@hasna/skills 0.10.72 → 0.10.74

package/dist/index.js

@@ -6988,8 +6988,8 @@ var require_public_api = __commonJS((exports) => {
 });
 
 // src/lib/registry.ts
-import { existsSync as existsSync15, readFileSync as readFileSync26, readdirSync as readdirSync14 } from "fs";
-import { join as join40 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync27, readdirSync as readdirSync14 } from "fs";
+import { join as join41 } from "path";
 
 // src/lib/config.ts
 import { closeSync, constants, existsSync as existsSync2, fstatSync, lstatSync, openSync, readFileSync, statSync, writeFileSync, mkdirSync } from "fs";
@@ -7266,7 +7266,7 @@ import {
   statSync as statSync13,
   writeFileSync as writeFileSync9
 } from "fs";
-import { basename as basename17, dirname as dirname27, isAbsolute as isAbsolute29, join as join39, normalize as normalize4, relative as relative11, resolve as resolve28, sep as sep16 } from "path";
+import { basename as basename17, dirname as dirname28, isAbsolute as isAbsolute29, join as join40, normalize as normalize4, relative as relative11, resolve as resolve29, sep as sep17 } from "path";
 
 // src/lib/registry-data/index.ts
 var SKILLS = [];
@@ -8566,8 +8566,8 @@ function ensureInstructionSkillFiles(skillPath, manifest) {
     displayName: manifest.displayName ?? displayName(manifest.name),
     category: manifest.category ?? "Development Tools",
     tags: manifest.tags?.length ? manifest.tags : ["custom", manifest.name],
-    inputs: [],
-    commands: []
+    inputs: Array.isArray(manifest.inputs) ? manifest.inputs : [],
+    commands: Array.isArray(manifest.commands) ? manifest.commands : []
   };
   if (!existsSync6(join6(skillPath, "SKILL.md"))) {
     writeFileSync2(join6(skillPath, "SKILL.md"), renderSkillMd(next));
@@ -8924,9 +8924,9 @@ var NATIVE_SKILL_ROOTS = [
 ];
 
 // src/lib/authoring-path.ts
-import { lstatSync as lstatSync32, realpathSync as realpathSync14 } from "fs";
+import { lstatSync as lstatSync33, realpathSync as realpathSync14 } from "fs";
 import { homedir as homedir6 } from "os";
-import { basename as basename16, dirname as dirname26, join as join38, resolve as resolve27, sep as sep15 } from "path";
+import { basename as basename16, dirname as dirname27, join as join39, resolve as resolve28, sep as sep16 } from "path";
 
 // src/lib/agent-adapters.ts
 var INTEGRATION_AGENTS = ["claude", "codex", "gemini", "opencode", "cursor", "hermes", "sumi"];
@@ -9973,8 +9973,8 @@ function assertAgentPolicyCollections(policy) {
 
 // src/lib/agent-discovery.ts
 import { createHash as createHash30 } from "crypto";
-import { lstatSync as lstatSync31, readFileSync as readFileSync25, readdirSync as readdirSync12, realpathSync as realpathSync13 } from "fs";
-import { basename as basename15, dirname as dirname25, isAbsolute as isAbsolute28, join as join37, relative as relative10, resolve as resolve26, sep as sep14 } from "path";
+import { lstatSync as lstatSync32, readFileSync as readFileSync26, readdirSync as readdirSync12, realpathSync as realpathSync13 } from "fs";
+import { basename as basename15, dirname as dirname26, isAbsolute as isAbsolute28, join as join38, relative as relative10, resolve as resolve27, sep as sep15 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual9 } from "util";
 
 // node_modules/yaml/dist/index.js
@@ -12430,6 +12430,10 @@ function canonical4(value, depth = 0, budget2 = { remaining: 65536 }) {
 function hashCodexSettingsReplacement(text2, budget2 = { remaining: 256 * 1024 * 1024 }) {
   need4(Buffer.byteLength(text2) <= 1024 * 1024 && budget2.remaining >= Buffer.byteLength(text2));
   budget2.remaining -= Buffer.byteLength(text2);
+  const prepared = prepareCodexSettingsV1(text2);
+  return finishCodexSettingsV1(prepared.config, prepared.tokens);
+}
+function prepareCodexSettingsV1(text2) {
   let config;
   try {
     config = Bun.TOML.parse(text2);
@@ -12437,6 +12441,9 @@ function hashCodexSettingsReplacement(text2, budget2 = { remaining: 256 * 1024 *
     throw new Error("Invalid Codex settings witness");
   }
   need4(config && typeof config === "object" && !Array.isArray(config));
+  return { config, tokens: numericTokens(text2) };
+}
+function finishCodexSettingsV1(config, tokens) {
   if (Object.hasOwn(config, "model")) {
     need4(typeof config.model === "string" && /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,127}$/.test(config.model));
     delete config.model;
@@ -12446,7 +12453,7 @@ function hashCodexSettingsReplacement(text2, budget2 = { remaining: 256 * 1024 *
       need4(typeof config[key] === "string" && values.has(config[key]));
       delete config[key];
     }
-  return sha(`hasna.skills.codex-settings.v1\x00${JSON.stringify([canonical4(config), numericTokens(text2)])}`);
+  return sha(`hasna.skills.codex-settings.v1\x00${JSON.stringify([canonical4(config), tokens])}`);
 }
 function captureCodexSettings(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
   const text2 = readNativeSettingsWitnessFile(path, budget2, "config.toml");
@@ -13160,7 +13167,7 @@ function projectStatusLine(config) {
   if (!Object.keys(tui).length)
     delete config.tui;
 }
-function settingsDigest2(text2, version = 2, dependencies) {
+function prepareSettings(text2, version, dependencies) {
   let config;
   try {
     config = Bun.TOML.parse(text2);
@@ -13199,18 +13206,87 @@ function settingsDigest2(text2, version = 2, dependencies) {
       delete config.tui.model_availability_nux;
     if (isRecord3(config.tui) && typeof config.tui.screen_reader_detection_done === "boolean")
       delete config.tui.screen_reader_detection_done;
-    config = embedCodexNumericTokens(config, tokens);
+    return { config: embedCodexNumericTokens(config, tokens), numericSource: text2, dependencies };
+  }
+  const mcp = version >= 3 ? projectRegularCodexMcp(config, text2) : { config, numericSource: text2 };
+  return version >= 4 ? projectModelAvailabilityNux(mcp.config, mcp.numericSource) : mcp;
+}
+function finishSettings(prepared, version) {
+  const config = prepared.config;
+  if (version === 6) {
     normalize2(config, 6);
     if (isRecord3(config.tui) && !Object.keys(config.tui).length)
       delete config.tui;
-    return sha2(`hasna.skills.codex-settings.v6\x00${JSON.stringify([canonical5(config), canonical5(dependencies)])}`);
+    return sha2(`hasna.skills.codex-settings.v6\x00${JSON.stringify([canonical5(config), canonical5(prepared.dependencies)])}`);
   }
-  const mcp = version >= 3 ? projectRegularCodexMcp(config, text2) : { config, numericSource: text2 };
-  const projected = version >= 4 ? projectModelAvailabilityNux(mcp.config, mcp.numericSource) : mcp;
-  normalize2(projected.config, version);
-  const values = [canonical5(projected.config), numericTokens2(projected.numericSource)];
+  normalize2(config, version);
+  const values = [canonical5(config), numericTokens2(prepared.numericSource)];
   return sha2(`hasna.skills.codex-settings.v${version}\x00${JSON.stringify(values)}`);
 }
+function settingsDigest2(text2, version = 2, dependencies) {
+  return finishSettings(prepareSettings(text2, version, dependencies), version);
+}
+var SCREEN_READER_RECEIPT = "screen_reader_detection_done";
+function cloneTree(value) {
+  if (Array.isArray(value))
+    return value.map(cloneTree);
+  if (isRecord3(value) && [Object.prototype, null].includes(Object.getPrototypeOf(value)))
+    return Object.fromEntries(Object.entries(value).map(([key2, child2]) => [key2, cloneTree(child2)]));
+  return value;
+}
+function receiptEdits(config) {
+  const tui = config.tui;
+  const set = (value) => (target) => {
+    if (!isRecord3(target.tui))
+      target.tui = {};
+    target.tui[SCREEN_READER_RECEIPT] = value;
+  };
+  if (tui === undefined || isRecord3(tui) && !Object.hasOwn(tui, SCREEN_READER_RECEIPT))
+    return [set(true), set(false)];
+  if (!isRecord3(tui) || typeof tui[SCREEN_READER_RECEIPT] !== "boolean")
+    return [];
+  const remove = (dropEmpty) => (target) => {
+    delete target.tui[SCREEN_READER_RECEIPT];
+    if (dropEmpty && !Object.keys(target.tui).length)
+      delete target.tui;
+  };
+  return [remove(true), ...Object.keys(tui).length === 1 ? [remove(false)] : [], set(!tui[SCREEN_READER_RECEIPT])];
+}
+function codexSettingsToleratesScreenReaderReceipt(text2, hashMode, expected) {
+  try {
+    if (Buffer.byteLength(text2) > 1024 * 1024 || !/^[a-f0-9]{64}$/.test(expected))
+      return false;
+    if (hashMode === "codex-settings-v1") {
+      const prepared2 = prepareCodexSettingsV1(text2);
+      return receiptEdits(prepared2.config).some((edit) => {
+        const candidate = cloneTree(prepared2.config);
+        edit(candidate);
+        return finishCodexSettingsV1(candidate, prepared2.tokens) === expected;
+      });
+    }
+    const version = Number(hashMode.slice("codex-settings-v".length));
+    if (![2, 3, 4, 5].includes(version))
+      return false;
+    const prepared = prepareSettings(text2, version);
+    return receiptEdits(prepared.config).some((edit) => {
+      const candidate = cloneTree(prepared.config);
+      edit(candidate);
+      if (version >= 4 && isRecord3(candidate.tui) && !Object.keys(candidate.tui).length)
+        delete candidate.tui;
+      return finishSettings({ ...prepared, config: candidate }, version) === expected;
+    });
+  } catch {
+    return false;
+  }
+}
+function codexSettingsWitnessMatch(path, hashMode, expected, budget2 = { remaining: 256 * 1024 * 1024 }) {
+  const text2 = readNativeSettingsWitnessFile(path, budget2, "config.toml");
+  need7(Buffer.byteLength(text2) <= 1024 * 1024);
+  const exact = hashMode === "codex-settings-v1" ? hashCodexSettingsReplacement(text2) : settingsDigest2(text2, Number(hashMode.slice("codex-settings-v".length)));
+  if (exact === expected)
+    return "exact";
+  return codexSettingsToleratesScreenReaderReceipt(text2, hashMode, expected) ? "screen-reader-receipt" : null;
+}
 function hashCodexSettingsReplacementV2(text2, budget2 = { remaining: 256 * 1024 * 1024 }) {
   need7(Buffer.byteLength(text2) <= 1024 * 1024 && budget2.remaining >= Buffer.byteLength(text2));
   budget2.remaining -= Buffer.byteLength(text2);
@@ -13925,6 +14001,8 @@ import { execFile, spawn as spawn2 } from "child_process";
 import { realpathSync as realpathSync4, statSync as statSync8 } from "fs";
 import { isAbsolute as isAbsolute14 } from "path";
 import { promisify } from "util";
+var CODEX_CONFIG_FALLBACK_SUMMARY = "Invalid configuration; using defaults.";
+var CODEX_CONFIG_INVALID = "CODEX_HOOK_TRUST_NATIVE_CONFIG_INVALID: Codex could not load its configuration and fell back to defaults; repair config.toml (run codex once to see the error) and retry";
 async function connectCodexHookRpc(options) {
   const timeoutMs = options.timeoutMs ?? 20000;
   if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 100 || timeoutMs > 20000)
@@ -13953,7 +14031,7 @@ async function connectCodexHookRpc(options) {
   else
     env.CODEX_HOME = options.codexHome;
   const corpusLease = acquireCodexCorpusWrite([options.codexHome ?? join17(options.home, ".codex")], { codexCommand: binary });
-  const child2 = spawn2(binary, ["app-server", "--strict-config", "--stdio"], {
+  const child2 = spawn2(binary, ["app-server", "--stdio"], {
     cwd: options.home,
     env,
     stdio: ["pipe", "pipe", "pipe"]
@@ -13965,12 +14043,12 @@ async function connectCodexHookRpc(options) {
     resolve15();
   }));
   const pending = new Map;
-  let nextId = 1, buffer = Buffer.alloc(0), stopped = false, diagnosticBytes = 0;
+  let nextId = 1, buffer = Buffer.alloc(0), stopped = false, diagnosticBytes = 0, configInvalid = false;
   const fail2 = () => {
     stopped = true;
     for (const value of pending.values()) {
       clearTimeout(value.timer);
-      value.reject(new Error("CODEX_HOOK_TRUST_NATIVE_RPC_FAILED"));
+      value.reject(new Error(configInvalid ? CODEX_CONFIG_INVALID : "CODEX_HOOK_TRUST_NATIVE_RPC_FAILED"));
     }
     pending.clear();
   };
@@ -14010,6 +14088,12 @@ async function connectCodexHookRpc(options) {
         child2.kill();
         return;
       }
+      if (!("id" in value) && value.method === "configWarning" && value.params?.summary === CODEX_CONFIG_FALLBACK_SUMMARY) {
+        configInvalid = true;
+        fail2();
+        child2.kill();
+        return;
+      }
       const waiting = pending.get(value.id);
       if (!waiting)
         continue;
@@ -14026,7 +14110,7 @@ async function connectCodexHookRpc(options) {
     processId: child2.pid,
     request(method, params) {
       if (stopped)
-        return Promise.reject(new Error("CODEX_HOOK_TRUST_NATIVE_RPC_CLOSED"));
+        return Promise.reject(new Error(configInvalid ? CODEX_CONFIG_INVALID : "CODEX_HOOK_TRUST_NATIVE_RPC_CLOSED"));
       return new Promise((resolve15, reject) => {
         const id = nextId++;
         const timer = setTimeout(() => {
@@ -14069,7 +14153,7 @@ async function connectCodexHookRpc(options) {
     return rpc;
   } catch {
     await rpc.close();
-    throw new Error("CODEX_HOOK_TRUST_NATIVE_UNSUPPORTED: native hooks/list and versioned config writes are required");
+    throw new Error(configInvalid ? CODEX_CONFIG_INVALID : "CODEX_HOOK_TRUST_NATIVE_UNSUPPORTED: native hooks/list and versioned config writes are required");
   }
 }
 
@@ -15053,14 +15137,14 @@ function projectReviewedClaudePluginManifest(text2, reviewedSha256) {
 }
 
 // src/lib/plugin-discovery.ts
-import { closeSync as closeSync18, constants as constants19, fstatSync as fstatSync18, lstatSync as lstatSync29, openSync as openSync18, opendirSync as opendirSync5, readSync as readSync13 } from "fs";
-import { basename as basename13, dirname as dirname23, isAbsolute as isAbsolute26, join as join36, resolve as resolve24 } from "path";
+import { closeSync as closeSync18, constants as constants19, fstatSync as fstatSync18, lstatSync as lstatSync30, openSync as openSync18, opendirSync as opendirSync5, readSync as readSync13 } from "fs";
+import { basename as basename13, dirname as dirname24, isAbsolute as isAbsolute26, join as join37, resolve as resolve25 } from "path";
 
 // src/lib/plugin-admission.ts
 import { homedir as homedir5 } from "os";
-import { isAbsolute as isAbsolute25, join as join35, resolve as resolve23 } from "path";
+import { isAbsolute as isAbsolute25, join as join36, resolve as resolve24 } from "path";
 // package.json
-var version = "0.10.72";
+var version = "0.10.74";
 var package_default = {
   name: "@hasna/skills",
   version,
@@ -16905,22 +16989,22 @@ async function prepareSkillDependencies(skillPath, env, timeoutMs = DEFAULT_PREP
 }
 
 // src/lib/skillinfo.ts
-import { existsSync as existsSync13, readFileSync as readFileSync23 } from "fs";
-import { join as join34 } from "path";
+import { existsSync as existsSync13, readFileSync as readFileSync25 } from "fs";
+import { join as join35 } from "path";
 
 // src/lib/installer.ts
-import { existsSync as existsSync12, readFileSync as readFileSync21, rmSync as rmSync3 } from "fs";
-import { join as join33 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync23, rmSync as rmSync3 } from "fs";
+import { join as join34 } from "path";
 import { homedir as homedir4 } from "os";
 
 // src/lib/agent-sync.ts
 import {
   cpSync as cpSync2,
   existsSync as existsSync10,
-  lstatSync as lstatSync28,
+  lstatSync as lstatSync29,
   mkdirSync as mkdirSync9,
   mkdtempSync,
-  readFileSync as readFileSync19,
+  readFileSync as readFileSync20,
   readdirSync as readdirSync11,
   renameSync as renameSync5,
   rmSync as rmSync2,
@@ -16928,7 +17012,7 @@ import {
   writeFileSync as writeFileSync7
 } from "fs";
 import { homedir as homedir3 } from "os";
-import { basename as basename12, dirname as dirname22, join as join31 } from "path";
+import { basename as basename12, dirname as dirname23, join as join32 } from "path";
 
 // src/lib/codex-native-skill-policy.ts
 import { createHash as createHash21, randomUUID as randomUUID3 } from "crypto";
@@ -18270,16 +18354,59 @@ function assertCodexSemanticCacheWitnessUnchanged(previous, current) {
     refuse4();
 }
 
+// src/lib/codex-node-modules.ts
+import { lstatSync as lstatSync21, readFileSync as readFileSync16 } from "fs";
+import { dirname as dirname19, join as join26, resolve as resolve19, sep as sep12 } from "path";
+var PLUGIN_MANIFESTS = Object.freeze(["plugin.json", ".codex-plugin/plugin.json", ".claude-plugin/plugin.json", ".cursor-plugin/plugin.json"]);
+var PLUGIN_ROOT_DEPTH = 3;
+function codexPluginCacheSkillTree(path, depth) {
+  if (depth <= PLUGIN_ROOT_DEPTH)
+    return true;
+  let root = path;
+  for (let level = depth;level > PLUGIN_ROOT_DEPTH; level--)
+    root = dirname19(root);
+  try {
+    const skillRoots = [join26(root, "skills")];
+    for (const name of PLUGIN_MANIFESTS) {
+      const manifest = join26(root, name), stat2 = lstatSync21(manifest, { throwIfNoEntry: false });
+      if (!stat2)
+        continue;
+      if (!stat2.isFile() || stat2.size > 1024 * 1024)
+        return true;
+      const text2 = new TextDecoder("utf-8", { fatal: true }).decode(readFileSync16(manifest));
+      hashNativeJsonControls(text2);
+      const value = JSON.parse(text2);
+      if (!value || typeof value !== "object" || Array.isArray(value))
+        return true;
+      const declared = value.skills;
+      if (declared === undefined)
+        continue;
+      const paths = typeof declared === "string" ? [declared] : declared;
+      if (!Array.isArray(paths) || paths.some((item) => typeof item !== "string"))
+        return true;
+      for (const item of paths) {
+        const target = resolve19(root, item);
+        if (target !== root && !target.startsWith(root + sep12))
+          return true;
+        skillRoots.push(target.endsWith(`${sep12}SKILL.md`) ? dirname19(target) : target);
+      }
+    }
+    return skillRoots.some((skillRoot) => path === skillRoot || path.startsWith(skillRoot + sep12) || skillRoot.startsWith(path + sep12));
+  } catch {
+    return true;
+  }
+}
+
 // src/lib/agent-integration.ts
 import { createHash as createHash27, randomUUID as randomUUID4 } from "crypto";
 import { isDeepStrictEqual as isDeepStrictEqual8 } from "util";
-import { existsSync as existsSync9, lstatSync as lstatSync27, statSync as statSync11, mkdirSync as mkdirSync8, readFileSync as readFileSync18, readdirSync as readdirSync10, opendirSync as opendirSync4, readlinkSync as readlinkSync7, realpathSync as realpathSync12, renameSync as renameSync4, rmdirSync as rmdirSync3, writeFileSync as writeFileSync6, unlinkSync as unlinkSync5, chmodSync, openSync as openSync17, closeSync as closeSync17, fsyncSync as fsyncSync7, fstatSync as fstatSync17, readSync as readSync12, constants as constants18, linkSync as linkSync3 } from "fs";
-import { basename as basename11, dirname as dirname21, join as join30, resolve as resolve22, relative as relative9, isAbsolute as isAbsolute24, sep as sep13 } from "path";
+import { existsSync as existsSync9, lstatSync as lstatSync28, statSync as statSync11, mkdirSync as mkdirSync8, readFileSync as readFileSync19, readdirSync as readdirSync10, opendirSync as opendirSync4, readlinkSync as readlinkSync7, realpathSync as realpathSync12, renameSync as renameSync4, rmdirSync as rmdirSync3, writeFileSync as writeFileSync6, unlinkSync as unlinkSync5, chmodSync, openSync as openSync17, closeSync as closeSync17, fsyncSync as fsyncSync7, fstatSync as fstatSync17, readSync as readSync12, constants as constants18, linkSync as linkSync3 } from "fs";
+import { basename as basename11, dirname as dirname22, join as join31, resolve as resolve23, relative as relative9, isAbsolute as isAbsolute24, sep as sep14 } from "path";
 import { homedir as homedir2 } from "os";
 
 // src/lib/managed-policy.ts
-import { closeSync as closeSync13, constants as constants13, fstatSync as fstatSync13, lstatSync as lstatSync21, openSync as openSync13, readSync as readSync9 } from "fs";
-import { join as join26 } from "path";
+import { closeSync as closeSync13, constants as constants13, fstatSync as fstatSync13, lstatSync as lstatSync22, openSync as openSync13, readSync as readSync9 } from "fs";
+import { join as join27 } from "path";
 function refusal(reason2 = "is unreadable") {
   return new SkillSelectionError("INVALID_AGENT_POLICY", `The Skills agent loading policy ${reason2}; refusing legacy fallback.`);
 }
@@ -18310,10 +18437,10 @@ function serializeManagedSkillPolicy(value) {
   return text2;
 }
 function readManagedSkillPolicySnapshot(dataDir2 = getDataDirReadOnly()) {
-  const path = join26(dataDir2, "agent-policy.json");
+  const path = join27(dataDir2, "agent-policy.json");
   let descriptor, observed = false;
   try {
-    const stat2 = lstatSync21(path);
+    const stat2 = lstatSync22(path);
     observed = true;
     if (!stat2.isFile() || stat2.isSymbolicLink())
       throw refusal();
@@ -18339,7 +18466,7 @@ function readManagedSkillPolicySnapshot(dataDir2 = getDataDirReadOnly()) {
     return { text: text2, value: parseManagedSkillPolicy(text2) };
   } catch (error) {
     if (error.code === "ENOENT" && !observed) {
-      if (lstatSync21(path, { throwIfNoEntry: false }) === undefined)
+      if (lstatSync22(path, { throwIfNoEntry: false }) === undefined)
         return null;
     }
     if (error instanceof SkillSelectionError)
@@ -18359,8 +18486,8 @@ function requiresCliSkillLoading(dataDir2 = getDataDirReadOnly()) {
 
 // src/lib/agent-bridge.ts
 import { createHash as createHash23 } from "crypto";
-import { lstatSync as lstatSync22, readFileSync as readFileSync16, readdirSync as readdirSync9 } from "fs";
-import { join as join27 } from "path";
+import { lstatSync as lstatSync23, readFileSync as readFileSync17, readdirSync as readdirSync9 } from "fs";
+import { join as join28 } from "path";
 var CLI_BRIDGE_NAME = "skills-cli";
 var CLI_BRIDGE_VERSION = 1;
 var markdown = `---
@@ -18387,13 +18514,13 @@ function isOwnedCliBridge(path, expectedPaths) {
   if (!expectedPaths.includes(path))
     return false;
   try {
-    if (!lstatSync22(path).isDirectory())
+    if (!lstatSync23(path).isDirectory())
       return false;
     if (JSON.stringify(readdirSync9(path).sort()) !== JSON.stringify(Object.keys(CLI_BRIDGE_FILES).sort()))
       return false;
     return Object.entries(CLI_BRIDGE_FILES).every(([name, content]) => {
-      const file = join27(path, name), stat2 = lstatSync22(file);
-      return stat2.isFile() && !stat2.isSymbolicLink() && stat2.size === Buffer.byteLength(content) && readFileSync16(file, "utf8") === content;
+      const file = join28(path, name), stat2 = lstatSync23(file);
+      return stat2.isFile() && !stat2.isSymbolicLink() && stat2.size === Buffer.byteLength(content) && readFileSync17(file, "utf8") === content;
     });
   } catch {
     return false;
@@ -18670,8 +18797,8 @@ function disableCodexBundledSkills(text2) {
 
 // src/lib/agent-sumi.ts
 import { spawnSync as spawnSync4 } from "child_process";
-import { accessSync as accessSync2, constants as constants14, existsSync as existsSync8, lstatSync as lstatSync23, realpathSync as realpathSync10, statSync as statSync10 } from "fs";
-import { delimiter as delimiter2, isAbsolute as isAbsolute20, join as join28, resolve as resolve19 } from "path";
+import { accessSync as accessSync2, constants as constants14, existsSync as existsSync8, lstatSync as lstatSync24, realpathSync as realpathSync10, statSync as statSync10 } from "fs";
+import { delimiter as delimiter2, isAbsolute as isAbsolute20, join as join29, resolve as resolve20 } from "path";
 
 // src/lib/hook-diagnostics.ts
 var CONTEXT_ERROR_CODES = new Set([
@@ -18760,7 +18887,7 @@ function recordWithKeys(value, keys) {
   return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length === keys.length && keys.every((key2) => Object.hasOwn(value, key2));
 }
 function absolutePath3(value) {
-  return typeof value === "string" && value.length > 0 && value.length <= 32768 && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute20(value) && resolve19(value) === value;
+  return typeof value === "string" && value.length > 0 && value.length <= 32768 && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute20(value) && resolve20(value) === value;
 }
 function absoluteInput(value) {
   return value.length > 0 && value.length <= 32768 && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute20(value);
@@ -18771,7 +18898,7 @@ function resolveSumiPathsCommand(pathValue) {
   for (const directory2 of pathValue.split(delimiter2)) {
     if (!directory2 || /[\x00-\x1f\x7f]/.test(directory2))
       continue;
-    const candidate = resolve19(directory2, "sumi-paths");
+    const candidate = resolve20(directory2, "sumi-paths");
     try {
       accessSync2(candidate, constants14.X_OK);
       if (statSync10(candidate).isFile())
@@ -18783,7 +18910,7 @@ function resolveSumiPathsCommand(pathValue) {
 function validPathPlan(value, home, cwd) {
   if (!recordWithKeys(value, ["schemaVersion", "kind", "home", "cwd", "roots", "legacyRoots", "configFiles", "skillRoots"]))
     return false;
-  if (value.schemaVersion !== 1 || value.kind !== "sumi-paths" || value.home !== resolve19(home) || value.cwd !== resolve19(cwd))
+  if (value.schemaVersion !== 1 || value.kind !== "sumi-paths" || value.home !== resolve20(home) || value.cwd !== resolve20(cwd))
     return false;
   if (!recordWithKeys(value.roots, SUMI_PATH_KEYS) || !recordWithKeys(value.legacyRoots, SUMI_PATH_KEYS))
     return false;
@@ -18805,11 +18932,11 @@ function validPathPlan(value, home, cwd) {
   const legacyConfigRoot = value.legacyRoots.config;
   if (typeof configRoot !== "string" || legacyConfigRoot !== null && typeof legacyConfigRoot !== "string")
     return false;
-  if (value.configFiles.canonical !== join28(configRoot, "sumi.json") || value.skillRoots.canonical !== join28(configRoot, "skills"))
+  if (value.configFiles.canonical !== join29(configRoot, "sumi.json") || value.skillRoots.canonical !== join29(configRoot, "skills"))
     return false;
   if (legacyConfigRoot === null)
     return value.configFiles.legacy === null && value.skillRoots.legacy === null;
-  return value.configFiles.legacy === join28(legacyConfigRoot, "sumi.json") && value.skillRoots.legacy === join28(legacyConfigRoot, "skills");
+  return value.configFiles.legacy === join29(legacyConfigRoot, "sumi.json") && value.skillRoots.legacy === join29(legacyConfigRoot, "skills");
 }
 function sumiPathPlan(home, cwd = process.cwd(), env = process.env) {
   for (const key2 of ["SUMI_CONFIG", "SUMI_CONFIG_CONTENT"])
@@ -18827,8 +18954,8 @@ function sumiPathPlan(home, cwd = process.cwd(), env = process.env) {
       childEnv[key2] = env[key2];
   let child2;
   try {
-    child2 = spawnSync4(executable2, ["--json", "--home", resolve19(home), "--cwd", resolve19(cwd)], {
-      cwd: resolve19(cwd),
+    child2 = spawnSync4(executable2, ["--json", "--home", resolve20(home), "--cwd", resolve20(cwd)], {
+      cwd: resolve20(cwd),
       env: childEnv,
       encoding: "buffer",
       timeout: 3000,
@@ -18860,7 +18987,7 @@ function selectedConfigDirectory(plan) {
   const canonical9 = plan.roots.config, legacy = plan.legacyRoots.config;
   if (legacy === null)
     return existsSync8(canonical9) ? realpathSync10(canonical9) : canonical9;
-  const canonicalStat = lstatSync23(canonical9, { throwIfNoEntry: false }), legacyStat = lstatSync23(legacy, { throwIfNoEntry: false });
+  const canonicalStat = lstatSync24(canonical9, { throwIfNoEntry: false }), legacyStat = lstatSync24(legacy, { throwIfNoEntry: false });
   if (canonicalStat && legacyStat && realpathSync10(canonical9) !== realpathSync10(legacy))
     throw new Error("Sumi config roots conflict; complete native home adoption before Skills integration");
   const selected = canonicalStat ? canonical9 : legacyStat ? legacy : canonical9;
@@ -18876,13 +19003,13 @@ function sumiConfigDirectory(home, env = process.env, cwd = process.cwd()) {
 }
 function sumiSkillRoots(home, cwd = process.cwd(), env = process.env) {
   const plan = sumiPathPlan(home, cwd, env);
-  return [join28(selectedConfigDirectory(plan), "skills")];
+  return [join29(selectedConfigDirectory(plan), "skills")];
 }
 function sumiBridgeRoot(home, cwd = process.cwd(), env = process.env) {
   return sumiSkillRoots(home, cwd, env)[0];
 }
 function sumiConfigPath(home, cwd = process.cwd(), env = process.env) {
-  return join28(sumiConfigDirectory(home, env, cwd), "sumi.json");
+  return join29(sumiConfigDirectory(home, env, cwd), "sumi.json");
 }
 function renderSumiPlugin(command, profile) {
   return renderSumiPluginVersion(command, profile, 3);
@@ -18987,9 +19114,9 @@ var SUMI_SKILL_PERMISSIONS = [
 ];
 
 // src/lib/codex-hook-trust-files.ts
-import { closeSync as closeSync14, constants as constants15, fstatSync as fstatSync14, fsyncSync as fsyncSync4, lstatSync as lstatSync24, openSync as openSync14, readlinkSync as readlinkSync5, readSync as readSync10, writeFileSync as writeFileSync5 } from "fs";
+import { closeSync as closeSync14, constants as constants15, fstatSync as fstatSync14, fsyncSync as fsyncSync4, lstatSync as lstatSync25, openSync as openSync14, readlinkSync as readlinkSync5, readSync as readSync10, writeFileSync as writeFileSync5 } from "fs";
 import { createHash as createHash24 } from "crypto";
-import { dirname as dirname19, isAbsolute as isAbsolute21, resolve as resolve20 } from "path";
+import { dirname as dirname20, isAbsolute as isAbsolute21, resolve as resolve21 } from "path";
 function need8(value, code) {
   if (!value)
     throw new Error(`CODEX_HOOK_TRUST_${code}`);
@@ -18999,11 +19126,11 @@ function trustedAncestorOwner(uid2) {
   return BigInt(uid2) === 0n || BigInt(uid2) === BigInt(process.getuid());
 }
 function safeParents(file) {
-  for (let p = dirname19(file);; p = dirname19(p)) {
-    const s = lstatSync24(p);
+  for (let p = dirname20(file);; p = dirname20(p)) {
+    const s = lstatSync25(p);
     need8(s.isDirectory() && !s.isSymbolicLink() && trustedAncestorOwner(s.uid), "UNSAFE_PARENT");
     need8((s.mode & 18) === 0 || s.uid === 0 && (s.mode & 512) !== 0, "UNSAFE_PARENT");
-    if (dirname19(p) === p)
+    if (dirname20(p) === p)
       break;
   }
 }
@@ -19018,12 +19145,12 @@ function directAliasTarget(link) {
   const names = parts.slice(first);
   if (!names.length || names.some((part) => part === "" || part === "." || part === ".."))
     return;
-  return resolve20(dirname19(link), text2);
+  return resolve21(dirname20(link), text2);
 }
 function snapshot(file, privateFile = false, options = {}) {
   const readOnlyPackage = options.readOnlyPackage === true && !privateFile;
   safeParents(file);
-  const initial = lstatSync24(file, { bigint: true });
+  const initial = lstatSync25(file, { bigint: true });
   need8(initial.isFile() && initial.uid === BigInt(process.getuid()) && (initial.nlink === 1n || readOnlyPackage && initial.nlink > 1n) && (initial.mode & 0o022n) === 0n && (!privateFile || (initial.mode & 0o777n) === 0o600n), "UNSAFE_FILE");
   need8(initial.size <= 8n * 1024n * 1024n, "FILE_BOUND");
   const fd = openSync14(file, constants15.O_RDONLY | constants15.O_NOFOLLOW | constants15.O_NONBLOCK);
@@ -19038,7 +19165,7 @@ function snapshot(file, privateFile = false, options = {}) {
         break;
       length += n2;
     }
-    need8(length === Number(before.size) && sameStat(before, fstatSync14(fd, { bigint: true })) && sameStat(before, lstatSync24(file, { bigint: true })), "INPUT_CHANGED");
+    need8(length === Number(before.size) && sameStat(before, fstatSync14(fd, { bigint: true })) && sameStat(before, lstatSync25(file, { bigint: true })), "INPUT_CHANGED");
     const content = bytes.subarray(0, length), text2 = new TextDecoder("utf-8", { fatal: true }).decode(content);
     return { file, privateFile, readOnlyPackage, text: text2, bytes: content, stat: before, sha256: createHash24("sha256").update(content).digest("hex") };
   } finally {
@@ -19052,7 +19179,7 @@ function unchanged2(before) {
 
 // src/cli/commands/runtime-launcher.ts
 import { createHash as createHash25 } from "crypto";
-import { closeSync as closeSync15, constants as constants16, fchmodSync as fchmodSync2, fstatSync as fstatSync15, fsyncSync as fsyncSync5, lstatSync as lstatSync25, openSync as openSync15, readFileSync as readFileSync17, readlinkSync as readlinkSync6, realpathSync as realpathSync11, symlinkSync, writeSync as writeSync3 } from "fs";
+import { closeSync as closeSync15, constants as constants16, fchmodSync as fchmodSync2, fstatSync as fstatSync15, fsyncSync as fsyncSync5, lstatSync as lstatSync26, openSync as openSync15, readFileSync as readFileSync18, readlinkSync as readlinkSync6, realpathSync as realpathSync11, symlinkSync, writeSync as writeSync3 } from "fs";
 import { isAbsolute as isAbsolute22 } from "path";
 
 // src/server/launcher-environment-policy.ts
@@ -19259,9 +19386,9 @@ function parsePinnedLauncher(text2) {
 var PINNED_LAUNCHER_MAX_BYTES = 16 * 1024;
 function resolveLauncherCommand(path) {
   const physical = realpathSync11(path);
-  const stat2 = lstatSync25(physical);
+  const stat2 = lstatSync26(physical);
   if (stat2.isFile() && stat2.size <= PINNED_LAUNCHER_MAX_BYTES) {
-    const text2 = readFileSync17(physical, "utf8");
+    const text2 = readFileSync18(physical, "utf8");
     const binding = parsePinnedLauncher(text2);
     if (binding) {
       let entry;
@@ -19281,7 +19408,7 @@ function assertPinnedLauncherRuntimeSafe(runtime) {
   assertLauncherPath(runtime, "LAUNCHER_RUNTIME_PATH_INVALID");
   let stat2;
   try {
-    stat2 = lstatSync25(runtime);
+    stat2 = lstatSync26(runtime);
   } catch {
     throw new Error("LAUNCHER_RUNTIME_UNSAFE");
   }
@@ -19293,8 +19420,8 @@ function assertPinnedLauncherRuntimeSafe(runtime) {
 
 // src/lib/retained-review-artifacts.ts
 import { createHash as createHash26 } from "crypto";
-import { constants as constants17, closeSync as closeSync16, fstatSync as fstatSync16, fsyncSync as fsyncSync6, lstatSync as lstatSync26, mkdirSync as mkdirSync7, openSync as openSync16, readSync as readSync11, writeSync as writeSync4 } from "fs";
-import { dirname as dirname20, isAbsolute as isAbsolute23, join as join29, resolve as resolve21, sep as sep12 } from "path";
+import { constants as constants17, closeSync as closeSync16, fstatSync as fstatSync16, fsyncSync as fsyncSync6, lstatSync as lstatSync27, mkdirSync as mkdirSync7, openSync as openSync16, readSync as readSync11, writeSync as writeSync4 } from "fs";
+import { dirname as dirname21, isAbsolute as isAbsolute23, join as join30, resolve as resolve22, sep as sep13 } from "path";
 var sha3 = (bytes) => createHash26("sha256").update(bytes).digest("hex");
 var hex = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value);
 var refuse5 = () => {
@@ -19308,19 +19435,19 @@ function keys(value, names) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length === names.length && names.every((name) => Object.hasOwn(value, name)));
 }
 function safe4(path) {
-  need9(typeof path === "string" && path.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute23(path) && resolve21(path) === path && !/[\x00-\x1f\x7f]/.test(path));
-  for (let cursor = path;; cursor = dirname20(cursor)) {
-    const stat2 = lstatSync26(cursor, { throwIfNoEntry: false });
+  need9(typeof path === "string" && path.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute23(path) && resolve22(path) === path && !/[\x00-\x1f\x7f]/.test(path));
+  for (let cursor = path;; cursor = dirname21(cursor)) {
+    const stat2 = lstatSync27(cursor, { throwIfNoEntry: false });
     need9(!stat2?.isSymbolicLink());
     if (cursor !== path && stat2)
       need9(stat2.isDirectory());
-    if (dirname20(cursor) === cursor)
+    if (dirname21(cursor) === cursor)
       break;
   }
 }
 function readExact(path) {
   safe4(path);
-  const before = lstatSync26(path, { throwIfNoEntry: false });
+  const before = lstatSync27(path, { throwIfNoEntry: false });
   need9(before?.isFile() && before.nlink === 1 && before.size <= AGENT_POLICY_LIMITS.discoveryRawSourceBytes && (before.mode & 63) === 0 && (process.getuid === undefined || before.uid === process.getuid()));
   const fd = openSync16(path, constants17.O_RDONLY | constants17.O_NOFOLLOW | constants17.O_NONBLOCK);
   try {
@@ -19334,7 +19461,7 @@ function readExact(path) {
       offset += count;
     }
     need9(readSync11(fd, Buffer.alloc(1), 0, 1, null) === 0);
-    const after = fstatSync16(fd), current = lstatSync26(path, { throwIfNoEntry: false });
+    const after = fstatSync16(fd), current = lstatSync27(path, { throwIfNoEntry: false });
     safe4(path);
     need9(current && opened.dev === current.dev && opened.ino === current.ino && opened.mode === current.mode && opened.uid === current.uid && opened.size === current.size && opened.mtimeMs === current.mtimeMs && opened.ctimeMs === current.ctimeMs && current.nlink === 1 && opened.mode === after.mode && opened.uid === after.uid && after.nlink === 1 && opened.size === after.size && opened.mtimeMs === after.mtimeMs && opened.ctimeMs === after.ctimeMs);
     const text2 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes);
@@ -19360,24 +19487,24 @@ function verifyReviewArtifactOriginal(path, expectedSha256) {
   need9(hex(expectedSha256) && sha3(readExact(path)) === expectedSha256);
 }
 function retainedArtifactPath(metadata) {
-  return join29(metadata.storeRoot, "agent-discovery", "artifacts", metadata.sha256, "catalog.json");
+  return join30(metadata.storeRoot, "agent-discovery", "artifacts", metadata.sha256, "catalog.json");
 }
 function validRetainedArtifact(value) {
-  return keys(value, ["version", "kind", "storeRoot", "originalPath", "sha256", "catalogSha256"]) && value.version === 1 && value.kind === "codex-native-catalog" && hex(value.sha256) && hex(value.catalogSha256) && [value.storeRoot, value.originalPath].every((path) => typeof path === "string" && isAbsolute23(path) && resolve21(path) === path && path.length <= AGENT_POLICY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(path));
+  return keys(value, ["version", "kind", "storeRoot", "originalPath", "sha256", "catalogSha256"]) && value.version === 1 && value.kind === "codex-native-catalog" && hex(value.sha256) && hex(value.catalogSha256) && [value.storeRoot, value.originalPath].every((path) => typeof path === "string" && isAbsolute23(path) && resolve22(path) === path && path.length <= AGENT_POLICY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(path));
 }
 function privateStore(storeRoot) {
   safe4(storeRoot);
-  const stat2 = lstatSync26(storeRoot, { throwIfNoEntry: false });
+  const stat2 = lstatSync27(storeRoot, { throwIfNoEntry: false });
   need9(!stat2 || stat2.isDirectory() && (stat2.mode & 18) === 0 && (process.getuid === undefined || stat2.uid === process.getuid()));
 }
 function verifyRetainedReviewArtifact(source, storeRoot) {
   const artifact = source.reviewArtifact;
-  need9(validRetainedArtifact(artifact) && source.hashMode === "bytes" && source.sha256 === artifact.sha256 && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && source.path === retainedArtifactPath(artifact) && (storeRoot === undefined || artifact.storeRoot === resolve21(storeRoot)));
+  need9(validRetainedArtifact(artifact) && source.hashMode === "bytes" && source.sha256 === artifact.sha256 && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && source.path === retainedArtifactPath(artifact) && (storeRoot === undefined || artifact.storeRoot === resolve22(storeRoot)));
   privateStore(artifact.storeRoot);
   const text2 = readExact(source.path);
   need9(sha3(text2) === artifact.sha256 && catalogDigest(text2) === artifact.catalogSha256);
-  for (let parent = dirname20(source.path);parent !== artifact.storeRoot; parent = dirname20(parent)) {
-    const stat2 = lstatSync26(parent);
+  for (let parent = dirname21(source.path);parent !== artifact.storeRoot; parent = dirname21(parent)) {
+    const stat2 = lstatSync27(parent);
     need9(stat2.isDirectory() && (stat2.mode & 63) === 0 && (process.getuid === undefined || stat2.uid === process.getuid()));
   }
 }
@@ -19385,7 +19512,7 @@ function planReviewArtifactRetention(binding, artifacts, dataDir2, home) {
   if (artifacts === undefined)
     return { binding, changes: [], observed: [] };
   need9(binding.agent === "codex" && binding.method === "reviewed" && Array.isArray(artifacts) && artifacts.length > 0 && artifacts.length <= 32);
-  privateStore(resolve21(dataDir2));
+  privateStore(resolve22(dataDir2));
   const paths = new Set;
   const changes = [], observed = [];
   let totalBytes = 0;
@@ -19394,19 +19521,19 @@ function planReviewArtifactRetention(binding, artifacts, dataDir2, home) {
     need9(keys(declaration, ["kind", "path", "sha256"]) && declaration.kind === "codex-native-catalog" && hex(declaration.sha256) && !paths.has(declaration.path));
     paths.add(declaration.path);
     safe4(declaration.path);
-    const liveRoots = [join29(home, ".codex"), ...binding.roots, ...(binding.directories ?? []).map((item) => item.path)];
-    need9(!liveRoots.some((root) => declaration.path === root || declaration.path.startsWith(root + sep12)));
+    const liveRoots = [join30(home, ".codex"), ...binding.roots, ...(binding.directories ?? []).map((item) => item.path)];
+    need9(!liveRoots.some((root) => declaration.path === root || declaration.path.startsWith(root + sep13)));
     const matches = sources.filter((source2) => source2.path === declaration.path);
     need9(matches.length === 1 && matches[0].sha256 === declaration.sha256 && matches[0].reviewArtifact === undefined && [undefined, "bytes"].includes(matches[0].hashMode) && matches[0].format === undefined && matches[0].fields === undefined && matches[0].managedPlugins === undefined);
     const text2 = readExact(declaration.path);
     need9(sha3(text2) === declaration.sha256);
     totalBytes += Buffer.byteLength(text2);
     need9(totalBytes <= AGENT_POLICY_LIMITS.discoveryRawTotalBytes);
-    const metadata = { version: 1, kind: declaration.kind, storeRoot: resolve21(dataDir2), originalPath: declaration.path, sha256: declaration.sha256, catalogSha256: catalogDigest(text2) };
+    const metadata = { version: 1, kind: declaration.kind, storeRoot: resolve22(dataDir2), originalPath: declaration.path, sha256: declaration.sha256, catalogSha256: catalogDigest(text2) };
     const path = retainedArtifactPath(metadata);
     safe4(path);
     const source = { path, sha256: metadata.sha256, hashMode: "bytes", reviewArtifact: metadata };
-    if (lstatSync26(path, { throwIfNoEntry: false }))
+    if (lstatSync27(path, { throwIfNoEntry: false }))
       verifyRetainedReviewArtifact(source, dataDir2);
     else if (!changes.some((change) => change.path === path))
       changes.push({ path, before: null, after: text2, artifact: metadata });
@@ -19420,14 +19547,14 @@ function writeReviewArtifactExclusive(change) {
   need9(change.before === null && validRetainedArtifact(change.artifact) && change.path === retainedArtifactPath(change.artifact) && sha3(change.after) === change.artifact.sha256 && catalogDigest(change.after) === change.artifact.catalogSha256);
   privateStore(change.artifact.storeRoot);
   const missing2 = [];
-  for (let parent = dirname20(change.path);!lstatSync26(parent, { throwIfNoEntry: false }); parent = dirname20(parent))
+  for (let parent = dirname21(change.path);!lstatSync27(parent, { throwIfNoEntry: false }); parent = dirname21(parent))
     missing2.push(parent);
   for (const parent of missing2.reverse())
     mkdirSync7(parent, { mode: 448 });
   safe4(change.path);
   privateStore(change.artifact.storeRoot);
-  for (let parent = dirname20(change.path);parent !== change.artifact.storeRoot; parent = dirname20(parent)) {
-    const stat2 = lstatSync26(parent);
+  for (let parent = dirname21(change.path);parent !== change.artifact.storeRoot; parent = dirname21(parent)) {
+    const stat2 = lstatSync27(parent);
     need9(stat2.isDirectory() && (stat2.mode & 63) === 0 && (process.getuid === undefined || stat2.uid === process.getuid()));
   }
   const fd = openSync16(change.path, constants17.O_WRONLY | constants17.O_CREAT | constants17.O_EXCL | constants17.O_NOFOLLOW, 384);
@@ -19444,7 +19571,7 @@ function writeReviewArtifactExclusive(change) {
     closeSync16(fd);
   }
   need9(readExact(change.path) === change.after);
-  const directory2 = openSync16(dirname20(change.path), constants17.O_RDONLY | constants17.O_DIRECTORY | constants17.O_NOFOLLOW);
+  const directory2 = openSync16(dirname21(change.path), constants17.O_RDONLY | constants17.O_DIRECTORY | constants17.O_NOFOLLOW);
   try {
     fsyncSync6(directory2);
   } finally {
@@ -19461,7 +19588,7 @@ function nativeAgentRoot(home, agent, cwd = process.cwd()) {
   const root = AGENT_ADAPTERS[agent].root;
   if (typeof root !== "string")
     throw new Error(`Native skill root is unavailable for ${agent}`);
-  return join30(home, root);
+  return join31(home, root);
 }
 function nativeAgentConfig(home, agent, cwd = process.cwd()) {
   if (agent === "sumi")
@@ -19469,7 +19596,7 @@ function nativeAgentConfig(home, agent, cwd = process.cwd()) {
   const config = AGENT_ADAPTERS[agent].config;
   if (typeof config !== "string")
     throw new Error(`Native configuration path is unavailable for ${agent}`);
-  return join30(home, config);
+  return join31(home, config);
 }
 function hasTrustedDarwinAcl(fd, allowDenyOnly = false) {
   try {
@@ -19521,11 +19648,11 @@ function isSystemRootAlias(path) {
   const identity5 = (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}:${stat2.uid}:${stat2.mode}`;
   const directoryIdentity = (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.uid}:${stat2.mode}`;
   try {
-    const before = lstatSync27(path, { bigint: true });
+    const before = lstatSync28(path, { bigint: true });
     if (!before.isSymbolicLink() || before.uid !== 0n || readlinkSync7(path) !== link)
       return false;
     const directories = ["/", "/private", target].map((directory2) => {
-      const stat2 = lstatSync27(directory2, { bigint: true });
+      const stat2 = lstatSync28(directory2, { bigint: true });
       if (!stat2.isDirectory() || stat2.uid !== 0n)
         throw new Error("Untrusted system alias directory");
       if (directory2 !== "/private/tmp") {
@@ -19542,25 +19669,25 @@ function isSystemRootAlias(path) {
       }
       return { directory: directory2, identity: directoryIdentity(stat2) };
     });
-    return realpathSync12(path) === target && readlinkSync7(path) === link && identity5(lstatSync27(path, { bigint: true })) === identity5(before) && directories.every((item) => directoryIdentity(lstatSync27(item.directory, { bigint: true })) === item.identity);
+    return realpathSync12(path) === target && readlinkSync7(path) === link && identity5(lstatSync28(path, { bigint: true })) === identity5(before) && directories.every((item) => directoryIdentity(lstatSync28(item.directory, { bigint: true })) === item.identity);
   } catch {
     return false;
   }
 }
 function canonicalSystemPath(path) {
-  const absolute = resolve22(path), root = `/${absolute.split(sep13)[1]}`;
-  if (process.platform !== "darwin" || !["/var", "/tmp", "/etc"].includes(root) || !lstatSync27(root, { throwIfNoEntry: false })?.isSymbolicLink())
+  const absolute = resolve23(path), root = `/${absolute.split(sep14)[1]}`;
+  if (process.platform !== "darwin" || !["/var", "/tmp", "/etc"].includes(root) || !lstatSync28(root, { throwIfNoEntry: false })?.isSymbolicLink())
     return absolute;
   if (!isSystemRootAlias(root))
     throw new Error(`Refusing symlink path: ${root}`);
   return `/private${absolute}`;
 }
 function assertSafePath(path) {
-  let cursor = resolve22(path);
+  let cursor = resolve23(path);
   while (true) {
-    if (lstatSync27(cursor, { throwIfNoEntry: false })?.isSymbolicLink() && !isSystemRootAlias(cursor))
+    if (lstatSync28(cursor, { throwIfNoEntry: false })?.isSymbolicLink() && !isSystemRootAlias(cursor))
       throw new Error(`Refusing symlink path: ${cursor}`);
-    const parent = dirname21(cursor);
+    const parent = dirname22(cursor);
     if (parent === cursor)
       return;
     cursor = parent;
@@ -19568,17 +19695,17 @@ function assertSafePath(path) {
 }
 function readRootAlias(home, agent) {
   assertSafePath(home);
-  const realHome = realpathSync12(home), alias = join30(realHome, `.${agent}`);
-  const stat2 = lstatSync27(alias, { throwIfNoEntry: false, bigint: true });
+  const realHome = realpathSync12(home), alias = join31(realHome, `.${agent}`);
+  const stat2 = lstatSync28(alias, { throwIfNoEntry: false, bigint: true });
   if (!stat2?.isSymbolicLink())
     throw new Error(`Agent root alias changed after planning: ${alias}`);
-  const link = readlinkSync7(alias), targetPath = resolve22(dirname21(alias), link);
+  const link = readlinkSync7(alias), targetPath = resolve23(dirname22(alias), link);
   assertSafePath(targetPath);
-  const targetStat = lstatSync27(targetPath, { throwIfNoEntry: false });
+  const targetStat = lstatSync28(targetPath, { throwIfNoEntry: false });
   if (!targetStat?.isDirectory())
     throw new Error(`Agent root alias must target an existing directory: ${alias}`);
   const target = realpathSync12(targetPath), inside = relative9(realHome, target);
-  if (!inside || inside === ".." || inside.startsWith(`..${sep13}`) || isAbsolute24(inside))
+  if (!inside || inside === ".." || inside.startsWith(`..${sep14}`) || isAbsolute24(inside))
     throw new Error(`Agent root alias target must be inside the real home: ${alias}`);
   return { agent, home: realHome, alias, target, link, aliasIdentity: `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}`, targetIdentity: `${targetStat.dev}:${targetStat.ino}` };
 }
@@ -19587,15 +19714,15 @@ function rootAliases(home, allowed = false) {
     return [];
   const result = [];
   for (const agent of ["claude", "codex"])
-    if (lstatSync27(join30(home, `.${agent}`), { throwIfNoEntry: false })?.isSymbolicLink())
+    if (lstatSync28(join31(home, `.${agent}`), { throwIfNoEntry: false })?.isSymbolicLink())
       result.push(readRootAlias(home, agent));
-  if (result.some((item, index) => result.slice(index + 1).some((other) => item.target === other.target || item.target.startsWith(other.target + sep13) || other.target.startsWith(item.target + sep13))))
+  if (result.some((item, index) => result.slice(index + 1).some((other) => item.target === other.target || item.target.startsWith(other.target + sep14) || other.target.startsWith(item.target + sep14))))
     throw new Error("Agent root alias targets must not overlap");
   return result;
 }
 function canonicalAgentPath(path, aliases) {
-  const absolute = canonicalSystemPath(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep13));
-  return binding ? join30(binding.target, relative9(binding.alias, absolute)) : absolute;
+  const absolute = canonicalSystemPath(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep14));
+  return binding ? join31(binding.target, relative9(binding.alias, absolute)) : absolute;
 }
 function disabledCodexSkillPaths(config, aliases) {
   const skills = config.skills;
@@ -19618,15 +19745,15 @@ function disabledCodexSkillPaths(config, aliases) {
     } catch {
       continue;
     }
-    if (!document2.endsWith(`${sep13}SKILL.md`))
+    if (!document2.endsWith(`${sep14}SKILL.md`))
       continue;
     settings.set(document2, [...settings.get(document2) ?? [], entry.enabled === false]);
   }
-  return [...settings].filter(([, values]) => values.length === 1 && values[0] === true).map(([document2]) => dirname21(document2));
+  return [...settings].filter(([, values]) => values.length === 1 && values[0] === true).map(([document2]) => dirname22(document2));
 }
 function recheckRootAliases(aliases) {
   for (const binding of aliases) {
-    if (!["claude", "codex"].includes(binding.agent) || binding.alias !== join30(binding.home, `.${binding.agent}`))
+    if (!["claude", "codex"].includes(binding.agent) || binding.alias !== join31(binding.home, `.${binding.agent}`))
       throw new Error("Invalid agent root alias binding");
     const current = readRootAlias(binding.home, binding.agent);
     if (JSON.stringify(current) !== JSON.stringify(binding))
@@ -19635,11 +19762,11 @@ function recheckRootAliases(aliases) {
 }
 function nativeSourceDigest(path) {
   assertSafePath(path);
-  return lstatSync27(path, { throwIfNoEntry: false }) ? sha4(readNativeBytes(path, 1024 * 1024)) : null;
+  return lstatSync28(path, { throwIfNoEntry: false }) ? sha4(readNativeBytes(path, 1024 * 1024)) : null;
 }
 function readNativeBytes(path, maximum = 64 * 1024 * 1024) {
   assertSafePath(path);
-  const before = lstatSync27(path);
+  const before = lstatSync28(path);
   if (!before.isFile() || before.size > maximum)
     throw new Error("Unsupported or oversized native skill file");
   const descriptor = openSync17(path, constants18.O_RDONLY | constants18.O_NOFOLLOW | constants18.O_NONBLOCK);
@@ -19655,7 +19782,7 @@ function readNativeBytes(path, maximum = 64 * 1024 * 1024) {
         break;
       length += count;
     }
-    const after = fstatSync17(descriptor), current = lstatSync27(path);
+    const after = fstatSync17(descriptor), current = lstatSync28(path);
     if (current.dev !== opened.dev || current.ino !== opened.ino || current.size !== after.size || current.mtimeMs !== after.mtimeMs || current.ctimeMs !== after.ctimeMs || length !== before.size || after.size !== before.size || after.mtimeMs !== opened.mtimeMs || after.ctimeMs !== opened.ctimeMs)
       throw new Error("Native skill file changed while reading");
     return bytes.subarray(0, length);
@@ -19667,14 +19794,14 @@ function treeHash(root) {
   const hash3 = createHash27("sha256");
   let bytes = 0, files = 0;
   function visit2(path) {
-    const stat2 = lstatSync27(path);
+    const stat2 = lstatSync28(path);
     if (stat2.isSymbolicLink())
       throw new Error(`Refusing symlink in skill: ${path}`);
     const rel = relative9(root, path);
     if (stat2.isDirectory()) {
       hash3.update(`d\x00${rel}\x00`);
       for (const name of readdirSync10(path).sort())
-        visit2(join30(path, name));
+        visit2(join31(path, name));
       return;
     }
     if (!stat2.isFile())
@@ -19696,20 +19823,20 @@ function selectNativeMigrationTargets(inventory, manifest) {
   const identities = new Set;
   const selected = [];
   for (const target of manifest.targets) {
-    if (!isAbsolute24(target.projectRoot) || resolve22(target.projectRoot) !== target.projectRoot)
+    if (!isAbsolute24(target.projectRoot) || resolve23(target.projectRoot) !== target.projectRoot)
       throw new Error(`Native migration target project root must be an existing absolute directory: ${target.projectRoot}`);
-    const projectRoot = canonicalSystemPath(target.projectRoot), normalized2 = relative9(projectRoot, resolve22(projectRoot, target.path));
-    if (!existsSync9(projectRoot) || !lstatSync27(projectRoot).isDirectory())
+    const projectRoot = canonicalSystemPath(target.projectRoot), normalized2 = relative9(projectRoot, resolve23(projectRoot, target.path));
+    if (!existsSync9(projectRoot) || !lstatSync28(projectRoot).isDirectory())
       throw new Error(`Native migration target project root must be an existing absolute directory: ${target.projectRoot}`);
     assertSafePath(projectRoot);
-    if (isAbsolute24(target.path) || target.path.includes("\\") || target.path.includes("\x00") || !normalized2 || normalized2 === ".." || normalized2.startsWith(`..${sep13}`) || normalized2 !== target.path || !/^[0-9a-f]{64}$/.test(target.treeSha256))
+    if (isAbsolute24(target.path) || target.path.includes("\\") || target.path.includes("\x00") || !normalized2 || normalized2 === ".." || normalized2.startsWith(`..${sep14}`) || normalized2 !== target.path || !/^[0-9a-f]{64}$/.test(target.treeSha256))
       throw new Error(`Invalid native migration target: ${target.path}`);
     const identity5 = `${target.agent}\x00${canonicalSystemPath(projectRoot)}\x00${normalized2}`;
     if (identities.has(identity5))
       throw new Error(`Duplicate native migration target: ${target.path}`);
     identities.add(identity5);
-    const expected = canonicalSystemPath(resolve22(target.projectRoot, target.path));
-    const matches = inventory.filter((entry2) => entry2.agent === target.agent && resolve22(entry2.path) === expected);
+    const expected = canonicalSystemPath(resolve23(target.projectRoot, target.path));
+    const matches = inventory.filter((entry2) => entry2.agent === target.agent && resolve23(entry2.path) === expected);
     if (matches.length !== 1)
       throw new Error(`Native migration target was not found exactly once: ${target.agent} ${target.projectRoot}/${target.path}`);
     const entry = matches[0];
@@ -19728,7 +19855,7 @@ function projectAncestorDirectories(projects) {
       if (depth >= 100)
         throw new Error("NATIVE_SKILL_DRIFT: project ancestor discovery limit exceeded");
       directories.add(path);
-      const parent = dirname21(path);
+      const parent = dirname22(path);
       if (parent === path)
         break;
       path = parent;
@@ -19737,17 +19864,17 @@ function projectAncestorDirectories(projects) {
   return [...directories];
 }
 function isCodexSkillDiscoveryInput(path) {
-  for (let cursor = canonicalSystemPath(path);cursor !== dirname21(cursor); cursor = dirname21(cursor)) {
-    if (ROOTS.some(([agent, root]) => agent === "codex" && cursor.endsWith(join30(sep13, root))))
+  for (let cursor = canonicalSystemPath(path);cursor !== dirname22(cursor); cursor = dirname22(cursor)) {
+    if (ROOTS.some(([agent, root]) => agent === "codex" && cursor.endsWith(join31(sep14, root))))
       return true;
   }
   return false;
 }
 function inventoryNativeSkills(home = homedir2(), options = {}) {
   home = canonicalSystemPath(home);
-  if (options.reviewedCacheAlias !== undefined && (!options.includeVendor || !isAbsolute24(options.reviewedCacheAlias) || resolve22(options.reviewedCacheAlias) !== options.reviewedCacheAlias))
+  if (options.reviewedCacheAlias !== undefined && (!options.includeVendor || !isAbsolute24(options.reviewedCacheAlias) || resolve23(options.reviewedCacheAlias) !== options.reviewedCacheAlias))
     throw new Error("A reviewed cache alias requires vendor inventory and an exact absolute path");
-  if (options.disabledVendorPaths?.some((path) => !isAbsolute24(path) || resolve22(path) !== path))
+  if (options.disabledVendorPaths?.some((path) => !isAbsolute24(path) || resolve23(path) !== path))
     throw new Error("Disabled vendor paths must be exact absolute paths");
   const reviewedCacheAlias = options.reviewedCacheAlias === undefined ? undefined : canonicalSystemPath(options.reviewedCacheAlias);
   const disabledVendorPaths = new Set((options.disabledVendorPaths ?? []).map(canonicalSystemPath));
@@ -19755,25 +19882,25 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
   const selectedAgents = options.agents ? new Set(options.agents) : undefined;
   const includesAgent = (agent) => !selectedAgents || selectedAgents.has(agent);
   const rootDefinitions = selectedAgents ? ROOTS.filter(([agent, path]) => agent !== "sumi" && selectedAgents.has(agent) || selectedAgents.has("hermes") && agent === "codex" && path === ".agents/skills") : ROOTS.filter(([agent]) => agent !== "sumi");
-  const roots = rootDefinitions.map(([agent, path]) => [agent, canonicalAgentPath(join30(home, path), aliases)]);
+  const roots = rootDefinitions.map(([agent, path]) => [agent, canonicalAgentPath(join31(home, path), aliases)]);
   const includesSumi = !selectedAgents || selectedAgents.has("sumi");
   if (includesSumi)
     for (const path of sumiSkillRoots(home))
       roots.push(["sumi", canonicalAgentPath(path, aliases)]);
-  const bridgePaths = Object.entries(AGENT_ADAPTERS).filter(([agent]) => agent !== "sumi" || includesSumi).map(([agent]) => canonicalAgentPath(join30(nativeAgentRoot(home, agent), CLI_BRIDGE_NAME), aliases));
+  const bridgePaths = Object.entries(AGENT_ADAPTERS).filter(([agent]) => agent !== "sumi" || includesSumi).map(([agent]) => canonicalAgentPath(join31(nativeAgentRoot(home, agent), CLI_BRIDGE_NAME), aliases));
   for (const project of projectAncestorDirectories([...options.projectDirs ?? [], ...options.projectDir ? [options.projectDir] : []])) {
     for (const [agent, path] of rootDefinitions)
-      roots.push([agent, canonicalAgentPath(join30(project, path), aliases)]);
+      roots.push([agent, canonicalAgentPath(join31(project, path), aliases)]);
     if (selectedAgents?.has("sumi")) {
       for (const path of sumiSkillRoots(home, project))
         roots.push(["sumi", canonicalAgentPath(path, aliases)]);
       for (const directory2 of [".claude", ".agents"])
         for (const name of ["skill", "skills"])
-          roots.push(["sumi", canonicalAgentPath(join30(project, directory2, name), aliases)]);
+          roots.push(["sumi", canonicalAgentPath(join31(project, directory2, name), aliases)]);
     }
   }
   const installationInputs = options.codexInstallationInputRoots ?? [];
-  if (installationInputs.some((input) => resolve22(input) !== input || realpathSync12(input) !== input || roots.some(([agent, path]) => agent === "codex" && (path === input || path.startsWith(input + sep13) || input.startsWith(path + sep13)))))
+  if (installationInputs.some((input) => resolve23(input) !== input || realpathSync12(input) !== input || roots.some(([agent, path]) => agent === "codex" && (path === input || path.startsWith(input + sep14) || input.startsWith(path + sep14)))))
     throw new Error("Native installation input overlaps an unconditional skill-loading root");
   const entries = [], seen = new Set;
   const cacheScans = new Map, maxAliasProofEntries = 1e4;
@@ -19787,19 +19914,19 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
   }
   let reviewedCacheAliasFound = false;
   function verifiedSiblingCacheAlias(agent, path, parent) {
-    const link = readlinkSync7(path), lexicalTarget = resolve22(parent, link);
-    if (isAbsolute24(link) ? link !== lexicalTarget : dirname21(link) !== ".")
+    const link = readlinkSync7(path), lexicalTarget = resolve23(parent, link);
+    if (isAbsolute24(link) ? link !== lexicalTarget : dirname22(link) !== ".")
       return false;
     const target = canonicalSystemPath(lexicalTarget);
-    if (dirname21(target) !== parent)
+    if (dirname22(target) !== parent)
       return false;
-    if (!lstatSync27(target, { throwIfNoEntry: false })?.isDirectory())
+    if (!lstatSync28(target, { throwIfNoEntry: false })?.isDirectory())
       return false;
     const scan = cacheScans.get(target);
     if (!scan?.complete || scan.entries > maxAliasProofEntries)
       return false;
     if (scan.hasSkills) {
-      const targetSkills = entries.filter((entry) => entry.agent === agent && entry.vendor && (entry.path === target || entry.path.startsWith(target + sep13)));
+      const targetSkills = entries.filter((entry) => entry.agent === agent && entry.vendor && (entry.path === target || entry.path.startsWith(target + sep14)));
       if (path === reviewedCacheAlias && targetSkills.length > 0)
         reviewedCacheAliasFound = true;
       if (agent === "codex" && targetSkills.length > 0 && targetSkills.every((entry) => disabledVendorPaths.has(entry.path) || options.disabledVendorSkill?.(entry) === true))
@@ -19814,11 +19941,11 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
       admit(path);
     const scan = { complete: true, hasSkills: false, entries: 1 };
     assertSafePath(path);
-    if (configuredRoot && agent === "codex" && installationInputs.some((root) => path === root || path.startsWith(`${root}${sep13}`)))
+    if (configuredRoot && agent === "codex" && installationInputs.some((root) => path === root || path.startsWith(`${root}${sep14}`)))
       return scan;
     if (!existsSync9(path))
       return scan;
-    const stat2 = lstatSync27(path);
+    const stat2 = lstatSync28(path);
     if (stat2.isFile()) {
       if (agent === "sumi" && depth === 1 && path.endsWith(".md"))
         throw new Error("NATIVE_SKILL_DRIFT: flat Sumi skill documents require a dedicated migration adapter");
@@ -19826,21 +19953,21 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     }
     if (!stat2.isDirectory())
       throw new Error(`Unsupported native discovery entry: ${path}`);
-    if (existsSync9(join30(path, "SKILL.md"))) {
+    if (existsSync9(join31(path, "SKILL.md"))) {
       scan.hasSkills = true;
       if (seen.has(path))
         return scan;
       seen.add(path);
       let managed = false;
-      const marker = join30(path, ".hasna-skills.json");
+      const marker = join31(path, ".hasna-skills.json");
       if (existsSync9(marker)) {
         try {
-          managed = JSON.parse(readFileSync18(marker, "utf8")).managedBy === "@hasna/skills";
+          managed = JSON.parse(readFileSync19(marker, "utf8")).managedBy === "@hasna/skills";
         } catch {}
       }
       const bridge = (!vendor || agent === "sumi") && isOwnedCliBridge(path, bridgePaths);
-      const rootAlias = aliases.find((item) => path === item.target || path.startsWith(item.target + sep13));
-      entries.push({ agent, path, hash: treeHash(path), managed, vendor, ...agent === "codex" || isCodexSkillDiscoveryInput(path) ? { codexHome: process.env.CODEX_HOME ?? join30(home, ".codex") } : {}, ...agent === "codex" && path.startsWith(canonicalAgentPath(join30(home, ".codex", "skills", ".system"), aliases) + sep13) ? { system: true } : {}, ...bridge ? { bridge: true, bridgeHome: resolve22(home) } : {}, ...rootAlias ? { rootAlias } : {} });
+      const rootAlias = aliases.find((item) => path === item.target || path.startsWith(item.target + sep14));
+      entries.push({ agent, path, hash: treeHash(path), managed, vendor, ...agent === "codex" || isCodexSkillDiscoveryInput(path) ? { codexHome: process.env.CODEX_HOME ?? join31(home, ".codex") } : {}, ...agent === "codex" && path.startsWith(canonicalAgentPath(join31(home, ".codex", "skills", ".system"), aliases) + sep14) ? { system: true } : {}, ...bridge ? { bridge: true, bridgeHome: resolve23(home) } : {}, ...rootAlias ? { rootAlias } : {} });
       return scan;
     }
     if (depth > (agent === "sumi" ? 32 : vendor ? 32 : 3))
@@ -19849,7 +19976,7 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     try {
       let child2;
       while ((child2 = directory2.readSync()) !== null) {
-        admit(join30(path, child2.name));
+        admit(join31(path, child2.name));
         children.push(child2);
       }
     } finally {
@@ -19859,15 +19986,15 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     if (pluginCache)
       children.sort((a, b) => Number(a.isSymbolicLink()) - Number(b.isSymbolicLink()));
     for (const { name } of children) {
-      if (name === "node_modules")
+      if (name === "node_modules" && !(agent === "codex" && (!pluginCache || codexPluginCacheSkillTree(join31(path, name), depth + 1))))
         continue;
-      if (name.startsWith(".") && name !== ".system" && agent !== "hermes" && agent !== "sumi" && !(options.guardHermes && `${path}${sep13}`.includes(`${sep13}.agents${sep13}skills${sep13}`)))
+      if (name.startsWith(".") && name !== ".system" && agent !== "hermes" && agent !== "sumi" && !(options.guardHermes && `${path}${sep14}`.includes(`${sep14}.agents${sep14}skills${sep14}`)))
         continue;
       const isVendor = vendor || name === ".system";
       if (isVendor && !options.includeVendor)
         continue;
-      const child2 = join30(path, name);
-      if (isVendor && lstatSync27(child2, { throwIfNoEntry: false })?.isSymbolicLink()) {
+      const child2 = join31(path, name);
+      if (isVendor && lstatSync28(child2, { throwIfNoEntry: false })?.isSymbolicLink()) {
         const target = statSync11(child2, { throwIfNoEntry: false });
         if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(agent, child2, path)) {
           scan.entries++;
@@ -19884,7 +20011,7 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     return scan;
   }
   function scanRoot(agent, path, vendor = false, pluginCache = false, configuredRoot = false) {
-    if (agent === "hermes" || options.guardHermes && `${path}${sep13}`.includes(`${sep13}.agents${sep13}skills${sep13}`))
+    if (agent === "hermes" || options.guardHermes && `${path}${sep14}`.includes(`${sep14}.agents${sep14}skills${sep14}`))
       assertNoHermesLegacyShadow(path);
     if (!visit2(agent, path, vendor, 0, pluginCache, false, configuredRoot).complete)
       throw new Error(`Native skill discovery limit exceeded; review this root before continuing: ${path}`);
@@ -19893,11 +20020,11 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     scanRoot(agent, path);
   if (options.includeVendor) {
     for (const agent of ["codex", "claude"].filter(includesAgent))
-      scanRoot(agent, canonicalAgentPath(join30(home, `.${agent}`, "plugins", "cache"), aliases), true, true);
+      scanRoot(agent, canonicalAgentPath(join31(home, `.${agent}`, "plugins", "cache"), aliases), true, true);
     if (includesAgent("claude"))
-      scanRoot("claude", canonicalAgentPath(join30(home, ".claude", "plugins", "synced"), aliases), true);
+      scanRoot("claude", canonicalAgentPath(join31(home, ".claude", "plugins", "synced"), aliases), true);
     if (includesAgent("gemini"))
-      scanRoot("gemini", join30(home, ".gemini", "extensions"), true);
+      scanRoot("gemini", join31(home, ".gemini", "extensions"), true);
   }
   const configured = options.configured ? INTEGRATION_AGENTS.filter(includesAgent).flatMap((agent) => resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, canonical: (path) => canonicalAgentPath(path, aliases) }).roots.map((path) => ({ agent, path }))) : [];
   for (const root of [...options.agentRoots ?? [], ...configured])
@@ -19910,7 +20037,7 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
 }
 function readOptional(path) {
   assertSafePath(path);
-  return existsSync9(path) ? readFileSync18(path, "utf8") : null;
+  return existsSync9(path) ? readFileSync19(path, "utf8") : null;
 }
 function jsonObject(text2, path) {
   if (text2 === null)
@@ -20010,19 +20137,19 @@ function configureHooks(config, agent, command, profileId, nativeReady) {
 function disableCodexSkills(text2, skills, aliases, bridgePath) {
   const bundled = disableCodexBundledSkills(text2);
   let result = normalizeCodexInlinePathConfig(bundled);
-  const bridgeSelector = (entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME || typeof entry.path === "string" && [resolve22(bridgePath), resolve22(join30(bridgePath, "SKILL.md"))].includes(canonicalAgentPath(entry.path, aliases));
+  const bridgeSelector = (entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME || typeof entry.path === "string" && [resolve23(bridgePath), resolve23(join31(bridgePath, "SKILL.md"))].includes(canonicalAgentPath(entry.path, aliases));
   const previousConfig = Bun.TOML.parse(bundled).skills?.config;
   if (previousConfig !== undefined && (!Array.isArray(previousConfig) || previousConfig.some((entry) => !entry || typeof entry !== "object" || entry.path !== undefined && entry.name !== undefined)))
     throw new Error("Codex skill controls require one path or name selector per [[skills.config]] entry; review ambiguous entries before running skills hook install");
   const bridgeNeedsRepair = previousConfig?.some((entry) => entry.enabled === false && bridgeSelector(entry));
   const selections = [...skills.filter((entry) => entry.agent === "codex" && !entry.bridge).map((skill) => ({ path: skill.path, enabled: false })), { path: bridgePath, enabled: true }];
   for (const skill of selections) {
-    const path = join30(skill.path, "SKILL.md");
+    const path = join31(skill.path, "SKILL.md");
     let found = false;
     result = result.replace(CODEX_SKILL_CONFIG_SECTIONS, (section) => {
       const parsed = Bun.TOML.parse(section);
       const declared = parsed.skills?.config?.[0];
-      if (!declared || !(skill.enabled && bridgeSelector(declared)) && !(typeof declared.path === "string" && [resolve22(path), resolve22(skill.path)].includes(canonicalAgentPath(declared.path, aliases))))
+      if (!declared || !(skill.enabled && bridgeSelector(declared)) && !(typeof declared.path === "string" && [resolve23(path), resolve23(skill.path)].includes(canonicalAgentPath(declared.path, aliases))))
         return section;
       found = true;
       return /^\s*enabled\s*=/m.test(section) ? section.replace(/^\s*enabled\s*=.*$/m, `enabled = ${skill.enabled}`) : `${section.trimEnd()}
@@ -20043,8 +20170,8 @@ enabled = false
   return result;
 }
 function assertCodexInstallationInputs(home, projectDirs, inputs) {
-  const nativeRoots = [home, ...projectAncestorDirectories(projectDirs)].flatMap((directory2) => ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => resolve22(directory2, path)));
-  if (inputs.some((input) => nativeRoots.some((root) => root === input || root.startsWith(input + sep13) || input.startsWith(root + sep13))))
+  const nativeRoots = [home, ...projectAncestorDirectories(projectDirs)].flatMap((directory2) => ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => resolve23(directory2, path)));
+  if (inputs.some((input) => nativeRoots.some((root) => root === input || root.startsWith(input + sep14) || input.startsWith(root + sep14))))
     throw new Error("Native installation input overlaps an unconditional skill-loading root");
 }
 function planAgentIntegration(options) {
@@ -20054,7 +20181,7 @@ function planAgentIntegration(options) {
     throw new Error("Explicit Codex skill denials require a fresh native catalog and discovery review");
   const home = options.home ?? homedir2(), dataDir2 = options.dataDir ?? getDataDirReadOnly();
   const aliases = rootAliases(home, options.allowRootAliases);
-  const policyPath = join30(dataDir2, "agent-policy.json");
+  const policyPath = join31(dataDir2, "agent-policy.json");
   assertSafePath(policyPath);
   const priorSnapshot = readManagedSkillPolicySnapshot(dataDir2), previousPolicy = priorSnapshot?.text ?? null, policy = priorSnapshot?.value ?? {};
   if (policy.bridge !== undefined && (!policy.bridge || typeof policy.bridge !== "object" || Array.isArray(policy.bridge)))
@@ -20085,34 +20212,42 @@ function planAgentIntegration(options) {
     const executable2 = discoveryExecutable(agent) ?? (prior ? recordedDiscoveryExecutable(agent, prior) : null);
     executables.set(agent, executable2);
     const retainedReview = options.discoveryInputs === undefined && policy.bridge?.discovery?.[agent]?.method === "reviewed" ? { ...policy.bridge.discovery[agent], ...agent === "codex" ? { codexDisabledPluginSkills: policy.bridge.codexPluginSkills ?? [] } : {} } : undefined;
-    if (retainedReview) {
-      assertManagedAgentBridge(agent, { home, dataDir: dataDir2, projectDir: options.projectDir ?? home });
-      retainedAgents.push(agent);
+    try {
+      if (retainedReview) {
+        assertRetainedReviewState(agent, { home, dataDir: dataDir2, projectDir: options.projectDir ?? home });
+        retainedAgents.push(agent);
+      }
+      return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases), executable: executable2 });
+    } catch (error) {
+      if (isDiscoveryRootUnresolved(error) || error instanceof SumiPathResolverError || error instanceof NativeSkillCopiesDriftError)
+        throw error;
+      if (!retainedReview)
+        throw error;
+      throw new Error(`NATIVE_SKILL_DRIFT: ${error.message.replace(/^NATIVE_SKILL_DRIFT: /, "")}. This agent reuses a saved discovery review and that review no longer verifies, so a fresh explicit review is required: skills hook install --agent ${agent} --discovery-inputs <review> --apply.`);
     }
-    return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases), executable: executable2 });
   });
-  const codexConfigBefore = options.agents.includes("codex") ? readOptional(canonicalAgentPath(join30(home, ".codex", "config.toml"), aliases)) : null;
+  const codexConfigBefore = options.agents.includes("codex") ? readOptional(canonicalAgentPath(join31(home, ".codex", "config.toml"), aliases)) : null;
   const codexConfig = Bun.TOML.parse(codexConfigBefore ?? "");
   const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases, reviewedCacheAlias: options.reviewedCacheAlias, disabledVendorPaths: disabledCodexSkillPaths(codexConfig, aliases) });
-  const codexPathConfig = options.agents.includes("codex") ? disableCodexSkills(codexConfigBefore ?? "", nativeSkills, aliases, canonicalAgentPath(join30(home, ".codex/skills", CLI_BRIDGE_NAME), aliases)) : undefined;
+  const codexPathConfig = options.agents.includes("codex") ? disableCodexSkills(codexConfigBefore ?? "", nativeSkills, aliases, canonicalAgentPath(join31(home, ".codex/skills", CLI_BRIDGE_NAME), aliases)) : undefined;
   const plannedCodexRules = codexPathConfig === undefined ? undefined : Bun.TOML.parse(codexPathConfig).skills?.config ?? [];
   const observedNativeSources = [];
-  const codexPluginControls = options.codexNativeCatalog ? reviewCodexPluginControls(options.codexNativeCatalog, nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor).map((entry) => join30(entry.path, "SKILL.md")), canonicalAgentPath(join30(home, ".codex/plugins/cache"), aliases), resolve22(options.projectDir ?? home), (path) => {
+  const codexPluginControls = options.codexNativeCatalog ? reviewCodexPluginControls(options.codexNativeCatalog, nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor).map((entry) => join31(entry.path, "SKILL.md")), canonicalAgentPath(join31(home, ".codex/plugins/cache"), aliases), resolve23(options.projectDir ?? home), (path) => {
     const bytes = readNativeBytes(path, 1024 * 1024);
     observedNativeSources.push({ path, sha256: sha4(bytes) });
     return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
   }, codexConfig.skills?.config ?? [], codexConfig.plugins, plannedCodexRules, options.codexSkillDenials) : { skills: policy.bridge?.codexPluginSkills ?? [], inactivePlugins: policy.bridge?.codexInactivePlugins ?? [], sourceInputs: policy.bridge?.discovery?.codex?.codexInstallationInputs?.plugins ?? [] };
-  const cache = canonicalAgentPath(join30(home, ".codex/plugins/cache"), aliases);
+  const cache = canonicalAgentPath(join31(home, ".codex/plugins/cache"), aliases);
   const retired = (policy.bridge?.codexPluginSkills ?? []).filter((control) => absentDisabledCodexPluginParent(cache, control.pluginParent, policy.bridge.codexPluginSkills, codexConfig.skills?.config ?? []));
   for (const denial of options.codexSkillDenials ?? []) {
     const control = codexPluginControls.skills.find((item) => item.name === denial.name);
     if (!control)
       throw new Error("Explicit Codex denial did not resolve a reviewed identity");
-    const root = join30(control.pluginParent, relative9(control.pluginParent, denial.path).split(sep13)[0]);
+    const root = join31(control.pluginParent, relative9(control.pluginParent, denial.path).split(sep14)[0]);
     const review = options.discoveryInputs.agents.find((item) => item.agent === "codex");
-    for (const path of [join30(root, ".app.json"), join30(root, ".mcp.json"), join30(root, "hooks")])
+    for (const path of [join31(root, ".app.json"), join31(root, ".mcp.json"), join31(root, "hooks")])
       observedNativeSources.push({ path, sha256: nativeSourceDigest(path) });
-    const files = [join30(root, ".codex-plugin/plugin.json"), ...control.appSha256 ? [join30(root, ".app.json")] : [], ...control.mcpSha256 ? [join30(root, ".mcp.json")] : []];
+    const files = [join31(root, ".codex-plugin/plugin.json"), ...control.appSha256 ? [join31(root, ".app.json")] : [], ...control.mcpSha256 ? [join31(root, ".mcp.json")] : []];
     for (const path of files)
       if (!review?.sources.some((source) => source.path === path && source.format === undefined && source.fields === undefined && [undefined, "bytes"].includes(source.hashMode) && source.sha256 === sha4(readNativeBytes(path, 1024 * 1024))))
         throw new Error("Explicit Codex denial requires current full manifest and capability discovery witnesses");
@@ -20121,12 +20256,12 @@ function planAgentIntegration(options) {
   for (const discovery of discoveries)
     if (discovery.agent === "codex" && discovery.method === "reviewed")
       discovery.codexDisabledPluginSkills = codexPluginSkills;
-  if (options.agents.includes("codex") && !options.codexNativeCatalog && codexPluginSkills.length && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join30(home, ".codex/plugins/cache"), aliases), codexPluginSkills, (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? [])) {
+  if (options.agents.includes("codex") && !options.codexNativeCatalog && codexPluginSkills.length && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join31(home, ".codex/plugins/cache"), aliases), codexPluginSkills, (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? [])) {
     throw new Error("NATIVE_SKILL_DRIFT: reviewed native plugin capability controls changed; provide a fresh native catalog and discovery review");
   }
   const codexInactivePlugins = codexPluginControls.inactivePlugins;
   const codexDiscovery = discoveries.find((binding) => binding.agent === "codex");
-  const codexPluginSourceInputs = codexPluginControls.sourceInputs.filter((input) => codexDiscovery?.method === "reviewed" && codexDiscovery.roots.some((root) => root === input.sourceRoot || root.startsWith(input.sourceRoot + sep13) || input.sourceRoot.startsWith(root + sep13)) && codexDiscovery.sources.some((source) => source.path === join30(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined));
+  const codexPluginSourceInputs = codexPluginControls.sourceInputs.filter((input) => codexDiscovery?.method === "reviewed" && codexDiscovery.roots.some((root) => root === input.sourceRoot || root.startsWith(input.sourceRoot + sep14) || input.sourceRoot.startsWith(root + sep14)) && codexDiscovery.sources.some((source) => source.path === join31(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined));
   assertCodexInstallationInputs(home, [options.projectDir ?? home], codexPluginSourceInputs.map((input) => input.sourceRoot));
   const changes = [];
   let observedSettings;
@@ -20134,19 +20269,19 @@ function planAgentIntegration(options) {
     if (!INTEGRATION_AGENTS.includes(agent))
       throw new Error(`Unsupported agent: ${agent}`);
     const { command, profileId: profileId2 } = bindings.get(agent);
-    const bridgePath = canonicalAgentPath(join30(nativeAgentRoot(home, agent, options.projectDir ?? process.cwd()), CLI_BRIDGE_NAME), aliases);
+    const bridgePath = canonicalAgentPath(join31(nativeAgentRoot(home, agent, options.projectDir ?? process.cwd()), CLI_BRIDGE_NAME), aliases);
     assertSafePath(bridgePath);
     if (existsSync9(bridgePath) && !isOwnedCliBridge(bridgePath, [bridgePath]))
       throw new Error(`Refusing to overwrite an unrecognized or modified Skills bridge: ${bridgePath}`);
     for (const [name, after2] of Object.entries(CLI_BRIDGE_FILES)) {
-      const path2 = join30(bridgePath, name), before2 = readOptional(path2);
+      const path2 = join31(bridgePath, name), before2 = readOptional(path2);
       if (before2 !== after2)
         changes.push({ path: path2, before: before2, after: after2 });
     }
     const path = canonicalAgentPath(nativeAgentConfig(home, agent, options.projectDir ?? process.cwd()), aliases);
     const before = readOptional(path);
     if (agent === "hermes") {
-      const supervisorPath = join30(dataDir2, "agent-hooks", "hermes.js"), supervisorBefore = readOptional(supervisorPath), supervisorAfter = renderHermesSupervisor(command, profileId2);
+      const supervisorPath = join31(dataDir2, "agent-hooks", "hermes.js"), supervisorBefore = readOptional(supervisorPath), supervisorAfter = renderHermesSupervisor(command, profileId2);
       const priorCommand = policy.bridge?.commands?.hermes, priorProfile = policy.bridge?.profiles?.hermes ?? policy.profileId;
       const previous = policy.bridge?.supervisors?.hermes;
       if (supervisorBefore !== null && supervisorBefore !== supervisorAfter && !(previous?.path === supervisorPath && typeof priorCommand === "string" && typeof priorProfile === "string" && supervisorBefore === renderHermesSupervisor(priorCommand, priorProfile)))
@@ -20157,7 +20292,7 @@ function planAgentIntegration(options) {
       const after2 = configureHermesHooks(before, supervisor, previous);
       if (before !== after2)
         changes.push({ path, before, after: after2 });
-      const optOut = join30(home, ".hermes", HERMES_OPT_OUT), optOutBefore = readOptional(optOut);
+      const optOut = join31(home, ".hermes", HERMES_OPT_OUT), optOutBefore = readOptional(optOut);
       if (optOutBefore === null)
         changes.push({ path: optOut, before: null, after: `Managed by @hasna/skills: bundled native skill reseeding is disabled.
 ` });
@@ -20168,7 +20303,7 @@ function planAgentIntegration(options) {
       if (config.permissions !== undefined && (!Array.isArray(config.permissions) || config.permissions.some((rule) => !rule || typeof rule.action !== "string" || typeof rule.resource !== "string" || !["allow", "deny", "ask"].includes(rule.effect))))
         throw new Error("Expected Sumi native permission rules");
       config.permissions = [...(config.permissions ?? []).filter((rule) => rule.action !== "skill"), ...SUMI_SKILL_PERMISSIONS];
-      const pluginPath = join30(sumiConfigDirectory(home, process.env, options.projectDir ?? process.cwd()), "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
+      const pluginPath = join31(sumiConfigDirectory(home, process.env, options.projectDir ?? process.cwd()), "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
       const pluginAfter = renderSumiPlugin(command, profileId2);
       const priorCommand = policy.bridge?.commands?.sumi, priorProfile = policy.bridge?.profiles?.sumi ?? policy.profileId;
       if (pluginBefore !== null && pluginBefore !== pluginAfter && !(typeof priorCommand === "string" && typeof priorProfile === "string" && isManagedSumiPlugin(pluginBefore, priorCommand, priorProfile)))
@@ -20180,7 +20315,7 @@ function planAgentIntegration(options) {
       if (!permission || typeof permission !== "object" || Array.isArray(permission))
         throw new Error("Expected OpenCode permission object");
       config.permission = { ...permission, skill: { "*": "deny", [CLI_BRIDGE_NAME]: "allow" } };
-      const pluginPath = join30(home, ".config", "opencode", "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
+      const pluginPath = join31(home, ".config", "opencode", "plugins", "skills-cli.js"), pluginBefore = readOptional(pluginPath);
       const pluginAfter = renderOpenCodePlugin(command, profileId2);
       const priorCommand = policy.bridge?.commands?.opencode;
       const ownedPrevious = typeof priorCommand === "string" && typeof policy.profileId === "string" && pluginBefore === renderOpenCodePlugin(priorCommand, policy.bridge?.profiles?.opencode ?? policy.profileId);
@@ -20197,7 +20332,7 @@ function planAgentIntegration(options) {
     if (before !== after)
       changes.push({ path, before, after });
     if (agent === "codex") {
-      const configPath = canonicalAgentPath(join30(home, ".codex", "config.toml"), aliases), previous = readOptional(configPath);
+      const configPath = canonicalAgentPath(join31(home, ".codex", "config.toml"), aliases), previous = readOptional(configPath);
       if (previous !== codexConfigBefore)
         throw new Error(`Configuration changed during planning: ${configPath}`);
       const next = disableReviewedCodexPluginNames(codexPathConfig, codexPluginSkills);
@@ -20209,28 +20344,28 @@ function planAgentIntegration(options) {
       }
     }
   }
-  const codexPluginSkillReview = options.codexNativeCatalog ? { version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, catalogSha256: sha4(JSON.stringify({ version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, skills: projectCodexNativeSkillCatalog({ data: [{ cwd: options.codexNativeCatalog.cwd, errors: [], skills: options.codexNativeCatalog.skills }] }, options.codexNativeCatalog.cwd), ...options.codexNativeCatalog.plugins === undefined ? {} : { plugins: projectCodexInstalledPluginEntries(options.codexNativeCatalog.plugins) } })), configSha256: changes.find((change) => change.path === canonicalAgentPath(join30(home, ".codex/config.toml"), aliases))?.before === null ? null : sha4(readOptional(canonicalAgentPath(join30(home, ".codex/config.toml"), aliases)) ?? "") } : policy.bridge?.codexPluginSkillReview;
+  const codexPluginSkillReview = options.codexNativeCatalog ? { version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, catalogSha256: sha4(JSON.stringify({ version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, skills: projectCodexNativeSkillCatalog({ data: [{ cwd: options.codexNativeCatalog.cwd, errors: [], skills: options.codexNativeCatalog.skills }] }, options.codexNativeCatalog.cwd), ...options.codexNativeCatalog.plugins === undefined ? {} : { plugins: projectCodexInstalledPluginEntries(options.codexNativeCatalog.plugins) } })), configSha256: changes.find((change) => change.path === canonicalAgentPath(join31(home, ".codex/config.toml"), aliases))?.before === null ? null : sha4(readOptional(canonicalAgentPath(join31(home, ".codex/config.toml"), aliases)) ?? "") } : policy.bridge?.codexPluginSkillReview;
   const discoveryAfter = discoveries.map((binding) => {
     const rebound = rebindAgentDiscovery(binding, new Map(changes.map((change) => [change.path, change.after])));
     if (binding.agent !== "codex")
       return rebound;
     const { codexInstallationInputs: previousInputs, ...current } = rebound;
     const inputs = codexPluginSourceInputs.map((input) => input.sourceRoot);
-    const directories = options.codexNativeCatalog || !previousInputs ? captureDiscoveryDirectories((binding.directories ?? []).filter((directory2) => inputs.some((root) => root.startsWith(directory2.path + sep13))).map((directory2) => directory2.path), inputs) : previousInputs.directories;
+    const directories = options.codexNativeCatalog || !previousInputs ? captureDiscoveryDirectories((binding.directories ?? []).filter((directory2) => inputs.some((root) => root.startsWith(directory2.path + sep14))).map((directory2) => directory2.path), inputs) : previousInputs.directories;
     const installed = codexPluginSourceInputs.length ? { ...current, codexInstallationInputs: { version: codexPluginSkillReview.version, catalogSha256: codexPluginSkillReview.catalogSha256, plugins: codexPluginSourceInputs, ...directories?.length ? { directories } : {} } } : current;
-    return captureRetiredCodexDiscovery(installed, codexPluginSkills, Bun.TOML.parse(changes.find((change) => change.path === canonicalAgentPath(join30(home, ".codex/config.toml"), aliases))?.after ?? codexConfigBefore ?? "").skills?.config ?? []);
+    return captureRetiredCodexDiscovery(installed, codexPluginSkills, Bun.TOML.parse(changes.find((change) => change.path === canonicalAgentPath(join31(home, ".codex/config.toml"), aliases))?.after ?? codexConfigBefore ?? "").skills?.config ?? []);
   });
   const nextPolicy = { ...policy, version: 1, loading: "cli", profileId, bridge: {
     ...policy.bridge,
     version: CLI_BRIDGE_VERSION,
     digest: CLI_BRIDGE_DIGEST,
     agents: [...new Set([...priorAgents, ...options.agents])].sort(),
-    home: resolve22(home),
+    home: resolve23(home),
     includeVendor: true,
-    ...options.agents.includes("hermes") ? { supervisors: { ...policy.bridge?.supervisors, hermes: { path: join30(dataDir2, "agent-hooks", "hermes.js"), runtime: process.execPath, sha256: sha4(renderHermesSupervisor(bindings.get("hermes").command, bindings.get("hermes").profileId)) } } } : {},
+    ...options.agents.includes("hermes") ? { supervisors: { ...policy.bridge?.supervisors, hermes: { path: join31(dataDir2, "agent-hooks", "hermes.js"), runtime: process.execPath, sha256: sha4(renderHermesSupervisor(bindings.get("hermes").command, bindings.get("hermes").profileId)) } } } : {},
     commands: { ...policy.bridge?.commands, ...Object.fromEntries([...bindings].map(([agent, binding]) => [agent, binding.command])) },
     profiles: Object.fromEntries([...new Set([...priorAgents, ...options.agents])].sort().map((agent) => [agent, bindings.get(agent)?.profileId ?? policy.bridge?.profiles?.[agent] ?? policy.profileId])),
-    disabledBuiltins: options.agents.includes("codex") ? nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor && entry.path.startsWith(canonicalAgentPath(join30(home, ".codex", "skills", ".system"), aliases) + sep13)).map((entry) => ({ path: entry.path, hash: entry.hash })) : policy.bridge?.disabledBuiltins ?? [],
+    disabledBuiltins: options.agents.includes("codex") ? nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor && entry.path.startsWith(canonicalAgentPath(join31(home, ".codex", "skills", ".system"), aliases) + sep14)).map((entry) => ({ path: entry.path, hash: entry.hash })) : policy.bridge?.disabledBuiltins ?? [],
     rootAliases: aliases,
     ...options.codexNativeCatalog || codexPluginSkills.length || codexInactivePlugins.length || codexPluginSourceInputs.length ? { codexPluginSkills, codexInactivePlugins, codexPluginSkillReview } : {},
     discovery: { ...policy.bridge?.discovery, ...Object.fromEntries(discoveryAfter.map((binding) => [binding.agent, binding])) }
@@ -20273,7 +20408,7 @@ function projectedHookAcl(path, observed) {
   const identity5 = observed.isDirectory() ? (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.uid}:${stat2.mode}` : (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}:${stat2.uid}:${stat2.mode}:${stat2.nlink}:${stat2.size}:${stat2.mtimeNs}`;
   const fd = openSync17(path, constants18.O_RDONLY | constants18.O_NOFOLLOW | constants18.O_NONBLOCK | (observed.isDirectory() ? constants18.O_DIRECTORY : 0));
   try {
-    if (identity5(fstatSync17(fd, { bigint: true })) !== identity5(observed) || !hasTrustedDarwinAcl(fd, true) || identity5(fstatSync17(fd, { bigint: true })) !== identity5(observed) || identity5(lstatSync27(path, { bigint: true })) !== identity5(observed))
+    if (identity5(fstatSync17(fd, { bigint: true })) !== identity5(observed) || !hasTrustedDarwinAcl(fd, true) || identity5(fstatSync17(fd, { bigint: true })) !== identity5(observed) || identity5(lstatSync28(path, { bigint: true })) !== identity5(observed))
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
   } finally {
     closeSync17(fd);
@@ -20281,23 +20416,23 @@ function projectedHookAcl(path, observed) {
 }
 function projectedHookExecutable(command, expectedResolved) {
   try {
-    if (!isAbsolute24(command) || /[\0\r\n]/.test(command) || resolve22(command) !== command)
+    if (!isAbsolute24(command) || /[\0\r\n]/.test(command) || resolve23(command) !== command)
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     command = canonicalSystemPath(command);
     const parents2 = (file = command) => {
       const result = [];
-      for (let path = dirname21(file);; path = dirname21(path)) {
-        const stat2 = lstatSync27(path, { bigint: true });
+      for (let path = dirname22(file);; path = dirname22(path)) {
+        const stat2 = lstatSync28(path, { bigint: true });
         if (!stat2.isDirectory() || !trustedAncestorOwner(stat2.uid) || (stat2.mode & 0o022n) !== 0n && !(stat2.uid === 0n && (stat2.mode & 0o1000n) !== 0n))
           hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
         projectedHookAcl(path, stat2);
         result.push(`${path}:${stat2.dev}:${stat2.ino}:${stat2.uid}:${stat2.mode}`);
-        if (dirname21(path) === path)
+        if (dirname22(path) === path)
           break;
       }
       return result;
     };
-    const parentIdentity = parents2(), link = lstatSync27(command, { bigint: true });
+    const parentIdentity = parents2(), link = lstatSync28(command, { bigint: true });
     if (link.uid !== BigInt(process.getuid()) || !link.isFile() && !link.isSymbolicLink())
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     const linkIdentity = (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.mode}:${stat2.uid}:${stat2.ctimeNs}`;
@@ -20317,18 +20452,18 @@ function projectedHookExecutable(command, expectedResolved) {
         hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
       const path = target.pinned.runtime;
       assertPinnedLauncherRuntimeSafe(path);
-      if (resolve22(path) !== path)
+      if (resolve23(path) !== path)
         hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
-      runtime = { path, parents: parents2(path), stat: lstatSync27(path, { bigint: true }) };
+      runtime = { path, parents: parents2(path), stat: lstatSync28(path, { bigint: true }) };
       if (!runtime.stat.isFile())
         hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
       projectedHookAcl(path, runtime.stat);
     }
     const resolvedParentIdentity = parents2(resolved);
-    const manifest = snapshot(join30(dirname21(dirname21(resolved)), "package.json"), false, { readOnlyPackage: true });
+    const manifest = snapshot(join31(dirname22(dirname22(resolved)), "package.json"), false, { readOnlyPackage: true });
     projectedHookAcl(manifest.file, manifest.stat);
     const pkg = JSON.parse(manifest.text);
-    if (pkg.name !== "@hasna/skills" || !/^\d+\.\d+\.\d+$/.test(pkg.version) || pkg.bin?.skills !== "bin/index.js" || resolved !== join30(dirname21(manifest.file), "bin/index.js"))
+    if (pkg.name !== "@hasna/skills" || !/^\d+\.\d+\.\d+$/.test(pkg.version) || pkg.bin?.skills !== "bin/index.js" || resolved !== join31(dirname22(manifest.file), "bin/index.js"))
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     const cli = snapshot(resolved, false, { readOnlyPackage: true });
     projectedHookAcl(cli.file, cli.stat);
@@ -20337,7 +20472,7 @@ function projectedHookExecutable(command, expectedResolved) {
     const recheck = () => {
       try {
         const again = resolveLauncherCommand(command);
-        if (again.entry !== resolved || again.physical !== target.physical || linkIdentity(lstatSync27(command, { bigint: true })) !== linkIdentity(link) || !direct() || !isDeepStrictEqual8(parents2(), parentIdentity) || !isDeepStrictEqual8(parents2(resolved), resolvedParentIdentity))
+        if (again.entry !== resolved || again.physical !== target.physical || linkIdentity(lstatSync28(command, { bigint: true })) !== linkIdentity(link) || !direct() || !isDeepStrictEqual8(parents2(), parentIdentity) || !isDeepStrictEqual8(parents2(resolved), resolvedParentIdentity))
           hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
         if (launcher) {
           if (!isDeepStrictEqual8(parents2(target.physical), launcherParentIdentity))
@@ -20377,8 +20512,8 @@ function planClaudeManagedHookProjection(options) {
   } catch {
     hookProjectionRefusal("TARGET_INVALID");
   }
-  const home = resolve22(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
-  const policyPath = join30(dataDir2, "agent-policy.json");
+  const home = resolve23(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
+  const policyPath = join31(dataDir2, "agent-policy.json");
   let policyBytes, settingsBytes, settingsPath, command, profile;
   try {
     policyBytes = readNativeBytes(policyPath, 1024 * 1024);
@@ -20386,7 +20521,7 @@ function planClaudeManagedHookProjection(options) {
     if (!snapshot2 || snapshot2.text !== policyBytes.toString("utf8"))
       hookProjectionRefusal("SOURCE_UNVERIFIED");
     const binding = snapshot2.value.bridge;
-    settingsPath = canonicalAgentPath(join30(home, AGENT_ADAPTERS.claude.config), binding?.rootAliases ?? []);
+    settingsPath = canonicalAgentPath(join31(home, AGENT_ADAPTERS.claude.config), binding?.rootAliases ?? []);
     settingsBytes = readNativeBytes(settingsPath, 1024 * 1024);
     command = binding?.commands?.claude;
     profile = binding?.profiles?.claude;
@@ -20472,7 +20607,7 @@ function claudeSettingsConsumers(home, path, discoveries, aliases) {
   const canonical9 = (value) => canonicalAgentPath(value, aliases);
   const containsSettings = (root) => {
     const distance = relative9(canonical9(root), path);
-    return distance === "" || distance !== ".." && !distance.startsWith(`..${sep13}`) && !isAbsolute24(distance);
+    return distance === "" || distance !== ".." && !distance.startsWith(`..${sep14}`) && !isAbsolute24(distance);
   };
   return discoveries.filter((binding) => binding.agent === "claude" || binding.agent === "opencode" || binding.agent !== "sumi" && canonical9(nativeAgentConfig(home, binding.agent)) === path || binding.sources.some((source) => canonical9(source.path) === path) || binding.roots.some(containsSettings) || binding.directories?.some((directory2) => containsSettings(directory2.path))).map((binding) => binding.agent);
 }
@@ -20490,8 +20625,8 @@ function verifyCoordinatedDiscovery(binding, home, aliases, executable2) {
   }
 }
 function planClaudeHookEventsUpdate(options) {
-  const home = resolve22(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
-  const policyPath = join30(dataDir2, "agent-policy.json");
+  const home = resolve23(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
+  const policyPath = join31(dataDir2, "agent-policy.json");
   assertSafePath(policyPath);
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2)
@@ -20502,9 +20637,9 @@ function planClaudeHookEventsUpdate(options) {
   }
   const aliases = bridge.rootAliases ?? [];
   recheckRootAliases(aliases);
-  const path = canonicalAgentPath(join30(home, ".claude", "settings.json"), aliases);
+  const path = canonicalAgentPath(join31(home, ".claude", "settings.json"), aliases);
   assertSafePath(path);
-  const before = lstatSync27(path, { throwIfNoEntry: false }) ? new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(readNativeBytes(path, 1024 * 1024)) : null;
+  const before = lstatSync28(path, { throwIfNoEntry: false }) ? new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(readNativeBytes(path, 1024 * 1024)) : null;
   if ((before === null ? "absent" : sha4(before)) !== options.expectedSettingsSha256)
     throw new Error("Claude settings preimage changed");
   assertClaudeHookEventsReplacement(before, options.replacement, options.events);
@@ -20560,7 +20695,7 @@ function planClaudeHookEventsUpdate(options) {
 }
 function atomicWrite2(path, content) {
   assertSafePath(path);
-  mkdirSync8(dirname21(path), { recursive: true, mode: 448 });
+  mkdirSync8(dirname22(path), { recursive: true, mode: 448 });
   const temporary = `${path}.skills-${randomUUID4()}`;
   try {
     writeFileSync6(temporary, content, { mode: 384, flag: "wx" });
@@ -20575,7 +20710,7 @@ function planAgentSettingsWitnessUpgrade(options) {
     throw new Error("Invalid Codex witness target version");
   if (options.targetClaudeVersion !== undefined && (options.agent !== "claude" || ![3, 4].includes(options.targetClaudeVersion)))
     throw new Error("Invalid Claude witness target version");
-  const home = resolve22(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
+  const home = resolve23(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2 || sha4(snapshot2.text) !== options.expectedPolicySha256)
     throw new Error("Managed policy preimage changed");
@@ -20584,7 +20719,7 @@ function planAgentSettingsWitnessUpgrade(options) {
   const binding = policy.bridge?.discovery?.[options.agent];
   if (!binding || binding.agent !== options.agent || binding.method !== "reviewed")
     throw new Error("Settings witness upgrade requires an existing reviewed native binding");
-  const configPath = canonicalAgentPath(options.agent === "sumi" ? nativeAgentConfig(home, "sumi", options.projectDir ?? process.cwd()) : join30(home, options.agent === "claude" ? ".claude/settings.json" : ".codex/config.toml"), aliases);
+  const configPath = canonicalAgentPath(options.agent === "sumi" ? nativeAgentConfig(home, "sumi", options.projectDir ?? process.cwd()) : join31(home, options.agent === "claude" ? ".claude/settings.json" : ".codex/config.toml"), aliases);
   const settings = readOptional(configPath);
   if (settings === null || sha4(settings) !== options.expectedSettingsSha256)
     throw new Error("Native settings preimage changed");
@@ -20635,12 +20770,12 @@ function planAgentSettingsWitnessUpgrade(options) {
   const replacement = { ...binding, sources: rebound };
   verifyAgentDiscovery(replacement, undefined, aliases);
   const after = serializeManagedSkillPolicy({ ...policy, bridge: { ...policy.bridge, discovery: { ...policy.bridge.discovery, [options.agent]: replacement } } });
-  return { dataDir: dataDir2, profileId: policy.profileId, changes: [{ path: join30(dataDir2, "agent-policy.json"), before: snapshot2.text, after }], nativeSkills: [], observedPolicy: { path: join30(dataDir2, "agent-policy.json"), before: snapshot2.text }, observedSettings: { path: configPath, before: settings }, discoveryBefore: [replacement], discoveryAfter: [replacement], ...policy.bridge.discoveryExecutables ? { discoveryExecutables: policy.bridge.discoveryExecutables } : {}, rootAliases: aliases, managedAgentChecks: { home, agents: [options.agent] }, settingsWitnessUpgrade: { agent: options.agent, path: configPath, fromHashMode: previous.hashMode ?? "bytes", fromSha256: previous.sha256, toHashMode: next.hashMode, toSha256: next.sha256, reviewedPreimage: options.reviewedPreimage, currentSettingsSha256: options.expectedSettingsSha256, replacedWitnesses: replaced.map((source) => ({ hashMode: source.hashMode ?? "bytes", sha256: source.sha256 })) } };
+  return { dataDir: dataDir2, profileId: policy.profileId, changes: [{ path: join31(dataDir2, "agent-policy.json"), before: snapshot2.text, after }], nativeSkills: [], observedPolicy: { path: join31(dataDir2, "agent-policy.json"), before: snapshot2.text }, observedSettings: { path: configPath, before: settings }, discoveryBefore: [replacement], discoveryAfter: [replacement], ...policy.bridge.discoveryExecutables ? { discoveryExecutables: policy.bridge.discoveryExecutables } : {}, rootAliases: aliases, managedAgentChecks: { home, agents: [options.agent] }, settingsWitnessUpgrade: { agent: options.agent, path: configPath, fromHashMode: previous.hashMode ?? "bytes", fromSha256: previous.sha256, toHashMode: next.hashMode, toSha256: next.sha256, reviewedPreimage: options.reviewedPreimage, currentSettingsSha256: options.expectedSettingsSha256, replacedWitnesses: replaced.map((source) => ({ hashMode: source.hashMode ?? "bytes", sha256: source.sha256 })) } };
 }
 function planCodexSemanticCacheWitnessUpgrade(options) {
   if (options.agent !== "codex" || !/^[a-f0-9]{64}$/.test(options.expectedPolicySha256) || !/^[a-f0-9]{64}$/.test(options.expectedSettingsSha256) || options.expectedCacheWitnessSha256 !== undefined && !/^[a-f0-9]{64}$/.test(options.expectedCacheWitnessSha256) || !Array.isArray(options.appOnlyParents) || options.appOnlyParents.length > 4096 || new Set(options.appOnlyParents).size !== options.appOnlyParents.length || options.reviewedHookParents !== undefined && (!Array.isArray(options.reviewedHookParents) || options.reviewedHookParents.length > 4096 || new Set(options.reviewedHookParents).size !== options.reviewedHookParents.length))
     throw new Error("Invalid Codex semantic cache upgrade request");
-  const home = resolve22(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
+  const home = resolve23(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2 || sha4(snapshot2.text) !== options.expectedPolicySha256)
     throw new Error("Managed policy preimage changed");
@@ -20654,10 +20789,10 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
     throw new Error("Cache upgrade requires prior installed-plugin review");
   if (!controls.length || !isDeepStrictEqual8(controls, binding.codexDisabledPluginSkills ?? controls))
     throw new Error("Cache upgrade requires unchanged enrolled plugin controls");
-  const cacheRoot = canonicalAgentPath(join30(home, ".codex/plugins/cache"), aliases);
-  if (controls.some((control) => dirname21(dirname21(control.pluginParent)) !== cacheRoot))
+  const cacheRoot = canonicalAgentPath(join31(home, ".codex/plugins/cache"), aliases);
+  if (controls.some((control) => dirname22(dirname22(control.pluginParent)) !== cacheRoot))
     throw new Error("Cache upgrade names another enrolled cache");
-  const configPath = canonicalAgentPath(join30(home, ".codex/config.toml"), aliases), settings = readOptional(configPath);
+  const configPath = canonicalAgentPath(join31(home, ".codex/config.toml"), aliases), settings = readOptional(configPath);
   if (settings === null || sha4(settings) !== options.expectedSettingsSha256)
     throw new Error("Native settings preimage changed");
   const boundedRead = (path) => new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(readNativeBytes(path, 1024 * 1024));
@@ -20680,13 +20815,13 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
     return unchangedFullSource(path);
   };
   const appOnlyParents = options.appOnlyParents.map((parent) => {
-    const parts = relative9(cacheRoot, parent).split(sep13);
-    if (!isAbsolute24(parent) || resolve22(parent) !== parent || parts.length !== 2 || parts.some((part) => !/^[A-Za-z0-9_-]{1,64}$/.test(part)) || controls.some((control) => control.pluginParent === parent))
+    const parts = relative9(cacheRoot, parent).split(sep14);
+    if (!isAbsolute24(parent) || resolve23(parent) !== parent || parts.length !== 2 || parts.some((part) => !/^[A-Za-z0-9_-]{1,64}$/.test(part)) || controls.some((control) => control.pluginParent === parent))
       throw new Error("Unsupported app-only parent role");
-    const receipt = JSON.parse(unchangedFullSource(join30(parent, ".codex-remote-plugin-install.json")));
+    const receipt = JSON.parse(unchangedFullSource(join31(parent, ".codex-remote-plugin-install.json")));
     if (!receipt || Object.keys(receipt).length !== 2 || receipt.schema_version !== 1 || typeof receipt.remote_plugin_id !== "string")
       throw new Error("Invalid reviewed app-only parent identity");
-    const manifests = binding.sources.filter((source) => source.path.startsWith(parent + sep13) && source.path.endsWith(join30(sep13, ".codex-plugin/plugin.json")));
+    const manifests = binding.sources.filter((source) => source.path.startsWith(parent + sep14) && source.path.endsWith(join31(sep14, ".codex-plugin/plugin.json")));
     if (!manifests.length)
       throw new Error("App-only bootstrap lacks prior full manifests");
     for (const source of manifests)
@@ -20694,10 +20829,10 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
     return { role: "app-only", pluginId: `${parts[1]}@${parts[0]}`, namespace: parts[1], pluginParent: parent, remotePluginId: receipt.remote_plugin_id };
   }).sort((a, b) => a.pluginParent.localeCompare(b.pluginParent));
   const reviewedHookParents = (options.reviewedHookParents ?? []).map((parent) => {
-    const parts = relative9(cacheRoot, parent).split(sep13);
-    if (!isAbsolute24(parent) || resolve22(parent) !== parent || parts.length !== 2 || parts.some((part) => !/^[A-Za-z0-9_-]{1,64}$/.test(part)) || controls.some((control) => control.pluginParent === parent) || appOnlyParents.some((role) => role.pluginParent === parent))
+    const parts = relative9(cacheRoot, parent).split(sep14);
+    if (!isAbsolute24(parent) || resolve23(parent) !== parent || parts.length !== 2 || parts.some((part) => !/^[A-Za-z0-9_-]{1,64}$/.test(part)) || controls.some((control) => control.pluginParent === parent) || appOnlyParents.some((role) => role.pluginParent === parent))
       throw new Error("Unsupported reviewed native-hook parent role");
-    const receiptPath = join30(parent, ".codex-remote-plugin-install.json"), receiptStat = lstatSync27(receiptPath, { throwIfNoEntry: false });
+    const receiptPath = join31(parent, ".codex-remote-plugin-install.json"), receiptStat = lstatSync28(receiptPath, { throwIfNoEntry: false });
     let identity5;
     if (receiptStat) {
       if (!receiptStat.isFile() || receiptStat.isSymbolicLink() || receiptStat.size > 16 * 1024)
@@ -20734,11 +20869,11 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
     for (const version2 of versions) {
       if (!/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(version2))
         throw new Error("Invalid reviewed native-hook version identity");
-      const root = join30(parent, version2), stat2 = lstatSync27(root, { throwIfNoEntry: false });
+      const root = join31(parent, version2), stat2 = lstatSync28(root, { throwIfNoEntry: false });
       if (!stat2?.isDirectory() || stat2.isSymbolicLink() || realpathSync12(root) !== root)
         throw new Error("Invalid reviewed native-hook materialization");
-      unchangedReviewedHookSource(join30(root, ".codex-plugin/plugin.json"));
-      unchangedReviewedHookSource(join30(root, "hooks/hooks.json"));
+      unchangedReviewedHookSource(join31(root, ".codex-plugin/plugin.json"));
+      unchangedReviewedHookSource(join31(root, "hooks/hooks.json"));
     }
     return identity5;
   }).sort((a, b) => a.pluginParent.localeCompare(b.pluginParent));
@@ -20748,10 +20883,10 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
   assertCodexSemanticCacheHookSafety(cacheRoot, parents2, configPath, hookRootAlias);
   const supersededSources = binding.sources.filter((source) => codexSemanticCacheSourceRole(source, cacheRoot, parents2, reviewedHookParents.map((parent) => parent.pluginParent)));
   for (const source of supersededSources)
-    if ([".app.json", ".mcp.json"].includes(source.path.split(sep13).at(-1)))
+    if ([".app.json", ".mcp.json"].includes(source.path.split(sep14).at(-1)))
       unchangedFullSource(source.path);
   const supersededDirectories = (binding.directories ?? []).filter((directory2) => codexSemanticCacheDirectoryRole(directory2.path, cacheRoot));
-  if (!supersededDirectories.some((directory2) => directory2.path === cacheRoot) || (binding.directories ?? []).some((directory2) => cacheRoot.startsWith(directory2.path + sep13)))
+  if (!supersededDirectories.some((directory2) => directory2.path === cacheRoot) || (binding.directories ?? []).some((directory2) => cacheRoot.startsWith(directory2.path + sep14)))
     throw new Error("Cache upgrade requires exact cache directory coverage without an unproved ancestor projection");
   const rules = Bun.TOML.parse(settings).skills?.config ?? [];
   const witness = captureCodexSemanticCacheWitness({ cacheRoot, controls, appOnlyParents, reviewedHookParents, rules, read: boundedRead });
@@ -20774,8 +20909,8 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
     dataDir: dataDir2,
     profileId: policy.profileId,
     nativeSkills: [],
-    changes: [{ path: join30(dataDir2, "agent-policy.json"), before: snapshot2.text, after }],
-    observedPolicy: { path: join30(dataDir2, "agent-policy.json"), before: snapshot2.text },
+    changes: [{ path: join31(dataDir2, "agent-policy.json"), before: snapshot2.text, after }],
+    observedPolicy: { path: join31(dataDir2, "agent-policy.json"), before: snapshot2.text },
     observedSettings: { path: configPath, before: settings },
     discoveryBefore: [replacement],
     discoveryAfter: [replacement],
@@ -20788,7 +20923,7 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
 function planReviewedArtifactMigration(options) {
   if (options.kind !== "codex-native-catalog" || !/^[a-f0-9]{64}$/.test(options.expectedPolicySha256) || !/^[a-f0-9]{64}$/.test(options.expectedSourceSha256))
     throw new Error("REVIEW_ARTIFACT_INVALID");
-  const home = resolve22(options.home ?? homedir2()), dataDir2 = resolve22(options.dataDir ?? getDataDirReadOnly());
+  const home = resolve23(options.home ?? homedir2()), dataDir2 = resolve23(options.dataDir ?? getDataDirReadOnly());
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2 || sha4(snapshot2.text) !== options.expectedPolicySha256)
     throw new Error("REVIEW_ARTIFACT_POLICY_CHANGED");
@@ -20805,8 +20940,8 @@ function planReviewedArtifactMigration(options) {
     dataDir: dataDir2,
     profileId: snapshot2.value.profileId,
     nativeSkills: [],
-    changes: [...retained.changes, { path: join30(dataDir2, "agent-policy.json"), before: snapshot2.text, after: serializeManagedSkillPolicy(next) }],
-    observedPolicy: { path: join30(dataDir2, "agent-policy.json"), before: snapshot2.text },
+    changes: [...retained.changes, { path: join31(dataDir2, "agent-policy.json"), before: snapshot2.text, after: serializeManagedSkillPolicy(next) }],
+    observedPolicy: { path: join31(dataDir2, "agent-policy.json"), before: snapshot2.text },
     reviewArtifactSources: retained.observed,
     retainedReviewArtifacts: retained.changes,
     reviewArtifactMigration: { ...options, home, dataDir: dataDir2 },
@@ -20832,18 +20967,18 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
       throw new Error("Native identity source changed after planning");
   if (plan.observedSettings && readOptional(plan.observedSettings.path) !== plan.observedSettings.before)
     throw new Error("Native settings changed after witness planning");
-  const policyPath = join30(plan.dataDir, "agent-policy.json");
+  const policyPath = join31(plan.dataDir, "agent-policy.json");
   assertSafePath(policyPath);
-  const currentText = (path) => resolve22(path) === resolve22(policyPath) ? readManagedSkillPolicySnapshot(plan.dataDir)?.text ?? null : readOptional(path);
+  const currentText = (path) => resolve23(path) === resolve23(policyPath) ? readManagedSkillPolicySnapshot(plan.dataDir)?.text ?? null : readOptional(path);
   readManagedSkillPolicySnapshot(plan.dataDir);
   for (const change of plan.changes)
-    if (resolve22(change.path) === resolve22(policyPath))
+    if (resolve23(change.path) === resolve23(policyPath))
       parseManagedSkillPolicy(change.after);
   const aliases = plan.rootAliases ?? [];
   assertCurrent();
   recheckRootAliases(aliases);
   for (const agent of plan.retainedReviewChecks?.agents ?? [])
-    assertManagedAgentBridge(agent, { ...plan.retainedReviewChecks, dataDir: plan.dataDir });
+    assertRetainedReviewState(agent, { ...plan.retainedReviewChecks, dataDir: plan.dataDir });
   if (plan.reviewArtifactMigration) {
     const verified = planReviewedArtifactMigration(plan.reviewArtifactMigration);
     if (JSON.stringify(verified.changes) !== JSON.stringify(plan.changes) || JSON.stringify(verified.discoveryAfter) !== JSON.stringify(plan.discoveryAfter))
@@ -20882,10 +21017,12 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
   for (const change of plan.changes)
     if (currentText(change.path) !== change.before)
       throw new Error(`Configuration changed after planning: ${change.path}`);
-  const backupRoot = join30(plan.dataDir, "migration", randomUUID4()), backups = [], written = [], createdDirectories = new Set;
+  const backupRoot = join31(plan.dataDir, "migration", randomUUID4()), backups = [], written = [], createdDirectories = new Set;
   if (!plan.changes.length) {
     assertCurrent();
     recheckRootAliases(aliases);
+    for (const agent of plan.retainedReviewChecks?.agents ?? [])
+      assertManagedAgentBridge(agent, { ...plan.retainedReviewChecks, dataDir: plan.dataDir });
     return { changed: [], backups, ...aliases.length ? { rootAliases: aliases } : {} };
   }
   assertSafePath(backupRoot);
@@ -20893,9 +21030,9 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
   chmodSync(backupRoot, 448);
   for (const [index, change] of plan.changes.entries())
     if (change.before !== null) {
-      const backup = join30(backupRoot, `${index}-${sha4(change.path).slice(0, 12)}.backup`);
+      const backup = join31(backupRoot, `${index}-${sha4(change.path).slice(0, 12)}.backup`);
       writeFileSync6(backup, change.before, { mode: 384, flag: "wx" });
-      if (readFileSync18(backup, "utf8") !== change.before)
+      if (readFileSync19(backup, "utf8") !== change.before)
         throw new Error("Native configuration preservation readback failed");
       backups.push(backup);
     }
@@ -20905,7 +21042,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
       recheckRootAliases(aliases);
       if (currentText(change.path) !== change.before)
         throw new Error(`Configuration changed after planning: ${change.path}`);
-      for (let directory2 = dirname21(change.path);!existsSync9(directory2); directory2 = dirname21(directory2))
+      for (let directory2 = dirname22(change.path);!existsSync9(directory2); directory2 = dirname22(directory2))
         createdDirectories.add(directory2);
       const after = change.after;
       const immutable = plan.retainedReviewArtifacts?.find((item) => item.path === change.path);
@@ -20935,7 +21072,9 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
     }
     for (const agent of plan.managedAgentChecks?.agents ?? [])
       assertManagedAgentBridge(agent, { home: plan.managedAgentChecks.home, dataDir: plan.dataDir, projectDir: plan.managedAgentChecks.projectDir ?? plan.managedAgentChecks.home });
-    atomicWrite2(join30(backupRoot, "receipt.json"), JSON.stringify({ version: 1, changes: written.map((change) => ({ path: change.path, beforeHash: change.before === null ? null : sha4(change.before), afterHash: sha4(change.after) })), backups, ...plan.cacheWitnessUpgrade ? { cacheWitnessUpgrade: plan.cacheWitnessUpgrade } : {}, ...plan.retainedReviewArtifacts?.length ? { retainedReviewArtifacts: plan.retainedReviewArtifacts.map((item) => ({ path: item.path, ...item.artifact })) } : {}, ...aliases.length ? { rootAliases: aliases } : {} }) + `
+    for (const agent of plan.retainedReviewChecks?.agents ?? [])
+      assertManagedAgentBridge(agent, { ...plan.retainedReviewChecks, dataDir: plan.dataDir });
+    atomicWrite2(join31(backupRoot, "receipt.json"), JSON.stringify({ version: 1, changes: written.map((change) => ({ path: change.path, beforeHash: change.before === null ? null : sha4(change.before), afterHash: sha4(change.after) })), backups, ...plan.cacheWitnessUpgrade ? { cacheWitnessUpgrade: plan.cacheWitnessUpgrade } : {}, ...plan.retainedReviewArtifacts?.length ? { retainedReviewArtifacts: plan.retainedReviewArtifacts.map((item) => ({ path: item.path, ...item.artifact })) } : {}, ...aliases.length ? { rootAliases: aliases } : {} }) + `
 `);
   } catch (error) {
     assertCurrent();
@@ -20986,11 +21125,11 @@ function writeArchiveJournal(path, value) {
     closeSync17(descriptor);
     descriptor = undefined;
     renameSync4(temporary, path);
-    syncArchiveDirectory(dirname21(path));
+    syncArchiveDirectory(dirname22(path));
   } finally {
     if (descriptor !== undefined)
       closeSync17(descriptor);
-    if (lstatSync27(temporary, { throwIfNoEntry: false }))
+    if (lstatSync28(temporary, { throwIfNoEntry: false }))
       unlinkSync5(temporary);
   }
 }
@@ -20998,7 +21137,7 @@ function archiveNativeSkills(inventory, options) {
   const selected = options.targetManifest ? selectNativeMigrationTargets(inventory, options.targetManifest) : inventory.filter((entry) => !entry.bridge && !entry.system && (entry.vendor ? options.includeVendor : entry.managed || options.includeUnmanaged));
   const roots = selected.flatMap((entry) => {
     const root = (entry.rootAlias?.agent === "codex" ? entry.rootAlias.alias : undefined) ?? codexCorpusRootForPath(entry.path);
-    const owner2 = entry.codexHome ?? (entry.agent === "codex" && entry.bridgeHome ? join30(entry.bridgeHome, ".codex") : undefined);
+    const owner2 = entry.codexHome ?? (entry.agent === "codex" && entry.bridgeHome ? join31(entry.bridgeHome, ".codex") : undefined);
     if (!root && !owner2 && (entry.agent === "codex" || isCodexSkillDiscoveryInput(entry.path)))
       throw new Error("CODEX_CORPUS_ROOT_UNVERIFIED");
     return [...new Set([root, owner2].filter((value) => value !== undefined))];
@@ -21013,7 +21152,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
   recheckRootAliases(aliases);
   for (const entry of inventory.filter((entry2) => entry2.bridge)) {
     const adapter = AGENT_ADAPTERS[entry.agent];
-    const expected = adapter && entry.bridgeHome ? canonicalAgentPath(join30(nativeAgentRoot(entry.bridgeHome, entry.agent), CLI_BRIDGE_NAME), aliases) : undefined;
+    const expected = adapter && entry.bridgeHome ? canonicalAgentPath(join31(nativeAgentRoot(entry.bridgeHome, entry.agent), CLI_BRIDGE_NAME), aliases) : undefined;
     if (!expected || treeHash(entry.path) !== entry.hash || !isOwnedCliBridge(entry.path, [expected]))
       throw new Error(`Skills bridge changed after planning: ${entry.path}`);
   }
@@ -21024,11 +21163,11 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
   const targetManifest = options.targetManifest ? { schema: options.targetManifest.schema, digest: options.targetManifest.digest, targetCount: options.targetManifest.targets.length } : undefined;
   if (!selected.length)
     return { entries: [], ...targetManifest ? { targetManifest } : {}, ...aliases.length ? { rootAliases: aliases } : {} };
-  const operationId = randomUUID4(), archiveRoot = join30(options.dataDir ?? getDataDir(), "migration", operationId, "native"), receiptPath = join30(archiveRoot, "receipt.json");
+  const operationId = randomUUID4(), archiveRoot = join31(options.dataDir ?? getDataDir(), "migration", operationId, "native"), receiptPath = join31(archiveRoot, "receipt.json");
   const entries = selected.map((entry, index) => ({
-    source: entry.vendor ? join30(entry.path, "SKILL.md") : entry.path,
-    archive: join30(archiveRoot, `${index}-${sha4(entry.path).slice(0, 12)}`),
-    hash: entry.vendor ? sha4(readNativeBytes(join30(entry.path, "SKILL.md"))) : entry.hash,
+    source: entry.vendor ? join31(entry.path, "SKILL.md") : entry.path,
+    archive: join31(archiveRoot, `${index}-${sha4(entry.path).slice(0, 12)}`),
+    hash: entry.vendor ? sha4(readNativeBytes(join31(entry.path, "SKILL.md"))) : entry.hash,
     ...entry.vendor ? { discoveryOnly: true } : {},
     status: "planned"
   }));
@@ -21036,7 +21175,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
   const moved = [];
   const verifyArchive = (entry) => {
     assertSafePath(entry.archive);
-    const stat2 = lstatSync27(entry.archive);
+    const stat2 = lstatSync28(entry.archive);
     if (entry.discoveryOnly ? !stat2.isFile() : !stat2.isDirectory())
       throw new Error("Archive type changed");
     if ((entry.discoveryOnly ? sha4(readNativeBytes(entry.archive)) : treeHash(entry.archive)) !== entry.hash)
@@ -21044,14 +21183,14 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
   };
   assertSafePath(archiveRoot);
   const created = [];
-  for (let path = archiveRoot;!existsSync9(path); path = dirname21(path))
+  for (let path = archiveRoot;!existsSync9(path); path = dirname22(path))
     created.push(path);
   mkdirSync8(archiveRoot, { recursive: true, mode: 448 });
   try {
     for (const directory2 of created)
       syncArchiveDirectory(directory2);
     if (created.length)
-      syncArchiveDirectory(dirname21(created.at(-1)));
+      syncArchiveDirectory(dirname22(created.at(-1)));
     writeArchiveJournal(receiptPath, journal);
     for (const [index, entry] of selected.entries()) {
       assertCurrent();
@@ -21064,7 +21203,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
       writeArchiveJournal(receiptPath, journal);
       renameSync4(move.source, move.archive);
       moved.push(move);
-      syncArchiveDirectory(dirname21(move.source));
+      syncArchiveDirectory(dirname22(move.source));
       syncArchiveDirectory(archiveRoot);
       verifyArchive(move);
       move.status = "archived";
@@ -21087,7 +21226,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
         recheckRootAliases(aliases);
         assertSafePath(entry.source);
         assertSafePath(entry.archive);
-        if (lstatSync27(entry.source, { throwIfNoEntry: false })) {
+        if (lstatSync28(entry.source, { throwIfNoEntry: false })) {
           entry.status = "recovery-required";
           entry.conflict = "source-occupied";
           continue;
@@ -21101,10 +21240,10 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
         }
         if (entry.discoveryOnly) {
           linkSync3(entry.archive, entry.source);
-          syncArchiveDirectory(dirname21(entry.source));
+          syncArchiveDirectory(dirname22(entry.source));
           unlinkSync5(entry.archive);
         } else {
-          if (lstatSync27(entry.source, { throwIfNoEntry: false })) {
+          if (lstatSync28(entry.source, { throwIfNoEntry: false })) {
             entry.status = "recovery-required";
             entry.conflict = "source-occupied";
             continue;
@@ -21112,7 +21251,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
           renameSync4(entry.archive, entry.source);
         }
         entry.status = "restored";
-        syncArchiveDirectory(dirname21(entry.source));
+        syncArchiveDirectory(dirname22(entry.source));
         syncArchiveDirectory(archiveRoot);
       } catch {
         entry.status = "recovery-required";
@@ -21135,12 +21274,12 @@ function classifiedCodexPluginCacheCopy(entry, cache, read2, admit) {
   try {
     if (entry.agent !== "codex" || !entry.vendor || entry.bridge || entry.system)
       return false;
-    const document2 = join30(entry.path, "SKILL.md");
+    const document2 = join31(entry.path, "SKILL.md");
     const inside = relative9(cache, entry.path);
-    if (!inside || isAbsolute24(inside) || inside.split(sep13).some((segment) => segment === ".."))
+    if (!inside || isAbsolute24(inside) || inside.split(sep14).some((segment) => segment === ".."))
       return false;
     assertSafePath(entry.path);
-    if (!lstatSync27(cache).isDirectory() || !lstatSync27(entry.path).isDirectory() || !lstatSync27(document2).isFile())
+    if (!lstatSync28(cache).isDirectory() || !lstatSync28(entry.path).isDirectory() || !lstatSync28(document2).isFile())
       return false;
     if (realpathSync12.native(cache) !== cache || realpathSync12.native(entry.path) !== entry.path || realpathSync12.native(document2) !== document2)
       return false;
@@ -21159,7 +21298,7 @@ function isInertCodexPluginCacheCopy(entry, cache, allowedHostPaths, read2) {
 }
 function isInertCodexVendorPluginCopy(entry, cache, rules, read2) {
   try {
-    if (entry.managed || lstatSync27(join30(entry.path, ".hasna-skills.json"), { throwIfNoEntry: false }))
+    if (entry.managed || lstatSync28(join31(entry.path, ".hasna-skills.json"), { throwIfNoEntry: false }))
       return false;
     const marketplace = codexVendorMarketplace(cache, entry.path);
     if (!marketplace)
@@ -21177,7 +21316,7 @@ function isInertCodexVendorPluginCopy(entry, cache, rules, read2) {
         try {
           return realpathSync12.native(path);
         } catch {
-          return resolve22(path);
+          return resolve23(path);
         }
       };
       const matches = (rule) => typeof rule?.name === "string" && rule.name.trim() === identity5.name || typeof rule?.path === "string" && [document2, entry.path].includes(canonical9(rule.path));
@@ -21197,12 +21336,78 @@ function nativeSkillPathList(paths, invisible = false) {
   const remaining = paths.length - shown.length;
   return `${shown.join(", ")}${remaining ? `; ${remaining} more` : ""}`;
 }
+function nativeSkillRemediation(agent, blocking, context) {
+  const quote2 = (value) => nativeSkillPathList([value], true);
+  const codex = agent === "codex";
+  const system = blocking.filter((entry) => codex && entry.system === true);
+  const cacheCopies = blocking.filter((entry) => codex && !system.includes(entry) && entry.path.startsWith(context.cache + sep14));
+  const nameRule = (entry) => {
+    if (context.strict || codexVendorMarketplace(context.cache, entry.path) === null)
+      return null;
+    if (context.rules !== undefined && !Array.isArray(context.rules))
+      return null;
+    try {
+      const identity5 = classifyCodexPluginCacheDocument(join31(entry.path, "SKILL.md"), context.cache, context.read);
+      if (!identity5)
+        return null;
+      const rules = [...context.rules ?? [], { name: identity5.name, enabled: false }];
+      return isInertCodexVendorPluginCopy(entry, context.cache, rules, context.read) ? identity5.name : null;
+    } catch {
+      return null;
+    }
+  };
+  const named = cacheCopies.flatMap((entry) => {
+    const name = nameRule(entry);
+    return name ? [{ entry, name }] : [];
+  });
+  const unnamed = cacheCopies.filter((entry) => !named.some((item) => item.entry === entry));
+  const refresh = unnamed.filter((entry) => context.strict || context.toleratedChange || context.enrolled(entry));
+  const byPath = unnamed.filter((entry) => !refresh.includes(entry));
+  const otherVendor = blocking.filter((entry) => entry.vendor && !system.includes(entry) && !cacheCopies.includes(entry));
+  const user = blocking.filter((entry) => !entry.vendor && !system.includes(entry) && !cacheCopies.includes(entry));
+  const install = (catalog) => {
+    const fresh = [...context.automatic ? [] : ["discovery review"], ...catalog ? ["native catalog"] : []];
+    return `skills hook install --agent codex${catalog ? " --codex-native-catalog <reviewed-catalog>" : ""}${context.automatic ? "" : " --discovery-inputs <reviewed-file>"} --apply${fresh.length ? `, with a fresh ${fresh.join(" and ")}` : ""}`;
+  };
+  const followUp = (rows, entries, removesRules = false) => context.automatic || removesRules || !context.keepsConfig(rows) ? ` ${context.automatic ? "This automatic binding" : "The reviewed binding"} records that file, so follow the edit with ${install(entries.some(context.enrolled))}.` : "";
+  const row = (selector) => `[[skills.config]]
+${selector}
+enabled = false
+`;
+  const steps = [];
+  if (user.length)
+    steps.push(`For user and project copies, review skills migrate native --agent ${agent} --project <working-directory> --include-unmanaged${context.aliases ? " --allow-root-aliases" : ""} --json before continuing; it inventories that directory and its ancestors. Use --apply after reviewing the archive plan.`);
+  if (named.length) {
+    const names = [...new Set(named.map((item) => item.name))];
+    const rows = names.map((name) => row(`name = ${JSON.stringify(name)}`));
+    steps.push(`Codex refreshes OpenAI marketplace copies on its own, so disable each in Codex instead: add [[skills.config]] with name = ${nativeSkillPathList(names, true)}${names.length > 1 ? " (one rule per name)" : ""} and enabled = false to ${quote2(context.config)}. Codex then never loads it and the Codex prompt hook accepts it.${followUp(rows, named.map((item) => item.entry))}`);
+  }
+  if (byPath.length) {
+    const rules = Array.isArray(context.rules) ? context.rules : [];
+    const enabling = rules.some((rule) => rule?.enabled !== false && (typeof rule?.name === "string" || typeof rule?.path === "string" && byPath.some((entry) => [entry.path, join31(entry.path, "SKILL.md")].includes(resolve23(rule.path)))));
+    const rows = byPath.map((entry) => row(`path = ${JSON.stringify(join31(entry.path, "SKILL.md"))}`));
+    steps.push(`For other Codex plugin-cache copies, add [[skills.config]] with the exact path of each SKILL.md and enabled = false to ${quote2(context.config)}, or remove the plugin in Codex.${enabling ? " First remove the [[skills.config]] rules there that enable skills; no path rule counts while one does." : ""}${followUp(rows, byPath, enabling)}`);
+  }
+  if (system.length || refresh.length) {
+    const reasons = [
+      ...system.length ? ["Codex system skills are never archived by skills migrate native"] : [],
+      ...context.strict && refresh.length ? ["this check, unlike the live Codex prompt hook, does not accept a hand-added Codex name rule for a plugin-cache copy"] : [],
+      ...!context.strict && context.toleratedChange && refresh.length ? ["plugin-cache copies keep their exact-path exemption only while the recorded configuration is unchanged"] : [],
+      ...refresh.some(context.enrolled) ? ["only a fresh native catalog review exempts a skill of a plugin Skills has enrolled"] : []
+    ];
+    const sentence = reasons.join("; ");
+    steps.push(`${sentence[0].toUpperCase()}${sentence.slice(1)}, so refresh the binding instead: ${install(refresh.some(context.enrolled))}. It disables and records each copy.`);
+  }
+  if (otherVendor.length)
+    steps.push(`For other vendor copies, review skills migrate native --agent ${agent} --project <working-directory> --include-vendor --discovery-inputs <reviewed-file> --json; --include-vendor requires a reviewed --discovery-inputs file when a configured plugin declares hooks.`);
+  return steps.join(" ");
+}
 function assertManagedAgentBridge(agent, options = {}) {
   return assertManagedAgentBridgeWithDiscovery(agent, options);
 }
-function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscovery) {
-  const home = resolve22(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
-  assertSafePath(join30(dataDir2, "agent-policy.json"));
+function assertManagedBridgeCustody(agent, options = {}, provenDiscovery) {
+  const home = resolve23(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
+  assertSafePath(join31(dataDir2, "agent-policy.json"));
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2)
     throw new Error("NATIVE_SKILL_DRIFT: install the Skills bridge with skills hook install");
@@ -21213,11 +21418,10 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
   if (!Array.isArray(aliases))
     throw new Error("NATIVE_SKILL_DRIFT: invalid root alias binding");
   recheckRootAliases(aliases);
-  const expected = canonicalAgentPath(join30(nativeAgentRoot(home, agent, options.projectDir ?? process.cwd()), CLI_BRIDGE_NAME), aliases);
+  const expected = canonicalAgentPath(join31(nativeAgentRoot(home, agent, options.projectDir ?? process.cwd()), CLI_BRIDGE_NAME), aliases);
   if (!isOwnedCliBridge(expected, [expected]))
     throw new Error("NATIVE_SKILL_DRIFT: the native Skills bridge is missing or modified; repair it before continuing");
   const roots = projectAncestorDirectories([options.projectDir ?? process.cwd(), ...options.projectDirs ?? [], ...agent === "hermes" && process.env.TERMINAL_CWD ? [process.cwd()] : []]);
-  const visible = (entry) => entry.agent === agent || ["codex", "gemini", "opencode", "hermes", "sumi"].includes(agent) && entry.path.includes(`${sep13}.agents${sep13}skills${sep13}`) || ["opencode", "sumi"].includes(agent) && entry.agent === "claude";
   const discovery = provenDiscovery ?? binding.discovery?.[agent];
   assertProjectDiscovery(agent, [...roots], home, (path) => canonicalAgentPath(path, aliases), discovery);
   for (const source of discovery?.sources ?? [])
@@ -21232,16 +21436,35 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
     throw new Error("NATIVE_SKILL_DRIFT: the native hook command/profile binding is missing");
   if (options.profileId !== undefined && options.profileId !== profile)
     throw new Error("NATIVE_SKILL_DRIFT: the hook selection profile differs from its managed binding; restart the native client after reviewing skills hook install");
+  return { home, dataDir: dataDir2, binding, aliases, expected, roots, discovery, configPath, config, command, profile };
+}
+function assertUnrepairableBridgeProtection(custody, agent) {
+  if (agent !== "hermes")
+    return;
+  const { home, dataDir: dataDir2, binding, config, command, profile } = custody;
+  const supervisor = binding.supervisors?.hermes;
+  if (supervisor?.path !== join31(dataDir2, "agent-hooks", "hermes.js") || supervisor?.sha256 !== sha4(renderHermesSupervisor(command, profile)))
+    throw new Error("NATIVE_SKILL_DRIFT: Hermes supervisor binding changed; run skills hook install");
+  assertHermesProtection(home, config, command, profile, supervisor);
+}
+function assertRetainedReviewState(agent, options) {
+  const custody = assertManagedBridgeCustody(agent, options);
+  assertUnrepairableBridgeProtection(custody, agent);
+  assertManagedNativeDiscovery(custody, agent, options);
+}
+
+class NativeSkillCopiesDriftError extends Error {
+}
+function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscovery) {
+  const custody = assertManagedBridgeCustody(agent, options, provenDiscovery);
+  const { home, aliases, expected, discovery, config, command, profile } = custody;
   if (agent === "hermes") {
-    const supervisor = binding.supervisors?.hermes;
-    if (supervisor?.path !== join30(dataDir2, "agent-hooks", "hermes.js") || supervisor?.sha256 !== sha4(renderHermesSupervisor(command, profile)))
-      throw new Error("NATIVE_SKILL_DRIFT: Hermes supervisor binding changed; run skills hook install");
-    assertHermesProtection(home, config, command, profile, supervisor);
+    assertUnrepairableBridgeProtection(custody, agent);
   } else if (agent === "sumi") {
-    if (JSON.stringify(config.permissions?.filter((rule) => rule.action === "skill")) !== JSON.stringify(SUMI_SKILL_PERMISSIONS) || !isManagedSumiPlugin(readOptional(join30(sumiConfigDirectory(home, process.env, options.projectDir ?? process.cwd()), "plugins", "skills-cli.js")), command, profile))
+    if (JSON.stringify(config.permissions?.filter((rule) => rule.action === "skill")) !== JSON.stringify(SUMI_SKILL_PERMISSIONS) || !isManagedSumiPlugin(readOptional(join31(sumiConfigDirectory(home, process.env, options.projectDir ?? process.cwd()), "plugins", "skills-cli.js")), command, profile))
       throw new Error("NATIVE_SKILL_DRIFT: Sumi bridge protection changed; run skills hook install");
   } else if (agent === "opencode") {
-    if (JSON.stringify(config.permission?.skill) !== JSON.stringify({ "*": "deny", [CLI_BRIDGE_NAME]: "allow" }) || readOptional(join30(home, ".config", "opencode", "plugins", "skills-cli.js")) !== renderOpenCodePlugin(command, profile))
+    if (JSON.stringify(config.permission?.skill) !== JSON.stringify({ "*": "deny", [CLI_BRIDGE_NAME]: "allow" }) || readOptional(join31(home, ".config", "opencode", "plugins", "skills-cli.js")) !== renderOpenCodePlugin(command, profile))
       throw new Error("NATIVE_SKILL_DRIFT: OpenCode bridge protection changed; run skills hook install");
   } else {
     const required = {};
@@ -21258,8 +21481,23 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
     if (agent === "gemini" && (config.hooksConfig?.enabled === false || config.skills?.enabled !== true || !["antigravity-support", "skill-creator"].every((name) => config.skills?.disabled?.includes(name)) || config.skills?.disabled?.includes(CLI_BRIDGE_NAME)))
       throw new Error("NATIVE_SKILL_DRIFT: Gemini bridge or bundled-skill protection changed; run skills hook install");
   }
-  const codexPath = canonicalAgentPath(join30(home, ".codex", "config.toml"), aliases);
-  const vendorCache = canonicalAgentPath(join30(home, ".codex", "plugins", "cache"), aliases);
+  if (agent === "codex") {
+    const codexConfig = Bun.TOML.parse(readOptional(canonicalAgentPath(join31(home, ".codex", "config.toml"), aliases)) ?? "");
+    if (codexConfig.skills?.bundled?.enabled !== false)
+      throw new Error("NATIVE_SKILL_DRIFT: Codex bundled skill reseeding is not disabled (skills.bundled.enabled); run skills hook install");
+    const setting = (path) => (codexConfig.skills?.config ?? []).filter((entry) => typeof entry.path === "string" && [path, join31(path, "SKILL.md")].includes(canonicalAgentPath(entry.path, aliases)));
+    if ([...setting(expected), ...(codexConfig.skills?.config ?? []).filter((entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME)].some((entry) => entry.enabled === false))
+      throw new Error("NATIVE_SKILL_DRIFT: the Codex CLI bridge is disabled; run skills hook install");
+  }
+  if (agent === "gemini" && discovery && !discovery.builtinNames?.every((name) => config.skills.disabled.includes(name)))
+    throw new Error("NATIVE_SKILL_DRIFT: an installed Gemini builtin is not disabled");
+  return assertManagedNativeDiscovery(custody, agent, options);
+}
+function assertManagedNativeDiscovery(custody, agent, options) {
+  const { home, dataDir: dataDir2, binding, aliases, expected, roots, discovery } = custody;
+  const visible = (entry) => entry.agent === agent || ["codex", "gemini", "opencode", "hermes", "sumi"].includes(agent) && entry.path.includes(`${sep14}.agents${sep14}skills${sep14}`) || ["opencode", "sumi"].includes(agent) && entry.agent === "claude";
+  const codexPath = canonicalAgentPath(join31(home, ".codex", "config.toml"), aliases);
+  const vendorCache = canonicalAgentPath(join31(home, ".codex", "plugins", "cache"), aliases);
   const witnessTolerance = agent === "codex" && options.codexPromptHook === true ? {
     changes: [],
     acceptsInput: (source) => source.path === codexPath && codexVendorConfigChangeOnly(source, vendorCache),
@@ -21268,49 +21506,42 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
   if (options.codexDiscoveryRecovery && (agent !== "codex" || options.codexDiscoveryRecovery.configPath !== codexPath))
     throw new Error("NATIVE_SKILL_DRIFT: Codex trust recovery names a different configuration root");
   const codexConfig = agent === "codex" ? Bun.TOML.parse(readOptional(codexPath) ?? "") : {};
-  if (agent === "codex" && codexConfig.skills?.bundled?.enabled !== false)
-    throw new Error("NATIVE_SKILL_DRIFT: Codex bundled skill reseeding is not disabled (skills.bundled.enabled); run skills hook install");
-  const setting = (path) => (codexConfig.skills?.config ?? []).filter((entry) => typeof entry.path === "string" && [path, join30(path, "SKILL.md")].includes(canonicalAgentPath(entry.path, aliases)));
-  if (agent === "codex" && [...setting(expected), ...(codexConfig.skills?.config ?? []).filter((entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME)].some((entry) => entry.enabled === false))
-    throw new Error("NATIVE_SKILL_DRIFT: the Codex CLI bridge is disabled; run skills hook install");
-  if (agent === "codex" && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join30(home, ".codex/plugins/cache"), aliases), binding.codexPluginSkills ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? []))
+  if (agent === "codex" && !reviewedCodexPluginCapabilitiesUnchanged(canonicalAgentPath(join31(home, ".codex/plugins/cache"), aliases), binding.codexPluginSkills ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), codexConfig.skills?.config ?? []))
     throw new Error("NATIVE_SKILL_DRIFT: reviewed native plugin capability controls changed; run skills hook install with a fresh discovery review");
   const disabledPlugin = (entry) => {
     if (agent !== "codex" || !entry.vendor)
       return false;
-    const document2 = join30(entry.path, "SKILL.md"), cache = canonicalAgentPath(join30(home, ".codex/plugins/cache"), aliases), read2 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024));
+    const document2 = join31(entry.path, "SKILL.md"), cache = canonicalAgentPath(join31(home, ".codex/plugins/cache"), aliases), read2 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024));
     return isReviewedCodexPluginInactive(document2, cache, binding.codexInactivePlugins ?? [], codexConfig.plugins, codexConfig.skills?.config ?? [], read2) || isReviewedCodexPluginSkillDisabled(document2, cache, binding.codexPluginSkills ?? [], codexConfig.skills?.config, read2);
   };
-  const inertVendorCopy = (entry) => agent === "codex" && options.codexPromptHook === true && entry.vendor && entry.path.startsWith(vendorCache + sep13) && isInertCodexVendorPluginCopy(entry, vendorCache, codexConfig.skills?.config, (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)));
-  const vendorOnlyCacheCopy = (entry) => (witnessTolerance?.changes.length ?? 0) > 0 && entry.path.startsWith(vendorCache + sep13);
+  const inertVendorCopy = (entry) => agent === "codex" && options.codexPromptHook === true && entry.vendor && entry.path.startsWith(vendorCache + sep14) && isInertCodexVendorPluginCopy(entry, vendorCache, codexConfig.skills?.config, (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)));
+  const vendorOnlyCacheCopy = (entry) => (witnessTolerance?.changes.length ?? 0) > 0 && entry.path.startsWith(vendorCache + sep14);
   const disabledPaths = new Set(disabledCodexSkillPaths(codexConfig, aliases));
   const disabledVendorSkill = (entry) => {
     if (agent !== "codex" || !entry.vendor)
       return false;
     if (vendorOnlyCacheCopy(entry))
       return false;
-    if ((binding.codexPluginSkills ?? []).some((control) => entry.path.startsWith(control.pluginParent + sep13)))
+    if ((binding.codexPluginSkills ?? []).some((control) => entry.path.startsWith(control.pluginParent + sep14)))
       return disabledPlugin(entry);
     if (disabledPlugin(entry))
       return true;
     if (!disabledPaths.has(entry.path))
       return false;
-    if (entry.path.startsWith(canonicalAgentPath(join30(home, ".codex", "plugins", "cache"), aliases) + sep13))
+    if (entry.path.startsWith(canonicalAgentPath(join31(home, ".codex", "plugins", "cache"), aliases) + sep14))
       return true;
-    const runtimeCache = canonicalAgentPath(join30(home, ".cache", "codex-runtimes"), aliases);
-    if (entry.path.startsWith(runtimeCache + sep13) && discovery?.method === "automatic" && discovery.roots.some((root) => entry.path.startsWith(root + sep13)))
+    const runtimeCache = canonicalAgentPath(join31(home, ".cache", "codex-runtimes"), aliases);
+    if (entry.path.startsWith(runtimeCache + sep14) && discovery?.method === "automatic" && discovery.roots.some((root) => entry.path.startsWith(root + sep14)))
       return true;
-    const bundledMarketplaces = canonicalAgentPath(join30(home, ".codex", ".tmp", "bundled-marketplaces"), aliases);
-    if (entry.path.startsWith(bundledMarketplaces + sep13) && discovery?.method === "automatic" && discovery.roots.some((root) => entry.path.startsWith(root + sep13)))
+    const bundledMarketplaces = canonicalAgentPath(join31(home, ".codex", ".tmp", "bundled-marketplaces"), aliases);
+    if (entry.path.startsWith(bundledMarketplaces + sep14) && discovery?.method === "automatic" && discovery.roots.some((root) => entry.path.startsWith(root + sep14)))
       return true;
-    if (!entry.path.startsWith(canonicalAgentPath(join30(home, ".codex", "skills", ".system"), aliases) + sep13))
+    if (!entry.path.startsWith(canonicalAgentPath(join31(home, ".codex", "skills", ".system"), aliases) + sep14))
       return false;
     return Array.isArray(binding.disabledBuiltins) && binding.disabledBuiltins.some((item) => item.path === entry.path && item.hash === entry.hash);
   };
   if (!discovery || discovery.agent !== agent)
     throw new Error("NATIVE_SKILL_DRIFT: native discovery coverage is missing; run skills hook install");
-  if (agent === "gemini" && !discovery.builtinNames?.every((name) => config.skills.disabled.includes(name)))
-    throw new Error("NATIVE_SKILL_DRIFT: an installed Gemini builtin is not disabled");
   try {
     verifyAgentDiscovery(agent === "codex" ? { ...discovery, codexDisabledPluginSkills: binding.codexPluginSkills ?? [] } : discovery, options.codexDiscoveryRecovery, aliases, witnessTolerance);
     if (agent === "sumi" && discovery.method === "reviewed")
@@ -21325,7 +21556,7 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
   let installationInputRoots = [];
   if (agent === "codex") {
     try {
-      installationInputRoots = reviewedCodexPluginSourceRoots(canonicalAgentPath(join30(home, ".codex/plugins/cache"), aliases), discovery.codexInstallationInputs?.plugins ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)));
+      installationInputRoots = reviewedCodexPluginSourceRoots(canonicalAgentPath(join31(home, ".codex/plugins/cache"), aliases), discovery.codexInstallationInputs?.plugins ?? [], (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)));
     } catch {
       throw new Error("NATIVE_SKILL_DRIFT: native installation input identity changed; review discovery and catalog");
     }
@@ -21335,7 +21566,7 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
   let adapterRefusal, inert = [];
   if (agent === "codex" && unexpected.length && options.codexNativePolicy) {
     const { inspector, helperRunner, deadlineMs, ...envelope } = options.codexNativePolicy;
-    const cache = canonicalAgentPath(join30(home, ".codex", "plugins", "cache"), aliases), read2 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), bridgeDocument = join30(expected, "SKILL.md");
+    const cache = canonicalAgentPath(join31(home, ".codex", "plugins", "cache"), aliases), read2 = (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)), bridgeDocument = join31(expected, "SKILL.md");
     try {
       const claimed = parseCodexNativeHookEnvelope(envelope, bridgeDocument).policy;
       inert = unexpected.filter((entry) => isInertCodexPluginCacheCopy(entry, cache, claimed.allowedHostPaths, read2));
@@ -21354,7 +21585,18 @@ function assertManagedAgentBridgeWithDiscovery(agent, options = {}, provenDiscov
   }
   if (unexpected.length > inert.length + inertVendor.length) {
     const blocking = unexpected.filter((entry) => !inertVendor.includes(entry));
-    throw new Error(`NATIVE_SKILL_DRIFT: ${blocking.length} unexpected native skill copies were found: ${nativeSkillPathList(blocking.map((entry) => entry.path))}. Review skills migrate native --agent ${agent} --project <working-directory> --include-unmanaged --include-vendor --json before continuing; it inventories that directory and its ancestors. Use --apply after reviewing the archive plan.${adapterRefusal ? ` Native policy adapter refused: ${adapterRefusal}` : ""}`);
+    const remediation = nativeSkillRemediation(agent, blocking, { cache: vendorCache, config: codexPath, aliases: aliases.length > 0, strict: options.codexPromptHook !== true, automatic: discovery.method === "automatic", toleratedChange: (witnessTolerance?.changes.length ?? 0) > 0, rules: codexConfig.skills?.config, enrolled: (entry) => (binding.codexPluginSkills ?? []).some((control) => entry.path.startsWith(control.pluginParent + sep14)), keepsConfig: (rows) => {
+      try {
+        const text2 = readOptional(codexPath) ?? "";
+        return discoveryTextKeepsWitness(discovery, codexPath, `${text2.trimEnd()}${text2.trim() ? `
+
+` : ""}${rows.join(`
+`)}`);
+      } catch {
+        return false;
+      }
+    }, read: (path) => new TextDecoder("utf-8", { fatal: true }).decode(readNativeBytes(path, 1024 * 1024)) });
+    throw new NativeSkillCopiesDriftError(`NATIVE_SKILL_DRIFT: ${blocking.length} unexpected native skill copies were found: ${nativeSkillPathList(blocking.map((entry) => entry.path))}. ${remediation}${adapterRefusal ? ` Native policy adapter refused: ${adapterRefusal}` : ""}`);
   }
   recheckRootAliases(aliases);
   const discoveryChanges = (witnessTolerance?.changes ?? []).filter((change, index, all) => all.findIndex((other) => other.kind === change.kind && other.path === change.path) === index);
@@ -21378,11 +21620,11 @@ function isSkillsOwnershipMarker(marker) {
   return typeof marker === "object" && marker !== null && Object.hasOwn(marker, "managedBy") && marker.managedBy === SYNC_MARKER_MANAGED_BY;
 }
 function hasSkillsOwnershipMarker(dir) {
-  const path = join31(dir, SYNC_MARKER_FILE);
+  const path = join32(dir, SYNC_MARKER_FILE);
   try {
-    if (!lstatSync28(path).isFile())
+    if (!lstatSync29(path).isFile())
       return false;
-    const marker = JSON.parse(readFileSync19(path, "utf8"));
+    const marker = JSON.parse(readFileSync20(path, "utf8"));
     return isSkillsOwnershipMarker(marker);
   } catch {
     return false;
@@ -21402,9 +21644,9 @@ function resolveSyncAgents(arg) {
 function agentGlobalSkillsDir(agent, homeDir2 = homedir3()) {
   switch (agent) {
     case "opencode":
-      return join31(homeDir2, ".config", "opencode", "skills");
+      return join32(homeDir2, ".config", "opencode", "skills");
     default:
-      return join31(homeDir2, `.${agent}`, "skills");
+      return join32(homeDir2, `.${agent}`, "skills");
   }
 }
 function adaptSkillMdForAgent(skillMd, agent) {
@@ -21463,7 +21705,7 @@ function resolveSyncCorpus(options = {}) {
 function packageSourceRoots(source) {
   const roots = [];
   for (const sub of ["skills"]) {
-    const candidate = join31(source, sub);
+    const candidate = join32(source, sub);
     if (existsSync10(candidate) && isDirectory(candidate))
       roots.push(candidate);
   }
@@ -21479,10 +21721,10 @@ function containsSkillDirectories(path) {
     return false;
   }
   return entries.some((entry) => {
-    const candidate = join31(path, entry);
+    const candidate = join32(path, entry);
     if (!isDirectory(candidate))
       return false;
-    return existsSync10(join31(candidate, "SKILL.md")) || existsSync10(join31(candidate, "skill.json")) || existsSync10(join31(candidate, "package.json"));
+    return existsSync10(join32(candidate, "SKILL.md")) || existsSync10(join32(candidate, "skill.json")) || existsSync10(join32(candidate, "package.json"));
   });
 }
 function isDirectory(path) {
@@ -21522,7 +21764,7 @@ function syncSkillsToAgents(options = {}) {
         actions.push({
           skill: name,
           agent,
-          path: join31(agentGlobalSkillsDir(agent, homeDir2), name, "SKILL.md"),
+          path: join32(agentGlobalSkillsDir(agent, homeDir2), name, "SKILL.md"),
           action: "skip",
           reason: "not found in this machine's corpus"
         });
@@ -21554,7 +21796,7 @@ function syncSkillsToAgents(options = {}) {
 }
 function writeManagedAgentSkill(params) {
   const homeDir2 = params.homeDir ?? homedir3();
-  const dir = join31(agentGlobalSkillsDir(params.agent, homeDir2), params.skill);
+  const dir = join32(agentGlobalSkillsDir(params.agent, homeDir2), params.skill);
   const result = writeManagedSkillDir(dir, params.skillMd, {
     skill: params.skill,
     source: params.source,
@@ -21577,8 +21819,8 @@ function writeManagedSkillDir(dir, skillMd, options) {
   return withCodexCorpusWrite(root ? [root] : [], (assertCurrent) => writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent), options);
 }
 function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
-  const skillMdPath = join31(dir, "SKILL.md");
-  const markerPath = join31(dir, SYNC_MARKER_FILE);
+  const skillMdPath = join32(dir, "SKILL.md");
+  const markerPath = join32(dir, SYNC_MARKER_FILE);
   const dirExists = existsSync10(dir);
   const managed = hasSkillsOwnershipMarker(dir);
   const hasSkillMd = existsSync10(skillMdPath);
@@ -21599,7 +21841,7 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
   if (dirExists && managed && hasSkillMd && !options.force && isPointerSkillMd(skillMd)) {
     let existingIsStub = false;
     try {
-      existingIsStub = isPointerSkillMd(readFileSync19(skillMdPath, "utf-8"));
+      existingIsStub = isPointerSkillMd(readFileSync20(skillMdPath, "utf-8"));
     } catch {
       existingIsStub = false;
     }
@@ -21614,13 +21856,13 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
   const action = dirExists ? "update" : "create";
   if (options.dryRun)
     return { action, path: skillMdPath };
-  const parentDir = dirname22(dir);
+  const parentDir = dirname23(dir);
   mkdirSync9(parentDir, { recursive: true });
-  const transactionDir = mkdtempSync(join31(parentDir, `.hasna-skills-write-${basename12(dir)}-`));
-  const candidateDir = join31(transactionDir, "candidate");
-  const backupDir = join31(transactionDir, "backup");
-  const candidateSkillMdPath = join31(candidateDir, "SKILL.md");
-  const candidateMarkerPath = join31(candidateDir, SYNC_MARKER_FILE);
+  const transactionDir = mkdtempSync(join32(parentDir, `.hasna-skills-write-${basename12(dir)}-`));
+  const candidateDir = join32(transactionDir, "candidate");
+  const backupDir = join32(transactionDir, "backup");
+  const candidateSkillMdPath = join32(candidateDir, "SKILL.md");
+  const candidateMarkerPath = join32(candidateDir, SYNC_MARKER_FILE);
   const marker = {
     managedBy: SYNC_MARKER_MANAGED_BY,
     skill: options.skill,
@@ -21649,7 +21891,7 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
     assertCurrent();
     renameDirectory(candidateDir, dir);
     assertCurrent();
-    if (readFileSync19(skillMdPath, "utf8") !== (skillMd.endsWith(`
+    if (readFileSync20(skillMdPath, "utf8") !== (skillMd.endsWith(`
 `) ? skillMd : `${skillMd}
 `))
       throw new Error("Managed skill readback failed");
@@ -21678,12 +21920,12 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
   return { action, path: skillMdPath };
 }
 function removeManagedAgentSkill(skill, agent, homeDir2 = homedir3(), options = {}) {
-  const dir = join31(agentGlobalSkillsDir(agent, homeDir2), skill);
+  const dir = join32(agentGlobalSkillsDir(agent, homeDir2), skill);
   const root = codexCorpusRootForPath(dir);
   return withCodexCorpusWrite(root ? [root] : [], () => removeManagedAgentSkillUnlocked(skill, agent, homeDir2, options), options);
 }
 function removeManagedAgentSkillUnlocked(skill, agent, homeDir2 = homedir3(), options = {}) {
-  const dir = join31(agentGlobalSkillsDir(agent, homeDir2), skill);
+  const dir = join32(agentGlobalSkillsDir(agent, homeDir2), skill);
   if (!hasSkillsOwnershipMarker(dir))
     return false;
   rmSync2(dir, { recursive: true, force: true });
@@ -21691,9 +21933,9 @@ function removeManagedAgentSkillUnlocked(skill, agent, homeDir2 = homedir3(), op
 }
 function sourceSkillMd(skillPath, name, description, kind, preferBundledDocs = false) {
   if (kind === undefined || kind === "instruction" || preferBundledDocs) {
-    const skillMdPath = join31(skillPath, "SKILL.md");
+    const skillMdPath = join32(skillPath, "SKILL.md");
     if (existsSync10(skillMdPath))
-      return readFileSync19(skillMdPath, "utf-8");
+      return readFileSync20(skillMdPath, "utf-8");
   }
   return pointerSkillMd(name, description);
 }
@@ -21733,8 +21975,8 @@ function resolveSkillAlias(name) {
 }
 
 // src/lib/project-state.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync10, readFileSync as readFileSync20, writeFileSync as writeFileSync8 } from "fs";
-import { join as join32 } from "path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync10, readFileSync as readFileSync21, writeFileSync as writeFileSync8 } from "fs";
+import { join as join33 } from "path";
 var VALID_PIN_SOURCES = [
   "official",
   "custom",
@@ -21749,17 +21991,17 @@ var SKILLS_PROJECT_DIR = ".skills";
 var PROJECT_CONFIG_FILE = "project.json";
 var DEFAULT_EXPORT_DIR = ".skills/exports";
 function getProjectStateDir(targetDir = process.cwd()) {
-  return join32(targetDir, SKILLS_PROJECT_DIR);
+  return join33(targetDir, SKILLS_PROJECT_DIR);
 }
 function getProjectConfigPath(targetDir = process.cwd()) {
-  return join32(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
+  return join33(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
 }
 function loadProjectConfig(targetDir = process.cwd()) {
   const path = getProjectConfigPath(targetDir);
   if (!existsSync11(path))
     return null;
   try {
-    return normalizeProjectConfig(JSON.parse(readFileSync20(path, "utf-8")));
+    return normalizeProjectConfig(JSON.parse(readFileSync21(path, "utf-8")));
   } catch {
     return null;
   }
@@ -21881,7 +22123,7 @@ function getSkillPath(name) {
   const extensionPath = findExtensionSkillPath(skillName);
   if (extensionPath)
     return extensionPath;
-  return join33(getPortableSkillsRoot(), skillName);
+  return join34(getPortableSkillsRoot(), skillName);
 }
 function getCanonicalSkillName(name) {
   return getSkill(name)?.name ?? resolveSkillAlias(normalizeSkillSlug(name));
@@ -21944,9 +22186,9 @@ function createLocalSkillManifest(name, generateSkillMd) {
   if (!existsSync12(sourcePath))
     return null;
   let skillMd = "";
-  const skillMdPath = join33(sourcePath, "SKILL.md");
+  const skillMdPath = join34(sourcePath, "SKILL.md");
   if (existsSync12(skillMdPath)) {
-    skillMd = readFileSync21(skillMdPath, "utf-8");
+    skillMd = readFileSync23(skillMdPath, "utf-8");
   } else if (generateSkillMd) {
     skillMd = generateSkillMd(name) ?? "";
   } else {
@@ -22018,16 +22260,16 @@ function getAgentSkillsDir(agent, scope = "global", projectDir) {
   const base = projectDir || process.cwd();
   switch (agent) {
     case "pi":
-      return scope === "project" ? join33(base, ".pi", "skills") : join33(homedir4(), ".pi", "agent", "skills");
+      return scope === "project" ? join34(base, ".pi", "skills") : join34(homedir4(), ".pi", "agent", "skills");
     case "opencode":
-      return scope === "project" ? join33(base, ".opencode", "skills") : join33(homedir4(), ".config", "opencode", "skills");
+      return scope === "project" ? join34(base, ".opencode", "skills") : join34(homedir4(), ".config", "opencode", "skills");
     default:
-      return scope === "project" ? join33(base, `.${agent}`, "skills") : join33(homedir4(), `.${agent}`, "skills");
+      return scope === "project" ? join34(base, `.${agent}`, "skills") : join34(homedir4(), `.${agent}`, "skills");
   }
 }
 function getAgentSkillPath(name, agent, scope = "global", projectDir) {
   const skillName = normalizeSkillName(getCanonicalSkillName(name));
-  return join33(getAgentSkillsDir(agent, scope, projectDir), skillName);
+  return join34(getAgentSkillsDir(agent, scope, projectDir), skillName);
 }
 function installSkillForAgent(name, options, generateSkillMd) {
   assertNativeExportAllowed();
@@ -22070,9 +22312,9 @@ function removeSkillForAgentUnlocked(name, options) {
 }
 function resolveAgentSkillMd(name, generateSkillMd) {
   const sourcePath = getSkillPath(name);
-  const skillMdPath = join33(sourcePath, "SKILL.md");
+  const skillMdPath = join34(sourcePath, "SKILL.md");
   if (existsSync12(skillMdPath))
-    return readFileSync21(skillMdPath, "utf-8");
+    return readFileSync23(skillMdPath, "utf-8");
   if (generateSkillMd)
     return generateSkillMd(name);
   return generateMinimalSkillMd(name);
@@ -22105,7 +22347,7 @@ function generateMinimalSkillMd(name) {
     "---",
     ""
   ].filter(Boolean);
-  const fallbackDoc = readFileIfExists(join33(sourcePath, "README.md")) || readFileIfExists(join33(sourcePath, "CLAUDE.md"));
+  const fallbackDoc = readFileIfExists(join34(sourcePath, "README.md")) || readFileIfExists(join34(sourcePath, "CLAUDE.md"));
   if (fallbackDoc)
     return `${frontmatter.join(`
 `)}${fallbackDoc.trim()}
@@ -22124,18 +22366,18 @@ skills run ${canonicalName}
 `;
 }
 function readBundledSkillVersion(name) {
-  const pkgPath = join33(getSkillPath(name), "package.json");
+  const pkgPath = join34(getSkillPath(name), "package.json");
   if (!existsSync12(pkgPath))
     return "unknown";
   try {
-    const pkg = JSON.parse(readFileSync21(pkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync23(pkgPath, "utf-8"));
     return pkg.version || "unknown";
   } catch {
     return "unknown";
   }
 }
 function readFileIfExists(path) {
-  return existsSync12(path) ? readFileSync21(path, "utf-8") : null;
+  return existsSync12(path) ? readFileSync23(path, "utf-8") : null;
 }
 function loadProjectConfigCompat(targetDir) {
   return loadProjectConfig(targetDir);
@@ -22179,11 +22421,11 @@ function selectSkillDoc(docs, file) {
 function isInstructionSkillDir(skillPath, meta) {
   if (meta?.kind === "instruction")
     return true;
-  const skillMdPath = join34(skillPath, "SKILL.md");
+  const skillMdPath = join35(skillPath, "SKILL.md");
   if (!existsSync13(skillMdPath))
     return false;
   try {
-    return parseSkillFrontmatter(readFileSync23(skillMdPath, "utf-8"))?.kind === "instruction";
+    return parseSkillFrontmatter(readFileSync25(skillMdPath, "utf-8"))?.kind === "instruction";
   } catch {
     return false;
   }
@@ -22209,9 +22451,9 @@ function getSkillDocs(name) {
   if (!existsSync13(skillPath))
     return null;
   return {
-    skillMd: readIfExists(join34(skillPath, "SKILL.md")),
-    readme: readIfExists(join34(skillPath, "README.md")),
-    claudeMd: readIfExists(join34(skillPath, "CLAUDE.md"))
+    skillMd: readIfExists(join35(skillPath, "SKILL.md")),
+    readme: readIfExists(join35(skillPath, "README.md")),
+    claudeMd: readIfExists(join35(skillPath, "CLAUDE.md"))
   };
 }
 function getSkillBestDoc(name, file) {
@@ -22227,14 +22469,14 @@ function getSkillRequirements(name) {
     return null;
   const texts = [];
   for (const file of ["SKILL.md", "README.md", "CLAUDE.md", ".env.example", ".env.local.example"]) {
-    const content = readIfExists(join34(skillPath, file));
+    const content = readIfExists(join35(skillPath, file));
     if (content)
       texts.push(content);
   }
   const meta = getSkill(name);
   let dependencies = {};
   try {
-    dependencies = JSON.parse(readFileSync23(join34(skillPath, "package.json"), "utf8")).dependencies || {};
+    dependencies = JSON.parse(readFileSync25(join35(skillPath, "package.json"), "utf8")).dependencies || {};
   } catch {}
   return getSkillRequirementsFromContent(name, texts, dependencies, meta);
 }
@@ -22296,13 +22538,13 @@ async function runSkill(name, args, options = {}) {
       error: `Skill '${name}' is an instruction skill (kind: instruction) and is not runnable. Instruction skills are consumed by coding agents via SKILL.md, not executed with 'skills run'.`
     };
   }
-  const pkgPath = join34(skillPath, "package.json");
+  const pkgPath = join35(skillPath, "package.json");
   if (!existsSync13(pkgPath)) {
     return { exitCode: 1, error: `No package.json in skill '${name}'` };
   }
   let entryPoint2;
   try {
-    const pkg = JSON.parse(readFileSync23(pkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync25(pkgPath, "utf-8"));
     if (pkg.bin) {
       const binValues = Object.values(pkg.bin);
       entryPoint2 = binValues[0];
@@ -22316,12 +22558,12 @@ async function runSkill(name, args, options = {}) {
   } catch {
     return { exitCode: 1, error: `Failed to parse package.json for skill '${name}'` };
   }
-  const entryPath = join34(skillPath, entryPoint2);
+  const entryPath = join35(skillPath, entryPoint2);
   if (!existsSync13(entryPath)) {
     return { exitCode: 1, error: `Entry point '${entryPoint2}' not found in skill '${name}'` };
   }
   const env = { ...process.env, ...options.env };
-  if (!existsSync13(join34(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
+  if (!existsSync13(join35(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
     const failure = await prepareSkillDependencies(skillPath, env, options.preparationTimeoutMs);
     if (failure)
       return failure;
@@ -22399,13 +22641,13 @@ function generateSkillMd(name) {
     "---"
   ].join(`
 `);
-  const readme = readIfExists(join34(skillPath, "README.md"));
-  const claudeMd = readIfExists(join34(skillPath, "CLAUDE.md"));
+  const readme = readIfExists(join35(skillPath, "README.md"));
+  const claudeMd = readIfExists(join35(skillPath, "CLAUDE.md"));
   let cliCommand = null;
-  const pkgPath = join34(skillPath, "package.json");
+  const pkgPath = join35(skillPath, "package.json");
   if (existsSync13(pkgPath)) {
     try {
-      const pkg = JSON.parse(readFileSync23(pkgPath, "utf-8"));
+      const pkg = JSON.parse(readFileSync25(pkgPath, "utf-8"));
       if (pkg.bin) {
         const binKeys = Object.keys(pkg.bin);
         if (binKeys.length > 0)
@@ -22479,7 +22721,7 @@ function extractEnvVars(text2) {
 function readIfExists(path) {
   try {
     if (existsSync13(path)) {
-      return readFileSync23(path, "utf-8");
+      return readFileSync25(path, "utf-8");
     }
   } catch {}
   return null;
@@ -22631,7 +22873,7 @@ function describeEntries(entries) {
 
 // src/lib/plugin-admission.ts
 function pluginAdmissionRoot() {
-  return join35(homedir5(), ".hasna", "skills", "plugin-admission");
+  return join36(homedir5(), ".hasna", "skills", "plugin-admission");
 }
 function validatePluginTarget(value) {
   pluginKeys(value, ["schemaVersion", "pluginId", "registrations", "native", "resolver"]);
@@ -22642,7 +22884,7 @@ function validatePluginTarget(value) {
   for (const registration of value.registrations) {
     pluginKeys(registration, ["scope", "projectPath"]);
     pluginNeed(registration.scope === "user" || registration.scope === "project", "Unsupported plugin registration scope");
-    pluginNeed(registration.scope === "user" ? registration.projectPath === null : typeof registration.projectPath === "string" && isAbsolute25(registration.projectPath) && resolve23(registration.projectPath) === registration.projectPath, "Plugin scope requires its exact project path");
+    pluginNeed(registration.scope === "user" ? registration.projectPath === null : typeof registration.projectPath === "string" && isAbsolute25(registration.projectPath) && resolve24(registration.projectPath) === registration.projectPath, "Plugin scope requires its exact project path");
     const key2 = JSON.stringify([registration.scope, registration.projectPath]);
     pluginNeed(!scopes.has(key2), "Duplicate plugin registration scope");
     scopes.add(key2);
@@ -22650,7 +22892,7 @@ function validatePluginTarget(value) {
   for (const key2 of ["native", "resolver"]) {
     pluginKeys(value[key2], key2 === "native" ? ["version", "executable", "digest"] : ["executable", "digest"]);
     pluginText(value[key2].executable);
-    pluginNeed(isAbsolute25(value[key2].executable) && resolve23(value[key2].executable) === value[key2].executable, "Plugin executable must have a canonical absolute path");
+    pluginNeed(isAbsolute25(value[key2].executable) && resolve24(value[key2].executable) === value[key2].executable, "Plugin executable must have a canonical absolute path");
     pluginDigest(value[key2].digest);
   }
   pluginNeed(["2.1.274", "2.1.276"].includes(value.native.version), "Plugin admission requires a certified Claude command-source runtime (2.1.274 or 2.1.276)");
@@ -22802,17 +23044,17 @@ function pluginResolverCommand(binding) {
 }
 function root(options) {
   const path = options.storeRoot ?? pluginAdmissionRoot();
-  pluginNeed(isAbsolute25(path) && resolve23(path) === path, "Invalid plugin admission store root");
+  pluginNeed(isAbsolute25(path) && resolve24(path) === path, "Invalid plugin admission store root");
   return path;
 }
 function pluginBindingPath(storeRoot, id) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id), "Invalid plugin binding identifier");
-  return join35(storeRoot, "bindings", `${id}.json`);
+  return join36(storeRoot, "bindings", `${id}.json`);
 }
 function pluginReceiptPath(storeRoot, id, digest2) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id), "Invalid plugin binding identifier");
   pluginDigest(digest2);
-  return join35(storeRoot, "receipts", id, `${digest2.slice(7)}.json`);
+  return join36(storeRoot, "receipts", id, `${digest2.slice(7)}.json`);
 }
 function readPluginBinding(storeRoot, id) {
   const value = readPluginJson(pluginBindingPath(storeRoot, id));
@@ -22832,7 +23074,7 @@ function readPluginAdmissionReceipt(storeRoot, id, digest2) {
   pluginNeed(receipt.plan.bindingId === id && receipt.plan.planDigest === digest2, "Plugin receipt identity differs from its filename");
   const binding = readPluginBinding(storeRoot, id);
   pluginNeed(canonicalJson(binding) === canonicalJson(receipt.plan.binding) && receipt.plan.sourceCommand === pluginResolverCommand(binding), "Plugin receipt binding changed");
-  pluginNeed(receipt.materializedPath === join35(storeRoot, "objects", id, digest2.slice(7)), "Plugin receipt points outside its immutable materialization");
+  pluginNeed(receipt.materializedPath === join36(storeRoot, "objects", id, digest2.slice(7)), "Plugin receipt points outside its immutable materialization");
   pluginText(receipt.admittedAt, 64);
   pluginNeed(Number.isFinite(Date.parse(receipt.admittedAt)), "Invalid plugin admission time");
   return receipt;
@@ -22973,7 +23215,7 @@ async function admitPlugin(spec, profileId, target, approvedDigest, approvedEvid
   const { plan, projection } = await candidate(spec, profileId, target, options);
   pluginNeed(plan.planDigest === approvedDigest, "The plugin plan changed since review; obtain and review a new plan");
   pluginNeed(plan.evidenceDigest === approvedEvidenceDigest, "The plugin routing evidence changed since review; obtain and review a new plan");
-  const store = root(options), materializedPath = join35(store, "objects", plan.bindingId, plan.planDigest.slice(7));
+  const store = root(options), materializedPath = join36(store, "objects", plan.bindingId, plan.planDigest.slice(7));
   materializePluginTree(materializedPath, projection.files);
   writePluginJsonImmutable(pluginBindingPath(store, plan.bindingId), plan.binding);
   const path = pluginReceiptPath(store, plan.bindingId, plan.planDigest), existing = readPluginJson(path);
@@ -23007,21 +23249,21 @@ function validateManagedPluginWitnesses(value) {
     pluginNeed(typeof item.bindingId === "string" && /^[a-f0-9]{64}$/.test(item.bindingId) && !seen.has(item.bindingId), "Invalid or duplicate managed plugin witness");
     seen.add(item.bindingId);
     pluginText(item.storeRoot);
-    pluginNeed(isAbsolute26(item.storeRoot) && resolve24(item.storeRoot) === item.storeRoot, "Invalid plugin receipt store path");
+    pluginNeed(isAbsolute26(item.storeRoot) && resolve25(item.storeRoot) === item.storeRoot, "Invalid plugin receipt store path");
   }
 }
 function safe5(path) {
   pluginText(path);
-  pluginNeed(isAbsolute26(path) && resolve24(path) === path, "Invalid plugin registry path");
-  for (let at = path;; at = dirname23(at)) {
-    pluginNeed(!lstatSync29(at, { throwIfNoEntry: false })?.isSymbolicLink(), "Plugin registry path traverses a symlink");
-    if (at === dirname23(at))
+  pluginNeed(isAbsolute26(path) && resolve25(path) === path, "Invalid plugin registry path");
+  for (let at = path;; at = dirname24(at)) {
+    pluginNeed(!lstatSync30(at, { throwIfNoEntry: false })?.isSymbolicLink(), "Plugin registry path traverses a symlink");
+    if (at === dirname24(at))
       break;
   }
 }
 function readRegistry(path) {
   safe5(path);
-  const initial = lstatSync29(path);
+  const initial = lstatSync30(path);
   pluginNeed(initial.isFile() && initial.size <= 1024 * 1024, "Plugin registry is not a bounded regular file");
   const fd = openSync18(path, constants19.O_RDONLY | constants19.O_NOFOLLOW | constants19.O_NONBLOCK);
   try {
@@ -23035,7 +23277,7 @@ function readRegistry(path) {
         break;
       length += count;
     }
-    const after = fstatSync18(fd), current = lstatSync29(path);
+    const after = fstatSync18(fd), current = lstatSync30(path);
     safe5(path);
     pluginNeed(length <= 1024 * 1024 && length === opened.size && after.size === opened.size && after.mtimeMs === opened.mtimeMs && after.ctimeMs === opened.ctimeMs && current.dev === opened.dev && current.ino === opened.ino && current.mtimeMs === opened.mtimeMs && current.ctimeMs === opened.ctimeMs, "Plugin registry changed during read");
     let value;
@@ -23065,7 +23307,7 @@ function hashManagedPluginRegistry(path, managed) {
     seen.add(target.pluginId);
     const rows = plugins[target.pluginId];
     pluginNeed(Array.isArray(rows) && rows.length === target.registrations.length, "Managed plugin registration membership changed");
-    const [name, market] = target.pluginId.split("@"), cacheRoot = join36(dirname23(path), "cache", market, name);
+    const [name, market] = target.pluginId.split("@"), cacheRoot = join37(dirname24(path), "cache", market, name);
     const scopes = new Set, approvals = new Map, currentFiles = new Map;
     plugins[target.pluginId] = rows.map((row) => {
       pluginNeed(pluginObject(row), "Invalid managed plugin registration");
@@ -23078,7 +23320,7 @@ function hashManagedPluginRegistry(path, managed) {
       pluginText(row.sourceProducerPath);
       pluginText(row.lastUpdated, 64);
       pluginNeed(Number.isFinite(Date.parse(row.lastUpdated)), "Invalid managed plugin update timestamp");
-      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join36(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
+      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join37(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
         const digest2 = `sha256:${basename13(producer)}`;
@@ -23108,7 +23350,7 @@ function hashManagedPluginRegistry(path, managed) {
       return Object.fromEntries(Object.entries(row).filter(([key2]) => !["version", "installPath", "sourceProducerPath", "previousProducerPaths", "lastUpdated"].includes(key2)));
     });
     safe5(cacheRoot);
-    const before = lstatSync29(cacheRoot);
+    const before = lstatSync30(cacheRoot);
     pluginNeed(before.isDirectory(), "Invalid managed plugin cache root");
     const directory2 = opendirSync5(cacheRoot), names = [];
     try {
@@ -23121,17 +23363,17 @@ function hashManagedPluginRegistry(path, managed) {
       directory2.closeSync();
     }
     for (const version2 of names.sort()) {
-      const files = pluginFileWitnesses(snapshotPluginTree(join36(cacheRoot, version2), { nativeRuntime: `claude-${target.native.version}` }));
+      const files = pluginFileWitnesses(snapshotPluginTree(join37(cacheRoot, version2), { nativeRuntime: `claude-${target.native.version}` }));
       verifiedBytes += files.reduce((total, file) => total + file.size, 0);
       pluginNeed(verifiedBytes <= 256 * 1024 * 1024, "Managed plugin verification exceeds its aggregate byte budget");
       const serialized = JSON.stringify(files);
-      const expected = currentFiles.get(join36(cacheRoot, version2));
+      const expected = currentFiles.get(join37(cacheRoot, version2));
       pluginNeed(expected === undefined || serialized === expected, "Current native cache differs from its exact registered producer receipt");
       pluginNeed([...approvals.values()].some((receipt) => nativeVersionMatches(version2, receipt) && JSON.stringify(receipt.plan.files) === serialized), "A retained native plugin cache version differs from every approved projection");
     }
     for (const row of rows)
       pluginNeed(names.includes(row.version), "Managed native plugin installation is missing");
-    const after = lstatSync29(cacheRoot);
+    const after = lstatSync30(cacheRoot);
     safe5(cacheRoot);
     pluginNeed(before.dev === after.dev && before.ino === after.ino && before.mtimeMs === after.mtimeMs && before.ctimeMs === after.ctimeMs, "Managed cache version membership changed during verification");
   }
@@ -23144,24 +23386,24 @@ function captureManagedPluginRegistry(path, managedPlugins) {
 
 // src/lib/claude-marketplace-registry.ts
 import { createHash as createHash28 } from "crypto";
-import { closeSync as closeSync19, constants as constants20, fstatSync as fstatSync19, lstatSync as lstatSync30, openSync as openSync19, readSync as readSync14 } from "fs";
-import { basename as basename14, dirname as dirname24, isAbsolute as isAbsolute27, resolve as resolve25 } from "path";
+import { closeSync as closeSync19, constants as constants20, fstatSync as fstatSync19, lstatSync as lstatSync31, openSync as openSync19, readSync as readSync14 } from "fs";
+import { basename as basename14, dirname as dirname25, isAbsolute as isAbsolute27, resolve as resolve26 } from "path";
 var CLAUDE_MARKETPLACE_REGISTRY_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
 function need10(value, reason2) {
   if (!value)
     throw new Error(`Claude marketplace registry ${reason2}`);
 }
 function absolutePath4(value) {
-  need10(typeof value === "string" && value.length > 0 && value.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute27(value) && resolve25(value) === value, "requires a normalized absolute path");
+  need10(typeof value === "string" && value.length > 0 && value.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute27(value) && resolve26(value) === value, "requires a normalized absolute path");
 }
 var sameFile2 = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs;
 function parents2(path) {
   const result = [];
-  for (let at = dirname24(path);; at = dirname24(at)) {
-    const stat2 = lstatSync30(at, { bigint: true });
+  for (let at = dirname25(path);; at = dirname25(at)) {
+    const stat2 = lstatSync31(at, { bigint: true });
     need10(stat2.isDirectory() && !stat2.isSymbolicLink(), "path traverses a symlink or non-directory");
     result.push([at, stat2]);
-    if (at === dirname24(at))
+    if (at === dirname25(at))
       return result;
   }
 }
@@ -23169,7 +23411,7 @@ function readRegistry2(path, budget2) {
   absolutePath4(path);
   need10(basename14(path) === "known_marketplaces.json", "requires known_marketplaces.json");
   need10(Number.isSafeInteger(budget2.remaining) && budget2.remaining >= 0, "has an invalid byte budget");
-  const ancestors2 = parents2(path), initial = lstatSync30(path, { bigint: true });
+  const ancestors2 = parents2(path), initial = lstatSync31(path, { bigint: true });
   need10(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
   need10(initial.size <= BigInt(budget2.remaining), "exceeds its aggregate byte limit");
   const fd = openSync19(path, constants20.O_RDONLY | constants20.O_NOFOLLOW | constants20.O_NONBLOCK);
@@ -23184,10 +23426,10 @@ function readRegistry2(path, budget2) {
         break;
       length += count;
     }
-    const after = fstatSync19(fd, { bigint: true }), current = lstatSync30(path, { bigint: true });
+    const after = fstatSync19(fd, { bigint: true }), current = lstatSync31(path, { bigint: true });
     need10(current.isFile() && sameFile2(opened, after) && sameFile2(after, current) && BigInt(length) === opened.size, "changed during read");
     for (const [ancestor, before] of ancestors2) {
-      const now = lstatSync30(ancestor, { bigint: true });
+      const now = lstatSync31(ancestor, { bigint: true });
       need10(now.isDirectory() && before.dev === now.dev && before.ino === now.ino && before.mode === now.mode, "parent changed during read");
     }
     budget2.remaining -= length;
@@ -23380,7 +23622,7 @@ function discoveryExecutable(agent) {
   const found = command ? Bun.which(command) : null;
   if (!command || !found)
     return null;
-  const path = resolve26(found), target = realpathOrNull(path);
+  const path = resolve27(found), target = realpathOrNull(path);
   return target === null ? null : { command, path, target };
 }
 function recordedDiscoveryExecutable(agent, recorded) {
@@ -23404,10 +23646,10 @@ function parseConfig(text2, path, toml = false) {
 function safe6(path) {
   if (!isAbsolute28(path) || path.includes("\x00"))
     throw new Error("Expected an absolute native discovery path");
-  for (let cursor = path;; cursor = dirname25(cursor)) {
-    if (lstatSync31(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
+  for (let cursor = path;; cursor = dirname26(cursor)) {
+    if (lstatSync32(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
       throw new Error(`Refusing symlink native discovery input: ${cursor}`);
-    if (dirname25(cursor) === cursor)
+    if (dirname26(cursor) === cursor)
       break;
   }
 }
@@ -23415,19 +23657,19 @@ function read2(path, changes) {
   safe6(path);
   if (changes?.has(path))
     return changes.get(path);
-  const stat2 = lstatSync31(path, { throwIfNoEntry: false });
+  const stat2 = lstatSync32(path, { throwIfNoEntry: false });
   if (!stat2)
     return null;
   if (!stat2.isFile() || stat2.size > 16 * 1024 * 1024)
     throw new Error(`Unsupported or oversized native discovery input: ${path}`);
-  return readFileSync25(path, "utf8");
+  return readFileSync26(path, "utf8");
 }
 function assertReviewedClaudeCacheClosures(home, config, review, canonical9) {
   const enabledIds = Object.entries(config.enabledPlugins ?? {}).filter(([, enabled]) => enabled === true).map(([id]) => id);
   if (enabledIds.length === 0)
     return;
-  const registryPath = canonical9(join37(home, ".claude/plugins/installed_plugins.json"));
-  const cacheAliasRoot = join37(home, ".claude/plugins/cache");
+  const registryPath = canonical9(join38(home, ".claude/plugins/installed_plugins.json"));
+  const cacheAliasRoot = join38(home, ".claude/plugins/cache");
   const cacheRoot = canonical9(cacheAliasRoot);
   const registryText = read2(registryPath);
   if (registryText === null)
@@ -23435,7 +23677,7 @@ function assertReviewedClaudeCacheClosures(home, config, review, canonical9) {
   const registry = parseConfig(registryText, registryPath);
   if (registry.version !== 2 || !registry.plugins || typeof registry.plugins !== "object" || Array.isArray(registry.plugins))
     throw new Error("Reviewed Claude installed plugin registrations are invalid");
-  const cachePath = (path) => typeof path === "string" && isAbsolute28(path) && resolve26(path) === path && [cacheAliasRoot, cacheRoot].some((root2) => path === root2 || path.startsWith(root2 + sep14));
+  const cachePath = (path) => typeof path === "string" && isAbsolute28(path) && resolve27(path) === path && [cacheAliasRoot, cacheRoot].some((root2) => path === root2 || path.startsWith(root2 + sep15));
   const activeRoots = new Set;
   for (const id of enabledIds) {
     const rows = registry.plugins[id];
@@ -23447,11 +23689,11 @@ function assertReviewedClaudeCacheClosures(home, config, review, canonical9) {
       if (!row || typeof row !== "object" || Array.isArray(row) || typeof row.installPath !== "string") {
         throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
       }
-      if ([cacheAliasRoot, cacheRoot].some((root2) => row.installPath === root2 || row.installPath.startsWith(root2 + sep14))) {
+      if ([cacheAliasRoot, cacheRoot].some((root2) => row.installPath === root2 || row.installPath.startsWith(root2 + sep15))) {
         if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename15(row.installPath) !== row.version)) {
           throw new Error("Reviewed Claude discovery has a malformed active cache registration");
         }
-        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute28(row.projectPath) && resolve26(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
+        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute28(row.projectPath) && resolve27(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
           throw new Error("Reviewed Claude discovery has an unsupported active cache registration scope");
         activeRoots.add(canonical9(row.installPath));
       }
@@ -23469,11 +23711,11 @@ function assertReviewedClaudeCacheClosures(home, config, review, canonical9) {
   };
   for (const root2 of activeRoots) {
     safe6(root2);
-    const rootStat = lstatSync31(root2, { throwIfNoEntry: false });
+    const rootStat = lstatSync32(root2, { throwIfNoEntry: false });
     if (!rootStat?.isDirectory() || realpathSync13(root2) !== root2)
       throw new Error("Reviewed Claude active cache plugin root is missing or unsafe");
-    const manifestPath = join37(root2, ".claude-plugin/plugin.json");
-    const manifestStat = lstatSync31(manifestPath, { throwIfNoEntry: false });
+    const manifestPath = join38(root2, ".claude-plugin/plugin.json");
+    const manifestStat = lstatSync32(manifestPath, { throwIfNoEntry: false });
     let manifest;
     if (manifestStat) {
       if (!manifestStat.isFile())
@@ -23488,30 +23730,30 @@ function assertReviewedClaudeCacheClosures(home, config, review, canonical9) {
     } else if (!review.sources.some((source) => source.path === manifestPath && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined)) {
       throw new Error("Reviewed Claude active cache plugin manifest absence requires a path-bytes witness");
     }
-    const roots = new Set([join37(root2, "skills")]);
-    if (lstatSync31(join37(root2, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
+    const roots = new Set([join38(root2, "skills")]);
+    if (lstatSync32(join38(root2, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
       roots.add(root2);
     const declared = manifest?.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
     if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
       throw new Error("Reviewed Claude active cache plugin has unsupported skill paths");
     for (const value of declared) {
-      const path = resolve26(root2, value);
-      if (path !== root2 && !path.startsWith(root2 + sep14))
+      const path = resolve27(root2, value);
+      if (path !== root2 && !path.startsWith(root2 + sep15))
         throw new Error("Reviewed Claude active cache plugin skill path escapes its root");
-      roots.add(path.endsWith(`${sep14}SKILL.md`) ? dirname25(path) : path);
+      roots.add(path.endsWith(`${sep15}SKILL.md`) ? dirname26(path) : path);
     }
     for (const skillRoot of roots)
       if (!review.roots.includes(skillRoot))
         throw new Error("Reviewed Claude active cache plugin skill root is not covered");
-    const hooksPath = join37(root2, "hooks/hooks.json");
-    const hooksStat = lstatSync31(hooksPath, { throwIfNoEntry: false });
+    const hooksPath = join38(root2, "hooks/hooks.json");
+    const hooksStat = lstatSync32(hooksPath, { throwIfNoEntry: false });
     if (hooksStat) {
       if (!hooksStat.isFile())
         throw new Error("Reviewed Claude plugin hook manifest is unsupported");
       requireSource(hooksPath, "hook manifest");
     }
     if (typeof manifest?.hooks === "string")
-      requireSource(resolve26(root2, manifest.hooks), "manifest-declared hook source");
+      requireSource(resolve27(root2, manifest.hooks), "manifest-declared hook source");
   }
 }
 function projectNativeDiscoveryFields(text2, format, fields2, path) {
@@ -23564,10 +23806,9 @@ function projected(source, changes, budget2 = discoveryByteBudget()) {
   if (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5")) {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Codex settings witnesses require exact typed metadata");
-    const current = (source.hashMode === "codex-settings-v5" ? captureCodexSettingsV5 : source.hashMode === "codex-settings-v4" ? captureCodexSettingsV4 : source.hashMode === "codex-settings-v3" ? captureCodexSettingsV3 : source.hashMode === "codex-settings-v2" ? captureCodexSettingsV2 : captureCodexSettings)(source.path, budget2).sha256;
-    if (current !== source.sha256)
+    if (codexSettingsWitnessMatch(source.path, source.hashMode, source.sha256, budget2) === null)
       throw new NativeDiscoveryWitnessChange("input", source.path, `Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
-    return changes?.has(source.path) ? (source.hashMode === "codex-settings-v5" ? hashCodexSettingsReplacementV5 : source.hashMode === "codex-settings-v4" ? hashCodexSettingsReplacementV4 : source.hashMode === "codex-settings-v3" ? hashCodexSettingsReplacementV3 : source.hashMode === "codex-settings-v2" ? hashCodexSettingsReplacementV2 : hashCodexSettingsReplacement)(changes.get(source.path), budget2) : current;
+    return changes?.has(source.path) ? (source.hashMode === "codex-settings-v5" ? hashCodexSettingsReplacementV5 : source.hashMode === "codex-settings-v4" ? hashCodexSettingsReplacementV4 : source.hashMode === "codex-settings-v3" ? hashCodexSettingsReplacementV3 : source.hashMode === "codex-settings-v2" ? hashCodexSettingsReplacementV2 : hashCodexSettingsReplacement)(changes.get(source.path), budget2) : source.sha256;
   }
   if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
@@ -23643,18 +23884,18 @@ function absentCodexSkillRoots(binding, tolerance) {
     return [];
   if (binding.agent !== "codex" || !Array.isArray(controls) || controls.length > 4096)
     throw new Error("Invalid disabled Codex discovery proof");
-  if (binding.method !== "reviewed" || controls.every((control) => lstatSync31(control.pluginParent, { throwIfNoEntry: false })))
+  if (binding.method !== "reviewed" || controls.every((control) => lstatSync32(control.pluginParent, { throwIfNoEntry: false })))
     return [];
-  const cache = dirname25(dirname25(controls[0].pluginParent)), config = join37(dirname25(dirname25(cache)), "config.toml");
+  const cache = dirname26(dirname26(controls[0].pluginParent)), config = join38(dirname26(dirname26(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || !codexConfigWitnessCurrent(source, tolerance))
     throw new Error("Missing current disabled Codex configuration witness");
   const rules = Bun.TOML.parse(read2(config)).skills?.config ?? [];
   return [...new Set(controls.map((control) => control.pluginParent))].filter((parent) => !codexDirectHookSelects(cache, parent) && absentDisabledCodexPluginParent(cache, parent, controls, rules));
 }
-function codexDirectHookSelects(cache, root2, configPath = join37(dirname25(dirname25(cache)), "config.toml")) {
-  const codex = dirname25(configPath), config = Bun.TOML.parse(read2(configPath) ?? "");
-  const hooks = read2(join37(codex, "hooks.json"));
+function codexDirectHookSelects(cache, root2, configPath = join38(dirname26(dirname26(cache)), "config.toml")) {
+  const codex = dirname26(configPath), config = Bun.TOML.parse(read2(configPath) ?? "");
+  const hooks = read2(join38(codex, "hooks.json"));
   if (hooks !== null)
     hashNativeJsonControls(hooks);
   return JSON.stringify(config.hooks ?? {}).includes(root2) || hooks !== null && JSON.stringify(JSON.parse(hooks)).includes(root2);
@@ -23666,7 +23907,7 @@ function retiredCodexRoots(binding, tolerance) {
   const controls = binding.codexDisabledPluginSkills;
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !Array.isArray(controls) || !controls.length || !Array.isArray(proof.roots) || proof.roots.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.roots).size !== proof.roots.length || !Array.isArray(proof.directories) || proof.parents !== undefined && (!Array.isArray(proof.parents) || proof.parents.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.parents).size !== proof.parents.length) || !proof.roots.length && !proof.parents?.length)
     throw new Error("Invalid retired Codex materialization proof");
-  const cache = dirname25(dirname25(controls[0].pluginParent)), config = join37(dirname25(dirname25(cache)), "config.toml");
+  const cache = dirname26(dirname26(controls[0].pluginParent)), config = join38(dirname26(dirname26(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || !codexConfigWitnessCurrent(source, tolerance))
     throw new Error("Missing current retired Codex configuration witness");
@@ -23674,7 +23915,7 @@ function retiredCodexRoots(binding, tolerance) {
   if ((proof.parents ?? []).some((parent) => codexDirectHookSelects(cache, parent) || !reviewedDisabledCodexPluginParent(cache, parent, controls, rules)) || !reviewedCodexPluginCapabilitiesUnchanged(cache, controls, (path) => read2(path), rules))
     throw new Error("Retired Codex parent capabilities changed");
   for (const root2 of proof.roots) {
-    const manifest = binding.sources.find((source2) => source2.path === join37(root2, ".codex-plugin/plugin.json") && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && [undefined, "bytes"].includes(source2.hashMode));
+    const manifest = binding.sources.find((source2) => source2.path === join38(root2, ".codex-plugin/plugin.json") && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && [undefined, "bytes"].includes(source2.hashMode));
     if (!manifest || codexDirectHookSelects(cache, root2) || !reviewedRetiredCodexRoot(cache, root2, controls, rules, (path) => read2(path), true))
       throw new Error("Retired Codex materialization changed");
   }
@@ -23683,23 +23924,35 @@ function retiredCodexRoots(binding, tolerance) {
 function captureRetiredCodexDiscovery(binding, controls, rules) {
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !controls.length)
     return binding;
-  const cache = dirname25(dirname25(controls[0].pluginParent));
-  const candidates = binding.sources.filter((source) => source.path.endsWith(sep14 + ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined && [undefined, "bytes"].includes(source.hashMode)).map((source) => dirname25(dirname25(source.path)));
+  const cache = dirname26(dirname26(controls[0].pluginParent));
+  const candidates = binding.sources.filter((source) => source.path.endsWith(sep15 + ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined && [undefined, "bytes"].includes(source.hashMode)).map((source) => dirname26(dirname26(source.path)));
   const roots = [...new Set(candidates)].filter((root2) => !codexDirectHookSelects(cache, root2) && reviewedRetiredCodexRoot(cache, root2, controls, rules, (path) => read2(path), binding.codexRetiredMaterializations?.roots.includes(root2) ?? false)).sort();
   const parents3 = reviewedCodexPluginCapabilitiesUnchanged(cache, controls, (path) => read2(path), rules) ? [...new Set(controls.map((control) => control.pluginParent))].filter((parent) => !codexDirectHookSelects(cache, parent) && reviewedDisabledCodexPluginParent(cache, parent, controls, rules)).sort() : [];
   const { codexRetiredMaterializations: previous, ...current } = binding;
   if (!roots.length && !parents3.length)
     return current;
   const installation = codexInstallationRoots(binding);
-  const directories = (binding.directories ?? []).filter((directory2) => !installation.some((root2) => directory2.path === root2 || directory2.path.startsWith(root2 + sep14) || root2.startsWith(directory2.path + sep14)));
+  const directories = (binding.directories ?? []).filter((directory2) => !installation.some((root2) => directory2.path === root2 || directory2.path.startsWith(root2 + sep15) || root2.startsWith(directory2.path + sep15)));
   if (previous && isDeepStrictEqual9(previous.roots, roots) && isDeepStrictEqual9(previous.parents, parents3) && isDeepStrictEqual9(previous.directories.map((item) => item.path), directories.map((item) => item.path)))
     return { ...current, codexRetiredMaterializations: previous };
   return { ...current, codexRetiredMaterializations: { roots, parents: parents3, directories: captureDiscoveryDirectoryProjection(directories.map((item) => item.path), roots) } };
 }
-function retainableAbsentSource(source) {
+function retainableAbsentWitness(source) {
   if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined)
-    return false;
-  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join37(sep14, ".claude-plugin", "plugin.json")) || source.hashMode === CLAUDE_ORPHAN_MARKER_MODE && source.sha256 !== null && isClaudePluginCacheOrphanMarker(source.path);
+    return null;
+  if ([undefined, "bytes"].includes(source.hashMode))
+    return "bytes";
+  if (source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join38(sep15, ".claude-plugin", "plugin.json")))
+    return "claude-plugin-manifest-v1";
+  if (source.hashMode === CLAUDE_ORPHAN_MARKER_MODE && source.sha256 !== null && isClaudePluginCacheOrphanMarker(source.path))
+    return CLAUDE_ORPHAN_MARKER_MODE;
+  return null;
+}
+function retainableAbsentSource(source) {
+  return retainableAbsentWitness(source) !== null;
+}
+function retainedAbsentRoot(absentRoots, source) {
+  return retainableAbsentSource(source) ? absentRoots.find((root2) => source.path.startsWith(root2 + sep15)) : undefined;
 }
 function absentRetiredClaudeRoots(binding) {
   if (binding.agent !== "claude" || binding.method !== "reviewed")
@@ -23708,17 +23961,17 @@ function absentRetiredClaudeRoots(binding) {
   for (const source of binding.sources) {
     if (!retainableAbsentSource(source) || source.sha256 === null)
       continue;
-    const marker = sep14 + ".claude" + sep14 + "plugins" + sep14 + "cache" + sep14, at = source.path.indexOf(marker);
+    const marker = sep15 + ".claude" + sep15 + "plugins" + sep15 + "cache" + sep15, at = source.path.indexOf(marker);
     if (at < 0 || source.path.indexOf(marker, at + 1) >= 0)
       continue;
-    const cache = source.path.slice(0, at + marker.length - 1), parts = source.path.slice(at + marker.length).split(sep14);
+    const cache = source.path.slice(0, at + marker.length - 1), parts = source.path.slice(at + marker.length).split(sep15);
     if (parts.length < 4 || parts.slice(0, 3).some((part) => !part || part === "." || part === ".."))
       continue;
-    const root2 = join37(cache, ...parts.slice(0, 3));
+    const root2 = join38(cache, ...parts.slice(0, 3));
     safe6(root2);
-    if (lstatSync31(root2, { throwIfNoEntry: false }))
+    if (lstatSync32(root2, { throwIfNoEntry: false }))
       continue;
-    const claude = dirname25(dirname25(cache)), settings = join37(claude, "settings.json"), registry = join37(claude, "plugins/installed_plugins.json");
+    const claude = dirname26(dirname26(cache)), settings = join38(claude, "settings.json"), registry = join38(claude, "plugins/installed_plugins.json");
     const full = (path) => binding.sources.find((item) => item.path === path && item.sha256 !== null && item.format === undefined && item.fields === undefined);
     const configSource = full(settings), registrySource = full(registry);
     if (!configSource || !registrySource || projected(configSource) !== configSource.sha256 || projected(registrySource) !== registrySource.sha256)
@@ -23735,15 +23988,15 @@ function absentRetiredClaudeRoots(binding) {
       if (!row || typeof row !== "object" || Array.isArray(row))
         return null;
       const value = row;
-      if (typeof value.installPath !== "string" || /[\x00-\x1f\x7f]/.test(value.installPath) || !isAbsolute28(value.installPath) || resolve26(value.installPath) !== value.installPath || value.installPath.length > AGENT_POLICY_LIMITS.pathCharacters)
+      if (typeof value.installPath !== "string" || /[\x00-\x1f\x7f]/.test(value.installPath) || !isAbsolute28(value.installPath) || resolve27(value.installPath) !== value.installPath || value.installPath.length > AGENT_POLICY_LIMITS.pathCharacters)
         return null;
       if (value.scope === "user")
         return value.projectPath === undefined || value.projectPath === null ? "user\x00" : null;
       if (value.scope === "project")
-        return typeof value.projectPath === "string" && !/[\x00-\x1f\x7f]/.test(value.projectPath) && value.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute28(value.projectPath) && resolve26(value.projectPath) === value.projectPath ? `project\x00${value.projectPath}` : null;
+        return typeof value.projectPath === "string" && !/[\x00-\x1f\x7f]/.test(value.projectPath) && value.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute28(value.projectPath) && resolve27(value.projectPath) === value.projectPath ? `project\x00${value.projectPath}` : null;
       return null;
     };
-    if (Object.values(installed.plugins).some((value) => !Array.isArray(value) || value.some((row) => !row || typeof row.installPath !== "string" || row.installPath === root2 || row.installPath.startsWith(root2 + sep14) || root2.startsWith(row.installPath + sep14))))
+    if (Object.values(installed.plugins).some((value) => !Array.isArray(value) || value.some((row) => !row || typeof row.installPath !== "string" || row.installPath === root2 || row.installPath.startsWith(root2 + sep15) || root2.startsWith(row.installPath + sep15))))
       continue;
     const rows = installed.plugins[id];
     if (!Array.isArray(rows) || rows.length < 1)
@@ -23761,9 +24014,9 @@ function absentRetiredClaudeRoots(binding) {
     if (!targetValid || !targetScopes.has("user\x00"))
       continue;
     const active = rows[0]?.installPath;
-    if (typeof active !== "string" || rows[0]?.version !== basename15(active) || dirname25(active) !== dirname25(root2) || active === root2 || !lstatSync31(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync13(active) !== active)
+    if (typeof active !== "string" || rows[0]?.version !== basename15(active) || dirname26(active) !== dirname26(root2) || active === root2 || !lstatSync32(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync13(active) !== active)
       continue;
-    const activeManifest = full(join37(active, ".claude-plugin/plugin.json"));
+    const activeManifest = full(join38(active, ".claude-plugin/plugin.json"));
     if (!activeManifest || projected(activeManifest) !== activeManifest.sha256)
       continue;
     result.add(root2);
@@ -23771,24 +24024,24 @@ function absentRetiredClaudeRoots(binding) {
   return [...result];
 }
 function codexSemanticCacheSourceRole(source, cacheRoot, parents3, hookParents = []) {
-  if (!isAbsolute28(source.path) || resolve26(source.path) !== source.path || /[\x00-\x1f\x7f]/.test(source.path) || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.reviewArtifact !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes")
+  if (!isAbsolute28(source.path) || resolve27(source.path) !== source.path || /[\x00-\x1f\x7f]/.test(source.path) || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.reviewArtifact !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes")
     return false;
-  const parts = relative10(cacheRoot, source.path).split(sep14);
-  if (parts.length < 3 || !parents3.includes(join37(cacheRoot, parts[0], parts[1])))
+  const parts = relative10(cacheRoot, source.path).split(sep15);
+  if (parts.length < 3 || !parents3.includes(join38(cacheRoot, parts[0], parts[1])))
     return false;
   const tail = parts.slice(3).join("/");
-  const parent = join37(cacheRoot, parts[0], parts[1]);
+  const parent = join38(cacheRoot, parts[0], parts[1]);
   return parts.length === 5 && tail === ".codex-plugin/plugin.json" && source.sha256 !== null || parts.length === 4 && [".app.json", ".mcp.json"].includes(tail) && source.sha256 !== null || parts.length === 5 && tail === "hooks/hooks.json" && hookParents.includes(parent) && source.sha256 !== null || source.sha256 === null && (parts.length === 4 && tail === "SKILL.md" || parts.length === 5 && tail === "hooks/hooks.json");
 }
 function codexSemanticCacheDirectoryRole(path, cacheRoot) {
-  return isAbsolute28(path) && resolve26(path) === path && !/[\x00-\x1f\x7f]/.test(path) && (path === cacheRoot || path.startsWith(cacheRoot + sep14));
+  return isAbsolute28(path) && resolve27(path) === path && !/[\x00-\x1f\x7f]/.test(path) && (path === cacheRoot || path.startsWith(cacheRoot + sep15));
 }
 function assertCodexSemanticCacheHookSafety(cacheRoot, parents3, configPath, hookRootAlias = null) {
   const selectionRoots = [cacheRoot, ...parents3];
   if (hookRootAlias !== null) {
-    if (!hookRootAlias || Object.keys(hookRootAlias).length !== 2 || [hookRootAlias.alias, hookRootAlias.target].some((path) => typeof path !== "string" || !isAbsolute28(path) || resolve26(path) !== path || /[\x00-\x1f\x7f]/.test(path)) || hookRootAlias.target !== dirname25(configPath) || cacheRoot !== join37(hookRootAlias.target, "plugins/cache") || !lstatSync31(hookRootAlias.alias, { throwIfNoEntry: false })?.isSymbolicLink() || realpathSync13(hookRootAlias.alias) !== hookRootAlias.target || realpathSync13(hookRootAlias.target) !== hookRootAlias.target)
+    if (!hookRootAlias || Object.keys(hookRootAlias).length !== 2 || [hookRootAlias.alias, hookRootAlias.target].some((path) => typeof path !== "string" || !isAbsolute28(path) || resolve27(path) !== path || /[\x00-\x1f\x7f]/.test(path)) || hookRootAlias.target !== dirname26(configPath) || cacheRoot !== join38(hookRootAlias.target, "plugins/cache") || !lstatSync32(hookRootAlias.alias, { throwIfNoEntry: false })?.isSymbolicLink() || realpathSync13(hookRootAlias.alias) !== hookRootAlias.target || realpathSync13(hookRootAlias.target) !== hookRootAlias.target)
       throw new Error("Reviewed semantic cache hook alias changed");
-    selectionRoots.push(...selectionRoots.map((root2) => join37(hookRootAlias.alias, relative10(hookRootAlias.target, root2))));
+    selectionRoots.push(...selectionRoots.map((root2) => join38(hookRootAlias.alias, relative10(hookRootAlias.target, root2))));
   }
   selectionRoots.push("plugins/cache");
   if (selectionRoots.some((parent) => codexDirectHookSelects(cacheRoot, parent, configPath)))
@@ -23808,7 +24061,7 @@ function verifyCodexSemanticCacheDiscovery(binding, reviewedRootAliases) {
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !controls?.length || proof.schema !== "hasna.codex-semantic-cache-discovery.v1" || !/^[a-f0-9]{64}$/.test(proof.previousPolicySha256) || !Array.isArray(proof.appOnlyParents) || !Array.isArray(proof.supersededSources) || !Array.isArray(proof.supersededDirectories))
     throw new Error("Invalid Codex semantic cache discovery proof");
   const cacheRoot = proof.witness.cacheRoot;
-  if (controls.some((control) => dirname25(dirname25(control.pluginParent)) !== cacheRoot))
+  if (controls.some((control) => dirname26(dirname26(control.pluginParent)) !== cacheRoot))
     throw new Error("Codex semantic cache names another enrolled cache");
   const reviewedHookParents = proof.reviewedHookParents ?? [];
   if (!Array.isArray(reviewedHookParents) || reviewedHookParents.length > 4096 || reviewedHookParents.some((parent) => !parent || !(parent.installation === "remote-receipt" && Object.keys(parent).sort().join(",") === "installation,namespace,pluginId,pluginParent,remotePluginId,role" && typeof parent.remotePluginId === "string" || parent.installation === "local-marketplace" && Object.keys(parent).sort().join(",") === "installation,marketplaceSha256,marketplaceSourcePath,namespace,pluginId,pluginParent,role" && typeof parent.marketplaceSourcePath === "string" && /^[a-f0-9]{64}$/.test(parent.marketplaceSha256 ?? "")) || parent.role !== "reviewed-hook" || typeof parent.pluginId !== "string" || typeof parent.namespace !== "string" || typeof parent.pluginParent !== "string") || new Set(reviewedHookParents.map((parent) => parent.pluginParent)).size !== reviewedHookParents.length || !isDeepStrictEqual9((proof.witness.hookParents ?? []).map(({ manifestSha256: _manifest, hooksSha256: _hooks, receiptSha256: _receipt, ...parent }) => parent), reviewedHookParents)) {
@@ -23824,7 +24077,7 @@ function verifyCodexSemanticCacheDiscovery(binding, reviewedRootAliases) {
   if (!directories.length || !isDeepStrictEqual9(sources, proof.supersededSources) || !isDeepStrictEqual9(directories, proof.supersededDirectories))
     throw new Error("Codex semantic cache provenance changed");
   const configPath = proof.configPath;
-  if (!isAbsolute28(configPath) || resolve26(configPath) !== configPath || basename15(configPath) !== "config.toml" || /[\x00-\x1f\x7f]/.test(configPath))
+  if (!isAbsolute28(configPath) || resolve27(configPath) !== configPath || basename15(configPath) !== "config.toml" || /[\x00-\x1f\x7f]/.test(configPath))
     throw new Error("Invalid semantic cache configuration source");
   const configSource = binding.sources.find((source) => source.path === configPath && source.sha256 !== null && source.format === undefined && source.fields === undefined);
   if (!configSource || projected(configSource) !== configSource.sha256)
@@ -23846,10 +24099,10 @@ function verifyAgentDiscovery(binding, codexRecovery, reviewedRootAliases, witne
   const semanticDirectory = (path) => Boolean(semanticCache && codexSemanticCacheDirectoryRole(path, semanticCache.witness.cacheRoot));
   const installationRoots = codexInstallationRoots(binding);
   const retiredRoots = retiredCodexRoots(binding, witnessTolerance);
-  const installationInput = (path) => installationRoots.some((root2) => path === root2 || path.startsWith(root2 + sep14));
+  const installationInput = (path) => installationRoots.some((root2) => path === root2 || path.startsWith(root2 + sep15));
   if (binding.directories !== undefined) {
     const projected2 = binding.codexInstallationInputs?.directories ?? [];
-    const ancestors2 = binding.directories.filter((directory2) => installationRoots.some((root2) => root2.startsWith(directory2.path + sep14)));
+    const ancestors2 = binding.directories.filter((directory2) => installationRoots.some((root2) => root2.startsWith(directory2.path + sep15)));
     if (projected2.length !== ancestors2.length || projected2.some((directory2) => !ancestors2.some((original) => original.path === directory2.path)))
       throw new Error("Missing installation input directory projection");
     const ordinary = binding.directories.filter((directory2) => !installationInput(directory2.path) && !ancestors2.includes(directory2) && !semanticDirectory(directory2.path));
@@ -23857,7 +24110,7 @@ function verifyAgentDiscovery(binding, codexRecovery, reviewedRootAliases, witne
       const projection = binding.codexRetiredMaterializations.directories.filter((directory2) => !semanticDirectory(directory2.path));
       if (projection.length !== ordinary.length || projection.some((item, index) => item.path !== ordinary[index]?.path))
         throw new Error("Missing retired Codex directory projection");
-      const omitted = [...retiredRoots, ...(binding.codexRetiredMaterializations.parents ?? []).filter((parent) => !lstatSync31(parent, { throwIfNoEntry: false }))];
+      const omitted = [...retiredRoots, ...(binding.codexRetiredMaterializations.parents ?? []).filter((parent) => !lstatSync32(parent, { throwIfNoEntry: false }))];
       if (projection.every((item) => Array.isArray(item.entries)))
         verifyDiscoveryDirectoryProjection(projection, omitted, witnessTolerance);
       else {
@@ -23874,7 +24127,7 @@ function verifyAgentDiscovery(binding, codexRecovery, reviewedRootAliases, witne
       verifyDiscoveryDirectories(ordinary, [], witnessTolerance);
     verifyDiscoveryDirectories(projected2, installationRoots, witnessTolerance);
   }
-  const absentRoots = [...absentCodexSkillRoots(binding, witnessTolerance), ...absentRetiredClaudeRoots(binding), ...retiredRoots.filter((root2) => !lstatSync31(root2, { throwIfNoEntry: false }))];
+  const absentRoots = [...absentCodexSkillRoots(binding, witnessTolerance), ...absentRetiredClaudeRoots(binding), ...retiredRoots.filter((root2) => !lstatSync32(root2, { throwIfNoEntry: false }))];
   const budget2 = discoveryByteBudget();
   for (const source of binding.sources) {
     assertMarketplaceBinding(binding, source);
@@ -23892,7 +24145,7 @@ function verifyAgentDiscovery(binding, codexRecovery, reviewedRootAliases, witne
       safe6(source.path);
       continue;
     }
-    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep14)) && retainableAbsentSource(source)) {
+    if (retainedAbsentRoot(absentRoots, source) !== undefined) {
       safe6(source.path);
       continue;
     }
@@ -23912,23 +24165,31 @@ function verifyAgentDiscovery(binding, codexRecovery, reviewedRootAliases, witne
     safe6(root2);
   for (const root2 of absentRoots) {
     safe6(root2);
-    if (lstatSync31(root2, { throwIfNoEntry: false }))
+    if (lstatSync32(root2, { throwIfNoEntry: false }))
       throw new Error("Retired native materialization changed during discovery verification");
   }
 }
+var CLAUDE_CONTROL_WITNESS_MODES = new Set(["claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-settings-v4", "claude-marketplace-registry", "claude-marketplace-registry-v2", "claude-marketplace-entry-v1", "claude-plugin-registry"]);
+var CLAUDE_CONTROL_FILES = new Set(["settings.json", "settings.local.json", "installed_plugins.json", "known_marketplaces.json"]);
+function claudeControlSource(source) {
+  return CLAUDE_CONTROL_WITNESS_MODES.has(source.hashMode ?? "") || CLAUDE_CONTROL_FILES.has(basename15(source.path)) && !source.path.includes(`${sep15}.claude${sep15}plugins${sep15}cache${sep15}`);
+}
+function retainedAbsentClaudeRoot(absentRoots, source) {
+  return claudeControlSource(source) ? undefined : retainedAbsentRoot(absentRoots, source);
+}
 function codexInstallationRoots(binding) {
   const proof = binding.codexInstallationInputs;
   if (proof === undefined)
     return [];
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !supportsCodexNativeCapability(proof.version, "installed-plugin-review") || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
     throw new Error("Invalid native installation input proof");
-  const cache = dirname25(dirname25(proof.plugins[0].pluginParent));
-  const config = join37(dirname25(dirname25(cache)), "config.toml"), home = dirname25(dirname25(dirname25(cache)));
+  const cache = dirname26(dirname26(proof.plugins[0].pluginParent));
+  const config = join38(dirname26(dirname26(cache)), "config.toml"), home = dirname26(dirname26(dirname26(cache)));
   const configSource = binding.sources.find((source) => source.path === config && source.sha256 !== null && (!source.format || source.format === "toml" && source.fields?.includes("plugins")));
-  const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join37(home, path));
-  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep14) || input.sourceRoot.startsWith(root2 + sep14)) || binding.sources.some((source) => basename15(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep14)))))
+  const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join38(home, path));
+  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep15) || input.sourceRoot.startsWith(root2 + sep15)) || binding.sources.some((source) => basename15(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep15)))))
     throw new Error("Native installation input overlaps configuration or loading roots");
-  if (proof.plugins.some((input) => dirname25(dirname25(input.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join37(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
+  if (proof.plugins.some((input) => dirname26(dirname26(input.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join38(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
     throw new Error("Missing native installation input source witness");
   return reviewedCodexPluginSourceRoots(cache, proof.plugins, (path) => {
     const text2 = read2(path);
@@ -23944,7 +24205,7 @@ function assertMarketplaceBinding(binding, source) {
     throw new Error("Provider executable witnesses require explicit reviewed Codex V6");
   if (source.hashMode === "codex-settings-v6" && (new Set(binding.sources.map((row) => row.path)).size !== binding.sources.length || !Array.isArray(source.hookSources) || source.hookSources.some((hook) => !binding.sources.some((row) => row.path === hook.path && row.sha256 === hook.sha256 && [undefined, "bytes"].includes(row.hashMode) && row.format === undefined && row.fields === undefined))))
     throw new Error("Missing independently reviewed Codex hook source population");
-  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename15(source.path) !== "plugin.json" || !source.path.endsWith(join37(sep14, ".claude-plugin", "plugin.json"))))
+  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename15(source.path) !== "plugin.json" || !source.path.endsWith(join38(sep15, ".claude-plugin", "plugin.json"))))
     throw new Error("Claude plugin manifest witnesses require Claude plugin discovery");
   if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename15(source.path) !== "sumi.json"))
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
@@ -23957,10 +24218,11 @@ function assertMarketplaceBinding(binding, source) {
   if (source.hashMode === "claude-marketplace-entry-v1" && (binding.agent !== "claude" || binding.method !== "reviewed" || !claudeMarketplaceEntrySourceValid(source)))
     throw new Error("Claude marketplace entry witnesses require explicit reviewed Claude discovery of one named entry");
 }
+var ADOPTABLE_SETTINGS_MATCHES = Object.freeze(["exact", "screen-reader-receipt"]);
 function rebindAgentDiscovery(binding, changes) {
   const semanticCache = verifyCodexSemanticCacheDiscovery(binding);
   const budget2 = discoveryByteBudget();
-  const installationRoots = codexInstallationRoots(binding), absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredCodexRoots(binding).filter((root2) => !lstatSync31(root2, { throwIfNoEntry: false }))];
+  const installationRoots = codexInstallationRoots(binding), absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredCodexRoots(binding).filter((root2) => !lstatSync32(root2, { throwIfNoEntry: false }))];
   const rebound = { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
     if (semanticCache?.supersededSources.some((previous) => isDeepStrictEqual9(previous, source))) {
@@ -23968,26 +24230,28 @@ function rebindAgentDiscovery(binding, changes) {
         throw new Error("Codex semantic cache sources cannot be written by hook rendering");
       return source;
     }
-    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep14)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep14)) && retainableAbsentSource(source)))
+    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep15)) || retainedAbsentRoot(absentRoots, source) !== undefined))
       return source;
     const sha2563 = projected(source, changes, budget2);
     if (!changes.has(source.path) && !(source.hashMode === "codex-settings-v6" && source.hookSources.some((hook) => changes.has(hook.path))) && sha2563 !== source.sha256)
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
+    if (changes.has(source.path) && (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5") && !ADOPTABLE_SETTINGS_MATCHES.includes(codexSettingsWitnessMatch(source.path, source.hashMode, source.sha256, budget2)))
+      throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
     return source.hashMode === "codex-settings-v6" ? { ...source, ...captureCodexSettingsV6(source.path, source.hookSources, budget2, changes) } : { ...source, sha256: sha2563 };
   }) };
   for (const root2 of absentRoots) {
     safe6(root2);
-    if (lstatSync31(root2, { throwIfNoEntry: false }))
+    if (lstatSync32(root2, { throwIfNoEntry: false }))
       throw new Error("Retired native materialization changed during discovery rebinding");
   }
   return rebound;
 }
 function hashReviewedExecutable(path, budget2) {
-  const before = lstatSync31(path, { bigint: true });
+  const before = lstatSync32(path, { bigint: true });
   if (before.size < 0n || before.size > BigInt(budget2.remaining))
     throw new Error("Discovery aggregate executable byte limit exceeded");
   const digest3 = pluginExecutableDigest(path).slice(7);
-  const after = lstatSync31(path, { bigint: true });
+  const after = lstatSync32(path, { bigint: true });
   for (const key2 of ["dev", "ino", "size", "mode", "uid", "gid", "nlink", "mtimeNs", "ctimeNs"]) {
     if (before[key2] !== after[key2])
       throw new Error("Discovery executable changed during budgeted capture");
@@ -24013,12 +24277,13 @@ function captureDiscoveryPathSources(paths) {
   const budget2 = discoveryByteBudget();
   return paths.map((path) => isClaudePluginCacheOrphanMarker(path) ? { path, hashMode: CLAUDE_ORPHAN_MARKER_MODE, sha256: hashClaudePluginCacheOrphanMarker(path, budget2) } : { path, hashMode: "path-bytes", sha256: hashDiscoveryPathFile(path, budget2) });
 }
-function assertProjectDiscovery(agent, directories, home, canonical9 = resolve26, reviewed) {
+var CLAUDE_PROJECT_DISCOVERY_KEYS = Object.freeze(["enabledPlugins", "extraKnownMarketplaces", "additionalMarketplaces", "skillOverrides"]);
+function assertProjectDiscovery(agent, directories, home, canonical9 = resolve27, reviewed) {
   const homeConfigPath = canonical9(agentDiscoveryConfigPath(home, agent));
   const v6 = agent === "codex" && reviewed?.agent === "codex" && reviewed.method === "reviewed" ? reviewed.sources.find((source) => source.hashMode === "codex-settings-v6" && source.path === homeConfigPath) : undefined;
   const referenced = v6 ? new Set(captureCodexHookMcpDependencies(v6.path, v6.hookSources).servers) : undefined;
   for (const directory2 of directories) {
-    const isHome = resolve26(directory2) === resolve26(home);
+    const isHome = resolve27(directory2) === resolve27(home);
     if (agent === "hermes") {
       assertHermesEnvironment(home);
       continue;
@@ -24027,7 +24292,7 @@ function assertProjectDiscovery(agent, directories, home, canonical9 = resolve26
       continue;
     const paths = agent === "claude" ? [...isHome ? [] : [".claude/settings.json"], ".claude/settings.local.json"] : agent === "codex" ? [".codex/config.toml"] : agent === "gemini" ? [".gemini/settings.json"] : agent === "opencode" ? ["opencode.json", "opencode.jsonc", ".opencode/opencode.json", ".opencode/opencode.jsonc"] : agent === "sumi" ? ["sumi.json", "sumi.jsonc", ".sumi/sumi.json", ".sumi/sumi.jsonc"] : [".cursor/hooks.json"];
     for (const suffix of paths) {
-      const path = canonical9(join37(directory2, suffix)), raw = read2(path);
+      const path = canonical9(join38(directory2, suffix)), raw = read2(path);
       if (raw === null)
         continue;
       const isRootAliasedHomeConfig = agent === "claude" && suffix === ".claude/settings.json" || agent === "codex" && suffix === ".codex/config.toml";
@@ -24042,7 +24307,7 @@ function assertProjectDiscovery(agent, directories, home, canonical9 = resolve26
         if (declaredHooks || providerOverride)
           throw new Error(`NATIVE_SKILL_DRIFT: higher-precedence project hook dependency requires review: ${path}`);
       }
-      const keys2 = agent === "claude" ? ["enabledPlugins", "extraKnownMarketplaces", "skillOverrides"] : agent === "codex" ? ["plugins", "marketplaces", "skills"] : agent === "gemini" ? ["skills", "extensions"] : agent === "opencode" ? ["plugin", "skills"] : agent === "sumi" ? ["plugin", "plugins", "skills", "permissions"] : ["hooks"];
+      const keys2 = agent === "claude" ? CLAUDE_PROJECT_DISCOVERY_KEYS : agent === "codex" ? ["plugins", "marketplaces", "skills"] : agent === "gemini" ? ["skills", "extensions"] : agent === "opencode" ? ["plugin", "skills"] : agent === "sumi" ? ["plugin", "plugins", "skills", "permissions"] : ["hooks"];
       let admittedPlugins = false;
       if (agent === "claude" && reviewed?.agent === agent && reviewed.method === "reviewed" && config.enabledPlugins && typeof config.enabledPlugins === "object" && !Array.isArray(config.enabledPlugins)) {
         const exact = reviewed.sources.find((source) => source.path === path && source.format === undefined && source.fields === undefined && (source.hashMode === undefined || source.hashMode === "bytes"));
@@ -24056,8 +24321,8 @@ function assertProjectDiscovery(agent, directories, home, canonical9 = resolve26
         throw new Error(`NATIVE_SKILL_DRIFT: higher-precedence project skill or hook configuration requires review: ${path}`);
     }
     if (referenced) {
-      const path = canonical9(join37(directory2, ".codex/hooks.json"));
-      if (path !== canonical9(join37(dirname25(homeConfigPath), "hooks.json"))) {
+      const path = canonical9(join38(directory2, ".codex/hooks.json"));
+      if (path !== canonical9(join38(dirname26(homeConfigPath), "hooks.json"))) {
         const raw = read2(path);
         if (raw !== null) {
           const hooks = parseConfig(raw, path, false);
@@ -24069,15 +24334,15 @@ function assertProjectDiscovery(agent, directories, home, canonical9 = resolve26
     }
     if (agent === "sumi")
       for (const name of ["plugin", "plugins"]) {
-        const path = canonical9(join37(directory2, ".sumi", name));
+        const path = canonical9(join38(directory2, ".sumi", name));
         safe6(path);
-        if (lstatSync31(path, { throwIfNoEntry: false })?.isDirectory() && readdirSync12(path).length)
+        if (lstatSync32(path, { throwIfNoEntry: false })?.isDirectory() && readdirSync12(path).length)
           throw new Error(`NATIVE_SKILL_DRIFT: project Sumi plugins require a dedicated discovery review: ${path}`);
       }
     if (agent === "claude") {
-      const commands = canonical9(join37(directory2, ".claude/commands"));
+      const commands = canonical9(join38(directory2, ".claude/commands"));
       safe6(commands);
-      if (lstatSync31(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync12(commands).length)
+      if (lstatSync32(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync12(commands).length)
         throw new Error("NATIVE_SKILL_DRIFT: legacy project command discovery requires a dedicated format adapter");
     }
   }
@@ -24085,7 +24350,7 @@ function assertProjectDiscovery(agent, directories, home, canonical9 = resolve26
 function agentDiscoveryConfigPath(home, agent) {
   if (agent === "sumi")
     return sumiConfigPath(home);
-  return join37(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
+  return join38(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
 }
 function verifyAutomaticDiscoveryClosure(binding, options) {
   const command = DISCOVERY_RUNTIME_COMMANDS[binding.agent], recorded = options.executable;
@@ -24145,7 +24410,8 @@ function codexVendorConfigChangeOnly(source, cache) {
     if (text2 === null)
       return false;
     const rowsAffectDigest = !["codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "codex-settings-v5"].includes(source.hashMode ?? "");
-    return codexVendorConfigCandidates(text2, cache, { rowsAffectDigest }).some((candidate2) => replacementDigest(source, candidate2) === source.sha256);
+    const typed = source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5" ? source.hashMode : undefined;
+    return codexVendorConfigCandidates(text2, cache, { rowsAffectDigest }).some((candidate2) => replacementDigest(source, candidate2) === source.sha256 || typed !== undefined && codexSettingsToleratesScreenReaderReceipt(candidate2, typed, source.sha256));
   } catch {
     return false;
   }
@@ -24170,8 +24436,22 @@ function replacementDigest(source, text2) {
     return hashCodexSettingsReplacementV5(text2, budget2);
   return null;
 }
+function discoveryTextKeepsWitness(binding, path, text2) {
+  if (binding.codexSemanticCache?.configPath === path)
+    return false;
+  return binding.sources.filter((source) => source.path === path).every((source) => {
+    if (source.reviewArtifact !== undefined || source.managedPlugins !== undefined || source.hookSources !== undefined || typeof source.sha256 !== "string")
+      return false;
+    const typed = source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5" ? source.hashMode : undefined;
+    try {
+      return replacementDigest(source, text2) === source.sha256 || typed !== undefined && codexSettingsToleratesScreenReaderReceipt(text2, typed, source.sha256);
+    } catch {
+      return false;
+    }
+  });
+}
 function resolveAgentDiscovery(options) {
-  const canonical9 = options.canonical ?? resolve26, home = resolve26(options.home), agent = options.agent;
+  const canonical9 = options.canonical ?? resolve27, home = resolve27(options.home), agent = options.agent;
   const sources = [], roots = new Set, builtinNames = [];
   const witness = (path, format, fields2, hashMode) => {
     const source = { path: canonical9(path), sha256: null, ...format ? { format, fields: fields2 } : {}, ...hashMode ? { hashMode } : {} };
@@ -24192,42 +24472,42 @@ function resolveAgentDiscovery(options) {
   const review = options.reviewed?.agents.find((item) => item.agent === agent);
   if (agent === "sumi") {
     const directory2 = sumiConfigDirectory(home);
-    if (witness(join37(directory2, "sumi.jsonc")) !== null)
+    if (witness(join38(directory2, "sumi.jsonc")) !== null)
       unresolved("JSONC configuration requires a supported format adapter");
-    for (const root2 of [directory2, join37(home, ".claude"), join37(home, ".agents")])
+    for (const root2 of [directory2, join38(home, ".claude"), join38(home, ".agents")])
       for (const name of ["skill", "skills"])
-        roots.add(canonical9(join37(root2, name)));
+        roots.add(canonical9(join38(root2, name)));
     if (config.skills !== undefined && (!Array.isArray(config.skills) || config.skills.some((path) => typeof path !== "string")))
       unresolved("skills must be a string array");
     for (const value of config.skills ?? []) {
       if (typeof value !== "string" || /[\0$]/.test(value) || !value || !(isAbsolute28(value) || value.startsWith("~/")))
         unresolved("remote or relative skill sources need a dedicated discovery adapter");
-      roots.add(canonical9(value.startsWith("~/") ? join37(home, value.slice(2)) : value));
+      roots.add(canonical9(value.startsWith("~/") ? join38(home, value.slice(2)) : value));
     }
     for (const key2 of ["plugin", "plugins"])
       if (config[key2] !== undefined && !Array.isArray(config[key2]))
         unresolved(`${key2} must be an array`);
-    const plugins = [join37(directory2, "plugin"), join37(directory2, "plugins")];
+    const plugins = [join38(directory2, "plugin"), join38(directory2, "plugins")];
     for (const path of plugins) {
       safe6(path);
-      if (lstatSync31(path, { throwIfNoEntry: false })?.isDirectory())
+      if (lstatSync32(path, { throwIfNoEntry: false })?.isDirectory())
         for (const name of readdirSync12(path).sort()) {
           if (name === "skills-cli.js" && path === plugins[1])
             continue;
-          const target = join37(path, name);
-          if (!lstatSync31(target).isFile())
+          const target = join38(path, name);
+          if (!lstatSync32(target).isFile())
             unresolved("local plugin packages need a dedicated discovery adapter");
           witness(target);
         }
     }
     for (const root2 of roots) {
       safe6(root2);
-      if (lstatSync31(root2, { throwIfNoEntry: false })?.isDirectory() && readdirSync12(root2).some((name) => name.endsWith(".md")))
+      if (lstatSync32(root2, { throwIfNoEntry: false })?.isDirectory() && readdirSync12(root2).some((name) => name.endsWith(".md")))
         unresolved("flat markdown skills require a dedicated native migration adapter");
     }
   }
   if (agent === "hermes") {
-    const profile = witness(join37(home, ".hermes/active_profile"));
+    const profile = witness(join38(home, ".hermes/active_profile"));
     if (profile?.trim() && profile.trim() !== "default")
       unresolved("a non-default profile is active");
     const declared = config.skills?.external_dirs ?? [], paths = typeof declared === "string" ? [declared] : declared;
@@ -24241,7 +24521,7 @@ function resolveAgentDiscovery(options) {
         continue;
       if (normalized2.startsWith("~") && normalized2 !== "~" && !normalized2.startsWith("~/"))
         unresolved("user-specific tilde expansion requires a separate discovery adapter");
-      const path = normalized2 === "~" ? home : normalized2.startsWith("~/") ? join37(home, normalized2.slice(2)) : resolve26(home, ".hermes", normalized2);
+      const path = normalized2 === "~" ? home : normalized2.startsWith("~/") ? join38(home, normalized2.slice(2)) : resolve27(home, ".hermes", normalized2);
       safe6(path);
       roots.add(path);
     }
@@ -24250,24 +24530,24 @@ function resolveAgentDiscovery(options) {
     const executable2 = options.executable === undefined ? discoveryExecutable(agent) : options.executable;
     if (executable2) {
       let packageRoot;
-      for (let directory2 = dirname25(executable2.target), depth = 0;depth < 8; directory2 = dirname25(directory2), depth++) {
-        const path = join37(directory2, "package.json"), raw = read2(path);
+      for (let directory2 = dirname26(executable2.target), depth = 0;depth < 8; directory2 = dirname26(directory2), depth++) {
+        const path = join38(directory2, "package.json"), raw = read2(path);
         if (raw !== null && parseConfig(raw, path).name === "@google/gemini-cli") {
           packageRoot = directory2;
           witness(path);
           break;
         }
-        if (dirname25(directory2) === directory2)
+        if (dirname26(directory2) === directory2)
           break;
       }
       if (!packageRoot)
         unresolved("installed Gemini package layout is not recognized");
-      const builtinRoot = join37(packageRoot, "bundle/builtin");
+      const builtinRoot = join38(packageRoot, "bundle/builtin");
       safe6(builtinRoot);
-      if (!lstatSync31(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
+      if (!lstatSync32(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
         unresolved("installed Gemini builtin root is missing");
       for (const name of readdirSync12(builtinRoot).sort()) {
-        const text2 = witness(join37(builtinRoot, name, "SKILL.md"));
+        const text2 = witness(join38(builtinRoot, name, "SKILL.md"));
         const match = text2?.match(/^---\r?\n[\s\S]*?^name:\s*([a-z0-9][a-z0-9-]*)\s*$/m);
         if (!match?.[1] || builtinNames.includes(match[1]))
           unresolved("installed Gemini builtin name is missing or ambiguous");
@@ -24306,14 +24586,17 @@ function resolveAgentDiscovery(options) {
     if (!review.sources.some((source) => source.path === canonical9(configPath)))
       throw new Error("Discovery review must include the agent configuration source");
     const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical9(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical9(configPath), source)) : sources;
+    const absentRoots = absentRetiredClaudeRoots(supplied);
     const reviewedSourcesWithManifestProjection = review.sources.map((source) => {
+      if (retainedAbsentClaudeRoot(absentRoots, source) !== undefined)
+        return source;
       if (agent === "claude" && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && source.reviewArtifact === undefined && [undefined, "bytes", "path-bytes"].includes(source.hashMode) && isClaudePluginCacheOrphanMarker(source.path)) {
         return { path: source.path, hashMode: CLAUDE_ORPHAN_MARKER_MODE, sha256: hashClaudePluginCacheOrphanMarker(source.path) };
       }
-      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename15(source.path) !== "plugin.json" || !source.path.endsWith(join37(sep14, ".claude-plugin", "plugin.json")))
+      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename15(source.path) !== "plugin.json" || !source.path.endsWith(join38(sep15, ".claude-plugin", "plugin.json")))
         return source;
-      const pluginRoot = dirname25(dirname25(source.path)), hooksPath = join37(pluginRoot, "hooks/hooks.json");
-      const hookStat = lstatSync31(hooksPath, { throwIfNoEntry: false });
+      const pluginRoot = dirname26(dirname26(source.path)), hooksPath = join38(pluginRoot, "hooks/hooks.json");
+      const hookStat = lstatSync32(hooksPath, { throwIfNoEntry: false });
       const text2 = read2(source.path);
       if (text2 === null)
         throw new Error("Reviewed Claude plugin manifest is missing");
@@ -24327,8 +24610,8 @@ function resolveAgentDiscovery(options) {
       if (manifest.hooks !== undefined) {
         if (typeof manifest.hooks !== "string")
           throw new Error("Reviewed Claude plugin manifest has an unsupported hooks target");
-        const declaredHookPath = resolve26(pluginRoot, manifest.hooks);
-        if (!declaredHookPath.startsWith(pluginRoot + sep14))
+        const declaredHookPath = resolve27(pluginRoot, manifest.hooks);
+        if (!declaredHookPath.startsWith(pluginRoot + sep15))
           throw new Error("Reviewed Claude plugin hooks target escapes its root");
         reviewedHookPaths.add(declaredHookPath);
       }
@@ -24339,6 +24622,11 @@ function resolveAgentDiscovery(options) {
     });
     if (agent === "claude")
       assertReviewedClaudeCacheClosures(home, config, review, canonical9);
+    for (const root2 of absentRoots) {
+      safe6(root2);
+      if (lstatSync32(root2, { throwIfNoEntry: false }))
+        throw new Error("Retired native materialization changed during discovery review");
+    }
     const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
     const unique = combined.filter((source, index) => combined.findIndex((candidate2) => isDeepStrictEqual9(candidate2, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };
@@ -24346,39 +24634,39 @@ function resolveAgentDiscovery(options) {
   function plugin(root2) {
     root2 = canonical9(root2);
     safe6(root2);
-    const manifestPath = join37(root2, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
+    const manifestPath = join38(root2, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
     const raw = witness(manifestPath, undefined, undefined, agent === "claude" ? "claude-plugin-manifest-v1" : undefined);
     if (raw === null)
       unresolved("plugin manifest missing");
     const manifest = parseConfig(raw, manifestPath);
-    const hooks = witness(join37(root2, "hooks/hooks.json"));
+    const hooks = witness(join38(root2, "hooks/hooks.json"));
     if (manifest.hooks !== undefined || hooks !== null)
       unresolved("plugin hooks require a separate no-skill-injection review");
-    const commands = join37(root2, "commands");
+    const commands = join38(root2, "commands");
     safe6(commands);
-    if (agent === "claude" && (manifest.commands !== undefined || lstatSync31(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync12(commands).length))
+    if (agent === "claude" && (manifest.commands !== undefined || lstatSync32(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync12(commands).length))
       unresolved("legacy command discovery requires retirement or a dedicated format adapter");
-    const rootSkill = witness(join37(root2, "SKILL.md"));
+    const rootSkill = witness(join38(root2, "SKILL.md"));
     if (rootSkill !== null)
       roots.add(root2);
     const declared = manifest.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
     if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
       unresolved("unsupported plugin skill paths");
     if (agent === "claude")
-      roots.add(join37(root2, "skills"));
+      roots.add(join38(root2, "skills"));
     for (const value of declared) {
-      const path = resolve26(root2, value);
-      if (path !== root2 && !path.startsWith(root2 + sep14))
+      const path = resolve27(root2, value);
+      if (path !== root2 && !path.startsWith(root2 + sep15))
         unresolved("plugin skill path escapes its root");
-      roots.add(path.endsWith(`${sep14}SKILL.md`) ? dirname25(path) : path);
+      roots.add(path.endsWith(`${sep15}SKILL.md`) ? dirname26(path) : path);
     }
   }
   if (agent === "claude") {
-    const registrations = witness(join37(home, ".claude/plugins/installed_plugins.json"));
-    const installed = registrations === null ? {} : parseConfig(registrations, join37(home, ".claude/plugins/installed_plugins.json")).plugins;
-    const commands = canonical9(join37(home, ".claude/commands"));
+    const registrations = witness(join38(home, ".claude/plugins/installed_plugins.json"));
+    const installed = registrations === null ? {} : parseConfig(registrations, join38(home, ".claude/plugins/installed_plugins.json")).plugins;
+    const commands = canonical9(join38(home, ".claude/commands"));
     safe6(commands);
-    if (lstatSync31(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync12(commands).length)
+    if (lstatSync32(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync12(commands).length)
       unresolved("legacy home command discovery requires a dedicated format adapter");
     for (const [id, enabled] of Object.entries(config.enabledPlugins ?? {})) {
       if (enabled === false)
@@ -24400,16 +24688,16 @@ function resolveAgentDiscovery(options) {
       const market = config.marketplaces?.[marketplace] ?? (marketplace === "personal" ? { source_type: "local", source: home } : undefined);
       if (split < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute28(market.source))
         unresolved("enabled plugin marketplace is not an explicit local source");
-      const catalogText = witness(join37(market.source, ".agents/plugins/marketplace.json"));
+      const catalogText = witness(join38(market.source, ".agents/plugins/marketplace.json"));
       if (catalogText === null)
         unresolved("marketplace catalog missing");
-      const catalog = parseConfig(catalogText, join37(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
+      const catalog = parseConfig(catalogText, join38(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
       if (matches.length !== 1 || matches[0]?.source?.source !== "local" || typeof matches[0]?.source?.path !== "string")
         unresolved("plugin catalog source is missing or ambiguous");
-      plugin(resolve26(market.source, matches[0].source.path));
+      plugin(resolve27(market.source, matches[0].source.path));
     }
   } else if (agent === "opencode") {
-    if (witness(join37(home, ".config/opencode/opencode.jsonc")) !== null || witness(join37(home, ".config/opencode/config.json")) !== null)
+    if (witness(join38(home, ".config/opencode/opencode.jsonc")) !== null || witness(join38(home, ".config/opencode/config.json")) !== null)
       unresolved("additional config layers require review");
     if ((config.plugin?.length ?? 0) > 0 || config.skills?.urls?.length)
       unresolved("external plugin or remote skill source");
@@ -24418,17 +24706,17 @@ function resolveAgentDiscovery(options) {
         unresolved("relative or malformed added skill root");
       roots.add(path);
     }
-    const localPlugins = join37(home, ".config/opencode/plugins");
+    const localPlugins = join38(home, ".config/opencode/plugins");
     safe6(localPlugins);
-    if (lstatSync31(localPlugins, { throwIfNoEntry: false }) && readdirSync12(localPlugins).some((name) => name !== "skills-cli.js"))
+    if (lstatSync32(localPlugins, { throwIfNoEntry: false }) && readdirSync12(localPlugins).some((name) => name !== "skills-cli.js"))
       unresolved("additional local plugin hooks require review");
   } else if (agent === "sumi") {
-    if ((config.plugin?.length ?? 0) > 0 || (config.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical9(configPath) && source.path !== canonical9(join37(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
+    if ((config.plugin?.length ?? 0) > 0 || (config.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical9(configPath) && source.path !== canonical9(join38(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
       unresolved("external or foreign local plugins require review");
   } else if (agent === "hermes") {
-    for (const directory2 of [join37(home, ".hermes/plugins"), join37(home, ".hermes/hermes-agent")]) {
+    for (const directory2 of [join38(home, ".hermes/plugins"), join38(home, ".hermes/hermes-agent")]) {
       safe6(directory2);
-      if (lstatSync31(directory2, { throwIfNoEntry: false }))
+      if (lstatSync32(directory2, { throwIfNoEntry: false }))
         unresolved("installed runtime/plugin discovery requires reviewed source bindings");
     }
     if (Bun.which("hermes") || Object.keys(config.plugins ?? {}).length)
@@ -24436,30 +24724,30 @@ function resolveAgentDiscovery(options) {
   } else if (agent === "gemini") {
     if (Object.keys(config.extensions ?? {}).length || config.skills?.paths?.length)
       unresolved("custom extension or skill paths");
-    const directory2 = join37(home, ".gemini/extensions");
+    const directory2 = join38(home, ".gemini/extensions");
     safe6(directory2);
-    if (lstatSync31(directory2, { throwIfNoEntry: false }))
+    if (lstatSync32(directory2, { throwIfNoEntry: false }))
       for (const name of readdirSync12(directory2)) {
-        const root2 = join37(directory2, name);
+        const root2 = join38(directory2, name);
         safe6(root2);
-        if (!lstatSync31(root2)?.isDirectory())
+        if (!lstatSync32(root2)?.isDirectory())
           continue;
-        const raw = witness(join37(root2, "gemini-extension.json"));
+        const raw = witness(join38(root2, "gemini-extension.json"));
         if (raw === null)
           unresolved("extension registration missing");
-        const manifest = parseConfig(raw, join37(root2, "gemini-extension.json"));
-        if (manifest.hooks !== undefined || witness(join37(root2, "hooks/hooks.json")) !== null || witness(join37(root2, ".gemini-extension-install.json")) !== null)
+        const manifest = parseConfig(raw, join38(root2, "gemini-extension.json"));
+        if (manifest.hooks !== undefined || witness(join38(root2, "hooks/hooks.json")) !== null || witness(join38(root2, ".gemini-extension-install.json")) !== null)
           unresolved("extension hooks or linked registration require review");
-        roots.add(join37(root2, "skills"));
+        roots.add(join38(root2, "skills"));
       }
   }
-  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join37(home, ".hermes/plugins"), join37(home, ".hermes/hermes-agent")].map((path) => canonical9(path))) } : {} };
+  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join38(home, ".hermes/plugins"), join38(home, ".hermes/hermes-agent")].map((path) => canonical9(path))) } : {} };
 }
 
 // src/lib/authoring-path.ts
 var NATIVE_DISCOVERY_ROOTS = NATIVE_SKILL_ROOTS.map(([, path]) => path.split("/"));
 function pathParts(path) {
-  return resolve27(path).split(sep15).filter(Boolean);
+  return resolve28(path).split(sep16).filter(Boolean);
 }
 function nativeRootMatch(path) {
   const parts = pathParts(path);
@@ -24473,24 +24761,24 @@ function nativeRootMatch(path) {
   return;
 }
 function physicalPath(path) {
-  let cursor = resolve27(path);
+  let cursor = resolve28(path);
   const suffix = [];
-  while (!lstatSync32(cursor, { throwIfNoEntry: false })) {
+  while (!lstatSync33(cursor, { throwIfNoEntry: false })) {
     suffix.unshift(basename16(cursor));
-    const parent = dirname26(cursor);
+    const parent = dirname27(cursor);
     if (parent === cursor)
-      return resolve27(path);
+      return resolve28(path);
     cursor = parent;
   }
-  return resolve27(realpathSync14(cursor), ...suffix);
+  return resolve28(realpathSync14(cursor), ...suffix);
 }
 function contains(root2, path) {
-  return path === root2 || path.startsWith(root2 + sep15);
+  return path === root2 || path.startsWith(root2 + sep16);
 }
 function configuredRoots(home, explicitHome) {
-  const homeData = join38(home, ".hasna", "skills");
+  const homeData = join39(home, ".hasna", "skills");
   const homePolicy = readManagedSkillPolicySnapshot(homeData);
-  const configuredPolicy = !explicitHome && resolve27(getDataDirReadOnly()) !== resolve27(homeData) ? readManagedSkillPolicySnapshot(getDataDirReadOnly()) : null;
+  const configuredPolicy = !explicitHome && resolve28(getDataDirReadOnly()) !== resolve28(homeData) ? readManagedSkillPolicySnapshot(getDataDirReadOnly()) : null;
   const policy = homePolicy ?? configuredPolicy;
   const bridge = policy?.value.bridge;
   if (bridge && (typeof bridge.home !== "string" || physicalPath(bridge.home) !== physicalPath(home))) {
@@ -24519,8 +24807,8 @@ function configuredRoots(home, explicitHome) {
       admitBinding(binding);
       continue;
     }
-    const nativeHome = join38(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
-    if (!lstatSync32(nativeHome, { throwIfNoEntry: false }))
+    const nativeHome = join39(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
+    if (!lstatSync33(nativeHome, { throwIfNoEntry: false }))
       continue;
     roots.push(...resolveAgentDiscovery({ home, agent, canonical: physicalPath }).roots);
   }
@@ -24529,22 +24817,22 @@ function configuredRoots(home, explicitHome) {
 function assertPortableAuthoringPath(path, options = {}) {
   if (typeof path !== "string" || !path || path.includes("\x00"))
     throw new Error("Invalid portable authoring path");
-  const lexical = resolve27(path);
+  const lexical = resolve28(path);
   const physical = physicalPath(lexical);
   const candidates = [lexical, physical];
   let native = candidates.map(nativeRootMatch).find(Boolean);
-  const home = resolve27(options.homeDir ?? homedir6());
-  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join38(home, ...parts));
-  defaults.push(join38(home, ".codex/plugins/cache"), join38(home, ".claude/plugins/cache"), join38(home, ".claude/plugins/synced"), join38(home, ".gemini/extensions"));
+  const home = resolve28(options.homeDir ?? homedir6());
+  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join39(home, ...parts));
+  defaults.push(join39(home, ".codex/plugins/cache"), join39(home, ".claude/plugins/cache"), join39(home, ".claude/plugins/synced"), join39(home, ".gemini/extensions"));
   for (const root2 of defaults) {
-    if (candidates.some((candidate2) => contains(resolve27(root2), candidate2) || contains(physicalPath(root2), candidate2)))
+    if (candidates.some((candidate2) => contains(resolve28(root2), candidate2) || contains(physicalPath(root2), candidate2)))
       native ??= root2;
   }
   if (native) {
     throw new Error(`Refusing portable Skills authoring below native discovery root '${native}': ${lexical}. Set HASNA_SKILLS_DIR to a private authoring corpus outside native roots.`);
   }
   for (const root2 of configuredRoots(home, options.homeDir !== undefined)) {
-    if (candidates.some((candidate2) => contains(resolve27(root2), candidate2) || contains(physicalPath(root2), candidate2))) {
+    if (candidates.some((candidate2) => contains(resolve28(root2), candidate2) || contains(physicalPath(root2), candidate2))) {
       throw new Error(`Refusing portable Skills authoring below configured native discovery root: ${lexical}`);
     }
   }
@@ -24556,15 +24844,15 @@ function getPortableSkillsRoot(options = {}) {
 function resolvePortableSkillsRoot(options, migrate) {
   if (options.rootDir)
     return options.rootDir;
-  const appDir = options.homeDir ? join39(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
-  const cache = join39(appDir, SKILLS_CACHE_DIRNAME);
+  const appDir = options.homeDir ? join40(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
+  const cache = join40(appDir, SKILLS_CACHE_DIRNAME);
   if (isOwnerLayoutMigrated(appDir) && safeIsDirectory(cache))
     return cache;
-  const installed = join39(appDir, INSTALLED_SKILLS_DIRNAME);
+  const installed = join40(appDir, INSTALLED_SKILLS_DIRNAME);
   return installed;
 }
 function getPortableSkillPath(name, options = {}) {
-  return join39(getPortableSkillsRoot(options), normalizePortableSkillName(name));
+  return join40(getPortableSkillsRoot(options), normalizePortableSkillName(name));
 }
 function findPortableSkill(name, options = {}) {
   let normalized2;
@@ -24590,7 +24878,7 @@ function listPortableSkills(options = {}) {
   for (const entry of readdirSync13(root2).sort()) {
     if (entry.startsWith("."))
       continue;
-    const path = join39(root2, entry);
+    const path = join40(root2, entry);
     if (!safeIsDirectory(path))
       continue;
     try {
@@ -24624,9 +24912,9 @@ function isOfficialSkillName(name) {
 function scaffoldPortableSkill(name, options = {}) {
   const skillName = normalizeNewPortableSkillName(name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join39(readOnlyRoot, skillName), options);
+  assertPortableAuthoringPath(join40(readOnlyRoot, skillName), options);
   const root2 = getPortableSkillsRoot(options);
-  const skillPath = join39(root2, skillName);
+  const skillPath = join40(root2, skillName);
   assertPortableAuthoringPath(skillPath, options);
   if (existsSync14(skillPath)) {
     if (!options.overwrite)
@@ -24660,7 +24948,7 @@ function portPortableSkillDirectory(sourceDir, options = {}) {
   const skipped = [];
   const entries = readdirSync13(absoluteSource, { withFileTypes: true }).map((entry) => entry.name).filter((entryName) => !entryName.startsWith(".")).sort();
   for (const entryName of entries) {
-    const childPath = join39(absoluteSource, entryName);
+    const childPath = join40(absoluteSource, entryName);
     if (!safeIsDirectory(childPath))
       continue;
     if (!isSkillCandidate(childPath)) {
@@ -24689,23 +24977,23 @@ function portPortableSkillDirectory(sourceDir, options = {}) {
   };
 }
 function isSkillCandidate(dir) {
-  return existsSync14(join39(dir, "SKILL.md")) || existsSync14(join39(dir, "skill.json")) || existsSync14(join39(dir, "package.json"));
+  return existsSync14(join40(dir, "SKILL.md")) || existsSync14(join40(dir, "skill.json")) || existsSync14(join40(dir, "package.json"));
 }
 function physicalImportPath(path) {
-  let ancestor = resolve28(path);
+  let ancestor = resolve29(path);
   const suffix = [];
   while (!existsSync14(ancestor)) {
     suffix.unshift(basename17(ancestor));
-    ancestor = dirname27(ancestor);
+    ancestor = dirname28(ancestor);
   }
-  return join39(realpathSync15(ancestor), ...suffix);
+  return join40(realpathSync15(ancestor), ...suffix);
 }
 function assertDisjointImportPaths(source, destination) {
   const sourcePath = realpathSync15(source);
   const destinationPath = physicalImportPath(destination);
   const contains2 = (parent, child2) => {
     const path = relative11(parent, child2);
-    return path === "" || !isAbsolute29(path) && path !== ".." && !path.startsWith(`..${sep16}`);
+    return path === "" || !isAbsolute29(path) && path !== ".." && !path.startsWith(`..${sep17}`);
   };
   if (contains2(sourcePath, destinationPath) || contains2(destinationPath, sourcePath)) {
     throw new Error("Source and destination skill directories must not overlap");
@@ -24724,11 +25012,11 @@ function portPortableSkill(sourcePath, options = {}) {
     const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename17(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
-  const readOnlyDestination = join39(resolvePortableSkillsRoot(options, false), skillName);
+  const readOnlyDestination = join40(resolvePortableSkillsRoot(options, false), skillName);
   assertPortableAuthoringPath(readOnlyDestination, options);
   assertDisjointImportPaths(absoluteSource, readOnlyDestination);
   const root2 = getPortableSkillsRoot(options);
-  const destination = join39(root2, skillName);
+  const destination = join40(root2, skillName);
   assertPortableAuthoringPath(destination, options);
   assertDisjointImportPaths(absoluteSource, destination);
   if (existsSync14(destination)) {
@@ -24736,7 +25024,7 @@ function portPortableSkill(sourcePath, options = {}) {
       throw new Error(`Skill '${skillName}' already exists at ${destination}`);
     rmSync4(destination, { recursive: true, force: true });
   }
-  mkdirSync11(dirname27(destination), { recursive: true });
+  mkdirSync11(dirname28(destination), { recursive: true });
   copySkillDirectory(absoluteSource, destination);
   const base = {
     ...inferred,
@@ -24773,13 +25061,13 @@ function buildCorpusManifest(input, name) {
 function writeCorpusSkill(input, options = {}) {
   const name = normalizePortableSkillName(input.name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join39(readOnlyRoot, name), options);
+  assertPortableAuthoringPath(join40(readOnlyRoot, name), options);
   const root2 = getPortableSkillsRoot(options);
-  const skillPath = join39(root2, name);
+  const skillPath = join40(root2, name);
   assertPortableAuthoringPath(skillPath, options);
   const created = !existsSync14(skillPath);
   mkdirSync11(skillPath, { recursive: true });
-  writeFileSync9(join39(skillPath, "SKILL.md"), input.skillMd);
+  writeFileSync9(join40(skillPath, "SKILL.md"), input.skillMd);
   const manifest = buildCorpusManifest(input, name);
   writeSkillJsonWithHash(skillPath, manifest);
   return { name, path: skillPath, manifest, created };
@@ -24787,22 +25075,22 @@ function writeCorpusSkill(input, options = {}) {
 function installCorpusSkillAtomically(input, options = {}) {
   const name = normalizePortableSkillName(input.name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join39(readOnlyRoot, name), options);
+  assertPortableAuthoringPath(join40(readOnlyRoot, name), options);
   const root2 = getPortableSkillsRoot(options);
-  const target = join39(root2, name);
+  const target = join40(root2, name);
   assertPortableAuthoringPath(target, options);
   const created = !existsSync14(target);
   mkdirSync11(root2, { recursive: true });
-  const staging = mkdtempSync2(join39(root2, `.pull-${name}-`));
+  const staging = mkdtempSync2(join40(root2, `.pull-${name}-`));
   let moved = false;
   let backup = null;
   try {
-    writeFileSync9(join39(staging, "SKILL.md"), input.skillMd);
+    writeFileSync9(join40(staging, "SKILL.md"), input.skillMd);
     const manifest = buildCorpusManifest(input, name);
     writeSkillJsonWithHash(staging, manifest);
     if (existsSync14(target)) {
-      backup = mkdtempSync2(join39(root2, `.pull-backup-${name}-`));
-      renameSync6(target, join39(backup, name));
+      backup = mkdtempSync2(join40(root2, `.pull-backup-${name}-`));
+      renameSync6(target, join40(backup, name));
       moved = true;
     }
     renameSync6(staging, target);
@@ -24811,9 +25099,9 @@ function installCorpusSkillAtomically(input, options = {}) {
     return { name, path: target, manifest, created };
   } catch (error) {
     rmSync4(staging, { recursive: true, force: true });
-    if (moved && backup && existsSync14(join39(backup, name))) {
+    if (moved && backup && existsSync14(join40(backup, name))) {
       try {
-        renameSync6(join39(backup, name), target);
+        renameSync6(join40(backup, name), target);
       } catch {}
     }
     throw error;
@@ -24826,8 +25114,8 @@ function validatePortableSkillDirectory(name, skillPath) {
   const warnings = [...base.warnings];
   let manifest;
   if (existsSync14(skillPath)) {
-    const skillJsonPath = join39(skillPath, "skill.json");
-    const skillMdPath = join39(skillPath, "SKILL.md");
+    const skillJsonPath = join40(skillPath, "skill.json");
+    const skillMdPath = join40(skillPath, "SKILL.md");
     if (!existsSync14(skillJsonPath) && !existsSync14(skillMdPath)) {
       add3(issues, "portable.manifest_missing", "Missing portable manifest: expected SKILL.md frontmatter and/or skill.json");
     }
@@ -24847,7 +25135,7 @@ function validatePortableSkillDirectory(name, skillPath) {
         add3(issues, "portable.version_missing", "Portable manifest missing version");
       }
       const contractIssues = validatePortableManifestContract(manifest, {
-        strict: existsSync14(join39(skillPath, "skill.json")),
+        strict: existsSync14(join40(skillPath, "skill.json")),
         skillPath
       });
       for (const issue of contractIssues)
@@ -24887,7 +25175,7 @@ function validatePortableSkillDirectory(name, skillPath) {
               add3(issues, "portable.command_entry_unsafe", `Command '${command.name}' entry '${command.entry}' must stay inside the skill directory`);
               continue;
             }
-            const entryPath = join39(skillPath, command.entry);
+            const entryPath = join40(skillPath, command.entry);
             if (!existsSync14(entryPath))
               add3(issues, "portable.command_entry_missing", `Command '${command.name}' entry '${command.entry}' is missing`);
             else if (statSync13(entryPath).isDirectory())
@@ -24898,7 +25186,7 @@ function validatePortableSkillDirectory(name, skillPath) {
     } catch (error) {
       add3(issues, "portable.manifest_invalid", error.message);
     }
-    if (manifest?.kind !== "instruction" && !existsSync14(join39(skillPath, "AGENTS.md"))) {
+    if (manifest?.kind !== "instruction" && !existsSync14(join40(skillPath, "AGENTS.md"))) {
       add3(issues, "portable.agents_missing", "Missing AGENTS.md with build-out instructions for coding agents");
     }
   }
@@ -24934,12 +25222,12 @@ async function runPortableSkill(name, args, options = {}) {
   if (!isSafeRelativePath2(command.entry)) {
     return { exitCode: 1, error: `Portable skill '${name}' command entry is unsafe` };
   }
-  const entryPath = join39(skill.path, command.entry);
+  const entryPath = join40(skill.path, command.entry);
   if (!existsSync14(entryPath)) {
     return { exitCode: 1, error: `Entry point '${command.entry}' not found in portable skill '${name}'` };
   }
-  const pkgPath = join39(skill.path, "package.json");
-  const nodeModules = join39(skill.path, "node_modules");
+  const pkgPath = join40(skill.path, "package.json");
+  const nodeModules = join40(skill.path, "node_modules");
   if (existsSync14(pkgPath) && !existsSync14(nodeModules) && hasPackageDependencies(pkgPath)) {
     const install = Bun.spawn(["bun", "install", "--no-save"], {
       cwd: skill.path,
@@ -25196,12 +25484,12 @@ function discoverSkillsInDir(dir, source = "custom") {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillMdPath = join40(dir, entry.name, "SKILL.md");
+      const skillMdPath = join41(dir, entry.name, "SKILL.md");
       if (!existsSync15(skillMdPath))
         continue;
       let content;
       try {
-        content = readFileSync26(skillMdPath, "utf-8");
+        content = readFileSync27(skillMdPath, "utf-8");
       } catch {
         continue;
       }
@@ -25216,7 +25504,7 @@ function discoverSkillsInDir(dir, source = "custom") {
         category: fm.category || "Development Tools",
         tags: fm.tags || [],
         ...fm.kind ? { kind: fm.kind } : {},
-        ...isHostedMetadataSkillDir(join40(dir, entry.name)) ? { serverOwned: true } : {},
+        ...isHostedMetadataSkillDir(join41(dir, entry.name)) ? { serverOwned: true } : {},
         source
       });
     }
@@ -25232,13 +25520,13 @@ function findExtensionSkillPath(name) {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillDir = join40(config.extensionsDir, entry.name);
-      const skillMdPath = join40(skillDir, "SKILL.md");
+      const skillDir = join41(config.extensionsDir, entry.name);
+      const skillMdPath = join41(skillDir, "SKILL.md");
       if (!existsSync15(skillMdPath))
         continue;
       let content;
       try {
-        content = readFileSync26(skillMdPath, "utf-8");
+        content = readFileSync27(skillMdPath, "utf-8");
       } catch {
         continue;
       }
@@ -25303,20 +25591,20 @@ function getAllTags(catalog) {
 }
 // src/lib/run-state.ts
 import { createHash as createHash31, randomBytes } from "crypto";
-import { existsSync as existsSync16, mkdirSync as mkdirSync12, readFileSync as readFileSync27, readdirSync as readdirSync15, statSync as statSync14, writeFileSync as writeFileSync10 } from "fs";
-import { extname, join as join41, relative as relative12 } from "path";
+import { existsSync as existsSync16, mkdirSync as mkdirSync12, readFileSync as readFileSync28, readdirSync as readdirSync15, statSync as statSync14, writeFileSync as writeFileSync10 } from "fs";
+import { extname, join as join42, relative as relative12 } from "path";
 function createSkillRun(params, targetDir = process.cwd()) {
   const now = new Date;
   const id = createRunId(now);
   const day = now.toISOString().slice(0, 10);
   const skillName = normalizeSkillName(params.skill);
   const root2 = getProjectStateDir(targetDir);
-  const runDir = join41(root2, "runs", day, id);
-  const logsDir = join41(runDir, "logs");
-  const exportDir = join41(root2, "exports", skillName, id);
+  const runDir = join42(root2, "runs", day, id);
+  const logsDir = join42(runDir, "logs");
+  const exportDir = join42(root2, "exports", skillName, id);
   mkdirSync12(logsDir, { recursive: true });
   mkdirSync12(exportDir, { recursive: true });
-  mkdirSync12(join41(root2, "tmp"), { recursive: true });
+  mkdirSync12(join42(root2, "tmp"), { recursive: true });
   const record5 = {
     id,
     skill: skillName,
@@ -25368,27 +25656,27 @@ function updateSkillRun(context, patch) {
   return context.record;
 }
 function writeRunLogs(context, stdout = "", stderr = "") {
-  writeFileSync10(join41(context.logsDir, "stdout.log"), stdout);
-  writeFileSync10(join41(context.logsDir, "stderr.log"), stderr);
+  writeFileSync10(join42(context.logsDir, "stdout.log"), stdout);
+  writeFileSync10(join42(context.logsDir, "stderr.log"), stderr);
 }
 function appendRunEvent(context, event, data = {}) {
   const line = JSON.stringify({ ts: new Date().toISOString(), event, ...data }) + `
 `;
-  const path = join41(context.runDir, "events.ndjson");
-  const previous = existsSync16(path) ? readFileSync27(path, "utf-8") : "";
+  const path = join42(context.runDir, "events.ndjson");
+  const previous = existsSync16(path) ? readFileSync28(path, "utf-8") : "";
   writeFileSync10(path, previous + line);
 }
 function listSkillRuns(targetDir = process.cwd(), limit = 50) {
-  const runsRoot = join41(getProjectStateDir(targetDir), "runs");
+  const runsRoot = join42(getProjectStateDir(targetDir), "runs");
   if (!existsSync16(runsRoot))
     return [];
   const records = [];
   for (const day of readdirSync15(runsRoot).sort().reverse()) {
-    const dayDir = join41(runsRoot, day);
+    const dayDir = join42(runsRoot, day);
     if (!statSync14(dayDir).isDirectory())
       continue;
     for (const runId of readdirSync15(dayDir).sort().reverse()) {
-      const record5 = readRunRecord(join41(dayDir, runId));
+      const record5 = readRunRecord(join42(dayDir, runId));
       if (record5)
         records.push(record5);
       if (records.length >= limit)
@@ -25398,25 +25686,25 @@ function listSkillRuns(targetDir = process.cwd(), limit = 50) {
   return records;
 }
 function findSkillRun(runId, targetDir = process.cwd()) {
-  const runsRoot = join41(getProjectStateDir(targetDir), "runs");
+  const runsRoot = join42(getProjectStateDir(targetDir), "runs");
   if (!existsSync16(runsRoot))
     return null;
   for (const day of readdirSync15(runsRoot)) {
-    const record5 = readRunRecord(join41(runsRoot, day, runId));
+    const record5 = readRunRecord(join42(runsRoot, day, runId));
     if (record5)
       return record5;
   }
   return null;
 }
 function getRunExportDir(runId, skill, targetDir = process.cwd()) {
-  return join41(getProjectStateDir(targetDir), "exports", normalizeSkillName(skill), runId);
+  return join42(getProjectStateDir(targetDir), "exports", normalizeSkillName(skill), runId);
 }
 function writeRunRecord(context) {
-  writeFileSync10(join41(context.runDir, "run.json"), JSON.stringify(context.record, null, 2) + `
+  writeFileSync10(join42(context.runDir, "run.json"), JSON.stringify(context.record, null, 2) + `
 `);
 }
 function writeArtifactsManifest(context, artifacts) {
-  writeFileSync10(join41(context.runDir, "artifacts.json"), JSON.stringify({ runId: context.record.id, artifacts }, null, 2) + `
+  writeFileSync10(join42(context.runDir, "artifacts.json"), JSON.stringify({ runId: context.record.id, artifacts }, null, 2) + `
 `);
 }
 function collectRunArtifacts(context) {
@@ -25425,7 +25713,7 @@ function collectRunArtifacts(context) {
   const artifacts = [];
   for (const path of walkFiles(context.exportDir)) {
     const stat2 = statSync14(path);
-    const bytes = readFileSync27(path);
+    const bytes = readFileSync28(path);
     artifacts.push({
       path: toProjectRelative(context.targetDir, path),
       mime: mimeForPath(path),
@@ -25436,11 +25724,11 @@ function collectRunArtifacts(context) {
   return artifacts.sort((a, b) => a.path.localeCompare(b.path));
 }
 function readRunRecord(runDir) {
-  const path = join41(runDir, "run.json");
+  const path = join42(runDir, "run.json");
   if (!existsSync16(path))
     return null;
   try {
-    return JSON.parse(readFileSync27(path, "utf-8"));
+    return JSON.parse(readFileSync28(path, "utf-8"));
   } catch {
     return null;
   }
@@ -25448,7 +25736,7 @@ function readRunRecord(runDir) {
 function walkFiles(dir) {
   const files = [];
   for (const entry of readdirSync15(dir)) {
-    const full = join41(dir, entry);
+    const full = join42(dir, entry);
     if (statSync14(full).isDirectory())
       files.push(...walkFiles(full));
     else
@@ -45853,10 +46141,10 @@ async function readQuoteUnavailableCode(response) {
   let timer;
   let deadlineExceeded = false;
   const expired = Symbol("quote body deadline");
-  const deadline = new Promise((resolve29) => {
+  const deadline = new Promise((resolve30) => {
     timer = setTimeout(() => {
       deadlineExceeded = true;
-      resolve29(expired);
+      resolve30(expired);
       reader.cancel().catch(() => {});
     }, 1500);
   });
@@ -46955,23 +47243,23 @@ async function createRemoteSkillsClient(env = process.env) {
   return connection ? new RemoteSkillsClient(connection.apiKey, connection.apiOrigin) : null;
 }
 // src/lib/scheduler.ts
-import { existsSync as existsSync17, readFileSync as readFileSync28, writeFileSync as writeFileSync11, mkdirSync as mkdirSync13 } from "fs";
-import { join as join42 } from "path";
+import { existsSync as existsSync17, readFileSync as readFileSync29, writeFileSync as writeFileSync11, mkdirSync as mkdirSync13 } from "fs";
+import { join as join43 } from "path";
 function getSchedulesPath(targetDir = process.cwd()) {
-  return join42(targetDir, ".skills", "schedules.json");
+  return join43(targetDir, ".skills", "schedules.json");
 }
 function loadSchedules(targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
   if (existsSync17(path)) {
     try {
-      return JSON.parse(readFileSync28(path, "utf-8"));
+      return JSON.parse(readFileSync29(path, "utf-8"));
     } catch {}
   }
   return { version: 1, schedules: [] };
 }
 function saveSchedules(data, targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
-  const dir = join42(targetDir, ".skills");
+  const dir = join43(targetDir, ".skills");
   if (!existsSync17(dir))
     mkdirSync13(dir, { recursive: true });
   writeFileSync11(path, JSON.stringify(data, null, 2));
@@ -47187,8 +47475,8 @@ function revisionIdOfRecord(record10) {
   return revisionIdOf(record10);
 }
 // src/lib/pull.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync14, mkdtempSync as mkdtempSync3, readFileSync as readFileSync29, renameSync as renameSync7, rmSync as rmSync5, writeFileSync as writeFileSync12 } from "fs";
-import { dirname as dirname28, join as join43 } from "path";
+import { existsSync as existsSync18, mkdirSync as mkdirSync14, mkdtempSync as mkdtempSync3, readFileSync as readFileSync30, renameSync as renameSync7, rmSync as rmSync5, writeFileSync as writeFileSync12 } from "fs";
+import { dirname as dirname29, join as join44 } from "path";
 
 // src/lib/skill-bundles.ts
 import { createHmac, timingSafeEqual } from "crypto";
@@ -47282,7 +47570,7 @@ async function pullOne(client2, rawName, corpusOptions, verify) {
       return reconcileTombstone(slug2, corpusOptions);
     }
     if (bundleResponse.status === 404) {
-      const marker = readPullMarker(join43(getPortableSkillsRoot(corpusOptions), slug2));
+      const marker = readPullMarker(join44(getPortableSkillsRoot(corpusOptions), slug2));
       if (isPublishedInstallMarker(marker)) {
         return { name: slug2, success: true, purged: true, removed: false };
       }
@@ -47321,7 +47609,7 @@ async function pullOne(client2, rawName, corpusOptions, verify) {
     return { name: slug2, success: false, error: `Skill '${slug2}' was not found on the configured Skills instance.` };
   }
   if (!meta3?.revisionId) {
-    const marker = readPullMarker(join43(getPortableSkillsRoot(corpusOptions), slug2));
+    const marker = readPullMarker(join44(getPortableSkillsRoot(corpusOptions), slug2));
     if (isPublishedInstallMarker(marker)) {
       return { name: slug2, success: true, purged: true, removed: false };
     }
@@ -47378,7 +47666,7 @@ function provenRevision(meta3, slug2, bundle2) {
   return declared;
 }
 function reconcileTombstone(slug2, corpusOptions) {
-  const target = join43(getPortableSkillsRoot(corpusOptions), slug2);
+  const target = join44(getPortableSkillsRoot(corpusOptions), slug2);
   if (!hasSkillsOwnershipMarker(target)) {
     return { name: slug2, success: true, tombstoned: true, removed: false, leftInPlace: true };
   }
@@ -47387,7 +47675,7 @@ function reconcileTombstone(slug2, corpusOptions) {
 }
 function readPullMarker(dir) {
   try {
-    return JSON.parse(readFileSync29(join43(dir, PULL_MARKER_FILE), "utf-8"));
+    return JSON.parse(readFileSync30(join44(dir, PULL_MARKER_FILE), "utf-8"));
   } catch {
     return null;
   }
@@ -47522,15 +47810,15 @@ function verifyBundleResponseBytes(buffer, response, verify = {}) {
 function installBundleAtomically(name, entries, options = {}, marker = {}) {
   const root2 = getPortableSkillsRoot(options);
   mkdirSync14(root2, { recursive: true });
-  const target = join43(root2, name);
+  const target = join44(root2, name);
   const created = !existsSync18(target);
-  const staging = mkdtempSync3(join43(root2, `.pull-${name}-`));
+  const staging = mkdtempSync3(join44(root2, `.pull-${name}-`));
   let moved = false;
   let backup = null;
   try {
     for (const entry of entries) {
-      const destination = join43(staging, entry.path);
-      mkdirSync14(dirname28(destination), { recursive: true });
+      const destination = join44(staging, entry.path);
+      mkdirSync14(dirname29(destination), { recursive: true });
       writeFileSync12(destination, entry.bytes, { mode: entry.mode });
     }
     writePullMarker(staging, {
@@ -47542,8 +47830,8 @@ function installBundleAtomically(name, entries, options = {}, marker = {}) {
       ...marker.revisionId ? { revisionId: marker.revisionId } : {}
     });
     if (existsSync18(target)) {
-      backup = mkdtempSync3(join43(root2, `.pull-backup-${name}-`));
-      renameSync7(target, join43(backup, name));
+      backup = mkdtempSync3(join44(root2, `.pull-backup-${name}-`));
+      renameSync7(target, join44(backup, name));
       moved = true;
     }
     renameSync7(staging, target);
@@ -47551,9 +47839,9 @@ function installBundleAtomically(name, entries, options = {}, marker = {}) {
       rmSync5(backup, { recursive: true, force: true });
   } catch (error61) {
     rmSync5(staging, { recursive: true, force: true });
-    if (moved && backup && existsSync18(join43(backup, name))) {
+    if (moved && backup && existsSync18(join44(backup, name))) {
       try {
-        renameSync7(join43(backup, name), target);
+        renameSync7(join44(backup, name), target);
       } catch {}
     }
     throw error61;
@@ -47572,7 +47860,7 @@ function writePullMarker(dir, record10) {
     ...record10.revisionId ? { revisionId: record10.revisionId } : {},
     syncedAt: new Date().toISOString()
   };
-  writeFileSync12(join43(dir, PULL_MARKER_FILE), `${JSON.stringify(marker, null, 2)}
+  writeFileSync12(join44(dir, PULL_MARKER_FILE), `${JSON.stringify(marker, null, 2)}
 `);
 }
 async function safeMeta(client2, slug2) {
@@ -48014,12 +48302,12 @@ class RemotePrivatePublicationsClient {
       previous = view;
       if (!["queued", "verifying"].includes(view.state) || Date.now() >= until)
         return view;
-      await new Promise((resolve29) => {
+      await new Promise((resolve30) => {
         const timer = setTimeout(done, Math.min(1000, until - Date.now()));
         function done() {
           clearTimeout(timer);
           options.signal?.removeEventListener("abort", done);
-          resolve29();
+          resolve30();
         }
         options.signal?.addEventListener("abort", done, { once: true });
       });
@@ -48434,7 +48722,7 @@ function findSkillsParityForMcpTool(tool) {
 }
 // src/lib/registry-sync.ts
 import { mkdirSync as mkdirSync15, writeFileSync as writeFileSync13 } from "fs";
-import { dirname as dirname29, relative as relative13 } from "path";
+import { dirname as dirname30, relative as relative13 } from "path";
 function createRegistrySyncArtifact(options = {}) {
   const profile = options.profile ?? "all";
   const includeDocs = options.includeDocs ?? true;
@@ -48491,7 +48779,7 @@ function createRegistrySyncArtifact(options = {}) {
   };
 }
 function writeRegistrySyncArtifact(path, artifact) {
-  mkdirSync15(dirname29(path), { recursive: true });
+  mkdirSync15(dirname30(path), { recursive: true });
   writeFileSync13(path, `${JSON.stringify(artifact, null, 2)}
 `);
 }
@@ -49576,14 +49864,14 @@ function clone3(value) {
 }
 // src/lib/feedback.ts
 import { appendFileSync, existsSync as existsSync19, mkdirSync as mkdirSync16 } from "fs";
-import { dirname as dirname30, join as join44 } from "path";
+import { dirname as dirname31, join as join45 } from "path";
 import { Database } from "bun:sqlite";
 function getFeedbackDbPath() {
-  return join44(getDataDir(), "skills.db");
+  return join45(getDataDir(), "skills.db");
 }
 function getFeedbackDb() {
   const dbPath = getFeedbackDbPath();
-  const dir = dirname30(dbPath);
+  const dir = dirname31(dbPath);
   if (!existsSync19(dir))
     mkdirSync16(dir, { recursive: true });
   const db = new Database(dbPath);
@@ -49611,8 +49899,8 @@ function saveFeedback(input2) {
     throw new Error("Feedback message is required");
   const category = input2.category ?? "general";
   if (isApiMode()) {
-    const path = join44(getDataDir(), "feedback.jsonl");
-    const dir = dirname30(path);
+    const path = join45(getDataDir(), "feedback.jsonl");
+    const dir = dirname31(path);
     if (!existsSync19(dir))
       mkdirSync16(dir, { recursive: true });
     appendFileSync(path, JSON.stringify({ message, category, email: input2.email ?? null, agent: input2.agent ?? null, version: input2.version ?? null, createdAt: new Date().toISOString() }) + `
@@ -49639,12 +49927,12 @@ import { createHash as createHash35, createHmac as createHmac2 } from "crypto";
 import {
   existsSync as existsSync20,
   mkdirSync as mkdirSync17,
-  readFileSync as readFileSync30,
+  readFileSync as readFileSync31,
   readdirSync as readdirSync16,
   statSync as statSync15,
   writeFileSync as writeFileSync14
 } from "fs";
-import { dirname as dirname31, join as join45, normalize as normalize5, relative as relative14, sep as sep17 } from "path";
+import { dirname as dirname32, join as join46, normalize as normalize5, relative as relative14, sep as sep18 } from "path";
 var SKILLS_STORAGE_TABLES = [
   "skills_sync_records",
   "skills_sync_cursors"
@@ -49781,7 +50069,7 @@ function getSkillsNativeStorageStatus(options = {}) {
     local: {
       dataDir: getDataDir(),
       projectStateDir: getProjectStateDir(targetDir),
-      feedbackDbPath: join45(getDataDir(), "skills.db")
+      feedbackDbPath: join46(getDataDir(), "skills.db")
     },
     remote: {
       databaseConfigured: Boolean(config2.databaseUrl),
@@ -49806,7 +50094,7 @@ function exportSkillsLocalSnapshot(targetDir = process.cwd(), options = {}) {
   const files = [];
   if (existsSync20(projectStateDir)) {
     for (const filePath of walkFiles2(projectStateDir)) {
-      const bytes = readFileSync30(filePath);
+      const bytes = readFileSync31(filePath);
       const relativePath = toPosix(relative14(targetDir, filePath));
       files.push({
         path: relativePath,
@@ -49840,7 +50128,7 @@ function importSkillsLocalSnapshot(snapshot2, targetDir = process.cwd(), options
     if (hash5 !== file2.sha256) {
       throw new Error(`Snapshot file checksum mismatch: ${file2.path}`);
     }
-    mkdirSync17(dirname31(absolutePath5), { recursive: true });
+    mkdirSync17(dirname32(absolutePath5), { recursive: true });
     writeFileSync14(absolutePath5, bytes);
     written += 1;
   }
@@ -50138,7 +50426,7 @@ function parsePositiveInteger(value) {
 function walkFiles2(dir) {
   const files = [];
   for (const entry of readdirSync16(dir)) {
-    const full = join45(dir, entry);
+    const full = join46(dir, entry);
     const stats = statSync15(full);
     if (stats.isDirectory())
       files.push(...walkFiles2(full));
@@ -50149,13 +50437,13 @@ function walkFiles2(dir) {
 }
 function resolveSnapshotPath(targetDir, snapshotPath) {
   const normalizedPath = normalize5(snapshotPath);
-  if (normalizedPath.startsWith("..") || normalizedPath.includes(`${sep17}..${sep17}`) || normalizedPath.startsWith(sep17)) {
+  if (normalizedPath.startsWith("..") || normalizedPath.includes(`${sep18}..${sep18}`) || normalizedPath.startsWith(sep18)) {
     throw new Error(`Unsafe snapshot path: ${snapshotPath}`);
   }
   if (!toPosix(normalizedPath).startsWith(".skills/")) {
     throw new Error(`Snapshot path must stay inside .skills: ${snapshotPath}`);
   }
-  return join45(targetDir, normalizedPath);
+  return join46(targetDir, normalizedPath);
 }
 function normalizeS3Prefix(prefix) {
   return (prefix ?? "").trim().replace(/^\/+|\/+$/g, "");
@@ -50224,16 +50512,16 @@ import { createHash as createHash36 } from "crypto";
 import {
   copyFileSync,
   mkdirSync as mkdirSync18,
-  readFileSync as readFileSync31,
+  readFileSync as readFileSync32,
   statSync as statSync17,
   writeFileSync as writeFileSync15
 } from "fs";
-import { dirname as dirname32, isAbsolute as isAbsolute31, relative as relative15, resolve as resolve29, sep as sep19 } from "path";
+import { dirname as dirname33, isAbsolute as isAbsolute31, relative as relative15, resolve as resolve30, sep as sep20 } from "path";
 
 // src/lib/portable-snapshot-filter.ts
 import { readdirSync as readdirSync17, statSync as statSync16 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join46, sep as sep18 } from "path";
+import { join as join47, sep as sep19 } from "path";
 var SYNC_HOMES = [
   { name: "skills", subClass: "skills", agent: null },
   { name: "custom", subClass: "custom", agent: null },
@@ -50326,16 +50614,16 @@ function isPortableWithinSkill(relativeParts) {
 function homePathFor(definition, homesRoot) {
   const home = homesRoot ?? homedir7();
   if (definition.subClass === "skills" || definition.subClass === "custom") {
-    return join46(skillsDataRootForHome(home), definition.name);
+    return join47(skillsDataRootForHome(home), definition.name);
   }
   if (definition.agent === "opencode") {
-    return join46(home, ".config", "opencode", "skills");
+    return join47(home, ".config", "opencode", "skills");
   }
-  return join46(home, `.${definition.agent}`, "skills");
+  return join47(home, `.${definition.agent}`, "skills");
 }
 function destinationFor(definition, stationId, relativePath) {
-  const category = definition.subClass === "agent-homes" ? join46("agent-homes", definition.agent ?? "") : definition.name;
-  return join46("resources", stationId, "skills", category, ...relativePath.split(sep18));
+  const category = definition.subClass === "agent-homes" ? join47("agent-homes", definition.agent ?? "") : definition.name;
+  return join47("resources", stationId, "skills", category, ...relativePath.split(sep19));
 }
 function walkEntries(absoluteRoot) {
   let entries;
@@ -50346,7 +50634,7 @@ function walkEntries(absoluteRoot) {
   }
   const output2 = [];
   for (const entry of entries) {
-    const childFull = join46(absoluteRoot, entry.name);
+    const childFull = join47(absoluteRoot, entry.name);
     if (entry.isSymbolicLink()) {
       output2.push({ kind: "symlink", relativePath: entry.name, fullPath: childFull });
       continue;
@@ -50357,7 +50645,7 @@ function walkEntries(absoluteRoot) {
       }
       const nested = walkEntries(childFull);
       for (const item of nested) {
-        output2.push({ ...item, relativePath: join46(entry.name, item.relativePath) });
+        output2.push({ ...item, relativePath: join47(entry.name, item.relativePath) });
       }
       continue;
     }
@@ -50395,7 +50683,7 @@ function validateStationId(stationId) {
   }
 }
 function sha256File(filePath) {
-  return createHash36("sha256").update(readFileSync31(filePath)).digest("hex");
+  return createHash36("sha256").update(readFileSync32(filePath)).digest("hex");
 }
 function scanHome(definition, homesRoot) {
   const homePath = homePathFor(definition, homesRoot);
@@ -50403,7 +50691,7 @@ function scanHome(definition, homesRoot) {
   const portable = [];
   const skipped = [];
   for (const entry of entries) {
-    const relativeParts = entry.relativePath.split(sep19);
+    const relativeParts = entry.relativePath.split(sep20);
     const fileName = relativeParts[relativeParts.length - 1];
     if (entry.kind === "symlink") {
       skipped.push({ relativePath: entry.relativePath, reason: "symlink" });
@@ -50466,7 +50754,7 @@ function humanHomes(scanned) {
   }));
 }
 function writeStationSnapshot(options) {
-  const repoRoot = resolve29(options.repoRoot ?? process.cwd());
+  const repoRoot = resolve30(options.repoRoot ?? process.cwd());
   const { scanned, plans, totalBytes } = planStationSnapshot(options);
   const manifestFiles = plans.map((plan) => ({
     relativePath: plan.source.relativePath,
@@ -50492,9 +50780,9 @@ function writeStationSnapshot(options) {
   const conflicts = [];
   const untouched = [];
   for (const plan of plans) {
-    const destination = resolve29(repoRoot, plan.destination);
+    const destination = resolve30(repoRoot, plan.destination);
     const destinationRelative = relative15(repoRoot, destination);
-    if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep19) || isAbsolute31(destinationRelative)) {
+    if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep20) || isAbsolute31(destinationRelative)) {
       throw new StationSnapshotError("DESTINATION_ESCAPE", `destination escapes repo root: ${plan.destination}`);
     }
     let existingDigest = null;
@@ -50515,8 +50803,8 @@ function writeStationSnapshot(options) {
   }
   let written = 0;
   for (const plan of untouched) {
-    const destination = resolve29(repoRoot, plan.destination);
-    mkdirSync18(dirname32(destination), { recursive: true });
+    const destination = resolve30(repoRoot, plan.destination);
+    mkdirSync18(dirname33(destination), { recursive: true });
     copyFileSync(plan.source.fullPath, destination);
     written += 1;
   }
@@ -50534,8 +50822,8 @@ function writeStationSnapshot(options) {
     },
     files: manifestFiles
   };
-  const manifestPath = resolve29(repoRoot, "resources", options.stationId, "skills", "sync-manifest.json");
-  mkdirSync18(dirname32(manifestPath), { recursive: true });
+  const manifestPath = resolve30(repoRoot, "resources", options.stationId, "skills", "sync-manifest.json");
+  mkdirSync18(dirname33(manifestPath), { recursive: true });
   writeFileSync15(manifestPath, `${JSON.stringify(manifest, null, 2)}
 `);
   return {
@@ -50551,11 +50839,11 @@ import {
   copyFileSync as copyFileSync2,
   mkdirSync as mkdirSync19,
   readdirSync as readdirSync18,
-  readFileSync as readFileSync32,
+  readFileSync as readFileSync33,
   statSync as statSync18,
   writeFileSync as writeFileSync16
 } from "fs";
-import { dirname as dirname33, join as join47, resolve as resolve30, sep as sep20 } from "path";
+import { dirname as dirname34, join as join48, resolve as resolve31, sep as sep21 } from "path";
 var STATION_HYDRATION_MANIFEST_SCHEMA = "hasna.fleet-resources.skills-hydration-manifest/v1";
 var STATION_HYDRATION_PRODUCER = { name: "@hasna/skills", version: package_default.version };
 var MANIFEST_HASH_KEY_SEP = String.fromCharCode(0);
@@ -50563,14 +50851,14 @@ function fail2(code2, message, detail = []) {
   throw new StationSnapshotError(code2, message, detail);
 }
 function snapshotRootFor(repoRoot, stationId) {
-  return join47(repoRoot, "resources", stationId, "skills");
+  return join48(repoRoot, "resources", stationId, "skills");
 }
 function readSnapshotManifest(repoRoot, stationId) {
   const snapshotRoot = snapshotRootFor(repoRoot, stationId);
-  const manifestPath = join47(snapshotRoot, "sync-manifest.json");
+  const manifestPath = join48(snapshotRoot, "sync-manifest.json");
   let manifest;
   try {
-    manifest = JSON.parse(readFileSync32(manifestPath, "utf8"));
+    manifest = JSON.parse(readFileSync33(manifestPath, "utf8"));
   } catch (error61) {
     fail2("MANIFEST_UNREADABLE", `cannot read snapshot manifest: ${manifestPath}: ${error61.message}`);
   }
@@ -50594,7 +50882,7 @@ function planStationHydration(stationId, repoRoot) {
   const hashMismatches = [];
   const skippedByRule = [];
   for (const agent of SYNC_AGENTS) {
-    const agentRoot = join47(snapshotRoot, "agent-homes", agent);
+    const agentRoot = join48(snapshotRoot, "agent-homes", agent);
     let identEntries;
     try {
       identEntries = readdirSync18(agentRoot, { withFileTypes: true });
@@ -50605,10 +50893,10 @@ function planStationHydration(stationId, repoRoot) {
       if (!identEntry.isDirectory() || identEntry.name.startsWith(".")) {
         continue;
       }
-      const identRoot = join47(agentRoot, identEntry.name);
+      const identRoot = join48(agentRoot, identEntry.name);
       const entries = walkEntries(identRoot);
       for (const entry of entries) {
-        const relativeParts = [identEntry.name, ...entry.relativePath.split(sep20)];
+        const relativeParts = [identEntry.name, ...entry.relativePath.split(sep21)];
         if (entry.kind === "symlink") {
           symlinks.push({ ident: identEntry.name, agent, relativePath: entry.relativePath });
           continue;
@@ -50632,8 +50920,8 @@ function planStationHydration(stationId, repoRoot) {
           });
           continue;
         }
-        const withinIdent = relativeParts.slice(1).join(sep20);
-        const homeRelative = relativeParts.join(sep20);
+        const withinIdent = relativeParts.slice(1).join(sep21);
+        const homeRelative = relativeParts.join(sep21);
         if (REFUSED_SCANNER_FLAGGED.has(homeRelative)) {
           skippedByRule.push({
             ident: identEntry.name,
@@ -50706,7 +50994,7 @@ function planStationHydration(stationId, repoRoot) {
         for (const copy of copies) {
           let isStub = false;
           try {
-            isStub = isPointerSkillMd(readFileSync32(copy.fullPath, "utf8"));
+            isStub = isPointerSkillMd(readFileSync33(copy.fullPath, "utf8"));
           } catch {
             isStub = false;
           }
@@ -50756,8 +51044,8 @@ function skillSha256(skill) {
 `)).digest("hex");
 }
 function writeStationHydration(options) {
-  const repoRoot = resolve30(options.repoRoot ?? process.cwd());
-  const cacheRoot = resolve30(options.cacheRoot ?? resolveCorpusRoot());
+  const repoRoot = resolve31(options.repoRoot ?? process.cwd());
+  const cacheRoot = resolve31(options.cacheRoot ?? resolveCorpusRoot());
   const plan = planStationHydration(options.stationId, repoRoot);
   const resultSkills = plan.winners.map((skill) => ({
     ident: skill.ident,
@@ -50790,7 +51078,7 @@ function writeStationHydration(options) {
   const toWrite = [];
   for (const skill of plan.winners) {
     for (const file2 of skill.files) {
-      const destination = join47(cacheRoot, skill.ident, file2.withinIdent);
+      const destination = join48(cacheRoot, skill.ident, file2.withinIdent);
       const digest4 = sha256File(file2.winner.fullPath);
       let existingDigest = null;
       try {
@@ -50811,7 +51099,7 @@ function writeStationHydration(options) {
   }
   let written = 0;
   for (const entry of toWrite) {
-    mkdirSync19(dirname33(entry.destination), { recursive: true });
+    mkdirSync19(dirname34(entry.destination), { recursive: true });
     copyFileSync2(entry.fullPath, entry.destination);
     written += 1;
   }
@@ -50832,8 +51120,8 @@ function writeStationHydration(options) {
     },
     skills: resultSkills
   };
-  const hydrationManifestPath = join47(dirname33(cacheRoot), `hydration-${options.stationId}.json`);
-  mkdirSync19(dirname33(hydrationManifestPath), { recursive: true });
+  const hydrationManifestPath = join48(dirname34(cacheRoot), `hydration-${options.stationId}.json`);
+  mkdirSync19(dirname34(hydrationManifestPath), { recursive: true });
   writeFileSync16(hydrationManifestPath, `${JSON.stringify(hydration, null, 2)}
 `);
   return {
@@ -50844,23 +51132,23 @@ function writeStationHydration(options) {
   };
 }
 // src/lib/private-publication-recovery.ts
-import { constants as constants21, closeSync as closeSync20, fsyncSync as fsyncSync8, fstatSync as fstatSync20, lstatSync as lstatSync33, mkdirSync as mkdirSync20, openSync as openSync20, readSync as readSync15, realpathSync as realpathSync16, renameSync as renameSync8, unlinkSync as unlinkSync6, writeFileSync as writeFileSync17 } from "fs";
-import { dirname as dirname34, isAbsolute as isAbsolute32, join as join48, resolve as resolve31 } from "path";
+import { constants as constants21, closeSync as closeSync20, fsyncSync as fsyncSync8, fstatSync as fstatSync20, lstatSync as lstatSync34, mkdirSync as mkdirSync20, openSync as openSync20, readSync as readSync15, realpathSync as realpathSync16, renameSync as renameSync8, unlinkSync as unlinkSync6, writeFileSync as writeFileSync17 } from "fs";
+import { dirname as dirname35, isAbsolute as isAbsolute32, join as join49, resolve as resolve32 } from "path";
 import { randomUUID as randomUUID5 } from "crypto";
 var fail3 = () => {
   throw new PrivatePublicationError("PUBLICATION_RECOVERY_INVALID", "The recovery directory is invalid or changed. Preserve it and inspect the existing intent; do not start a replacement automatically.");
 };
 function safeDirectory(directory3) {
-  if (!isAbsolute32(directory3) || directory3 !== resolve31(directory3) || realpathSync16(directory3) !== directory3)
+  if (!isAbsolute32(directory3) || directory3 !== resolve32(directory3) || realpathSync16(directory3) !== directory3)
     return fail3();
-  for (let path = directory3;; path = dirname34(path)) {
-    const stat2 = lstatSync33(path);
+  for (let path = directory3;; path = dirname35(path)) {
+    const stat2 = lstatSync34(path);
     if (!stat2.isDirectory() || stat2.isSymbolicLink())
       return fail3();
-    if (path === dirname34(path))
+    if (path === dirname35(path))
       break;
   }
-  const own2 = lstatSync33(directory3);
+  const own2 = lstatSync34(directory3);
   if ((own2.mode & 63) !== 0 || process.getuid && own2.uid !== process.getuid())
     return fail3();
   return { dev: own2.dev, ino: own2.ino };
@@ -50871,7 +51159,7 @@ function unchangedDirectory(directory3, identity5) {
     return fail3();
 }
 function readOwned(directory3, name, max) {
-  const identity5 = safeDirectory(directory3), file2 = join48(directory3, name);
+  const identity5 = safeDirectory(directory3), file2 = join49(directory3, name);
   const fd = openSync20(file2, constants21.O_RDONLY | constants21.O_NOFOLLOW);
   try {
     const stat2 = fstatSync20(fd);
@@ -50895,7 +51183,7 @@ function readOwned(directory3, name, max) {
   }
 }
 function writeOwned(directory3, name, bytes) {
-  const fd = openSync20(join48(directory3, name), constants21.O_WRONLY | constants21.O_CREAT | constants21.O_EXCL | constants21.O_NOFOLLOW, 384);
+  const fd = openSync20(join49(directory3, name), constants21.O_WRONLY | constants21.O_CREAT | constants21.O_EXCL | constants21.O_NOFOLLOW, 384);
   try {
     writeFileSync17(fd, bytes);
     fsyncSync8(fd);
@@ -50908,7 +51196,7 @@ function save(directory3, value) {
   writeOwned(directory3, temporary, JSON.stringify(value) + `
 `);
   unchangedDirectory(directory3, identity5);
-  renameSync8(join48(directory3, temporary), join48(directory3, "receipt.json"));
+  renameSync8(join49(directory3, temporary), join49(directory3, "receipt.json"));
   const fd = openSync20(directory3, constants21.O_RDONLY | constants21.O_NOFOLLOW);
   try {
     fsyncSync8(fd);
@@ -50921,7 +51209,7 @@ function bind(client2, receipt) {
     throw new PrivatePublicationError("PUBLICATION_IDENTITY_CHANGED", "The fresh session does not match the recovery directory's server, account and membership.");
 }
 async function locked(directory3, action) {
-  const identity5 = safeDirectory(directory3), file2 = join48(directory3, "operation.lock");
+  const identity5 = safeDirectory(directory3), file2 = join49(directory3, "operation.lock");
   let fd;
   try {
     fd = openSync20(file2, constants21.O_WRONLY | constants21.O_CREAT | constants21.O_EXCL | constants21.O_NOFOLLOW, 384);
@@ -50937,7 +51225,7 @@ async function locked(directory3, action) {
   } finally {
     closeSync20(fd);
     unchangedDirectory(directory3, identity5);
-    const now = lstatSync33(file2);
+    const now = lstatSync34(file2);
     if (now.dev !== lock.dev || now.ino !== lock.ino || !now.isFile() || now.isSymbolicLink())
       fail3();
     unlinkSync6(file2);
@@ -50989,11 +51277,11 @@ async function preparePrivatePublication(client2, sourceDirectory, recoveryDirec
     phase: "prepared",
     intent: null
   };
-  if (!isAbsolute32(recoveryDirectory) || resolve31(recoveryDirectory) !== recoveryDirectory || realpathSync16(dirname34(recoveryDirectory)) !== dirname34(recoveryDirectory))
+  if (!isAbsolute32(recoveryDirectory) || resolve32(recoveryDirectory) !== recoveryDirectory || realpathSync16(dirname35(recoveryDirectory)) !== dirname35(recoveryDirectory))
     return fail3();
   mkdirSync20(recoveryDirectory, { mode: 448 });
   safeDirectory(recoveryDirectory);
-  const parent = openSync20(dirname34(recoveryDirectory), constants21.O_RDONLY | constants21.O_NOFOLLOW);
+  const parent = openSync20(dirname35(recoveryDirectory), constants21.O_RDONLY | constants21.O_NOFOLLOW);
   try {
     fsyncSync8(parent);
   } finally {
@@ -51081,7 +51369,7 @@ async function inspectLocked(client2, directory3, cancel) {
 }
 // src/lib/skill-context.ts
 import { createHash as createHash38 } from "crypto";
-import { resolve as resolve32 } from "path";
+import { resolve as resolve33 } from "path";
 function words(value) {
   return new Set(value.toLowerCase().match(/[a-z0-9]+/g) ?? []);
 }
@@ -51120,7 +51408,7 @@ async function buildSkillContext(input2, options = {}) {
   const promptWords = words(prompt);
   const promptNames = new Set(prompt.toLowerCase().match(/[a-z0-9]+(?:-[a-z0-9]+)*/g) ?? []);
   const loaded = new Set(resolved.session?.loaded ?? []);
-  const paths = [...input2.paths ?? [], ...input2.cwd ? [input2.cwd, resolve32(input2.cwd)] : []];
+  const paths = [...input2.paths ?? [], ...input2.cwd ? [input2.cwd, resolve33(input2.cwd)] : []];
   const candidates = profile.selections.map((selection) => {
     const key2 = selectionKey(selection);
     if (input2.restore && loaded.has(key2))
@@ -51315,8 +51603,8 @@ function applySessionReconciliation(snapshot2, target, planned, record12, verifi
 }
 // src/lib/claude-prospective-review.ts
 import { createHash as createHash40 } from "crypto";
-import { lstatSync as lstatSync34, readFileSync as readFileSync33, readdirSync as readdirSync19, realpathSync as realpathSync17 } from "fs";
-import { basename as basename18, dirname as dirname35, isAbsolute as isAbsolute33, join as join49, relative as relative16, resolve as resolve33, sep as sep21 } from "path";
+import { lstatSync as lstatSync35, readFileSync as readFileSync34, readdirSync as readdirSync19, realpathSync as realpathSync17 } from "fs";
+import { basename as basename18, dirname as dirname36, isAbsolute as isAbsolute33, join as join50, relative as relative16, resolve as resolve34, sep as sep22 } from "path";
 var MAX_CANDIDATE_FILES = 16384;
 var MAX_CANDIDATE_BYTES = 256 * 1024 * 1024;
 var sha7 = (data) => createHash40("sha256").update(data).digest("hex");
@@ -51327,32 +51615,32 @@ var GENERATED_MARKETPLACE_TIME = Object.freeze({ $generated: "claude-utc-timesta
 var GENERATED_FRESH_PLUGIN_INSTALLED_AT = Object.freeze({ $generated: "claude-utc-timestamp", field: "installed_plugins.fresh-row.installedAt" });
 var GENERATED_PLUGIN_UPDATE_TIME = Object.freeze({ $generated: "claude-utc-timestamp", field: "installed_plugins.selected-row.lastUpdated" });
 function abs(path, name) {
-  if (typeof path !== "string" || !path || path.length > 4096 || /[\x00-\x1f\x7f]/.test(path) || !isAbsolute33(path) || resolve33(path) !== path)
+  if (typeof path !== "string" || !path || path.length > 4096 || /[\x00-\x1f\x7f]/.test(path) || !isAbsolute33(path) || resolve34(path) !== path)
     refuse6(`${name} must be a normalized absolute path`);
 }
 function safeFile(path, name) {
   abs(path, name);
-  for (let at = dirname35(path);; at = dirname35(at)) {
-    const stat3 = lstatSync34(at, { throwIfNoEntry: false });
+  for (let at = dirname36(path);; at = dirname36(at)) {
+    const stat3 = lstatSync35(at, { throwIfNoEntry: false });
     if (!stat3?.isDirectory() || stat3.isSymbolicLink())
       refuse6(`${name} traverses a symlink or non-directory`);
-    if (at === dirname35(at))
+    if (at === dirname36(at))
       break;
   }
-  const stat2 = lstatSync34(path, { throwIfNoEntry: false });
+  const stat2 = lstatSync35(path, { throwIfNoEntry: false });
   if (!stat2?.isFile() || stat2.isSymbolicLink() || stat2.size > MAX_CANDIDATE_BYTES)
     refuse6(`${name} is not a bounded regular file`);
-  return readFileSync33(path);
+  return readFileSync34(path);
 }
 function canonicalDir(path, name) {
   abs(path, name);
-  if (realpathSync17(path) !== path || !lstatSync34(path).isDirectory())
+  if (realpathSync17(path) !== path || !lstatSync35(path).isDirectory())
     refuse6(`${name} is not a canonical directory`);
-  for (let at = path;; at = dirname35(at)) {
-    const stat2 = lstatSync34(at);
+  for (let at = path;; at = dirname36(at)) {
+    const stat2 = lstatSync35(at);
     if (!stat2.isDirectory() || stat2.isSymbolicLink())
       refuse6(`${name} traverses a symlink`);
-    if (at === dirname35(at))
+    if (at === dirname36(at))
       break;
   }
 }
@@ -51361,17 +51649,17 @@ function captureClaudeProspectiveCandidateClosure(root2) {
   const entries = [];
   let bytes = 0;
   const walk2 = (directory3) => {
-    const beforeDirectory = lstatSync34(directory3);
+    const beforeDirectory = lstatSync35(directory3);
     const names = readdirSync19(directory3).sort();
     if (new Set(names).size !== names.length)
       refuse6("candidate contains ambiguous directory entries");
     for (const name of names) {
       if (!name || name === "." || name === ".." || name.includes("/") || name.includes("\\") || /[\x00-\x1f\x7f]/.test(name))
         refuse6("candidate contains an unsupported path member");
-      const path = join49(directory3, name), rel = relative16(root2, path).split(sep21).join("/");
+      const path = join50(directory3, name), rel = relative16(root2, path).split(sep22).join("/");
       if (entries.length >= MAX_CANDIDATE_FILES)
         refuse6("candidate closure exceeds its member limit");
-      const stat2 = lstatSync34(path);
+      const stat2 = lstatSync35(path);
       if (stat2.isSymbolicLink())
         refuse6("candidate closure contains a symlink");
       if (stat2.isDirectory()) {
@@ -51381,14 +51669,14 @@ function captureClaudeProspectiveCandidateClosure(root2) {
         bytes += stat2.size;
         if (bytes > MAX_CANDIDATE_BYTES)
           refuse6("candidate closure exceeds its byte limit");
-        const content = safeFile(path, "candidate member"), after = lstatSync34(path);
+        const content = safeFile(path, "candidate member"), after = lstatSync35(path);
         if (!after.isFile() || after.dev !== stat2.dev || after.ino !== stat2.ino || after.size !== stat2.size || after.mtimeMs !== stat2.mtimeMs || after.ctimeMs !== stat2.ctimeMs)
           refuse6("candidate member changed while being read");
         entries.push([rel, "file", sha7(content)]);
       } else
         refuse6("candidate closure contains a special file");
     }
-    const afterDirectory = lstatSync34(directory3);
+    const afterDirectory = lstatSync35(directory3);
     if (!afterDirectory.isDirectory() || afterDirectory.dev !== beforeDirectory.dev || afterDirectory.ino !== beforeDirectory.ino || afterDirectory.mtimeMs !== beforeDirectory.mtimeMs || afterDirectory.ctimeMs !== beforeDirectory.ctimeMs)
       refuse6("candidate directory changed while being read");
   };
@@ -51396,6 +51684,21 @@ function captureClaudeProspectiveCandidateClosure(root2) {
   entries.sort((a, b) => a[0].localeCompare(b[0]));
   return sha7(JSON.stringify(entries));
 }
+var EXEMPT_PROJECT_SETTINGS = new Map([
+  ["permissions", "object"],
+  ["outputStyle", "string"],
+  ["model", "string"],
+  ["theme", "string"],
+  ["effortLevel", "string"],
+  ["verbose", "boolean"],
+  ["spinnerTipsEnabled", "boolean"]
+]);
+var EXEMPT_PROJECT_PERMISSIONS = new Map([
+  ["allow", "strings"],
+  ["deny", "strings"],
+  ["ask", "strings"],
+  ["defaultMode", "string"]
+]);
 export {
   writeStationSnapshot,
   writeStationHydration,