@modootoday/pmcp 0.17.0 → 0.17.1

package/dist/cli.js

@@ -1940,45 +1940,45 @@ var init_validation2 = __esm({
 // src/harness/groups/store.ts
 import { randomUUID as randomUUID5 } from "crypto";
 import {
-  closeSync as closeSync4,
+  closeSync as closeSync5,
   constants as constants3,
   fstatSync as fstatSync2,
   fsyncSync as fsyncSync2,
-  openSync as openSync4,
-  readFileSync as readFileSync34,
+  openSync as openSync5,
+  readFileSync as readFileSync35,
   realpathSync as realpathSync7,
   renameSync as renameSync4,
   writeFileSync as writeFileSync9
 } from "fs";
-import { dirname as dirname21, join as join31 } from "path";
+import { dirname as dirname21, join as join32 } from "path";
 function privateJson(path, value) {
   const temporary = `${path}.${randomUUID5()}.new`;
-  const descriptor = openSync4(temporary, "wx", 384);
+  const descriptor = openSync5(temporary, "wx", 384);
   try {
     writeFileSync9(descriptor, `${JSON.stringify(value, null, 2)}
 `);
     fsyncSync2(descriptor);
   } finally {
-    closeSync4(descriptor);
+    closeSync5(descriptor);
   }
   renameSync4(temporary, path);
-  const directory = openSync4(dirname21(path), "r");
+  const directory = openSync5(dirname21(path), "r");
   try {
     fsyncSync2(directory);
   } finally {
-    closeSync4(directory);
+    closeSync5(directory);
   }
 }
 function readPrivateJson2(path) {
-  const descriptor = openSync4(path, constants3.O_RDONLY | constants3.O_NOFOLLOW);
+  const descriptor = openSync5(path, constants3.O_RDONLY | constants3.O_NOFOLLOW);
   try {
     const stat = fstatSync2(descriptor);
     if (!stat.isFile() || (stat.mode & 63) !== 0 || stat.size > 2097152)
       throw new Error("unsafe_state_file");
     if (stat.uid !== process.getuid?.()) throw new Error("foreign_state_file");
-    return JSON.parse(readFileSync34(descriptor, "utf8"));
+    return JSON.parse(readFileSync35(descriptor, "utf8"));
   } finally {
-    closeSync4(descriptor);
+    closeSync5(descriptor);
   }
 }
 var GroupStore;
@@ -1994,7 +1994,7 @@ var init_store2 = __esm({
         this.path = realpathSync7(path);
         this.state = validateState(readPrivateJson2(path));
         const metadata2 = object8(
-          readPrivateJson2(join31(dirname21(this.path), "harness.json"))
+          readPrivateJson2(join32(dirname21(this.path), "harness.json"))
         );
         if (this.state.group.schemaVersion !== 1 || this.state.group.owner !== metadata2.owner) {
           throw new Error("foreign_group");
@@ -2014,18 +2014,18 @@ var init_store2 = __esm({
 });
 
 // src/harness/adapters/process/serialized.ts
-import { spawnSync as spawnSync4 } from "child_process";
+import { spawnSync as spawnSync5 } from "child_process";
 import { randomUUID as randomUUID6 } from "crypto";
 import { existsSync as existsSync26, unlinkSync as unlinkSync2 } from "fs";
-import { dirname as dirname22, join as join32 } from "path";
+import { dirname as dirname22, join as join33 } from "path";
 function serialized(operation) {
   const store = new GroupStore(text(operation.groupFile, "group_file"));
   const directory = dirname22(store.path);
-  const operationFile = join32(directory, `operation-${randomUUID6()}.json`);
+  const operationFile = join33(directory, `operation-${randomUUID6()}.json`);
   privateJson(operationFile, operation);
   const worker = artifact("worker");
   try {
-    const result = spawnSync4(
+    const result = spawnSync5(
       "flock",
       [
         "--exclusive",
@@ -2033,7 +2033,7 @@ function serialized(operation) {
         "--no-fork",
         "--conflict-exit-code",
         "73",
-        join32(directory, "group-control.lock"),
+        join33(directory, "group-control.lock"),
         process.execPath,
         worker,
         operationFile
@@ -2129,11 +2129,11 @@ var init_command = __esm({
 });
 
 // src/harness/adapters/process/identity.ts
-import { readFileSync as readFileSync35 } from "fs";
+import { readFileSync as readFileSync36 } from "fs";
 function processIdentity(pid) {
   if (!Number.isSafeInteger(pid) || pid < 1)
     throw new Error("invalid_process_id");
-  const stat = readFileSync35(`/proc/${pid}/stat`, "utf8");
+  const stat = readFileSync36(`/proc/${pid}/stat`, "utf8");
   const fields = stat.slice(stat.lastIndexOf(")") + 2).split(" ");
   if (!/^\d+$/.test(fields[19] ?? ""))
     throw new Error("process_identity_unknown");
@@ -2372,10 +2372,10 @@ import {
   writeFileSync as writeFileSync10
 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join33 } from "path";
+import { join as join34 } from "path";
 function stateDirectory() {
-  return join33(
-    process.env.XDG_STATE_HOME ?? join33(homedir7(), ".local/state"),
+  return join34(
+    process.env.XDG_STATE_HOME ?? join34(homedir7(), ".local/state"),
     "pmcp/harness"
   );
 }
@@ -2406,11 +2406,11 @@ var init_records = __esm({
         if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 63) !== 0)
           throw new Error("unsafe_group_directory");
         this.directory = realpathSync8(directory);
-        this.socket = join33(this.directory, "s");
+        this.socket = join34(this.directory, "s");
         if (Buffer.byteLength(this.socket) > 100)
           throw new Error("socket_path_too_long");
-        this.metadataPath = join33(this.directory, "harness.json");
-        this.configPath = join33(this.directory, "tmux.conf");
+        this.metadataPath = join34(this.directory, "harness.json");
+        this.configPath = join34(this.directory, "tmux.conf");
         this.owner = text(
           object8(readPrivateJson2(this.metadataPath)).owner,
           "owner"
@@ -2420,17 +2420,17 @@ var init_records = __esm({
       static create() {
         const root = stateDirectory();
         mkdirSync9(root, { recursive: true, mode: 448 });
-        const directory = join33(root, randomUUID7().slice(0, 16));
-        if (Buffer.byteLength(join33(directory, "s")) > 100)
+        const directory = join34(root, randomUUID7().slice(0, 16));
+        if (Buffer.byteLength(join34(directory, "s")) > 100)
           throw new Error("socket_path_too_long");
         mkdirSync9(directory, { mode: 448 });
-        mkdirSync9(join33(directory, "sessions"), { mode: 448 });
-        privateJson(join33(directory, "harness.json"), {
+        mkdirSync9(join34(directory, "sessions"), { mode: 448 });
+        privateJson(join34(directory, "harness.json"), {
           owner: randomUUID7(),
           createdAt: (/* @__PURE__ */ new Date()).toISOString()
         });
         writeFileSync10(
-          join33(directory, "tmux.conf"),
+          join34(directory, "tmux.conf"),
           [
             "set -g remain-on-exit on",
             "set -g history-limit 2000",
@@ -2446,7 +2446,7 @@ var init_records = __esm({
       }
       path(id2) {
         runtimeUnit(id2);
-        return join33(this.directory, "sessions", `${id2}.json`);
+        return join34(this.directory, "sessions", `${id2}.json`);
       }
       read(id2) {
         const record = object8(readPrivateJson2(this.path(id2)));
@@ -2468,7 +2468,7 @@ var init_records = __esm({
         return record;
       }
       all() {
-        return readdirSync10(join33(this.directory, "sessions")).filter((name) => name.endsWith(".json")).map((name) => this.read(name.slice(0, -5)));
+        return readdirSync10(join34(this.directory, "sessions")).filter((name) => name.endsWith(".json")).map((name) => this.read(name.slice(0, -5)));
       }
       save(record) {
         privateJson(this.path(record.id), record);
@@ -2551,7 +2551,7 @@ var init_launch_identity = __esm({
 // src/harness/launch/journal.ts
 import { createHash as createHash16 } from "crypto";
 import { existsSync as existsSync27, readdirSync as readdirSync11 } from "fs";
-import { join as join34 } from "path";
+import { join as join35 } from "path";
 function launchJournals(records2) {
   return readdirSync11(records2.directory).filter((name) => name.endsWith(".intent.json")).map((name) => new LaunchJournal(records2, name.slice(0, -12)));
 }
@@ -2586,7 +2586,7 @@ var init_journal = __esm({
       path(kind2) {
         if (!["intent", "proof", "grant", "committed", "aborted"].includes(kind2))
           throw new Error("invalid_launch_artifact");
-        return join34(this.records.directory, `${this.id}.${kind2}.json`);
+        return join35(this.records.directory, `${this.id}.${kind2}.json`);
       }
       intent() {
         const value = object8(readPrivateJson2(this.path("intent")));
@@ -2615,13 +2615,13 @@ var init_journal = __esm({
             throw new Error("invalid_docker_bridge_digest");
           if (!bridge && creation.bridgeSha256 !== void 0)
             throw new Error("ungranted_docker_bridge_digest");
-          const policy = new GroupStore(join34(this.records.directory, "group.json")).state.group.dockerPolicy;
+          const policy = new GroupStore(join35(this.records.directory, "group.json")).state.group.dockerPolicy;
           const profile = selectedProfile(
             policy,
             creation.privateProfile,
             text(value.runtime, "runtime")
           );
-          const expectedState = profile?.directory ?? join34(
+          const expectedState = profile?.directory ?? join35(
             this.records.directory,
             "containers",
             text(value.nonce, "nonce"),
@@ -2667,7 +2667,7 @@ var init_journal = __esm({
       }
       assertRegistered() {
         const intent = this.intent();
-        const group = new GroupStore(join34(this.records.directory, "group.json")).state.group;
+        const group = new GroupStore(join35(this.records.directory, "group.json")).state.group;
         if (group.id !== intent.groupId || group.generation !== intent.generation)
           throw new Error("launch_group_generation_mismatch");
         if (intent.dockerCreation && JSON.stringify(intent.dockerCreation.egress) !== JSON.stringify(group.dockerPolicy?.egress))
@@ -2752,16 +2752,16 @@ var init_lifecycle = __esm({
 // src/harness/adapters/docker/private-profile.ts
 import { homedir as homedir8 } from "os";
 import {
-  closeSync as closeSync5,
+  closeSync as closeSync6,
   constants as constants4,
   existsSync as existsSync28,
   fstatSync as fstatSync3,
   lstatSync as lstatSync7,
-  openSync as openSync5,
+  openSync as openSync6,
   realpathSync as realpathSync9,
   statfsSync
 } from "fs";
-import { join as join35, relative as relative11 } from "path";
+import { join as join36, relative as relative11 } from "path";
 function overlap(left, right) {
   const scope = relative11(left, right);
   return scope === "" || scope !== ".." && !scope.startsWith("../");
@@ -2774,8 +2774,8 @@ function profileIdentity(directory, projectRoot) {
     throw new Error("unsafe_private_profile_directory");
   if ([26985, 4283649346, 4266872130].includes(statfsSync(directory).type))
     throw new Error("remote_private_profile_not_admitted");
-  const lock = openSync5(
-    join35(directory, privateProfileLock),
+  const lock = openSync6(
+    join36(directory, privateProfileLock),
     constants4.O_RDONLY | constants4.O_NOFOLLOW
   );
   try {
@@ -2784,7 +2784,7 @@ function profileIdentity(directory, projectRoot) {
       throw new Error("unsafe_private_profile_lock");
     return `${stat.dev}:${stat.ino}:${value.dev}:${value.ino}`;
   } finally {
-    closeSync5(lock);
+    closeSync6(lock);
   }
 }
 function captureProfile(grant, projectRoot) {
@@ -2794,8 +2794,8 @@ function captureProfile(grant, projectRoot) {
   const stat = lstatSync7(directory);
   if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 511) !== 448)
     throw new Error("unsafe_private_profile_directory");
-  const lock = join35(directory, privateProfileLock);
-  if (!existsSync28(lock)) closeSync5(openSync5(lock, "wx", 384));
+  const lock = join36(directory, privateProfileLock);
+  if (!existsSync28(lock)) closeSync6(openSync6(lock, "wx", 384));
   const identity = profileIdentity(directory, projectRoot);
   if (grant.identity && grant.identity !== identity)
     throw new Error("private_profile_identity_changed");
@@ -2813,7 +2813,7 @@ function assertProfileAvailable(grant, projectRoot) {
       "--nonblock",
       "--conflict-exit-code",
       "73",
-      join35(grant.directory, privateProfileLock),
+      join36(grant.directory, privateProfileLock),
       "true"
     ]);
   } catch (error) {
@@ -2890,12 +2890,12 @@ var init_profile = __esm({
 
 // src/harness/adapters/docker/mounts.ts
 import { lstatSync as lstatSync9, realpathSync as realpathSync11 } from "fs";
-import { join as join36 } from "path";
+import { join as join37 } from "path";
 function assertContainerMounts(actual, statePath, projectRoot, directory, nonce, policy, privateProfile, runtime2) {
   const state = text(statePath, "container_state_directory");
   const profile = selectedProfile(policy, privateProfile, runtime2 ?? "");
   if (profile) assertProfileIdentity(profile, projectRoot);
-  const expected = profile?.directory ?? join36(directory, "containers", nonce, "profile");
+  const expected = profile?.directory ?? join37(directory, "containers", nonce, "profile");
   if (state !== expected || realpathSync11(state) !== expected)
     throw new Error("foreign_container_state_directory");
   const stat = lstatSync9(state);
@@ -2991,7 +2991,7 @@ var init_entrypoint = __esm({
 
 // src/harness/adapters/docker/admission.ts
 import { lstatSync as lstatSync10, realpathSync as realpathSync12 } from "fs";
-import { join as join37, relative as relative13 } from "path";
+import { join as join38, relative as relative13 } from "path";
 function admitResource(path, group, role, directory, memoryMb, runtime2) {
   if (group.profile !== "docker" || !group.dockerPolicy)
     throw new Error("container_requires_docker_profile");
@@ -3047,7 +3047,7 @@ function admitClaim(value, group, role, directory, memoryMb, runtime2, cwd = gro
     )
   ))
     throw new Error("container_runtime_image_not_granted");
-  if (config.WorkingDir !== join37("/workspace", relative13(projectRoot, cwd)))
+  if (config.WorkingDir !== join38("/workspace", relative13(projectRoot, cwd)))
     throw new Error("container_cwd_not_granted");
   assertContainerMounts(
     actual,
@@ -3183,20 +3183,20 @@ var init_engine = __esm({
 // src/harness/adapters/docker/bridge-artifact.ts
 import { createHash as createHash17 } from "crypto";
 import {
-  closeSync as closeSync6,
+  closeSync as closeSync7,
   constants as constants5,
   fstatSync as fstatSync4,
   fsyncSync as fsyncSync3,
-  openSync as openSync6,
-  readFileSync as readFileSync36,
+  openSync as openSync7,
+  readFileSync as readFileSync37,
   writeFileSync as writeFileSync11
 } from "fs";
-import { join as join38 } from "path";
+import { join as join39 } from "path";
 function source() {
   const path = artifact("egress-bridge");
   if (!path.endsWith(".js"))
     throw new Error("docker_bridge_requires_compiled_cli");
-  return readFileSync36(path);
+  return readFileSync37(path);
 }
 function digest(value) {
   return createHash17("sha256").update(value).digest("hex");
@@ -3209,8 +3209,8 @@ function prepareBridge(creation) {
   const content = source();
   if (digest(content) !== creation.bridgeSha256)
     throw new Error("docker_bridge_source_changed");
-  const descriptor = openSync6(
-    join38(creation.state, bridgeName(creation.nonce)),
+  const descriptor = openSync7(
+    join39(creation.state, bridgeName(creation.nonce)),
     "wx",
     384
   );
@@ -3218,21 +3218,21 @@ function prepareBridge(creation) {
     writeFileSync11(descriptor, content);
     fsyncSync3(descriptor);
   } finally {
-    closeSync6(descriptor);
+    closeSync7(descriptor);
   }
 }
 function assertBridge(creation) {
   if (!creation.egress?.bridgeExecutable) return;
-  const descriptor = openSync6(
-    join38(creation.state, bridgeName(creation.nonce)),
+  const descriptor = openSync7(
+    join39(creation.state, bridgeName(creation.nonce)),
     constants5.O_RDONLY | constants5.O_NOFOLLOW
   );
   try {
     const stat = fstatSync4(descriptor);
-    if (!stat.isFile() || stat.uid !== process.getuid?.() || stat.nlink !== 1 || (stat.mode & 63) !== 0 || stat.size > 2097152 || digest(readFileSync36(descriptor)) !== creation.bridgeSha256)
+    if (!stat.isFile() || stat.uid !== process.getuid?.() || stat.nlink !== 1 || (stat.mode & 63) !== 0 || stat.size > 2097152 || digest(readFileSync37(descriptor)) !== creation.bridgeSha256)
       throw new Error("docker_bridge_artifact_changed");
   } finally {
-    closeSync6(descriptor);
+    closeSync7(descriptor);
   }
 }
 var init_bridge_artifact = __esm({
@@ -3244,7 +3244,7 @@ var init_bridge_artifact = __esm({
 });
 
 // src/harness/adapters/docker/creation-plan.ts
-import { join as join39, relative as relative14 } from "path";
+import { join as join40, relative as relative14 } from "path";
 function creationPlan(group, directory, id2, nonce, role, runtime2, cwd, preparation) {
   if (group.profile !== "docker" || !group.dockerPolicy)
     throw new Error("container_requires_docker_profile");
@@ -3261,7 +3261,7 @@ function creationPlan(group, directory, id2, nonce, role, runtime2, cwd, prepara
     throw new Error("invalid_container_image_environment");
   const profile = selectedProfile(policy, preparation.privateProfile, runtime2);
   if (profile) assertProfileAvailable(profile, group.projectRoot);
-  const state = profile?.directory ?? join39(directory, "containers", nonce, "profile");
+  const state = profile?.directory ?? join40(directory, "containers", nonce, "profile");
   return {
     name: containerName(group.owner, id2),
     nonce,
@@ -3278,7 +3278,7 @@ function creationPlan(group, directory, id2, nonce, role, runtime2, cwd, prepara
         preparation.privateProfile
       ),
       Cmd: preparation.args.length ? preparation.args : null,
-      WorkingDir: join39("/workspace", relative14(group.projectRoot, cwd)),
+      WorkingDir: join40("/workspace", relative14(group.projectRoot, cwd)),
       User: `${process.getuid?.()}:${process.getgid?.()}`,
       Env: [
         ...environment2.filter(
@@ -3377,12 +3377,12 @@ var init_creation_plan = __esm({
 
 // src/harness/adapters/docker/creation.ts
 import { mkdirSync as mkdirSync10 } from "fs";
-import { join as join40 } from "path";
+import { join as join41 } from "path";
 async function prepareCreation(journal) {
   const intent = journal.intent();
   const creation = intent.dockerCreation;
   if (!creation) throw new Error("container_creation_missing");
-  const group = new GroupStore(join40(journal.records.directory, "group.json")).state.group;
+  const group = new GroupStore(join41(journal.records.directory, "group.json")).state.group;
   const profile = selectedProfile(
     group.dockerPolicy,
     creation.privateProfile,
@@ -3396,7 +3396,7 @@ async function prepareCreation(journal) {
     creation.name,
     creation.configuration
   );
-  const current = new GroupStore(join40(journal.records.directory, "group.json")).state.group;
+  const current = new GroupStore(join41(journal.records.directory, "group.json")).state.group;
   if (current.id !== intent.groupId || current.generation !== intent.generation)
     throw new Error("launch_group_generation_mismatch");
   const resource = {
@@ -3464,7 +3464,7 @@ function findCreation(journal) {
   assertResourceOwner(resource, actual);
   assertCreationConfiguration(actual, creation);
   if (!intent.resource) {
-    const group = new GroupStore(join40(journal.records.directory, "group.json")).state.group;
+    const group = new GroupStore(join41(journal.records.directory, "group.json")).state.group;
     return {
       ...admitClaim(
         { ...resource, runtime: intent.runtime, state: creation.state },
@@ -3574,7 +3574,7 @@ var init_recovery = __esm({
 import { randomUUID as randomUUID8 } from "crypto";
 import { existsSync as existsSync30 } from "fs";
 import { setTimeout as setTimeout2 } from "timers/promises";
-import { join as join41 } from "path";
+import { join as join42 } from "path";
 async function start(connection, spec) {
   const records2 = connection.records;
   if (spec.budgetSlice !== budgetSlice(records2.owner))
@@ -3588,7 +3588,7 @@ async function start(connection, spec) {
   const nonce = randomUUID8();
   const journal = new LaunchJournal(records2, id2);
   const dockerCreation = spec.dockerPreparation ? creationPlan(
-    new GroupStore(join41(records2.directory, "group.json")).state.group,
+    new GroupStore(join42(records2.directory, "group.json")).state.group,
     records2.directory,
     id2,
     nonce,
@@ -3717,8 +3717,8 @@ var init_lifecycle2 = __esm({
 
 // src/harness/adapters/tmux/input.ts
 import { randomUUID as randomUUID9 } from "crypto";
-import { closeSync as closeSync7, openSync as openSync7, unlinkSync as unlinkSync3, writeFileSync as writeFileSync12 } from "fs";
-import { join as join42 } from "path";
+import { closeSync as closeSync8, openSync as openSync8, unlinkSync as unlinkSync3, writeFileSync as writeFileSync12 } from "fs";
+import { join as join43 } from "path";
 function validateText(text3) {
   if (typeof text3 !== "string" || Buffer.byteLength(text3) > 16384)
     throw new Error("invalid_text");
@@ -3749,8 +3749,8 @@ function write(connection, id2, text3, submit) {
   validateText(text3);
   const session = connection.inspect(id2);
   if (!session.alive) throw new Error("runtime_exited");
-  const lock = join42(connection.records.directory, `${id2}.input.lock`);
-  const descriptor = openSync7(lock, "wx", 384);
+  const lock = join43(connection.records.directory, `${id2}.input.lock`);
+  const descriptor = openSync8(lock, "wx", 384);
   const buffer = `pmcp-${randomUUID9()}`;
   try {
     writeFileSync12(
@@ -3791,7 +3791,7 @@ function write(connection, id2, text3, submit) {
       connection.tmux(["delete-buffer", "-b", buffer]);
     } catch {
     }
-    closeSync7(descriptor);
+    closeSync8(descriptor);
     unlinkSync3(lock);
   }
 }
@@ -3908,10 +3908,10 @@ var init_backend = __esm({
 });
 
 // src/harness/adapters/systemd/budget.ts
-import { join as join43 } from "path";
+import { join as join44 } from "path";
 async function budgetOperation(directory, operation) {
   const backend = openBackend(directory);
-  const path = join43(directory, "runtime-policy.json");
+  const path = join44(directory, "runtime-policy.json");
   const metadata2 = object8(readPrivateJson2(backend.metadataPath));
   const slice = budgetSlice(backend.owner);
   if (operation.action === "configure") {
@@ -4012,7 +4012,7 @@ var init_budget = __esm({
 
 // src/harness/adapters/systemd/configure.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { join as join44 } from "path";
+import { join as join45 } from "path";
 function configureBudget(context, input) {
   const { store, backend } = context;
   assertOwnedRecords(backend);
@@ -4034,7 +4034,7 @@ function configureBudget(context, input) {
     throw new Error("capacity_below_active_sessions");
   if (active.reduce((total, session) => total + session.memoryMb, 0) > memoryMb)
     throw new Error("budget_below_reserved_memory");
-  const path = join44(backend.runDirectory, "runtime-policy.json");
+  const path = join45(backend.runDirectory, "runtime-policy.json");
   const policy = object8(readPrivateJson2(path));
   const metadata2 = object8(readPrivateJson2(backend.metadataPath));
   const slice = budgetSlice(backend.owner);
@@ -4071,14 +4071,14 @@ var init_configure = __esm({
 });
 
 // src/harness/adapters/process/executable.ts
-import { accessSync, constants as constants6, statSync as statSync16 } from "fs";
+import { accessSync, constants as constants6, statSync as statSync17 } from "fs";
 import { delimiter, resolve as resolve18 } from "path";
 function locateExecutable(binary, cwd = process.cwd()) {
   for (const directory of (process.env.PATH ?? "").split(delimiter)) {
     if (!directory) continue;
     const path = resolve18(cwd, directory, binary);
     try {
-      if (!statSync16(path).isFile()) continue;
+      if (!statSync17(path).isFile()) continue;
       accessSync(path, constants6.X_OK);
       return path;
     } catch {
@@ -4129,11 +4129,11 @@ var init_admission2 = __esm({
 
 // src/harness/groups/service.ts
 import { randomUUID as randomUUID10 } from "crypto";
-import { realpathSync as realpathSync13, statSync as statSync17, unlinkSync as unlinkSync4 } from "fs";
-import { join as join45 } from "path";
+import { realpathSync as realpathSync13, statSync as statSync18, unlinkSync as unlinkSync4 } from "fs";
+import { join as join46 } from "path";
 async function createGroup(input) {
   const projectRoot = realpathSync13(text(input.projectRoot, "project_root"));
-  if (!statSync17(projectRoot).isDirectory())
+  if (!statSync18(projectRoot).isDirectory())
     throw new Error("invalid_project_root");
   const allowedRuntimes = strings2(input.allowedRuntimes, "allowed_runtimes");
   const profile = input.profile ?? "native";
@@ -4163,7 +4163,7 @@ async function createGroup(input) {
     sessions: [],
     ...dockerPolicy2 ? { dockerPolicy: dockerPolicy2 } : {}
   };
-  const groupFile = join45(backend.runDirectory, "group.json");
+  const groupFile = join46(backend.runDirectory, "group.json");
   privateJson(groupFile, { group, leases: [], deliveries: [] });
   try {
     await budgetOperation(backend.runDirectory, {
@@ -4176,7 +4176,7 @@ async function createGroup(input) {
       await budgetOperation(backend.runDirectory, { action: "cleanup" });
       unlinkSync4(groupFile);
     } catch (cleanupError) {
-      privateJson(join45(backend.runDirectory, "initialization-failure.json"), {
+      privateJson(join46(backend.runDirectory, "initialization-failure.json"), {
         error: String(error),
         cleanupError: String(cleanupError),
         recoveryRequired: true
@@ -4239,14 +4239,14 @@ var init_service2 = __esm({
 
 // src/harness/groups/catalog.ts
 import { existsSync as existsSync31, readdirSync as readdirSync12 } from "fs";
-import { join as join46 } from "path";
+import { join as join47 } from "path";
 function listGroups() {
   const directory = stateDirectory();
   if (!existsSync31(directory)) return { groups: [] };
   const groups2 = [];
   for (const entry2 of readdirSync12(directory, { withFileTypes: true })) {
     if (!entry2.isDirectory()) continue;
-    const path = join46(directory, entry2.name, "group.json");
+    const path = join47(directory, entry2.name, "group.json");
     if (!existsSync31(path)) continue;
     try {
       const store = new GroupStore(path);
@@ -4444,7 +4444,7 @@ var init_watch = __esm({
 
 // src/harness/control/leases.ts
 import { randomUUID as randomUUID11 } from "crypto";
-import { join as join47 } from "path";
+import { join as join48 } from "path";
 function resolveLease(context, file2, allowExpired = false) {
   const credential2 = object8(readPrivateJson2(file2));
   const lease = context.store.state.leases.find(
@@ -4488,7 +4488,7 @@ function acquireControl(context, sessionId, controller, mode) {
   );
   store.state.leases.push(lease);
   store.save();
-  const leaseFile = join47(backend.runDirectory, `lease-${randomUUID11()}.json`);
+  const leaseFile = join48(backend.runDirectory, `lease-${randomUUID11()}.json`);
   privateJson(leaseFile, { token: lease.token });
   return { sessionId, controller, mode, expiresAt: lease.expiresAt, leaseFile };
 }
@@ -4636,10 +4636,10 @@ var init_service5 = __esm({
 
 // src/harness/adapters/process/recover-lock.ts
 import { existsSync as existsSync32, lstatSync as lstatSync11, unlinkSync as unlinkSync5 } from "fs";
-import { join as join48 } from "path";
+import { join as join49 } from "path";
 function recoverInputLock(backend, sessionId) {
   backend.inspect(sessionId);
-  const path = join48(backend.runDirectory, `${sessionId}.input.lock`);
+  const path = join49(backend.runDirectory, `${sessionId}.input.lock`);
   if (!existsSync32(path)) return;
   const before = lstatSync11(path);
   const record = object8(readPrivateJson2(path));
@@ -5205,7 +5205,7 @@ var init_invoke = __esm({
 });
 
 // src/tui/adapters/process/runtime.ts
-import { dirname as dirname24, join as join49 } from "path";
+import { dirname as dirname24, join as join50 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 import { existsSync as existsSync34, realpathSync as realpathSync15 } from "fs";
 function dependencies() {
@@ -5241,7 +5241,7 @@ function runtime() {
     throw new Error("tui_dependencies_unavailable");
   const current = fileURLToPath4(import.meta.url);
   const directory = dirname24(current);
-  const bundled = join49(directory, "tui-worker.js");
+  const bundled = join50(directory, "tui-worker.js");
   if (!existsSync34(bundled)) throw new Error("tui_build_required");
   return { node: realpathSync15(available.node), worker: bundled };
 }
@@ -5338,24 +5338,24 @@ import {
   writeFileSync as writeFileSync13
 } from "fs";
 import { homedir as homedir10 } from "os";
-import { dirname as dirname25, join as join50 } from "path";
+import { dirname as dirname25, join as join51 } from "path";
 function createDirectory() {
-  const root = join50(
-    process.env.XDG_STATE_HOME ?? join50(homedir10(), ".local/state"),
+  const root = join51(
+    process.env.XDG_STATE_HOME ?? join51(homedir10(), ".local/state"),
     "pmcp/tui"
   );
   mkdirSync11(root, { recursive: true, mode: 448 });
-  const directory = join50(realpathSync16(root), randomUUID13().slice(0, 16));
-  if (Buffer.byteLength(join50(directory, "s")) > 100)
+  const directory = join51(realpathSync16(root), randomUUID13().slice(0, 16));
+  if (Buffer.byteLength(join51(directory, "s")) > 100)
     throw new Error("socket_path_too_long");
   mkdirSync11(directory, { mode: 448 });
   const owner = randomUUID13();
-  privateJson(join50(directory, "owner.json"), {
+  privateJson(join51(directory, "owner.json"), {
     owner,
     createdAt: (/* @__PURE__ */ new Date()).toISOString()
   });
   writeFileSync13(
-    join50(directory, "tmux.conf"),
+    join51(directory, "tmux.conf"),
     [
       "set -g remain-on-exit on",
       "set -g history-limit 2000",
@@ -5376,7 +5376,7 @@ function readView(path) {
   if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 63) !== 0)
     throw new Error("unsafe_view_directory");
   const value = object8(readPrivateJson2(file2));
-  const metadata2 = object8(readPrivateJson2(join50(directory, "owner.json")));
+  const metadata2 = object8(readPrivateJson2(join51(directory, "owner.json")));
   if (value.schemaVersion !== 1 || value.directory !== directory || value.owner !== metadata2.owner)
     throw new Error("foreign_view_owner");
   for (const key of [
@@ -5413,7 +5413,7 @@ function readView(path) {
       throw new Error("invalid_view_identity");
   }
   const view = value;
-  const fallback = join50(directory, "callback-failure.json");
+  const fallback = join51(directory, "callback-failure.json");
   if (existsSync35(fallback)) {
     const recorded = object8(readPrivateJson2(fallback));
     const failure2 = object8(recorded.failure);
@@ -5425,7 +5425,7 @@ function readView(path) {
   return { file: file2, view };
 }
 function dismissFailure(file2, view) {
-  const fallback = join50(view.directory, "callback-failure.json");
+  const fallback = join51(view.directory, "callback-failure.json");
   if (existsSync35(fallback)) unlinkSync6(fallback);
   delete view.failure;
   saveView(file2, view);
@@ -5443,7 +5443,7 @@ var init_store3 = __esm({
 });
 
 // src/tui/adapters/process/lock.ts
-import { spawnSync as spawnSync5 } from "child_process";
+import { spawnSync as spawnSync6 } from "child_process";
 function serializedView(invocation2) {
   const { file: file2, view } = readView(invocation2.viewFile);
   const args = ["locked", invocation2.action, "--view", file2];
@@ -5454,7 +5454,7 @@ function serializedView(invocation2) {
     ["confirm-session", invocation2.input.confirmSession]
   ])
     if (value !== void 0) args.push(`--${name}`, String(value));
-  const child = spawnSync5(
+  const child = spawnSync6(
     "flock",
     [
       "--wait",
@@ -5488,7 +5488,7 @@ var init_lock = __esm({
 });
 
 // src/tui/adapters/process/budget.ts
-import { readFileSync as readFileSync37 } from "fs";
+import { readFileSync as readFileSync38 } from "fs";
 function viewUnit(owner) {
   if (!/^[a-f0-9]{8}(-[a-f0-9]{4}){3}-[a-f0-9]{12}$/.test(owner))
     throw new Error("invalid_view_owner");
@@ -5516,7 +5516,7 @@ function startPresentation(owner, args, env) {
   );
 }
 function assertPresentationBudget(owner, pid) {
-  if (!readFileSync37(`/proc/${pid}/cgroup`, "utf8").includes(
+  if (!readFileSync38(`/proc/${pid}/cgroup`, "utf8").includes(
     `/${viewUnit(owner)}
 `
   ))
@@ -5531,7 +5531,7 @@ var init_budget2 = __esm({
 
 // src/tui/adapters/tmux/connection.ts
 import { spawn as spawn3 } from "child_process";
-import { join as join51 } from "path";
+import { join as join52 } from "path";
 var ViewConnection;
 var init_connection2 = __esm({
   "src/tui/adapters/tmux/connection.ts"() {
@@ -5544,7 +5544,7 @@ var init_connection2 = __esm({
         this.directory = directory;
         this.owner = owner;
         this.identity = identity;
-        this.socket = join51(directory, "s");
+        this.socket = join52(directory, "s");
       }
       directory;
       owner;
@@ -5557,14 +5557,14 @@ var init_connection2 = __esm({
           "-S",
           this.socket,
           "-f",
-          join51(this.directory, "tmux.conf"),
+          join52(this.directory, "tmux.conf"),
           ...args
         ];
         if (args[0] === "new-session" && !this.identity)
           return startPresentation(this.owner, options2, env).trim();
         return command(
           "tmux",
-          ["-S", this.socket, "-f", join51(this.directory, "tmux.conf"), ...args],
+          ["-S", this.socket, "-f", join52(this.directory, "tmux.conf"), ...args],
           { env }
         ).trim();
       }
@@ -5628,7 +5628,7 @@ var init_connection2 = __esm({
 });
 
 // src/tui/application/feedback.ts
-import { join as join52 } from "path";
+import { join as join53 } from "path";
 function describeFailure(action, error) {
   const message = error instanceof Error ? error.message : "view_action_failed";
   const code = error instanceof RangeError ? "terminal_size_invalid" : failureCode(message);
@@ -6080,7 +6080,7 @@ var init_common = __esm({
 });
 
 // src/tui/application/create.ts
-import { join as join53 } from "path";
+import { join as join54 } from "path";
 import { realpathSync as realpathSync17 } from "fs";
 async function createView(input) {
   const plan2 = planLayout(input.columns, input.rows);
@@ -6102,7 +6102,7 @@ async function createView(input) {
   );
   if (!main2) throw new Error("view_requires_live_main");
   const { directory, owner } = createDirectory();
-  const file2 = join53(directory, "view.json");
+  const file2 = join54(directory, "view.json");
   const connection = new ViewConnection(directory, owner);
   const argv = [helpers.node, helpers.worker, "attach", file2, main2.id];
   const result = connection.raw([
@@ -6330,7 +6330,7 @@ var init_navigation = __esm({
 });
 
 // src/tui/application/history.ts
-import { join as join54 } from "path";
+import { join as join55 } from "path";
 async function observeHistory(context) {
   const { view, renderer, common: common2, file: file2 } = context;
   await releaseControl(context);
@@ -6338,7 +6338,7 @@ async function observeHistory(context) {
     sessionId: view.target,
     input: { lines: 2e3, maxBytes: 65536 }
   });
-  privateJson(join54(view.directory, "history.json"), {
+  privateJson(join55(view.directory, "history.json"), {
     sessionId: view.target,
     content: history.content,
     truncated: history.truncated
@@ -6415,7 +6415,7 @@ var init_mailbox = __esm({
 
 // src/tui/application/lifecycle.ts
 import { existsSync as existsSync36, unlinkSync as unlinkSync7 } from "fs";
-import { join as join55 } from "path";
+import { join as join56 } from "path";
 function resizeView({ view, renderer, input }) {
   renderer.resize(view, planLayout(input.columns, input.rows));
 }
@@ -6430,7 +6430,7 @@ async function stopTarget(context) {
 async function closeView(context) {
   await returnToMain(context);
   context.renderer.connection.cleanup();
-  const history = join55(context.view.directory, "history.json");
+  const history = join56(context.view.directory, "history.json");
   if (existsSync36(history)) unlinkSync7(history);
   context.view.state = "closed";
   saveView(context.file, context.view);
@@ -6772,14 +6772,14 @@ var init_config3 = __esm({
 import { createHash as createHash19 } from "crypto";
 import { existsSync as existsSync37, lstatSync as lstatSync13, mkdirSync as mkdirSync12 } from "fs";
 import { homedir as homedir11 } from "os";
-import { dirname as dirname26, join as join56 } from "path";
+import { dirname as dirname26, join as join57 } from "path";
 function startupFile(projectRoot) {
-  const root = join56(
-    process.env.XDG_STATE_HOME ?? join56(homedir11(), ".local/state"),
+  const root = join57(
+    process.env.XDG_STATE_HOME ?? join57(homedir11(), ".local/state"),
     "pmcp/launcher"
   );
   const key = createHash19("sha256").update(projectRoot).digest("hex");
-  return join56(root, `${key}.json`);
+  return join57(root, `${key}.json`);
 }
 function ensureStartupDirectory(file2) {
   const directory = dirname26(file2);
@@ -7009,14 +7009,14 @@ var init_host = __esm({
 });
 
 // src/tui/startup/lock.ts
-import { spawnSync as spawnSync6 } from "child_process";
-import { closeSync as closeSync8, constants as constants7, fstatSync as fstatSync5, openSync as openSync8 } from "fs";
+import { spawnSync as spawnSync7 } from "child_process";
+import { closeSync as closeSync9, constants as constants7, fstatSync as fstatSync5, openSync as openSync9 } from "fs";
 function serializedStartup(request3) {
   const settings2 = startupSettings(request3);
   const file2 = startupFile(settings2.projectRoot);
   ensureStartupDirectory(file2);
   const lock = `${file2}.lock`;
-  const descriptor = openSync8(
+  const descriptor = openSync9(
     lock,
     constants7.O_CREAT | constants7.O_WRONLY | constants7.O_NOFOLLOW,
     384
@@ -7026,11 +7026,11 @@ function serializedStartup(request3) {
     if (!stat.isFile() || stat.uid !== process.getuid?.() || (stat.mode & 63) !== 0)
       throw new Error("unsafe_startup_lock");
   } finally {
-    closeSync8(descriptor);
+    closeSync9(descriptor);
   }
   const helpers = runtime();
   const encoded = Buffer.from(JSON.stringify(request3)).toString("base64url");
-  const child = spawnSync6(
+  const child = spawnSync7(
     "flock",
     [
       "--wait",
@@ -9859,7 +9859,7 @@ function registerMailboxTools(server, service) {
 
 // src/mcp.ts
 var SERVER_NAME = "pmcp";
-var SERVER_VERSION = "0.17.0";
+var SERVER_VERSION = "0.17.1";
 function registerSkillTools(server, tools) {
   registerCatalogTool(server, tools);
   registerFindTool(server, tools);
@@ -14317,14 +14317,17 @@ async function execMcp(spec, alias, env) {
 }
 
 // src/project/doctor.ts
-import { spawnSync as spawnSync3 } from "child_process";
-import { existsSync as existsSync22, readFileSync as readFileSync28 } from "fs";
-import { join as join27 } from "path";
+import { spawnSync as spawnSync4 } from "child_process";
+import { existsSync as existsSync22, readFileSync as readFileSync29 } from "fs";
+import { join as join28 } from "path";
 import { parse as parse8 } from "smol-toml";
 
 // src/project/adapters/opencode-doctor.ts
 import { realpathSync as realpathSync6 } from "fs";
 import { join as join26 } from "path";
+function isOpenCodeInventory(command3, args) {
+  return command3 === "opencode" && args.length === 2 && args[0] === "debug" && args[1] === "skill";
+}
 function connected(out, alias) {
   const ansi = new RegExp(
     `${String.fromCharCode(27)}\\[[0-?]*[ -/]*[@-~]`,
@@ -14379,9 +14382,60 @@ function opencodeDoctor(spec, options2, listed2) {
   return findings;
 }
 
+// src/project/diagnostics/native-json.ts
+import { spawnSync as spawnSync3 } from "child_process";
+import {
+  closeSync as closeSync4,
+  mkdtempSync as mkdtempSync3,
+  openSync as openSync4,
+  readFileSync as readFileSync28,
+  rmSync as rmSync6,
+  statSync as statSync13
+} from "fs";
+import { tmpdir as tmpdir2 } from "os";
+import { join as join27 } from "path";
+var MAX_OUTPUT = 1 << 26;
+var nativeJsonRunner = (command3, args, cwd, env) => {
+  const directory = mkdtempSync3(join27(tmpdir2(), "pmcp-native-json-"));
+  let descriptor;
+  try {
+    const file2 = join27(directory, "stdout.json");
+    descriptor = openSync4(file2, "wx", 384);
+    const result = spawnSync3(command3, [...args], {
+      cwd,
+      ...env ? { env: { ...process.env, ...env } } : {},
+      encoding: "utf8",
+      timeout: 18e4,
+      maxBuffer: MAX_OUTPUT,
+      stdio: ["ignore", descriptor, "pipe"]
+    });
+    const code = result.error?.code;
+    if (result.status !== 0 || result.error) {
+      return {
+        missing: code === "ENOENT",
+        status: result.status,
+        stdout: result.stderr || result.error?.message || "Native inventory failed"
+      };
+    }
+    if (statSync13(file2).size > MAX_OUTPUT) {
+      return {
+        missing: false,
+        status: null,
+        stdout: "Native JSON output exceeds 64 MiB"
+      };
+    }
+    return { missing: false, status: 0, stdout: readFileSync28(file2, "utf8") };
+  } finally {
+    if (descriptor !== void 0) closeSync4(descriptor);
+    rmSync6(directory, { recursive: true, force: true });
+  }
+};
+
 // src/project/doctor.ts
 var spawnRunner = (command3, args, cwd, env) => {
-  const result = spawnSync3(command3, [...args], {
+  if (isOpenCodeInventory(command3, args))
+    return nativeJsonRunner(command3, args, cwd, env);
+  const result = spawnSync4(command3, [...args], {
     cwd,
     ...env ? { env: { ...process.env, ...env } } : {},
     encoding: "utf8",
@@ -14455,10 +14509,10 @@ function claude(spec, o) {
 }
 function codex(spec, o) {
   const findings = [];
-  const config = join27(o.home, ".codex/config.toml");
+  const config = join28(o.home, ".codex/config.toml");
   let trusted = false;
   if (existsSync22(config)) {
-    const projects = parse8(readFileSync28(config, "utf8")).projects ?? {};
+    const projects = parse8(readFileSync29(config, "utf8")).projects ?? {};
     const root = spec.root.replace(/\/$/u, "");
     trusted = projects[root]?.trust_level === "trusted" || projects[`${root}/`]?.trust_level === "trusted";
   }
@@ -14584,8 +14638,8 @@ function grok(spec, o) {
 }
 function antigravity(spec, options2) {
   const foreign = agentNames(spec.root).filter((name) => {
-    const text3 = readFileSync28(
-      join27(spec.root, ".agents/agents", name, "agent.md"),
+    const text3 = readFileSync29(
+      join28(spec.root, ".agents/agents", name, "agent.md"),
       "utf8"
     );
     return splitFrontmatter(text3).meta["tools"] !== void 0;
@@ -14605,7 +14659,7 @@ function antigravity(spec, options2) {
   if (serversForTool(spec, "antigravity").length > 0) {
     const result = options2.run(
       "agy",
-      ["plugin", "validate", join27(spec.root, ANTIGRAVITY_MCP_PLUGIN)],
+      ["plugin", "validate", join28(spec.root, ANTIGRAVITY_MCP_PLUGIN)],
       spec.root
     );
     findings.push(
@@ -14638,8 +14692,8 @@ function doctor(spec, options2) {
 }
 
 // src/project/memory.ts
-import { existsSync as existsSync23, readFileSync as readFileSync29 } from "fs";
-import { isAbsolute as isAbsolute7, join as join28, resolve as resolve15 } from "path";
+import { existsSync as existsSync23, readFileSync as readFileSync30 } from "fs";
+import { isAbsolute as isAbsolute7, join as join29, resolve as resolve15 } from "path";
 import { parse as parse9 } from "smol-toml";
 function object7(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
@@ -14651,7 +14705,7 @@ function settings(file2, toml = false) {
   if (!existsSync23(file2)) {
     return {};
   }
-  const text3 = readFileSync29(file2, "utf8");
+  const text3 = readFileSync30(file2, "utf8");
   return object7(toml ? parse9(text3) : JSON.parse(text3));
 }
 function configuredState(value) {
@@ -14668,7 +14722,7 @@ function located(metadata2, path, pathScope) {
 }
 function metadata(tool, spec, options2) {
   const env = options2.env ?? {};
-  const directory = (name, fallback) => resolve15(spec.root, env[name] ?? join28(options2.home, fallback));
+  const directory = (name, fallback) => resolve15(spec.root, env[name] ?? join29(options2.home, fallback));
   if (tool === "opencode") {
     return {
       state: "unsupported",
@@ -14698,7 +14752,7 @@ function metadata(tool, spec, options2) {
         state,
         source: result.missing ? "Native CLI not installed" : "codex features list; active session overrides are not inspected"
       },
-      join28(home2, "memories"),
+      join29(home2, "memories"),
       "store"
     );
   }
@@ -14711,12 +14765,12 @@ function metadata(tool, spec, options2) {
   }
   if (tool === "claude") {
     const home2 = directory("CLAUDE_CONFIG_DIR", ".claude");
-    const user2 = settings(join28(home2, "settings.json"));
+    const user2 = settings(join29(home2, "settings.json"));
     const state = env["CLAUDE_CODE_DISABLE_AUTO_MEMORY"] === "1" ? "disabled" : configuredState(user2["autoMemoryEnabled"]);
     const source2 = "User configuration and disable environment flag; project trust and active session overrides are not inspected";
     const override = user2["autoMemoryDirectory"];
     if (typeof override === "string") {
-      const path = override.startsWith("~/") ? join28(options2.home, override.slice(2)) : override;
+      const path = override.startsWith("~/") ? join29(options2.home, override.slice(2)) : override;
       if (!isAbsolute7(path)) {
         return {
           state: "unknown",
@@ -14729,7 +14783,7 @@ function metadata(tool, spec, options2) {
     if (env["CLAUDE_CONFIG_DIR"] && projectName && !projectName.includes("/") && !projectName.includes("\\") && projectName !== "." && projectName !== "..") {
       return located(
         { state, source: source2 },
-        join28(home2, "projects", projectName, "memory"),
+        join29(home2, "projects", projectName, "memory"),
         "store"
       );
     }
@@ -14738,14 +14792,14 @@ function metadata(tool, spec, options2) {
         state,
         source: `${source2}; native project directory encoding is not guessed`
       },
-      join28(home2, "projects"),
+      join29(home2, "projects"),
       "base"
     );
   }
   if (tool === "grok") {
-    const home2 = join28(options2.home, ".grok");
-    const user2 = settings(join28(home2, "config.toml"), true);
-    const project2 = settings(join28(spec.root, ".grok/config.toml"), true);
+    const home2 = join29(options2.home, ".grok");
+    const user2 = settings(join29(home2, "config.toml"), true);
+    const project2 = settings(join29(spec.root, ".grok/config.toml"), true);
     const userMemory = user2["memory"] === void 0 ? {} : object7(user2["memory"]);
     const projectMemory = project2["memory"] === void 0 ? {} : object7(project2["memory"]);
     const overridden = projectMemory["enabled"] !== void 0;
@@ -14755,12 +14809,12 @@ function metadata(tool, spec, options2) {
         state,
         source: "User memory configuration; project trust and workspace encoding are not exposed by a read-only native memory command"
       },
-      join28(home2, "memory-v2/workspaces"),
+      join29(home2, "memory-v2/workspaces"),
       "base"
     );
   }
   const home = directory("GEMINI_CLI_HOME", ".gemini");
-  const user = settings(join28(home, "settings.json"));
+  const user = settings(join29(home, "settings.json"));
   const context = user["context"] === void 0 ? {} : object7(user["context"]);
   const names = context["fileName"] ?? "GEMINI.md";
   const contextFileNames = typeof names === "string" ? [names] : names;
@@ -14776,7 +14830,7 @@ function metadata(tool, spec, options2) {
       source: "Global memory file existence and user context filenames; active memory tool enablement is not exposed",
       contextFileNames
     },
-    join28(home, "GEMINI.md"),
+    join29(home, "GEMINI.md"),
     "store"
   );
 }
@@ -14811,12 +14865,12 @@ import {
   cpSync,
   existsSync as existsSync24,
   mkdirSync as mkdirSync8,
-  readFileSync as readFileSync30,
-  rmSync as rmSync6,
-  statSync as statSync13,
+  readFileSync as readFileSync31,
+  rmSync as rmSync7,
+  statSync as statSync14,
   writeFileSync as writeFileSync7
 } from "fs";
-import { basename as basename7, dirname as dirname20, join as join29 } from "path";
+import { basename as basename7, dirname as dirname20, join as join30 } from "path";
 var CROSS_TOOL = ["name", "description"];
 var tomlValue2 = (value) => JSON.stringify(value);
 function findEntry(entries, wanted) {
@@ -14840,7 +14894,7 @@ function addEntry(root, entry2) {
       `${entry2.name} is a ${kind2}; only skills and agents are added to .agents/`
     );
   }
-  const { meta, body } = splitFrontmatter(readFileSync30(entry2.path, "utf8"));
+  const { meta, body } = splitFrontmatter(readFileSync31(entry2.path, "utf8"));
   const name = basename7(entry2.slug);
   if (!/^[a-z0-9][a-z0-9-]*$/u.test(name)) {
     throw new ProjectError(
@@ -14848,12 +14902,12 @@ function addEntry(root, entry2) {
     );
   }
   if (kind2 === "skill") {
-    const dest2 = join29(root, ".agents/skills", name);
+    const dest2 = join30(root, ".agents/skills", name);
     if (existsSync24(dest2))
       throw new ProjectError(`.agents/skills/${name} already exists`);
     const source2 = entry2.root ?? dirname20(entry2.path);
     mkdirSync8(dirname20(dest2), { recursive: true });
-    if (statSync13(source2).isDirectory()) {
+    if (statSync14(source2).isDirectory()) {
       cpSync(source2, dest2, { recursive: true });
     } else {
       mkdirSync8(dest2);
@@ -14864,13 +14918,13 @@ function addEntry(root, entry2) {
       description: meta["description"] ?? entry2.description
     });
     writeFileSync7(
-      join29(dest2, "SKILL.md"),
+      join30(dest2, "SKILL.md"),
       `${head}
 ${body.replace(/^\n/u, "")}`
     );
     return { kind: kind2, name, path: `.agents/skills/${name}` };
   }
-  const dest = join29(root, ".agents/agents", name);
+  const dest = join30(root, ".agents/agents", name);
   if (existsSync24(dest))
     throw new ProjectError(`.agents/agents/${name} already exists`);
   const kept = {};
@@ -14881,17 +14935,17 @@ ${body.replace(/^\n/u, "")}`
   }
   mkdirSync8(dest, { recursive: true });
   writeFileSync7(
-    join29(dest, "agent.md"),
+    join30(dest, "agent.md"),
     `${renderFrontmatter(kept)}
 ${body.replace(/^\n/u, "")}`
   );
   if (Object.keys(moved).length > 0) {
-    const config = join29(root, "pmcp.toml");
+    const config = join30(root, "pmcp.toml");
     const lines2 = [
       `[agents.${name}.claude]`,
       ...Object.entries(moved).map(([k, v]) => `${k} = ${tomlValue2(v)}`)
     ];
-    const before = existsSync24(config) ? readFileSync30(config, "utf8") : "";
+    const before = existsSync24(config) ? readFileSync31(config, "utf8") : "";
     const sep7 = before === "" || before.endsWith("\n\n") ? "" : "\n";
     writeFileSync7(config, `${before}${sep7}${lines2.join("\n")}
 `);
@@ -14914,15 +14968,15 @@ function withoutTables(toml, name) {
 function removeAsset(root, name) {
   const removed = [];
   for (const rel of [`.agents/skills/${name}`, `.agents/agents/${name}`]) {
-    if (!existsSync24(join29(root, rel))) continue;
-    rmSync6(join29(root, rel), { recursive: true, force: true });
+    if (!existsSync24(join30(root, rel))) continue;
+    rmSync7(join30(root, rel), { recursive: true, force: true });
     removed.push(rel);
   }
   if (removed.length === 0)
     throw new ProjectError(`no skill or agent named ${name} in .agents/`);
-  const config = join29(root, "pmcp.toml");
+  const config = join30(root, "pmcp.toml");
   if (existsSync24(config)) {
-    const before = readFileSync30(config, "utf8");
+    const before = readFileSync31(config, "utf8");
     const after = withoutTables(before, name);
     if (after !== before) writeFileSync7(config, after);
   }
@@ -15161,16 +15215,16 @@ var doctorCommand = {
 };
 
 // src/validate.ts
-import { existsSync as existsSync25, readFileSync as readFileSync31, statSync as statSync14 } from "fs";
-import { basename as basename8, join as join30, resolve as resolve16 } from "path";
+import { existsSync as existsSync25, readFileSync as readFileSync32, statSync as statSync15 } from "fs";
+import { basename as basename8, join as join31, resolve as resolve16 } from "path";
 function validateSkillDir(dir) {
   const root = resolve16(dir);
-  const skillMd = basename8(root) === "SKILL.md" ? root : join30(root, "SKILL.md");
-  if (!existsSync25(skillMd) || !statSync14(skillMd).isFile()) {
+  const skillMd = basename8(root) === "SKILL.md" ? root : join31(root, "SKILL.md");
+  if (!existsSync25(skillMd) || !statSync15(skillMd).isFile()) {
     return [{ path: root, reason: "no SKILL.md", level: "error" }];
   }
-  const front = frontmatterObject(readFileSync31(skillMd, "utf8"));
-  const directory = basename8(skillMd === root ? join30(root, "..") : root);
+  const front = frontmatterObject(readFileSync32(skillMd, "utf8"));
+  const directory = basename8(skillMd === root ? join31(root, "..") : root);
   return specProblems(front, directory).map((reason) => ({
     path: skillMd,
     reason,
@@ -15215,7 +15269,7 @@ var validateCommand = {
 };
 
 // src/commands/mailbox.ts
-import { readFileSync as readFileSync32, writeFileSync as writeFileSync8 } from "fs";
+import { readFileSync as readFileSync33, writeFileSync as writeFileSync8 } from "fs";
 import { resolve as resolve17 } from "path";
 init_config2();
 init_service();
@@ -15398,7 +15452,7 @@ var mailboxCommand = {
         ownsBinding = true;
       }
       const inputFile = one(context.args, "input");
-      const input = inputFile ? JSON.parse(readFileSync32(inputFile, "utf8")) : {};
+      const input = inputFile ? JSON.parse(readFileSync33(inputFile, "utf8")) : {};
       const result = await new MailboxService(store, binding).call(
         operation,
         input
@@ -15482,7 +15536,7 @@ var harnessOptions = [
 ];
 
 // src/commands/harness/invocation.ts
-import { readFileSync as readFileSync33, statSync as statSync15 } from "fs";
+import { readFileSync as readFileSync34, statSync as statSync16 } from "fs";
 init_validation();
 var common = ["group-file", "generation"];
 var options = {
@@ -15519,10 +15573,10 @@ var options = {
   "recovery:abort-start": [...common, "session"]
 };
 function file(path) {
-  const stat = statSync15(path);
+  const stat = statSync16(path);
   if (!stat.isFile() || stat.size > 65536)
     throw new ArgumentError("Input file exceeds 65536 bytes");
-  return readFileSync33(path, "utf8");
+  return readFileSync34(path, "utf8");
 }
 function parseInvocation(context) {
   const [family, action, ...extra] = context.args.positional;
@@ -15858,11 +15912,11 @@ import {
   existsSync as existsSync38,
   lstatSync as lstatSync14,
   mkdirSync as mkdirSync13,
-  readFileSync as readFileSync38,
+  readFileSync as readFileSync39,
   readdirSync as readdirSync13,
   writeFileSync as writeFileSync14
 } from "fs";
-import { dirname as dirname27, join as join57, resolve as resolve20 } from "path";
+import { dirname as dirname27, join as join58, resolve as resolve20 } from "path";
 var NATIVE_PLUGIN_RUNTIMES = [
   "claude",
   "codex",
@@ -15887,7 +15941,7 @@ function readResources(directory, prefix, files) {
   for (const entry2 of readdirSync13(directory, { withFileTypes: true })) {
     if (entry2.isSymbolicLink())
       throw new Error("Plugin exports cannot contain symlinks");
-    const path = join57(directory, entry2.name);
+    const path = join58(directory, entry2.name);
     const relativePath = `${prefix}/${entry2.name}`;
     if (entry2.isDirectory()) {
       if (relativePath.split("/").length > 6)
@@ -15900,7 +15954,7 @@ function readResources(directory, prefix, files) {
     const stats = lstatSync14(path);
     if (stats.size > 1024 * 1024 || files.size >= 256)
       throw new Error("Plugin resources exceed the export budget");
-    files.set(relativePath, readFileSync38(path));
+    files.set(relativePath, readFileSync39(path));
   }
 }
 function pluginExportFiles(root, name, runtime2) {
@@ -15909,7 +15963,7 @@ function pluginExportFiles(root, name, runtime2) {
   const files = /* @__PURE__ */ new Map();
   readResources(containedPath(plugin.directory, "skills"), "skills", files);
   for (const name2 of ["LICENSE", "NOTICE"])
-    files.set(name2, readFileSync38(containedPath(root, name2)));
+    files.set(name2, readFileSync39(containedPath(root, name2)));
   const manifests = {
     claude: [".claude-plugin/plugin.json", ".mcp.json"],
     codex: ["plugin.json", "mcp.json"],
@@ -15918,10 +15972,10 @@ function pluginExportFiles(root, name, runtime2) {
     agy: []
   };
   for (const filename of manifests[runtime2]) {
-    if (existsSync38(join57(plugin.directory, filename)))
+    if (existsSync38(join58(plugin.directory, filename)))
       files.set(
         filename,
-        readFileSync38(containedPath(plugin.directory, filename))
+        readFileSync39(containedPath(plugin.directory, filename))
       );
   }
   if (runtime2 === "agy") {
@@ -15932,11 +15986,11 @@ function pluginExportFiles(root, name, runtime2) {
 `
       )
     );
-    const mcp = join57(plugin.directory, ".mcp.json");
+    const mcp = join58(plugin.directory, ".mcp.json");
     if (existsSync38(mcp))
       files.set(
         "mcp_config.json",
-        readFileSync38(containedPath(plugin.directory, mcp))
+        readFileSync39(containedPath(plugin.directory, mcp))
       );
   }
   return files;
@@ -15955,7 +16009,7 @@ function exportPublicPlugin(root, name, runtime2, output) {
     throw error;
   }
   for (const [path, bytes] of files) {
-    const target2 = join57(destination, path);
+    const target2 = join58(destination, path);
     mkdirSync13(dirname27(target2), { recursive: true });
     writeFileSync14(target2, bytes, { flag: "wx" });
   }
@@ -16107,7 +16161,7 @@ function dispatch(argv, options2 = {}) {
   }
   return run(command3, rest, { ui, env, cwd });
 }
-var VERSION = "0.17.0";
+var VERSION = "0.17.1";
 async function defaultEntry(options2, context) {
   const terminal = options2.terminal ?? {
     stdin: process.stdin.isTTY === true,