@modootoday/pmcp 0.13.1 → 0.14.1

package/dist/cli.js

@@ -11,19 +11,19 @@ var __export = (target2, all) => {
 
 // src/storage/sqlite.ts
 async function openSqlite(path, options2 = {}) {
-  if (!process.versions.bun) {
-    const name2 = "node:sqlite";
-    const { DatabaseSync } = await import(name2);
-    return { db: new DatabaseSync(path, options2), provider: name2 };
+  const provider = process.versions.bun ? "bun:sqlite" : "node:sqlite";
+  const sqlite = await import(provider);
+  if (provider === "node:sqlite") {
+    const { DatabaseSync } = sqlite;
+    return { db: new DatabaseSync(path, options2), provider };
   }
-  const name = "bun:sqlite";
-  const { Database } = await import(name);
+  const { Database } = sqlite;
   const native2 = new Database(path, {
     create: !options2.readOnly,
     readonly: options2.readOnly
   });
   return {
-    provider: name,
+    provider,
     db: {
       exec: (sql) => native2.run(sql),
       prepare: (sql) => native2.query(sql),
@@ -159,8 +159,8 @@ var init_encoder = __esm({
 });
 
 // src/config.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
-import { dirname as dirname3, join as join3, resolve as resolve3 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync4 } from "fs";
+import { dirname as dirname3, join as join4, resolve as resolve4 } from "path";
 import { parse as parse2 } from "smol-toml";
 function embeddingSection(path, dir, value) {
   if (value === void 0) return void 0;
@@ -227,8 +227,8 @@ function embeddingSection(path, dir, value) {
     revision: string("revision"),
     encoder,
     enabled: section.enabled,
-    modelPath: modelPath === void 0 ? void 0 : resolve3(dir, modelPath),
-    cacheDir: cacheDir === void 0 ? void 0 : resolve3(dir, cacheDir)
+    modelPath: modelPath === void 0 ? void 0 : resolve4(dir, modelPath),
+    cacheDir: cacheDir === void 0 ? void 0 : resolve4(dir, cacheDir)
   };
   try {
     resolveEncoder(result.modelId, result);
@@ -241,10 +241,10 @@ function embeddingSection(path, dir, value) {
   return result;
 }
 function findConfig(start2) {
-  let dir = resolve3(start2);
+  let dir = resolve4(start2);
   for (; ; ) {
-    const candidate2 = join3(dir, CONFIG_FILE);
-    if (existsSync3(candidate2)) return candidate2;
+    const candidate2 = join4(dir, CONFIG_FILE);
+    if (existsSync4(candidate2)) return candidate2;
     const parent = dirname3(dir);
     if (parent === dir) return null;
     dir = parent;
@@ -257,11 +257,11 @@ function stringList(path, key, value) {
   return value;
 }
 function readConfig(path) {
-  const absolute2 = resolve3(path);
+  const absolute2 = resolve4(path);
   const dir = dirname3(absolute2);
   let raw;
   try {
-    raw = parse2(readFileSync3(absolute2, "utf8"));
+    raw = parse2(readFileSync4(absolute2, "utf8"));
   } catch (error) {
     const reason = error instanceof Error ? error.message : "unreadable";
     throw new ConfigError(absolute2, reason.split("\n")[0] ?? reason);
@@ -279,10 +279,22 @@ function readConfig(path) {
     if (!CATALOG_KEYS.has(key)) {
       throw new ConfigError(absolute2, `unknown key [catalog] ${key}`);
     }
+    if (key === "builtin") {
+      if (typeof value !== "boolean")
+        throw new ConfigError(absolute2, "[catalog] builtin must be a boolean");
+      catalog[key] = value;
+      continue;
+    }
     const list2 = stringList(absolute2, key, value);
-    catalog[key] = key === "scopes" ? list2 : list2.map((p) => resolve3(dir, p));
+    catalog[key] = key === "scopes" ? list2 : list2.map((p) => resolve4(dir, p));
   }
-  return { path: absolute2, dir, catalog, raw, ...configured };
+  return {
+    path: absolute2,
+    dir,
+    catalog,
+    raw,
+    ...configured
+  };
 }
 var CONFIG_FILE, ConfigError, PATH_KEYS, CATALOG_KEYS;
 var init_config = __esm({
@@ -297,7 +309,11 @@ var init_config = __esm({
       }
     };
     PATH_KEYS = ["roots", "workspaces", "packages", "marketplaces"];
-    CATALOG_KEYS = /* @__PURE__ */ new Set([...PATH_KEYS, "scopes"]);
+    CATALOG_KEYS = /* @__PURE__ */ new Set([
+      ...PATH_KEYS,
+      "scopes",
+      "builtin"
+    ]);
   }
 });
 
@@ -448,17 +464,17 @@ import { randomUUID } from "crypto";
 import {
   closeSync,
   constants,
-  existsSync as existsSync5,
+  existsSync as existsSync7,
   fstatSync,
   mkdirSync as mkdirSync2,
   openSync,
-  readFileSync as readFileSync9,
+  readFileSync as readFileSync11,
   renameSync,
   rmSync,
   writeFileSync
 } from "fs";
 import { homedir } from "os";
-import { dirname as dirname8, join as join7, resolve as resolve6 } from "path";
+import { dirname as dirname9, join as join9, resolve as resolve7 } from "path";
 import { z as z12 } from "zod";
 function mailboxConfigFrom(project2, env = process.env) {
   if (project2.raw.mailbox === void 0) return void 0;
@@ -466,17 +482,17 @@ function mailboxConfigFrom(project2, env = process.env) {
   if (!parsed.success)
     throw new MailboxError("invalid_config", "Invalid [mailbox] configuration");
   const section = parsed.data;
-  const stateRoot = env.XDG_STATE_HOME ?? join7(homedir(), ".local/state");
-  const stateDir = section.state_dir ? resolve6(project2.dir, section.state_dir) : join7(stateRoot, "pmcp/projects", section.project_id);
+  const stateRoot = env.XDG_STATE_HOME ?? join9(homedir(), ".local/state");
+  const stateDir = section.state_dir ? resolve7(project2.dir, section.state_dir) : join9(stateRoot, "pmcp/projects", section.project_id);
   return {
     projectId: section.project_id,
     enabled: section.enabled,
-    databasePath: join7(stateDir, "mailbox.sqlite")
+    databasePath: join9(stateDir, "mailbox.sqlite")
   };
 }
 function initializeMailboxConfig(file2, stateDirectory2) {
-  const path = resolve6(file2);
-  const original = existsSync5(path) ? readFileSync9(path, "utf8") : void 0;
+  const path = resolve7(file2);
+  const original = existsSync7(path) ? readFileSync11(path, "utf8") : void 0;
   if (original !== void 0 && readConfig(path).raw.mailbox !== void 0) {
     throw new MailboxError("mailbox_exists", "Mailbox is already configured");
   }
@@ -491,14 +507,14 @@ function initializeMailboxConfig(file2, stateDirectory2) {
   const text3 = `${original ?? ""}
 ${lines2.join("\n")}
 `;
-  mkdirSync2(dirname8(path), { recursive: true });
+  mkdirSync2(dirname9(path), { recursive: true });
   if (original === void 0) {
     writeFileSync(path, text3, { flag: "wx", mode: 384 });
   } else {
     const temporary = `${path}.${randomUUID()}.tmp`;
     try {
       writeFileSync(temporary, text3, { flag: "wx", mode: 384 });
-      if (readFileSync9(path, "utf8") !== original) {
+      if (readFileSync11(path, "utf8") !== original) {
         throw new MailboxError(
           "config_conflict",
           "Configuration changed during initialization"
@@ -527,7 +543,7 @@ function readPrivateJson(file2) {
         "Credential file must belong to the current user"
       );
     }
-    return JSON.parse(readFileSync9(descriptor, "utf8"));
+    return JSON.parse(readFileSync11(descriptor, "utf8"));
   } finally {
     closeSync(descriptor);
   }
@@ -539,7 +555,7 @@ function readBinding(file2) {
   return bindingSchema.parse(readPrivateJson(file2));
 }
 function writePrivateJson(file2, value) {
-  mkdirSync2(dirname8(resolve6(file2)), { recursive: true, mode: 448 });
+  mkdirSync2(dirname9(resolve7(file2)), { recursive: true, mode: 448 });
   writeFileSync(file2, `${JSON.stringify(value, null, 2)}
 `, {
     flag: "wx",
@@ -547,7 +563,7 @@ function writePrivateJson(file2, value) {
   });
 }
 function writeBindingFile(file2, binding) {
-  if (existsSync5(file2)) {
+  if (existsSync7(file2)) {
     const previous = readBinding(file2);
     if (previous.projectId !== binding.projectId || previous.actorId !== binding.actorId) {
       throw new MailboxError(
@@ -725,7 +741,7 @@ UPDATE mailbox_actors SET authority_expires_at_ms = created_at_ms + 60000 WHERE
 
 // src/mailbox/sqlite.ts
 import { chmodSync, mkdirSync as mkdirSync3 } from "fs";
-import { dirname as dirname9 } from "path";
+import { dirname as dirname10 } from "path";
 import { setTimeout as delay } from "timers/promises";
 function storageError(error) {
   const detail = error instanceof Error ? error.message : "";
@@ -744,7 +760,7 @@ async function openDatabase2(file2) {
   let native2;
   try {
     if (file2 !== ":memory:")
-      mkdirSync3(dirname9(file2), { recursive: true, mode: 448 });
+      mkdirSync3(dirname10(file2), { recursive: true, mode: 448 });
     native2 = (await openSqlite(file2)).db;
     if (file2 !== ":memory:") chmodSync(file2, 384);
   } catch (error) {
@@ -812,7 +828,7 @@ import {
   chmodSync as chmodSync2,
   copyFileSync,
   constants as constants2,
-  existsSync as existsSync6,
+  existsSync as existsSync8,
   unlinkSync
 } from "fs";
 function hash(secret2) {
@@ -838,8 +854,8 @@ async function restoreBackup(source2, config) {
       probe.close();
     }
     store = await MailboxStore.open(config);
-    const integrity = store.database.get("PRAGMA integrity_check");
-    if (integrity?.integrity_check !== "ok" || store.database.all("PRAGMA foreign_key_check").length > 0) {
+    const integrity2 = store.database.get("PRAGMA integrity_check");
+    if (integrity2?.integrity_check !== "ok" || store.database.all("PRAGMA foreign_key_check").length > 0) {
       throw new MailboxError(
         "storage_corrupt",
         "Restored backup failed integrity checks"
@@ -1256,7 +1272,7 @@ var init_store = __esm({
             "Mailbox storage is closed"
           );
         }
-        if (existsSync6(destination)) {
+        if (existsSync8(destination)) {
           throw new MailboxError(
             "destination_exists",
             "Backup destination already exists"
@@ -1580,7 +1596,7 @@ var init_service = __esm({
 });
 
 // src/harness/validation.ts
-function object7(value) {
+function object8(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("invalid_object");
   }
@@ -1665,11 +1681,11 @@ var init_layout = __esm({
 });
 
 // src/harness/adapters/process/artifact.ts
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { fileURLToPath as fileURLToPath3 } from "url";
 function artifact(name) {
   if (import.meta.url.endsWith(".ts"))
-    return fileURLToPath2(new URL(sources[name], import.meta.url));
-  return fileURLToPath2(new URL(`./harness-${name}.js`, import.meta.url));
+    return fileURLToPath3(new URL(sources[name], import.meta.url));
+  return fileURLToPath3(new URL(`./harness-${name}.js`, import.meta.url));
 }
 var sources;
 var init_artifact = __esm({
@@ -1700,9 +1716,9 @@ var init_registry = __esm({
 });
 
 // src/harness/runtimes/egress-policy.ts
-import { isAbsolute as isAbsolute7, posix as posix3 } from "path";
+import { isAbsolute as isAbsolute8, posix as posix3 } from "path";
 function egressPolicy(value) {
-  const policy = object7(value);
+  const policy = object8(value);
   const hosts = strings2(policy.hosts, "egress_hosts").map(
     (host) => host.toLowerCase()
   );
@@ -1716,7 +1732,7 @@ function egressPolicy(value) {
   }
   if (policy.bridgeExecutable === void 0) return { hosts };
   const executable = text(policy.bridgeExecutable, "egress_bridge_executable");
-  if (!isAbsolute7(executable) || posix3.normalize(executable) !== executable || /[\r\n\x1b]/.test(executable))
+  if (!isAbsolute8(executable) || posix3.normalize(executable) !== executable || /[\r\n\x1b]/.test(executable))
     throw new Error("invalid_egress_bridge_executable");
   return { hosts, bridgeExecutable: executable };
 }
@@ -1728,7 +1744,7 @@ var init_egress_policy = __esm({
 });
 
 // src/harness/runtimes/private-profiles.ts
-import { isAbsolute as isAbsolute8, posix as posix4 } from "path";
+import { isAbsolute as isAbsolute9, posix as posix4 } from "path";
 function profileName(value) {
   const name = text(value, "private_profile");
   if (!/^[a-z][a-z0-9-]{0,31}$/.test(name))
@@ -1736,13 +1752,13 @@ function profileName(value) {
   return name;
 }
 function privateProfiles(value) {
-  const entries = Object.entries(object7(value));
+  const entries = Object.entries(object8(value));
   if (!entries.length || entries.length > 16)
     throw new Error("invalid_private_profile_grants");
   const result = {};
   for (const [name, entry2] of entries) {
     profileName(name);
-    const grant = object7(entry2);
+    const grant = object8(entry2);
     const runtime2 = text(grant.runtime, "private_profile_runtime");
     const directory = absolute(grant.directory, "private_profile_directory");
     const lockExecutable = absolute(
@@ -1765,7 +1781,7 @@ function privateProfiles(value) {
 }
 function absolute(value, field) {
   const path = text(value, field);
-  if (!isAbsolute8(path) || posix4.normalize(path) !== path || /[\r\n\x1b]/.test(path))
+  if (!isAbsolute9(path) || posix4.normalize(path) !== path || /[\r\n\x1b]/.test(path))
     throw new Error("invalid_private_profile_path");
   return path;
 }
@@ -1784,9 +1800,9 @@ var init_private_profiles = __esm({
 });
 
 // src/harness/runtimes/docker-policy.ts
-import { isAbsolute as isAbsolute9, posix as posix5 } from "path";
+import { isAbsolute as isAbsolute10, posix as posix5 } from "path";
 function dockerPolicy(value) {
-  const policy = object7(value);
+  const policy = object8(value);
   if (policy.schemaVersion !== 1)
     throw new Error("invalid_docker_policy_version");
   if (!/^sha256:[a-f0-9]{64}$/.test(text(policy.image, "docker_image")))
@@ -1795,7 +1811,7 @@ function dockerPolicy(value) {
     throw new Error("docker_network_not_qualified");
   if (policy.workspaceAccess !== "read-only" && policy.workspaceAccess !== "read-write")
     throw new Error("invalid_docker_workspace_access");
-  const commands = object7(policy.commands);
+  const commands = object8(policy.commands);
   const entries = Object.entries(commands);
   if (!entries.length || entries.length > 5)
     throw new Error("invalid_docker_runtime_commands");
@@ -1805,7 +1821,7 @@ function dockerPolicy(value) {
       throw new Error("unsupported_docker_runtime");
     const command2 = strings2(value2, "docker_runtime_command");
     const executable = command2[0];
-    if (!isAbsolute9(executable) || posix5.normalize(executable) !== executable || command2.some((argument) => /[\r\n\x1b]/.test(argument)))
+    if (!isAbsolute10(executable) || posix5.normalize(executable) !== executable || command2.some((argument) => /[\r\n\x1b]/.test(argument)))
       throw new Error("invalid_docker_runtime_command");
     parsed[runtime2] = command2;
   }
@@ -1836,15 +1852,15 @@ function member(value, allowed3) {
 function records(value) {
   if (!Array.isArray(value) || value.length > 4096)
     throw new Error("invalid_state_collection");
-  return value.map(object7);
+  return value.map(object8);
 }
 function unique(values) {
   if (new Set(values).size !== values.length)
     throw new Error("duplicate_state_identity");
 }
 function validateState(value) {
-  const state = object7(value);
-  const group = object7(state.group);
+  const state = object8(value);
+  const group = object8(state.group);
   member(group.schemaVersion, [1]);
   for (const field of ["owner", "id", "generation"]) id(group[field], field);
   text(group.projectRoot, "project_root");
@@ -1911,12 +1927,12 @@ import {
   fstatSync as fstatSync2,
   fsyncSync,
   openSync as openSync3,
-  readFileSync as readFileSync29,
-  realpathSync as realpathSync3,
+  readFileSync as readFileSync33,
+  realpathSync as realpathSync4,
   renameSync as renameSync3,
   writeFileSync as writeFileSync9
 } from "fs";
-import { dirname as dirname18, join as join23 } from "path";
+import { dirname as dirname19, join as join27 } from "path";
 function privateJson(path, value) {
   const temporary = `${path}.${randomUUID4()}.new`;
   const descriptor = openSync3(temporary, "wx", 384);
@@ -1928,7 +1944,7 @@ function privateJson(path, value) {
     closeSync3(descriptor);
   }
   renameSync3(temporary, path);
-  const directory = openSync3(dirname18(path), "r");
+  const directory = openSync3(dirname19(path), "r");
   try {
     fsyncSync(directory);
   } finally {
@@ -1942,7 +1958,7 @@ function readPrivateJson2(path) {
     if (!stat.isFile() || (stat.mode & 63) !== 0 || stat.size > 2097152)
       throw new Error("unsafe_state_file");
     if (stat.uid !== process.getuid?.()) throw new Error("foreign_state_file");
-    return JSON.parse(readFileSync29(descriptor, "utf8"));
+    return JSON.parse(readFileSync33(descriptor, "utf8"));
   } finally {
     closeSync3(descriptor);
   }
@@ -1957,10 +1973,10 @@ var init_store2 = __esm({
       path;
       state;
       constructor(path) {
-        this.path = realpathSync3(path);
+        this.path = realpathSync4(path);
         this.state = validateState(readPrivateJson2(path));
-        const metadata2 = object7(
-          readPrivateJson2(join23(dirname18(this.path), "harness.json"))
+        const metadata2 = object8(
+          readPrivateJson2(join27(dirname19(this.path), "harness.json"))
         );
         if (this.state.group.schemaVersion !== 1 || this.state.group.owner !== metadata2.owner) {
           throw new Error("foreign_group");
@@ -1982,12 +1998,12 @@ var init_store2 = __esm({
 // src/harness/adapters/process/serialized.ts
 import { spawnSync as spawnSync4 } from "child_process";
 import { randomUUID as randomUUID5 } from "crypto";
-import { existsSync as existsSync19, unlinkSync as unlinkSync2 } from "fs";
-import { dirname as dirname19, join as join24 } from "path";
+import { existsSync as existsSync22, unlinkSync as unlinkSync2 } from "fs";
+import { dirname as dirname20, join as join28 } from "path";
 function serialized(operation) {
   const store = new GroupStore(text(operation.groupFile, "group_file"));
-  const directory = dirname19(store.path);
-  const operationFile = join24(directory, `operation-${randomUUID5()}.json`);
+  const directory = dirname20(store.path);
+  const operationFile = join28(directory, `operation-${randomUUID5()}.json`);
   privateJson(operationFile, operation);
   const worker = artifact("worker");
   try {
@@ -1999,7 +2015,7 @@ function serialized(operation) {
         "--no-fork",
         "--conflict-exit-code",
         "73",
-        join24(directory, "group-control.lock"),
+        join28(directory, "group-control.lock"),
         process.execPath,
         worker,
         operationFile
@@ -2015,7 +2031,7 @@ function serialized(operation) {
     if (!result.stdout.trim()) throw new Error("worker_receipt_missing");
     return JSON.parse(result.stdout);
   } finally {
-    if (existsSync19(operationFile)) unlinkSync2(operationFile);
+    if (existsSync22(operationFile)) unlinkSync2(operationFile);
   }
 }
 var init_serialized = __esm({
@@ -2050,9 +2066,9 @@ async function attachNative(spec, renew) {
   }, 2e4) : void 0;
   let exitCode;
   try {
-    exitCode = await new Promise((resolve19, reject) => {
+    exitCode = await new Promise((resolve22, reject) => {
       client.once("error", reject);
-      client.once("exit", (code) => resolve19(code ?? 1));
+      client.once("exit", (code) => resolve22(code ?? 1));
     });
   } finally {
     if (timer) clearInterval(timer);
@@ -2095,11 +2111,11 @@ var init_command = __esm({
 });
 
 // src/harness/adapters/process/identity.ts
-import { readFileSync as readFileSync30 } from "fs";
+import { readFileSync as readFileSync34 } from "fs";
 function processIdentity(pid) {
   if (!Number.isSafeInteger(pid) || pid < 1)
     throw new Error("invalid_process_id");
-  const stat = readFileSync30(`/proc/${pid}/stat`, "utf8");
+  const stat = readFileSync34(`/proc/${pid}/stat`, "utf8");
   const fields = stat.slice(stat.lastIndexOf(")") + 2).split(" ");
   if (!/^\d+$/.test(fields[19] ?? ""))
     throw new Error("process_identity_unknown");
@@ -2139,9 +2155,9 @@ var init_identity2 = __esm({
 });
 
 // src/harness/adapters/docker/claims.ts
-import { createHash as createHash14 } from "crypto";
+import { createHash as createHash15 } from "crypto";
 function resourceClaim(value, owner) {
-  const record = object7(value);
+  const record = object8(value);
   if (record.kind !== "docker" || record.owner !== owner)
     throw new Error("foreign_container_resource");
   if (!/^[a-f0-9]{64}$/.test(text(record.id, "container_id")))
@@ -2170,23 +2186,23 @@ function resourceClaim(value, owner) {
   return record;
 }
 function assertResourceOwner(resource, actual) {
-  const config = object7(actual.Config);
-  const labels = object7(config.Labels);
+  const config = object8(actual.Config);
+  const labels = object8(config.Labels);
   if (actual.Id !== resource.id || actual.Image !== resource.image || labels[containerLabels.owner] !== resource.owner || labels[containerLabels.nonce] !== resource.nonce || labels[containerLabels.role] !== resource.role)
     throw new Error("foreign_container_identity");
 }
 function configurationDigest(actual) {
-  const host = object7(actual.HostConfig);
+  const host = object8(actual.HostConfig);
   if (host.OomKillDisable !== false && host.OomKillDisable !== null)
     throw new Error("container_oom_protection_disabled");
   if (!Array.isArray(actual.Mounts))
     throw new Error("invalid_container_mounts");
-  const mounts = actual.Mounts.map(object7).sort(
+  const mounts = actual.Mounts.map(object8).sort(
     (left, right) => text(left.Destination, "mount_destination").localeCompare(
       text(right.Destination, "mount_destination")
     )
   );
-  return createHash14("sha256").update(
+  return createHash15("sha256").update(
     JSON.stringify(
       canonicalValue({
         config: actual.Config,
@@ -2217,7 +2233,7 @@ function inspectResource(resource, enforceConfiguration = true) {
   const result = JSON.parse(command("docker", ["inspect", resource.id]));
   if (!Array.isArray(result) || result.length !== 1)
     throw new Error("invalid_container_inspection");
-  const actual = object7(result[0]);
+  const actual = object8(result[0]);
   assertResourceOwner(resource, actual);
   if (enforceConfiguration && configurationDigest(actual) !== resource.configurationDigest)
     throw new Error("container_configuration_changed");
@@ -2231,7 +2247,7 @@ function resourceAbsent(error, id2) {
   );
 }
 function assertResourceFresh(resource) {
-  const state = object7(inspectResource(resource).State);
+  const state = object8(inspectResource(resource).State);
   if (state.Status !== "created" || state.Running !== false || state.Pid !== 0)
     throw new Error("container_requires_fresh_creation");
 }
@@ -2243,7 +2259,7 @@ function resourceRunning(resource) {
     if (resourceAbsent(error, resource.id)) return false;
     throw error;
   }
-  const state = object7(actual.State);
+  const state = object8(actual.State);
   if (typeof state.Running !== "boolean")
     throw new Error("unknown_container_lifecycle");
   return state.Running;
@@ -2331,17 +2347,17 @@ var init_connection = __esm({
 // src/harness/adapters/tmux/records.ts
 import { randomUUID as randomUUID6 } from "crypto";
 import {
-  lstatSync as lstatSync4,
+  lstatSync as lstatSync5,
   mkdirSync as mkdirSync9,
-  readdirSync as readdirSync9,
-  realpathSync as realpathSync4,
+  readdirSync as readdirSync10,
+  realpathSync as realpathSync5,
   writeFileSync as writeFileSync10
 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join25 } from "path";
+import { join as join29 } from "path";
 function stateDirectory() {
-  return join25(
-    process.env.XDG_STATE_HOME ?? join25(homedir7(), ".local/state"),
+  return join29(
+    process.env.XDG_STATE_HOME ?? join29(homedir7(), ".local/state"),
     "pmcp/harness"
   );
 }
@@ -2368,17 +2384,17 @@ var init_records = __esm({
       configPath;
       owner;
       constructor(directory) {
-        const stat = lstatSync4(directory);
+        const stat = lstatSync5(directory);
         if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 63) !== 0)
           throw new Error("unsafe_group_directory");
-        this.directory = realpathSync4(directory);
-        this.socket = join25(this.directory, "s");
+        this.directory = realpathSync5(directory);
+        this.socket = join29(this.directory, "s");
         if (Buffer.byteLength(this.socket) > 100)
           throw new Error("socket_path_too_long");
-        this.metadataPath = join25(this.directory, "harness.json");
-        this.configPath = join25(this.directory, "tmux.conf");
+        this.metadataPath = join29(this.directory, "harness.json");
+        this.configPath = join29(this.directory, "tmux.conf");
         this.owner = text(
-          object7(readPrivateJson2(this.metadataPath)).owner,
+          object8(readPrivateJson2(this.metadataPath)).owner,
           "owner"
         );
         runtimeUnit(this.owner);
@@ -2386,17 +2402,17 @@ var init_records = __esm({
       static create() {
         const root = stateDirectory();
         mkdirSync9(root, { recursive: true, mode: 448 });
-        const directory = join25(root, randomUUID6().slice(0, 16));
-        if (Buffer.byteLength(join25(directory, "s")) > 100)
+        const directory = join29(root, randomUUID6().slice(0, 16));
+        if (Buffer.byteLength(join29(directory, "s")) > 100)
           throw new Error("socket_path_too_long");
         mkdirSync9(directory, { mode: 448 });
-        mkdirSync9(join25(directory, "sessions"), { mode: 448 });
-        privateJson(join25(directory, "harness.json"), {
+        mkdirSync9(join29(directory, "sessions"), { mode: 448 });
+        privateJson(join29(directory, "harness.json"), {
           owner: randomUUID6(),
           createdAt: (/* @__PURE__ */ new Date()).toISOString()
         });
         writeFileSync10(
-          join25(directory, "tmux.conf"),
+          join29(directory, "tmux.conf"),
           [
             "set -g remain-on-exit on",
             "set -g history-limit 2000",
@@ -2412,10 +2428,10 @@ var init_records = __esm({
       }
       path(id2) {
         runtimeUnit(id2);
-        return join25(this.directory, "sessions", `${id2}.json`);
+        return join29(this.directory, "sessions", `${id2}.json`);
       }
       read(id2) {
-        const record = object7(readPrivateJson2(this.path(id2)));
+        const record = object8(readPrivateJson2(this.path(id2)));
         if (record.id !== id2 || record.owner !== this.owner || record.socket !== this.socket || record.unit !== runtimeUnit(id2))
           throw new Error("foreign_backend_record");
         for (const [field, pattern] of [
@@ -2434,7 +2450,7 @@ var init_records = __esm({
         return record;
       }
       all() {
-        return readdirSync9(join25(this.directory, "sessions")).filter((name) => name.endsWith(".json")).map((name) => this.read(name.slice(0, -5)));
+        return readdirSync10(join29(this.directory, "sessions")).filter((name) => name.endsWith(".json")).map((name) => this.read(name.slice(0, -5)));
       }
       save(record) {
         privateJson(this.path(record.id), record);
@@ -2515,17 +2531,17 @@ var init_launch_identity = __esm({
 });
 
 // src/harness/launch/journal.ts
-import { createHash as createHash15 } from "crypto";
-import { existsSync as existsSync20, readdirSync as readdirSync10 } from "fs";
-import { join as join26 } from "path";
+import { createHash as createHash16 } from "crypto";
+import { existsSync as existsSync23, readdirSync as readdirSync11 } from "fs";
+import { join as join30 } from "path";
 function launchJournals(records2) {
-  return readdirSync10(records2.directory).filter((name) => name.endsWith(".intent.json")).map((name) => new LaunchJournal(records2, name.slice(0, -12)));
+  return readdirSync11(records2.directory).filter((name) => name.endsWith(".intent.json")).map((name) => new LaunchJournal(records2, name.slice(0, -12)));
 }
 function pendingLaunches(records2) {
   return launchJournals(records2).filter((journal) => {
     const aborted = journal.abortRecord();
     if (aborted) return aborted.state !== "stopped";
-    if (!existsSync20(journal.path("committed"))) return true;
+    if (!existsSync23(journal.path("committed"))) return true;
     journal.assertCommitted();
     return false;
   });
@@ -2552,10 +2568,10 @@ var init_journal = __esm({
       path(kind2) {
         if (!["intent", "proof", "grant", "committed", "aborted"].includes(kind2))
           throw new Error("invalid_launch_artifact");
-        return join26(this.records.directory, `${this.id}.${kind2}.json`);
+        return join30(this.records.directory, `${this.id}.${kind2}.json`);
       }
       intent() {
-        const value = object7(readPrivateJson2(this.path("intent")));
+        const value = object8(readPrivateJson2(this.path("intent")));
         if (value.id !== this.id || value.owner !== this.records.owner || value.socket !== this.records.socket || value.unit !== runtimeUnit(this.id) || value.slice !== budgetSlice(this.records.owner))
           throw new Error("foreign_launch_intent");
         if (!/^\d+:\d+$/.test(text(value.controllerIdentity, "controller")))
@@ -2572,28 +2588,28 @@ var init_journal = __esm({
         if (value.resource !== void 0)
           resourceClaim(value.resource, this.records.owner);
         if (value.dockerCreation !== void 0) {
-          const creation = object7(value.dockerCreation);
-          const config = object7(creation.configuration);
-          const labels = object7(config.Labels);
+          const creation = object8(value.dockerCreation);
+          const config = object8(creation.configuration);
+          const labels = object8(config.Labels);
           if (creation.egress !== void 0) egressPolicy(creation.egress);
           const bridge = creation.egress === void 0 ? void 0 : egressPolicy(creation.egress).bridgeExecutable;
           if (bridge && !/^[a-f0-9]{64}$/.test(String(creation.bridgeSha256)))
             throw new Error("invalid_docker_bridge_digest");
           if (!bridge && creation.bridgeSha256 !== void 0)
             throw new Error("ungranted_docker_bridge_digest");
-          const policy = new GroupStore(join26(this.records.directory, "group.json")).state.group.dockerPolicy;
+          const policy = new GroupStore(join30(this.records.directory, "group.json")).state.group.dockerPolicy;
           const profile = selectedProfile(
             policy,
             creation.privateProfile,
             text(value.runtime, "runtime")
           );
-          const expectedState = profile?.directory ?? join26(
+          const expectedState = profile?.directory ?? join30(
             this.records.directory,
             "containers",
             text(value.nonce, "nonce"),
             "profile"
           );
-          if (value.resource !== void 0 && object7(value.resource).privateProfile !== creation.privateProfile)
+          if (value.resource !== void 0 && object8(value.resource).privateProfile !== creation.privateProfile)
             throw new Error("launch_private_profile_mismatch");
           if (creation.name !== containerName(this.records.owner, this.id) || creation.nonce !== value.nonce || creation.state !== expectedState || labels[containerLabels.owner] !== this.records.owner || labels[containerLabels.role] !== value.role || labels[containerLabels.nonce] !== value.nonce)
             throw new Error("foreign_container_creation");
@@ -2602,8 +2618,8 @@ var init_journal = __esm({
       }
       proof() {
         const intent = this.intent();
-        const value = object7(readPrivateJson2(this.path("proof")));
-        const session = object7(value.session);
+        const value = object8(readPrivateJson2(this.path("proof")));
+        const session = object8(value.session);
         if (value.nonce !== intent.nonce || session.id !== intent.id || session.owner !== intent.owner || session.socket !== intent.socket || session.unit !== intent.unit || session.cwd !== intent.cwd || session.memoryMb !== intent.memoryMb || session.runtime !== intent.runtime || session.createdAt !== intent.createdAt || JSON.stringify(session.resource) !== JSON.stringify(intent.resource))
           throw new Error("foreign_launch_proof");
         for (const [field, pattern] of [
@@ -2628,12 +2644,12 @@ var init_journal = __esm({
           groupId: intent.groupId,
           generation: intent.generation,
           nonce: intent.nonce,
-          proofDigest: createHash15("sha256").update(JSON.stringify(this.proof())).digest("hex")
+          proofDigest: createHash16("sha256").update(JSON.stringify(this.proof())).digest("hex")
         };
       }
       assertRegistered() {
         const intent = this.intent();
-        const group = new GroupStore(join26(this.records.directory, "group.json")).state.group;
+        const group = new GroupStore(join30(this.records.directory, "group.json")).state.group;
         if (group.id !== intent.groupId || group.generation !== intent.generation)
           throw new Error("launch_group_generation_mismatch");
         if (intent.dockerCreation && JSON.stringify(intent.dockerCreation.egress) !== JSON.stringify(group.dockerPolicy?.egress))
@@ -2649,13 +2665,13 @@ var init_journal = __esm({
           throw new Error("launch_record_mismatch");
       }
       authorize() {
-        if (existsSync20(this.path("aborted"))) throw new Error("launch_was_aborted");
+        if (existsSync23(this.path("aborted"))) throw new Error("launch_was_aborted");
         this.assertRegistered();
         privateJson(this.path("grant"), this.grant());
       }
       assertGrant() {
-        if (existsSync20(this.path("aborted"))) throw new Error("launch_was_aborted");
-        const grant = object7(readPrivateJson2(this.path("grant")));
+        if (existsSync23(this.path("aborted"))) throw new Error("launch_was_aborted");
+        const grant = object8(readPrivateJson2(this.path("grant")));
         if (JSON.stringify(grant) !== JSON.stringify(this.grant()))
           throw new Error("launch_grant_mismatch");
       }
@@ -2666,13 +2682,13 @@ var init_journal = __esm({
       }
       assertCommitted() {
         this.assertGrant();
-        const committed = object7(readPrivateJson2(this.path("committed")));
+        const committed = object8(readPrivateJson2(this.path("committed")));
         if (JSON.stringify(committed) !== JSON.stringify(this.grant()))
           throw new Error("launch_commit_mismatch");
       }
       abortRecord() {
-        if (!existsSync20(this.path("aborted"))) return;
-        const value = object7(readPrivateJson2(this.path("aborted")));
+        if (!existsSync23(this.path("aborted"))) return;
+        const value = object8(readPrivateJson2(this.path("aborted")));
         if (value.id !== this.id || value.owner !== this.records.owner || !["stopping", "stopped"].includes(String(value.state)))
           throw new Error("foreign_launch_abort");
         return value;
@@ -2690,10 +2706,10 @@ function stopResource(resource) {
     if (resourceAbsent(error, resource.id)) return;
     throw error;
   }
-  const state = object7(actual.State);
+  const state = object8(actual.State);
   if (state.Running === true)
     command("docker", ["stop", "--timeout", "2", resource.id]);
-  if (object7(inspectResource(resource, false).State).Running !== false)
+  if (object8(inspectResource(resource, false).State).Running !== false)
     throw new Error("container_stop_unconfirmed");
   if (resource.managed) {
     command("docker", ["rm", resource.id]);
@@ -2720,28 +2736,28 @@ import { homedir as homedir8 } from "os";
 import {
   closeSync as closeSync4,
   constants as constants4,
-  existsSync as existsSync21,
+  existsSync as existsSync24,
   fstatSync as fstatSync3,
-  lstatSync as lstatSync5,
+  lstatSync as lstatSync6,
   openSync as openSync4,
-  realpathSync as realpathSync5,
+  realpathSync as realpathSync6,
   statfsSync
 } from "fs";
-import { join as join27, relative as relative10 } from "path";
+import { join as join31, relative as relative11 } from "path";
 function overlap(left, right) {
-  const scope = relative10(left, right);
+  const scope = relative11(left, right);
   return scope === "" || scope !== ".." && !scope.startsWith("../");
 }
 function profileIdentity(directory, projectRoot) {
-  if (directory === "/" || directory === realpathSync5(homedir8()) || overlap(directory, projectRoot) || overlap(projectRoot, directory) || realpathSync5(directory) !== directory)
+  if (directory === "/" || directory === realpathSync6(homedir8()) || overlap(directory, projectRoot) || overlap(projectRoot, directory) || realpathSync6(directory) !== directory)
     throw new Error("private_profile_scope_not_admitted");
-  const stat = lstatSync5(directory);
+  const stat = lstatSync6(directory);
   if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 511) !== 448)
     throw new Error("unsafe_private_profile_directory");
   if ([26985, 4283649346, 4266872130].includes(statfsSync(directory).type))
     throw new Error("remote_private_profile_not_admitted");
   const lock = openSync4(
-    join27(directory, privateProfileLock),
+    join31(directory, privateProfileLock),
     constants4.O_RDONLY | constants4.O_NOFOLLOW
   );
   try {
@@ -2754,14 +2770,14 @@ function profileIdentity(directory, projectRoot) {
   }
 }
 function captureProfile(grant, projectRoot) {
-  const directory = realpathSync5(grant.directory);
-  if (directory !== grant.directory || overlap(directory, projectRoot) || overlap(projectRoot, directory) || directory === "/" || directory === realpathSync5(homedir8()))
+  const directory = realpathSync6(grant.directory);
+  if (directory !== grant.directory || overlap(directory, projectRoot) || overlap(projectRoot, directory) || directory === "/" || directory === realpathSync6(homedir8()))
     throw new Error("private_profile_scope_not_admitted");
-  const stat = lstatSync5(directory);
+  const stat = lstatSync6(directory);
   if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 511) !== 448)
     throw new Error("unsafe_private_profile_directory");
-  const lock = join27(directory, privateProfileLock);
-  if (!existsSync21(lock)) closeSync4(openSync4(lock, "wx", 384));
+  const lock = join31(directory, privateProfileLock);
+  if (!existsSync24(lock)) closeSync4(openSync4(lock, "wx", 384));
   const identity = profileIdentity(directory, projectRoot);
   if (grant.identity && grant.identity !== identity)
     throw new Error("private_profile_identity_changed");
@@ -2779,7 +2795,7 @@ function assertProfileAvailable(grant, projectRoot) {
       "--nonblock",
       "--conflict-exit-code",
       "73",
-      join27(grant.directory, privateProfileLock),
+      join31(grant.directory, privateProfileLock),
       "true"
     ]);
   } catch (error) {
@@ -2799,8 +2815,8 @@ var init_private_profile = __esm({
 
 // src/harness/adapters/docker/profile.ts
 import { homedir as homedir9 } from "os";
-import { lstatSync as lstatSync6, realpathSync as realpathSync6 } from "fs";
-import { relative as relative11 } from "path";
+import { lstatSync as lstatSync7, realpathSync as realpathSync7 } from "fs";
+import { relative as relative12 } from "path";
 function assertLocalDocker() {
   if (process.env.DOCKER_HOST)
     throw new Error("explicit_docker_host_not_admitted");
@@ -2816,13 +2832,13 @@ function assertLocalDocker() {
     throw new Error("remote_docker_context_not_admitted");
 }
 function loadDockerPolicy(path, projectRoot, runtimes) {
-  if (projectRoot === "/" || projectRoot === realpathSync6(homedir9()))
+  if (projectRoot === "/" || projectRoot === realpathSync7(homedir9()))
     throw new Error("docker_project_root_too_broad");
   const inputPath = text(path, "docker_policy_file");
-  if (lstatSync6(inputPath).isSymbolicLink())
+  if (lstatSync7(inputPath).isSymbolicLink())
     throw new Error("symlink_docker_policy_not_admitted");
-  const source2 = realpathSync6(inputPath);
-  const scope = relative11(projectRoot, source2);
+  const source2 = realpathSync7(inputPath);
+  const scope = relative12(projectRoot, source2);
   if (scope === ".." || scope.startsWith("../"))
     throw new Error("docker_policy_outside_project");
   const policy = dockerPolicy(readPrivateJson2(source2));
@@ -2855,21 +2871,21 @@ var init_profile = __esm({
 });
 
 // src/harness/adapters/docker/mounts.ts
-import { lstatSync as lstatSync7, realpathSync as realpathSync7 } from "fs";
-import { join as join28 } from "path";
+import { lstatSync as lstatSync8, realpathSync as realpathSync8 } from "fs";
+import { join as join32 } from "path";
 function assertContainerMounts(actual, statePath, projectRoot, directory, nonce, policy, privateProfile, runtime2) {
   const state = text(statePath, "container_state_directory");
   const profile = selectedProfile(policy, privateProfile, runtime2 ?? "");
   if (profile) assertProfileIdentity(profile, projectRoot);
-  const expected = profile?.directory ?? join28(directory, "containers", nonce, "profile");
-  if (state !== expected || realpathSync7(state) !== expected)
+  const expected = profile?.directory ?? join32(directory, "containers", nonce, "profile");
+  if (state !== expected || realpathSync8(state) !== expected)
     throw new Error("foreign_container_state_directory");
-  const stat = lstatSync7(state);
+  const stat = lstatSync8(state);
   if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 63) !== 0)
     throw new Error("unsafe_container_state_directory");
   if (!Array.isArray(actual.Mounts) || actual.Mounts.length !== 2)
     throw new Error("ungranted_container_mount");
-  if (new Set(actual.Mounts.map((value) => object7(value).Destination)).size !== 2)
+  if (new Set(actual.Mounts.map((value) => object8(value).Destination)).size !== 2)
     throw new Error("ungranted_container_mount");
   const expectedMounts = [
     {
@@ -2880,15 +2896,15 @@ function assertContainerMounts(actual, statePath, projectRoot, directory, nonce,
     { Source: state, Destination: "/state", RW: true }
   ];
   for (const value of actual.Mounts) {
-    const mount = object7(value);
+    const mount = object8(value);
     if (mount.Type !== "bind" || mount.Propagation !== "rprivate" || !expectedMounts.some(
       (expected2) => mount.Source === expected2.Source && mount.Destination === expected2.Destination && mount.RW === expected2.RW
     ))
       throw new Error("ungranted_container_mount");
   }
-  const host = object7(actual.HostConfig);
+  const host = object8(actual.HostConfig);
   if (!Array.isArray(host.Mounts) || host.Mounts.length !== 2 || host.Mounts.some(
-    (value) => object7(object7(value).BindOptions).NonRecursive !== true
+    (value) => object8(object8(value).BindOptions).NonRecursive !== true
   ))
     throw new Error("recursive_container_mount_not_admitted");
 }
@@ -2905,9 +2921,9 @@ var init_mounts = __esm({
 function assertContainerIsolation(host, network) {
   if (host.ReadonlyRootfs !== true || host.Privileged !== false || host.NetworkMode !== network || host.CgroupnsMode !== "private")
     throw new Error("invalid_container_isolation_policy");
-  if (JSON.stringify(host.CapDrop) !== '["ALL"]' || JSON.stringify(host.SecurityOpt) !== '["no-new-privileges"]' || object7(host.RestartPolicy).Name !== "no")
+  if (JSON.stringify(host.CapDrop) !== '["ALL"]' || JSON.stringify(host.SecurityOpt) !== '["no-new-privileges"]' || object8(host.RestartPolicy).Name !== "no")
     throw new Error("invalid_container_execution_policy");
-  if (host.CapAdd !== null || host.PidMode !== "" || host.UTSMode !== "" || host.UsernsMode !== "" || host.CgroupParent !== "" || host.IpcMode !== "private" || hasDevices(host.Devices) || hasDevices(host.DeviceRequests) || host.AutoRemove !== false || host.VolumesFrom !== null || host.GroupAdd !== null || host.Binds !== null || Object.keys(object7(host.PortBindings)).length)
+  if (host.CapAdd !== null || host.PidMode !== "" || host.UTSMode !== "" || host.UsernsMode !== "" || host.CgroupParent !== "" || host.IpcMode !== "private" || hasDevices(host.Devices) || hasDevices(host.DeviceRequests) || host.AutoRemove !== false || host.VolumesFrom !== null || host.GroupAdd !== null || host.Binds !== null || Object.keys(object8(host.PortBindings)).length)
     throw new Error("ungranted_container_host_authority");
 }
 function hasDevices(value) {
@@ -2956,21 +2972,21 @@ var init_entrypoint = __esm({
 });
 
 // src/harness/adapters/docker/admission.ts
-import { lstatSync as lstatSync8, realpathSync as realpathSync8 } from "fs";
-import { join as join29, relative as relative12 } from "path";
+import { lstatSync as lstatSync9, realpathSync as realpathSync9 } from "fs";
+import { join as join33, relative as relative13 } from "path";
 function admitResource(path, group, role, directory, memoryMb, runtime2) {
   if (group.profile !== "docker" || !group.dockerPolicy)
     throw new Error("container_requires_docker_profile");
   const { projectRoot } = group;
   assertLocalDocker();
   const inputPath = text(path, "container_file");
-  if (lstatSync8(inputPath).isSymbolicLink())
+  if (lstatSync9(inputPath).isSymbolicLink())
     throw new Error("symlink_container_file_not_admitted");
-  const source2 = realpathSync8(inputPath);
-  const scope = relative12(projectRoot, source2);
+  const source2 = realpathSync9(inputPath);
+  const scope = relative13(projectRoot, source2);
   if (scope === ".." || scope.startsWith("../"))
     throw new Error("container_file_outside_project");
-  const claim = object7(readPrivateJson2(source2));
+  const claim = object8(readPrivateJson2(source2));
   if (claim.privateProfile !== void 0)
     throw new Error("private_profile_requires_cli_owned_creation");
   return admitClaim(claim, group, role, directory, memoryMb, runtime2);
@@ -2981,7 +2997,7 @@ function admitClaim(value, group, role, directory, memoryMb, runtime2, cwd = gro
   assertLocalDocker();
   const policy = group.dockerPolicy;
   const { owner, projectRoot } = group;
-  const claim = object7(value);
+  const claim = object8(value);
   if (claim.owner !== owner || claim.role !== role || claim.runtime !== runtime2)
     throw new Error("foreign_container_resource");
   const resource = {
@@ -3001,9 +3017,9 @@ function admitClaim(value, group, role, directory, memoryMb, runtime2, cwd = gro
   ))
     throw new Error("invalid_container_resource");
   const actual = inspectResource(resource, false);
-  const state = object7(actual.State);
-  const config = object7(actual.Config);
-  const host = object7(actual.HostConfig);
+  const state = object8(actual.State);
+  const config = object8(actual.Config);
+  const host = object8(actual.HostConfig);
   if (resource.image !== policy.image || JSON.stringify(config.Entrypoint) !== JSON.stringify(
     containerEntrypoint(
       policy,
@@ -3013,7 +3029,7 @@ function admitClaim(value, group, role, directory, memoryMb, runtime2, cwd = gro
     )
   ))
     throw new Error("container_runtime_image_not_granted");
-  if (config.WorkingDir !== join29("/workspace", relative12(projectRoot, cwd)))
+  if (config.WorkingDir !== join33("/workspace", relative13(projectRoot, cwd)))
     throw new Error("container_cwd_not_granted");
   assertContainerMounts(
     actual,
@@ -3092,7 +3108,7 @@ var init_engine = __esm({
         if (!/^1\.\d+$/.test(version2))
           throw new Error("invalid_docker_api_version");
         const payload = JSON.stringify(configuration);
-        return new Promise((resolve19, reject) => {
+        return new Promise((resolve22, reject) => {
           const req = request2(
             {
               socketPath: new URL(endpoint).pathname,
@@ -3122,12 +3138,12 @@ var init_engine = __esm({
                 }
                 try {
                   const id2 = text(
-                    object7(JSON.parse(Buffer.concat(chunks).toString("utf8"))).Id,
+                    object8(JSON.parse(Buffer.concat(chunks).toString("utf8"))).Id,
                     "container_id"
                   );
                   if (!/^[a-f0-9]{64}$/.test(id2))
                     throw new Error("invalid_container_id");
-                  resolve19(id2);
+                  resolve22(id2);
                 } catch (error) {
                   reject(error);
                 }
@@ -3147,25 +3163,25 @@ var init_engine = __esm({
 });
 
 // src/harness/adapters/docker/bridge-artifact.ts
-import { createHash as createHash16 } from "crypto";
+import { createHash as createHash17 } from "crypto";
 import {
   closeSync as closeSync5,
   constants as constants5,
   fstatSync as fstatSync4,
   fsyncSync as fsyncSync2,
   openSync as openSync5,
-  readFileSync as readFileSync31,
+  readFileSync as readFileSync35,
   writeFileSync as writeFileSync11
 } from "fs";
-import { join as join30 } from "path";
+import { join as join34 } from "path";
 function source() {
   const path = artifact("egress-bridge");
   if (!path.endsWith(".js"))
     throw new Error("docker_bridge_requires_compiled_cli");
-  return readFileSync31(path);
+  return readFileSync35(path);
 }
 function digest(value) {
-  return createHash16("sha256").update(value).digest("hex");
+  return createHash17("sha256").update(value).digest("hex");
 }
 function bridgeDigest() {
   return digest(source());
@@ -3176,7 +3192,7 @@ function prepareBridge(creation) {
   if (digest(content) !== creation.bridgeSha256)
     throw new Error("docker_bridge_source_changed");
   const descriptor = openSync5(
-    join30(creation.state, bridgeName(creation.nonce)),
+    join34(creation.state, bridgeName(creation.nonce)),
     "wx",
     384
   );
@@ -3190,12 +3206,12 @@ function prepareBridge(creation) {
 function assertBridge(creation) {
   if (!creation.egress?.bridgeExecutable) return;
   const descriptor = openSync5(
-    join30(creation.state, bridgeName(creation.nonce)),
+    join34(creation.state, bridgeName(creation.nonce)),
     constants5.O_RDONLY | constants5.O_NOFOLLOW
   );
   try {
     const stat = fstatSync4(descriptor);
-    if (!stat.isFile() || stat.uid !== process.getuid?.() || stat.nlink !== 1 || (stat.mode & 63) !== 0 || stat.size > 2097152 || digest(readFileSync31(descriptor)) !== creation.bridgeSha256)
+    if (!stat.isFile() || stat.uid !== process.getuid?.() || stat.nlink !== 1 || (stat.mode & 63) !== 0 || stat.size > 2097152 || digest(readFileSync35(descriptor)) !== creation.bridgeSha256)
       throw new Error("docker_bridge_artifact_changed");
   } finally {
     closeSync5(descriptor);
@@ -3210,7 +3226,7 @@ var init_bridge_artifact = __esm({
 });
 
 // src/harness/adapters/docker/creation-plan.ts
-import { join as join31, relative as relative13 } from "path";
+import { join as join35, relative as relative14 } from "path";
 function creationPlan(group, directory, id2, nonce, role, runtime2, cwd, preparation) {
   if (group.profile !== "docker" || !group.dockerPolicy)
     throw new Error("container_requires_docker_profile");
@@ -3219,15 +3235,15 @@ function creationPlan(group, directory, id2, nonce, role, runtime2, cwd, prepara
   const images = JSON.parse(
     command("docker", ["image", "inspect", policy.image])
   );
-  if (!Array.isArray(images) || images.length !== 1 || object7(images[0]).Id !== policy.image)
+  if (!Array.isArray(images) || images.length !== 1 || object8(images[0]).Id !== policy.image)
     throw new Error("docker_image_not_available");
-  const imageConfig = object7(object7(images[0]).Config);
+  const imageConfig = object8(object8(images[0]).Config);
   const environment2 = imageConfig.Env;
   if (!Array.isArray(environment2) || environment2.some((entry2) => typeof entry2 !== "string"))
     throw new Error("invalid_container_image_environment");
   const profile = selectedProfile(policy, preparation.privateProfile, runtime2);
   if (profile) assertProfileAvailable(profile, group.projectRoot);
-  const state = profile?.directory ?? join31(directory, "containers", nonce, "profile");
+  const state = profile?.directory ?? join35(directory, "containers", nonce, "profile");
   return {
     name: containerName(group.owner, id2),
     nonce,
@@ -3244,7 +3260,7 @@ function creationPlan(group, directory, id2, nonce, role, runtime2, cwd, prepara
         preparation.privateProfile
       ),
       Cmd: preparation.args.length ? preparation.args : null,
-      WorkingDir: join31("/workspace", relative13(group.projectRoot, cwd)),
+      WorkingDir: join35("/workspace", relative14(group.projectRoot, cwd)),
       User: `${process.getuid?.()}:${process.getgid?.()}`,
       Env: [
         ...environment2.filter(
@@ -3303,14 +3319,14 @@ function assertCreationConfiguration(actual, creation) {
   if (actual.Name !== `/${creation.name}`)
     throw new Error("foreign_container_creation");
   const expected = creation.configuration;
-  const config = object7(actual.Config);
-  const host = object7(actual.HostConfig);
+  const config = object8(actual.Config);
+  const host = object8(actual.HostConfig);
   for (const [key, value] of Object.entries(expected)) {
     if (key === "HostConfig" || key === "Image") continue;
     if (!matchesFields(config[key], value))
       throw new Error(`container_creation_configuration_changed_${key}`);
   }
-  for (const [key, value] of Object.entries(object7(expected.HostConfig))) {
+  for (const [key, value] of Object.entries(object8(expected.HostConfig))) {
     if (!matchesFields(host[key], value))
       throw new Error(`container_creation_configuration_changed_${key}`);
   }
@@ -3343,12 +3359,12 @@ var init_creation_plan = __esm({
 
 // src/harness/adapters/docker/creation.ts
 import { mkdirSync as mkdirSync10 } from "fs";
-import { join as join32 } from "path";
+import { join as join36 } from "path";
 async function prepareCreation(journal) {
   const intent = journal.intent();
   const creation = intent.dockerCreation;
   if (!creation) throw new Error("container_creation_missing");
-  const group = new GroupStore(join32(journal.records.directory, "group.json")).state.group;
+  const group = new GroupStore(join36(journal.records.directory, "group.json")).state.group;
   const profile = selectedProfile(
     group.dockerPolicy,
     creation.privateProfile,
@@ -3362,7 +3378,7 @@ async function prepareCreation(journal) {
     creation.name,
     creation.configuration
   );
-  const current = new GroupStore(join32(journal.records.directory, "group.json")).state.group;
+  const current = new GroupStore(join36(journal.records.directory, "group.json")).state.group;
   if (current.id !== intent.groupId || current.generation !== intent.generation)
     throw new Error("launch_group_generation_mismatch");
   const resource = {
@@ -3387,7 +3403,7 @@ async function prepareCreation(journal) {
     managed: true
   };
   assertCreationConfiguration(
-    object7(JSON.parse(command("docker", ["inspect", id2]))[0]),
+    object8(JSON.parse(command("docker", ["inspect", id2]))[0]),
     creation
   );
   privateJson(journal.path("intent"), {
@@ -3409,7 +3425,7 @@ function findCreation(journal) {
     );
     if (!Array.isArray(values) || values.length !== 1)
       throw new Error("invalid_container_inspection");
-    actual = object7(values[0]);
+    actual = object8(values[0]);
   } catch (error) {
     if (resourceAbsent(error, creation.name)) return;
     throw error;
@@ -3422,15 +3438,15 @@ function findCreation(journal) {
     role: intent.role,
     image: text(creation.configuration.Image, "container_image"),
     configurationDigest: configurationDigest(actual),
-    memoryMb: Number(object7(actual.HostConfig).Memory) / 1048576,
-    cpuQuota: Number(object7(actual.HostConfig).CpuQuota),
+    memoryMb: Number(object8(actual.HostConfig).Memory) / 1048576,
+    cpuQuota: Number(object8(actual.HostConfig).CpuQuota),
     managed: true,
     ...creation.privateProfile ? { privateProfile: creation.privateProfile } : {}
   };
   assertResourceOwner(resource, actual);
   assertCreationConfiguration(actual, creation);
   if (!intent.resource) {
-    const group = new GroupStore(join32(journal.records.directory, "group.json")).state.group;
+    const group = new GroupStore(join36(journal.records.directory, "group.json")).state.group;
     return {
       ...admitClaim(
         { ...resource, runtime: intent.runtime, state: creation.state },
@@ -3467,7 +3483,7 @@ var init_creation = __esm({
 });
 
 // src/harness/launch/recovery.ts
-import { existsSync as existsSync22 } from "fs";
+import { existsSync as existsSync25 } from "fs";
 function abortLaunch(connection, journal) {
   const intent = journal.intent();
   if (!controllerExited(intent.controllerIdentity))
@@ -3484,7 +3500,7 @@ function abortLaunch(connection, journal) {
       inputReplayed: false
     };
   }
-  if (!existsSync22(journal.path("proof"))) {
+  if (!existsSync25(journal.path("proof"))) {
     const paneUnknown = connection.alive() && (!intent.dockerCreation || connection.tmux(["list-sessions", "-F", "#{session_name}"]).trim().split("\n").includes(`pmcp-${intent.id}`));
     if (paneUnknown || unitActive(intent.unit))
       throw new Error("launch_identity_unknown");
@@ -3511,7 +3527,7 @@ function abortLaunch(connection, journal) {
     assertProof(connection, proof);
     connection.tmux(["kill-pane", "-t", proof.session.paneId]);
   }
-  if (existsSync22(journal.records.path(intent.id)))
+  if (existsSync25(journal.records.path(intent.id)))
     journal.records.save({
       ...proof.session,
       stoppedAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -3538,9 +3554,9 @@ var init_recovery = __esm({
 
 // src/harness/adapters/tmux/lifecycle.ts
 import { randomUUID as randomUUID7 } from "crypto";
-import { existsSync as existsSync23 } from "fs";
+import { existsSync as existsSync26 } from "fs";
 import { setTimeout as setTimeout2 } from "timers/promises";
-import { join as join33 } from "path";
+import { join as join37 } from "path";
 async function start(connection, spec) {
   const records2 = connection.records;
   if (spec.budgetSlice !== budgetSlice(records2.owner))
@@ -3554,7 +3570,7 @@ async function start(connection, spec) {
   const nonce = randomUUID7();
   const journal = new LaunchJournal(records2, id2);
   const dockerCreation = spec.dockerPreparation ? creationPlan(
-    new GroupStore(join33(records2.directory, "group.json")).state.group,
+    new GroupStore(join37(records2.directory, "group.json")).state.group,
     records2.directory,
     id2,
     nonce,
@@ -3614,7 +3630,7 @@ async function start(connection, spec) {
     `exec ${argv.map(quote2).join(" ")}`
   ]);
   const deadline = Date.now() + 5e3;
-  while (!existsSync23(journal.path("proof"))) {
+  while (!existsSync26(journal.path("proof"))) {
     if (Date.now() >= deadline) throw new Error("launch_proof_timeout");
     await setTimeout2(25);
   }
@@ -3625,7 +3641,7 @@ async function start(connection, spec) {
 }
 function stop(connection, id2) {
   const journal = new LaunchJournal(connection.records, id2);
-  if (existsSync23(journal.path("intent"))) {
+  if (existsSync26(journal.path("intent"))) {
     abortLaunch(connection, journal);
     return;
   }
@@ -3652,7 +3668,7 @@ function cleanup(connection) {
   }
   for (const record of records2) {
     if (record.resource) stopResource(record.resource);
-    if (record.stoppedAt || !existsSync23(
+    if (record.stoppedAt || !existsSync26(
       new LaunchJournal(connection.records, record.id).path("intent")
     )) {
       stopUnit(record.unit);
@@ -3684,7 +3700,7 @@ var init_lifecycle2 = __esm({
 // src/harness/adapters/tmux/input.ts
 import { randomUUID as randomUUID8 } from "crypto";
 import { closeSync as closeSync6, openSync as openSync6, unlinkSync as unlinkSync3, writeFileSync as writeFileSync12 } from "fs";
-import { join as join34 } from "path";
+import { join as join38 } from "path";
 function validateText(text3) {
   if (typeof text3 !== "string" || Buffer.byteLength(text3) > 16384)
     throw new Error("invalid_text");
@@ -3715,7 +3731,7 @@ function write(connection, id2, text3, submit) {
   validateText(text3);
   const session = connection.inspect(id2);
   if (!session.alive) throw new Error("runtime_exited");
-  const lock = join34(connection.records.directory, `${id2}.input.lock`);
+  const lock = join38(connection.records.directory, `${id2}.input.lock`);
   const descriptor = openSync6(lock, "wx", 384);
   const buffer = `pmcp-${randomUUID8()}`;
   try {
@@ -3874,11 +3890,11 @@ var init_backend = __esm({
 });
 
 // src/harness/adapters/systemd/budget.ts
-import { join as join35 } from "path";
+import { join as join39 } from "path";
 async function budgetOperation(directory, operation) {
   const backend = openBackend(directory);
-  const path = join35(directory, "runtime-policy.json");
-  const metadata2 = object7(readPrivateJson2(backend.metadataPath));
+  const path = join39(directory, "runtime-policy.json");
+  const metadata2 = object8(readPrivateJson2(backend.metadataPath));
   const slice = budgetSlice(backend.owner);
   if (operation.action === "configure") {
     if (metadata2.budgetSlice || backend.records().length)
@@ -3900,7 +3916,7 @@ async function budgetOperation(directory, operation) {
     ]);
     return { ok: true };
   }
-  const policy = object7(readPrivateJson2(path));
+  const policy = object8(readPrivateJson2(path));
   if (policy.owner !== backend.owner || metadata2.budgetSlice !== slice || policy.slice !== slice)
     throw new Error("foreign_budget_policy");
   if (operation.action === "cleanup") {
@@ -3928,7 +3944,7 @@ async function budgetOperation(directory, operation) {
   });
   if (active.length >= integer(policy.maxActive, "max_active", 1, 5))
     throw new Error("runtime_capacity_exceeded");
-  const spec = object7(operation.spec);
+  const spec = object8(operation.spec);
   const memoryMb = integer(spec.memoryMb, "session_memory", 32, 1536);
   const resource = spec.resource === void 0 ? void 0 : resourceClaim(spec.resource, backend.owner);
   const dockerPreparation = spec.dockerPreparation;
@@ -3978,7 +3994,7 @@ var init_budget = __esm({
 
 // src/harness/adapters/systemd/configure.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { join as join36 } from "path";
+import { join as join40 } from "path";
 function configureBudget(context, input) {
   const { store, backend } = context;
   assertOwnedRecords(backend);
@@ -4000,9 +4016,9 @@ function configureBudget(context, input) {
     throw new Error("capacity_below_active_sessions");
   if (active.reduce((total, session) => total + session.memoryMb, 0) > memoryMb)
     throw new Error("budget_below_reserved_memory");
-  const path = join36(backend.runDirectory, "runtime-policy.json");
-  const policy = object7(readPrivateJson2(path));
-  const metadata2 = object7(readPrivateJson2(backend.metadataPath));
+  const path = join40(backend.runDirectory, "runtime-policy.json");
+  const policy = object8(readPrivateJson2(path));
+  const metadata2 = object8(readPrivateJson2(backend.metadataPath));
   const slice = budgetSlice(backend.owner);
   if (policy.owner !== backend.owner || policy.slice !== slice || metadata2.budgetSlice !== slice)
     throw new Error("foreign_budget_policy");
@@ -4037,14 +4053,14 @@ var init_configure = __esm({
 });
 
 // src/harness/adapters/process/executable.ts
-import { accessSync, constants as constants6, statSync as statSync15 } from "fs";
-import { delimiter, resolve as resolve18 } from "path";
+import { accessSync, constants as constants6, statSync as statSync16 } from "fs";
+import { delimiter, resolve as resolve19 } from "path";
 function locateExecutable(binary, cwd = process.cwd()) {
   for (const directory of (process.env.PATH ?? "").split(delimiter)) {
     if (!directory) continue;
-    const path = resolve18(cwd, directory, binary);
+    const path = resolve19(cwd, directory, binary);
     try {
-      if (!statSync15(path).isFile()) continue;
+      if (!statSync16(path).isFile()) continue;
       accessSync(path, constants6.X_OK);
       return path;
     } catch {
@@ -4095,11 +4111,11 @@ var init_admission2 = __esm({
 
 // src/harness/groups/service.ts
 import { randomUUID as randomUUID9 } from "crypto";
-import { realpathSync as realpathSync9, statSync as statSync16, unlinkSync as unlinkSync4 } from "fs";
-import { join as join37 } from "path";
+import { realpathSync as realpathSync10, statSync as statSync17, unlinkSync as unlinkSync4 } from "fs";
+import { join as join41 } from "path";
 async function createGroup(input) {
-  const projectRoot = realpathSync9(text(input.projectRoot, "project_root"));
-  if (!statSync16(projectRoot).isDirectory())
+  const projectRoot = realpathSync10(text(input.projectRoot, "project_root"));
+  if (!statSync17(projectRoot).isDirectory())
     throw new Error("invalid_project_root");
   const allowedRuntimes = strings2(input.allowedRuntimes, "allowed_runtimes");
   const profile = input.profile ?? "native";
@@ -4129,7 +4145,7 @@ async function createGroup(input) {
     sessions: [],
     ...dockerPolicy2 ? { dockerPolicy: dockerPolicy2 } : {}
   };
-  const groupFile = join37(backend.runDirectory, "group.json");
+  const groupFile = join41(backend.runDirectory, "group.json");
   privateJson(groupFile, { group, leases: [], deliveries: [] });
   try {
     await budgetOperation(backend.runDirectory, {
@@ -4142,7 +4158,7 @@ async function createGroup(input) {
       await budgetOperation(backend.runDirectory, { action: "cleanup" });
       unlinkSync4(groupFile);
     } catch (cleanupError) {
-      privateJson(join37(backend.runDirectory, "initialization-failure.json"), {
+      privateJson(join41(backend.runDirectory, "initialization-failure.json"), {
         error: String(error),
         cleanupError: String(cleanupError),
         recoveryRequired: true
@@ -4204,16 +4220,16 @@ var init_service2 = __esm({
 });
 
 // src/harness/groups/catalog.ts
-import { existsSync as existsSync24, readdirSync as readdirSync11 } from "fs";
-import { join as join38 } from "path";
+import { existsSync as existsSync27, readdirSync as readdirSync12 } from "fs";
+import { join as join42 } from "path";
 function listGroups() {
   const directory = stateDirectory();
-  if (!existsSync24(directory)) return { groups: [] };
+  if (!existsSync27(directory)) return { groups: [] };
   const groups2 = [];
-  for (const entry2 of readdirSync11(directory, { withFileTypes: true })) {
+  for (const entry2 of readdirSync12(directory, { withFileTypes: true })) {
     if (!entry2.isDirectory()) continue;
-    const path = join38(directory, entry2.name, "group.json");
-    if (!existsSync24(path)) continue;
+    const path = join42(directory, entry2.name, "group.json");
+    if (!existsSync27(path)) continue;
     try {
       const store = new GroupStore(path);
       groups2.push({ groupFile: store.path, group: store.state.group });
@@ -4272,10 +4288,10 @@ var init_service3 = __esm({
 });
 
 // src/harness/application/context.ts
-import { dirname as dirname20 } from "path";
+import { dirname as dirname21 } from "path";
 function openGroup(path) {
   const store = new GroupStore(path);
-  const backend = openBackend(dirname20(store.path));
+  const backend = openBackend(dirname21(store.path));
   if (store.state.group.owner !== backend.owner)
     throw new Error("foreign_group");
   return { store, backend };
@@ -4390,7 +4406,7 @@ async function watchSession(operation) {
       )
     });
     if (index + 1 < count)
-      await new Promise((resolve19) => setTimeout(resolve19, intervalMs));
+      await new Promise((resolve22) => setTimeout(resolve22, intervalMs));
   }
   return {
     schemaVersion: 1,
@@ -4410,9 +4426,9 @@ var init_watch = __esm({
 
 // src/harness/control/leases.ts
 import { randomUUID as randomUUID10 } from "crypto";
-import { join as join39 } from "path";
+import { join as join43 } from "path";
 function resolveLease(context, file2, allowExpired = false) {
-  const credential2 = object7(readPrivateJson2(file2));
+  const credential2 = object8(readPrivateJson2(file2));
   const lease = context.store.state.leases.find(
     (entry2) => entry2.token === credential2.token
   );
@@ -4454,7 +4470,7 @@ function acquireControl(context, sessionId, controller, mode) {
   );
   store.state.leases.push(lease);
   store.save();
-  const leaseFile = join39(backend.runDirectory, `lease-${randomUUID10()}.json`);
+  const leaseFile = join43(backend.runDirectory, `lease-${randomUUID10()}.json`);
   privateJson(leaseFile, { token: lease.token });
   return { sessionId, controller, mode, expiresAt: lease.expiresAt, leaseFile };
 }
@@ -4507,7 +4523,7 @@ var init_leases = __esm({
 });
 
 // src/harness/delivery/service.ts
-import { createHash as createHash17 } from "crypto";
+import { createHash as createHash18 } from "crypto";
 function deliver(context, operation, leaseFile, requestId, text3) {
   const { store, backend } = context;
   const lease = resolveLease(context, leaseFile);
@@ -4523,7 +4539,7 @@ function deliver(context, operation, leaseFile, requestId, text3) {
   if (/[\r\n\t]/.test(text3))
     throw new Error("unqualified_terminal_control_input");
   id(requestId, "request_id");
-  const digest2 = createHash17("sha256").update(
+  const digest2 = createHash18("sha256").update(
     JSON.stringify({
       operation,
       text: text3,
@@ -4601,18 +4617,18 @@ var init_service5 = __esm({
 });
 
 // src/harness/adapters/process/recover-lock.ts
-import { existsSync as existsSync25, lstatSync as lstatSync9, unlinkSync as unlinkSync5 } from "fs";
-import { join as join40 } from "path";
+import { existsSync as existsSync28, lstatSync as lstatSync10, unlinkSync as unlinkSync5 } from "fs";
+import { join as join44 } from "path";
 function recoverInputLock(backend, sessionId) {
   backend.inspect(sessionId);
-  const path = join40(backend.runDirectory, `${sessionId}.input.lock`);
-  if (!existsSync25(path)) return;
-  const before = lstatSync9(path);
-  const record = object7(readPrivateJson2(path));
+  const path = join44(backend.runDirectory, `${sessionId}.input.lock`);
+  if (!existsSync28(path)) return;
+  const before = lstatSync10(path);
+  const record = object8(readPrivateJson2(path));
   if (record.id !== sessionId) throw new Error("foreign_writer_lock");
   if (!controllerExited(text(record.controller, "controller_identity")))
     throw new Error("writer_still_alive");
-  if (lstatSync9(path).ino !== before.ino)
+  if (lstatSync10(path).ino !== before.ino)
     throw new Error("writer_lock_changed");
   unlinkSync5(path);
 }
@@ -4626,7 +4642,7 @@ var init_recover_lock = __esm({
 });
 
 // src/harness/launch/service.ts
-import { existsSync as existsSync26 } from "fs";
+import { existsSync as existsSync29 } from "fs";
 function assertLaunchAdmission(records2) {
   for (const journal of launchJournals(records2)) {
     if (journal.abortRecord()?.state === "stopped" && unitActive(journal.intent().unit))
@@ -4651,12 +4667,12 @@ function inspectPendingStarts(context) {
     role: journal.intent().role,
     runtime: journal.intent().runtime,
     controllerExited: controllerExited(journal.intent().controllerIdentity),
-    proofPresent: existsSync26(journal.path("proof")),
-    recordPresent: existsSync26(journal.records.path(journal.id)),
+    proofPresent: existsSync29(journal.path("proof")),
+    recordPresent: existsSync29(journal.records.path(journal.id)),
     registered: context.store.state.group.sessions.some(
       (session) => session.id === journal.id
     ),
-    authorizationPresent: existsSync26(journal.path("grant")),
+    authorizationPresent: existsSync29(journal.path("grant")),
     processingConfirmed: false,
     inputReplayed: false
   }));
@@ -4674,8 +4690,8 @@ var init_service6 = __esm({
 });
 
 // src/harness/sessions/service.ts
-import { realpathSync as realpathSync10 } from "fs";
-import { relative as relative14 } from "path";
+import { realpathSync as realpathSync11 } from "fs";
+import { relative as relative15 } from "path";
 async function startSession(context, input) {
   const { store, backend } = context;
   const group = store.state.group;
@@ -4708,8 +4724,8 @@ async function startSession(context, input) {
     );
     if (!backend.inspect(main2.id).alive) throw new Error("main_unavailable");
   }
-  const cwd = realpathSync10(text(input.cwd ?? group.projectRoot, "cwd"));
-  const scope = relative14(group.projectRoot, cwd);
+  const cwd = realpathSync11(text(input.cwd ?? group.projectRoot, "cwd"));
+  const scope = relative15(group.projectRoot, cwd);
   if (scope === ".." || scope.startsWith("../"))
     throw new Error("cwd_outside_project");
   const memoryMb = integer(input.memoryMb ?? 384, "session_memory", 32, 1536);
@@ -5008,7 +5024,7 @@ async function runOperation(operation) {
     return groupOperation(context, action, operation.input);
   if (family === "session") {
     if (action === "start")
-      return startSession(context, object7(operation.input));
+      return startSession(context, object8(operation.input));
     if (action === "list") return listSessions(context);
     const sessionId = text(operation.sessionId, "session_id");
     if (action === "stop") return stopSession(context, sessionId);
@@ -5066,7 +5082,7 @@ async function runOperation(operation) {
     if (action === "stop-orphan")
       return stopOrphan(context, text(operation.sessionId, "session_id"));
     if (action === "replace-main")
-      return replaceMain(context, object7(operation.input));
+      return replaceMain(context, object8(operation.input));
   }
   throw new Error("unsupported_operation");
 }
@@ -5141,7 +5157,7 @@ async function invoke(operation) {
     return {
       schemaVersion: 1,
       ok: true,
-      ...await createGroup(object7(operation.input))
+      ...await createGroup(object8(operation.input))
     };
   }
   if (operation.family === "attach" && operation.action === "open") {
@@ -5171,9 +5187,9 @@ var init_invoke = __esm({
 });
 
 // src/tui/adapters/process/runtime.ts
-import { dirname as dirname21, join as join41 } from "path";
-import { fileURLToPath as fileURLToPath3 } from "url";
-import { existsSync as existsSync27, realpathSync as realpathSync11 } from "fs";
+import { dirname as dirname22, join as join45 } from "path";
+import { fileURLToPath as fileURLToPath4 } from "url";
+import { existsSync as existsSync30, realpathSync as realpathSync12 } from "fs";
 function dependencies() {
   const tmux = locateExecutable("tmux");
   const flock = locateExecutable("flock");
@@ -5205,11 +5221,11 @@ function runtime() {
   const available = dependencies();
   if (!available.supported || !available.node)
     throw new Error("tui_dependencies_unavailable");
-  const current = fileURLToPath3(import.meta.url);
-  const directory = dirname21(current);
-  const bundled = join41(directory, "tui-worker.js");
-  if (!existsSync27(bundled)) throw new Error("tui_build_required");
-  return { node: realpathSync11(available.node), worker: bundled };
+  const current = fileURLToPath4(import.meta.url);
+  const directory = dirname22(current);
+  const bundled = join45(directory, "tui-worker.js");
+  if (!existsSync30(bundled)) throw new Error("tui_build_required");
+  return { node: realpathSync12(available.node), worker: bundled };
 }
 var init_runtime2 = __esm({
   "src/tui/adapters/process/runtime.ts"() {
@@ -5223,32 +5239,32 @@ var init_runtime2 = __esm({
 // src/tui/state/store.ts
 import { randomUUID as randomUUID12 } from "crypto";
 import {
-  existsSync as existsSync28,
-  lstatSync as lstatSync10,
+  existsSync as existsSync31,
+  lstatSync as lstatSync11,
   mkdirSync as mkdirSync11,
-  realpathSync as realpathSync12,
+  realpathSync as realpathSync13,
   unlinkSync as unlinkSync6,
   writeFileSync as writeFileSync13
 } from "fs";
 import { homedir as homedir10 } from "os";
-import { dirname as dirname22, join as join42 } from "path";
+import { dirname as dirname23, join as join46 } from "path";
 function createDirectory() {
-  const root = join42(
-    process.env.XDG_STATE_HOME ?? join42(homedir10(), ".local/state"),
+  const root = join46(
+    process.env.XDG_STATE_HOME ?? join46(homedir10(), ".local/state"),
     "pmcp/tui"
   );
   mkdirSync11(root, { recursive: true, mode: 448 });
-  const directory = join42(realpathSync12(root), randomUUID12().slice(0, 16));
-  if (Buffer.byteLength(join42(directory, "s")) > 100)
+  const directory = join46(realpathSync13(root), randomUUID12().slice(0, 16));
+  if (Buffer.byteLength(join46(directory, "s")) > 100)
     throw new Error("socket_path_too_long");
   mkdirSync11(directory, { mode: 448 });
   const owner = randomUUID12();
-  privateJson(join42(directory, "owner.json"), {
+  privateJson(join46(directory, "owner.json"), {
     owner,
     createdAt: (/* @__PURE__ */ new Date()).toISOString()
   });
   writeFileSync13(
-    join42(directory, "tmux.conf"),
+    join46(directory, "tmux.conf"),
     [
       "set -g remain-on-exit on",
       "set -g history-limit 2000",
@@ -5263,13 +5279,13 @@ function createDirectory() {
   return { directory, owner };
 }
 function readView(path) {
-  const file2 = realpathSync12(path);
-  const directory = dirname22(file2);
-  const stat = lstatSync10(directory);
+  const file2 = realpathSync13(path);
+  const directory = dirname23(file2);
+  const stat = lstatSync11(directory);
   if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 63) !== 0)
     throw new Error("unsafe_view_directory");
-  const value = object7(readPrivateJson2(file2));
-  const metadata2 = object7(readPrivateJson2(join42(directory, "owner.json")));
+  const value = object8(readPrivateJson2(file2));
+  const metadata2 = object8(readPrivateJson2(join46(directory, "owner.json")));
   if (value.schemaVersion !== 1 || value.directory !== directory || value.owner !== metadata2.owner)
     throw new Error("foreign_view_owner");
   for (const key of [
@@ -5294,7 +5310,7 @@ function readView(path) {
     "uncertain"
   ].includes(String(value.phase)))
     throw new Error("invalid_control_phase");
-  const plan2 = object7(value.plan);
+  const plan2 = object8(value.plan);
   planLayout(Number(plan2.columns), Number(plan2.rows));
   for (const [key, pattern] of [
     ["session", /^\$\d+$/],
@@ -5306,10 +5322,10 @@ function readView(path) {
       throw new Error("invalid_view_identity");
   }
   const view = value;
-  const fallback = join42(directory, "callback-failure.json");
-  if (existsSync28(fallback)) {
-    const recorded = object7(readPrivateJson2(fallback));
-    const failure2 = object7(recorded.failure);
+  const fallback = join46(directory, "callback-failure.json");
+  if (existsSync31(fallback)) {
+    const recorded = object8(readPrivateJson2(fallback));
+    const failure2 = object8(recorded.failure);
     if (recorded.owner !== view.owner || typeof failure2.code !== "string" || !/^[a-z][a-z0-9_]{0,79}$/.test(failure2.code))
       throw new Error("invalid_view_failure");
     if (!view.failure || String(failure2.at) >= view.failure.at)
@@ -5318,8 +5334,8 @@ function readView(path) {
   return { file: file2, view };
 }
 function dismissFailure(file2, view) {
-  const fallback = join42(view.directory, "callback-failure.json");
-  if (existsSync28(fallback)) unlinkSync6(fallback);
+  const fallback = join46(view.directory, "callback-failure.json");
+  if (existsSync31(fallback)) unlinkSync6(fallback);
   delete view.failure;
   saveView(file2, view);
 }
@@ -5381,7 +5397,7 @@ var init_lock = __esm({
 });
 
 // src/tui/adapters/process/budget.ts
-import { readFileSync as readFileSync32 } from "fs";
+import { readFileSync as readFileSync36 } from "fs";
 function viewUnit(owner) {
   if (!/^[a-f0-9]{8}(-[a-f0-9]{4}){3}-[a-f0-9]{12}$/.test(owner))
     throw new Error("invalid_view_owner");
@@ -5409,7 +5425,7 @@ function startPresentation(owner, args, env) {
   );
 }
 function assertPresentationBudget(owner, pid) {
-  if (!readFileSync32(`/proc/${pid}/cgroup`, "utf8").includes(
+  if (!readFileSync36(`/proc/${pid}/cgroup`, "utf8").includes(
     `/${viewUnit(owner)}
 `
   ))
@@ -5424,7 +5440,7 @@ var init_budget2 = __esm({
 
 // src/tui/adapters/tmux/connection.ts
 import { spawn as spawn3 } from "child_process";
-import { join as join43 } from "path";
+import { join as join47 } from "path";
 var ViewConnection;
 var init_connection2 = __esm({
   "src/tui/adapters/tmux/connection.ts"() {
@@ -5437,7 +5453,7 @@ var init_connection2 = __esm({
         this.directory = directory;
         this.owner = owner;
         this.identity = identity;
-        this.socket = join43(directory, "s");
+        this.socket = join47(directory, "s");
       }
       directory;
       owner;
@@ -5450,14 +5466,14 @@ var init_connection2 = __esm({
           "-S",
           this.socket,
           "-f",
-          join43(this.directory, "tmux.conf"),
+          join47(this.directory, "tmux.conf"),
           ...args
         ];
         if (args[0] === "new-session" && !this.identity)
           return startPresentation(this.owner, options2, env).trim();
         return command(
           "tmux",
-          ["-S", this.socket, "-f", join43(this.directory, "tmux.conf"), ...args],
+          ["-S", this.socket, "-f", join47(this.directory, "tmux.conf"), ...args],
           { env }
         ).trim();
       }
@@ -5511,9 +5527,9 @@ var init_connection2 = __esm({
           ["-S", this.socket, "attach-session", "-E", "-t", view.session],
           { stdio: "inherit", env }
         );
-        return new Promise((resolve19, reject) => {
+        return new Promise((resolve22, reject) => {
           client.once("error", reject);
-          client.once("exit", (code) => resolve19(code ?? 1));
+          client.once("exit", (code) => resolve22(code ?? 1));
         });
       }
     };
@@ -5521,7 +5537,7 @@ var init_connection2 = __esm({
 });
 
 // src/tui/application/feedback.ts
-import { join as join44 } from "path";
+import { join as join48 } from "path";
 function describeFailure(action, error) {
   const message = error instanceof Error ? error.message : "view_action_failed";
   const code = error instanceof RangeError ? "terminal_size_invalid" : failureCode(message);
@@ -5919,16 +5935,16 @@ var init_common = __esm({
 });
 
 // src/tui/application/create.ts
-import { join as join45 } from "path";
-import { realpathSync as realpathSync13 } from "fs";
+import { join as join49 } from "path";
+import { realpathSync as realpathSync14 } from "fs";
 async function createView(input) {
   const plan2 = planLayout(input.columns, input.rows);
   const helpers = runtime();
   const mailbox = input.mailbox ? {
-    config: realpathSync13(input.mailbox.config),
-    actorFile: realpathSync13(input.mailbox.actorFile)
+    config: realpathSync14(input.mailbox.config),
+    actorFile: realpathSync14(input.mailbox.actorFile)
   } : void 0;
-  const groupFile = realpathSync13(input.groupFile);
+  const groupFile = realpathSync14(input.groupFile);
   const group = new GroupStore(groupFile).state.group;
   const common2 = new CommonHarness({
     groupFile,
@@ -5941,7 +5957,7 @@ async function createView(input) {
   );
   if (!main2) throw new Error("view_requires_live_main");
   const { directory, owner } = createDirectory();
-  const file2 = join45(directory, "view.json");
+  const file2 = join49(directory, "view.json");
   const connection = new ViewConnection(directory, owner);
   const argv = [helpers.node, helpers.worker, "attach", file2, main2.id];
   const result = connection.raw([
@@ -6027,7 +6043,7 @@ async function waitFor(predicate, timeoutMs) {
   const deadline = Date.now() + timeoutMs;
   while (Date.now() < deadline) {
     if (await predicate()) return;
-    await new Promise((resolve19) => setTimeout(resolve19, 50));
+    await new Promise((resolve22) => setTimeout(resolve22, 50));
   }
   throw new Error("writer_not_ready");
 }
@@ -6169,7 +6185,7 @@ var init_navigation = __esm({
 });
 
 // src/tui/application/history.ts
-import { join as join46 } from "path";
+import { join as join50 } from "path";
 async function observeHistory(context) {
   const { view, renderer, common: common2, file: file2 } = context;
   await releaseControl(context);
@@ -6177,7 +6193,7 @@ async function observeHistory(context) {
     sessionId: view.target,
     input: { lines: 2e3, maxBytes: 65536 }
   });
-  privateJson(join46(view.directory, "history.json"), {
+  privateJson(join50(view.directory, "history.json"), {
     sessionId: view.target,
     content: history.content,
     truncated: history.truncated
@@ -6253,8 +6269,8 @@ var init_mailbox = __esm({
 });
 
 // src/tui/application/lifecycle.ts
-import { existsSync as existsSync29, unlinkSync as unlinkSync7 } from "fs";
-import { join as join47 } from "path";
+import { existsSync as existsSync32, unlinkSync as unlinkSync7 } from "fs";
+import { join as join51 } from "path";
 function resizeView({ view, renderer, input }) {
   renderer.resize(view, planLayout(input.columns, input.rows));
 }
@@ -6269,8 +6285,8 @@ async function stopTarget(context) {
 async function closeView(context) {
   await returnToMain(context);
   context.renderer.connection.cleanup();
-  const history = join47(context.view.directory, "history.json");
-  if (existsSync29(history)) unlinkSync7(history);
+  const history = join51(context.view.directory, "history.json");
+  if (existsSync32(history)) unlinkSync7(history);
   context.view.state = "closed";
   saveView(context.file, context.view);
 }
@@ -6888,16 +6904,16 @@ async function openEntryVectors(path, options2 = {}) {
 
 // src/commands/reindex.ts
 init_encoder();
-import { existsSync as existsSync4, mkdirSync } from "fs";
-import { dirname as dirname4 } from "path";
+import { existsSync as existsSync6, mkdirSync } from "fs";
+import { dirname as dirname5 } from "path";
 
 // src/commands/embedding.ts
-import { resolve as resolve4 } from "path";
+import { resolve as resolve5 } from "path";
 init_encoder();
 
 // src/catalog.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2, readdirSync as readdirSync2 } from "fs";
-import { basename as basename2, dirname as dirname2, isAbsolute, join as join2, relative } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync3, readdirSync as readdirSync2 } from "fs";
+import { basename as basename2, dirname as dirname2, isAbsolute as isAbsolute2, join as join3, relative as relative2 } from "path";
 
 // src/frontmatter.ts
 import { parse } from "yaml";
@@ -7019,8 +7035,122 @@ function specProblems(front, directory) {
 }
 
 // src/marketplace.ts
-import { existsSync, readFileSync, readdirSync } from "fs";
-import { basename, dirname, join, resolve as resolve2 } from "path";
+import { existsSync as existsSync2, readFileSync as readFileSync2, readdirSync } from "fs";
+import { basename, dirname, join as join2, resolve as resolve3 } from "path";
+
+// src/marketplace/local.ts
+import { existsSync, readFileSync, realpathSync, statSync } from "fs";
+import { isAbsolute, join, relative, resolve as resolve2, sep } from "path";
+function object(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function containedPath(root, path) {
+  const result = resolve2(root, path);
+  const lexical = relative(resolve2(root), result);
+  if (isAbsolute(lexical) || lexical === ".." || lexical.startsWith(`..${sep}`))
+    throw new Error("Path leaves the plugin root");
+  const physical = relative(realpathSync(root), realpathSync(result));
+  if (isAbsolute(physical) || physical === ".." || physical.startsWith(`..${sep}`))
+    throw new Error("Path leaves the plugin root through a symlink");
+  return result;
+}
+function pluginManifest(directory) {
+  for (const path of [
+    ".claude-plugin/plugin.json",
+    "plugin.json",
+    ".codex-plugin/plugin.json",
+    ".grok-plugin/plugin.json"
+  ]) {
+    if (!existsSync(join(directory, path))) continue;
+    const value = JSON.parse(
+      readFileSync(containedPath(directory, path), "utf8")
+    );
+    if (!object(value)) throw new Error("Plugin manifest must be an object");
+    return value;
+  }
+  return {};
+}
+function localSource(value) {
+  if (typeof value === "string") return value;
+  if (object(value) && value.source === "local" && typeof value.path === "string")
+    return value.path;
+  throw new Error(
+    "Only installed local plugin sources can be read; use the native installer for remote sources"
+  );
+}
+function readLocalMarketplace(directory, onReject) {
+  const filename = [
+    ".claude-plugin/marketplace.json",
+    ".agents/plugins/marketplace.json",
+    ".grok-plugin/marketplace.json"
+  ].find((path2) => existsSync(join(directory, path2)));
+  if (!filename) {
+    onReject?.({
+      path: directory,
+      reason: "No supported native marketplace.json found"
+    });
+    return null;
+  }
+  const path = join(directory, filename);
+  let manifest2;
+  try {
+    manifest2 = JSON.parse(
+      readFileSync(containedPath(directory, filename), "utf8")
+    );
+  } catch {
+    onReject?.({
+      path,
+      reason: "marketplace.json is not valid JSON or is outside its root"
+    });
+    return null;
+  }
+  if (!object(manifest2) || !Array.isArray(manifest2.plugins)) {
+    onReject?.({ path, reason: "marketplace.json requires a plugins array" });
+    return null;
+  }
+  const name = typeof manifest2.name === "string" ? manifest2.name : "marketplace";
+  if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/u.test(name)) {
+    onReject?.({ path, reason: "Invalid marketplace name" });
+    return null;
+  }
+  const plugins = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const item of manifest2.plugins) {
+    try {
+      if (!object(item) || typeof item.name !== "string" || !/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/u.test(item.name))
+        throw new Error("Invalid plugin name");
+      if (seen.has(item.name)) throw new Error("Duplicate plugin name");
+      const source2 = localSource(item.source);
+      if (!source2.startsWith("./") || source2.split(/[\\/]/u).includes(".."))
+        throw new Error("Local plugin source must be a contained ./ path");
+      const pluginDirectory = containedPath(directory, source2);
+      if (!statSync(pluginDirectory).isDirectory())
+        throw new Error("Plugin source must be a directory");
+      const metadata3 = pluginManifest(pluginDirectory);
+      if (metadata3.name !== void 0 && metadata3.name !== item.name)
+        throw new Error("Plugin manifest name differs from marketplace entry");
+      seen.add(item.name);
+      plugins.push({
+        name: item.name,
+        directory: pluginDirectory,
+        manifest: metadata3
+      });
+    } catch (error) {
+      onReject?.({
+        path,
+        reason: error instanceof Error ? error.message : "Invalid plugin source"
+      });
+    }
+  }
+  const metadata2 = object(manifest2.metadata) ? manifest2.metadata : {};
+  return {
+    name,
+    plugins,
+    ...typeof metadata2.tier === "string" ? { tier: metadata2.tier } : {}
+  };
+}
+
+// src/marketplace.ts
 function readMetadata(source2) {
   return metadataOf(frontmatterObject(source2));
 }
@@ -7033,16 +7163,27 @@ var asList = (value) => {
   if (typeof value === "string") return [value];
   return Array.isArray(value) ? value : [];
 };
-function readJson(path) {
+function readJson(path, root) {
   try {
-    const parsed = JSON.parse(readFileSync(path, "utf8"));
+    const parsed = JSON.parse(
+      readFileSync2(containedPath(root, path), "utf8")
+    );
     return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
   } catch {
     return null;
   }
 }
 function markdownEntry(context, path, fallbackSlug, shape) {
-  const source2 = readFileSync(path, "utf8");
+  let source2;
+  try {
+    source2 = readFileSync2(containedPath(context.pluginDir, path), "utf8");
+  } catch {
+    context.onReject?.({
+      path,
+      reason: "Asset is unreadable or outside the plugin root"
+    });
+    return null;
+  }
   const front = readFrontmatter(source2);
   const description = front["description"] ?? "";
   if (description === "") {
@@ -7074,25 +7215,25 @@ function markdownEntry(context, path, fallbackSlug, shape) {
   };
 }
 function skillEntries(context) {
-  const dir = join(context.pluginDir, "skills");
-  if (!existsSync(dir)) return [];
+  const dir = join2(context.pluginDir, "skills");
+  if (!existsSync2(dir)) return [];
   const found = [];
   for (const child of readdirSync(dir, { withFileTypes: true })) {
     if (!child.isDirectory()) continue;
-    const path = join(dir, child.name, "SKILL.md");
-    if (!existsSync(path)) continue;
+    const path = join2(dir, child.name, "SKILL.md");
+    if (!existsSync2(path)) continue;
     const entry2 = markdownEntry(context, path, child.name, {});
     if (entry2) found.push(entry2);
   }
   return found;
 }
 function commandEntries(context) {
-  const dir = join(context.pluginDir, "commands");
-  if (!existsSync(dir)) return [];
+  const dir = join2(context.pluginDir, "commands");
+  if (!existsSync2(dir)) return [];
   const found = [];
   for (const child of readdirSync(dir, { withFileTypes: true })) {
     if (!child.isFile() || !child.name.endsWith(".md")) continue;
-    const path = join(dir, child.name);
+    const path = join2(dir, child.name);
     const entry2 = markdownEntry(context, path, basename(child.name, ".md"), {
       root: path
     });
@@ -7101,22 +7242,22 @@ function commandEntries(context) {
   return found;
 }
 function agentEntries(context) {
-  const dir = join(context.pluginDir, "agents");
-  if (!existsSync(dir)) return [];
+  const dir = join2(context.pluginDir, "agents");
+  if (!existsSync2(dir)) return [];
   const found = [];
   for (const child of readdirSync(dir, { withFileTypes: true })) {
     let entry2 = null;
     if (child.isFile() && child.name.endsWith(".md")) {
-      const path = join(dir, child.name);
+      const path = join2(dir, child.name);
       entry2 = markdownEntry(context, path, basename(child.name, ".md"), {
         kind: "agent",
         root: path,
         namespace: "agents"
       });
-    } else if (child.isDirectory() && existsSync(join(dir, child.name, "agent.md"))) {
+    } else if (child.isDirectory() && existsSync2(join2(dir, child.name, "agent.md"))) {
       entry2 = markdownEntry(
         context,
-        join(dir, child.name, "agent.md"),
+        join2(dir, child.name, "agent.md"),
         child.name,
         {
           kind: "agent",
@@ -7130,9 +7271,9 @@ function agentEntries(context) {
 }
 function hookEntries(context, manifest2) {
   const declared = typeof manifest2.hooks === "string" ? manifest2.hooks : void 0;
-  const path = resolve2(context.pluginDir, declared ?? "hooks/hooks.json");
-  if (!existsSync(path)) return [];
-  const hooks = readJson(path);
+  const path = resolve3(context.pluginDir, declared ?? "hooks/hooks.json");
+  if (!existsSync2(path)) return [];
+  const hooks = readJson(path, context.pluginDir);
   if (hooks === null) {
     context.onReject?.({ path, reason: "hooks.json is not a JSON object" });
     return [];
@@ -7158,9 +7299,12 @@ function hookEntries(context, manifest2) {
   ];
 }
 function mcpEntries(context) {
-  const path = join(context.pluginDir, ".mcp.json");
-  if (!existsSync(path)) return [];
-  const config = readJson(path);
+  const filename = [".mcp.json", "mcp.json", "mcp_config.json"].find(
+    (name) => existsSync2(join2(context.pluginDir, name))
+  );
+  if (!filename) return [];
+  const path = join2(context.pluginDir, filename);
+  const config = readJson(path, context.pluginDir);
   const servers = config?.["mcpServers"];
   if (servers === null || typeof servers !== "object" || Array.isArray(servers)) {
     context.onReject?.({ path, reason: ".mcp.json has no mcpServers object" });
@@ -7179,48 +7323,24 @@ function mcpEntries(context) {
   }));
 }
 function readMarketplace(dir, onReject) {
-  const manifestPath = join(dir, ".claude-plugin", "marketplace.json");
-  if (!existsSync(manifestPath)) {
-    onReject?.({
-      path: dir,
-      reason: "no .claude-plugin/marketplace.json here"
-    });
-    return [];
-  }
-  let manifest2;
-  try {
-    manifest2 = JSON.parse(
-      readFileSync(manifestPath, "utf8")
-    );
-  } catch {
-    onReject?.({
-      path: manifestPath,
-      reason: "marketplace.json is not valid JSON"
-    });
-    return [];
-  }
-  const marketplace = manifest2.name ?? "marketplace";
+  const marketplace = readLocalMarketplace(dir, onReject);
+  if (!marketplace) return [];
   const found = [];
-  for (const plugin of manifest2.plugins ?? []) {
-    if (!plugin.name || !plugin.source) continue;
-    const pluginDir = resolve2(dir, plugin.source);
-    if (!existsSync(pluginDir)) continue;
-    const pluginManifest = readJson(
-      join(pluginDir, ".claude-plugin", "plugin.json")
-    ) ?? {};
+  for (const plugin of marketplace.plugins) {
+    const pluginManifest2 = plugin.manifest;
     const context = {
-      marketplace,
+      marketplace: marketplace.name,
       plugin: plugin.name,
-      pluginDir,
-      pluginDescription: typeof pluginManifest.description === "string" ? pluginManifest.description : void 0,
-      tier: manifest2.metadata?.tier,
+      pluginDir: plugin.directory,
+      pluginDescription: typeof pluginManifest2.description === "string" ? pluginManifest2.description : void 0,
+      tier: marketplace.tier,
       onReject
     };
     found.push(
       ...skillEntries(context),
       ...commandEntries(context),
       ...agentEntries(context),
-      ...hookEntries(context, pluginManifest),
+      ...hookEntries(context, pluginManifest2),
       ...mcpEntries(context)
     );
   }
@@ -7262,29 +7382,29 @@ function skillFiles(packageDir) {
     }
     for (const entry2 of entries) {
       if (entry2.isFile()) {
-        if (entry2.name === "SKILL.md") found.push(join2(dir, entry2.name));
+        if (entry2.name === "SKILL.md") found.push(join3(dir, entry2.name));
         continue;
       }
       if (!entry2.isDirectory()) continue;
       if (SKIPPED_DIRS.has(entry2.name)) continue;
       if (depth + 1 <= MAX_SKILL_DEPTH)
-        stack.push([join2(dir, entry2.name), depth + 1]);
+        stack.push([join3(dir, entry2.name), depth + 1]);
     }
   }
   return found.sort();
 }
 function packageDirs(root) {
-  if (!existsSync2(root)) return [];
+  if (!existsSync3(root)) return [];
   const found = [];
   for (const entry2 of readdirSync2(root, { withFileTypes: true })) {
     if (!entry2.isDirectory() && !entry2.isSymbolicLink()) continue;
     if (entry2.name === ".bin" || entry2.name === ".cache") continue;
-    const path = join2(root, entry2.name);
+    const path = join3(root, entry2.name);
     if (entry2.name.startsWith("@")) {
-      if (!existsSync2(path)) continue;
+      if (!existsSync3(path)) continue;
       for (const scoped of readdirSync2(path, { withFileTypes: true })) {
         if (scoped.isDirectory() || scoped.isSymbolicLink()) {
-          found.push(join2(path, scoped.name));
+          found.push(join3(path, scoped.name));
         }
       }
       continue;
@@ -7296,7 +7416,7 @@ function packageDirs(root) {
 function readManifest(dir) {
   try {
     const parsed = JSON.parse(
-      readFileSync2(join2(dir, "package.json"), "utf8")
+      readFileSync3(join3(dir, "package.json"), "utf8")
     );
     return parsed !== null && typeof parsed === "object" ? parsed : null;
   } catch {
@@ -7330,8 +7450,8 @@ function globDirs(base, pattern) {
     }
     const segment = segments[index];
     if (!segment.includes("*")) {
-      const next = join2(dir, segment);
-      if (existsSync2(next)) walk(next, index + 1);
+      const next = join3(dir, segment);
+      if (existsSync3(next)) walk(next, index + 1);
       return;
     }
     let entries;
@@ -7343,12 +7463,12 @@ function globDirs(base, pattern) {
     const children = entries.filter((e) => e.isDirectory() || e.isSymbolicLink()).filter((e) => !SKIPPED_DIRS.has(e.name));
     if (segment === "**") {
       walk(dir, index + 1);
-      for (const child of children) walk(join2(dir, child.name), index);
+      for (const child of children) walk(join3(dir, child.name), index);
       return;
     }
     const matcher = segmentMatcher(segment);
     for (const child of children) {
-      if (matcher.test(child.name)) walk(join2(dir, child.name), index + 1);
+      if (matcher.test(child.name)) walk(join3(dir, child.name), index + 1);
     }
   };
   walk(base, 0);
@@ -7373,7 +7493,7 @@ function workspacePackageDirs(root) {
         }
       }
     }
-    const members = [...included].filter((m) => !excluded.has(m) && existsSync2(join2(m, "package.json"))).sort();
+    const members = [...included].filter((m) => !excluded.has(m) && existsSync3(join3(m, "package.json"))).sort();
     for (const member2 of members) expand(member2);
     ordered.push(dir);
   };
@@ -7390,9 +7510,9 @@ function nameOf(dir, named2) {
 }
 function expandRootGlob(dir) {
   if (!dir.includes("*")) return [dir];
-  const absolute2 = isAbsolute(dir);
+  const absolute2 = isAbsolute2(dir);
   const base = absolute2 ? "/" : ".";
-  return globDirs(base, dir).filter((d) => existsSync2(join2(d, "package.json"))).sort();
+  return globDirs(base, dir).filter((d) => existsSync3(join3(d, "package.json"))).sort();
 }
 function readCatalog(options2) {
   const scopes = options2.scopes ?? [];
@@ -7416,7 +7536,7 @@ function readCatalog(options2) {
       seenPaths.add(path);
       let source2;
       try {
-        source2 = readFileSync2(path, "utf8");
+        source2 = readFileSync3(path, "utf8");
       } catch {
         continue;
       }
@@ -7460,7 +7580,7 @@ function readCatalog(options2) {
       }
       seen.add(entry2.name);
       if (kindOf(entry2) === "skill" && basename2(entry2.path) === "SKILL.md") {
-        const parsed = frontmatterObject(readFileSync2(entry2.path, "utf8"));
+        const parsed = frontmatterObject(readFileSync3(entry2.path, "utf8"));
         for (const problem of specProblems(
           parsed,
           basename2(dirname2(entry2.path))
@@ -7482,6 +7602,28 @@ function withoutBody({
 
 // src/commands/roots.ts
 init_config();
+
+// src/marketplace/builtin.ts
+import { existsSync as existsSync5, readFileSync as readFileSync5 } from "fs";
+import { dirname as dirname4, join as join5 } from "path";
+import { fileURLToPath } from "url";
+function publicMarketplaceRoot(start2 = dirname4(fileURLToPath(import.meta.url))) {
+  let directory = start2;
+  for (; ; ) {
+    const manifest2 = join5(directory, "package.json");
+    if (existsSync5(manifest2)) {
+      const value = JSON.parse(readFileSync5(manifest2, "utf8"));
+      if (value !== null && typeof value === "object" && "name" in value && value.name === "@modootoday/pmcp")
+        return directory;
+    }
+    const parent = dirname4(directory);
+    if (parent === directory)
+      throw new Error("Cannot locate the bundled PMCP marketplace");
+    directory = parent;
+  }
+}
+
+// src/commands/roots.ts
 var CATALOG_OPTIONS = [
   {
     name: "root",
@@ -7495,9 +7637,14 @@ var CATALOG_OPTIONS = [
     repeat: true,
     placeholder: "<prefix>"
   },
+  {
+    name: "no-builtin",
+    describe: "Exclude the bundled free PMCP marketplace.",
+    boolean: true
+  },
   {
     name: "marketplace",
-    describe: "A plugin marketplace directory (holds .claude-plugin/marketplace.json). Repeatable.",
+    describe: "An installed local Claude, Codex or Grok marketplace directory. Repeatable.",
     repeat: true,
     placeholder: "<dir>"
   },
@@ -7520,7 +7667,7 @@ var CATALOG_OPTIONS = [
   },
   {
     name: "no-config",
-    describe: "Ignore pmcp.toml; only the flags given count.",
+    describe: "Ignore pmcp.toml; CLI defaults and the given flags apply.",
     boolean: true
   }
 ];
@@ -7552,12 +7699,15 @@ function catalogOptionsFrom(context, onReject) {
   };
   const scopes = pick("scope", config.scopes);
   const marketplaces = pick("marketplace", config.marketplaces);
+  const selectedMarketplaces = [...marketplaces];
+  if (!context.args.flags.has("no-builtin") && config.builtin !== false)
+    selectedMarketplaces.push(publicMarketplaceRoot());
   const packages = pick("package", config.packages);
   const workspaces = pick("workspace", config.workspaces);
   return {
     roots: rootsFrom(context),
     ...scopes.length > 0 ? { scopes } : {},
-    ...marketplaces.length > 0 ? { marketplaces } : {},
+    ...selectedMarketplaces.length > 0 ? { marketplaces: [...new Set(selectedMarketplaces)] } : {},
     ...packages.length > 0 ? { packages } : {},
     ...workspaces.length > 0 ? { workspaces } : {},
     ...onReject ? { onReject } : {}
@@ -7629,8 +7779,8 @@ function embeddingFrom(context) {
     dtype: one(context.args, "dtype") ?? configuration.dtype,
     dimensions: dimension2 === void 0 ? configuration.dimensions : Number(dimension2),
     revision: one(context.args, "model-revision") ?? configuration.revision,
-    modelPath: modelPath === void 0 ? configuration.modelPath : resolve4(context.cwd, modelPath),
-    cacheDir: cacheDir === void 0 ? configuration.cacheDir : resolve4(context.cwd, cacheDir),
+    modelPath: modelPath === void 0 ? configuration.modelPath : resolve5(context.cwd, modelPath),
+    cacheDir: cacheDir === void 0 ? configuration.cacheDir : resolve5(context.cwd, cacheDir),
     encoder: {
       ...configuration.encoder,
       ...queryPrefix === void 0 ? {} : { queryPrefix },
@@ -7691,7 +7841,7 @@ var indexCommand = {
     );
     const force = context.args.flags.has("force");
     if (dryRun) {
-      const existing = existsSync4(path) ? await openEntryVectors(path, { readOnly: true }) : null;
+      const existing = existsSync6(path) ? await openEntryVectors(path, { readOnly: true }) : null;
       try {
         const pending = !force && existing ? existing.stale(selected.indexKey, descriptions) : [...descriptions.keys()];
         for (const name of pending) context.ui.line(`  would encode ${name}`);
@@ -7713,7 +7863,7 @@ var indexCommand = {
       context.ui.info("ranking stays lexical until then, which is the default");
       return 3;
     }
-    mkdirSync(dirname4(path), { recursive: true });
+    mkdirSync(dirname5(path), { recursive: true });
     const store = await openEntryVectors(path);
     if (store === null) {
       context.ui.error(
@@ -7910,7 +8060,7 @@ function registerSkillPrompts(server, tools) {
 }
 
 // src/resources.ts
-import { statSync as statSync4 } from "fs";
+import { statSync as statSync5 } from "fs";
 import {
   ResourceNotFoundError,
   ResourceTemplate
@@ -7918,8 +8068,8 @@ import {
 
 // src/files/list.ts
 import { createHash as createHash2 } from "crypto";
-import { readFileSync as readFileSync4, readdirSync as readdirSync3, statSync } from "fs";
-import { basename as basename4, join as join4, relative as relative2, sep } from "path";
+import { readFileSync as readFileSync6, readdirSync as readdirSync3, statSync as statSync2 } from "fs";
+import { basename as basename4, join as join6, relative as relative3, sep as sep2 } from "path";
 
 // src/files/redact.ts
 import { basename as basename3 } from "path";
@@ -7956,11 +8106,11 @@ function servedBytes(path, raw) {
 var FILE_LIST_LIMIT = 200;
 var sha256 = (bytes) => createHash2("sha256").update(bytes).digest("hex");
 function describe(path, full) {
-  const bytes = servedBytes(full, readFileSync4(full));
+  const bytes = servedBytes(full, readFileSync6(full));
   return { path, bytes: bytes.length, sha256: sha256(bytes) };
 }
 function listSkillFiles(root, limit = FILE_LIST_LIMIT) {
-  if (statSync(root).isFile()) {
+  if (statSync2(root).isFile()) {
     return { files: [describe(basename4(root), root)], truncated: false };
   }
   const files = [];
@@ -7969,14 +8119,14 @@ function listSkillFiles(root, limit = FILE_LIST_LIMIT) {
     const dir = stack.pop();
     for (const entry2 of readdirSync3(dir, { withFileTypes: true })) {
       if (entry2.name === "node_modules" || entry2.name === ".git") continue;
-      const full = join4(dir, entry2.name);
+      const full = join6(dir, entry2.name);
       if (entry2.isDirectory()) {
         stack.push(full);
         continue;
       }
       if (!entry2.isFile()) continue;
       if (files.length >= limit) return { files, truncated: true };
-      files.push(describe(relative2(root, full).split(sep).join("/"), full));
+      files.push(describe(relative3(root, full).split(sep2).join("/"), full));
     }
   }
   files.sort((a, b) => a.path.localeCompare(b.path));
@@ -7984,7 +8134,7 @@ function listSkillFiles(root, limit = FILE_LIST_LIMIT) {
 }
 
 // src/files/read.ts
-import { readFileSync as readFileSync5, statSync as statSync3 } from "fs";
+import { readFileSync as readFileSync7, statSync as statSync4 } from "fs";
 
 // src/mime.ts
 var TYPES = {
@@ -8090,31 +8240,31 @@ function classify(path, bytes) {
 }
 
 // src/files/resolve.ts
-import { realpathSync, statSync as statSync2 } from "fs";
-import { dirname as dirname5, isAbsolute as isAbsolute2, relative as relative3, resolve as resolve5, sep as sep2 } from "path";
-var ownFile = (entry2) => relative3(assetRoot(entry2), entry2.path).split(sep2).join("/");
+import { realpathSync as realpathSync2, statSync as statSync3 } from "fs";
+import { dirname as dirname6, isAbsolute as isAbsolute3, relative as relative4, resolve as resolve6, sep as sep3 } from "path";
+var ownFile = (entry2) => relative4(assetRoot(entry2), entry2.path).split(sep3).join("/");
 function resolveSkillFile(entry2, wanted = ownFile(entry2)) {
-  if (isAbsolute2(wanted) || wanted.split(/[\\/]/u).includes("..")) {
+  if (isAbsolute3(wanted) || wanted.split(/[\\/]/u).includes("..")) {
     return { ok: false, error: "path_outside_skill", detail: wanted };
   }
-  const scope = realpathSync(assetRoot(entry2));
-  const single = statSync2(scope).isFile();
-  const root = single ? dirname5(scope) : scope;
+  const scope = realpathSync2(assetRoot(entry2));
+  const single = statSync3(scope).isFile();
+  const root = single ? dirname6(scope) : scope;
   let target2;
   try {
-    target2 = realpathSync(
-      single && wanted === "" ? scope : resolve5(root, wanted)
+    target2 = realpathSync2(
+      single && wanted === "" ? scope : resolve6(root, wanted)
     );
   } catch {
     return { ok: false, error: "no_such_file", detail: wanted };
   }
-  const inside = single ? target2 === scope : target2 === root || target2.startsWith(root + sep2);
+  const inside = single ? target2 === scope : target2 === root || target2.startsWith(root + sep3);
   if (!inside)
     return { ok: false, error: "path_outside_skill", detail: wanted };
   return {
     ok: true,
     target: target2,
-    path: relative3(root, target2).split(sep2).join("/")
+    path: relative4(root, target2).split(sep3).join("/")
   };
 }
 
@@ -8123,7 +8273,7 @@ var READ_BUDGET_BYTES = 256 * 1024;
 function readSkillFile(entry2, wanted, budget = READ_BUDGET_BYTES) {
   const resolved = resolveSkillFile(entry2, wanted);
   if (!resolved.ok) return resolved;
-  const size = statSync3(resolved.target).size;
+  const size = statSync4(resolved.target).size;
   if (size > budget) {
     return {
       ok: false,
@@ -8131,7 +8281,7 @@ function readSkillFile(entry2, wanted, budget = READ_BUDGET_BYTES) {
       detail: `${size} bytes > ${budget}`
     };
   }
-  const bytes = servedBytes(resolved.target, readFileSync5(resolved.target));
+  const bytes = servedBytes(resolved.target, readFileSync7(resolved.target));
   const { kind: kind2, mimeType } = classify(resolved.path, bytes);
   return {
     ok: true,
@@ -8171,7 +8321,7 @@ function listing(entries) {
     name: entry2.name,
     description: entry2.description,
     mimeType: "text/markdown",
-    size: statSync4(entry2.path).size
+    size: statSync5(entry2.path).size
   }));
 }
 function complete(value, entries) {
@@ -8208,7 +8358,7 @@ function registerSkillResources(server, skills) {
 }
 
 // src/server.ts
-import { readFileSync as readFileSync7 } from "fs";
+import { readFileSync as readFileSync9 } from "fs";
 
 // src/find.ts
 import { createHash as createHash3 } from "crypto";
@@ -8297,11 +8447,11 @@ function rank(matches2, limit) {
 }
 
 // src/files/bundle.ts
-import { readFileSync as readFileSync6, statSync as statSync5 } from "fs";
-import { dirname as dirname6, join as join5 } from "path";
+import { readFileSync as readFileSync8, statSync as statSync6 } from "fs";
+import { dirname as dirname7, join as join7 } from "path";
 function bundleSkill(entry2) {
   const root = assetRoot(entry2);
-  const base = statSync5(root).isFile() ? dirname6(root) : root;
+  const base = statSync6(root).isFile() ? dirname7(root) : root;
   const listing2 = listSkillFiles(root);
   return {
     name: entry2.name,
@@ -8309,7 +8459,7 @@ function bundleSkill(entry2) {
     files: listing2.files.map((file2) => ({
       ...file2,
       uri: skillFileUri(entry2, file2.path),
-      mimeType: classify(file2.path, readFileSync6(join5(base, file2.path))).mimeType
+      mimeType: classify(file2.path, readFileSync8(join7(base, file2.path))).mimeType
     }))
   };
 }
@@ -8476,7 +8626,7 @@ function createSkillTools(options2) {
     describe(name) {
       const entry2 = byName(name);
       if (!entry2) return null;
-      const source2 = readFileSync7(entry2.path, "utf8");
+      const source2 = readFileSync9(entry2.path, "utf8");
       const listing2 = listSkillFiles(assetRoot(entry2));
       return {
         name: entry2.name,
@@ -8513,7 +8663,7 @@ function createSkillTools(options2) {
       return {
         name: entry2.name,
         body: readBody(
-          servedBytes(entry2.path, readFileSync7(entry2.path)).toString("utf8")
+          servedBytes(entry2.path, readFileSync9(entry2.path)).toString("utf8")
         ),
         files: bundle.files.filter((file2) => file2.path !== own),
         filesTruncated: bundle.truncated
@@ -8533,17 +8683,17 @@ function createSkillTools(options2) {
 
 // src/extension/entry.ts
 import { createHash as createHash4 } from "crypto";
-import { readFileSync as readFileSync8, readdirSync as readdirSync4, statSync as statSync6 } from "fs";
-import { basename as basename5, dirname as dirname7, join as join6, relative as relative4, sep as sep3 } from "path";
+import { readFileSync as readFileSync10, readdirSync as readdirSync4, statSync as statSync7 } from "fs";
+import { basename as basename5, dirname as dirname8, join as join8, relative as relative5, sep as sep4 } from "path";
 var MAX_RESOURCES = 512;
 var MAX_SKILL_BYTES = 16 * 1024 * 1024;
 var digests = /* @__PURE__ */ new Map();
 function facts(path) {
-  const stat = statSync6(path);
+  const stat = statSync7(path);
   const key = `${stat.mtimeMs}:${stat.size}`;
   const cached = digests.get(path);
   if (cached?.key === key) return cached;
-  const bytes = servedBytes(path, readFileSync8(path));
+  const bytes = servedBytes(path, readFileSync10(path));
   const digest2 = `sha256:${createHash4("sha256").update(bytes).digest("hex")}`;
   const fresh = { key, digest: digest2, size: bytes.length };
   digests.set(path, fresh);
@@ -8556,7 +8706,7 @@ function filesUnder(root) {
     const dir = stack.pop();
     for (const entry2 of readdirSync4(dir, { withFileTypes: true })) {
       if (entry2.name === "node_modules" || entry2.name === ".git") continue;
-      const full = join6(dir, entry2.name);
+      const full = join8(dir, entry2.name);
       if (entry2.isDirectory()) stack.push(full);
       else if (entry2.isFile()) found.push(full);
       if (found.length > MAX_RESOURCES) return null;
@@ -8567,8 +8717,8 @@ function filesUnder(root) {
 function extensionEntry(entry2) {
   if (kindOf(entry2) !== "skill" || basename5(entry2.path) !== "SKILL.md")
     return null;
-  const frontmatter = frontmatterObject(readFileSync8(entry2.path, "utf8"));
-  const root = dirname7(entry2.path);
+  const frontmatter = frontmatterObject(readFileSync10(entry2.path, "utf8"));
+  const root = dirname8(entry2.path);
   if (specProblems(frontmatter, basename5(root)).length > 0) return null;
   if (frontmatter?.["name"] !== entry2.slug) return null;
   const files = filesUnder(root);
@@ -8577,7 +8727,7 @@ function extensionEntry(entry2) {
   const resources = files.map((path) => {
     const fact = facts(path);
     total += fact.size;
-    const file2 = relative4(root, path).split(sep3).join("/");
+    const file2 = relative5(root, path).split(sep4).join("/");
     return {
       uri: skillFileUri(entry2, file2),
       digest: fact.digest,
@@ -9013,7 +9163,7 @@ function registerMailboxTools(server, service) {
 
 // src/mcp.ts
 var SERVER_NAME = "pmcp";
-var SERVER_VERSION = "0.13.1";
+var SERVER_VERSION = "0.14.1";
 function registerSkillTools(server, tools) {
   registerCatalogTool(server, tools);
   registerFindTool(server, tools);
@@ -9142,7 +9292,7 @@ async function serveWithMailbox(catalog, mailbox, serving = {}) {
 init_config2();
 
 // src/search.ts
-import { existsSync as existsSync7 } from "fs";
+import { existsSync as existsSync9 } from "fs";
 init_encoder();
 async function prepareSearch(catalog, options2) {
   const lexical = (reason) => ({
@@ -9150,7 +9300,7 @@ async function prepareSearch(catalog, options2) {
     reason,
     options: {}
   });
-  if (!existsSync7(options2.indexPath)) return lexical("index_missing");
+  if (!existsSync9(options2.indexPath)) return lexical("index_missing");
   let store;
   try {
     store = await openEntryVectors(options2.indexPath, { readOnly: true });
@@ -9301,16 +9451,16 @@ import {
   fchmodSync,
   mkdirSync as mkdirSync4,
   openSync as openSync2,
-  readFileSync as readFileSync10,
+  readFileSync as readFileSync12,
   rmSync as rmSync2,
   writeSync
 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join8 } from "path";
+import { join as join10 } from "path";
 var DEVICE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
 function globalDir(home = homedir2(), env = process.env) {
   const xdg = env["XDG_CONFIG_HOME"];
-  return xdg !== void 0 && xdg !== "" ? join8(xdg, "pmcp") : join8(home, ".pmcp");
+  return xdg !== void 0 && xdg !== "" ? join10(xdg, "pmcp") : join10(home, ".pmcp");
 }
 var form = (fields) => new URLSearchParams(fields).toString();
 var FORM_HEADERS = { "content-type": "application/x-www-form-urlencoded" };
@@ -9420,10 +9570,10 @@ async function pollOnce(metadata2, request3, fetcher2, now = Date.now) {
       return { kind: "denied" };
   }
 }
-var sessionPath = (home) => join8(globalDir(home), "session.json");
+var sessionPath = (home) => join10(globalDir(home), "session.json");
 function readSession(home) {
   try {
-    return JSON.parse(readFileSync10(sessionPath(home), "utf8"));
+    return JSON.parse(readFileSync12(sessionPath(home), "utf8"));
   } catch {
     return null;
   }
@@ -9477,7 +9627,7 @@ var DEFAULT_RESOURCE = "https://api.pmcp.build";
 var DEFAULT_SCOPE = "pmcp:catalog:read pmcp:distribution:read";
 var fetcher = (url, init) => fetch(url, init);
 var setting = (env, name, fallback) => env[name] ?? fallback;
-var wait = (ms) => new Promise((resolve19) => setTimeout(resolve19, ms));
+var wait = (ms) => new Promise((resolve22) => setTimeout(resolve22, ms));
 var loginCommand = {
   name: "login",
   describe: "Sign in on this machine, to obtain skills this project lacks",
@@ -9645,29 +9795,41 @@ function sayStanding(context, line) {
 }
 
 // src/installed.ts
-import { readFileSync as readFileSync11 } from "fs";
-import { dirname as dirname10, join as join9, resolve as resolve7 } from "path";
-function object(value) {
+import { existsSync as existsSync10, readFileSync as readFileSync13 } from "fs";
+import { dirname as dirname11, join as join11, resolve as resolve8 } from "path";
+function object2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function absent(error) {
-  return object(error) && (error.code === "ENOENT" || error.code === "ENOTDIR");
+  return object2(error) && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
 function packageName(name) {
   return /^(?:@[a-z0-9._-]+\/)?[a-z0-9][a-z0-9._-]*$/u.test(name);
 }
+function installedPackageDirectory(project2, name) {
+  if (!packageName(name)) throw new Error("Invalid installed package name");
+  let directory = resolve8(project2);
+  for (; ; ) {
+    const candidate2 = join11(directory, "node_modules", name);
+    if (existsSync10(join11(candidate2, "package.json"))) return candidate2;
+    const parent = dirname11(directory);
+    if (parent === directory)
+      throw new Error("Installed package manifest was not found");
+    directory = parent;
+  }
+}
 function locate(name, project2) {
   let directory = project2;
   for (; ; ) {
     let source2;
     try {
-      source2 = readFileSync11(
-        join9(directory, "node_modules", name, "package.json"),
+      source2 = readFileSync13(
+        join11(directory, "node_modules", name, "package.json"),
         "utf8"
       );
     } catch (error) {
       if (!absent(error)) return { name, reason: "unreadable_manifest" };
-      const parent = dirname10(directory);
+      const parent = dirname11(directory);
       if (parent === directory) return { name, reason: "not_installed" };
       directory = parent;
       continue;
@@ -9678,7 +9840,7 @@ function locate(name, project2) {
     } catch {
       return { name, reason: "invalid_manifest" };
     }
-    if (!object(manifest2) || typeof manifest2.name !== "string" || !packageName(manifest2.name) || typeof manifest2.version !== "string" || manifest2.version.trim() === "") {
+    if (!object2(manifest2) || typeof manifest2.name !== "string" || !packageName(manifest2.name) || typeof manifest2.version !== "string" || manifest2.version.trim() === "") {
       return { name, reason: "invalid_manifest" };
     }
     return {
@@ -9689,11 +9851,11 @@ function locate(name, project2) {
   }
 }
 function readInstalledDependencies(projectDirectory) {
-  const project2 = resolve7(projectDirectory);
+  const project2 = resolve8(projectDirectory);
   const manifest2 = JSON.parse(
-    readFileSync11(join9(project2, "package.json"), "utf8")
+    readFileSync13(join11(project2, "package.json"), "utf8")
   );
-  if (!object(manifest2))
+  if (!object2(manifest2))
     throw new Error("project package.json must contain an object");
   const names = /* @__PURE__ */ new Set();
   for (const field of [
@@ -9704,7 +9866,7 @@ function readInstalledDependencies(projectDirectory) {
   ]) {
     const declared = manifest2[field];
     if (declared === void 0) continue;
-    if (!object(declared)) throw new Error(`${field} must contain an object`);
+    if (!object2(declared)) throw new Error(`${field} must contain an object`);
     for (const [name, range] of Object.entries(declared)) {
       if (!packageName(name) || typeof range !== "string") {
         throw new Error(`invalid dependency declaration in ${field}`);
@@ -9724,8 +9886,8 @@ function readInstalledDependencies(projectDirectory) {
 
 // src/install/plan.ts
 import { createHash as createHash7 } from "crypto";
-import { existsSync as existsSync8, readFileSync as readFileSync12 } from "fs";
-import { dirname as dirname11, join as join10, relative as relative5, resolve as resolve8, sep as sep4 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync14 } from "fs";
+import { dirname as dirname12, join as join12, relative as relative6, resolve as resolve9, sep as sep5 } from "path";
 import semver from "semver";
 function matchingSkills(catalog, inventory) {
   const matches2 = [];
@@ -9759,7 +9921,7 @@ function fingerprint(files) {
   for (const file2 of files) {
     hash2.update(file2).update("\0");
     try {
-      hash2.update(readFileSync12(file2));
+      hash2.update(readFileSync14(file2));
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
       hash2.update("absent");
@@ -9770,32 +9932,32 @@ function fingerprint(files) {
 }
 function manifestAt(directory) {
   const value = JSON.parse(
-    readFileSync12(join10(directory, "package.json"), "utf8")
+    readFileSync14(join12(directory, "package.json"), "utf8")
   );
   if (!value || typeof value !== "object" || Array.isArray(value))
     throw new Error("invalid project manifest");
   return value;
 }
 function installContext(directory) {
-  const project2 = resolve8(directory);
+  const project2 = resolve9(directory);
   const manifest2 = manifestAt(project2);
   let root = project2;
   let ancestor = project2;
   for (; ; ) {
-    if (ancestor !== project2 && existsSync8(join10(ancestor, "package.json"))) {
+    if (ancestor !== project2 && existsSync11(join12(ancestor, "package.json"))) {
       const candidate2 = manifestAt(ancestor);
       if (candidate2.workspaces !== void 0) {
         root = ancestor;
         break;
       }
-      if (LOCKS.some((file2) => existsSync8(join10(ancestor, file2)))) break;
+      if (LOCKS.some((file2) => existsSync11(join12(ancestor, file2)))) break;
     }
-    if (existsSync8(join10(ancestor, ".git")) || dirname11(ancestor) === ancestor)
+    if (existsSync11(join12(ancestor, ".git")) || dirname12(ancestor) === ancestor)
       break;
-    ancestor = dirname11(ancestor);
+    ancestor = dirname12(ancestor);
   }
   const owner = manifestAt(root);
-  const lockNames = LOCKS.filter((file2) => existsSync8(join10(root, file2)));
+  const lockNames = LOCKS.filter((file2) => existsSync11(join12(root, file2)));
   const lockManagers = new Set(
     lockNames.map((file2) => {
       if (file2.startsWith("bun.")) return "bun";
@@ -9819,16 +9981,16 @@ function installContext(directory) {
     throw new Error(
       "declare packageManager or install project dependencies first"
     );
-  if (root !== project2 && LOCKS.some((file2) => existsSync8(join10(project2, file2)))) {
+  if (root !== project2 && LOCKS.some((file2) => existsSync11(join12(project2, file2)))) {
     throw new Error(
       "nested project has its own lockfile; resolve the workspace boundary first"
     );
   }
   const files = [
     .../* @__PURE__ */ new Set([
-      join10(root, "package.json"),
-      join10(project2, "package.json"),
-      ...LOCKS.map((file2) => join10(root, file2))
+      join12(root, "package.json"),
+      join12(project2, "package.json"),
+      ...LOCKS.map((file2) => join12(root, file2))
     ])
   ];
   return {
@@ -9916,7 +10078,7 @@ function planInstall(options2) {
     ];
     if (context.project !== context.root)
       args.push(
-        `--workspace=${relative5(context.root, context.project).split(sep4).join("/")}`
+        `--workspace=${relative6(context.root, context.project).split(sep5).join("/")}`
       );
   } else {
     args = ["add", "--dev", "--exact", "--ignore-scripts"];
@@ -9936,16 +10098,17 @@ function planInstall(options2) {
 }
 
 // src/commands/remote-options.ts
-import { resolve as resolve9 } from "path";
+import { join as join14, resolve as resolve10 } from "path";
+import { readFileSync as readFileSync17 } from "fs";
 
 // src/remote/catalog.ts
-import { readFileSync as readFileSync14, statSync as statSync7 } from "fs";
+import { readFileSync as readFileSync16, statSync as statSync8 } from "fs";
 import semver2 from "semver";
 import { z as z13 } from "zod";
 
 // src/remote/catalog-cache.ts
-import { mkdirSync as mkdirSync5, readFileSync as readFileSync13, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "fs";
-import { join as join11 } from "path";
+import { mkdirSync as mkdirSync5, readFileSync as readFileSync15, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join13 } from "path";
 var MAX_CACHE_BYTES = 8 * 1024 * 1024;
 function memoryCatalogCache() {
   const held = /* @__PURE__ */ new Map();
@@ -9957,11 +10120,11 @@ function memoryCatalogCache() {
   };
 }
 function fileCatalogCache(dir) {
-  const path = join11(dir, "catalog-cache.json");
+  const path = join13(dir, "catalog-cache.json");
   return {
     read(origin) {
       try {
-        const raw = readFileSync13(path, "utf8");
+        const raw = readFileSync15(path, "utf8");
         if (raw.length > MAX_CACHE_BYTES) return null;
         const held = JSON.parse(raw);
         if (typeof held !== "object" || held === null) return null;
@@ -10081,10 +10244,10 @@ function catalogEndpoint(origin) {
   return new URL("/v1/catalog", url).href;
 }
 function readCatalogFile(path) {
-  const stat = statSync7(path);
+  const stat = statSync8(path);
   if (!stat.isFile() || stat.size > MAX_CATALOG_BYTES)
     throw new Error("catalog file exceeds the supported size");
-  const bytes = readFileSync14(path);
+  const bytes = readFileSync16(path);
   if (bytes.byteLength > MAX_CATALOG_BYTES)
     throw new Error("catalog file exceeds the supported size");
   return parseCatalog(JSON.parse(bytes.toString("utf8")));
@@ -10155,6 +10318,11 @@ async function request(origin, fetcher2, held, cache) {
 
 // src/commands/remote-options.ts
 var REMOTE_OPTIONS = [
+  {
+    name: "provider",
+    describe: "Public free catalog (default) or explicitly hosted service.",
+    placeholder: "<public|hosted>"
+  },
   {
     name: "project",
     describe: "Project directory containing package.json.",
@@ -10168,18 +10336,41 @@ var REMOTE_OPTIONS = [
   },
   { name: "json", describe: "Print machine-readable results.", boolean: true }
 ];
+function catalogProvider(context) {
+  const given = one(context.args, "provider");
+  if (given !== void 0 && given !== "public" && given !== "hosted")
+    throw new ArgumentError("Choose --provider public or hosted");
+  const givenApi = one(context.args, "api");
+  const api2 = givenApi ?? context.env.PMCP_API_ORIGIN;
+  if (given === "public" && givenApi)
+    throw new ArgumentError(
+      "The public provider does not accept a hosted API origin"
+    );
+  return given ?? (api2 ? "hosted" : "public");
+}
 function projectFrom(context) {
-  return resolve9(context.cwd, one(context.args, "project") ?? ".");
+  return resolve10(context.cwd, one(context.args, "project") ?? ".");
 }
 function apiOrigin(context) {
   return one(context.args, "api") ?? context.env["PMCP_API_ORIGIN"] ?? DEFAULT_API_ORIGIN;
 }
 async function remoteCatalog(context) {
+  const provider = catalogProvider(context);
   const file2 = one(context.args, "catalog");
   if (file2) {
     if (one(context.args, "api"))
       throw new Error("choose --catalog or --api, not both");
-    return readCatalogFile(resolve9(context.cwd, file2));
+    return readCatalogFile(resolve10(context.cwd, file2));
+  }
+  if (provider === "public") {
+    const catalog = JSON.parse(
+      readFileSync17(join14(publicMarketplaceRoot(), "docs/catalog.json"), "utf8")
+    );
+    return parseCatalog({
+      schemaVersion: 1,
+      requestId: "bundled-public",
+      catalog
+    });
   }
   return fetchCatalog(apiOrigin(context), fetch, fileCatalogCache(globalDir()));
 }
@@ -10222,7 +10413,7 @@ var availableCommand = {
       if (matches2.length > 0) {
         context.ui.info(
           "preview",
-          `${invocation()} preview <package> shows a full example before you subscribe`
+          `${invocation()} preview <package> shows the contents and a complete example`
         );
       }
       for (const issue of inventory.issues)
@@ -10235,7 +10426,7 @@ var availableCommand = {
 // src/commands/preview.ts
 var previewCommand = {
   name: "preview",
-  describe: "Show what a skill contains before subscribing",
+  describe: "Show a skill's contents and a complete example",
   usage: "pmcp preview <skill-package> [--json]",
   options: REMOTE_OPTIONS,
   async run(context) {
@@ -10260,8 +10451,6 @@ var previewCommand = {
             summary: entry2.summary,
             package: `${entry2.delivery.packageName}@${entry2.delivery.version}`,
             evidence: entry2.evidence,
-            // A script deciding on our behalf needs the recall as much as a
-            // person does, and more so: it will not read the prose.
             line: entry2.line,
             targets: entry2.targets,
             preview: entry2.preview
@@ -10374,11 +10563,11 @@ function applyInstallPlan(plan2, runner = packageManagerRunner) {
   if (fingerprint(plan2.context.files) !== plan2.context.fingerprint)
     throw new Error("project changed after planning; create a new plan");
   for (const entry2 of plan2.changes) {
-    const integrity = runner.integrity(
+    const integrity2 = runner.integrity(
       `${entry2.packageName}@${entry2.version}`,
       plan2
     );
-    if (integrity !== entry2.integrity)
+    if (integrity2 !== entry2.integrity)
       throw new Error(
         "registry integrity differs from the catalog; nothing was installed"
       );
@@ -10403,8 +10592,8 @@ function applyInstallPlan(plan2, runner = packageManagerRunner) {
 
 // src/install/verify-content.ts
 import { createHash as createHash8 } from "crypto";
-import { readdirSync as readdirSync5, readFileSync as readFileSync15, statSync as statSync8 } from "fs";
-import { join as join12, relative as relative6, resolve as resolve10, sep as sep5 } from "path";
+import { readdirSync as readdirSync5, readFileSync as readFileSync18, statSync as statSync9 } from "fs";
+import { join as join15, relative as relative7, resolve as resolve11, sep as sep6 } from "path";
 var SKILL = "SKILL.md";
 var SKIP = /* @__PURE__ */ new Set(["node_modules", ".git", ".cache"]);
 function skillFiles2(root) {
@@ -10418,18 +10607,18 @@ function skillFiles2(root) {
     }
     for (const name of entries) {
       if (SKIP.has(name)) continue;
-      const path = join12(dir, name);
+      const path = join15(dir, name);
       let stats;
       try {
-        stats = statSync8(path);
+        stats = statSync9(path);
       } catch {
         continue;
       }
       if (stats.isDirectory()) walk(path);
       else if (name === SKILL)
         found.set(
-          relative6(root, path).split(sep5).join("/"),
-          readFileSync15(path, "utf8")
+          relative7(root, path).split(sep6).join("/"),
+          readFileSync18(path, "utf8")
         );
     }
   };
@@ -10445,7 +10634,12 @@ function contentDigest(files) {
   return `sha256:${hash2.digest("hex")}`;
 }
 function verifyInstalledContent(project2, packageName2, expected) {
-  const root = resolve10(project2, "node_modules", ...packageName2.split("/"));
+  let root = resolve11(project2, "node_modules", ...packageName2.split("/"));
+  try {
+    root = installedPackageDirectory(project2, packageName2);
+  } catch {
+    root = resolve11(project2, "node_modules", ...packageName2.split("/"));
+  }
   const files = skillFiles2(root);
   const actual = contentDigest(files);
   return {
@@ -10457,10 +10651,199 @@ function verifyInstalledContent(project2, packageName2, expected) {
   };
 }
 
+// src/install/public.ts
+import { lstatSync, readFileSync as readFileSync19, readdirSync as readdirSync6 } from "fs";
+import { join as join16 } from "path";
+
+// src/install/archive.ts
+import { createHash as createHash9 } from "crypto";
+import { gzipSync, gunzipSync } from "zlib";
+var maximumSize = 32 * 1024 * 1024;
+function integrity(bytes) {
+  return `sha512-${createHash9("sha512").update(bytes).digest("base64")}`;
+}
+function safePath(path) {
+  if (!/^package\//u.test(path) || path.includes("\\") || path.split("/").some((part) => !part || part === "." || part === ".."))
+    throw new Error("Unsafe archive path");
+}
+function readArchive(bytes) {
+  const tar = gunzipSync(bytes, { maxOutputLength: maximumSize });
+  const files = /* @__PURE__ */ new Map();
+  let offset = 0;
+  while (offset + 512 <= tar.length) {
+    const header = tar.subarray(offset, offset + 512);
+    if (header.every((value) => value === 0)) break;
+    const string = (start2, length) => header.subarray(start2, start2 + length).toString("utf8").replace(/\0.*$/su, "");
+    const name = string(0, 100);
+    const prefix = string(345, 155);
+    const path = prefix ? `${prefix}/${name}` : name;
+    safePath(path);
+    if (header[156] !== 0 && header[156] !== 48)
+      throw new Error("Archive contains a non-regular file");
+    const expected = Number.parseInt(string(148, 8).trim(), 8);
+    const actual = header.reduce(
+      (sum, byte, index) => sum + (index >= 148 && index < 156 ? 32 : byte),
+      0
+    );
+    if (expected !== actual)
+      throw new Error("Archive header checksum mismatch");
+    const size = Number.parseInt(string(124, 12).trim(), 8);
+    if (!Number.isSafeInteger(size) || size < 0 || offset + 512 + size > tar.length)
+      throw new Error("Archive member is truncated");
+    if (files.has(path)) throw new Error("Archive contains duplicate members");
+    files.set(path, tar.subarray(offset + 512, offset + 512 + size));
+    offset += 512 + Math.ceil(size / 512) * 512;
+  }
+  if (!files.size) throw new Error("Archive contains no files");
+  return files;
+}
+
+// src/install/public.ts
+var MAX_ARCHIVE_BYTES = 8 * 1024 * 1024;
+function publicArchiveUrl(entry2) {
+  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/u.test(entry2.productId) || entry2.line === void 0)
+    throw new Error(
+      "The public catalog requires a product identifier and major line"
+    );
+  return `https://pmcp.build/skills/${entry2.productId}/${entry2.line.major}/releases/${entry2.delivery.version}.tgz`;
+}
+function publicEntry(catalog, change) {
+  const entry2 = catalog.entries.find(
+    (item) => item.delivery.packageName === change.packageName && item.delivery.version === change.version
+  );
+  if (!entry2 || entry2.delivery.integrity !== change.integrity)
+    throw new Error("The public delivery is absent from the catalog");
+  return entry2;
+}
+function publicInstallPlan(plan2, catalog) {
+  const specs = new Map(
+    plan2.changes.map((change) => [
+      `${change.packageName}@${change.version}`,
+      `${change.packageName}@${publicArchiveUrl(publicEntry(catalog, change))}`
+    ])
+  );
+  return {
+    ...plan2,
+    command: {
+      ...plan2.command,
+      args: plan2.command.args.map(
+        (argument) => specs.get(argument) ?? argument
+      )
+    }
+  };
+}
+function publicArchiveFiles(entry2, bytes) {
+  if (bytes.length > MAX_ARCHIVE_BYTES || integrity(bytes) !== entry2.delivery.integrity)
+    throw new Error("Public archive integrity differs from the catalog");
+  const files = readArchive(bytes);
+  const manifest2 = JSON.parse(
+    files.get("package/package.json")?.toString("utf8") ?? "null"
+  );
+  if (!manifest2 || typeof manifest2 !== "object" || Array.isArray(manifest2))
+    throw new Error("Public archive has no package manifest");
+  const metadata2 = manifest2;
+  if (metadata2.name !== entry2.delivery.packageName || metadata2.version !== entry2.delivery.version)
+    throw new Error("Public archive identity differs from the catalog");
+  for (const key of [
+    "scripts",
+    "dependencies",
+    "optionalDependencies",
+    "peerDependencies",
+    "bundledDependencies",
+    "bundleDependencies",
+    "bin",
+    "workspaces"
+  ])
+    if (metadata2[key] !== void 0)
+      throw new Error("Public skill packages must be content-only");
+  const skills = /* @__PURE__ */ new Map();
+  if (!files.has("package/LICENSE"))
+    throw new Error("Public skill packages must include their license");
+  for (const [path, content] of files) {
+    if (path === "package/package.json" || path === "package/LICENSE") continue;
+    if (!/^package\/skills\/[a-z0-9]+(?:-[a-z0-9]+)*\/(?:SKILL\.md|references\/.+)$/u.test(
+      path
+    ))
+      throw new Error("Public archive contains an unexpected resource");
+    if (path.endsWith("/SKILL.md"))
+      skills.set(path.slice("package/".length), content.toString("utf8"));
+  }
+  if (skills.size !== 1 || contentDigest(skills) !== entry2.contentDigest)
+    throw new Error("Public skill content differs from the catalog");
+  return files;
+}
+async function downloadArchive(url, fetcher2) {
+  const response = await fetcher2(url, {
+    redirect: "error",
+    signal: AbortSignal.timeout(15e3)
+  });
+  if (!response.ok || !response.body)
+    throw new Error(`Public archive request failed (${response.status})`);
+  const reader = response.body.getReader();
+  const chunks = [];
+  let size = 0;
+  try {
+    for (; ; ) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      size += value.byteLength;
+      if (size > MAX_ARCHIVE_BYTES)
+        throw new Error("Public archive exceeds the download budget");
+      chunks.push(value);
+    }
+  } finally {
+    await reader.cancel().catch(() => void 0);
+    reader.releaseLock();
+  }
+  return Buffer.concat(chunks);
+}
+async function preparePublicDelivery(plan2, catalog, fetcher2 = fetch) {
+  const verified = /* @__PURE__ */ new Map();
+  const resources = /* @__PURE__ */ new Map();
+  for (const change of plan2.changes) {
+    const entry2 = publicEntry(catalog, change);
+    const url = publicArchiveUrl(entry2);
+    const bytes = await downloadArchive(url, fetcher2);
+    resources.set(change.packageName, publicArchiveFiles(entry2, bytes));
+    const identity = `${change.packageName}@${change.version}`;
+    verified.set(identity, integrity(bytes));
+  }
+  return { integrity: verified, resources };
+}
+function verifyPublicDelivery(project2, delivery) {
+  for (const [name, files] of delivery.resources) {
+    const root = installedPackageDirectory(project2, name);
+    const expected = new Set(
+      [...files.keys()].map((path) => path.slice("package/".length))
+    );
+    const walk = (directory, prefix = "") => {
+      for (const entry2 of readdirSync6(directory, { withFileTypes: true })) {
+        const path = prefix ? `${prefix}/${entry2.name}` : entry2.name;
+        if (entry2.isDirectory()) {
+          walk(join16(directory, entry2.name), path);
+          continue;
+        }
+        if (!entry2.isFile() || !expected.has(path))
+          throw new Error(
+            "Installed public package contains unexpected resources"
+          );
+      }
+    };
+    walk(root);
+    for (const [path, bytes] of files) {
+      const destination = join16(root, path.slice("package/".length));
+      if (!lstatSync(destination).isFile() || !readFileSync19(destination).equals(bytes))
+        throw new Error(
+          "Installed public package differs from its verified archive; inspect the project before retrying"
+        );
+    }
+  }
+}
+
 // src/remote/distribution.ts
 import { chmodSync as chmodSync4, mkdtempSync, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "fs";
 import { tmpdir } from "os";
-import { join as join13 } from "path";
+import { join as join17 } from "path";
 function api(origin, path) {
   const base = new URL(catalogEndpoint(origin));
   base.pathname = path;
@@ -10600,9 +10983,9 @@ async function revokeDistributionCredential(accessToken, id2, origin = DEFAULT_A
   }
 }
 function temporaryRegistryConfig(value) {
-  const directory = mkdtempSync(join13(tmpdir(), "pmcp-registry-"));
+  const directory = mkdtempSync(join17(tmpdir(), "pmcp-registry-"));
   chmodSync4(directory, 448);
-  const path = join13(directory, ".npmrc");
+  const path = join17(directory, ".npmrc");
   const registry = new URL(value.registry);
   const auth = `//${registry.host}${registry.pathname}:_authToken=${value.token}`;
   writeFileSync3(path, `${value.scope}:registry=${registry.href}
@@ -10632,10 +11015,11 @@ async function manage(context, sync) {
     throw new ArgumentError("select a skill package or pass --all");
   }
   const project2 = projectFrom(context);
+  const provider = catalogProvider(context);
   const install = installContext(project2);
   const inventory = readInstalledDependencies(project2);
   const catalog = await remoteCatalog(context);
-  const plan2 = planInstall({
+  const selectedPlan = planInstall({
     context: install,
     inventory,
     catalog,
@@ -10643,6 +11027,7 @@ async function manage(context, sync) {
     all: context.args.flags.has("all"),
     sync
   });
+  const plan2 = provider === "public" ? publicInstallPlan(selectedPlan, catalog) : selectedPlan;
   const digests2 = new Map(
     catalog.entries.map((entry2) => [
       entry2.delivery.packageName,
@@ -10728,6 +11113,32 @@ async function manage(context, sync) {
       prompt.close();
     }
   }
+  if (provider === "public") {
+    const delivery = await preparePublicDelivery(plan2, catalog);
+    const code = applyInstallPlan(
+      plan2,
+      createPackageManagerRunner(void 0, process.env, delivery.integrity)
+    );
+    if (code !== 0) {
+      context.ui.error(
+        "package manager failed",
+        `exit ${code}; inspect the project before retrying`
+      );
+      return code;
+    }
+    verifyPublicDelivery(project2, delivery);
+    if (context.args.flags.has("json")) {
+      context.ui.data(
+        `${JSON.stringify({ status: "applied", ...report }, null, 2)}
+`
+      );
+      return 0;
+    }
+    context.ui.success(
+      `${plan2.changes.length} public skill packages installed`
+    );
+    return 0;
+  }
   const session = readSession();
   if (!session || session.expiresAt !== void 0 && session.expiresAt <= Date.now()) {
     throw new Error(
@@ -10825,38 +11236,38 @@ var syncCommand = {
 import { homedir as homedir6 } from "os";
 
 // src/project/apply.ts
-import { createHash as createHash12 } from "crypto";
+import { createHash as createHash13 } from "crypto";
 import {
-  existsSync as existsSync14,
-  lstatSync as lstatSync3,
+  existsSync as existsSync17,
+  lstatSync as lstatSync4,
   mkdirSync as mkdirSync7,
-  readFileSync as readFileSync20,
-  readdirSync as readdirSync8,
+  readFileSync as readFileSync24,
+  readdirSync as readdirSync9,
   readlinkSync as readlinkSync2,
   rmSync as rmSync4,
   symlinkSync,
   writeFileSync as writeFileSync5
 } from "fs";
-import { dirname as dirname15, join as join18, posix as posix2 } from "path";
+import { dirname as dirname16, join as join22, posix as posix2 } from "path";
 import { parse as parse4 } from "smol-toml";
 
 // src/project/backup.ts
-import { createHash as createHash9 } from "crypto";
+import { createHash as createHash10 } from "crypto";
 import {
-  existsSync as existsSync10,
-  lstatSync as lstatSync2,
+  existsSync as existsSync13,
+  lstatSync as lstatSync3,
   mkdirSync as mkdirSync6,
   mkdtempSync as mkdtempSync2,
-  readFileSync as readFileSync16,
+  readFileSync as readFileSync20,
   writeFileSync as writeFileSync4
 } from "fs";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname13, isAbsolute as isAbsolute3, join as join15, relative as relative7, resolve as resolve11 } from "path";
+import { dirname as dirname14, isAbsolute as isAbsolute4, join as join19, relative as relative8, resolve as resolve12 } from "path";
 
 // src/project/package-rules.ts
 import { execFileSync } from "child_process";
-import { existsSync as existsSync9, lstatSync, readdirSync as readdirSync6, readlinkSync } from "fs";
-import { dirname as dirname12, join as join14, posix } from "path";
+import { existsSync as existsSync12, lstatSync as lstatSync2, readdirSync as readdirSync7, readlinkSync } from "fs";
+import { dirname as dirname13, join as join18, posix } from "path";
 var ProjectError = class extends Error {
   constructor(message) {
     super(message);
@@ -10893,7 +11304,7 @@ function deriveName(dir, strip) {
 }
 function linkTarget(abs) {
   try {
-    if (!lstatSync(abs).isSymbolicLink()) return null;
+    if (!lstatSync2(abs).isSymbolicLink()) return null;
     return readlinkSync(abs);
   } catch {
     return null;
@@ -10901,11 +11312,11 @@ function linkTarget(abs) {
 }
 function legacyLinks(root) {
   const found = /* @__PURE__ */ new Map();
-  const dir = join14(root, RULES_DIR);
-  if (!existsSync9(dir)) return found;
-  for (const entry2 of readdirSync6(dir).sort()) {
+  const dir = join18(root, RULES_DIR);
+  if (!existsSync12(dir)) return found;
+  for (const entry2 of readdirSync7(dir).sort()) {
     if (!entry2.endsWith(".md")) continue;
-    const target2 = linkTarget(join14(dir, entry2));
+    const target2 = linkTarget(join18(dir, entry2));
     if (target2 === null || !target2.startsWith("../../")) continue;
     found.set(entry2.slice(0, -3), target2.slice("../../".length));
   }
@@ -10925,14 +11336,14 @@ function packageRuleOutputs(root, spec, owned) {
   const legacyByDir = /* @__PURE__ */ new Map();
   for (const [name, target2] of legacy) {
     if (!byTarget.has(target2)) byTarget.set(target2, name);
-    const dir = dirname12(target2);
+    const dir = dirname13(target2);
     if (!legacyByDir.has(dir)) legacyByDir.set(dir, name);
   }
   const outputs = [];
   const taken = /* @__PURE__ */ new Map();
   for (const file2 of files) {
     const pkg = file2.slice(0, -suffix.length);
-    const name = byTarget.get(file2) ?? legacyByDir.get(dirname12(file2)) ?? deriveName(pkg, spec.strip);
+    const name = byTarget.get(file2) ?? legacyByDir.get(dirname13(file2)) ?? deriveName(pkg, spec.strip);
     const other = taken.get(name);
     if (other !== void 0) {
       throw new ProjectError(
@@ -10951,13 +11362,13 @@ function packageRuleOutputs(root, spec, owned) {
 
 // src/project/backup.ts
 function backupFiles(root, paths) {
-  const base = join15(homedir3(), ".cache/pmcp/project-backups");
-  const inside = relative7(resolve11(root), resolve11(base));
-  if (!isAbsolute3(inside) && inside !== ".." && !inside.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`)) {
+  const base = join19(homedir3(), ".cache/pmcp/project-backups");
+  const inside = relative8(resolve12(root), resolve12(base));
+  if (!isAbsolute4(inside) && inside !== ".." && !inside.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`)) {
     throw new ProjectError("Project backups must be outside the project");
   }
   mkdirSync6(base, { recursive: true, mode: 448 });
-  const directory = lstatSync2(base);
+  const directory = lstatSync3(base);
   if (directory.isSymbolicLink() || !directory.isDirectory()) {
     throw new ProjectError("Project backup directory must be a real directory");
   }
@@ -10967,42 +11378,42 @@ function backupFiles(root, paths) {
     );
   }
   const snapshots = [...new Set(paths)].map((path) => {
-    const absolute2 = resolve11(root, path);
-    const within = relative7(resolve11(root), absolute2);
-    if (isAbsolute3(within) || within === ".." || within.startsWith("../") || within.startsWith("..\\")) {
+    const absolute2 = resolve12(root, path);
+    const within = relative8(resolve12(root), absolute2);
+    if (isAbsolute4(within) || within === ".." || within.startsWith("../") || within.startsWith("..\\")) {
       throw new ProjectError("Backup paths must stay inside the project");
     }
-    if (!existsSync10(absolute2)) {
+    if (!existsSync13(absolute2)) {
       return { path, contents: null };
     }
-    const stat = lstatSync2(absolute2);
+    const stat = lstatSync3(absolute2);
     if (!stat.isFile() || stat.isSymbolicLink()) {
       throw new ProjectError(
         `Refusing to back up a nonregular config file: ${path}`
       );
     }
-    return { path, contents: readFileSync16(absolute2) };
+    return { path, contents: readFileSync20(absolute2) };
   });
-  const destination = mkdtempSync2(join15(base, "project-"));
+  const destination = mkdtempSync2(join19(base, "project-"));
   const entries = snapshots.map(({ path, contents }) => {
     if (contents === null) {
       return { path, present: false };
     }
-    const output = join15(destination, "files", path);
-    mkdirSync6(dirname13(output), { recursive: true, mode: 448 });
+    const output = join19(destination, "files", path);
+    mkdirSync6(dirname14(output), { recursive: true, mode: 448 });
     writeFileSync4(output, contents, { mode: 384 });
     return {
       path,
       present: true,
-      sha256: createHash9("sha256").update(contents).digest("hex")
+      sha256: createHash10("sha256").update(contents).digest("hex")
     };
   });
   writeFileSync4(
-    join15(destination, "receipt.json"),
+    join19(destination, "receipt.json"),
     JSON.stringify(
       {
         createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-        projectRoot: resolve11(root),
+        projectRoot: resolve12(root),
         entries
       },
       null,
@@ -11028,7 +11439,7 @@ function splitKeyed(path) {
 }
 
 // src/project/mcp.ts
-import { isAbsolute as isAbsolute4, relative as relative8 } from "path";
+import { isAbsolute as isAbsolute5, relative as relative9 } from "path";
 var runtimeByTool = {
   claude: "claude-code",
   codex: "codex-cli",
@@ -11179,12 +11590,12 @@ function nativeEntry(spec, alias, server, tool) {
     }
     let started;
     if (Object.keys(server.envFrom ?? {}).length > 0) {
-      const entry2 = relative8(spec.root, process.argv[1] ?? "");
+      const entry2 = relative9(spec.root, process.argv[1] ?? "");
       const driverEnv = {};
       if (server.mailbox) {
         driverEnv["PMCP_MAILBOX_RUNTIME"] = runtimeByTool[tool];
       }
-      if (!isAbsolute4(entry2) && !entry2.startsWith("..")) {
+      if (!isAbsolute5(entry2) && !entry2.startsWith("..")) {
         started = launch({
           command: "node",
           args: [`${ROOT_VAR}/${entry2}`, "project", "exec-mcp", alias],
@@ -11292,16 +11703,16 @@ function mcpOutputs(spec) {
 }
 
 // src/project/hooks.ts
-import { createHash as createHash11 } from "crypto";
-import { existsSync as existsSync12, readFileSync as readFileSync18 } from "fs";
-import { join as join16 } from "path";
-import { fileURLToPath } from "url";
+import { createHash as createHash12 } from "crypto";
+import { existsSync as existsSync15, readFileSync as readFileSync22 } from "fs";
+import { join as join20 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/project/hook-adapter.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { createHash as createHash10 } from "crypto";
-import { existsSync as existsSync11, readFileSync as readFileSync17, realpathSync as realpathSync2, statSync as statSync9 } from "fs";
-import { dirname as dirname14, isAbsolute as isAbsolute5, relative as relative9, resolve as resolve12 } from "path";
+import { createHash as createHash11 } from "crypto";
+import { existsSync as existsSync14, readFileSync as readFileSync21, realpathSync as realpathSync3, statSync as statSync10 } from "fs";
+import { dirname as dirname15, isAbsolute as isAbsolute6, relative as relative10, resolve as resolve13 } from "path";
 var denied = () => ({
   decision: "deny",
   reason: "Shell guard failed validation or execution"
@@ -11311,22 +11722,22 @@ function guardPath(root, command2) {
   if (!script?.startsWith(".agents/guards/")) {
     throw new Error("Hook command must execute a script under .agents/guards/");
   }
-  const absolute2 = resolve12(root, script);
-  const base = resolve12(root, ".agents/guards");
-  const inside = relative9(base, absolute2);
-  if (isAbsolute5(inside) || inside === ".." || inside.startsWith("../") || inside.startsWith("..\\")) {
+  const absolute2 = resolve13(root, script);
+  const base = resolve13(root, ".agents/guards");
+  const inside = relative10(base, absolute2);
+  if (isAbsolute6(inside) || inside === ".." || inside.startsWith("../") || inside.startsWith("..\\")) {
     throw new Error("Hook guard must stay under .agents/guards/");
   }
-  if (!existsSync11(absolute2) || !statSync9(absolute2).isFile()) {
+  if (!existsSync14(absolute2) || !statSync10(absolute2).isFile()) {
     throw new Error("Hook guard script must exist");
   }
-  const actual = relative9(base, realpathSync2(absolute2));
-  if (isAbsolute5(actual) || actual === ".." || actual.startsWith("../") || actual.startsWith("..\\")) {
+  const actual = relative10(base, realpathSync3(absolute2));
+  if (isAbsolute6(actual) || actual === ".." || actual.startsWith("../") || actual.startsWith("..\\")) {
     throw new Error("Hook guard cannot resolve outside .agents/guards/");
   }
   return absolute2;
 }
-function object2(value) {
+function object3(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     return {};
   }
@@ -11350,9 +11761,9 @@ function scalar(value) {
 }
 function evaluateShellHook(root, policy, tool, payload) {
   try {
-    const value = object2(payload);
-    const call = object2(value["toolCall"]);
-    const input = tool === "antigravity" ? object2(call["args"]) : object2(value["tool_input"]);
+    const value = object3(payload);
+    const call = object3(value["toolCall"]);
+    const input = tool === "antigravity" ? object3(call["args"]) : object3(value["tool_input"]);
     const name = tool === "antigravity" ? call["name"] : value["tool_name"];
     const shellNames = {
       codex: ["Bash", "exec_command", "shell", "shell_command"],
@@ -11400,7 +11811,7 @@ function evaluateShellHook(root, policy, tool, payload) {
     if (result.status !== 0 || result.error) {
       return denied();
     }
-    const response = object2(JSON.parse(result.stdout));
+    const response = object3(JSON.parse(result.stdout));
     if (Object.keys(response).some(
       (key) => !["decision", "reason"].includes(key)
     ) || !["allow", "deny"].includes(String(response["decision"])) || response["reason"] !== void 0 && typeof response["reason"] !== "string") {
@@ -11427,7 +11838,7 @@ function nativeHookDecision(tool, decision) {
   return decision;
 }
 async function main() {
-  const [, , , tool, file2, integrity] = process.argv;
+  const [, , , tool, file2, integrity2] = process.argv;
   const supported = tool === "codex" || tool === "gemini" || tool === "antigravity";
   if (!supported) {
     process.exitCode = 2;
@@ -11438,10 +11849,10 @@ async function main() {
     if (!file2) {
       throw new Error("Missing hook policy");
     }
-    const bytes = readFileSync17(file2);
-    const adapter = readFileSync17(process.argv[1]);
-    const actual = createHash10("sha256").update(adapter).update(bytes).digest("hex");
-    if (actual !== integrity) {
+    const bytes = readFileSync21(file2);
+    const adapter = readFileSync21(process.argv[1]);
+    const actual = createHash11("sha256").update(adapter).update(bytes).digest("hex");
+    if (actual !== integrity2) {
       throw new Error("Hook integrity mismatch");
     }
     const policy = JSON.parse(bytes.toString("utf8"));
@@ -11458,8 +11869,8 @@ async function main() {
       }
       chunks.push(bytes2);
     }
-    const root = resolve12(dirname14(file2), "../..");
-    const guardSha256 = createHash10("sha256").update(readFileSync17(guardPath(root, policy.command))).digest("hex");
+    const root = resolve13(dirname15(file2), "../..");
+    const guardSha256 = createHash11("sha256").update(readFileSync21(guardPath(root, policy.command))).digest("hex");
     if (policy.contractVersion !== 1 || guardSha256 !== policy.guardSha256) {
       throw new Error(
         "Hook guard source changed; reproject and review native trust"
@@ -11503,7 +11914,7 @@ var native = {
     matcher: "run_command"
   }
 };
-function object3(value) {
+function object4(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new ProjectError(
       "Native hook configuration must be an object; contents are redacted"
@@ -11512,20 +11923,20 @@ function object3(value) {
   return value;
 }
 function groups(root, file2, key) {
-  const absolute2 = join16(root, file2);
-  if (!existsSync12(absolute2)) {
+  const absolute2 = join20(root, file2);
+  if (!existsSync15(absolute2)) {
     return [];
   }
   let value;
   try {
-    value = JSON.parse(readFileSync18(absolute2, "utf8"));
+    value = JSON.parse(readFileSync22(absolute2, "utf8"));
   } catch {
     throw new ProjectError(
       "Cannot parse native hook configuration; contents are redacted"
     );
   }
   for (const part of key) {
-    value = object3(value)[part];
+    value = object4(value)[part];
     if (value === void 0) {
       return [];
     }
@@ -11536,21 +11947,21 @@ function groups(root, file2, key) {
   return value;
 }
 function adapterSource() {
-  const published = fileURLToPath(
+  const published = fileURLToPath2(
     new URL("./project/hook-adapter.js", import.meta.url)
   );
-  const sourceBuild = fileURLToPath(
+  const sourceBuild = fileURLToPath2(
     new URL("../../dist/project/hook-adapter.js", import.meta.url)
   );
-  const file2 = existsSync12(published) ? published : sourceBuild;
-  if (!existsSync12(file2)) {
+  const file2 = existsSync15(published) ? published : sourceBuild;
+  if (!existsSync15(file2)) {
     throw new ProjectError("Build pmcp before projecting shell hook adapters");
   }
-  return readFileSync18(file2, "utf8");
+  return readFileSync22(file2, "utf8");
 }
 function hookOutputs(spec) {
-  const lockFile = join16(spec.root, "pmcp.lock");
-  const lock = existsSync12(lockFile) ? JSON.parse(readFileSync18(lockFile, "utf8")) : {};
+  const lockFile = join20(spec.root, "pmcp.lock");
+  const lock = existsSync15(lockFile) ? JSON.parse(readFileSync22(lockFile, "utf8")) : {};
   const previous = new Map(
     (lock.outputs ?? []).filter((entry2) => entry2.managed !== void 0).map((entry2) => [entry2.path, entry2.managed])
   );
@@ -11567,17 +11978,17 @@ function hookOutputs(spec) {
     outputs.push({ kind: "file", path: ADAPTER, content: adapter });
     for (const hook of selected) {
       const policyFile = `${HOOK_DIRECTORY}/${hook.name}.json`;
-      const guardSha256 = createHash11("sha256").update(readFileSync18(guardPath(spec.root, hook.command))).digest("hex");
+      const guardSha256 = createHash12("sha256").update(readFileSync22(guardPath(spec.root, hook.command))).digest("hex");
       const policy = `${JSON.stringify({ ...hook, contractVersion: 1, guardSha256 }, null, 2)}
 `;
       outputs.push({ kind: "file", path: policyFile, content: policy });
-      const integrity = createHash11("sha256").update(adapter).update(policy).digest("hex");
+      const integrity2 = createHash12("sha256").update(adapter).update(policy).digest("hex");
       for (const tool of hook.targets) {
         if (!spec.tools.has(tool)) {
           continue;
         }
         const target2 = native[tool];
-        const command2 = `d="$PWD"; while [ ! -f "$d/pmcp.toml" ]; do [ "$d" = / ] && exit 1; d=$(dirname "$d"); done; exec node "$d/${ADAPTER}" --pmcp-shell-hook ${tool} "$d/${policyFile}" ${integrity}`;
+        const command2 = `d="$PWD"; while [ ! -f "$d/pmcp.toml" ]; do [ "$d" = / ] && exit 1; d=$(dirname "$d"); done; exec node "$d/${ADAPTER}" --pmcp-shell-hook ${tool} "$d/${policyFile}" ${integrity2}`;
         const timeout = tool === "gemini" ? hook.timeoutMs + 2e3 : Math.ceil(hook.timeoutMs / 1e3) + 2;
         const value = {
           matcher: target2.matcher,
@@ -11636,8 +12047,8 @@ function splitFrontmatter(source2) {
   const match = /^---\n([\s\S]*?)\n---\n?([\s\S]*)$/u.exec(source2);
   if (!match) return { meta: {}, body: source2 };
   const meta = parse3(match[1] ?? "");
-  const object8 = meta !== null && typeof meta === "object" && !Array.isArray(meta) ? meta : {};
-  return { meta: object8, body: match[2] ?? "" };
+  const object9 = meta !== null && typeof meta === "object" && !Array.isArray(meta) ? meta : {};
+  return { meta: object9, body: match[2] ?? "" };
 }
 function scalar2(value) {
   if (typeof value === "string") return value;
@@ -11665,28 +12076,28 @@ ${lines2.join("\n")}
 }
 
 // src/project/plan.ts
-import { existsSync as existsSync13, readFileSync as readFileSync19, readdirSync as readdirSync7 } from "fs";
-import { join as join17 } from "path";
+import { existsSync as existsSync16, readFileSync as readFileSync23, readdirSync as readdirSync8 } from "fs";
+import { join as join21 } from "path";
 var AGENT_FIELDS = {
   claude: ["name", "description", "tools", "model", "effort"],
   gemini: ["name", "description"]
 };
 var SETTINGS = ".claude/settings.json";
 function listDirs(dir) {
-  if (!existsSync13(dir)) return [];
-  return readdirSync7(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
+  if (!existsSync16(dir)) return [];
+  return readdirSync8(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
 }
 var tomlString = (value) => JSON.stringify(typeof value === "string" ? value : String(value ?? ""));
 function skillNames(root) {
-  const dir = join17(root, ".agents/skills");
+  const dir = join21(root, ".agents/skills");
   return listDirs(dir).filter(
-    (name) => existsSync13(join17(dir, name, "SKILL.md"))
+    (name) => existsSync16(join21(dir, name, "SKILL.md"))
   );
 }
 function agentNames(root) {
-  const dir = join17(root, ".agents/agents");
+  const dir = join21(root, ".agents/agents");
   return listDirs(dir).filter(
-    (name) => existsSync13(join17(dir, name, "agent.md"))
+    (name) => existsSync16(join21(dir, name, "agent.md"))
   );
 }
 function skillOutputs(spec) {
@@ -11720,13 +12131,13 @@ policy:
 }
 function ruleOutputs(spec) {
   if (!spec.tools.has("claude")) return [];
-  const dir = join17(spec.root, ".agents/rules");
-  if (!existsSync13(dir)) return [];
+  const dir = join21(spec.root, ".agents/rules");
+  if (!existsSync16(dir)) return [];
   const outputs = [];
-  for (const file2 of readdirSync7(dir).filter((f) => f.endsWith(".md")).sort()) {
+  for (const file2 of readdirSync8(dir).filter((f) => f.endsWith(".md")).sort()) {
     const rel = `.agents/rules/${file2}`;
     const { meta, body } = splitFrontmatter(
-      readFileSync19(join17(spec.root, rel), "utf8")
+      readFileSync23(join21(spec.root, rel), "utf8")
     );
     const globs = [meta["globs"] ?? []].flat().filter((g) => typeof g === "string" && g !== "");
     const head = globs.length > 0 ? renderFrontmatter({ paths: globs }) : "";
@@ -11745,7 +12156,7 @@ function agentOutputs(spec) {
   for (const name of agentNames(spec.root)) {
     const rel = `.agents/agents/${name}/agent.md`;
     const { meta, body } = splitFrontmatter(
-      readFileSync19(join17(spec.root, rel), "utf8")
+      readFileSync23(join21(spec.root, rel), "utf8")
     );
     const overrides = spec.agents[name] ?? {};
     const note = `<!-- ${MARK} from ${rel} -->
@@ -11822,26 +12233,26 @@ var PREDECESSORS = [
   "by sync-claude-projection.sh",
   "AUTO-GENERATED by scripts/agent/project.mjs"
 ];
-var sha = (text3) => createHash12("sha256").update(text3).digest("hex");
+var sha = (text3) => createHash13("sha256").update(text3).digest("hex");
 function readLock(root) {
-  const path = join18(root, LOCK_FILE);
-  if (!existsSync14(path)) return [];
-  const lock = JSON.parse(readFileSync20(path, "utf8"));
+  const path = join22(root, LOCK_FILE);
+  if (!existsSync17(path)) return [];
+  const lock = JSON.parse(readFileSync24(path, "utf8"));
   return lock.outputs ?? [];
 }
 function linkOf(abs) {
   try {
-    return lstatSync3(abs).isSymbolicLink() ? readlinkSync2(abs) : null;
+    return lstatSync4(abs).isSymbolicLink() ? readlinkSync2(abs) : null;
   } catch {
     return null;
   }
 }
-var exists = (abs) => existsSync14(abs) || linkOf(abs) !== null;
+var exists = (abs) => existsSync17(abs) || linkOf(abs) !== null;
 function readJson2(abs) {
-  if (!existsSync14(abs)) return {};
+  if (!existsSync17(abs)) return {};
   let value;
   try {
-    value = JSON.parse(readFileSync20(abs, "utf8"));
+    value = JSON.parse(readFileSync24(abs, "utf8"));
   } catch {
     throw new ProjectError(
       "Cannot parse native JSON configuration; contents are redacted"
@@ -11849,16 +12260,16 @@ function readJson2(abs) {
   }
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
-function getKey(object8, key) {
-  let node = object8;
+function getKey(object9, key) {
+  let node = object9;
   for (const part of key) {
     if (node === null || typeof node !== "object") return void 0;
     node = node[part];
   }
   return node;
 }
-function setKey(object8, key, value) {
-  let node = object8;
+function setKey(object9, key, value) {
+  let node = object9;
   for (const part of key.slice(0, -1)) {
     const next = node[part];
     if (next === null || typeof next !== "object" || Array.isArray(next)) {
@@ -11868,17 +12279,17 @@ function setKey(object8, key, value) {
   }
   node[key[key.length - 1] ?? ""] = value;
 }
-function deleteKey(object8, key) {
+function deleteKey(object9, key) {
   const [head, ...rest] = key;
-  if (head === void 0 || !(head in object8)) return;
+  if (head === void 0 || !(head in object9)) return;
   if (rest.length === 0) {
-    delete object8[head];
+    delete object9[head];
     return;
   }
-  const child = object8[head];
+  const child = object9[head];
   if (child === null || typeof child !== "object") return;
   deleteKey(child, rest);
-  if (Object.keys(child).length === 0) delete object8[head];
+  if (Object.keys(child).length === 0) delete object9[head];
 }
 var same = (a, b) => JSON.stringify(a) === JSON.stringify(b);
 var block = (content) => `${BEGIN}
@@ -11893,19 +12304,19 @@ function withoutBlock(text3) {
   return `${text3.slice(0, start2).replace(/\n+$/u, "\n")}${after}`;
 }
 function present(root, output) {
-  const abs = join18(root, "file" in output ? output.file : output.path);
+  const abs = join22(root, "file" in output ? output.file : output.path);
   switch (output.kind) {
     case "link":
       return linkOf(abs) === output.target;
     case "file":
-      return existsSync14(abs) && linkOf(abs) === null && readFileSync20(abs, "utf8") === output.content;
+      return existsSync17(abs) && linkOf(abs) === null && readFileSync24(abs, "utf8") === output.content;
     case "json":
       if (output.managed && Array.isArray(output.value) && output.value.length === 0) {
         return getKey(readJson2(abs), output.key) === void 0;
       }
       return same(getKey(readJson2(abs), output.key), output.value);
     case "block":
-      return existsSync14(abs) && readFileSync20(abs, "utf8").includes(block(output.content));
+      return existsSync17(abs) && readFileSync24(abs, "utf8").includes(block(output.content));
   }
 }
 function replaceable(root, output, owned) {
@@ -11913,12 +12324,12 @@ function replaceable(root, output, owned) {
     if (output.key[0] !== "mcpServers" || owned.has(output.path)) {
       return true;
     }
-    const existing = getKey(readJson2(join18(root, output.file)), output.key);
+    const existing = getKey(readJson2(join22(root, output.file)), output.key);
     return existing === void 0 || same(existing, output.value);
   }
   if (output.kind === "block") {
-    const absolute2 = join18(root, output.file);
-    const text4 = existsSync14(absolute2) ? readFileSync20(absolute2, "utf8") : "";
+    const absolute2 = join22(root, output.file);
+    const text4 = existsSync17(absolute2) ? readFileSync24(absolute2, "utf8") : "";
     const outside = parse4(withoutBlock(text4));
     const proposed = parse4(output.content);
     const existing = objectKeys(outside["mcp_servers"]);
@@ -11927,14 +12338,14 @@ function replaceable(root, output, owned) {
     );
   }
   if (owned.has(output.path)) return true;
-  const abs = join18(root, output.path);
+  const abs = join22(root, output.path);
   if (!exists(abs)) return true;
   const target2 = linkOf(abs);
   if (target2 !== null) {
     return output.kind === "link" && target2 === output.target;
   }
-  if (lstatSync3(abs).isDirectory()) return false;
-  const text3 = readFileSync20(abs, "utf8");
+  if (lstatSync4(abs).isDirectory()) return false;
+  const text3 = readFileSync24(abs, "utf8");
   if (output.kind === "file" && text3 === output.content) return true;
   return PREDECESSORS.some((mark) => text3.includes(mark));
 }
@@ -11948,16 +12359,16 @@ function undeclared(spec, outputs) {
   const declared = new Set(outputs.map((o) => o.path));
   const found = [];
   for (const dir of censusDirs(spec)) {
-    const abs = join18(spec.root, dir);
-    if (!existsSync14(abs)) continue;
-    for (const entry2 of readdirSync8(abs)) {
+    const abs = join22(spec.root, dir);
+    if (!existsSync17(abs)) continue;
+    for (const entry2 of readdirSync9(abs)) {
       const path = `${dir}/${entry2}`;
       if (!declared.has(path)) found.push(path);
     }
   }
-  const rules = join18(spec.root, RULES_DIR);
-  if (spec.tools.has("grok") && existsSync14(rules)) {
-    for (const entry2 of readdirSync8(rules, { withFileTypes: true })) {
+  const rules = join22(spec.root, RULES_DIR);
+  if (spec.tools.has("grok") && existsSync17(rules)) {
+    for (const entry2 of readdirSync9(rules, { withFileTypes: true })) {
       if (entry2.isDirectory()) continue;
       found.push(`${RULES_DIR}/${entry2.name}`);
     }
@@ -11983,9 +12394,9 @@ function deadGlobs(root, outputs) {
     if (rule.kind === "file") {
       text3 = rule.content;
     } else if (rule.kind === "link") {
-      const abs = join18(root, posix2.join(posix2.dirname(rule.path), rule.target));
-      if (!existsSync14(abs)) continue;
-      text3 = readFileSync20(abs, "utf8");
+      const abs = join22(root, posix2.join(posix2.dirname(rule.path), rule.target));
+      if (!existsSync17(abs)) continue;
+      text3 = readFileSync24(abs, "utf8");
     } else {
       continue;
     }
@@ -12035,7 +12446,7 @@ function project(spec, options2) {
     }
   }
   for (const path of jsonPaths) {
-    readJson2(join18(spec.root, path));
+    readJson2(join22(spec.root, path));
   }
   if (options2.check) {
     const problems = [
@@ -12097,8 +12508,8 @@ function project(spec, options2) {
   for (const output of outputs) {
     if (output.kind !== "link" && output.kind !== "file") continue;
     if (present(spec.root, output)) continue;
-    const abs = join18(spec.root, output.path);
-    mkdirSync7(dirname15(abs), { recursive: true });
+    const abs = join22(spec.root, output.path);
+    mkdirSync7(dirname16(abs), { recursive: true });
     rmSync4(abs, { force: true, recursive: true });
     if (output.kind === "link") symlinkSync(output.target, abs);
     else writeFileSync5(abs, output.content);
@@ -12123,12 +12534,12 @@ function project(spec, options2) {
       group.drops.push(keyed.key);
       jsonFiles.set(keyed.file, group);
     } else {
-      rmSync4(join18(spec.root, entry2.path), { force: true, recursive: true });
+      rmSync4(join22(spec.root, entry2.path), { force: true, recursive: true });
     }
     pruned += 1;
   }
   for (const [file2, { sets, drops }] of jsonFiles) {
-    const abs = join18(spec.root, file2);
+    const abs = join22(spec.root, file2);
     const before = readJson2(abs);
     const after = structuredClone(before);
     for (const key of drops) deleteKey(after, key);
@@ -12143,21 +12554,21 @@ function project(spec, options2) {
       }
     }
     if (same(before, after)) continue;
-    if (!existsSync14(abs) && Object.keys(after).length === 0) continue;
-    mkdirSync7(dirname15(abs), { recursive: true });
+    if (!existsSync17(abs) && Object.keys(after).length === 0) continue;
+    mkdirSync7(dirname16(abs), { recursive: true });
     writeFileSync5(abs, `${JSON.stringify(after, null, 2)}
 `);
   }
   for (const [file2, content] of blockFiles) {
-    const abs = join18(spec.root, file2);
-    const before = existsSync14(abs) ? readFileSync20(abs, "utf8") : "";
+    const abs = join22(spec.root, file2);
+    const before = existsSync17(abs) ? readFileSync24(abs, "utf8") : "";
     let after = withoutBlock(before);
     if (content !== null) {
-      const sep6 = after === "" || after.endsWith("\n\n") ? "" : after.endsWith("\n") ? "\n" : "\n\n";
-      after = `${after}${sep6}${block(content)}`;
+      const sep7 = after === "" || after.endsWith("\n\n") ? "" : after.endsWith("\n") ? "\n" : "\n\n";
+      after = `${after}${sep7}${block(content)}`;
     }
     if (after === before) continue;
-    mkdirSync7(dirname15(abs), { recursive: true });
+    mkdirSync7(dirname16(abs), { recursive: true });
     writeFileSync5(abs, after);
   }
   if (spec.packageRules) {
@@ -12169,15 +12580,15 @@ function project(spec, options2) {
       )
     );
     for (const [name, target2] of legacyLinks(spec.root)) {
-      const abs = join18(spec.root, RULES_DIR, `${name}.md`);
-      const broken = !existsSync14(abs);
+      const abs = join22(spec.root, RULES_DIR, `${name}.md`);
+      const broken = !existsSync17(abs);
       if (!broken && !linkedDirs.has(posix2.dirname(target2))) continue;
       rmSync4(abs, { force: true });
       pruned += 1;
     }
   }
   writeFileSync5(
-    join18(spec.root, LOCK_FILE),
+    join22(spec.root, LOCK_FILE),
     `${JSON.stringify({ version: 1, outputs: outputs.filter((output) => output.kind !== "json" || output.managed === void 0 || output.managed.length > 0).map(lockEntry) }, null, 2)}
 `
   );
@@ -12191,9 +12602,9 @@ function project(spec, options2) {
 }
 
 // src/project/mcp-import.ts
-import { readFileSync as readFileSync21, statSync as statSync10, writeFileSync as writeFileSync6 } from "fs";
-import { createHash as createHash13 } from "crypto";
-import { basename as basename6, dirname as dirname16, resolve as resolve13 } from "path";
+import { readFileSync as readFileSync25, statSync as statSync11, writeFileSync as writeFileSync6 } from "fs";
+import { createHash as createHash14 } from "crypto";
+import { basename as basename6, dirname as dirname17, resolve as resolve14 } from "path";
 import { homedir as homedir4 } from "os";
 import { parse as parse5, stringify } from "smol-toml";
 
@@ -12393,7 +12804,7 @@ var KEYS = /* @__PURE__ */ new Set([
 function fail(path, where, detail) {
   throw new ConfigError(path, `${where} ${detail}`);
 }
-function object4(path, where, value) {
+function object5(path, where, value) {
   if (value === void 0) {
     return {};
   }
@@ -12416,7 +12827,7 @@ function list(path, where, value, unique2 = true) {
 }
 function mapping(path, where, value) {
   const result = {};
-  for (const [key, item] of Object.entries(object4(path, where, value))) {
+  for (const [key, item] of Object.entries(object5(path, where, value))) {
     if (typeof item !== "string") {
       fail(path, where, "values must be strings");
     }
@@ -12434,14 +12845,14 @@ function nativeOptions(path, where, value) {
   };
   const result = {};
   for (const [tool, raw] of Object.entries(
-    object4(path, `${where} native`, value)
+    object5(path, `${where} native`, value)
   )) {
     if (!TOOLS.includes(tool)) {
       fail(path, where, `unknown native target ${tool}`);
     }
     const values = {};
     for (const [key, item] of Object.entries(
-      object4(path, `${where} native.${tool}`, raw)
+      object5(path, `${where} native.${tool}`, raw)
     )) {
       if (!fields[tool].includes(key) || typeof item !== "number" || !Number.isFinite(item) || item <= 0) {
         fail(path, where, `unsupported native option ${tool}.${key}`);
@@ -12455,12 +12866,12 @@ function nativeOptions(path, where, value) {
 function environmentSources(path, where, value) {
   const result = {};
   for (const [key, raw] of Object.entries(
-    object4(path, `${where} env_from`, value)
+    object5(path, `${where} env_from`, value)
   )) {
     if (!ENV_NAME.test(key) || key === "PROJECT_ROOT") {
       fail(path, where, "invalid environment source name");
     }
-    const source2 = object4(path, `${where} env_from.${key}`, raw);
+    const source2 = object5(path, `${where} env_from.${key}`, raw);
     if (Object.keys(source2).some((name) => name !== "file" && name !== "pointer")) {
       fail(path, where, "environment sources accept only file and pointer");
     }
@@ -12473,12 +12884,12 @@ function environmentSources(path, where, value) {
 }
 function readMcp(path, value) {
   const servers = {};
-  for (const [alias, raw] of Object.entries(object4(path, "[mcp]", value))) {
+  for (const [alias, raw] of Object.entries(object5(path, "[mcp]", value))) {
     const where = `[mcp.${alias}]`;
     if (!/^[a-z0-9][a-z0-9-]*$/u.test(alias)) {
       fail(path, where, "use lowercase, digits and -");
     }
-    const entry2 = object4(path, where, raw);
+    const entry2 = object5(path, where, raw);
     for (const key of Object.keys(entry2)) {
       if (!KEYS.has(key)) {
         fail(path, where, `unknown field ${key}`);
@@ -12607,7 +13018,7 @@ function readMcp(path, value) {
 }
 
 // src/project/mcp-import.ts
-function object5(value) {
+function object6(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new ProjectError(
       "MCP source must contain object-valued server entries"
@@ -12623,12 +13034,12 @@ function sourceServers(source2, root) {
       "Use --source <claude|codex|gemini|grok|antigravity>:<file>"
     );
   }
-  const path = resolve13(root, source2.slice(split + 1));
-  if (statSync10(path).size > 2 * 1024 * 1024) {
+  const path = resolve14(root, source2.slice(split + 1));
+  if (statSync11(path).size > 2 * 1024 * 1024) {
     throw new ProjectError("MCP source exceeds the 2 MiB limit");
   }
-  const bytes = readFileSync21(path);
-  const sha2562 = createHash13("sha256").update(bytes).digest("hex");
+  const bytes = readFileSync25(path);
+  const sha2562 = createHash14("sha256").update(bytes).digest("hex");
   const text3 = bytes.toString("utf8").replace(/^\uFEFF/u, "");
   let parsed;
   try {
@@ -12637,7 +13048,7 @@ function sourceServers(source2, root) {
     } else if (path.endsWith(".toml")) {
       parsed = parse5(text3);
     } else {
-      parsed = object5(JSON.parse(text3));
+      parsed = object6(JSON.parse(text3));
     }
   } catch {
     throw new ProjectError(
@@ -12645,7 +13056,7 @@ function sourceServers(source2, root) {
     );
   }
   const servers = parsed["mcpServers"] ?? parsed["mcp_servers"] ?? {};
-  return { tool, path, servers: object5(servers), sha256: sha2562 };
+  return { tool, path, servers: object6(servers), sha256: sha2562 };
 }
 function httpCandidate(tool, entry2) {
   if (tool === "gemini" && entry2["url"] !== void 0) {
@@ -12667,7 +13078,7 @@ function httpCandidate(tool, entry2) {
   const result = { url };
   const headers = {};
   const headerEnv = {};
-  const sourceHeaders = object5(entry2["headers"] ?? entry2["http_headers"] ?? {});
+  const sourceHeaders = object6(entry2["headers"] ?? entry2["http_headers"] ?? {});
   for (const [key, value] of Object.entries(sourceHeaders)) {
     if (typeof value !== "string") {
       throw new ProjectError("HTTP header values must be strings");
@@ -12687,7 +13098,7 @@ function httpCandidate(tool, entry2) {
     }
   }
   for (const [key, value] of Object.entries(
-    object5(entry2["env_http_headers"] ?? {})
+    object6(entry2["env_http_headers"] ?? {})
   )) {
     if (typeof value !== "string") {
       throw new ProjectError("Environment header references must be strings");
@@ -12751,7 +13162,7 @@ function candidate(tool, entry2, file2, alias) {
       }
       result["args"] = args;
     }
-    const env = object5(entry2["env"] ?? {});
+    const env = object6(entry2["env"] ?? {});
     const forwarded = entry2["env_vars"] ?? [];
     if (!Array.isArray(forwarded) || !forwarded.every((item) => typeof item === "string")) {
       throw new ProjectError(
@@ -12818,9 +13229,9 @@ function equivalent(alias, left, right) {
   return JSON.stringify(readMcp("import", { [alias]: left })[alias]) === JSON.stringify(readMcp("import", { [alias]: right })[alias]);
 }
 function planMcpImport(config, sources2, names = []) {
-  const original = readFileSync21(config, "utf8");
-  const root = dirname16(resolve13(config));
-  const existing = object5(parse5(original)["mcp"] ?? {});
+  const original = readFileSync25(config, "utf8");
+  const root = dirname17(resolve14(config));
+  const existing = object6(parse5(original)["mcp"] ?? {});
   const additions = {};
   const entries = [];
   const fingerprints = [];
@@ -12833,11 +13244,11 @@ function planMcpImport(config, sources2, names = []) {
         continue;
       }
       try {
-        const proposed = candidate(read2.tool, object5(raw), read2.path, alias);
+        const proposed = candidate(read2.tool, object6(raw), read2.path, alias);
         readMcp(config, { [alias]: proposed });
         const previous = existing[alias] ?? additions[alias];
         if (previous !== void 0) {
-          const status = equivalent(alias, object5(previous), proposed) ? "unchanged" : "conflict";
+          const status = equivalent(alias, object6(previous), proposed) ? "unchanged" : "conflict";
           entries.push({ alias, source: read2.path, status });
           continue;
         }
@@ -12869,11 +13280,11 @@ function writeMcpImport(plan2) {
       "Resolve blocked or conflicting MCP entries before importing"
     );
   }
-  if (readFileSync21(plan2.config, "utf8") !== plan2.original) {
+  if (readFileSync25(plan2.config, "utf8") !== plan2.original) {
     throw new ProjectError("pmcp.toml changed after planning; plan again");
   }
   for (const source2 of plan2.sources) {
-    const current = createHash13("sha256").update(readFileSync21(source2.path)).digest("hex");
+    const current = createHash14("sha256").update(readFileSync25(source2.path)).digest("hex");
     if (current !== source2.sha256) {
       throw new ProjectError("MCP source changed after planning; plan again");
     }
@@ -12883,7 +13294,7 @@ function writeMcpImport(plan2) {
 
 ${additions}`;
   parse5(after);
-  const backup = backupFiles(dirname16(resolve13(plan2.config)), [
+  const backup = backupFiles(dirname17(resolve14(plan2.config)), [
     basename6(plan2.config)
   ]);
   writeFileSync6(plan2.config, after);
@@ -12892,22 +13303,22 @@ ${additions}`;
 
 // src/project/mcp-env.ts
 import { spawn } from "child_process";
-import { readFileSync as readFileSync22, statSync as statSync11 } from "fs";
+import { readFileSync as readFileSync26, statSync as statSync12 } from "fs";
 import { homedir as homedir5 } from "os";
-import { resolve as resolve14 } from "path";
+import { resolve as resolve15 } from "path";
 import { parse as parse6 } from "smol-toml";
 function sourcePath(file2, root) {
   if (file2.startsWith("~/")) {
-    return resolve14(homedir5(), file2.slice(2));
+    return resolve15(homedir5(), file2.slice(2));
   }
-  return resolve14(root, file2.replaceAll("${PROJECT_ROOT}", root));
+  return resolve15(root, file2.replaceAll("${PROJECT_ROOT}", root));
 }
 function sourceValue(file2, pointer) {
   try {
-    if (statSync11(file2).size > 2 * 1024 * 1024) {
+    if (statSync12(file2).size > 2 * 1024 * 1024) {
       throw new Error("size");
     }
-    const text3 = readFileSync22(file2, "utf8").replace(/^\uFEFF/u, "");
+    const text3 = readFileSync26(file2, "utf8").replace(/^\uFEFF/u, "");
     let value;
     if (file2.endsWith(".toml")) {
       value = parse6(text3);
@@ -12988,8 +13399,8 @@ async function execMcp(spec, alias, env) {
 
 // src/project/doctor.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { existsSync as existsSync15, readFileSync as readFileSync23 } from "fs";
-import { join as join19 } from "path";
+import { existsSync as existsSync18, readFileSync as readFileSync27 } from "fs";
+import { join as join23 } from "path";
 import { parse as parse7 } from "smol-toml";
 var spawnRunner = (command2, args, cwd, env) => {
   const result = spawnSync3(command2, [...args], {
@@ -13066,10 +13477,10 @@ function claude(spec, o) {
 }
 function codex(spec, o) {
   const findings = [];
-  const config = join19(o.home, ".codex/config.toml");
+  const config = join23(o.home, ".codex/config.toml");
   let trusted = false;
-  if (existsSync15(config)) {
-    const projects = parse7(readFileSync23(config, "utf8")).projects ?? {};
+  if (existsSync18(config)) {
+    const projects = parse7(readFileSync27(config, "utf8")).projects ?? {};
     const root = spec.root.replace(/\/$/u, "");
     trusted = projects[root]?.trust_level === "trusted" || projects[`${root}/`]?.trust_level === "trusted";
   }
@@ -13195,8 +13606,8 @@ function grok(spec, o) {
 }
 function antigravity(spec, options2) {
   const foreign = agentNames(spec.root).filter((name) => {
-    const text3 = readFileSync23(
-      join19(spec.root, ".agents/agents", name, "agent.md"),
+    const text3 = readFileSync27(
+      join23(spec.root, ".agents/agents", name, "agent.md"),
       "utf8"
     );
     return splitFrontmatter(text3).meta["tools"] !== void 0;
@@ -13216,7 +13627,7 @@ function antigravity(spec, options2) {
   if (serversForTool(spec, "antigravity").length > 0) {
     const result = options2.run(
       "agy",
-      ["plugin", "validate", join19(spec.root, ANTIGRAVITY_MCP_PLUGIN)],
+      ["plugin", "validate", join23(spec.root, ANTIGRAVITY_MCP_PLUGIN)],
       spec.root
     );
     findings.push(
@@ -13247,21 +13658,21 @@ function doctor(spec, options2) {
 }
 
 // src/project/memory.ts
-import { existsSync as existsSync16, readFileSync as readFileSync24 } from "fs";
-import { isAbsolute as isAbsolute6, join as join20, resolve as resolve15 } from "path";
+import { existsSync as existsSync19, readFileSync as readFileSync28 } from "fs";
+import { isAbsolute as isAbsolute7, join as join24, resolve as resolve16 } from "path";
 import { parse as parse8 } from "smol-toml";
-function object6(value) {
+function object7(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("Configuration is not an object");
   }
   return value;
 }
 function settings(file2, toml = false) {
-  if (!existsSync16(file2)) {
+  if (!existsSync19(file2)) {
     return {};
   }
-  const text3 = readFileSync24(file2, "utf8");
-  return object6(toml ? parse8(text3) : JSON.parse(text3));
+  const text3 = readFileSync28(file2, "utf8");
+  return object7(toml ? parse8(text3) : JSON.parse(text3));
 }
 function configuredState(value) {
   if (value === true) {
@@ -13273,11 +13684,11 @@ function configuredState(value) {
   return "unknown";
 }
 function located(metadata2, path, pathScope) {
-  return { ...metadata2, path, pathScope, exists: existsSync16(path) };
+  return { ...metadata2, path, pathScope, exists: existsSync19(path) };
 }
 function metadata(tool, spec, options2) {
   const env = options2.env ?? {};
-  const directory = (name, fallback) => resolve15(spec.root, env[name] ?? join20(options2.home, fallback));
+  const directory = (name, fallback) => resolve16(spec.root, env[name] ?? join24(options2.home, fallback));
   if (tool === "antigravity") {
     return {
       state: "unsupported",
@@ -13301,7 +13712,7 @@ function metadata(tool, spec, options2) {
         state,
         source: result.missing ? "Native CLI not installed" : "codex features list; active session overrides are not inspected"
       },
-      join20(home2, "memories"),
+      join24(home2, "memories"),
       "store"
     );
   }
@@ -13314,13 +13725,13 @@ function metadata(tool, spec, options2) {
   }
   if (tool === "claude") {
     const home2 = directory("CLAUDE_CONFIG_DIR", ".claude");
-    const user2 = settings(join20(home2, "settings.json"));
+    const user2 = settings(join24(home2, "settings.json"));
     const state = env["CLAUDE_CODE_DISABLE_AUTO_MEMORY"] === "1" ? "disabled" : configuredState(user2["autoMemoryEnabled"]);
     const source2 = "User configuration and disable environment flag; project trust and active session overrides are not inspected";
     const override = user2["autoMemoryDirectory"];
     if (typeof override === "string") {
-      const path = override.startsWith("~/") ? join20(options2.home, override.slice(2)) : override;
-      if (!isAbsolute6(path)) {
+      const path = override.startsWith("~/") ? join24(options2.home, override.slice(2)) : override;
+      if (!isAbsolute7(path)) {
         return {
           state: "unknown",
           source: "Invalid autoMemoryDirectory metadata; value redacted"
@@ -13332,7 +13743,7 @@ function metadata(tool, spec, options2) {
     if (env["CLAUDE_CONFIG_DIR"] && projectName && !projectName.includes("/") && !projectName.includes("\\") && projectName !== "." && projectName !== "..") {
       return located(
         { state, source: source2 },
-        join20(home2, "projects", projectName, "memory"),
+        join24(home2, "projects", projectName, "memory"),
         "store"
       );
     }
@@ -13341,16 +13752,16 @@ function metadata(tool, spec, options2) {
         state,
         source: `${source2}; native project directory encoding is not guessed`
       },
-      join20(home2, "projects"),
+      join24(home2, "projects"),
       "base"
     );
   }
   if (tool === "grok") {
-    const home2 = join20(options2.home, ".grok");
-    const user2 = settings(join20(home2, "config.toml"), true);
-    const project2 = settings(join20(spec.root, ".grok/config.toml"), true);
-    const userMemory = user2["memory"] === void 0 ? {} : object6(user2["memory"]);
-    const projectMemory = project2["memory"] === void 0 ? {} : object6(project2["memory"]);
+    const home2 = join24(options2.home, ".grok");
+    const user2 = settings(join24(home2, "config.toml"), true);
+    const project2 = settings(join24(spec.root, ".grok/config.toml"), true);
+    const userMemory = user2["memory"] === void 0 ? {} : object7(user2["memory"]);
+    const projectMemory = project2["memory"] === void 0 ? {} : object7(project2["memory"]);
     const overridden = projectMemory["enabled"] !== void 0;
     const state = overridden ? "unknown" : configuredState(userMemory["enabled"]);
     return located(
@@ -13358,13 +13769,13 @@ function metadata(tool, spec, options2) {
         state,
         source: "User memory configuration; project trust and workspace encoding are not exposed by a read-only native memory command"
       },
-      join20(home2, "memory-v2/workspaces"),
+      join24(home2, "memory-v2/workspaces"),
       "base"
     );
   }
   const home = directory("GEMINI_CLI_HOME", ".gemini");
-  const user = settings(join20(home, "settings.json"));
-  const context = user["context"] === void 0 ? {} : object6(user["context"]);
+  const user = settings(join24(home, "settings.json"));
+  const context = user["context"] === void 0 ? {} : object7(user["context"]);
   const names = context["fileName"] ?? "GEMINI.md";
   const contextFileNames = typeof names === "string" ? [names] : names;
   if (!Array.isArray(contextFileNames) || !contextFileNames.every((name) => typeof name === "string")) {
@@ -13379,7 +13790,7 @@ function metadata(tool, spec, options2) {
       source: "Global memory file existence and user context filenames; active memory tool enablement is not exposed",
       contextFileNames
     },
-    join20(home, "GEMINI.md"),
+    join24(home, "GEMINI.md"),
     "store"
   );
 }
@@ -13412,14 +13823,14 @@ function memoryFindings(spec, options2) {
 // src/project/edit.ts
 import {
   cpSync,
-  existsSync as existsSync17,
+  existsSync as existsSync20,
   mkdirSync as mkdirSync8,
-  readFileSync as readFileSync25,
+  readFileSync as readFileSync29,
   rmSync as rmSync5,
-  statSync as statSync12,
+  statSync as statSync13,
   writeFileSync as writeFileSync7
 } from "fs";
-import { basename as basename7, dirname as dirname17, join as join21 } from "path";
+import { basename as basename7, dirname as dirname18, join as join25 } from "path";
 var CROSS_TOOL = ["name", "description"];
 var tomlValue2 = (value) => JSON.stringify(value);
 function findEntry(entries, wanted) {
@@ -13443,7 +13854,7 @@ function addEntry(root, entry2) {
       `${entry2.name} is a ${kind2}; only skills and agents are added to .agents/`
     );
   }
-  const { meta, body } = splitFrontmatter(readFileSync25(entry2.path, "utf8"));
+  const { meta, body } = splitFrontmatter(readFileSync29(entry2.path, "utf8"));
   const name = basename7(entry2.slug);
   if (!/^[a-z0-9][a-z0-9-]*$/u.test(name)) {
     throw new ProjectError(
@@ -13451,12 +13862,12 @@ function addEntry(root, entry2) {
     );
   }
   if (kind2 === "skill") {
-    const dest2 = join21(root, ".agents/skills", name);
-    if (existsSync17(dest2))
+    const dest2 = join25(root, ".agents/skills", name);
+    if (existsSync20(dest2))
       throw new ProjectError(`.agents/skills/${name} already exists`);
-    const source2 = entry2.root ?? dirname17(entry2.path);
-    mkdirSync8(dirname17(dest2), { recursive: true });
-    if (statSync12(source2).isDirectory()) {
+    const source2 = entry2.root ?? dirname18(entry2.path);
+    mkdirSync8(dirname18(dest2), { recursive: true });
+    if (statSync13(source2).isDirectory()) {
       cpSync(source2, dest2, { recursive: true });
     } else {
       mkdirSync8(dest2);
@@ -13467,14 +13878,14 @@ function addEntry(root, entry2) {
       description: meta["description"] ?? entry2.description
     });
     writeFileSync7(
-      join21(dest2, "SKILL.md"),
+      join25(dest2, "SKILL.md"),
       `${head}
 ${body.replace(/^\n/u, "")}`
     );
     return { kind: kind2, name, path: `.agents/skills/${name}` };
   }
-  const dest = join21(root, ".agents/agents", name);
-  if (existsSync17(dest))
+  const dest = join25(root, ".agents/agents", name);
+  if (existsSync20(dest))
     throw new ProjectError(`.agents/agents/${name} already exists`);
   const kept = {};
   const moved = {};
@@ -13484,19 +13895,19 @@ ${body.replace(/^\n/u, "")}`
   }
   mkdirSync8(dest, { recursive: true });
   writeFileSync7(
-    join21(dest, "agent.md"),
+    join25(dest, "agent.md"),
     `${renderFrontmatter(kept)}
 ${body.replace(/^\n/u, "")}`
   );
   if (Object.keys(moved).length > 0) {
-    const config = join21(root, "pmcp.toml");
+    const config = join25(root, "pmcp.toml");
     const lines2 = [
       `[agents.${name}.claude]`,
       ...Object.entries(moved).map(([k, v]) => `${k} = ${tomlValue2(v)}`)
     ];
-    const before = existsSync17(config) ? readFileSync25(config, "utf8") : "";
-    const sep6 = before === "" || before.endsWith("\n\n") ? "" : "\n";
-    writeFileSync7(config, `${before}${sep6}${lines2.join("\n")}
+    const before = existsSync20(config) ? readFileSync29(config, "utf8") : "";
+    const sep7 = before === "" || before.endsWith("\n\n") ? "" : "\n";
+    writeFileSync7(config, `${before}${sep7}${lines2.join("\n")}
 `);
   }
   return { kind: kind2, name, path: `.agents/agents/${name}/agent.md` };
@@ -13517,15 +13928,15 @@ function withoutTables(toml, name) {
 function removeAsset(root, name) {
   const removed = [];
   for (const rel of [`.agents/skills/${name}`, `.agents/agents/${name}`]) {
-    if (!existsSync17(join21(root, rel))) continue;
-    rmSync5(join21(root, rel), { recursive: true, force: true });
+    if (!existsSync20(join25(root, rel))) continue;
+    rmSync5(join25(root, rel), { recursive: true, force: true });
     removed.push(rel);
   }
   if (removed.length === 0)
     throw new ProjectError(`no skill or agent named ${name} in .agents/`);
-  const config = join21(root, "pmcp.toml");
-  if (existsSync17(config)) {
-    const before = readFileSync25(config, "utf8");
+  const config = join25(root, "pmcp.toml");
+  if (existsSync20(config)) {
+    const before = readFileSync29(config, "utf8");
     const after = withoutTables(before, name);
     if (after !== before) writeFileSync7(config, after);
   }
@@ -13764,16 +14175,16 @@ var doctorCommand = {
 };
 
 // src/validate.ts
-import { existsSync as existsSync18, readFileSync as readFileSync26, statSync as statSync13 } from "fs";
-import { basename as basename8, join as join22, resolve as resolve16 } from "path";
+import { existsSync as existsSync21, readFileSync as readFileSync30, statSync as statSync14 } from "fs";
+import { basename as basename8, join as join26, resolve as resolve17 } from "path";
 function validateSkillDir(dir) {
-  const root = resolve16(dir);
-  const skillMd = basename8(root) === "SKILL.md" ? root : join22(root, "SKILL.md");
-  if (!existsSync18(skillMd) || !statSync13(skillMd).isFile()) {
+  const root = resolve17(dir);
+  const skillMd = basename8(root) === "SKILL.md" ? root : join26(root, "SKILL.md");
+  if (!existsSync21(skillMd) || !statSync14(skillMd).isFile()) {
     return [{ path: root, reason: "no SKILL.md", level: "error" }];
   }
-  const front = frontmatterObject(readFileSync26(skillMd, "utf8"));
-  const directory = basename8(skillMd === root ? join22(root, "..") : root);
+  const front = frontmatterObject(readFileSync30(skillMd, "utf8"));
+  const directory = basename8(skillMd === root ? join26(root, "..") : root);
   return specProblems(front, directory).map((reason) => ({
     path: skillMd,
     reason,
@@ -13818,8 +14229,8 @@ var validateCommand = {
 };
 
 // src/commands/mailbox.ts
-import { readFileSync as readFileSync27, writeFileSync as writeFileSync8 } from "fs";
-import { resolve as resolve17 } from "path";
+import { readFileSync as readFileSync31, writeFileSync as writeFileSync8 } from "fs";
+import { resolve as resolve18 } from "path";
 init_config2();
 init_service();
 init_schemas();
@@ -13902,7 +14313,7 @@ var mailboxCommand = {
     }
     if (verb === "init") {
       const config2 = initializeMailboxConfig(
-        resolve17(context.cwd, one(context.args, "config") ?? "pmcp.toml"),
+        resolve18(context.cwd, one(context.args, "config") ?? "pmcp.toml"),
         one(context.args, "state-dir")
       );
       const store2 = await MailboxStore.open(config2);
@@ -13927,7 +14338,7 @@ var mailboxCommand = {
     if (verb === "restore") {
       await restoreBackup(required(context, "input"), {
         ...config,
-        databasePath: resolve17(context.cwd, required(context, "output"))
+        databasePath: resolve18(context.cwd, required(context, "output"))
       });
       context.ui.data(
         `${JSON.stringify({ ok: true, data: { restored: true } })}
@@ -14001,7 +14412,7 @@ var mailboxCommand = {
         ownsBinding = true;
       }
       const inputFile = one(context.args, "input");
-      const input = inputFile ? JSON.parse(readFileSync27(inputFile, "utf8")) : {};
+      const input = inputFile ? JSON.parse(readFileSync31(inputFile, "utf8")) : {};
       const result = await new MailboxService(store, binding).call(
         operation,
         input
@@ -14085,7 +14496,7 @@ var harnessOptions = [
 ];
 
 // src/commands/harness/invocation.ts
-import { readFileSync as readFileSync28, statSync as statSync14 } from "fs";
+import { readFileSync as readFileSync32, statSync as statSync15 } from "fs";
 init_validation();
 var common = ["group-file", "generation"];
 var options = {
@@ -14122,10 +14533,10 @@ var options = {
   "recovery:abort-start": [...common, "session"]
 };
 function file(path) {
-  const stat = statSync14(path);
+  const stat = statSync15(path);
   if (!stat.isFile() || stat.size > 65536)
     throw new ArgumentError("Input file exceeds 65536 bytes");
-  return readFileSync28(path, "utf8");
+  return readFileSync32(path, "utf8");
 }
 function parseInvocation(context) {
   const [family, action, ...extra] = context.args.positional;
@@ -14161,7 +14572,7 @@ function parseInvocation(context) {
     action,
     groupFile: one(context.args, "group-file"),
     generation: one(context.args, "generation"),
-    input: inputFile ? object7(JSON.parse(file(inputFile))) : void 0,
+    input: inputFile ? object8(JSON.parse(file(inputFile))) : void 0,
     sessionId: one(context.args, "session"),
     leaseFile: one(context.args, "lease-file"),
     controller: one(context.args, "controller"),
@@ -14364,6 +14775,198 @@ var tuiCommand = {
   }
 };
 
+// src/commands/marketplace.ts
+import { resolve as resolve21 } from "path";
+
+// src/marketplace/export.ts
+import {
+  existsSync as existsSync33,
+  lstatSync as lstatSync12,
+  mkdirSync as mkdirSync12,
+  readFileSync as readFileSync37,
+  readdirSync as readdirSync13,
+  writeFileSync as writeFileSync14
+} from "fs";
+import { dirname as dirname24, join as join52, resolve as resolve20 } from "path";
+var NATIVE_PLUGIN_RUNTIMES = [
+  "claude",
+  "codex",
+  "gemini",
+  "grok",
+  "agy"
+];
+function isNativePluginRuntime(value) {
+  return NATIVE_PLUGIN_RUNTIMES.includes(value);
+}
+function publicPlugins(root) {
+  const rejected = [];
+  const marketplace = readLocalMarketplace(
+    root,
+    (item) => rejected.push(item.reason)
+  );
+  if (!marketplace || rejected.length)
+    throw new Error(`Invalid public marketplace: ${rejected.join("; ")}`);
+  return marketplace.plugins;
+}
+function readResources(directory, prefix, files) {
+  for (const entry2 of readdirSync13(directory, { withFileTypes: true })) {
+    if (entry2.isSymbolicLink())
+      throw new Error("Plugin exports cannot contain symlinks");
+    const path = join52(directory, entry2.name);
+    const relativePath = `${prefix}/${entry2.name}`;
+    if (entry2.isDirectory()) {
+      if (relativePath.split("/").length > 6)
+        throw new Error("Plugin resources exceed the supported depth");
+      readResources(path, relativePath, files);
+      continue;
+    }
+    if (!entry2.isFile())
+      throw new Error("Plugin resources must be regular files");
+    const stats = lstatSync12(path);
+    if (stats.size > 1024 * 1024 || files.size >= 256)
+      throw new Error("Plugin resources exceed the export budget");
+    files.set(relativePath, readFileSync37(path));
+  }
+}
+function pluginExportFiles(root, name, runtime2) {
+  const plugin = publicPlugins(root).find((item) => item.name === name);
+  if (!plugin) throw new Error("No such public plugin");
+  const files = /* @__PURE__ */ new Map();
+  readResources(containedPath(plugin.directory, "skills"), "skills", files);
+  for (const name2 of ["LICENSE", "NOTICE"])
+    files.set(name2, readFileSync37(containedPath(root, name2)));
+  const manifests = {
+    claude: [".claude-plugin/plugin.json", ".mcp.json"],
+    codex: ["plugin.json", "mcp.json"],
+    gemini: ["gemini-extension.json"],
+    grok: [".claude-plugin/plugin.json", ".mcp.json"],
+    agy: []
+  };
+  for (const filename of manifests[runtime2]) {
+    if (existsSync33(join52(plugin.directory, filename)))
+      files.set(
+        filename,
+        readFileSync37(containedPath(plugin.directory, filename))
+      );
+  }
+  if (runtime2 === "agy") {
+    files.set(
+      "plugin.json",
+      Buffer.from(
+        `${JSON.stringify({ name: plugin.name, description: plugin.manifest.description }, null, 2)}
+`
+      )
+    );
+    const mcp = join52(plugin.directory, ".mcp.json");
+    if (existsSync33(mcp))
+      files.set(
+        "mcp_config.json",
+        readFileSync37(containedPath(plugin.directory, mcp))
+      );
+  }
+  return files;
+}
+function exportPublicPlugin(root, name, runtime2, output) {
+  const destination = resolve20(output);
+  const files = pluginExportFiles(root, name, runtime2);
+  mkdirSync12(dirname24(destination), { recursive: true });
+  try {
+    mkdirSync12(destination);
+  } catch (error) {
+    if (error.code === "EEXIST")
+      throw new Error(
+        "Export destination already exists; choose a new directory"
+      );
+    throw error;
+  }
+  for (const [path, bytes] of files) {
+    const target2 = join52(destination, path);
+    mkdirSync12(dirname24(target2), { recursive: true });
+    writeFileSync14(target2, bytes, { flag: "wx" });
+  }
+  return { plugin: name, runtime: runtime2, output: destination, files: files.size };
+}
+
+// src/commands/marketplace.ts
+var marketplaceCommand = {
+  name: "marketplace",
+  describe: "List free public plugins or export a selected native plugin",
+  usage: "pmcp marketplace list | export <plugin> --runtime <runtime> --output <directory> [--json]",
+  options: [
+    {
+      name: "runtime",
+      describe: "Native plugin format: claude, codex, gemini, grok or agy.",
+      placeholder: "<runtime>"
+    },
+    {
+      name: "output",
+      describe: "New directory for the selected plugin; existing paths are preserved.",
+      placeholder: "<directory>"
+    },
+    {
+      name: "json",
+      describe: "Print machine-readable results.",
+      boolean: true
+    }
+  ],
+  run(context) {
+    const [verb, name, ...extra] = context.args.positional;
+    const root = publicMarketplaceRoot();
+    if (verb === "list") {
+      if (name || extra.length || one(context.args, "runtime") || one(context.args, "output"))
+        throw new ArgumentError(
+          "marketplace list takes no plugin or export options"
+        );
+      const plugins = publicPlugins(root).map((plugin) => ({
+        name: plugin.name,
+        version: plugin.manifest.version,
+        description: plugin.manifest.description
+      }));
+      if (context.args.flags.has("json")) {
+        context.ui.data(
+          `${JSON.stringify({ marketplace: "pmcp", plugins }, null, 2)}
+`
+        );
+        return 0;
+      }
+      context.ui.table(
+        plugins.map((plugin) => [
+          plugin.name,
+          String(plugin.description ?? "")
+        ])
+      );
+      return 0;
+    }
+    if (verb !== "export" || !name || extra.length)
+      throw new ArgumentError(
+        "Use marketplace list or export with exactly one plugin"
+      );
+    const output = one(context.args, "output");
+    if (!output)
+      throw new ArgumentError("Provide --output for the exported plugin");
+    const runtime2 = one(context.args, "runtime");
+    if (!isNativePluginRuntime(runtime2))
+      throw new ArgumentError(
+        "Choose --runtime claude, codex, gemini, grok or agy"
+      );
+    const result = exportPublicPlugin(
+      root,
+      name,
+      runtime2,
+      resolve21(context.cwd, output)
+    );
+    if (context.args.flags.has("json")) {
+      context.ui.data(`${JSON.stringify(result, null, 2)}
+`);
+      return 0;
+    }
+    context.ui.success(
+      `Exported ${name} for ${runtime2} to ${result.output}; install with the native plugin manager`
+    );
+    return 0;
+  }
+};
+
 // src/commands/index.ts
 var COMMANDS = [
   serveCommand,
@@ -14382,7 +14985,8 @@ var COMMANDS = [
   validateCommand,
   mailboxCommand,
   harnessCommand,
-  tuiCommand
+  tuiCommand,
+  marketplaceCommand
 ];
 var PLANNED = [];
 var GLOBAL = /* @__PURE__ */ new Set(["-q", "--quiet", "--no-color", "--color"]);
@@ -14428,7 +15032,7 @@ function dispatch(argv, options2 = {}) {
   }
   return run(command2, rest, { ui, env, cwd });
 }
-var VERSION = "0.13.1";
+var VERSION = "0.14.1";
 async function run(command2, argv, context) {
   try {
     return await command2.run({