@modootoday/pmcp 0.16.1 → 0.17.0

package/dist/cli.js

@@ -1946,11 +1946,11 @@ import {
   fsyncSync as fsyncSync2,
   openSync as openSync4,
   readFileSync as readFileSync34,
-  realpathSync as realpathSync6,
+  realpathSync as realpathSync7,
   renameSync as renameSync4,
   writeFileSync as writeFileSync9
 } from "fs";
-import { dirname as dirname21, join as join29 } from "path";
+import { dirname as dirname21, join as join31 } from "path";
 function privateJson(path, value) {
   const temporary = `${path}.${randomUUID5()}.new`;
   const descriptor = openSync4(temporary, "wx", 384);
@@ -1991,10 +1991,10 @@ var init_store2 = __esm({
       path;
       state;
       constructor(path) {
-        this.path = realpathSync6(path);
+        this.path = realpathSync7(path);
         this.state = validateState(readPrivateJson2(path));
         const metadata2 = object8(
-          readPrivateJson2(join29(dirname21(this.path), "harness.json"))
+          readPrivateJson2(join31(dirname21(this.path), "harness.json"))
         );
         if (this.state.group.schemaVersion !== 1 || this.state.group.owner !== metadata2.owner) {
           throw new Error("foreign_group");
@@ -2016,12 +2016,12 @@ var init_store2 = __esm({
 // src/harness/adapters/process/serialized.ts
 import { spawnSync as spawnSync4 } from "child_process";
 import { randomUUID as randomUUID6 } from "crypto";
-import { existsSync as existsSync25, unlinkSync as unlinkSync2 } from "fs";
-import { dirname as dirname22, join as join30 } from "path";
+import { existsSync as existsSync26, unlinkSync as unlinkSync2 } from "fs";
+import { dirname as dirname22, join as join32 } from "path";
 function serialized(operation) {
   const store = new GroupStore(text(operation.groupFile, "group_file"));
   const directory = dirname22(store.path);
-  const operationFile = join30(directory, `operation-${randomUUID6()}.json`);
+  const operationFile = join32(directory, `operation-${randomUUID6()}.json`);
   privateJson(operationFile, operation);
   const worker = artifact("worker");
   try {
@@ -2033,7 +2033,7 @@ function serialized(operation) {
         "--no-fork",
         "--conflict-exit-code",
         "73",
-        join30(directory, "group-control.lock"),
+        join32(directory, "group-control.lock"),
         process.execPath,
         worker,
         operationFile
@@ -2049,7 +2049,7 @@ function serialized(operation) {
     if (!result.stdout.trim()) throw new Error("worker_receipt_missing");
     return JSON.parse(result.stdout);
   } finally {
-    if (existsSync25(operationFile)) unlinkSync2(operationFile);
+    if (existsSync26(operationFile)) unlinkSync2(operationFile);
   }
 }
 var init_serialized = __esm({
@@ -2368,14 +2368,14 @@ import {
   lstatSync as lstatSync6,
   mkdirSync as mkdirSync9,
   readdirSync as readdirSync10,
-  realpathSync as realpathSync7,
+  realpathSync as realpathSync8,
   writeFileSync as writeFileSync10
 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join31 } from "path";
+import { join as join33 } from "path";
 function stateDirectory() {
-  return join31(
-    process.env.XDG_STATE_HOME ?? join31(homedir7(), ".local/state"),
+  return join33(
+    process.env.XDG_STATE_HOME ?? join33(homedir7(), ".local/state"),
     "pmcp/harness"
   );
 }
@@ -2405,12 +2405,12 @@ var init_records = __esm({
         const stat = lstatSync6(directory);
         if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 63) !== 0)
           throw new Error("unsafe_group_directory");
-        this.directory = realpathSync7(directory);
-        this.socket = join31(this.directory, "s");
+        this.directory = realpathSync8(directory);
+        this.socket = join33(this.directory, "s");
         if (Buffer.byteLength(this.socket) > 100)
           throw new Error("socket_path_too_long");
-        this.metadataPath = join31(this.directory, "harness.json");
-        this.configPath = join31(this.directory, "tmux.conf");
+        this.metadataPath = join33(this.directory, "harness.json");
+        this.configPath = join33(this.directory, "tmux.conf");
         this.owner = text(
           object8(readPrivateJson2(this.metadataPath)).owner,
           "owner"
@@ -2420,17 +2420,17 @@ var init_records = __esm({
       static create() {
         const root = stateDirectory();
         mkdirSync9(root, { recursive: true, mode: 448 });
-        const directory = join31(root, randomUUID7().slice(0, 16));
-        if (Buffer.byteLength(join31(directory, "s")) > 100)
+        const directory = join33(root, randomUUID7().slice(0, 16));
+        if (Buffer.byteLength(join33(directory, "s")) > 100)
           throw new Error("socket_path_too_long");
         mkdirSync9(directory, { mode: 448 });
-        mkdirSync9(join31(directory, "sessions"), { mode: 448 });
-        privateJson(join31(directory, "harness.json"), {
+        mkdirSync9(join33(directory, "sessions"), { mode: 448 });
+        privateJson(join33(directory, "harness.json"), {
           owner: randomUUID7(),
           createdAt: (/* @__PURE__ */ new Date()).toISOString()
         });
         writeFileSync10(
-          join31(directory, "tmux.conf"),
+          join33(directory, "tmux.conf"),
           [
             "set -g remain-on-exit on",
             "set -g history-limit 2000",
@@ -2446,7 +2446,7 @@ var init_records = __esm({
       }
       path(id2) {
         runtimeUnit(id2);
-        return join31(this.directory, "sessions", `${id2}.json`);
+        return join33(this.directory, "sessions", `${id2}.json`);
       }
       read(id2) {
         const record = object8(readPrivateJson2(this.path(id2)));
@@ -2468,7 +2468,7 @@ var init_records = __esm({
         return record;
       }
       all() {
-        return readdirSync10(join31(this.directory, "sessions")).filter((name) => name.endsWith(".json")).map((name) => this.read(name.slice(0, -5)));
+        return readdirSync10(join33(this.directory, "sessions")).filter((name) => name.endsWith(".json")).map((name) => this.read(name.slice(0, -5)));
       }
       save(record) {
         privateJson(this.path(record.id), record);
@@ -2550,8 +2550,8 @@ var init_launch_identity = __esm({
 
 // src/harness/launch/journal.ts
 import { createHash as createHash16 } from "crypto";
-import { existsSync as existsSync26, readdirSync as readdirSync11 } from "fs";
-import { join as join32 } from "path";
+import { existsSync as existsSync27, readdirSync as readdirSync11 } from "fs";
+import { join as join34 } from "path";
 function launchJournals(records2) {
   return readdirSync11(records2.directory).filter((name) => name.endsWith(".intent.json")).map((name) => new LaunchJournal(records2, name.slice(0, -12)));
 }
@@ -2559,7 +2559,7 @@ function pendingLaunches(records2) {
   return launchJournals(records2).filter((journal) => {
     const aborted = journal.abortRecord();
     if (aborted) return aborted.state !== "stopped";
-    if (!existsSync26(journal.path("committed"))) return true;
+    if (!existsSync27(journal.path("committed"))) return true;
     journal.assertCommitted();
     return false;
   });
@@ -2586,7 +2586,7 @@ var init_journal = __esm({
       path(kind2) {
         if (!["intent", "proof", "grant", "committed", "aborted"].includes(kind2))
           throw new Error("invalid_launch_artifact");
-        return join32(this.records.directory, `${this.id}.${kind2}.json`);
+        return join34(this.records.directory, `${this.id}.${kind2}.json`);
       }
       intent() {
         const value = object8(readPrivateJson2(this.path("intent")));
@@ -2615,13 +2615,13 @@ var init_journal = __esm({
             throw new Error("invalid_docker_bridge_digest");
           if (!bridge && creation.bridgeSha256 !== void 0)
             throw new Error("ungranted_docker_bridge_digest");
-          const policy = new GroupStore(join32(this.records.directory, "group.json")).state.group.dockerPolicy;
+          const policy = new GroupStore(join34(this.records.directory, "group.json")).state.group.dockerPolicy;
           const profile = selectedProfile(
             policy,
             creation.privateProfile,
             text(value.runtime, "runtime")
           );
-          const expectedState = profile?.directory ?? join32(
+          const expectedState = profile?.directory ?? join34(
             this.records.directory,
             "containers",
             text(value.nonce, "nonce"),
@@ -2667,7 +2667,7 @@ var init_journal = __esm({
       }
       assertRegistered() {
         const intent = this.intent();
-        const group = new GroupStore(join32(this.records.directory, "group.json")).state.group;
+        const group = new GroupStore(join34(this.records.directory, "group.json")).state.group;
         if (group.id !== intent.groupId || group.generation !== intent.generation)
           throw new Error("launch_group_generation_mismatch");
         if (intent.dockerCreation && JSON.stringify(intent.dockerCreation.egress) !== JSON.stringify(group.dockerPolicy?.egress))
@@ -2683,12 +2683,12 @@ var init_journal = __esm({
           throw new Error("launch_record_mismatch");
       }
       authorize() {
-        if (existsSync26(this.path("aborted"))) throw new Error("launch_was_aborted");
+        if (existsSync27(this.path("aborted"))) throw new Error("launch_was_aborted");
         this.assertRegistered();
         privateJson(this.path("grant"), this.grant());
       }
       assertGrant() {
-        if (existsSync26(this.path("aborted"))) throw new Error("launch_was_aborted");
+        if (existsSync27(this.path("aborted"))) throw new Error("launch_was_aborted");
         const grant = object8(readPrivateJson2(this.path("grant")));
         if (JSON.stringify(grant) !== JSON.stringify(this.grant()))
           throw new Error("launch_grant_mismatch");
@@ -2705,7 +2705,7 @@ var init_journal = __esm({
           throw new Error("launch_commit_mismatch");
       }
       abortRecord() {
-        if (!existsSync26(this.path("aborted"))) return;
+        if (!existsSync27(this.path("aborted"))) return;
         const value = object8(readPrivateJson2(this.path("aborted")));
         if (value.id !== this.id || value.owner !== this.records.owner || !["stopping", "stopped"].includes(String(value.state)))
           throw new Error("foreign_launch_abort");
@@ -2754,20 +2754,20 @@ import { homedir as homedir8 } from "os";
 import {
   closeSync as closeSync5,
   constants as constants4,
-  existsSync as existsSync27,
+  existsSync as existsSync28,
   fstatSync as fstatSync3,
   lstatSync as lstatSync7,
   openSync as openSync5,
-  realpathSync as realpathSync8,
+  realpathSync as realpathSync9,
   statfsSync
 } from "fs";
-import { join as join33, relative as relative11 } from "path";
+import { join as join35, relative as relative11 } from "path";
 function overlap(left, right) {
   const scope = relative11(left, right);
   return scope === "" || scope !== ".." && !scope.startsWith("../");
 }
 function profileIdentity(directory, projectRoot) {
-  if (directory === "/" || directory === realpathSync8(homedir8()) || overlap(directory, projectRoot) || overlap(projectRoot, directory) || realpathSync8(directory) !== directory)
+  if (directory === "/" || directory === realpathSync9(homedir8()) || overlap(directory, projectRoot) || overlap(projectRoot, directory) || realpathSync9(directory) !== directory)
     throw new Error("private_profile_scope_not_admitted");
   const stat = lstatSync7(directory);
   if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 511) !== 448)
@@ -2775,7 +2775,7 @@ function profileIdentity(directory, projectRoot) {
   if ([26985, 4283649346, 4266872130].includes(statfsSync(directory).type))
     throw new Error("remote_private_profile_not_admitted");
   const lock = openSync5(
-    join33(directory, privateProfileLock),
+    join35(directory, privateProfileLock),
     constants4.O_RDONLY | constants4.O_NOFOLLOW
   );
   try {
@@ -2788,14 +2788,14 @@ function profileIdentity(directory, projectRoot) {
   }
 }
 function captureProfile(grant, projectRoot) {
-  const directory = realpathSync8(grant.directory);
-  if (directory !== grant.directory || overlap(directory, projectRoot) || overlap(projectRoot, directory) || directory === "/" || directory === realpathSync8(homedir8()))
+  const directory = realpathSync9(grant.directory);
+  if (directory !== grant.directory || overlap(directory, projectRoot) || overlap(projectRoot, directory) || directory === "/" || directory === realpathSync9(homedir8()))
     throw new Error("private_profile_scope_not_admitted");
   const stat = lstatSync7(directory);
   if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 511) !== 448)
     throw new Error("unsafe_private_profile_directory");
-  const lock = join33(directory, privateProfileLock);
-  if (!existsSync27(lock)) closeSync5(openSync5(lock, "wx", 384));
+  const lock = join35(directory, privateProfileLock);
+  if (!existsSync28(lock)) closeSync5(openSync5(lock, "wx", 384));
   const identity = profileIdentity(directory, projectRoot);
   if (grant.identity && grant.identity !== identity)
     throw new Error("private_profile_identity_changed");
@@ -2813,7 +2813,7 @@ function assertProfileAvailable(grant, projectRoot) {
       "--nonblock",
       "--conflict-exit-code",
       "73",
-      join33(grant.directory, privateProfileLock),
+      join35(grant.directory, privateProfileLock),
       "true"
     ]);
   } catch (error) {
@@ -2833,7 +2833,7 @@ var init_private_profile = __esm({
 
 // src/harness/adapters/docker/profile.ts
 import { homedir as homedir9 } from "os";
-import { lstatSync as lstatSync8, realpathSync as realpathSync9 } from "fs";
+import { lstatSync as lstatSync8, realpathSync as realpathSync10 } from "fs";
 import { relative as relative12 } from "path";
 function assertLocalDocker() {
   if (process.env.DOCKER_HOST)
@@ -2850,12 +2850,12 @@ function assertLocalDocker() {
     throw new Error("remote_docker_context_not_admitted");
 }
 function loadDockerPolicy(path, projectRoot, runtimes) {
-  if (projectRoot === "/" || projectRoot === realpathSync9(homedir9()))
+  if (projectRoot === "/" || projectRoot === realpathSync10(homedir9()))
     throw new Error("docker_project_root_too_broad");
   const inputPath = text(path, "docker_policy_file");
   if (lstatSync8(inputPath).isSymbolicLink())
     throw new Error("symlink_docker_policy_not_admitted");
-  const source2 = realpathSync9(inputPath);
+  const source2 = realpathSync10(inputPath);
   const scope = relative12(projectRoot, source2);
   if (scope === ".." || scope.startsWith("../"))
     throw new Error("docker_policy_outside_project");
@@ -2889,14 +2889,14 @@ var init_profile = __esm({
 });
 
 // src/harness/adapters/docker/mounts.ts
-import { lstatSync as lstatSync9, realpathSync as realpathSync10 } from "fs";
-import { join as join34 } from "path";
+import { lstatSync as lstatSync9, realpathSync as realpathSync11 } from "fs";
+import { join as join36 } from "path";
 function assertContainerMounts(actual, statePath, projectRoot, directory, nonce, policy, privateProfile, runtime2) {
   const state = text(statePath, "container_state_directory");
   const profile = selectedProfile(policy, privateProfile, runtime2 ?? "");
   if (profile) assertProfileIdentity(profile, projectRoot);
-  const expected = profile?.directory ?? join34(directory, "containers", nonce, "profile");
-  if (state !== expected || realpathSync10(state) !== expected)
+  const expected = profile?.directory ?? join36(directory, "containers", nonce, "profile");
+  if (state !== expected || realpathSync11(state) !== expected)
     throw new Error("foreign_container_state_directory");
   const stat = lstatSync9(state);
   if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 63) !== 0)
@@ -2990,8 +2990,8 @@ var init_entrypoint = __esm({
 });
 
 // src/harness/adapters/docker/admission.ts
-import { lstatSync as lstatSync10, realpathSync as realpathSync11 } from "fs";
-import { join as join35, relative as relative13 } from "path";
+import { lstatSync as lstatSync10, realpathSync as realpathSync12 } from "fs";
+import { join as join37, relative as relative13 } from "path";
 function admitResource(path, group, role, directory, memoryMb, runtime2) {
   if (group.profile !== "docker" || !group.dockerPolicy)
     throw new Error("container_requires_docker_profile");
@@ -3000,7 +3000,7 @@ function admitResource(path, group, role, directory, memoryMb, runtime2) {
   const inputPath = text(path, "container_file");
   if (lstatSync10(inputPath).isSymbolicLink())
     throw new Error("symlink_container_file_not_admitted");
-  const source2 = realpathSync11(inputPath);
+  const source2 = realpathSync12(inputPath);
   const scope = relative13(projectRoot, source2);
   if (scope === ".." || scope.startsWith("../"))
     throw new Error("container_file_outside_project");
@@ -3047,7 +3047,7 @@ function admitClaim(value, group, role, directory, memoryMb, runtime2, cwd = gro
     )
   ))
     throw new Error("container_runtime_image_not_granted");
-  if (config.WorkingDir !== join35("/workspace", relative13(projectRoot, cwd)))
+  if (config.WorkingDir !== join37("/workspace", relative13(projectRoot, cwd)))
     throw new Error("container_cwd_not_granted");
   assertContainerMounts(
     actual,
@@ -3191,7 +3191,7 @@ import {
   readFileSync as readFileSync36,
   writeFileSync as writeFileSync11
 } from "fs";
-import { join as join36 } from "path";
+import { join as join38 } from "path";
 function source() {
   const path = artifact("egress-bridge");
   if (!path.endsWith(".js"))
@@ -3210,7 +3210,7 @@ function prepareBridge(creation) {
   if (digest(content) !== creation.bridgeSha256)
     throw new Error("docker_bridge_source_changed");
   const descriptor = openSync6(
-    join36(creation.state, bridgeName(creation.nonce)),
+    join38(creation.state, bridgeName(creation.nonce)),
     "wx",
     384
   );
@@ -3224,7 +3224,7 @@ function prepareBridge(creation) {
 function assertBridge(creation) {
   if (!creation.egress?.bridgeExecutable) return;
   const descriptor = openSync6(
-    join36(creation.state, bridgeName(creation.nonce)),
+    join38(creation.state, bridgeName(creation.nonce)),
     constants5.O_RDONLY | constants5.O_NOFOLLOW
   );
   try {
@@ -3244,7 +3244,7 @@ var init_bridge_artifact = __esm({
 });
 
 // src/harness/adapters/docker/creation-plan.ts
-import { join as join37, relative as relative14 } from "path";
+import { join as join39, relative as relative14 } from "path";
 function creationPlan(group, directory, id2, nonce, role, runtime2, cwd, preparation) {
   if (group.profile !== "docker" || !group.dockerPolicy)
     throw new Error("container_requires_docker_profile");
@@ -3261,7 +3261,7 @@ function creationPlan(group, directory, id2, nonce, role, runtime2, cwd, prepara
     throw new Error("invalid_container_image_environment");
   const profile = selectedProfile(policy, preparation.privateProfile, runtime2);
   if (profile) assertProfileAvailable(profile, group.projectRoot);
-  const state = profile?.directory ?? join37(directory, "containers", nonce, "profile");
+  const state = profile?.directory ?? join39(directory, "containers", nonce, "profile");
   return {
     name: containerName(group.owner, id2),
     nonce,
@@ -3278,7 +3278,7 @@ function creationPlan(group, directory, id2, nonce, role, runtime2, cwd, prepara
         preparation.privateProfile
       ),
       Cmd: preparation.args.length ? preparation.args : null,
-      WorkingDir: join37("/workspace", relative14(group.projectRoot, cwd)),
+      WorkingDir: join39("/workspace", relative14(group.projectRoot, cwd)),
       User: `${process.getuid?.()}:${process.getgid?.()}`,
       Env: [
         ...environment2.filter(
@@ -3377,12 +3377,12 @@ var init_creation_plan = __esm({
 
 // src/harness/adapters/docker/creation.ts
 import { mkdirSync as mkdirSync10 } from "fs";
-import { join as join38 } from "path";
+import { join as join40 } from "path";
 async function prepareCreation(journal) {
   const intent = journal.intent();
   const creation = intent.dockerCreation;
   if (!creation) throw new Error("container_creation_missing");
-  const group = new GroupStore(join38(journal.records.directory, "group.json")).state.group;
+  const group = new GroupStore(join40(journal.records.directory, "group.json")).state.group;
   const profile = selectedProfile(
     group.dockerPolicy,
     creation.privateProfile,
@@ -3396,7 +3396,7 @@ async function prepareCreation(journal) {
     creation.name,
     creation.configuration
   );
-  const current = new GroupStore(join38(journal.records.directory, "group.json")).state.group;
+  const current = new GroupStore(join40(journal.records.directory, "group.json")).state.group;
   if (current.id !== intent.groupId || current.generation !== intent.generation)
     throw new Error("launch_group_generation_mismatch");
   const resource = {
@@ -3464,7 +3464,7 @@ function findCreation(journal) {
   assertResourceOwner(resource, actual);
   assertCreationConfiguration(actual, creation);
   if (!intent.resource) {
-    const group = new GroupStore(join38(journal.records.directory, "group.json")).state.group;
+    const group = new GroupStore(join40(journal.records.directory, "group.json")).state.group;
     return {
       ...admitClaim(
         { ...resource, runtime: intent.runtime, state: creation.state },
@@ -3501,7 +3501,7 @@ var init_creation = __esm({
 });
 
 // src/harness/launch/recovery.ts
-import { existsSync as existsSync28 } from "fs";
+import { existsSync as existsSync29 } from "fs";
 function abortLaunch(connection, journal) {
   const intent = journal.intent();
   if (!controllerExited(intent.controllerIdentity))
@@ -3518,7 +3518,7 @@ function abortLaunch(connection, journal) {
       inputReplayed: false
     };
   }
-  if (!existsSync28(journal.path("proof"))) {
+  if (!existsSync29(journal.path("proof"))) {
     const paneUnknown = connection.alive() && (!intent.dockerCreation || connection.tmux(["list-sessions", "-F", "#{session_name}"]).trim().split("\n").includes(`pmcp-${intent.id}`));
     if (paneUnknown || unitActive(intent.unit))
       throw new Error("launch_identity_unknown");
@@ -3545,7 +3545,7 @@ function abortLaunch(connection, journal) {
     assertProof(connection, proof);
     connection.tmux(["kill-pane", "-t", proof.session.paneId]);
   }
-  if (existsSync28(journal.records.path(intent.id)))
+  if (existsSync29(journal.records.path(intent.id)))
     journal.records.save({
       ...proof.session,
       stoppedAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -3572,9 +3572,9 @@ var init_recovery = __esm({
 
 // src/harness/adapters/tmux/lifecycle.ts
 import { randomUUID as randomUUID8 } from "crypto";
-import { existsSync as existsSync29 } from "fs";
+import { existsSync as existsSync30 } from "fs";
 import { setTimeout as setTimeout2 } from "timers/promises";
-import { join as join39 } from "path";
+import { join as join41 } from "path";
 async function start(connection, spec) {
   const records2 = connection.records;
   if (spec.budgetSlice !== budgetSlice(records2.owner))
@@ -3588,7 +3588,7 @@ async function start(connection, spec) {
   const nonce = randomUUID8();
   const journal = new LaunchJournal(records2, id2);
   const dockerCreation = spec.dockerPreparation ? creationPlan(
-    new GroupStore(join39(records2.directory, "group.json")).state.group,
+    new GroupStore(join41(records2.directory, "group.json")).state.group,
     records2.directory,
     id2,
     nonce,
@@ -3648,7 +3648,7 @@ async function start(connection, spec) {
     `exec ${argv.map(quote2).join(" ")}`
   ]);
   const deadline = Date.now() + 5e3;
-  while (!existsSync29(journal.path("proof"))) {
+  while (!existsSync30(journal.path("proof"))) {
     if (Date.now() >= deadline) throw new Error("launch_proof_timeout");
     await setTimeout2(25);
   }
@@ -3659,7 +3659,7 @@ async function start(connection, spec) {
 }
 function stop(connection, id2) {
   const journal = new LaunchJournal(connection.records, id2);
-  if (existsSync29(journal.path("intent"))) {
+  if (existsSync30(journal.path("intent"))) {
     abortLaunch(connection, journal);
     return;
   }
@@ -3686,7 +3686,7 @@ function cleanup(connection) {
   }
   for (const record of records2) {
     if (record.resource) stopResource(record.resource);
-    if (record.stoppedAt || !existsSync29(
+    if (record.stoppedAt || !existsSync30(
       new LaunchJournal(connection.records, record.id).path("intent")
     )) {
       stopUnit(record.unit);
@@ -3718,7 +3718,7 @@ var init_lifecycle2 = __esm({
 // src/harness/adapters/tmux/input.ts
 import { randomUUID as randomUUID9 } from "crypto";
 import { closeSync as closeSync7, openSync as openSync7, unlinkSync as unlinkSync3, writeFileSync as writeFileSync12 } from "fs";
-import { join as join40 } from "path";
+import { join as join42 } from "path";
 function validateText(text3) {
   if (typeof text3 !== "string" || Buffer.byteLength(text3) > 16384)
     throw new Error("invalid_text");
@@ -3749,7 +3749,7 @@ function write(connection, id2, text3, submit) {
   validateText(text3);
   const session = connection.inspect(id2);
   if (!session.alive) throw new Error("runtime_exited");
-  const lock = join40(connection.records.directory, `${id2}.input.lock`);
+  const lock = join42(connection.records.directory, `${id2}.input.lock`);
   const descriptor = openSync7(lock, "wx", 384);
   const buffer = `pmcp-${randomUUID9()}`;
   try {
@@ -3908,10 +3908,10 @@ var init_backend = __esm({
 });
 
 // src/harness/adapters/systemd/budget.ts
-import { join as join41 } from "path";
+import { join as join43 } from "path";
 async function budgetOperation(directory, operation) {
   const backend = openBackend(directory);
-  const path = join41(directory, "runtime-policy.json");
+  const path = join43(directory, "runtime-policy.json");
   const metadata2 = object8(readPrivateJson2(backend.metadataPath));
   const slice = budgetSlice(backend.owner);
   if (operation.action === "configure") {
@@ -4012,7 +4012,7 @@ var init_budget = __esm({
 
 // src/harness/adapters/systemd/configure.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { join as join42 } from "path";
+import { join as join44 } from "path";
 function configureBudget(context, input) {
   const { store, backend } = context;
   assertOwnedRecords(backend);
@@ -4034,7 +4034,7 @@ function configureBudget(context, input) {
     throw new Error("capacity_below_active_sessions");
   if (active.reduce((total, session) => total + session.memoryMb, 0) > memoryMb)
     throw new Error("budget_below_reserved_memory");
-  const path = join42(backend.runDirectory, "runtime-policy.json");
+  const path = join44(backend.runDirectory, "runtime-policy.json");
   const policy = object8(readPrivateJson2(path));
   const metadata2 = object8(readPrivateJson2(backend.metadataPath));
   const slice = budgetSlice(backend.owner);
@@ -4129,10 +4129,10 @@ var init_admission2 = __esm({
 
 // src/harness/groups/service.ts
 import { randomUUID as randomUUID10 } from "crypto";
-import { realpathSync as realpathSync12, statSync as statSync17, unlinkSync as unlinkSync4 } from "fs";
-import { join as join43 } from "path";
+import { realpathSync as realpathSync13, statSync as statSync17, unlinkSync as unlinkSync4 } from "fs";
+import { join as join45 } from "path";
 async function createGroup(input) {
-  const projectRoot = realpathSync12(text(input.projectRoot, "project_root"));
+  const projectRoot = realpathSync13(text(input.projectRoot, "project_root"));
   if (!statSync17(projectRoot).isDirectory())
     throw new Error("invalid_project_root");
   const allowedRuntimes = strings2(input.allowedRuntimes, "allowed_runtimes");
@@ -4163,7 +4163,7 @@ async function createGroup(input) {
     sessions: [],
     ...dockerPolicy2 ? { dockerPolicy: dockerPolicy2 } : {}
   };
-  const groupFile = join43(backend.runDirectory, "group.json");
+  const groupFile = join45(backend.runDirectory, "group.json");
   privateJson(groupFile, { group, leases: [], deliveries: [] });
   try {
     await budgetOperation(backend.runDirectory, {
@@ -4176,7 +4176,7 @@ async function createGroup(input) {
       await budgetOperation(backend.runDirectory, { action: "cleanup" });
       unlinkSync4(groupFile);
     } catch (cleanupError) {
-      privateJson(join43(backend.runDirectory, "initialization-failure.json"), {
+      privateJson(join45(backend.runDirectory, "initialization-failure.json"), {
         error: String(error),
         cleanupError: String(cleanupError),
         recoveryRequired: true
@@ -4238,16 +4238,16 @@ var init_service2 = __esm({
 });
 
 // src/harness/groups/catalog.ts
-import { existsSync as existsSync30, readdirSync as readdirSync12 } from "fs";
-import { join as join44 } from "path";
+import { existsSync as existsSync31, readdirSync as readdirSync12 } from "fs";
+import { join as join46 } from "path";
 function listGroups() {
   const directory = stateDirectory();
-  if (!existsSync30(directory)) return { groups: [] };
+  if (!existsSync31(directory)) return { groups: [] };
   const groups2 = [];
   for (const entry2 of readdirSync12(directory, { withFileTypes: true })) {
     if (!entry2.isDirectory()) continue;
-    const path = join44(directory, entry2.name, "group.json");
-    if (!existsSync30(path)) continue;
+    const path = join46(directory, entry2.name, "group.json");
+    if (!existsSync31(path)) continue;
     try {
       const store = new GroupStore(path);
       groups2.push({ groupFile: store.path, group: store.state.group });
@@ -4444,7 +4444,7 @@ var init_watch = __esm({
 
 // src/harness/control/leases.ts
 import { randomUUID as randomUUID11 } from "crypto";
-import { join as join45 } from "path";
+import { join as join47 } from "path";
 function resolveLease(context, file2, allowExpired = false) {
   const credential2 = object8(readPrivateJson2(file2));
   const lease = context.store.state.leases.find(
@@ -4488,7 +4488,7 @@ function acquireControl(context, sessionId, controller, mode) {
   );
   store.state.leases.push(lease);
   store.save();
-  const leaseFile = join45(backend.runDirectory, `lease-${randomUUID11()}.json`);
+  const leaseFile = join47(backend.runDirectory, `lease-${randomUUID11()}.json`);
   privateJson(leaseFile, { token: lease.token });
   return { sessionId, controller, mode, expiresAt: lease.expiresAt, leaseFile };
 }
@@ -4635,12 +4635,12 @@ var init_service5 = __esm({
 });
 
 // src/harness/adapters/process/recover-lock.ts
-import { existsSync as existsSync31, lstatSync as lstatSync11, unlinkSync as unlinkSync5 } from "fs";
-import { join as join46 } from "path";
+import { existsSync as existsSync32, lstatSync as lstatSync11, unlinkSync as unlinkSync5 } from "fs";
+import { join as join48 } from "path";
 function recoverInputLock(backend, sessionId) {
   backend.inspect(sessionId);
-  const path = join46(backend.runDirectory, `${sessionId}.input.lock`);
-  if (!existsSync31(path)) return;
+  const path = join48(backend.runDirectory, `${sessionId}.input.lock`);
+  if (!existsSync32(path)) return;
   const before = lstatSync11(path);
   const record = object8(readPrivateJson2(path));
   if (record.id !== sessionId) throw new Error("foreign_writer_lock");
@@ -4660,7 +4660,7 @@ var init_recover_lock = __esm({
 });
 
 // src/harness/launch/service.ts
-import { existsSync as existsSync32 } from "fs";
+import { existsSync as existsSync33 } from "fs";
 function assertLaunchAdmission(records2) {
   for (const journal of launchJournals(records2)) {
     if (journal.abortRecord()?.state === "stopped" && unitActive(journal.intent().unit))
@@ -4685,12 +4685,12 @@ function inspectPendingStarts(context) {
     role: journal.intent().role,
     runtime: journal.intent().runtime,
     controllerExited: controllerExited(journal.intent().controllerIdentity),
-    proofPresent: existsSync32(journal.path("proof")),
-    recordPresent: existsSync32(journal.records.path(journal.id)),
+    proofPresent: existsSync33(journal.path("proof")),
+    recordPresent: existsSync33(journal.records.path(journal.id)),
     registered: context.store.state.group.sessions.some(
       (session) => session.id === journal.id
     ),
-    authorizationPresent: existsSync32(journal.path("grant")),
+    authorizationPresent: existsSync33(journal.path("grant")),
     processingConfirmed: false,
     inputReplayed: false
   }));
@@ -4708,7 +4708,7 @@ var init_service6 = __esm({
 });
 
 // src/harness/sessions/service.ts
-import { realpathSync as realpathSync13 } from "fs";
+import { realpathSync as realpathSync14 } from "fs";
 import { relative as relative15 } from "path";
 async function startSession(context, input) {
   const { store, backend } = context;
@@ -4742,7 +4742,7 @@ async function startSession(context, input) {
     );
     if (!backend.inspect(main2.id).alive) throw new Error("main_unavailable");
   }
-  const cwd = realpathSync13(text(input.cwd ?? group.projectRoot, "cwd"));
+  const cwd = realpathSync14(text(input.cwd ?? group.projectRoot, "cwd"));
   const scope = relative15(group.projectRoot, cwd);
   if (scope === ".." || scope.startsWith("../"))
     throw new Error("cwd_outside_project");
@@ -5205,9 +5205,9 @@ var init_invoke = __esm({
 });
 
 // src/tui/adapters/process/runtime.ts
-import { dirname as dirname24, join as join47 } from "path";
+import { dirname as dirname24, join as join49 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
-import { existsSync as existsSync33, realpathSync as realpathSync14 } from "fs";
+import { existsSync as existsSync34, realpathSync as realpathSync15 } from "fs";
 function dependencies() {
   const tmux = locateExecutable("tmux");
   const flock = locateExecutable("flock");
@@ -5241,9 +5241,9 @@ function runtime() {
     throw new Error("tui_dependencies_unavailable");
   const current = fileURLToPath4(import.meta.url);
   const directory = dirname24(current);
-  const bundled = join47(directory, "tui-worker.js");
-  if (!existsSync33(bundled)) throw new Error("tui_build_required");
-  return { node: realpathSync14(available.node), worker: bundled };
+  const bundled = join49(directory, "tui-worker.js");
+  if (!existsSync34(bundled)) throw new Error("tui_build_required");
+  return { node: realpathSync15(available.node), worker: bundled };
 }
 var init_runtime2 = __esm({
   "src/tui/adapters/process/runtime.ts"() {
@@ -5330,32 +5330,32 @@ var init_diagnostics = __esm({
 // src/tui/state/store.ts
 import { randomUUID as randomUUID13 } from "crypto";
 import {
-  existsSync as existsSync34,
+  existsSync as existsSync35,
   lstatSync as lstatSync12,
   mkdirSync as mkdirSync11,
-  realpathSync as realpathSync15,
+  realpathSync as realpathSync16,
   unlinkSync as unlinkSync6,
   writeFileSync as writeFileSync13
 } from "fs";
 import { homedir as homedir10 } from "os";
-import { dirname as dirname25, join as join48 } from "path";
+import { dirname as dirname25, join as join50 } from "path";
 function createDirectory() {
-  const root = join48(
-    process.env.XDG_STATE_HOME ?? join48(homedir10(), ".local/state"),
+  const root = join50(
+    process.env.XDG_STATE_HOME ?? join50(homedir10(), ".local/state"),
     "pmcp/tui"
   );
   mkdirSync11(root, { recursive: true, mode: 448 });
-  const directory = join48(realpathSync15(root), randomUUID13().slice(0, 16));
-  if (Buffer.byteLength(join48(directory, "s")) > 100)
+  const directory = join50(realpathSync16(root), randomUUID13().slice(0, 16));
+  if (Buffer.byteLength(join50(directory, "s")) > 100)
     throw new Error("socket_path_too_long");
   mkdirSync11(directory, { mode: 448 });
   const owner = randomUUID13();
-  privateJson(join48(directory, "owner.json"), {
+  privateJson(join50(directory, "owner.json"), {
     owner,
     createdAt: (/* @__PURE__ */ new Date()).toISOString()
   });
   writeFileSync13(
-    join48(directory, "tmux.conf"),
+    join50(directory, "tmux.conf"),
     [
       "set -g remain-on-exit on",
       "set -g history-limit 2000",
@@ -5370,13 +5370,13 @@ function createDirectory() {
   return { directory, owner };
 }
 function readView(path) {
-  const file2 = realpathSync15(path);
+  const file2 = realpathSync16(path);
   const directory = dirname25(file2);
   const stat = lstatSync12(directory);
   if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 63) !== 0)
     throw new Error("unsafe_view_directory");
   const value = object8(readPrivateJson2(file2));
-  const metadata2 = object8(readPrivateJson2(join48(directory, "owner.json")));
+  const metadata2 = object8(readPrivateJson2(join50(directory, "owner.json")));
   if (value.schemaVersion !== 1 || value.directory !== directory || value.owner !== metadata2.owner)
     throw new Error("foreign_view_owner");
   for (const key of [
@@ -5413,8 +5413,8 @@ function readView(path) {
       throw new Error("invalid_view_identity");
   }
   const view = value;
-  const fallback = join48(directory, "callback-failure.json");
-  if (existsSync34(fallback)) {
+  const fallback = join50(directory, "callback-failure.json");
+  if (existsSync35(fallback)) {
     const recorded = object8(readPrivateJson2(fallback));
     const failure2 = object8(recorded.failure);
     if (recorded.owner !== view.owner || typeof failure2.code !== "string" || !/^[a-z][a-z0-9_]{0,79}$/.test(failure2.code))
@@ -5425,8 +5425,8 @@ function readView(path) {
   return { file: file2, view };
 }
 function dismissFailure(file2, view) {
-  const fallback = join48(view.directory, "callback-failure.json");
-  if (existsSync34(fallback)) unlinkSync6(fallback);
+  const fallback = join50(view.directory, "callback-failure.json");
+  if (existsSync35(fallback)) unlinkSync6(fallback);
   delete view.failure;
   saveView(file2, view);
 }
@@ -5531,7 +5531,7 @@ var init_budget2 = __esm({
 
 // src/tui/adapters/tmux/connection.ts
 import { spawn as spawn3 } from "child_process";
-import { join as join49 } from "path";
+import { join as join51 } from "path";
 var ViewConnection;
 var init_connection2 = __esm({
   "src/tui/adapters/tmux/connection.ts"() {
@@ -5544,7 +5544,7 @@ var init_connection2 = __esm({
         this.directory = directory;
         this.owner = owner;
         this.identity = identity;
-        this.socket = join49(directory, "s");
+        this.socket = join51(directory, "s");
       }
       directory;
       owner;
@@ -5557,14 +5557,14 @@ var init_connection2 = __esm({
           "-S",
           this.socket,
           "-f",
-          join49(this.directory, "tmux.conf"),
+          join51(this.directory, "tmux.conf"),
           ...args
         ];
         if (args[0] === "new-session" && !this.identity)
           return startPresentation(this.owner, options2, env).trim();
         return command(
           "tmux",
-          ["-S", this.socket, "-f", join49(this.directory, "tmux.conf"), ...args],
+          ["-S", this.socket, "-f", join51(this.directory, "tmux.conf"), ...args],
           { env }
         ).trim();
       }
@@ -5628,7 +5628,7 @@ var init_connection2 = __esm({
 });
 
 // src/tui/application/feedback.ts
-import { join as join50 } from "path";
+import { join as join52 } from "path";
 function describeFailure(action, error) {
   const message = error instanceof Error ? error.message : "view_action_failed";
   const code = error instanceof RangeError ? "terminal_size_invalid" : failureCode(message);
@@ -6080,16 +6080,16 @@ var init_common = __esm({
 });
 
 // src/tui/application/create.ts
-import { join as join51 } from "path";
-import { realpathSync as realpathSync16 } from "fs";
+import { join as join53 } from "path";
+import { realpathSync as realpathSync17 } from "fs";
 async function createView(input) {
   const plan2 = planLayout(input.columns, input.rows);
   const helpers = runtime();
   const mailbox = input.mailbox ? {
-    config: realpathSync16(input.mailbox.config),
-    actorFile: realpathSync16(input.mailbox.actorFile)
+    config: realpathSync17(input.mailbox.config),
+    actorFile: realpathSync17(input.mailbox.actorFile)
   } : void 0;
-  const groupFile = realpathSync16(input.groupFile);
+  const groupFile = realpathSync17(input.groupFile);
   const group = new GroupStore(groupFile).state.group;
   const common2 = new CommonHarness({
     groupFile,
@@ -6102,7 +6102,7 @@ async function createView(input) {
   );
   if (!main2) throw new Error("view_requires_live_main");
   const { directory, owner } = createDirectory();
-  const file2 = join51(directory, "view.json");
+  const file2 = join53(directory, "view.json");
   const connection = new ViewConnection(directory, owner);
   const argv = [helpers.node, helpers.worker, "attach", file2, main2.id];
   const result = connection.raw([
@@ -6330,7 +6330,7 @@ var init_navigation = __esm({
 });
 
 // src/tui/application/history.ts
-import { join as join52 } from "path";
+import { join as join54 } from "path";
 async function observeHistory(context) {
   const { view, renderer, common: common2, file: file2 } = context;
   await releaseControl(context);
@@ -6338,7 +6338,7 @@ async function observeHistory(context) {
     sessionId: view.target,
     input: { lines: 2e3, maxBytes: 65536 }
   });
-  privateJson(join52(view.directory, "history.json"), {
+  privateJson(join54(view.directory, "history.json"), {
     sessionId: view.target,
     content: history.content,
     truncated: history.truncated
@@ -6414,8 +6414,8 @@ var init_mailbox = __esm({
 });
 
 // src/tui/application/lifecycle.ts
-import { existsSync as existsSync35, unlinkSync as unlinkSync7 } from "fs";
-import { join as join53 } from "path";
+import { existsSync as existsSync36, unlinkSync as unlinkSync7 } from "fs";
+import { join as join55 } from "path";
 function resizeView({ view, renderer, input }) {
   renderer.resize(view, planLayout(input.columns, input.rows));
 }
@@ -6430,8 +6430,8 @@ async function stopTarget(context) {
 async function closeView(context) {
   await returnToMain(context);
   context.renderer.connection.cleanup();
-  const history = join53(context.view.directory, "history.json");
-  if (existsSync35(history)) unlinkSync7(history);
+  const history = join55(context.view.directory, "history.json");
+  if (existsSync36(history)) unlinkSync7(history);
   context.view.state = "closed";
   saveView(context.file, context.view);
 }
@@ -6688,7 +6688,7 @@ var init_worker_start = __esm({
 });
 
 // src/tui/startup/config.ts
-import { realpathSync as realpathSync17 } from "fs";
+import { realpathSync as realpathSync18 } from "fs";
 import { resolve as resolve19 } from "path";
 function startupSettings(request3) {
   const path = request3.config ? resolve19(request3.cwd, request3.config) : findConfig(request3.cwd);
@@ -6741,7 +6741,7 @@ function startupSettings(request3) {
     fail2("session memory exceeds the group budget");
   const groupFile = string("group_file");
   return {
-    projectRoot: realpathSync17(config?.dir ?? request3.cwd),
+    projectRoot: realpathSync18(config?.dir ?? request3.cwd),
     ...config ? { configFile: config.path } : {},
     runtime: runtime2,
     allowedRuntimes: [.../* @__PURE__ */ new Set([...available, runtime2])],
@@ -6770,16 +6770,16 @@ var init_config3 = __esm({
 
 // src/tui/startup/state.ts
 import { createHash as createHash19 } from "crypto";
-import { existsSync as existsSync36, lstatSync as lstatSync13, mkdirSync as mkdirSync12 } from "fs";
+import { existsSync as existsSync37, lstatSync as lstatSync13, mkdirSync as mkdirSync12 } from "fs";
 import { homedir as homedir11 } from "os";
-import { dirname as dirname26, join as join54 } from "path";
+import { dirname as dirname26, join as join56 } from "path";
 function startupFile(projectRoot) {
-  const root = join54(
-    process.env.XDG_STATE_HOME ?? join54(homedir11(), ".local/state"),
+  const root = join56(
+    process.env.XDG_STATE_HOME ?? join56(homedir11(), ".local/state"),
     "pmcp/launcher"
   );
   const key = createHash19("sha256").update(projectRoot).digest("hex");
-  return join54(root, `${key}.json`);
+  return join56(root, `${key}.json`);
 }
 function ensureStartupDirectory(file2) {
   const directory = dirname26(file2);
@@ -6789,7 +6789,7 @@ function ensureStartupDirectory(file2) {
     throw new Error("unsafe_startup_directory");
 }
 function readStartup(file2, projectRoot) {
-  if (!existsSync36(file2)) return null;
+  if (!existsSync37(file2)) return null;
   const value = object8(readPrivateJson2(file2));
   if (value.schemaVersion !== 1 || value.projectRoot !== projectRoot)
     throw new Error("foreign_startup_state");
@@ -9859,7 +9859,7 @@ function registerMailboxTools(server, service) {
 
 // src/mcp.ts
 var SERVER_NAME = "pmcp";
-var SERVER_VERSION = "0.16.1";
+var SERVER_VERSION = "0.17.0";
 function registerSkillTools(server, tools) {
   registerCatalogTool(server, tools);
   registerFindTool(server, tools);
@@ -12002,7 +12002,7 @@ import { homedir as homedir6 } from "os";
 // src/project/apply.ts
 import { createHash as createHash13 } from "crypto";
 import {
-  existsSync as existsSync20,
+  existsSync as existsSync21,
   lstatSync as lstatSync5,
   mkdirSync as mkdirSync7,
   readFileSync as readFileSync25,
@@ -12010,7 +12010,7 @@ import {
   readlinkSync as readlinkSync2,
   rmSync as rmSync5
 } from "fs";
-import { dirname as dirname18, join as join24, posix as posix2 } from "path";
+import { dirname as dirname18, join as join25, posix as posix2 } from "path";
 import { parse as parse5 } from "smol-toml";
 
 // src/project/backup.ts
@@ -12202,6 +12202,56 @@ function splitKeyed(path) {
 
 // src/project/mcp.ts
 import { isAbsolute as isAbsolute5, relative as relative9 } from "path";
+
+// src/project/adapters/opencode.ts
+import { existsSync as existsSync17 } from "fs";
+import { join as join22 } from "path";
+var OPENCODE_CONFIG = "opencode.json";
+function checkOpenCodeConfig(root) {
+  if (existsSync17(join22(root, "opencode.jsonc"))) {
+    throw new ProjectError(
+      "OpenCode JSONC projection is not supported; reconcile opencode.jsonc before projecting opencode.json"
+    );
+  }
+}
+function opencodeMcpEntry(server, started) {
+  if (server.tools !== void 0) {
+    throw new ProjectError(
+      "OpenCode per-server tool filtering is not qualified; limit this server's targets"
+    );
+  }
+  const timeout = server.native?.opencode;
+  if (server.url !== void 0) {
+    const headers = { ...server.headers };
+    for (const [key, name] of Object.entries(server.headerEnv ?? {})) {
+      headers[key] = `{env:${name}}`;
+    }
+    if (server.bearerTokenEnvVar) {
+      headers["Authorization"] = `Bearer {env:${server.bearerTokenEnvVar}}`;
+    }
+    return {
+      type: "remote",
+      url: server.url,
+      enabled: true,
+      ...Object.keys(headers).length > 0 ? { headers } : {},
+      ...timeout
+    };
+  }
+  if (!started) {
+    throw new ProjectError(
+      "OpenCode local MCP projection requires a launch specification"
+    );
+  }
+  return {
+    type: "local",
+    command: [started.command, ...started.args],
+    enabled: true,
+    ...Object.keys(started.env).length > 0 ? { environment: { ...started.env } } : {},
+    ...timeout
+  };
+}
+
+// src/project/mcp.ts
 var runtimeByTool = {
   claude: "claude-code",
   codex: "codex-cli",
@@ -12209,6 +12259,15 @@ var runtimeByTool = {
   grok: "grok-cli",
   antigravity: "antigravity"
 };
+function mailboxRuntime(tool) {
+  const runtime2 = runtimeByTool[tool];
+  if (!runtime2) {
+    throw new ProjectError(
+      "OpenCode mailbox runtime binding is not qualified; limit this server's targets"
+    );
+  }
+  return runtime2;
+}
 var ROOT_VAR = "${PROJECT_ROOT}";
 var ANTIGRAVITY_MCP_PLUGIN = ".agents/plugins/pmcp-mcp";
 var VARIABLE = /\$\{([A-Za-z_][A-Za-z0-9_]*)\}/gu;
@@ -12344,18 +12403,19 @@ function httpEntry(server, tool) {
 function nativeEntry(spec, alias, server, tool) {
   let result;
   if (server.url !== void 0) {
+    if (tool === "opencode") return opencodeMcpEntry(server);
     result = httpEntry(server, tool);
   } else {
     const env = { ...server.env };
     if (server.mailbox) {
-      env["PMCP_MAILBOX_RUNTIME"] = runtimeByTool[tool];
+      env["PMCP_MAILBOX_RUNTIME"] = mailboxRuntime(tool);
     }
     let started;
     if (Object.keys(server.envFrom ?? {}).length > 0) {
       const entry2 = relative9(spec.root, process.argv[1] ?? "");
       const driverEnv = {};
       if (server.mailbox) {
-        driverEnv["PMCP_MAILBOX_RUNTIME"] = runtimeByTool[tool];
+        driverEnv["PMCP_MAILBOX_RUNTIME"] = mailboxRuntime(tool);
       }
       if (!isAbsolute5(entry2) && !entry2.startsWith("..")) {
         started = launch({
@@ -12373,6 +12433,7 @@ function nativeEntry(spec, alias, server, tool) {
     } else {
       started = launch({ ...server, env });
     }
+    if (tool === "opencode") return opencodeMcpEntry(server, started);
     result = { command: started.command, args: [...started.args] };
     if (Object.keys(started.env).length > 0) {
       result["env"] = { ...started.env };
@@ -12429,9 +12490,11 @@ function mcpOutputs(spec) {
   const jsonFiles = {
     claude: ".mcp.json",
     gemini: ".gemini/settings.json",
-    antigravity: `${ANTIGRAVITY_MCP_PLUGIN}/mcp_config.json`
+    antigravity: `${ANTIGRAVITY_MCP_PLUGIN}/mcp_config.json`,
+    opencode: OPENCODE_CONFIG
   };
   for (const tool of spec.tools) {
+    if (tool === "opencode") checkOpenCodeConfig(spec.root);
     const servers = serversForTool(spec, tool);
     if (servers.length === 0) {
       continue;
@@ -12450,7 +12513,7 @@ function mcpOutputs(spec) {
         outputs.push(
           jsonOutput(
             file2,
-            ["mcpServers", alias],
+            [tool === "opencode" ? "mcp" : "mcpServers", alias],
             nativeEntry(spec, alias, server, tool)
           )
         );
@@ -12466,14 +12529,14 @@ function mcpOutputs(spec) {
 
 // src/project/hooks.ts
 import { createHash as createHash12 } from "crypto";
-import { existsSync as existsSync18, readFileSync as readFileSync23 } from "fs";
-import { join as join22 } from "path";
+import { existsSync as existsSync19, readFileSync as readFileSync23 } from "fs";
+import { join as join23 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/project/hook-adapter.ts
 import { spawnSync as spawnSync2 } from "child_process";
 import { createHash as createHash11 } from "crypto";
-import { existsSync as existsSync17, readFileSync as readFileSync22, realpathSync as realpathSync5, statSync as statSync10 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync22, realpathSync as realpathSync5, statSync as statSync10 } from "fs";
 import { dirname as dirname16, isAbsolute as isAbsolute6, relative as relative10, resolve as resolve12 } from "path";
 var denied = () => ({
   decision: "deny",
@@ -12490,7 +12553,7 @@ function guardPath(root, command3) {
   if (isAbsolute6(inside) || inside === ".." || inside.startsWith("../") || inside.startsWith("..\\")) {
     throw new Error("Hook guard must stay under .agents/guards/");
   }
-  if (!existsSync17(absolute2) || !statSync10(absolute2).isFile()) {
+  if (!existsSync18(absolute2) || !statSync10(absolute2).isFile()) {
     throw new Error("Hook guard script must exist");
   }
   const actual = relative10(base, realpathSync5(absolute2));
@@ -12685,8 +12748,8 @@ function object4(value) {
   return value;
 }
 function groups(root, file2, key) {
-  const absolute2 = join22(root, file2);
-  if (!existsSync18(absolute2)) {
+  const absolute2 = join23(root, file2);
+  if (!existsSync19(absolute2)) {
     return [];
   }
   let value;
@@ -12715,15 +12778,15 @@ function adapterSource() {
   const sourceBuild = fileURLToPath2(
     new URL("../../dist/project/hook-adapter.js", import.meta.url)
   );
-  const file2 = existsSync18(published) ? published : sourceBuild;
-  if (!existsSync18(file2)) {
+  const file2 = existsSync19(published) ? published : sourceBuild;
+  if (!existsSync19(file2)) {
     throw new ProjectError("Build pmcp before projecting shell hook adapters");
   }
   return readFileSync23(file2, "utf8");
 }
 function hookOutputs(spec) {
-  const lockFile = join22(spec.root, "pmcp.lock");
-  const lock = existsSync18(lockFile) ? JSON.parse(readFileSync23(lockFile, "utf8")) : {};
+  const lockFile = join23(spec.root, "pmcp.lock");
+  const lock = existsSync19(lockFile) ? JSON.parse(readFileSync23(lockFile, "utf8")) : {};
   const previous = new Map(
     (lock.outputs ?? []).filter((entry2) => entry2.managed !== void 0).map((entry2) => [entry2.path, entry2.managed])
   );
@@ -12838,33 +12901,44 @@ ${lines2.join("\n")}
 }
 
 // src/project/plan.ts
-import { existsSync as existsSync19, readFileSync as readFileSync24, readdirSync as readdirSync8 } from "fs";
-import { join as join23 } from "path";
+import { existsSync as existsSync20, readFileSync as readFileSync24, readdirSync as readdirSync8 } from "fs";
+import { join as join24 } from "path";
+
+// src/project/adapters/opencode-skills.ts
+function opencodeSkillOutputs(spec, names) {
+  if (!spec.tools.has("opencode")) return [];
+  return names.filter((name) => spec.skills[name]?.invocation === "user").map(
+    (name) => jsonOutput(OPENCODE_CONFIG, ["permission", "skill", name], "deny")
+  );
+}
+
+// src/project/plan.ts
 var AGENT_FIELDS = {
   claude: ["name", "description", "tools", "model", "effort"],
   gemini: ["name", "description"]
 };
 var SETTINGS = ".claude/settings.json";
 function listDirs(dir) {
-  if (!existsSync19(dir)) return [];
+  if (!existsSync20(dir)) return [];
   return readdirSync8(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
 }
 var tomlString = (value) => JSON.stringify(typeof value === "string" ? value : String(value ?? ""));
 function skillNames(root) {
-  const dir = join23(root, ".agents/skills");
+  const dir = join24(root, ".agents/skills");
   return listDirs(dir).filter(
-    (name) => existsSync19(join23(dir, name, "SKILL.md"))
+    (name) => existsSync20(join24(dir, name, "SKILL.md"))
   );
 }
 function agentNames(root) {
-  const dir = join23(root, ".agents/agents");
+  const dir = join24(root, ".agents/agents");
   return listDirs(dir).filter(
-    (name) => existsSync19(join23(dir, name, "agent.md"))
+    (name) => existsSync20(join24(dir, name, "agent.md"))
   );
 }
 function skillOutputs(spec) {
-  const outputs = [];
-  for (const name of skillNames(spec.root)) {
+  const names = skillNames(spec.root);
+  const outputs = opencodeSkillOutputs(spec, names);
+  for (const name of names) {
     const target2 = `../../.agents/skills/${name}`;
     if (spec.tools.has("claude")) {
       outputs.push({ kind: "link", path: `.claude/skills/${name}`, target: target2 });
@@ -12893,13 +12967,13 @@ policy:
 }
 function ruleOutputs(spec) {
   if (!spec.tools.has("claude")) return [];
-  const dir = join23(spec.root, ".agents/rules");
-  if (!existsSync19(dir)) return [];
+  const dir = join24(spec.root, ".agents/rules");
+  if (!existsSync20(dir)) return [];
   const outputs = [];
   for (const file2 of readdirSync8(dir).filter((f) => f.endsWith(".md")).sort()) {
     const rel = `.agents/rules/${file2}`;
     const { meta, body } = splitFrontmatter(
-      readFileSync24(join23(spec.root, rel), "utf8")
+      readFileSync24(join24(spec.root, rel), "utf8")
     );
     const globs = [meta["globs"] ?? []].flat().filter((g) => typeof g === "string" && g !== "");
     const head = globs.length > 0 ? renderFrontmatter({ paths: globs }) : "";
@@ -12918,7 +12992,7 @@ function agentOutputs(spec) {
   for (const name of agentNames(spec.root)) {
     const rel = `.agents/agents/${name}/agent.md`;
     const { meta, body } = splitFrontmatter(
-      readFileSync24(join23(spec.root, rel), "utf8")
+      readFileSync24(join24(spec.root, rel), "utf8")
     );
     const overrides = spec.agents[name] ?? {};
     const note = `<!-- ${MARK} from ${rel} -->
@@ -13058,8 +13132,8 @@ var PREDECESSORS = [
 ];
 var sha = (text3) => createHash13("sha256").update(text3).digest("hex");
 function readLock(root) {
-  const path = join24(root, LOCK_FILE);
-  if (!existsSync20(path)) return [];
+  const path = join25(root, LOCK_FILE);
+  if (!existsSync21(path)) return [];
   const lock = JSON.parse(readFileSync25(path, "utf8"));
   return lock.outputs ?? [];
 }
@@ -13070,9 +13144,9 @@ function linkOf(abs) {
     return null;
   }
 }
-var exists = (abs) => existsSync20(abs) || linkOf(abs) !== null;
+var exists = (abs) => existsSync21(abs) || linkOf(abs) !== null;
 function readJson2(abs) {
-  if (!existsSync20(abs)) return {};
+  if (!existsSync21(abs)) return {};
   let value;
   try {
     value = JSON.parse(readFileSync25(abs, "utf8"));
@@ -13127,32 +13201,44 @@ function withoutBlock(text3) {
   return `${text3.slice(0, start2).replace(/\n+$/u, "\n")}${after}`;
 }
 function present(root, output) {
-  const abs = join24(root, "file" in output ? output.file : output.path);
+  const abs = join25(root, "file" in output ? output.file : output.path);
   switch (output.kind) {
     case "link":
       return linkOf(abs) === output.target;
     case "file":
-      return existsSync20(abs) && linkOf(abs) === null && readFileSync25(abs, "utf8") === output.content;
+      return existsSync21(abs) && linkOf(abs) === null && readFileSync25(abs, "utf8") === output.content;
     case "json":
       if (output.managed && Array.isArray(output.value) && output.value.length === 0) {
         return getKey(readJson2(abs), output.key) === void 0;
       }
       return same(getKey(readJson2(abs), output.key), output.value);
     case "block":
-      return existsSync20(abs) && readFileSync25(abs, "utf8").includes(block(output.content));
+      return existsSync21(abs) && readFileSync25(abs, "utf8").includes(block(output.content));
   }
 }
 function replaceable(root, output, owned) {
   if (output.kind === "json") {
-    if (output.key[0] !== "mcpServers" || owned.has(output.path)) {
+    if (output.file === "opencode.json") {
+      let parent = readJson2(join25(root, output.file));
+      for (const part of output.key.slice(0, -1)) {
+        if (parent === void 0) break;
+        if (parent === null || typeof parent !== "object" || Array.isArray(parent))
+          return false;
+        parent = parent[part];
+      }
+      if (parent !== void 0 && (parent === null || typeof parent !== "object" || Array.isArray(parent)))
+        return false;
+    }
+    const guarded2 = output.key[0] === "mcpServers" || output.file === "opencode.json";
+    if (!guarded2 || owned.has(output.path)) {
       return true;
     }
-    const existing = getKey(readJson2(join24(root, output.file)), output.key);
+    const existing = getKey(readJson2(join25(root, output.file)), output.key);
     return existing === void 0 || same(existing, output.value);
   }
   if (output.kind === "block") {
-    const absolute2 = join24(root, output.file);
-    const text4 = existsSync20(absolute2) ? readFileSync25(absolute2, "utf8") : "";
+    const absolute2 = join25(root, output.file);
+    const text4 = existsSync21(absolute2) ? readFileSync25(absolute2, "utf8") : "";
     const outside = parse5(withoutBlock(text4));
     const proposed = parse5(output.content);
     const existing = objectKeys(outside["mcp_servers"]);
@@ -13161,7 +13247,7 @@ function replaceable(root, output, owned) {
     );
   }
   if (owned.has(output.path)) return true;
-  const abs = join24(root, output.path);
+  const abs = join25(root, output.path);
   if (!exists(abs)) return true;
   const target2 = linkOf(abs);
   if (target2 !== null) {
@@ -13182,15 +13268,15 @@ function undeclared(spec, outputs) {
   const declared = new Set(outputs.map((o) => o.path));
   const found = [];
   for (const dir of censusDirs(spec)) {
-    const abs = join24(spec.root, dir);
-    if (!existsSync20(abs)) continue;
+    const abs = join25(spec.root, dir);
+    if (!existsSync21(abs)) continue;
     for (const entry2 of readdirSync9(abs)) {
       const path = `${dir}/${entry2}`;
       if (!declared.has(path)) found.push(path);
     }
   }
-  const rules = join24(spec.root, RULES_DIR);
-  if (spec.tools.has("grok") && existsSync20(rules)) {
+  const rules = join25(spec.root, RULES_DIR);
+  if (spec.tools.has("grok") && existsSync21(rules)) {
     for (const entry2 of readdirSync9(rules, { withFileTypes: true })) {
       if (entry2.isDirectory()) continue;
       found.push(`${RULES_DIR}/${entry2.name}`);
@@ -13217,8 +13303,8 @@ function deadGlobs(root, outputs) {
     if (rule.kind === "file") {
       text3 = rule.content;
     } else if (rule.kind === "link") {
-      const abs = join24(root, posix2.join(posix2.dirname(rule.path), rule.target));
-      if (!existsSync20(abs)) continue;
+      const abs = join25(root, posix2.join(posix2.dirname(rule.path), rule.target));
+      if (!existsSync21(abs)) continue;
       text3 = readFileSync25(abs, "utf8");
     } else {
       continue;
@@ -13269,7 +13355,7 @@ function project(spec, options2) {
     }
   }
   for (const path of jsonPaths) {
-    readJson2(join24(spec.root, path));
+    readJson2(join25(spec.root, path));
   }
   if (options2.check) {
     const problems = [
@@ -13290,6 +13376,7 @@ function project(spec, options2) {
     return { code: 3, problems: refused, outputs: outputs.length, pruned: 0 };
   }
   const mcpPaths = [
+    "opencode.json",
     ".mcp.json",
     ".gemini/settings.json",
     ".agents/mcp_config.json",
@@ -13331,7 +13418,7 @@ function project(spec, options2) {
   for (const output of outputs) {
     if (output.kind !== "link" && output.kind !== "file") continue;
     if (present(spec.root, output)) continue;
-    const abs = join24(spec.root, output.path);
+    const abs = join25(spec.root, output.path);
     mkdirSync7(dirname18(abs), { recursive: true });
     if (output.kind === "link") {
       replaceLink(abs, output.target);
@@ -13359,12 +13446,12 @@ function project(spec, options2) {
       group.drops.push(keyed.key);
       jsonFiles.set(keyed.file, group);
     } else {
-      rmSync5(join24(spec.root, entry2.path), { force: true, recursive: true });
+      rmSync5(join25(spec.root, entry2.path), { force: true, recursive: true });
     }
     pruned += 1;
   }
   for (const [file2, { sets, drops }] of jsonFiles) {
-    const abs = join24(spec.root, file2);
+    const abs = join25(spec.root, file2);
     const before = readJson2(abs);
     const after = structuredClone(before);
     for (const key of drops) deleteKey(after, key);
@@ -13379,14 +13466,14 @@ function project(spec, options2) {
       }
     }
     if (same(before, after)) continue;
-    if (!existsSync20(abs) && Object.keys(after).length === 0) continue;
+    if (!existsSync21(abs) && Object.keys(after).length === 0) continue;
     mkdirSync7(dirname18(abs), { recursive: true });
     replaceFile(abs, `${JSON.stringify(after, null, 2)}
 `);
   }
   for (const [file2, content] of blockFiles) {
-    const abs = join24(spec.root, file2);
-    const before = existsSync20(abs) ? readFileSync25(abs, "utf8") : "";
+    const abs = join25(spec.root, file2);
+    const before = existsSync21(abs) ? readFileSync25(abs, "utf8") : "";
     let after = withoutBlock(before);
     if (content !== null) {
       const sep7 = after === "" || after.endsWith("\n\n") ? "" : after.endsWith("\n") ? "\n" : "\n\n";
@@ -13405,15 +13492,15 @@ function project(spec, options2) {
       )
     );
     for (const [name, target2] of legacyLinks(spec.root)) {
-      const abs = join24(spec.root, RULES_DIR, `${name}.md`);
-      const broken = !existsSync20(abs);
+      const abs = join25(spec.root, RULES_DIR, `${name}.md`);
+      const broken = !existsSync21(abs);
       if (!broken && !linkedDirs.has(posix2.dirname(target2))) continue;
       rmSync5(abs, { force: true });
       pruned += 1;
     }
   }
   replaceFile(
-    join24(spec.root, LOCK_FILE),
+    join25(spec.root, LOCK_FILE),
     `${JSON.stringify({ version: 1, outputs: outputs.filter((output) => output.kind !== "json" || output.managed === void 0 || output.managed.length > 0).map(lockEntry) }, null, 2)}
 `
   );
@@ -13510,7 +13597,8 @@ var TOOLS = [
   "codex",
   "gemini",
   "grok",
-  "antigravity"
+  "antigravity",
+  "opencode"
 ];
 var NAME = /^[a-z0-9][a-z0-9-]*$/u;
 function table(path, where, value) {
@@ -13666,7 +13754,8 @@ function nativeOptions(path, where, value) {
     codex: ["startup_timeout_sec", "tool_timeout_sec"],
     gemini: ["timeout"],
     grok: ["startup_timeout_sec", "tool_timeout_sec"],
-    antigravity: []
+    antigravity: [],
+    opencode: ["timeout"]
   };
   const result = {};
   for (const [tool, raw] of Object.entries(
@@ -13860,6 +13949,11 @@ function sourceServers(source2, root) {
     );
   }
   const path = resolve13(root, source2.slice(split + 1));
+  if (tool === "opencode") {
+    throw new ProjectError(
+      "OpenCode MCP import is not qualified; define the server in pmcp.toml"
+    );
+  }
   if (statSync11(path).size > 2 * 1024 * 1024) {
     throw new ProjectError("MCP source exceeds the 2 MiB limit");
   }
@@ -14224,9 +14318,68 @@ async function execMcp(spec, alias, env) {
 
 // src/project/doctor.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { existsSync as existsSync21, readFileSync as readFileSync28 } from "fs";
-import { join as join25 } from "path";
+import { existsSync as existsSync22, readFileSync as readFileSync28 } from "fs";
+import { join as join27 } from "path";
 import { parse as parse8 } from "smol-toml";
+
+// src/project/adapters/opencode-doctor.ts
+import { realpathSync as realpathSync6 } from "fs";
+import { join as join26 } from "path";
+function connected(out, alias) {
+  const ansi = new RegExp(
+    `${String.fromCharCode(27)}\\[[0-?]*[ -/]*[@-~]`,
+    "gu"
+  );
+  const pattern = new RegExp(
+    `^[^a-zA-Z0-9]*${alias}\\s+connected(?:\\s|$)`,
+    "u"
+  );
+  return out.replace(ansi, "").split("\n").some((line) => pattern.test(line.trim()));
+}
+function projectSkill(out, root, name) {
+  try {
+    const entries = JSON.parse(out);
+    if (!Array.isArray(entries)) return false;
+    const expected = realpathSync6(
+      join26(root, ".agents/skills", name, "SKILL.md")
+    );
+    return entries.some(
+      (entry2) => entry2?.name === name && typeof entry2.location === "string" && realpathSync6(entry2.location) === expected
+    );
+  } catch {
+    return false;
+  }
+}
+function opencodeDoctor(spec, options2, listed2) {
+  const findings = [];
+  const names = skillNames(spec.root);
+  if (names.length > 0) {
+    findings.push(
+      listed2(
+        "opencode",
+        "project skills discovered",
+        options2.run("opencode", ["debug", "skill"], spec.root, options2.env),
+        names,
+        (out, name) => projectSkill(out, spec.root, name)
+      )
+    );
+  }
+  const aliases = serversForTool(spec, "opencode").map(([alias]) => alias);
+  if (aliases.length > 0) {
+    findings.push(
+      listed2(
+        "opencode",
+        "mcp servers connected",
+        options2.run("opencode", ["mcp", "list"], spec.root, options2.env),
+        aliases,
+        connected
+      )
+    );
+  }
+  return findings;
+}
+
+// src/project/doctor.ts
 var spawnRunner = (command3, args, cwd, env) => {
   const result = spawnSync3(command3, [...args], {
     cwd,
@@ -14302,9 +14455,9 @@ function claude(spec, o) {
 }
 function codex(spec, o) {
   const findings = [];
-  const config = join25(o.home, ".codex/config.toml");
+  const config = join27(o.home, ".codex/config.toml");
   let trusted = false;
-  if (existsSync21(config)) {
+  if (existsSync22(config)) {
     const projects = parse8(readFileSync28(config, "utf8")).projects ?? {};
     const root = spec.root.replace(/\/$/u, "");
     trusted = projects[root]?.trust_level === "trusted" || projects[`${root}/`]?.trust_level === "trusted";
@@ -14432,7 +14585,7 @@ function grok(spec, o) {
 function antigravity(spec, options2) {
   const foreign = agentNames(spec.root).filter((name) => {
     const text3 = readFileSync28(
-      join25(spec.root, ".agents/agents", name, "agent.md"),
+      join27(spec.root, ".agents/agents", name, "agent.md"),
       "utf8"
     );
     return splitFrontmatter(text3).meta["tools"] !== void 0;
@@ -14452,7 +14605,7 @@ function antigravity(spec, options2) {
   if (serversForTool(spec, "antigravity").length > 0) {
     const result = options2.run(
       "agy",
-      ["plugin", "validate", join25(spec.root, ANTIGRAVITY_MCP_PLUGIN)],
+      ["plugin", "validate", join27(spec.root, ANTIGRAVITY_MCP_PLUGIN)],
       spec.root
     );
     findings.push(
@@ -14476,6 +14629,8 @@ function doctor(spec, options2) {
   if (wanted("codex")) findings.push(...codex(spec, options2));
   if (wanted("gemini")) findings.push(...gemini(spec, options2));
   if (wanted("grok")) findings.push(...grok(spec, options2));
+  if (wanted("opencode"))
+    findings.push(...opencodeDoctor(spec, options2, listed));
   if (wanted("antigravity")) {
     findings.push(...antigravity(spec, options2));
   }
@@ -14483,8 +14638,8 @@ function doctor(spec, options2) {
 }
 
 // src/project/memory.ts
-import { existsSync as existsSync22, readFileSync as readFileSync29 } from "fs";
-import { isAbsolute as isAbsolute7, join as join26, resolve as resolve15 } from "path";
+import { existsSync as existsSync23, readFileSync as readFileSync29 } from "fs";
+import { isAbsolute as isAbsolute7, join as join28, resolve as resolve15 } from "path";
 import { parse as parse9 } from "smol-toml";
 function object7(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
@@ -14493,7 +14648,7 @@ function object7(value) {
   return value;
 }
 function settings(file2, toml = false) {
-  if (!existsSync22(file2)) {
+  if (!existsSync23(file2)) {
     return {};
   }
   const text3 = readFileSync29(file2, "utf8");
@@ -14509,11 +14664,17 @@ function configuredState(value) {
   return "unknown";
 }
 function located(metadata2, path, pathScope) {
-  return { ...metadata2, path, pathScope, exists: existsSync22(path) };
+  return { ...metadata2, path, pathScope, exists: existsSync23(path) };
 }
 function metadata(tool, spec, options2) {
   const env = options2.env ?? {};
-  const directory = (name, fallback) => resolve15(spec.root, env[name] ?? join26(options2.home, fallback));
+  const directory = (name, fallback) => resolve15(spec.root, env[name] ?? join28(options2.home, fallback));
+  if (tool === "opencode") {
+    return {
+      state: "unsupported",
+      source: "OpenCode native memory metadata is not qualified"
+    };
+  }
   if (tool === "antigravity") {
     return {
       state: "unsupported",
@@ -14537,7 +14698,7 @@ function metadata(tool, spec, options2) {
         state,
         source: result.missing ? "Native CLI not installed" : "codex features list; active session overrides are not inspected"
       },
-      join26(home2, "memories"),
+      join28(home2, "memories"),
       "store"
     );
   }
@@ -14550,12 +14711,12 @@ function metadata(tool, spec, options2) {
   }
   if (tool === "claude") {
     const home2 = directory("CLAUDE_CONFIG_DIR", ".claude");
-    const user2 = settings(join26(home2, "settings.json"));
+    const user2 = settings(join28(home2, "settings.json"));
     const state = env["CLAUDE_CODE_DISABLE_AUTO_MEMORY"] === "1" ? "disabled" : configuredState(user2["autoMemoryEnabled"]);
     const source2 = "User configuration and disable environment flag; project trust and active session overrides are not inspected";
     const override = user2["autoMemoryDirectory"];
     if (typeof override === "string") {
-      const path = override.startsWith("~/") ? join26(options2.home, override.slice(2)) : override;
+      const path = override.startsWith("~/") ? join28(options2.home, override.slice(2)) : override;
       if (!isAbsolute7(path)) {
         return {
           state: "unknown",
@@ -14568,7 +14729,7 @@ function metadata(tool, spec, options2) {
     if (env["CLAUDE_CONFIG_DIR"] && projectName && !projectName.includes("/") && !projectName.includes("\\") && projectName !== "." && projectName !== "..") {
       return located(
         { state, source: source2 },
-        join26(home2, "projects", projectName, "memory"),
+        join28(home2, "projects", projectName, "memory"),
         "store"
       );
     }
@@ -14577,14 +14738,14 @@ function metadata(tool, spec, options2) {
         state,
         source: `${source2}; native project directory encoding is not guessed`
       },
-      join26(home2, "projects"),
+      join28(home2, "projects"),
       "base"
     );
   }
   if (tool === "grok") {
-    const home2 = join26(options2.home, ".grok");
-    const user2 = settings(join26(home2, "config.toml"), true);
-    const project2 = settings(join26(spec.root, ".grok/config.toml"), true);
+    const home2 = join28(options2.home, ".grok");
+    const user2 = settings(join28(home2, "config.toml"), true);
+    const project2 = settings(join28(spec.root, ".grok/config.toml"), true);
     const userMemory = user2["memory"] === void 0 ? {} : object7(user2["memory"]);
     const projectMemory = project2["memory"] === void 0 ? {} : object7(project2["memory"]);
     const overridden = projectMemory["enabled"] !== void 0;
@@ -14594,12 +14755,12 @@ function metadata(tool, spec, options2) {
         state,
         source: "User memory configuration; project trust and workspace encoding are not exposed by a read-only native memory command"
       },
-      join26(home2, "memory-v2/workspaces"),
+      join28(home2, "memory-v2/workspaces"),
       "base"
     );
   }
   const home = directory("GEMINI_CLI_HOME", ".gemini");
-  const user = settings(join26(home, "settings.json"));
+  const user = settings(join28(home, "settings.json"));
   const context = user["context"] === void 0 ? {} : object7(user["context"]);
   const names = context["fileName"] ?? "GEMINI.md";
   const contextFileNames = typeof names === "string" ? [names] : names;
@@ -14615,7 +14776,7 @@ function metadata(tool, spec, options2) {
       source: "Global memory file existence and user context filenames; active memory tool enablement is not exposed",
       contextFileNames
     },
-    join26(home, "GEMINI.md"),
+    join28(home, "GEMINI.md"),
     "store"
   );
 }
@@ -14648,14 +14809,14 @@ function memoryFindings(spec, options2) {
 // src/project/edit.ts
 import {
   cpSync,
-  existsSync as existsSync23,
+  existsSync as existsSync24,
   mkdirSync as mkdirSync8,
   readFileSync as readFileSync30,
   rmSync as rmSync6,
   statSync as statSync13,
   writeFileSync as writeFileSync7
 } from "fs";
-import { basename as basename7, dirname as dirname20, join as join27 } from "path";
+import { basename as basename7, dirname as dirname20, join as join29 } from "path";
 var CROSS_TOOL = ["name", "description"];
 var tomlValue2 = (value) => JSON.stringify(value);
 function findEntry(entries, wanted) {
@@ -14687,8 +14848,8 @@ function addEntry(root, entry2) {
     );
   }
   if (kind2 === "skill") {
-    const dest2 = join27(root, ".agents/skills", name);
-    if (existsSync23(dest2))
+    const dest2 = join29(root, ".agents/skills", name);
+    if (existsSync24(dest2))
       throw new ProjectError(`.agents/skills/${name} already exists`);
     const source2 = entry2.root ?? dirname20(entry2.path);
     mkdirSync8(dirname20(dest2), { recursive: true });
@@ -14703,14 +14864,14 @@ function addEntry(root, entry2) {
       description: meta["description"] ?? entry2.description
     });
     writeFileSync7(
-      join27(dest2, "SKILL.md"),
+      join29(dest2, "SKILL.md"),
       `${head}
 ${body.replace(/^\n/u, "")}`
     );
     return { kind: kind2, name, path: `.agents/skills/${name}` };
   }
-  const dest = join27(root, ".agents/agents", name);
-  if (existsSync23(dest))
+  const dest = join29(root, ".agents/agents", name);
+  if (existsSync24(dest))
     throw new ProjectError(`.agents/agents/${name} already exists`);
   const kept = {};
   const moved = {};
@@ -14720,17 +14881,17 @@ ${body.replace(/^\n/u, "")}`
   }
   mkdirSync8(dest, { recursive: true });
   writeFileSync7(
-    join27(dest, "agent.md"),
+    join29(dest, "agent.md"),
     `${renderFrontmatter(kept)}
 ${body.replace(/^\n/u, "")}`
   );
   if (Object.keys(moved).length > 0) {
-    const config = join27(root, "pmcp.toml");
+    const config = join29(root, "pmcp.toml");
     const lines2 = [
       `[agents.${name}.claude]`,
       ...Object.entries(moved).map(([k, v]) => `${k} = ${tomlValue2(v)}`)
     ];
-    const before = existsSync23(config) ? readFileSync30(config, "utf8") : "";
+    const before = existsSync24(config) ? readFileSync30(config, "utf8") : "";
     const sep7 = before === "" || before.endsWith("\n\n") ? "" : "\n";
     writeFileSync7(config, `${before}${sep7}${lines2.join("\n")}
 `);
@@ -14753,14 +14914,14 @@ function withoutTables(toml, name) {
 function removeAsset(root, name) {
   const removed = [];
   for (const rel of [`.agents/skills/${name}`, `.agents/agents/${name}`]) {
-    if (!existsSync23(join27(root, rel))) continue;
-    rmSync6(join27(root, rel), { recursive: true, force: true });
+    if (!existsSync24(join29(root, rel))) continue;
+    rmSync6(join29(root, rel), { recursive: true, force: true });
     removed.push(rel);
   }
   if (removed.length === 0)
     throw new ProjectError(`no skill or agent named ${name} in .agents/`);
-  const config = join27(root, "pmcp.toml");
-  if (existsSync23(config)) {
+  const config = join29(root, "pmcp.toml");
+  if (existsSync24(config)) {
     const before = readFileSync30(config, "utf8");
     const after = withoutTables(before, name);
     if (after !== before) writeFileSync7(config, after);
@@ -15000,16 +15161,16 @@ var doctorCommand = {
 };
 
 // src/validate.ts
-import { existsSync as existsSync24, readFileSync as readFileSync31, statSync as statSync14 } from "fs";
-import { basename as basename8, join as join28, resolve as resolve16 } from "path";
+import { existsSync as existsSync25, readFileSync as readFileSync31, statSync as statSync14 } from "fs";
+import { basename as basename8, join as join30, resolve as resolve16 } from "path";
 function validateSkillDir(dir) {
   const root = resolve16(dir);
-  const skillMd = basename8(root) === "SKILL.md" ? root : join28(root, "SKILL.md");
-  if (!existsSync24(skillMd) || !statSync14(skillMd).isFile()) {
+  const skillMd = basename8(root) === "SKILL.md" ? root : join30(root, "SKILL.md");
+  if (!existsSync25(skillMd) || !statSync14(skillMd).isFile()) {
     return [{ path: root, reason: "no SKILL.md", level: "error" }];
   }
   const front = frontmatterObject(readFileSync31(skillMd, "utf8"));
-  const directory = basename8(skillMd === root ? join28(root, "..") : root);
+  const directory = basename8(skillMd === root ? join30(root, "..") : root);
   return specProblems(front, directory).map((reason) => ({
     path: skillMd,
     reason,
@@ -15694,14 +15855,14 @@ import { resolve as resolve21 } from "path";
 
 // src/marketplace/export.ts
 import {
-  existsSync as existsSync37,
+  existsSync as existsSync38,
   lstatSync as lstatSync14,
   mkdirSync as mkdirSync13,
   readFileSync as readFileSync38,
   readdirSync as readdirSync13,
   writeFileSync as writeFileSync14
 } from "fs";
-import { dirname as dirname27, join as join55, resolve as resolve20 } from "path";
+import { dirname as dirname27, join as join57, resolve as resolve20 } from "path";
 var NATIVE_PLUGIN_RUNTIMES = [
   "claude",
   "codex",
@@ -15726,7 +15887,7 @@ function readResources(directory, prefix, files) {
   for (const entry2 of readdirSync13(directory, { withFileTypes: true })) {
     if (entry2.isSymbolicLink())
       throw new Error("Plugin exports cannot contain symlinks");
-    const path = join55(directory, entry2.name);
+    const path = join57(directory, entry2.name);
     const relativePath = `${prefix}/${entry2.name}`;
     if (entry2.isDirectory()) {
       if (relativePath.split("/").length > 6)
@@ -15757,7 +15918,7 @@ function pluginExportFiles(root, name, runtime2) {
     agy: []
   };
   for (const filename of manifests[runtime2]) {
-    if (existsSync37(join55(plugin.directory, filename)))
+    if (existsSync38(join57(plugin.directory, filename)))
       files.set(
         filename,
         readFileSync38(containedPath(plugin.directory, filename))
@@ -15771,8 +15932,8 @@ function pluginExportFiles(root, name, runtime2) {
 `
       )
     );
-    const mcp = join55(plugin.directory, ".mcp.json");
-    if (existsSync37(mcp))
+    const mcp = join57(plugin.directory, ".mcp.json");
+    if (existsSync38(mcp))
       files.set(
         "mcp_config.json",
         readFileSync38(containedPath(plugin.directory, mcp))
@@ -15794,7 +15955,7 @@ function exportPublicPlugin(root, name, runtime2, output) {
     throw error;
   }
   for (const [path, bytes] of files) {
-    const target2 = join55(destination, path);
+    const target2 = join57(destination, path);
     mkdirSync13(dirname27(target2), { recursive: true });
     writeFileSync14(target2, bytes, { flag: "wx" });
   }
@@ -15946,7 +16107,7 @@ function dispatch(argv, options2 = {}) {
   }
   return run(command3, rest, { ui, env, cwd });
 }
-var VERSION = "0.16.1";
+var VERSION = "0.17.0";
 async function defaultEntry(options2, context) {
   const terminal = options2.terminal ?? {
     stdin: process.stdin.isTTY === true,