@hasna/skills 0.10.62 → 0.10.63

package/bin/mcp.js

@@ -23,7 +23,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.62",
+    version: "0.10.63",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -23119,6 +23119,15 @@ function assertAgentPolicyCollections(policy) {
         }
       } else
         requireBound(source.managedPlugins === undefined);
+      if (source.reviewArtifact !== undefined) {
+        const artifact = source.reviewArtifact;
+        requireBound(agent === "codex" && value.method === "reviewed" && source.hashMode === "bytes" && object2(artifact) && Object.keys(artifact).length === 6 && Object.keys(artifact).every((key) => ["version", "kind", "storeRoot", "originalPath", "sha256", "catalogSha256"].includes(key)) && artifact.version === 1 && artifact.kind === "codex-native-catalog" && artifact.sha256 === source.sha256 && /^[a-f0-9]{64}$/.test(artifact.catalogSha256));
+        for (const path of [artifact.storeRoot, artifact.originalPath]) {
+          text(path);
+          requireBound(isAbsolute5(path) && resolve4(path) === path);
+        }
+        requireBound(source.path === join10(artifact.storeRoot, "agent-discovery", "artifacts", artifact.sha256, "catalog.json"));
+      }
       if (source.format !== undefined)
         requireBound(["json", "toml", "yaml"].includes(source.format));
       if (source.fields !== undefined)
@@ -32722,11 +32731,55 @@ var init_codex_hook_rpc = __esm(() => {
 });
 
 // src/lib/codex-native-skill-catalog.ts
+import { isAbsolute as isAbsolute10, normalize as normalize2 } from "path";
 function codexPluginSourceIsConfigControlled(plugin) {
   const remoteRealms = ["openai-curated-remote", "created-by-me-remote", "workspace-directory", "workspace-shared-with-me", "workspace-shared-with-me-private", "workspace-shared-with-me-unlisted"];
   return Boolean(plugin.sourceType && ["local", "git", "npm"].includes(plugin.sourceType) && plugin.sourceSha256 && /^[a-f0-9]{64}$/.test(plugin.sourceSha256) && !plugin.remotePluginId && !remoteRealms.includes(plugin.id.slice(plugin.id.lastIndexOf("@") + 1)));
 }
-var remotePluginIdentifier = (value) => typeof value === "string" && /^[A-Za-z0-9_~-]{1,1024}$/.test(value);
+function refuse() {
+  throw new Error("CODEX_NATIVE_SKILL_CATALOG_INVALID");
+}
+function projectCodexNativeSkillCatalog(response, cwd) {
+  if (!absolutePath2(cwd) || !object5(response) || !Array.isArray(response.data) || response.data.length !== 1)
+    refuse();
+  const entry = response.data[0];
+  if (!object5(entry) || entry.cwd !== cwd || !Array.isArray(entry.errors) || entry.errors.length !== 0 || !Array.isArray(entry.skills) || entry.skills.length > MAX_SKILLS)
+    refuse();
+  const paths = new Set;
+  return entry.skills.map((value) => {
+    if (!object5(value) || !scalar(value.name, MAX_NAME_BYTES) || !absolutePath2(value.path) || typeof value.enabled !== "boolean" || value.pluginId !== undefined && value.pluginId !== null && !scalar(value.pluginId, MAX_NAME_BYTES))
+      refuse();
+    if (paths.has(value.path))
+      refuse();
+    paths.add(value.path);
+    return { name: value.name, path: value.path, enabled: value.enabled, pluginId: value.pluginId ?? null };
+  });
+}
+function projectCodexInstalledPluginEntries(value) {
+  if (!Array.isArray(value) || value.length > MAX_SKILLS)
+    refuse();
+  const ids = new Set;
+  return value.map((item) => {
+    if (!object5(item) || !scalar(item.id, MAX_PLUGIN_ID_BYTES) || !scalar(item.name, MAX_NAME_BYTES) || typeof item.installed !== "boolean" || typeof item.enabled !== "boolean" || item.localVersion !== null && !scalar(item.localVersion, MAX_NAME_BYTES) || item.remotePluginId !== undefined && item.remotePluginId !== null && !remotePluginIdentifier(item.remotePluginId) || item.sourceType !== undefined && !["remote", "local", "git", "npm"].includes(item.sourceType) || (["local", "git", "npm"].includes(item.sourceType) ? typeof item.sourceSha256 !== "string" || !/^[a-f0-9]{64}$/.test(item.sourceSha256) : item.sourceSha256 !== undefined) || (item.sourceType === "local" ? !absolutePath2(item.sourcePath) || normalize2(item.sourcePath) !== item.sourcePath || item.sourceSha256 !== hashNativeJsonControls(JSON.stringify({ type: "local", path: item.sourcePath })) : item.sourcePath !== undefined))
+      refuse();
+    const at = item.id.lastIndexOf("@");
+    if (at < 1 || item.id.slice(0, at) !== item.name || at === item.id.length - 1 || ids.has(item.id))
+      refuse();
+    ids.add(item.id);
+    return {
+      id: item.id,
+      name: item.name,
+      installed: item.installed,
+      enabled: item.enabled,
+      localVersion: item.localVersion ?? null,
+      ...item.sourceType === undefined ? {} : { sourceType: item.sourceType },
+      ...item.sourceSha256 === undefined ? {} : { sourceSha256: item.sourceSha256 },
+      ...item.sourcePath === undefined ? {} : { sourcePath: item.sourcePath },
+      ...item.remotePluginId == null ? {} : { remotePluginId: item.remotePluginId }
+    };
+  });
+}
+var MAX_SKILLS = 4096, MAX_NAME_BYTES = 1024, MAX_PATH_BYTES = 16384, MAX_PLUGIN_ID_BYTES = 1024, object5 = (value) => value !== null && typeof value === "object" && !Array.isArray(value), scalar = (value, max) => typeof value === "string" && value.length > 0 && value.trim() === value && Buffer.byteLength(value, "utf8") <= max && !/[\u0000-\u001f\u007f]/u.test(value), remotePluginIdentifier = (value) => typeof value === "string" && /^[A-Za-z0-9_~-]{1,1024}$/.test(value), absolutePath2 = (value) => scalar(value, MAX_PATH_BYTES) && isAbsolute10(value);
 var init_codex_native_skill_catalog = __esm(() => {
   init_codex_hook_rpc();
   init_codex_native_compatibility();
@@ -32736,7 +32789,7 @@ var init_codex_native_skill_catalog = __esm(() => {
 // src/lib/codex-plugin-skill-controls.ts
 import { basename as basename6, dirname as dirname12, join as join18, relative as relative5, resolve as resolve11, sep as sep6 } from "path";
 import { lstatSync as lstatSync12, readdirSync as readdirSync6, readlinkSync as readlinkSync3, realpathSync as realpathSync4 } from "fs";
-function refuse() {
+function refuse2() {
   throw new Error("CODEX_NATIVE_SKILL_IDENTITY_UNSUPPORTED: review native plugin names and hook controls");
 }
 function remoteInstallationMatches(parent, remotePluginId, read) {
@@ -32761,17 +32814,17 @@ function appControls(path, read) {
     sha2562 = hashNativeJsonControls(text2);
     value = JSON.parse(text2);
   } catch {
-    refuse();
+    refuse2();
   }
-  const object5 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
-  if (!object5(value) || Object.keys(value).length !== 1 || !object5(value.apps))
-    refuse();
+  const object6 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
+  if (!object6(value) || Object.keys(value).length !== 1 || !object6(value.apps))
+    refuse2();
   const apps = Object.entries(value.apps);
   if (!apps.length || apps.length > 256)
-    refuse();
+    refuse2();
   for (const [name, entry] of apps) {
-    if (!identifier2(name) || !object5(entry) || !Object.keys(entry).every((key) => ["id", "category", "required"].includes(key)) || typeof entry.id !== "string" || !/^[A-Za-z0-9_-]{1,256}$/.test(entry.id) || entry.category !== undefined && (typeof entry.category !== "string" || !entry.category.trim() || entry.category.length > 256 || /[\x00-\x1f\x7f]/.test(entry.category)) || entry.required !== undefined && typeof entry.required !== "boolean")
-      refuse();
+    if (!identifier2(name) || !object6(entry) || !Object.keys(entry).every((key) => ["id", "category", "required"].includes(key)) || typeof entry.id !== "string" || !/^[A-Za-z0-9_-]{1,256}$/.test(entry.id) || entry.category !== undefined && (typeof entry.category !== "string" || !entry.category.trim() || entry.category.length > 256 || /[\x00-\x1f\x7f]/.test(entry.category)) || entry.required !== undefined && typeof entry.required !== "boolean")
+      refuse2();
   }
   return sha2562;
 }
@@ -32782,26 +32835,26 @@ function mcpControls(path, read) {
     sha2562 = hashNativeJsonControls(text2);
     value = JSON.parse(text2);
   } catch {
-    refuse();
+    refuse2();
   }
-  const object5 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
-  if (!object5(value) || Object.keys(value).length !== 1 || !object5(value.mcpServers))
-    refuse();
+  const object6 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
+  if (!object6(value) || Object.keys(value).length !== 1 || !object6(value.mcpServers))
+    refuse2();
   const servers = Object.entries(value.mcpServers);
   if (!servers.length || servers.length > 256)
-    refuse();
+    refuse2();
   for (const [name, server] of servers)
     if (!isCodexLocalStdioMcpServer(name, server))
-      refuse();
+      refuse2();
   return sha2562;
 }
 function isBundledCleanupHooks(root, namespace, value) {
-  const object5 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
+  const object6 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
   const exactKeys = (v, keys) => Object.keys(v).length === keys.length && keys.every((key) => Object.hasOwn(v, key));
   if (basename6(dirname12(root)) !== namespace || basename6(dirname12(dirname12(root))) !== "openai-bundled")
     return false;
   const server = namespace === "unified-computer-use" ? "cua_repl" : ["browser", "chrome", "chrome-dev", "chrome-internal", "computer-use"].includes(namespace) ? "node_repl" : undefined;
-  if (!server || !object5(value) || !exactKeys(value, ["hooks"]) || !object5(value.hooks))
+  if (!server || !object6(value) || !exactKeys(value, ["hooks"]) || !object6(value.hooks))
     return false;
   const events = Object.entries(value.hooks);
   if (!events.length || events.length > 3)
@@ -32810,10 +32863,10 @@ function isBundledCleanupHooks(root, namespace, value) {
     if (!["Interrupt", "SubagentStop", "Stop"].includes(event) || !Array.isArray(groups) || groups.length !== 1)
       return false;
     const group = groups[0];
-    if (!object5(group) || !exactKeys(group, ["hooks"]) || !Array.isArray(group.hooks) || group.hooks.length !== 1)
+    if (!object6(group) || !exactKeys(group, ["hooks"]) || !Array.isArray(group.hooks) || group.hooks.length !== 1)
       return false;
     const handler = group.hooks[0];
-    if (!object5(handler) || !exactKeys(handler, ["type", "server", "tool", "input"]) || handler.type !== "mcp_tool" || handler.server !== server || handler.tool !== "turn_ended" || !object5(handler.input) || !exactKeys(handler.input, ["hook_event_name", "session_id", "turn_id"]) || handler.input.hook_event_name !== "${hook_event_name}" || handler.input.turn_id !== "${turn_id}" || handler.input.session_id !== (event === "SubagentStop" ? "${agent_id}" : "${session_id}"))
+    if (!object6(handler) || !exactKeys(handler, ["type", "server", "tool", "input"]) || handler.type !== "mcp_tool" || handler.server !== server || handler.tool !== "turn_ended" || !object6(handler.input) || !exactKeys(handler.input, ["hook_event_name", "session_id", "turn_id"]) || handler.input.hook_event_name !== "${hook_event_name}" || handler.input.turn_id !== "${turn_id}" || handler.input.session_id !== (event === "SubagentStop" ? "${agent_id}" : "${session_id}"))
       return false;
   }
   return true;
@@ -32821,35 +32874,35 @@ function isBundledCleanupHooks(root, namespace, value) {
 function rootControls(root, read) {
   const manifestPath = join18(root, ".codex-plugin/plugin.json"), manifestFile = lstatSync12(manifestPath, { throwIfNoEntry: false });
   if (!lstatSync12(join18(root, ".codex-plugin"), { throwIfNoEntry: false })?.isDirectory() || !manifestFile?.isFile() || manifestFile.size > 1024 * 1024)
-    refuse();
+    refuse2();
   let manifest, manifestSha256;
   try {
     const text2 = read(manifestPath);
     manifestSha256 = hashNativeJsonControls(text2, "version");
     manifest = JSON.parse(text2);
   } catch {
-    refuse();
+    refuse2();
   }
   if (!manifest || typeof manifest !== "object" || Array.isArray(manifest) || !identifier2(manifest.name))
-    refuse();
+    refuse2();
   const cacheVersion = basename6(root), declaredVersion = manifest.version === undefined ? "" : typeof manifest.version === "string" ? manifest.version.trim() : null;
   if (declaredVersion === null || (declaredVersion ? declaredVersion !== cacheVersion : cacheVersion !== CODEX_DEFAULT_AGENT_PLUGIN_VERSION))
-    refuse();
+    refuse2();
   if (manifest.hooks !== undefined && !isBundledCleanupHooks(root, manifest.name, manifest.hooks) || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync12(join18(root, "hooks"), { throwIfNoEntry: false }))
-    refuse();
+    refuse2();
   const mcp = join18(root, ".mcp.json"), mcpPresent = lstatSync12(mcp, { throwIfNoEntry: false });
   if (manifest.hooks !== undefined && (manifest.mcpServers !== undefined || mcpPresent))
-    refuse();
+    refuse2();
   if (mcpPresent && (!mcpPresent.isFile() || mcpPresent.isSymbolicLink() || mcpPresent.size > 1024 * 1024 || realpathSync4(mcp) !== mcp))
-    refuse();
+    refuse2();
   if (Boolean(mcpPresent) !== (manifest.mcpServers !== undefined))
-    refuse();
+    refuse2();
   const mcpSha256 = mcpPresent ? mcpControls(mcp, read) : undefined;
   const app = join18(root, ".app.json"), present = lstatSync12(app, { throwIfNoEntry: false });
   if (present && (!present.isFile() || present.isSymbolicLink() || present.size > 1024 * 1024))
-    refuse();
+    refuse2();
   if (manifest.apps !== undefined && !present)
-    refuse();
+    refuse2();
   const appSha256 = present ? appControls(app, read) : undefined;
   return { namespace: manifest.name, manifestSha256, ...appSha256 ? { appSha256 } : {}, ...mcpSha256 ? { mcpSha256 } : {} };
 }
@@ -32965,10 +33018,10 @@ function sourceInputUnchanged(input2, cache, read) {
 }
 function reviewedCodexPluginSourceRoots(cache, inputs, read) {
   if (!Array.isArray(inputs) || inputs.length > 4096 || new Set(inputs.map((input2) => input2.pluginId)).size !== inputs.length || new Set(inputs.map((input2) => input2.sourceRoot)).size !== inputs.length || inputs.some((input2) => !sourceInputUnchanged(input2, cache, read)))
-    refuse();
+    refuse2();
   const roots = inputs.map((input2) => input2.sourceRoot);
   if (roots.some((root) => roots.some((other) => root !== other && root.startsWith(other + sep6))))
-    refuse();
+    refuse2();
   return roots;
 }
 var identifier2 = (v) => typeof v === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(v), CODEX_DEFAULT_AGENT_PLUGIN_VERSION = "1.0.0";
@@ -33223,7 +33276,7 @@ function canonical6(value, depth = 0, budget2 = { remaining: 65536 }) {
   need5(isRecord3(value));
   return ["object", Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, child2]) => [key, canonical6(child2, depth + 1, budget2)])];
 }
-function normalize2(config2, version2 = 2) {
+function normalize3(config2, version2 = 2) {
   if (isRecord3(config2.hooks)) {
     delete config2.hooks.state;
     if (!Object.keys(config2.hooks).length)
@@ -33394,7 +33447,7 @@ function settingsDigest2(text2, version2 = 2) {
   need5(isRecord3(config2));
   const mcp = version2 >= 3 ? projectRegularCodexMcp(config2, text2) : { config: config2, numericSource: text2 };
   const projected = version2 === 4 ? projectModelAvailabilityNux(mcp.config, mcp.numericSource) : mcp;
-  normalize2(projected.config, version2);
+  normalize3(projected.config, version2);
   return sha2(`hasna.skills.codex-settings.v${version2}\x00${JSON.stringify([canonical6(projected.config), numericTokens2(projected.numericSource)])}`);
 }
 function hashCodexSettingsReplacementV2(text2, budget2 = { remaining: 256 * 1024 * 1024 }) {
@@ -33545,15 +33598,15 @@ var init_agent_codex = () => {};
 // src/lib/agent-sumi.ts
 import { spawnSync as spawnSync4 } from "child_process";
 import { accessSync, constants as constants8, existsSync as existsSync8, lstatSync as lstatSync14, realpathSync as realpathSync5, statSync as statSync7 } from "fs";
-import { delimiter, isAbsolute as isAbsolute10, join as join20, resolve as resolve12 } from "path";
+import { delimiter, isAbsolute as isAbsolute11, join as join20, resolve as resolve12 } from "path";
 function recordWithKeys(value, keys) {
   return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
 }
-function absolutePath2(value) {
-  return typeof value === "string" && value.length > 0 && value.length <= 32768 && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute10(value) && resolve12(value) === value;
+function absolutePath3(value) {
+  return typeof value === "string" && value.length > 0 && value.length <= 32768 && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute11(value) && resolve12(value) === value;
 }
 function absoluteInput(value) {
-  return value.length > 0 && value.length <= 32768 && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute10(value);
+  return value.length > 0 && value.length <= 32768 && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute11(value);
 }
 function resolveSumiPathsCommand(pathValue) {
   if (!pathValue)
@@ -33578,18 +33631,18 @@ function validPathPlan(value, home, cwd) {
   if (!recordWithKeys(value.roots, SUMI_PATH_KEYS) || !recordWithKeys(value.legacyRoots, SUMI_PATH_KEYS))
     return false;
   for (const key of SUMI_PATH_KEYS) {
-    if (!absolutePath2(value.roots[key]))
+    if (!absolutePath3(value.roots[key]))
       return false;
-    if (value.legacyRoots[key] !== null && !absolutePath2(value.legacyRoots[key]))
+    if (value.legacyRoots[key] !== null && !absolutePath3(value.legacyRoots[key]))
       return false;
   }
   if (!recordWithKeys(value.configFiles, ["canonical", "legacy"]) || !recordWithKeys(value.skillRoots, ["canonical", "legacy"]))
     return false;
-  if (!absolutePath2(value.configFiles.canonical) || !absolutePath2(value.skillRoots.canonical))
+  if (!absolutePath3(value.configFiles.canonical) || !absolutePath3(value.skillRoots.canonical))
     return false;
-  if (value.configFiles.legacy !== null && !absolutePath2(value.configFiles.legacy))
+  if (value.configFiles.legacy !== null && !absolutePath3(value.configFiles.legacy))
     return false;
-  if (value.skillRoots.legacy !== null && !absolutePath2(value.skillRoots.legacy))
+  if (value.skillRoots.legacy !== null && !absolutePath3(value.skillRoots.legacy))
     return false;
   const configRoot = value.roots.config;
   const legacyConfigRoot = value.legacyRoots.config;
@@ -33609,7 +33662,7 @@ function sumiPathPlan(home, cwd = process.cwd(), env = process.env) {
     throw new SumiPathResolverError("SUMI_PATH_INPUT_REFUSED");
   const runtimePath = process.env.PATH ?? "";
   const executable = resolveSumiPathsCommand(runtimePath);
-  if (!executable || !isAbsolute10(executable))
+  if (!executable || !isAbsolute11(executable))
     throw new SumiPathResolverError("SUMI_PATH_RESOLVER_UNAVAILABLE");
   const childEnv = { PATH: runtimePath };
   for (const key of SUMI_PATH_SELECTORS)
@@ -33685,7 +33738,7 @@ var init_agent_sumi = __esm(() => {
 // src/lib/codex-hook-trust-files.ts
 import { closeSync as closeSync11, constants as constants9, fstatSync as fstatSync11, fsyncSync as fsyncSync2, lstatSync as lstatSync15, openSync as openSync11, readlinkSync as readlinkSync4, readSync as readSync6, writeFileSync as writeFileSync4 } from "fs";
 import { createHash as createHash15 } from "crypto";
-import { dirname as dirname13, isAbsolute as isAbsolute11, resolve as resolve13 } from "path";
+import { dirname as dirname13, isAbsolute as isAbsolute12, resolve as resolve13 } from "path";
 function need6(value, code) {
   if (!value)
     throw new Error(`CODEX_HOOK_TRUST_${code}`);
@@ -33785,6 +33838,96 @@ var init_runtime_launcher = __esm(() => {
   PINNED_LAUNCHER_MAX_BYTES = 16 * 1024;
 });
 
+// src/lib/retained-review-artifacts.ts
+import { createHash as createHash16 } from "crypto";
+import { constants as constants10, closeSync as closeSync12, fstatSync as fstatSync12, fsyncSync as fsyncSync3, lstatSync as lstatSync16, mkdirSync as mkdirSync5, openSync as openSync12, readSync as readSync7, writeSync as writeSync2 } from "fs";
+import { dirname as dirname14, isAbsolute as isAbsolute13, join as join21, resolve as resolve14, sep as sep7 } from "path";
+function keys(value, names) {
+  return Boolean(value && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length === names.length && names.every((name) => Object.hasOwn(value, name)));
+}
+function safe3(path) {
+  need7(typeof path === "string" && path.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute13(path) && resolve14(path) === path && !/[\x00-\x1f\x7f]/.test(path));
+  for (let cursor = path;; cursor = dirname14(cursor)) {
+    const stat = lstatSync16(cursor, { throwIfNoEntry: false });
+    need7(!stat?.isSymbolicLink());
+    if (cursor !== path && stat)
+      need7(stat.isDirectory());
+    if (dirname14(cursor) === cursor)
+      break;
+  }
+}
+function readExact(path) {
+  safe3(path);
+  const before = lstatSync16(path, { throwIfNoEntry: false });
+  need7(before?.isFile() && before.nlink === 1 && before.size <= AGENT_POLICY_LIMITS.discoveryRawSourceBytes && (before.mode & 63) === 0 && (process.getuid === undefined || before.uid === process.getuid()));
+  const fd = openSync12(path, constants10.O_RDONLY | constants10.O_NOFOLLOW | constants10.O_NONBLOCK);
+  try {
+    const opened = fstatSync12(fd);
+    need7(opened.dev === before.dev && opened.ino === before.ino && opened.size === before.size && opened.mode === before.mode && opened.uid === before.uid && opened.nlink === 1);
+    const bytes = Buffer.alloc(opened.size);
+    let offset = 0;
+    while (offset < bytes.length) {
+      const count = readSync7(fd, bytes, offset, bytes.length - offset, null);
+      need7(count > 0);
+      offset += count;
+    }
+    need7(readSync7(fd, Buffer.alloc(1), 0, 1, null) === 0);
+    const after = fstatSync12(fd), current = lstatSync16(path, { throwIfNoEntry: false });
+    safe3(path);
+    need7(current && opened.dev === current.dev && opened.ino === current.ino && opened.mode === current.mode && opened.uid === current.uid && opened.size === current.size && opened.mtimeMs === current.mtimeMs && opened.ctimeMs === current.ctimeMs && current.nlink === 1 && opened.mode === after.mode && opened.uid === after.uid && after.nlink === 1 && opened.size === after.size && opened.mtimeMs === after.mtimeMs && opened.ctimeMs === after.ctimeMs);
+    const text2 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes);
+    need7(Buffer.from(text2).equals(bytes));
+    return text2;
+  } finally {
+    closeSync12(fd);
+  }
+}
+function catalogDigest(text2) {
+  let catalog;
+  try {
+    catalog = JSON.parse(text2);
+  } catch {
+    return refuse3();
+  }
+  need7(catalog && typeof catalog === "object" && !Array.isArray(catalog) && Object.keys(catalog).every((key) => ["version", "cwd", "skills", "plugins"].includes(key)) && typeof catalog.version === "string" && supportsCodexNativeCapability(catalog.version, "installed-plugin-review"));
+  const skills = projectCodexNativeSkillCatalog({ data: [{ cwd: catalog.cwd, errors: [], skills: catalog.skills }] }, catalog.cwd);
+  const plugins = catalog.plugins === undefined ? undefined : projectCodexInstalledPluginEntries(catalog.plugins);
+  return sha3(JSON.stringify({ version: catalog.version, cwd: catalog.cwd, skills, ...plugins === undefined ? {} : { plugins } }));
+}
+function retainedArtifactPath(metadata) {
+  return join21(metadata.storeRoot, "agent-discovery", "artifacts", metadata.sha256, "catalog.json");
+}
+function validRetainedArtifact(value) {
+  return keys(value, ["version", "kind", "storeRoot", "originalPath", "sha256", "catalogSha256"]) && value.version === 1 && value.kind === "codex-native-catalog" && hex3(value.sha256) && hex3(value.catalogSha256) && [value.storeRoot, value.originalPath].every((path) => typeof path === "string" && isAbsolute13(path) && resolve14(path) === path && path.length <= AGENT_POLICY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(path));
+}
+function privateStore(storeRoot) {
+  safe3(storeRoot);
+  const stat = lstatSync16(storeRoot, { throwIfNoEntry: false });
+  need7(!stat || stat.isDirectory() && (stat.mode & 18) === 0 && (process.getuid === undefined || stat.uid === process.getuid()));
+}
+function verifyRetainedReviewArtifact(source, storeRoot) {
+  const artifact = source.reviewArtifact;
+  need7(validRetainedArtifact(artifact) && source.hashMode === "bytes" && source.sha256 === artifact.sha256 && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && source.path === retainedArtifactPath(artifact) && (storeRoot === undefined || artifact.storeRoot === resolve14(storeRoot)));
+  privateStore(artifact.storeRoot);
+  const text2 = readExact(source.path);
+  need7(sha3(text2) === artifact.sha256 && catalogDigest(text2) === artifact.catalogSha256);
+  for (let parent = dirname14(source.path);parent !== artifact.storeRoot; parent = dirname14(parent)) {
+    const stat = lstatSync16(parent);
+    need7(stat.isDirectory() && (stat.mode & 63) === 0 && (process.getuid === undefined || stat.uid === process.getuid()));
+  }
+}
+var sha3 = (bytes) => createHash16("sha256").update(bytes).digest("hex"), hex3 = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value), refuse3 = () => {
+  throw new Error("REVIEW_ARTIFACT_INVALID");
+}, need7 = (condition) => {
+  if (!condition)
+    refuse3();
+};
+var init_retained_review_artifacts = __esm(() => {
+  init_agent_policy_limits();
+  init_codex_native_skill_catalog();
+  init_codex_native_compatibility();
+});
+
 // src/lib/agent-integration.ts
 var init_agent_integration = __esm(() => {
   init_sumi_settings_witness();
@@ -33806,6 +33949,7 @@ var init_agent_integration = __esm(() => {
   init_claude_settings_witness();
   init_codex_hook_trust_files();
   init_runtime_launcher();
+  init_retained_review_artifacts();
 });
 
 // src/lib/home-migration.ts
@@ -33842,13 +33986,13 @@ var init_skill_aliases = __esm(() => {
 });
 
 // src/lib/project-state.ts
-import { existsSync as existsSync9, mkdirSync as mkdirSync5, readFileSync as readFileSync13, writeFileSync as writeFileSync5 } from "fs";
-import { join as join21 } from "path";
+import { existsSync as existsSync9, mkdirSync as mkdirSync6, readFileSync as readFileSync13, writeFileSync as writeFileSync5 } from "fs";
+import { join as join22 } from "path";
 function getProjectStateDir(targetDir = process.cwd()) {
-  return join21(targetDir, SKILLS_PROJECT_DIR);
+  return join22(targetDir, SKILLS_PROJECT_DIR);
 }
 function getProjectConfigPath(targetDir = process.cwd()) {
-  return join21(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
+  return join22(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
 }
 function loadProjectConfig(targetDir = process.cwd()) {
   const path = getProjectConfigPath(targetDir);
@@ -33876,7 +34020,7 @@ function ensureProjectConfig(targetDir = process.cwd()) {
 }
 function saveProjectConfig(config2, targetDir = process.cwd()) {
   const dir = getProjectStateDir(targetDir);
-  mkdirSync5(dir, { recursive: true });
+  mkdirSync6(dir, { recursive: true });
   const normalized = normalizeProjectConfig({ ...config2, updatedAt: new Date().toISOString() });
   writeFileSync5(getProjectConfigPath(targetDir), JSON.stringify(normalized, null, 2) + `
 `);
@@ -33964,7 +34108,7 @@ var init_project_state = __esm(() => {
 
 // src/lib/installer.ts
 import { existsSync as existsSync10, readFileSync as readFileSync14, rmSync } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 import { homedir as homedir2 } from "os";
 function getSkillPath(name) {
   const skillName = normalizeSkillName(getCanonicalSkillName(name));
@@ -33974,7 +34118,7 @@ function getSkillPath(name) {
   const extensionPath = findExtensionSkillPath(skillName);
   if (extensionPath)
     return extensionPath;
-  return join22(getPortableSkillsRoot(), skillName);
+  return join23(getPortableSkillsRoot(), skillName);
 }
 function getCanonicalSkillName(name) {
   return getSkill(name)?.name ?? resolveSkillAlias(normalizeSkillSlug(name));
@@ -34028,11 +34172,11 @@ function getAgentSkillsDir(agent, scope = "global", projectDir) {
   const base = projectDir || process.cwd();
   switch (agent) {
     case "pi":
-      return scope === "project" ? join22(base, ".pi", "skills") : join22(homedir2(), ".pi", "agent", "skills");
+      return scope === "project" ? join23(base, ".pi", "skills") : join23(homedir2(), ".pi", "agent", "skills");
     case "opencode":
-      return scope === "project" ? join22(base, ".opencode", "skills") : join22(homedir2(), ".config", "opencode", "skills");
+      return scope === "project" ? join23(base, ".opencode", "skills") : join23(homedir2(), ".config", "opencode", "skills");
     default:
-      return scope === "project" ? join22(base, `.${agent}`, "skills") : join22(homedir2(), `.${agent}`, "skills");
+      return scope === "project" ? join23(base, `.${agent}`, "skills") : join23(homedir2(), `.${agent}`, "skills");
   }
 }
 function warnMissingDependencies(name, targetDir) {
@@ -34047,7 +34191,7 @@ function warnMissingDependencies(name, targetDir) {
   }
 }
 function readBundledSkillVersion(name) {
-  const pkgPath = join22(getSkillPath(name), "package.json");
+  const pkgPath = join23(getSkillPath(name), "package.json");
   if (!existsSync10(pkgPath))
     return "unknown";
   try {
@@ -34117,11 +34261,11 @@ var init_skill_doc_file = __esm(() => {
 
 // src/lib/skillinfo.ts
 import { existsSync as existsSync11, readFileSync as readFileSync15 } from "fs";
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 function isInstructionSkillDir(skillPath, meta3) {
   if (meta3?.kind === "instruction")
     return true;
-  const skillMdPath = join23(skillPath, "SKILL.md");
+  const skillMdPath = join24(skillPath, "SKILL.md");
   if (!existsSync11(skillMdPath))
     return false;
   try {
@@ -34135,9 +34279,9 @@ function getSkillDocs(name) {
   if (!existsSync11(skillPath))
     return null;
   return {
-    skillMd: readIfExists(join23(skillPath, "SKILL.md")),
-    readme: readIfExists(join23(skillPath, "README.md")),
-    claudeMd: readIfExists(join23(skillPath, "CLAUDE.md"))
+    skillMd: readIfExists(join24(skillPath, "SKILL.md")),
+    readme: readIfExists(join24(skillPath, "README.md")),
+    claudeMd: readIfExists(join24(skillPath, "CLAUDE.md"))
   };
 }
 function getSkillBestDoc(name, file2) {
@@ -34153,14 +34297,14 @@ function getSkillRequirements(name) {
     return null;
   const texts = [];
   for (const file2 of ["SKILL.md", "README.md", "CLAUDE.md", ".env.example", ".env.local.example"]) {
-    const content = readIfExists(join23(skillPath, file2));
+    const content = readIfExists(join24(skillPath, file2));
     if (content)
       texts.push(content);
   }
   const meta3 = getSkill(name);
   let dependencies = {};
   try {
-    dependencies = JSON.parse(readFileSync15(join23(skillPath, "package.json"), "utf8")).dependencies || {};
+    dependencies = JSON.parse(readFileSync15(join24(skillPath, "package.json"), "utf8")).dependencies || {};
   } catch {}
   return getSkillRequirementsFromContent(name, texts, dependencies, meta3);
 }
@@ -34222,7 +34366,7 @@ async function runSkill(name, args, options = {}) {
       error: `Skill '${name}' is an instruction skill (kind: instruction) and is not runnable. Instruction skills are consumed by coding agents via SKILL.md, not executed with 'skills run'.`
     };
   }
-  const pkgPath = join23(skillPath, "package.json");
+  const pkgPath = join24(skillPath, "package.json");
   if (!existsSync11(pkgPath)) {
     return { exitCode: 1, error: `No package.json in skill '${name}'` };
   }
@@ -34242,12 +34386,12 @@ async function runSkill(name, args, options = {}) {
   } catch {
     return { exitCode: 1, error: `Failed to parse package.json for skill '${name}'` };
   }
-  const entryPath = join23(skillPath, entryPoint2);
+  const entryPath = join24(skillPath, entryPoint2);
   if (!existsSync11(entryPath)) {
     return { exitCode: 1, error: `Entry point '${entryPoint2}' not found in skill '${name}'` };
   }
   const env = { ...process.env, ...options.env };
-  if (!existsSync11(join23(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
+  if (!existsSync11(join24(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
     const failure = await prepareSkillDependencies(skillPath, env, options.preparationTimeoutMs);
     if (failure)
       return failure;
@@ -34273,7 +34417,7 @@ async function runSkill(name, args, options = {}) {
 function detectProjectSkills(cwd = process.cwd()) {
   let pkg;
   try {
-    pkg = JSON.parse(readFileSync15(join23(cwd, "package.json"), "utf8"));
+    pkg = JSON.parse(readFileSync15(join24(cwd, "package.json"), "utf8"));
   } catch {
     return { detected: [], recommended: [] };
   }
@@ -34478,7 +34622,7 @@ var init_selection_resolver = __esm(() => {
 });
 
 // src/lib/plugin-projection.ts
-import { createHash as createHash16 } from "crypto";
+import { createHash as createHash17 } from "crypto";
 function pluginRefusal(message) {
   throw new SkillSelectionError("PLUGIN_ADMISSION_REFUSED", message);
 }
@@ -34489,8 +34633,8 @@ function pluginNeed(value, message) {
 function pluginObject(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
-function pluginKeys(value, keys) {
-  pluginNeed(pluginObject(value) && Object.keys(value).every((key) => keys.includes(key)), "Unsupported plugin contract fields");
+function pluginKeys(value, keys2) {
+  pluginNeed(pluginObject(value) && Object.keys(value).every((key) => keys2.includes(key)), "Unsupported plugin contract fields");
 }
 function pluginText(value, limit = 4096) {
   pluginNeed(typeof value === "string" && value.length > 0 && value.length <= limit && !/[\x00-\x1f\x7f]/.test(value), "Invalid plugin contract text");
@@ -34556,18 +34700,18 @@ function pluginFileWitnesses(entries) {
     return { path: item.path, mode: item.mode, size: item.bytes.byteLength, sha256: pluginHash(item.bytes) };
   });
 }
-var PLUGIN_PROJECTION_LIMITS, pluginHash = (bytes) => createHash16("sha256").update(bytes).digest("hex");
+var PLUGIN_PROJECTION_LIMITS, pluginHash = (bytes) => createHash17("sha256").update(bytes).digest("hex");
 var init_plugin_projection = __esm(() => {
   init_selection_cache();
   PLUGIN_PROJECTION_LIMITS = Object.freeze({ files: 1024, bytes: 64 * 1024 * 1024, fileBytes: 16 * 1024 * 1024, metadataBytes: 512 * 1024, registrations: 64, history: 128 });
 });
 
 // src/lib/plugin-projection-store.ts
-import { constants as constants10, closeSync as closeSync12, fchmodSync, fstatSync as fstatSync12, fsyncSync as fsyncSync3, linkSync as linkSync2, lstatSync as lstatSync16, mkdirSync as mkdirSync6, openSync as openSync12, opendirSync as opendirSync2, readSync as readSync7, renameSync as renameSync2, rmdirSync as rmdirSync2, rmSync as rmSync2, unlinkSync as unlinkSync3, writeSync as writeSync2 } from "fs";
-import { dirname as dirname14, isAbsolute as isAbsolute12, join as join24, parse as parse10, resolve as resolve14 } from "path";
+import { constants as constants11, closeSync as closeSync13, fchmodSync, fstatSync as fstatSync13, fsyncSync as fsyncSync4, linkSync as linkSync2, lstatSync as lstatSync17, mkdirSync as mkdirSync7, openSync as openSync13, opendirSync as opendirSync2, readSync as readSync8, renameSync as renameSync2, rmdirSync as rmdirSync2, rmSync as rmSync2, unlinkSync as unlinkSync3, writeSync as writeSync3 } from "fs";
+import { dirname as dirname15, isAbsolute as isAbsolute14, join as join25, parse as parse10, resolve as resolve15 } from "path";
 function stat(path) {
   try {
-    return lstatSync16(path, { bigint: true });
+    return lstatSync17(path, { bigint: true });
   } catch (error61) {
     if (missing(error61))
       return null;
@@ -34575,7 +34719,7 @@ function stat(path) {
   }
 }
 function canonical7(path) {
-  pluginNeed(typeof path === "string" && path.length <= 8192 && isAbsolute12(path) && resolve14(path) === path && !/[\x00-\x1f\x7f]/.test(path), "Plugin storage paths must be canonical absolute paths");
+  pluginNeed(typeof path === "string" && path.length <= 8192 && isAbsolute14(path) && resolve15(path) === path && !/[\x00-\x1f\x7f]/.test(path), "Plugin storage paths must be canonical absolute paths");
 }
 function owner(stats, system = false) {
   const current = uid();
@@ -34586,15 +34730,15 @@ function same3(left, right, identityOnly = false) {
 }
 function ancestors(path, create = false) {
   canonical7(path);
-  const result = [], parent = dirname14(path), filesystemRoot = parse10(parent).root;
+  const result = [], parent = dirname15(path), filesystemRoot = parse10(parent).root;
   let current = filesystemRoot;
   for (const segment of ["", ...parent.slice(filesystemRoot.length).split("/").filter(Boolean)]) {
     if (segment)
-      current = join24(current, segment);
+      current = join25(current, segment);
     let currentStat = stat(current);
     if (!currentStat && create) {
       try {
-        mkdirSync6(current, { mode: 448 });
+        mkdirSync7(current, { mode: 448 });
       } catch (error61) {
         if (!(error61 && typeof error61 === "object" && ("code" in error61) && error61.code === "EEXIST"))
           pluginRefusal("Cannot create private plugin storage directory");
@@ -34636,19 +34780,19 @@ function readBytes(path, maximum, kind) {
   fileShape(before, maximum, kind);
   let fd;
   try {
-    fd = openSync12(path, READ_FLAGS);
-    const opened = fstatSync12(fd, { bigint: true });
+    fd = openSync13(path, READ_FLAGS);
+    const opened = fstatSync13(fd, { bigint: true });
     same3(before, opened);
     fileShape(opened, maximum, kind);
     const bytes = new Uint8Array(Number(opened.size));
     let offset = 0;
     while (offset < bytes.byteLength) {
-      const count = readSync7(fd, bytes, offset, bytes.byteLength - offset, null);
+      const count = readSync8(fd, bytes, offset, bytes.byteLength - offset, null);
       pluginNeed(count > 0, "Plugin file changed while being read");
       offset += count;
     }
-    pluginNeed(readSync7(fd, new Uint8Array(1), 0, 1, null) === 0, "Plugin file grew while being read");
-    same3(opened, fstatSync12(fd, { bigint: true }));
+    pluginNeed(readSync8(fd, new Uint8Array(1), 0, 1, null) === 0, "Plugin file grew while being read");
+    same3(opened, fstatSync13(fd, { bigint: true }));
     same3(opened, stat(path));
     verifyAncestors(chain);
     return bytes;
@@ -34658,7 +34802,7 @@ function readBytes(path, maximum, kind) {
     return pluginRefusal("Cannot safely read plugin file");
   } finally {
     if (fd !== undefined)
-      closeSync12(fd);
+      closeSync13(fd);
   }
 }
 function exactPaths(entries) {
@@ -34698,7 +34842,7 @@ function snapshotPluginTree(root, options = {}) {
       pluginNeed(++visited <= PLUGIN_PROJECTION_LIMITS.files * 50, "Plugin tree membership exceeds its limit");
       const path = relative6 ? `${relative6}/${name}` : name;
       pluginNeed(new TextEncoder().encode(path).byteLength <= 100 && !/[\\:\x00-\x1f\x7f]/u.test(path), "Plugin entry path exceeds its limit or is unsafe");
-      const absolute = join24(directory, name), entryStat = stat(absolute);
+      const absolute = join25(directory, name), entryStat = stat(absolute);
       pluginNeed(entryStat, "Plugin tree member disappeared");
       if (relative6 === "" && name === ".orphaned_at" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
         const bytes2 = readBytes(absolute, 32, "native-pin");
@@ -34715,7 +34859,7 @@ function snapshotPluginTree(root, options = {}) {
         directories.push({ path: absolute, stat: entryStat, names: pins });
         for (const pin of pins) {
           pluginNeed(/^[1-9][0-9]{0,9}$/.test(pin) && Number(pin) <= 2147483647, "Unrecognized native plugin pin name");
-          const pinPath = join24(absolute, pin), pinStat = stat(pinPath);
+          const pinPath = join25(absolute, pin), pinStat = stat(pinPath);
           pluginNeed(pinStat, "Native plugin pin disappeared");
           const bytes2 = readBytes(pinPath, 4096, "native-pin");
           let value;
@@ -34781,8 +34925,8 @@ function readPluginJson(path) {
 var READ_FLAGS, WRITE_FLAGS, uid = () => typeof process.getuid === "function" ? BigInt(process.getuid()) : undefined, missing = (error61) => Boolean(error61 && typeof error61 === "object" && "code" in error61 && error61.code === "ENOENT");
 var init_plugin_projection_store = __esm(() => {
   init_plugin_projection();
-  READ_FLAGS = constants10.O_RDONLY | constants10.O_NOFOLLOW | constants10.O_NONBLOCK;
-  WRITE_FLAGS = constants10.O_WRONLY | constants10.O_CREAT | constants10.O_EXCL | constants10.O_NOFOLLOW | constants10.O_NONBLOCK;
+  READ_FLAGS = constants11.O_RDONLY | constants11.O_NOFOLLOW | constants11.O_NONBLOCK;
+  WRITE_FLAGS = constants11.O_WRONLY | constants11.O_CREAT | constants11.O_EXCL | constants11.O_NOFOLLOW | constants11.O_NONBLOCK;
 });
 
 // src/lib/selected-manifest.ts
@@ -34812,7 +34956,7 @@ var init_selected_manifest = __esm(() => {
 });
 
 // src/lib/plugin-admission.ts
-import { isAbsolute as isAbsolute13, join as join25, resolve as resolve15 } from "path";
+import { isAbsolute as isAbsolute15, join as join26, resolve as resolve16 } from "path";
 function validatePluginTarget(value) {
   pluginKeys(value, ["schemaVersion", "pluginId", "registrations", "native", "resolver"]);
   pluginNeed(value.schemaVersion === 1, "Invalid plugin admission target");
@@ -34822,7 +34966,7 @@ function validatePluginTarget(value) {
   for (const registration of value.registrations) {
     pluginKeys(registration, ["scope", "projectPath"]);
     pluginNeed(registration.scope === "user" || registration.scope === "project", "Unsupported plugin registration scope");
-    pluginNeed(registration.scope === "user" ? registration.projectPath === null : typeof registration.projectPath === "string" && isAbsolute13(registration.projectPath) && resolve15(registration.projectPath) === registration.projectPath, "Plugin scope requires its exact project path");
+    pluginNeed(registration.scope === "user" ? registration.projectPath === null : typeof registration.projectPath === "string" && isAbsolute15(registration.projectPath) && resolve16(registration.projectPath) === registration.projectPath, "Plugin scope requires its exact project path");
     const key = JSON.stringify([registration.scope, registration.projectPath]);
     pluginNeed(!scopes.has(key), "Duplicate plugin registration scope");
     scopes.add(key);
@@ -34830,7 +34974,7 @@ function validatePluginTarget(value) {
   for (const key of ["native", "resolver"]) {
     pluginKeys(value[key], key === "native" ? ["version", "executable", "digest"] : ["executable", "digest"]);
     pluginText(value[key].executable);
-    pluginNeed(isAbsolute13(value[key].executable) && resolve15(value[key].executable) === value[key].executable, "Plugin executable must have a canonical absolute path");
+    pluginNeed(isAbsolute15(value[key].executable) && resolve16(value[key].executable) === value[key].executable, "Plugin executable must have a canonical absolute path");
     pluginDigest(value[key].digest);
   }
   pluginNeed(["2.1.274", "2.1.276"].includes(value.native.version), "Plugin admission requires a certified Claude command-source runtime (2.1.274 or 2.1.276)");
@@ -34973,12 +35117,12 @@ function pluginResolverCommand(binding) {
 }
 function pluginBindingPath(storeRoot, id) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id), "Invalid plugin binding identifier");
-  return join25(storeRoot, "bindings", `${id}.json`);
+  return join26(storeRoot, "bindings", `${id}.json`);
 }
 function pluginReceiptPath(storeRoot, id, digest) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id), "Invalid plugin binding identifier");
   pluginDigest(digest);
-  return join25(storeRoot, "receipts", id, `${digest.slice(7)}.json`);
+  return join26(storeRoot, "receipts", id, `${digest.slice(7)}.json`);
 }
 function readPluginBinding(storeRoot, id) {
   const value = readPluginJson(pluginBindingPath(storeRoot, id));
@@ -34998,7 +35142,7 @@ function readPluginAdmissionReceipt(storeRoot, id, digest) {
   pluginNeed(receipt.plan.bindingId === id && receipt.plan.planDigest === digest, "Plugin receipt identity differs from its filename");
   const binding = readPluginBinding(storeRoot, id);
   pluginNeed(canonicalJson(binding) === canonicalJson(receipt.plan.binding) && receipt.plan.sourceCommand === pluginResolverCommand(binding), "Plugin receipt binding changed");
-  pluginNeed(receipt.materializedPath === join25(storeRoot, "objects", id, digest.slice(7)), "Plugin receipt points outside its immutable materialization");
+  pluginNeed(receipt.materializedPath === join26(storeRoot, "objects", id, digest.slice(7)), "Plugin receipt points outside its immutable materialization");
   pluginText(receipt.admittedAt, 64);
   pluginNeed(Number.isFinite(Date.parse(receipt.admittedAt)), "Invalid plugin admission time");
   return receipt;
@@ -35015,8 +35159,8 @@ var init_plugin_admission = __esm(() => {
 });
 
 // src/lib/plugin-discovery.ts
-import { closeSync as closeSync13, constants as constants11, fstatSync as fstatSync13, lstatSync as lstatSync17, openSync as openSync13, opendirSync as opendirSync3, readSync as readSync8 } from "fs";
-import { basename as basename7, dirname as dirname15, isAbsolute as isAbsolute14, join as join26, resolve as resolve16 } from "path";
+import { closeSync as closeSync14, constants as constants12, fstatSync as fstatSync14, lstatSync as lstatSync18, openSync as openSync14, opendirSync as opendirSync3, readSync as readSync9 } from "fs";
+import { basename as basename7, dirname as dirname16, isAbsolute as isAbsolute16, join as join27, resolve as resolve17 } from "path";
 function validateManagedPluginWitnesses(value) {
   pluginNeed(Array.isArray(value) && value.length > 0 && value.length <= PLUGIN_PROJECTION_LIMITS.registrations, "Invalid managed plugin witness collection");
   const seen = new Set;
@@ -35025,36 +35169,36 @@ function validateManagedPluginWitnesses(value) {
     pluginNeed(typeof item.bindingId === "string" && /^[a-f0-9]{64}$/.test(item.bindingId) && !seen.has(item.bindingId), "Invalid or duplicate managed plugin witness");
     seen.add(item.bindingId);
     pluginText(item.storeRoot);
-    pluginNeed(isAbsolute14(item.storeRoot) && resolve16(item.storeRoot) === item.storeRoot, "Invalid plugin receipt store path");
+    pluginNeed(isAbsolute16(item.storeRoot) && resolve17(item.storeRoot) === item.storeRoot, "Invalid plugin receipt store path");
   }
 }
-function safe3(path) {
+function safe4(path) {
   pluginText(path);
-  pluginNeed(isAbsolute14(path) && resolve16(path) === path, "Invalid plugin registry path");
-  for (let at = path;; at = dirname15(at)) {
-    pluginNeed(!lstatSync17(at, { throwIfNoEntry: false })?.isSymbolicLink(), "Plugin registry path traverses a symlink");
-    if (at === dirname15(at))
+  pluginNeed(isAbsolute16(path) && resolve17(path) === path, "Invalid plugin registry path");
+  for (let at = path;; at = dirname16(at)) {
+    pluginNeed(!lstatSync18(at, { throwIfNoEntry: false })?.isSymbolicLink(), "Plugin registry path traverses a symlink");
+    if (at === dirname16(at))
       break;
   }
 }
 function readRegistry(path) {
-  safe3(path);
-  const initial = lstatSync17(path);
+  safe4(path);
+  const initial = lstatSync18(path);
   pluginNeed(initial.isFile() && initial.size <= 1024 * 1024, "Plugin registry is not a bounded regular file");
-  const fd = openSync13(path, constants11.O_RDONLY | constants11.O_NOFOLLOW | constants11.O_NONBLOCK);
+  const fd = openSync14(path, constants12.O_RDONLY | constants12.O_NOFOLLOW | constants12.O_NONBLOCK);
   try {
-    const opened = fstatSync13(fd);
+    const opened = fstatSync14(fd);
     pluginNeed(opened.isFile() && opened.ino === initial.ino && opened.dev === initial.dev, "Plugin registry changed during open");
     const bytes = Buffer.alloc(1024 * 1024 + 1);
     let length = 0;
     while (length < bytes.length) {
-      const count = readSync8(fd, bytes, length, bytes.length - length, null);
+      const count = readSync9(fd, bytes, length, bytes.length - length, null);
       if (!count)
         break;
       length += count;
     }
-    const after = fstatSync13(fd), current = lstatSync17(path);
-    safe3(path);
+    const after = fstatSync14(fd), current = lstatSync18(path);
+    safe4(path);
     pluginNeed(length <= 1024 * 1024 && length === opened.size && after.size === opened.size && after.mtimeMs === opened.mtimeMs && after.ctimeMs === opened.ctimeMs && current.dev === opened.dev && current.ino === opened.ino && current.mtimeMs === opened.mtimeMs && current.ctimeMs === opened.ctimeMs, "Plugin registry changed during read");
     let value;
     try {
@@ -35065,7 +35209,7 @@ function readRegistry(path) {
     pluginNeed(pluginObject(value) && value.version === 2 && pluginObject(value.plugins), "Unsupported native plugin registry schema");
     return { value, rawDigest: pluginHash(bytes.subarray(0, length)) };
   } finally {
-    closeSync13(fd);
+    closeSync14(fd);
   }
 }
 function nativeVersionMatches(version2, receipt) {
@@ -35083,7 +35227,7 @@ function hashManagedPluginRegistry(path, managed) {
     seen.add(target.pluginId);
     const rows = plugins[target.pluginId];
     pluginNeed(Array.isArray(rows) && rows.length === target.registrations.length, "Managed plugin registration membership changed");
-    const [name, market] = target.pluginId.split("@"), cacheRoot = join26(dirname15(path), "cache", market, name);
+    const [name, market] = target.pluginId.split("@"), cacheRoot = join27(dirname16(path), "cache", market, name);
     const scopes = new Set, approvals = new Map, currentFiles = new Map;
     plugins[target.pluginId] = rows.map((row) => {
       pluginNeed(pluginObject(row), "Invalid managed plugin registration");
@@ -35096,7 +35240,7 @@ function hashManagedPluginRegistry(path, managed) {
       pluginText(row.sourceProducerPath);
       pluginText(row.lastUpdated, 64);
       pluginNeed(Number.isFinite(Date.parse(row.lastUpdated)), "Invalid managed plugin update timestamp");
-      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join26(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
+      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join27(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
         const digest = `sha256:${basename7(producer)}`;
@@ -35125,8 +35269,8 @@ function hashManagedPluginRegistry(path, managed) {
       }
       return Object.fromEntries(Object.entries(row).filter(([key]) => !["version", "installPath", "sourceProducerPath", "previousProducerPaths", "lastUpdated"].includes(key)));
     });
-    safe3(cacheRoot);
-    const before = lstatSync17(cacheRoot);
+    safe4(cacheRoot);
+    const before = lstatSync18(cacheRoot);
     pluginNeed(before.isDirectory(), "Invalid managed plugin cache root");
     const directory = opendirSync3(cacheRoot), names = [];
     try {
@@ -35139,18 +35283,18 @@ function hashManagedPluginRegistry(path, managed) {
       directory.closeSync();
     }
     for (const version2 of names.sort()) {
-      const files = pluginFileWitnesses(snapshotPluginTree(join26(cacheRoot, version2), { nativeRuntime: `claude-${target.native.version}` }));
+      const files = pluginFileWitnesses(snapshotPluginTree(join27(cacheRoot, version2), { nativeRuntime: `claude-${target.native.version}` }));
       verifiedBytes += files.reduce((total, file2) => total + file2.size, 0);
       pluginNeed(verifiedBytes <= 256 * 1024 * 1024, "Managed plugin verification exceeds its aggregate byte budget");
       const serialized = JSON.stringify(files);
-      const expected = currentFiles.get(join26(cacheRoot, version2));
+      const expected = currentFiles.get(join27(cacheRoot, version2));
       pluginNeed(expected === undefined || serialized === expected, "Current native cache differs from its exact registered producer receipt");
       pluginNeed([...approvals.values()].some((receipt) => nativeVersionMatches(version2, receipt) && JSON.stringify(receipt.plan.files) === serialized), "A retained native plugin cache version differs from every approved projection");
     }
     for (const row of rows)
       pluginNeed(names.includes(row.version), "Managed native plugin installation is missing");
-    const after = lstatSync17(cacheRoot);
-    safe3(cacheRoot);
+    const after = lstatSync18(cacheRoot);
+    safe4(cacheRoot);
     pluginNeed(before.dev === after.dev && before.ino === after.ino && before.mtimeMs === after.mtimeMs && before.ctimeMs === after.ctimeMs, "Managed cache version membership changed during verification");
   }
   pluginNeed(readRegistry(path).rawDigest === snapshot2.rawDigest, "Native plugin registry changed during content verification");
@@ -35163,50 +35307,50 @@ var init_plugin_discovery = __esm(() => {
 });
 
 // src/lib/claude-marketplace-registry.ts
-import { createHash as createHash17 } from "crypto";
-import { closeSync as closeSync14, constants as constants12, fstatSync as fstatSync14, lstatSync as lstatSync18, openSync as openSync14, readSync as readSync9 } from "fs";
-import { basename as basename8, dirname as dirname16, isAbsolute as isAbsolute15, resolve as resolve17 } from "path";
-function need7(value, reason2) {
+import { createHash as createHash18 } from "crypto";
+import { closeSync as closeSync15, constants as constants13, fstatSync as fstatSync15, lstatSync as lstatSync19, openSync as openSync15, readSync as readSync10 } from "fs";
+import { basename as basename8, dirname as dirname17, isAbsolute as isAbsolute17, resolve as resolve18 } from "path";
+function need8(value, reason2) {
   if (!value)
     throw new Error(`Claude marketplace registry ${reason2}`);
 }
-function absolutePath3(value) {
-  need7(typeof value === "string" && value.length > 0 && value.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute15(value) && resolve17(value) === value, "requires a normalized absolute path");
+function absolutePath4(value) {
+  need8(typeof value === "string" && value.length > 0 && value.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute17(value) && resolve18(value) === value, "requires a normalized absolute path");
 }
 function parents2(path) {
   const result = [];
-  for (let at = dirname16(path);; at = dirname16(at)) {
-    const stat2 = lstatSync18(at, { bigint: true });
-    need7(stat2.isDirectory() && !stat2.isSymbolicLink(), "path traverses a symlink or non-directory");
+  for (let at = dirname17(path);; at = dirname17(at)) {
+    const stat2 = lstatSync19(at, { bigint: true });
+    need8(stat2.isDirectory() && !stat2.isSymbolicLink(), "path traverses a symlink or non-directory");
     result.push([at, stat2]);
-    if (at === dirname16(at))
+    if (at === dirname17(at))
       return result;
   }
 }
 function readRegistry2(path, budget2) {
-  absolutePath3(path);
-  need7(basename8(path) === "known_marketplaces.json", "requires known_marketplaces.json");
-  need7(Number.isSafeInteger(budget2.remaining) && budget2.remaining >= 0, "has an invalid byte budget");
-  const ancestors2 = parents2(path), initial = lstatSync18(path, { bigint: true });
-  need7(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
-  need7(initial.size <= BigInt(budget2.remaining), "exceeds its aggregate byte limit");
-  const fd = openSync14(path, constants12.O_RDONLY | constants12.O_NOFOLLOW | constants12.O_NONBLOCK);
+  absolutePath4(path);
+  need8(basename8(path) === "known_marketplaces.json", "requires known_marketplaces.json");
+  need8(Number.isSafeInteger(budget2.remaining) && budget2.remaining >= 0, "has an invalid byte budget");
+  const ancestors2 = parents2(path), initial = lstatSync19(path, { bigint: true });
+  need8(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
+  need8(initial.size <= BigInt(budget2.remaining), "exceeds its aggregate byte limit");
+  const fd = openSync15(path, constants13.O_RDONLY | constants13.O_NOFOLLOW | constants13.O_NONBLOCK);
   try {
-    const opened = fstatSync14(fd, { bigint: true });
-    need7(opened.isFile() && sameFile2(initial, opened), "changed during open");
+    const opened = fstatSync15(fd, { bigint: true });
+    need8(opened.isFile() && sameFile2(initial, opened), "changed during open");
     const bytes = Buffer.alloc(Number(opened.size) + 1);
     let length = 0;
     while (length < bytes.length) {
-      const count = readSync9(fd, bytes, length, bytes.length - length, null);
+      const count = readSync10(fd, bytes, length, bytes.length - length, null);
       if (!count)
         break;
       length += count;
     }
-    const after = fstatSync14(fd, { bigint: true }), current = lstatSync18(path, { bigint: true });
-    need7(current.isFile() && sameFile2(opened, after) && sameFile2(after, current) && BigInt(length) === opened.size, "changed during read");
+    const after = fstatSync15(fd, { bigint: true }), current = lstatSync19(path, { bigint: true });
+    need8(current.isFile() && sameFile2(opened, after) && sameFile2(after, current) && BigInt(length) === opened.size, "changed during read");
     for (const [ancestor, before] of ancestors2) {
-      const now = lstatSync18(ancestor, { bigint: true });
-      need7(now.isDirectory() && before.dev === now.dev && before.ino === now.ino && before.mode === now.mode, "parent changed during read");
+      const now = lstatSync19(ancestor, { bigint: true });
+      need8(now.isDirectory() && before.dev === now.dev && before.ino === now.ino && before.mode === now.mode, "parent changed during read");
     }
     budget2.remaining -= length;
     try {
@@ -35215,7 +35359,7 @@ function readRegistry2(path, budget2) {
       throw new Error("Claude marketplace registry is not strict UTF-8");
     }
   } finally {
-    closeSync14(fd);
+    closeSync15(fd);
   }
 }
 function parse11(text2) {
@@ -35226,7 +35370,7 @@ function parse11(text2) {
       at++;
   };
   function string4() {
-    need7(text2[at] === '"', "contains invalid JSON");
+    need8(text2[at] === '"', "contains invalid JSON");
     const start = at++;
     while (at < text2.length) {
       const character = text2[at++];
@@ -35237,7 +35381,7 @@ function parse11(text2) {
         } catch {
           throw new Error("Claude marketplace registry contains invalid JSON string");
         }
-        need7(value2.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.stringCharacters, "exceeds its string limit");
+        need8(value2.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.stringCharacters, "exceeds its string limit");
         return value2;
       }
       if (character === "\\")
@@ -35246,7 +35390,7 @@ function parse11(text2) {
     throw new Error("Claude marketplace registry contains an unterminated JSON string");
   }
   function value(depth) {
-    need7(depth <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.depth && ++nodes <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.nodes, "exceeds its nesting or node limit");
+    need8(depth <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.depth && ++nodes <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.nodes, "exceeds its nesting or node limit");
     space();
     const character = text2[at];
     if (character === '"')
@@ -35254,26 +35398,26 @@ function parse11(text2) {
     if (character === "{" || character === "[") {
       at++;
       space();
-      const object5 = character === "{", end = object5 ? "}" : "]", entries = [], items = [], keys = new Set;
+      const object6 = character === "{", end = object6 ? "}" : "]", entries = [], items = [], keys2 = new Set;
       if (text2[at] !== end)
         while (true) {
-          if (object5) {
+          if (object6) {
             space();
             const key = string4();
-            need7(!keys.has(key), "contains a duplicate JSON key");
-            keys.add(key);
+            need8(!keys2.has(key), "contains a duplicate JSON key");
+            keys2.add(key);
             space();
-            need7(text2[at++] === ":", "contains invalid JSON");
+            need8(text2[at++] === ":", "contains invalid JSON");
             entries.push([key, value(depth + 1)]);
           } else
             items.push(value(depth + 1));
           space();
           if (text2[at] === end)
             break;
-          need7(text2[at++] === ",", "contains invalid JSON");
+          need8(text2[at++] === ",", "contains invalid JSON");
         }
       at++;
-      return object5 ? { kind: "object", entries } : { kind: "array", items };
+      return object6 ? { kind: "object", entries } : { kind: "array", items };
     }
     for (const literal2 of ["true", "false", "null"])
       if (text2.startsWith(literal2, at)) {
@@ -35282,21 +35426,21 @@ function parse11(text2) {
       }
     numberPattern.lastIndex = at;
     const number4 = numberPattern.exec(text2);
-    need7(number4, "contains invalid JSON");
+    need8(number4, "contains invalid JSON");
     at += number4[0].length;
     return { kind: "number", value: number4[0] };
   }
   const root = value(0);
   space();
-  need7(at === text2.length && root.kind === "object", "requires a JSON object without trailing content");
-  need7(root.entries.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.rows, "exceeds its marketplace row limit");
+  need8(at === text2.length && root.kind === "object", "requires a JSON object without trailing content");
+  need8(root.entries.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.rows, "exceeds its marketplace row limit");
   return root;
 }
-function exactKeys(value, keys) {
-  return value?.kind === "object" && value.entries.length === keys.length && value.entries.every(([key]) => keys.includes(key));
+function exactKeys(value, keys2) {
+  return value?.kind === "object" && value.entries.length === keys2.length && value.entries.every(([key]) => keys2.includes(key));
 }
 function textField(value) {
-  need7(value?.kind === "string" && value.value.length > 0 && !/[\x00-\x1f\x7f]/.test(value.value), "contains an invalid recognized field");
+  need8(value?.kind === "string" && value.value.length > 0 && !/[\x00-\x1f\x7f]/.test(value.value), "contains an invalid recognized field");
   return value.value;
 }
 function normalizeRow(row, version2 = 1) {
@@ -35304,7 +35448,7 @@ function normalizeRow(row, version2 = 1) {
     if (version2 !== 2 || !exactKeys(row, ["source", "installLocation", "lastUpdated", "autoUpdate"]))
       return;
     const autoUpdate = field2(row, "autoUpdate");
-    need7(autoUpdate?.kind === "literal" && (autoUpdate.value === "true" || autoUpdate.value === "false"), "contains an invalid automatic-update preference");
+    need8(autoUpdate?.kind === "literal" && (autoUpdate.value === "true" || autoUpdate.value === "false"), "contains an invalid automatic-update preference");
   }
   const source = field2(row, "source");
   if (source?.kind !== "object")
@@ -35317,29 +35461,29 @@ function normalizeRow(row, version2 = 1) {
     return;
   const sourceLocation = textField(field2(source, location));
   if (type.value === "directory")
-    absolutePath3(sourceLocation);
-  absolutePath3(textField(field2(row, "installLocation")));
+    absolutePath4(sourceLocation);
+  absolutePath4(textField(field2(row, "installLocation")));
   const updated = textField(field2(row, "lastUpdated"));
-  need7(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(updated), "contains an invalid recognized update timestamp");
+  need8(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(updated), "contains an invalid recognized update timestamp");
   const millis = Date.parse(updated);
-  need7(Number.isFinite(millis) && new Date(millis).toISOString() === updated, "contains an invalid recognized update timestamp");
+  need8(Number.isFinite(millis) && new Date(millis).toISOString() === updated, "contains an invalid recognized update timestamp");
   row.entries = row.entries.map(([key, value]) => [key, key === "lastUpdated" ? { kind: "validated-update-time" } : value]);
 }
 function captureClaudeMarketplaceRegistry(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
   const value = parse11(readRegistry2(path, budget2));
   for (const [, row] of value.entries)
     normalizeRow(row);
-  const sha2562 = createHash17("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
+  const sha2562 = createHash18("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry", sha256: sha2562 };
 }
 function captureClaudeMarketplaceRegistryV2(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
   const value = parse11(readRegistry2(path, budget2));
   for (const [, row] of value.entries)
     normalizeRow(row, 2);
-  const sha2562 = createHash17("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
+  const sha2562 = createHash18("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry-v2", sha256: sha2562 };
 }
-var CLAUDE_MARKETPLACE_REGISTRY_LIMITS, sameFile2 = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, field2 = (object5, key) => object5.entries.find(([name]) => name === key)?.[1];
+var CLAUDE_MARKETPLACE_REGISTRY_LIMITS, sameFile2 = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, field2 = (object6, key) => object6.entries.find(([name]) => name === key)?.[1];
 var init_claude_marketplace_registry = __esm(() => {
   CLAUDE_MARKETPLACE_REGISTRY_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
 });
@@ -35358,7 +35502,7 @@ var init_codex_hook_additions_review = __esm(() => {
 });
 
 // src/lib/codex-hook-discovery-recovery.ts
-import { createHash as createHash18 } from "crypto";
+import { createHash as createHash19 } from "crypto";
 function assertCodexHookDiscoveryRecovery(binding, witness) {
   const proof = proofs2.get(witness);
   need6(!!proof && binding.agent === "codex" && witness.discoverySha256 === discoveryDigest(binding), "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
@@ -35373,13 +35517,13 @@ function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witnes
   need6(source.sha256 === witness.beforeSha256 && currentDigest === witness.currentSha256, "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
   return true;
 }
-var sha3 = (text2) => createHash18("sha256").update(text2).digest("hex"), fields, discoveryDigest = (binding) => {
+var sha4 = (text2) => createHash19("sha256").update(text2).digest("hex"), fields, discoveryDigest = (binding) => {
   const controls = binding.codexDisabledPluginSkills;
   if (!Object.hasOwn(binding, "codexDisabledPluginSkills") || Array.isArray(controls) && controls.length === 0) {
     const { codexDisabledPluginSkills: _controls, ...withoutControls } = binding;
-    return sha3(JSON.stringify({ ...withoutControls, codexDisabledPluginSkills: [] }));
+    return sha4(JSON.stringify({ ...withoutControls, codexDisabledPluginSkills: [] }));
   }
-  return sha3(JSON.stringify(binding));
+  return sha4(JSON.stringify(binding));
 }, proofs2;
 var init_codex_hook_discovery_recovery = __esm(() => {
   init_codex_hook_trust_files();
@@ -35391,16 +35535,16 @@ var init_codex_hook_discovery_recovery = __esm(() => {
 });
 
 // src/lib/agent-discovery.ts
-import { createHash as createHash19 } from "crypto";
-import { lstatSync as lstatSync19, readFileSync as readFileSync16, readdirSync as readdirSync7, realpathSync as realpathSync6 } from "fs";
-import { basename as basename9, dirname as dirname17, isAbsolute as isAbsolute16, join as join27, resolve as resolve18, sep as sep7 } from "path";
+import { createHash as createHash20 } from "crypto";
+import { lstatSync as lstatSync20, readFileSync as readFileSync16, readdirSync as readdirSync7, realpathSync as realpathSync6 } from "fs";
+import { basename as basename9, dirname as dirname18, isAbsolute as isAbsolute18, join as join28, resolve as resolve19, sep as sep8 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual4 } from "util";
 function discoveryExecutable(agent) {
   const command = DISCOVERY_RUNTIME_COMMANDS[agent];
   const found = command ? Bun.which(command) : null;
   if (!command || !found)
     return null;
-  const path = resolve18(found), target = realpathOrNull(path);
+  const path = resolve19(found), target = realpathOrNull(path);
   return target === null ? null : { command, path, target };
 }
 function parseConfig(text2, path, toml = false) {
@@ -35413,21 +35557,21 @@ function parseConfig(text2, path, toml = false) {
     throw new Error(`Invalid native discovery configuration: ${path}`);
   }
 }
-function safe4(path) {
-  if (!isAbsolute16(path) || path.includes("\x00"))
+function safe5(path) {
+  if (!isAbsolute18(path) || path.includes("\x00"))
     throw new Error("Expected an absolute native discovery path");
-  for (let cursor = path;; cursor = dirname17(cursor)) {
-    if (lstatSync19(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
+  for (let cursor = path;; cursor = dirname18(cursor)) {
+    if (lstatSync20(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
       throw new Error(`Refusing symlink native discovery input: ${cursor}`);
-    if (dirname17(cursor) === cursor)
+    if (dirname18(cursor) === cursor)
       break;
   }
 }
 function read(path, changes) {
-  safe4(path);
+  safe5(path);
   if (changes?.has(path))
     return changes.get(path);
-  const stat2 = lstatSync19(path, { throwIfNoEntry: false });
+  const stat2 = lstatSync20(path, { throwIfNoEntry: false });
   if (!stat2)
     return null;
   if (!stat2.isFile() || stat2.size > 16 * 1024 * 1024)
@@ -35438,8 +35582,8 @@ function assertReviewedClaudeCacheClosures(home, config2, review, canonical8) {
   const enabledIds = Object.entries(config2.enabledPlugins ?? {}).filter(([, enabled]) => enabled === true).map(([id]) => id);
   if (enabledIds.length === 0)
     return;
-  const registryPath = canonical8(join27(home, ".claude/plugins/installed_plugins.json"));
-  const cacheAliasRoot = join27(home, ".claude/plugins/cache");
+  const registryPath = canonical8(join28(home, ".claude/plugins/installed_plugins.json"));
+  const cacheAliasRoot = join28(home, ".claude/plugins/cache");
   const cacheRoot = canonical8(cacheAliasRoot);
   const registryText = read(registryPath);
   if (registryText === null)
@@ -35447,7 +35591,7 @@ function assertReviewedClaudeCacheClosures(home, config2, review, canonical8) {
   const registry2 = parseConfig(registryText, registryPath);
   if (registry2.version !== 2 || !registry2.plugins || typeof registry2.plugins !== "object" || Array.isArray(registry2.plugins))
     throw new Error("Reviewed Claude installed plugin registrations are invalid");
-  const cachePath = (path) => typeof path === "string" && isAbsolute16(path) && resolve18(path) === path && [cacheAliasRoot, cacheRoot].some((root) => path === root || path.startsWith(root + sep7));
+  const cachePath = (path) => typeof path === "string" && isAbsolute18(path) && resolve19(path) === path && [cacheAliasRoot, cacheRoot].some((root) => path === root || path.startsWith(root + sep8));
   const activeRoots = new Set;
   for (const id of enabledIds) {
     const rows = registry2.plugins[id];
@@ -35459,11 +35603,11 @@ function assertReviewedClaudeCacheClosures(home, config2, review, canonical8) {
       if (!row || typeof row !== "object" || Array.isArray(row) || typeof row.installPath !== "string") {
         throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
       }
-      if ([cacheAliasRoot, cacheRoot].some((root) => row.installPath === root || row.installPath.startsWith(root + sep7))) {
+      if ([cacheAliasRoot, cacheRoot].some((root) => row.installPath === root || row.installPath.startsWith(root + sep8))) {
         if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename9(row.installPath) !== row.version)) {
           throw new Error("Reviewed Claude discovery has a malformed active cache registration");
         }
-        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute16(row.projectPath) && resolve18(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
+        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute18(row.projectPath) && resolve19(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
           throw new Error("Reviewed Claude discovery has an unsupported active cache registration scope");
         activeRoots.add(canonical8(row.installPath));
       }
@@ -35480,12 +35624,12 @@ function assertReviewedClaudeCacheClosures(home, config2, review, canonical8) {
       throw new Error(`Reviewed active Claude cache plugin ${description} is not bound`);
   };
   for (const root of activeRoots) {
-    safe4(root);
-    const rootStat = lstatSync19(root, { throwIfNoEntry: false });
+    safe5(root);
+    const rootStat = lstatSync20(root, { throwIfNoEntry: false });
     if (!rootStat?.isDirectory() || realpathSync6(root) !== root)
       throw new Error("Reviewed Claude active cache plugin root is missing or unsafe");
-    const manifestPath = join27(root, ".claude-plugin/plugin.json");
-    const manifestStat = lstatSync19(manifestPath, { throwIfNoEntry: false });
+    const manifestPath = join28(root, ".claude-plugin/plugin.json");
+    const manifestStat = lstatSync20(manifestPath, { throwIfNoEntry: false });
     let manifest;
     if (manifestStat) {
       if (!manifestStat.isFile())
@@ -35500,37 +35644,37 @@ function assertReviewedClaudeCacheClosures(home, config2, review, canonical8) {
     } else if (!review.sources.some((source) => source.path === manifestPath && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined)) {
       throw new Error("Reviewed Claude active cache plugin manifest absence requires a path-bytes witness");
     }
-    const roots = new Set([join27(root, "skills")]);
-    if (lstatSync19(join27(root, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
+    const roots = new Set([join28(root, "skills")]);
+    if (lstatSync20(join28(root, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
       roots.add(root);
     const declared = manifest?.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
     if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
       throw new Error("Reviewed Claude active cache plugin has unsupported skill paths");
     for (const value of declared) {
-      const path = resolve18(root, value);
-      if (path !== root && !path.startsWith(root + sep7))
+      const path = resolve19(root, value);
+      if (path !== root && !path.startsWith(root + sep8))
         throw new Error("Reviewed Claude active cache plugin skill path escapes its root");
-      roots.add(path.endsWith(`${sep7}SKILL.md`) ? dirname17(path) : path);
+      roots.add(path.endsWith(`${sep8}SKILL.md`) ? dirname18(path) : path);
     }
     for (const skillRoot of roots)
       if (!review.roots.includes(skillRoot))
         throw new Error("Reviewed Claude active cache plugin skill root is not covered");
-    const hooksPath = join27(root, "hooks/hooks.json");
-    const hooksStat = lstatSync19(hooksPath, { throwIfNoEntry: false });
+    const hooksPath = join28(root, "hooks/hooks.json");
+    const hooksStat = lstatSync20(hooksPath, { throwIfNoEntry: false });
     if (hooksStat) {
       if (!hooksStat.isFile())
         throw new Error("Reviewed Claude plugin hook manifest is unsupported");
       requireSource(hooksPath, "hook manifest");
     }
     if (typeof manifest?.hooks === "string")
-      requireSource(resolve18(root, manifest.hooks), "manifest-declared hook source");
+      requireSource(resolve19(root, manifest.hooks), "manifest-declared hook source");
   }
 }
 function projectNativeDiscoveryFields(text2, format, fields2, path) {
-  const object5 = format === "yaml" ? parseHermesConfig(text2) : parseConfig(text2, path, format === "toml");
-  if (!object5 || typeof object5 !== "object" || Array.isArray(object5))
+  const object6 = format === "yaml" ? parseHermesConfig(text2) : parseConfig(text2, path, format === "toml");
+  if (!object6 || typeof object6 !== "object" || Array.isArray(object6))
     throw new Error("Expected native discovery configuration object");
-  return digest(JSON.stringify(Object.fromEntries(fields2.map((field3) => [field3, object5[field3] ?? null]))));
+  return digest(JSON.stringify(Object.fromEntries(fields2.map((field3) => [field3, object6[field3] ?? null]))));
 }
 function isSupersededSettingsProjection(agent, configPath, source) {
   if (agent === "sumi")
@@ -35543,6 +35687,8 @@ function supersedesSettingsProjection(agent, sources, configPath) {
   return agent === "codex" && sources.some((source) => source.path === configPath && (source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")));
 }
 function projected(source, changes, budget2 = discoveryByteBudget()) {
+  if (source.reviewArtifact !== undefined)
+    verifyRetainedReviewArtifact(source);
   if (source.hashMode === "sumi-settings-v1") {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Sumi settings witnesses require exact typed metadata");
@@ -35618,9 +35764,9 @@ function absentCodexSkillRoots(binding) {
     return [];
   if (binding.agent !== "codex" || !Array.isArray(controls) || controls.length > 4096)
     throw new Error("Invalid disabled Codex discovery proof");
-  if (binding.method !== "reviewed" || controls.every((control) => lstatSync19(control.pluginParent, { throwIfNoEntry: false })))
+  if (binding.method !== "reviewed" || controls.every((control) => lstatSync20(control.pluginParent, { throwIfNoEntry: false })))
     return [];
-  const cache = dirname17(dirname17(controls[0].pluginParent)), config2 = join27(dirname17(dirname17(cache)), "config.toml");
+  const cache = dirname18(dirname18(controls[0].pluginParent)), config2 = join28(dirname18(dirname18(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config2 && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || projected(source) !== source.sha256)
     throw new Error("Missing current disabled Codex configuration witness");
@@ -35628,8 +35774,8 @@ function absentCodexSkillRoots(binding) {
   return [...new Set(controls.map((control) => control.pluginParent))].filter((parent) => !codexDirectHookSelects(cache, parent) && absentDisabledCodexPluginParent(cache, parent, controls, rules));
 }
 function codexDirectHookSelects(cache, root) {
-  const codex = dirname17(dirname17(cache)), config2 = Bun.TOML.parse(read(join27(codex, "config.toml")) ?? "");
-  const hooks = read(join27(codex, "hooks.json"));
+  const codex = dirname18(dirname18(cache)), config2 = Bun.TOML.parse(read(join28(codex, "config.toml")) ?? "");
+  const hooks = read(join28(codex, "hooks.json"));
   if (hooks !== null)
     hashNativeJsonControls(hooks);
   return JSON.stringify(config2.hooks ?? {}).includes(root) || hooks !== null && JSON.stringify(JSON.parse(hooks)).includes(root);
@@ -35641,7 +35787,7 @@ function retiredCodexRoots(binding) {
   const controls = binding.codexDisabledPluginSkills;
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !Array.isArray(controls) || !controls.length || !Array.isArray(proof.roots) || proof.roots.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.roots).size !== proof.roots.length || !Array.isArray(proof.directories) || proof.parents !== undefined && (!Array.isArray(proof.parents) || proof.parents.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.parents).size !== proof.parents.length) || !proof.roots.length && !proof.parents?.length)
     throw new Error("Invalid retired Codex materialization proof");
-  const cache = dirname17(dirname17(controls[0].pluginParent)), config2 = join27(dirname17(dirname17(cache)), "config.toml");
+  const cache = dirname18(dirname18(controls[0].pluginParent)), config2 = join28(dirname18(dirname18(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config2 && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || projected(source) !== source.sha256)
     throw new Error("Missing current retired Codex configuration witness");
@@ -35649,7 +35795,7 @@ function retiredCodexRoots(binding) {
   if ((proof.parents ?? []).some((parent) => codexDirectHookSelects(cache, parent) || !reviewedDisabledCodexPluginParent(cache, parent, controls, rules)) || !reviewedCodexPluginCapabilitiesUnchanged(cache, controls, (path) => read(path), rules))
     throw new Error("Retired Codex parent capabilities changed");
   for (const root of proof.roots) {
-    const manifest = binding.sources.find((source2) => source2.path === join27(root, ".codex-plugin/plugin.json") && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && [undefined, "bytes"].includes(source2.hashMode));
+    const manifest = binding.sources.find((source2) => source2.path === join28(root, ".codex-plugin/plugin.json") && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && [undefined, "bytes"].includes(source2.hashMode));
     if (!manifest || codexDirectHookSelects(cache, root) || !reviewedRetiredCodexRoot(cache, root, controls, rules, (path) => read(path), true))
       throw new Error("Retired Codex materialization changed");
   }
@@ -35658,7 +35804,7 @@ function retiredCodexRoots(binding) {
 function retainableAbsentSource(source) {
   if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined)
     return false;
-  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join27(sep7, ".claude-plugin", "plugin.json"));
+  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join28(sep8, ".claude-plugin", "plugin.json"));
 }
 function absentRetiredClaudeRoots(binding) {
   if (binding.agent !== "claude" || binding.method !== "reviewed")
@@ -35667,17 +35813,17 @@ function absentRetiredClaudeRoots(binding) {
   for (const source of binding.sources) {
     if (!retainableAbsentSource(source) || source.sha256 === null)
       continue;
-    const marker = sep7 + ".claude" + sep7 + "plugins" + sep7 + "cache" + sep7, at = source.path.indexOf(marker);
+    const marker = sep8 + ".claude" + sep8 + "plugins" + sep8 + "cache" + sep8, at = source.path.indexOf(marker);
     if (at < 0 || source.path.indexOf(marker, at + 1) >= 0)
       continue;
-    const cache = source.path.slice(0, at + marker.length - 1), parts = source.path.slice(at + marker.length).split(sep7);
+    const cache = source.path.slice(0, at + marker.length - 1), parts = source.path.slice(at + marker.length).split(sep8);
     if (parts.length < 4 || parts.slice(0, 3).some((part) => !part || part === "." || part === ".."))
       continue;
-    const root = join27(cache, ...parts.slice(0, 3));
-    safe4(root);
-    if (lstatSync19(root, { throwIfNoEntry: false }))
+    const root = join28(cache, ...parts.slice(0, 3));
+    safe5(root);
+    if (lstatSync20(root, { throwIfNoEntry: false }))
       continue;
-    const claude = dirname17(dirname17(cache)), settings = join27(claude, "settings.json"), registry2 = join27(claude, "plugins/installed_plugins.json");
+    const claude = dirname18(dirname18(cache)), settings = join28(claude, "settings.json"), registry2 = join28(claude, "plugins/installed_plugins.json");
     const full = (path) => binding.sources.find((item) => item.path === path && item.sha256 !== null && item.format === undefined && item.fields === undefined);
     const configSource = full(settings), registrySource = full(registry2);
     if (!configSource || !registrySource || projected(configSource) !== configSource.sha256 || projected(registrySource) !== registrySource.sha256)
@@ -35694,15 +35840,15 @@ function absentRetiredClaudeRoots(binding) {
       if (!row || typeof row !== "object" || Array.isArray(row))
         return null;
       const value = row;
-      if (typeof value.installPath !== "string" || /[\x00-\x1f\x7f]/.test(value.installPath) || !isAbsolute16(value.installPath) || resolve18(value.installPath) !== value.installPath || value.installPath.length > AGENT_POLICY_LIMITS.pathCharacters)
+      if (typeof value.installPath !== "string" || /[\x00-\x1f\x7f]/.test(value.installPath) || !isAbsolute18(value.installPath) || resolve19(value.installPath) !== value.installPath || value.installPath.length > AGENT_POLICY_LIMITS.pathCharacters)
         return null;
       if (value.scope === "user")
         return value.projectPath === undefined || value.projectPath === null ? "user\x00" : null;
       if (value.scope === "project")
-        return typeof value.projectPath === "string" && !/[\x00-\x1f\x7f]/.test(value.projectPath) && value.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute16(value.projectPath) && resolve18(value.projectPath) === value.projectPath ? `project\x00${value.projectPath}` : null;
+        return typeof value.projectPath === "string" && !/[\x00-\x1f\x7f]/.test(value.projectPath) && value.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute18(value.projectPath) && resolve19(value.projectPath) === value.projectPath ? `project\x00${value.projectPath}` : null;
       return null;
     };
-    if (Object.values(installed.plugins).some((value) => !Array.isArray(value) || value.some((row) => !row || typeof row.installPath !== "string" || row.installPath === root || row.installPath.startsWith(root + sep7) || root.startsWith(row.installPath + sep7))))
+    if (Object.values(installed.plugins).some((value) => !Array.isArray(value) || value.some((row) => !row || typeof row.installPath !== "string" || row.installPath === root || row.installPath.startsWith(root + sep8) || root.startsWith(row.installPath + sep8))))
       continue;
     const rows = installed.plugins[id];
     if (!Array.isArray(rows) || rows.length < 1)
@@ -35720,9 +35866,9 @@ function absentRetiredClaudeRoots(binding) {
     if (!targetValid || !targetScopes.has("user\x00"))
       continue;
     const active = rows[0]?.installPath;
-    if (typeof active !== "string" || rows[0]?.version !== basename9(active) || dirname17(active) !== dirname17(root) || active === root || !lstatSync19(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync6(active) !== active)
+    if (typeof active !== "string" || rows[0]?.version !== basename9(active) || dirname18(active) !== dirname18(root) || active === root || !lstatSync20(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync6(active) !== active)
       continue;
-    const activeManifest = full(join27(active, ".claude-plugin/plugin.json"));
+    const activeManifest = full(join28(active, ".claude-plugin/plugin.json"));
     if (!activeManifest || projected(activeManifest) !== activeManifest.sha256)
       continue;
     result.add(root);
@@ -35738,10 +35884,10 @@ function verifyAgentDiscovery(binding, codexRecovery) {
     throw new Error("Hermes discovery requires directory membership coverage; run skills hook install with a fresh discovery review");
   const installationRoots = codexInstallationRoots(binding);
   const retiredRoots = retiredCodexRoots(binding);
-  const installationInput = (path) => installationRoots.some((root) => path === root || path.startsWith(root + sep7));
+  const installationInput = (path) => installationRoots.some((root) => path === root || path.startsWith(root + sep8));
   if (binding.directories !== undefined) {
     const projected2 = binding.codexInstallationInputs?.directories ?? [];
-    const ancestors2 = binding.directories.filter((directory) => installationRoots.some((root) => root.startsWith(directory.path + sep7)));
+    const ancestors2 = binding.directories.filter((directory) => installationRoots.some((root) => root.startsWith(directory.path + sep8)));
     if (projected2.length !== ancestors2.length || projected2.some((directory) => !ancestors2.some((original) => original.path === directory.path)))
       throw new Error("Missing installation input directory projection");
     const ordinary = binding.directories.filter((directory) => !installationInput(directory.path) && !ancestors2.includes(directory));
@@ -35749,7 +35895,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       const projection = binding.codexRetiredMaterializations.directories;
       if (projection.length !== ordinary.length || projection.some((item, index) => item.path !== ordinary[index]?.path))
         throw new Error("Missing retired Codex directory projection");
-      const omitted = [...retiredRoots, ...(binding.codexRetiredMaterializations.parents ?? []).filter((parent) => !lstatSync19(parent, { throwIfNoEntry: false }))];
+      const omitted = [...retiredRoots, ...(binding.codexRetiredMaterializations.parents ?? []).filter((parent) => !lstatSync20(parent, { throwIfNoEntry: false }))];
       if (projection.every((item) => Array.isArray(item.entries)))
         verifyDiscoveryDirectoryProjection(projection, omitted);
       else {
@@ -35763,7 +35909,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       verifyDiscoveryDirectories(ordinary);
     verifyDiscoveryDirectories(projected2, installationRoots);
   }
-  const absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredRoots.filter((root) => !lstatSync19(root, { throwIfNoEntry: false }))];
+  const absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredRoots.filter((root) => !lstatSync20(root, { throwIfNoEntry: false }))];
   const budget2 = discoveryByteBudget();
   for (const source of binding.sources) {
     assertMarketplaceBinding(binding, source);
@@ -35774,11 +35920,11 @@ function verifyAgentDiscovery(binding, codexRecovery) {
     if (source.sha256 !== null && !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Invalid native discovery digest");
     if (installationInput(source.path)) {
-      safe4(source.path);
+      safe5(source.path);
       continue;
     }
-    if (absentRoots.some((root) => source.path.startsWith(root + sep7)) && retainableAbsentSource(source)) {
-      safe4(source.path);
+    if (absentRoots.some((root) => source.path.startsWith(root + sep8)) && retainableAbsentSource(source)) {
+      safe5(source.path);
       continue;
     }
     const current = projected(source, undefined, budget2);
@@ -35786,10 +35932,10 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
   }
   for (const root of binding.roots)
-    safe4(root);
+    safe5(root);
   for (const root of absentRoots) {
-    safe4(root);
-    if (lstatSync19(root, { throwIfNoEntry: false }))
+    safe5(root);
+    if (lstatSync20(root, { throwIfNoEntry: false }))
       throw new Error("Retired native materialization changed during discovery verification");
   }
 }
@@ -35799,13 +35945,13 @@ function codexInstallationRoots(binding) {
     return [];
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !supportsCodexNativeCapability(proof.version, "installed-plugin-review") || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
     throw new Error("Invalid native installation input proof");
-  const cache = dirname17(dirname17(proof.plugins[0].pluginParent));
-  const config2 = join27(dirname17(dirname17(cache)), "config.toml"), home = dirname17(dirname17(dirname17(cache)));
+  const cache = dirname18(dirname18(proof.plugins[0].pluginParent));
+  const config2 = join28(dirname18(dirname18(cache)), "config.toml"), home = dirname18(dirname18(dirname18(cache)));
   const configSource = binding.sources.find((source) => source.path === config2 && source.sha256 !== null && (!source.format || source.format === "toml" && source.fields?.includes("plugins")));
-  const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join27(home, path));
-  if (!configSource || proof.plugins.some((input2) => nativeRoots.some((root) => root === input2.sourceRoot || root.startsWith(input2.sourceRoot + sep7) || input2.sourceRoot.startsWith(root + sep7)) || binding.sources.some((source) => basename9(source.path) === "config.toml" && (source.path === input2.sourceRoot || source.path.startsWith(input2.sourceRoot + sep7)))))
+  const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join28(home, path));
+  if (!configSource || proof.plugins.some((input2) => nativeRoots.some((root) => root === input2.sourceRoot || root.startsWith(input2.sourceRoot + sep8) || input2.sourceRoot.startsWith(root + sep8)) || binding.sources.some((source) => basename9(source.path) === "config.toml" && (source.path === input2.sourceRoot || source.path.startsWith(input2.sourceRoot + sep8)))))
     throw new Error("Native installation input overlaps configuration or loading roots");
-  if (proof.plugins.some((input2) => dirname17(dirname17(input2.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join27(input2.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
+  if (proof.plugins.some((input2) => dirname18(dirname18(input2.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join28(input2.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
     throw new Error("Missing native installation input source witness");
   return reviewedCodexPluginSourceRoots(cache, proof.plugins, (path) => {
     const text2 = read(path);
@@ -35815,7 +35961,7 @@ function codexInstallationRoots(binding) {
   });
 }
 function assertMarketplaceBinding(binding, source) {
-  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename9(source.path) !== "plugin.json" || !source.path.endsWith(join27(sep7, ".claude-plugin", "plugin.json"))))
+  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename9(source.path) !== "plugin.json" || !source.path.endsWith(join28(sep8, ".claude-plugin", "plugin.json"))))
     throw new Error("Claude plugin manifest witnesses require Claude plugin discovery");
   if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename9(source.path) !== "sumi.json"))
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
@@ -35831,10 +35977,10 @@ function assertMarketplaceBinding(binding, source) {
 function agentDiscoveryConfigPath(home, agent) {
   if (agent === "sumi")
     return sumiConfigPath(home);
-  return join27(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
+  return join28(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
 }
 function resolveAgentDiscovery(options) {
-  const canonical8 = options.canonical ?? resolve18, home = resolve18(options.home), agent = options.agent;
+  const canonical8 = options.canonical ?? resolve19, home = resolve19(options.home), agent = options.agent;
   const sources = [], roots = new Set, builtinNames = [];
   const witness = (path, format, fields2, hashMode) => {
     const source = { path: canonical8(path), sha256: null, ...format ? { format, fields: fields2 } : {}, ...hashMode ? { hashMode } : {} };
@@ -35855,42 +36001,42 @@ function resolveAgentDiscovery(options) {
   const review = options.reviewed?.agents.find((item) => item.agent === agent);
   if (agent === "sumi") {
     const directory = sumiConfigDirectory(home);
-    if (witness(join27(directory, "sumi.jsonc")) !== null)
+    if (witness(join28(directory, "sumi.jsonc")) !== null)
       unresolved("JSONC configuration requires a supported format adapter");
-    for (const root of [directory, join27(home, ".claude"), join27(home, ".agents")])
+    for (const root of [directory, join28(home, ".claude"), join28(home, ".agents")])
       for (const name of ["skill", "skills"])
-        roots.add(canonical8(join27(root, name)));
+        roots.add(canonical8(join28(root, name)));
     if (config2.skills !== undefined && (!Array.isArray(config2.skills) || config2.skills.some((path) => typeof path !== "string")))
       unresolved("skills must be a string array");
     for (const value of config2.skills ?? []) {
-      if (typeof value !== "string" || /[\0$]/.test(value) || !value || !(isAbsolute16(value) || value.startsWith("~/")))
+      if (typeof value !== "string" || /[\0$]/.test(value) || !value || !(isAbsolute18(value) || value.startsWith("~/")))
         unresolved("remote or relative skill sources need a dedicated discovery adapter");
-      roots.add(canonical8(value.startsWith("~/") ? join27(home, value.slice(2)) : value));
+      roots.add(canonical8(value.startsWith("~/") ? join28(home, value.slice(2)) : value));
     }
     for (const key of ["plugin", "plugins"])
       if (config2[key] !== undefined && !Array.isArray(config2[key]))
         unresolved(`${key} must be an array`);
-    const plugins = [join27(directory, "plugin"), join27(directory, "plugins")];
+    const plugins = [join28(directory, "plugin"), join28(directory, "plugins")];
     for (const path of plugins) {
-      safe4(path);
-      if (lstatSync19(path, { throwIfNoEntry: false })?.isDirectory())
+      safe5(path);
+      if (lstatSync20(path, { throwIfNoEntry: false })?.isDirectory())
         for (const name of readdirSync7(path).sort()) {
           if (name === "skills-cli.js" && path === plugins[1])
             continue;
-          const target = join27(path, name);
-          if (!lstatSync19(target).isFile())
+          const target = join28(path, name);
+          if (!lstatSync20(target).isFile())
             unresolved("local plugin packages need a dedicated discovery adapter");
           witness(target);
         }
     }
     for (const root of roots) {
-      safe4(root);
-      if (lstatSync19(root, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(root).some((name) => name.endsWith(".md")))
+      safe5(root);
+      if (lstatSync20(root, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(root).some((name) => name.endsWith(".md")))
         unresolved("flat markdown skills require a dedicated native migration adapter");
     }
   }
   if (agent === "hermes") {
-    const profile = witness(join27(home, ".hermes/active_profile"));
+    const profile = witness(join28(home, ".hermes/active_profile"));
     if (profile?.trim() && profile.trim() !== "default")
       unresolved("a non-default profile is active");
     const declared = config2.skills?.external_dirs ?? [], paths = typeof declared === "string" ? [declared] : declared;
@@ -35904,8 +36050,8 @@ function resolveAgentDiscovery(options) {
         continue;
       if (normalized.startsWith("~") && normalized !== "~" && !normalized.startsWith("~/"))
         unresolved("user-specific tilde expansion requires a separate discovery adapter");
-      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join27(home, normalized.slice(2)) : resolve18(home, ".hermes", normalized);
-      safe4(path);
+      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join28(home, normalized.slice(2)) : resolve19(home, ".hermes", normalized);
+      safe5(path);
       roots.add(path);
     }
   }
@@ -35913,24 +36059,24 @@ function resolveAgentDiscovery(options) {
     const executable = options.executable === undefined ? discoveryExecutable(agent) : options.executable;
     if (executable) {
       let packageRoot;
-      for (let directory = dirname17(executable.target), depth = 0;depth < 8; directory = dirname17(directory), depth++) {
-        const path = join27(directory, "package.json"), raw = read(path);
+      for (let directory = dirname18(executable.target), depth = 0;depth < 8; directory = dirname18(directory), depth++) {
+        const path = join28(directory, "package.json"), raw = read(path);
         if (raw !== null && parseConfig(raw, path).name === "@google/gemini-cli") {
           packageRoot = directory;
           witness(path);
           break;
         }
-        if (dirname17(directory) === directory)
+        if (dirname18(directory) === directory)
           break;
       }
       if (!packageRoot)
         unresolved("installed Gemini package layout is not recognized");
-      const builtinRoot = join27(packageRoot, "bundle/builtin");
-      safe4(builtinRoot);
-      if (!lstatSync19(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
+      const builtinRoot = join28(packageRoot, "bundle/builtin");
+      safe5(builtinRoot);
+      if (!lstatSync20(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
         unresolved("installed Gemini builtin root is missing");
       for (const name of readdirSync7(builtinRoot).sort()) {
-        const text2 = witness(join27(builtinRoot, name, "SKILL.md"));
+        const text2 = witness(join28(builtinRoot, name, "SKILL.md"));
         const match = text2?.match(/^---\r?\n[\s\S]*?^name:\s*([a-z0-9][a-z0-9-]*)\s*$/m);
         if (!match?.[1] || builtinNames.includes(match[1]))
           unresolved("installed Gemini builtin name is missing or ambiguous");
@@ -35965,10 +36111,10 @@ function resolveAgentDiscovery(options) {
       throw new Error("Discovery review must include the agent configuration source");
     const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical8(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical8(configPath), source)) : sources;
     const reviewedSourcesWithManifestProjection = review.sources.map((source) => {
-      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename9(source.path) !== "plugin.json" || !source.path.endsWith(join27(sep7, ".claude-plugin", "plugin.json")))
+      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename9(source.path) !== "plugin.json" || !source.path.endsWith(join28(sep8, ".claude-plugin", "plugin.json")))
         return source;
-      const pluginRoot = dirname17(dirname17(source.path)), hooksPath = join27(pluginRoot, "hooks/hooks.json");
-      const hookStat = lstatSync19(hooksPath, { throwIfNoEntry: false });
+      const pluginRoot = dirname18(dirname18(source.path)), hooksPath = join28(pluginRoot, "hooks/hooks.json");
+      const hookStat = lstatSync20(hooksPath, { throwIfNoEntry: false });
       const text2 = read(source.path);
       if (text2 === null)
         throw new Error("Reviewed Claude plugin manifest is missing");
@@ -35982,8 +36128,8 @@ function resolveAgentDiscovery(options) {
       if (manifest.hooks !== undefined) {
         if (typeof manifest.hooks !== "string")
           throw new Error("Reviewed Claude plugin manifest has an unsupported hooks target");
-        const declaredHookPath = resolve18(pluginRoot, manifest.hooks);
-        if (!declaredHookPath.startsWith(pluginRoot + sep7))
+        const declaredHookPath = resolve19(pluginRoot, manifest.hooks);
+        if (!declaredHookPath.startsWith(pluginRoot + sep8))
           throw new Error("Reviewed Claude plugin hooks target escapes its root");
         reviewedHookPaths.add(declaredHookPath);
       }
@@ -36000,40 +36146,40 @@ function resolveAgentDiscovery(options) {
   }
   function plugin(root) {
     root = canonical8(root);
-    safe4(root);
-    const manifestPath = join27(root, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
+    safe5(root);
+    const manifestPath = join28(root, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
     const raw = witness(manifestPath, undefined, undefined, agent === "claude" ? "claude-plugin-manifest-v1" : undefined);
     if (raw === null)
       unresolved("plugin manifest missing");
     const manifest = parseConfig(raw, manifestPath);
-    const hooks = witness(join27(root, "hooks/hooks.json"));
+    const hooks = witness(join28(root, "hooks/hooks.json"));
     if (manifest.hooks !== undefined || hooks !== null)
       unresolved("plugin hooks require a separate no-skill-injection review");
-    const commands = join27(root, "commands");
-    safe4(commands);
-    if (agent === "claude" && (manifest.commands !== undefined || lstatSync19(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(commands).length))
+    const commands = join28(root, "commands");
+    safe5(commands);
+    if (agent === "claude" && (manifest.commands !== undefined || lstatSync20(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(commands).length))
       unresolved("legacy command discovery requires retirement or a dedicated format adapter");
-    const rootSkill = witness(join27(root, "SKILL.md"));
+    const rootSkill = witness(join28(root, "SKILL.md"));
     if (rootSkill !== null)
       roots.add(root);
     const declared = manifest.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
     if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
       unresolved("unsupported plugin skill paths");
     if (agent === "claude")
-      roots.add(join27(root, "skills"));
+      roots.add(join28(root, "skills"));
     for (const value of declared) {
-      const path = resolve18(root, value);
-      if (path !== root && !path.startsWith(root + sep7))
+      const path = resolve19(root, value);
+      if (path !== root && !path.startsWith(root + sep8))
         unresolved("plugin skill path escapes its root");
-      roots.add(path.endsWith(`${sep7}SKILL.md`) ? dirname17(path) : path);
+      roots.add(path.endsWith(`${sep8}SKILL.md`) ? dirname18(path) : path);
     }
   }
   if (agent === "claude") {
-    const registrations = witness(join27(home, ".claude/plugins/installed_plugins.json"));
-    const installed = registrations === null ? {} : parseConfig(registrations, join27(home, ".claude/plugins/installed_plugins.json")).plugins;
-    const commands = canonical8(join27(home, ".claude/commands"));
-    safe4(commands);
-    if (lstatSync19(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(commands).length)
+    const registrations = witness(join28(home, ".claude/plugins/installed_plugins.json"));
+    const installed = registrations === null ? {} : parseConfig(registrations, join28(home, ".claude/plugins/installed_plugins.json")).plugins;
+    const commands = canonical8(join28(home, ".claude/commands"));
+    safe5(commands);
+    if (lstatSync20(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync7(commands).length)
       unresolved("legacy home command discovery requires a dedicated format adapter");
     for (const [id, enabled] of Object.entries(config2.enabledPlugins ?? {})) {
       if (enabled === false)
@@ -36053,37 +36199,37 @@ function resolveAgentDiscovery(options) {
         unresolved("unsupported plugin enablement");
       const split = id.lastIndexOf("@"), name = id.slice(0, split), marketplace = id.slice(split + 1);
       const market = config2.marketplaces?.[marketplace] ?? (marketplace === "personal" ? { source_type: "local", source: home } : undefined);
-      if (split < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute16(market.source))
+      if (split < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute18(market.source))
         unresolved("enabled plugin marketplace is not an explicit local source");
-      const catalogText = witness(join27(market.source, ".agents/plugins/marketplace.json"));
+      const catalogText = witness(join28(market.source, ".agents/plugins/marketplace.json"));
       if (catalogText === null)
         unresolved("marketplace catalog missing");
-      const catalog = parseConfig(catalogText, join27(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
+      const catalog = parseConfig(catalogText, join28(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
       if (matches.length !== 1 || matches[0]?.source?.source !== "local" || typeof matches[0]?.source?.path !== "string")
         unresolved("plugin catalog source is missing or ambiguous");
-      plugin(resolve18(market.source, matches[0].source.path));
+      plugin(resolve19(market.source, matches[0].source.path));
     }
   } else if (agent === "opencode") {
-    if (witness(join27(home, ".config/opencode/opencode.jsonc")) !== null || witness(join27(home, ".config/opencode/config.json")) !== null)
+    if (witness(join28(home, ".config/opencode/opencode.jsonc")) !== null || witness(join28(home, ".config/opencode/config.json")) !== null)
       unresolved("additional config layers require review");
     if ((config2.plugin?.length ?? 0) > 0 || config2.skills?.urls?.length)
       unresolved("external plugin or remote skill source");
     for (const path of config2.skills?.paths ?? []) {
-      if (typeof path !== "string" || !isAbsolute16(path))
+      if (typeof path !== "string" || !isAbsolute18(path))
         unresolved("relative or malformed added skill root");
       roots.add(path);
     }
-    const localPlugins = join27(home, ".config/opencode/plugins");
-    safe4(localPlugins);
-    if (lstatSync19(localPlugins, { throwIfNoEntry: false }) && readdirSync7(localPlugins).some((name) => name !== "skills-cli.js"))
+    const localPlugins = join28(home, ".config/opencode/plugins");
+    safe5(localPlugins);
+    if (lstatSync20(localPlugins, { throwIfNoEntry: false }) && readdirSync7(localPlugins).some((name) => name !== "skills-cli.js"))
       unresolved("additional local plugin hooks require review");
   } else if (agent === "sumi") {
-    if ((config2.plugin?.length ?? 0) > 0 || (config2.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical8(configPath) && source.path !== canonical8(join27(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
+    if ((config2.plugin?.length ?? 0) > 0 || (config2.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical8(configPath) && source.path !== canonical8(join28(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
       unresolved("external or foreign local plugins require review");
   } else if (agent === "hermes") {
-    for (const directory of [join27(home, ".hermes/plugins"), join27(home, ".hermes/hermes-agent")]) {
-      safe4(directory);
-      if (lstatSync19(directory, { throwIfNoEntry: false }))
+    for (const directory of [join28(home, ".hermes/plugins"), join28(home, ".hermes/hermes-agent")]) {
+      safe5(directory);
+      if (lstatSync20(directory, { throwIfNoEntry: false }))
         unresolved("installed runtime/plugin discovery requires reviewed source bindings");
     }
     if (Bun.which("hermes") || Object.keys(config2.plugins ?? {}).length)
@@ -36091,24 +36237,24 @@ function resolveAgentDiscovery(options) {
   } else if (agent === "gemini") {
     if (Object.keys(config2.extensions ?? {}).length || config2.skills?.paths?.length)
       unresolved("custom extension or skill paths");
-    const directory = join27(home, ".gemini/extensions");
-    safe4(directory);
-    if (lstatSync19(directory, { throwIfNoEntry: false }))
+    const directory = join28(home, ".gemini/extensions");
+    safe5(directory);
+    if (lstatSync20(directory, { throwIfNoEntry: false }))
       for (const name of readdirSync7(directory)) {
-        const root = join27(directory, name);
-        safe4(root);
-        if (!lstatSync19(root)?.isDirectory())
+        const root = join28(directory, name);
+        safe5(root);
+        if (!lstatSync20(root)?.isDirectory())
           continue;
-        const raw = witness(join27(root, "gemini-extension.json"));
+        const raw = witness(join28(root, "gemini-extension.json"));
         if (raw === null)
           unresolved("extension registration missing");
-        const manifest = parseConfig(raw, join27(root, "gemini-extension.json"));
-        if (manifest.hooks !== undefined || witness(join27(root, "hooks/hooks.json")) !== null || witness(join27(root, ".gemini-extension-install.json")) !== null)
+        const manifest = parseConfig(raw, join28(root, "gemini-extension.json"));
+        if (manifest.hooks !== undefined || witness(join28(root, "hooks/hooks.json")) !== null || witness(join28(root, ".gemini-extension-install.json")) !== null)
           unresolved("extension hooks or linked registration require review");
-        roots.add(join27(root, "skills"));
+        roots.add(join28(root, "skills"));
       }
   }
-  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join27(home, ".hermes/plugins"), join27(home, ".hermes/hermes-agent")].map((path) => canonical8(path))) } : {} };
+  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join28(home, ".hermes/plugins"), join28(home, ".hermes/hermes-agent")].map((path) => canonical8(path))) } : {} };
 }
 var DISCOVERY_RUNTIME_COMMANDS, realpathOrNull = (path) => {
   try {
@@ -36116,7 +36262,7 @@ var DISCOVERY_RUNTIME_COMMANDS, realpathOrNull = (path) => {
   } catch {
     return null;
   }
-}, digest = (text2) => createHash19("sha256").update(text2).digest("hex");
+}, digest = (text2) => createHash20("sha256").update(text2).digest("hex");
 var init_agent_discovery = __esm(() => {
   init_sumi_settings_witness();
   init_agent_policy_limits();
@@ -36136,16 +36282,17 @@ var init_agent_discovery = __esm(() => {
   init_agent_sumi();
   init_native_discovery_roots();
   init_codex_native_compatibility();
+  init_retained_review_artifacts();
   init_agent_discovery_directories();
   DISCOVERY_RUNTIME_COMMANDS = Object.freeze({ gemini: "gemini" });
 });
 
 // src/lib/authoring-path.ts
-import { lstatSync as lstatSync20, realpathSync as realpathSync7 } from "fs";
+import { lstatSync as lstatSync21, realpathSync as realpathSync7 } from "fs";
 import { homedir as homedir3 } from "os";
-import { basename as basename10, dirname as dirname18, join as join28, resolve as resolve19, sep as sep8 } from "path";
+import { basename as basename10, dirname as dirname19, join as join29, resolve as resolve20, sep as sep9 } from "path";
 function pathParts(path) {
-  return resolve19(path).split(sep8).filter(Boolean);
+  return resolve20(path).split(sep9).filter(Boolean);
 }
 function nativeRootMatch(path) {
   const parts = pathParts(path);
@@ -36159,24 +36306,24 @@ function nativeRootMatch(path) {
   return;
 }
 function physicalPath(path) {
-  let cursor = resolve19(path);
+  let cursor = resolve20(path);
   const suffix = [];
-  while (!lstatSync20(cursor, { throwIfNoEntry: false })) {
+  while (!lstatSync21(cursor, { throwIfNoEntry: false })) {
     suffix.unshift(basename10(cursor));
-    const parent = dirname18(cursor);
+    const parent = dirname19(cursor);
     if (parent === cursor)
-      return resolve19(path);
+      return resolve20(path);
     cursor = parent;
   }
-  return resolve19(realpathSync7(cursor), ...suffix);
+  return resolve20(realpathSync7(cursor), ...suffix);
 }
 function contains(root, path) {
-  return path === root || path.startsWith(root + sep8);
+  return path === root || path.startsWith(root + sep9);
 }
 function configuredRoots(home, explicitHome) {
-  const homeData = join28(home, ".hasna", "skills");
+  const homeData = join29(home, ".hasna", "skills");
   const homePolicy = readManagedSkillPolicySnapshot(homeData);
-  const configuredPolicy = !explicitHome && resolve19(getDataDirReadOnly()) !== resolve19(homeData) ? readManagedSkillPolicySnapshot(getDataDirReadOnly()) : null;
+  const configuredPolicy = !explicitHome && resolve20(getDataDirReadOnly()) !== resolve20(homeData) ? readManagedSkillPolicySnapshot(getDataDirReadOnly()) : null;
   const policy = homePolicy ?? configuredPolicy;
   const bridge = policy?.value.bridge;
   if (bridge && (typeof bridge.home !== "string" || physicalPath(bridge.home) !== physicalPath(home))) {
@@ -36205,8 +36352,8 @@ function configuredRoots(home, explicitHome) {
       admitBinding(binding);
       continue;
     }
-    const nativeHome = join28(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
-    if (!lstatSync20(nativeHome, { throwIfNoEntry: false }))
+    const nativeHome = join29(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
+    if (!lstatSync21(nativeHome, { throwIfNoEntry: false }))
       continue;
     roots.push(...resolveAgentDiscovery({ home, agent, canonical: physicalPath }).roots);
   }
@@ -36215,22 +36362,22 @@ function configuredRoots(home, explicitHome) {
 function assertPortableAuthoringPath(path, options = {}) {
   if (typeof path !== "string" || !path || path.includes("\x00"))
     throw new Error("Invalid portable authoring path");
-  const lexical = resolve19(path);
+  const lexical = resolve20(path);
   const physical = physicalPath(lexical);
   const candidates = [lexical, physical];
   let native = candidates.map(nativeRootMatch).find(Boolean);
-  const home = resolve19(options.homeDir ?? homedir3());
-  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join28(home, ...parts));
-  defaults.push(join28(home, ".codex/plugins/cache"), join28(home, ".claude/plugins/cache"), join28(home, ".claude/plugins/synced"), join28(home, ".gemini/extensions"));
+  const home = resolve20(options.homeDir ?? homedir3());
+  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join29(home, ...parts));
+  defaults.push(join29(home, ".codex/plugins/cache"), join29(home, ".claude/plugins/cache"), join29(home, ".claude/plugins/synced"), join29(home, ".gemini/extensions"));
   for (const root of defaults) {
-    if (candidates.some((candidate) => contains(resolve19(root), candidate) || contains(physicalPath(root), candidate)))
+    if (candidates.some((candidate) => contains(resolve20(root), candidate) || contains(physicalPath(root), candidate)))
       native ??= root;
   }
   if (native) {
     throw new Error(`Refusing portable Skills authoring below native discovery root '${native}': ${lexical}. Set HASNA_SKILLS_DIR to a private authoring corpus outside native roots.`);
   }
   for (const root of configuredRoots(home, options.homeDir !== undefined)) {
-    if (candidates.some((candidate) => contains(resolve19(root), candidate) || contains(physicalPath(root), candidate))) {
+    if (candidates.some((candidate) => contains(resolve20(root), candidate) || contains(physicalPath(root), candidate))) {
       throw new Error(`Refusing portable Skills authoring below configured native discovery root: ${lexical}`);
     }
   }
@@ -36248,7 +36395,7 @@ var init_authoring_path = __esm(() => {
 // src/lib/portable-skills.ts
 import {
   existsSync as existsSync12,
-  mkdirSync as mkdirSync7,
+  mkdirSync as mkdirSync8,
   mkdtempSync,
   readdirSync as readdirSync8,
   realpathSync as realpathSync8,
@@ -36257,22 +36404,22 @@ import {
   statSync as statSync8,
   writeFileSync as writeFileSync6
 } from "fs";
-import { basename as basename11, dirname as dirname19, isAbsolute as isAbsolute17, join as join29, normalize as normalize3, relative as relative6, resolve as resolve20, sep as sep9 } from "path";
+import { basename as basename11, dirname as dirname20, isAbsolute as isAbsolute19, join as join30, normalize as normalize4, relative as relative6, resolve as resolve21, sep as sep10 } from "path";
 function getPortableSkillsRoot(options = {}) {
   return resolvePortableSkillsRoot(options, true);
 }
 function resolvePortableSkillsRoot(options, migrate) {
   if (options.rootDir)
     return options.rootDir;
-  const appDir = options.homeDir ? join29(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
-  const cache = join29(appDir, SKILLS_CACHE_DIRNAME);
+  const appDir = options.homeDir ? join30(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
+  const cache = join30(appDir, SKILLS_CACHE_DIRNAME);
   if (isOwnerLayoutMigrated(appDir) && safeIsDirectory(cache))
     return cache;
-  const installed = join29(appDir, INSTALLED_SKILLS_DIRNAME);
+  const installed = join30(appDir, INSTALLED_SKILLS_DIRNAME);
   return installed;
 }
 function getPortableSkillPath(name, options = {}) {
-  return join29(getPortableSkillsRoot(options), normalizePortableSkillName(name));
+  return join30(getPortableSkillsRoot(options), normalizePortableSkillName(name));
 }
 function findPortableSkill(name, options = {}) {
   let normalized;
@@ -36298,7 +36445,7 @@ function listPortableSkills(options = {}) {
   for (const entry of readdirSync8(root).sort()) {
     if (entry.startsWith("."))
       continue;
-    const path = join29(root, entry);
+    const path = join30(root, entry);
     if (!safeIsDirectory(path))
       continue;
     try {
@@ -36331,9 +36478,9 @@ function isOfficialSkillName(name) {
 function scaffoldPortableSkill(name, options = {}) {
   const skillName = normalizeNewPortableSkillName(name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join29(readOnlyRoot, skillName), options);
+  assertPortableAuthoringPath(join30(readOnlyRoot, skillName), options);
   const root = getPortableSkillsRoot(options);
-  const skillPath = join29(root, skillName);
+  const skillPath = join30(root, skillName);
   assertPortableAuthoringPath(skillPath, options);
   if (existsSync12(skillPath)) {
     if (!options.overwrite)
@@ -36352,27 +36499,27 @@ function scaffoldPortableSkill(name, options = {}) {
   return { name: skillName, path: skillPath, manifest, created: true };
 }
 function physicalImportPath(path) {
-  let ancestor = resolve20(path);
+  let ancestor = resolve21(path);
   const suffix = [];
   while (!existsSync12(ancestor)) {
     suffix.unshift(basename11(ancestor));
-    ancestor = dirname19(ancestor);
+    ancestor = dirname20(ancestor);
   }
-  return join29(realpathSync8(ancestor), ...suffix);
+  return join30(realpathSync8(ancestor), ...suffix);
 }
 function assertDisjointImportPaths(source, destination) {
   const sourcePath = realpathSync8(source);
   const destinationPath = physicalImportPath(destination);
   const contains2 = (parent, child2) => {
     const path = relative6(parent, child2);
-    return path === "" || !isAbsolute17(path) && path !== ".." && !path.startsWith(`..${sep9}`);
+    return path === "" || !isAbsolute19(path) && path !== ".." && !path.startsWith(`..${sep10}`);
   };
   if (contains2(sourcePath, destinationPath) || contains2(destinationPath, sourcePath)) {
     throw new Error("Source and destination skill directories must not overlap");
   }
 }
 function portPortableSkill(sourcePath, options = {}) {
-  const absoluteSource = normalize3(sourcePath);
+  const absoluteSource = normalize4(sourcePath);
   if (!existsSync12(absoluteSource) || !statSync8(absoluteSource).isDirectory()) {
     throw new Error(`Skill source directory not found: ${sourcePath}`);
   }
@@ -36384,11 +36531,11 @@ function portPortableSkill(sourcePath, options = {}) {
     const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename11(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
-  const readOnlyDestination = join29(resolvePortableSkillsRoot(options, false), skillName);
+  const readOnlyDestination = join30(resolvePortableSkillsRoot(options, false), skillName);
   assertPortableAuthoringPath(readOnlyDestination, options);
   assertDisjointImportPaths(absoluteSource, readOnlyDestination);
   const root = getPortableSkillsRoot(options);
-  const destination = join29(root, skillName);
+  const destination = join30(root, skillName);
   assertPortableAuthoringPath(destination, options);
   assertDisjointImportPaths(absoluteSource, destination);
   if (existsSync12(destination)) {
@@ -36396,7 +36543,7 @@ function portPortableSkill(sourcePath, options = {}) {
       throw new Error(`Skill '${skillName}' already exists at ${destination}`);
     rmSync3(destination, { recursive: true, force: true });
   }
-  mkdirSync7(dirname19(destination), { recursive: true });
+  mkdirSync8(dirname20(destination), { recursive: true });
   copySkillDirectory(absoluteSource, destination);
   const base = {
     ...inferred,
@@ -36420,8 +36567,8 @@ function validatePortableSkillDirectory(name, skillPath) {
   const warnings = [...base.warnings];
   let manifest;
   if (existsSync12(skillPath)) {
-    const skillJsonPath = join29(skillPath, "skill.json");
-    const skillMdPath = join29(skillPath, "SKILL.md");
+    const skillJsonPath = join30(skillPath, "skill.json");
+    const skillMdPath = join30(skillPath, "SKILL.md");
     if (!existsSync12(skillJsonPath) && !existsSync12(skillMdPath)) {
       add3(issues, "portable.manifest_missing", "Missing portable manifest: expected SKILL.md frontmatter and/or skill.json");
     }
@@ -36441,7 +36588,7 @@ function validatePortableSkillDirectory(name, skillPath) {
         add3(issues, "portable.version_missing", "Portable manifest missing version");
       }
       const contractIssues = validatePortableManifestContract(manifest, {
-        strict: existsSync12(join29(skillPath, "skill.json")),
+        strict: existsSync12(join30(skillPath, "skill.json")),
         skillPath
       });
       for (const issue2 of contractIssues)
@@ -36481,7 +36628,7 @@ function validatePortableSkillDirectory(name, skillPath) {
               add3(issues, "portable.command_entry_unsafe", `Command '${command.name}' entry '${command.entry}' must stay inside the skill directory`);
               continue;
             }
-            const entryPath = join29(skillPath, command.entry);
+            const entryPath = join30(skillPath, command.entry);
             if (!existsSync12(entryPath))
               add3(issues, "portable.command_entry_missing", `Command '${command.name}' entry '${command.entry}' is missing`);
             else if (statSync8(entryPath).isDirectory())
@@ -36492,7 +36639,7 @@ function validatePortableSkillDirectory(name, skillPath) {
     } catch (error61) {
       add3(issues, "portable.manifest_invalid", error61.message);
     }
-    if (manifest?.kind !== "instruction" && !existsSync12(join29(skillPath, "AGENTS.md"))) {
+    if (manifest?.kind !== "instruction" && !existsSync12(join30(skillPath, "AGENTS.md"))) {
       add3(issues, "portable.agents_missing", "Missing AGENTS.md with build-out instructions for coding agents");
     }
   }
@@ -36530,9 +36677,9 @@ function safeIsDirectory(path) {
   }
 }
 function isSafeRelativePath2(value) {
-  if (!value.trim() || isAbsolute17(value))
+  if (!value.trim() || isAbsolute19(value))
     return false;
-  const normalized = normalize3(value).replace(/\\/g, "/");
+  const normalized = normalize4(value).replace(/\\/g, "/");
   return normalized !== ".." && !normalized.startsWith("../") && !normalized.includes("/../");
 }
 function add3(target, code, message) {
@@ -36720,7 +36867,7 @@ var init_search = __esm(() => {
 
 // src/lib/registry.ts
 import { existsSync as existsSync13, readFileSync as readFileSync17, readdirSync as readdirSync9 } from "fs";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 function parseSkillMdFrontmatter(content) {
   const match = content.match(/^---\n([\s\S]*?)\n---/);
   if (!match)
@@ -36761,7 +36908,7 @@ function discoverSkillsInDir(dir, source = "custom") {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillMdPath = join30(dir, entry.name, "SKILL.md");
+      const skillMdPath = join31(dir, entry.name, "SKILL.md");
       if (!existsSync13(skillMdPath))
         continue;
       let content;
@@ -36781,7 +36928,7 @@ function discoverSkillsInDir(dir, source = "custom") {
         category: fm.category || "Development Tools",
         tags: fm.tags || [],
         ...fm.kind ? { kind: fm.kind } : {},
-        ...isHostedMetadataSkillDir(join30(dir, entry.name)) ? { serverOwned: true } : {},
+        ...isHostedMetadataSkillDir(join31(dir, entry.name)) ? { serverOwned: true } : {},
         source
       });
     }
@@ -36797,8 +36944,8 @@ function findExtensionSkillPath(name) {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillDir = join30(config2.extensionsDir, entry.name);
-      const skillMdPath = join30(skillDir, "SKILL.md");
+      const skillDir = join31(config2.extensionsDir, entry.name);
+      const skillMdPath = join31(skillDir, "SKILL.md");
       if (!existsSync13(skillMdPath))
         continue;
       let content;
@@ -37215,7 +37362,7 @@ var init_v4 = __esm(() => {
 });
 
 // src/lib/canonical-json.ts
-import { createHash as createHash20 } from "crypto";
+import { createHash as createHash21 } from "crypto";
 function canonicalJson2(value, maximumBytes = 2 * 1024 * 1024) {
   return canonicalJsonAtDepth(value, maximumBytes, 64);
 }
@@ -37259,7 +37406,7 @@ function canonicalJsonAtDepth(value, maximumBytes, maximumDepth) {
   return visit3(value, 0);
 }
 function canonicalJsonSha256(value, maximumBytes) {
-  return createHash20("sha256").update(canonicalJson2(value, maximumBytes)).digest("hex");
+  return createHash21("sha256").update(canonicalJson2(value, maximumBytes)).digest("hex");
 }
 var init_canonical_json = () => {};
 
@@ -37602,7 +37749,7 @@ function invitationFailure(value, status) {
 function invitationInput(action, input2) {
   if (!record4(input2))
     return inputFailure();
-  const keys = {
+  const keys2 = {
     list: ["after"],
     get: ["invitationId"],
     issue: ["email", "role", "idempotencyKey", "confirm"],
@@ -37610,7 +37757,7 @@ function invitationInput(action, input2) {
     revoke: ["invitationId", "expectedGeneration", "confirm"],
     accept: ["invitationId", "token", "confirm"]
   };
-  if (Object.keys(input2).some((key) => !keys[action].includes(key)) || action !== "list" && keys[action].some((key) => !Object.hasOwn(input2, key)))
+  if (Object.keys(input2).some((key) => !keys2[action].includes(key)) || action !== "list" && keys2[action].some((key) => !Object.hasOwn(input2, key)))
     return inputFailure();
   const value = { ...input2 };
   if (action === "list") {
@@ -38009,14 +38156,14 @@ var init_remote_workspace_leave = __esm(() => {
 });
 
 // src/lib/auth-store.ts
-import { chmodSync, existsSync as existsSync14, mkdirSync as mkdirSync8, readFileSync as readFileSync18, renameSync as renameSync4, statSync as statSync9, unlinkSync as unlinkSync4, writeFileSync as writeFileSync7 } from "fs";
-import { basename as basename12, dirname as dirname20, join as join31 } from "path";
+import { chmodSync, existsSync as existsSync14, mkdirSync as mkdirSync9, readFileSync as readFileSync18, renameSync as renameSync4, statSync as statSync9, unlinkSync as unlinkSync4, writeFileSync as writeFileSync7 } from "fs";
+import { basename as basename12, dirname as dirname21, join as join32 } from "path";
 function getAuthFilePath(env = process.env) {
   return skillsCredentialFilePath(env);
 }
 function getIdentityFilePath(env = process.env) {
   const file2 = skillsCredentialFilePath(env);
-  return join31(dirname20(file2), basename12(file2).replace(/^credentials/, "identity") + ".json");
+  return join32(dirname21(file2), basename12(file2).replace(/^credentials/, "identity") + ".json");
 }
 function getApiUrl(action, env = process.env, options = {}) {
   return requireSkillsApiOrigin(action, env, options);
@@ -38098,15 +38245,15 @@ function runQuoteReceipt(value) {
   return value;
 }
 function parseRemoteRunQuote(value) {
-  const quote3 = object5(value);
+  const quote3 = object6(value);
   runQuoteReceipt(quote3.quoteReceipt);
-  const pricing = object5(quote3.pricing);
+  const pricing = object6(quote3.pricing);
   if (typeof quote3.skill !== "string" || !/^[a-z0-9][a-z0-9-]*$/.test(quote3.skill))
     throw new Error("Invalid quoted skill");
   const costCents = creditCount(pricing.costCredits ?? pricing.costCents);
   if (pricing.costCredits !== undefined && pricing.costCents !== undefined && pricing.costCents !== costCents)
     throw new Error("Inconsistent quoted credit count");
-  if (quote3.availability && object5(quote3.availability).status !== "available")
+  if (quote3.availability && object6(quote3.availability).status !== "available")
     throw new Error("This skill is unavailable for remote execution");
   return { ...quote3, skill: quote3.skill, pricing: { ...pricing, costCredits: costCents, costCents, formattedCost: `${costCents} credits` } };
 }
@@ -38115,7 +38262,7 @@ function parseRemoteCreditPacks(value) {
     throw new Error("Invalid credit pack response");
   const ids = new Set;
   return value.map((value2) => {
-    const row = object5(value2);
+    const row = object6(value2);
     const counts = [row.credits, row.creditsCents, row.amountCents].filter((value3) => value3 !== undefined).map(creditCount);
     if (!counts.length || counts[0] === 0 || counts.some((count) => count !== counts[0]))
       throw new Error("Inconsistent credit pack counts");
@@ -38130,7 +38277,7 @@ function parseRemoteCreditPacks(value) {
   });
 }
 function parseRemoteBillingStatus(value) {
-  const row = object5(value);
+  const row = object6(value);
   const counts = [row.creditBalance, row.balanceCents].filter((value2) => value2 !== undefined).map(creditCount);
   if (!counts.length || counts.some((count) => count !== counts[0]))
     throw new Error("Inconsistent credit balance");
@@ -38142,7 +38289,7 @@ function parseRemoteBillingStatus(value) {
   };
 }
 function parseRemoteCheckout(value) {
-  const row = object5(value);
+  const row = object6(value);
   if (typeof row.url !== "string")
     throw new Error("Invalid checkout URL");
   const url2 = new URL(row.url);
@@ -38150,7 +38297,7 @@ function parseRemoteCheckout(value) {
     throw new Error("Invalid checkout URL");
   return { url: row.url };
 }
-function object5(value) {
+function object6(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     throw new Error("Invalid Skills server response");
   return value;
@@ -38244,10 +38391,10 @@ async function readQuoteUnavailableCode(response) {
   let timer;
   let deadlineExceeded = false;
   const expired = Symbol("quote body deadline");
-  const deadline = new Promise((resolve21) => {
+  const deadline = new Promise((resolve22) => {
     timer = setTimeout(() => {
       deadlineExceeded = true;
-      resolve21(expired);
+      resolve22(expired);
       reader.cancel().catch(() => {});
     }, 1500);
   });
@@ -39390,8 +39537,8 @@ function invitationEmailIds(invitationId, challengeId) {
   return { invitationId, challengeId };
 }
 function invitationEmailInput(action, input2) {
-  const keys = ["invitationId", "token", "challengeId", "confirm", ...action === "accept" ? ["code"] : []];
-  if (!record8(input2) || Object.keys(input2).length !== keys.length || keys.some((key) => !Object.hasOwn(input2, key)))
+  const keys2 = ["invitationId", "token", "challengeId", "confirm", ...action === "accept" ? ["code"] : []];
+  if (!record8(input2) || Object.keys(input2).length !== keys2.length || keys2.some((key) => !Object.hasOwn(input2, key)))
     throw new InvitationEmailInputError;
   const value = { ...input2 };
   const ids = invitationEmailIds(value.invitationId, value.challengeId);
@@ -39485,7 +39632,7 @@ var init_remote_invitation_recovery = __esm(() => {
 });
 
 // src/lib/remote-private-publications.ts
-import { createHash as createHash21 } from "crypto";
+import { createHash as createHash22 } from "crypto";
 function checkedPublicationDeclaration(value) {
   if (!exact(value, ["idempotencyKey", "version", "expectedCurrentVersionId", "manifestText", "archiveSha256", "archiveByteSize"]) || !publicationUuid(value.idempotencyKey) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || typeof value.manifestText !== "string" || Buffer.byteLength(value.manifestText) > 16384 || !hash3(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES)
     return bad();
@@ -39730,12 +39877,12 @@ class RemotePrivatePublicationsClient {
       previous = view;
       if (!["queued", "verifying"].includes(view.state) || Date.now() >= until)
         return view;
-      await new Promise((resolve21) => {
+      await new Promise((resolve22) => {
         const timer = setTimeout(done, Math.min(1000, until - Date.now()));
         function done() {
           clearTimeout(timer);
           options.signal?.removeEventListener("abort", done);
-          resolve21();
+          resolve22();
         }
         options.signal?.addEventListener("abort", done, { once: true });
       });
@@ -39746,7 +39893,7 @@ var PRIVATE_PUBLICATION_MAX_BYTES, failures2, PrivatePublicationError, bad = ()
   throw new PrivatePublicationError("INVALID_PUBLICATION_INPUT", "Invalid publication input or recovery data.");
 }, invalid4 = () => {
   throw new PrivatePublicationError("INVALID_PUBLICATION_RESPONSE", "The server returned an invalid publication result.");
-}, publicationUuid = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), hash3 = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), record9 = (v) => !!v && typeof v === "object" && !Array.isArray(v), exact = (v, keys) => record9(v) && Object.keys(v).sort().join(",") === keys.sort().join(","), date5 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v)), publicationSha256 = (bytes) => createHash21("sha256").update(bytes).digest("hex");
+}, publicationUuid = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), hash3 = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), record9 = (v) => !!v && typeof v === "object" && !Array.isArray(v), exact = (v, keys2) => record9(v) && Object.keys(v).sort().join(",") === keys2.sort().join(","), date5 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v)), publicationSha256 = (bytes) => createHash22("sha256").update(bytes).digest("hex");
 var init_remote_private_publications = __esm(() => {
   init_fleet_credentials();
   init_remote_workspace_selection();
@@ -40023,10 +40170,10 @@ var init_remote_auth = __esm(() => {
 });
 
 // src/lib/workspace-profile.ts
-import { constants as constants13, closeSync as closeSync15, fstatSync as fstatSync15, lstatSync as lstatSync21, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync2, openSync as openSync15, readFileSync as readFileSync19, renameSync as renameSync5, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "fs";
+import { constants as constants14, closeSync as closeSync16, fstatSync as fstatSync16, lstatSync as lstatSync22, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync2, openSync as openSync16, readFileSync as readFileSync19, renameSync as renameSync5, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "fs";
 function stat2(path) {
   try {
-    return lstatSync21(path);
+    return lstatSync22(path);
   } catch (error61) {
     if (error61.code === "ENOENT")
       return null;
@@ -40036,14 +40183,14 @@ function stat2(path) {
 function safeText(file2) {
   if (stat2(file2) === null)
     return null;
-  const fd = openSync15(file2, constants13.O_RDONLY | constants13.O_NOFOLLOW | constants13.O_NONBLOCK);
+  const fd = openSync16(file2, constants14.O_RDONLY | constants14.O_NOFOLLOW | constants14.O_NONBLOCK);
   try {
-    const s = fstatSync15(fd);
+    const s = fstatSync16(fd);
     if (!s.isFile() || s.size > 65536 || ![256, 384].includes(s.mode & 4095) || process.getuid && s.uid !== process.getuid())
       return fail("The selected profile must use bounded owner-only regular files.");
     return readFileSync19(fd, "utf8");
   } finally {
-    closeSync15(fd);
+    closeSync16(fd);
   }
 }
 function checkIdentityMetadata(file2, identity3) {
@@ -40255,8 +40402,8 @@ var init_recurring_customer = __esm(() => {
 });
 
 // src/lib/recurring-recovery.ts
-import { constants as constants14, closeSync as closeSync16, fsyncSync as fsyncSync4, fstatSync as fstatSync16, lstatSync as lstatSync22, mkdirSync as mkdirSync10, openSync as openSync16, readSync as readSync10, realpathSync as realpathSync9, renameSync as renameSync6, unlinkSync as unlinkSync5, writeFileSync as writeFileSync9 } from "fs";
-import { dirname as dirname21, isAbsolute as isAbsolute18, join as join32, resolve as resolve21 } from "path";
+import { constants as constants15, closeSync as closeSync17, fsyncSync as fsyncSync5, fstatSync as fstatSync17, lstatSync as lstatSync23, mkdirSync as mkdirSync11, openSync as openSync17, readSync as readSync11, realpathSync as realpathSync9, renameSync as renameSync6, unlinkSync as unlinkSync5, writeFileSync as writeFileSync9 } from "fs";
+import { dirname as dirname22, isAbsolute as isAbsolute20, join as join33, resolve as resolve22 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 
 class RecoveryOwner {
@@ -40264,14 +40411,14 @@ class RecoveryOwner {
   parents = [];
   constructor(directory) {
     this.directory = directory;
-    if (!isAbsolute18(directory) || resolve21(directory) !== directory || realpathSync9(directory) !== directory)
+    if (!isAbsolute20(directory) || resolve22(directory) !== directory || realpathSync9(directory) !== directory)
       invalid5();
-    for (let path = directory;; path = dirname21(path)) {
-      const stat3 = lstatSync22(path);
+    for (let path = directory;; path = dirname22(path)) {
+      const stat3 = lstatSync23(path);
       if (!stat3.isDirectory() || stat3.isSymbolicLink())
         invalid5();
       this.parents.push({ path, dev: stat3.dev, ino: stat3.ino });
-      if (path === dirname21(path))
+      if (path === dirname22(path))
         break;
     }
     this.assert();
@@ -40280,59 +40427,59 @@ class RecoveryOwner {
     if (realpathSync9(this.directory) !== this.directory)
       invalid5();
     for (const prior of this.parents) {
-      const now = lstatSync22(prior.path);
+      const now = lstatSync23(prior.path);
       if (!now.isDirectory() || now.isSymbolicLink() || now.dev !== prior.dev || now.ino !== prior.ino)
         invalid5();
     }
-    const own2 = lstatSync22(this.directory);
+    const own2 = lstatSync23(this.directory);
     if ((own2.mode & 511) !== 448 || (own2.mode & 3584) !== 0 || process.getuid && own2.uid !== process.getuid())
       invalid5();
   }
   read(name) {
     this.assert();
-    const fd = openSync16(join32(this.directory, name), constants14.O_RDONLY | constants14.O_NOFOLLOW | constants14.O_NONBLOCK);
+    const fd = openSync17(join33(this.directory, name), constants15.O_RDONLY | constants15.O_NOFOLLOW | constants15.O_NONBLOCK);
     try {
-      const before = fstatSync16(fd);
+      const before = fstatSync17(fd);
       if (!before.isFile() || before.nlink !== 1 || (before.mode & 4095) !== 384 || before.size < 1 || before.size > 8192 || process.getuid && before.uid !== process.getuid())
         invalid5();
       const bytes = Buffer.alloc(before.size + 1);
       let size = 0;
       while (size < bytes.length) {
-        const n2 = readSync10(fd, bytes, size, bytes.length - size, size);
+        const n2 = readSync11(fd, bytes, size, bytes.length - size, size);
         if (!n2)
           break;
         size += n2;
       }
-      const after = fstatSync16(fd), path = lstatSync22(join32(this.directory, name));
+      const after = fstatSync17(fd), path = lstatSync23(join33(this.directory, name));
       if (size !== before.size || after.size !== before.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs || path.dev !== before.dev || path.ino !== before.ino || !path.isFile() || path.isSymbolicLink())
         invalid5();
       this.assert();
       return new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, size));
     } finally {
-      closeSync16(fd);
+      closeSync17(fd);
     }
   }
   write(name, value) {
     this.assert();
     const bytes = canonicalJson2(value, 8192) + `
 `;
-    const fd = openSync16(join32(this.directory, name), constants14.O_WRONLY | constants14.O_CREAT | constants14.O_EXCL | constants14.O_NOFOLLOW, 384);
+    const fd = openSync17(join33(this.directory, name), constants15.O_WRONLY | constants15.O_CREAT | constants15.O_EXCL | constants15.O_NOFOLLOW, 384);
     try {
       writeFileSync9(fd, bytes);
-      fsyncSync4(fd);
+      fsyncSync5(fd);
     } finally {
-      closeSync16(fd);
+      closeSync17(fd);
     }
     this.assert();
     this.sync();
   }
   sync() {
     this.assert();
-    const fd = openSync16(this.directory, constants14.O_RDONLY | constants14.O_NOFOLLOW);
+    const fd = openSync17(this.directory, constants15.O_RDONLY | constants15.O_NOFOLLOW);
     try {
-      fsyncSync4(fd);
+      fsyncSync5(fd);
     } finally {
-      closeSync16(fd);
+      closeSync17(fd);
     }
   }
   saveState(state, expected) {
@@ -40343,30 +40490,30 @@ class RecoveryOwner {
     if (this.read("state.json") !== expected)
       invalid5();
     this.assert();
-    renameSync6(join32(this.directory, name), join32(this.directory, "state.json"));
+    renameSync6(join33(this.directory, name), join33(this.directory, "state.json"));
     this.sync();
   }
   async locked(action) {
     this.assert();
     let fd;
     try {
-      fd = openSync16(join32(this.directory, "operation.lock"), constants14.O_WRONLY | constants14.O_CREAT | constants14.O_EXCL | constants14.O_NOFOLLOW, 384);
+      fd = openSync17(join33(this.directory, "operation.lock"), constants15.O_WRONLY | constants15.O_CREAT | constants15.O_EXCL | constants15.O_NOFOLLOW, 384);
     } catch {
       throw new RecurringCustomerError("RECURRING_RECOVERY_BUSY", "Recovery is locked. Confirm the original process has stopped before explicitly reconciling the retained lock; no request was retried.");
     }
-    const owner2 = fstatSync16(fd);
+    const owner2 = fstatSync17(fd);
     try {
       writeFileSync9(fd, JSON.stringify({ pid: process.pid }));
-      fsyncSync4(fd);
+      fsyncSync5(fd);
       this.sync();
       return await action();
     } finally {
-      closeSync16(fd);
+      closeSync17(fd);
       this.assert();
-      const now = lstatSync22(join32(this.directory, "operation.lock"));
+      const now = lstatSync23(join33(this.directory, "operation.lock"));
       if (owner2.dev !== now.dev || owner2.ino !== now.ino || !now.isFile() || now.isSymbolicLink())
         invalid5();
-      unlinkSync5(join32(this.directory, "operation.lock"));
+      unlinkSync5(join33(this.directory, "operation.lock"));
       this.sync();
     }
   }
@@ -40399,9 +40546,9 @@ function base(customer, organizationId) {
   };
 }
 function create(directory, intent) {
-  if (!isAbsolute18(directory) || resolve21(directory) !== directory || realpathSync9(dirname21(directory)) !== dirname21(directory))
+  if (!isAbsolute20(directory) || resolve22(directory) !== directory || realpathSync9(dirname22(directory)) !== dirname22(directory))
     invalid5();
-  mkdirSync10(directory, { mode: 448 });
+  mkdirSync11(directory, { mode: 448 });
   const owner2 = new RecoveryOwner(directory), checked = intentSchema.parse(intent), intentSha256 = canonicalJsonSha256(checked);
   owner2.write(`intent-${intentSha256}.json`, checked);
   owner2.write("state.json", { contractVersion: 1, intentSha256, phase: "prepared", consentId: null });
@@ -40524,7 +40671,7 @@ async function continueRecurringRecovery(customer, directory, options) {
     throw error61;
   }
 }
-var uuid12, sha4, common, intentSchema, stateSchema, invalid5 = () => {
+var uuid12, sha5, common, intentSchema, stateSchema, invalid5 = () => {
   throw new RecurringCustomerError("RECURRING_RECOVERY_INVALID", "The original recovery directory or record is invalid or changed. Preserve it; do not create a replacement activation automatically.");
 };
 var init_recurring_recovery = __esm(() => {
@@ -40534,7 +40681,7 @@ var init_recurring_recovery = __esm(() => {
   init_remote_recurring();
   init_recurring_customer();
   uuid12 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
-  sha4 = exports_external.string().regex(/^[a-f0-9]{64}$/);
+  sha5 = exports_external.string().regex(/^[a-f0-9]{64}$/);
   common = exports_external.object({
     contractVersion: exports_external.literal(1),
     apiOrigin: exports_external.string().min(1).max(4096),
@@ -40547,7 +40694,7 @@ var init_recurring_recovery = __esm(() => {
     common.extend({
       operation: exports_external.literal("activate"),
       draftId: uuid12,
-      termsSha256: sha4,
+      termsSha256: sha5,
       approvalDeadline: exports_external.string().datetime(),
       approval: recurringActivationSchema
     }).strict(),
@@ -40555,14 +40702,14 @@ var init_recurring_recovery = __esm(() => {
   ]);
   stateSchema = exports_external.object({
     contractVersion: exports_external.literal(1),
-    intentSha256: sha4,
+    intentSha256: sha5,
     phase: exports_external.enum(["prepared", "pending", "observed"]),
     consentId: uuid12.nullable()
   }).strict();
 });
 
 // src/lib/recurring-surface.ts
-import { isAbsolute as isAbsolute19 } from "path";
+import { isAbsolute as isAbsolute21 } from "path";
 function recurringMcpSchema(action) {
   return action === "activate" ? recurringSurfaceSchemas.activate.extend({ code, confirm: exports_external.literal(true) }) : recurringSurfaceSchemas[action];
 }
@@ -40667,7 +40814,7 @@ var init_recurring_surface = __esm(() => {
   uuid13 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
   context = { userId: uuid13.optional(), membershipId: uuid13.optional() };
   page2 = { limit: exports_external.number().int().min(1).max(100).optional(), cursor: exports_external.string().min(1).max(2048).optional() };
-  directory = exports_external.string().max(4096).refine(isAbsolute19, "Use an absolute recovery directory");
+  directory = exports_external.string().max(4096).refine(isAbsolute21, "Use an absolute recovery directory");
   email4 = exports_external.string().trim().toLowerCase().email().max(254);
   code = exports_external.string().regex(/^\d{6}$/);
   recurringSurfaceSchemas = {
@@ -42496,21 +42643,21 @@ var init_credential_state = __esm(() => {
 });
 
 // src/lib/run-state.ts
-import { createHash as createHash22, randomBytes } from "crypto";
-import { existsSync as existsSync15, mkdirSync as mkdirSync11, readFileSync as readFileSync20, readdirSync as readdirSync10, statSync as statSync10, writeFileSync as writeFileSync10 } from "fs";
-import { extname, join as join33, relative as relative7 } from "path";
+import { createHash as createHash23, randomBytes } from "crypto";
+import { existsSync as existsSync15, mkdirSync as mkdirSync12, readFileSync as readFileSync20, readdirSync as readdirSync10, statSync as statSync10, writeFileSync as writeFileSync10 } from "fs";
+import { extname, join as join34, relative as relative7 } from "path";
 function createSkillRun(params, targetDir = process.cwd()) {
   const now = new Date;
   const id = createRunId(now);
   const day = now.toISOString().slice(0, 10);
   const skillName = normalizeSkillName(params.skill);
   const root = getProjectStateDir(targetDir);
-  const runDir = join33(root, "runs", day, id);
-  const logsDir = join33(runDir, "logs");
-  const exportDir = join33(root, "exports", skillName, id);
-  mkdirSync11(logsDir, { recursive: true });
-  mkdirSync11(exportDir, { recursive: true });
-  mkdirSync11(join33(root, "tmp"), { recursive: true });
+  const runDir = join34(root, "runs", day, id);
+  const logsDir = join34(runDir, "logs");
+  const exportDir = join34(root, "exports", skillName, id);
+  mkdirSync12(logsDir, { recursive: true });
+  mkdirSync12(exportDir, { recursive: true });
+  mkdirSync12(join34(root, "tmp"), { recursive: true });
   const record10 = {
     id,
     skill: skillName,
@@ -42562,22 +42709,22 @@ function updateSkillRun(context2, patch) {
   return context2.record;
 }
 function writeRunLogs(context2, stdout = "", stderr = "") {
-  writeFileSync10(join33(context2.logsDir, "stdout.log"), stdout);
-  writeFileSync10(join33(context2.logsDir, "stderr.log"), stderr);
+  writeFileSync10(join34(context2.logsDir, "stdout.log"), stdout);
+  writeFileSync10(join34(context2.logsDir, "stderr.log"), stderr);
 }
 function appendRunEvent(context2, event, data = {}) {
   const line = JSON.stringify({ ts: new Date().toISOString(), event, ...data }) + `
 `;
-  const path = join33(context2.runDir, "events.ndjson");
+  const path = join34(context2.runDir, "events.ndjson");
   const previous = existsSync15(path) ? readFileSync20(path, "utf-8") : "";
   writeFileSync10(path, previous + line);
 }
 function findSkillRun(runId, targetDir = process.cwd()) {
-  const runsRoot = join33(getProjectStateDir(targetDir), "runs");
+  const runsRoot = join34(getProjectStateDir(targetDir), "runs");
   if (!existsSync15(runsRoot))
     return null;
   for (const day of readdirSync10(runsRoot)) {
-    const record10 = readRunRecord(join33(runsRoot, day, runId));
+    const record10 = readRunRecord(join34(runsRoot, day, runId));
     if (record10)
       return record10;
   }
@@ -42594,11 +42741,11 @@ function skillRunEnv(context2) {
   };
 }
 function writeRunRecord(context2) {
-  writeFileSync10(join33(context2.runDir, "run.json"), JSON.stringify(context2.record, null, 2) + `
+  writeFileSync10(join34(context2.runDir, "run.json"), JSON.stringify(context2.record, null, 2) + `
 `);
 }
 function writeArtifactsManifest(context2, artifacts) {
-  writeFileSync10(join33(context2.runDir, "artifacts.json"), JSON.stringify({ runId: context2.record.id, artifacts }, null, 2) + `
+  writeFileSync10(join34(context2.runDir, "artifacts.json"), JSON.stringify({ runId: context2.record.id, artifacts }, null, 2) + `
 `);
 }
 function collectRunArtifacts(context2) {
@@ -42611,14 +42758,14 @@ function collectRunArtifacts(context2) {
     artifacts.push({
       path: toProjectRelative(context2.targetDir, path),
       mime: mimeForPath(path),
-      sha256: createHash22("sha256").update(bytes).digest("hex"),
+      sha256: createHash23("sha256").update(bytes).digest("hex"),
       sizeBytes: stat3.size
     });
   }
   return artifacts.sort((a, b) => a.path.localeCompare(b.path));
 }
 function readRunRecord(runDir) {
-  const path = join33(runDir, "run.json");
+  const path = join34(runDir, "run.json");
   if (!existsSync15(path))
     return null;
   try {
@@ -42630,7 +42777,7 @@ function readRunRecord(runDir) {
 function walkFiles(dir) {
   const files = [];
   for (const entry of readdirSync10(dir)) {
-    const full = join33(dir, entry);
+    const full = join34(dir, entry);
     if (statSync10(full).isDirectory())
       files.push(...walkFiles(full));
     else
@@ -42883,11 +43030,11 @@ var init_cloud_executions = __esm(() => {
 // node_modules/@hasna/secrets/dist/sdk.js
 import { isIP as isIP2 } from "net";
 import { spawnSync as spawnSync5 } from "child_process";
-import { closeSync as closeSync17, fstatSync as fstatSync17, openSync as openSync17, readFileSync as readFileSync21 } from "fs";
+import { closeSync as closeSync18, fstatSync as fstatSync18, openSync as openSync18, readFileSync as readFileSync21 } from "fs";
 import { O_NOFOLLOW as O_NOFOLLOW3, O_NONBLOCK as O_NONBLOCK3, O_RDONLY as O_RDONLY3 } from "constants";
 import { createRequire as createRequire2 } from "module";
 import { hostname as osHostname2 } from "os";
-import { isAbsolute as isAbsolute20, join as join34 } from "path";
+import { isAbsolute as isAbsolute22, join as join35 } from "path";
 import { createRequire as createRequire22 } from "module";
 function envToken2(name) {
   return name.toUpperCase().replace(/-/g, "_");
@@ -42911,21 +43058,21 @@ function homeDir2(env) {
 }
 function absoluteOverride2(env, key) {
   const value = env[key]?.trim();
-  return value && isAbsolute20(value) ? value : null;
+  return value && isAbsolute22(value) ? value : null;
 }
 function hasnaHomeDir2(env) {
   const override = absoluteOverride2(env, HASNA_HOME_ENV_KEY2);
   if (override)
     return override;
   const home = homeDir2(env);
-  return home ? join34(home, HASNA_HOME_DIR2) : null;
+  return home ? join35(home, HASNA_HOME_DIR2) : null;
 }
 function appConfigDir2(name, env) {
   const configRoot = absoluteOverride2(env, HASNA_CONFIG_HOME_ENV_KEY2);
   if (configRoot)
-    return join34(configRoot, name);
+    return join35(configRoot, name);
   const root = hasnaHomeDir2(env);
-  return root ? join34(root, name, CONFIG_SUBDIR2) : null;
+  return root ? join35(root, name, CONFIG_SUBDIR2) : null;
 }
 function credentialDiskSourceList2(name, env, profile = null) {
   if (!SAFE_APP_SLUG2.test(name))
@@ -42934,7 +43081,7 @@ function credentialDiskSourceList2(name, env, profile = null) {
   if (!directory2)
     return [];
   const file2 = profile ? `${CREDENTIALS_FILE2}-${profile}` : CREDENTIALS_FILE2;
-  return [{ path: join34(directory2, file2), tier: "disk" }];
+  return [{ path: join35(directory2, file2), tier: "disk" }];
 }
 function credentialDiskSources2(name, env) {
   return credentialDiskSourceList2(name, env, null).map((s) => s.path);
@@ -42988,7 +43135,7 @@ function readAppConfigFile2(path) {
   };
   let fd = -1;
   try {
-    fd = openSync17(path, O_RDONLY3 | O_NOFOLLOW3 | O_NONBLOCK3);
+    fd = openSync18(path, O_RDONLY3 | O_NOFOLLOW3 | O_NONBLOCK3);
   } catch (error61) {
     const code2 = error61.code;
     if (code2 === "ENOENT" || code2 === "ENOTDIR")
@@ -42998,7 +43145,7 @@ function readAppConfigFile2(path) {
     unsafe(`the path could not be opened (${code2 ?? "unknown error"})`);
   }
   try {
-    const before = fstatSync17(fd);
+    const before = fstatSync18(fd);
     if (!before.isFile())
       unsafe("the path is not a regular file");
     if (!configFileModeAllowed2(before.mode)) {
@@ -43010,14 +43157,14 @@ function readAppConfigFile2(path) {
     if (before.size > MAX_CREDENTIAL_FILE_BYTES2)
       unsafe("the file exceeds the size limit");
     const bytes = readFileSync21(fd);
-    const after = fstatSync17(fd);
+    const after = fstatSync18(fd);
     if (!configFileReadsCoherent2(before, after)) {
       unsafe("the file changed while being read");
     }
     return parseEnvFile2(bytes.toString("utf8"));
   } finally {
     if (fd !== -1)
-      closeSync17(fd);
+      closeSync18(fd);
   }
 }
 function readCredentialFile2(path, apiKeyKeys) {
@@ -43035,8 +43182,8 @@ function readCredentialFile2(path, apiKeyKeys) {
   }
   return values[0] ?? null;
 }
-function appConfigDiskValue2(name, env, keys) {
-  const wanted = keys.filter((key) => !CREDENTIAL_SHAPED_KEY2.test(key));
+function appConfigDiskValue2(name, env, keys2) {
+  const wanted = keys2.filter((key) => !CREDENTIAL_SHAPED_KEY2.test(key));
   if (wanted.length === 0)
     return null;
   for (const path of credentialDiskSources2(name, env)) {
@@ -43143,8 +43290,8 @@ function validateAndSealResolvedCredential(appName, credential) {
     ...credential.pointerVaultKey !== undefined ? { pointerVaultKey: credential.pointerVaultKey } : {}
   });
 }
-function firstEnvValue2(env, keys) {
-  for (const key of keys) {
+function firstEnvValue2(env, keys2) {
+  for (const key of keys2) {
     if (!Object.prototype.hasOwnProperty.call(env, key))
       continue;
     const value = env[key]?.trim();
@@ -43221,12 +43368,12 @@ function keychainConfigValue2(name, env, options = {}) {
   return readKeychainItem2(name, env, "api-url", options);
 }
 function snapshotClientEnvironment2(name, env) {
-  const keys = clientTransportEnvKeys2(name);
+  const keys2 = clientTransportEnvKeys2(name);
   const ambient = isAmbientEnvironment2(env);
   const snapshot2 = Object.create(null);
   for (const key of [
-    ...keys.apiUrlKeys,
-    ...keys.apiKeyKeys,
+    ...keys2.apiUrlKeys,
+    ...keys2.apiKeyKeys,
     credentialOverrideEnvKey2(name),
     credentialPointerEnvKey2(name),
     CREDENTIAL_PROFILE_ENV_KEY2,
@@ -43553,8 +43700,8 @@ function toV1BaseUrl2(apiUrl) {
 }
 function resolveClientTransportSnapshot(name, env = process.env, options = {}) {
   env = snapshotClientEnvironment2(name, env);
-  const keys = clientTransportEnvKeys2(name);
-  const definedUrlEntries = keys.apiUrlKeys.filter((key) => Object.prototype.hasOwnProperty.call(env, key) && env[key] !== undefined).map((key) => ({ key, raw: String(env[key]) }));
+  const keys2 = clientTransportEnvKeys2(name);
+  const definedUrlEntries = keys2.apiUrlKeys.filter((key) => Object.prototype.hasOwnProperty.call(env, key) && env[key] !== undefined).map((key) => ({ key, raw: String(env[key]) }));
   const blankUrl = definedUrlEntries.find((entry) => entry.raw.trim().length === 0);
   if (blankUrl) {
     throw new ClientTransportConfigurationError2(name, `${blankUrl.key} is set but blank; public clients require an explicit HTTPS API URL and never select local storage.`, [blankUrl.key]);
@@ -43569,7 +43716,7 @@ function resolveClientTransportSnapshot(name, env = process.env, options = {}) {
   }
   const envUrlHit = usableUrlEntries[0] ?? null;
   const keychainUrlHit = keychainConfigValue2(name, env, options.credentials?.keychain);
-  const diskConfigUrlHit = appConfigDiskValue2(name, env, keys.apiUrlKeys);
+  const diskConfigUrlHit = appConfigDiskValue2(name, env, keys2.apiUrlKeys);
   if (diskConfigUrlHit?.unusable) {
     throw new ClientTransportConfigurationError2(name, `${diskConfigUrlHit.key} in ${diskConfigUrlHit.path} is declared but blank or malformed; public clients require a valid HTTPS service authority.`, [diskConfigUrlHit.path]);
   }
@@ -43585,14 +43732,14 @@ function resolveClientTransportSnapshot(name, env = process.env, options = {}) {
   }
   const warnings = [];
   if (configuredUrl && !envUrlHit) {
-    warnings.push(`No ${keys.apiUrlKeys[0]} in the environment; the server URL in ${configuredUrl.key} was used, so this client connects to the server. ` + `Keep that entry aligned with the intended service authority.`);
+    warnings.push(`No ${keys2.apiUrlKeys[0]} in the environment; the server URL in ${configuredUrl.key} was used, so this client connects to the server. ` + `Keep that entry aligned with the intended service authority.`);
   }
   const credential = resolveCredential2(name, env, options.credentials);
   if (!credential) {
     const diskHint = credentialDiskSourcesForMessage(name, env);
-    const lead = configuredUrl ? `${configuredUrl.key} selects the HTTP server for '${name}', but no API key could be resolved` : `${keys.apiUrlKeys[0]} is not set and no API key could be resolved for '${name}'; a credential is required before the default fleet gateway authority applies`;
-    warnings.push(`${lead}; refusing to create an unauthenticated client \u2014 public clients never fall back to SQLite or another local store. ` + `Looked in the Keychain (macOS only), then for a credential file at ${diskHint}, then for ${keys.apiKeyKeys[0]} in the environment.`);
-    throw new ClientTransportConfigurationError2(name, warnings.join(" "), [configuredUrl?.key ?? keys.apiUrlKeys[0]]);
+    const lead = configuredUrl ? `${configuredUrl.key} selects the HTTP server for '${name}', but no API key could be resolved` : `${keys2.apiUrlKeys[0]} is not set and no API key could be resolved for '${name}'; a credential is required before the default fleet gateway authority applies`;
+    warnings.push(`${lead}; refusing to create an unauthenticated client \u2014 public clients never fall back to SQLite or another local store. ` + `Looked in the Keychain (macOS only), then for a credential file at ${diskHint}, then for ${keys2.apiKeyKeys[0]} in the environment.`);
+    throw new ClientTransportConfigurationError2(name, warnings.join(" "), [configuredUrl?.key ?? keys2.apiUrlKeys[0]]);
   }
   if (credential.warning)
     warnings.push(credential.warning);
@@ -43604,7 +43751,7 @@ function resolveClientTransportSnapshot(name, env = process.env, options = {}) {
       urlHit = { key: DEFAULT_AUTHORITY_SOURCE, value: defaultFleetGatewayBaseUrl2(name) };
     } catch (error61) {
       const message = error61 instanceof Error ? error61.message : String(error61);
-      throw new ClientTransportConfigurationError2(name, `No ${keys.apiUrlKeys[0]} is configured and the default fleet gateway authority cannot be composed for '${name}': ${message}`, [keys.apiUrlKeys[0]]);
+      throw new ClientTransportConfigurationError2(name, `No ${keys2.apiUrlKeys[0]} is configured and the default fleet gateway authority cannot be composed for '${name}': ${message}`, [keys2.apiUrlKeys[0]]);
     }
   }
   const apiUrlSource = urlHit.key;
@@ -44048,7 +44195,7 @@ function createSecretsClientFromEnv(env = process.env, overrides = {}) {
   });
   return new SecretsClient({ ...clientOverrides, baseUrl, apiKey });
 }
-var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), CREDENTIAL_PROFILE_ENV_KEY2 = "HASNA_PROFILE", CredentialResolutionError2, CredentialFileUnsafeError2, HASNA_HOME_ENV_KEY2 = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY2 = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY2 = "HASNA_STATION", HASNA_HOME_DIR2 = ".hasna", CONFIG_SUBDIR2 = "config", CREDENTIALS_FILE2 = "credentials", KEYCHAIN_SECURITY_BIN2 = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX2 = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS2 = 44, KEYCHAIN_SPAWN_TIMEOUT_MS2 = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG2, SAFE_PROFILE2, ILLEGAL_IN_HEADER_VALUE2, VAULT_POINTER_SHAPE2, CREDENTIAL_SHAPED_KEY2, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE = "caller-supplied CredentialProvider", AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN2 = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN2, DNS_LABEL_PATTERN2, ClientTransportConfigurationError2, HasnaHttpError, DEFAULT_RETRY_STATUSES, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2, defaultSleep = (ms) => new Promise((resolve22) => setTimeout(resolve22, ms)), init_transport2, MAX_CREDENTIAL_FILE_BYTES22, INSPECT_CUSTOM22, CREDENTIAL_SEAL22, AMBIENT_ENVIRONMENT22, SECRETS_PACKAGE_SPECIFIER2, requireSecretsSdk22, IDEMPOTENT_METHODS22, AUTHORITY_OVERRIDE_HEADERS22, init_storage, PATHS_RESOLVER_APP_SLUG_RE2, SQLITE_SIDECAR_FILES, LEGACY_SERVICE_FILES, init_data_dir, SecretsTestIsolationError, TEST_ENTRYPOINT_RE, init_test_isolation, init_client, ApiError;
+var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), CREDENTIAL_PROFILE_ENV_KEY2 = "HASNA_PROFILE", CredentialResolutionError2, CredentialFileUnsafeError2, HASNA_HOME_ENV_KEY2 = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY2 = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY2 = "HASNA_STATION", HASNA_HOME_DIR2 = ".hasna", CONFIG_SUBDIR2 = "config", CREDENTIALS_FILE2 = "credentials", KEYCHAIN_SECURITY_BIN2 = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX2 = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS2 = 44, KEYCHAIN_SPAWN_TIMEOUT_MS2 = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG2, SAFE_PROFILE2, ILLEGAL_IN_HEADER_VALUE2, VAULT_POINTER_SHAPE2, CREDENTIAL_SHAPED_KEY2, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE = "caller-supplied CredentialProvider", AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN2 = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN2, DNS_LABEL_PATTERN2, ClientTransportConfigurationError2, HasnaHttpError, DEFAULT_RETRY_STATUSES, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2, defaultSleep = (ms) => new Promise((resolve23) => setTimeout(resolve23, ms)), init_transport2, MAX_CREDENTIAL_FILE_BYTES22, INSPECT_CUSTOM22, CREDENTIAL_SEAL22, AMBIENT_ENVIRONMENT22, SECRETS_PACKAGE_SPECIFIER2, requireSecretsSdk22, IDEMPOTENT_METHODS22, AUTHORITY_OVERRIDE_HEADERS22, init_storage, PATHS_RESOLVER_APP_SLUG_RE2, SQLITE_SIDECAR_FILES, LEGACY_SERVICE_FILES, init_data_dir, SecretsTestIsolationError, TEST_ENTRYPOINT_RE, init_test_isolation, init_client, ApiError;
 var init_sdk = __esm(() => {
   init_transport2 = __esm2(() => {
     CredentialResolutionError2 = class CredentialResolutionError3 extends Error {
@@ -44183,14 +44330,14 @@ var init_sdk = __esm(() => {
 });
 
 // src/lib/execution-secrets.ts
-import { constants as constants15, closeSync as closeSync18, fstatSync as fstatSync18, openSync as openSync18, readSync as readSync11, realpathSync as realpathSync10 } from "fs";
+import { constants as constants16, closeSync as closeSync19, fstatSync as fstatSync19, openSync as openSync19, readSync as readSync12, realpathSync as realpathSync10 } from "fs";
 import { hostname as stationHostname } from "os";
 function selectedSecretBindingsTemplate(scope, names, createClient = createSecretsClientFromEnv) {
   let secretsAuthority;
   try {
     secretsAuthority = createClient().baseUrl;
   } catch {
-    return refuse2("LOCAL_SECRET_UNAVAILABLE", "Configure the Secrets CLI authority and authentication before preparing execution bindings.");
+    return refuse4("LOCAL_SECRET_UNAVAILABLE", "Configure the Secrets CLI authority and authentication before preparing execution bindings.");
   }
   const { authority, workspaceId, profileRevision, slug: slug2, version: version2, bundleDigest } = scope.selection;
   return {
@@ -44201,14 +44348,14 @@ function selectedSecretBindingsTemplate(scope, names, createClient = createSecre
     bindings: Object.fromEntries(names.map((name) => [name, ""]))
   };
 }
-function refuse2(code2, message) {
+function refuse4(code2, message) {
   throw new SkillSelectionError(code2, message);
 }
 function record10(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
-function exactKeys2(value, keys) {
-  return Object.keys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
+function exactKeys2(value, keys2) {
+  return Object.keys(value).length === keys2.length && keys2.every((key) => Object.hasOwn(value, key));
 }
 function identifier3(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 2048 && !/[\x00-\x20\x7f]/.test(value);
@@ -44217,29 +44364,29 @@ function declaredSecretNames(value) {
   if (value === undefined)
     return [];
   if (!Array.isArray(value) || value.length > 32 || value.some((name) => typeof name !== "string" || !/^[A-Z][A-Z0-9_]{0,127}$/.test(name)) || new Set(value).size !== value.length) {
-    return refuse2("INVALID_SKILL_MANIFEST", "Runtime environment references must be unique uppercase identifiers (at most 32).");
+    return refuse4("INVALID_SKILL_MANIFEST", "Runtime environment references must be unique uppercase identifiers (at most 32).");
   }
   if (value.some((name) => /^(?:PATH|HOME|TMPDIR|TEMP|TMP|LANG|LC_ALL|TERM|SHELL|ENV|BASH_ENV|IFS|NODE_OPTIONS|NODE_PATH)$/.test(name) || /^(?:SKILLS_|BUN_|PYTHON|LD_|DYLD_)/.test(name))) {
-    return refuse2("INVALID_SKILL_MANIFEST", "Runtime environment references cannot override execution controls.");
+    return refuse4("INVALID_SKILL_MANIFEST", "Runtime environment references cannot override execution controls.");
   }
   return value;
 }
 function validateSelectedSecretBindings(value, scope, names) {
   if (!record10(value) || !exactKeys2(value, ["schema", "selection", "consumer", "secretsAuthority", "bindings"]) || value.schema !== "hasna.skills-secret-bindings.v1" || !record10(value.selection) || !exactKeys2(value.selection, ["authority", "workspaceId", "profileId", "profileRevision", "slug", "version", "bundleDigest"]) || !record10(value.consumer) || !exactKeys2(value.consumer, ["stationId", "workspaceDirectory"]) || !record10(value.bindings)) {
-    return refuse2("INVALID_SECRET_BINDINGS", "Secret bindings do not match the hasna.skills-secret-bindings.v1 contract.");
+    return refuse4("INVALID_SECRET_BINDINGS", "Secret bindings do not match the hasna.skills-secret-bindings.v1 contract.");
   }
   for (const [key, expected] of Object.entries({ authority: scope.selection.authority, workspaceId: scope.selection.workspaceId, profileId: scope.profileId, profileRevision: scope.selection.profileRevision, slug: scope.selection.slug, version: scope.selection.version, bundleDigest: scope.selection.bundleDigest })) {
     if (value.selection[key] !== expected)
-      return refuse2("SECRET_BINDING_SCOPE_MISMATCH", "Secret bindings do not match the exact selected authority, workspace, profile, revision, version and digest.");
+      return refuse4("SECRET_BINDING_SCOPE_MISMATCH", "Secret bindings do not match the exact selected authority, workspace, profile, revision, version and digest.");
   }
   let workspaceDirectory;
   try {
     workspaceDirectory = realpathSync10(scope.cwd);
   } catch {
-    return refuse2("SECRET_BINDING_CONSUMER_MISMATCH", "The execution workspace cannot be resolved.");
+    return refuse4("SECRET_BINDING_CONSUMER_MISMATCH", "The execution workspace cannot be resolved.");
   }
   if (value.consumer.stationId !== (process.env.HASNA_STATION || stationHostname()) || value.consumer.workspaceDirectory !== workspaceDirectory) {
-    return refuse2("SECRET_BINDING_CONSUMER_MISMATCH", "Secret bindings do not match this station and canonical workspace directory.");
+    return refuse4("SECRET_BINDING_CONSUMER_MISMATCH", "Secret bindings do not match this station and canonical workspace directory.");
   }
   try {
     if (!identifier3(value.secretsAuthority))
@@ -44248,10 +44395,10 @@ function validateSelectedSecretBindings(value, scope, names) {
     if (url2.protocol !== "https:" && !(url2.protocol === "http:" && ["127.0.0.1", "[::1]", "localhost"].includes(url2.hostname)) || url2.username || url2.password || url2.search || url2.hash || !url2.pathname.endsWith("/v1") || url2.href !== value.secretsAuthority)
       throw new Error;
   } catch {
-    return refuse2("INVALID_SECRET_BINDINGS", "Secret bindings require a canonical HTTPS Secrets /v1 authority (loopback HTTP is allowed).");
+    return refuse4("INVALID_SECRET_BINDINGS", "Secret bindings require a canonical HTTPS Secrets /v1 authority (loopback HTTP is allowed).");
   }
   if (!exactKeys2(value.bindings, names) || Object.values(value.bindings).some((key) => !identifier3(key) || !/^[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(key) || key.split("/").some((part) => !part || part === "." || part === ".."))) {
-    return refuse2("INVALID_SECRET_BINDINGS", "Bind every declared environment name exactly once to a vault key; undeclared bindings and values are refused.");
+    return refuse4("INVALID_SECRET_BINDINGS", "Bind every declared environment name exactly once to a vault key; undeclared bindings and values are refused.");
   }
   return structuredClone(value);
 }
@@ -44262,10 +44409,10 @@ async function resolveSelectedSecrets(bindings, createClient = createSecretsClie
   try {
     client = createClient();
   } catch {
-    return refuse2("LOCAL_SECRET_UNAVAILABLE", "The configured Secrets client could not authenticate. No ambient credential fallback was attempted.");
+    return refuse4("LOCAL_SECRET_UNAVAILABLE", "The configured Secrets client could not authenticate. No ambient credential fallback was attempted.");
   }
   if (client.baseUrl !== bindings.secretsAuthority)
-    return refuse2("SECRET_BINDING_AUTHORITY_MISMATCH", "The configured Secrets authority differs from the reviewed binding. No secret was requested.");
+    return refuse4("SECRET_BINDING_AUTHORITY_MISMATCH", "The configured Secrets authority differs from the reviewed binding. No secret was requested.");
   const env = {};
   const signal = AbortSignal.timeout(15000);
   try {
@@ -44277,7 +44424,7 @@ async function resolveSelectedSecrets(bindings, createClient = createSecretsClie
     }
     return env;
   } catch {
-    return refuse2("LOCAL_SECRET_UNAVAILABLE", "A declared secret could not be resolved, was invalid, or has expired. The skill was not started; no fallback was attempted.");
+    return refuse4("LOCAL_SECRET_UNAVAILABLE", "A declared secret could not be resolved, was invalid, or has expired. The skill was not started; no fallback was attempted.");
   }
 }
 function redactExecutionSecrets(text3, env) {
@@ -44305,7 +44452,7 @@ function grantIdentifier(v) {
 function grantRecord(v) {
   return !!v && typeof v === "object" && !Array.isArray(v);
 }
-function keys(v, required2, optional2 = []) {
+function keys2(v, required2, optional2 = []) {
   return required2.every((k) => Object.hasOwn(v, k)) && Object.keys(v).every((k) => required2.includes(k) || optional2.includes(k));
 }
 function invalid6() {
@@ -44333,10 +44480,10 @@ function grantWorkspace(v) {
   return flavor.isAbsolute(v) && flavor.normalize(v) === v;
 }
 function selection(v) {
-  return grantRecord(v) && keys(v, ["slug", "version", "bundleDigest"]) && grantIdentifier(v.slug) && isValidSkillVersion(v.version) && typeof v.bundleDigest === "string" && /^sha256:[a-f0-9]{64}$/.test(v.bundleDigest);
+  return grantRecord(v) && keys2(v, ["slug", "version", "bundleDigest"]) && grantIdentifier(v.slug) && isValidSkillVersion(v.version) && typeof v.bundleDigest === "string" && /^sha256:[a-f0-9]{64}$/.test(v.bundleDigest);
 }
 function validateExecutionGrantRequest(value) {
-  if (!grantRecord(value) || !keys(value, ["selection", "consumer"]) || !grantRecord(value.selection) || !keys(value.selection, [
+  if (!grantRecord(value) || !keys2(value, ["selection", "consumer"]) || !grantRecord(value.selection) || !keys2(value.selection, [
     "authority",
     "workspaceId",
     "profileId",
@@ -44344,7 +44491,7 @@ function validateExecutionGrantRequest(value) {
     "slug",
     "version",
     "bundleDigest"
-  ]) || !grantRecord(value.consumer) || !keys(value.consumer, ["stationId", "workspaceDirectory"]))
+  ]) || !grantRecord(value.consumer) || !keys2(value.consumer, ["stationId", "workspaceDirectory"]))
     invalid6();
   const { selection: s, consumer: c } = value;
   if (!selection({
@@ -44425,10 +44572,10 @@ __export(exports_selected_run, {
   prepareSelectedSecretBindings: () => prepareSelectedSecretBindings,
   executeSelectedLocal: () => executeSelectedLocal
 });
-import { createHash as createHash23 } from "crypto";
+import { createHash as createHash24 } from "crypto";
 import { spawn as spawn2 } from "child_process";
-import { mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync11, realpathSync as realpathSync11 } from "fs";
-import { dirname as dirname22, join as join35, resolve as resolve22 } from "path";
+import { mkdirSync as mkdirSync13, mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync11, realpathSync as realpathSync11 } from "fs";
+import { dirname as dirname23, join as join36, resolve as resolve23 } from "path";
 import { tmpdir, hostname as stationHostname2 } from "os";
 async function resolveSelectedRun(spec, profileId, options = {}) {
   const context2 = await resolveSelectionContext(profileId, options);
@@ -44508,7 +44655,7 @@ async function executeSelectedLocal(selected, options = {}) {
         throw new SkillSelectionError("INVALID_SECRET_BINDINGS", "Explicit environment values must be bounded strings without NUL bytes.");
       secretEnv[name] = value;
     }
-  const runDirectory = mkdtempSync3(join35(tmpdir(), "skills-execution-"));
+  const runDirectory = mkdtempSync3(join36(tmpdir(), "skills-execution-"));
   const paths = new SkillEntryPaths;
   for (const entry of entries) {
     paths.add(entry.path, 100, () => {
@@ -44516,12 +44663,12 @@ async function executeSelectedLocal(selected, options = {}) {
     }, () => {
       throw new SkillSelectionError("INVALID_BUNDLE_PATH", "The execution bundle path exceeds its limit.");
     });
-    const destination = join35(runDirectory, entry.path);
-    mkdirSync12(dirname22(destination), { recursive: true, mode: 448 });
+    const destination = join36(runDirectory, entry.path);
+    mkdirSync13(dirname23(destination), { recursive: true, mode: 448 });
     writeFileSync11(destination, entry.bytes, { flag: "wx", mode: entry.mode & 511 });
   }
   env.SKILLS_INPUT_JSON = input2;
-  env.SKILLS_WORKSPACE_DIR = resolve22(options.cwd ?? process.cwd());
+  env.SKILLS_WORKSPACE_DIR = resolve23(options.cwd ?? process.cwd());
   env.SKILLS_RUN_DIR = runDirectory;
   if (runtime.version) {
     const version2 = await subprocess([executable, ...runtimeName === "bun" ? ["--no-env-file"] : [], "--version"], runDirectory, env, "", Math.min(timeoutMs, 5000));
@@ -44544,20 +44691,20 @@ async function executeSelectedLocal(selected, options = {}) {
   }
   if (bindings)
     secretEnv = await resolveSelectedSecrets(bindings, options.createSecretsClient);
-  const result = await subprocess([executable, ...runtimeName === "bun" ? ["--no-env-file"] : [], join35(runDirectory, declaredEntry), ...args], runDirectory, { ...env, ...secretEnv }, input2, timeoutMs);
+  const result = await subprocess([executable, ...runtimeName === "bun" ? ["--no-env-file"] : [], join36(runDirectory, declaredEntry), ...args], runDirectory, { ...env, ...secretEnv }, input2, timeoutMs);
   result.stdout = redactExecutionSecrets(result.stdout, secretEnv);
   result.stderr = redactExecutionSecrets(result.stderr, secretEnv);
   const receipt = {
     selection: selection2,
     target: "local",
     runtime: runtimeName,
-    inputDigest: `sha256:${createHash23("sha256").update(input2).digest("hex")}`,
+    inputDigest: `sha256:${createHash24("sha256").update(input2).digest("hex")}`,
     runDirectory,
     ...executionGrant ? { executionGrant } : {},
     ...bindings ? { secretBinding: { schema: bindings.schema, selection: bindings.selection, consumer: bindings.consumer, secretsAuthority: bindings.secretsAuthority, bindings: bindings.bindings } } : {},
     ...result
   };
-  writeFileSync11(join35(runDirectory, ".execution-receipt.json"), JSON.stringify({ ...receipt, stdout: undefined, stderr: undefined }), { mode: 384 });
+  writeFileSync11(join36(runDirectory, ".execution-receipt.json"), JSON.stringify({ ...receipt, stdout: undefined, stderr: undefined }), { mode: 384 });
   return receipt;
 }
 async function subprocess(command, cwd, env, input2, timeoutMs) {
@@ -44747,7 +44894,7 @@ var init_blog_article = __esm(() => {
 
 // src/mcp/operation-tools.ts
 import { existsSync as existsSync16, readdirSync as readdirSync11, statSync as statSync11 } from "fs";
-import { join as join36 } from "path";
+import { join as join37 } from "path";
 function registerOperationTools(server) {
   server.registerTool("cloud_skill_eligibility", {
     title: "Cloud Skill Eligibility",
@@ -45224,7 +45371,7 @@ function registerOperationTools(server) {
       if (exists) {
         try {
           skillCount = readdirSync11(agentSkillsPath).filter((f) => {
-            const full = join36(agentSkillsPath, f);
+            const full = join37(agentSkillsPath, f);
             return !f.startsWith(".") && statSync11(full).isDirectory();
           }).length;
         } catch {}
@@ -45291,17 +45438,17 @@ var init_operation_tools = __esm(() => {
 });
 
 // src/lib/feedback.ts
-import { appendFileSync, existsSync as existsSync17, mkdirSync as mkdirSync13 } from "fs";
-import { dirname as dirname23, join as join37 } from "path";
+import { appendFileSync, existsSync as existsSync17, mkdirSync as mkdirSync14 } from "fs";
+import { dirname as dirname24, join as join38 } from "path";
 import { Database } from "bun:sqlite";
 function getFeedbackDbPath() {
-  return join37(getDataDir(), "skills.db");
+  return join38(getDataDir(), "skills.db");
 }
 function getFeedbackDb() {
   const dbPath = getFeedbackDbPath();
-  const dir = dirname23(dbPath);
+  const dir = dirname24(dbPath);
   if (!existsSync17(dir))
-    mkdirSync13(dir, { recursive: true });
+    mkdirSync14(dir, { recursive: true });
   const db = new Database(dbPath);
   db.exec("PRAGMA journal_mode = WAL");
   db.exec([
@@ -45327,10 +45474,10 @@ function saveFeedback(input2) {
     throw new Error("Feedback message is required");
   const category = input2.category ?? "general";
   if (isApiMode()) {
-    const path = join37(getDataDir(), "feedback.jsonl");
-    const dir = dirname23(path);
+    const path = join38(getDataDir(), "feedback.jsonl");
+    const dir = dirname24(path);
     if (!existsSync17(dir))
-      mkdirSync13(dir, { recursive: true });
+      mkdirSync14(dir, { recursive: true });
     appendFileSync(path, JSON.stringify({ message, category, email: input2.email ?? null, agent: input2.agent ?? null, version: input2.version ?? null, createdAt: new Date().toISOString() }) + `
 `);
     return { saved: true, category, path };
@@ -45491,10 +45638,10 @@ var init_resource_meta_tools = __esm(() => {
 });
 
 // src/lib/scheduler.ts
-import { existsSync as existsSync18, readFileSync as readFileSync22, writeFileSync as writeFileSync12, mkdirSync as mkdirSync14 } from "fs";
-import { join as join38 } from "path";
+import { existsSync as existsSync18, readFileSync as readFileSync22, writeFileSync as writeFileSync12, mkdirSync as mkdirSync15 } from "fs";
+import { join as join39 } from "path";
 function getSchedulesPath(targetDir = process.cwd()) {
-  return join38(targetDir, ".skills", "schedules.json");
+  return join39(targetDir, ".skills", "schedules.json");
 }
 function loadSchedules(targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
@@ -45507,9 +45654,9 @@ function loadSchedules(targetDir = process.cwd()) {
 }
 function saveSchedules(data, targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
-  const dir = join38(targetDir, ".skills");
+  const dir = join39(targetDir, ".skills");
   if (!existsSync18(dir))
-    mkdirSync14(dir, { recursive: true });
+    mkdirSync15(dir, { recursive: true });
   writeFileSync12(path, JSON.stringify(data, null, 2));
 }
 function validateCronField(expr, min, max, label) {
@@ -45779,16 +45926,16 @@ var init_schedule_tools = __esm(() => {
 });
 
 // src/lib/native-storage.ts
-import { createHash as createHash24, createHmac } from "crypto";
+import { createHash as createHash25, createHmac } from "crypto";
 import {
   existsSync as existsSync19,
-  mkdirSync as mkdirSync15,
+  mkdirSync as mkdirSync16,
   readFileSync as readFileSync23,
   readdirSync as readdirSync12,
   statSync as statSync12,
   writeFileSync as writeFileSync13
 } from "fs";
-import { dirname as dirname24, join as join39, normalize as normalize4, relative as relative8, sep as sep10 } from "path";
+import { dirname as dirname25, join as join40, normalize as normalize5, relative as relative8, sep as sep11 } from "path";
 function resolveSkillsNativeStorageConfig(env = process.env) {
   assertNoRetiredModeEnvVars(env, {
     app: SKILLS_ENV_NAMESPACE,
@@ -45829,7 +45976,7 @@ function getSkillsNativeStorageStatus(options = {}) {
     local: {
       dataDir: getDataDir(),
       projectStateDir: getProjectStateDir(targetDir),
-      feedbackDbPath: join39(getDataDir(), "skills.db")
+      feedbackDbPath: join40(getDataDir(), "skills.db")
     },
     remote: {
       databaseConfigured: Boolean(config2.databaseUrl),
@@ -45856,7 +46003,7 @@ function exportSkillsLocalSnapshot(targetDir = process.cwd(), options = {}) {
       files.push({
         path: relativePath,
         sizeBytes: bytes.byteLength,
-        sha256: createHash24("sha256").update(bytes).digest("hex"),
+        sha256: createHash25("sha256").update(bytes).digest("hex"),
         ...options.includeFileContents ? { contentBase64: Buffer.from(bytes).toString("base64") } : {}
       });
     }
@@ -45910,7 +46057,7 @@ function parsePositiveInteger(value) {
 function walkFiles2(dir) {
   const files = [];
   for (const entry of readdirSync12(dir)) {
-    const full = join39(dir, entry);
+    const full = join40(dir, entry);
     const stats = statSync12(full);
     if (stats.isDirectory())
       files.push(...walkFiles2(full));
@@ -46148,20 +46295,20 @@ var init_private_publication_customer = __esm(() => {
 });
 
 // src/lib/private-publication-recovery.ts
-import { constants as constants16, closeSync as closeSync19, fsyncSync as fsyncSync5, fstatSync as fstatSync19, lstatSync as lstatSync23, mkdirSync as mkdirSync16, openSync as openSync19, readSync as readSync12, realpathSync as realpathSync12, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync14 } from "fs";
-import { dirname as dirname25, isAbsolute as isAbsolute21, join as join40, resolve as resolve23 } from "path";
+import { constants as constants17, closeSync as closeSync20, fsyncSync as fsyncSync6, fstatSync as fstatSync20, lstatSync as lstatSync24, mkdirSync as mkdirSync17, openSync as openSync20, readSync as readSync13, realpathSync as realpathSync12, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync14 } from "fs";
+import { dirname as dirname26, isAbsolute as isAbsolute23, join as join41, resolve as resolve24 } from "path";
 import { randomUUID as randomUUID3 } from "crypto";
 function safeDirectory(directory2) {
-  if (!isAbsolute21(directory2) || directory2 !== resolve23(directory2) || realpathSync12(directory2) !== directory2)
+  if (!isAbsolute23(directory2) || directory2 !== resolve24(directory2) || realpathSync12(directory2) !== directory2)
     return fail2();
-  for (let path = directory2;; path = dirname25(path)) {
-    const stat3 = lstatSync23(path);
+  for (let path = directory2;; path = dirname26(path)) {
+    const stat3 = lstatSync24(path);
     if (!stat3.isDirectory() || stat3.isSymbolicLink())
       return fail2();
-    if (path === dirname25(path))
+    if (path === dirname26(path))
       break;
   }
-  const own2 = lstatSync23(directory2);
+  const own2 = lstatSync24(directory2);
   if ((own2.mode & 63) !== 0 || process.getuid && own2.uid !== process.getuid())
     return fail2();
   return { dev: own2.dev, ino: own2.ino };
@@ -46172,36 +46319,36 @@ function unchangedDirectory(directory2, identity3) {
     return fail2();
 }
 function readOwned(directory2, name, max) {
-  const identity3 = safeDirectory(directory2), file2 = join40(directory2, name);
-  const fd = openSync19(file2, constants16.O_RDONLY | constants16.O_NOFOLLOW);
+  const identity3 = safeDirectory(directory2), file2 = join41(directory2, name);
+  const fd = openSync20(file2, constants17.O_RDONLY | constants17.O_NOFOLLOW);
   try {
-    const stat3 = fstatSync19(fd);
+    const stat3 = fstatSync20(fd);
     if (!stat3.isFile() || stat3.nlink !== 1 || stat3.size > max || stat3.size < 1 || (stat3.mode & 63) !== 0 || process.getuid && stat3.uid !== process.getuid())
       return fail2();
     const buffer = Buffer.alloc(Math.min(max, stat3.size) + 1);
     let length = 0;
     while (length < buffer.length) {
-      const count = readSync12(fd, buffer, length, buffer.length - length, length);
+      const count = readSync13(fd, buffer, length, buffer.length - length, length);
       if (count === 0)
         break;
       length += count;
     }
-    const bytes = buffer.subarray(0, length), after = fstatSync19(fd);
+    const bytes = buffer.subarray(0, length), after = fstatSync20(fd);
     unchangedDirectory(directory2, identity3);
     if (bytes.length !== stat3.size || stat3.size !== after.size || stat3.mtimeMs !== after.mtimeMs || stat3.ctimeMs !== after.ctimeMs)
       return fail2();
     return bytes;
   } finally {
-    closeSync19(fd);
+    closeSync20(fd);
   }
 }
 function writeOwned(directory2, name, bytes) {
-  const fd = openSync19(join40(directory2, name), constants16.O_WRONLY | constants16.O_CREAT | constants16.O_EXCL | constants16.O_NOFOLLOW, 384);
+  const fd = openSync20(join41(directory2, name), constants17.O_WRONLY | constants17.O_CREAT | constants17.O_EXCL | constants17.O_NOFOLLOW, 384);
   try {
     writeFileSync14(fd, bytes);
-    fsyncSync5(fd);
+    fsyncSync6(fd);
   } finally {
-    closeSync19(fd);
+    closeSync20(fd);
   }
 }
 function save(directory2, value) {
@@ -46209,12 +46356,12 @@ function save(directory2, value) {
   writeOwned(directory2, temporary, JSON.stringify(value) + `
 `);
   unchangedDirectory(directory2, identity3);
-  renameSync7(join40(directory2, temporary), join40(directory2, "receipt.json"));
-  const fd = openSync19(directory2, constants16.O_RDONLY | constants16.O_NOFOLLOW);
+  renameSync7(join41(directory2, temporary), join41(directory2, "receipt.json"));
+  const fd = openSync20(directory2, constants17.O_RDONLY | constants17.O_NOFOLLOW);
   try {
-    fsyncSync5(fd);
+    fsyncSync6(fd);
   } finally {
-    closeSync19(fd);
+    closeSync20(fd);
   }
 }
 function bind(client, receipt) {
@@ -46222,23 +46369,23 @@ function bind(client, receipt) {
     throw new PrivatePublicationError("PUBLICATION_IDENTITY_CHANGED", "The fresh session does not match the recovery directory's server, account and membership.");
 }
 async function locked(directory2, action) {
-  const identity3 = safeDirectory(directory2), file2 = join40(directory2, "operation.lock");
+  const identity3 = safeDirectory(directory2), file2 = join41(directory2, "operation.lock");
   let fd;
   try {
-    fd = openSync19(file2, constants16.O_WRONLY | constants16.O_CREAT | constants16.O_EXCL | constants16.O_NOFOLLOW, 384);
+    fd = openSync20(file2, constants17.O_WRONLY | constants17.O_CREAT | constants17.O_EXCL | constants17.O_NOFOLLOW, 384);
   } catch {
     throw new PrivatePublicationError("PUBLICATION_RECOVERY_BUSY", "Another operation holds this recovery directory. If it crashed, confirm that process has stopped before explicitly removing operation.lock and resuming.");
   }
-  const lock = fstatSync19(fd);
+  const lock = fstatSync20(fd);
   try {
     writeFileSync14(fd, JSON.stringify({ pid: process.pid }) + `
 `);
-    fsyncSync5(fd);
+    fsyncSync6(fd);
     return await action();
   } finally {
-    closeSync19(fd);
+    closeSync20(fd);
     unchangedDirectory(directory2, identity3);
-    const now = lstatSync23(file2);
+    const now = lstatSync24(file2);
     if (now.dev !== lock.dev || now.ino !== lock.ino || !now.isFile() || now.isSymbolicLink())
       fail2();
     unlinkSync6(file2);
@@ -46290,15 +46437,15 @@ async function preparePrivatePublication(client, sourceDirectory, recoveryDirect
     phase: "prepared",
     intent: null
   };
-  if (!isAbsolute21(recoveryDirectory) || resolve23(recoveryDirectory) !== recoveryDirectory || realpathSync12(dirname25(recoveryDirectory)) !== dirname25(recoveryDirectory))
+  if (!isAbsolute23(recoveryDirectory) || resolve24(recoveryDirectory) !== recoveryDirectory || realpathSync12(dirname26(recoveryDirectory)) !== dirname26(recoveryDirectory))
     return fail2();
-  mkdirSync16(recoveryDirectory, { mode: 448 });
+  mkdirSync17(recoveryDirectory, { mode: 448 });
   safeDirectory(recoveryDirectory);
-  const parent = openSync19(dirname25(recoveryDirectory), constants16.O_RDONLY | constants16.O_NOFOLLOW);
+  const parent = openSync20(dirname26(recoveryDirectory), constants17.O_RDONLY | constants17.O_NOFOLLOW);
   try {
-    fsyncSync5(parent);
+    fsyncSync6(parent);
   } finally {
-    closeSync19(parent);
+    closeSync20(parent);
   }
   writeOwned(recoveryDirectory, "bundle.tgz", packed.bytes);
   save(recoveryDirectory, receipt);
@@ -46391,10 +46538,10 @@ var init_private_publication_recovery = __esm(() => {
 });
 
 // src/mcp/private-publication-tools.ts
-import { isAbsolute as isAbsolute22 } from "path";
+import { isAbsolute as isAbsolute24 } from "path";
 function registerPrivatePublicationTools(server) {
   const uuid9 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
-  const directory2 = exports_external.string().max(4096).refine(isAbsolute22, "Use an absolute local directory");
+  const directory2 = exports_external.string().max(4096).refine(isAbsolute24, "Use an absolute local directory");
   const verification2 = { email: exports_external.string().email().max(254), code: exports_external.string().regex(/^\d{6}$/), userId: uuid9, membershipId: uuid9, recoveryDirectory: directory2 };
   const description = "Manage a private source publication using fresh workspace-bound verification and a host-local recovery directory. Publishing requires explicit UUID current-version comparison and upload consent. Resume reuses immutable saved bytes and intent; an uncertain PUT is finalized for server verification, never uploaded twice. Sessions and signed URLs are not returned or persisted. Private execution is unavailable. Host request history may contain the supplied verification code.";
   const handler = (action) => async (value) => {
@@ -46827,19 +46974,19 @@ async function connectMcpForNode() {
   return { server: server2, transport };
 }
 function readBody(req) {
-  return new Promise((resolve24, reject) => {
+  return new Promise((resolve25, reject) => {
     const chunks = [];
     req.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
     req.on("end", () => {
       const raw = Buffer.concat(chunks).toString("utf-8");
       if (!raw.trim()) {
-        resolve24(undefined);
+        resolve25(undefined);
         return;
       }
       try {
-        resolve24(JSON.parse(raw));
+        resolve25(JSON.parse(raw));
       } catch {
-        resolve24(undefined);
+        resolve25(undefined);
       }
     });
     req.on("error", reject);
@@ -46881,9 +47028,9 @@ async function startSkillsMcpHttpServer(options = {}) {
       }
     }
   });
-  await new Promise((resolve24, reject) => {
+  await new Promise((resolve25, reject) => {
     httpServer.once("error", reject);
-    httpServer.listen(port, hostname4, () => resolve24());
+    httpServer.listen(port, hostname4, () => resolve25());
   });
   const address = httpServer.address();
   const listenPort = typeof address === "object" && address ? address.port : port;