@logic-joe/fleek 0.2.2 → 0.2.3

package/dist/fleek.mjs

@@ -1213,6 +1213,7 @@ var require_error_codes = __commonJS({
       "not_string",
       "path",
       "path_import",
+      "plugin_commit",
       "plugin_name",
       "plugin_source",
       "plugin_version",
@@ -1279,7 +1280,8 @@ var require_error_codes = __commonJS({
       "plugins",
       "marketplace",
       "source",
-      "version"
+      "version",
+      "commit"
     ];
     exports.KIT_ISSUE_TARGETS = ["claude", "codex", "cursor", "orca", "generic"];
     exports.KIT_CONFLICT_REASONS = ["targets_changed", "kit_version_changed", "reattest_changed", "example_key_taken", "signing_key_missing"];
@@ -4585,7 +4587,7 @@ var require_setup_session = __commonJS({
     exports.SETUP_SESSION_TTL_MINUTES = 30;
     exports.SETUP_SESSION_OPEN_MAX = 10;
     exports.SETUP_SESSION_CLAIM_LIMIT = 10;
-    exports.FLEEK_CLI_SETUP_VERSION_DEFAULT = "0.2.2";
+    exports.FLEEK_CLI_SETUP_VERSION_DEFAULT = "0.2.3";
     exports.FLEEK_CLI_PACKAGE = "@logic-joe/fleek";
     exports.FLEEK_CANONICAL_SERVER = "https://api.onfleek.app";
     exports.SETUP_CLIENT_APPS = ["claude-code", "codex", "orca", "cursor", "other"];
@@ -35609,7 +35611,7 @@ var import_types8 = __toESM(require_dist(), 1);
 import { spawn as spawn9 } from "node:child_process";
 import { createHash as createHash9, randomBytes as randomBytes12 } from "node:crypto";
 import { realpath as realpath19, rm as rm13 } from "node:fs/promises";
-import { homedir as homedir8, hostname as osHostname2 } from "node:os";
+import { hostname as osHostname2 } from "node:os";
 import { join as join33, sep as sep10 } from "node:path";
 import { parseArgs } from "node:util";
 
@@ -35672,7 +35674,13 @@ function kitRefusalCategory(code, reason) {
 }
 
 // src/config.ts
-function defaultConfigDir(env = process.env, platform = process.platform, home = (platform === "win32" ? env.USERPROFILE ?? env.HOME : env.HOME) ?? homedir()) {
+function userHome(env = process.env, platform = process.platform) {
+  return (platform === "win32" ? env.USERPROFILE ?? env.HOME : env.HOME) ?? homedir();
+}
+function contextHome(context) {
+  return context.home ?? context.deps.home ?? userHome(context.env);
+}
+function defaultConfigDir(env = process.env, platform = process.platform, home = userHome(env, platform)) {
   if (env.FLEEK_CONFIG_DIR) return env.FLEEK_CONFIG_DIR;
   if (platform === "win32") return join(env.APPDATA ?? join(home, "AppData", "Roaming"), "fleek");
   if (platform === "darwin") return join(home, "Library", "Application Support", "fleek");
@@ -36375,7 +36383,7 @@ var EN = {
   "uninstall.offline": "Continue with local removal only? Remote access remains until revoked in the web UI. [y/N]",
   "service.removeTitle": "Remove Fleek review service",
   "service.removeConfirm": "Revoke the service sign-in and remove these service-host items? [y/N]",
-  "service.removeOffline": "Revocation unavailable. Update the host with fleek service setup or revoke all sign-ins of the service account at https://app.onfleek.app/admin/bots. Continue locally? [y/N]",
+  "service.removeOffline": "Revocation unavailable. Update the host with fleek service setup or ask a workspace admin to sign out this host under the service account’s sign-ins at https://app.onfleek.app/admin/bots. Continue locally? [y/N]",
   "service.removeDone": "Review service removed",
   "help.description.service.remove": "Revoke and remove the review service host",
   "help.service.remove": "fleek service remove [review] [--dry-run] [--local-only]",
@@ -36793,6 +36801,16 @@ var EN = {
   "setup.plugins.ask": "Install {plugin} in {client}? [y/N/a=all]",
   "setup.plugins.restart": "Restart the client so it loads the plugin.",
   "setup.plugins.auto": "Approved with the signed kit: installed without asking (service account).",
+  "setup.plugins.otherCommit": "commit {commit} (approved: {approved})",
+  "setup.plugins.bound": "Bound to commit {commit}: installed only when the source serves exactly this commit.",
+  "setup.plugins.unbound": "Not bound to a commit: you install what the source serves today.",
+  "setup.plugins.unboundShort": "not bound",
+  "setup.plugins.unboundAuto": "{plugin}: not bound to a commit - not installed on a service account (the admin binds it in the kit).",
+  "setup.plugins.upstreamMoved": "the source no longer serves the approved commit (the admin approves a new kit version)",
+  "setup.plugins.upstreamUnchecked": "the source commit could not be checked (git missing or source unreachable)",
+  "setup.plugins.checkoutOther": "the client's marketplace checkout is not at the approved commit (nothing installed)",
+  "setup.plugins.contentUnproven": "content not proven (the plugin is not inside the marketplace checkout at the approved commit)",
+  "setup.plugins.notLocal": "the plugin is fetched from a source outside the approved marketplace commit (not supported for bound plugins; nothing installed)",
   "setup.reason.http": "HTTP {status}",
   "setup.action.install": "install",
   "setup.action.update": "update",
@@ -37010,7 +37028,7 @@ var DE = {
   "uninstall.offline": "Nur lokal fortfahren? Der Serverzugang bleibt bis zum Widerruf in der Weboberfläche bestehen. [j/N]",
   "service.removeTitle": "Fleek-Review-Dienst entfernen",
   "service.removeConfirm": "Dienstanmeldung widerrufen und diese Diensthost-Einträge entfernen? [j/N]",
-  "service.removeOffline": "Widerruf nicht möglich. Host mit fleek service setup aktualisieren oder alle Anmeldungen des Dienstkontos unter https://app.onfleek.app/admin/bots widerrufen. Lokal fortfahren? [j/N]",
+  "service.removeOffline": "Widerruf nicht möglich. Host mit fleek service setup aktualisieren oder einen Workspace-Admin bitten, diesen Host unter den Anmeldungen des Dienstkontos auf https://app.onfleek.app/admin/bots abzumelden. Lokal fortfahren? [j/N]",
   "service.removeDone": "Review-Dienst entfernt",
   "help.description.service.remove": "Review-Diensthost widerrufen und entfernen",
   "help.service.remove": "fleek service remove [review] [--dry-run] [--local-only]",
@@ -37428,6 +37446,16 @@ var DE = {
   "setup.plugins.ask": "{plugin} in {client} installieren? [j/N/a=alle]",
   "setup.plugins.restart": "Client neu starten, damit er das Plugin lädt.",
   "setup.plugins.auto": "Mit dem signierten Kit freigegeben: wird ohne Rückfrage installiert (Service-Konto).",
+  "setup.plugins.otherCommit": "Commit {commit} (freigegeben: {approved})",
+  "setup.plugins.bound": "An Commit {commit} gebunden: wird nur installiert, wenn die Quelle genau diesen Commit liefert.",
+  "setup.plugins.unbound": "Nicht an einen Commit gebunden: du installierst, was die Quelle heute liefert.",
+  "setup.plugins.unboundShort": "nicht gebunden",
+  "setup.plugins.unboundAuto": "{plugin}: nicht an einen Commit gebunden – auf einem Service-Konto nicht installiert (der Admin bindet es im Kit).",
+  "setup.plugins.upstreamMoved": "die Quelle liefert nicht mehr den freigegebenen Commit (der Admin gibt eine neue Kit-Version frei)",
+  "setup.plugins.upstreamUnchecked": "der Commit der Quelle ließ sich nicht prüfen (git fehlt oder Quelle nicht erreichbar)",
+  "setup.plugins.checkoutOther": "der Marketplace-Checkout des Clients steht nicht auf dem freigegebenen Commit (nichts installiert)",
+  "setup.plugins.contentUnproven": "Inhalt nicht bestätigt (das Plugin liegt nicht im Marketplace-Checkout des freigegebenen Commits)",
+  "setup.plugins.notLocal": "das Plugin kommt aus einer Quelle außerhalb des freigegebenen Marketplace-Commits (bei gebundenen Plugins nicht unterstützt; nichts installiert)",
   "setup.reason.http": "HTTP {status}",
   "setup.action.install": "installieren",
   "setup.action.update": "aktualisieren",
@@ -39589,6 +39617,7 @@ function isSkillName(name) {
 var MCP_SERVER_NAME = /^[a-z][a-z0-9-]{1,32}$/;
 var PLUGIN_NAME = /^[a-z][a-z0-9-]{1,63}$/;
 var PLUGIN_VERSION = /^[0-9A-Za-z][0-9A-Za-z.+-]{0,31}$/;
+var PLUGIN_COMMIT = /^[0-9a-f]{40}$/;
 var PLUGIN_SOURCE = /^https:\/\/github\.com\/[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})\/[A-Za-z0-9._-]{1,100}$/;
 var BASE_PROTOCOL = /^fleek-work-protocol\/(0|[1-9][0-9]{0,3})\.(0|[1-9][0-9]{0,3})$/;
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
@@ -39596,6 +39625,7 @@ var RESERVED_MCP_NAME = "fleek";
 var CONTENT_KEYS = ["format", "skills", "agentsBlock", "docRefs", "mcpServers", "base"];
 var OPTIONAL_CONTENT_KEYS = ["plugins"];
 var PLUGIN_KEYS = ["name", "marketplace", "source", "version"];
+var PLUGIN_OPTIONAL_KEYS = ["commit"];
 var SKILL_KEYS = ["name", "description", "body"];
 var DOC_REF_KEYS = ["documentId", "title"];
 var MCP_SERVER_KEYS = ["name", "url"];
@@ -46982,7 +47012,7 @@ function checkPlugins(value, errors, warnings) {
       errors.push({ reason: "not_object", path });
       return;
     }
-    closedKeys(entry, PLUGIN_KEYS, path, errors);
+    closedKeys(entry, PLUGIN_KEYS, path, errors, [], PLUGIN_OPTIONAL_KEYS);
     for (const field of PLUGIN_KEYS) {
       const text6 = entry[field];
       if (typeof text6 !== "string") {
@@ -47004,6 +47034,8 @@ function checkPlugins(value, errors, warnings) {
     }
     if (typeof version2 !== "string" || !PLUGIN_VERSION.test(version2))
       errors.push({ reason: "plugin_version", path: `${path}.version` });
+    if ("commit" in entry && (typeof entry.commit !== "string" || !PLUGIN_COMMIT.test(entry.commit)))
+      errors.push({ reason: "plugin_commit", path: `${path}.commit` });
     if (typeof name === "string" && typeof marketplace === "string") {
       const id = `${name}@${marketplace}`;
       if (ids.has(id))
@@ -48829,7 +48861,7 @@ async function orcaPick(deps, values) {
 }
 
 // src/uninstall.ts
-import { cp as cp2, lstat as lstat11, mkdir as mkdir5, readFile as readFile15, readdir as readdir10, realpath as realpath12, rm as rm8, rmdir as rmdir2 } from "node:fs/promises";
+import { cp as cp2, lstat as lstat11, mkdir as mkdir5, readFile as readFile16, readdir as readdir10, realpath as realpath12, rm as rm8, rmdir as rmdir2 } from "node:fs/promises";
 import { dirname as dirname14, join as join22, sep as sep6 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual3 } from "node:util";
 import { randomBytes as randomBytes9 } from "node:crypto";
@@ -51039,7 +51071,7 @@ async function deletedCheckout(root) {
   } catch (error) {
     if (error.code !== "ENOENT") return false;
   }
-  if (/^\/(?:Volumes|media|mnt)(?:\/|$)/.test(root)) return false;
+  if (/^\/(?:Volumes|media|mnt|run\/media)(?:\/|$)/.test(root)) return false;
   for (let parent = dirname12(root); ; parent = dirname12(parent)) {
     try {
       const info = await lstat8(parent);
@@ -51322,11 +51354,12 @@ async function planCodexSkillRemovals(configDir, profileKey2) {
 }
 
 // src/plugin-step.ts
-import { lstat as lstat10, readdir as readdir9, realpath as realpath11, stat as stat11 } from "node:fs/promises";
+import { lstat as lstat10, readdir as readdir9, readFile as readFile15, realpath as realpath11, stat as stat11 } from "node:fs/promises";
 import { join as join21, sep as sep5 } from "node:path";
 var PLUGIN_CLIENTS = ["claude", "codex"];
 var LABEL3 = { claude: "Claude Code", codex: "Codex" };
 var LIST_TIMEOUT_MS = 2e4;
+var STATE_READ_LIMIT = 4 * 1024 * 1024;
 var INSTALL_TIMEOUT_MS = 18e4;
 var pluginId = (plugin) => `${plugin.name}@${plugin.marketplace}`;
 async function generationPlugins(domain, gen) {
@@ -51342,9 +51375,10 @@ async function generationPlugins(domain, gen) {
     }
     for (const raw of content3.plugins ?? []) {
       const plugin = raw;
-      if (!plugin || typeof plugin.name !== "string" || typeof plugin.marketplace !== "string" || typeof plugin.source !== "string" || typeof plugin.version !== "string" || !PLUGIN_NAME.test(plugin.name) || !PLUGIN_NAME.test(plugin.marketplace) || !PLUGIN_SOURCE.test(plugin.source) || !PLUGIN_VERSION.test(plugin.version)) continue;
-      const id = `${plugin.name}@${plugin.marketplace} ${plugin.source} ${plugin.version}`;
-      const entry = byId.get(id) ?? { plugin: { name: plugin.name, marketplace: plugin.marketplace, source: plugin.source, version: plugin.version }, kits: [] };
+      if (!plugin || typeof plugin.name !== "string" || typeof plugin.marketplace !== "string" || typeof plugin.source !== "string" || typeof plugin.version !== "string" || !PLUGIN_NAME.test(plugin.name) || !PLUGIN_NAME.test(plugin.marketplace) || !PLUGIN_SOURCE.test(plugin.source) || !PLUGIN_VERSION.test(plugin.version) || plugin.commit !== void 0 && (typeof plugin.commit !== "string" || !PLUGIN_COMMIT.test(plugin.commit))) continue;
+      const commit = typeof plugin.commit === "string" ? plugin.commit : void 0;
+      const id = `${plugin.name}@${plugin.marketplace} ${plugin.source} ${plugin.version} ${commit ?? "-"}`;
+      const entry = byId.get(id) ?? { plugin: { name: plugin.name, marketplace: plugin.marketplace, source: plugin.source, version: plugin.version, ...commit ? { commit } : {} }, kits: [] };
       entry.kits.push(kit2.kitKey);
       byId.set(id, entry);
     }
@@ -51382,10 +51416,89 @@ async function marketplaces(system, home, binary) {
       const from = entry.marketplaceSource;
       source = from?.sourceType === "git" ? canonicalGithub(from.source) : null;
     }
-    out.set(entry.name, source);
+    const location = home.client === "codex" ? entry.root : entry.installLocation;
+    const root = typeof location === "string" && location.startsWith("/") ? location : null;
+    out.set(entry.name, { source, root });
   }
   return out;
 }
+async function readSmall(path) {
+  try {
+    const info = await lstat10(path);
+    if (!info.isFile() || info.size > STATE_READ_LIMIT) return null;
+    return await readFile15(path, "utf8");
+  } catch {
+    return null;
+  }
+}
+async function claudeInstalledCommit(system, home, id, installPath) {
+  const text6 = await readSmall(join21(home.configDir ?? join21(system.home, ".claude"), "plugins", "installed_plugins.json"));
+  if (text6 === null) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(text6);
+  } catch {
+    return null;
+  }
+  const entries = parsed?.plugins?.[id];
+  if (!Array.isArray(entries)) return null;
+  const entry = entries.find((item2) => !!item2 && typeof item2 === "object" && item2.scope === "user" && (installPath === null || item2.installPath === installPath));
+  return typeof entry?.gitCommitSha === "string" && PLUGIN_COMMIT.test(entry.gitCommitSha) ? entry.gitCommitSha : null;
+}
+async function checkoutCommit(root) {
+  if (!root) return null;
+  const git2 = join21(root, ".git");
+  const head = (await readSmall(join21(git2, "HEAD")))?.trim() ?? "";
+  if (PLUGIN_COMMIT.test(head)) return head;
+  const ref = /^ref: (refs\/heads\/[A-Za-z0-9._/-]{1,200})$/.exec(head)?.[1];
+  if (!ref || ref.includes("..")) return null;
+  const loose = (await readSmall(join21(git2, ref)))?.trim() ?? "";
+  if (PLUGIN_COMMIT.test(loose)) return loose;
+  for (const line of (await readSmall(join21(git2, "packed-refs")) ?? "").split("\n")) {
+    const [sha, name] = line.trim().split(" ");
+    if (name === ref && sha && PLUGIN_COMMIT.test(sha)) return sha;
+  }
+  return null;
+}
+var MANIFESTS = {
+  claude: [".claude-plugin/marketplace.json"],
+  codex: [".agents/plugins/marketplace.json", ".agents/plugins/api_marketplace.json", ".claude-plugin/marketplace.json", ".cursor-plugin/marketplace.json"]
+};
+async function localPluginSource(root, client, name) {
+  let text6 = null;
+  for (const file of MANIFESTS[client]) {
+    const present = await lstat10(join21(root, file)).then(() => true, () => false);
+    if (!present) continue;
+    text6 = await readSmall(join21(root, file));
+    break;
+  }
+  if (text6 === null) return false;
+  let manifest;
+  try {
+    manifest = JSON.parse(text6);
+  } catch {
+    return false;
+  }
+  if (!manifest || !Array.isArray(manifest.plugins) || client === "claude" && manifest.metadata?.pluginRoot !== void 0) return false;
+  const entries = manifest.plugins.filter((item2) => !!item2 && typeof item2 === "object" && item2.name === name);
+  if (!entries.length) return false;
+  const realRoot = await realpath11(root).catch(() => null);
+  if (!realRoot) return false;
+  for (const entry of entries) {
+    const raw = entry.source;
+    const path = typeof raw === "string" ? raw : client === "codex" && raw && typeof raw === "object" && raw.source === "local" ? raw.path : null;
+    if (typeof path !== "string") return false;
+    const relative3 = path === "." || path === "./" ? "" : path.startsWith("./") ? path.slice(2).replace(/\/$/, "") : null;
+    if (relative3 === null || relative3.includes("\\") || relative3 && relative3.split("/").some((part) => !part || part === "." || part === "..")) return false;
+    const real = await realpath11(join21(root, relative3)).catch(() => null);
+    if (!real || real !== realRoot && !real.startsWith(`${realRoot}${sep5}`) || !await stat11(real).then((info) => info.isDirectory(), () => false)) return false;
+  }
+  return true;
+}
+async function checkoutVerdict(client, root, plugin) {
+  if (!root || await checkoutCommit(root) !== plugin.commit) return "other_commit";
+  return await localPluginSource(root, client, plugin.name) ? "ok" : "not_local";
+}
 async function pluginHomes(system, clients, options = {}) {
   const homes = [];
   const seen = /* @__PURE__ */ new Set();
@@ -51450,29 +51563,47 @@ async function inspectPlugins(system, clients, plugins, options = {}) {
     const base = { client: home.client, configDir: home.configDir, account: home.account };
     for (const plugin of plugins) {
       if (!installed || !markets) {
-        rows.push({ ...base, plugin, state: "unchecked", installed: null, installPath: null });
+        rows.push({ ...base, plugin, state: "unchecked", installed: null, installPath: null, installedCommit: null, marketAdded: false });
         continue;
       }
       const found = installed.find((entry) => entry.id === pluginId(plugin));
-      const of = (state) => ({ ...base, plugin, state, installed: found?.version ?? null, installPath: found?.installPath ?? null });
       const market = markets.get(plugin.marketplace);
-      const sourceOk = market !== void 0 && market === canonicalGithub(plugin.source);
+      const sourceOk = market !== void 0 && market.source === canonicalGithub(plugin.source);
+      const installedCommit = plugin.commit && found && sourceOk ? home.client === "claude" ? await claudeInstalledCommit(system, home, found.id, found.installPath) : await checkoutCommit(market.root) : null;
+      const verdict = plugin.commit && found && sourceOk && installedCommit === plugin.commit ? await checkoutVerdict(home.client, market.root, plugin) : null;
+      const of = (state) => ({ ...base, plugin, state, installed: found?.version ?? null, installPath: found?.installPath ?? null, installedCommit, marketAdded: sourceOk });
       if (plugin.conflict) rows.push(of("unverified"));
       else if (!found) rows.push(of(market !== void 0 && !sourceOk ? "unverified" : "missing"));
       else if (!sourceOk) rows.push(of("unverified"));
       else if (found.errors) rows.push(of("error"));
+      else if (plugin.commit && installedCommit !== plugin.commit) rows.push(of("other_commit"));
+      else if (verdict !== null && verdict !== "ok") rows.push(of("unverified"));
       else if (!found.enabled) rows.push(of("disabled"));
       else rows.push(of(found.version === plugin.version ? "current" : "other_version"));
     }
   }
   return rows;
 }
-var pluginActionNeeded = (rows) => rows.some((row) => row.state !== "current" && row.state !== "other_version");
+var pluginActionNeeded = (rows) => rows.some((row) => row.state !== "current" && row.state !== "other_version" && row.state !== "other_commit");
 function pluginCommands(row) {
   const id = pluginId(row.plugin);
   if (row.state === "disabled") return row.client === "claude" ? [["plugin", "enable", id]] : [];
   if (row.state !== "missing") return [];
-  return row.client === "claude" ? [["plugin", "install", row.plugin.name, "--marketplace", row.plugin.source, "--scope", "user"]] : [["plugin", "marketplace", "add", row.plugin.source], ["plugin", "add", id]];
+  if (row.client === "claude" && row.plugin.commit) return [...row.marketAdded ? [] : [["plugin", "marketplace", "add", row.plugin.source]], ["plugin", "install", id, "--scope", "user"]];
+  return row.client === "claude" ? [["plugin", "install", row.plugin.name, "--marketplace", row.plugin.source, "--scope", "user"]] : [["plugin", "marketplace", "add", row.plugin.source, ...row.plugin.commit ? ["--ref", row.plugin.commit] : []], ["plugin", "add", id]];
+}
+var shortCommit = (commit) => commit ? commit.slice(0, 12) : "?";
+async function upstreamServes(system, plugin) {
+  const git2 = await system.which("git");
+  if (!git2) return "unchecked";
+  const result = await system.exec(git2, ["ls-remote", "--", `${plugin.source}.git`, "HEAD"], {
+    cwd: system.home,
+    timeoutMs: LIST_TIMEOUT_MS,
+    env: { GIT_TERMINAL_PROMPT: "0", GIT_ASKPASS: void 0, SSH_ASKPASS: void 0 }
+  });
+  if (result.code !== 0 || result.timedOut) return "unchecked";
+  const head = /^([0-9a-f]{40})\tHEAD$/m.exec(result.stdout)?.[1];
+  return !head ? "unchecked" : head === plugin.commit ? "yes" : "moved";
 }
 var shown2 = (row, binary, args, env) => `${row.configDir ? `CLAUDE_CONFIG_DIR=${shellWord(row.configDir)} ` : row.client === "claude" && env.CLAUDE_CONFIG_DIR ? "env -u CLAUDE_CONFIG_DIR " : ""}${[binary, ...args].map(shellWord).join(" ")}`;
 var rowLabel = (row) => row.account ? `${LABEL3[row.client]} · Orca ${row.account}` : LABEL3[row.client];
@@ -51480,9 +51611,10 @@ function stateText(ctx, row) {
   const s = ctx.out.style;
   if (row.state === "current") return s.state("ok", ctx.t("setup.plugins.current", { version: neutralizeLine(row.plugin.version) }));
   if (row.state === "other_version") return s.state("outdated", ctx.t("setup.plugins.otherVersion", { version: neutralizeLine(row.installed ?? "?"), approved: neutralizeLine(row.plugin.version) }));
+  if (row.state === "other_commit") return s.state("outdated", ctx.t("setup.plugins.otherCommit", { commit: shortCommit(row.installedCommit), approved: shortCommit(row.plugin.commit) }));
   if (row.state === "disabled") return s.state("missing", ctx.t("setup.plugins.disabled"));
   if (row.state === "missing") return s.state("missing", ctx.t("setup.status.missing"));
-  if (row.state === "unverified") return s.state("error", ctx.t(row.plugin.conflict ? "setup.plugins.conflict" : "setup.plugins.unverified"));
+  if (row.state === "unverified") return s.state("error", ctx.t(row.plugin.conflict ? "setup.plugins.conflict" : row.marketAdded && row.installed !== null ? "setup.plugins.contentUnproven" : "setup.plugins.unverified"));
   if (row.state === "error") return s.state("error", ctx.t("setup.plugins.loadError"));
   return s.state("muted", ctx.t("setup.plugins.unchecked"));
 }
@@ -51498,7 +51630,7 @@ async function pluginStep(ctx, system, clients, plugins, interactive, ask2, opti
     for (const line of s.columns(list2.map((row) => [
       s.bold(`${neutralizeLine(pluginId(row.plugin))} · ${neutralizeLine(rowLabel(row))}`),
       stateText(ctx, row),
-      s.dim(neutralizeLine(row.plugin.kits.join(", ")))
+      s.dim(neutralizeLine(`${row.plugin.kits.join(", ")} · ${row.plugin.commit ? shortCommit(row.plugin.commit) : ctx.t("setup.plugins.unboundShort")}`))
     ]))) ctx.out.line(line);
   };
   if (!ctx.json) print(rows);
@@ -51516,9 +51648,14 @@ async function pluginStep(ctx, system, clients, plugins, interactive, ask2, opti
     const binary = clients.find((client) => client.id === row.client)?.binary;
     if (!commands.length || !binary) continue;
     const label = `${pluginId(row.plugin)} → ${rowLabel(row)}`;
+    if (auto && !row.plugin.commit) {
+      if (!ctx.json) ctx.out.line(`  ${s.note(ctx.t("setup.plugins.unboundAuto", { plugin: neutralizeLine(label) }))}`);
+      continue;
+    }
     if (!ctx.json) {
       ctx.out.line(s.bold(neutralizeLine(label)));
       ctx.out.line(`  ${s.note(ctx.t("setup.plugins.source", { source: neutralizeLine(row.plugin.source), version: neutralizeLine(row.plugin.version) }))}`);
+      ctx.out.line(`  ${s.note(row.plugin.commit ? ctx.t("setup.plugins.bound", { commit: shortCommit(row.plugin.commit) }) : ctx.t("setup.plugins.unbound"))}`);
       for (const args of commands) ctx.out.line(`  ${s.diff(`$ ${neutralizeLine(shown2(row, binary, args, system.env))}`)}`);
       if (auto) ctx.out.line(`  ${s.note(ctx.t("setup.plugins.auto"))}`);
     }
@@ -51530,9 +51667,28 @@ async function pluginStep(ctx, system, clients, plugins, interactive, ask2, opti
       }
       all = answer2 === "all";
     }
+    if (row.client === "claude" && row.state === "missing" && row.plugin.commit) {
+      const upstream = await upstreamServes(system, row.plugin);
+      if (upstream !== "yes") {
+        failed2++;
+        applied.push({ plugin: pluginId(row.plugin), client: row.client, account: row.account, ok: false, auto });
+        if (!ctx.json) ctx.out.line(`  ${s.fail(ctx.t("setup.failed", { server: pluginId(row.plugin), client: rowLabel(row), reason: ctx.t(upstream === "moved" ? "setup.plugins.upstreamMoved" : "setup.plugins.upstreamUnchecked") }))}`);
+        continue;
+      }
+    }
     let ok = true;
+    let reason = "setup.reason.command_failed";
     const env = homeEnv(row);
-    for (const args of commands) {
+    for (const [index, args] of commands.entries()) {
+      if (row.state === "missing" && row.plugin.commit && index === commands.length - 1) {
+        const market = (await marketplaces(system, row, binary))?.get(row.plugin.marketplace);
+        const verdict = market && market.source === canonicalGithub(row.plugin.source) ? await checkoutVerdict(row.client, market.root, row.plugin) : "other_commit";
+        if (verdict !== "ok") {
+          ok = false;
+          reason = verdict === "not_local" ? "setup.plugins.notLocal" : "setup.plugins.checkoutOther";
+          break;
+        }
+      }
       const result = await system.exec(binary, args, { cwd: system.home, timeoutMs: INSTALL_TIMEOUT_MS, ...env ? { env } : {} });
       if (result.code !== 0 || result.timedOut) {
         ok = false;
@@ -51542,7 +51698,7 @@ async function pluginStep(ctx, system, clients, plugins, interactive, ask2, opti
     if (!ok) failed2++;
     else if (row.state === "missing") await recordInstall(ctx.configDir, row);
     applied.push({ plugin: pluginId(row.plugin), client: row.client, account: row.account, ok, auto });
-    if (!ctx.json) ctx.out.line(`  ${ok ? s.ok(ctx.t("setup.applied", { server: pluginId(row.plugin), client: rowLabel(row) })) : s.fail(ctx.t("setup.failed", { server: pluginId(row.plugin), client: rowLabel(row), reason: ctx.t("setup.reason.command_failed") }))}`);
+    if (!ctx.json) ctx.out.line(`  ${ok ? s.ok(ctx.t("setup.applied", { server: pluginId(row.plugin), client: rowLabel(row) })) : s.fail(ctx.t("setup.failed", { server: pluginId(row.plugin), client: rowLabel(row), reason: ctx.t(reason) }))}`);
   }
   if (applied.length) {
     rows = await inspectPlugins(system, clients, plugins);
@@ -51569,9 +51725,12 @@ async function usableSkills(dir) {
 async function approvedPluginDirs(system, plugins) {
   const ready = [], missing = [];
   if (!plugins.length) return { ready, missing };
+  for (const plugin of plugins) if (!plugin.commit) missing.push({ plugin: pluginId(plugin), reason: "unbound", installed: null });
+  const bound = plugins.filter((plugin) => plugin.commit);
+  if (!bound.length) return { ready, missing };
   const binary = await system.which("claude");
-  if (!binary) return { ready, missing: plugins.map((plugin) => ({ plugin: pluginId(plugin), reason: "no_client", installed: null })) };
-  const rows = await inspectPlugins(system, [{ id: "claude", binary, version: null }], plugins, { orca: false });
+  if (!binary) return { ready, missing: [...missing, ...bound.map((plugin) => ({ plugin: pluginId(plugin), reason: "no_client", installed: null }))] };
+  const rows = await inspectPlugins(system, [{ id: "claude", binary, version: null }], bound, { orca: false });
   for (const row of rows) {
     const gap = (reason) => missing.push({ plugin: pluginId(row.plugin), reason, installed: row.installed });
     if (row.state !== "current") {
@@ -51588,7 +51747,7 @@ async function approvedPluginDirs(system, plugins) {
       gap("no_skills");
       continue;
     }
-    ready.push({ plugin: pluginId(row.plugin), name: row.plugin.name, version: row.plugin.version, dir: realDir });
+    ready.push({ plugin: pluginId(row.plugin), name: row.plugin.name, version: row.plugin.version, commit: row.plugin.commit, dir: realDir });
   }
   return { ready, missing };
 }
@@ -51639,6 +51798,8 @@ var pluginJson = (rows) => rows.map((row) => ({
   plugin: pluginId(row.plugin),
   source: row.plugin.source,
   approvedVersion: row.plugin.version,
+  // KIT-PLUGIN-BIND: the commit fields only for a bound plugin (an unbound row keeps its former shape)
+  ...row.plugin.commit ? { approvedCommit: row.plugin.commit, installedCommit: row.installedCommit } : {},
   kits: row.plugin.kits,
   client: row.client,
   account: row.account,
@@ -51694,7 +51855,7 @@ async function text4(file) {
   try {
     const info = await lstat11(file);
     if (!info.isFile() || info.size > 2 * 1024 * 1024) throw failure();
-    return await readFile15(file, "utf8");
+    return await readFile16(file, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return null;
     throw error;
@@ -51981,7 +52142,7 @@ function revocationPage(profile) {
 
 // src/orca-setup.ts
 import { constants as fsConstants3 } from "node:fs";
-import { access as access4, mkdir as mkdir6, readFile as readFile16, readdir as readdir11, realpath as realpath13, stat as stat12 } from "node:fs/promises";
+import { access as access4, mkdir as mkdir6, readFile as readFile17, readdir as readdir11, realpath as realpath13, stat as stat12 } from "node:fs/promises";
 import { dirname as dirname15, join as join23, sep as sep7 } from "node:path";
 var WRAPPER_CLIENTS = ["claude", "codex"];
 async function orcaPresent2(system) {
@@ -52013,7 +52174,7 @@ async function wrapperStates(system, configDir, fleek) {
     const path = join23(wrapperDir(configDir), `fleek-${client}`);
     const program = await realClient(system, client, configDir);
     const content3 = program && fleek && await isStableFleek(fleek) ? wrapperContent(fleek, client, program) : null;
-    const current2 = await readFile16(path, "utf8").catch(() => null);
+    const current2 = await readFile17(path, "utf8").catch(() => null);
     const executable = current2 !== null && await access4(path, fsConstants3.X_OK).then(() => true, () => false);
     out.push({ client, path, program, content: content3, before: current2, state: !content3 ? "unavailable" : current2 === null ? "missing" : current2 === content3 && executable ? "current" : "outdated" });
   }
@@ -52022,7 +52183,7 @@ async function wrapperStates(system, configDir, fleek) {
 async function writeWrapper(state, configDir) {
   if (!state.content || state.state === "current") return false;
   await mkdir6(dirname15(state.path), { recursive: true, mode: 448 });
-  const before = await readFile16(state.path, "utf8").catch((error) => {
+  const before = await readFile17(state.path, "utf8").catch((error) => {
     if (error.code === "ENOENT") return null;
     throw error;
   });
@@ -52187,7 +52348,7 @@ async function linkOpen(deps, url, values = {}) {
 }
 
 // src/link-handler.ts
-import { mkdir as mkdir7, readFile as readFile17, rm as rm9, stat as stat14, writeFile as writeFile3 } from "node:fs/promises";
+import { mkdir as mkdir7, readFile as readFile18, rm as rm9, stat as stat14, writeFile as writeFile3 } from "node:fs/promises";
 import { delimiter as delimiter3, dirname as dirname17, join as join24 } from "node:path";
 var LSREGISTER = "/System/Library/Frameworks/CoreServices.framework/Frameworks/LaunchServices.framework/Support/lsregister";
 var BUNDLE_ID = "app.onfleek.fleek-link";
@@ -52278,7 +52439,7 @@ async function installLinkHandler(system, fleek) {
     return { platform: system.platform, paths: [launcher, app] };
   }
   const desktop = desktopPath(system);
-  const before = await readFile17(desktop, "utf8").catch(() => null);
+  const before = await readFile18(desktop, "utf8").catch(() => null);
   if (before !== null && !before.includes(launcher)) throw failed("desktop");
   const xdgMime = await system.which("xdg-mime");
   if (!xdgMime) throw failed("xdg-mime");
@@ -52302,7 +52463,7 @@ async function removeLinkHandler(system) {
     }
   } else {
     const desktop = desktopPath(system);
-    if ((await readFile17(desktop, "utf8").catch(() => "")).includes(launcher)) {
+    if ((await readFile18(desktop, "utf8").catch(() => "")).includes(launcher)) {
       await rm9(desktop, { force: true });
       removed = true;
     }
@@ -52447,7 +52608,6 @@ var Session = class {
 };
 
 // src/header.ts
-import { homedir as homedir2 } from "node:os";
 import { win32, posix } from "node:path";
 var LOGO2 = ["  ▄██████▀", " ▄█████▀  ", " ██▀      "];
 var ASCII_LOGO = ["  ######/", " #####/  ", " ##/     "];
@@ -52480,9 +52640,9 @@ function fit(value, width, ascii) {
   return out + suffix;
 }
 var safe = (value) => neutralizeLine(redact(value));
-function directory(context, windows) {
+function directory(context, windows, env) {
   const path = windows ? win32 : posix;
-  const home = context.home ?? homedir2();
+  const home = context.home ?? userHome(env, windows ? "win32" : process.platform);
   const relative3 = path.relative(home, context.cwd);
   const inside = relative3 === "" || relative3 !== ".." && !relative3.startsWith(`..${path.sep}`) && !path.isAbsolute(relative3);
   return safe(inside ? relative3 ? `~${path.sep}${relative3}` : "~" : context.cwd);
@@ -52503,7 +52663,7 @@ function renderHeader(context, terminal, t) {
   const requested = terminal.stream.columns ?? Number(terminal.env.COLUMNS);
   const columns = Number.isFinite(requested) && requested > 0 ? Math.floor(requested) : 80;
   const title = t("header.title", { version: safe(context.version) });
-  const cwd = directory(context, windows);
+  const cwd = directory(context, windows, terminal.env);
   const parts = [context.workspace, context.project, headerServer(context.server), context.displayName].filter((value) => !!value);
   const details = parts.length ? parts.map(safe).join(separator) : t("header.noContext");
   if (columns < 60) return [fit([title, cwd].join(separator), columns, ascii)];
@@ -52545,8 +52705,7 @@ function canonicalId(value) {
 // src/kit.ts
 import { spawn as spawn7 } from "node:child_process";
 import { randomBytes as randomBytes10 } from "node:crypto";
-import { readFile as readFile19, realpath as realpath15 } from "node:fs/promises";
-import { homedir as homedir4 } from "node:os";
+import { readFile as readFile20, realpath as realpath15 } from "node:fs/promises";
 import { isAbsolute as isAbsolute9, join as join28, resolve as resolve6, sep as sep8 } from "node:path";
 var import_types5 = __toESM(require_dist(), 1);
 
@@ -52565,7 +52724,6 @@ function trustFor(set, issuer2) {
 }
 
 // src/kit-setup.ts
-import { homedir as homedir3 } from "node:os";
 import { join as join26, resolve as resolve5 } from "node:path";
 
 // src/init-scan.ts
@@ -52619,7 +52777,7 @@ async function readCheckout(cwd) {
   const files = (await git(root, ["ls-files", "-z"])).toString("utf8").split("\0").filter(Boolean).slice(0, INIT_SCAN_LIMITS.trackedFiles);
   return { root, commit, dirty, files };
 }
-var MANIFESTS = ["package.json", "composer.json", "go.mod", "pyproject.toml", "Gemfile", "pom.xml", "build.gradle", "build.gradle.kts"];
+var MANIFESTS2 = ["package.json", "composer.json", "go.mod", "pyproject.toml", "Gemfile", "pom.xml", "build.gradle", "build.gradle.kts"];
 var IGNORED_DIRS = /* @__PURE__ */ new Set(["node_modules", "vendor", "dist", "build", ".git", ".next", "out", "coverage", ".turbo"]);
 var APP_DEPENDENCIES = /* @__PURE__ */ new Set([
   "next",
@@ -52654,7 +52812,7 @@ function ignored(path) {
   return path.split("/").some((segment) => IGNORED_DIRS.has(segment));
 }
 async function readJson(root, path) {
-  const text6 = await readSmall(root, path, INIT_SCAN_LIMITS.manifestBytes);
+  const text6 = await readSmall2(root, path, INIT_SCAN_LIMITS.manifestBytes);
   if (text6 === null) return null;
   try {
     const value = JSON.parse(text6);
@@ -52663,7 +52821,7 @@ async function readJson(root, path) {
     return null;
   }
 }
-async function readSmall(root, path, max) {
+async function readSmall2(root, path, max) {
   try {
     if (!(0, import_validation.evidencePathAllowed)(path)) return null;
     const realRoot = await realpath14(root), source = join25(root, path);
@@ -52711,7 +52869,7 @@ async function detectApplications(checkout) {
   for (const file of checkout.files) {
     if (ignored(file)) continue;
     const name = posix2.basename(file);
-    if (!MANIFESTS.includes(name)) continue;
+    if (!MANIFESTS2.includes(name)) continue;
     const dir = posix2.dirname(file) === "." ? "" : posix2.dirname(file);
     if (dir.split("/").filter(Boolean).length > INIT_SCAN_LIMITS.depth) continue;
     dirs.add(dir);
@@ -52840,17 +52998,17 @@ async function scanFacts(checkout, app) {
   }
   const goPath = `${prefix}go.mod`;
   if (own4.includes(goPath)) {
-    const text6 = await readSmall(checkout.root, goPath, INIT_SCAN_LIMITS.manifestBytes);
+    const text6 = await readSmall2(checkout.root, goPath, INIT_SCAN_LIMITS.manifestBytes);
     add("language", "go", majorOf(text6?.match(/^go\s+(\d+\.\d+)/m)?.[1]) ?? null, goPath);
   }
   const pyPath = `${prefix}pyproject.toml`;
   if (own4.includes(pyPath)) {
-    const text6 = await readSmall(checkout.root, pyPath, INIT_SCAN_LIMITS.manifestBytes) ?? "";
+    const text6 = await readSmall2(checkout.root, pyPath, INIT_SCAN_LIMITS.manifestBytes) ?? "";
     add("language", "python", majorOf(text6.match(/requires-python\s*=\s*"([^"]*)"/)?.[1]), pyPath);
     for (const [dependency, product] of [["django", "django"], ["fastapi", "fastapi"], ["flask", "flask"]]) if (new RegExp(`["\\s]${dependency}[>=<~!\\s"]`, "i").test(text6)) add("framework", product, null, pyPath);
   }
   if (own4.includes(`${prefix}Gemfile`)) {
-    const text6 = await readSmall(checkout.root, `${prefix}Gemfile`, INIT_SCAN_LIMITS.manifestBytes) ?? "";
+    const text6 = await readSmall2(checkout.root, `${prefix}Gemfile`, INIT_SCAN_LIMITS.manifestBytes) ?? "";
     add("language", "ruby", null, `${prefix}Gemfile`);
     if (/gem\s+['"]rails['"]/.test(text6)) add("framework", "rails", majorOf(text6.match(/gem\s+['"]rails['"]\s*,\s*['"][~>=\s]*([\d.]+)/)?.[1]), `${prefix}Gemfile`);
   }
@@ -52859,7 +53017,7 @@ async function scanFacts(checkout, app) {
   if (fsMarker) add("cms", "firstspirit", null, fsMarker);
   else {
     for (const file of own4.filter((name) => /(?:^|\/)(?:pom\.xml|build\.gradle(?:\.kts)?|module(?:-isolated)?\.xml)$/.test(name)).slice(0, 20)) {
-      const text6 = await readSmall(checkout.root, file, INIT_SCAN_LIMITS.manifestBytes);
+      const text6 = await readSmall2(checkout.root, file, INIT_SCAN_LIMITS.manifestBytes);
       if (text6 && /de\.espirit|fs-isolated-runtime|fs-isolated-client|fs-access\b/i.test(text6)) {
         add("cms", "firstspirit", null, file);
         break;
@@ -52901,7 +53059,7 @@ async function scanFacts(checkout, app) {
   if (rootPath && patternFiles[0] && (0, import_validation.evidencePathAllowed)(rootPath)) designSources.components = { path: rootPath, evidence: [patternFiles[0]] };
   const figmaSources = own4.filter((file) => /(?:^|\/)figma\.config\.json$|\.figma\.[cm]?[jt]sx?$/.test(file) && (0, import_validation.evidencePathAllowed)(file)).slice(0, 3);
   for (const file of figmaSources) {
-    const content3 = await readSmall(checkout.root, file, INIT_SCAN_LIMITS.fileBytes);
+    const content3 = await readSmall2(checkout.root, file, INIT_SCAN_LIMITS.fileBytes);
     const url = content3?.match(/https:\/\/(?:www\.)?figma\.com\/(?:file|design)\/[A-Za-z0-9_-]+(?:\/[A-Za-z0-9_-]+)?/)?.[0];
     if (url && (0, import_validation.environmentUrlAllowed)(url)) {
       designSources.figmaFile = { url, evidence: [file] };
@@ -52943,14 +53101,14 @@ async function scanFacts(checkout, app) {
     }
     if (/(?:^|\/)k8s\/.*\.ya?ml$/.test(file)) add("hosting", "kubernetes", null, file);
     if (/\.tf$/.test(name)) {
-      const text6 = await readSmall(checkout.root, file, INIT_SCAN_LIMITS.fileBytes) ?? "";
+      const text6 = await readSmall2(checkout.root, file, INIT_SCAN_LIMITS.fileBytes) ?? "";
       for (const match of text6.matchAll(/\bprovider\s+"(aws|google|azurerm|hcloud)"/g)) add("hosting", match[1], null, file);
     }
     const suffix = /^(?:docker-compose|compose)[.-]([A-Za-z][A-Za-z0-9_-]{0,59})\.ya?ml$/.exec(name);
     if (suffix) environment(suffix[1], file);
     if (/^\.github\/workflows\/[^/]+\.ya?ml$/.test(file)) {
       add("ci", "github-actions", null, file);
-      const text6 = await readSmall(checkout.root, file, INIT_SCAN_LIMITS.fileBytes) ?? "";
+      const text6 = await readSmall2(checkout.root, file, INIT_SCAN_LIMITS.fileBytes) ?? "";
       for (const match of text6.matchAll(/^\s*environment:\s*["']?([A-Za-z][A-Za-z0-9_-]{0,59})["']?\s*(?:#.*)?$/gm)) environment(match[1], file);
     }
     for (const [ciName, product] of [
@@ -53400,7 +53558,7 @@ var PROVISION_ACTION_NEEDED = 13;
 var CLIENT_OF = { claude: "claude", orca: "claude", codex: "codex", cursor: "cursor" };
 var LABEL4 = { claude: "Claude Code", codex: "Codex", cursor: "Cursor" };
 function systemOf(ctx) {
-  return ctx.deps.provision ?? defaultSystem(ctx.deps.home ?? homedir3(), ctx.env);
+  return ctx.deps.provision ?? defaultSystem(contextHome(ctx), ctx.env);
 }
 var isTty = (ctx) => ctx.deps.isTTY ?? (process.stdin.isTTY === true && process.stdout.isTTY === true);
 async function projectFacts(checkout, session, projectId) {
@@ -54149,7 +54307,7 @@ async function kitDoctor(ctx, values) {
 }
 
 // src/kit-proxy-launch.ts
-import { mkdir as mkdir9, mkdtemp, readFile as readFile18, rm as rm10, writeFile as writeFile5 } from "node:fs/promises";
+import { mkdir as mkdir9, mkdtemp, readFile as readFile19, rm as rm10, writeFile as writeFile5 } from "node:fs/promises";
 import { dirname as dirname19, join as join27 } from "node:path";
 async function proxyLaunchPlugin(input) {
   const unchanged = { pluginDir: input.pluginDir, cleanup: async () => {
@@ -54157,7 +54315,7 @@ async function proxyLaunchPlugin(input) {
   if (!input.files.includes("plugin/.mcp.json")) return unchanged;
   let config;
   try {
-    config = JSON.parse(await readFile18(join27(input.pluginDir, ".mcp.json"), "utf8"));
+    config = JSON.parse(await readFile19(join27(input.pluginDir, ".mcp.json"), "utf8"));
   } catch {
     throw new CliError("errors.kitStateCorrupt", EXIT.failed, { path: input.pluginDir }, "KIT_STATE_CORRUPT");
   }
@@ -54175,7 +54333,7 @@ async function proxyLaunchPlugin(input) {
       }
       const destination = join27(pluginDir, relative3);
       await mkdir9(dirname19(destination), { recursive: true, mode: 448 });
-      const bytes = relative3 === ".mcp.json" ? JSON.stringify({ ...config, mcpServers: { ...config.mcpServers, fleek: { type: "stdio", command: input.proxy.command, args: [...input.proxy.args], ...input.proxy.env ? { env: input.proxy.env } : {} } } }, null, 2) + "\n" : await readFile18(join27(input.pluginDir, relative3));
+      const bytes = relative3 === ".mcp.json" ? JSON.stringify({ ...config, mcpServers: { ...config.mcpServers, fleek: { type: "stdio", command: input.proxy.command, args: [...input.proxy.args], ...input.proxy.env ? { env: input.proxy.env } : {} } } }, null, 2) + "\n" : await readFile19(join27(input.pluginDir, relative3));
       await writeFile5(destination, bytes, { flag: "wx", mode: 384 });
     }
     return { pluginDir, cleanup };
@@ -54317,7 +54475,7 @@ async function globalE1(home, target) {
   const spec = KIT_CAPABILITIES[target].globalE1;
   if (!spec) return false;
   try {
-    const text6 = await readFile19(join28(home, spec.path), "utf8");
+    const text6 = await readFile20(join28(home, spec.path), "utf8");
     return spec.contains ? text6.includes(spec.contains) : true;
   } catch {
     return false;
@@ -54539,7 +54697,7 @@ async function checkoutInventory(domain, current2) {
 }
 async function writeComposition(input) {
   const { ctx, domain, profile, current: current2, kits, targets } = input;
-  const home = ctx.deps.home ?? homedir4();
+  const home = contextHome(ctx);
   const checkoutMode = input.unattendedRemoval ? current2?.state.checkoutMode ?? false : input.checkoutRoot !== null;
   const generation = await composeAll(kits, targets, checkoutMode, home, domain);
   const pending = await domain.pending();
@@ -54951,7 +55109,7 @@ async function kitStatus(ctx, values, options = {}) {
   const projectId = project.projectId;
   const former = options.quiet ? void 0 : project.former ?? await settleFormerProjects(ctx, profileHint, projectId);
   const domain = await prepareDomain(ctx, profileHint, projectId);
-  const home = ctx.deps.home ?? homedir4();
+  const home = contextHome(ctx);
   const lastChecked = await domain.checkedAt();
   const current2 = await domain.current();
   const e1 = Object.fromEntries(await Promise.all(Object.entries(current2?.state.targets ?? {}).map(async ([target, state]) => {
@@ -55188,7 +55346,7 @@ async function kitRun(ctx, client, values, userArgs) {
   const state = gen.state.targets[target];
   if (!state) throw new CliError("errors.kitTargetNotPulled", EXIT.failed, { target }, "KIT_NOT_PULLED");
   const bundleDir = join28(gen.dir, "bundle", target);
-  const readOptional = (rel) => state.files.includes(rel) ? readFile19(join28(bundleDir, rel), "utf8") : Promise.resolve(null);
+  const readOptional = (rel) => state.files.includes(rel) ? readFile20(join28(bundleDir, rel), "utf8") : Promise.resolve(null);
   const instructions3 = await readOptional("instructions.md");
   const mcpRaw = await readOptional("mcp.json");
   let bundle = {
@@ -55198,7 +55356,7 @@ async function kitRun(ctx, client, values, userArgs) {
   };
   let runtime;
   try {
-    const pluginMcp = state.files.includes("plugin/.mcp.json") ? JSON.parse(await readFile19(join28(bundleDir, "plugin/.mcp.json"), "utf8")) : null;
+    const pluginMcp = state.files.includes("plugin/.mcp.json") ? JSON.parse(await readFile20(join28(bundleDir, "plugin/.mcp.json"), "utf8")) : null;
     const reserved = bundle.mcpServers.some((server) => server.name === FLEEK_SERVER) || !!pluginMcp?.mcpServers && Object.hasOwn(pluginMcp.mcpServers, FLEEK_SERVER);
     if (reserved) {
       const executable = profile.cliPath ?? await resolveExecutable("fleek", ctx.env);
@@ -55226,7 +55384,7 @@ async function kitRun(ctx, client, values, userArgs) {
     if (skills.size && !skillRoot) throw new CliError("errors.kitRunCodexCheckout", EXIT.failed, { reason: "no_checkout", target }, "KIT_TARGET_UNSUPPORTED");
     if (values["dry-run"]) {
       const plugins = target === "claude" ? await generationPlugins(domain, gen) : [];
-      const vendor = await approvedPluginDirs(ctx.deps.provision ?? defaultSystem(ctx.deps.home ?? homedir4(), ctx.env), plugins);
+      const vendor = await approvedPluginDirs(ctx.deps.provision ?? defaultSystem(contextHome(ctx), ctx.env), plugins);
       ctx.out.json({
         ...command,
         ...skillRoot ? { codexSkills: { root: skillRoot, skills: [...skills.keys()].sort() } } : {},
@@ -55884,7 +56042,7 @@ var import_types6 = __toESM(require_dist(), 1);
 import { spawn as spawn8 } from "node:child_process";
 import { randomBytes as randomBytes11, randomUUID as randomUUID5 } from "node:crypto";
 import { constants as fsConstants6 } from "node:fs";
-import { access as access5, chmod as chmod4, chown, lstat as lstat14, open as open7, readFile as readFile20, rename as rename5, rm as rm12, stat as stat15 } from "node:fs/promises";
+import { access as access5, chmod as chmod4, chown, lstat as lstat14, open as open7, readFile as readFile21, rename as rename5, rm as rm12, stat as stat15 } from "node:fs/promises";
 import { hostname as osHostname } from "node:os";
 import { delimiter as delimiter4, dirname as dirname21, join as join30 } from "node:path";
 var SERVICE_KIND = "review";
@@ -56818,7 +56976,7 @@ function realSystem(options = {}) {
     },
     exists: (path) => lstat14(path).then(() => true, () => false),
     entry: (path) => lstat14(path).then((info) => ({ uid: info.uid, mode: info.mode & 4095, symlink: info.isSymbolicLink() }), () => null),
-    readText: (path) => readFile20(path, "utf8").catch(() => null),
+    readText: (path) => readFile21(path, "utf8").catch(() => null),
     async writeAtomic(path, content3, options2) {
       const temp = join30(dirname21(path), `.${randomBytes11(6).toString("hex")}.tmp`);
       const handle = await open7(temp, "wx", options2.mode);
@@ -56867,13 +57025,13 @@ function realSystem(options = {}) {
 
 // src/setup.ts
 var import_types7 = __toESM(require_dist(), 1);
-import { hostname, homedir as homedir7 } from "node:os";
+import { hostname } from "node:os";
 import { join as join32, resolve as resolve8 } from "node:path";
 import { realpath as realpath18 } from "node:fs/promises";
 import { createInterface } from "node:readline/promises";
 
 // src/setup-install.ts
-import { homedir as homedir5 } from "node:os";
+import { homedir as homedir2 } from "node:os";
 import { isAbsolute as isAbsolute10, join as join31 } from "node:path";
 import { realpath as realpath17 } from "node:fs/promises";
 async function installSetupCli(input) {
@@ -56884,7 +57042,7 @@ async function installSetupCli(input) {
   if (!npm) throw new CliError("errors.setupNpm", EXIT.unavailable, {}, "NPM_UNAVAILABLE");
   const process2 = input.run ?? runInitProcess;
   const run2 = (program, args, options2) => args[0] === "install" && input.waiting ? input.waiting(() => process2(program, args, options2)) : process2(program, args, options2);
-  const cwd = input.home ?? homedir5();
+  const cwd = input.home ?? homedir2();
   const options = { cwd, env: input.env, signal: input.signal, timeoutMs: 18e4, maxBytes: 256 * 1024 };
   const prefixResult = await run2(npm, ["prefix", "--global"], options);
   const prefix = prefixResult.code === 0 ? prefixResult.stdout.trim() : "";
@@ -56926,9 +57084,8 @@ async function installSetupCli(input) {
 }
 
 // src/setup-proxy.ts
-import { homedir as homedir6 } from "node:os";
 function createSetupProxyAdapter(ctx) {
-  const system = ctx.deps.provision ?? defaultSystem(ctx.deps.home ?? homedir6(), ctx.env);
+  const system = ctx.deps.provision ?? defaultSystem(contextHome(ctx), ctx.env);
   let configured = [];
   return {
     async provision(input) {
@@ -57049,7 +57206,7 @@ async function setupCommand(ctx, code, values) {
       rl.close();
     }
   };
-  const folderPath = (value) => value === "~" ? ctx.deps.home ?? homedir7() : value.startsWith("~/") ? join32(ctx.deps.home ?? homedir7(), value.slice(2)) : resolve8(ctx.deps.cwd ?? process.cwd(), value);
+  const folderPath = (value) => value === "~" ? contextHome(ctx) : value.startsWith("~/") ? join32(contextHome(ctx), value.slice(2)) : resolve8(ctx.deps.cwd ?? process.cwd(), value);
   let cwd = folderPath(values.checkout ?? ".");
   let checkout = await readCheckout(cwd);
   if (!checkout) {
@@ -57143,7 +57300,7 @@ async function setupCommand(ctx, code, values) {
       version: claim.cliVersion,
       runningVersion: ctx.version,
       env: ctx.env,
-      home: ctx.deps.home ?? homedir7(),
+      home: contextHome(ctx),
       signal: ctx.deps.signal,
       run: ctx.deps.setupProcess,
       waiting: (work2) => ctx.out.waiting(t("progress.install"), work2),
@@ -57161,7 +57318,7 @@ async function setupCommand(ctx, code, values) {
       throw new CliError("errors.setupCheckoutBound", EXIT.usage, {}, "CHECKOUT_ALREADY_BOUND");
     }
     await index.set(cwd, claim.project.id);
-    const system2 = ctx.deps.provision ?? defaultSystem(ctx.deps.home ?? homedir7(), ctx.env);
+    const system2 = ctx.deps.provision ?? defaultSystem(contextHome(ctx), ctx.env);
     kitContext2 = { ...fixed, env: { ...fixed.env, FLEEK_CONFIG_DIR: ctx.configDir }, deps: {
       ...fixed.deps,
       provision: { ...system2, which: (name) => name === "fleek" ? Promise.resolve(cliPath) : system2.which(name) }
@@ -57227,7 +57384,7 @@ async function setupCommand(ctx, code, values) {
   await report("done", "ok");
   ctx.info("");
   ctx.info(ctx.out.style.ok(ctx.out.style.bold(t("wizard.done", { project: neutralizeLine(claim.project.key) }))));
-  const system = ctx.deps.provision ?? defaultSystem(ctx.deps.home ?? homedir7(), ctx.env);
+  const system = ctx.deps.provision ?? defaultSystem(contextHome(ctx), ctx.env);
   const clients = await detectClients(system).catch(() => []);
   const runnable = clients.some((client2) => client2.id === "claude") ? "claude" : clients.some((client2) => client2.id === "codex") ? "codex" : null;
   const real = (path) => path ? realpath18(path).catch(() => null) : Promise.resolve(null);
@@ -57557,7 +57714,7 @@ var Context = class {
     this.env = deps.env ?? process.env;
     this.out = new Output(deps.stdout, deps.stderr, { env: this.env, json: json2 });
     this.t = translator(locale(this.env));
-    this.home = deps.home ?? (process.platform === "win32" ? this.env.USERPROFILE ?? this.env.HOME : this.env.HOME) ?? homedir8();
+    this.home = deps.home ?? userHome(this.env);
     this.configDir = defaultConfigDir(this.env, process.platform, this.home);
     this.profiles = new ProfileStore(this.configDir);
     this.fetch = deps.fetch ?? ((input, init) => globalThis.fetch(input, init));
@@ -58045,8 +58202,8 @@ async function processTemplate(ctx, sub, args, values) {
   const { client } = await ctx.session();
   const id = () => claimRef(args[0]);
   const file = async () => {
-    const { readFile: readFile21 } = await import("node:fs/promises");
-    const raw = await readFile21(text5(values.file, 1024), "utf8");
+    const { readFile: readFile22 } = await import("node:fs/promises");
+    const raw = await readFile22(text5(values.file, 1024), "utf8");
     if (Buffer.byteLength(raw) > 256 * 1024) throw usage5();
     try {
       return JSON.parse(raw);
@@ -58095,8 +58252,8 @@ async function workflow(ctx, sub, args, values) {
   const id = () => claimRef(args[0]);
   const spec = async () => {
     const path = text5(values.file, 1024);
-    const { readFile: readFile21 } = await import("node:fs/promises");
-    const raw = await readFile21(path, "utf8");
+    const { readFile: readFile22 } = await import("node:fs/promises");
+    const raw = await readFile22(path, "utf8");
     if (Buffer.byteLength(raw) > 200 * 1024) throw usage5();
     try {
       const value = JSON.parse(raw);
@@ -58526,7 +58683,7 @@ function orcaDeps(ctx) {
     configDir: ctx.configDir,
     isTTY: ctx.deps.isTTY ?? (process.stdin.isTTY === true && process.stdout.isTTY === true),
     sessionFor: async (profile) => (await ctx.sessionFor(profile)).client,
-    which: (name) => defaultSystem(homedir8(), ctx.env).which(name),
+    which: (name) => defaultSystem(ctx.home, ctx.env).which(name),
     ...ctx.deps.orcaExec ? { execFile: ctx.deps.orcaExec } : {},
     ask: ctx.deps.orcaAsk ?? (async (question) => {
       const { createInterface: createInterface2 } = await import("node:readline/promises");
@@ -58574,7 +58731,7 @@ async function link2(ctx, url, values) {
     return await linkOpen(deps, url, values.agent !== void 0 ? { agent: values.agent } : {});
   } catch (error) {
     if (!deps.isTTY && error instanceof CliError && error.code !== "LINK_INVALID") {
-      const dialog = deps.dialog ?? systemDialog(process.platform, deps.which, (program, args) => defaultExec(program, args, { cwd: homedir8(), env: orcaEnv(ctx.env), timeoutMs: 6e5 }));
+      const dialog = deps.dialog ?? systemDialog(process.platform, deps.which, (program, args) => defaultExec(program, args, { cwd: ctx.home, env: orcaEnv(ctx.env), timeoutMs: 6e5 }));
       const params = Object.fromEntries(Object.entries(error.params).map(([key, value]) => [key, typeof value === "string" ? neutralizeLine(value) : value]));
       await dialog.notify(redact(ctx.t(error.key, params))).catch(() => {
       });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logic-joe/fleek",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "fleek - command line client for the Fleek agent hub (MCP over OAuth, OS keychain, signed role/project kits)",
   "license": "Apache-2.0",
   "type": "module",

package/service-agents/kit-setup

@@ -9,6 +9,8 @@
 # (service account: the admin's approval of the signed kit is the confirmation; needs the `claude` CLI on the host, used only for
 # `plugin install|list`); run-job copies their skill Markdown read-only into the review container. Ready only when every declared
 # plugin is installed in the approved version with a skills/ directory (VF-R2: `kit run --dry-run` names each gap with its reason).
+# KIT-PLUGIN-BIND: only a plugin bound to a commit in the signed kit is installed here, only while its source serves exactly that
+# commit, and used only when Claude Code records that commit; an unbound plugin is reported "unbound" (the admin binds it in the kit).
 # Usage: sudo /opt/fleek-agents/kit-setup review        (then: systemctl restart fleek-agent-review.service)
 set -euo pipefail
 if [ "${1:-}" != --as-broker ]; then
@@ -72,6 +74,7 @@ for gap in json.load(sys.stdin).get("vendorPluginsMissing", [])[:5]:
 if [ -n "$gaps" ]; then
   printf 'run-job is NOT ready for the vendor skills of the approved kits (the job would run without them):\n%s\n' "$gaps" >&2
   echo 'Fix: install / enable the approved version for this account (re-run this setup), or ask the admin to approve the installed version.' >&2
+  echo 'unbound / other_commit: the admin binds the plugin to the commit the source serves (new kit version); nothing unbound is installed here.' >&2
   exit 13
 fi
 # Exit 13 of `kit setup` here only means optional host entries stayed open (e.g. MCP proposals answered N); the job needs none.

package/service-agents/run-job

@@ -160,7 +160,8 @@ def host_report(fleek, provider_auth, kit=None, last_job_at=None, timeout=20):
 PLUGIN_NAME = re.compile(r"[a-z0-9][a-z0-9._-]{0,63}")
 PLUGIN_VERSION = re.compile(r"[0-9A-Za-z.+-]{1,64}")
 PLUGIN_ID = re.compile(r"[a-z0-9][a-z0-9._-]{0,63}@[a-z0-9][a-z0-9._-]{0,63}")
-VENDOR_GAP_REASONS = ("other_version", "disabled", "missing", "unchecked", "unverified", "error", "no_client", "outside_cache", "no_skills")
+# KIT-PLUGIN-BIND: "unbound" (no commit in the signed kit: never installed here) and "other_commit" (the install is not the bound commit)
+VENDOR_GAP_REASONS = ("other_version", "other_commit", "unbound", "disabled", "missing", "unchecked", "unverified", "error", "no_client", "outside_cache", "no_skills")
 VENDOR_MAX_FILES, VENDOR_MAX_BYTES, VENDOR_MAX_ENTRIES, VENDOR_MAX_FILE = 2000, 8 * 1024 * 1024, 10000, 1024 * 1024