@hasna/skills 0.9.14 → 0.9.16

package/bin/index.js

@@ -36868,7 +36868,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.9.14",
+    version: "0.9.16",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -51146,7 +51146,15 @@ function planAgentIntegration(options) {
     validateProfile(profileId2);
     return [agent, { command, profileId: profileId2 }];
   }));
-  const discoveries = [...new Set(options.agents)].map((agent) => resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, canonical: (path) => canonicalAgentPath(path, aliases) }));
+  const retainedAgents = [];
+  const discoveries = [...new Set(options.agents)].map((agent) => {
+    const retainedReview = options.discoveryInputs === undefined && policy.bridge?.discovery?.[agent]?.method === "reviewed" ? policy.bridge.discovery[agent] : undefined;
+    if (retainedReview) {
+      assertManagedAgentBridge(agent, { home, dataDir: dataDir3, projectDir: options.projectDir ?? home });
+      retainedAgents.push(agent);
+    }
+    return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases) });
+  });
   const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases });
   const changes = [];
   for (const agent of [...new Set(options.agents)]) {
@@ -51231,7 +51239,7 @@ function planAgentIntegration(options) {
   if (JSON.stringify(policy) !== JSON.stringify(nextPolicy))
     changes.push({ path: policyPath, before: previousPolicy, after: serializedPolicy });
   recheckRootAliases(aliases);
-  return { dataDir: dataDir3, profileId, changes, nativeSkills, observedPolicy: { path: policyPath, before: previousPolicy }, discoveryBefore: discoveries, discoveryAfter, ...aliases.length ? { rootAliases: aliases } : {} };
+  return { dataDir: dataDir3, profileId, changes, nativeSkills, observedPolicy: { path: policyPath, before: previousPolicy }, discoveryBefore: discoveries, discoveryAfter, ...aliases.length ? { rootAliases: aliases } : {}, ...retainedAgents.length ? { retainedReviewChecks: { home, projectDir: options.projectDir ?? home, agents: retainedAgents } } : {} };
 }
 function verifyCoordinatedDiscovery(binding, home, aliases) {
   try {
@@ -51269,6 +51277,8 @@ function applyAgentIntegration(plan) {
       parseManagedSkillPolicy(change.after);
   const aliases = plan.rootAliases ?? [];
   recheckRootAliases(aliases);
+  for (const agent of plan.retainedReviewChecks?.agents ?? [])
+    assertManagedAgentBridge(agent, { ...plan.retainedReviewChecks, dataDir: plan.dataDir });
   for (const agent of plan.managedAgentChecks?.agents ?? [])
     assertManagedAgentBridge(agent, { home: plan.managedAgentChecks.home, dataDir: plan.dataDir, projectDir: plan.managedAgentChecks.home });
   for (const binding of plan.discoveryBefore ?? []) {
@@ -54696,39 +54706,132 @@ var fail2 = () => new Error('CODEX_HOOK_TRUST_UNSUPPORTED_LAYOUT: preserve and c
 };
 var init_codex_hook_trust_layout = () => {};
 
+// src/lib/codex-hook-additions-review.ts
+import { isAbsolute as isAbsolute14 } from "path";
+import { isDeepStrictEqual as isDeepStrictEqual5 } from "util";
+function exactKeys2(value, keys2) {
+  need4(value && typeof value === "object" && !Array.isArray(value) && isDeepStrictEqual5(Object.keys(value).sort(), [...keys2].sort()), "RECONCILE_ADDITIONS_REVIEW_SCHEMA");
+}
+function readReviewedAdditionTrustStates(proof, before2, current, journalHooks) {
+  const captured = proofs.get(proof);
+  need4(!!captured && captured.before.file === before2.file && captured.before.sha256 === before2.sha256 && captured.current.file === current.file && captured.current.sha256 === current.sha256 && isDeepStrictEqual5(captured.journalHooks, journalHooks.map(({ key, currentHash }) => ({ key, currentHash }))), "RECONCILE_ADDITIONS_PROOF_CHANGED");
+  captured.recheck();
+  unchanged2(before2);
+  unchanged2(current);
+  return captured.states;
+}
+function reviewNativeHookAdditions(options) {
+  need4(isAbsolute14(options.path), "RECONCILE_ADDITIONS_REVIEW_PATH");
+  const reviewFile = snapshot(options.path, true), review = JSON.parse(reviewFile.text);
+  exactKeys2(review, ["version", "kind", "reason", "producerEvidence", "journalIntentSha256", "policySha256", "configCurrentSha256", "hooksCurrentSha256", "producerBefore", "additions"]);
+  need4((review.version === 1 || review.version === 2) && review.kind === "native-hook-additions" && text2(review.reason) && text2(review.producerEvidence), "RECONCILE_ADDITIONS_REVIEW_SCHEMA");
+  for (const [name, expected] of [["journalIntentSha256", options.intent.sha256], ["policySha256", options.policy.sha256], ["configCurrentSha256", options.configCurrent.sha256], ["hooksCurrentSha256", options.hooksCurrent.sha256]])
+    need4(hash2(review[name]) && review[name] === expected, "RECONCILE_ADDITIONS_REVIEW_CHANGED");
+  exactKeys2(review.producerBefore, ["configPath", "configSha256", "hooksPath", "hooksSha256"]);
+  const before2 = review.producerBefore;
+  need4(isAbsolute14(before2.configPath) && isAbsolute14(before2.hooksPath) && hash2(before2.configSha256) && hash2(before2.hooksSha256), "RECONCILE_ADDITIONS_PRODUCER_PREIMAGE");
+  const producerConfig = snapshot(before2.configPath, true), producerHooks = snapshot(before2.hooksPath, true);
+  need4(producerConfig.sha256 === before2.configSha256 && producerHooks.sha256 === before2.hooksSha256 && producerHooks.sha256 === options.hooksBefore.sha256, "RECONCILE_ADDITIONS_PRODUCER_PREIMAGE");
+  const original = structure(options.configBefore.text), producer = structure(producerConfig.text), expectedProducer = structuredClone(original), originalKeys = options.journalHooks.map((hook) => hook.key);
+  expectedProducer.hooks ??= {};
+  expectedProducer.hooks.state ??= {};
+  for (const hook of options.journalHooks)
+    expectedProducer.hooks.state[hook.key] = { ...expectedProducer.hooks.state[hook.key], enabled: true, trusted_hash: hook.currentHash };
+  need4(isDeepStrictEqual5(expectedProducer, producer) && codexTrustReconcileWitness(options.configBefore.text, originalKeys) === codexTrustReconcileWitness(producerConfig.text, originalKeys) && codexTrustUnmanagedSemantic(options.configBefore.text, originalKeys) === codexTrustUnmanagedSemantic(producerConfig.text, originalKeys), "RECONCILE_ADDITIONS_PRODUCER_PREIMAGE");
+  need4(Array.isArray(review.additions) && review.additions.length > 0 && review.additions.length <= 20, "RECONCILE_ADDITIONS_REVIEW_SCHEMA");
+  const expectedHooks = JSON.parse(options.hooksBefore.text), currentHooks = JSON.parse(options.hooksCurrent.text), expectedConfig = structuredClone(producer);
+  need4(expectedHooks.hooks && typeof expectedHooks.hooks === "object" && !Array.isArray(expectedHooks.hooks), "RECONCILE_ADDITIONS_DECLARATIONS");
+  const added = [], states = [], seen = new Set, commands = new Set(options.recordedNativeHooks.map((hook) => hook.command));
+  for (const addition of review.additions) {
+    exactKeys2(addition, review.version === 1 ? ["event", "nativeHook"] : ["event", "nativeHook", "trustState"]);
+    need4(Object.hasOwn(review.version === 1 ? events : matchedEvents, addition.event), "RECONCILE_ADDITIONS_DECLARATIONS");
+    const { event, nativeHook: hook } = addition;
+    exactKeys2(hook, nativeKeys);
+    const groups = expectedHooks.hooks[event] ?? [];
+    need4(Array.isArray(groups), "RECONCILE_ADDITIONS_DECLARATIONS");
+    const key = `${options.nativeHooksPath}:${matchedEvents[event][1]}:${groups.length}:0`;
+    need4(hook.key === key && !seen.has(key) && !options.recordedNativeHooks.some((originalHook) => originalHook.key === key) && !Object.hasOwn(expectedConfig.hooks.state, key), "RECONCILE_ADDITIONS_IDENTITY");
+    need4(hook.eventName === matchedEvents[event][0] && hook.handlerType === "command" && (review.version === 2 ? v2Command(hook.command) : text2(hook.command, 16384)) && !commands.has(hook.command) && Number.isInteger(hook.timeoutSec) && hook.timeoutSec > 0 && hook.timeoutSec <= 60 && (event === "PreToolUse" ? text2(hook.matcher) : hook.matcher === null) && hook.async === false && hook.statusMessage === null && hook.additionalContextLimit === null && hook.sourcePath === options.nativeHooksPath && hook.source === "user" && hook.pluginId === null && hook.isManaged === false && /^sha256:[a-f0-9]{64}$/.test(hook.currentHash) && hook.enabled === true && hook.trustStatus === "trusted", "RECONCILE_ADDITIONS_IDENTITY");
+    let trustState = { enabled: true, trusted_hash: hook.currentHash };
+    if (review.version === 2) {
+      const state = addition.trustState;
+      exactKeys2(state, state && Object.hasOwn(state, "enabled") ? ["enabled", "trusted_hash"] : ["trusted_hash"]);
+      need4(state.trusted_hash === hook.currentHash && (!Object.hasOwn(state, "enabled") || state.enabled === true), "RECONCILE_ADDITIONS_TRUST_STATE");
+      trustState = { ...state };
+    }
+    seen.add(key);
+    commands.add(hook.command);
+    added.push(hook);
+    states.push(Object.freeze({ key, state: Object.freeze(trustState) }));
+    expectedHooks.hooks[event] = [...groups, { ...event === "PreToolUse" ? { matcher: hook.matcher } : {}, hooks: [{ type: "command", command: hook.command, timeout: hook.timeoutSec }] }];
+    expectedConfig.hooks.state[key] = trustState;
+  }
+  need4(isDeepStrictEqual5(expectedHooks, currentHooks), "RECONCILE_ADDITIONS_DECLARATIONS");
+  const keys2 = added.map((hook) => hook.key);
+  need4(isDeepStrictEqual5(expectedConfig, structure(options.configCurrent.text)) && codexTrustReconcileWitness(producerConfig.text, keys2) === codexTrustReconcileWitness(options.configCurrent.text, keys2) && codexTrustUnmanagedSemantic(producerConfig.text, keys2) === codexTrustUnmanagedSemantic(options.configCurrent.text, keys2), "RECONCILE_ADDITIONS_CONFIG");
+  const inputs = [reviewFile, producerConfig, producerHooks, options.intent, options.policy, options.configBefore, options.configCurrent, options.hooksBefore, options.hooksCurrent];
+  const recheck = () => {
+    for (const input of inputs)
+      unchanged2(input);
+  };
+  recheck();
+  const trustProof = Object.freeze({ reviewSha256: reviewFile.sha256 });
+  proofs.set(trustProof, { before: options.configBefore, current: options.configCurrent, journalHooks: options.journalHooks.map(({ key, currentHash }) => ({ key, currentHash })), states: Object.freeze(states), recheck });
+  return { hooks: added, recheck, trustProof, receipt: { ...review.version === 2 ? { version: 2 } : {}, reviewPath: reviewFile.file, reviewSha256: reviewFile.sha256, reason: review.reason, producerEvidence: review.producerEvidence, producerBefore: { configPath: producerConfig.file, configSha256: producerConfig.sha256, hooksPath: producerHooks.file, hooksSha256: producerHooks.sha256 }, additions: review.version === 1 ? added : review.additions } };
+}
+var events, matchedEvents, hash2 = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value), text2 = (value, max2 = 2048) => typeof value === "string" && value.trim().length > 0 && value.length <= max2 && !/[\0\r\n]/.test(value), v2Command = (value) => typeof value === "string" && value.trim().length > 0 && value.length <= 16384 && !/[\0\r]/.test(value), structure = (value) => JSON.parse(JSON.stringify(Bun.TOML.parse(value))), nativeKeys, proofs;
+var init_codex_hook_additions_review = __esm(() => {
+  init_codex_hook_trust_files();
+  init_codex_hook_trust_layout();
+  events = { UserPromptSubmit: ["userPromptSubmit", "user_prompt_submit"], SessionStart: ["sessionStart", "session_start"], SubagentStart: ["subagentStart", "subagent_start"] };
+  matchedEvents = { ...events, PreToolUse: ["preToolUse", "pre_tool_use"] };
+  nativeKeys = ["key", "eventName", "handlerType", "command", "matcher", "timeoutSec", "async", "statusMessage", "additionalContextLimit", "sourcePath", "source", "pluginId", "isManaged", "currentHash", "enabled", "trustStatus"];
+  proofs = new WeakMap;
+});
+
 // src/lib/codex-hook-discovery-recovery.ts
 import { createHash as createHash15 } from "crypto";
-import { isDeepStrictEqual as isDeepStrictEqual5 } from "util";
-function createCodexHookDiscoveryRecovery(binding, before2, current, hooks) {
+import { isDeepStrictEqual as isDeepStrictEqual6 } from "util";
+function createCodexHookDiscoveryRecovery(binding, before2, current, hooks, additions) {
+  const journalHooks = hooks.map(({ key, currentHash }) => ({ key, currentHash }));
+  const additionStates = additions ? readReviewedAdditionTrustStates(additions, before2, current, journalHooks) : [];
+  const recheckAdditions = () => {
+    if (additions)
+      readReviewedAdditionTrustStates(additions, before2, current, journalHooks);
+  };
   const raw = binding.sources.filter((source) => source.path === current.file && source.hashMode === "bytes");
   if (!raw.some((source) => source.sha256 !== current.sha256))
     return;
   need4(binding.agent === "codex" && binding.method === "reviewed" && raw.length === 1 && raw[0].sha256 === before2.sha256 && before2.sha256 !== current.sha256, "RECONCILE_DISCOVERY_CONFIG_WITNESS");
   need4(raw[0].format === undefined && raw[0].fields === undefined && raw[0].managedPlugins === undefined, "RECONCILE_DISCOVERY_CONFIG_WITNESS");
   const typed = binding.sources.filter((source) => source.path === current.file && source.format === "toml");
-  need4(typed.length === 1 && typed[0].hashMode === undefined && isDeepStrictEqual5(typed[0].fields, fields), "RECONCILE_DISCOVERY_TYPED_WITNESS");
-  const original = structure(before2.text), actual = structure(current.text);
+  need4(typed.length === 1 && typed[0].hashMode === undefined && isDeepStrictEqual6(typed[0].fields, fields), "RECONCILE_DISCOVERY_TYPED_WITNESS");
+  const original = structure2(before2.text), actual = structure2(current.text);
   const project = (value) => Object.fromEntries(fields.map((field2) => [field2, value[field2] ?? null]));
   const projection = sha2(JSON.stringify(project(original)));
-  need4(typed[0].sha256 === projection && sha2(JSON.stringify(project(actual))) === projection && isDeepStrictEqual5(project(original), project(actual)), "RECONCILE_DISCOVERY_TYPED_WITNESS");
-  need4(hooks.length > 0 && hooks.length <= 100 && new Set(hooks.map((hook) => hook.key)).size === hooks.length && hooks.every((hook) => typeof hook.key === "string" && /^sha256:[a-f0-9]{64}$/.test(hook.currentHash)), "RECONCILE_DISCOVERY_TRUST_WITNESS");
-  const keys2 = hooks.map((hook) => hook.key), expected = structuredClone(original);
+  need4(typed[0].sha256 === projection && sha2(JSON.stringify(project(actual))) === projection && isDeepStrictEqual6(project(original), project(actual)), "RECONCILE_DISCOVERY_TYPED_WITNESS");
+  const keys2 = [...journalHooks.map((hook) => hook.key), ...additionStates.map((hook) => hook.key)];
+  need4(journalHooks.length > 0 && keys2.length <= 100 && new Set(keys2).size === keys2.length && journalHooks.every((hook) => typeof hook.key === "string" && /^sha256:[a-f0-9]{64}$/.test(hook.currentHash)), "RECONCILE_DISCOVERY_TRUST_WITNESS");
+  const expected = structuredClone(original);
   expected.hooks ??= {};
   expected.hooks.state ??= {};
-  for (const hook of hooks)
+  for (const hook of journalHooks)
     expected.hooks.state[hook.key] = { ...expected.hooks.state[hook.key], enabled: true, trusted_hash: hook.currentHash };
-  need4(isDeepStrictEqual5(expected, actual) && codexTrustReconcileWitness(before2.text, keys2) === codexTrustReconcileWitness(current.text, keys2) && codexTrustUnmanagedSemantic(before2.text, keys2) === codexTrustUnmanagedSemantic(current.text, keys2), "RECONCILE_DISCOVERY_TRUST_WITNESS");
+  for (const { key, state } of additionStates)
+    expected.hooks.state[key] = { ...state };
+  need4(isDeepStrictEqual6(expected, actual) && codexTrustReconcileWitness(before2.text, keys2) === codexTrustReconcileWitness(current.text, keys2) && codexTrustUnmanagedSemantic(before2.text, keys2) === codexTrustUnmanagedSemantic(current.text, keys2), "RECONCILE_DISCOVERY_TRUST_WITNESS");
   unchanged2(before2);
   unchanged2(current);
   const witness = Object.freeze({ configPath: current.file, beforeSha256: before2.sha256, currentSha256: current.sha256, discoverySha256: sha2(JSON.stringify(binding)), typedProjectionSha256: projection });
-  proofs.set(witness, { before: before2, current });
+  proofs2.set(witness, { before: before2, current, recheckAdditions });
   return witness;
 }
 function assertCodexHookDiscoveryRecovery(binding, witness) {
-  const proof = proofs.get(witness);
+  const proof = proofs2.get(witness);
   need4(!!proof && binding.agent === "codex" && witness.discoverySha256 === sha2(JSON.stringify(binding)), "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
   unchanged2(proof.before);
   unchanged2(proof.current);
+  proof.recheckAdditions();
 }
 function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witness) {
   if (!witness || source.path !== witness.configPath || source.hashMode !== "bytes")
@@ -54737,21 +54840,23 @@ function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witnes
   need4(source.sha256 === witness.beforeSha256 && currentDigest === witness.currentSha256, "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
   return true;
 }
-var sha2 = (text2) => createHash15("sha256").update(text2).digest("hex"), fields, structure = (text2) => JSON.parse(JSON.stringify(Bun.TOML.parse(text2))), proofs;
+var sha2 = (text3) => createHash15("sha256").update(text3).digest("hex"), fields, structure2 = (text3) => JSON.parse(JSON.stringify(Bun.TOML.parse(text3))), proofs2;
 var init_codex_hook_discovery_recovery = __esm(() => {
   init_codex_hook_trust_files();
   init_codex_hook_trust_layout();
+  init_codex_hook_additions_review();
   fields = ["plugins", "marketplaces", "skills"];
-  proofs = new WeakMap;
+  proofs2 = new WeakMap;
 });
 
 // src/lib/agent-discovery.ts
 import { createHash as createHash16 } from "crypto";
 import { lstatSync as lstatSync20, readFileSync as readFileSync17, readdirSync as readdirSync10, realpathSync as realpathSync4 } from "fs";
-import { basename as basename8, dirname as dirname16, isAbsolute as isAbsolute14, join as join31, resolve as resolve15, sep as sep5 } from "path";
-function parseConfig(text2, path, toml = false) {
+import { basename as basename8, dirname as dirname16, isAbsolute as isAbsolute15, join as join31, resolve as resolve15, sep as sep5 } from "path";
+import { isDeepStrictEqual as isDeepStrictEqual7 } from "util";
+function parseConfig(text3, path, toml = false) {
   try {
-    const value = toml ? Bun.TOML.parse(text2) : JSON.parse(text2);
+    const value = toml ? Bun.TOML.parse(text3) : JSON.parse(text3);
     if (!value || typeof value !== "object" || Array.isArray(value))
       throw new Error;
     return value;
@@ -54760,7 +54865,7 @@ function parseConfig(text2, path, toml = false) {
   }
 }
 function safe4(path) {
-  if (!isAbsolute14(path) || path.includes("\x00"))
+  if (!isAbsolute15(path) || path.includes("\x00"))
     throw new Error("Expected an absolute native discovery path");
   for (let cursor = path;; cursor = dirname16(cursor)) {
     if (lstatSync20(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
@@ -54813,12 +54918,12 @@ function projected(source, changes, budget = discoveryByteBudget()) {
       return hashDiscoveryPathFile(source.path, budget, changes);
     return hashRawDiscoveryFile(source.path, budget, changes);
   }
-  const text2 = read2(source.path, changes);
-  if (text2 === null)
+  const text3 = read2(source.path, changes);
+  if (text3 === null)
     return null;
   if (!source.format)
-    return digest(text2);
-  const object4 = source.format === "yaml" ? parseHermesConfig(text2) : parseConfig(text2, source.path, source.format === "toml");
+    return digest(text3);
+  const object4 = source.format === "yaml" ? parseHermesConfig(text3) : parseConfig(text3, source.path, source.format === "toml");
   if (!object4 || typeof object4 !== "object" || Array.isArray(object4))
     throw new Error("Expected native discovery configuration object");
   return digest(JSON.stringify(Object.fromEntries((source.fields ?? []).map((field2) => [field2, object4[field2] ?? null]))));
@@ -54858,7 +54963,10 @@ function rebindAgentDiscovery(binding, changes) {
   const budget = discoveryByteBudget();
   return { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
-    return { ...source, sha256: projected(source, changes, budget) };
+    const sha2562 = projected(source, changes, budget);
+    if (!changes.has(source.path) && sha2562 !== source.sha256)
+      throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
+    return { ...source, sha256: sha2562 };
   }) };
 }
 function assertProjectDiscovery(agent, directories, home, canonical4 = resolve15, reviewed) {
@@ -54962,14 +55070,27 @@ function resolveAgentDiscovery(options) {
       if (!lstatSync20(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
         unresolved("installed Gemini builtin root is missing");
       for (const name of readdirSync10(builtinRoot).sort()) {
-        const text2 = witness(join31(builtinRoot, name, "SKILL.md"));
-        const match = text2?.match(/^---\r?\n[\s\S]*?^name:\s*([a-z0-9][a-z0-9-]*)\s*$/m);
+        const text3 = witness(join31(builtinRoot, name, "SKILL.md"));
+        const match = text3?.match(/^---\r?\n[\s\S]*?^name:\s*([a-z0-9][a-z0-9-]*)\s*$/m);
         if (!match?.[1] || builtinNames.includes(match[1]))
           unresolved("installed Gemini builtin name is missing or ambiguous");
         builtinNames.push(match[1]);
       }
     }
   }
+  if (options.reviewed === undefined && options.retainedReview !== undefined) {
+    const retained = options.retainedReview;
+    if (retained.agent !== agent || retained.method !== "reviewed")
+      unresolved("invalid retained review");
+    verifyAgentDiscovery(retained);
+    if (!retained.sources.some((source) => source.path === canonical4(configPath) && source.format === undefined && source.fields === undefined))
+      unresolved("retained review is missing the full agent configuration source");
+    if (retained.sources.some((source) => (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2") && source.path !== canonical4(configPath)))
+      unresolved("retained settings witness names another configuration source");
+    if (sources.some((source) => !retained.sources.some((saved) => isDeepStrictEqual7(saved, source))) || [...roots].some((root2) => !retained.roots.includes(root2)) || agent === "gemini" && JSON.stringify(retained.builtinNames) !== JSON.stringify(builtinNames))
+      unresolved("retained review is missing current runtime discovery coverage");
+    return retained;
+  }
   if (options.reviewed && (options.reviewed.version !== 1 || !Array.isArray(options.reviewed.agents) || options.reviewed.agents.some((item) => !item || typeof item !== "object") || new Set(options.reviewed.agents.map((item) => item.agent)).size !== options.reviewed.agents.length))
     throw new Error("Invalid --discovery-inputs version or agents");
   const review = options.reviewed?.agents.find((item) => item.agent === agent);
@@ -55041,7 +55162,7 @@ function resolveAgentDiscovery(options) {
         unresolved("unsupported plugin enablement");
       const split2 = id.lastIndexOf("@"), name = id.slice(0, split2), marketplace = id.slice(split2 + 1);
       const market = config.marketplaces?.[marketplace] ?? (marketplace === "personal" ? { source_type: "local", source: home } : undefined);
-      if (split2 < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute14(market.source))
+      if (split2 < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute15(market.source))
         unresolved("enabled plugin marketplace is not an explicit local source");
       const catalogText = witness(join31(market.source, ".agents/plugins/marketplace.json"));
       if (catalogText === null)
@@ -55057,7 +55178,7 @@ function resolveAgentDiscovery(options) {
     if ((config.plugin?.length ?? 0) > 0 || config.skills?.urls?.length)
       unresolved("external plugin or remote skill source");
     for (const path of config.skills?.paths ?? []) {
-      if (typeof path !== "string" || !isAbsolute14(path))
+      if (typeof path !== "string" || !isAbsolute15(path))
         unresolved("relative or malformed added skill root");
       roots.add(path);
     }
@@ -55095,7 +55216,7 @@ function resolveAgentDiscovery(options) {
   }
   return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join31(home, ".hermes/plugins"), join31(home, ".hermes/hermes-agent")].map((path) => canonical4(path))) } : {} };
 }
-var digest = (text2) => createHash16("sha256").update(text2).digest("hex");
+var digest = (text3) => createHash16("sha256").update(text3).digest("hex");
 var init_agent_discovery = __esm(() => {
   init_agent_policy_limits();
   init_agent_hermes();
@@ -55227,7 +55348,7 @@ import {
   statSync as statSync10,
   writeFileSync as writeFileSync9
 } from "fs";
-import { basename as basename10, dirname as dirname18, isAbsolute as isAbsolute15, join as join33, normalize as normalize2, relative as relative5, resolve as resolve17, sep as sep7 } from "path";
+import { basename as basename10, dirname as dirname18, isAbsolute as isAbsolute16, join as join33, normalize as normalize2, relative as relative5, resolve as resolve17, sep as sep7 } from "path";
 function getPortableSkillsRoot(options = {}) {
   return resolvePortableSkillsRoot(options, true);
 }
@@ -55385,7 +55506,7 @@ function assertDisjointImportPaths(source, destination) {
   const destinationPath = physicalImportPath(destination);
   const contains2 = (parent, child) => {
     const path = relative5(parent, child);
-    return path === "" || !isAbsolute15(path) && path !== ".." && !path.startsWith(`..${sep7}`);
+    return path === "" || !isAbsolute16(path) && path !== ".." && !path.startsWith(`..${sep7}`);
   };
   if (contains2(sourcePath, destinationPath) || contains2(destinationPath, sourcePath)) {
     throw new Error("Source and destination skill directories must not overlap");
@@ -55602,7 +55723,7 @@ function safeIsDirectory(path) {
   }
 }
 function isSafeRelativePath2(value) {
-  if (!value.trim() || isAbsolute15(value))
+  if (!value.trim() || isAbsolute16(value))
     return false;
   const normalized = normalize2(value).replace(/\\/g, "/");
   return normalized !== ".." && !normalized.startsWith("../") && !normalized.includes("/../");
@@ -57626,8 +57747,8 @@ function getPublicSkillDiscovery(skill) {
 function publicDiscoveryTags(tags) {
   return tags.filter((tag) => !VENDOR_TAGS.has(tag.toLowerCase()));
 }
-function sanitizePublicDiscoveryText(text2) {
-  let sanitized = text2.replace(vendorPattern, "hosted AI").replace(/\bLLM\b/g, "AI").replace(/\s{2,}/g, " ");
+function sanitizePublicDiscoveryText(text3) {
+  let sanitized = text3.replace(vendorPattern, "hosted AI").replace(/\bLLM\b/g, "AI").replace(/\s{2,}/g, " ");
   let previous;
   do {
     previous = sanitized;
@@ -66247,8 +66368,8 @@ function lt_default() {
     localeError: error33()
   };
 }
-var capitalizeFirstCharacter = (text2) => {
-  return text2.charAt(0).toUpperCase() + text2.slice(1);
+var capitalizeFirstCharacter = (text3) => {
+  return text3.charAt(0).toUpperCase() + text3.slice(1);
 }, error33 = () => {
   const Sizable = {
     string: {
@@ -74081,7 +74202,7 @@ __export(exports_schemas2, {
   httpUrl: () => httpUrl,
   hostname: () => hostname2,
   hex: () => hex2,
-  hash: () => hash2,
+  hash: () => hash3,
   guid: () => guid2,
   function: () => _function,
   float64: () => float64,
@@ -74287,7 +74408,7 @@ function hostname2(_params) {
 function hex2(_params) {
   return _stringFormat(ZodCustomStringFormat, "hex", exports_regexes.hex, _params);
 }
-function hash2(alg, params) {
+function hash3(alg, params) {
   const enc = params?.enc ?? "hex";
   const format = `${alg}_${enc}`;
   const regex2 = exports_regexes[format];
@@ -76547,7 +76668,7 @@ __export(exports_external, {
   httpUrl: () => httpUrl,
   hostname: () => hostname2,
   hex: () => hex2,
-  hash: () => hash2,
+  hash: () => hash3,
   guid: () => guid2,
   gte: () => _gte,
   gt: () => _gt,
@@ -76782,8 +76903,8 @@ function safeAvailabilityCode(code) {
     return;
   return /^[A-Z0-9_]+$/.test(code) ? code : undefined;
 }
-function sanitizeAvailabilityText(text2) {
-  return secretValuePatterns.reduce((value, pattern) => value.replace(pattern, "credential"), sanitizePublicDiscoveryText(text2).replace(/\b[A-Z0-9_]*(?:API_KEY|SECRET|TOKEN|CREDENTIAL)[A-Z0-9_]*\b/g, "credential")).replace(/\s{2,}/g, " ").trim();
+function sanitizeAvailabilityText(text3) {
+  return secretValuePatterns.reduce((value, pattern) => value.replace(pattern, "credential"), sanitizePublicDiscoveryText(text3).replace(/\b[A-Z0-9_]*(?:API_KEY|SECRET|TOKEN|CREDENTIAL)[A-Z0-9_]*\b/g, "credential")).replace(/\s{2,}/g, " ").trim();
 }
 function parseRemoteRegistryPayload(payload) {
   const parsed = parseRemoteContract(remoteRegistrySchema, payload, "Remote registry payload did not match the expected skills contract");
@@ -76988,11 +77109,11 @@ function canonicalJsonAtDepth(value, maximumBytes, maximumDepth) {
     throw new Error("Invalid canonical JSON depth bound");
   let bytes = 0;
   const active = new Set;
-  const piece = (text2) => {
-    bytes += Buffer.byteLength(text2);
+  const piece = (text3) => {
+    bytes += Buffer.byteLength(text3);
     if (bytes > maximumBytes)
       throw new Error("Canonical JSON exceeds its bound");
-    return text2;
+    return text3;
   };
   const visit3 = (v, depth) => {
     if (depth > maximumDepth)
@@ -77131,9 +77252,9 @@ function requireResult(value) {
   if (!value)
     throw new RemoteRecurringReadError;
 }
-function termsIntegrity(terms, hash3, identity4, own2) {
+function termsIntegrity(terms, hash4, identity4, own2) {
   requireResult(terms.organizationId === identity4.organization.id && (!own2 || terms.approvedByUserId === identity4.user.id && terms.approvedMembershipId === identity4.user.membershipId));
-  requireResult(canonicalJsonSha256(terms) === hash3);
+  requireResult(canonicalJsonSha256(terms) === hash4);
   requireResult(canonicalJsonSha256({ skill: terms.skill, input: terms.input, args: terms.args, runtime: terms.runtime }) === terms.payloadSha256);
   requireResult(Date.parse(terms.expiresAt) > Date.parse(terms.startsAt));
 }
@@ -77529,7 +77650,7 @@ function invalid3() {
   throw new Error(invalidWorkspaceResult);
 }
 function organization(v) {
-  if (!record4(v) || !uuid8(v.id) || !text2(v.slug) || !text2(v.name))
+  if (!record4(v) || !uuid8(v.id) || !text3(v.slug) || !text3(v.name))
     return invalid3();
   return { id: v.id, slug: v.slug, name: v.name };
 }
@@ -77549,7 +77670,7 @@ function parseWorkspaceIdentity(value, expectedUserId) {
   if (!record4(value))
     return invalid3();
   const user = value.user;
-  if (!record4(user) || !uuid8(user.id) || !uuid8(user.membershipId) || !text2(user.email, 320) || !(user.displayName === null || text2(user.displayName)) || !role2(user.role))
+  if (!record4(user) || !uuid8(user.id) || !uuid8(user.membershipId) || !text3(user.email, 320) || !(user.displayName === null || text3(user.displayName)) || !role2(user.role))
     return invalid3();
   if (user.id !== expectedUserId)
     throw new WorkspaceIdentityMismatchError;
@@ -77580,7 +77701,7 @@ function workspaceSelectionFailure(value, status) {
   const code = value.code;
   return workspaceSelectionFailures[code][0] === status ? code : null;
 }
-var record4 = (v) => !!v && typeof v === "object" && !Array.isArray(v), uuid8 = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), text2 = (v, max2 = 1024) => typeof v === "string" && !!v.trim() && v.length <= max2 && !/[\p{Cc}\p{Cs}\u2028\u2029]/u.test(v), role2 = (v) => typeof v === "string" && ["owner", "admin", "member", "viewer"].includes(v), invalidWorkspaceResult = "The server returned an invalid workspace selection result.", WorkspaceContextInputError, WorkspaceIdentityMismatchError, workspaceSelectionFailures;
+var record4 = (v) => !!v && typeof v === "object" && !Array.isArray(v), uuid8 = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), text3 = (v, max2 = 1024) => typeof v === "string" && !!v.trim() && v.length <= max2 && !/[\p{Cc}\p{Cs}\u2028\u2029]/u.test(v), role2 = (v) => typeof v === "string" && ["owner", "admin", "member", "viewer"].includes(v), invalidWorkspaceResult = "The server returned an invalid workspace selection result.", WorkspaceContextInputError, WorkspaceIdentityMismatchError, workspaceSelectionFailures;
 var init_remote_workspace_selection = __esm(() => {
   WorkspaceContextInputError = class WorkspaceContextInputError extends Error {
     constructor() {
@@ -80394,17 +80515,17 @@ var init_install = __esm(() => {
 
 // src/lib/compact-output.ts
 function truncateText(value, maxChars = 96) {
-  const text3 = String(value ?? "").replace(/\s+/g, " ").trim();
-  if (text3.length <= maxChars)
-    return text3;
-  return `${text3.slice(0, Math.max(0, maxChars - 3)).trimEnd()}...`;
+  const text4 = String(value ?? "").replace(/\s+/g, " ").trim();
+  if (text4.length <= maxChars)
+    return text4;
+  return `${text4.slice(0, Math.max(0, maxChars - 3)).trimEnd()}...`;
 }
 function previewText(value, maxChars = DEFAULT_PREVIEW_CHARS) {
-  const text3 = String(value ?? "");
+  const text4 = String(value ?? "");
   return {
-    text: text3.length > maxChars ? `${text3.slice(0, Math.max(0, maxChars - 3))}...` : text3,
-    length: text3.length,
-    truncated: text3.length > maxChars
+    text: text4.length > maxChars ? `${text4.slice(0, Math.max(0, maxChars - 3))}...` : text4,
+    length: text4.length,
+    truncated: text4.length > maxChars
   };
 }
 function parsePageLimit(value, fallback, options = {}) {
@@ -80523,10 +80644,10 @@ function handleBrowseError(error61) {
   process.exitCode = 1;
 }
 async function writeJson(value, space) {
-  const text3 = `${JSON.stringify(value, null, space)}
+  const text4 = `${JSON.stringify(value, null, space)}
 `;
   await new Promise((resolve19, reject2) => {
-    process.stdout.write(text3, (error61) => {
+    process.stdout.write(text4, (error61) => {
       if (error61)
         reject2(error61);
       else
@@ -81085,7 +81206,7 @@ function handleDiff(name, options) {
     const present = existsSync22(dir);
     const managed = existsSync22(join37(dir, SYNC_MARKER_FILE));
     const skillMdPath = join37(dir, "SKILL.md");
-    const hash3 = present && existsSync22(skillMdPath) ? hashSkillMarkdownFile(skillMdPath) : undefined;
+    const hash4 = present && existsSync22(skillMdPath) ? hashSkillMarkdownFile(skillMdPath) : undefined;
     let stub;
     if (present && existsSync22(skillMdPath)) {
       try {
@@ -81094,13 +81215,13 @@ function handleDiff(name, options) {
         stub = undefined;
       }
     }
-    const diverged = present && canonical4.present && managed && hash3 !== canonical4.hash;
+    const diverged = present && canonical4.present && managed && hash4 !== canonical4.hash;
     homes.push({
       agent,
       path: dir,
       present,
       managed,
-      ...hash3 ? { hash: hash3 } : {},
+      ...hash4 ? { hash: hash4 } : {},
       ...stub !== undefined ? { stub } : {},
       ...diverged !== undefined ? { diverged } : {}
     });
@@ -81956,13 +82077,13 @@ function scanUnmarkedHomes(options = {}) {
       const skillMdPath = join39(dir, "SKILL.md");
       if (!existsSync24(skillMdPath))
         continue;
-      const hash3 = hashSkillMarkdownFile(skillMdPath);
+      const hash4 = hashSkillMarkdownFile(skillMdPath);
       const mtime = statSync12(skillMdPath).mtime.toISOString();
-      const entry = { agent, skill, home, path: dir, hash: hash3, mtime };
+      const entry = { agent, skill, home, path: dir, hash: hash4, mtime };
       const canonicalHash = index.get(skill);
       if (canonicalHash === undefined) {
         scan.unknown.push({ ...entry });
-      } else if (canonicalHash === hash3) {
+      } else if (canonicalHash === hash4) {
         scan.adoptable.push(entry);
       } else {
         scan.conflicts.push({ ...entry, canonicalHash });
@@ -82050,10 +82171,10 @@ function pruneOwnership(dir) {
     const after2 = fstatSync15(descriptor), current = lstatSync22(dir), markerPathAfter = lstatSync22(markerPath);
     if (!markerPathAfter.isFile() || markerPathAfter.dev !== before2.dev || markerPathAfter.ino !== before2.ino || markerPathAfter.size !== before2.size || markerPathAfter.mtimeMs !== before2.mtimeMs || markerPathAfter.ctimeMs !== before2.ctimeMs || length !== before2.size || after2.size !== before2.size || after2.mtimeMs !== before2.mtimeMs || after2.ctimeMs !== before2.ctimeMs || !current.isDirectory() || current.dev !== directory.dev || current.ino !== directory.ino)
       return;
-    const text3 = bytes.subarray(0, length).toString("utf8"), marker = JSON.parse(text3);
+    const text4 = bytes.subarray(0, length).toString("utf8"), marker = JSON.parse(text4);
     if (!isSkillsOwnershipMarker(marker))
       return;
-    return { marker, identity: JSON.stringify([directory.dev, directory.ino, before2.dev, before2.ino, before2.mtimeMs, before2.ctimeMs, text3]) };
+    return { marker, identity: JSON.stringify([directory.dev, directory.ino, before2.dev, before2.ino, before2.mtimeMs, before2.ctimeMs, text4]) };
   } catch {
     return;
   } finally {
@@ -82099,15 +82220,15 @@ function pruneStrayHomes(options = {}) {
       const marker = owned.marker;
       ownership.set(dir, owned.identity);
       const skillMdPath = join39(dir, "SKILL.md");
-      const hash3 = existsSync24(skillMdPath) ? hashSkillMarkdownFile(skillMdPath) : "";
-      candidates.push({ agent, skill, home, path: dir, hash: hash3, marker });
+      const hash4 = existsSync24(skillMdPath) ? hashSkillMarkdownFile(skillMdPath) : "";
+      candidates.push({ agent, skill, home, path: dir, hash: hash4, marker });
     }
   }
   if (!options.apply) {
     return { candidates, pruned: 0, dryRun: true };
   }
   const appDir = options.homeDir ? join39(options.homeDir, ".hasna", "skills") : getDataDir();
-  const rollbackFile = writeRollbackRecord("prune", candidates.map(({ agent, skill, path, hash: hash3, marker }) => ({ agent, skill, path, hash: hash3, marker })), appDir);
+  const rollbackFile = writeRollbackRecord("prune", candidates.map(({ agent, skill, path, hash: hash4, marker }) => ({ agent, skill, path, hash: hash4, marker })), appDir);
   let pruned = 0;
   for (const candidate2 of candidates) {
     if (pruneOwnership(candidate2.path)?.identity !== ownership.get(candidate2.path))
@@ -82338,10 +82459,10 @@ function setEnvAssignment(path, assignment) {
     }
     let prepared = initial2;
     if (previous) {
-      const original = readFileSync27(descriptor), text3 = original.toString("utf8");
-      if (!Buffer.from(text3, "utf8").equals(original))
+      const original = readFileSync27(descriptor), text4 = original.toString("utf8");
+      if (!Buffer.from(text4, "utf8").equals(original))
         throw new EnvAssignmentError(INVALID_LAYOUT);
-      prepared = prepareEnvAssignment(assignment, text3);
+      prepared = prepareEnvAssignment(assignment, text4);
     }
     const bytes = Buffer.from(prepared.content, "utf8");
     let written = 0;
@@ -82881,7 +83002,7 @@ import { closeSync as closeSync17, fstatSync as fstatSync17, openSync as openSyn
 import { O_NOFOLLOW as O_NOFOLLOW3, O_NONBLOCK as O_NONBLOCK3, O_RDONLY as O_RDONLY3 } from "constants";
 import { createRequire as createRequire2 } from "module";
 import { hostname as osHostname2 } from "os";
-import { isAbsolute as isAbsolute16, join as join42 } from "path";
+import { isAbsolute as isAbsolute17, join as join42 } from "path";
 import { createRequire as createRequire22 } from "module";
 function envToken2(name) {
   return name.toUpperCase().replace(/-/g, "_");
@@ -82905,7 +83026,7 @@ function homeDir2(env3) {
 }
 function absoluteOverride2(env3, key) {
   const value = env3[key]?.trim();
-  return value && isAbsolute16(value) ? value : null;
+  return value && isAbsolute17(value) ? value : null;
 }
 function hasnaHomeDir2(env3) {
   const override = absoluteOverride2(env3, HASNA_HOME_ENV_KEY2);
@@ -82936,10 +83057,10 @@ function credentialDiskSources2(name, env3) {
 function profileDiskSources2(name, env3, profile) {
   return credentialDiskSourceList2(name, env3, profile).map((s) => s.path);
 }
-function parseEnvFile2(text3) {
+function parseEnvFile2(text4) {
   const values2 = new Map;
   const unusable = new Set;
-  for (const rawLine of text3.split(/\r?\n/)) {
+  for (const rawLine of text4.split(/\r?\n/)) {
     const line = rawLine.trim();
     if (line.length === 0 || line.startsWith("#"))
       continue;
@@ -83179,8 +83300,8 @@ function keychainAccount2(env3, options) {
   const user = env3.USER?.trim();
   return user || null;
 }
-function keychainFailureHint2(text3) {
-  const line = text3.split(/\r?\n/).find((entry) => entry.trim().length > 0)?.trim() ?? "";
+function keychainFailureHint2(text4) {
+  const line = text4.split(/\r?\n/).find((entry) => entry.trim().length > 0)?.trim() ?? "";
   const clean = line.replace(/[\u0000-\u001f\u007f]/g, "").slice(0, 200);
   return clean ? `: ${clean}` : "";
 }
@@ -83758,12 +83879,12 @@ function createHasnaHttpTransportInternal(options, requestBindingProvider) {
         await response.body?.cancel();
       } catch {}
     } else {
-      const text3 = await response.text();
-      if (text3.length > 0) {
+      const text4 = await response.text();
+      if (text4.length > 0) {
         try {
-          parsed = JSON.parse(text3);
+          parsed = JSON.parse(text4);
         } catch {
-          parsed = text3;
+          parsed = text4;
         }
       }
     }
@@ -83866,13 +83987,13 @@ class SecretsClient {
       headers,
       redirect: "manual"
     });
-    const text3 = await response.text();
+    const text4 = await response.text();
     let body = undefined;
-    if (text3) {
+    if (text4) {
       try {
-        body = JSON.parse(text3);
+        body = JSON.parse(text4);
       } catch {
-        body = text3;
+        body = text4;
       }
     }
     if (!response.ok) {
@@ -84201,7 +84322,7 @@ function refuse(code, message) {
 function record7(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
-function exactKeys2(value, keys2) {
+function exactKeys3(value, keys2) {
   return Object.keys(value).length === keys2.length && keys2.every((key) => Object.hasOwn(value, key));
 }
 function identifier2(value) {
@@ -84241,7 +84362,7 @@ function readSelectedSecretBindings(path) {
   }
 }
 function validateSelectedSecretBindings(value, scope, names) {
-  if (!record7(value) || !exactKeys2(value, ["schema", "selection", "consumer", "secretsAuthority", "bindings"]) || value.schema !== "hasna.skills-secret-bindings.v1" || !record7(value.selection) || !exactKeys2(value.selection, ["authority", "workspaceId", "profileId", "profileRevision", "slug", "version", "bundleDigest"]) || !record7(value.consumer) || !exactKeys2(value.consumer, ["stationId", "workspaceDirectory"]) || !record7(value.bindings)) {
+  if (!record7(value) || !exactKeys3(value, ["schema", "selection", "consumer", "secretsAuthority", "bindings"]) || value.schema !== "hasna.skills-secret-bindings.v1" || !record7(value.selection) || !exactKeys3(value.selection, ["authority", "workspaceId", "profileId", "profileRevision", "slug", "version", "bundleDigest"]) || !record7(value.consumer) || !exactKeys3(value.consumer, ["stationId", "workspaceDirectory"]) || !record7(value.bindings)) {
     return refuse("INVALID_SECRET_BINDINGS", "Secret bindings do not match the hasna.skills-secret-bindings.v1 contract.");
   }
   for (const [key, expected] of Object.entries({ authority: scope.selection.authority, workspaceId: scope.selection.workspaceId, profileId: scope.profileId, profileRevision: scope.selection.profileRevision, slug: scope.selection.slug, version: scope.selection.version, bundleDigest: scope.selection.bundleDigest })) {
@@ -84266,7 +84387,7 @@ function validateSelectedSecretBindings(value, scope, names) {
   } catch {
     return refuse("INVALID_SECRET_BINDINGS", "Secret bindings require a canonical HTTPS Secrets /v1 authority (loopback HTTP is allowed).");
   }
-  if (!exactKeys2(value.bindings, names) || Object.values(value.bindings).some((key) => !identifier2(key) || !/^[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(key) || key.split("/").some((part) => !part || part === "." || part === ".."))) {
+  if (!exactKeys3(value.bindings, names) || Object.values(value.bindings).some((key) => !identifier2(key) || !/^[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(key) || key.split("/").some((part) => !part || part === "." || part === ".."))) {
     return refuse("INVALID_SECRET_BINDINGS", "Bind every declared environment name exactly once to a vault key; undeclared bindings and values are refused.");
   }
   return structuredClone(value);
@@ -84296,7 +84417,7 @@ async function resolveSelectedSecrets(bindings, createClient2 = createSecretsCli
     return refuse("LOCAL_SECRET_UNAVAILABLE", "A declared secret could not be resolved, was invalid, or has expired. The skill was not started; no fallback was attempted.");
   }
 }
-function redactExecutionSecrets(text3, env3) {
+function redactExecutionSecrets(text4, env3) {
   const values2 = new Set(Object.values(env3).flatMap((value) => {
     let encoded = "";
     try {
@@ -84305,8 +84426,8 @@ function redactExecutionSecrets(text3, env3) {
     return [value, JSON.stringify(value).slice(1, -1), Buffer.from(value).toString("base64"), encoded];
   }));
   for (const value of [...values2].filter(Boolean).sort((a, b) => b.length - a.length))
-    text3 = text3.split(value).join("[REDACTED]");
-  return text3;
+    text4 = text4.split(value).join("[REDACTED]");
+  return text4;
 }
 var init_execution_secrets = __esm(() => {
   init_sdk();
@@ -84444,7 +84565,7 @@ var init_execution_grants = __esm(() => {
 });
 
 // src/lib/execution-grant-client.ts
-import { isDeepStrictEqual as isDeepStrictEqual6 } from "util";
+import { isDeepStrictEqual as isDeepStrictEqual8 } from "util";
 function id(value) {
   if (!grantIdentifier(value))
     throw new Error("Invalid execution grant profile or revision identifier.");
@@ -84496,7 +84617,7 @@ async function saveExecutionGrantPolicy(profileId, grants, revision) {
     headers: revision === undefined ? { "If-None-Match": "*" } : { "If-Match": `"${revision}"` },
     body: JSON.stringify({ grants: snapshot2 })
   }));
-  if (policy.profileId !== profileId || policy.previousRevision !== (revision ?? null) || !isDeepStrictEqual6(policy.grants, snapshot2)) {
+  if (policy.profileId !== profileId || policy.previousRevision !== (revision ?? null) || !isDeepStrictEqual8(policy.grants, snapshot2)) {
     throw new Error("The API did not preserve the reviewed execution grant policy; read it before retrying.");
   }
   return policy;
@@ -84507,7 +84628,7 @@ async function resolveExecutionGrant(input2) {
   if (!grantRecord(value) || Object.keys(value).length !== 3 || !grantIdentifier(value.policyRevision) || !grantIdentifier(value.grantId) || !grantRecord(value.bindings)) {
     throw new SkillSelectionError("INVALID_EXECUTION_GRANT", "The Skills API returned an invalid execution grant.");
   }
-  if (!isDeepStrictEqual6(value.bindings.selection, snapshot2.selection) || !isDeepStrictEqual6(value.bindings.consumer, snapshot2.consumer)) {
+  if (!isDeepStrictEqual8(value.bindings.selection, snapshot2.selection) || !isDeepStrictEqual8(value.bindings.consumer, snapshot2.consumer)) {
     throw new SkillSelectionError("EXECUTION_GRANT_SCOPE_MISMATCH", "The Skills API returned a grant for a different selection or consumer.");
   }
   return value;
@@ -93602,10 +93723,10 @@ var require_util = __commonJS((exports) => {
   var codegen_1 = require_codegen();
   var code_1 = require_code();
   function toHash(arr) {
-    const hash3 = {};
+    const hash4 = {};
     for (const item of arr)
-      hash3[item] = true;
-    return hash3;
+      hash4[item] = true;
+    return hash4;
   }
   exports.toHash = toHash;
   function alwaysValidSchema(it, schema) {
@@ -97067,7 +97188,7 @@ var require_core = __commonJS((exports) => {
     errorsText(errors5 = this.errors, { separator = ", ", dataVar = "data" } = {}) {
       if (!errors5 || errors5.length === 0)
         return "No errors";
-      return errors5.map((e2) => `${dataVar}${e2.instancePath} ${e2.message}`).reduce((text3, msg) => text3 + separator + msg);
+      return errors5.map((e2) => `${dataVar}${e2.instancePath} ${e2.message}`).reduce((text4, msg) => text4 + separator + msg);
     }
     $dataMetaSchema(metaSchema, keywordsJsonPointers) {
       const rules = this.RULES.all;
@@ -101145,11 +101266,11 @@ var init_remote_invitation_recovery = __esm(() => {
 // src/lib/remote-private-publications.ts
 import { createHash as createHash23 } from "crypto";
 function checkedPublicationDeclaration(value) {
-  if (!exact(value, ["idempotencyKey", "version", "expectedCurrentVersionId", "manifestText", "archiveSha256", "archiveByteSize"]) || !publicationUuid(value.idempotencyKey) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || typeof value.manifestText !== "string" || Buffer.byteLength(value.manifestText) > 16384 || !hash3(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES)
+  if (!exact(value, ["idempotencyKey", "version", "expectedCurrentVersionId", "manifestText", "archiveSha256", "archiveByteSize"]) || !publicationUuid(value.idempotencyKey) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || typeof value.manifestText !== "string" || Buffer.byteLength(value.manifestText) > 16384 || !hash4(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES)
     return bad();
   try {
     const manifest = JSON.parse(value.manifestText);
-    if (!record10(manifest) || manifest.version !== value.version || validatePortableManifestContract(manifest, { strict: true }).length || !hash3(manifest.provenance?.content_hash))
+    if (!record10(manifest) || manifest.version !== value.version || validatePortableManifestContract(manifest, { strict: true }).length || !hash4(manifest.provenance?.content_hash))
       return bad();
   } catch {
     return bad();
@@ -101157,7 +101278,7 @@ function checkedPublicationDeclaration(value) {
   return Object.freeze({ ...value });
 }
 function checkedPublicationView(value, skillId, intentId, declaration) {
-  if (!exact(value, ["id", "skillId", "version", "expectedCurrentVersionId", "archiveSha256", "archiveByteSize", "state", "expiresAt", "createdAt", "versionId"]) || !publicationUuid(value.id) || value.skillId !== skillId || intentId !== undefined && value.id !== intentId || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || !hash3(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES || typeof value.state !== "string" || !["awaiting_upload", "queued", "verifying", "needs_attention", "committed", "rejected", "cancelled", "expired"].includes(value.state) || !date6(value.expiresAt) || !date6(value.createdAt) || !(value.versionId === null || publicationUuid(value.versionId)) || value.state === "committed" && value.versionId === null)
+  if (!exact(value, ["id", "skillId", "version", "expectedCurrentVersionId", "archiveSha256", "archiveByteSize", "state", "expiresAt", "createdAt", "versionId"]) || !publicationUuid(value.id) || value.skillId !== skillId || intentId !== undefined && value.id !== intentId || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || !hash4(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES || typeof value.state !== "string" || !["awaiting_upload", "queued", "verifying", "needs_attention", "committed", "rejected", "cancelled", "expired"].includes(value.state) || !date6(value.expiresAt) || !date6(value.createdAt) || !(value.versionId === null || publicationUuid(value.versionId)) || value.state === "committed" && value.versionId === null)
     return invalid5();
   if (declaration && ["version", "expectedCurrentVersionId", "archiveSha256", "archiveByteSize"].some((k) => value[k] !== declaration[k]))
     return invalid5();
@@ -101404,7 +101525,7 @@ var PRIVATE_PUBLICATION_MAX_BYTES, failures2, PrivatePublicationError, bad = ()
   throw new PrivatePublicationError("INVALID_PUBLICATION_INPUT", "Invalid publication input or recovery data.");
 }, invalid5 = () => {
   throw new PrivatePublicationError("INVALID_PUBLICATION_RESPONSE", "The server returned an invalid publication result.");
-}, publicationUuid = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), hash3 = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), record10 = (v) => !!v && typeof v === "object" && !Array.isArray(v), exact = (v, keys3) => record10(v) && Object.keys(v).sort().join(",") === keys3.sort().join(","), date6 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v)), publicationSha256 = (bytes) => createHash23("sha256").update(bytes).digest("hex");
+}, publicationUuid = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), hash4 = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), record10 = (v) => !!v && typeof v === "object" && !Array.isArray(v), exact = (v, keys3) => record10(v) && Object.keys(v).sort().join(",") === keys3.sort().join(","), date6 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v)), publicationSha256 = (bytes) => createHash23("sha256").update(bytes).digest("hex");
 var init_remote_private_publications = __esm(() => {
   init_fleet_credentials();
   init_remote_workspace_selection();
@@ -101465,8 +101586,8 @@ async function requestAuthApi(instance, path, options) {
       apiUrl: safeUrl
     });
   }
-  const text3 = await res.text();
-  const body = text3 ? parseJsonBody(text3) : {};
+  const text4 = await res.text();
+  const body = text4 ? parseJsonBody(text4) : {};
   if (!res.ok) {
     const record11 = isRecord5(body) ? body : {};
     const detail = typeof record11.detail === "string" ? record11.detail : undefined;
@@ -101482,15 +101603,15 @@ async function requestAuthApi(instance, path, options) {
   }
   return body;
 }
-function parseJsonBody(text3) {
+function parseJsonBody(text4) {
   try {
-    return JSON.parse(text3);
+    return JSON.parse(text4);
   } catch {
-    return { detail: condenseErrorBody(text3) };
+    return { detail: condenseErrorBody(text4) };
   }
 }
-function condenseErrorBody(text3) {
-  const stripped = /<[a-z!/]/i.test(text3) ? text3.replace(/<(script|style)[\s\S]*?<\/\1>/gi, " ").replace(/<[^>]*>/g, " ") : text3;
+function condenseErrorBody(text4) {
+  const stripped = /<[a-z!/]/i.test(text4) ? text4.replace(/<(script|style)[\s\S]*?<\/\1>/gi, " ").replace(/<[^>]*>/g, " ") : text4;
   const collapsed = stripped.replace(/\s+/g, " ").trim();
   if (collapsed.length <= MAX_ERROR_DETAIL_LENGTH)
     return collapsed;
@@ -101706,12 +101827,12 @@ function safeText(file2) {
   }
 }
 function checkIdentityMetadata(file2, identity4) {
-  const text3 = safeText(file2);
-  if (text3 === null)
+  const text4 = safeText(file2);
+  if (text4 === null)
     return;
   let value;
   try {
-    value = JSON.parse(text3);
+    value = JSON.parse(text4);
   } catch {
     return fail3("The profile identity metadata is invalid. Sign in again before managing this workspace.");
   }
@@ -102050,7 +102171,7 @@ var init_recurring_customer = __esm(() => {
 
 // src/lib/recurring-recovery.ts
 import { constants as constants17, closeSync as closeSync20, fsyncSync as fsyncSync5, fstatSync as fstatSync20, lstatSync as lstatSync25, mkdirSync as mkdirSync17, openSync as openSync20, readSync as readSync14, realpathSync as realpathSync9, renameSync as renameSync10, unlinkSync as unlinkSync6, writeFileSync as writeFileSync17 } from "fs";
-import { dirname as dirname23, isAbsolute as isAbsolute17, join as join46, resolve as resolve20 } from "path";
+import { dirname as dirname23, isAbsolute as isAbsolute18, join as join46, resolve as resolve20 } from "path";
 import { randomUUID as randomUUID7 } from "crypto";
 
 class RecoveryOwner {
@@ -102058,7 +102179,7 @@ class RecoveryOwner {
   parents = [];
   constructor(directory) {
     this.directory = directory;
-    if (!isAbsolute17(directory) || resolve20(directory) !== directory || realpathSync9(directory) !== directory)
+    if (!isAbsolute18(directory) || resolve20(directory) !== directory || realpathSync9(directory) !== directory)
       invalid6();
     for (let path = directory;; path = dirname23(path)) {
       const stat3 = lstatSync25(path);
@@ -102193,7 +102314,7 @@ function base2(customer, organizationId) {
   };
 }
 function create3(directory, intent) {
-  if (!isAbsolute17(directory) || resolve20(directory) !== directory || realpathSync9(dirname23(directory)) !== dirname23(directory))
+  if (!isAbsolute18(directory) || resolve20(directory) !== directory || realpathSync9(dirname23(directory)) !== dirname23(directory))
     invalid6();
   mkdirSync17(directory, { mode: 448 });
   const owner2 = new RecoveryOwner(directory), checked = intentSchema.parse(intent), intentSha256 = canonicalJsonSha256(checked);
@@ -102356,12 +102477,12 @@ var init_recurring_recovery = __esm(() => {
 });
 
 // src/lib/recurring-surface.ts
-import { isAbsolute as isAbsolute18 } from "path";
+import { isAbsolute as isAbsolute19 } from "path";
 function recurringMcpSchema(action) {
   return action === "activate" ? recurringSurfaceSchemas.activate.extend({ code, confirm: exports_external.literal(true) }) : recurringSurfaceSchemas[action];
 }
-function expectedDraft(draft, hash4) {
-  if (!draft || draft.termsSha256 !== hash4)
+function expectedDraft(draft, hash5) {
+  if (!draft || draft.termsSha256 !== hash5)
     throw new RemoteRecurringError("RECURRING_TERMS_UNAVAILABLE");
   return draft;
 }
@@ -102461,7 +102582,7 @@ var init_recurring_surface = __esm(() => {
   uuid13 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
   context = { userId: uuid13.optional(), membershipId: uuid13.optional() };
   page2 = { limit: exports_external.number().int().min(1).max(100).optional(), cursor: exports_external.string().min(1).max(2048).optional() };
-  directory = exports_external.string().max(4096).refine(isAbsolute18, "Use an absolute recovery directory");
+  directory = exports_external.string().max(4096).refine(isAbsolute19, "Use an absolute recovery directory");
   email4 = exports_external.string().trim().toLowerCase().email().max(254);
   code = exports_external.string().regex(/^\d{6}$/);
   recurringSurfaceSchemas = {
@@ -105263,10 +105384,10 @@ var init_private_publication_customer = __esm(() => {
 
 // src/lib/private-publication-recovery.ts
 import { constants as constants18, closeSync as closeSync21, fsyncSync as fsyncSync6, fstatSync as fstatSync21, lstatSync as lstatSync26, mkdirSync as mkdirSync21, openSync as openSync21, readSync as readSync15, realpathSync as realpathSync10, renameSync as renameSync11, unlinkSync as unlinkSync7, writeFileSync as writeFileSync20 } from "fs";
-import { dirname as dirname26, isAbsolute as isAbsolute19, join as join51, resolve as resolve21 } from "path";
+import { dirname as dirname26, isAbsolute as isAbsolute20, join as join51, resolve as resolve21 } from "path";
 import { randomUUID as randomUUID8 } from "crypto";
 function safeDirectory(directory2) {
-  if (!isAbsolute19(directory2) || directory2 !== resolve21(directory2) || realpathSync10(directory2) !== directory2)
+  if (!isAbsolute20(directory2) || directory2 !== resolve21(directory2) || realpathSync10(directory2) !== directory2)
     return fail4();
   for (let path = directory2;; path = dirname26(path)) {
     const stat3 = lstatSync26(path);
@@ -105404,7 +105525,7 @@ async function preparePrivatePublication(client2, sourceDirectory, recoveryDirec
     phase: "prepared",
     intent: null
   };
-  if (!isAbsolute19(recoveryDirectory) || resolve21(recoveryDirectory) !== recoveryDirectory || realpathSync10(dirname26(recoveryDirectory)) !== dirname26(recoveryDirectory))
+  if (!isAbsolute20(recoveryDirectory) || resolve21(recoveryDirectory) !== recoveryDirectory || realpathSync10(dirname26(recoveryDirectory)) !== dirname26(recoveryDirectory))
     return fail4();
   mkdirSync21(recoveryDirectory, { mode: 448 });
   safeDirectory(recoveryDirectory);
@@ -105505,10 +105626,10 @@ var init_private_publication_recovery = __esm(() => {
 });
 
 // src/mcp/private-publication-tools.ts
-import { isAbsolute as isAbsolute20 } from "path";
+import { isAbsolute as isAbsolute21 } from "path";
 function registerPrivatePublicationTools(server) {
   const uuid9 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
-  const directory2 = exports_external.string().max(4096).refine(isAbsolute20, "Use an absolute local directory");
+  const directory2 = exports_external.string().max(4096).refine(isAbsolute21, "Use an absolute local directory");
   const verification2 = { email: exports_external.string().email().max(254), code: exports_external.string().regex(/^\d{6}$/), userId: uuid9, membershipId: uuid9, recoveryDirectory: directory2 };
   const description = "Manage a private source publication using fresh workspace-bound verification and a host-local recovery directory. Publishing requires explicit UUID current-version comparison and upload consent. Resume reuses immutable saved bytes and intent; an uncertain PUT is finalized for server verification, never uploaded twice. Sessions and signed URLs are not returned or persisted. Private execution is unavailable. Host request history may contain the supplied verification code.";
   const handler = (action) => async (value) => {
@@ -106154,7 +106275,7 @@ __export(exports_runtime, {
 });
 import { createHash as createHash25, randomUUID as randomUUID9 } from "crypto";
 import { lstatSync as lstatSync27, mkdirSync as mkdirSync23, readFileSync as readFileSync35, realpathSync as realpathSync11, writeFileSync as writeFileSync22 } from "fs";
-import { basename as basename12, isAbsolute as isAbsolute21, join as join53 } from "path";
+import { basename as basename12, isAbsolute as isAbsolute22, join as join53 } from "path";
 import { createInterface } from "readline";
 function registerRuntime(parent) {
   parent.command("run").argument("<skill>", "Skill name").argument("[args...]", "Arguments to pass to the skill; use -- to end Skills options").allowUnknownOption(true).passThroughOptions(true).option("--json", "Output result as JSON", false).option("--remote", "Run on the configured server, using its catalog and quote", false).option("--target <target>", "Execution target: local or cloud").option("--secret-bindings <path>", "Reviewed, exact-selection local execution vault bindings (JSON file)").option("--secret-bindings-template", "Print a scoped bindings template without resolving secrets or running the skill", false).option("--input <json>", "Structured cloud execution input").option("--skill-version <version>", "Exact selected skill version").option("--selection-profile <id>", "Selected Skills profile").option("--session <id>", "Pinned Skills session").option("--cached", "Use the explicit verified selected cache", false).option("--yes", "Approve the server's quoted credit cost for this run", false).option("--idempotency-key <key>", "Reuse this key when retrying the same remote submission").option("--file <path>", "Attach a local input file to a remote run (repeatable)", (value, prior) => [...prior, value], []).option("--wait", "Poll remote runs until a terminal status", false).option("--poll-interval-ms <ms>", "Remote polling interval in milliseconds", "1000").option("--poll-timeout-ms <ms>", "Maximum time to wait for a remote run", "300000").description("Run a skill directly").action(async (name, args2, options, command) => {
@@ -106281,7 +106402,7 @@ Updating ${name}...
 async function readUpdatedVersion(bunExecutable) {
   const output2 = await readUpdateCommand([bunExecutable, "pm", "bin", "-g"]);
   const globalBin = output2.replace(/\r?\n$/, "");
-  if (!globalBin || !isAbsolute21(globalBin) || /[\r\n\0]/.test(globalBin))
+  if (!globalBin || !isAbsolute22(globalBin) || /[\r\n\0]/.test(globalBin))
     throw new Error("Update bin discovery failed");
   const installed = Bun.which("skills", { PATH: globalBin, cwd: globalBin });
   const selected = Bun.which("skills");
@@ -107247,13 +107368,13 @@ import { emitKeypressEvents } from "readline";
 async function readCode() {
   if (process.stdin.isTTY)
     throw new NameInputError("Pipe a fresh six-digit verification code when using --code-stdin.");
-  let text3 = "";
+  let text4 = "";
   for await (const chunk2 of process.stdin) {
-    text3 += chunk2.toString();
-    if (text3.length > 32)
+    text4 += chunk2.toString();
+    if (text4.length > 32)
       throw new NameInputError("Supply only a six-digit verification code on stdin.");
   }
-  const code2 = text3.trim();
+  const code2 = text4.trim();
   if (!/^\d{6}$/.test(code2))
     throw new NameInputError("Supply only a six-digit verification code on stdin.");
   return code2;
@@ -107281,7 +107402,7 @@ function promptCode() {
       resolve22(answer);
     };
     const cancel = () => finish(null);
-    const keypress = (text3, key) => {
+    const keypress = (text4, key) => {
       if (key.ctrl && ["c", "d"].includes(key.name ?? "") || key.name === "escape")
         return cancel();
       if (key.name === "return" || key.name === "enter") {
@@ -107297,8 +107418,8 @@ Enter all six digits: `);
           value = value.slice(0, -1);
           output2.write("\b \b");
         }
-      } else if (/^[0-9]$/.test(text3) && value.length < 6) {
-        value += text3;
+      } else if (/^[0-9]$/.test(text4) && value.length < 6) {
+        value += text4;
         output2.write("*");
       }
     };
@@ -107780,7 +107901,7 @@ import {
   statSync as statSync19,
   writeFileSync as writeFileSync23
 } from "fs";
-import { dirname as dirname29, isAbsolute as isAbsolute22, relative as relative8, resolve as resolve22, sep as sep10 } from "path";
+import { dirname as dirname29, isAbsolute as isAbsolute23, relative as relative8, resolve as resolve22, sep as sep10 } from "path";
 function validateStationId(stationId) {
   if (!/^[a-z0-9-]+$/.test(stationId)) {
     throw new StationSnapshotError("INVALID_STATION", `station id must be a slug, got: ${stationId}`);
@@ -107886,7 +108007,7 @@ function writeStationSnapshot(options) {
   for (const plan of plans) {
     const destination = resolve22(repoRoot, plan.destination);
     const destinationRelative = relative8(repoRoot, destination);
-    if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep10) || isAbsolute22(destinationRelative)) {
+    if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep10) || isAbsolute23(destinationRelative)) {
       throw new StationSnapshotError("DESTINATION_ESCAPE", `destination escapes repo root: ${plan.destination}`);
     }
     let existingDigest = null;
@@ -108361,10 +108482,10 @@ var init_create_sync_config = __esm(() => {
 // src/lib/codex-hook-rpc.ts
 import { execFile, spawn as spawn3 } from "child_process";
 import { realpathSync as realpathSync12, statSync as statSync20 } from "fs";
-import { isAbsolute as isAbsolute23 } from "path";
+import { isAbsolute as isAbsolute24 } from "path";
 import { promisify } from "util";
 async function connectCodexHookRpc(options) {
-  const found = isAbsolute23(options.command) ? options.command : Bun.which(options.command, { PATH: process.env.PATH });
+  const found = isAbsolute24(options.command) ? options.command : Bun.which(options.command, { PATH: process.env.PATH });
   if (!found)
     throw new Error("CODEX_HOOK_TRUST_NATIVE_UNAVAILABLE: install Codex or pass --codex-command");
   const binary = realpathSync12(found), stat3 = statSync20(binary);
@@ -108500,10 +108621,10 @@ var init_codex_hook_rpc = __esm(() => {
 
 // src/lib/codex-hook-trust-identity.ts
 import { realpathSync as realpathSync13 } from "fs";
-import { dirname as dirname30, isAbsolute as isAbsolute24, join as join56 } from "path";
-import { isDeepStrictEqual as isDeepStrictEqual7 } from "util";
+import { dirname as dirname30, isAbsolute as isAbsolute25, join as join56 } from "path";
+import { isDeepStrictEqual as isDeepStrictEqual9 } from "util";
 function inspectRecordedSkillsCli(command, expected) {
-  need4(isAbsolute24(command) && !command.includes("\x00"), "RECONCILE_RECORDED_COMMAND_REQUIRED");
+  need4(isAbsolute25(command) && !command.includes("\x00"), "RECONCILE_RECORDED_COMMAND_REQUIRED");
   const resolved = realpathSync13(command);
   const cli = snapshot(resolved, false, { readOnlyPackage: true });
   const manifest = snapshot(join56(dirname30(dirname30(resolved)), "package.json"), false, { readOnlyPackage: true });
@@ -108511,7 +108632,7 @@ function inspectRecordedSkillsCli(command, expected) {
   need4(pkg.name === "@hasna/skills" && /^\d+\.\d+\.\d+$/.test(pkg.version) && pkg.bin?.skills === "bin/index.js" && resolved === join56(dirname30(manifest.file), "bin/index.js"), "SKILLS_PACKAGE_MISMATCH");
   need4((cli.stat.mode & 0o100n) !== 0n, "SKILLS_COMMAND_NOT_EXECUTABLE");
   const receipt = { path: resolved, version: pkg.version, sha256: cli.sha256, manifestSha256: manifest.sha256 };
-  need4(isDeepStrictEqual7(receipt, expected), "RECONCILE_SKILLS_BINDING_CHANGED");
+  need4(isDeepStrictEqual9(receipt, expected), "RECONCILE_SKILLS_BINDING_CHANGED");
   return { receipt, recheck() {
     need4(realpathSync13(command) === resolved, "SKILLS_COMMAND_CHANGED");
     unchanged2(cli);
@@ -108522,7 +108643,7 @@ function bindSkillsCli(command, reviewed) {
   const normal = Bun.which("skills", { PATH: process.env.PATH });
   need4(normal, "SKILLS_COMMAND_UNAVAILABLE");
   const resolved = realpathSync13(normal);
-  const bound = isAbsolute24(command) ? command : command === "skills" ? normal : undefined;
+  const bound = isAbsolute25(command) ? command : command === "skills" ? normal : undefined;
   need4(bound && realpathSync13(bound) === resolved, "SKILLS_COMMAND_MISMATCH");
   const entrypoint = reviewed?.path ?? process.argv[1];
   need4(entrypoint && realpathSync13(entrypoint) === resolved, "SKILLS_ENTRYPOINT_MISMATCH");
@@ -108547,19 +108668,19 @@ var init_codex_hook_trust_identity = __esm(() => {
 });
 
 // src/lib/codex-hook-policy-recovery.ts
-import { isDeepStrictEqual as isDeepStrictEqual8 } from "util";
+import { isDeepStrictEqual as isDeepStrictEqual10 } from "util";
 function reviewedClaudeDiscoveryChange(beforeText, currentText, options) {
   need4(typeof options.reason === "string" && options.reason.trim().length > 0 && options.reason.length <= 512 && !/[\x00-\x1f\x7f]/.test(options.reason), "RECONCILE_RECOVERY_REASON_REQUIRED");
   need4(options.reviewedPlanDigest === undefined || /^[a-f0-9]{64}$/.test(options.reviewedPlanDigest), "RECONCILE_RECOVERY_PLAN_CHANGED");
   const before2 = parseManagedSkillPolicy(beforeText), current = parseManagedSkillPolicy(currentText);
   const oldDiscovery = before2.bridge?.discovery?.claude, newDiscovery = current.bridge?.discovery?.claude;
   need4(oldDiscovery?.agent === "claude" && newDiscovery?.agent === "claude" && oldDiscovery.method === "reviewed" && newDiscovery.method === "reviewed", "RECONCILE_POLICY_CHANGED");
-  const changes = ["roots", "sources"].filter((key) => !isDeepStrictEqual8(oldDiscovery[key], newDiscovery[key])).map((key) => ({ path: `bridge.discovery.claude.${key}`, before: oldDiscovery[key], after: newDiscovery[key] }));
+  const changes = ["roots", "sources"].filter((key) => !isDeepStrictEqual10(oldDiscovery[key], newDiscovery[key])).map((key) => ({ path: `bridge.discovery.claude.${key}`, before: oldDiscovery[key], after: newDiscovery[key] }));
   need4(changes.length > 0, "RECONCILE_POLICY_CHANGED");
   const compared = structuredClone(current);
   compared.bridge.discovery.claude.roots = oldDiscovery.roots;
   compared.bridge.discovery.claude.sources = oldDiscovery.sources;
-  need4(isDeepStrictEqual8(before2, compared), "RECONCILE_POLICY_CHANGED");
+  need4(isDeepStrictEqual10(before2, compared), "RECONCILE_POLICY_CHANGED");
   verifyAgentDiscovery(newDiscovery);
   return { reason: options.reason, changes };
 }
@@ -108569,76 +108690,13 @@ var init_codex_hook_policy_recovery = __esm(() => {
   init_agent_discovery();
 });
 
-// src/lib/codex-hook-additions-review.ts
-import { isAbsolute as isAbsolute25 } from "path";
-import { isDeepStrictEqual as isDeepStrictEqual9 } from "util";
-function exactKeys3(value, keys3) {
-  need4(value && typeof value === "object" && !Array.isArray(value) && isDeepStrictEqual9(Object.keys(value).sort(), [...keys3].sort()), "RECONCILE_ADDITIONS_REVIEW_SCHEMA");
-}
-function reviewNativeHookAdditions(options) {
-  need4(isAbsolute25(options.path), "RECONCILE_ADDITIONS_REVIEW_PATH");
-  const reviewFile = snapshot(options.path, true), review = JSON.parse(reviewFile.text);
-  exactKeys3(review, ["version", "kind", "reason", "producerEvidence", "journalIntentSha256", "policySha256", "configCurrentSha256", "hooksCurrentSha256", "producerBefore", "additions"]);
-  need4(review.version === 1 && review.kind === "native-hook-additions" && text3(review.reason) && text3(review.producerEvidence), "RECONCILE_ADDITIONS_REVIEW_SCHEMA");
-  for (const [name, expected] of [["journalIntentSha256", options.intent.sha256], ["policySha256", options.policy.sha256], ["configCurrentSha256", options.configCurrent.sha256], ["hooksCurrentSha256", options.hooksCurrent.sha256]])
-    need4(hash4(review[name]) && review[name] === expected, "RECONCILE_ADDITIONS_REVIEW_CHANGED");
-  exactKeys3(review.producerBefore, ["configPath", "configSha256", "hooksPath", "hooksSha256"]);
-  const before2 = review.producerBefore;
-  need4(isAbsolute25(before2.configPath) && isAbsolute25(before2.hooksPath) && hash4(before2.configSha256) && hash4(before2.hooksSha256), "RECONCILE_ADDITIONS_PRODUCER_PREIMAGE");
-  const producerConfig = snapshot(before2.configPath, true), producerHooks = snapshot(before2.hooksPath, true);
-  need4(producerConfig.sha256 === before2.configSha256 && producerHooks.sha256 === before2.hooksSha256 && producerHooks.sha256 === options.hooksBefore.sha256, "RECONCILE_ADDITIONS_PRODUCER_PREIMAGE");
-  const original = structure2(options.configBefore.text), producer = structure2(producerConfig.text), expectedProducer = structuredClone(original), originalKeys = options.journalHooks.map((hook) => hook.key);
-  expectedProducer.hooks ??= {};
-  expectedProducer.hooks.state ??= {};
-  for (const hook of options.journalHooks)
-    expectedProducer.hooks.state[hook.key] = { ...expectedProducer.hooks.state[hook.key], enabled: true, trusted_hash: hook.currentHash };
-  need4(isDeepStrictEqual9(expectedProducer, producer) && codexTrustReconcileWitness(options.configBefore.text, originalKeys) === codexTrustReconcileWitness(producerConfig.text, originalKeys) && codexTrustUnmanagedSemantic(options.configBefore.text, originalKeys) === codexTrustUnmanagedSemantic(producerConfig.text, originalKeys), "RECONCILE_ADDITIONS_PRODUCER_PREIMAGE");
-  need4(Array.isArray(review.additions) && review.additions.length > 0 && review.additions.length <= 20, "RECONCILE_ADDITIONS_REVIEW_SCHEMA");
-  const expectedHooks = JSON.parse(options.hooksBefore.text), currentHooks = JSON.parse(options.hooksCurrent.text), expectedConfig = structuredClone(producer);
-  need4(expectedHooks.hooks && typeof expectedHooks.hooks === "object" && !Array.isArray(expectedHooks.hooks), "RECONCILE_ADDITIONS_DECLARATIONS");
-  const added = [], seen = new Set, commands = new Set(options.recordedNativeHooks.map((hook) => hook.command));
-  for (const addition of review.additions) {
-    exactKeys3(addition, ["event", "nativeHook"]);
-    need4(Object.hasOwn(events, addition.event), "RECONCILE_ADDITIONS_DECLARATIONS");
-    const { event, nativeHook: hook } = addition;
-    exactKeys3(hook, nativeKeys);
-    const groups = expectedHooks.hooks[event] ?? [];
-    need4(Array.isArray(groups), "RECONCILE_ADDITIONS_DECLARATIONS");
-    const key = `${options.nativeHooksPath}:${events[event][1]}:${groups.length}:0`;
-    need4(hook.key === key && !seen.has(key) && !options.recordedNativeHooks.some((originalHook) => originalHook.key === key) && !Object.hasOwn(expectedConfig.hooks.state, key), "RECONCILE_ADDITIONS_IDENTITY");
-    need4(hook.eventName === events[event][0] && hook.handlerType === "command" && text3(hook.command, 16384) && !commands.has(hook.command) && Number.isInteger(hook.timeoutSec) && hook.timeoutSec > 0 && hook.timeoutSec <= 60 && hook.matcher === null && hook.async === false && hook.statusMessage === null && hook.additionalContextLimit === null && hook.sourcePath === options.nativeHooksPath && hook.source === "user" && hook.pluginId === null && hook.isManaged === false && /^sha256:[a-f0-9]{64}$/.test(hook.currentHash) && hook.enabled === true && hook.trustStatus === "trusted", "RECONCILE_ADDITIONS_IDENTITY");
-    seen.add(key);
-    commands.add(hook.command);
-    added.push(hook);
-    expectedHooks.hooks[event] = [...groups, { hooks: [{ type: "command", command: hook.command, timeout: hook.timeoutSec }] }];
-    expectedConfig.hooks.state[key] = { enabled: true, trusted_hash: hook.currentHash };
-  }
-  need4(isDeepStrictEqual9(expectedHooks, currentHooks), "RECONCILE_ADDITIONS_DECLARATIONS");
-  const keys3 = added.map((hook) => hook.key);
-  need4(isDeepStrictEqual9(expectedConfig, structure2(options.configCurrent.text)) && codexTrustReconcileWitness(producerConfig.text, keys3) === codexTrustReconcileWitness(options.configCurrent.text, keys3) && codexTrustUnmanagedSemantic(producerConfig.text, keys3) === codexTrustUnmanagedSemantic(options.configCurrent.text, keys3), "RECONCILE_ADDITIONS_CONFIG");
-  const recheck = () => {
-    unchanged2(reviewFile);
-    unchanged2(producerConfig);
-    unchanged2(producerHooks);
-  };
-  recheck();
-  return { hooks: added, recheck, receipt: { reviewPath: reviewFile.file, reviewSha256: reviewFile.sha256, reason: review.reason, producerEvidence: review.producerEvidence, producerBefore: { configPath: producerConfig.file, configSha256: producerConfig.sha256, hooksPath: producerHooks.file, hooksSha256: producerHooks.sha256 }, additions: added } };
-}
-var events, hash4 = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value), text3 = (value, max2 = 2048) => typeof value === "string" && value.trim().length > 0 && value.length <= max2 && !/[\0\r\n]/.test(value), structure2 = (value) => JSON.parse(JSON.stringify(Bun.TOML.parse(value))), nativeKeys;
-var init_codex_hook_additions_review = __esm(() => {
-  init_codex_hook_trust_files();
-  init_codex_hook_trust_layout();
-  events = { UserPromptSubmit: ["userPromptSubmit", "user_prompt_submit"], SessionStart: ["sessionStart", "session_start"], SubagentStart: ["subagentStart", "subagent_start"] };
-  nativeKeys = ["key", "eventName", "handlerType", "command", "matcher", "timeoutSec", "async", "statusMessage", "additionalContextLimit", "sourcePath", "source", "pluginId", "isManaged", "currentHash", "enabled", "trustStatus"];
-});
-
 // src/lib/agent-codex-trust.ts
 import { lstatSync as lstatSync29, mkdirSync as mkdirSync25, readdirSync as readdirSync20, readFileSync as readFileSync37, realpathSync as realpathSync14, statSync as statSync21 } from "fs";
 import { createHash as createHash27, randomUUID as randomUUID10 } from "crypto";
 import { execFileSync } from "child_process";
 import { dirname as dirname31, isAbsolute as isAbsolute26, join as join57, resolve as resolve23 } from "path";
 import { homedir as homedir12 } from "os";
-import { isDeepStrictEqual as isDeepStrictEqual10 } from "util";
+import { isDeepStrictEqual as isDeepStrictEqual11 } from "util";
 function verifyReleaseArtifact(proof, skillsCli) {
   need4(isAbsolute26(proof.packageTarPath) && !proof.packageTarPath.includes("\x00"), "RECONCILE_RELEASE_PROVENANCE_PATH");
   const tarPath = realpathSync14(proof.packageTarPath);
@@ -108680,7 +108738,7 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
     const configSha256 = intent.configSha256 ?? configBefore.sha256, configVersion = intent.configVersion ?? intent.expectedVersion;
     const digestInput = { version: 1, home: intent.home ?? home, configPath: intent.configPath, ...intent.nativeConfigPath !== undefined ? { nativeConfigPath: intent.nativeConfigPath } : {}, configSha256, configVersion, policySha256: intent.policySha256, hooksSha256: intent.hooksSha256, skillsCli: intent.skillsCli, nativeVersion: intent.nativeVersion, declarations, admitted };
     need4(makePlanDigest(digestInput) === intent.planDigest, "RECONCILE_PLAN_CHANGED");
-    need4(isDeepStrictEqual10(intent.hooks, admitted.filter((hook) => !hook.enabled || hook.trustStatus !== "trusted")), "RECONCILE_INTENT_HOOKS_CHANGED");
+    need4(isDeepStrictEqual11(intent.hooks, admitted.filter((hook) => !hook.enabled || hook.trustStatus !== "trusted")), "RECONCILE_INTENT_HOOKS_CHANGED");
     need4(configBefore.sha256 === (intent.beforeSha256 ?? intent.configSha256) && hooksBefore.sha256 === intent.hooksSha256 && policyBefore.sha256 === intent.policySha256, "RECONCILE_JOURNAL_CHANGED");
     const policyCurrent = snapshot(join57(dataDir3, "agent-policy.json"), true);
     const { claudeDiscoveryRecovery: claudeRecovery, nativeHookAdditionsRecovery: additionsRecovery } = options;
@@ -108693,7 +108751,7 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
     if (policyCurrent.sha256 !== policyBefore.sha256 && !claudeRecovery) {
       need4(options.supersedeBinding === true, "RECONCILE_POLICY_CHANGED");
       const oldPolicy = JSON.parse(policyBefore.text), currentPolicy = JSON.parse(policyCurrent.text);
-      need4(isDeepStrictEqual10(withoutCodexCommand(oldPolicy), withoutCodexCommand(currentPolicy)), "RECONCILE_POLICY_CHANGED");
+      need4(isDeepStrictEqual11(withoutCodexCommand(oldPolicy), withoutCodexCommand(currentPolicy)), "RECONCILE_POLICY_CHANGED");
       supersededBinding = true;
     }
     if (supersededBinding || recovery) {
@@ -108718,16 +108776,19 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
     const before2 = structure3(configBefore.text), current = structure3(currentConfig.text), expectedConfig = structuredClone(before2);
     expectedConfig.hooks ??= {};
     expectedConfig.hooks.state ??= {};
-    for (const hook of managedHooks)
+    for (const hook of intent.hooks)
       expectedConfig.hooks.state[hook.key] = { ...expectedConfig.hooks.state[hook.key], enabled: true, trusted_hash: hook.currentHash };
+    if (additions)
+      for (const { key, state } of readReviewedAdditionTrustStates(additions.trustProof, configBefore, currentConfig, intent.hooks))
+        expectedConfig.hooks.state[key] = { ...state };
     if (supersededBinding) {
       for (const hook of intent.hooks) {
         const state = current.hooks?.state?.[hook.key];
         need4(state?.enabled === true && typeof state.trusted_hash === "string" && /^sha256:[a-f0-9]{64}$/.test(state.trusted_hash), "RECONCILE_CONFIG_DRIFT");
       }
     } else
-      need4(isDeepStrictEqual10(expectedConfig, current), "RECONCILE_CONFIG_DRIFT");
-    const configDiscoveryRecovery = recovery && binding.discovery?.codex ? createCodexHookDiscoveryRecovery(binding.discovery.codex, configBefore, currentConfig, managedHooks) : undefined;
+      need4(isDeepStrictEqual11(expectedConfig, current), "RECONCILE_CONFIG_DRIFT");
+    const configDiscoveryRecovery = recovery && binding.discovery?.codex ? createCodexHookDiscoveryRecovery(binding.discovery.codex, configBefore, currentConfig, intent.hooks, additions?.trustProof) : undefined;
     assertManagedAgentBridge("codex", { home, dataDir: dataDir3, projectDir: home, codexDiscoveryRecovery: configDiscoveryRecovery });
     const recoveryCli = recovery ? bindSkillsCli("skills", options.reviewedSkillsCli) : undefined;
     if (recoveryCli)
@@ -108735,14 +108796,14 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
     const skillsCli = recovery ? inspectRecordedSkillsCli(binding.commands.codex, intent.skillsCli) : bindSkillsCli(binding.commands.codex, options.reviewedSkillsCli);
     if (supersededBinding)
       verifyReleaseArtifact(options.releaseProof, skillsCli);
-    const skillsBindingChanged = !isDeepStrictEqual10(skillsCli.receipt, intent.skillsCli);
+    const skillsBindingChanged = !isDeepStrictEqual11(skillsCli.receipt, intent.skillsCli);
     need4(!skillsBindingChanged || supersededBinding, "RECONCILE_SKILLS_BINDING_CHANGED");
     if (!additions && hooksCurrent.sha256 !== intent.hooksSha256 && hooksCurrent.sha256 !== hooksBefore.sha256) {
       need4(supersededBinding, "RECONCILE_HOOKS_CHANGED");
       const currentDeclarations = JSON.parse(hooksCurrent.text).hooks;
       for (const [event, [nativeEvent]] of Object.entries(eventNames)) {
         const command = renderAgentHookCommand(binding.commands.codex, "codex", binding.profiles.codex, event);
-        need4(isDeepStrictEqual10(currentDeclarations?.[event], [{ hooks: [{ type: "command", command, timeout: 15 }] }]), "RECONCILE_BINDING_HOOK_CHANGED");
+        need4(isDeepStrictEqual11(currentDeclarations?.[event], [{ hooks: [{ type: "command", command, timeout: 15 }] }]), "RECONCILE_BINDING_HOOK_CHANGED");
       }
     }
     rpc = await connect({ command: options.codexCommand ?? "codex", home, codexHome });
@@ -108765,9 +108826,9 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
           delete identity4.command;
         return identity4;
       };
-      need4(isDeepStrictEqual10(stable(actual), stable(expected)), "RECONCILE_NATIVE_IDENTITY_CHANGED");
+      need4(isDeepStrictEqual11(stable(actual), stable(expected)), "RECONCILE_NATIVE_IDENTITY_CHANGED");
       if (!plannedKeys.has(expected.key))
-        need4(isDeepStrictEqual10(actual, expected), "RECONCILE_UNRELATED_HOOK_CHANGED");
+        need4(isDeepStrictEqual11(actual, expected), "RECONCILE_UNRELATED_HOOK_CHANGED");
     }
     for (const wanted of intent.hooks) {
       const matches2 = nativeHooks.filter((h2) => h2.key === wanted.key || h2.key === wanted.key.replace(join57(home, ".codex/hooks.json"), hooksPath));
@@ -108784,12 +108845,12 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
     }
     const config2 = await rpc.request("config/read", { includeLayers: true, cwd: home });
     const layers = config2?.layers?.filter((layer) => layer.name?.type === "user" && layer.name.file === nativeConfigPath && !layer.name.profile);
-    need4(layers?.length === 1 && !layers[0].disabledReason && isDeepStrictEqual10(layers[0].config, current), "RECONCILE_NATIVE_CONFIG_MISMATCH");
+    need4(layers?.length === 1 && !layers[0].disabledReason && isDeepStrictEqual11(layers[0].config, current), "RECONCILE_NATIVE_CONFIG_MISMATCH");
     const finalDiscovery = await rpc.request("hooks/list", { cwds: [home] });
-    need4(Array.isArray(finalDiscovery?.data) && finalDiscovery.data.length === 1 && finalDiscovery.data[0].cwd === home && !finalDiscovery.data[0].errors?.length && !finalDiscovery.data[0].warnings?.length && (!recordedNativeHooks || isDeepStrictEqual10(finalDiscovery.data[0].hooks.map(safeNativeHook), nativeHooks.map(safeNativeHook))), "RECONCILE_NATIVE_STATE_CHANGED");
+    need4(Array.isArray(finalDiscovery?.data) && finalDiscovery.data.length === 1 && finalDiscovery.data[0].cwd === home && !finalDiscovery.data[0].errors?.length && !finalDiscovery.data[0].warnings?.length && (!recordedNativeHooks || isDeepStrictEqual11(finalDiscovery.data[0].hooks.map(safeNativeHook), nativeHooks.map(safeNativeHook))), "RECONCILE_NATIVE_STATE_CHANGED");
     const finalConfig = await rpc.request("config/read", { includeLayers: true, cwd: home });
     const finalLayers = finalConfig?.layers?.filter((layer) => layer.name?.type === "user" && layer.name.file === nativeConfigPath && !layer.name.profile);
-    need4(finalLayers?.length === 1 && !finalLayers[0].disabledReason && isDeepStrictEqual10(finalLayers[0].config, current), "RECONCILE_NATIVE_CONFIG_CHANGED");
+    need4(finalLayers?.length === 1 && !finalLayers[0].disabledReason && isDeepStrictEqual11(finalLayers[0].config, current), "RECONCILE_NATIVE_CONFIG_CHANGED");
     if (recovery) {
       for (const response of [config2, finalConfig]) {
         const layerIndex = response.layers.findIndex((layer) => layer.name?.type === "user" && layer.name.file === nativeConfigPath && !layer.name.profile);
@@ -108847,7 +108908,7 @@ async function enrollCodexNativeHooks(options = {}, connect = connectCodexHookRp
       const groups = declarations[event];
       need4(Array.isArray(groups), "DECLARATION_CHANGED");
       const matches2 = groups.flatMap((group, gi) => (group.hooks ?? []).flatMap((entry, hi) => entry.command === command ? [{ group, entry, gi, hi }] : []));
-      need4(matches2.length === 1 && isDeepStrictEqual10(matches2[0].group, { hooks: [{ type: "command", command, timeout: 15 }] }), "DECLARATION_CHANGED");
+      need4(matches2.length === 1 && isDeepStrictEqual11(matches2[0].group, { hooks: [{ type: "command", command, timeout: 15 }] }), "DECLARATION_CHANGED");
       expected.push({ event: nativeEvent, key: `${join57(home, ".codex/hooks.json")}:${label}:${matches2[0].gi}:${matches2[0].hi}`, command });
     }
     codexTrustTextWitness(configFile.text, expected.map((h) => h.key));
@@ -108871,7 +108932,7 @@ async function enrollCodexNativeHooks(options = {}, connect = connectCodexHookRp
     const discovered = await list2(), admitted = admit(discovered);
     const config2 = await rpc.request("config/read", { includeLayers: true, cwd: home });
     const layers = config2?.layers?.filter((layer) => layer.name?.type === "user" && layer.name.file === nativeConfigPath && !layer.name.profile);
-    need4(layers?.length === 1 && /^sha256:[a-f0-9]{64}$/.test(layers[0].version) && !layers[0].disabledReason && isDeepStrictEqual10(layers[0].config, original), "NATIVE_CONFIG_MISMATCH");
+    need4(layers?.length === 1 && /^sha256:[a-f0-9]{64}$/.test(layers[0].version) && !layers[0].disabledReason && isDeepStrictEqual11(layers[0].config, original), "NATIVE_CONFIG_MISMATCH");
     need4(config2.config && config2.config.features?.hooks !== false, "NATIVE_HOOKS_DISABLED");
     need4(config2.layers.slice(0, config2.layers.indexOf(layers[0])).every((layer) => layer.config?.hooks === undefined && layer.config?.features?.hooks === undefined), "NATIVE_CONFIG_OVERRIDDEN");
     const keys3 = admitted.map((h) => h.key), planned = admitted.filter((h) => !h.enabled || h.trustStatus !== "trusted");
@@ -108910,7 +108971,7 @@ async function enrollCodexNativeHooks(options = {}, connect = connectCodexHookRp
     save(join57(journal, "hooks.before.json"), hooksFile.bytes);
     save(join57(journal, "policy.before.json"), policyFile.bytes);
     save(join57(journal, "intent.json"), json2({ ...digestInput, planDigest, hooks: planned, nativeHooks: discovered.map(safeNativeHook) }));
-    need4(isDeepStrictEqual10(admit(await list2()), admitted), "NATIVE_DISCOVERY_CHANGED");
+    need4(isDeepStrictEqual11(admit(await list2()), admitted), "NATIVE_DISCOVERY_CHANGED");
     checkInputs();
     let result2;
     try {
@@ -108924,7 +108985,7 @@ async function enrollCodexNativeHooks(options = {}, connect = connectCodexHookRp
     expectedConfig.hooks.state ??= {};
     for (const h of planned)
       expectedConfig.hooks.state[h.key] = { ...expectedConfig.hooks.state[h.key], enabled: true, trusted_hash: h.currentHash };
-    need4(isDeepStrictEqual10(structure3(after2.text), expectedConfig) && codexTrustTextWitness(after2.text, keys3) === preservationText, "PRESERVATION_FAILED");
+    need4(isDeepStrictEqual11(structure3(after2.text), expectedConfig) && codexTrustTextWitness(after2.text, keys3) === preservationText, "PRESERVATION_FAILED");
     const savedConfig = snapshot(join57(journal, "config.before.toml"), true);
     need4(savedConfig.sha256 === configFile.sha256, "JOURNAL_CHANGED");
     const discoveryTransition = binding.discovery?.codex ? createCodexHookDiscoveryRecovery(binding.discovery.codex, savedConfig, after2, planned) : undefined;
@@ -108932,8 +108993,8 @@ async function enrollCodexNativeHooks(options = {}, connect = connectCodexHookRp
     unchanged2(hooksFile);
     assertManagedAgentBridge("codex", { home, dataDir: dataDir3, projectDir: home, codexDiscoveryRecovery: discoveryTransition });
     const current = await list2(), confirmed = admit(current);
-    need4(confirmed.every((h) => h.enabled && h.trustStatus === "trusted") && isDeepStrictEqual10(confirmed.map((h) => [h.key, h.currentHash]), admitted.map((h) => [h.key, h.currentHash])), "NATIVE_NOT_ELIGIBLE");
-    need4(isDeepStrictEqual10(current.filter((h) => !keys3.includes(h.key)), discovered.filter((h) => !keys3.includes(h.key))), "UNRELATED_HOOK_CHANGED");
+    need4(confirmed.every((h) => h.enabled && h.trustStatus === "trusted") && isDeepStrictEqual11(confirmed.map((h) => [h.key, h.currentHash]), admitted.map((h) => [h.key, h.currentHash])), "NATIVE_NOT_ELIGIBLE");
+    need4(isDeepStrictEqual11(current.filter((h) => !keys3.includes(h.key)), discovered.filter((h) => !keys3.includes(h.key))), "UNRELATED_HOOK_CHANGED");
     unchanged2(after2);
     unchanged2(savedConfig);
     unchanged2(hooksFile);