@hasna/skills 0.10.80 → 0.10.82

package/bin/mcp.js

@@ -23,7 +23,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.80",
+    version: "0.10.82",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -20974,13 +20974,13 @@ function parseSkillFrontmatter(content) {
   }
   return Object.keys(result).length > 0 ? result : null;
 }
-function validateSkillDirectory(name, skillPath, registryMeta) {
+function validateSkillDirectory(name, skillPath, registryMeta, options = {}) {
   const bareName = name;
   const issues = [];
   const warnings = [];
   let packageDeclaresHosted = false;
   let packageSkillSource;
-  let resolvedKind = "executable";
+  let resolvedKind = options.kind ?? "executable";
   const metadata = {
     binCommands: [],
     docFiles: []
@@ -21042,7 +21042,8 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
       }
       if (frontmatter.kind !== undefined) {
         if (VALID_SKILL_KINDS.includes(frontmatter.kind)) {
-          resolvedKind = frontmatter.kind;
+          if (options.kind === undefined)
+            resolvedKind = frontmatter.kind;
         } else {
           add(issues, "skill.kind_invalid", `SKILL.md kind '${frontmatter.kind}' is not one of: ${VALID_SKILL_KINDS.join(", ")}`);
         }
@@ -23030,7 +23031,7 @@ function hashClaudePluginCacheOrphanMarker(path, budget2, changes) {
   if (!before)
     return null;
   const uid = process.getuid?.();
-  if (!before.isFile() || uid === undefined || before.uid !== uid || before.size > 32)
+  if (!before.isFile() || uid === undefined || before.uid !== uid || before.size > 32 || (before.mode & 73) !== 0)
     throw new Error("Invalid Claude orphan marker file or owner");
   const fd = openSync7(path, constants4.O_RDONLY | constants4.O_NOFOLLOW | constants4.O_NONBLOCK);
   try {
@@ -30443,7 +30444,7 @@ function safe2(path) {
 function same2(before, after) {
   return Boolean(after && after.isDirectory() && before.dev === after.dev && before.ino === after.ino && before.mtimeMs === after.mtimeMs && before.ctimeMs === after.ctimeMs);
 }
-function capture(path, budget2, excludedRoots, omittedRoots = [], rows) {
+function capture(path, budget2, excludedRoots, omittedRoots = [], rows, claudeMarkers) {
   safe2(path);
   if (omittedRoots.some((root2) => path === root2 || path.startsWith(root2 + "/")))
     return { path, sha256: null };
@@ -30471,6 +30472,11 @@ function capture(path, budget2, excludedRoots, omittedRoots = [], rows) {
       need3(child2.length <= AGENT_POLICY_LIMITS.pathCharacters, "Native discovery directory path limit exceeded");
       const stat = lstatSync8(child2);
       need3(stat.isFile() || stat.isDirectory(), "Refusing symlink or special native discovery directory member");
+      if (claudeMarkers && isClaudePluginCacheOrphanMarker(child2)) {
+        need3(hashClaudePluginCacheOrphanMarker(child2) !== null, "Claude orphan marker changed while reading directory");
+        if (claudeMarkers === "omit")
+          continue;
+      }
       const row = JSON.stringify([childRelative, stat.isDirectory() ? "directory" : "file"]) + `
 `;
       budget2.bytes += Buffer.byteLength(row);
@@ -30527,25 +30533,33 @@ function verifyDiscoveryDirectoryProjection(directories, omittedRoots, tolerance
       witnessChanged(new NativeDiscoveryWitnessChange("membership", directories[i].path, "Native discovery directory membership changed outside retired Codex roots"), tolerance, tolerance?.acceptsMembership(directories[i].path) === true);
     }
 }
-function captureDiscoveryDirectories(paths, excludedRoots = []) {
+function captureOrdinaryDirectories(paths, excludedRoots, claudeMarkers) {
   need3(Array.isArray(paths) && paths.length <= AGENT_POLICY_LIMITS.discoveryDirectories && new Set(paths).size === paths.length, "Invalid native discovery directory collection");
   const budget2 = { entries: 0, bytes: 0 };
   for (const root of excludedRoots)
     safe2(root);
-  return paths.map((path) => capture(path, budget2, excludedRoots));
+  return paths.map((path) => capture(path, budget2, excludedRoots, [], undefined, claudeMarkers));
+}
+function captureDiscoveryDirectories(paths, excludedRoots = []) {
+  return captureOrdinaryDirectories(paths, excludedRoots, "omit");
 }
 function verifyDiscoveryDirectories(directories, excludedRoots = [], tolerance) {
   need3(Array.isArray(directories) && directories.length <= AGENT_POLICY_LIMITS.discoveryDirectories, "Invalid native discovery directory collection");
   for (const directory of directories)
     need3(directory && typeof directory === "object" && (directory.sha256 === null || typeof directory.sha256 === "string" && /^[a-f0-9]{64}$/.test(directory.sha256)), "Invalid native discovery directory digest");
   const current = captureDiscoveryDirectories(directories.map((directory) => directory.path), excludedRoots);
+  let legacy;
   for (let i = 0;i < directories.length; i++)
     if (current[i].sha256 !== directories[i].sha256) {
+      legacy ??= captureOrdinaryDirectories(directories.map((directory) => directory.path), excludedRoots, "retain");
+      if (legacy[i].sha256 === directories[i].sha256)
+        continue;
       witnessChanged(new NativeDiscoveryWitnessChange("membership", directories[i].path, `Native discovery directory membership changed; run skills hook install with a fresh discovery review: ${directories[i].path}`), tolerance, tolerance?.acceptsMembership(directories[i].path) === true);
     }
 }
 var init_agent_discovery_directories = __esm(() => {
   init_agent_policy_limits();
+  init_claude_plugin_cache_marker();
   init_native_discovery_witness_change();
 });
 
@@ -32310,7 +32324,7 @@ function codexPluginRootCapabilityEntry(name) {
 function isCodexSkillDocumentName(name) {
   return foldCodexPluginEntryName(name) === "skill.md";
 }
-var CODEX_PLUGIN_MANIFEST_LOCATIONS, CODEX_PLUGIN_MANIFEST_DIRECTORIES, CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES;
+var CODEX_PLUGIN_MANIFEST_LOCATIONS, CODEX_PLUGIN_MANIFEST_DIRECTORIES, CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES, CODEX_PLUGIN_MANIFEST_KNOWN_KEYS, CODEX_PLUGIN_DEFAULT_SKILLS_PATHS;
 var init_codex_plugin_capability_paths = __esm(() => {
   CODEX_PLUGIN_MANIFEST_LOCATIONS = Object.freeze([
     "plugin.json",
@@ -32331,6 +32345,8 @@ var init_codex_plugin_capability_paths = __esm(() => {
     "commands",
     "agents"
   ]);
+  CODEX_PLUGIN_MANIFEST_KNOWN_KEYS = Object.freeze(["name", "version", "description", "author", "homepage", "repository", "license", "keywords", "interface", "skills", "apps"]);
+  CODEX_PLUGIN_DEFAULT_SKILLS_PATHS = Object.freeze(["./skills", "./skills/"]);
 });
 
 // src/lib/codex-hook-mcp-dependencies.ts
@@ -33665,11 +33681,14 @@ var init_codex_hook_rpc = __esm(() => {
 });
 
 // src/lib/codex-native-skill-catalog.ts
-import { realpathSync as realpathSync4 } from "fs";
-import { isAbsolute as isAbsolute14, normalize as normalize3 } from "path";
+import { lstatSync as lstatSync14, readdirSync as readdirSync5, readFileSync as readFileSync12, realpathSync as realpathSync4 } from "fs";
+import { basename as basename8, dirname as dirname15, isAbsolute as isAbsolute14, join as join19, normalize as normalize3 } from "path";
+function codexPluginIsRemote(plugin) {
+  return plugin !== undefined && (plugin.sourceType === "remote" || plugin.remotePluginId !== undefined);
+}
 function codexPluginSourceIsConfigControlled(plugin) {
   const remoteRealms = ["openai-curated-remote", "created-by-me-remote", "workspace-directory", "workspace-shared-with-me", "workspace-shared-with-me-private", "workspace-shared-with-me-unlisted"];
-  return Boolean(plugin.sourceType && ["local", "git", "npm"].includes(plugin.sourceType) && plugin.sourceSha256 && /^[a-f0-9]{64}$/.test(plugin.sourceSha256) && !plugin.remotePluginId && !remoteRealms.includes(plugin.id.slice(plugin.id.lastIndexOf("@") + 1)));
+  return Boolean(plugin.sourceType && ["local", "git", "npm"].includes(plugin.sourceType) && plugin.sourceSha256 && /^[a-f0-9]{64}$/.test(plugin.sourceSha256) && !codexPluginIsRemote(plugin) && !remoteRealms.includes(plugin.id.slice(plugin.id.lastIndexOf("@") + 1)));
 }
 function refuse() {
   throw new Error("CODEX_NATIVE_SKILL_CATALOG_INVALID");
@@ -33759,16 +33778,16 @@ var init_codex_native_skill_catalog = __esm(() => {
 });
 
 // src/lib/codex-plugin-skill-controls.ts
-import { basename as basename8, dirname as dirname15, join as join19, relative as relative5, resolve as resolve14, sep as sep8 } from "path";
-import { lstatSync as lstatSync14, readdirSync as readdirSync5, readFileSync as readFileSync12, readlinkSync as readlinkSync3, realpathSync as realpathSync5 } from "fs";
+import { basename as basename9, dirname as dirname16, join as join20, relative as relative5, resolve as resolve14, sep as sep8 } from "path";
+import { lstatSync as lstatSync15, readdirSync as readdirSync6, readFileSync as readFileSync13, readlinkSync as readlinkSync3, realpathSync as realpathSync5 } from "fs";
 function refuse2() {
   throw new Error("CODEX_NATIVE_SKILL_IDENTITY_UNSUPPORTED: review native plugin names and hook controls");
 }
 function codexRemoteInstallReceipt(parent, read) {
   try {
-    if (!lstatSync14(parent).isDirectory() || realpathSync5(parent) !== parent)
+    if (!lstatSync15(parent).isDirectory() || realpathSync5(parent) !== parent)
       return null;
-    const path = join19(parent, ".codex-remote-plugin-install.json"), stat2 = lstatSync14(path, { throwIfNoEntry: false });
+    const path = join20(parent, ".codex-remote-plugin-install.json"), stat2 = lstatSync15(path, { throwIfNoEntry: false });
     if (!stat2?.isFile() || stat2.isSymbolicLink() || stat2.size > 16384)
       return null;
     const text2 = read(path);
@@ -33830,7 +33849,7 @@ function mcpControls(path, read) {
 function isBundledCleanupHooks(root, namespace, value) {
   const object5 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
   const exactKeys = (v, keys) => Object.keys(v).length === keys.length && keys.every((key2) => Object.hasOwn(v, key2));
-  if (basename8(dirname15(root)) !== namespace || basename8(dirname15(dirname15(root))) !== "openai-bundled")
+  if (basename9(dirname16(root)) !== namespace || basename9(dirname16(dirname16(root))) !== "openai-bundled")
     return false;
   const server = namespace === "unified-computer-use" ? "cua_repl" : ["browser", "chrome", "chrome-dev", "chrome-internal", "computer-use"].includes(namespace) ? "node_repl" : undefined;
   if (!server || !object5(value) || !exactKeys(value, ["hooks"]) || !object5(value.hooks))
@@ -33854,8 +33873,8 @@ function readCodexPluginRootControls(root, read) {
   return rootControls(root, read);
 }
 function rootControls(root, read) {
-  const manifestPath = join19(root, ".codex-plugin/plugin.json"), manifestFile = lstatSync14(manifestPath, { throwIfNoEntry: false });
-  if (!lstatSync14(join19(root, ".codex-plugin"), { throwIfNoEntry: false })?.isDirectory() || !manifestFile?.isFile() || manifestFile.size > 1024 * 1024)
+  const manifestPath = join20(root, ".codex-plugin/plugin.json"), manifestFile = lstatSync15(manifestPath, { throwIfNoEntry: false });
+  if (!lstatSync15(join20(root, ".codex-plugin"), { throwIfNoEntry: false })?.isDirectory() || !manifestFile?.isFile() || manifestFile.size > 1024 * 1024)
     refuse2();
   let manifest, manifestSha256;
   try {
@@ -33867,12 +33886,12 @@ function rootControls(root, read) {
   }
   if (!manifest || typeof manifest !== "object" || Array.isArray(manifest) || !identifier2(manifest.name))
     refuse2();
-  const cacheVersion = basename8(root), declaredVersion = manifest.version === undefined ? "" : typeof manifest.version === "string" ? manifest.version.trim() : null;
+  const cacheVersion = basename9(root), declaredVersion = manifest.version === undefined ? "" : typeof manifest.version === "string" ? manifest.version.trim() : null;
   if (declaredVersion === null || (declaredVersion ? declaredVersion !== cacheVersion : cacheVersion !== CODEX_DEFAULT_AGENT_PLUGIN_VERSION))
     refuse2();
-  if (manifest.hooks !== undefined && !isBundledCleanupHooks(root, manifest.name, manifest.hooks) || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync14(join19(root, "hooks"), { throwIfNoEntry: false }))
+  if (manifest.hooks !== undefined && !isBundledCleanupHooks(root, manifest.name, manifest.hooks) || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync15(join20(root, "hooks"), { throwIfNoEntry: false }))
     refuse2();
-  const mcp = join19(root, ".mcp.json"), mcpPresent = lstatSync14(mcp, { throwIfNoEntry: false });
+  const mcp = join20(root, ".mcp.json"), mcpPresent = lstatSync15(mcp, { throwIfNoEntry: false });
   if (manifest.hooks !== undefined && (manifest.mcpServers !== undefined || mcpPresent))
     refuse2();
   if (mcpPresent && (!mcpPresent.isFile() || mcpPresent.isSymbolicLink() || mcpPresent.size > 1024 * 1024 || realpathSync5(mcp) !== mcp))
@@ -33880,7 +33899,7 @@ function rootControls(root, read) {
   if (Boolean(mcpPresent) !== (manifest.mcpServers !== undefined))
     refuse2();
   const mcpSha256 = mcpPresent ? mcpControls(mcp, read) : undefined;
-  const app = join19(root, ".app.json"), present = lstatSync14(app, { throwIfNoEntry: false });
+  const app = join20(root, ".app.json"), present = lstatSync15(app, { throwIfNoEntry: false });
   if (present && (!present.isFile() || present.isSymbolicLink() || present.size > 1024 * 1024))
     refuse2();
   if (manifest.apps !== undefined && !present)
@@ -33912,12 +33931,12 @@ function documentIdentity(document2, cache, read) {
   }
   if (!front || typeof front !== "object" || !identifier2(front.name) || typeof front.description !== "string" || !front.description.trim())
     refuse2();
-  for (let root = dirname15(document2), depth = 0;root.startsWith(cache + sep8) && depth < 12; root = dirname15(root), depth++) {
-    const path = join19(root, ".codex-plugin", "plugin.json");
-    if (!lstatSync14(path, { throwIfNoEntry: false }))
+  for (let root = dirname16(document2), depth = 0;root.startsWith(cache + sep8) && depth < 12; root = dirname16(root), depth++) {
+    const path = join20(root, ".codex-plugin", "plugin.json");
+    if (!lstatSync15(path, { throwIfNoEntry: false }))
       continue;
-    const manifestFile = lstatSync14(path);
-    if (!lstatSync14(join19(root, ".codex-plugin")).isDirectory() || !manifestFile.isFile() || manifestFile.size > 1024 * 1024)
+    const manifestFile = lstatSync15(path);
+    if (!lstatSync15(join20(root, ".codex-plugin")).isDirectory() || !manifestFile.isFile() || manifestFile.size > 1024 * 1024)
       refuse2();
     let manifest;
     try {
@@ -33930,9 +33949,9 @@ function documentIdentity(document2, cache, read) {
     if (!manifest || typeof manifest !== "object" || Array.isArray(manifest) || !identifier2(manifest.name))
       refuse2();
     const declaredVersion = manifest.version === undefined ? "" : typeof manifest.version === "string" ? manifest.version.trim() : null;
-    if (declaredVersion === null || (declaredVersion ? declaredVersion !== basename8(root) : basename8(root) !== CODEX_DEFAULT_AGENT_PLUGIN_VERSION))
+    if (declaredVersion === null || (declaredVersion ? declaredVersion !== basename9(root) : basename9(root) !== CODEX_DEFAULT_AGENT_PLUGIN_VERSION))
       refuse2();
-    return { name: `${manifest.name}:${front.name}`, namespace: manifest.name, pluginParent: dirname15(root), root };
+    return { name: `${manifest.name}:${front.name}`, namespace: manifest.name, pluginParent: dirname16(root), root };
   }
   refuse2();
 }
@@ -33948,7 +33967,7 @@ function classifyCodexPluginCacheDocument(document2, cache, read) {
     return null;
   try {
     const located = documentIdentity(document2, cache, read), parsed = identity3(document2, cache, read);
-    if (!lstatSync14(document2).isFile() || realpathSync5(document2) !== document2 || realpathSync5(located.root) !== located.root || realpathSync5(located.pluginParent) !== located.pluginParent || realpathSync5(join19(located.root, ".codex-plugin/plugin.json")) !== join19(located.root, ".codex-plugin/plugin.json"))
+    if (!lstatSync15(document2).isFile() || realpathSync5(document2) !== document2 || realpathSync5(located.root) !== located.root || realpathSync5(located.pluginParent) !== located.pluginParent || realpathSync5(join20(located.root, ".codex-plugin/plugin.json")) !== join20(located.root, ".codex-plugin/plugin.json"))
       return null;
     const parts = relative5(cache, parsed.pluginParent).split(sep8);
     if (parts.length !== 2 || parts.some((part) => !identifier2(part)) || parts[1] !== parsed.namespace)
@@ -33963,11 +33982,11 @@ function reviewedDisabledCodexPluginParent(cache, parent, controls, rules) {
     const parts = relative5(cache, parent).split(sep8), enrolled = controls.filter((control) => control.pluginParent === parent);
     if (resolve14(parent) !== parent || parts.length !== 2 || parts.some((part) => !identifier2(part)) || !enrolled.length || !Array.isArray(rules))
       return false;
-    for (let cursor = parent;; cursor = dirname15(cursor)) {
-      const stat2 = lstatSync14(cursor, { throwIfNoEntry: false });
+    for (let cursor = parent;; cursor = dirname16(cursor)) {
+      const stat2 = lstatSync15(cursor, { throwIfNoEntry: false });
       if (stat2 && (!stat2.isDirectory() || stat2.isSymbolicLink()))
         return false;
-      if (dirname15(cursor) === cursor)
+      if (dirname16(cursor) === cursor)
         break;
     }
     return enrolled.every((control) => control.namespace === parts[1] && control.pluginId === `${parts[1]}@${parts[0]}` && remotePluginIdentifier(control.remotePluginId) && control.skillsOnly === true && !control.appSha256 && !control.mcpSha256 && control.name.startsWith(control.namespace + ":") && /^[a-f0-9]{64}$/.test(control.manifestSha256) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === control.name && rule.enabled === false) && !rules.some((rule) => (typeof rule?.name === "string" && rule.name.trim() === control.name || typeof rule?.path === "string" && (rule.path === parent || rule.path.startsWith(parent + sep8))) && rule.enabled !== false));
@@ -33976,36 +33995,36 @@ function reviewedDisabledCodexPluginParent(cache, parent, controls, rules) {
   }
 }
 function absentDisabledCodexPluginParent(cache, parent, controls, rules) {
-  return reviewedDisabledCodexPluginParent(cache, parent, controls, rules) && !lstatSync14(parent, { throwIfNoEntry: false });
+  return reviewedDisabledCodexPluginParent(cache, parent, controls, rules) && !lstatSync15(parent, { throwIfNoEntry: false });
 }
 function reviewedRetiredCodexRoot(cache, root, controls, rules, read, allowAbsent = false) {
   try {
-    const parent = dirname15(root), parts = relative5(cache, parent).split(sep8), enrolled = controls.filter((control) => control.pluginParent === parent);
-    if (resolve14(root) !== root || parts.length !== 2 || parts.some((part) => !identifier2(part)) || !basename8(root) || basename8(root) === "latest" || !enrolled.length || !Array.isArray(rules))
+    const parent = dirname16(root), parts = relative5(cache, parent).split(sep8), enrolled = controls.filter((control) => control.pluginParent === parent);
+    if (resolve14(root) !== root || parts.length !== 2 || parts.some((part) => !identifier2(part)) || !basename9(root) || basename9(root) === "latest" || !enrolled.length || !Array.isArray(rules))
       return false;
-    for (let cursor = root;; cursor = dirname15(cursor)) {
-      const stat2 = lstatSync14(cursor, { throwIfNoEntry: false });
+    for (let cursor = root;; cursor = dirname16(cursor)) {
+      const stat2 = lstatSync15(cursor, { throwIfNoEntry: false });
       if (stat2 && (!stat2.isDirectory() || stat2.isSymbolicLink()))
         return false;
-      if (dirname15(cursor) === cursor)
+      if (dirname16(cursor) === cursor)
         break;
     }
     if (!enrolled.every((control) => control.namespace === parts[1] && control.pluginId === `${parts[1]}@${parts[0]}` && remotePluginIdentifier(control.remotePluginId) && control.skillsOnly === true && !control.appSha256 && !control.mcpSha256 && control.name.startsWith(control.namespace + ":") && /^[a-f0-9]{64}$/.test(control.manifestSha256) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === control.name && rule.enabled === false) && !rules.some((rule) => (typeof rule?.name === "string" && rule.name.trim() === control.name || typeof rule?.path === "string" && (rule.path === parent || rule.path === root || rule.path.startsWith(root + sep8))) && rule.enabled !== false)))
       return false;
-    if (!lstatSync14(root, { throwIfNoEntry: false }))
-      return allowAbsent && (lstatSync14(parent, { throwIfNoEntry: false }) ? enrolled.every((control) => remoteInstallationMatches(parent, control.remotePluginId, read)) : absentDisabledCodexPluginParent(cache, parent, controls, rules));
+    if (!lstatSync15(root, { throwIfNoEntry: false }))
+      return allowAbsent && (lstatSync15(parent, { throwIfNoEntry: false }) ? enrolled.every((control) => remoteInstallationMatches(parent, control.remotePluginId, read)) : absentDisabledCodexPluginParent(cache, parent, controls, rules));
     if (!enrolled.every((control) => remoteInstallationMatches(parent, control.remotePluginId, read)))
       return false;
     const parsed = rootControls(root, read);
-    if (JSON.parse(read(join19(root, ".codex-plugin/plugin.json"))).hooks !== undefined)
+    if (JSON.parse(read(join20(root, ".codex-plugin/plugin.json"))).hooks !== undefined)
       return false;
     if (!enrolled.some((control) => control.namespace === parsed.namespace && control.manifestSha256 === parsed.manifestSha256 && !parsed.appSha256 && !parsed.mcpSha256))
       return false;
     let entries = 0;
-    const emptySkills = (directory, depth) => depth <= 64 && readdirSync5(directory).every((name) => {
+    const emptySkills = (directory, depth) => depth <= 64 && readdirSync6(directory).every((name) => {
       if (++entries > 4096 || name === "SKILL.md")
         return false;
-      const path = join19(directory, name), stat2 = lstatSync14(path);
+      const path = join20(directory, name), stat2 = lstatSync15(path);
       return !stat2.isSymbolicLink() && (stat2.isFile() || stat2.isDirectory() && emptySkills(path, depth + 1));
     });
     return emptySkills(root, 0);
@@ -34021,26 +34040,26 @@ function reviewedCodexPluginCapabilitiesUnchanged(cache, controls, read, rules)
     for (const parent of new Set(controls.map((control) => control.pluginParent))) {
       if (absentDisabledCodexPluginParent(cache, parent, controls, rules))
         continue;
-      if (!parent.startsWith(cache + sep8) || !lstatSync14(parent, { throwIfNoEntry: false })?.isDirectory() || realpathSync5(parent) !== parent)
+      if (!parent.startsWith(cache + sep8) || !lstatSync15(parent, { throwIfNoEntry: false })?.isDirectory() || realpathSync5(parent) !== parent)
         return false;
       for (const control of controls.filter((control2) => control2.pluginParent === parent)) {
         if (control.remotePluginId !== undefined && !remoteInstallationMatches(parent, control.remotePluginId, read))
           return false;
       }
-      const names = readdirSync5(parent);
+      const names = readdirSync6(parent);
       entries += names.length;
       if (entries > 4096)
         return false;
       for (const name of names) {
-        let root = join19(parent, name), stat2 = lstatSync14(root);
+        let root = join20(parent, name), stat2 = lstatSync15(root);
         if (stat2.isSymbolicLink()) {
           const target = resolve14(parent, readlinkSync3(root));
-          if (name !== "latest" || dirname15(target) !== parent || !lstatSync14(target).isDirectory() || realpathSync5(target) !== target)
+          if (name !== "latest" || dirname16(target) !== parent || !lstatSync15(target).isDirectory() || realpathSync5(target) !== target)
             return false;
           root = target;
-          stat2 = lstatSync14(root);
+          stat2 = lstatSync15(root);
         }
-        if (!stat2.isDirectory() || ![".codex-plugin/plugin.json", ".app.json", "hooks", ".mcp.json"].some((path) => lstatSync14(join19(root, path), { throwIfNoEntry: false })))
+        if (!stat2.isDirectory() || ![".codex-plugin/plugin.json", ".app.json", "hooks", ".mcp.json"].some((path) => lstatSync15(join20(root, path), { throwIfNoEntry: false })))
           continue;
         const parsed = rootControls(root, read);
         if (!controls.some((control) => control.pluginParent === parent && control.namespace === parsed.namespace && control.manifestSha256 === parsed.manifestSha256 && control.appSha256 === parsed.appSha256 && control.mcpSha256 === parsed.mcpSha256))
@@ -34055,9 +34074,9 @@ function reviewedCodexPluginCapabilitiesUnchanged(cache, controls, read, rules)
 function sourceInputUnchanged(input2, cache, read) {
   try {
     const parts = relative5(cache, input2.pluginParent).split(sep8);
-    if (parts.length !== 2 || parts.some((part) => !identifier2(part)) || parts[1] !== input2.namespace || input2.pluginId !== `${parts[1]}@${parts[0]}` || !codexPluginSourceIsConfigControlled({ id: input2.pluginId, sourceType: "local", sourceSha256: input2.sourceSha256 }) || input2.sourceSha256 !== hashNativeJsonControls(JSON.stringify({ type: "local", path: input2.sourceRoot })) || resolve14(input2.sourceRoot) !== input2.sourceRoot || !lstatSync14(input2.sourceRoot).isDirectory() || realpathSync5(input2.sourceRoot) !== input2.sourceRoot || input2.sourceRoot === cache || input2.sourceRoot.startsWith(cache + sep8) || cache.startsWith(input2.sourceRoot + sep8))
+    if (parts.length !== 2 || parts.some((part) => !identifier2(part)) || parts[1] !== input2.namespace || input2.pluginId !== `${parts[1]}@${parts[0]}` || !codexPluginSourceIsConfigControlled({ id: input2.pluginId, sourceType: "local", sourceSha256: input2.sourceSha256 }) || input2.sourceSha256 !== hashNativeJsonControls(JSON.stringify({ type: "local", path: input2.sourceRoot })) || resolve14(input2.sourceRoot) !== input2.sourceRoot || !lstatSync15(input2.sourceRoot).isDirectory() || realpathSync5(input2.sourceRoot) !== input2.sourceRoot || input2.sourceRoot === cache || input2.sourceRoot.startsWith(cache + sep8) || cache.startsWith(input2.sourceRoot + sep8))
       return false;
-    const path = join19(input2.sourceRoot, ".codex-plugin/plugin.json"), stat2 = lstatSync14(path);
+    const path = join20(input2.sourceRoot, ".codex-plugin/plugin.json"), stat2 = lstatSync15(path);
     if (!stat2.isFile() || stat2.size > 1024 * 1024 || realpathSync5(path) !== path)
       return false;
     const text2 = read(path);
@@ -34080,11 +34099,12 @@ var identifier2 = (v) => typeof v === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(v
 var init_codex_plugin_skill_controls = __esm(() => {
   init_claude_settings_witness();
   init_codex_native_compatibility();
+  init_codex_plugin_capability_paths();
   init_codex_native_skill_catalog();
 });
 
 // src/lib/codex-vendor-refresh.ts
-var CODEX_VENDOR_MARKETPLACES, CODEX_REMOTE_VENDOR_MARKETPLACES, OTHER_PLUGIN_CONTROLS, VENDOR_MANIFEST_KEYS, DEFAULT_SKILLS_PATHS;
+var CODEX_VENDOR_MARKETPLACES, CODEX_REMOTE_VENDOR_MARKETPLACES, OTHER_PLUGIN_CONTROLS;
 var init_codex_vendor_refresh = __esm(() => {
   init_claude_settings_witness();
   init_codex_plugin_skill_controls();
@@ -34092,8 +34112,6 @@ var init_codex_vendor_refresh = __esm(() => {
   CODEX_VENDOR_MARKETPLACES = Object.freeze(["openai-bundled", "openai-curated", "openai-curated-remote"]);
   CODEX_REMOTE_VENDOR_MARKETPLACES = Object.freeze(["openai-curated-remote"]);
   OTHER_PLUGIN_CONTROLS = Object.freeze(CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES.filter((entry) => entry !== ".codex-plugin" && entry !== ".app.json"));
-  VENDOR_MANIFEST_KEYS = Object.freeze(["name", "version", "description", "author", "homepage", "repository", "license", "keywords", "interface", "skills", "apps"]);
-  DEFAULT_SKILLS_PATHS = Object.freeze(["./skills", "./skills/"]);
 });
 
 // src/lib/claude-plugin-manifest-witness.ts
@@ -34537,19 +34555,19 @@ function capturePreparationProcess(child2, platform = process.platform, signalGr
 }
 
 // src/lib/dependency-preparation.ts
-import { constants as constants9, closeSync as closeSync12, fstatSync as fstatSync12, lstatSync as lstatSync15, mkdirSync as mkdirSync5, openSync as openSync12, readFileSync as readFileSync13, readdirSync as readdirSync6, rmdirSync as rmdirSync2, unlinkSync as unlinkSync3, ftruncateSync, writeSync as writeSync2 } from "fs";
-import { join as join20 } from "path";
+import { constants as constants9, closeSync as closeSync12, fstatSync as fstatSync12, lstatSync as lstatSync16, mkdirSync as mkdirSync5, openSync as openSync12, readFileSync as readFileSync14, readdirSync as readdirSync7, rmdirSync as rmdirSync2, unlinkSync as unlinkSync3, ftruncateSync, writeSync as writeSync2 } from "fs";
+import { join as join21 } from "path";
 function hasDependencyPreparationMarker(skillPath) {
   try {
-    lstatSync15(join20(skillPath, DEPENDENCY_PREPARATION_MARKER));
+    lstatSync16(join21(skillPath, DEPENDENCY_PREPARATION_MARKER));
     return true;
   } catch (error61) {
     return error61.code !== "ENOENT";
   }
 }
 function claimPreparation(skillPath) {
-  const marker = join20(skillPath, DEPENDENCY_PREPARATION_MARKER);
-  const state = join20(marker, "state.json"), active = join20(marker, "active");
+  const marker = join21(skillPath, DEPENDENCY_PREPARATION_MARKER);
+  const state = join21(marker, "state.json"), active = join21(marker, "active");
   let created = false;
   try {
     mkdirSync5(marker, { mode: 448 });
@@ -34560,14 +34578,14 @@ function claimPreparation(skillPath) {
   }
   let fd;
   try {
-    if (!lstatSync15(marker).isDirectory() || lstatSync15(marker).isSymbolicLink())
+    if (!lstatSync16(marker).isDirectory() || lstatSync16(marker).isSymbolicLink())
       return;
     if (!created) {
-      if (readdirSync6(marker).some((name) => name !== "state.json"))
+      if (readdirSync7(marker).some((name) => name !== "state.json"))
         return;
-      if (!lstatSync15(state).isFile() || lstatSync15(state).isSymbolicLink() || lstatSync15(state).size > 1024)
+      if (!lstatSync16(state).isFile() || lstatSync16(state).isSymbolicLink() || lstatSync16(state).size > 1024)
         return;
-      const previous = JSON.parse(readFileSync13(state, "utf8"));
+      const previous = JSON.parse(readFileSync14(state, "utf8"));
       if (previous.version !== 1 || previous.status !== "failed" || Object.keys(previous).length !== 2)
         return;
     }
@@ -34700,6 +34718,9 @@ async function prepareSkillDependencies(skillPath, env, timeoutMs = DEFAULT_PREP
 var DEPENDENCY_PREPARATION_MARKER = ".skills-dependency-preparation", RECOVERY = "Skill dependency preparation is incomplete. Confirm no installer is running, successfully run bun install --no-save in the skill directory, then remove only .skills-dependency-preparation. See docs/skill-standard.md#recovering-interrupted-dependency-preparation.", DEFAULT_PREPARATION_TIMEOUT_MS = 60000;
 var init_dependency_preparation = () => {};
 
+// src/lib/codex-native-config.ts
+var init_codex_native_config = () => {};
+
 // src/lib/codex-native-skill-policy.ts
 var MAX_EXECUTABLE_BYTES, MAX_BRIDGE_DOCUMENT_BYTES, CODEX_NATIVE_POLICY_HELPER_MAX_OUTPUT_BYTES, executableDigestMemory;
 var init_codex_native_skill_policy = __esm(() => {
@@ -34711,8 +34732,8 @@ var init_codex_native_skill_policy = __esm(() => {
 
 // src/lib/codex-semantic-cache-witness.ts
 import { createHash as createHash18 } from "crypto";
-import { constants as constants10, closeSync as closeSync13, fstatSync as fstatSync13, lstatSync as lstatSync16, openSync as openSync13, readSync as readSync7, readdirSync as readdirSync7, realpathSync as realpathSync6 } from "fs";
-import { basename as basename9, dirname as dirname16, isAbsolute as isAbsolute15, join as join21, relative as relative6, resolve as resolve15, sep as sep9 } from "path";
+import { constants as constants10, closeSync as closeSync13, fstatSync as fstatSync13, lstatSync as lstatSync17, openSync as openSync13, readSync as readSync7, readdirSync as readdirSync8, realpathSync as realpathSync6 } from "fs";
+import { basename as basename10, dirname as dirname17, isAbsolute as isAbsolute15, join as join22, relative as relative6, resolve as resolve15, sep as sep9 } from "path";
 function codexLocalMarketplaceMapsPlugin(text2, marketplace, plugin) {
   try {
     hashNativeJsonControls(text2);
@@ -34734,7 +34755,7 @@ function codexLocalMarketplaceMapsPlugin(text2, marketplace, plugin) {
   }
 }
 function defaultRead(path) {
-  const before = lstatSync16(path, { throwIfNoEntry: false, bigint: true });
+  const before = lstatSync17(path, { throwIfNoEntry: false, bigint: true });
   if (before === undefined)
     return refuse3();
   if (!before.isFile() || before.isSymbolicLink() || before.size > BigInt(MAX_DOCUMENT_BYTES))
@@ -34825,7 +34846,7 @@ function assertWitnessShape(value) {
     const row = candidate;
     const remote = row.installation === "remote-receipt";
     const local = row.installation === "local-marketplace";
-    if (!exactKeys(row, ["role", "pluginId", "namespace", "pluginParent", "installation", "manifestSha256", "hooksSha256"], remote ? ["remotePluginId", "receiptSha256"] : local ? ["marketplaceSourcePath", "marketplaceSha256"] : []) || row.role !== "reviewed-hook" || !identifier4(row.namespace) || typeof row.pluginId !== "string" || !/^[A-Za-z0-9_-]{1,64}@[A-Za-z0-9_-]{1,64}$/.test(row.pluginId) || typeof row.pluginParent !== "string" || !validPluginParent(String(witness.cacheRoot), row.pluginParent, row.namespace, row.pluginId) || remote && (typeof row.remotePluginId !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(row.remotePluginId) || !digest(row.receiptSha256)) || local && (typeof row.marketplaceSourcePath !== "string" || !isAbsolute15(row.marketplaceSourcePath) || resolve15(row.marketplaceSourcePath) !== row.marketplaceSourcePath || basename9(row.marketplaceSourcePath) !== "marketplace.json" || !digest(row.marketplaceSha256)) || !remote && !local || !digest(row.manifestSha256) || !digest(row.hooksSha256) || hookParentPaths.has(row.pluginParent) || controlParents.has(row.pluginParent) || appOnlyParentPaths.has(row.pluginParent))
+    if (!exactKeys(row, ["role", "pluginId", "namespace", "pluginParent", "installation", "manifestSha256", "hooksSha256"], remote ? ["remotePluginId", "receiptSha256"] : local ? ["marketplaceSourcePath", "marketplaceSha256"] : []) || row.role !== "reviewed-hook" || !identifier4(row.namespace) || typeof row.pluginId !== "string" || !/^[A-Za-z0-9_-]{1,64}@[A-Za-z0-9_-]{1,64}$/.test(row.pluginId) || typeof row.pluginParent !== "string" || !validPluginParent(String(witness.cacheRoot), row.pluginParent, row.namespace, row.pluginId) || remote && (typeof row.remotePluginId !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(row.remotePluginId) || !digest(row.receiptSha256)) || local && (typeof row.marketplaceSourcePath !== "string" || !isAbsolute15(row.marketplaceSourcePath) || resolve15(row.marketplaceSourcePath) !== row.marketplaceSourcePath || basename10(row.marketplaceSourcePath) !== "marketplace.json" || !digest(row.marketplaceSha256)) || !remote && !local || !digest(row.manifestSha256) || !digest(row.hooksSha256) || hookParentPaths.has(row.pluginParent) || controlParents.has(row.pluginParent) || appOnlyParentPaths.has(row.pluginParent))
       refuse3();
     hookParentPaths.add(row.pluginParent);
   }
@@ -34857,23 +34878,23 @@ function assertWitnessShape(value) {
 function assertCanonicalDirectory(path) {
   if (resolve15(path) !== path || realpathSync6(path) !== path)
     refuse3();
-  for (let cursor = path;; cursor = dirname16(cursor)) {
-    const stat2 = lstatSync16(cursor, { throwIfNoEntry: false });
+  for (let cursor = path;; cursor = dirname17(cursor)) {
+    const stat2 = lstatSync17(cursor, { throwIfNoEntry: false });
     if (stat2 && (!stat2.isDirectory() || stat2.isSymbolicLink()))
       refuse3();
-    if (dirname16(cursor) === cursor)
+    if (dirname17(cursor) === cursor)
       break;
   }
 }
 function walkSafeTree(path, state, depth = 0, root = path) {
   if (depth > 64 || ++state.entries > 16384)
     refuse3();
-  const names = readdirSync7(path).sort();
+  const names = readdirSync8(path).sort();
   const files = [];
   for (const name of names) {
     if (!name || name === "." || name === ".." || name.includes(sep9) || ++state.entries > 16384)
       refuse3();
-    const child2 = join21(path, name), stat2 = lstatSync16(child2, { bigint: true });
+    const child2 = join22(path, name), stat2 = lstatSync17(child2, { bigint: true });
     state.members.push(child2);
     state.signature.push(`${relative6(root, child2)}\x00${stat2.mode}\x00${stat2.dev}\x00${stat2.ino}\x00${stat2.isDirectory() ? 0 : stat2.size}`);
     state.timestamps.set(child2, `${stat2.mtimeNs}\x00${stat2.ctimeNs}`);
@@ -34890,7 +34911,7 @@ function walkSafeTree(path, state, depth = 0, root = path) {
 }
 function treeSnapshot(cacheRoot) {
   const state = { entries: 0, members: [], signature: [], timestamps: new Map };
-  const rootStat = lstatSync16(cacheRoot, { throwIfNoEntry: false, bigint: true });
+  const rootStat = lstatSync17(cacheRoot, { throwIfNoEntry: false, bigint: true });
   if (rootStat === undefined)
     return refuse3();
   if (!rootStat.isDirectory() || rootStat.isSymbolicLink() || realpathSync6(cacheRoot) !== cacheRoot)
@@ -34910,7 +34931,7 @@ function assertSameTree(before, after, semanticPaths) {
 function trackedBoundedRead(read) {
   const observed = new Map;
   const stableStat = (path, max) => {
-    const stat2 = lstatSync16(path, { throwIfNoEntry: false, bigint: true });
+    const stat2 = lstatSync17(path, { throwIfNoEntry: false, bigint: true });
     if (stat2 === undefined)
       return refuse3();
     if (!stat2.isFile() || stat2.isSymbolicLink() || stat2.size > BigInt(max) || realpathSync6(path) !== path)
@@ -34966,7 +34987,7 @@ function controlProjection(controls, read) {
       ...control.mcpSha256 === undefined ? {} : { mcpSha256: control.mcpSha256 }
     };
     if (row.remotePluginId !== undefined) {
-      const receipt = join21(row.pluginParent, ".codex-remote-plugin-install.json"), stat2 = lstatSync16(receipt, { throwIfNoEntry: false });
+      const receipt = join22(row.pluginParent, ".codex-remote-plugin-install.json"), stat2 = lstatSync17(receipt, { throwIfNoEntry: false });
       if (!stat2?.isFile() || stat2.isSymbolicLink() || stat2.size > 16384)
         refuse3();
       try {
@@ -34998,10 +35019,10 @@ function appOnlyParentProjection(cacheRoot, parents2, read) {
     if (resolve15(parent.pluginParent) !== parent.pluginParent || parts.length !== 2 || parts.some((part) => !identifier4(part)) || parent.pluginId !== `${parent.namespace}@${parts[0]}` || parts[1] !== parent.namespace || seen.has(parent.pluginParent))
       refuse3();
     seen.add(parent.pluginParent);
-    const parentStat = lstatSync16(parent.pluginParent, { throwIfNoEntry: false });
+    const parentStat = lstatSync17(parent.pluginParent, { throwIfNoEntry: false });
     if (!parentStat?.isDirectory() || parentStat.isSymbolicLink() || realpathSync6(parent.pluginParent) !== parent.pluginParent)
       refuse3();
-    const receipt = join21(parent.pluginParent, ".codex-remote-plugin-install.json"), receiptStat = lstatSync16(receipt, { throwIfNoEntry: false });
+    const receipt = join22(parent.pluginParent, ".codex-remote-plugin-install.json"), receiptStat = lstatSync17(receipt, { throwIfNoEntry: false });
     if (!receiptStat?.isFile() || receiptStat.isSymbolicLink() || receiptStat.size > 16384)
       refuse3();
     let receiptText = "";
@@ -35014,13 +35035,13 @@ function appOnlyParentProjection(cacheRoot, parents2, read) {
     } catch {
       refuse3();
     }
-    const versions2 = readdirSync7(parent.pluginParent).filter((name) => name !== ".codex-remote-plugin-install.json");
+    const versions2 = readdirSync8(parent.pluginParent).filter((name) => name !== ".codex-remote-plugin-install.json");
     if (!versions2.length || versions2.length > 4096)
       refuse3();
     const materializations = versions2.map((version2) => {
       if (!/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(version2))
         refuse3();
-      const root = join21(parent.pluginParent, version2), stat2 = lstatSync16(root, { throwIfNoEntry: false });
+      const root = join22(parent.pluginParent, version2), stat2 = lstatSync17(root, { throwIfNoEntry: false });
       if (!stat2?.isDirectory() || stat2.isSymbolicLink() || realpathSync6(root) !== root)
         refuse3();
       const rootControls2 = readCodexPluginRootControls(root, read);
@@ -35060,7 +35081,7 @@ function assertJsonValue(value, depth = 0, budget2 = { members: 0 }) {
   }
 }
 function reviewedHookControls(root, read) {
-  const manifestPath = join21(root, ".codex-plugin/plugin.json"), hooksPath = join21(root, "hooks/hooks.json");
+  const manifestPath = join22(root, ".codex-plugin/plugin.json"), hooksPath = join22(root, "hooks/hooks.json");
   let manifest, manifestSha256, hooks, hooksSha256;
   try {
     const manifestText = read(manifestPath);
@@ -35073,7 +35094,7 @@ function reviewedHookControls(root, read) {
   } catch {
     return refuse3();
   }
-  if (!plainObject(manifest) || !exactKeys(manifest, ["name", "version", "hooks"], ["description"]) || !identifier4(manifest.name) || typeof manifest.version !== "string" || manifest.version !== basename9(root) || manifest.hooks !== "./hooks/hooks.json" || manifest.description !== undefined && (typeof manifest.description !== "string" || !manifest.description.trim() || manifest.description.length > 1024))
+  if (!plainObject(manifest) || !exactKeys(manifest, ["name", "version", "hooks"], ["description"]) || !identifier4(manifest.name) || typeof manifest.version !== "string" || manifest.version !== basename10(root) || manifest.hooks !== "./hooks/hooks.json" || manifest.description !== undefined && (typeof manifest.description !== "string" || !manifest.description.trim() || manifest.description.length > 1024))
     refuse3();
   const manifestRecord = manifest;
   if (!plainObject(hooks) || !exactKeys(hooks, ["hooks"], ["description"]) || !plainObject(hooks.hooks) || hooks.description !== undefined && typeof hooks.description !== "string")
@@ -35104,16 +35125,16 @@ function reviewedHookParentProjection(cacheRoot, parents2, read) {
   const seen = new Set, rows = [];
   for (const parent of parents2) {
     const remote = parent?.installation === "remote-receipt", local = parent?.installation === "local-marketplace";
-    if (!parent || !exactKeys(parent, ["installation", "namespace", "pluginId", "pluginParent", "role"], remote ? ["remotePluginId"] : local ? ["marketplaceSourcePath", "marketplaceSha256"] : []) || parent.role !== "reviewed-hook" || !identifier4(parent.namespace) || !/^[A-Za-z0-9_-]{1,64}@[A-Za-z0-9_-]{1,64}$/.test(parent.pluginId) || typeof parent.pluginParent !== "string" || remote && (typeof parent.remotePluginId !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(parent.remotePluginId)) || local && (typeof parent.marketplaceSourcePath !== "string" || !isAbsolute15(parent.marketplaceSourcePath) || resolve15(parent.marketplaceSourcePath) !== parent.marketplaceSourcePath || basename9(parent.marketplaceSourcePath) !== "marketplace.json" || !digest(parent.marketplaceSha256)) || !remote && !local)
+    if (!parent || !exactKeys(parent, ["installation", "namespace", "pluginId", "pluginParent", "role"], remote ? ["remotePluginId"] : local ? ["marketplaceSourcePath", "marketplaceSha256"] : []) || parent.role !== "reviewed-hook" || !identifier4(parent.namespace) || !/^[A-Za-z0-9_-]{1,64}@[A-Za-z0-9_-]{1,64}$/.test(parent.pluginId) || typeof parent.pluginParent !== "string" || remote && (typeof parent.remotePluginId !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(parent.remotePluginId)) || local && (typeof parent.marketplaceSourcePath !== "string" || !isAbsolute15(parent.marketplaceSourcePath) || resolve15(parent.marketplaceSourcePath) !== parent.marketplaceSourcePath || basename10(parent.marketplaceSourcePath) !== "marketplace.json" || !digest(parent.marketplaceSha256)) || !remote && !local)
       refuse3();
     const parts = relative6(cacheRoot, parent.pluginParent).split(sep9);
     if (!isAbsolute15(parent.pluginParent) || resolve15(parent.pluginParent) !== parent.pluginParent || parts.length !== 2 || parts.some((part) => !identifier4(part)) || parts[1] !== parent.namespace || parent.pluginId !== `${parent.namespace}@${parts[0]}` || seen.has(parent.pluginParent))
       refuse3();
     seen.add(parent.pluginParent);
-    const parentStat = lstatSync16(parent.pluginParent, { throwIfNoEntry: false });
+    const parentStat = lstatSync17(parent.pluginParent, { throwIfNoEntry: false });
     if (!parentStat?.isDirectory() || parentStat.isSymbolicLink() || realpathSync6(parent.pluginParent) !== parent.pluginParent)
       refuse3();
-    const receiptPath = join21(parent.pluginParent, ".codex-remote-plugin-install.json"), receiptStat = lstatSync16(receiptPath, { throwIfNoEntry: false });
+    const receiptPath = join22(parent.pluginParent, ".codex-remote-plugin-install.json"), receiptStat = lstatSync17(receiptPath, { throwIfNoEntry: false });
     let receiptText;
     if (remote) {
       if (!receiptStat?.isFile() || receiptStat.isSymbolicLink() || receiptStat.size > MAX_RECEIPT_BYTES)
@@ -35140,10 +35161,10 @@ function reviewedHookParentProjection(cacheRoot, parents2, read) {
       if (createHash18("sha256").update(marketplaceText).digest("hex") !== parent.marketplaceSha256 || !codexLocalMarketplaceMapsPlugin(marketplaceText, parts[0], parent.namespace))
         refuse3();
     }
-    const materializations = readdirSync7(parent.pluginParent).filter((name) => name !== ".codex-remote-plugin-install.json").map((version2) => {
+    const materializations = readdirSync8(parent.pluginParent).filter((name) => name !== ".codex-remote-plugin-install.json").map((version2) => {
       if (!/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(version2))
         refuse3();
-      const root = join21(parent.pluginParent, version2), stat2 = lstatSync16(root, { throwIfNoEntry: false });
+      const root = join22(parent.pluginParent, version2), stat2 = lstatSync17(root, { throwIfNoEntry: false });
       if (!stat2?.isDirectory() || stat2.isSymbolicLink() || realpathSync6(root) !== root)
         refuse3();
       const controls = reviewedHookControls(root, read);
@@ -35172,17 +35193,17 @@ function assertParents(cacheRoot, controls, appOnlyParents, hookParents, files,
     const rel = relative6(cacheRoot, file2), parts = rel.split(sep9);
     if (parts.length < 3 || !identifier4(parts[0]) || !identifier4(parts[1]))
       refuse3();
-    actual.add(join21(cacheRoot, parts[0], parts[1]));
+    actual.add(join22(cacheRoot, parts[0], parts[1]));
   }
-  const actualMarkets = readdirSync7(cacheRoot);
+  const actualMarkets = readdirSync8(cacheRoot);
   if (actualMarkets.length !== expectedMarkets.size || actualMarkets.some((market) => !expectedMarkets.has(market)))
     refuse3();
   for (const market of actualMarkets) {
-    const marketPath = join21(cacheRoot, market), marketStat = lstatSync16(marketPath);
+    const marketPath = join22(cacheRoot, market), marketStat = lstatSync17(marketPath);
     if (!identifier4(market) || !marketStat.isDirectory() || marketStat.isSymbolicLink())
       refuse3();
-    for (const plugin of readdirSync7(marketPath)) {
-      const parent = join21(marketPath, plugin), stat2 = lstatSync16(parent);
+    for (const plugin of readdirSync8(marketPath)) {
+      const parent = join22(marketPath, plugin), stat2 = lstatSync17(parent);
       if (!identifier4(plugin) || !stat2.isDirectory() || stat2.isSymbolicLink())
         refuse3();
       actual.add(parent);
@@ -35194,8 +35215,8 @@ function assertParents(cacheRoot, controls, appOnlyParents, hookParents, files,
     const parts = relative6(cacheRoot, member).split(sep9);
     if (parts.length < 3)
       continue;
-    const parent = join21(cacheRoot, parts[0], parts[1]);
-    const root = join21(parent, parts[2]);
+    const parent = join22(cacheRoot, parts[0], parts[1]);
+    const root = join22(parent, parts[2]);
     const base = parts[parts.length - 1], folded = foldCodexPluginEntryName(base);
     if (parts.length === 3 && (codexPluginRootCapabilityEntry(base) !== null || isCodexSkillDocumentName(base)))
       refuse3();
@@ -35208,11 +35229,11 @@ function assertParents(cacheRoot, controls, appOnlyParents, hookParents, files,
       refuse3();
     if (parts.some((part) => CODEX_PLUGIN_MANIFEST_DIRECTORIES.includes(foldCodexPluginEntryName(part))) && (parts.length < 4 || parts[3] !== ".codex-plugin" || (parts.length === 4 ? base !== ".codex-plugin" : parts.length !== 5 || base !== "plugin.json")))
       refuse3();
-    if ([".app.json", ".mcp.json"].includes(folded) && (parts.length !== 4 || dirname16(member) !== root))
+    if ([".app.json", ".mcp.json"].includes(folded) && (parts.length !== 4 || dirname17(member) !== root))
       refuse3();
     if ([".app.json", ".mcp.json"].includes(folded) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
       refuse3();
-    if ((rootEntry === "hooks" || folded === "hooks.json") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base !== "hooks" : base !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join21(cacheRoot, parts[0], parts[1]))))
+    if ((rootEntry === "hooks" || folded === "hooks.json") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base !== "hooks" : base !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join22(cacheRoot, parts[0], parts[1]))))
       refuse3();
   }
 }
@@ -35242,14 +35263,14 @@ function assertSkillMaterializations(cacheRoot, controls, files, read) {
     const expectedNames = new Set(rows.map((row) => row.name));
     if (expectedNames.size !== rows.length)
       refuse3();
-    const entries = readdirSync7(parent);
+    const entries = readdirSync8(parent);
     let roots = 0;
     for (const entry of entries) {
       if (entry === ".codex-remote-plugin-install.json")
         continue;
       if (!/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(entry))
         refuse3();
-      const root = join21(parent, entry), stat2 = lstatSync16(root, { throwIfNoEntry: false });
+      const root = join22(parent, entry), stat2 = lstatSync17(root, { throwIfNoEntry: false });
       if (!stat2?.isDirectory() || stat2.isSymbolicLink() || realpathSync6(root) !== root)
         refuse3();
       const actualControls = readCodexPluginRootControls(root, read);
@@ -35274,8 +35295,8 @@ function assertSkillMaterializations(cacheRoot, controls, files, read) {
     const rel = relative6(cacheRoot, file2).split(sep9);
     if (rel.length < 4)
       refuse3();
-    const parent = join21(cacheRoot, rel[0], rel[1]);
-    if (!byParent.has(parent) || !expectedByRoot.has(`${byParent.get(parent)[0].pluginId}\x00${join21(parent, rel[2])}`))
+    const parent = join22(cacheRoot, rel[0], rel[1]);
+    if (!byParent.has(parent) || !expectedByRoot.has(`${byParent.get(parent)[0].pluginId}\x00${join22(parent, rel[2])}`))
       refuse3();
   }
   return expectedByRoot;
@@ -35336,11 +35357,11 @@ function captureCodexSemanticCacheWitness(options) {
     const rootNames = new Map;
     for (const document2 of docs) {
       const rel = relative6(options.cacheRoot, document2).split(sep9);
-      if (appOnlyParents.some((parent) => parent.pluginParent === join21(options.cacheRoot, rel[0], rel[1])))
+      if (appOnlyParents.some((parent) => parent.pluginParent === join22(options.cacheRoot, rel[0], rel[1])))
         refuse3();
-      if (hookParents.some((parent) => parent.pluginParent === join21(options.cacheRoot, rel[0], rel[1])))
+      if (hookParents.some((parent) => parent.pluginParent === join22(options.cacheRoot, rel[0], rel[1])))
         refuse3();
-      const documentStat = lstatSync16(document2, { throwIfNoEntry: false });
+      const documentStat = lstatSync17(document2, { throwIfNoEntry: false });
       if (!documentStat?.isFile() || documentStat.isSymbolicLink() || documentStat.size > MAX_DOCUMENT_BYTES)
         refuse3();
       const identity4 = classifyCodexPluginCacheDocument(document2, options.cacheRoot, read);
@@ -35474,8 +35495,8 @@ var init_codex_node_modules = __esm(() => {
 });
 
 // src/lib/managed-policy.ts
-import { closeSync as closeSync14, constants as constants11, fstatSync as fstatSync14, lstatSync as lstatSync17, openSync as openSync14, readSync as readSync8 } from "fs";
-import { join as join22 } from "path";
+import { closeSync as closeSync14, constants as constants11, fstatSync as fstatSync14, lstatSync as lstatSync18, openSync as openSync14, readSync as readSync8 } from "fs";
+import { join as join23 } from "path";
 function refusal(reason2 = "is unreadable") {
   return new SkillSelectionError("INVALID_AGENT_POLICY", `The Skills agent loading policy ${reason2}; refusing legacy fallback.`);
 }
@@ -35500,10 +35521,10 @@ function parseManagedSkillPolicy(text2) {
   return value;
 }
 function readManagedSkillPolicySnapshot(dataDir2 = getDataDirReadOnly()) {
-  const path = join22(dataDir2, "agent-policy.json");
+  const path = join23(dataDir2, "agent-policy.json");
   let descriptor, observed = false;
   try {
-    const stat2 = lstatSync17(path);
+    const stat2 = lstatSync18(path);
     observed = true;
     if (!stat2.isFile() || stat2.isSymbolicLink())
       throw refusal();
@@ -35529,7 +35550,7 @@ function readManagedSkillPolicySnapshot(dataDir2 = getDataDirReadOnly()) {
     return { text: text2, value: parseManagedSkillPolicy(text2) };
   } catch (error61) {
     if (error61.code === "ENOENT" && !observed) {
-      if (lstatSync17(path, { throwIfNoEntry: false }) === undefined)
+      if (lstatSync18(path, { throwIfNoEntry: false }) === undefined)
         return null;
     }
     if (error61 instanceof SkillSelectionError)
@@ -35655,8 +35676,8 @@ var init_hook_diagnostics = __esm(() => {
 
 // src/lib/agent-sumi.ts
 import { spawnSync as spawnSync4 } from "child_process";
-import { accessSync, constants as constants12, existsSync as existsSync8, lstatSync as lstatSync18, realpathSync as realpathSync7, statSync as statSync8 } from "fs";
-import { delimiter, isAbsolute as isAbsolute16, join as join23, resolve as resolve16 } from "path";
+import { accessSync, constants as constants12, existsSync as existsSync8, lstatSync as lstatSync19, realpathSync as realpathSync7, statSync as statSync8 } from "fs";
+import { delimiter, isAbsolute as isAbsolute16, join as join24, resolve as resolve16 } from "path";
 function recordWithKeys(value, keys) {
   return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length === keys.length && keys.every((key2) => Object.hasOwn(value, key2));
 }
@@ -35706,11 +35727,11 @@ function validPathPlan(value, home, cwd) {
   const legacyConfigRoot = value.legacyRoots.config;
   if (typeof configRoot !== "string" || legacyConfigRoot !== null && typeof legacyConfigRoot !== "string")
     return false;
-  if (value.configFiles.canonical !== join23(configRoot, "sumi.json") || value.skillRoots.canonical !== join23(configRoot, "skills"))
+  if (value.configFiles.canonical !== join24(configRoot, "sumi.json") || value.skillRoots.canonical !== join24(configRoot, "skills"))
     return false;
   if (legacyConfigRoot === null)
     return value.configFiles.legacy === null && value.skillRoots.legacy === null;
-  return value.configFiles.legacy === join23(legacyConfigRoot, "sumi.json") && value.skillRoots.legacy === join23(legacyConfigRoot, "skills");
+  return value.configFiles.legacy === join24(legacyConfigRoot, "sumi.json") && value.skillRoots.legacy === join24(legacyConfigRoot, "skills");
 }
 function sumiPathPlan(home, cwd = process.cwd(), env = process.env) {
   for (const key2 of ["SUMI_CONFIG", "SUMI_CONFIG_CONTENT"])
@@ -35761,7 +35782,7 @@ function selectedConfigDirectory(plan) {
   const canonical9 = plan.roots.config, legacy = plan.legacyRoots.config;
   if (legacy === null)
     return existsSync8(canonical9) ? realpathSync7(canonical9) : canonical9;
-  const canonicalStat = lstatSync18(canonical9, { throwIfNoEntry: false }), legacyStat = lstatSync18(legacy, { throwIfNoEntry: false });
+  const canonicalStat = lstatSync19(canonical9, { throwIfNoEntry: false }), legacyStat = lstatSync19(legacy, { throwIfNoEntry: false });
   if (canonicalStat && legacyStat && realpathSync7(canonical9) !== realpathSync7(legacy))
     throw new Error("Sumi config roots conflict; complete native home adoption before Skills integration");
   const selected = canonicalStat ? canonical9 : legacyStat ? legacy : canonical9;
@@ -35776,7 +35797,7 @@ function sumiConfigDirectory(home, env = process.env, cwd = process.cwd()) {
   return selectedConfigDirectory(sumiPathPlan(home, cwd, env));
 }
 function sumiConfigPath(home, cwd = process.cwd(), env = process.env) {
-  return join23(sumiConfigDirectory(home, env, cwd), "sumi.json");
+  return join24(sumiConfigDirectory(home, env, cwd), "sumi.json");
 }
 var SUMI_PATH_SELECTORS, SUMI_PATH_KEYS, SUMI_PATH_OUTPUT_LIMIT, SumiPathResolverError;
 var init_agent_sumi = __esm(() => {
@@ -35795,9 +35816,9 @@ var init_agent_sumi = __esm(() => {
 });
 
 // src/lib/codex-hook-trust-files.ts
-import { closeSync as closeSync15, constants as constants13, fstatSync as fstatSync15, fsyncSync as fsyncSync3, lstatSync as lstatSync19, openSync as openSync15, readlinkSync as readlinkSync4, readSync as readSync9, writeFileSync as writeFileSync4 } from "fs";
+import { closeSync as closeSync15, constants as constants13, fstatSync as fstatSync15, fsyncSync as fsyncSync3, lstatSync as lstatSync20, openSync as openSync15, readlinkSync as readlinkSync4, readSync as readSync9, writeFileSync as writeFileSync4 } from "fs";
 import { createHash as createHash20 } from "crypto";
-import { dirname as dirname17, isAbsolute as isAbsolute17, resolve as resolve17 } from "path";
+import { dirname as dirname18, isAbsolute as isAbsolute17, resolve as resolve17 } from "path";
 function need8(value, code) {
   if (!value)
     throw new Error(`CODEX_HOOK_TRUST_${code}`);
@@ -35806,18 +35827,18 @@ function trustedAncestorOwner(uid2) {
   return BigInt(uid2) === 0n || BigInt(uid2) === BigInt(process.getuid());
 }
 function safeParents(file2) {
-  for (let p = dirname17(file2);; p = dirname17(p)) {
-    const s = lstatSync19(p);
+  for (let p = dirname18(file2);; p = dirname18(p)) {
+    const s = lstatSync20(p);
     need8(s.isDirectory() && !s.isSymbolicLink() && trustedAncestorOwner(s.uid), "UNSAFE_PARENT");
     need8((s.mode & 18) === 0 || s.uid === 0 && (s.mode & 512) !== 0, "UNSAFE_PARENT");
-    if (dirname17(p) === p)
+    if (dirname18(p) === p)
       break;
   }
 }
 function snapshot(file2, privateFile = false, options = {}) {
   const readOnlyPackage = options.readOnlyPackage === true && !privateFile;
   safeParents(file2);
-  const initial = lstatSync19(file2, { bigint: true });
+  const initial = lstatSync20(file2, { bigint: true });
   need8(initial.isFile() && initial.uid === BigInt(process.getuid()) && (initial.nlink === 1n || readOnlyPackage && initial.nlink > 1n) && (initial.mode & 0o022n) === 0n && (!privateFile || (initial.mode & 0o777n) === 0o600n), "UNSAFE_FILE");
   need8(initial.size <= 8n * 1024n * 1024n, "FILE_BOUND");
   const fd = openSync15(file2, constants13.O_RDONLY | constants13.O_NOFOLLOW | constants13.O_NONBLOCK);
@@ -35832,7 +35853,7 @@ function snapshot(file2, privateFile = false, options = {}) {
         break;
       length += n2;
     }
-    need8(length === Number(before.size) && sameStat(before, fstatSync15(fd, { bigint: true })) && sameStat(before, lstatSync19(file2, { bigint: true })), "INPUT_CHANGED");
+    need8(length === Number(before.size) && sameStat(before, fstatSync15(fd, { bigint: true })) && sameStat(before, lstatSync20(file2, { bigint: true })), "INPUT_CHANGED");
     const content = bytes.subarray(0, length), text2 = new TextDecoder("utf-8", { fatal: true }).decode(content);
     return { file: file2, privateFile, readOnlyPackage, text: text2, bytes: content, stat: before, sha256: createHash20("sha256").update(content).digest("hex") };
   } finally {
@@ -35899,25 +35920,25 @@ var init_runtime_launcher = __esm(() => {
 
 // src/lib/retained-review-artifacts.ts
 import { createHash as createHash21 } from "crypto";
-import { constants as constants14, closeSync as closeSync16, fstatSync as fstatSync16, fsyncSync as fsyncSync4, lstatSync as lstatSync20, mkdirSync as mkdirSync6, openSync as openSync16, readSync as readSync10, writeSync as writeSync3 } from "fs";
-import { dirname as dirname18, isAbsolute as isAbsolute18, join as join24, resolve as resolve18, sep as sep10 } from "path";
+import { constants as constants14, closeSync as closeSync16, fstatSync as fstatSync16, fsyncSync as fsyncSync4, lstatSync as lstatSync21, mkdirSync as mkdirSync6, openSync as openSync16, readSync as readSync10, writeSync as writeSync3 } from "fs";
+import { dirname as dirname19, isAbsolute as isAbsolute18, join as join25, resolve as resolve18, sep as sep10 } from "path";
 function keys(value, names) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length === names.length && names.every((name) => Object.hasOwn(value, name)));
 }
 function safe4(path) {
   need9(typeof path === "string" && path.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute18(path) && resolve18(path) === path && !/[\x00-\x1f\x7f]/.test(path));
-  for (let cursor = path;; cursor = dirname18(cursor)) {
-    const stat2 = lstatSync20(cursor, { throwIfNoEntry: false });
+  for (let cursor = path;; cursor = dirname19(cursor)) {
+    const stat2 = lstatSync21(cursor, { throwIfNoEntry: false });
     need9(!stat2?.isSymbolicLink());
     if (cursor !== path && stat2)
       need9(stat2.isDirectory());
-    if (dirname18(cursor) === cursor)
+    if (dirname19(cursor) === cursor)
       break;
   }
 }
 function readExact(path) {
   safe4(path);
-  const before = lstatSync20(path, { throwIfNoEntry: false });
+  const before = lstatSync21(path, { throwIfNoEntry: false });
   need9(before?.isFile() && before.nlink === 1 && before.size <= AGENT_POLICY_LIMITS.discoveryRawSourceBytes && (before.mode & 63) === 0 && (process.getuid === undefined || before.uid === process.getuid()));
   const fd = openSync16(path, constants14.O_RDONLY | constants14.O_NOFOLLOW | constants14.O_NONBLOCK);
   try {
@@ -35931,7 +35952,7 @@ function readExact(path) {
       offset += count;
     }
     need9(readSync10(fd, Buffer.alloc(1), 0, 1, null) === 0);
-    const after = fstatSync16(fd), current = lstatSync20(path, { throwIfNoEntry: false });
+    const after = fstatSync16(fd), current = lstatSync21(path, { throwIfNoEntry: false });
     safe4(path);
     need9(current && opened.dev === current.dev && opened.ino === current.ino && opened.mode === current.mode && opened.uid === current.uid && opened.size === current.size && opened.mtimeMs === current.mtimeMs && opened.ctimeMs === current.ctimeMs && current.nlink === 1 && opened.mode === after.mode && opened.uid === after.uid && after.nlink === 1 && opened.size === after.size && opened.mtimeMs === after.mtimeMs && opened.ctimeMs === after.ctimeMs);
     const text2 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes);
@@ -35948,20 +35969,20 @@ function catalogDigest(text2) {
   } catch {
     return refuse4();
   }
-  need9(catalog && typeof catalog === "object" && !Array.isArray(catalog) && Object.keys(catalog).every((key2) => ["version", "cwd", "skills", "plugins"].includes(key2)) && typeof catalog.version === "string" && supportsCodexNativeCapability(catalog.version, "installed-plugin-review"));
+  need9(catalog && typeof catalog === "object" && !Array.isArray(catalog) && Object.keys(catalog).every((key2) => ["version", "cwd", "skills", "plugins", "remoteReceipts"].includes(key2)) && typeof catalog.version === "string" && supportsCodexNativeCapability(catalog.version, "installed-plugin-review"));
   const skills = projectCodexNativeSkillCatalog({ data: [{ cwd: catalog.cwd, errors: [], skills: catalog.skills }] }, catalog.cwd);
   const plugins = catalog.plugins === undefined ? undefined : projectCodexInstalledPluginEntries(catalog.plugins);
   return sha3(JSON.stringify({ version: catalog.version, cwd: catalog.cwd, skills, ...plugins === undefined ? {} : { plugins } }));
 }
 function retainedArtifactPath(metadata) {
-  return join24(metadata.storeRoot, "agent-discovery", "artifacts", metadata.sha256, "catalog.json");
+  return join25(metadata.storeRoot, "agent-discovery", "artifacts", metadata.sha256, "catalog.json");
 }
 function validRetainedArtifact(value) {
   return keys(value, ["version", "kind", "storeRoot", "originalPath", "sha256", "catalogSha256"]) && value.version === 1 && value.kind === "codex-native-catalog" && hex3(value.sha256) && hex3(value.catalogSha256) && [value.storeRoot, value.originalPath].every((path) => typeof path === "string" && isAbsolute18(path) && resolve18(path) === path && path.length <= AGENT_POLICY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(path));
 }
 function privateStore(storeRoot) {
   safe4(storeRoot);
-  const stat2 = lstatSync20(storeRoot, { throwIfNoEntry: false });
+  const stat2 = lstatSync21(storeRoot, { throwIfNoEntry: false });
   need9(!stat2 || stat2.isDirectory() && (stat2.mode & 18) === 0 && (process.getuid === undefined || stat2.uid === process.getuid()));
 }
 function verifyRetainedReviewArtifact(source, storeRoot) {
@@ -35970,8 +35991,8 @@ function verifyRetainedReviewArtifact(source, storeRoot) {
   privateStore(artifact.storeRoot);
   const text2 = readExact(source.path);
   need9(sha3(text2) === artifact.sha256 && catalogDigest(text2) === artifact.catalogSha256);
-  for (let parent = dirname18(source.path);parent !== artifact.storeRoot; parent = dirname18(parent)) {
-    const stat2 = lstatSync20(parent);
+  for (let parent = dirname19(source.path);parent !== artifact.storeRoot; parent = dirname19(parent)) {
+    const stat2 = lstatSync21(parent);
     need9(stat2.isDirectory() && (stat2.mode & 63) === 0 && (process.getuid === undefined || stat2.uid === process.getuid()));
   }
 }
@@ -35991,6 +36012,8 @@ var init_retained_review_artifacts = __esm(() => {
 var init_agent_integration = __esm(() => {
   init_sumi_settings_witness();
   init_codex_corpus_write();
+  init_codex_hook_rpc();
+  init_codex_native_config();
   init_codex_plugin_skill_controls();
   init_codex_native_skill_policy();
   init_codex_native_skill_catalog();
@@ -36050,20 +36073,20 @@ var init_skill_aliases = __esm(() => {
 });
 
 // src/lib/project-state.ts
-import { existsSync as existsSync9, mkdirSync as mkdirSync7, readFileSync as readFileSync14, writeFileSync as writeFileSync5 } from "fs";
-import { join as join25 } from "path";
+import { existsSync as existsSync9, mkdirSync as mkdirSync7, readFileSync as readFileSync15, writeFileSync as writeFileSync5 } from "fs";
+import { join as join26 } from "path";
 function getProjectStateDir(targetDir = process.cwd()) {
-  return join25(targetDir, SKILLS_PROJECT_DIR);
+  return join26(targetDir, SKILLS_PROJECT_DIR);
 }
 function getProjectConfigPath(targetDir = process.cwd()) {
-  return join25(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
+  return join26(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
 }
 function loadProjectConfig(targetDir = process.cwd()) {
   const path = getProjectConfigPath(targetDir);
   if (!existsSync9(path))
     return null;
   try {
-    return normalizeProjectConfig(JSON.parse(readFileSync14(path, "utf-8")));
+    return normalizeProjectConfig(JSON.parse(readFileSync15(path, "utf-8")));
   } catch {
     return null;
   }
@@ -36171,8 +36194,8 @@ var init_project_state = __esm(() => {
 });
 
 // src/lib/installer.ts
-import { existsSync as existsSync10, readFileSync as readFileSync15, rmSync as rmSync2 } from "fs";
-import { join as join26 } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync16, rmSync as rmSync2 } from "fs";
+import { join as join27 } from "path";
 import { homedir as homedir2 } from "os";
 function getSkillPath(name) {
   const skillName = normalizeSkillName(getCanonicalSkillName(name));
@@ -36182,7 +36205,7 @@ function getSkillPath(name) {
   const extensionPath = findExtensionSkillPath(skillName);
   if (extensionPath)
     return extensionPath;
-  return join26(getPortableSkillsRoot(), skillName);
+  return join27(getPortableSkillsRoot(), skillName);
 }
 function getCanonicalSkillName(name) {
   return getSkill(name)?.name ?? resolveSkillAlias(normalizeSkillSlug(name));
@@ -36236,11 +36259,11 @@ function getAgentSkillsDir(agent, scope = "global", projectDir) {
   const base = projectDir || process.cwd();
   switch (agent) {
     case "pi":
-      return scope === "project" ? join26(base, ".pi", "skills") : join26(homedir2(), ".pi", "agent", "skills");
+      return scope === "project" ? join27(base, ".pi", "skills") : join27(homedir2(), ".pi", "agent", "skills");
     case "opencode":
-      return scope === "project" ? join26(base, ".opencode", "skills") : join26(homedir2(), ".config", "opencode", "skills");
+      return scope === "project" ? join27(base, ".opencode", "skills") : join27(homedir2(), ".config", "opencode", "skills");
     default:
-      return scope === "project" ? join26(base, `.${agent}`, "skills") : join26(homedir2(), `.${agent}`, "skills");
+      return scope === "project" ? join27(base, `.${agent}`, "skills") : join27(homedir2(), `.${agent}`, "skills");
   }
 }
 function warnMissingDependencies(name, targetDir) {
@@ -36255,11 +36278,11 @@ function warnMissingDependencies(name, targetDir) {
   }
 }
 function readBundledSkillVersion(name) {
-  const pkgPath = join26(getSkillPath(name), "package.json");
+  const pkgPath = join27(getSkillPath(name), "package.json");
   if (!existsSync10(pkgPath))
     return "unknown";
   try {
-    const pkg = JSON.parse(readFileSync15(pkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync16(pkgPath, "utf-8"));
     return pkg.version || "unknown";
   } catch {
     return "unknown";
@@ -36324,16 +36347,16 @@ var init_skill_doc_file = __esm(() => {
 });
 
 // src/lib/skillinfo.ts
-import { existsSync as existsSync11, readFileSync as readFileSync16 } from "fs";
-import { join as join27 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync17 } from "fs";
+import { join as join28 } from "path";
 function isInstructionSkillDir(skillPath, meta3) {
   if (meta3?.kind === "instruction")
     return true;
-  const skillMdPath = join27(skillPath, "SKILL.md");
+  const skillMdPath = join28(skillPath, "SKILL.md");
   if (!existsSync11(skillMdPath))
     return false;
   try {
-    return parseSkillFrontmatter(readFileSync16(skillMdPath, "utf-8"))?.kind === "instruction";
+    return parseSkillFrontmatter(readFileSync17(skillMdPath, "utf-8"))?.kind === "instruction";
   } catch {
     return false;
   }
@@ -36343,9 +36366,9 @@ function getSkillDocs(name) {
   if (!existsSync11(skillPath))
     return null;
   return {
-    skillMd: readIfExists(join27(skillPath, "SKILL.md")),
-    readme: readIfExists(join27(skillPath, "README.md")),
-    claudeMd: readIfExists(join27(skillPath, "CLAUDE.md"))
+    skillMd: readIfExists(join28(skillPath, "SKILL.md")),
+    readme: readIfExists(join28(skillPath, "README.md")),
+    claudeMd: readIfExists(join28(skillPath, "CLAUDE.md"))
   };
 }
 function getSkillBestDoc(name, file2) {
@@ -36361,14 +36384,14 @@ function getSkillRequirements(name) {
     return null;
   const texts = [];
   for (const file2 of ["SKILL.md", "README.md", "CLAUDE.md", ".env.example", ".env.local.example"]) {
-    const content = readIfExists(join27(skillPath, file2));
+    const content = readIfExists(join28(skillPath, file2));
     if (content)
       texts.push(content);
   }
   const meta3 = getSkill(name);
   let dependencies = {};
   try {
-    dependencies = JSON.parse(readFileSync16(join27(skillPath, "package.json"), "utf8")).dependencies || {};
+    dependencies = JSON.parse(readFileSync17(join28(skillPath, "package.json"), "utf8")).dependencies || {};
   } catch {}
   return getSkillRequirementsFromContent(name, texts, dependencies, meta3);
 }
@@ -36430,13 +36453,13 @@ async function runSkill(name, args, options = {}) {
       error: `Skill '${name}' is an instruction skill (kind: instruction) and is not runnable. Instruction skills are consumed by coding agents via SKILL.md, not executed with 'skills run'.`
     };
   }
-  const pkgPath = join27(skillPath, "package.json");
+  const pkgPath = join28(skillPath, "package.json");
   if (!existsSync11(pkgPath)) {
     return { exitCode: 1, error: `No package.json in skill '${name}'` };
   }
   let entryPoint2;
   try {
-    const pkg = JSON.parse(readFileSync16(pkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync17(pkgPath, "utf-8"));
     if (pkg.bin) {
       const binValues = Object.values(pkg.bin);
       entryPoint2 = binValues[0];
@@ -36450,12 +36473,12 @@ async function runSkill(name, args, options = {}) {
   } catch {
     return { exitCode: 1, error: `Failed to parse package.json for skill '${name}'` };
   }
-  const entryPath = join27(skillPath, entryPoint2);
+  const entryPath = join28(skillPath, entryPoint2);
   if (!existsSync11(entryPath)) {
     return { exitCode: 1, error: `Entry point '${entryPoint2}' not found in skill '${name}'` };
   }
   const env = { ...process.env, ...options.env };
-  if (!existsSync11(join27(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
+  if (!existsSync11(join28(skillPath, "node_modules")) || hasDependencyPreparationMarker(skillPath)) {
     const failure = await prepareSkillDependencies(skillPath, env, options.preparationTimeoutMs);
     if (failure)
       return failure;
@@ -36481,7 +36504,7 @@ async function runSkill(name, args, options = {}) {
 function detectProjectSkills(cwd = process.cwd()) {
   let pkg;
   try {
-    pkg = JSON.parse(readFileSync16(join27(cwd, "package.json"), "utf8"));
+    pkg = JSON.parse(readFileSync17(join28(cwd, "package.json"), "utf8"));
   } catch {
     return { detected: [], recommended: [] };
   }
@@ -36518,7 +36541,7 @@ function extractEnvVars(text2) {
 function readIfExists(path) {
   try {
     if (existsSync11(path)) {
-      return readFileSync16(path, "utf-8");
+      return readFileSync17(path, "utf-8");
     }
   } catch {}
   return null;
@@ -36846,7 +36869,7 @@ var init_selected_manifest = __esm(() => {
 });
 
 // src/lib/plugin-admission.ts
-import { isAbsolute as isAbsolute19, join as join28, resolve as resolve19 } from "path";
+import { isAbsolute as isAbsolute19, join as join29, resolve as resolve19 } from "path";
 function validatePluginTarget(value) {
   pluginKeys(value, ["schemaVersion", "pluginId", "registrations", "native", "resolver"]);
   pluginNeed(value.schemaVersion === 1, "Invalid plugin admission target");
@@ -37007,12 +37030,12 @@ function pluginResolverCommand(binding) {
 }
 function pluginBindingPath(storeRoot, id) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id), "Invalid plugin binding identifier");
-  return join28(storeRoot, "bindings", `${id}.json`);
+  return join29(storeRoot, "bindings", `${id}.json`);
 }
 function pluginReceiptPath(storeRoot, id, digest2) {
   pluginNeed(/^[a-f0-9]{64}$/.test(id), "Invalid plugin binding identifier");
   pluginDigest(digest2);
-  return join28(storeRoot, "receipts", id, `${digest2.slice(7)}.json`);
+  return join29(storeRoot, "receipts", id, `${digest2.slice(7)}.json`);
 }
 function readPluginBinding(storeRoot, id) {
   const value = readPluginJson(pluginBindingPath(storeRoot, id));
@@ -37032,7 +37055,7 @@ function readPluginAdmissionReceipt(storeRoot, id, digest2) {
   pluginNeed(receipt.plan.bindingId === id && receipt.plan.planDigest === digest2, "Plugin receipt identity differs from its filename");
   const binding = readPluginBinding(storeRoot, id);
   pluginNeed(canonicalJson(binding) === canonicalJson(receipt.plan.binding) && receipt.plan.sourceCommand === pluginResolverCommand(binding), "Plugin receipt binding changed");
-  pluginNeed(receipt.materializedPath === join28(storeRoot, "objects", id, digest2.slice(7)), "Plugin receipt points outside its immutable materialization");
+  pluginNeed(receipt.materializedPath === join29(storeRoot, "objects", id, digest2.slice(7)), "Plugin receipt points outside its immutable materialization");
   pluginText(receipt.admittedAt, 64);
   pluginNeed(Number.isFinite(Date.parse(receipt.admittedAt)), "Invalid plugin admission time");
   return receipt;
@@ -37049,8 +37072,8 @@ var init_plugin_admission = __esm(() => {
 });
 
 // src/lib/plugin-discovery.ts
-import { closeSync as closeSync17, constants as constants15, fstatSync as fstatSync17, lstatSync as lstatSync21, openSync as openSync17, opendirSync as opendirSync3, readSync as readSync11 } from "fs";
-import { basename as basename10, dirname as dirname19, isAbsolute as isAbsolute20, join as join29, resolve as resolve20 } from "path";
+import { closeSync as closeSync17, constants as constants15, fstatSync as fstatSync17, lstatSync as lstatSync22, openSync as openSync17, opendirSync as opendirSync3, readSync as readSync11 } from "fs";
+import { basename as basename11, dirname as dirname20, isAbsolute as isAbsolute20, join as join30, resolve as resolve20 } from "path";
 function validateManagedPluginWitnesses(value) {
   pluginNeed(Array.isArray(value) && value.length > 0 && value.length <= PLUGIN_PROJECTION_LIMITS.registrations, "Invalid managed plugin witness collection");
   const seen = new Set;
@@ -37065,15 +37088,15 @@ function validateManagedPluginWitnesses(value) {
 function safe5(path) {
   pluginText(path);
   pluginNeed(isAbsolute20(path) && resolve20(path) === path, "Invalid plugin registry path");
-  for (let at = path;; at = dirname19(at)) {
-    pluginNeed(!lstatSync21(at, { throwIfNoEntry: false })?.isSymbolicLink(), "Plugin registry path traverses a symlink");
-    if (at === dirname19(at))
+  for (let at = path;; at = dirname20(at)) {
+    pluginNeed(!lstatSync22(at, { throwIfNoEntry: false })?.isSymbolicLink(), "Plugin registry path traverses a symlink");
+    if (at === dirname20(at))
       break;
   }
 }
 function readRegistry(path) {
   safe5(path);
-  const initial = lstatSync21(path);
+  const initial = lstatSync22(path);
   pluginNeed(initial.isFile() && initial.size <= 1024 * 1024, "Plugin registry is not a bounded regular file");
   const fd = openSync17(path, constants15.O_RDONLY | constants15.O_NOFOLLOW | constants15.O_NONBLOCK);
   try {
@@ -37087,7 +37110,7 @@ function readRegistry(path) {
         break;
       length += count;
     }
-    const after = fstatSync17(fd), current = lstatSync21(path);
+    const after = fstatSync17(fd), current = lstatSync22(path);
     safe5(path);
     pluginNeed(length <= 1024 * 1024 && length === opened.size && after.size === opened.size && after.mtimeMs === opened.mtimeMs && after.ctimeMs === opened.ctimeMs && current.dev === opened.dev && current.ino === opened.ino && current.mtimeMs === opened.mtimeMs && current.ctimeMs === opened.ctimeMs, "Plugin registry changed during read");
     let value;
@@ -37117,7 +37140,7 @@ function hashManagedPluginRegistry(path, managed) {
     seen.add(target.pluginId);
     const rows = plugins[target.pluginId];
     pluginNeed(Array.isArray(rows) && rows.length === target.registrations.length, "Managed plugin registration membership changed");
-    const [name, market] = target.pluginId.split("@"), cacheRoot = join29(dirname19(path), "cache", market, name);
+    const [name, market] = target.pluginId.split("@"), cacheRoot = join30(dirname20(path), "cache", market, name);
     const scopes = new Set, approvals = new Map, currentFiles = new Map;
     plugins[target.pluginId] = rows.map((row) => {
       pluginNeed(pluginObject(row), "Invalid managed plugin registration");
@@ -37130,10 +37153,10 @@ function hashManagedPluginRegistry(path, managed) {
       pluginText(row.sourceProducerPath);
       pluginText(row.lastUpdated, 64);
       pluginNeed(Number.isFinite(Date.parse(row.lastUpdated)), "Invalid managed plugin update timestamp");
-      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join29(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
+      pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join30(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
-        const digest2 = `sha256:${basename10(producer)}`;
+        const digest2 = `sha256:${basename11(producer)}`;
         const receipt2 = readPluginAdmissionReceipt(witness.storeRoot, witness.bindingId, digest2);
         pluginNeed(receipt2.materializedPath === producer, "Managed producer path is not an approved immutable projection");
         if (!verified.has(producer)) {
@@ -37160,7 +37183,7 @@ function hashManagedPluginRegistry(path, managed) {
       return Object.fromEntries(Object.entries(row).filter(([key2]) => !["version", "installPath", "sourceProducerPath", "previousProducerPaths", "lastUpdated"].includes(key2)));
     });
     safe5(cacheRoot);
-    const before = lstatSync21(cacheRoot);
+    const before = lstatSync22(cacheRoot);
     pluginNeed(before.isDirectory(), "Invalid managed plugin cache root");
     const directory = opendirSync3(cacheRoot), names = [];
     try {
@@ -37173,17 +37196,17 @@ function hashManagedPluginRegistry(path, managed) {
       directory.closeSync();
     }
     for (const version2 of names.sort()) {
-      const files = pluginFileWitnesses(snapshotPluginTree(join29(cacheRoot, version2), { nativeRuntime: `claude-${target.native.version}` }));
+      const files = pluginFileWitnesses(snapshotPluginTree(join30(cacheRoot, version2), { nativeRuntime: `claude-${target.native.version}` }));
       verifiedBytes += files.reduce((total, file2) => total + file2.size, 0);
       pluginNeed(verifiedBytes <= 256 * 1024 * 1024, "Managed plugin verification exceeds its aggregate byte budget");
       const serialized = JSON.stringify(files);
-      const expected = currentFiles.get(join29(cacheRoot, version2));
+      const expected = currentFiles.get(join30(cacheRoot, version2));
       pluginNeed(expected === undefined || serialized === expected, "Current native cache differs from its exact registered producer receipt");
       pluginNeed([...approvals.values()].some((receipt) => nativeVersionMatches(version2, receipt) && JSON.stringify(receipt.plan.files) === serialized), "A retained native plugin cache version differs from every approved projection");
     }
     for (const row of rows)
       pluginNeed(names.includes(row.version), "Managed native plugin installation is missing");
-    const after = lstatSync21(cacheRoot);
+    const after = lstatSync22(cacheRoot);
     safe5(cacheRoot);
     pluginNeed(before.dev === after.dev && before.ino === after.ino && before.mtimeMs === after.mtimeMs && before.ctimeMs === after.ctimeMs, "Managed cache version membership changed during verification");
   }
@@ -37198,8 +37221,8 @@ var init_plugin_discovery = __esm(() => {
 
 // src/lib/claude-marketplace-registry.ts
 import { createHash as createHash22 } from "crypto";
-import { closeSync as closeSync18, constants as constants16, fstatSync as fstatSync18, lstatSync as lstatSync22, openSync as openSync18, readSync as readSync12 } from "fs";
-import { basename as basename11, dirname as dirname20, isAbsolute as isAbsolute21, resolve as resolve21 } from "path";
+import { closeSync as closeSync18, constants as constants16, fstatSync as fstatSync18, lstatSync as lstatSync23, openSync as openSync18, readSync as readSync12 } from "fs";
+import { basename as basename12, dirname as dirname21, isAbsolute as isAbsolute21, resolve as resolve21 } from "path";
 function need10(value, reason2) {
   if (!value)
     throw new Error(`Claude marketplace registry ${reason2}`);
@@ -37209,19 +37232,19 @@ function absolutePath4(value) {
 }
 function parents2(path) {
   const result = [];
-  for (let at = dirname20(path);; at = dirname20(at)) {
-    const stat2 = lstatSync22(at, { bigint: true });
+  for (let at = dirname21(path);; at = dirname21(at)) {
+    const stat2 = lstatSync23(at, { bigint: true });
     need10(stat2.isDirectory() && !stat2.isSymbolicLink(), "path traverses a symlink or non-directory");
     result.push([at, stat2]);
-    if (at === dirname20(at))
+    if (at === dirname21(at))
       return result;
   }
 }
 function readRegistry2(path, budget2) {
   absolutePath4(path);
-  need10(basename11(path) === "known_marketplaces.json", "requires known_marketplaces.json");
+  need10(basename12(path) === "known_marketplaces.json", "requires known_marketplaces.json");
   need10(Number.isSafeInteger(budget2.remaining) && budget2.remaining >= 0, "has an invalid byte budget");
-  const ancestors2 = parents2(path), initial = lstatSync22(path, { bigint: true });
+  const ancestors2 = parents2(path), initial = lstatSync23(path, { bigint: true });
   need10(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
   need10(initial.size <= BigInt(budget2.remaining), "exceeds its aggregate byte limit");
   const fd = openSync18(path, constants16.O_RDONLY | constants16.O_NOFOLLOW | constants16.O_NONBLOCK);
@@ -37236,10 +37259,10 @@ function readRegistry2(path, budget2) {
         break;
       length += count;
     }
-    const after = fstatSync18(fd, { bigint: true }), current = lstatSync22(path, { bigint: true });
+    const after = fstatSync18(fd, { bigint: true }), current = lstatSync23(path, { bigint: true });
     need10(current.isFile() && sameFile2(opened, after) && sameFile2(after, current) && BigInt(length) === opened.size, "changed during read");
     for (const [ancestor, before] of ancestors2) {
-      const now = lstatSync22(ancestor, { bigint: true });
+      const now = lstatSync23(ancestor, { bigint: true });
       need10(now.isDirectory() && before.dev === now.dev && before.ino === now.ino && before.mode === now.mode, "parent changed during read");
     }
     budget2.remaining -= length;
@@ -37426,8 +37449,8 @@ var init_codex_hook_discovery_recovery = __esm(() => {
 
 // src/lib/agent-discovery.ts
 import { createHash as createHash24 } from "crypto";
-import { lstatSync as lstatSync23, readFileSync as readFileSync17, readdirSync as readdirSync8, realpathSync as realpathSync8 } from "fs";
-import { basename as basename12, dirname as dirname21, isAbsolute as isAbsolute22, join as join30, relative as relative7, resolve as resolve22, sep as sep11 } from "path";
+import { lstatSync as lstatSync24, readFileSync as readFileSync18, readdirSync as readdirSync9, realpathSync as realpathSync8 } from "fs";
+import { basename as basename13, dirname as dirname22, isAbsolute as isAbsolute22, join as join31, relative as relative7, resolve as resolve22, sep as sep11 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual5 } from "util";
 function discoveryExecutable(agent) {
   const command = DISCOVERY_RUNTIME_COMMANDS[agent];
@@ -37450,10 +37473,10 @@ function parseConfig(text2, path, toml = false) {
 function safe6(path) {
   if (!isAbsolute22(path) || path.includes("\x00"))
     throw new Error("Expected an absolute native discovery path");
-  for (let cursor = path;; cursor = dirname21(cursor)) {
-    if (lstatSync23(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
+  for (let cursor = path;; cursor = dirname22(cursor)) {
+    if (lstatSync24(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
       throw new Error(`Refusing symlink native discovery input: ${cursor}`);
-    if (dirname21(cursor) === cursor)
+    if (dirname22(cursor) === cursor)
       break;
   }
 }
@@ -37461,19 +37484,19 @@ function read(path, changes) {
   safe6(path);
   if (changes?.has(path))
     return changes.get(path);
-  const stat2 = lstatSync23(path, { throwIfNoEntry: false });
+  const stat2 = lstatSync24(path, { throwIfNoEntry: false });
   if (!stat2)
     return null;
   if (!stat2.isFile() || stat2.size > 16 * 1024 * 1024)
     throw new Error(`Unsupported or oversized native discovery input: ${path}`);
-  return readFileSync17(path, "utf8");
+  return readFileSync18(path, "utf8");
 }
 function assertReviewedClaudeCacheClosures(home, config2, review, canonical9) {
   const enabledIds = Object.entries(config2.enabledPlugins ?? {}).filter(([, enabled]) => enabled === true).map(([id]) => id);
   if (enabledIds.length === 0)
     return;
-  const registryPath = canonical9(join30(home, ".claude/plugins/installed_plugins.json"));
-  const cacheAliasRoot = join30(home, ".claude/plugins/cache");
+  const registryPath = canonical9(join31(home, ".claude/plugins/installed_plugins.json"));
+  const cacheAliasRoot = join31(home, ".claude/plugins/cache");
   const cacheRoot = canonical9(cacheAliasRoot);
   const registryText = read(registryPath);
   if (registryText === null)
@@ -37494,7 +37517,7 @@ function assertReviewedClaudeCacheClosures(home, config2, review, canonical9) {
         throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
       }
       if ([cacheAliasRoot, cacheRoot].some((root) => row.installPath === root || row.installPath.startsWith(root + sep11))) {
-        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename12(row.installPath) !== row.version)) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename13(row.installPath) !== row.version)) {
           throw new Error("Reviewed Claude discovery has a malformed active cache registration");
         }
         if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute22(row.projectPath) && resolve22(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
@@ -37515,11 +37538,11 @@ function assertReviewedClaudeCacheClosures(home, config2, review, canonical9) {
   };
   for (const root of activeRoots) {
     safe6(root);
-    const rootStat = lstatSync23(root, { throwIfNoEntry: false });
+    const rootStat = lstatSync24(root, { throwIfNoEntry: false });
     if (!rootStat?.isDirectory() || realpathSync8(root) !== root)
       throw new Error("Reviewed Claude active cache plugin root is missing or unsafe");
-    const manifestPath = join30(root, ".claude-plugin/plugin.json");
-    const manifestStat = lstatSync23(manifestPath, { throwIfNoEntry: false });
+    const manifestPath = join31(root, ".claude-plugin/plugin.json");
+    const manifestStat = lstatSync24(manifestPath, { throwIfNoEntry: false });
     let manifest;
     if (manifestStat) {
       if (!manifestStat.isFile())
@@ -37534,8 +37557,8 @@ function assertReviewedClaudeCacheClosures(home, config2, review, canonical9) {
     } else if (!review.sources.some((source) => source.path === manifestPath && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined)) {
       throw new Error("Reviewed Claude active cache plugin manifest absence requires a path-bytes witness");
     }
-    const roots = new Set([join30(root, "skills")]);
-    if (lstatSync23(join30(root, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
+    const roots = new Set([join31(root, "skills")]);
+    if (lstatSync24(join31(root, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
       roots.add(root);
     const declared = manifest?.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
     if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
@@ -37544,13 +37567,13 @@ function assertReviewedClaudeCacheClosures(home, config2, review, canonical9) {
       const path = resolve22(root, value);
       if (path !== root && !path.startsWith(root + sep11))
         throw new Error("Reviewed Claude active cache plugin skill path escapes its root");
-      roots.add(path.endsWith(`${sep11}SKILL.md`) ? dirname21(path) : path);
+      roots.add(path.endsWith(`${sep11}SKILL.md`) ? dirname22(path) : path);
     }
     for (const skillRoot of roots)
       if (!review.roots.includes(skillRoot))
         throw new Error("Reviewed Claude active cache plugin skill root is not covered");
-    const hooksPath = join30(root, "hooks/hooks.json");
-    const hooksStat = lstatSync23(hooksPath, { throwIfNoEntry: false });
+    const hooksPath = join31(root, "hooks/hooks.json");
+    const hooksStat = lstatSync24(hooksPath, { throwIfNoEntry: false });
     if (hooksStat) {
       if (!hooksStat.isFile())
         throw new Error("Reviewed Claude plugin hook manifest is unsupported");
@@ -37688,18 +37711,18 @@ function absentCodexSkillRoots(binding, tolerance) {
     return [];
   if (binding.agent !== "codex" || !Array.isArray(controls) || controls.length > 4096)
     throw new Error("Invalid disabled Codex discovery proof");
-  if (binding.method !== "reviewed" || controls.every((control) => lstatSync23(control.pluginParent, { throwIfNoEntry: false })))
+  if (binding.method !== "reviewed" || controls.every((control) => lstatSync24(control.pluginParent, { throwIfNoEntry: false })))
     return [];
-  const cache = dirname21(dirname21(controls[0].pluginParent)), config2 = join30(dirname21(dirname21(cache)), "config.toml");
+  const cache = dirname22(dirname22(controls[0].pluginParent)), config2 = join31(dirname22(dirname22(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config2 && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || !codexConfigWitnessCurrent(source, tolerance))
     throw new Error("Missing current disabled Codex configuration witness");
   const rules = Bun.TOML.parse(read(config2)).skills?.config ?? [];
   return [...new Set(controls.map((control) => control.pluginParent))].filter((parent) => !codexDirectHookSelects(cache, parent) && absentDisabledCodexPluginParent(cache, parent, controls, rules));
 }
-function codexDirectHookSelects(cache, root, configPath = join30(dirname21(dirname21(cache)), "config.toml")) {
-  const codex = dirname21(configPath), config2 = Bun.TOML.parse(read(configPath) ?? "");
-  const hooks = read(join30(codex, "hooks.json"));
+function codexDirectHookSelects(cache, root, configPath = join31(dirname22(dirname22(cache)), "config.toml")) {
+  const codex = dirname22(configPath), config2 = Bun.TOML.parse(read(configPath) ?? "");
+  const hooks = read(join31(codex, "hooks.json"));
   if (hooks !== null)
     hashNativeJsonControls(hooks);
   return JSON.stringify(config2.hooks ?? {}).includes(root) || hooks !== null && JSON.stringify(JSON.parse(hooks)).includes(root);
@@ -37711,7 +37734,7 @@ function retiredCodexRoots(binding, tolerance) {
   const controls = binding.codexDisabledPluginSkills;
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !Array.isArray(controls) || !controls.length || !Array.isArray(proof.roots) || proof.roots.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.roots).size !== proof.roots.length || !Array.isArray(proof.directories) || proof.parents !== undefined && (!Array.isArray(proof.parents) || proof.parents.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.parents).size !== proof.parents.length) || !proof.roots.length && !proof.parents?.length)
     throw new Error("Invalid retired Codex materialization proof");
-  const cache = dirname21(dirname21(controls[0].pluginParent)), config2 = join30(dirname21(dirname21(cache)), "config.toml");
+  const cache = dirname22(dirname22(controls[0].pluginParent)), config2 = join31(dirname22(dirname22(cache)), "config.toml");
   const source = binding.sources.find((source2) => source2.path === config2 && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
   if (!source || !codexConfigWitnessCurrent(source, tolerance))
     throw new Error("Missing current retired Codex configuration witness");
@@ -37719,7 +37742,7 @@ function retiredCodexRoots(binding, tolerance) {
   if ((proof.parents ?? []).some((parent) => codexDirectHookSelects(cache, parent) || !reviewedDisabledCodexPluginParent(cache, parent, controls, rules)) || !reviewedCodexPluginCapabilitiesUnchanged(cache, controls, (path) => read(path), rules))
     throw new Error("Retired Codex parent capabilities changed");
   for (const root of proof.roots) {
-    const manifest = binding.sources.find((source2) => source2.path === join30(root, ".codex-plugin/plugin.json") && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && [undefined, "bytes"].includes(source2.hashMode));
+    const manifest = binding.sources.find((source2) => source2.path === join31(root, ".codex-plugin/plugin.json") && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && [undefined, "bytes"].includes(source2.hashMode));
     if (!manifest || codexDirectHookSelects(cache, root) || !reviewedRetiredCodexRoot(cache, root, controls, rules, (path) => read(path), true))
       throw new Error("Retired Codex materialization changed");
   }
@@ -37730,7 +37753,7 @@ function retainableAbsentWitness(source) {
     return null;
   if ([undefined, "bytes"].includes(source.hashMode))
     return "bytes";
-  if (source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join30(sep11, ".claude-plugin", "plugin.json")))
+  if (source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join31(sep11, ".claude-plugin", "plugin.json")))
     return "claude-plugin-manifest-v1";
   if (source.hashMode === CLAUDE_ORPHAN_MARKER_MODE && source.sha256 !== null && isClaudePluginCacheOrphanMarker(source.path))
     return CLAUDE_ORPHAN_MARKER_MODE;
@@ -37755,11 +37778,11 @@ function absentRetiredClaudeRoots(binding) {
     const cache = source.path.slice(0, at + marker.length - 1), parts = source.path.slice(at + marker.length).split(sep11);
     if (parts.length < 4 || parts.slice(0, 3).some((part) => !part || part === "." || part === ".."))
       continue;
-    const root = join30(cache, ...parts.slice(0, 3));
+    const root = join31(cache, ...parts.slice(0, 3));
     safe6(root);
-    if (lstatSync23(root, { throwIfNoEntry: false }))
+    if (lstatSync24(root, { throwIfNoEntry: false }))
       continue;
-    const claude = dirname21(dirname21(cache)), settings = join30(claude, "settings.json"), registry2 = join30(claude, "plugins/installed_plugins.json");
+    const claude = dirname22(dirname22(cache)), settings = join31(claude, "settings.json"), registry2 = join31(claude, "plugins/installed_plugins.json");
     const full = (path) => binding.sources.find((item) => item.path === path && item.sha256 !== null && item.format === undefined && item.fields === undefined);
     const configSource = full(settings), registrySource = full(registry2);
     if (!configSource || !registrySource || projected(configSource) !== configSource.sha256 || projected(registrySource) !== registrySource.sha256)
@@ -37802,9 +37825,9 @@ function absentRetiredClaudeRoots(binding) {
     if (!targetValid || !targetScopes.has("user\x00"))
       continue;
     const active = rows[0]?.installPath;
-    if (typeof active !== "string" || rows[0]?.version !== basename12(active) || dirname21(active) !== dirname21(root) || active === root || !lstatSync23(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync8(active) !== active)
+    if (typeof active !== "string" || rows[0]?.version !== basename13(active) || dirname22(active) !== dirname22(root) || active === root || !lstatSync24(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync8(active) !== active)
       continue;
-    const activeManifest = full(join30(active, ".claude-plugin/plugin.json"));
+    const activeManifest = full(join31(active, ".claude-plugin/plugin.json"));
     if (!activeManifest || projected(activeManifest) !== activeManifest.sha256)
       continue;
     result.add(root);
@@ -37815,10 +37838,10 @@ function codexSemanticCacheSourceRole(source, cacheRoot, parents3, hookParents =
   if (!isAbsolute22(source.path) || resolve22(source.path) !== source.path || /[\x00-\x1f\x7f]/.test(source.path) || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.reviewArtifact !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes")
     return false;
   const parts = relative7(cacheRoot, source.path).split(sep11);
-  if (parts.length < 3 || !parents3.includes(join30(cacheRoot, parts[0], parts[1])))
+  if (parts.length < 3 || !parents3.includes(join31(cacheRoot, parts[0], parts[1])))
     return false;
   const tail = parts.slice(3).join("/");
-  const parent = join30(cacheRoot, parts[0], parts[1]);
+  const parent = join31(cacheRoot, parts[0], parts[1]);
   return parts.length === 5 && tail === ".codex-plugin/plugin.json" && source.sha256 !== null || parts.length === 4 && [".app.json", ".mcp.json"].includes(tail) && source.sha256 !== null || parts.length === 5 && tail === "hooks/hooks.json" && hookParents.includes(parent) && source.sha256 !== null || source.sha256 === null && (parts.length === 4 && tail === "SKILL.md" || parts.length === 5 && tail === "hooks/hooks.json");
 }
 function codexSemanticCacheDirectoryRole(path, cacheRoot) {
@@ -37827,9 +37850,9 @@ function codexSemanticCacheDirectoryRole(path, cacheRoot) {
 function assertCodexSemanticCacheHookSafety(cacheRoot, parents3, configPath, hookRootAlias = null) {
   const selectionRoots = [cacheRoot, ...parents3];
   if (hookRootAlias !== null) {
-    if (!hookRootAlias || Object.keys(hookRootAlias).length !== 2 || [hookRootAlias.alias, hookRootAlias.target].some((path) => typeof path !== "string" || !isAbsolute22(path) || resolve22(path) !== path || /[\x00-\x1f\x7f]/.test(path)) || hookRootAlias.target !== dirname21(configPath) || cacheRoot !== join30(hookRootAlias.target, "plugins/cache") || !lstatSync23(hookRootAlias.alias, { throwIfNoEntry: false })?.isSymbolicLink() || realpathSync8(hookRootAlias.alias) !== hookRootAlias.target || realpathSync8(hookRootAlias.target) !== hookRootAlias.target)
+    if (!hookRootAlias || Object.keys(hookRootAlias).length !== 2 || [hookRootAlias.alias, hookRootAlias.target].some((path) => typeof path !== "string" || !isAbsolute22(path) || resolve22(path) !== path || /[\x00-\x1f\x7f]/.test(path)) || hookRootAlias.target !== dirname22(configPath) || cacheRoot !== join31(hookRootAlias.target, "plugins/cache") || !lstatSync24(hookRootAlias.alias, { throwIfNoEntry: false })?.isSymbolicLink() || realpathSync8(hookRootAlias.alias) !== hookRootAlias.target || realpathSync8(hookRootAlias.target) !== hookRootAlias.target)
       throw new Error("Reviewed semantic cache hook alias changed");
-    selectionRoots.push(...selectionRoots.map((root) => join30(hookRootAlias.alias, relative7(hookRootAlias.target, root))));
+    selectionRoots.push(...selectionRoots.map((root) => join31(hookRootAlias.alias, relative7(hookRootAlias.target, root))));
   }
   selectionRoots.push("plugins/cache");
   if (selectionRoots.some((parent) => codexDirectHookSelects(cacheRoot, parent, configPath)))
@@ -37849,7 +37872,7 @@ function verifyCodexSemanticCacheDiscovery(binding, reviewedRootAliases) {
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !controls?.length || proof.schema !== "hasna.codex-semantic-cache-discovery.v1" || !/^[a-f0-9]{64}$/.test(proof.previousPolicySha256) || !Array.isArray(proof.appOnlyParents) || !Array.isArray(proof.supersededSources) || !Array.isArray(proof.supersededDirectories))
     throw new Error("Invalid Codex semantic cache discovery proof");
   const cacheRoot = proof.witness.cacheRoot;
-  if (controls.some((control) => dirname21(dirname21(control.pluginParent)) !== cacheRoot))
+  if (controls.some((control) => dirname22(dirname22(control.pluginParent)) !== cacheRoot))
     throw new Error("Codex semantic cache names another enrolled cache");
   const reviewedHookParents = proof.reviewedHookParents ?? [];
   if (!Array.isArray(reviewedHookParents) || reviewedHookParents.length > 4096 || reviewedHookParents.some((parent) => !parent || !(parent.installation === "remote-receipt" && Object.keys(parent).sort().join(",") === "installation,namespace,pluginId,pluginParent,remotePluginId,role" && typeof parent.remotePluginId === "string" || parent.installation === "local-marketplace" && Object.keys(parent).sort().join(",") === "installation,marketplaceSha256,marketplaceSourcePath,namespace,pluginId,pluginParent,role" && typeof parent.marketplaceSourcePath === "string" && /^[a-f0-9]{64}$/.test(parent.marketplaceSha256 ?? "")) || parent.role !== "reviewed-hook" || typeof parent.pluginId !== "string" || typeof parent.namespace !== "string" || typeof parent.pluginParent !== "string") || new Set(reviewedHookParents.map((parent) => parent.pluginParent)).size !== reviewedHookParents.length || !isDeepStrictEqual5((proof.witness.hookParents ?? []).map(({ manifestSha256: _manifest, hooksSha256: _hooks, receiptSha256: _receipt, ...parent }) => parent), reviewedHookParents)) {
@@ -37865,7 +37888,7 @@ function verifyCodexSemanticCacheDiscovery(binding, reviewedRootAliases) {
   if (!directories.length || !isDeepStrictEqual5(sources, proof.supersededSources) || !isDeepStrictEqual5(directories, proof.supersededDirectories))
     throw new Error("Codex semantic cache provenance changed");
   const configPath = proof.configPath;
-  if (!isAbsolute22(configPath) || resolve22(configPath) !== configPath || basename12(configPath) !== "config.toml" || /[\x00-\x1f\x7f]/.test(configPath))
+  if (!isAbsolute22(configPath) || resolve22(configPath) !== configPath || basename13(configPath) !== "config.toml" || /[\x00-\x1f\x7f]/.test(configPath))
     throw new Error("Invalid semantic cache configuration source");
   const configSource = binding.sources.find((source) => source.path === configPath && source.sha256 !== null && source.format === undefined && source.fields === undefined);
   if (!configSource || projected(configSource) !== configSource.sha256)
@@ -37898,7 +37921,7 @@ function verifyAgentDiscovery(binding, codexRecovery, reviewedRootAliases, witne
       const projection = binding.codexRetiredMaterializations.directories.filter((directory) => !semanticDirectory(directory.path));
       if (projection.length !== ordinary.length || projection.some((item, index) => item.path !== ordinary[index]?.path))
         throw new Error("Missing retired Codex directory projection");
-      const omitted = [...retiredRoots, ...(binding.codexRetiredMaterializations.parents ?? []).filter((parent) => !lstatSync23(parent, { throwIfNoEntry: false }))];
+      const omitted = [...retiredRoots, ...(binding.codexRetiredMaterializations.parents ?? []).filter((parent) => !lstatSync24(parent, { throwIfNoEntry: false }))];
       if (projection.every((item) => Array.isArray(item.entries)))
         verifyDiscoveryDirectoryProjection(projection, omitted, witnessTolerance);
       else {
@@ -37915,7 +37938,7 @@ function verifyAgentDiscovery(binding, codexRecovery, reviewedRootAliases, witne
       verifyDiscoveryDirectories(ordinary, [], witnessTolerance);
     verifyDiscoveryDirectories(projected2, installationRoots, witnessTolerance);
   }
-  const absentRoots = [...absentCodexSkillRoots(binding, witnessTolerance), ...absentRetiredClaudeRoots(binding), ...retiredRoots.filter((root) => !lstatSync23(root, { throwIfNoEntry: false }))];
+  const absentRoots = [...absentCodexSkillRoots(binding, witnessTolerance), ...absentRetiredClaudeRoots(binding), ...retiredRoots.filter((root) => !lstatSync24(root, { throwIfNoEntry: false }))];
   const budget2 = discoveryByteBudget();
   for (const source of binding.sources) {
     assertMarketplaceBinding(binding, source);
@@ -37953,12 +37976,12 @@ function verifyAgentDiscovery(binding, codexRecovery, reviewedRootAliases, witne
     safe6(root);
   for (const root of absentRoots) {
     safe6(root);
-    if (lstatSync23(root, { throwIfNoEntry: false }))
+    if (lstatSync24(root, { throwIfNoEntry: false }))
       throw new Error("Retired native materialization changed during discovery verification");
   }
 }
 function claudeControlSource(source) {
-  return CLAUDE_CONTROL_WITNESS_MODES.has(source.hashMode ?? "") || CLAUDE_CONTROL_FILES.has(basename12(source.path)) && !source.path.includes(`${sep11}.claude${sep11}plugins${sep11}cache${sep11}`);
+  return CLAUDE_CONTROL_WITNESS_MODES.has(source.hashMode ?? "") || CLAUDE_CONTROL_FILES.has(basename13(source.path)) && !source.path.includes(`${sep11}.claude${sep11}plugins${sep11}cache${sep11}`);
 }
 function retainedAbsentClaudeRoot(absentRoots, source) {
   return claudeControlSource(source) ? undefined : retainedAbsentRoot(absentRoots, source);
@@ -37969,13 +37992,13 @@ function codexInstallationRoots(binding) {
     return [];
   if (binding.agent !== "codex" || binding.method !== "reviewed" || !supportsCodexNativeCapability(proof.version, "installed-plugin-review") || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
     throw new Error("Invalid native installation input proof");
-  const cache = dirname21(dirname21(proof.plugins[0].pluginParent));
-  const config2 = join30(dirname21(dirname21(cache)), "config.toml"), home = dirname21(dirname21(dirname21(cache)));
+  const cache = dirname22(dirname22(proof.plugins[0].pluginParent));
+  const config2 = join31(dirname22(dirname22(cache)), "config.toml"), home = dirname22(dirname22(dirname22(cache)));
   const configSource = binding.sources.find((source) => source.path === config2 && source.sha256 !== null && (!source.format || source.format === "toml" && source.fields?.includes("plugins")));
-  const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join30(home, path));
-  if (!configSource || proof.plugins.some((input2) => nativeRoots.some((root) => root === input2.sourceRoot || root.startsWith(input2.sourceRoot + sep11) || input2.sourceRoot.startsWith(root + sep11)) || binding.sources.some((source) => basename12(source.path) === "config.toml" && (source.path === input2.sourceRoot || source.path.startsWith(input2.sourceRoot + sep11)))))
+  const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join31(home, path));
+  if (!configSource || proof.plugins.some((input2) => nativeRoots.some((root) => root === input2.sourceRoot || root.startsWith(input2.sourceRoot + sep11) || input2.sourceRoot.startsWith(root + sep11)) || binding.sources.some((source) => basename13(source.path) === "config.toml" && (source.path === input2.sourceRoot || source.path.startsWith(input2.sourceRoot + sep11)))))
     throw new Error("Native installation input overlaps configuration or loading roots");
-  if (proof.plugins.some((input2) => dirname21(dirname21(input2.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join30(input2.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
+  if (proof.plugins.some((input2) => dirname22(dirname22(input2.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join31(input2.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
     throw new Error("Missing native installation input source witness");
   return reviewedCodexPluginSourceRoots(cache, proof.plugins, (path) => {
     const text2 = read(path);
@@ -37991,13 +38014,13 @@ function assertMarketplaceBinding(binding, source) {
     throw new Error("Provider executable witnesses require explicit reviewed Codex V6");
   if (source.hashMode === "codex-settings-v6" && (new Set(binding.sources.map((row) => row.path)).size !== binding.sources.length || !Array.isArray(source.hookSources) || source.hookSources.some((hook) => !binding.sources.some((row) => row.path === hook.path && row.sha256 === hook.sha256 && [undefined, "bytes"].includes(row.hashMode) && row.format === undefined && row.fields === undefined))))
     throw new Error("Missing independently reviewed Codex hook source population");
-  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename12(source.path) !== "plugin.json" || !source.path.endsWith(join30(sep11, ".claude-plugin", "plugin.json"))))
+  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename13(source.path) !== "plugin.json" || !source.path.endsWith(join31(sep11, ".claude-plugin", "plugin.json"))))
     throw new Error("Claude plugin manifest witnesses require Claude plugin discovery");
-  if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename12(source.path) !== "sumi.json"))
+  if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename13(source.path) !== "sumi.json"))
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
-  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5" || source.hashMode === "codex-settings-v6")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename12(source.path) !== "config.toml"))
+  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5" || source.hashMode === "codex-settings-v6")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename13(source.path) !== "config.toml"))
     throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
-  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename12(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename13(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
@@ -38005,11 +38028,11 @@ function assertMarketplaceBinding(binding, source) {
     throw new Error("Claude marketplace entry witnesses require explicit reviewed Claude discovery of one named entry");
 }
 function hashReviewedExecutable(path, budget2) {
-  const before = lstatSync23(path, { bigint: true });
+  const before = lstatSync24(path, { bigint: true });
   if (before.size < 0n || before.size > BigInt(budget2.remaining))
     throw new Error("Discovery aggregate executable byte limit exceeded");
   const digest3 = pluginExecutableDigest(path).slice(7);
-  const after = lstatSync23(path, { bigint: true });
+  const after = lstatSync24(path, { bigint: true });
   for (const key2 of ["dev", "ino", "size", "mode", "uid", "gid", "nlink", "mtimeNs", "ctimeNs"]) {
     if (before[key2] !== after[key2])
       throw new Error("Discovery executable changed during budgeted capture");
@@ -38020,7 +38043,7 @@ function hashReviewedExecutable(path, budget2) {
 function agentDiscoveryConfigPath(home, agent) {
   if (agent === "sumi")
     return sumiConfigPath(home);
-  return join30(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
+  return join31(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
 }
 function resolveAgentDiscovery(options) {
   const canonical9 = options.canonical ?? resolve22, home = resolve22(options.home), agent = options.agent;
@@ -38044,42 +38067,42 @@ function resolveAgentDiscovery(options) {
   const review = options.reviewed?.agents.find((item) => item.agent === agent);
   if (agent === "sumi") {
     const directory = sumiConfigDirectory(home);
-    if (witness(join30(directory, "sumi.jsonc")) !== null)
+    if (witness(join31(directory, "sumi.jsonc")) !== null)
       unresolved("JSONC configuration requires a supported format adapter");
-    for (const root of [directory, join30(home, ".claude"), join30(home, ".agents")])
+    for (const root of [directory, join31(home, ".claude"), join31(home, ".agents")])
       for (const name of ["skill", "skills"])
-        roots.add(canonical9(join30(root, name)));
+        roots.add(canonical9(join31(root, name)));
     if (config2.skills !== undefined && (!Array.isArray(config2.skills) || config2.skills.some((path) => typeof path !== "string")))
       unresolved("skills must be a string array");
     for (const value of config2.skills ?? []) {
       if (typeof value !== "string" || /[\0$]/.test(value) || !value || !(isAbsolute22(value) || value.startsWith("~/")))
         unresolved("remote or relative skill sources need a dedicated discovery adapter");
-      roots.add(canonical9(value.startsWith("~/") ? join30(home, value.slice(2)) : value));
+      roots.add(canonical9(value.startsWith("~/") ? join31(home, value.slice(2)) : value));
     }
     for (const key2 of ["plugin", "plugins"])
       if (config2[key2] !== undefined && !Array.isArray(config2[key2]))
         unresolved(`${key2} must be an array`);
-    const plugins = [join30(directory, "plugin"), join30(directory, "plugins")];
+    const plugins = [join31(directory, "plugin"), join31(directory, "plugins")];
     for (const path of plugins) {
       safe6(path);
-      if (lstatSync23(path, { throwIfNoEntry: false })?.isDirectory())
-        for (const name of readdirSync8(path).sort()) {
+      if (lstatSync24(path, { throwIfNoEntry: false })?.isDirectory())
+        for (const name of readdirSync9(path).sort()) {
           if (name === "skills-cli.js" && path === plugins[1])
             continue;
-          const target = join30(path, name);
-          if (!lstatSync23(target).isFile())
+          const target = join31(path, name);
+          if (!lstatSync24(target).isFile())
             unresolved("local plugin packages need a dedicated discovery adapter");
           witness(target);
         }
     }
     for (const root of roots) {
       safe6(root);
-      if (lstatSync23(root, { throwIfNoEntry: false })?.isDirectory() && readdirSync8(root).some((name) => name.endsWith(".md")))
+      if (lstatSync24(root, { throwIfNoEntry: false })?.isDirectory() && readdirSync9(root).some((name) => name.endsWith(".md")))
         unresolved("flat markdown skills require a dedicated native migration adapter");
     }
   }
   if (agent === "hermes") {
-    const profile = witness(join30(home, ".hermes/active_profile"));
+    const profile = witness(join31(home, ".hermes/active_profile"));
     if (profile?.trim() && profile.trim() !== "default")
       unresolved("a non-default profile is active");
     const declared = config2.skills?.external_dirs ?? [], paths = typeof declared === "string" ? [declared] : declared;
@@ -38093,7 +38116,7 @@ function resolveAgentDiscovery(options) {
         continue;
       if (normalized.startsWith("~") && normalized !== "~" && !normalized.startsWith("~/"))
         unresolved("user-specific tilde expansion requires a separate discovery adapter");
-      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join30(home, normalized.slice(2)) : resolve22(home, ".hermes", normalized);
+      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join31(home, normalized.slice(2)) : resolve22(home, ".hermes", normalized);
       safe6(path);
       roots.add(path);
     }
@@ -38102,24 +38125,24 @@ function resolveAgentDiscovery(options) {
     const executable = options.executable === undefined ? discoveryExecutable(agent) : options.executable;
     if (executable) {
       let packageRoot;
-      for (let directory = dirname21(executable.target), depth = 0;depth < 8; directory = dirname21(directory), depth++) {
-        const path = join30(directory, "package.json"), raw = read(path);
+      for (let directory = dirname22(executable.target), depth = 0;depth < 8; directory = dirname22(directory), depth++) {
+        const path = join31(directory, "package.json"), raw = read(path);
         if (raw !== null && parseConfig(raw, path).name === "@google/gemini-cli") {
           packageRoot = directory;
           witness(path);
           break;
         }
-        if (dirname21(directory) === directory)
+        if (dirname22(directory) === directory)
           break;
       }
       if (!packageRoot)
         unresolved("installed Gemini package layout is not recognized");
-      const builtinRoot = join30(packageRoot, "bundle/builtin");
+      const builtinRoot = join31(packageRoot, "bundle/builtin");
       safe6(builtinRoot);
-      if (!lstatSync23(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
+      if (!lstatSync24(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
         unresolved("installed Gemini builtin root is missing");
-      for (const name of readdirSync8(builtinRoot).sort()) {
-        const text2 = witness(join30(builtinRoot, name, "SKILL.md"));
+      for (const name of readdirSync9(builtinRoot).sort()) {
+        const text2 = witness(join31(builtinRoot, name, "SKILL.md"));
         const match = text2?.match(/^---\r?\n[\s\S]*?^name:\s*([a-z0-9][a-z0-9-]*)\s*$/m);
         if (!match?.[1] || builtinNames.includes(match[1]))
           unresolved("installed Gemini builtin name is missing or ambiguous");
@@ -38165,10 +38188,10 @@ function resolveAgentDiscovery(options) {
       if (agent === "claude" && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && source.reviewArtifact === undefined && [undefined, "bytes", "path-bytes"].includes(source.hashMode) && isClaudePluginCacheOrphanMarker(source.path)) {
         return { path: source.path, hashMode: CLAUDE_ORPHAN_MARKER_MODE, sha256: hashClaudePluginCacheOrphanMarker(source.path) };
       }
-      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename12(source.path) !== "plugin.json" || !source.path.endsWith(join30(sep11, ".claude-plugin", "plugin.json")))
+      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename13(source.path) !== "plugin.json" || !source.path.endsWith(join31(sep11, ".claude-plugin", "plugin.json")))
         return source;
-      const pluginRoot = dirname21(dirname21(source.path)), hooksPath = join30(pluginRoot, "hooks/hooks.json");
-      const hookStat = lstatSync23(hooksPath, { throwIfNoEntry: false });
+      const pluginRoot = dirname22(dirname22(source.path)), hooksPath = join31(pluginRoot, "hooks/hooks.json");
+      const hookStat = lstatSync24(hooksPath, { throwIfNoEntry: false });
       const text2 = read(source.path);
       if (text2 === null)
         throw new Error("Reviewed Claude plugin manifest is missing");
@@ -38196,7 +38219,7 @@ function resolveAgentDiscovery(options) {
       assertReviewedClaudeCacheClosures(home, config2, review, canonical9);
     for (const root of absentRoots) {
       safe6(root);
-      if (lstatSync23(root, { throwIfNoEntry: false }))
+      if (lstatSync24(root, { throwIfNoEntry: false }))
         throw new Error("Retired native materialization changed during discovery review");
     }
     const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
@@ -38206,39 +38229,39 @@ function resolveAgentDiscovery(options) {
   function plugin(root) {
     root = canonical9(root);
     safe6(root);
-    const manifestPath = join30(root, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
+    const manifestPath = join31(root, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
     const raw = witness(manifestPath, undefined, undefined, agent === "claude" ? "claude-plugin-manifest-v1" : undefined);
     if (raw === null)
       unresolved("plugin manifest missing");
     const manifest = parseConfig(raw, manifestPath);
-    const hooks = witness(join30(root, "hooks/hooks.json"));
+    const hooks = witness(join31(root, "hooks/hooks.json"));
     if (manifest.hooks !== undefined || hooks !== null)
       unresolved("plugin hooks require a separate no-skill-injection review");
-    const commands = join30(root, "commands");
+    const commands = join31(root, "commands");
     safe6(commands);
-    if (agent === "claude" && (manifest.commands !== undefined || lstatSync23(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync8(commands).length))
+    if (agent === "claude" && (manifest.commands !== undefined || lstatSync24(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync9(commands).length))
       unresolved("legacy command discovery requires retirement or a dedicated format adapter");
-    const rootSkill = witness(join30(root, "SKILL.md"));
+    const rootSkill = witness(join31(root, "SKILL.md"));
     if (rootSkill !== null)
       roots.add(root);
     const declared = manifest.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
     if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
       unresolved("unsupported plugin skill paths");
     if (agent === "claude")
-      roots.add(join30(root, "skills"));
+      roots.add(join31(root, "skills"));
     for (const value of declared) {
       const path = resolve22(root, value);
       if (path !== root && !path.startsWith(root + sep11))
         unresolved("plugin skill path escapes its root");
-      roots.add(path.endsWith(`${sep11}SKILL.md`) ? dirname21(path) : path);
+      roots.add(path.endsWith(`${sep11}SKILL.md`) ? dirname22(path) : path);
     }
   }
   if (agent === "claude") {
-    const registrations = witness(join30(home, ".claude/plugins/installed_plugins.json"));
-    const installed = registrations === null ? {} : parseConfig(registrations, join30(home, ".claude/plugins/installed_plugins.json")).plugins;
-    const commands = canonical9(join30(home, ".claude/commands"));
+    const registrations = witness(join31(home, ".claude/plugins/installed_plugins.json"));
+    const installed = registrations === null ? {} : parseConfig(registrations, join31(home, ".claude/plugins/installed_plugins.json")).plugins;
+    const commands = canonical9(join31(home, ".claude/commands"));
     safe6(commands);
-    if (lstatSync23(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync8(commands).length)
+    if (lstatSync24(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync9(commands).length)
       unresolved("legacy home command discovery requires a dedicated format adapter");
     for (const [id, enabled] of Object.entries(config2.enabledPlugins ?? {})) {
       if (enabled === false)
@@ -38260,16 +38283,16 @@ function resolveAgentDiscovery(options) {
       const market = config2.marketplaces?.[marketplace] ?? (marketplace === "personal" ? { source_type: "local", source: home } : undefined);
       if (split < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute22(market.source))
         unresolved("enabled plugin marketplace is not an explicit local source");
-      const catalogText = witness(join30(market.source, ".agents/plugins/marketplace.json"));
+      const catalogText = witness(join31(market.source, ".agents/plugins/marketplace.json"));
       if (catalogText === null)
         unresolved("marketplace catalog missing");
-      const catalog = parseConfig(catalogText, join30(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
+      const catalog = parseConfig(catalogText, join31(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
       if (matches.length !== 1 || matches[0]?.source?.source !== "local" || typeof matches[0]?.source?.path !== "string")
         unresolved("plugin catalog source is missing or ambiguous");
       plugin(resolve22(market.source, matches[0].source.path));
     }
   } else if (agent === "opencode") {
-    if (witness(join30(home, ".config/opencode/opencode.jsonc")) !== null || witness(join30(home, ".config/opencode/config.json")) !== null)
+    if (witness(join31(home, ".config/opencode/opencode.jsonc")) !== null || witness(join31(home, ".config/opencode/config.json")) !== null)
       unresolved("additional config layers require review");
     if ((config2.plugin?.length ?? 0) > 0 || config2.skills?.urls?.length)
       unresolved("external plugin or remote skill source");
@@ -38278,17 +38301,17 @@ function resolveAgentDiscovery(options) {
         unresolved("relative or malformed added skill root");
       roots.add(path);
     }
-    const localPlugins = join30(home, ".config/opencode/plugins");
+    const localPlugins = join31(home, ".config/opencode/plugins");
     safe6(localPlugins);
-    if (lstatSync23(localPlugins, { throwIfNoEntry: false }) && readdirSync8(localPlugins).some((name) => name !== "skills-cli.js"))
+    if (lstatSync24(localPlugins, { throwIfNoEntry: false }) && readdirSync9(localPlugins).some((name) => name !== "skills-cli.js"))
       unresolved("additional local plugin hooks require review");
   } else if (agent === "sumi") {
-    if ((config2.plugin?.length ?? 0) > 0 || (config2.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical9(configPath) && source.path !== canonical9(join30(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
+    if ((config2.plugin?.length ?? 0) > 0 || (config2.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical9(configPath) && source.path !== canonical9(join31(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
       unresolved("external or foreign local plugins require review");
   } else if (agent === "hermes") {
-    for (const directory of [join30(home, ".hermes/plugins"), join30(home, ".hermes/hermes-agent")]) {
+    for (const directory of [join31(home, ".hermes/plugins"), join31(home, ".hermes/hermes-agent")]) {
       safe6(directory);
-      if (lstatSync23(directory, { throwIfNoEntry: false }))
+      if (lstatSync24(directory, { throwIfNoEntry: false }))
         unresolved("installed runtime/plugin discovery requires reviewed source bindings");
     }
     if (Bun.which("hermes") || Object.keys(config2.plugins ?? {}).length)
@@ -38296,24 +38319,24 @@ function resolveAgentDiscovery(options) {
   } else if (agent === "gemini") {
     if (Object.keys(config2.extensions ?? {}).length || config2.skills?.paths?.length)
       unresolved("custom extension or skill paths");
-    const directory = join30(home, ".gemini/extensions");
+    const directory = join31(home, ".gemini/extensions");
     safe6(directory);
-    if (lstatSync23(directory, { throwIfNoEntry: false }))
-      for (const name of readdirSync8(directory)) {
-        const root = join30(directory, name);
+    if (lstatSync24(directory, { throwIfNoEntry: false }))
+      for (const name of readdirSync9(directory)) {
+        const root = join31(directory, name);
         safe6(root);
-        if (!lstatSync23(root)?.isDirectory())
+        if (!lstatSync24(root)?.isDirectory())
           continue;
-        const raw = witness(join30(root, "gemini-extension.json"));
+        const raw = witness(join31(root, "gemini-extension.json"));
         if (raw === null)
           unresolved("extension registration missing");
-        const manifest = parseConfig(raw, join30(root, "gemini-extension.json"));
-        if (manifest.hooks !== undefined || witness(join30(root, "hooks/hooks.json")) !== null || witness(join30(root, ".gemini-extension-install.json")) !== null)
+        const manifest = parseConfig(raw, join31(root, "gemini-extension.json"));
+        if (manifest.hooks !== undefined || witness(join31(root, "hooks/hooks.json")) !== null || witness(join31(root, ".gemini-extension-install.json")) !== null)
           unresolved("extension hooks or linked registration require review");
-        roots.add(join30(root, "skills"));
+        roots.add(join31(root, "skills"));
       }
   }
-  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join30(home, ".hermes/plugins"), join30(home, ".hermes/hermes-agent")].map((path) => canonical9(path))) } : {} };
+  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join31(home, ".hermes/plugins"), join31(home, ".hermes/hermes-agent")].map((path) => canonical9(path))) } : {} };
 }
 var DISCOVERY_RUNTIME_COMMANDS, realpathOrNull = (path) => {
   try {
@@ -38358,9 +38381,9 @@ var init_agent_discovery = __esm(() => {
 });
 
 // src/lib/authoring-path.ts
-import { lstatSync as lstatSync24, realpathSync as realpathSync9 } from "fs";
+import { lstatSync as lstatSync25, realpathSync as realpathSync9 } from "fs";
 import { homedir as homedir3 } from "os";
-import { basename as basename13, dirname as dirname22, join as join31, resolve as resolve23, sep as sep12 } from "path";
+import { basename as basename14, dirname as dirname23, join as join32, resolve as resolve23, sep as sep12 } from "path";
 function pathParts(path) {
   return resolve23(path).split(sep12).filter(Boolean);
 }
@@ -38378,9 +38401,9 @@ function nativeRootMatch(path) {
 function physicalPath(path) {
   let cursor = resolve23(path);
   const suffix = [];
-  while (!lstatSync24(cursor, { throwIfNoEntry: false })) {
-    suffix.unshift(basename13(cursor));
-    const parent = dirname22(cursor);
+  while (!lstatSync25(cursor, { throwIfNoEntry: false })) {
+    suffix.unshift(basename14(cursor));
+    const parent = dirname23(cursor);
     if (parent === cursor)
       return resolve23(path);
     cursor = parent;
@@ -38391,7 +38414,7 @@ function contains(root, path) {
   return path === root || path.startsWith(root + sep12);
 }
 function configuredRoots(home, explicitHome) {
-  const homeData = join31(home, ".hasna", "skills");
+  const homeData = join32(home, ".hasna", "skills");
   const homePolicy = readManagedSkillPolicySnapshot(homeData);
   const configuredPolicy = !explicitHome && resolve23(getDataDirReadOnly()) !== resolve23(homeData) ? readManagedSkillPolicySnapshot(getDataDirReadOnly()) : null;
   const policy = homePolicy ?? configuredPolicy;
@@ -38422,8 +38445,8 @@ function configuredRoots(home, explicitHome) {
       admitBinding(binding);
       continue;
     }
-    const nativeHome = join31(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
-    if (!lstatSync24(nativeHome, { throwIfNoEntry: false }))
+    const nativeHome = join32(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
+    if (!lstatSync25(nativeHome, { throwIfNoEntry: false }))
       continue;
     roots.push(...resolveAgentDiscovery({ home, agent, canonical: physicalPath }).roots);
   }
@@ -38437,8 +38460,8 @@ function assertPortableAuthoringPath(path, options = {}) {
   const candidates = [lexical, physical];
   let native = candidates.map(nativeRootMatch).find(Boolean);
   const home = resolve23(options.homeDir ?? homedir3());
-  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join31(home, ...parts));
-  defaults.push(join31(home, ".codex/plugins/cache"), join31(home, ".claude/plugins/cache"), join31(home, ".claude/plugins/synced"), join31(home, ".gemini/extensions"));
+  const defaults = NATIVE_DISCOVERY_ROOTS.map((parts) => join32(home, ...parts));
+  defaults.push(join32(home, ".codex/plugins/cache"), join32(home, ".claude/plugins/cache"), join32(home, ".claude/plugins/synced"), join32(home, ".gemini/extensions"));
   for (const root of defaults) {
     if (candidates.some((candidate) => contains(resolve23(root), candidate) || contains(physicalPath(root), candidate)))
       native ??= root;
@@ -38467,29 +38490,29 @@ import {
   existsSync as existsSync12,
   mkdirSync as mkdirSync8,
   mkdtempSync,
-  readdirSync as readdirSync9,
+  readdirSync as readdirSync10,
   realpathSync as realpathSync10,
   renameSync as renameSync3,
   rmSync as rmSync3,
   statSync as statSync9,
   writeFileSync as writeFileSync6
 } from "fs";
-import { basename as basename14, dirname as dirname23, isAbsolute as isAbsolute23, join as join32, normalize as normalize4, relative as relative8, resolve as resolve24, sep as sep13 } from "path";
+import { basename as basename15, dirname as dirname24, isAbsolute as isAbsolute23, join as join33, normalize as normalize4, relative as relative8, resolve as resolve24, sep as sep13 } from "path";
 function getPortableSkillsRoot(options = {}) {
   return resolvePortableSkillsRoot(options, true);
 }
 function resolvePortableSkillsRoot(options, migrate) {
   if (options.rootDir)
     return options.rootDir;
-  const appDir = options.homeDir ? join32(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
-  const cache = join32(appDir, SKILLS_CACHE_DIRNAME);
+  const appDir = options.homeDir ? join33(options.homeDir, ".hasna", "skills") : migrate ? getDataDir() : getDataDirReadOnly();
+  const cache = join33(appDir, SKILLS_CACHE_DIRNAME);
   if (isOwnerLayoutMigrated(appDir) && safeIsDirectory(cache))
     return cache;
-  const installed = join32(appDir, INSTALLED_SKILLS_DIRNAME);
+  const installed = join33(appDir, INSTALLED_SKILLS_DIRNAME);
   return installed;
 }
 function getPortableSkillPath(name, options = {}) {
-  return join32(getPortableSkillsRoot(options), normalizePortableSkillName(name));
+  return join33(getPortableSkillsRoot(options), normalizePortableSkillName(name));
 }
 function findPortableSkill(name, options = {}) {
   let normalized;
@@ -38512,10 +38535,10 @@ function listPortableSkills(options = {}) {
   if (!safeIsDirectory(root))
     return [];
   const skills = [];
-  for (const entry of readdirSync9(root).sort()) {
+  for (const entry of readdirSync10(root).sort()) {
     if (entry.startsWith("."))
       continue;
-    const path = join32(root, entry);
+    const path = join33(root, entry);
     if (!safeIsDirectory(path))
       continue;
     try {
@@ -38548,9 +38571,9 @@ function isOfficialSkillName(name) {
 function scaffoldPortableSkill(name, options = {}) {
   const skillName = normalizeNewPortableSkillName(name);
   const readOnlyRoot = resolvePortableSkillsRoot(options, false);
-  assertPortableAuthoringPath(join32(readOnlyRoot, skillName), options);
+  assertPortableAuthoringPath(join33(readOnlyRoot, skillName), options);
   const root = getPortableSkillsRoot(options);
-  const skillPath = join32(root, skillName);
+  const skillPath = join33(root, skillName);
   assertPortableAuthoringPath(skillPath, options);
   if (existsSync12(skillPath)) {
     if (!options.overwrite)
@@ -38572,10 +38595,10 @@ function physicalImportPath(path) {
   let ancestor = resolve24(path);
   const suffix = [];
   while (!existsSync12(ancestor)) {
-    suffix.unshift(basename14(ancestor));
-    ancestor = dirname23(ancestor);
+    suffix.unshift(basename15(ancestor));
+    ancestor = dirname24(ancestor);
   }
-  return join32(realpathSync10(ancestor), ...suffix);
+  return join33(realpathSync10(ancestor), ...suffix);
 }
 function assertDisjointImportPaths(source, destination) {
   const sourcePath = realpathSync10(source);
@@ -38597,15 +38620,15 @@ function portPortableSkill(sourcePath, options = {}) {
   const explicitName = options.name != null;
   const skillName = normalizeNewPortableSkillName(options.name ?? inferred.name);
   if (isOfficialSkillName(skillName) && !options.allowShadow) {
-    const sourceSlug = safeNormalizeName(basename14(absoluteSource));
-    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename14(absoluteSource)}')` : ""} matches a bundled official skill.`;
+    const sourceSlug = safeNormalizeName(basename15(absoluteSource));
+    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename15(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
-  const readOnlyDestination = join32(resolvePortableSkillsRoot(options, false), skillName);
+  const readOnlyDestination = join33(resolvePortableSkillsRoot(options, false), skillName);
   assertPortableAuthoringPath(readOnlyDestination, options);
   assertDisjointImportPaths(absoluteSource, readOnlyDestination);
   const root = getPortableSkillsRoot(options);
-  const destination = join32(root, skillName);
+  const destination = join33(root, skillName);
   assertPortableAuthoringPath(destination, options);
   assertDisjointImportPaths(absoluteSource, destination);
   if (existsSync12(destination)) {
@@ -38613,7 +38636,7 @@ function portPortableSkill(sourcePath, options = {}) {
       throw new Error(`Skill '${skillName}' already exists at ${destination}`);
     rmSync3(destination, { recursive: true, force: true });
   }
-  mkdirSync8(dirname23(destination), { recursive: true });
+  mkdirSync8(dirname24(destination), { recursive: true });
   copySkillDirectory(absoluteSource, destination);
   const base = {
     ...inferred,
@@ -38632,18 +38655,29 @@ function safeNormalizeName(name) {
 }
 function validatePortableSkillDirectory(name, skillPath) {
   const normalizedName = normalizePortableSkillName(name);
-  const base = validateSkillDirectory(normalizedName, skillPath);
+  let manifest;
+  let manifestError;
+  if (existsSync12(skillPath)) {
+    try {
+      manifest = readPortableSkillManifest(skillPath, normalizedName);
+    } catch (error61) {
+      manifestError = error61;
+    }
+  }
+  const base = validateSkillDirectory(normalizedName, skillPath, undefined, { kind: manifest?.kind });
   const issues = [...base.issues];
   const warnings = [...base.warnings];
-  let manifest;
   if (existsSync12(skillPath)) {
-    const skillJsonPath = join32(skillPath, "skill.json");
-    const skillMdPath = join32(skillPath, "SKILL.md");
+    const skillJsonPath = join33(skillPath, "skill.json");
+    const skillMdPath = join33(skillPath, "SKILL.md");
     if (!existsSync12(skillJsonPath) && !existsSync12(skillMdPath)) {
       add3(issues, "portable.manifest_missing", "Missing portable manifest: expected SKILL.md frontmatter and/or skill.json");
     }
     try {
-      manifest = readPortableSkillManifest(skillPath, normalizedName);
+      if (manifestError)
+        throw manifestError;
+      if (!manifest)
+        throw new Error("Portable manifest could not be read");
       const isInstruction = manifest.kind === "instruction";
       if (manifest.name !== normalizedName) {
         add3(issues, "portable.name_mismatch", `Portable manifest name '${manifest.name}' does not match '${normalizedName}'`);
@@ -38658,27 +38692,11 @@ function validatePortableSkillDirectory(name, skillPath) {
         add3(issues, "portable.version_missing", "Portable manifest missing version");
       }
       const contractIssues = validatePortableManifestContract(manifest, {
-        strict: existsSync12(join32(skillPath, "skill.json")),
+        strict: existsSync12(join33(skillPath, "skill.json")),
         skillPath
       });
       for (const issue2 of contractIssues)
         add3(issues, issue2.code, issue2.message);
-      if (manifest.kind === "instruction") {
-        const executableOnlyCodes = new Set([
-          "package.missing",
-          "package.bin_missing",
-          "skill.src_missing",
-          "skill.src_index_missing",
-          "skill.runtime_entrypoint_unsafe",
-          "skill.runtime_entrypoint_missing",
-          "skill.runtime_entrypoint_symlink",
-          "skill.runtime_entrypoint_not_file"
-        ]);
-        for (let i = issues.length - 1;i >= 0; i--) {
-          if (executableOnlyCodes.has(issues[i].code))
-            issues.splice(i, 1);
-        }
-      }
       if (!isInstruction && (!Array.isArray(manifest.inputs) || manifest.inputs.length === 0)) {
         add3(issues, "portable.inputs_missing", "Portable manifest must declare inputs");
       }
@@ -38698,7 +38716,7 @@ function validatePortableSkillDirectory(name, skillPath) {
               add3(issues, "portable.command_entry_unsafe", `Command '${command.name}' entry '${command.entry}' must stay inside the skill directory`);
               continue;
             }
-            const entryPath = join32(skillPath, command.entry);
+            const entryPath = join33(skillPath, command.entry);
             if (!existsSync12(entryPath))
               add3(issues, "portable.command_entry_missing", `Command '${command.name}' entry '${command.entry}' is missing`);
             else if (statSync9(entryPath).isDirectory())
@@ -38709,7 +38727,7 @@ function validatePortableSkillDirectory(name, skillPath) {
     } catch (error61) {
       add3(issues, "portable.manifest_invalid", error61.message);
     }
-    if (manifest?.kind !== "instruction" && !existsSync12(join32(skillPath, "AGENTS.md"))) {
+    if (manifest?.kind !== "instruction" && !existsSync12(join33(skillPath, "AGENTS.md"))) {
       add3(issues, "portable.agents_missing", "Missing AGENTS.md with build-out instructions for coding agents");
     }
   }
@@ -38847,8 +38865,8 @@ var init_registry_types = __esm(() => {
 });
 
 // src/lib/registry.ts
-import { existsSync as existsSync13, readFileSync as readFileSync18, readdirSync as readdirSync10 } from "fs";
-import { join as join33 } from "path";
+import { existsSync as existsSync13, readFileSync as readFileSync19, readdirSync as readdirSync11 } from "fs";
+import { join as join34 } from "path";
 function parseSkillMdFrontmatter(content) {
   const match = content.match(/^---\n([\s\S]*?)\n---/);
   if (!match)
@@ -38885,16 +38903,16 @@ function discoverSkillsInDir(dir, source = "custom") {
     return [];
   const result = [];
   try {
-    const entries = readdirSync10(dir, { withFileTypes: true });
+    const entries = readdirSync11(dir, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillMdPath = join33(dir, entry.name, "SKILL.md");
+      const skillMdPath = join34(dir, entry.name, "SKILL.md");
       if (!existsSync13(skillMdPath))
         continue;
       let content;
       try {
-        content = readFileSync18(skillMdPath, "utf-8");
+        content = readFileSync19(skillMdPath, "utf-8");
       } catch {
         continue;
       }
@@ -38909,7 +38927,7 @@ function discoverSkillsInDir(dir, source = "custom") {
         category: fm.category || "Development Tools",
         tags: fm.tags || [],
         ...fm.kind ? { kind: fm.kind } : {},
-        ...isHostedMetadataSkillDir(join33(dir, entry.name)) ? { serverOwned: true } : {},
+        ...isHostedMetadataSkillDir(join34(dir, entry.name)) ? { serverOwned: true } : {},
         source
       });
     }
@@ -38921,17 +38939,17 @@ function findExtensionSkillPath(name) {
   if (!config2.extensionsDir || !existsSync13(config2.extensionsDir))
     return null;
   try {
-    const entries = readdirSync10(config2.extensionsDir, { withFileTypes: true });
+    const entries = readdirSync11(config2.extensionsDir, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillDir = join33(config2.extensionsDir, entry.name);
-      const skillMdPath = join33(skillDir, "SKILL.md");
+      const skillDir = join34(config2.extensionsDir, entry.name);
+      const skillMdPath = join34(skillDir, "SKILL.md");
       if (!existsSync13(skillMdPath))
         continue;
       let content;
       try {
-        content = readFileSync18(skillMdPath, "utf-8");
+        content = readFileSync19(skillMdPath, "utf-8");
       } catch {
         continue;
       }
@@ -40143,14 +40161,14 @@ var init_remote_workspace_leave = __esm(() => {
 });
 
 // src/lib/auth-store.ts
-import { chmodSync, existsSync as existsSync14, mkdirSync as mkdirSync9, readFileSync as readFileSync19, renameSync as renameSync4, statSync as statSync10, unlinkSync as unlinkSync4, writeFileSync as writeFileSync7 } from "fs";
-import { basename as basename15, dirname as dirname24, join as join34 } from "path";
+import { chmodSync, existsSync as existsSync14, mkdirSync as mkdirSync9, readFileSync as readFileSync20, renameSync as renameSync4, statSync as statSync10, unlinkSync as unlinkSync4, writeFileSync as writeFileSync7 } from "fs";
+import { basename as basename16, dirname as dirname25, join as join35 } from "path";
 function getAuthFilePath(env = process.env) {
   return skillsCredentialFilePath(env);
 }
 function getIdentityFilePath(env = process.env) {
   const file2 = skillsCredentialFilePath(env);
-  return join34(dirname24(file2), basename15(file2).replace(/^credentials/, "identity") + ".json");
+  return join35(dirname25(file2), basename16(file2).replace(/^credentials/, "identity") + ".json");
 }
 function getApiUrl(action, env = process.env, options = {}) {
   return requireSkillsApiOrigin(action, env, options);
@@ -40485,6 +40503,130 @@ var init_remote_permissions = __esm(() => {
   };
 });
 
+// src/lib/revision.ts
+import { createHash as createHash26 } from "crypto";
+function revisionIdOf(content) {
+  const canonicalContent = {
+    slug: content.slug,
+    displayName: content.displayName,
+    description: content.description,
+    category: content.category,
+    tags: content.tags,
+    source: content.source,
+    kind: content.kind,
+    version: content.version ?? null,
+    skillMd: content.skillMd ?? null,
+    bundleSha256: content.bundleSha256 ?? null,
+    bundleByteSize: content.bundleByteSize ?? null
+  };
+  if (content.lifecycle === "archived" || content.archiveReason !== undefined || content.replacementSlug !== undefined) {
+    canonicalContent.lifecycle = content.lifecycle ?? "active";
+    canonicalContent.archiveReason = content.archiveReason ?? null;
+    canonicalContent.replacementSlug = content.replacementSlug ?? null;
+  }
+  const canonical9 = JSON.stringify(canonicalContent);
+  return createHash26("sha256").update(canonical9).digest("hex");
+}
+var REVISION_ID_PATTERN;
+var init_revision = __esm(() => {
+  REVISION_ID_PATTERN = /^[0-9a-f]{64}$/;
+});
+
+// src/lib/skill-metadata-update.ts
+function metadataPatch(value) {
+  if (!object7(value))
+    throw new SkillMetadataUpdateError("INVALID_METADATA_PATCH");
+  const keys2 = Object.keys(value);
+  if (!keys2.length || keys2.some((key2) => !["category", "tags"].includes(key2)))
+    throw new SkillMetadataUpdateError("INVALID_METADATA_PATCH");
+  const copy = {};
+  if (Object.hasOwn(value, "category"))
+    copy.category = value.category;
+  if (Object.hasOwn(value, "tags")) {
+    const tags = value.tags;
+    copy.tags = Array.isArray(tags) ? Array.from(tags) : tags;
+  }
+  if (Object.hasOwn(copy, "category") && !text3(copy.category))
+    throw new SkillMetadataUpdateError("INVALID_METADATA_PATCH");
+  if (Object.hasOwn(copy, "tags") && (!Array.isArray(copy.tags) || copy.tags.length > 100 || copy.tags.some((tag) => !text3(tag)) || new Set(copy.tags).size !== copy.tags.length))
+    throw new SkillMetadataUpdateError("INVALID_METADATA_PATCH");
+  return copy;
+}
+function metadataSnapshot(value, etag) {
+  if (!object7(value) || !text3(value.slug) || !/^[a-z0-9][a-z0-9._-]*$/.test(value.slug) || ![value.displayName, value.description, value.category, value.publishedSource].every((field3) => typeof field3 === "string") || !Array.isArray(value.tags) || value.tags.some((tag) => typeof tag !== "string") || !["instruction", "executable"].includes(String(value.kind)) || typeof value.revisionId !== "string" || !REVISION_ID_PATTERN.test(value.revisionId) || etag !== `"${value.revisionId}"`)
+    throw new SkillMetadataUpdateError("INVALID_METADATA_SNAPSHOT");
+  const content = {
+    slug: value.slug,
+    displayName: value.displayName,
+    description: value.description,
+    category: value.category,
+    tags: [...value.tags],
+    source: value.publishedSource,
+    kind: value.kind
+  };
+  for (const key2 of ["version", "skillMd", "bundleSha256", "archiveReason", "replacementSlug"]) {
+    if (value[key2] !== undefined) {
+      if (typeof value[key2] !== "string")
+        throw new SkillMetadataUpdateError("INVALID_METADATA_SNAPSHOT");
+      content[key2] = value[key2];
+    }
+  }
+  if (value.bundleByteSize !== undefined) {
+    if (!Number.isSafeInteger(value.bundleByteSize) || value.bundleByteSize < 0)
+      throw new SkillMetadataUpdateError("INVALID_METADATA_SNAPSHOT");
+    content.bundleByteSize = value.bundleByteSize;
+  }
+  if (value.lifecycle !== undefined) {
+    if (value.lifecycle !== "active" && value.lifecycle !== "archived")
+      throw new SkillMetadataUpdateError("INVALID_METADATA_SNAPSHOT");
+    content.lifecycle = value.lifecycle;
+  }
+  if (revisionIdOf(content) !== value.revisionId)
+    throw new SkillMetadataUpdateError("INVALID_METADATA_SNAPSHOT");
+  return { content, revisionId: value.revisionId };
+}
+function metadataPlan(value) {
+  if (!object7(value) || Object.keys(value).sort().join(",") !== "authority,before,expectedRevisionId,organizationId,originalDocument,patch,schemaVersion" || value.schemaVersion !== 1 || !text3(value.authority) || !text3(value.organizationId) || !object7(value.before) || typeof value.originalDocument !== "string" || Buffer.byteLength(value.originalDocument) > 2 * 1024 * 1024 || typeof value.expectedRevisionId !== "string" || !REVISION_ID_PATTERN.test(value.expectedRevisionId))
+    throw new SkillMetadataUpdateError("INVALID_METADATA_PLAN");
+  const before = metadataSnapshot({ ...value.before, publishedSource: value.before.source, revisionId: value.expectedRevisionId }, `"${value.expectedRevisionId}"`).content;
+  let original;
+  try {
+    original = JSON.parse(value.originalDocument);
+  } catch {
+    throw new SkillMetadataUpdateError("INVALID_METADATA_PLAN");
+  }
+  const preserved = metadataSnapshot(original, `"${value.expectedRevisionId}"`);
+  if (preserved.revisionId !== value.expectedRevisionId)
+    throw new SkillMetadataUpdateError("INVALID_METADATA_PLAN");
+  return {
+    schemaVersion: 1,
+    authority: value.authority,
+    organizationId: value.organizationId,
+    expectedRevisionId: value.expectedRevisionId,
+    originalDocument: value.originalDocument,
+    before,
+    patch: metadataPatch(value.patch)
+  };
+}
+var SkillMetadataUpdateError, object7 = (value) => value !== null && typeof value === "object" && !Array.isArray(value), text3 = (value) => typeof value === "string" && value.length > 0 && value.length <= 512 && !/[\x00-\x1f\x7f]/.test(value);
+var init_skill_metadata_update = __esm(() => {
+  init_revision();
+  SkillMetadataUpdateError = class SkillMetadataUpdateError extends Error {
+    code;
+    constructor(code) {
+      super({
+        METADATA_AUTH_REQUIRED: "Metadata updates require a signed-in Skills connection; use skills login.",
+        INVALID_METADATA_PATCH: "Metadata patch accepts only category (a nonempty string) and tags (an array of unique nonempty strings).",
+        INVALID_METADATA_SNAPSHOT: "The current skill must carry a matching quoted revision ETag and complete verifiable metadata, body and bundle identity.",
+        INVALID_METADATA_PLAN: "The saved metadata plan must name its original revision, authority, organization, complete original content and category/tags-only patch.",
+        METADATA_REVISION_CONFLICT: "The skill revision changed after preview; inspect it and prepare a new plan.",
+        METADATA_UPDATE_UNCONFIRMED: "Metadata update could not be confirmed by authoritative readback; inspect the current revision before preparing another write."
+      }[code]);
+      this.code = code;
+    }
+  };
+});
+
 // src/lib/remote-client.ts
 var exports_remote_client = {};
 __export(exports_remote_client, {
@@ -40562,6 +40704,89 @@ class RemoteSkillsClient {
       return null;
     return res.json();
   }
+  async metadataOrganization() {
+    const identity4 = await this.getIdentity();
+    const organization2 = identity4.organization;
+    if (typeof organization2?.id !== "string" || !organization2.id)
+      throw new SkillMetadataUpdateError("INVALID_METADATA_SNAPSHOT");
+    return organization2.id;
+  }
+  async readMetadataSnapshot(slug2) {
+    const response = await this.request(`/api/v1/skills/${encodeURIComponent(slug2)}`);
+    if (!response.ok)
+      throw new RemoteRequestError("/api/v1/skills/:slug", response.status);
+    const bytes = await readBoundedResponse(response, 2 * 1024 * 1024);
+    const originalDocument = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    let value;
+    try {
+      value = JSON.parse(originalDocument);
+    } catch {
+      throw new SkillMetadataUpdateError("INVALID_METADATA_SNAPSHOT");
+    }
+    const snapshot2 = metadataSnapshot(value, response.headers.get("etag"));
+    if (snapshot2.content.slug !== slug2)
+      throw new SkillMetadataUpdateError("INVALID_METADATA_SNAPSHOT");
+    return { ...snapshot2, originalDocument };
+  }
+  async prepareSkillMetadataUpdate(slug2, patch) {
+    const captured = metadataPatch(patch);
+    const organizationId = await this.metadataOrganization();
+    const snapshot2 = await this.readMetadataSnapshot(slug2);
+    return metadataPlan({
+      schemaVersion: 1,
+      authority: this.apiUrl,
+      organizationId,
+      expectedRevisionId: snapshot2.revisionId,
+      originalDocument: snapshot2.originalDocument,
+      before: snapshot2.content,
+      patch: captured
+    });
+  }
+  async applySkillMetadataUpdate(input2) {
+    const plan = metadataPlan(input2);
+    if (plan.authority !== this.apiUrl || await this.metadataOrganization() !== plan.organizationId)
+      throw new SkillMetadataUpdateError("INVALID_METADATA_PLAN");
+    const access = await this.getCapabilities({ refresh: true });
+    if (access.permissions?.publish !== true)
+      throw new RemoteSkillsPermissionError("publish");
+    const current = await this.readMetadataSnapshot(plan.before.slug);
+    if (current.revisionId !== plan.expectedRevisionId)
+      throw new SkillMetadataUpdateError("METADATA_REVISION_CONFLICT");
+    const expected = revisionIdOf({ ...plan.before, ...plan.patch });
+    if (expected === current.revisionId)
+      return { status: "unchanged", revisionId: expected };
+    let uncertain = false;
+    try {
+      const response = await this.request(`/api/v1/skills/${encodeURIComponent(plan.before.slug)}`, {
+        method: "PATCH",
+        headers: { "If-Match": `"${plan.expectedRevisionId}"` },
+        body: JSON.stringify(plan.patch)
+      });
+      if (!response.ok && response.status < 500)
+        throw new RemoteRequestError("/api/v1/skills/:slug", response.status);
+      if (!response.ok)
+        uncertain = true;
+      else {
+        const bytes = await readBoundedResponse(response, 2 * 1024 * 1024);
+        const written = metadataSnapshot(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes)), response.headers.get("etag"));
+        if (written.revisionId !== expected)
+          throw new SkillMetadataUpdateError("METADATA_UPDATE_UNCONFIRMED");
+      }
+    } catch (error61) {
+      if (error61 instanceof RemoteRequestError && error61.status < 500)
+        throw error61;
+      uncertain = true;
+    }
+    let verified;
+    try {
+      verified = await this.readMetadataSnapshot(plan.before.slug);
+    } catch {
+      throw new SkillMetadataUpdateError("METADATA_UPDATE_UNCONFIRMED");
+    }
+    if (verified.revisionId !== expected)
+      throw new SkillMetadataUpdateError("METADATA_UPDATE_UNCONFIRMED");
+    return { status: uncertain ? "reconciled" : "applied", revisionId: expected };
+  }
   async getSkillStatus(slug2) {
     const res = await this.request(`/api/v1/skills/${encodeURIComponent(slug2)}`, { method: "GET" });
     let body = null;
@@ -41432,6 +41657,8 @@ var init_remote_client = __esm(() => {
   init_remote_credit_checkout();
   init_remote_quote_errors();
   init_remote_permissions();
+  init_skill_metadata_update();
+  init_revision();
   RemoteRouteUnsupportedError = class RemoteRouteUnsupportedError extends Error {
     path;
     status;
@@ -41619,7 +41846,7 @@ var init_remote_invitation_recovery = __esm(() => {
 });
 
 // src/lib/remote-private-publications.ts
-import { createHash as createHash26 } from "crypto";
+import { createHash as createHash27 } from "crypto";
 function checkedPrivateSkillCreate(value) {
   const refuse5 = (field3, accepted) => {
     throw new PrivatePublicationError("INVALID_SKILL_CREATE_INPUT", `Invalid ${field3}. ${accepted}`);
@@ -41657,7 +41884,7 @@ function checkedPublicationView(value, skillId, intentId, declaration) {
     return invalid4();
   return Object.freeze({ ...value });
 }
-async function boundedJson(url2, init, token, mutation, budget3 = 15000, signal, create = false) {
+async function boundedJson(url2, init, token, mutation, budget3 = 15000, signal, create = false, readBinding) {
   const controller = new AbortController;
   let reader;
   let response;
@@ -41673,8 +41900,18 @@ async function boundedJson(url2, init, token, mutation, budget3 = 15000, signal,
         redirect: "error",
         credentials: "omit",
         signal: controller.signal,
-        headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` }
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${token}`,
+          ...readBinding ? {
+            "x-skills-user-id": readBinding.userId,
+            "x-skills-workspace-id": readBinding.organizationId,
+            "x-skills-membership-id": readBinding.membershipId
+          } : {}
+        }
       });
+      if (readBinding && response.ok && response.status !== 200)
+        return invalid4();
       const length = response.headers.get("content-length");
       if (length !== null && (!/^\d+$/.test(length) || Number(length) > 65536))
         return invalid4();
@@ -41742,6 +41979,81 @@ async function boundedJson(url2, init, token, mutation, budget3 = 15000, signal,
       response?.body?.cancel().catch(() => {});
   }
 }
+function historyDate(value) {
+  if (typeof value !== "string")
+    return false;
+  const parts = /^(\d{4})-(\d{2})-(\d{2})(T| )(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,9}))?(Z|[+-](\d{2})(?::(\d{2}))?)$/.exec(value);
+  if (!parts)
+    return false;
+  const [, y, m, d, separator, h, minute, second, fraction, zone, offsetHour, offsetMinute] = parts;
+  if (separator === " " ? zone === "Z" || (fraction?.length ?? 0) > 6 : zone !== "Z" && offsetMinute === undefined)
+    return false;
+  const year = Number(y), month = Number(m), day = Number(d);
+  const leap = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+  const days = [31, leap ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+  return year > 0 && month >= 1 && month <= 12 && day >= 1 && day <= days[month - 1] && Number(h) <= 23 && Number(minute) <= 59 && Number(second) <= 59 && (zone === "Z" || Number(offsetHour) <= 23 && Number(offsetMinute ?? 0) <= 59);
+}
+function privateHistory(value, organizationId, skillId, limit, cursor2) {
+  if (!record10(value) || value.organizationId !== organizationId || value.skillId !== skillId || typeof value.slug !== "string" || !/^[a-z0-9-]+$/.test(value.slug) || !(value.currentVersion === null || historyText(value.currentVersion)) || !(value.currentVersionId === null || publicationUuid(value.currentVersionId)) || value.currentVersion === null !== (value.currentVersionId === null) || !(value.nextCursor === null || publicationUuid(value.nextCursor)) || !Array.isArray(value.versions) || value.versions.length > limit)
+    return historyResponse();
+  const seen = new Set;
+  let previous = cursor2;
+  const versions2 = value.versions.map((row) => {
+    if (!record10(row) || !publicationUuid(row.id) || seen.has(row.id) || previous !== undefined && row.id >= previous || !historyText(row.version) || !(row.releasedAt === null || historyDate(row.releasedAt)) || !historyDate(row.createdAt) || row.id === value.currentVersionId !== (row.version === value.currentVersion))
+      return historyResponse();
+    seen.add(row.id);
+    previous = row.id;
+    return Object.freeze({ id: row.id, version: row.version, releasedAt: row.releasedAt, createdAt: row.createdAt });
+  });
+  if (value.nextCursor !== null && (!versions2.length || value.nextCursor !== versions2.at(-1).id))
+    return historyResponse();
+  return Object.freeze({
+    organizationId,
+    skillId,
+    slug: value.slug,
+    currentVersion: value.currentVersion,
+    currentVersionId: value.currentVersionId,
+    versions: Object.freeze(versions2),
+    nextCursor: value.nextCursor
+  });
+}
+
+class RemotePrivateSkillHistoryClient {
+  apiOrigin;
+  organizationId;
+  userId;
+  membershipId;
+  #token;
+  constructor(apiUrl, session) {
+    const checked = parseWorkspaceSession(session, { userId: session?.user?.id, membershipId: session?.user?.membershipId });
+    this.apiOrigin = normalizeSkillsApiOrigin(apiUrl);
+    this.#token = checked.token;
+    this.organizationId = checked.organization.id;
+    this.userId = checked.user.id;
+    this.membershipId = checked.user.membershipId;
+    Object.freeze(this);
+  }
+  async listVersions(skillId, options = {}) {
+    if (!publicationUuid(skillId) || options.limit !== undefined && (!Number.isSafeInteger(options.limit) || options.limit < 1 || options.limit > 50) || options.cursor !== undefined && !publicationUuid(options.cursor) || options.timeoutMs !== undefined && (!Number.isSafeInteger(options.timeoutMs) || options.timeoutMs < 1 || options.timeoutMs > 15000))
+      return historyInput();
+    const limit = options.limit ?? 20, cursor2 = options.cursor;
+    const query = new URLSearchParams;
+    if (options.limit !== undefined)
+      query.set("limit", String(limit));
+    if (cursor2 !== undefined)
+      query.set("cursor", cursor2);
+    const path = `/api/v1/skills/${skillId}/versions${query.size ? `?${query}` : ""}`;
+    let value;
+    try {
+      value = await boundedJson(skillsApiRequestUrl(this.apiOrigin, path), { method: "GET" }, this.#token, false, options.timeoutMs, options.signal, false, this);
+    } catch (error61) {
+      if (error61 instanceof PrivatePublicationError && error61.code === "INVALID_PUBLICATION_RESPONSE")
+        return historyResponse();
+      throw new PrivatePublicationError("PRIVATE_HISTORY_UNAVAILABLE", "Unable to read private version history. Check the selected server, current membership and fresh sign-in; no skill or credential was changed.", false, error61 instanceof PrivatePublicationError ? error61.status : undefined);
+    }
+    return privateHistory(value, this.organizationId, skillId, limit, cursor2);
+  }
+}
 
 class RemotePrivatePublicationsClient {
   apiOrigin;
@@ -41915,7 +42227,11 @@ var PRIVATE_PUBLICATION_MAX_BYTES, skillCreateFailures, failures2, PrivatePublic
   throw new PrivatePublicationError("INVALID_PUBLICATION_INPUT", "Invalid publication input or recovery data.");
 }, invalid4 = () => {
   throw new PrivatePublicationError("INVALID_PUBLICATION_RESPONSE", "The server returned an invalid publication result.");
-}, publicationUuid = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), hash4 = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), record10 = (v) => !!v && typeof v === "object" && !Array.isArray(v), exact = (v, keys2) => record10(v) && Object.keys(v).sort().join(",") === keys2.sort().join(","), date5 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v)), publicationSha256 = (bytes) => createHash26("sha256").update(bytes).digest("hex");
+}, publicationUuid = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), hash4 = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), record10 = (v) => !!v && typeof v === "object" && !Array.isArray(v), exact = (v, keys2) => record10(v) && Object.keys(v).sort().join(",") === keys2.sort().join(","), date5 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v)), publicationSha256 = (bytes) => createHash27("sha256").update(bytes).digest("hex"), historyInput = () => {
+  throw new PrivatePublicationError("INVALID_PRIVATE_HISTORY_INPUT", "Provide a private skill UUID, limit from 1 to 50, and an optional UUID cursor; timeoutMs must be from 1 to 15000.");
+}, historyResponse = () => {
+  throw new PrivatePublicationError("INVALID_PRIVATE_HISTORY_RESPONSE", "The server returned invalid private version history.");
+}, historyText = (value) => typeof value === "string" && value.length > 0 && value.length <= 128 && !/[\p{Cc}\p{Cs}\u2028\u2029]/u.test(value);
 var init_remote_private_publications = __esm(() => {
   init_fleet_credentials();
   init_remote_workspace_selection();
@@ -41986,8 +42302,8 @@ async function requestAuthApi(instance, path, options) {
       apiUrl: safeUrl
     });
   }
-  const text3 = await res.text();
-  const body = text3 ? parseJsonBody(text3) : {};
+  const text4 = await res.text();
+  const body = text4 ? parseJsonBody(text4) : {};
   if (!res.ok) {
     const record11 = isRecord6(body) ? body : {};
     const detail = typeof record11.detail === "string" ? record11.detail : undefined;
@@ -42003,15 +42319,15 @@ async function requestAuthApi(instance, path, options) {
   }
   return body;
 }
-function parseJsonBody(text3) {
+function parseJsonBody(text4) {
   try {
-    return JSON.parse(text3);
+    return JSON.parse(text4);
   } catch {
-    return { detail: condenseErrorBody(text3) };
+    return { detail: condenseErrorBody(text4) };
   }
 }
-function condenseErrorBody(text3) {
-  const stripped = /<[a-z!/]/i.test(text3) ? text3.replace(/<(script|style)[\s\S]*?<\/\1>/gi, " ").replace(/<[^>]*>/g, " ") : text3;
+function condenseErrorBody(text4) {
+  const stripped = /<[a-z!/]/i.test(text4) ? text4.replace(/<(script|style)[\s\S]*?<\/\1>/gi, " ").replace(/<[^>]*>/g, " ") : text4;
   const collapsed = stripped.replace(/\s+/g, " ").trim();
   if (collapsed.length <= MAX_ERROR_DETAIL_LENGTH)
     return collapsed;
@@ -42030,6 +42346,10 @@ class RemoteSkillsAuthClient {
     const origin = this.apiOrigin, captured = workspaceContext(context);
     return new RemotePrivatePublicationsClient(origin, await this.switchWorkspace(email4, code, captured));
   }
+  async openPrivateSkillHistory(email4, code, context) {
+    const origin = this.apiOrigin, captured = workspaceContext(context);
+    return new RemotePrivateSkillHistoryClient(origin, await this.switchWorkspace(email4, code, captured));
+  }
   requestInvitationEmailChallenge(input2) {
     return requestInvitationEmail(this.apiOrigin, "challenge", input2);
   }
@@ -42202,10 +42522,10 @@ var init_remote_auth = __esm(() => {
 });
 
 // src/lib/workspace-profile.ts
-import { constants as constants17, closeSync as closeSync19, fstatSync as fstatSync19, lstatSync as lstatSync25, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync2, openSync as openSync19, readFileSync as readFileSync20, renameSync as renameSync5, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "fs";
+import { constants as constants17, closeSync as closeSync19, fstatSync as fstatSync19, lstatSync as lstatSync26, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync2, openSync as openSync19, readFileSync as readFileSync21, renameSync as renameSync5, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "fs";
 function stat2(path) {
   try {
-    return lstatSync25(path);
+    return lstatSync26(path);
   } catch (error61) {
     if (error61.code === "ENOENT")
       return null;
@@ -42220,18 +42540,18 @@ function safeText(file2) {
     const s = fstatSync19(fd);
     if (!s.isFile() || s.size > 65536 || ![256, 384].includes(s.mode & 4095) || process.getuid && s.uid !== process.getuid())
       return fail("The selected profile must use bounded owner-only regular files.");
-    return readFileSync20(fd, "utf8");
+    return readFileSync21(fd, "utf8");
   } finally {
     closeSync19(fd);
   }
 }
 function checkIdentityMetadata(file2, identity4) {
-  const text3 = safeText(file2);
-  if (text3 === null)
+  const text4 = safeText(file2);
+  if (text4 === null)
     return;
   let value;
   try {
-    value = JSON.parse(text3);
+    value = JSON.parse(text4);
   } catch {
     return fail("The profile identity metadata is invalid. Sign in again before managing this workspace.");
   }
@@ -42434,8 +42754,8 @@ var init_recurring_customer = __esm(() => {
 });
 
 // src/lib/recurring-recovery.ts
-import { constants as constants18, closeSync as closeSync20, fsyncSync as fsyncSync5, fstatSync as fstatSync20, lstatSync as lstatSync26, mkdirSync as mkdirSync11, openSync as openSync20, readSync as readSync13, realpathSync as realpathSync11, renameSync as renameSync6, unlinkSync as unlinkSync5, writeFileSync as writeFileSync9 } from "fs";
-import { dirname as dirname25, isAbsolute as isAbsolute24, join as join35, resolve as resolve25 } from "path";
+import { constants as constants18, closeSync as closeSync20, fsyncSync as fsyncSync5, fstatSync as fstatSync20, lstatSync as lstatSync27, mkdirSync as mkdirSync11, openSync as openSync20, readSync as readSync13, realpathSync as realpathSync11, renameSync as renameSync6, unlinkSync as unlinkSync5, writeFileSync as writeFileSync9 } from "fs";
+import { dirname as dirname26, isAbsolute as isAbsolute24, join as join36, resolve as resolve25 } from "path";
 import { randomUUID as randomUUID3 } from "crypto";
 
 class RecoveryOwner {
@@ -42445,12 +42765,12 @@ class RecoveryOwner {
     this.directory = directory;
     if (!isAbsolute24(directory) || resolve25(directory) !== directory || realpathSync11(directory) !== directory)
       invalid5();
-    for (let path = directory;; path = dirname25(path)) {
-      const stat3 = lstatSync26(path);
+    for (let path = directory;; path = dirname26(path)) {
+      const stat3 = lstatSync27(path);
       if (!stat3.isDirectory() || stat3.isSymbolicLink())
         invalid5();
       this.parents.push({ path, dev: stat3.dev, ino: stat3.ino });
-      if (path === dirname25(path))
+      if (path === dirname26(path))
         break;
     }
     this.assert();
@@ -42459,17 +42779,17 @@ class RecoveryOwner {
     if (realpathSync11(this.directory) !== this.directory)
       invalid5();
     for (const prior of this.parents) {
-      const now = lstatSync26(prior.path);
+      const now = lstatSync27(prior.path);
       if (!now.isDirectory() || now.isSymbolicLink() || now.dev !== prior.dev || now.ino !== prior.ino)
         invalid5();
     }
-    const own2 = lstatSync26(this.directory);
+    const own2 = lstatSync27(this.directory);
     if ((own2.mode & 511) !== 448 || (own2.mode & 3584) !== 0 || process.getuid && own2.uid !== process.getuid())
       invalid5();
   }
   read(name) {
     this.assert();
-    const fd = openSync20(join35(this.directory, name), constants18.O_RDONLY | constants18.O_NOFOLLOW | constants18.O_NONBLOCK);
+    const fd = openSync20(join36(this.directory, name), constants18.O_RDONLY | constants18.O_NOFOLLOW | constants18.O_NONBLOCK);
     try {
       const before = fstatSync20(fd);
       if (!before.isFile() || before.nlink !== 1 || (before.mode & 4095) !== 384 || before.size < 1 || before.size > 8192 || process.getuid && before.uid !== process.getuid())
@@ -42482,7 +42802,7 @@ class RecoveryOwner {
           break;
         size += n2;
       }
-      const after = fstatSync20(fd), path = lstatSync26(join35(this.directory, name));
+      const after = fstatSync20(fd), path = lstatSync27(join36(this.directory, name));
       if (size !== before.size || after.size !== before.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs || path.dev !== before.dev || path.ino !== before.ino || !path.isFile() || path.isSymbolicLink())
         invalid5();
       this.assert();
@@ -42495,7 +42815,7 @@ class RecoveryOwner {
     this.assert();
     const bytes = canonicalJson2(value, 8192) + `
 `;
-    const fd = openSync20(join35(this.directory, name), constants18.O_WRONLY | constants18.O_CREAT | constants18.O_EXCL | constants18.O_NOFOLLOW, 384);
+    const fd = openSync20(join36(this.directory, name), constants18.O_WRONLY | constants18.O_CREAT | constants18.O_EXCL | constants18.O_NOFOLLOW, 384);
     try {
       writeFileSync9(fd, bytes);
       fsyncSync5(fd);
@@ -42522,14 +42842,14 @@ class RecoveryOwner {
     if (this.read("state.json") !== expected)
       invalid5();
     this.assert();
-    renameSync6(join35(this.directory, name), join35(this.directory, "state.json"));
+    renameSync6(join36(this.directory, name), join36(this.directory, "state.json"));
     this.sync();
   }
   async locked(action) {
     this.assert();
     let fd;
     try {
-      fd = openSync20(join35(this.directory, "operation.lock"), constants18.O_WRONLY | constants18.O_CREAT | constants18.O_EXCL | constants18.O_NOFOLLOW, 384);
+      fd = openSync20(join36(this.directory, "operation.lock"), constants18.O_WRONLY | constants18.O_CREAT | constants18.O_EXCL | constants18.O_NOFOLLOW, 384);
     } catch {
       throw new RecurringCustomerError("RECURRING_RECOVERY_BUSY", "Recovery is locked. Confirm the original process has stopped before explicitly reconciling the retained lock; no request was retried.");
     }
@@ -42542,10 +42862,10 @@ class RecoveryOwner {
     } finally {
       closeSync20(fd);
       this.assert();
-      const now = lstatSync26(join35(this.directory, "operation.lock"));
+      const now = lstatSync27(join36(this.directory, "operation.lock"));
       if (owner2.dev !== now.dev || owner2.ino !== now.ino || !now.isFile() || now.isSymbolicLink())
         invalid5();
-      unlinkSync5(join35(this.directory, "operation.lock"));
+      unlinkSync5(join36(this.directory, "operation.lock"));
       this.sync();
     }
   }
@@ -42578,7 +42898,7 @@ function base(customer, organizationId) {
   };
 }
 function create(directory, intent) {
-  if (!isAbsolute24(directory) || resolve25(directory) !== directory || realpathSync11(dirname25(directory)) !== dirname25(directory))
+  if (!isAbsolute24(directory) || resolve25(directory) !== directory || realpathSync11(dirname26(directory)) !== dirname26(directory))
     invalid5();
   mkdirSync11(directory, { mode: 448 });
   const owner2 = new RecoveryOwner(directory), checked = intentSchema.parse(intent), intentSha256 = canonicalJsonSha256(checked);
@@ -44315,17 +44635,17 @@ var init_tool_primitives = __esm(() => {
 
 // src/lib/compact-output.ts
 function truncateText(value, maxChars = 96) {
-  const text3 = String(value ?? "").replace(/\s+/g, " ").trim();
-  if (text3.length <= maxChars)
-    return text3;
-  return `${text3.slice(0, Math.max(0, maxChars - 3)).trimEnd()}...`;
+  const text4 = String(value ?? "").replace(/\s+/g, " ").trim();
+  if (text4.length <= maxChars)
+    return text4;
+  return `${text4.slice(0, Math.max(0, maxChars - 3)).trimEnd()}...`;
 }
 function previewText(value, maxChars = DEFAULT_PREVIEW_CHARS) {
-  const text3 = String(value ?? "");
+  const text4 = String(value ?? "");
   return {
-    text: text3.length > maxChars ? `${text3.slice(0, Math.max(0, maxChars - 3))}...` : text3,
-    length: text3.length,
-    truncated: text3.length > maxChars
+    text: text4.length > maxChars ? `${text4.slice(0, Math.max(0, maxChars - 3))}...` : text4,
+    length: text4.length,
+    truncated: text4.length > maxChars
   };
 }
 function parsePageLimit(value, fallback, options = {}) {
@@ -44675,21 +44995,21 @@ var init_credential_state = __esm(() => {
 });
 
 // src/lib/run-state.ts
-import { createHash as createHash27, randomBytes } from "crypto";
-import { existsSync as existsSync15, mkdirSync as mkdirSync12, readFileSync as readFileSync21, readdirSync as readdirSync11, statSync as statSync11, writeFileSync as writeFileSync10 } from "fs";
-import { extname, join as join36, relative as relative9 } from "path";
+import { createHash as createHash28, randomBytes } from "crypto";
+import { existsSync as existsSync15, mkdirSync as mkdirSync12, readFileSync as readFileSync22, readdirSync as readdirSync12, statSync as statSync11, writeFileSync as writeFileSync10 } from "fs";
+import { extname, join as join37, relative as relative9 } from "path";
 function createSkillRun(params, targetDir = process.cwd()) {
   const now = new Date;
   const id = createRunId(now);
   const day = now.toISOString().slice(0, 10);
   const skillName = normalizeSkillName(params.skill);
   const root = getProjectStateDir(targetDir);
-  const runDir = join36(root, "runs", day, id);
-  const logsDir = join36(runDir, "logs");
-  const exportDir = join36(root, "exports", skillName, id);
+  const runDir = join37(root, "runs", day, id);
+  const logsDir = join37(runDir, "logs");
+  const exportDir = join37(root, "exports", skillName, id);
   mkdirSync12(logsDir, { recursive: true });
   mkdirSync12(exportDir, { recursive: true });
-  mkdirSync12(join36(root, "tmp"), { recursive: true });
+  mkdirSync12(join37(root, "tmp"), { recursive: true });
   const record11 = {
     id,
     skill: skillName,
@@ -44741,22 +45061,22 @@ function updateSkillRun(context2, patch) {
   return context2.record;
 }
 function writeRunLogs(context2, stdout = "", stderr = "") {
-  writeFileSync10(join36(context2.logsDir, "stdout.log"), stdout);
-  writeFileSync10(join36(context2.logsDir, "stderr.log"), stderr);
+  writeFileSync10(join37(context2.logsDir, "stdout.log"), stdout);
+  writeFileSync10(join37(context2.logsDir, "stderr.log"), stderr);
 }
 function appendRunEvent(context2, event, data = {}) {
   const line = JSON.stringify({ ts: new Date().toISOString(), event, ...data }) + `
 `;
-  const path = join36(context2.runDir, "events.ndjson");
-  const previous = existsSync15(path) ? readFileSync21(path, "utf-8") : "";
+  const path = join37(context2.runDir, "events.ndjson");
+  const previous = existsSync15(path) ? readFileSync22(path, "utf-8") : "";
   writeFileSync10(path, previous + line);
 }
 function findSkillRun(runId, targetDir = process.cwd()) {
-  const runsRoot = join36(getProjectStateDir(targetDir), "runs");
+  const runsRoot = join37(getProjectStateDir(targetDir), "runs");
   if (!existsSync15(runsRoot))
     return null;
-  for (const day of readdirSync11(runsRoot)) {
-    const record11 = readRunRecord(join36(runsRoot, day, runId));
+  for (const day of readdirSync12(runsRoot)) {
+    const record11 = readRunRecord(join37(runsRoot, day, runId));
     if (record11)
       return record11;
   }
@@ -44773,11 +45093,11 @@ function skillRunEnv(context2) {
   };
 }
 function writeRunRecord(context2) {
-  writeFileSync10(join36(context2.runDir, "run.json"), JSON.stringify(context2.record, null, 2) + `
+  writeFileSync10(join37(context2.runDir, "run.json"), JSON.stringify(context2.record, null, 2) + `
 `);
 }
 function writeArtifactsManifest(context2, artifacts) {
-  writeFileSync10(join36(context2.runDir, "artifacts.json"), JSON.stringify({ runId: context2.record.id, artifacts }, null, 2) + `
+  writeFileSync10(join37(context2.runDir, "artifacts.json"), JSON.stringify({ runId: context2.record.id, artifacts }, null, 2) + `
 `);
 }
 function collectRunArtifacts(context2) {
@@ -44786,30 +45106,30 @@ function collectRunArtifacts(context2) {
   const artifacts = [];
   for (const path of walkFiles(context2.exportDir)) {
     const stat3 = statSync11(path);
-    const bytes = readFileSync21(path);
+    const bytes = readFileSync22(path);
     artifacts.push({
       path: toProjectRelative(context2.targetDir, path),
       mime: mimeForPath(path),
-      sha256: createHash27("sha256").update(bytes).digest("hex"),
+      sha256: createHash28("sha256").update(bytes).digest("hex"),
       sizeBytes: stat3.size
     });
   }
   return artifacts.sort((a, b) => a.path.localeCompare(b.path));
 }
 function readRunRecord(runDir) {
-  const path = join36(runDir, "run.json");
+  const path = join37(runDir, "run.json");
   if (!existsSync15(path))
     return null;
   try {
-    return JSON.parse(readFileSync21(path, "utf-8"));
+    return JSON.parse(readFileSync22(path, "utf-8"));
   } catch {
     return null;
   }
 }
 function walkFiles(dir) {
   const files = [];
-  for (const entry of readdirSync11(dir)) {
-    const full = join36(dir, entry);
+  for (const entry of readdirSync12(dir)) {
+    const full = join37(dir, entry);
     if (statSync11(full).isDirectory())
       files.push(...walkFiles(full));
     else
@@ -45062,11 +45382,11 @@ var init_cloud_executions = __esm(() => {
 // node_modules/@hasna/secrets/dist/sdk.js
 import { isIP as isIP2 } from "net";
 import { spawnSync as spawnSync5 } from "child_process";
-import { closeSync as closeSync21, fstatSync as fstatSync21, openSync as openSync21, readFileSync as readFileSync22 } from "fs";
+import { closeSync as closeSync21, fstatSync as fstatSync21, openSync as openSync21, readFileSync as readFileSync23 } from "fs";
 import { O_NOFOLLOW as O_NOFOLLOW3, O_NONBLOCK as O_NONBLOCK3, O_RDONLY as O_RDONLY3 } from "constants";
 import { createRequire as createRequire2 } from "module";
 import { hostname as osHostname2 } from "os";
-import { isAbsolute as isAbsolute26, join as join37 } from "path";
+import { isAbsolute as isAbsolute26, join as join38 } from "path";
 import { createRequire as createRequire22 } from "module";
 function envToken2(name) {
   return name.toUpperCase().replace(/-/g, "_");
@@ -45097,14 +45417,14 @@ function hasnaHomeDir2(env) {
   if (override)
     return override;
   const home = homeDir2(env);
-  return home ? join37(home, HASNA_HOME_DIR2) : null;
+  return home ? join38(home, HASNA_HOME_DIR2) : null;
 }
 function appConfigDir2(name, env) {
   const configRoot = absoluteOverride2(env, HASNA_CONFIG_HOME_ENV_KEY2);
   if (configRoot)
-    return join37(configRoot, name);
+    return join38(configRoot, name);
   const root = hasnaHomeDir2(env);
-  return root ? join37(root, name, CONFIG_SUBDIR2) : null;
+  return root ? join38(root, name, CONFIG_SUBDIR2) : null;
 }
 function credentialDiskSourceList2(name, env, profile = null) {
   if (!SAFE_APP_SLUG2.test(name))
@@ -45113,7 +45433,7 @@ function credentialDiskSourceList2(name, env, profile = null) {
   if (!directory2)
     return [];
   const file2 = profile ? `${CREDENTIALS_FILE2}-${profile}` : CREDENTIALS_FILE2;
-  return [{ path: join37(directory2, file2), tier: "disk" }];
+  return [{ path: join38(directory2, file2), tier: "disk" }];
 }
 function credentialDiskSources2(name, env) {
   return credentialDiskSourceList2(name, env, null).map((s) => s.path);
@@ -45121,10 +45441,10 @@ function credentialDiskSources2(name, env) {
 function profileDiskSources2(name, env, profile) {
   return credentialDiskSourceList2(name, env, profile).map((s) => s.path);
 }
-function parseEnvFile2(text3) {
+function parseEnvFile2(text4) {
   const values = new Map;
   const unusable = new Set;
-  for (const rawLine of text3.split(/\r?\n/)) {
+  for (const rawLine of text4.split(/\r?\n/)) {
     const line = rawLine.trim();
     if (line.length === 0 || line.startsWith("#"))
       continue;
@@ -45188,7 +45508,7 @@ function readAppConfigFile2(path) {
       unsafe("the file is not owned by the current user");
     if (before.size > MAX_CREDENTIAL_FILE_BYTES2)
       unsafe("the file exceeds the size limit");
-    const bytes = readFileSync22(fd);
+    const bytes = readFileSync23(fd);
     const after = fstatSync21(fd);
     if (!configFileReadsCoherent2(before, after)) {
       unsafe("the file changed while being read");
@@ -45364,8 +45684,8 @@ function keychainAccount2(env, options) {
   const user = env.USER?.trim();
   return user || null;
 }
-function keychainFailureHint2(text3) {
-  const line = text3.split(/\r?\n/).find((entry) => entry.trim().length > 0)?.trim() ?? "";
+function keychainFailureHint2(text4) {
+  const line = text4.split(/\r?\n/).find((entry) => entry.trim().length > 0)?.trim() ?? "";
   const clean = line.replace(/[\u0000-\u001f\u007f]/g, "").slice(0, 200);
   return clean ? `: ${clean}` : "";
 }
@@ -45943,12 +46263,12 @@ function createHasnaHttpTransportInternal(options, requestBindingProvider) {
         await response.body?.cancel();
       } catch {}
     } else {
-      const text3 = await response.text();
-      if (text3.length > 0) {
+      const text4 = await response.text();
+      if (text4.length > 0) {
         try {
-          parsed = JSON.parse(text3);
+          parsed = JSON.parse(text4);
         } catch {
-          parsed = text3;
+          parsed = text4;
         }
       }
     }
@@ -46051,13 +46371,13 @@ class SecretsClient {
       headers,
       redirect: "manual"
     });
-    const text3 = await response.text();
+    const text4 = await response.text();
     let body = undefined;
-    if (text3) {
+    if (text4) {
       try {
-        body = JSON.parse(text3);
+        body = JSON.parse(text4);
       } catch {
-        body = text3;
+        body = text4;
       }
     }
     if (!response.ok) {
@@ -46459,7 +46779,7 @@ async function resolveSelectedSecrets(bindings, createClient = createSecretsClie
     return refuse5("LOCAL_SECRET_UNAVAILABLE", "A declared secret could not be resolved, was invalid, or has expired. The skill was not started; no fallback was attempted.");
   }
 }
-function redactExecutionSecrets(text3, env) {
+function redactExecutionSecrets(text4, env) {
   const values = new Set(Object.values(env).flatMap((value) => {
     let encoded = "";
     try {
@@ -46468,8 +46788,8 @@ function redactExecutionSecrets(text3, env) {
     return [value, JSON.stringify(value).slice(1, -1), Buffer.from(value).toString("base64"), encoded];
   }));
   for (const value of [...values].filter(Boolean).sort((a, b) => b.length - a.length))
-    text3 = text3.split(value).join("[REDACTED]");
-  return text3;
+    text4 = text4.split(value).join("[REDACTED]");
+  return text4;
 }
 var init_execution_secrets = __esm(() => {
   init_sdk();
@@ -46608,10 +46928,10 @@ __export(exports_selected_run, {
   executeSelectedLocal: () => executeSelectedLocal,
   declaredOperation: () => declaredOperation
 });
-import { createHash as createHash28 } from "crypto";
+import { createHash as createHash29 } from "crypto";
 import { spawn as spawn2 } from "child_process";
 import { mkdirSync as mkdirSync13, mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync11, realpathSync as realpathSync13 } from "fs";
-import { dirname as dirname26, join as join38, resolve as resolve26 } from "path";
+import { dirname as dirname27, join as join39, resolve as resolve26 } from "path";
 import { tmpdir, hostname as stationHostname2 } from "os";
 async function resolveSelectedRun(spec, profileId, options = {}) {
   const context2 = await resolveSelectionContext(profileId, options);
@@ -46734,7 +47054,7 @@ async function executeSelectedLocal(selected, options = {}) {
         throw new SkillSelectionError("INVALID_SECRET_BINDINGS", "Explicit environment values must be bounded strings without NUL bytes.");
       secretEnv[name] = value;
     }
-  const runDirectory = mkdtempSync3(join38(tmpdir(), "skills-execution-"));
+  const runDirectory = mkdtempSync3(join39(tmpdir(), "skills-execution-"));
   const paths = new SkillEntryPaths;
   for (const entry of entries) {
     paths.add(entry.path, 100, () => {
@@ -46742,8 +47062,8 @@ async function executeSelectedLocal(selected, options = {}) {
     }, () => {
       throw new SkillSelectionError("INVALID_BUNDLE_PATH", "The execution bundle path exceeds its limit.");
     });
-    const destination = join38(runDirectory, entry.path);
-    mkdirSync13(dirname26(destination), { recursive: true, mode: 448 });
+    const destination = join39(runDirectory, entry.path);
+    mkdirSync13(dirname27(destination), { recursive: true, mode: 448 });
     writeFileSync11(destination, entry.bytes, { flag: "wx", mode: entry.mode & 511 });
   }
   env.SKILLS_INPUT_JSON = input2;
@@ -46770,7 +47090,7 @@ async function executeSelectedLocal(selected, options = {}) {
   }
   if (bindings)
     secretEnv = await resolveSelectedSecrets(bindings, options.createSecretsClient);
-  const result = await subprocess([executable, ...runtimeName === "bun" ? ["--no-env-file"] : [], join38(runDirectory, declaredEntry), ...args], runDirectory, { ...env, ...secretEnv }, input2, timeoutMs);
+  const result = await subprocess([executable, ...runtimeName === "bun" ? ["--no-env-file"] : [], join39(runDirectory, declaredEntry), ...args], runDirectory, { ...env, ...secretEnv }, input2, timeoutMs);
   result.stdout = redactExecutionSecrets(result.stdout, secretEnv);
   result.stderr = redactExecutionSecrets(result.stderr, secretEnv);
   const receipt = {
@@ -46778,13 +47098,13 @@ async function executeSelectedLocal(selected, options = {}) {
     target: "local",
     runtime: runtimeName,
     entrypoint: declaredEntry,
-    inputDigest: `sha256:${createHash28("sha256").update(input2).digest("hex")}`,
+    inputDigest: `sha256:${createHash29("sha256").update(input2).digest("hex")}`,
     runDirectory,
     ...executionGrant ? { executionGrant } : {},
     ...bindings ? { secretBinding: { schema: bindings.schema, selection: bindings.selection, consumer: bindings.consumer, secretsAuthority: bindings.secretsAuthority, bindings: bindings.bindings } } : {},
     ...result
   };
-  writeFileSync11(join38(runDirectory, ".execution-receipt.json"), JSON.stringify({ ...receipt, stdout: undefined, stderr: undefined }), { mode: 384 });
+  writeFileSync11(join39(runDirectory, ".execution-receipt.json"), JSON.stringify({ ...receipt, stdout: undefined, stderr: undefined }), { mode: 384 });
   return receipt;
 }
 async function subprocess(command, cwd, env, input2, timeoutMs) {
@@ -46973,8 +47293,8 @@ var init_blog_article = __esm(() => {
 });
 
 // src/mcp/operation-tools.ts
-import { existsSync as existsSync16, readdirSync as readdirSync12, statSync as statSync12 } from "fs";
-import { join as join39 } from "path";
+import { existsSync as existsSync16, readdirSync as readdirSync13, statSync as statSync12 } from "fs";
+import { join as join40 } from "path";
 function registerOperationTools(server) {
   server.registerTool("cloud_skill_eligibility", {
     title: "Cloud Skill Eligibility",
@@ -47455,8 +47775,8 @@ function registerOperationTools(server) {
       let skillCount = 0;
       if (exists) {
         try {
-          skillCount = readdirSync12(agentSkillsPath).filter((f) => {
-            const full = join39(agentSkillsPath, f);
+          skillCount = readdirSync13(agentSkillsPath).filter((f) => {
+            const full = join40(agentSkillsPath, f);
             return !f.startsWith(".") && statSync12(full).isDirectory();
           }).length;
         } catch {}
@@ -47524,14 +47844,14 @@ var init_operation_tools = __esm(() => {
 
 // src/lib/feedback.ts
 import { appendFileSync, existsSync as existsSync17, mkdirSync as mkdirSync14 } from "fs";
-import { dirname as dirname27, join as join40 } from "path";
+import { dirname as dirname28, join as join41 } from "path";
 import { Database } from "bun:sqlite";
 function getFeedbackDbPath() {
-  return join40(getDataDir(), "skills.db");
+  return join41(getDataDir(), "skills.db");
 }
 function getFeedbackDb() {
   const dbPath = getFeedbackDbPath();
-  const dir = dirname27(dbPath);
+  const dir = dirname28(dbPath);
   if (!existsSync17(dir))
     mkdirSync14(dir, { recursive: true });
   const db = new Database(dbPath);
@@ -47559,8 +47879,8 @@ function saveFeedback(input2) {
     throw new Error("Feedback message is required");
   const category = input2.category ?? "general";
   if (isApiMode()) {
-    const path = join40(getDataDir(), "feedback.jsonl");
-    const dir = dirname27(path);
+    const path = join41(getDataDir(), "feedback.jsonl");
+    const dir = dirname28(path);
     if (!existsSync17(dir))
       mkdirSync14(dir, { recursive: true });
     appendFileSync(path, JSON.stringify({ message, category, email: input2.email ?? null, agent: input2.agent ?? null, version: input2.version ?? null, createdAt: new Date().toISOString() }) + `
@@ -47723,23 +48043,23 @@ var init_resource_meta_tools = __esm(() => {
 });
 
 // src/lib/scheduler.ts
-import { existsSync as existsSync18, readFileSync as readFileSync23, writeFileSync as writeFileSync12, mkdirSync as mkdirSync15 } from "fs";
-import { join as join41 } from "path";
+import { existsSync as existsSync18, readFileSync as readFileSync24, writeFileSync as writeFileSync12, mkdirSync as mkdirSync15 } from "fs";
+import { join as join42 } from "path";
 function getSchedulesPath(targetDir = process.cwd()) {
-  return join41(targetDir, ".skills", "schedules.json");
+  return join42(targetDir, ".skills", "schedules.json");
 }
 function loadSchedules(targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
   if (existsSync18(path)) {
     try {
-      return JSON.parse(readFileSync23(path, "utf-8"));
+      return JSON.parse(readFileSync24(path, "utf-8"));
     } catch {}
   }
   return { version: 1, schedules: [] };
 }
 function saveSchedules(data, targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
-  const dir = join41(targetDir, ".skills");
+  const dir = join42(targetDir, ".skills");
   if (!existsSync18(dir))
     mkdirSync15(dir, { recursive: true });
   writeFileSync12(path, JSON.stringify(data, null, 2));
@@ -48011,16 +48331,16 @@ var init_schedule_tools = __esm(() => {
 });
 
 // src/lib/native-storage.ts
-import { createHash as createHash29, createHmac } from "crypto";
+import { createHash as createHash30, createHmac } from "crypto";
 import {
   existsSync as existsSync19,
   mkdirSync as mkdirSync16,
-  readFileSync as readFileSync24,
-  readdirSync as readdirSync13,
+  readFileSync as readFileSync25,
+  readdirSync as readdirSync14,
   statSync as statSync13,
   writeFileSync as writeFileSync13
 } from "fs";
-import { dirname as dirname28, join as join42, normalize as normalize5, relative as relative10, sep as sep14 } from "path";
+import { dirname as dirname29, join as join43, normalize as normalize5, relative as relative10, sep as sep14 } from "path";
 function resolveSkillsNativeStorageConfig(env = process.env) {
   assertNoRetiredModeEnvVars(env, {
     app: SKILLS_ENV_NAMESPACE,
@@ -48061,7 +48381,7 @@ function getSkillsNativeStorageStatus(options = {}) {
     local: {
       dataDir: getDataDir(),
       projectStateDir: getProjectStateDir(targetDir),
-      feedbackDbPath: join42(getDataDir(), "skills.db")
+      feedbackDbPath: join43(getDataDir(), "skills.db")
     },
     remote: {
       databaseConfigured: Boolean(config2.databaseUrl),
@@ -48083,12 +48403,12 @@ function exportSkillsLocalSnapshot(targetDir = process.cwd(), options = {}) {
   const files = [];
   if (existsSync19(projectStateDir)) {
     for (const filePath of walkFiles2(projectStateDir)) {
-      const bytes = readFileSync24(filePath);
+      const bytes = readFileSync25(filePath);
       const relativePath = toPosix(relative10(targetDir, filePath));
       files.push({
         path: relativePath,
         sizeBytes: bytes.byteLength,
-        sha256: createHash29("sha256").update(bytes).digest("hex"),
+        sha256: createHash30("sha256").update(bytes).digest("hex"),
         ...options.includeFileContents ? { contentBase64: Buffer.from(bytes).toString("base64") } : {}
       });
     }
@@ -48141,8 +48461,8 @@ function parsePositiveInteger(value) {
 }
 function walkFiles2(dir) {
   const files = [];
-  for (const entry of readdirSync13(dir)) {
-    const full = join42(dir, entry);
+  for (const entry of readdirSync14(dir)) {
+    const full = join43(dir, entry);
     const stats = statSync13(full);
     if (stats.isDirectory())
       files.push(...walkFiles2(full));
@@ -48360,7 +48680,7 @@ var init_remote_invitation_tools = __esm(() => {
 });
 
 // src/lib/private-publication-customer.ts
-function preparePrivatePublicationSession(requested) {
+function preparePrivateSession(requested, action, open2) {
   const selectors = [
     "HASNA_PROFILE",
     "HASNA_HOME",
@@ -48374,7 +48694,7 @@ function preparePrivatePublicationSession(requested) {
     "SKILLS_API_KEY"
   ];
   const before = new Map(selectors.map((key2) => [key2, process.env[key2]]));
-  const profile = selectedSkillsProfile(process.env), pending = prepareProfileWorkspace("Manage private publications");
+  const profile = selectedSkillsProfile(process.env), pending = prepareProfileWorkspace(action);
   const captured = requested ? { ...requested } : undefined;
   const unchanged3 = () => {
     if (selectors.some((key2) => process.env[key2] !== before.get(key2)) || selectedSkillsProfile(process.env) !== profile)
@@ -48388,12 +48708,15 @@ function preparePrivatePublicationSession(requested) {
       throw new PrivatePublicationError("PUBLICATION_CONTEXT_REQUIRED", "Provide the observed user and membership IDs, or select an enrolled workspace profile.");
     unchanged3();
     target.unchanged();
-    const client = await new RemoteSkillsAuthClient(target.origin).openPrivatePublications(email5, code2, context2);
+    const client = await open2(new RemoteSkillsAuthClient(target.origin), email5, code2, context2);
     unchanged3();
     target.unchanged();
     return client;
   } };
 }
+function preparePrivatePublicationSession(requested) {
+  return preparePrivateSession(requested, "Manage private publications", (auth, email5, code2, context2) => auth.openPrivatePublications(email5, code2, context2));
+}
 async function privatePublicationSession(email5, code2, requested) {
   return preparePrivatePublicationSession(requested).verify(email5, code2);
 }
@@ -48408,20 +48731,20 @@ var init_private_publication_customer = __esm(() => {
 });
 
 // src/lib/private-publication-recovery.ts
-import { constants as constants20, closeSync as closeSync23, fsyncSync as fsyncSync6, fstatSync as fstatSync23, lstatSync as lstatSync27, mkdirSync as mkdirSync17, openSync as openSync23, readSync as readSync15, realpathSync as realpathSync14, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync14 } from "fs";
-import { dirname as dirname29, isAbsolute as isAbsolute27, join as join43, resolve as resolve27 } from "path";
+import { constants as constants20, closeSync as closeSync23, fsyncSync as fsyncSync6, fstatSync as fstatSync23, lstatSync as lstatSync28, mkdirSync as mkdirSync17, openSync as openSync23, readSync as readSync15, realpathSync as realpathSync14, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync14 } from "fs";
+import { dirname as dirname30, isAbsolute as isAbsolute27, join as join44, resolve as resolve27 } from "path";
 import { randomUUID as randomUUID4 } from "crypto";
 function safeDirectory(directory2) {
   if (!isAbsolute27(directory2) || directory2 !== resolve27(directory2) || realpathSync14(directory2) !== directory2)
     return fail2();
-  for (let path = directory2;; path = dirname29(path)) {
-    const stat3 = lstatSync27(path);
+  for (let path = directory2;; path = dirname30(path)) {
+    const stat3 = lstatSync28(path);
     if (!stat3.isDirectory() || stat3.isSymbolicLink())
       return fail2();
-    if (path === dirname29(path))
+    if (path === dirname30(path))
       break;
   }
-  const own2 = lstatSync27(directory2);
+  const own2 = lstatSync28(directory2);
   if ((own2.mode & 63) !== 0 || process.getuid && own2.uid !== process.getuid())
     return fail2();
   return { dev: own2.dev, ino: own2.ino };
@@ -48432,7 +48755,7 @@ function unchangedDirectory(directory2, identity4) {
     return fail2();
 }
 function readOwned(directory2, name, max) {
-  const identity4 = safeDirectory(directory2), file2 = join43(directory2, name);
+  const identity4 = safeDirectory(directory2), file2 = join44(directory2, name);
   const fd = openSync23(file2, constants20.O_RDONLY | constants20.O_NOFOLLOW);
   try {
     const stat3 = fstatSync23(fd);
@@ -48456,7 +48779,7 @@ function readOwned(directory2, name, max) {
   }
 }
 function writeOwned(directory2, name, bytes) {
-  const fd = openSync23(join43(directory2, name), constants20.O_WRONLY | constants20.O_CREAT | constants20.O_EXCL | constants20.O_NOFOLLOW, 384);
+  const fd = openSync23(join44(directory2, name), constants20.O_WRONLY | constants20.O_CREAT | constants20.O_EXCL | constants20.O_NOFOLLOW, 384);
   try {
     writeFileSync14(fd, bytes);
     fsyncSync6(fd);
@@ -48469,7 +48792,7 @@ function save(directory2, value) {
   writeOwned(directory2, temporary, JSON.stringify(value) + `
 `);
   unchangedDirectory(directory2, identity4);
-  renameSync7(join43(directory2, temporary), join43(directory2, "receipt.json"));
+  renameSync7(join44(directory2, temporary), join44(directory2, "receipt.json"));
   const fd = openSync23(directory2, constants20.O_RDONLY | constants20.O_NOFOLLOW);
   try {
     fsyncSync6(fd);
@@ -48482,7 +48805,7 @@ function bind(client, receipt) {
     throw new PrivatePublicationError("PUBLICATION_IDENTITY_CHANGED", "The fresh session does not match the recovery directory's server, account and membership.");
 }
 async function locked(directory2, action) {
-  const identity4 = safeDirectory(directory2), file2 = join43(directory2, "operation.lock");
+  const identity4 = safeDirectory(directory2), file2 = join44(directory2, "operation.lock");
   let fd;
   try {
     fd = openSync23(file2, constants20.O_WRONLY | constants20.O_CREAT | constants20.O_EXCL | constants20.O_NOFOLLOW, 384);
@@ -48498,7 +48821,7 @@ async function locked(directory2, action) {
   } finally {
     closeSync23(fd);
     unchangedDirectory(directory2, identity4);
-    const now = lstatSync27(file2);
+    const now = lstatSync28(file2);
     if (now.dev !== lock.dev || now.ino !== lock.ino || !now.isFile() || now.isSymbolicLink())
       fail2();
     unlinkSync6(file2);
@@ -48550,11 +48873,11 @@ async function preparePrivatePublication(client, sourceDirectory, recoveryDirect
     phase: "prepared",
     intent: null
   };
-  if (!isAbsolute27(recoveryDirectory) || resolve27(recoveryDirectory) !== recoveryDirectory || realpathSync14(dirname29(recoveryDirectory)) !== dirname29(recoveryDirectory))
+  if (!isAbsolute27(recoveryDirectory) || resolve27(recoveryDirectory) !== recoveryDirectory || realpathSync14(dirname30(recoveryDirectory)) !== dirname30(recoveryDirectory))
     return fail2();
   mkdirSync17(recoveryDirectory, { mode: 448 });
   safeDirectory(recoveryDirectory);
-  const parent = openSync23(dirname29(recoveryDirectory), constants20.O_RDONLY | constants20.O_NOFOLLOW);
+  const parent = openSync23(dirname30(recoveryDirectory), constants20.O_RDONLY | constants20.O_NOFOLLOW);
   try {
     fsyncSync6(parent);
   } finally {
@@ -49005,13 +49328,13 @@ function legacyInputSchema(rest) {
 function jsonSchema(schema, io) {
   if (schema === undefined || schema === null)
     return;
-  const object7 = isRawShape(schema) ? exports_external.object(schema) : schema;
-  const def = object7._zod?.def;
+  const object8 = isRawShape(schema) ? exports_external.object(schema) : schema;
+  const def = object8._zod?.def;
   if (!def)
     throw new Error("Skills MCP tool schemas must be built with this package's zod 4");
   if (def.type !== "object" && def.shape === undefined)
     return;
-  return exports_external.toJSONSchema(object7, { target: "draft-7", io });
+  return exports_external.toJSONSchema(object8, { target: "draft-7", io });
 }
 var EMPTY_OBJECT_JSON_SCHEMA;
 var init_package_tool_list = __esm(() => {