2 || sha4(snapshot2.text) !== options.expectedPolicySha256)
     throw new Error("Managed policy preimage changed");
@@ -45462,7 +45804,7 @@ function planAgentSettingsWitnessUpgrade(options) {
   const replacement = { ...binding, sources: rebound };
   verifyAgentDiscovery(replacement);
   const after = serializeManagedSkillPolicy({ ...policy, bridge: { ...policy.bridge, discovery: { ...policy.bridge.discovery, [options.agent]: replacement } } });
-  return { dataDir: dataDir2, profileId: policy.profileId, changes: [{ path: join27(dataDir2, "agent-policy.json"), before: snapshot2.text, after }], nativeSkills: [], observedPolicy: { path: join27(dataDir2, "agent-policy.json"), before: snapshot2.text }, observedSettings: { path: configPath, before: settings }, discoveryBefore: [replacement], discoveryAfter: [replacement], rootAliases: aliases, managedAgentChecks: { home, agents: [options.agent] }, settingsWitnessUpgrade: { agent: options.agent, path: configPath, fromHashMode: previous.hashMode ?? "bytes", fromSha256: previous.sha256, toHashMode: next.hashMode, toSha256: next.sha256, reviewedPreimage: options.reviewedPreimage, currentSettingsSha256: options.expectedSettingsSha256, replacedWitnesses: replaced.map((source) => ({ hashMode: source.hashMode ?? "bytes", sha256: source.sha256 })) } };
+  return { dataDir: dataDir2, profileId: policy.profileId, changes: [{ path: join27(dataDir2, "agent-policy.json"), before: snapshot2.text, after }], nativeSkills: [], observedPolicy: { path: join27(dataDir2, "agent-policy.json"), before: snapshot2.text }, observedSettings: { path: configPath, before: settings }, discoveryBefore: [replacement], discoveryAfter: [replacement], ...policy.bridge.discoveryExecutables ? { discoveryExecutables: policy.bridge.discoveryExecutables } : {}, rootAliases: aliases, managedAgentChecks: { home, agents: [options.agent] }, settingsWitnessUpgrade: { agent: options.agent, path: configPath, fromHashMode: previous.hashMode ?? "bytes", fromSha256: previous.sha256, toHashMode: next.hashMode, toSha256: next.sha256, reviewedPreimage: options.reviewedPreimage, currentSettingsSha256: options.expectedSettingsSha256, replacedWitnesses: replaced.map((source) => ({ hashMode: source.hashMode ?? "bytes", sha256: source.sha256 })) } };
 }
 function applyAgentIntegration(plan, options = {}) {
   const roots = plan.changes.flatMap((change) => {
@@ -45480,10 +45822,10 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
     throw new Error("Native settings changed after witness planning");
   const policyPath = join27(plan.dataDir, "agent-policy.json");
   assertSafePath(policyPath);
-  const currentText = (path) => resolve18(path) === resolve18(policyPath) ? readManagedSkillPolicySnapshot(plan.dataDir)?.text ?? null : readOptional(path);
+  const currentText = (path) => resolve20(path) === resolve20(policyPath) ? readManagedSkillPolicySnapshot(plan.dataDir)?.text ?? null : readOptional(path);
   readManagedSkillPolicySnapshot(plan.dataDir);
   for (const change of plan.changes)
-    if (resolve18(change.path) === resolve18(policyPath))
+    if (resolve20(change.path) === resolve20(policyPath))
       parseManagedSkillPolicy(change.after);
   const aliases = plan.rootAliases ?? [];
   assertCurrent();
@@ -45504,7 +45846,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
     assertManagedAgentBridgeWithDiscovery(agent, { home: plan.managedAgentChecks.home, dataDir: plan.dataDir, projectDir: plan.managedAgentChecks.home }, provenDiscovery?.agent === agent ? provenDiscovery : undefined);
   for (const binding of plan.discoveryBefore ?? []) {
     if (plan.managedAgentChecks)
-      verifyCoordinatedDiscovery(binding, plan.managedAgentChecks.home, aliases);
+      verifyCoordinatedDiscovery(binding, plan.managedAgentChecks.home, aliases, plan.discoveryExecutables?.[binding.agent]);
     else
       verifyAgentDiscovery(binding);
   }
@@ -45536,7 +45878,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
       recheckRootAliases(aliases);
       if (currentText(change.path) !== change.before)
         throw new Error(`Configuration changed after planning: ${change.path}`);
-      for (let directory = dirname17(change.path);!existsSync7(directory); directory = dirname17(directory))
+      for (let directory = dirname18(change.path);!existsSync7(directory); directory = dirname18(directory))
         createdDirectories.add(directory);
       const after = change.after;
       atomicWrite2(change.path, after);
@@ -45551,7 +45893,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
       throw new Error("Native settings changed during witness application");
     for (const binding of plan.discoveryAfter ?? []) {
       if (plan.managedAgentChecks)
-        verifyCoordinatedDiscovery(binding, plan.managedAgentChecks.home, aliases);
+        verifyCoordinatedDiscovery(binding, plan.managedAgentChecks.home, aliases, plan.discoveryExecutables?.[binding.agent]);
       else
         verifyAgentDiscovery(binding);
     }
@@ -45608,7 +45950,7 @@ function writeArchiveJournal(path, value) {
     closeSync18(descriptor);
     descriptor = undefined;
     renameSync4(temporary, path);
-    syncArchiveDirectory(dirname17(path));
+    syncArchiveDirectory(dirname18(path));
   } finally {
     if (descriptor !== undefined)
       closeSync18(descriptor);
@@ -45666,14 +46008,14 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
   };
   assertSafePath(archiveRoot);
   const created = [];
-  for (let path = archiveRoot;!existsSync7(path); path = dirname17(path))
+  for (let path = archiveRoot;!existsSync7(path); path = dirname18(path))
     created.push(path);
   mkdirSync6(archiveRoot, { recursive: true, mode: 448 });
   try {
     for (const directory of created)
       syncArchiveDirectory(directory);
     if (created.length)
-      syncArchiveDirectory(dirname17(created.at(-1)));
+      syncArchiveDirectory(dirname18(created.at(-1)));
     writeArchiveJournal(receiptPath, journal);
     for (const [index, entry] of selected.entries()) {
       assertCurrent();
@@ -45686,7 +46028,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
       writeArchiveJournal(receiptPath, journal);
       renameSync4(move.source, move.archive);
       moved.push(move);
-      syncArchiveDirectory(dirname17(move.source));
+      syncArchiveDirectory(dirname18(move.source));
       syncArchiveDirectory(archiveRoot);
       verifyArchive(move);
       move.status = "archived";
@@ -45723,7 +46065,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
         }
         if (entry.discoveryOnly) {
           linkSync3(entry.archive, entry.source);
-          syncArchiveDirectory(dirname17(entry.source));
+          syncArchiveDirectory(dirname18(entry.source));
           unlinkSync5(entry.archive);
         } else {
           if (lstatSync23(entry.source, { throwIfNoEntry: false })) {
@@ -45734,7 +46076,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
           renameSync4(entry.archive, entry.source);
         }
         entry.status = "restored";
-        syncArchiveDirectory(dirname17(entry.source));
+        syncArchiveDirectory(dirname18(entry.source));
         syncArchiveDirectory(archiveRoot);
       } catch {
         entry.status = "recovery-required";
@@ -45759,7 +46101,7 @@ function isInertCodexPluginCacheCopy(entry, cache, allowedHostPaths, read3) {
       return false;
     const document2 = join27(entry.path, "SKILL.md");
     const inside = relative5(cache, entry.path);
-    if (!inside || isAbsolute20(inside) || inside.split(sep7).some((segment) => segment === ".."))
+    if (!inside || isAbsolute22(inside) || inside.split(sep7).some((segment) => segment === ".."))
       return false;
     assertSafePath(entry.path);
     if (!lstatSync23(cache).isDirectory() || !lstatSync23(entry.path).isDirectory() || !lstatSync23(document2).isFile())
@@ -45779,7 +46121,7 @@ function assertManagedAgentBridge(agent, options = {}) {
   assertManagedAgentBridgeWithDiscovery(agent, options);
 }
 function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscovery) {
-  const home = resolve18(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
+  const home = resolve20(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
   assertSafePath(join27(dataDir2, "agent-policy.json"));
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2)
@@ -45877,12 +46219,11 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
     verifyAgentDiscovery(agent === "codex" ? { ...discovery, codexDisabledPluginSkills: binding.codexPluginSkills ?? [] } : discovery, options.codexDiscoveryRecovery);
     if (agent === "sumi" && discovery.method === "reviewed")
       resolveAgentDiscovery({ home, agent, retainedReview: discovery, canonical: (path) => canonicalAgentPath(path, aliases) });
-    if (discovery.method === "automatic") {
-      const current = resolveAgentDiscovery({ home, agent, canonical: (path) => canonicalAgentPath(path, aliases) });
-      if (JSON.stringify(current) !== JSON.stringify(discovery))
-        throw new Error("Configured native discovery roots changed");
-    }
+    if (discovery.method === "automatic")
+      verifyAutomaticDiscoveryClosure(discovery, { home, canonical: (path) => canonicalAgentPath(path, aliases), change: "Configured native discovery roots changed", executable: binding.discoveryExecutables?.[agent] });
   } catch (error) {
+    if (isDiscoveryRootUnresolved(error))
+      throw error;
     throw new Error(`NATIVE_SKILL_DRIFT: ${error.message}`);
   }
   let installationInputRoots = [];
@@ -45938,13 +46279,13 @@ import {
   statSync as statSync10,
   writeFileSync as writeFileSync7
 } from "fs";
-import { basename as basename11, dirname as dirname20, isAbsolute as isAbsolute21, join as join31, normalize as normalize4, relative as relative7, resolve as resolve20, sep as sep10 } from "path";
+import { basename as basename12, dirname as dirname21, isAbsolute as isAbsolute23, join as join31, normalize as normalize4, relative as relative7, resolve as resolve22, sep as sep10 } from "path";
 
 // src/lib/registry-data/index.ts
 var SKILLS = [];
 
 // src/lib/skill-hash.ts
-import { createHash as createHash25 } from "crypto";
+import { createHash as createHash26 } from "crypto";
 import { existsSync as existsSync8, readdirSync as readdirSync9, readFileSync as readFileSync18, statSync as statSync8 } from "fs";
 import { join as join28, sep as sep8 } from "path";
 var CONTENT_HASH_ALGORITHM = "sha256";
@@ -46068,13 +46409,13 @@ function* bundleHashParts(files) {
   yield new TextEncoder().encode("\x00");
 }
 function hashBundleFiles(files) {
-  const hash2 = createHash25(CONTENT_HASH_ALGORITHM);
+  const hash2 = createHash26(CONTENT_HASH_ALGORITHM);
   for (const part of bundleHashParts(files))
     hash2.update(part);
   return hash2.digest("hex");
 }
 async function hashBundleFilesCooperatively(files, check) {
-  const hash2 = createHash25(CONTENT_HASH_ALGORITHM);
+  const hash2 = createHash26(CONTENT_HASH_ALGORITHM);
   let bytesSinceYield = 0;
   for (const part of bundleHashParts(files)) {
     for (let offset = 0;offset < part.byteLength; offset += 64 * 1024) {
@@ -46083,7 +46424,7 @@ async function hashBundleFilesCooperatively(files, check) {
       hash2.update(chunk);
       bytesSinceYield += chunk.byteLength;
       if (bytesSinceYield >= 256 * 1024) {
-        await new Promise((resolve19) => setImmediate(resolve19));
+        await new Promise((resolve21) => setImmediate(resolve21));
         bytesSinceYield = 0;
       }
     }
@@ -46206,8 +46547,8 @@ function boundedManifest(raw, maxDepth) {
       continue;
     if (depth > maxDepth)
       contentLimit("Content hash manifest depth limit exceeded");
-    for (const child of Object.values(value))
-      pending.push({ value: child, depth: depth + 1 });
+    for (const child2 of Object.values(value))
+      pending.push({ value: child2, depth: depth + 1 });
   }
   return parsed;
 }
@@ -46236,7 +46577,7 @@ async function hashContentEntries(entries, options) {
     const normalized = [];
     let normalizedBytes = 0;
     let manifest;
-    await new Promise((resolve19) => setImmediate(resolve19));
+    await new Promise((resolve21) => setImmediate(resolve21));
     for (const entry of snapshot2) {
       check();
       if (!coveredContentPath(entry.path))
@@ -46249,7 +46590,7 @@ async function hashContentEntries(entries, options) {
         contentLimit("Content hash normalized byte limit exceeded");
       normalizedBytes += file.content.byteLength;
       normalized.push(file);
-      await new Promise((resolve19) => setImmediate(resolve19));
+      await new Promise((resolve21) => setImmediate(resolve21));
     }
     normalized.sort((a, b) => a.rel < b.rel ? -1 : a.rel > b.rel ? 1 : 0);
     check();
@@ -46463,7 +46804,7 @@ import {
   realpathSync as realpathSync12,
   writeFileSync as writeFileSync6
 } from "fs";
-import { basename as basename9, dirname as dirname18, join as join29, relative as relative6 } from "path";
+import { basename as basename10, dirname as dirname19, join as join29, relative as relative6 } from "path";
 var ANY_SEGMENT_COPY_EXCLUDES = new Set([
   ".git",
   ".DS_Store",
@@ -46513,11 +46854,11 @@ function normalizeNewPortableSkillName(name) {
     throw new Error(`Invalid skill name '${name}'. Include letters or numbers.`);
   return normalized;
 }
-function readPortableSkillManifest(skillPath, fallbackName = basename9(skillPath)) {
+function readPortableSkillManifest(skillPath, fallbackName = basename10(skillPath)) {
   return readManifest(skillPath, fallbackName, normalizePortableSkillName);
 }
 function readPortableSkillManifestForImport(skillPath) {
-  return readManifest(skillPath, basename9(skillPath), normalizeNewPortableSkillName);
+  return readManifest(skillPath, basename10(skillPath), normalizeNewPortableSkillName);
 }
 function readManifest(skillPath, fallbackName, normalizeName) {
   const skillJsonPath = join29(skillPath, "skill.json");
@@ -46710,7 +47051,7 @@ function ensurePortableSkillFiles(skillPath, manifest) {
   };
   const entry = next.commands[0]?.entry ?? "src/index.ts";
   if (entry && !existsSync9(join29(skillPath, entry))) {
-    mkdirSync7(dirname18(join29(skillPath, entry)), { recursive: true });
+    mkdirSync7(dirname19(join29(skillPath, entry)), { recursive: true });
     writeFileSync6(join29(skillPath, entry), renderEntrypoint(next));
   }
   if (!existsSync9(join29(skillPath, "SKILL.md")))
@@ -47071,7 +47412,7 @@ function inferRuntimeFromCommands(commands) {
 function readJsonObject(path) {
   const parsed = JSON.parse(readFileSync19(path, "utf-8"));
   if (!isRecord3(parsed))
-    throw new Error(`${basename9(path)} must contain a JSON object`);
+    throw new Error(`${basename10(path)} must contain a JSON object`);
   return parsed;
 }
 function hasPackageDependencies(pkgPath) {
@@ -47109,10 +47450,10 @@ function escapeJsString(value) {
 // src/lib/authoring-path.ts
 import { lstatSync as lstatSync25, realpathSync as realpathSync13 } from "fs";
 import { homedir as homedir4 } from "os";
-import { basename as basename10, dirname as dirname19, join as join30, resolve as resolve19, sep as sep9 } from "path";
+import { basename as basename11, dirname as dirname20, join as join30, resolve as resolve21, sep as sep9 } from "path";
 var NATIVE_DISCOVERY_ROOTS = NATIVE_SKILL_ROOTS.map(([, path]) => path.split("/"));
 function pathParts(path) {
-  return resolve19(path).split(sep9).filter(Boolean);
+  return resolve21(path).split(sep9).filter(Boolean);
 }
 function nativeRootMatch(path) {
   const parts = pathParts(path);
@@ -47126,16 +47467,16 @@ function nativeRootMatch(path) {
   return;
 }
 function physicalPath(path) {
-  let cursor = resolve19(path);
+  let cursor = resolve21(path);
   const suffix = [];
   while (!lstatSync25(cursor, { throwIfNoEntry: false })) {
-    suffix.unshift(basename10(cursor));
-    const parent = dirname19(cursor);
+    suffix.unshift(basename11(cursor));
+    const parent = dirname20(cursor);
     if (parent === cursor)
-      return resolve19(path);
+      return resolve21(path);
     cursor = parent;
   }
-  return resolve19(realpathSync13(cursor), ...suffix);
+  return resolve21(realpathSync13(cursor), ...suffix);
 }
 function contains(root2, path) {
   return path === root2 || path.startsWith(root2 + sep9);
@@ -47143,7 +47484,7 @@ function contains(root2, path) {
 function configuredRoots(home, explicitHome) {
   const homeData = join30(home, ".hasna", "skills");
   const homePolicy = readManagedSkillPolicySnapshot(homeData);
-  const configuredPolicy = !explicitHome && resolve19(getDataDirReadOnly()) !== resolve19(homeData) ? readManagedSkillPolicySnapshot(getDataDirReadOnly()) : null;
+  const configuredPolicy = !explicitHome && resolve21(getDataDirReadOnly()) !== resolve21(homeData) ? readManagedSkillPolicySnapshot(getDataDirReadOnly()) : null;
   const policy = homePolicy ?? configuredPolicy;
   const bridge = policy?.value.bridge;
   if (bridge && (typeof bridge.home !== "string" || physicalPath(bridge.home) !== physicalPath(home))) {
@@ -47182,22 +47523,22 @@ function configuredRoots(home, explicitHome) {
 function assertPortableAuthoringPath(path, options = {}) {
   if (typeof path !== "string" || !path || path.includes("\x00"))
     throw new Error("Invalid portable authoring path");
-  const lexical = resolve19(path);
+  const lexical = resolve21(path);
   const physical = physicalPath(lexical);
   const candidates = [lexical, physical];
   let native = candidates.map(nativeRootMatch).find(Boolean);
-  const home = resolve19(options.homeDir ?? homedir4());
+  const home = resolve21(options.homeDir ?? homedir4());
   const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join30(home, ...parts));
   defaults.push(join30(home, ".codex/plugins/cache"), join30(home, ".claude/plugins/cache"), join30(home, ".claude/plugins/synced"), join30(home, ".gemini/extensions"));
   for (const root2 of defaults) {
-    if (candidates.some((candidate2) => contains(resolve19(root2), candidate2) || contains(physicalPath(root2), candidate2)))
+    if (candidates.some((candidate2) => contains(resolve21(root2), candidate2) || contains(physicalPath(root2), candidate2)))
       native ??= root2;
   }
   if (native) {
     throw new Error(`Refusing portable Skills authoring below native discovery root '${native}': ${lexical}. Set HASNA_SKILLS_DIR to a private authoring corpus outside native roots.`);
   }
   for (const root2 of configuredRoots(home, options.homeDir !== undefined)) {
-    if (candidates.some((candidate2) => contains(resolve19(root2), candidate2) || contains(physicalPath(root2), candidate2))) {
+    if (candidates.some((candidate2) => contains(resolve21(root2), candidate2) || contains(physicalPath(root2), candidate2))) {
       throw new Error(`Refusing portable Skills authoring below configured native discovery root: ${lexical}`);
     }
   }
@@ -47345,20 +47686,20 @@ function isSkillCandidate(dir) {
   return existsSync10(join31(dir, "SKILL.md")) || existsSync10(join31(dir, "skill.json")) || existsSync10(join31(dir, "package.json"));
 }
 function physicalImportPath(path) {
-  let ancestor = resolve20(path);
+  let ancestor = resolve22(path);
   const suffix = [];
   while (!existsSync10(ancestor)) {
-    suffix.unshift(basename11(ancestor));
-    ancestor = dirname20(ancestor);
+    suffix.unshift(basename12(ancestor));
+    ancestor = dirname21(ancestor);
   }
   return join31(realpathSync14(ancestor), ...suffix);
 }
 function assertDisjointImportPaths(source, destination) {
   const sourcePath = realpathSync14(source);
   const destinationPath = physicalImportPath(destination);
-  const contains2 = (parent, child) => {
-    const path = relative7(parent, child);
-    return path === "" || !isAbsolute21(path) && path !== ".." && !path.startsWith(`..${sep10}`);
+  const contains2 = (parent, child2) => {
+    const path = relative7(parent, child2);
+    return path === "" || !isAbsolute23(path) && path !== ".." && !path.startsWith(`..${sep10}`);
   };
   if (contains2(sourcePath, destinationPath) || contains2(destinationPath, sourcePath)) {
     throw new Error("Source and destination skill directories must not overlap");
@@ -47373,8 +47714,8 @@ function portPortableSkill(sourcePath, options = {}) {
   const explicitName = options.name != null;
   const skillName = normalizeNewPortableSkillName(options.name ?? inferred.name);
   if (isOfficialSkillName(skillName) && !options.allowShadow) {
-    const sourceSlug = safeNormalizeName(basename11(absoluteSource));
-    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename11(absoluteSource)}')` : ""} matches a bundled official skill.`;
+    const sourceSlug = safeNormalizeName(basename12(absoluteSource));
+    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename12(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
   const readOnlyDestination = join31(resolvePortableSkillsRoot(options, false), skillName);
@@ -47389,7 +47730,7 @@ function portPortableSkill(sourcePath, options = {}) {
       throw new Error(`Skill '${skillName}' already exists at ${destination}`);
     rmSync2(destination, { recursive: true, force: true });
   }
-  mkdirSync8(dirname20(destination), { recursive: true });
+  mkdirSync8(dirname21(destination), { recursive: true });
   copySkillDirectory(absoluteSource, destination);
   const base = {
     ...inferred,
@@ -47639,7 +47980,7 @@ function safeIsDirectory(path) {
   }
 }
 function isSafeRelativePath2(value) {
-  if (!value.trim() || isAbsolute21(value))
+  if (!value.trim() || isAbsolute23(value))
     return false;
   const normalized = normalize4(value).replace(/\\/g, "/");
   return normalized !== ".." && !normalized.startsWith("../") && !normalized.includes("/../");
@@ -47900,9 +48241,9 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
   const action = dirExists ? "update" : "create";
   if (options.dryRun)
     return { action, path: skillMdPath };
-  const parentDir = dirname21(dir);
+  const parentDir = dirname22(dir);
   mkdirSync9(parentDir, { recursive: true });
-  const transactionDir = mkdtempSync2(join32(parentDir, `.hasna-skills-write-${basename12(dir)}-`));
+  const transactionDir = mkdtempSync2(join32(parentDir, `.hasna-skills-write-${basename13(dir)}-`));
   const candidateDir = join32(transactionDir, "candidate");
   const backupDir = join32(transactionDir, "backup");
   const candidateSkillMdPath = join32(candidateDir, "SKILL.md");
@@ -49289,11 +49630,11 @@ async function executeSelectedLocal(selected, options = {}) {
       throw new SkillSelectionError("INVALID_BUNDLE_PATH", "The execution bundle path exceeds its limit.");
     });
     const destination = join37(runDirectory, entry.path);
-    mkdirSync11(dirname22(destination), { recursive: true, mode: 448 });
+    mkdirSync11(dirname23(destination), { recursive: true, mode: 448 });
     writeFileSync10(destination, entry.bytes, { flag: "wx", mode: entry.mode & 511 });
   }
   env.SKILLS_INPUT_JSON = input;
-  env.SKILLS_WORKSPACE_DIR = resolve21(options.cwd ?? process.cwd());
+  env.SKILLS_WORKSPACE_DIR = resolve23(options.cwd ?? process.cwd());
   env.SKILLS_RUN_DIR = runDirectory;
   if (runtime.version) {
     const version = await subprocess([executable2, ...runtimeName === "bun" ? ["--no-env-file"] : [], "--version"], runDirectory, env, "", Math.min(timeoutMs, 5000));
@@ -49323,7 +49664,7 @@ async function executeSelectedLocal(selected, options = {}) {
     selection: selection2,
     target: "local",
     runtime: runtimeName,
-    inputDigest: `sha256:${createHash26("sha256").update(input).digest("hex")}`,
+    inputDigest: `sha256:${createHash27("sha256").update(input).digest("hex")}`,
     runDirectory,
     ...executionGrant ? { executionGrant } : {},
     ...bindings ? { secretBinding: { schema: bindings.schema, selection: bindings.selection, consumer: bindings.consumer, secretsAuthority: bindings.secretsAuthority, bindings: bindings.bindings } } : {},
@@ -49334,17 +49675,17 @@ async function executeSelectedLocal(selected, options = {}) {
 }
 async function subprocess(command, cwd, env, input, timeoutMs) {
   return new Promise((resolveResult) => {
-    const child = spawn2(command[0], command.slice(1), { cwd, env, shell: false, detached: process.platform !== "win32", stdio: ["pipe", "pipe", "pipe"] });
+    const child2 = spawn2(command[0], command.slice(1), { cwd, env, shell: false, detached: process.platform !== "win32", stdio: ["pipe", "pipe", "pipe"] });
     let outputBytes = 0, error, ended = false;
     const stdout = [], stderr = [];
     const kill = () => {
       try {
-        if (process.platform !== "win32" && child.pid)
-          process.kill(-child.pid, "SIGKILL");
+        if (process.platform !== "win32" && child2.pid)
+          process.kill(-child2.pid, "SIGKILL");
         else
-          child.kill("SIGKILL");
+          child2.kill("SIGKILL");
       } catch {
-        child.kill("SIGKILL");
+        child2.kill("SIGKILL");
       }
     };
     const timer = setTimeout(() => {
@@ -49360,8 +49701,8 @@ async function subprocess(command, cwd, env, input, timeoutMs) {
       }
       target.push(chunk);
     };
-    child.stdout.on("data", capture2(stdout));
-    child.stderr.on("data", capture2(stderr));
+    child2.stdout.on("data", capture2(stdout));
+    child2.stderr.on("data", capture2(stderr));
     const finish = (code) => {
       if (ended)
         return;
@@ -49369,13 +49710,13 @@ async function subprocess(command, cwd, env, input, timeoutMs) {
       clearTimeout(timer);
       resolveResult({ exitCode: error === "LOCAL_RUN_TIMEOUT" ? 124 : error ? 1 : code, stdout: Buffer.concat(stdout).toString("utf8"), stderr: Buffer.concat(stderr).toString("utf8"), ...error ? { error } : {} });
     };
-    child.on("error", () => {
+    child2.on("error", () => {
       error = "LOCAL_RUNTIME_START_FAILED";
       finish(127);
     });
-    child.on("close", (code) => finish(code ?? 1));
-    child.stdin.on("error", () => {});
-    child.stdin.end(input);
+    child2.on("close", (code) => finish(code ?? 1));
+    child2.stdin.on("error", () => {});
+    child2.stdin.end(input);
   });
 }
 // src/lib/remote-run-contract.ts
@@ -58613,7 +58954,7 @@ var import_node_http_handler2 = __toESM(require_dist_cjs6(), 1);
 
 // node_modules/@aws-sdk/checksums/dist-cjs/submodules/sha/index.js
 var { toUint8Array: toUint8Array2, concatBytes } = require_serde();
-var { createHmac: createHmac2, createHash: createHash28 } = __require("crypto");
+var { createHmac: createHmac2, createHash: createHash29 } = __require("crypto");
 var { Sha256: Sha2562, Sha256Js, Sha256Node } = require_checksum();
 var BLOCK2 = 64;
 var DIGEST_LENGTH = 20;
@@ -58782,7 +59123,7 @@ class Sha1Js {
 }
 var hasNativeCrypto = (() => {
   try {
-    createHash28("sha1");
+    createHash29("sha1");
     return true;
   } catch {
     return false;
@@ -58822,7 +59163,7 @@ function buildNativeClass() {
       this.finished = false;
     }
     createHash() {
-      return this.secret ? createHmac2("sha1", toBuffer(this.secret)) : createHash28("sha1");
+      return this.secret ? createHmac2("sha1", toBuffer(this.secret)) : createHash29("sha1");
     }
   };
 }
@@ -59375,15 +59716,15 @@ function createCancelService(options) {
 }
 
 // src/sdk/amounts.ts
-function assertCents(value, field2) {
+function assertCents(value, field3) {
   if (!Number.isSafeInteger(value) || value < 0) {
-    throw new RangeError(field2 + " must be a nonnegative safe integer number of cents");
+    throw new RangeError(field3 + " must be a nonnegative safe integer number of cents");
   }
 }
-function assertReservationCents(value, field2) {
-  assertCents(value, field2);
+function assertReservationCents(value, field3) {
+  assertCents(value, field3);
   if (value > 2147483647) {
-    throw new RangeError(field2 + " must not exceed 2147483647 cents per reservation");
+    throw new RangeError(field3 + " must not exceed 2147483647 cents per reservation");
   }
 }
 
@@ -59391,10 +59732,10 @@ function assertReservationCents(value, field2) {
 import { Database as Database2 } from "bun:sqlite";
 import { randomUUID as randomUUID9 } from "crypto";
 import { mkdirSync as mkdirSync13 } from "fs";
-import { dirname as dirname26 } from "path";
+import { dirname as dirname27 } from "path";
 
 // src/server/database-url.ts
-import { isAbsolute as isAbsolute22, join as join39 } from "path";
+import { isAbsolute as isAbsolute24, join as join39 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 var DEFAULT_SQLITE_FILENAME2 = "server.db";
 var SQLITE_MEMORY_PATH = ":memory:";
@@ -59430,7 +59771,7 @@ function resolveDatabaseTarget(raw) {
     throw new Error(`unsupported database scheme "${scheme}:". Supported: postgres://, postgresql://, sqlite:, file:, ` + `an absolute or relative path to a .db/.sqlite file, ":memory:", or "memory:" (non-durable, tests only). ` + `Leave the setting empty to use the default SQLite database at ${defaultSqlitePath()}.`);
   }
   if (looksLikeSqlitePath(value)) {
-    const path = isAbsolute22(value) ? value : join39(process.cwd(), value);
+    const path = isAbsolute24(value) ? value : join39(process.cwd(), value);
     return { kind: "sqlite", path, durable: true, label: `sqlite (${path})` };
   }
   throw new Error(`could not resolve a database backend from "${value}". Use postgres://\u2026, sqlite:\u2026, an absolute or ` + `relative path ending in ${SQLITE_EXTENSIONS.join("/")}, ":memory:", or leave it empty for the ` + `default SQLite database at ${defaultSqlitePath()}.`);
@@ -59454,7 +59795,7 @@ function sqlitePathFromUrl(value, scheme) {
     }
     return rest.slice(2).replace(/^\/\/+/, "/");
   }
-  return isAbsolute22(rest) ? rest : join39(process.cwd(), rest);
+  return isAbsolute24(rest) ? rest : join39(process.cwd(), rest);
 }
 function looksLikeSqlitePath(value) {
   if (value.includes("/"))
@@ -59687,12 +60028,12 @@ class PostgresSkillSelectionStore {
 // src/server/sqlite-store.ts
 import { randomUUID as randomUUID8 } from "crypto";
 import { mkdirSync as mkdirSync12, readFileSync as readFileSync26, readdirSync as readdirSync13 } from "fs";
-import { dirname as dirname25, join as join41 } from "path";
+import { dirname as dirname26, join as join41 } from "path";
 
 // src/server/auth.ts
-import { createHash as createHash29 } from "crypto";
+import { createHash as createHash30 } from "crypto";
 function hashApiKey(token) {
-  return createHash29("sha256").update(token).digest("hex");
+  return createHash30("sha256").update(token).digest("hex");
 }
 function bearerToken(request2) {
   const header = request2.headers.get("authorization") || "";
@@ -59746,7 +60087,7 @@ function permitsSkillsRoute(principal, method, resource) {
 
 // src/server/migrations-dir.ts
 import { existsSync as existsSync16 } from "fs";
-import { dirname as dirname24, join as join40 } from "path";
+import { dirname as dirname25, join as join40 } from "path";
 var MIGRATION_DIALECTS = ["postgres", "sqlite"];
 var MAX_WALK_UP = 6;
 function findMigrationsRoot(startDirs = defaultStartDirs()) {
@@ -59756,7 +60097,7 @@ function findMigrationsRoot(startDirs = defaultStartDirs()) {
       const candidate2 = join40(dir, "migrations");
       if (MIGRATION_DIALECTS.some((dialect) => existsSync16(join40(candidate2, dialect))))
         return candidate2;
-      const parent = dirname24(dir);
+      const parent = dirname25(dir);
       if (parent === dir)
         break;
       dir = parent;
@@ -60011,12 +60352,12 @@ class SkillLifecycleConflictError extends Error {
   }
 }
 function validOperatorScopeEnrollmentInput(input) {
-  const bounded = (value, max = 256) => typeof value === "string" && value.length > 0 && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
-  return bounded(input.keyId) && bounded(input.stationId) && bounded(input.orgId) && bounded(input.operationId) && bounded(input.manifestDigest, 64) && /^[a-f0-9]{64}$/.test(input.manifestDigest) && bounded(input.operatorJobId) && bounded(input.operatorTaskArn, 512) && input.expectedScopes.length > 0 && input.expectedScopes.length <= 32 && input.expectedScopes.every((scope) => bounded(scope, 128) && /^[a-z][a-z0-9_-]*:[a-z][a-z0-9_-]*$/.test(scope));
+  const bounded2 = (value, max = 256) => typeof value === "string" && value.length > 0 && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
+  return bounded2(input.keyId) && bounded2(input.stationId) && bounded2(input.orgId) && bounded2(input.operationId) && bounded2(input.manifestDigest, 64) && /^[a-f0-9]{64}$/.test(input.manifestDigest) && bounded2(input.operatorJobId) && bounded2(input.operatorTaskArn, 512) && input.expectedScopes.length > 0 && input.expectedScopes.length <= 32 && input.expectedScopes.every((scope) => bounded2(scope, 128) && /^[a-z][a-z0-9_-]*:[a-z][a-z0-9_-]*$/.test(scope));
 }
 
 // src/lib/revision.ts
-import { createHash as createHash30 } from "crypto";
+import { createHash as createHash31 } from "crypto";
 var REVISION_ID_PATTERN = /^[0-9a-f]{64}$/;
 function revisionIdOf(content) {
   const canonicalContent = {
@@ -60037,8 +60378,8 @@ function revisionIdOf(content) {
     canonicalContent.archiveReason = content.archiveReason ?? null;
     canonicalContent.replacementSlug = content.replacementSlug ?? null;
   }
-  const canonical7 = JSON.stringify(canonicalContent);
-  return createHash30("sha256").update(canonical7).digest("hex");
+  const canonical8 = JSON.stringify(canonicalContent);
+  return createHash31("sha256").update(canonical8).digest("hex");
 }
 function revisionIdOfRecord(record4) {
   return revisionIdOf(record4);
@@ -60063,7 +60404,7 @@ class SqliteSkillsStore {
   constructor(path = SQLITE_MEMORY_PATH, options = {}) {
     const inMemory = path === SQLITE_MEMORY_PATH;
     if (!inMemory)
-      mkdirSync12(dirname25(path), { recursive: true });
+      mkdirSync12(dirname26(path), { recursive: true });
     this.db = openDatabase(path);
     this.db.exec(`PRAGMA busy_timeout = ${Math.max(0, options.busyTimeoutMs ?? 5000)}`);
     if (!inMemory)
@@ -60780,8 +61121,8 @@ function openDatabase(path) {
   try {
     return new Database(path, { create: true, readwrite: true });
   } catch (error) {
-    const reason = error instanceof Error ? error.message : String(error);
-    throw new Error(`cannot open the skills database at ${path}: ${reason}. ` + "Check that the directory exists and is writable. Set HASNA_SKILLS_DATABASE_URL to choose a " + "different path or a postgres:// URL, or HASNA_SKILLS_DIR to relocate the whole data directory.", { cause: error });
+    const reason2 = error instanceof Error ? error.message : String(error);
+    throw new Error(`cannot open the skills database at ${path}: ${reason2}. ` + "Check that the directory exists and is writable. Set HASNA_SKILLS_DATABASE_URL to choose a " + "different path or a postgres:// URL, or HASNA_SKILLS_DIR to relocate the whole data directory.", { cause: error });
   }
 }
 function parseScopes(value) {
@@ -60889,7 +61230,7 @@ class SqliteGovernanceStore {
   closed = false;
   constructor(path = SQLITE_MEMORY_PATH, options = {}) {
     if (path !== SQLITE_MEMORY_PATH)
-      mkdirSync13(dirname26(path), { recursive: true });
+      mkdirSync13(dirname27(path), { recursive: true });
     this.db = new Database2(path, { create: true, readwrite: true });
     this.db.exec("PRAGMA busy_timeout = 5000");
     this.db.exec("PRAGMA foreign_keys = ON");
@@ -61122,7 +61463,7 @@ function nextMonthPrefix(monthPrefix) {
 }
 
 // src/server/skills-api.ts
-import { createHash as createHash31 } from "crypto";
+import { createHash as createHash32 } from "crypto";
 var SLUG_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
 var SHA256_HEX2 = /^[0-9a-f]{64}$/;
 var MAX_SLUG_LENGTH = 128;
@@ -61312,7 +61653,7 @@ async function parsePublishRequest(request2, config) {
     if (bundleBytes.byteLength === 0) {
       throw new SkillRequestError(400, "BUNDLE_EMPTY", "the uploaded bundle is empty");
     }
-    const sha2563 = createHash31("sha256").update(bundleBytes).digest("hex");
+    const sha2563 = createHash32("sha256").update(bundleBytes).digest("hex");
     const claimed = optionalString(manifest.bundleSha256);
     if (claimed)
       assertSha2562(claimed);
@@ -61427,7 +61768,7 @@ async function readPublishedBundle(store, artifactStorage, principal, slug) {
   if (!bytes) {
     throw new SkillRequestError(503, "BUNDLE_BACKEND_UNAVAILABLE", "bundle storage backend unavailable");
   }
-  const actual = createHash31("sha256").update(bytes).digest("hex");
+  const actual = createHash32("sha256").update(bytes).digest("hex");
   if (actual !== record4.bundleSha256) {
     throw new SkillRequestError(500, "BUNDLE_DIGEST_DRIFT", `stored bundle for '${slug}' hashes to ${actual} but was published as ${record4.bundleSha256}`);
   }
@@ -61484,7 +61825,7 @@ function buildPublishInput(manifest) {
     displayName: optionalString(manifest.displayName) ?? titleize(slug),
     description,
     category: optionalString(manifest.category) ?? "Development Tools",
-    tags: stringArray(manifest.tags),
+    tags: stringArray2(manifest.tags),
     source: publishSource(optionalString(manifest.source)),
     kind: kindValue,
     ...publishVersionOf(manifest) ? { version: publishVersionOf(manifest) } : {},
@@ -61513,7 +61854,7 @@ function optionalString(value) {
 function optionalText(value) {
   return typeof value === "string" && value.trim() ? value : undefined;
 }
-function stringArray(value) {
+function stringArray2(value) {
   if (!Array.isArray(value))
     return [];
   return value.filter((item) => typeof item === "string" && item.trim().length > 0).map((item) => item.trim());
@@ -61575,7 +61916,7 @@ async function readSkillVersionBundle(store, artifactStorage, principal, slug, v
   const bytes = await artifactStorage.readBundle(bundle2);
   if (!bytes)
     throw new SkillRequestError(503, "BUNDLE_BACKEND_UNAVAILABLE", "bundle storage backend unavailable");
-  const actual = createHash31("sha256").update(bytes).digest("hex");
+  const actual = createHash32("sha256").update(bytes).digest("hex");
   if (actual !== found.bundleSha256) {
     throw new SkillRequestError(500, "BUNDLE_DIGEST_DRIFT", `stored bundle for '${slug}@${version2}' hashes to ${actual} but was published as ${found.bundleSha256}`);
   }
@@ -61658,7 +61999,7 @@ async function validatePublishedGrant(store, artifacts, principal, grant) {
     invalid3();
 }
 async function handleExecutionGrantApi(store, principal, request2, parts, config, artifacts) {
-  const [resource, id2, child, revision] = parts;
+  const [resource, id2, child2, revision] = parts;
   if (resource !== "execution-grants")
     return null;
   if (!grantIdentifier(id2))
@@ -61666,7 +62007,7 @@ async function handleExecutionGrantApi(store, principal, request2, parts, config
   const { executionGrantStore: policies, selectionStore: profiles } = store;
   if (!policies || !profiles)
     refuse5(503, "EXECUTION_GRANTS_UNAVAILABLE", "This store does not support execution grants.");
-  const historical = parts.length === 4 && child === "versions" && grantIdentifier(revision);
+  const historical = parts.length === 4 && child2 === "versions" && grantIdentifier(revision);
   if (request2.method === "GET" && (parts.length === 2 || historical)) {
     const policy = await policies.get(principal, id2, historical ? revision : undefined);
     if (!policy)
@@ -61705,7 +62046,7 @@ async function handleExecutionGrantApi(store, principal, request2, parts, config
       refuse5(409, "EXECUTION_GRANT_REVISION_CONFLICT", "Execution grant policy changed; read it before retrying.");
     return json(saved, create ? 201 : 200, saved.revision);
   }
-  if (request2.method === "POST" && parts.length === 3 && child === "resolve") {
+  if (request2.method === "POST" && parts.length === 3 && child2 === "resolve") {
     const input = await body(request2, Math.min(config.requestBodyLimitBytes, 16384));
     let consumer;
     try {
@@ -61870,7 +62211,7 @@ function json2(value, status = 200, revision) {
   });
 }
 async function handleProfileApi(store, principal, request2, parts, config) {
-  const [resource, id2, child] = parts;
+  const [resource, id2, child2] = parts;
   if (resource === "capabilities" && request2.method === "GET" && parts.length === 1)
     return json2({
       contractVersion: 1,
@@ -61936,13 +62277,13 @@ async function handleProfileApi(store, principal, request2, parts, config) {
       throw new SkillRequestError(409, "PROFILE_REVISION_CONFLICT", "Profile changed; read it before retrying");
     return json2(saved, create ? 201 : 200, saved.revision);
   }
-  if (resource === "profiles" && request2.method === "GET" && (parts.length === 2 || parts.length === 3 && child === "resolve")) {
+  if (resource === "profiles" && request2.method === "GET" && (parts.length === 2 || parts.length === 3 && child2 === "resolve")) {
     const profile2 = await adapter.getProfile(principal, id2);
     if (!profile2)
       throw new SkillRequestError(404, "PROFILE_NOT_FOUND", "Profile not found");
     if (profile2.selections.length > MAX_PROFILE_SELECTIONS)
       throw new SkillRequestError(413, "PROFILE_TOO_LARGE", "Profile exceeds the advertised selection limit");
-    if (!child)
+    if (!child2)
       return json2(profile2, 200, profile2.revision);
     const authority2 = skillsApiRequestUrl(normalizeSkillsApiOrigin(config.publicBaseUrl), "/api/v1/").replace(/\/+$/, "");
     const result = resolvedProfileSnapshot(profile2, authority2);
@@ -61961,7 +62302,7 @@ async function handleProfileApi(store, principal, request2, parts, config) {
       throw new SkillRequestError(413, "PROFILE_TOO_LARGE", "Resolved profile exceeds the advertised profile limits");
     return json2(result, 200, profile2.revision);
   }
-  if (resource === "stations" && parts.length === 3 && child === "state") {
+  if (resource === "stations" && parts.length === 3 && child2 === "state") {
     if (request2.method === "GET") {
       const state2 = await adapter.getStationState(principal, id2);
       if (!state2)
@@ -61995,7 +62336,7 @@ async function handleProfileApi(store, principal, request2, parts, config) {
 // src/server/runtime-store.ts
 import { Database as Database3 } from "bun:sqlite";
 import { mkdirSync as mkdirSync14 } from "fs";
-import { dirname as dirname27 } from "path";
+import { dirname as dirname28 } from "path";
 
 // src/sdk/execution/types.ts
 var EXECUTION_PROTOCOL_VERSION = REMOTE_SKILL_RUN_CONTRACT_VERSION;
@@ -62051,7 +62392,7 @@ class RuntimeExecutionStore {
     }
     const path = target.kind === "sqlite" ? target.path : ":memory:";
     if (path !== ":memory:")
-      mkdirSync14(dirname27(path), { recursive: true });
+      mkdirSync14(dirname28(path), { recursive: true });
     const db = new Database3(path);
     db.run("PRAGMA busy_timeout=5000");
     db.run("PRAGMA journal_mode=WAL");
@@ -62291,7 +62632,7 @@ class RuntimeExecutionStore {
 }
 
 // src/sdk/execution/admission.ts
-import { createHash as createHash33 } from "crypto";
+import { createHash as createHash34 } from "crypto";
 
 // src/sdk/execution/image-profile.ts
 class ImageProfileResolutionError extends Error {
@@ -62903,11 +63244,11 @@ function ownedAdmission(admission) {
   };
 }
 function digestInput(input) {
-  return createHash33("sha256").update(canonicalJson2(input)).digest("hex");
+  return createHash34("sha256").update(canonicalJson2(input)).digest("hex");
 }
 
 // src/sdk/execution/dispatchers/ecs.ts
-import { createHash as createHash34 } from "crypto";
+import { createHash as createHash35 } from "crypto";
 
 // src/sdk/execution/state-machine.ts
 var LEGAL_TRANSITIONS = {
@@ -66307,13 +66648,13 @@ function observedTask(states, taskArn) {
   return state2.lastStatus === "STOPPED" || LIVE_TASK_STATUSES.has(state2.lastStatus) ? state2 : undefined;
 }
 function clientTokenFor(runId3, attemptId) {
-  return createHash34("sha256").update(`${runId3}\x00${attemptId}`).digest("hex").slice(0, CLIENT_TOKEN_BYTES * 2);
+  return createHash35("sha256").update(`${runId3}\x00${attemptId}`).digest("hex").slice(0, CLIENT_TOKEN_BYTES * 2);
 }
 function startedByFor(runId3, attemptNumber) {
   return `skills-exec/${runId3}/a${attemptNumber}`;
 }
 function requestDigestFor(admission, attemptId) {
-  return createHash34("sha256").update(canonicalJson2({ admission, attemptId })).digest("hex");
+  return createHash35("sha256").update(canonicalJson2({ admission, attemptId })).digest("hex");
 }
 
 class EcsDispatcher {
@@ -66609,10 +66950,10 @@ function validText(value) {
 }
 
 // src/server/runtime-policy.ts
-import { createHash as createHash36, createHmac as createHmac3, timingSafeEqual as timingSafeEqual2 } from "crypto";
+import { createHash as createHash37, createHmac as createHmac3, timingSafeEqual as timingSafeEqual2 } from "crypto";
 
 // src/server/runtime-pure-contract.ts
-import { createHash as createHash35 } from "crypto";
+import { createHash as createHash36 } from "crypto";
 var PURE_DESCRIPTOR = Object.freeze({
   id: "regex-test.v1",
   runtime: "bun",
@@ -66636,7 +66977,7 @@ var PURE_LIMITS = Object.freeze({
   maxArtifactsBytes: 0,
   maxConcurrency: 1
 });
-var hash2 = (bytes) => createHash35("sha256").update(bytes).digest("hex");
+var hash2 = (bytes) => createHash36("sha256").update(bytes).digest("hex");
 var object7 = (v2) => {
   if (!v2 || typeof v2 !== "object" || Array.isArray(v2))
     throw Error("Pure contract requires an object");
@@ -66865,7 +67206,7 @@ function verifyRuntimeToken(token, key, admission, attempt, now = Date.now()) {
   const actual = Buffer.from(token);
   return actual.length === expected.length && timingSafeEqual2(actual, expected);
 }
-var hashBytes = (bytes) => createHash36("sha256").update(bytes).digest("hex");
+var hashBytes = (bytes) => createHash37("sha256").update(bytes).digest("hex");
 
 // src/server/runtime-api.ts
 async function createRuntimeService(options) {
@@ -73241,7 +73582,7 @@ var localRunExecutor = {
 // src/sdk/storage.ts
 var artifactStorageSeam = ArtifactStorage;
 // src/sdk/outputs.ts
-import { createHash as createHash37 } from "crypto";
+import { createHash as createHash38 } from "crypto";
 class DatabaseOnlyObjectStore {
   usesS3 = false;
   async materialize(run, artifact, body4) {
@@ -73288,7 +73629,7 @@ function createGovernedArtifactWriter(options) {
       const stamped = {
         ...meta,
         byteSize: outputBytes,
-        sha256: createHash37("sha256").update(persistedBytes).digest("hex"),
+        sha256: createHash38("sha256").update(persistedBytes).digest("hex"),
         visibility: options.visibility ?? config.defaultVisibility,
         ...config.artifactTtlSeconds !== undefined ? { expiresAt: expiresAtFor(createdAt, config.artifactTtlSeconds) } : {}
       };
@@ -76930,14 +77271,14 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
     const shape = zod.def.shape;
     const propValues = {};
     for (const key in shape) {
-      const field2 = shape[key]._zod;
-      if (field2.values) {
+      const field3 = shape[key]._zod;
+      if (field3.values) {
         if (!Object.prototype.hasOwnProperty.call(propValues, key)) {
           assignProp(propValues, key, new Set);
         }
-        for (const v2 of field2.values)
+        for (const v2 of field3.values)
           propValues[key].add(v2);
-        if (field2.optin !== undefined)
+        if (field3.optin !== undefined)
           propValues[key].add(undefined);
       }
     }
@@ -78350,8 +78691,8 @@ function isRecursive(inst, stack) {
     return true;
   stack.add(inst);
   let result = false;
-  const check = (child) => {
-    if (!result && child?._zod && isRecursive(child, stack))
+  const check = (child2) => {
+    if (!result && child2?._zod && isRecursive(child2, stack))
       result = true;
   };
   const def = inst._zod.def;
@@ -89130,11 +89471,11 @@ var objectProcessor = (schema, ctx, _json, params) => {
   }
   const allKeys = new Set(Object.keys(shape));
   const requiredKeys = new Set([...allKeys].filter((key) => {
-    const field2 = def.shape[key];
+    const field3 = def.shape[key];
     if (ctx.io === "input") {
-      return inputOptin(field2) === undefined;
+      return inputOptin(field3) === undefined;
     } else {
-      return field2._zod.optout === undefined;
+      return field3._zod.optout === undefined;
     }
   }));
   if (requiredKeys.size > 0) {
@@ -92055,7 +92396,7 @@ function date4(params) {
   return _coercedDate(ZodDate2, params);
 }
 // src/lib/canonical-json.ts
-import { createHash as createHash38 } from "crypto";
+import { createHash as createHash39 } from "crypto";
 function canonicalJson3(value, maximumBytes = 2 * 1024 * 1024) {
   return canonicalJsonAtDepth(value, maximumBytes, 64);
 }
@@ -92099,7 +92440,7 @@ function canonicalJsonAtDepth(value, maximumBytes, maximumDepth) {
   return visit3(value, 0);
 }
 function canonicalJsonSha256(value, maximumBytes) {
-  return createHash38("sha256").update(canonicalJson3(value, maximumBytes)).digest("hex");
+  return createHash39("sha256").update(canonicalJson3(value, maximumBytes)).digest("hex");
 }
 
 // src/lib/remote-recurring-contract.ts
@@ -92879,17 +93220,17 @@ function runQuoteReceipt(value) {
   return value;
 }
 function parseRemoteRunQuote(value) {
-  const quote2 = object9(value);
-  runQuoteReceipt(quote2.quoteReceipt);
-  const pricing = object9(quote2.pricing);
-  if (typeof quote2.skill !== "string" || !/^[a-z0-9][a-z0-9-]*$/.test(quote2.skill))
+  const quote3 = object9(value);
+  runQuoteReceipt(quote3.quoteReceipt);
+  const pricing = object9(quote3.pricing);
+  if (typeof quote3.skill !== "string" || !/^[a-z0-9][a-z0-9-]*$/.test(quote3.skill))
     throw new Error("Invalid quoted skill");
   const costCents = creditCount(pricing.costCredits ?? pricing.costCents);
   if (pricing.costCredits !== undefined && pricing.costCents !== undefined && pricing.costCents !== costCents)
     throw new Error("Inconsistent quoted credit count");
-  if (quote2.availability && object9(quote2.availability).status !== "available")
+  if (quote3.availability && object9(quote3.availability).status !== "available")
     throw new Error("This skill is unavailable for remote execution");
-  return { ...quote2, skill: quote2.skill, pricing: { ...pricing, costCredits: costCents, costCents, formattedCost: `${costCents} credits` } };
+  return { ...quote3, skill: quote3.skill, pricing: { ...pricing, costCredits: costCents, costCents, formattedCost: `${costCents} credits` } };
 }
 function parseRemoteCreditPacks(value) {
   if (!Array.isArray(value))
@@ -92964,14 +93305,14 @@ function creditCheckoutFailure(value, status, key) {
 }
 
 // src/lib/remote-profile.ts
-function customerNamePatch(input2, field2) {
-  if (!isRecord6(input2) || Object.keys(input2).length !== 1 || !Object.hasOwn(input2, field2))
+function customerNamePatch(input2, field3) {
+  if (!isRecord6(input2) || Object.keys(input2).length !== 1 || !Object.hasOwn(input2, field3))
     throw new Error("Provide only the requested name field.");
-  const value = input2[field2];
+  const value = input2[field3];
   if (typeof value !== "string" || /[\p{Cc}\p{Cs}\u2028\u2029]/u.test(value) || !value.trim() || [...value.trim()].length > 100) {
     throw new Error("Use a name of 1\u2013100 characters without control characters or newlines.");
   }
-  return { [field2]: value.trim() };
+  return { [field3]: value.trim() };
 }
 function isRecord6(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
@@ -93016,10 +93357,10 @@ async function readQuoteUnavailableCode(response) {
   let timer;
   let deadlineExceeded = false;
   const expired = Symbol("quote body deadline");
-  const deadline = new Promise((resolve23) => {
+  const deadline = new Promise((resolve25) => {
     timer = setTimeout(() => {
       deadlineExceeded = true;
-      resolve23(expired);
+      resolve25(expired);
       reader.cancel().catch(() => {});
     }, 1500);
   });
@@ -93366,18 +93707,18 @@ class RemoteSkillsClient {
     const maximum = creditCount(approval.maxCredits ?? approval.maxCostCents ?? 0);
     if (approval.maxCostCents !== undefined && approval.maxCostCents !== maximum)
       throw new Error("Credit approval fields disagree");
-    const quote2 = approval.quoteReceipt === undefined ? await this.quoteRun(slug2, input2, args, approval.inputFiles?.length ? approval.inputFiles : undefined) : undefined;
-    if (quote2 && quote2.pricing.costCents > maximum)
-      throw new RemoteCreditApprovalError(quote2.pricing.costCents, maximum);
+    const quote3 = approval.quoteReceipt === undefined ? await this.quoteRun(slug2, input2, args, approval.inputFiles?.length ? approval.inputFiles : undefined) : undefined;
+    if (quote3 && quote3.pricing.costCents > maximum)
+      throw new RemoteCreditApprovalError(quote3.pricing.costCents, maximum);
     const capabilities = await this.getCapabilities();
     if (!capabilities.capabilities.includes("runs.submit") || capabilities.billing?.boundedRunApproval !== true || capabilities.billing.unit !== "credits") {
       throw new Error("The configured server does not support bounded credit approval; refusing remote submission");
     }
-    return this.submitRun(quote2?.skill ?? slug2, input2, args, {
+    return this.submitRun(quote3?.skill ?? slug2, input2, args, {
       ...approval,
       maxCredits: maximum,
       maxCostCents: maximum,
-      ...(quote2?.quoteReceipt ?? approval.quoteReceipt) === undefined ? {} : { quoteReceipt: quote2?.quoteReceipt ?? approval.quoteReceipt }
+      ...(quote3?.quoteReceipt ?? approval.quoteReceipt) === undefined ? {} : { quoteReceipt: quote3?.quoteReceipt ?? approval.quoteReceipt }
     });
   }
   async getIdentity() {
@@ -93978,13 +94319,13 @@ class RemoteSkillsClient {
     return normalizeUpdatedSincePage(await response.json());
   }
 }
-function requireOptionalString(record9, field2) {
-  if (record9[field2] === undefined)
+function requireOptionalString(record9, field3) {
+  if (record9[field3] === undefined)
     return;
-  if (typeof record9[field2] !== "string") {
-    throw new Error(`Remote payload did not match the expected contract (${field2} must be a string when present)`);
+  if (typeof record9[field3] !== "string") {
+    throw new Error(`Remote payload did not match the expected contract (${field3} must be a string when present)`);
   }
-  return record9[field2];
+  return record9[field3];
 }
 var INVALID_SKILL_VERSION_RESPONSE = "Remote skill version payload did not match the expected contract.";
 function isVersionRecord(value) {
@@ -94213,7 +94554,7 @@ async function requestInvitationEmail(origin, action, input2) {
 }
 
 // src/lib/remote-private-publications.ts
-import { createHash as createHash39 } from "crypto";
+import { createHash as createHash40 } from "crypto";
 var PRIVATE_PUBLICATION_MAX_BYTES = 16 * 1024 * 1024;
 var failures2 = {
   INVALID_REQUEST: [400, "The publication request is invalid."],
@@ -94260,7 +94601,7 @@ var hash4 = (v2) => typeof v2 === "string" && /^[a-f0-9]{64}$/.test(v2);
 var record10 = (v2) => !!v2 && typeof v2 === "object" && !Array.isArray(v2);
 var exact = (v2, keys3) => record10(v2) && Object.keys(v2).sort().join(",") === keys3.sort().join(",");
 var date5 = (v2) => typeof v2 === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v2) && Number.isFinite(Date.parse(v2));
-var publicationSha256 = (bytes) => createHash39("sha256").update(bytes).digest("hex");
+var publicationSha256 = (bytes) => createHash40("sha256").update(bytes).digest("hex");
 function checkedPublicationDeclaration(value) {
   if (!exact(value, ["idempotencyKey", "version", "expectedCurrentVersionId", "manifestText", "archiveSha256", "archiveByteSize"]) || !publicationUuid(value.idempotencyKey) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || typeof value.manifestText !== "string" || Buffer.byteLength(value.manifestText) > 16384 || !hash4(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES)
     return bad();
@@ -94505,12 +94846,12 @@ class RemotePrivatePublicationsClient {
       previous = view;
       if (!["queued", "verifying"].includes(view.state) || Date.now() >= until)
         return view;
-      await new Promise((resolve23) => {
+      await new Promise((resolve25) => {
         const timer = setTimeout(done, Math.min(1000, until - Date.now()));
         function done() {
           clearTimeout(timer);
           options.signal?.removeEventListener("abort", done);
-          resolve23();
+          resolve25();
         }
         options.signal?.addEventListener("abort", done, { once: true });
       });
@@ -94743,19 +95084,19 @@ class RemoteSkillsAuthClient {
 }
 // src/lib/private-publication-recovery.ts
 import { constants as constants16, closeSync as closeSync19, fsyncSync as fsyncSync7, fstatSync as fstatSync19, lstatSync as lstatSync27, mkdirSync as mkdirSync15, openSync as openSync19, readSync as readSync13, realpathSync as realpathSync16, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname28, isAbsolute as isAbsolute23, join as join43, resolve as resolve23 } from "path";
+import { dirname as dirname29, isAbsolute as isAbsolute25, join as join43, resolve as resolve25 } from "path";
 import { randomUUID as randomUUID12 } from "crypto";
 var fail2 = () => {
   throw new PrivatePublicationError("PUBLICATION_RECOVERY_INVALID", "The recovery directory is invalid or changed. Preserve it and inspect the existing intent; do not start a replacement automatically.");
 };
 function safeDirectory(directory) {
-  if (!isAbsolute23(directory) || directory !== resolve23(directory) || realpathSync16(directory) !== directory)
+  if (!isAbsolute25(directory) || directory !== resolve25(directory) || realpathSync16(directory) !== directory)
     return fail2();
-  for (let path2 = directory;; path2 = dirname28(path2)) {
+  for (let path2 = directory;; path2 = dirname29(path2)) {
     const stat2 = lstatSync27(path2);
     if (!stat2.isDirectory() || stat2.isSymbolicLink())
       return fail2();
-    if (path2 === dirname28(path2))
+    if (path2 === dirname29(path2))
       break;
   }
   const own2 = lstatSync27(directory);
@@ -94887,11 +95228,11 @@ async function preparePrivatePublication(client2, sourceDirectory, recoveryDirec
     phase: "prepared",
     intent: null
   };
-  if (!isAbsolute23(recoveryDirectory) || resolve23(recoveryDirectory) !== recoveryDirectory || realpathSync16(dirname28(recoveryDirectory)) !== dirname28(recoveryDirectory))
+  if (!isAbsolute25(recoveryDirectory) || resolve25(recoveryDirectory) !== recoveryDirectory || realpathSync16(dirname29(recoveryDirectory)) !== dirname29(recoveryDirectory))
     return fail2();
   mkdirSync15(recoveryDirectory, { mode: 448 });
   safeDirectory(recoveryDirectory);
-  const parent = openSync19(dirname28(recoveryDirectory), constants16.O_RDONLY | constants16.O_NOFOLLOW);
+  const parent = openSync19(dirname29(recoveryDirectory), constants16.O_RDONLY | constants16.O_NOFOLLOW);
   try {
     fsyncSync7(parent);
   } finally {