@mrciphersmith/keryx 0.3.43 → 0.3.46

package/dist/core.js

@@ -7067,6 +7067,9 @@ async function assertContained(root, rel, opts = {}) {
   const resolvedPath = targetReal ?? targetPath;
   return { targetPath, dir: path31.dirname(targetPath), resolvedPath, resolvedDir: path31.dirname(resolvedPath) };
 }
+async function assertWritableContained(root, rel, kind = "file") {
+  await assertContained(root, rel, kind === "file" ? { requireRegularIfExists: true } : { requireDirectoryIfExists: true });
+}
 async function pathExistsLstat(p) {
   try {
     await lstat5(p);
@@ -7369,9 +7372,212 @@ var init_codecs = __esm(() => {
     allow: (_runtimeId) => ({ exitCode: 0 })
   };
 });
+// src/lib/git-worktrees.ts
+var init_git_worktrees = () => {};
 
-// src/integrations/surfaces.ts
+// src/rules/entrypoint-targets.ts
+function localRootEntry(runtime, source = DEFAULT_CODEX_SOURCE) {
+  return runtime === "claude" ? { runtime, path: LOCAL_ROOT_PATH.claude, scope: "local" } : { runtime, path: LOCAL_ROOT_PATH.codex, scope: "local", mode: "override", source };
+}
+function sharedRootEntry(runtime, entryPath = SHARED_ROOT_PATH[runtime]) {
+  return { runtime, path: entryPath, scope: "shared" };
+}
+function localClaudeSettingsTarget() {
+  return { path: LOCAL_SETTINGS_PATH, scope: "local" };
+}
+function sharedClaudeSettingsTarget() {
+  return { path: SHARED_SETTINGS_PATH, scope: "shared" };
+}
+function normalizeEntrypointTargets(agentEntrypoints) {
+  const raw = isRecord(agentEntrypoints) ? agentEntrypoints : {};
+  const rawRoot = Array.isArray(raw.root) ? raw.root : [];
+  const root = [];
+  const legacy = [];
+  const ignored = [];
+  const seen = new Set;
+  for (const item of rawRoot) {
+    const fromString = typeof item === "string" ? rootEntryFromLegacyString(item) : undefined;
+    const entry = fromString ?? (isRecord(item) ? rootEntryFromRecord(item) : undefined);
+    if (entry === undefined || seen.has(entry.runtime)) {
+      ignored.push(item);
+      continue;
+    }
+    seen.add(entry.runtime);
+    root.push(entry);
+    if (fromString !== undefined && entry.scope === "shared") {
+      legacy.push({ kind: "root", runtime: entry.runtime, path: entry.path });
+    }
+  }
+  for (const runtime of RUNTIMES) {
+    if (seen.has(runtime))
+      continue;
+    const entry = sharedRootEntry(runtime);
+    root.push(entry);
+    legacy.push({ kind: "root", runtime, path: entry.path });
+  }
+  let claudeSettings = claudeSettingsFromValue(raw.claudeSettings);
+  if (claudeSettings === undefined) {
+    claudeSettings = sharedClaudeSettingsTarget();
+    legacy.push({ kind: "claudeSettings", path: claudeSettings.path });
+  }
+  const targets = { root, claudeSettings };
+  const needsRewrite = JSON.stringify(raw.root) !== JSON.stringify(targets.root) || JSON.stringify(raw.claudeSettings) !== JSON.stringify(targets.claudeSettings);
+  return { targets, legacy, ignored, needsRewrite };
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function safeRelativePath(value) {
+  if (typeof value !== "string" || value.length === 0 || /[\u0000-\u001f\u007f]/.test(value))
+    return;
+  if (value.startsWith("/") || value.startsWith("\\") || /^[A-Za-z]:/.test(value))
+    return;
+  if (value.startsWith("!") || value.startsWith("#"))
+    return;
+  if (value.split(/[\\/]/).includes(".."))
+    return;
+  return value;
+}
+function scopeOf(value) {
+  return value === "local" || value === "shared" ? value : undefined;
+}
+function runtimeOf(value) {
+  return value === "claude" || value === "codex" ? value : undefined;
+}
+function rootEntryFromLegacyString(value) {
+  const lower = value.toLowerCase();
+  for (const runtime of RUNTIMES) {
+    if (lower === SHARED_ROOT_PATH[runtime].toLowerCase())
+      return sharedRootEntry(runtime, value);
+    if (lower === LOCAL_ROOT_PATH[runtime].toLowerCase())
+      return localRootEntry(runtime);
+  }
+  return;
+}
+function rootEntryFromRecord(value) {
+  const runtime = runtimeOf(value.runtime);
+  if (runtime === undefined)
+    return;
+  const statedPath = safeRelativePath(value.path);
+  if (value.path !== undefined && statedPath === undefined)
+    return;
+  const statedScope = scopeOf(value.scope);
+  if (statedPath === undefined && statedScope === undefined)
+    return;
+  const scope = statedScope ?? (statedPath?.toLowerCase() === LOCAL_ROOT_PATH[runtime].toLowerCase() ? "local" : "shared");
+  if (scope === "shared")
+    return sharedRootEntry(runtime, statedPath ?? SHARED_ROOT_PATH[runtime]);
+  if (runtime === "claude")
+    return localRootEntry(runtime);
+  return {
+    ...localRootEntry(runtime, safeRelativePath(value.source) ?? DEFAULT_CODEX_SOURCE),
+    mode: value.mode === "skip" ? "skip" : "override"
+  };
+}
+function claudeSettingsFromValue(value) {
+  if (!isRecord(value))
+    return;
+  const statedPath = safeRelativePath(value.path);
+  if (value.path !== undefined && statedPath === undefined)
+    return;
+  const statedScope = scopeOf(value.scope);
+  if (statedPath === undefined && statedScope === undefined)
+    return;
+  const scope = statedScope ?? (statedPath === LOCAL_SETTINGS_PATH ? "local" : "shared");
+  return scope === "local" ? localClaudeSettingsTarget() : sharedClaudeSettingsTarget();
+}
+var RUNTIMES, SHARED_ROOT_PATH, LOCAL_ROOT_PATH, SHARED_SETTINGS_PATH = ".claude/settings.json", LOCAL_SETTINGS_PATH = ".claude/settings.local.json", DEFAULT_CODEX_SOURCE;
+var init_entrypoint_targets = __esm(() => {
+  RUNTIMES = ["claude", "codex"];
+  SHARED_ROOT_PATH = { claude: "CLAUDE.md", codex: "AGENTS.md" };
+  LOCAL_ROOT_PATH = { claude: "CLAUDE.local.md", codex: "AGENTS.override.md" };
+  DEFAULT_CODEX_SOURCE = SHARED_ROOT_PATH.codex;
+});
+// src/rules/managed-index-block.ts
+var init_managed_index_block = () => {};
+
+// src/rules/entrypoint-migration.ts
+function settingsTextHasManagedHooks(text) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return false;
+  }
+  if (!isRecord2(parsed) || !isRecord2(parsed.hooks))
+    return false;
+  return Object.values(parsed.hooks).some((groups) => Array.isArray(groups) && groups.some((group) => isRecord2(group) && typeof group[MANAGED_KEY] === "string"));
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var init_entrypoint_migration = __esm(() => {
+  init_settings_json();
+  init_git_worktrees();
+  init_entrypoint_targets();
+  init_managed_index_block();
+});
+
+// src/integrations/claude-settings.ts
+import { readFileSync as readFileSync2 } from "fs";
 import path32 from "path";
+function readTextSync(file) {
+  try {
+    return readFileSync2(file, "utf8");
+  } catch {
+    return;
+  }
+}
+function statedClaudeSettingsTarget(projectRoot) {
+  const text = readTextSync(path32.join(projectRoot, ...MANIFEST_REL.split("/")));
+  if (text === undefined)
+    return;
+  let manifest;
+  try {
+    manifest = JSON.parse(text);
+  } catch {
+    return;
+  }
+  const agentEntrypoints = typeof manifest === "object" && manifest !== null ? manifest.agentEntrypoints : undefined;
+  const normalized = normalizeEntrypointTargets(agentEntrypoints);
+  if (normalized.legacy.some((entry) => entry.kind === "claudeSettings"))
+    return;
+  return normalized.targets.claudeSettings.scope === "shared" ? sharedClaudeSettingsTarget() : localClaudeSettingsTarget();
+}
+function claudeSettingsFileHoldsManagedHooks(projectRoot, relativePath) {
+  const text = readTextSync(path32.join(projectRoot, ...relativePath.split("/")));
+  return text !== undefined && settingsTextHasManagedHooks(text);
+}
+function resolveClaudeSettingsTarget(projectRoot) {
+  const stated = statedClaudeSettingsTarget(projectRoot);
+  if (stated?.scope === "shared")
+    return stated;
+  if (claudeSettingsFileHoldsManagedHooks(projectRoot, CLAUDE_SHARED_SETTINGS_PATH))
+    return sharedClaudeSettingsTarget();
+  return localClaudeSettingsTarget();
+}
+function claudeSettingsRelativePath(projectRoot) {
+  return resolveClaudeSettingsTarget(projectRoot).path;
+}
+function claudeSettingsLocation() {
+  return {
+    relativePath: CLAUDE_LOCAL_SETTINGS_PATH,
+    relativePathCandidates: CLAUDE_SETTINGS_PATHS,
+    relativePathFor: claudeSettingsRelativePath,
+    settingsFile: (projectRoot) => path32.join(projectRoot, ...claudeSettingsRelativePath(projectRoot).split("/"))
+  };
+}
+var CLAUDE_LOCAL_SETTINGS_PATH, CLAUDE_SHARED_SETTINGS_PATH, CLAUDE_SETTINGS_PATHS, MANIFEST_REL = ".metaproject/metaproject.json";
+var init_claude_settings = __esm(() => {
+  init_entrypoint_migration();
+  init_entrypoint_targets();
+  CLAUDE_LOCAL_SETTINGS_PATH = localClaudeSettingsTarget().path;
+  CLAUDE_SHARED_SETTINGS_PATH = sharedClaudeSettingsTarget().path;
+  CLAUDE_SETTINGS_PATHS = [CLAUDE_LOCAL_SETTINGS_PATH, CLAUDE_SHARED_SETTINGS_PATH];
+});
+
+// src/integrations/surfaces.ts
+import path33 from "path";
 function ctxHookCommand(id) {
   return `keryx ctx hook ${id}`;
 }
@@ -7416,7 +7622,7 @@ function nestedCtxSurface(opts) {
     confidence,
     sourceDocs,
     ...riskNotes !== undefined ? { riskNotes } : {},
-    settingsFile: (root) => path32.join(root, ...relativePath.split("/")),
+    settingsFile: (root) => path33.join(root, ...relativePath.split("/")),
     relativePath,
     slots: [
       { key: container ?? "hooks", type: "object", access: "owns" },
@@ -7530,7 +7736,7 @@ function flatSecuritySurface(harnessId, on, relativePath) {
       "`securityHooks` matches no documented hook contract for this harness; it is keryx's own invention (tracked as OQ-3)."
     ],
     sourceDocs: ["src/security/agent-hooks/runtimes.ts"],
-    settingsFile: (root) => path32.join(root, ...relativePath.split("/")),
+    settingsFile: (root) => path33.join(root, ...relativePath.split("/")),
     relativePath,
     slots: [
       { key: SECURITY_HOOKS_KEY, type: "array", access: "owns" },
@@ -7587,14 +7793,18 @@ export const KeryxCtxGuard = async () => ({
 var init_surfaces = __esm(() => {
   init_settings_json();
   init_codecs();
-  CTX_GUARD_CLAUDE = nestedCtxSurface({
-    id: "claude",
-    relativePath: ".claude/settings.json",
-    confidence: "verified",
-    nativeSearchTools: ["Grep"],
-    key: "PreToolUse",
-    sourceDocs: ["src/ctx/runtimes.ts"]
-  });
+  init_claude_settings();
+  CTX_GUARD_CLAUDE = {
+    ...nestedCtxSurface({
+      id: "claude",
+      relativePath: CLAUDE_LOCAL_SETTINGS_PATH,
+      confidence: "verified",
+      nativeSearchTools: ["Grep"],
+      key: "PreToolUse",
+      sourceDocs: ["src/ctx/runtimes.ts"]
+    }),
+    ...claudeSettingsLocation()
+  };
   CTX_GUARD_CODEX = nestedCtxSurface({
     id: "codex",
     relativePath: ".codex/hooks.json",
@@ -7609,7 +7819,7 @@ var init_surfaces = __esm(() => {
     sentinel: CTX_HOOK_SENTINEL,
     confidence: "verified",
     sourceDocs: ["src/ctx/runtimes.ts"],
-    settingsFile: (root) => path32.join(root, ".cursor", "hooks.json"),
+    settingsFile: (root) => path33.join(root, ".cursor", "hooks.json"),
     relativePath: ".cursor/hooks.json",
     slots: [
       { key: "hooks", type: "object", access: "owns" },
@@ -7636,7 +7846,7 @@ var init_surfaces = __esm(() => {
     sentinel: CTX_HOOK_SENTINEL,
     confidence: "verified",
     sourceDocs: ["src/ctx/runtimes.ts"],
-    settingsFile: (root) => path32.join(root, ".windsurf", "hooks.json"),
+    settingsFile: (root) => path33.join(root, ".windsurf", "hooks.json"),
     relativePath: ".windsurf/hooks.json",
     slots: [
       { key: "hooks", type: "object", access: "owns" },
@@ -7660,7 +7870,7 @@ var init_surfaces = __esm(() => {
     confidence: "experimental",
     riskNotes: ["No first-party docs confirm this hook contract; verify on a live install."],
     sourceDocs: ["src/ctx/runtimes.ts"],
-    settingsFile: (root) => path32.join(root, ".agents", "hooks.json"),
+    settingsFile: (root) => path33.join(root, ".agents", "hooks.json"),
     relativePath: ".agents/hooks.json",
     slots: [
       { key: ANTIGRAVITY_CONTAINER, type: "object", access: "owns" },
@@ -7713,7 +7923,7 @@ var init_surfaces = __esm(() => {
     confidence: "experimental",
     riskNotes: ["Bridged via a generated plugin file rather than a documented hook config."],
     sourceDocs: ["src/ctx/runtimes.ts"],
-    settingsFile: (root) => path32.join(root, ...OPENCODE_PLUGIN_RELATIVE_PATH.split("/")),
+    settingsFile: (root) => path33.join(root, ...OPENCODE_PLUGIN_RELATIVE_PATH.split("/")),
     relativePath: OPENCODE_PLUGIN_RELATIVE_PATH,
     slots: [],
     label: OPENCODE_PLUGIN_RELATIVE_PATH,
@@ -7750,8 +7960,7 @@ var init_surfaces = __esm(() => {
     sentinel: ORIENT_SENTINEL,
     confidence: "verified",
     sourceDocs: ["src/ctx/orient-runtimes.ts"],
-    settingsFile: (root) => path32.join(root, ".claude", "settings.json"),
-    relativePath: ".claude/settings.json",
+    ...claudeSettingsLocation(),
     slots: [
       { key: "hooks", type: "object", access: "owns" },
       { key: "_keryxManaged", type: "array", access: "owns" },
@@ -7760,7 +7969,7 @@ var init_surfaces = __esm(() => {
     merge: (s) => mergeIntoHookArray(s, "UserPromptSubmit", { hooks: [{ type: "command", command: orientHookCommand("claude") }], [MANAGED_KEY]: ORIENT_SENTINEL }, ORIENT_SENTINEL),
     strip: (s) => stripFromHookArray(s, "UserPromptSubmit", ORIENT_SENTINEL),
     validate: orientValidate("claude", "UserPromptSubmit", "claude: missing UserPromptSubmit orientation hook"),
-    label: ".claude/settings.json (UserPromptSubmit)",
+    label: `${CLAUDE_LOCAL_SETTINGS_PATH} (UserPromptSubmit)`,
     groupKey: "UserPromptSubmit",
     groupContainer: "hooks"
   };
@@ -7771,7 +7980,7 @@ var init_surfaces = __esm(() => {
     sentinel: ORIENT_SENTINEL,
     confidence: "verified",
     sourceDocs: ["src/ctx/orient-runtimes.ts"],
-    settingsFile: (root) => path32.join(root, ".codex", "hooks.json"),
+    settingsFile: (root) => path33.join(root, ".codex", "hooks.json"),
     relativePath: ".codex/hooks.json",
     slots: [
       { key: "hooks", type: "object", access: "owns" },
@@ -7792,7 +8001,7 @@ var init_surfaces = __esm(() => {
     sentinel: ORIENT_SENTINEL,
     confidence: "verified",
     sourceDocs: ["src/ctx/orient-runtimes.ts"],
-    settingsFile: (root) => path32.join(root, ".cursor", "hooks.json"),
+    settingsFile: (root) => path33.join(root, ".cursor", "hooks.json"),
     relativePath: ".cursor/hooks.json",
     slots: [
       { key: "hooks", type: "object", access: "owns" },
@@ -7823,8 +8032,7 @@ var init_surfaces = __esm(() => {
     sentinel: AGENT_HOOKS_SENTINEL,
     confidence: "verified",
     sourceDocs: ["src/security/agent-hooks/runtimes.ts"],
-    settingsFile: (root) => path32.join(root, ".claude", "settings.json"),
-    relativePath: ".claude/settings.json",
+    ...claudeSettingsLocation(),
     slots: [
       { key: "hooks", type: "object", access: "owns" },
       { key: "_keryxManaged", type: "array", access: "owns" },
@@ -7843,8 +8051,7 @@ var init_surfaces = __esm(() => {
     sentinel: AGENT_HOOKS_SENTINEL,
     confidence: "verified",
     sourceDocs: ["src/security/agent-hooks/runtimes.ts"],
-    settingsFile: (root) => path32.join(root, ".claude", "settings.json"),
-    relativePath: ".claude/settings.json",
+    ...claudeSettingsLocation(),
     slots: [
       { key: "hooks", type: "object", access: "owns" },
       { key: "_keryxManaged", type: "array", access: "owns" },
@@ -7870,7 +8077,7 @@ var init_surfaces = __esm(() => {
 
 // src/integrations/markdown-block.ts
 import { readFile as readFile15 } from "fs/promises";
-import path33 from "path";
+import path34 from "path";
 function dominantEol(content) {
   const crlf = (content.match(/\r\n/g) ?? []).length;
   const totalLf = (content.match(/\n/g) ?? []).length;
@@ -7922,7 +8129,7 @@ function allIndices(haystack, needle) {
   }
   return out;
 }
-function computeFencedRanges(content) {
+function computeFencedRanges2(content) {
   const ranges = [];
   const eolRe = /\r\n|\n/g;
   let lineStart = 0;
@@ -7952,7 +8159,7 @@ function isWithinRanges(offset, ranges) {
   return ranges.some(([s, e]) => offset >= s && offset < e);
 }
 function endsInsideOpenFence(content) {
-  return computeFencedRanges(content).endsInOpenFence;
+  return computeFencedRanges2(content).endsInOpenFence;
 }
 function unclosedFenceMessage(relativePath) {
   return `${relativePath}: ends inside an unclosed code fence \u2014 close it (or add the Keryx block by hand) before installing`;
@@ -7961,7 +8168,7 @@ function parseBlocks(content, relativePath, spec) {
   const fail = () => {
     throw new UnterminatedInstructionsBlockError(`${relativePath}: unterminated ${spec.startMarker} block \u2014 fix it by hand`);
   };
-  const { ranges: fenced } = computeFencedRanges(content);
+  const { ranges: fenced } = computeFencedRanges2(content);
   const starts = allIndices(content, spec.startMarker);
   const ends = allIndices(content, spec.endMarker);
   if (starts.some((i) => isWithinRanges(i, fenced)) || ends.some((i) => isWithinRanges(i, fenced)))
@@ -8012,7 +8219,7 @@ function appendBlock(content, block, eol) {
   return endsWithEol(content) ? `${content}${eol}${block}` : `${content}${eol}${eol}${block}`;
 }
 function fileFor(root, relativePath) {
-  return path33.join(root, ...relativePath.split("/"));
+  return path34.join(root, ...relativePath.split("/"));
 }
 async function installMarkdownBlock(root, relativePath, frontMatter, spec = INSTRUCTIONS_BLOCK_SPEC) {
   const symlinkRefusal = await refuseEscapingSymlink(root, relativePath);
@@ -8124,7 +8331,7 @@ var init_markdown_block = __esm(() => {
 });
 
 // src/integrations/surfaces-w5b.ts
-import path34 from "path";
+import path35 from "path";
 function kiroHookEntry() {
   return {
     name: KIRO_HOOK_ID,
@@ -8151,13 +8358,36 @@ function copilotHookEntry() {
   };
 }
 async function agentsMdHasKeryxBlock(root) {
-  const file = path34.join(root, "AGENTS.md");
+  const file = path35.join(root, "AGENTS.md");
   if (!await pathExists(file))
     return false;
   const { readFile } = await import("fs/promises");
   const content = await readFile(file, "utf8");
   return content.includes("<!-- keryx:index -->");
 }
+async function localCodexEntryPath(root) {
+  const { readFile } = await import("fs/promises");
+  let manifest;
+  try {
+    manifest = JSON.parse(await readFile(path35.join(root, ".metaproject", "metaproject.json"), "utf8"));
+  } catch {
+    return;
+  }
+  const agentEntrypoints = typeof manifest === "object" && manifest !== null ? manifest.agentEntrypoints : undefined;
+  const codex = normalizeEntrypointTargets(agentEntrypoints).targets.root.find((entry) => entry.runtime === "codex");
+  return codex?.scope === "local" ? codex.path : undefined;
+}
+async function probeZedInstructions(root) {
+  if (await agentsMdHasKeryxBlock(root))
+    return [];
+  const localCodex = await localCodexEntryPath(root);
+  if (localCodex !== undefined) {
+    return [
+      `zed: AGENTS.md carries no Keryx block \u2014 the codex entry is local, so the block goes to ${localCodex}, which Zed does not read. To route Zed through Keryx, set the codex entry's scope to "shared" under agentEntrypoints.root in .metaproject/metaproject.json and run \`keryx update\`.`
+    ];
+  }
+  return ["zed: AGENTS.md is missing or missing Keryx's block \u2014 run `keryx update`"];
+}
 function shellHookSurface(id, description) {
   return {
     id,
@@ -8179,6 +8409,7 @@ inclusion: always
 
 `, INSTRUCTIONS_KIRO, COPILOT_SOURCE_DOCS, COPILOT_KEY = "preToolUse", CTX_GUARD_GITHUB_COPILOT_AGENT, INSTRUCTIONS_GITHUB_COPILOT_AGENT, ACP_PERMISSION_ZED, ZED_SHADOWING_RULES_FILES, INSTRUCTIONS_ZED, KERYX_SHELL_UNSUPPORTED_REASON = "Registered by W6's keryx shell hook runtime; not installed by keryx integrations yet.", KERYX_SHELL_UNSUPPORTED_FLAGS, KERYX_SHELL_UNSUPPORTED, KERYX_SHELL_SOURCE_DOCS, SHELL_HOOKS_BLOCK, SHELL_HOOKS_PROMPT_GATE, SHELL_HOOKS_PRE_TOOL_CONTEXT, SHELL_HOOKS_INJECT_CONTEXT, SHELL_HOOKS_OBSERVE, SHELL_HOOKS_POST_TOOL, SHELL_HOOKS_SESSION_START, SHELL_HOOKS_STOP, KERYX_SHELL_SURFACES;
 var init_surfaces_w5b = __esm(() => {
+  init_entrypoint_targets();
   init_settings_json();
   init_codecs();
   init_surfaces();
@@ -8209,7 +8440,7 @@ var init_surfaces_w5b = __esm(() => {
     confidence: "experimental",
     riskNotes: ["Whether Gemini CLI actually reads GEMINI.md end-to-end (beyond the documented context.fileName option) is not independently confirmed here."],
     sourceDocs: ["https://github.com/google-gemini/gemini-cli/blob/main/docs/cli/gemini-md.md"],
-    settingsFile: (root) => path34.join(root, "GEMINI.md"),
+    settingsFile: (root) => path35.join(root, "GEMINI.md"),
     relativePath: "GEMINI.md",
     slots: [],
     customInstall: (root) => installMarkdownBlock(root, "GEMINI.md"),
@@ -8233,7 +8464,7 @@ var init_surfaces_w5b = __esm(() => {
       "Kiro's hook stdin field names and its shell tool's name are third-party-reported only, not confirmed by first-party docs \u2014 the matcher above is a best guess and may gate nothing on a real install; verify before relying on it."
     ],
     sourceDocs: KIRO_SOURCE_DOCS,
-    settingsFile: (root) => path34.join(root, ".kiro", "hooks", "keryx-ctx-guard.json"),
+    settingsFile: (root) => path35.join(root, ".kiro", "hooks", "keryx-ctx-guard.json"),
     relativePath: ".kiro/hooks/keryx-ctx-guard.json",
     slots: [
       { key: "version", type: "string", access: "owns" },
@@ -8278,7 +8509,7 @@ var init_surfaces_w5b = __esm(() => {
       "Open Kiro issues report that steering file `inclusion` modes are not always honoured, even with `inclusion: always` set \u2014 verify on a live install."
     ],
     sourceDocs: ["https://kiro.dev/docs/steering/"],
-    settingsFile: (root) => path34.join(root, ".kiro", "steering", "keryx.md"),
+    settingsFile: (root) => path35.join(root, ".kiro", "steering", "keryx.md"),
     relativePath: ".kiro/steering/keryx.md",
     slots: [],
     customInstall: (root) => installMarkdownBlock(root, ".kiro/steering/keryx.md", KIRO_STEERING_FRONT_MATTER),
@@ -8301,7 +8532,7 @@ var init_surfaces_w5b = __esm(() => {
       "The shell tool's name Copilot's hook payload carries is not documented; this guard parses any tool call whose payload carries `toolArgs.command`, whatever `toolName` is."
     ],
     sourceDocs: COPILOT_SOURCE_DOCS,
-    settingsFile: (root) => path34.join(root, ".github", "hooks", "keryx-ctx-guard.json"),
+    settingsFile: (root) => path35.join(root, ".github", "hooks", "keryx-ctx-guard.json"),
     relativePath: ".github/hooks/keryx-ctx-guard.json",
     slots: [
       { key: "version", type: "number", access: "owns" },
@@ -8345,7 +8576,7 @@ var init_surfaces_w5b = __esm(() => {
       "https://docs.github.com/en/copilot/how-tos/configure-custom-instructions-in-your-ide/add-repository-instructions-in-your-ide",
       "https://github.blog/changelog/2025-08-28-copilot-coding-agent-now-supports-agents-md-custom-instructions/"
     ],
-    settingsFile: (root) => path34.join(root, ".github", "copilot-instructions.md"),
+    settingsFile: (root) => path35.join(root, ".github", "copilot-instructions.md"),
     relativePath: ".github/copilot-instructions.md",
     slots: [],
     customInstall: (root) => installMarkdownBlock(root, ".github/copilot-instructions.md"),
@@ -8384,10 +8615,10 @@ var init_surfaces_w5b = __esm(() => {
       `Zed uses the first matching rules file among ${ZED_SHADOWING_RULES_FILES.join(", ")}, AGENT.md, AGENTS.md, CLAUDE.md, GEMINI.md, ... \u2014 an earlier file in that list shadows AGENTS.md even when AGENTS.md itself carries Keryx's block.`
     ],
     sourceDocs: ["https://github.com/zed-industries/zed/blob/main/docs/src/ai/rules.md"],
-    settingsFile: (root) => path34.join(root, "AGENTS.md"),
+    settingsFile: (root) => path35.join(root, "AGENTS.md"),
     relativePath: "AGENTS.md",
     slots: [],
-    probe: async (root) => await agentsMdHasKeryxBlock(root) ? [] : ["zed: AGENTS.md is missing or missing Keryx's block \u2014 run `keryx update`"]
+    probe: probeZedInstructions
   };
   KERYX_SHELL_UNSUPPORTED_FLAGS = ["skills", "agents", "instructions", "mcp"];
   KERYX_SHELL_UNSUPPORTED = Object.fromEntries(KERYX_SHELL_UNSUPPORTED_FLAGS.map((flag) => [flag, KERYX_SHELL_UNSUPPORTED_REASON]));
@@ -8465,142 +8696,185 @@ var init_route_tokens = __esm(() => {
 });
 
 // src/gdskills/skill-frontmatter.ts
-function stripSkillFieldQuotes(value) {
-  if (value.length >= 2) {
-    const first = value[0];
-    const last = value[value.length - 1];
-    if (first === '"' && last === '"' || first === "'" && last === "'") {
-      return value.slice(1, -1);
-    }
-  }
-  return value;
+function frontmatterLines(content) {
+  const text = content.startsWith("\uFEFF") ? content.slice(1) : content;
+  const lines = text.split(/\r?\n/);
+  if (lines[0]?.trimEnd() !== "---")
+    return;
+  const close = lines.findIndex((line, index) => index > 0 && line.trimEnd() === "---");
+  return close === -1 ? undefined : lines.slice(1, close);
 }
-function splitHarnessScalar(value) {
-  return value.split(",").map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+function readFrontmatter(content) {
+  const lines = frontmatterLines(content);
+  return lines === undefined ? undefined : readMapping(lines, 0);
 }
-function parseInlineHarnesses(value) {
-  if (value.length === 0)
-    return;
-  const flowList = /^\[(.*)\]$/.exec(value);
-  if (flowList !== null) {
-    return splitHarnessScalar((flowList[1] ?? "").replace(/["']/g, ""));
-  }
-  return splitHarnessScalar(stripSkillFieldQuotes(value));
+function scalarText(value) {
+  return value?.kind === "scalar" || value?.kind === "block" ? value.text : undefined;
 }
-function parseSkillFrontmatter(content) {
-  if (!content.startsWith("---")) {
-    return {};
-  }
-  const end = content.indexOf(`
----`, 3);
-  if (end === -1) {
-    return {};
-  }
-  const lines = content.slice(3, end).split(`
-`);
-  let name;
-  let description;
-  const triggers = [];
-  let inTriggers = false;
-  let inMetadata = false;
-  let metadataCategory;
-  let metadataVersion;
-  let metadataOrigin;
-  let compatibleHarnesses;
-  let awaitingHarnessesList = false;
-  let descriptionBlock = null;
-  const foldBlock = (block) => block.join(" ").replace(/\s+/g, " ").trim();
-  for (const line of lines) {
-    if (descriptionBlock !== null) {
-      if (line.trim() === "" || /^\s/.test(line)) {
-        descriptionBlock.push(line.trim());
-        continue;
-      }
-      description = foldBlock(descriptionBlock);
-      descriptionBlock = null;
-    }
-    const nameMatch = /^name:\s*(.*)$/.exec(line);
-    if (nameMatch !== null && nameMatch[1] !== undefined) {
-      name = stripSkillFieldQuotes(nameMatch[1].trim());
-      inTriggers = false;
-      inMetadata = false;
-      awaitingHarnessesList = false;
+function listItems(value) {
+  if (value?.kind === "list")
+    return [...value.items];
+  if (value?.kind === "scalar")
+    return splitOutsideQuotes(value.text).map(unquote).filter(Boolean);
+  return [];
+}
+function indentOf(line) {
+  return /^[ \t]*/.exec(line)?.[0].length ?? 0;
+}
+function isFiller(line) {
+  const trimmed = line.trim();
+  return trimmed === "" || trimmed.startsWith("#");
+}
+function readMapping(lines, indent) {
+  const fields = new Map;
+  let index = 0;
+  while (index < lines.length) {
+    const line = lines[index];
+    index += 1;
+    if (isFiller(line) || indentOf(line) !== indent)
       continue;
-    }
-    const descMatch = /^description:\s*(.*)$/.exec(line);
-    if (descMatch !== null && descMatch[1] !== undefined) {
-      const value = descMatch[1].trim();
-      if (/^[|>][-+]?$/.test(value)) {
-        descriptionBlock = [];
+    const match = KEY_LINE.exec(line.slice(indent));
+    if (match === null)
+      continue;
+    const start = index;
+    while (index < lines.length) {
+      const next = lines[index];
+      const nextIndent = indentOf(next);
+      if (isFiller(next) || nextIndent > indent || nextIndent === indent && LIST_ITEM.test(next.slice(nextIndent))) {
+        index += 1;
       } else {
-        description = stripSkillFieldQuotes(value);
+        break;
       }
-      inTriggers = false;
-      inMetadata = false;
-      awaitingHarnessesList = false;
-      continue;
     }
-    if (/^triggers:\s*$/.test(line)) {
-      inTriggers = true;
-      inMetadata = false;
-      awaitingHarnessesList = false;
+    const key = unquote(match[1]);
+    if (!fields.has(key))
+      fields.set(key, readValue(match[2] ?? "", lines.slice(start, index), indent));
+  }
+  return fields;
+}
+function readValue(rest, children, keyIndent) {
+  const text = stripTrailingComment(rest);
+  if (BLOCK_SCALAR.test(text)) {
+    const body = children.filter((line) => line.trim() === "" || indentOf(line) > keyIndent);
+    return { kind: "block", text: body.map((line) => line.trim()).join(" ").replace(/\s+/g, " ").trim() };
+  }
+  if (text.startsWith("["))
+    return readFlowList(text);
+  if (text.startsWith("{") || text.startsWith("&") || text.startsWith("*") || text.startsWith("!")) {
+    return { kind: "unsupported" };
+  }
+  if (text !== "")
+    return { kind: "scalar", text: unquote(text) };
+  const first = children.find((line) => !isFiller(line));
+  if (first === undefined)
+    return { kind: "scalar", text: "" };
+  const firstIndent = indentOf(first);
+  if (LIST_ITEM.test(first.slice(firstIndent)))
+    return readBlockList(children, keyIndent);
+  if (!KEY_LINE.test(first.slice(firstIndent)))
+    return { kind: "unsupported" };
+  return { kind: "mapping", fields: readMapping(children, firstIndent) };
+}
+function readBlockList(children, keyIndent) {
+  const items = [];
+  for (const line of children) {
+    if (isFiller(line))
       continue;
-    }
-    if (inTriggers) {
-      const itemMatch = /^\s+-\s*(.+)$/.exec(line);
-      if (itemMatch !== null && itemMatch[1] !== undefined) {
-        triggers.push(stripSkillFieldQuotes(itemMatch[1].trim()));
-        continue;
-      }
-      inTriggers = false;
-    }
-    if (awaitingHarnessesList) {
-      const itemMatch = /^\s+-\s*(.+)$/.exec(line);
-      if (itemMatch !== null && itemMatch[1] !== undefined) {
-        (compatibleHarnesses ??= []).push(stripSkillFieldQuotes(itemMatch[1].trim()));
-        continue;
+    const lineIndent = indentOf(line);
+    const item = lineIndent >= keyIndent ? LIST_ITEM.exec(line.slice(lineIndent)) : null;
+    if (item === null)
+      break;
+    const text = stripTrailingComment(item[1] ?? "");
+    if (text.startsWith("[") || text.startsWith("{"))
+      return { kind: "unsupported" };
+    const entry = unquote(text);
+    if (entry !== "")
+      items.push(entry);
+  }
+  return { kind: "list", items };
+}
+function readFlowList(text) {
+  if (!text.endsWith("]"))
+    return { kind: "unsupported" };
+  const inner = text.slice(1, -1);
+  const entries = splitOutsideQuotes(inner);
+  if (entries.some((entry) => /^[[{]/.test(entry.trim())))
+    return { kind: "unsupported" };
+  return { kind: "list", items: entries.map(unquote).filter(Boolean) };
+}
+function atTokenStart(text, index) {
+  return index === 0 || /[\s[{,]/.test(text[index - 1]);
+}
+function stripTrailingComment(value) {
+  let quote;
+  for (let index = 0;index < value.length; index += 1) {
+    const char = value[index];
+    if (quote !== undefined) {
+      if (quote === '"' && char === "\\")
+        index += 1;
+      else if (char === quote) {
+        if (quote === "'" && value[index + 1] === "'")
+          index += 1;
+        else
+          quote = undefined;
       }
-      awaitingHarnessesList = false;
-    }
-    if (/^metadata:\s*$/.test(line)) {
-      inMetadata = true;
       continue;
     }
-    if (inMetadata) {
-      if (line.trim() !== "" && !/^\s/.test(line)) {
-        inMetadata = false;
-      } else {
-        const categoryMatch = /^\s+category:\s*(.+)$/.exec(line);
-        if (categoryMatch !== null && categoryMatch[1] !== undefined) {
-          metadataCategory = stripSkillFieldQuotes(categoryMatch[1].trim());
-          continue;
-        }
-        const versionMatch = /^\s+version:\s*(.+)$/.exec(line);
-        if (versionMatch !== null && versionMatch[1] !== undefined) {
-          metadataVersion = stripSkillFieldQuotes(versionMatch[1].trim());
-          continue;
-        }
-        const originMatch = /^\s+origin:\s*(.+)$/.exec(line);
-        if (originMatch !== null && originMatch[1] !== undefined) {
-          metadataOrigin = stripSkillFieldQuotes(originMatch[1].trim());
-          continue;
-        }
-        const harnessesMatch = /^\s+compatible_harnesses:\s*(.*)$/.exec(line);
-        if (harnessesMatch !== null) {
-          const inline = parseInlineHarnesses((harnessesMatch[1] ?? "").trim());
-          if (inline !== undefined) {
-            compatibleHarnesses = inline;
-          } else {
-            awaitingHarnessesList = true;
-          }
-          continue;
-        }
-      }
+    if ((char === '"' || char === "'") && atTokenStart(value, index))
+      quote = char;
+    else if (char === "#" && (index === 0 || /\s/.test(value[index - 1])))
+      return value.slice(0, index).trim();
+  }
+  return value.trim();
+}
+function splitOutsideQuotes(text) {
+  const parts = [];
+  let quote;
+  let current = "";
+  for (let index = 0;index < text.length; index += 1) {
+    const char = text[index];
+    if (quote !== undefined) {
+      if (char === quote)
+        quote = undefined;
+    } else if ((char === '"' || char === "'") && current.trim() === "") {
+      quote = char;
+    } else if (char === ",") {
+      parts.push(current);
+      current = "";
+      continue;
     }
+    current += char;
   }
-  if (descriptionBlock !== null) {
-    description = foldBlock(descriptionBlock);
+  parts.push(current);
+  return parts;
+}
+function unquote(value) {
+  const trimmed = value.trim();
+  if (trimmed.length >= 2) {
+    const first = trimmed[0];
+    if ((first === '"' || first === "'") && trimmed.endsWith(first))
+      return trimmed.slice(1, -1);
   }
+  return trimmed;
+}
+function nonEmpty(value) {
+  return value === undefined || value === "" ? undefined : value;
+}
+function parseSkillFrontmatter(content) {
+  const top = readFrontmatter(content);
+  if (top === undefined)
+    return {};
+  const metadataValue = top.get("metadata");
+  const metadata = metadataValue?.kind === "mapping" ? metadataValue.fields : new Map;
+  const name = scalarText(top.get("name"));
+  const description = scalarText(top.get("description"));
+  const triggersValue = top.get("triggers");
+  const triggers = triggersValue?.kind === "list" ? [...triggersValue.items] : [];
+  const metadataCategory = nonEmpty(scalarText(metadata.get("category")));
+  const metadataVersion = nonEmpty(scalarText(metadata.get("version")));
+  const metadataOrigin = nonEmpty(scalarText(metadata.get("origin")));
+  const harnessesValue = metadata.get("compatible_harnesses");
+  const compatibleHarnesses = harnessesValue?.kind === "list" || harnessesValue?.kind === "scalar" && harnessesValue.text !== "" ? listItems(harnessesValue) : undefined;
   return {
     ...name !== undefined ? { name } : {},
     ...description !== undefined ? { description } : {},
@@ -8611,10 +8885,16 @@ function parseSkillFrontmatter(content) {
     ...compatibleHarnesses !== undefined ? { compatibleHarnesses } : {}
   };
 }
+var KEY_LINE, LIST_ITEM, BLOCK_SCALAR;
+var init_skill_frontmatter = __esm(() => {
+  KEY_LINE = /^("[^"]*"|'[^']*'|[^\s#"'\-[\]{},:][^:]*?):(?:[ \t]+(.*))?$/;
+  LIST_ITEM = /^-(?:[ \t]+(.*))?$/;
+  BLOCK_SCALAR = /^[|>][-+]?[0-9]?$/;
+});
 
 // src/gdskills/catalog.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
-import path35 from "path";
+import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
+import path36 from "path";
 import { fileURLToPath } from "url";
 function skill(name, category, profiles, purpose, workflow) {
   let routing;
@@ -8637,10 +8917,10 @@ function renderedSkill(name, category, profiles, purpose, workflow, triggers, de
   return { name, category, description, purpose, workflow, triggers, profiles };
 }
 function bundledSkillMarkdownPath(category, name) {
-  const here = path35.dirname(fileURLToPath(import.meta.url));
+  const here = path36.dirname(fileURLToPath(import.meta.url));
   return [
-    path35.join(here, "bundled", "skills", category, name, "SKILL.md"),
-    path35.join(here, "..", "src", "gdskills", "bundled", "skills", category, name, "SKILL.md")
+    path36.join(here, "bundled", "skills", category, name, "SKILL.md"),
+    path36.join(here, "..", "src", "gdskills", "bundled", "skills", category, name, "SKILL.md")
   ].find((candidate) => existsSync2(candidate));
 }
 function readBundledSkillRouting(category, name) {
@@ -8648,7 +8928,7 @@ function readBundledSkillRouting(category, name) {
   if (file === undefined) {
     throw new Error(`bundled skill "${category}/${name}" ships no SKILL.md under src/gdskills/bundled/skills, and BUNDLED_GDSKILLS reads its description and triggers from there. Declare it with renderedSkill() if it has no file.`);
   }
-  const { description, triggers } = parseSkillFrontmatter(readFileSync2(file, "utf8"));
+  const { description, triggers } = parseSkillFrontmatter(readFileSync3(file, "utf8"));
   if (description === undefined || description.length === 0 || triggers === undefined || triggers.length === 0) {
     throw new Error(`${file}: frontmatter must declare a non-empty \`description\` and \`triggers:\` list; the skill router scores both.`);
   }
@@ -8656,6 +8936,7 @@ function readBundledSkillRouting(category, name) {
 }
 var BUNDLED_GDSKILLS, BUNDLED_TREE_MARKER;
 var init_catalog = __esm(() => {
+  init_skill_frontmatter();
   BUNDLED_GDSKILLS = [
     renderedSkill("metaproject-router", "core", ["minimal", "recommended", "full"], "Choose which Metaproject module, working skill, or project-skill should be used for a user request.", [
       "Read `.metaproject/index.md` first.",
@@ -8699,7 +8980,7 @@ var init_catalog = __esm(() => {
       "Write the reviewer against the orchestrated review contract; point at the canonical severity rubric instead of inventing one.",
       "Drop the persona, keep the method, and state the reason beside every rule kept.",
       "Confirm with `keryx review reviewers` \u2014 creating files is not registration, and registration is not discovery.",
-      "For existing SKILL.md packages, run `keryx skills import --from <dir|file|https-url> --module <module>`; `keryx review import` is the review-shaped alias with the review-vantage-* prefix."
+      "For existing SKILL.md packages, run `keryx skills import --from <dir|file|https-url> --module <module>`; `keryx review import` is the review-shaped spelling (module implied). A tree of several packages needs `--only <glob>` to say which ones."
     ]),
     renderedSkill("entity-skill-verifier", "core", ["minimal", "recommended", "full"], "Run `keryx skills verify` to check a project-skill's required files, SKILL.md metadata, manifest registration, target-path existence, and evidence artifacts (gdgraph, gdctx, validated gdwiki, Code Health, canonical accepted memory), then classify it as fresh, needs-review, stale, or blocked. The command does not read the skill's prose or compare it against current code \u2014 that comparison is a manual agent step.", [
       "Resolve the target project-skill through gdgraph affected context or `keryx skills route <target>`.",
@@ -9105,10 +9386,10 @@ var init_catalog = __esm(() => {
       "Report gaps and recommended follow-up pages."
     ]),
     renderedSkill("agent-entrypoint-manager", "platform", ["minimal", "recommended", "full"], "Maintain AGENTS.md, CLAUDE.md, and local-first Metaproject references.", [
-      "Find existing root agent entrypoints.",
-      "Keep managed Metaproject blocks idempotent.",
+      "Find existing root agent entrypoints and the block targets `agentEntrypoints.root` names: `CLAUDE.local.md` and `AGENTS.override.md` (scope `local`, the default; Codex mode `override` or `skip`), or `CLAUDE.md` / `AGENTS.md` (scope `shared`).",
+      "Keep managed Metaproject blocks idempotent: refresh them with `keryx update` or `keryx rules sync`, which also moves a block out of a tracked entrypoint and regenerates `AGENTS.override.md` from `AGENTS.md` \u2014 never write a bare block there.",
       "Ensure local `.metaproject/index.md` and skill catalog are first-class references."
-    ], ["agents.md", "claude.md", "entrypoint"], "Use when AGENTS.md or CLAUDE.md needs its managed Metaproject block added, refreshed, or kept idempotent. NOT for: splitting an oversized entrypoint into rules and project-skills (see agent-entrypoint-distiller)."),
+    ], ["agents.md", "claude.md", "entrypoint"], "Use when AGENTS.md or CLAUDE.md needs its managed Metaproject block added, refreshed, or kept idempotent \u2014 the block lives in CLAUDE.local.md / AGENTS.override.md unless scope is shared. NOT for: splitting an oversized entrypoint into rules and project-skills (see agent-entrypoint-distiller)."),
     skill("agent-entrypoint-distiller", "platform", ["minimal", "recommended", "full"], "Split large AGENTS.md/CLAUDE.md files into high-priority Metaproject rules and project-specific skills.", [
       "Run `keryx rules distill` when the user asks to decompose a large CLAUDE.md/AGENTS.md.",
       "Keep root entrypoints compact: non-project/highest-priority instructions plus `.metaproject/index.md` routing.",
@@ -9150,7 +9431,7 @@ var init_catalog = __esm(() => {
       "Sync only selected skills and report changed files."
     ], ["sync skills", "install runtime skills", "global skill sync"], "Use when already-exported runtime skills need pushing to configured local runtimes, and only when sync is explicitly enabled. NOT for: producing the runtime export itself (see skill-runtime-exporter).")
   ];
-  BUNDLED_TREE_MARKER = path35.join("src", "gdskills", "bundled");
+  BUNDLED_TREE_MARKER = path36.join("src", "gdskills", "bundled");
 });
 
 // src/gdskills/resolve.ts
@@ -9283,13 +9564,13 @@ var init_skill_length_ceilings = __esm(() => {
 });
 
 // src/gdskills/bundled-eval.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, readdirSync } from "fs";
-import path36 from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync4, readdirSync } from "fs";
+import path37 from "path";
 function defaultBundledRoot() {
-  const directPath = path36.join(import.meta.dir, "bundled");
+  const directPath = path37.join(import.meta.dir, "bundled");
   if (existsSync3(directPath))
     return directPath;
-  const packagedPath = path36.join(import.meta.dir, "..", "src", "gdskills", "bundled");
+  const packagedPath = path37.join(import.meta.dir, "..", "src", "gdskills", "bundled");
   if (existsSync3(packagedPath))
     return packagedPath;
   return directPath;
@@ -9300,6 +9581,7 @@ var init_bundled_eval = __esm(() => {
   init_catalog();
   init_export();
   init_model_tier();
+  init_skill_frontmatter();
   init_skill_length_ceilings();
   PLACEHOLDER_ACCOUNTS = new Set([
     "dev",
@@ -9486,7 +9768,7 @@ var init_bundled_eval = __esm(() => {
   KNOWN_SKILL_COMPANION_DOCUMENTS = new Map([
     [
       "SKILL.detail.md",
-      "overflow reference linked from its skill's SKILL.md (`orchestration/feature-analyzer`, `review/review-orchestrator`); carries no frontmatter and is not addressed by any runtime"
+      "overflow reference linked from its skill's SKILL.md (`core/reviewer-skill-creator`, `orchestration/feature-analyzer`, `review/review-orchestrator`); carries no frontmatter and is not addressed by any runtime"
     ],
     [
       "orchestrator-prompt.md",
@@ -9805,18 +10087,18 @@ var init_schema = __esm(() => {
 });
 
 // src/agents/catalog.ts
-import { existsSync as existsSync4, readdirSync as readdirSync2, readFileSync as readFileSync4 } from "fs";
-import path37 from "path";
+import { existsSync as existsSync4, readdirSync as readdirSync2, readFileSync as readFileSync5 } from "fs";
+import path38 from "path";
 function agentDefinitionFiles(dir) {
   if (!existsSync4(dir)) {
     return [];
   }
-  return readdirSync2(dir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".md")).map((entry) => path37.join(dir, entry.name)).sort();
+  return readdirSync2(dir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".md")).map((entry) => path38.join(dir, entry.name)).sort();
 }
 function loadOne(filePath, kind) {
   let raw;
   try {
-    raw = readFileSync4(filePath, "utf8");
+    raw = readFileSync5(filePath, "utf8");
   } catch (cause) {
     const detail = cause instanceof Error ? cause.message : String(cause);
     return { error: { reason: "unreadable-file", path: filePath, message: `could not read ${filePath}: ${detail}` } };
@@ -9843,7 +10125,7 @@ function loadOne(filePath, kind) {
     };
   }
   const definition = buildAgentDefinition(parsed.result.data, parsed.result.body);
-  const stem = path37.basename(filePath, ".md");
+  const stem = path38.basename(filePath, ".md");
   if (stem !== definition.name) {
     return {
       error: {
@@ -9877,8 +10159,8 @@ function loadSource(dir, kind, byName, errors) {
   }
 }
 function loadAgentCatalog(projectRoot, options = {}) {
-  const bundledRoot = options.bundledRoot ?? path37.join(defaultBundledRoot(), "agents");
-  const projectDir = path37.join(projectRoot, ".metaproject", "agents");
+  const bundledRoot = options.bundledRoot ?? path38.join(defaultBundledRoot(), "agents");
+  const projectDir = path38.join(projectRoot, ".metaproject", "agents");
   const byName = new Map;
   const errors = [];
   loadSource(bundledRoot, "bundled", byName, errors);
@@ -10671,7 +10953,7 @@ var init_compile = __esm(() => {
 
 // src/agents/export.ts
 import { readFile as readFile16, readdir as readdir8, lstat as lstat6, realpath as realpath7 } from "fs/promises";
-import path38 from "path";
+import path39 from "path";
 function matrixStateToExportLevel(state) {
   return state === "native" || state === "adapter" ? state : "instruction-only";
 }
@@ -10683,7 +10965,7 @@ function proseExportRelativePath(runtime, name) {
   return `${PROSE_EXPORT_ROOT}/${runtime}/${name}.md`;
 }
 async function readExistingFileContent(projectRoot, relativePath) {
-  const absolute = path38.join(projectRoot, ...relativePath.split("/"));
+  const absolute = path39.join(projectRoot, ...relativePath.split("/"));
   try {
     return await readFile16(absolute, "utf8");
   } catch (error) {
@@ -10696,7 +10978,7 @@ async function checkExportPathSafety(projectRoot, relativePath) {
   const segments = relativePath.split("/");
   let current = projectRoot;
   for (const segment of segments) {
-    current = path38.join(current, segment);
+    current = path39.join(current, segment);
     let stats;
     try {
       stats = await lstat6(current);
@@ -10706,12 +10988,12 @@ async function checkExportPathSafety(projectRoot, relativePath) {
       throw error;
     }
     if (stats.isSymbolicLink()) {
-      return `refusing to write ${relativePath} \u2014 ${path38.relative(projectRoot, current) || "."} is a symlink; this exporter never writes through a symlink`;
+      return `refusing to write ${relativePath} \u2014 ${path39.relative(projectRoot, current) || "."} is a symlink; this exporter never writes through a symlink`;
     }
   }
-  let ancestor = path38.dirname(path38.join(projectRoot, ...segments));
+  let ancestor = path39.dirname(path39.join(projectRoot, ...segments));
   for (let guard = 0;guard < segments.length + 1 && !await pathExists(ancestor); guard += 1) {
-    const parent = path38.dirname(ancestor);
+    const parent = path39.dirname(ancestor);
     if (parent === ancestor)
       break;
     ancestor = parent;
@@ -10744,7 +11026,7 @@ function decideAction(existing, generated, format, expectedName) {
   return { action: "update" };
 }
 async function readClaudeSubagentAliasesConfig(projectRoot) {
-  const file = path38.join(projectRoot, CLAUDE_SUBAGENT_ALIASES_CONFIG_PATH);
+  const file = path39.join(projectRoot, CLAUDE_SUBAGENT_ALIASES_CONFIG_PATH);
   if (!await pathExists(file)) {
     return { enabled: true };
   }
@@ -10886,7 +11168,7 @@ async function writeAgentExport(projectRoot, plan, opts = {}) {
 }
 async function scanManagedAgentExports(projectRoot, runtime) {
   const dirRelative = HOST_AGENTS_DIR[runtime];
-  const dirAbsolute = path38.join(projectRoot, ...dirRelative.split("/"));
+  const dirAbsolute = path39.join(projectRoot, ...dirRelative.split("/"));
   let dirStats;
   try {
     dirStats = await lstat6(dirAbsolute);
@@ -10907,7 +11189,7 @@ async function scanManagedAgentExports(projectRoot, runtime) {
     if (!entry.isFile())
       continue;
     const relativePath = `${dirRelative}/${entry.name}`;
-    const absolute = path38.join(projectRoot, ...relativePath.split("/"));
+    const absolute = path39.join(projectRoot, ...relativePath.split("/"));
     let entryStats;
     try {
       entryStats = await lstat6(absolute);
@@ -10922,7 +11204,7 @@ async function scanManagedAgentExports(projectRoot, runtime) {
     } catch {
       continue;
     }
-    const stem = entry.name.slice(0, entry.name.length - path38.extname(entry.name).length);
+    const stem = entry.name.slice(0, entry.name.length - path39.extname(entry.name).length);
     const format = agentSentinelFormatOf(relativePath);
     if (!isStructurallyManaged(content, format, stem))
       continue;
@@ -11092,7 +11374,7 @@ var init_surfaces_agents = __esm(() => {
 
 // src/rules/export-render.ts
 import { readFile as readFile17, readdir as readdir9 } from "fs/promises";
-import path39 from "path";
+import path40 from "path";
 function isUnsafeRulePath(relativePath) {
   return UNSAFE_RULE_PATH_PATTERN.test(relativePath) || relativePath.includes("<!--") || relativePath.includes("-->");
 }
@@ -11135,7 +11417,7 @@ function firstHeading(body) {
   return match ? match[1].trim() : undefined;
 }
 function titleFromFileName(relativePath) {
-  const base = path39.basename(relativePath).replace(/\.(mdc|md)$/i, "");
+  const base = path40.basename(relativePath).replace(/\.(mdc|md)$/i, "");
   return base.split(/[-_]+/).filter((part) => part.length > 0).map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join(" ");
 }
 function parseRuleFile(fileName, content) {
@@ -11148,7 +11430,7 @@ function parseRuleFile(fileName, content) {
   return { title: neutralise(collapseSingleLine(title, 120)), description };
 }
 async function collectCanonicalRules(root) {
-  const rulesDir = path39.join(root, ".metaproject", "rules");
+  const rulesDir = path40.join(root, ".metaproject", "rules");
   if (!await pathExists(rulesDir))
     return { rules: [], skipped: [] };
   const rules = [];
@@ -11162,14 +11444,14 @@ async function collectCanonicalRules(root) {
     }
     for (const dirent of dirents) {
       const childRelative = dirRelative ? `${dirRelative}/${dirent.name}` : dirent.name;
-      const childAbsolute = path39.join(dirAbsolute, dirent.name);
+      const childAbsolute = path40.join(dirAbsolute, dirent.name);
       if (dirent.isDirectory()) {
         await walk(childAbsolute, childRelative);
         continue;
       }
       if (!dirent.isFile())
         continue;
-      const ext = path39.extname(dirent.name).toLowerCase();
+      const ext = path40.extname(dirent.name).toLowerCase();
       if (!RULE_EXTENSIONS.has(ext))
         continue;
       if (dirent.name.toLowerCase() === README_BASENAME)
@@ -11220,7 +11502,7 @@ var init_export_render = __esm(() => {
 });
 
 // src/integrations/surfaces-rules.ts
-import path40 from "path";
+import path41 from "path";
 async function rulesSpec(root) {
   const { rules, skipped } = await collectCanonicalRules(root);
   const body = renderRulesBlockBody(rules);
@@ -11265,7 +11547,7 @@ function rulesExportSurface(params) {
     ...riskNotes !== undefined ? { riskNotes } : {},
     sourceDocs,
     optIn: true,
-    settingsFile: (root) => path40.join(root, ...relativePath.split("/")),
+    settingsFile: (root) => path41.join(root, ...relativePath.split("/")),
     relativePath,
     label: relativePath,
     slots: [],
@@ -11348,7 +11630,6 @@ var init_surfaces_rules = __esm(() => {
 });
 
 // src/integrations/surfaces-learning.ts
-import path41 from "path";
 function learningObserverCommand() {
   return "keryx learn observe --hook claude";
 }
@@ -11377,6 +11658,7 @@ function learningObserverValidate(settings) {
 var LEARNING_OBSERVER_SENTINEL = "learning-observer-hooks", LEARNING_OBSERVER_EVENTS, TOOL_EVENTS, TOOL_MATCHER = "*", HOOK_TIMEOUT_SECONDS = 5, LEARNING_OBSERVER_CLAUDE;
 var init_surfaces_learning = __esm(() => {
   init_settings_json();
+  init_claude_settings();
   LEARNING_OBSERVER_EVENTS = [
     "PreToolUse",
     "PostToolUse",
@@ -11403,8 +11685,7 @@ var init_surfaces_learning = __esm(() => {
       "docs/requirements/keryx-agent-platform-expansion/workstreams/W3-self-learning.md",
       "src/learning/observe.ts"
     ],
-    settingsFile: (root) => path41.join(root, ".claude", "settings.json"),
-    relativePath: ".claude/settings.json",
+    ...claudeSettingsLocation(),
     slots: [
       { key: "hooks", type: "object", access: "owns" },
       { key: "_keryxManaged", type: "array", access: "owns" },
@@ -11425,7 +11706,7 @@ var init_surfaces_learning = __esm(() => {
       return next;
     },
     validate: learningObserverValidate,
-    label: ".claude/settings.json (learning observer)",
+    label: `${CLAUDE_LOCAL_SETTINGS_PATH} (learning observer)`,
     groupShape: "nested",
     groupKey: "PreToolUse",
     groupContainer: "hooks"
@@ -11497,6 +11778,9 @@ function getHarnessAdapter(id) {
 function surfacesOf(adapter, query = {}) {
   return adapter.surfaces.filter((s) => (query.flag === undefined || s.flag === query.flag) && (query.subsystem === undefined || s.subsystem === query.subsystem));
 }
+function surfacePaths(surface) {
+  return surface.relativePathCandidates ?? (surface.relativePath ? [surface.relativePath] : []);
+}
 function assertRegistryCoherent(adapters = HARNESS_ADAPTERS) {
   for (const adapter of adapters) {
     const seenIds = new Set;
@@ -11510,34 +11794,34 @@ function assertRegistryCoherent(adapters = HARNESS_ADAPTERS) {
   const surfaceOwnerByFile = new Map;
   for (const adapter of adapters) {
     for (const surface of adapter.surfaces) {
-      if (!surface.relativePath)
-        continue;
-      let owningAdapterById = surfaceOwnerByFile.get(surface.relativePath);
-      if (!owningAdapterById) {
-        owningAdapterById = new Map;
-        surfaceOwnerByFile.set(surface.relativePath, owningAdapterById);
-      }
-      const existingOwner = owningAdapterById.get(surface.id);
-      if (existingOwner !== undefined && existingOwner !== adapter.id) {
-        throw new Error(`integrations registry: "${surface.relativePath}" has surface id "${surface.id}" registered by both ` + `"${existingOwner}" and "${adapter.id}" \u2014 a SettingsFileOwner keys its surfaces by id per file, so this ` + `would clobber one adapter's surface with the other's`);
+      for (const relativePath of surfacePaths(surface)) {
+        let owningAdapterById = surfaceOwnerByFile.get(relativePath);
+        if (!owningAdapterById) {
+          owningAdapterById = new Map;
+          surfaceOwnerByFile.set(relativePath, owningAdapterById);
+        }
+        const existingOwner = owningAdapterById.get(surface.id);
+        if (existingOwner !== undefined && existingOwner !== adapter.id) {
+          throw new Error(`integrations registry: "${relativePath}" has surface id "${surface.id}" registered by both ` + `"${existingOwner}" and "${adapter.id}" \u2014 a SettingsFileOwner keys its surfaces by id per file, so this ` + `would clobber one adapter's surface with the other's`);
+        }
+        owningAdapterById.set(surface.id, adapter.id);
       }
-      owningAdapterById.set(surface.id, adapter.id);
     }
   }
   const slotsByFile = new Map;
   for (const adapter of adapters) {
     for (const surface of adapter.surfaces) {
-      if (!surface.relativePath)
-        continue;
-      let byKey = slotsByFile.get(surface.relativePath);
-      if (!byKey) {
-        byKey = new Map;
-        slotsByFile.set(surface.relativePath, byKey);
-      }
-      for (const slot of surface.slots) {
-        const records = byKey.get(slot.key) ?? [];
-        records.push({ owner: `${adapter.id}/${surface.id}`, type: slot.type, access: slot.access });
-        byKey.set(slot.key, records);
+      for (const relativePath of surfacePaths(surface)) {
+        let byKey = slotsByFile.get(relativePath);
+        if (!byKey) {
+          byKey = new Map;
+          slotsByFile.set(relativePath, byKey);
+        }
+        for (const slot of surface.slots) {
+          const records = byKey.get(slot.key) ?? [];
+          records.push({ owner: `${adapter.id}/${surface.id}`, type: slot.type, access: slot.access });
+          byKey.set(slot.key, records);
+        }
       }
     }
   }
@@ -11736,11 +12020,13 @@ var init_registry = __esm(() => {
     const byPath = new Map;
     for (const adapter of HARNESS_ADAPTERS) {
       for (const surface of adapter.surfaces) {
-        if (!surface.relativePath || !surface.merge || !surface.strip)
+        if (!surface.merge || !surface.strip)
           continue;
-        const list = byPath.get(surface.relativePath) ?? [];
-        list.push(surface);
-        byPath.set(surface.relativePath, list);
+        for (const relativePath of surfacePaths(surface)) {
+          const list = byPath.get(relativePath) ?? [];
+          list.push(surface);
+          byPath.set(relativePath, list);
+        }
       }
     }
     return [...byPath.entries()].map(([relativePath, surfaces]) => createSettingsFileOwner(relativePath, surfaces));
@@ -11786,7 +12072,68 @@ var init_rules_export = __esm(() => {
 });
 
 // src/integrations/jev-edit-guard-surface.ts
+function editGuardHookCommand() {
+  return "keryx review jev-edit-guard --hook claude";
+}
+function editGuardPostToolUseGroup() {
+  return {
+    matcher: EDIT_GUARD_HOOK_MATCHER,
+    hooks: [{ type: "command", command: editGuardHookCommand() }],
+    [MANAGED_KEY]: EDIT_GUARD_HOOK_SENTINEL
+  };
+}
+function validateEditGuardSurface(settings) {
+  const present = managedGroups(settings, {
+    sentinel: EDIT_GUARD_HOOK_SENTINEL,
+    container: "hooks",
+    key: "PostToolUse",
+    shape: "nested",
+    commandMatches: (c) => c === editGuardHookCommand()
+  });
+  if (present.length === 0)
+    return [`jev-edit-guard: missing PostToolUse(${EDIT_GUARD_HOOK_MATCHER}) guard`];
+  const stale = present.some((g) => typeof g.matcher !== "string" || g.matcher !== EDIT_GUARD_HOOK_MATCHER);
+  if (stale) {
+    return [
+      `jev-edit-guard: PostToolUse guard does not match ${EDIT_GUARD_HOOK_MATCHER}; an edit tool it should cover bypasses it. ` + "Re-run `keryx review jev-edit-guard install`."
+    ];
+  }
+  return [];
+}
+var EDIT_GUARD_HOOK_SENTINEL = "jev-edit-guard-hooks", EDIT_GUARD_HOOK_MATCHER = "Edit|Write|MultiEdit", JEV_EDIT_GUARD_SURFACE;
 var init_jev_edit_guard_surface = __esm(() => {
+  init_claude_settings();
+  init_settings_json();
+  JEV_EDIT_GUARD_SURFACE = {
+    id: "jev-edit-guard",
+    flag: "post-tool",
+    subsystem: "jev-edit-guard",
+    sentinel: EDIT_GUARD_HOOK_SENTINEL,
+    confidence: "verified",
+    sourceDocs: ["src/commands/review-jev-edit-guard.ts"],
+    ...claudeSettingsLocation(),
+    slots: [
+      { key: "hooks", type: "object", access: "owns" },
+      { key: "_keryxManaged", type: "array", access: "owns" },
+      { key: "unmigratedHooks", type: "array", access: "owns" }
+    ],
+    merge: (s) => mergeIntoHookArray(s, "PostToolUse", editGuardPostToolUseGroup(), EDIT_GUARD_HOOK_SENTINEL),
+    strip: (s) => stripFromHookArray(s, "PostToolUse", EDIT_GUARD_HOOK_SENTINEL),
+    validate: validateEditGuardSurface
+  };
+});
+
+// src/integrations/claude-settings-migration.ts
+var init_claude_settings_migration = __esm(() => {
+  init_contained_write();
+  init_git_worktrees();
+  init_symlink_safety();
+  init_entrypoint_migration();
+  init_entrypoint_targets();
+  init_claude_settings();
+  init_install_state();
+  init_jev_edit_guard_surface();
+  init_registry();
   init_settings_json();
 });
 
@@ -11799,6 +12146,8 @@ var init_service = __esm(() => {
   init_surfaces();
   init_rules_export();
   init_jev_edit_guard_surface();
+  init_claude_settings();
+  init_claude_settings_migration();
   init_surfaces_w5b();
   init_surfaces_learning();
   init_markdown_block();
@@ -11981,7 +12330,9 @@ var init_surfaces2 = __esm(() => {
   init_integrations();
   INSTRUCTION_FILENAMES = [
     "AGENTS.md",
+    "AGENTS.override.md",
     "CLAUDE.md",
+    "CLAUDE.local.md",
     "GEMINI.md",
     ".github/copilot-instructions.md",
     ".cursor/rules/keryx-rules.mdc",
@@ -12657,7 +13008,7 @@ function isReportedSpeechContext(content, start) {
   return REPORTED_SPEECH_RE.test(before);
 }
 function isDowngradedInjectionContext(content, origStart, origEnd) {
-  if (isInsideFence(computeFencedRanges2(content), origStart))
+  if (isInsideFence(computeFencedRanges3(content), origStart))
     return true;
   if (isQuotedExample(content, origStart, origEnd))
     return true;
@@ -13032,7 +13383,7 @@ function checkHookRemoteExec(relativePath, hookCommand, pointer) {
     }
   ];
 }
-function computeFencedRanges2(content) {
+function computeFencedRanges3(content) {
   const ranges = [];
   let offset = 0;
   let fenceStart;
@@ -13063,7 +13414,7 @@ function isInsideFence(ranges, index) {
 function checkRemoteExecInText(surface, relativePath, content) {
   const matches = matchAllRemoteExecShapes(content);
   if (matches.length > 0) {
-    const fencedRanges = computeFencedRanges2(content);
+    const fencedRanges = computeFencedRanges3(content);
     const unfenced = matches.find((m) => !isInsideFence(fencedRanges, m.index));
     const reported = unfenced ?? matches[0];
     const fenced = unfenced === undefined;
@@ -17437,7 +17788,7 @@ function describeJsonValue(value) {
   }
   return `a ${typeof value}`;
 }
-function isRecord(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function stringOr(value, fallback) {
@@ -17447,7 +17798,7 @@ function nullableString(value) {
   return typeof value === "string" ? value : null;
 }
 function parseEntry2(value) {
-  if (!isRecord(value)) {
+  if (!isRecord3(value)) {
     return { ok: false };
   }
   const kind = value["kind"];
@@ -17469,7 +17820,7 @@ function parseEntry2(value) {
 }
 function parseTombstone(value) {
   const base = parseEntry2(value);
-  if (!base.ok || !isRecord(value)) {
+  if (!base.ok || !isRecord3(value)) {
     return { ok: false };
   }
   const removedAt = value["removedAt"];
@@ -17483,7 +17834,7 @@ function parseTombstone(value) {
 }
 function parseLifted(value) {
   const base = parseTombstone(value);
-  if (!base.ok || !isRecord(value)) {
+  if (!base.ok || !isRecord3(value)) {
     return { ok: false };
   }
   const restoredAt = value["restoredAt"];
@@ -21621,6 +21972,201 @@ var init_wiki_layer = __esm(() => {
   init_section_index();
 });
 
+// src/gdskills/contracts.ts
+import { readFile as readFile46 } from "fs/promises";
+import { existsSync as existsSync14 } from "fs";
+import path98 from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+async function loadSchema(name) {
+  const contract = CONTRACTS.find((entry) => entry.name === name);
+  if (!contract) {
+    throw new Error(`Unknown contract schema: ${name}`);
+  }
+  const raw = await readFile46(contractPath(contract), "utf8");
+  return JSON.parse(raw);
+}
+function contractPath(contract) {
+  const here = path98.dirname(fileURLToPath2(import.meta.url));
+  if (contract.sourcePath) {
+    for (const root of [path98.join(here, "..", ".."), path98.join(here, ".."), here]) {
+      const candidate = path98.resolve(root, contract.sourcePath);
+      if (existsSync14(candidate)) {
+        return candidate;
+      }
+    }
+  }
+  const directPath = fileURLToPath2(new URL(`./contracts/${contract.fileName}`, import.meta.url));
+  if (existsSync14(directPath)) {
+    return directPath;
+  }
+  const packagedSourcePath = path98.join(here, "..", "src", "gdskills", "contracts", contract.fileName);
+  if (existsSync14(packagedSourcePath)) {
+    return packagedSourcePath;
+  }
+  return directPath;
+}
+var CONTRACTS, SCHEMA_ROOTS;
+var init_contracts = __esm(() => {
+  CONTRACTS = [
+    {
+      name: "agent-event",
+      fileName: "agent-event.schema.json",
+      description: "Append-only lifecycle event emitted by orchestrators and subagents.",
+      enforcement: {
+        kind: "none",
+        reason: "Events are appended by whichever agent is running, in that agent's own runtime. No keryx process sits between the emitter and the log, so there is no point at which a malformed event could be refused rather than written."
+      }
+    },
+    {
+      name: "flow-orchestrator-input",
+      fileName: "flow-orchestrator-input-contract.schema.json",
+      description: "Dispatch payload handed to flow-orchestrator (request + base branch + completion outcome + constraints).",
+      sourcePath: "src/gdskills/bundled/skills/orchestration/flow-orchestrator/input-contract.schema.json",
+      enforcement: {
+        kind: "none",
+        reason: "This payload is handed from one AGENT to another. In a session driven by a host agent's own dispatch tool, no keryx process is on that path, so nothing can refuse a malformed dispatch. Same structural position as reviewer-input, recorded for the same reason. Registering it made `keryx skills contracts validate --schema flow-orchestrator-input` possible, which is a validator an agent must remember to run, not an enforcement."
+      }
+    },
+    {
+      name: "review-pr-feedback-input",
+      fileName: "review-pr-feedback-input-contract.schema.json",
+      description: "Request handed to review-pr-feedback (PR reference, --fix, and the operator confirmation --fix requires).",
+      sourcePath: "src/gdskills/bundled/skills/review/review-pr-feedback/input-contract.schema.json",
+      enforcement: {
+        kind: "none",
+        reason: "The request is what an operator or a host agent hands the skill before any keryx command runs, so keryx is not yet in the path when the payload would have to be refused. This is the one where that hurts most: `--fix` merges third-party review comments into somebody else's pull request, and `operator_confirmed` is the fence. The conditional is expressed in the schema and `keryx skills contracts validate --schema review-pr-feedback-input` will apply it \u2014 but only when something invokes it."
+      }
+    },
+    {
+      name: "review-pr-feedback-output",
+      fileName: "review-pr-feedback-output-contract.schema.json",
+      description: "Result review-pr-feedback returns: verdict counts, the injection-screen record, and what the fix run merged.",
+      sourcePath: "src/gdskills/bundled/skills/review/review-pr-feedback/output-contract.schema.json",
+      enforcement: {
+        kind: "opt-in",
+        module: "src/commands/review.ts",
+        switchedOnBy: "keryx review comments reply --result <file>",
+        refuses: "A result that contradicts itself, before the pass is built and before any network call: an analyze-mode run reporting a branch and a merge, or a record saying the injection screen never ran while claiming it excluded comments."
+      }
+    },
+    {
+      name: "job-orchestrator-state",
+      fileName: "job-orchestrator-state.schema.json",
+      description: "Persisted job package state (.metaproject/jobs/<name>/state.json), written by `keryx job`.",
+      sourcePath: "src/gdskills/bundled/skills/orchestration/job-orchestrator/state.schema.json",
+      enforcement: {
+        kind: "production",
+        module: "src/job/store.ts",
+        refuses: "`writeJob` refuses to write a state file that does not satisfy the schema, so an invalid job package cannot reach disk."
+      }
+    },
+    {
+      name: "orchestrator-state",
+      fileName: "orchestrator-state.schema.json",
+      description: "Persisted resumable orchestrator state.",
+      enforcement: {
+        kind: "none",
+        reason: "No keryx command reads or writes this file. It describes state an orchestrator agent persists for itself, in its own runtime, so there is no keryx-owned write path to refuse at. Contrast job-orchestrator-state, which looks similar and IS enforced for exactly one reason: `keryx job` writes that one."
+      }
+    },
+    {
+      name: "review-finding",
+      fileName: "review-finding.schema.json",
+      description: "Normalized reviewer finding consumed by review-orchestrator and learning flows.",
+      enforcement: {
+        kind: "production",
+        module: "src/review/managed.ts",
+        refuses: "`createManagedReviewPackage` refuses to record findings that do not satisfy the schema, and the disposition sub-schema is applied the same way, so a review round cannot be written with a malformed finding or an unreadable outcome."
+      }
+    },
+    {
+      name: "subagent-dispatch",
+      fileName: "subagent-dispatch.schema.json",
+      description: "Orchestrator-to-subagent dispatch payload.",
+      enforcement: {
+        kind: "none",
+        reason: "The dispatch is built and consumed inside the harness without the canonical schema being loaded: `subagent-dispatch` appears only as a label on the extension metadata. Its sibling `subagent-result` IS validated, because the harness parses a child's reply back and has to decide whether it is well-formed; nothing performs the equivalent act on the way out."
+      }
+    },
+    {
+      name: "subagent-result",
+      fileName: "subagent-result.schema.json",
+      description: "Subagent-to-orchestrator result payload.",
+      enforcement: {
+        kind: "production",
+        module: "src/harness/external/runtime.ts",
+        refuses: "A child's reply that does not parse as a well-formed result is rejected when the harness reads it back, so a malformed result cannot be persisted as if the child had succeeded."
+      }
+    },
+    {
+      name: "task-implementer-input",
+      fileName: "task-implementer-input-contract.schema.json",
+      description: "Task request handed to task-implementer (task + workspace + automation), validated before dispatch.",
+      sourcePath: "src/gdskills/bundled/skills/orchestration/task-implementer/input-contract.schema.json",
+      enforcement: {
+        kind: "none",
+        reason: "Dispatched agent-to-agent, like flow-orchestrator-input. The skill's Phase 1.4 lists five `ASSERT \u2026 \u2192 ABORT(\u2026)` refusals; registering the contract is what lets `keryx skills contracts validate` perform them, and nothing forces that call. The comment beside this registration has said so since it was written."
+      }
+    },
+    {
+      name: "task-implementer-output",
+      fileName: "task-implementer-output-contract.schema.json",
+      description: "JSON result task-implementer writes in Phase 6.1 before it emits its STATUS line.",
+      sourcePath: "src/gdskills/bundled/skills/orchestration/task-implementer/output-contract.schema.json",
+      enforcement: {
+        kind: "none",
+        reason: "The skill writes this file itself, in its own runtime, and no keryx command reads it back. Contrast subagent-result, which is the same shape of thing and IS enforced for one reason: the harness reads that one back and must decide whether it is well-formed."
+      }
+    }
+  ];
+  SCHEMA_ROOTS = [
+    fileURLToPath2(new URL("./contracts/", import.meta.url)),
+    fileURLToPath2(new URL("./bundled/skills/review/review-orchestrator/", import.meta.url))
+  ];
+});
+
+// src/lib/config-dir.ts
+import {
+  appendFileSync,
+  chmodSync,
+  mkdirSync,
+  readFileSync as readFileSync6,
+  renameSync,
+  statSync as statSync2,
+  unlinkSync,
+  writeFileSync
+} from "fs";
+function readBoundedFile(file, maxBytes) {
+  let stats;
+  try {
+    stats = statSync2(file);
+  } catch {
+    return { ok: false, reason: "absent" };
+  }
+  if (!stats.isFile()) {
+    return { ok: false, reason: "not-regular" };
+  }
+  if (stats.size > maxBytes) {
+    return { ok: false, reason: "too-large" };
+  }
+  try {
+    return { ok: true, text: readFileSync6(file, "utf8") };
+  } catch {
+    return { ok: false, reason: "unreadable" };
+  }
+}
+function readConfigFile(file) {
+  return readBoundedFile(file, MAX_CONFIG_FILE_BYTES);
+}
+function readTranscriptFile(file) {
+  return readBoundedFile(file, MAX_TRANSCRIPT_FILE_BYTES);
+}
+var MAX_CONFIG_FILE_BYTES = 1e6, MAX_CONTENT_FILE_BYTES, MAX_TRANSCRIPT_FILE_BYTES;
+var init_config_dir = __esm(() => {
+  MAX_CONTENT_FILE_BYTES = 64 * 1024 * 1024;
+  MAX_TRANSCRIPT_FILE_BYTES = MAX_CONTENT_FILE_BYTES;
+});
+
 // src/flow/service.ts
 init_fs();
 init_validator();
@@ -26317,7 +26863,7 @@ async function resolveTsconfigOptions(configPath, visited, depth, projectRoot) {
   const options = parsed.compilerOptions ?? {};
   const ownBaseUrl = typeof options.baseUrl === "string" ? toProjectRelativeDir(projectRoot, path71.resolve(configDir, options.baseUrl)) : null;
   const baseUrl = ownBaseUrl ?? inherited?.baseUrl ?? null;
-  const ownPaths = isRecord2(options.paths) ? Object.entries(options.paths).filter((entry) => Array.isArray(entry[1])).map(([pattern, targets]) => ({
+  const ownPaths = isRecord4(options.paths) ? Object.entries(options.paths).filter((entry) => Array.isArray(entry[1])).map(([pattern, targets]) => ({
     pattern,
     targets: targets.filter((target) => typeof target === "string")
   })) : null;
@@ -26413,7 +26959,7 @@ function stripJsonComments(source) {
   }
   return out;
 }
-function isRecord2(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function writeGraph(projectRoot, graph) {
@@ -31725,161 +32271,10 @@ function defaultPlan(intent) {
 
 // src/job/store.ts
 init_validator();
+init_contracts();
+init_fs();
 import { appendFile as appendFile5, mkdir as mkdir27, readFile as readFile47, readdir as readdir16 } from "fs/promises";
 import path99 from "path";
-
-// src/gdskills/contracts.ts
-import { readFile as readFile46 } from "fs/promises";
-import { existsSync as existsSync14 } from "fs";
-import path98 from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-var CONTRACTS = [
-  {
-    name: "agent-event",
-    fileName: "agent-event.schema.json",
-    description: "Append-only lifecycle event emitted by orchestrators and subagents.",
-    enforcement: {
-      kind: "none",
-      reason: "Events are appended by whichever agent is running, in that agent's own runtime. No keryx process sits between the emitter and the log, so there is no point at which a malformed event could be refused rather than written."
-    }
-  },
-  {
-    name: "flow-orchestrator-input",
-    fileName: "flow-orchestrator-input-contract.schema.json",
-    description: "Dispatch payload handed to flow-orchestrator (request + base branch + completion outcome + constraints).",
-    sourcePath: "src/gdskills/bundled/skills/orchestration/flow-orchestrator/input-contract.schema.json",
-    enforcement: {
-      kind: "none",
-      reason: "This payload is handed from one AGENT to another. In a session driven by a host agent's own dispatch tool, no keryx process is on that path, so nothing can refuse a malformed dispatch. Same structural position as reviewer-input, recorded for the same reason. Registering it made `keryx skills contracts validate --schema flow-orchestrator-input` possible, which is a validator an agent must remember to run, not an enforcement."
-    }
-  },
-  {
-    name: "review-pr-feedback-input",
-    fileName: "review-pr-feedback-input-contract.schema.json",
-    description: "Request handed to review-pr-feedback (PR reference, --fix, and the operator confirmation --fix requires).",
-    sourcePath: "src/gdskills/bundled/skills/review/review-pr-feedback/input-contract.schema.json",
-    enforcement: {
-      kind: "none",
-      reason: "The request is what an operator or a host agent hands the skill before any keryx command runs, so keryx is not yet in the path when the payload would have to be refused. This is the one where that hurts most: `--fix` merges third-party review comments into somebody else's pull request, and `operator_confirmed` is the fence. The conditional is expressed in the schema and `keryx skills contracts validate --schema review-pr-feedback-input` will apply it \u2014 but only when something invokes it."
-    }
-  },
-  {
-    name: "review-pr-feedback-output",
-    fileName: "review-pr-feedback-output-contract.schema.json",
-    description: "Result review-pr-feedback returns: verdict counts, the injection-screen record, and what the fix run merged.",
-    sourcePath: "src/gdskills/bundled/skills/review/review-pr-feedback/output-contract.schema.json",
-    enforcement: {
-      kind: "opt-in",
-      module: "src/commands/review.ts",
-      switchedOnBy: "keryx review comments reply --result <file>",
-      refuses: "A result that contradicts itself, before the pass is built and before any network call: an analyze-mode run reporting a branch and a merge, or a record saying the injection screen never ran while claiming it excluded comments."
-    }
-  },
-  {
-    name: "job-orchestrator-state",
-    fileName: "job-orchestrator-state.schema.json",
-    description: "Persisted job package state (.metaproject/jobs/<name>/state.json), written by `keryx job`.",
-    sourcePath: "src/gdskills/bundled/skills/orchestration/job-orchestrator/state.schema.json",
-    enforcement: {
-      kind: "production",
-      module: "src/job/store.ts",
-      refuses: "`writeJob` refuses to write a state file that does not satisfy the schema, so an invalid job package cannot reach disk."
-    }
-  },
-  {
-    name: "orchestrator-state",
-    fileName: "orchestrator-state.schema.json",
-    description: "Persisted resumable orchestrator state.",
-    enforcement: {
-      kind: "none",
-      reason: "No keryx command reads or writes this file. It describes state an orchestrator agent persists for itself, in its own runtime, so there is no keryx-owned write path to refuse at. Contrast job-orchestrator-state, which looks similar and IS enforced for exactly one reason: `keryx job` writes that one."
-    }
-  },
-  {
-    name: "review-finding",
-    fileName: "review-finding.schema.json",
-    description: "Normalized reviewer finding consumed by review-orchestrator and learning flows.",
-    enforcement: {
-      kind: "production",
-      module: "src/review/managed.ts",
-      refuses: "`createManagedReviewPackage` refuses to record findings that do not satisfy the schema, and the disposition sub-schema is applied the same way, so a review round cannot be written with a malformed finding or an unreadable outcome."
-    }
-  },
-  {
-    name: "subagent-dispatch",
-    fileName: "subagent-dispatch.schema.json",
-    description: "Orchestrator-to-subagent dispatch payload.",
-    enforcement: {
-      kind: "none",
-      reason: "The dispatch is built and consumed inside the harness without the canonical schema being loaded: `subagent-dispatch` appears only as a label on the extension metadata. Its sibling `subagent-result` IS validated, because the harness parses a child's reply back and has to decide whether it is well-formed; nothing performs the equivalent act on the way out."
-    }
-  },
-  {
-    name: "subagent-result",
-    fileName: "subagent-result.schema.json",
-    description: "Subagent-to-orchestrator result payload.",
-    enforcement: {
-      kind: "production",
-      module: "src/harness/external/runtime.ts",
-      refuses: "A child's reply that does not parse as a well-formed result is rejected when the harness reads it back, so a malformed result cannot be persisted as if the child had succeeded."
-    }
-  },
-  {
-    name: "task-implementer-input",
-    fileName: "task-implementer-input-contract.schema.json",
-    description: "Task request handed to task-implementer (task + workspace + automation), validated before dispatch.",
-    sourcePath: "src/gdskills/bundled/skills/orchestration/task-implementer/input-contract.schema.json",
-    enforcement: {
-      kind: "none",
-      reason: "Dispatched agent-to-agent, like flow-orchestrator-input. The skill's Phase 1.4 lists five `ASSERT \u2026 \u2192 ABORT(\u2026)` refusals; registering the contract is what lets `keryx skills contracts validate` perform them, and nothing forces that call. The comment beside this registration has said so since it was written."
-    }
-  },
-  {
-    name: "task-implementer-output",
-    fileName: "task-implementer-output-contract.schema.json",
-    description: "JSON result task-implementer writes in Phase 6.1 before it emits its STATUS line.",
-    sourcePath: "src/gdskills/bundled/skills/orchestration/task-implementer/output-contract.schema.json",
-    enforcement: {
-      kind: "none",
-      reason: "The skill writes this file itself, in its own runtime, and no keryx command reads it back. Contrast subagent-result, which is the same shape of thing and IS enforced for one reason: the harness reads that one back and must decide whether it is well-formed."
-    }
-  }
-];
-async function loadSchema(name) {
-  const contract = CONTRACTS.find((entry) => entry.name === name);
-  if (!contract) {
-    throw new Error(`Unknown contract schema: ${name}`);
-  }
-  const raw = await readFile46(contractPath(contract), "utf8");
-  return JSON.parse(raw);
-}
-function contractPath(contract) {
-  const here = path98.dirname(fileURLToPath2(import.meta.url));
-  if (contract.sourcePath) {
-    for (const root of [path98.join(here, "..", ".."), path98.join(here, ".."), here]) {
-      const candidate = path98.resolve(root, contract.sourcePath);
-      if (existsSync14(candidate)) {
-        return candidate;
-      }
-    }
-  }
-  const directPath = fileURLToPath2(new URL(`./contracts/${contract.fileName}`, import.meta.url));
-  if (existsSync14(directPath)) {
-    return directPath;
-  }
-  const packagedSourcePath = path98.join(here, "..", "src", "gdskills", "contracts", contract.fileName);
-  if (existsSync14(packagedSourcePath)) {
-    return packagedSourcePath;
-  }
-  return directPath;
-}
-var SCHEMA_ROOTS = [
-  fileURLToPath2(new URL("./contracts/", import.meta.url)),
-  fileURLToPath2(new URL("./bundled/skills/review/review-orchestrator/", import.meta.url))
-];
-
-// src/job/store.ts
-init_fs();
 function jobsRoot(cwd) {
   return path99.join(cwd, ".metaproject", "jobs");
 }
@@ -32322,7 +32717,7 @@ function compareStrictUtc(left, right) {
     return 0;
   return leftFraction < rightFraction ? -1 : 1;
 }
-function isRecord3(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function loadNormativeSchema(schema) {
@@ -32338,18 +32733,18 @@ function resolveSchemaRef(root, ref) {
     return;
   let current = root;
   for (const part of ref.slice(2).split("/")) {
-    if (!isRecord3(current))
+    if (!isRecord5(current))
       return;
     current = current[part.replace(/~1/g, "/").replace(/~0/g, "~")];
   }
-  return isRecord3(current) ? current : undefined;
+  return isRecord5(current) ? current : undefined;
 }
 function jsonEqual(left, right) {
   if (Object.is(left, right))
     return true;
   if (Array.isArray(left) && Array.isArray(right))
     return left.length === right.length && left.every((item, index) => jsonEqual(item, right[index]));
-  if (isRecord3(left) && isRecord3(right)) {
+  if (isRecord5(left) && isRecord5(right)) {
     const leftKeys = Object.keys(left).sort();
     const rightKeys = Object.keys(right).sort();
     return leftKeys.length === rightKeys.length && leftKeys.every((key, index) => key === rightKeys[index] && jsonEqual(left[key], right[key]));
@@ -32369,7 +32764,7 @@ function validateNormativeSchema(root, schema, value, errors, field) {
   if (Array.isArray(schema.oneOf)) {
     const candidates = schema.oneOf.map((candidate) => {
       const candidateErrors = [];
-      const valid = isRecord3(candidate) && validateNormativeSchema(root, candidate, value, candidateErrors, field);
+      const valid = isRecord5(candidate) && validateNormativeSchema(root, candidate, value, candidateErrors, field);
       return { valid, errors: candidateErrors };
     });
     const matched = candidates.filter((candidate) => candidate.valid).length;
@@ -32381,22 +32776,22 @@ function validateNormativeSchema(root, schema, value, errors, field) {
   }
   if (Array.isArray(schema.allOf)) {
     for (const candidate of schema.allOf)
-      if (isRecord3(candidate))
+      if (isRecord5(candidate))
         validateNormativeSchema(root, candidate, value, errors, field);
   }
-  if (isRecord3(schema.if)) {
+  if (isRecord5(schema.if)) {
     const conditionErrors = [];
     const branch = validateNormativeSchema(root, schema.if, value, conditionErrors, field) ? schema.then : schema.else;
-    if (isRecord3(branch))
+    if (isRecord5(branch))
       validateNormativeSchema(root, branch, value, errors, field);
   }
-  if (isRecord3(schema.not)) {
+  if (isRecord5(schema.not)) {
     const prohibitedErrors = [];
     if (validateNormativeSchema(root, schema.not, value, prohibitedErrors, field))
       error(errors, "schema_not", field, "matches a prohibited normative schema branch");
   }
   if (Array.isArray(schema.anyOf)) {
-    const matched = schema.anyOf.some((candidate) => isRecord3(candidate) && validateNormativeSchema(root, candidate, value, [], field));
+    const matched = schema.anyOf.some((candidate) => isRecord5(candidate) && validateNormativeSchema(root, candidate, value, [], field));
     if (!matched)
       error(errors, "schema_any_of", field, "must match a normative schema branch");
   }
@@ -32404,12 +32799,12 @@ function validateNormativeSchema(root, schema, value, errors, field) {
     error(errors, "schema_const", field, "does not match normative const");
   if (Array.isArray(schema.enum) && !schema.enum.some((candidate) => value === candidate))
     error(errors, "schema_enum", field, "does not match normative enum");
-  if (schema.type === "object" && !isRecord3(value)) {
+  if (schema.type === "object" && !isRecord5(value)) {
     error(errors, "schema_type", field, "must be an object");
     return false;
   }
-  if (isRecord3(value) && (schema.type === "object" || isRecord3(schema.properties) || Array.isArray(schema.required) || schema.additionalProperties === false)) {
-    const properties = isRecord3(schema.properties) ? schema.properties : {};
+  if (isRecord5(value) && (schema.type === "object" || isRecord5(schema.properties) || Array.isArray(schema.required) || schema.additionalProperties === false)) {
+    const properties = isRecord5(schema.properties) ? schema.properties : {};
     if (Array.isArray(schema.required)) {
       for (const key of schema.required)
         if (typeof key === "string" && !(key in value))
@@ -32421,7 +32816,7 @@ function validateNormativeSchema(root, schema, value, errors, field) {
           error(errors, "additional_property", `${field}.${key}`, "is not allowed by normative schema");
     }
     for (const [key, propertySchema] of Object.entries(properties))
-      if (key in value && isRecord3(propertySchema))
+      if (key in value && isRecord5(propertySchema))
         validateNormativeSchema(root, propertySchema, value[key], errors, `${field}.${key}`);
   }
   if (schema.type === "array") {
@@ -32437,9 +32832,9 @@ function validateNormativeSchema(root, schema, value, errors, field) {
           if (jsonEqual(value[left], value[right]))
             error(errors, "schema_unique_items", `${field}[${right}]`, "duplicates an earlier item prohibited by the normative schema");
     }
-    if (isRecord3(schema.items))
+    if (isRecord5(schema.items))
       value.forEach((item, index) => validateNormativeSchema(root, schema.items, item, errors, `${field}[${index}]`));
-    if (isRecord3(schema.contains)) {
+    if (isRecord5(schema.contains)) {
       const matches = value.filter((item) => validateNormativeSchema(root, schema.contains, item, [], field)).length;
       const minimum = typeof schema.minContains === "number" ? schema.minContains : 1;
       if (matches < minimum)
@@ -32476,7 +32871,7 @@ function error(errors, code, field, message) {
   errors.push({ code, path: field, message });
 }
 function requireObject(value, errors, field) {
-  if (!isRecord3(value)) {
+  if (!isRecord5(value)) {
     error(errors, "schema_type", field, "must be an object");
     return false;
   }
@@ -32730,7 +33125,7 @@ function validateWriteIntent(document, errors) {
   workspaceUri(document.approvalRef, errors, "$.approvalRef");
   if (!requireObject(document.security, errors, "$.security") || document.security.gate !== "pass")
     error(errors, "security_gate_failed", "$.security.gate", "write intent requires pass");
-  if (isRecord3(document.security)) {
+  if (isRecord5(document.security)) {
     workspaceUri(document.security.policyRef, errors, "$.security.policyRef");
     stringMatch(document.security.policyRevision, revisionPattern, errors, "$.security.policyRevision");
   }
@@ -32771,13 +33166,13 @@ function validateTransition(document, errors) {
     error(errors, "idempotency_mismatch", "$.acceptance.idempotencyKey", "must match the transition key");
   if (!requireObject(acceptance.security, errors, "$.acceptance.security") || acceptance.security.gate !== "pass")
     error(errors, "security_gate_failed", "$.acceptance.security.gate", "acceptance requires pass");
-  if (isRecord3(acceptance.security)) {
+  if (isRecord5(acceptance.security)) {
     workspaceUri(acceptance.security.policyRef, errors, "$.acceptance.security.policyRef");
     stringMatch(acceptance.security.policyRevision, revisionPattern, errors, "$.acceptance.security.policyRevision");
   }
   if (!requireObject(acceptance.freshness, errors, "$.acceptance.freshness") || acceptance.freshness.state !== "fresh")
     error(errors, "stale_evidence", "$.acceptance.freshness.state", "acceptance requires fresh evidence");
-  if (isRecord3(acceptance.freshness))
+  if (isRecord5(acceptance.freshness))
     utc(acceptance.freshness.verifiedAt, errors, "$.acceptance.freshness.verifiedAt");
   if (!requireObject(acceptance.targetWrite, errors, "$.acceptance.targetWrite"))
     error(errors, "missing_target_write", "$.acceptance.targetWrite", "acceptance requires a guarded write receipt");
@@ -32806,7 +33201,7 @@ function validateTransition(document, errors) {
       stringMatch(binding.policyRevision, revisionPattern, errors, "$.acceptance.targetWrite.binding.policyRevision");
       if (!["owner", "editor"].includes(binding.reviewerAuthority))
         error(errors, "schema_enum", "$.acceptance.targetWrite.binding.reviewerAuthority", "must be owner or editor");
-      if (binding.intentRef !== acceptance.writeIntentRef || binding.proposalId !== document.proposalId || binding.proposalRevision !== document.proposalRevision || binding.workspaceId !== document.workspaceId || binding.correlationId !== document.correlationId || binding.idempotencyKey !== document.idempotencyKey || binding.reviewerSubject !== (isRecord3(acceptance.reviewer) ? acceptance.reviewer.subject : undefined) || binding.reviewerAuthority !== (isRecord3(acceptance.reviewer) ? acceptance.reviewer.authority : undefined) || binding.policyRevision !== (isRecord3(acceptance.security) ? acceptance.security.policyRevision : undefined))
+      if (binding.intentRef !== acceptance.writeIntentRef || binding.proposalId !== document.proposalId || binding.proposalRevision !== document.proposalRevision || binding.workspaceId !== document.workspaceId || binding.correlationId !== document.correlationId || binding.idempotencyKey !== document.idempotencyKey || binding.reviewerSubject !== (isRecord5(acceptance.reviewer) ? acceptance.reviewer.subject : undefined) || binding.reviewerAuthority !== (isRecord5(acceptance.reviewer) ? acceptance.reviewer.authority : undefined) || binding.policyRevision !== (isRecord5(acceptance.security) ? acceptance.security.policyRevision : undefined))
         error(errors, "receipt_binding_mismatch", "$.acceptance.targetWrite.binding", "must bind this exact accepted transition");
       else if (binding.bindingHash !== hashSacRecord({ owner: binding.owner, intentRef: binding.intentRef, proposalId: binding.proposalId, proposalRevision: binding.proposalRevision, workspaceId: binding.workspaceId, correlationId: binding.correlationId, idempotencyKey: binding.idempotencyKey, reviewerSubject: binding.reviewerSubject, reviewerAuthority: binding.reviewerAuthority, policyRevision: binding.policyRevision }))
         error(errors, "receipt_binding_hash_mismatch", "$.acceptance.targetWrite.binding.bindingHash", "must hash the retained owner binding");
@@ -32817,10 +33212,10 @@ function validateTransition(document, errors) {
   else
     acceptance.evidence.forEach((item, index) => {
       validateEvidence(item, errors, `$.acceptance.evidence[${index}]`, false);
-      if (isRecord3(acceptance.freshness))
-        ordered(isRecord3(item) ? item.observedAt : undefined, acceptance.freshness.verifiedAt, errors, `$.acceptance.evidence[${index}].observedAt`);
+      if (isRecord5(acceptance.freshness))
+        ordered(isRecord5(item) ? item.observedAt : undefined, acceptance.freshness.verifiedAt, errors, `$.acceptance.evidence[${index}].observedAt`);
     });
-  if (isRecord3(acceptance.freshness) && isRecord3(acceptance.targetWrite)) {
+  if (isRecord5(acceptance.freshness) && isRecord5(acceptance.targetWrite)) {
     ordered(acceptance.freshness.verifiedAt, acceptance.targetWrite.completedAt, errors, "$.acceptance.freshness/targetWrite");
     ordered(acceptance.targetWrite.completedAt, document.occurredAt, errors, "$.acceptance.targetWrite/occurredAt");
   }
@@ -32838,11 +33233,11 @@ function validateReview(document, errors) {
   if (!["accepted", "rejected", "dismissed"].includes(document.decision))
     error(errors, "schema_enum", "$.decision", "is invalid");
   if (document.decision === "accepted") {
-    if (!isRecord3(document.security) || document.security.gate !== "pass")
+    if (!isRecord5(document.security) || document.security.gate !== "pass")
       error(errors, "security_gate_failed", "$.security", "accepted requires a passing gate");
-    if (!isRecord3(document.freshness) || document.freshness.state !== "fresh")
+    if (!isRecord5(document.freshness) || document.freshness.state !== "fresh")
       error(errors, "stale_evidence", "$.freshness", "accepted requires fresh evidence");
-    if (!isRecord3(document.targetWrite))
+    if (!isRecord5(document.targetWrite))
       error(errors, "missing_target_write", "$.targetWrite", "accepted requires target write");
   } else if (typeof document.reason !== "string" || document.reason.length === 0 || document.targetWrite !== undefined || document.freshness !== undefined)
     error(errors, "schema_conditional", "$.reason", "non-accepted decisions require only a reason");
@@ -32980,7 +33375,7 @@ function createSacAuthorizationServer(input) {
   } });
 }
 function isTrustedActorContext(actorContext) {
-  return isRecord3(actorContext) && trustedActors.has(actorContext);
+  return isRecord5(actorContext) && trustedActors.has(actorContext);
 }
 var roleRank = { viewer: 1, editor: 2, owner: 3 };
 function authorizationResult(allowed, code, baseline, required, workspaceId) {
@@ -32998,7 +33393,7 @@ function authorizationResult(allowed, code, baseline, required, workspaceId) {
 }
 async function authorizeSacUse(input) {
   const required = input.action === "read" ? 1 : 2;
-  if (!isRecord3(input.actorContext) || !trustedActors.has(input.actorContext))
+  if (!isRecord5(input.actorContext) || !trustedActors.has(input.actorContext))
     return authorizationResult(false, "untrusted_actor", { role: "revoked", revision: "invalid", workspaceId: input.workspaceId }, required, input.workspaceId);
   const current = await input.resolveCurrentRole(input.actorContext.subject, input.workspaceId);
   if (current.workspaceId !== input.workspaceId)
@@ -34153,11 +34548,11 @@ async function resolveLedgerState(ledger, checkpointPath, verifier) {
   return auditLedger(ledger, checkpointPath, verifier);
 }
 var policyRefPattern = /^\.\/.+/;
-var isRecord4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isRecord6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var asString2 = (value) => typeof value === "string" && value.length > 0;
 var isBaselineArtifact = (artifact) => artifact.schemaVersion === "1.0" && artifact.kind === "deterministic-baseline" && isImmutableVersion2(artifact.version) && artifact.selection === "eligible-ids-in-input-order";
 var isCandidateArtifact = (artifact) => artifact.schemaVersion === "1.0" && artifact.kind === "offline-selection-advisor" && isImmutableVersion2(artifact.version) && asString2(artifact.output) && typeof artifact.mutations === "boolean";
-var isEvaluationReport = (report) => report.schemaVersion === "1.0" && asString2(report.status) && asString2(report.baselineVersion) && asString2(report.baselineDigest) && reportHashPattern.test(report.baselineDigest) && asString2(report.candidateVersion) && asString2(report.candidateDigest) && reportHashPattern.test(report.candidateDigest) && asString2(report.corpusVersion) && asString2(report.corpusDigest) && reportHashPattern.test(report.corpusDigest) && asString2(report.reportDigest) && reportHashPattern.test(report.reportDigest) && asString2(report.sandboxProfileDigest) && reportHashPattern.test(report.sandboxProfileDigest) && isRecord4(report.train) && typeof report.train.status === "string" && typeof report.train.cases === "number" && isRecord4(report.holdout) && typeof report.holdout.status === "string" && typeof report.holdout.cases === "number" && isRecord4(report.adversarial) && typeof report.adversarial.status === "string" && typeof report.adversarial.cases === "number" && Array.isArray(report.candidateSelectedIds) && Array.isArray(report.reasons);
+var isEvaluationReport = (report) => report.schemaVersion === "1.0" && asString2(report.status) && asString2(report.baselineVersion) && asString2(report.baselineDigest) && reportHashPattern.test(report.baselineDigest) && asString2(report.candidateVersion) && asString2(report.candidateDigest) && reportHashPattern.test(report.candidateDigest) && asString2(report.corpusVersion) && asString2(report.corpusDigest) && reportHashPattern.test(report.corpusDigest) && asString2(report.reportDigest) && reportHashPattern.test(report.reportDigest) && asString2(report.sandboxProfileDigest) && reportHashPattern.test(report.sandboxProfileDigest) && isRecord6(report.train) && typeof report.train.status === "string" && typeof report.train.cases === "number" && isRecord6(report.holdout) && typeof report.holdout.status === "string" && typeof report.holdout.cases === "number" && isRecord6(report.adversarial) && typeof report.adversarial.status === "string" && typeof report.adversarial.cases === "number" && Array.isArray(report.candidateSelectedIds) && Array.isArray(report.reasons);
 var isConfigRecord = (value) => typeof value.enabled === "boolean" && typeof value.killSwitch === "boolean";
 async function readPinnedJson(input) {
   const ref = await resolveWorkspaceReference({ workspaceRoot: input.workspaceRoot, kind: "artifact", uri: input.uri });
@@ -34188,7 +34583,7 @@ async function resolvePolicySelection(workspaceRoot, canonicalFallback) {
     if (raw === undefined)
       return canonicalFallback;
     const parsed = JSON.parse(raw);
-    if (!isRecord4(parsed) || !isConfigRecord(parsed))
+    if (!isRecord6(parsed) || !isConfigRecord(parsed))
       return canonicalFallback;
     configJson = parsed;
   } catch {
@@ -34267,7 +34662,7 @@ async function resolvePolicySelectionSafely(workspaceRoot, canonicalFallback) {
   }
 }
 function isCompleteCorpus(value) {
-  return isRecord4(value) && isRecord4(value.manifest) && Array.isArray(value.rows) && Array.isArray(value.quarantine) && verifyPolicyCorpus(value);
+  return isRecord6(value) && isRecord6(value.manifest) && Array.isArray(value.rows) && Array.isArray(value.quarantine) && verifyPolicyCorpus(value);
 }
 var validHash = (value) => reportHashPattern.test(value);
 
@@ -34480,7 +34875,7 @@ function normalizeFwkResult(result) {
 // src/sac/proposal-lifecycle.ts
 init_fs();
 import { createHash as createHash29, randomUUID as randomUUID7 } from "crypto";
-import { appendFile as appendFile7, mkdir as mkdir34, readdir as readdir19, readFile as readFile59 } from "fs/promises";
+import { appendFile as appendFile7, mkdir as mkdir33, readdir as readdir19, readFile as readFile59 } from "fs/promises";
 import path114 from "path";
 
 // src/sac/trusted-wrap-up.ts
@@ -34556,6 +34951,7 @@ import { mkdir as mkdir32, writeFile as writeFile21 } from "fs/promises";
 import path108 from "path";
 
 // src/session/store.ts
+init_config_dir();
 import {
   chmodSync as chmodSync2,
   existsSync as existsSync16,
@@ -34566,46 +34962,6 @@ import {
 } from "fs";
 import path107 from "path";
 
-// src/lib/config-dir.ts
-import {
-  appendFileSync,
-  chmodSync,
-  mkdirSync,
-  readFileSync as readFileSync5,
-  renameSync,
-  statSync as statSync2,
-  unlinkSync,
-  writeFileSync
-} from "fs";
-var MAX_CONFIG_FILE_BYTES = 1e6;
-var MAX_CONTENT_FILE_BYTES = 64 * 1024 * 1024;
-var MAX_TRANSCRIPT_FILE_BYTES = MAX_CONTENT_FILE_BYTES;
-function readBoundedFile(file, maxBytes) {
-  let stats;
-  try {
-    stats = statSync2(file);
-  } catch {
-    return { ok: false, reason: "absent" };
-  }
-  if (!stats.isFile()) {
-    return { ok: false, reason: "not-regular" };
-  }
-  if (stats.size > maxBytes) {
-    return { ok: false, reason: "too-large" };
-  }
-  try {
-    return { ok: true, text: readFileSync5(file, "utf8") };
-  } catch {
-    return { ok: false, reason: "unreadable" };
-  }
-}
-function readConfigFile(file) {
-  return readBoundedFile(file, MAX_CONFIG_FILE_BYTES);
-}
-function readTranscriptFile(file) {
-  return readBoundedFile(file, MAX_TRANSCRIPT_FILE_BYTES);
-}
-
 // src/session/paths.ts
 import { existsSync as existsSync15 } from "fs";
 import { homedir } from "os";
@@ -35817,14 +36173,42 @@ function createRealWikiOwnerWriter(cwd, opts) {
 import { readFile as readFile58 } from "fs/promises";
 
 // src/gdskills/project-skills.ts
+init_contained_write();
 init_fs();
 init_json();
 init_guard();
 import { createHash as createHash28 } from "crypto";
 import { homedir as homedir2 } from "os";
-import { mkdir as mkdir33, readFile as readFile57, stat as stat14 } from "fs/promises";
+import { readFile as readFile57, stat as stat14 } from "fs/promises";
 import path113 from "path";
 var VERSION = "0.1.0";
+var PROJECT_SKILLS_DIR = ".metaproject/project-skills";
+var PROJECT_SKILLS_MANIFEST_PATH = ".metaproject/metaproject.json";
+var PROJECT_SKILLS_CATALOG_PATH = ".metaproject/skills/catalog.md";
+var PROJECT_SKILLS_LOCK_PATH = ".metaproject/data/gdskills/project-skills.lock";
+var PROJECT_SKILLS_CATALOG_START = "<!-- gdskills:project-skills:start -->";
+var PROJECT_SKILLS_CATALOG_END = "<!-- gdskills:project-skills:end -->";
+var PROJECT_SKILLS_CATALOG_EMPTY_ROW = "| _none_ | _none_ | _none_ | - |";
+function projectSkillPackagePath(moduleName, skillName) {
+  return `${PROJECT_SKILLS_DIR}/${moduleName}/${skillName}`;
+}
+function projectSkillKey(entry) {
+  return `${entry.module}/${entry.name}`;
+}
+function projectSkillCatalogRow(entry) {
+  return `| ${entry.module} | ${entry.name} | \`${entry.target}\` | ${entry.path}/SKILL.md |`;
+}
+function projectSkillWritePaths(moduleName, skillName, format) {
+  const packagePath = projectSkillPackagePath(moduleName, skillName);
+  const files = format === "single" ? ["SKILL.md", "skill-changelog.md"] : ["SKILL.md", "skill-changelog.md", "references/context.md", "templates/README.md", "verification.md"];
+  return [...files.map((file) => `${packagePath}/${file}`), PROJECT_SKILLS_MANIFEST_PATH, PROJECT_SKILLS_CATALOG_PATH];
+}
+async function assertProjectWritesContained(projectRoot, paths) {
+  await assertWritableContained(projectRoot, PROJECT_SKILLS_LOCK_PATH, "directory");
+  for (const rel of [...new Set(paths)]) {
+    await assertWritableContained(projectRoot, rel);
+  }
+}
 async function createProjectSkill(projectRoot, options) {
   const metaprojectRoot = path113.join(projectRoot, ".metaproject");
   if (!await pathExists(metaprojectRoot)) {
@@ -35833,11 +36217,12 @@ async function createProjectSkill(projectRoot, options) {
   if (!isRoutableSkillTarget(options.target)) {
     throw new Error(`keryx skills create: target ${JSON.stringify(options.target)} reads as prose, not a routing key. ` + 'A target is what `keryx skills route` matches against \u2014 a concept ("auth flow"), a symbol (`IResultDqReport`), ' + "or a path (`src/dq/DqScoreCard.tsx`). A sentence matches nothing and verifies as permanently stale.");
   }
-  const moduleName = slugify5(options.module ?? inferModule(options.target));
-  const skillName = slugify5(options.name ?? inferSkillName(options.target));
+  const moduleName = projectSkillSlug(options.module ?? inferModule(options.target));
+  const skillName = projectSkillSlug(options.name ?? inferSkillName(options.target));
   const format = options.format ?? "auto";
-  const packageRoot = path113.join(metaprojectRoot, "project-skills", moduleName, skillName);
-  const relativeSkillPath = toPosix(path113.relative(projectRoot, packageRoot));
+  const relativeSkillPath = projectSkillPackagePath(moduleName, skillName);
+  const packageRoot = path113.join(projectRoot, relativeSkillPath);
+  await assertProjectWritesContained(projectRoot, projectSkillWritePaths(moduleName, skillName, format));
   const origin = options.origin ? options.originContent !== undefined ? {
     ref: options.origin.trim(),
     hash: hashOriginContent(options.originContent),
@@ -35847,7 +36232,7 @@ async function createProjectSkill(projectRoot, options) {
   const warnings = collectWarnings(evidence, format);
   const files = filesForPackage(packageRoot, format);
   if (!options.dryRun) {
-    await withFileLock(path113.join(metaprojectRoot, "data", "gdskills", "project-skills.lock"), async () => {
+    await withFileLock(path113.join(projectRoot, PROJECT_SKILLS_LOCK_PATH), async () => {
       await writeProjectSkillPackage({
         projectRoot,
         packageRoot,
@@ -35931,19 +36316,16 @@ async function writeProjectSkillPackage({
   if (!output.allowed) {
     throw new Error(`Project skill blocked by the security gate: ${output.reason}`);
   }
-  await mkdir33(packageRoot, { recursive: true });
-  const skillPath = path113.join(packageRoot, "SKILL.md");
-  await writeFileAtomic(skillPath, output.content);
-  const changelogPath = path113.join(packageRoot, "skill-changelog.md");
-  if (!await pathExists(changelogPath)) {
-    await writeFileAtomic(changelogPath, renderSkillChangelog({ moduleName, skillName, target }));
+  const packageRel = toPosix(path113.relative(projectRoot, packageRoot));
+  const write = (file, content) => writeContained(projectRoot, `${packageRel}/${file}`, content);
+  await write("SKILL.md", output.content);
+  if (!await pathExists(path113.join(packageRoot, "skill-changelog.md"))) {
+    await write("skill-changelog.md", renderSkillChangelog({ moduleName, skillName, target }));
   }
   if (packageFormat === "package") {
-    await mkdir33(path113.join(packageRoot, "references"), { recursive: true });
-    await mkdir33(path113.join(packageRoot, "templates"), { recursive: true });
-    await writeFileAtomic(path113.join(packageRoot, "references", "context.md"), renderReferenceContext({ moduleName, skillName, target, evidence }));
-    await writeFileAtomic(path113.join(packageRoot, "templates", "README.md"), renderTemplatesReadme({ moduleName, skillName }));
-    await writeFileAtomic(path113.join(packageRoot, "verification.md"), renderVerification({ moduleName, skillName, evidence }));
+    await write("references/context.md", renderReferenceContext({ moduleName, skillName, target, evidence }));
+    await write("templates/README.md", renderTemplatesReadme({ moduleName, skillName }));
+    await write("verification.md", renderVerification({ moduleName, skillName, evidence }));
   }
 }
 async function collectEvidence(projectRoot, target) {
@@ -36245,7 +36627,7 @@ keryx skills verify ${moduleName}/${skillName}
 `;
 }
 async function updateManifest(projectRoot, entry) {
-  const manifestPath = path113.join(projectRoot, ".metaproject", "metaproject.json");
+  const manifestPath = path113.join(projectRoot, PROJECT_SKILLS_MANIFEST_PATH);
   const manifest = await readJsonFileOr(manifestPath, {});
   manifest.modules ??= {};
   manifest.modules.gdskills ??= {};
@@ -36253,29 +36635,29 @@ async function updateManifest(projectRoot, entry) {
   const nextRegistry = [
     ...registry.filter((existing) => existing.path !== entry.path),
     entry
-  ].sort((a, b) => `${a.module}/${a.name}`.localeCompare(`${b.module}/${b.name}`));
+  ].sort((a, b) => projectSkillKey(a).localeCompare(projectSkillKey(b)));
   manifest.modules.gdskills.projectSkillRegistry = nextRegistry;
-  await writeFileAtomic(manifestPath, `${JSON.stringify(manifest, null, 2)}
+  await writeContained(projectRoot, PROJECT_SKILLS_MANIFEST_PATH, `${JSON.stringify(manifest, null, 2)}
 `);
 }
 async function updateSkillsCatalog(projectRoot) {
-  const manifestPath = path113.join(projectRoot, ".metaproject", "metaproject.json");
-  const catalogPath = path113.join(projectRoot, ".metaproject", "skills", "catalog.md");
+  const manifestPath = path113.join(projectRoot, PROJECT_SKILLS_MANIFEST_PATH);
+  const catalogPath = path113.join(projectRoot, PROJECT_SKILLS_CATALOG_PATH);
   const manifest = await readJsonFileOr(manifestPath, {});
   const registry = manifest.modules?.gdskills?.projectSkillRegistry ?? [];
-  const rows = registry.length > 0 ? registry.map((entry) => `| ${entry.module} | ${entry.name} | \`${entry.target}\` | ${entry.path}/SKILL.md |`).join(`
-`) : "| _none_ | _none_ | _none_ | - |";
-  const section = `<!-- gdskills:project-skills:start -->
+  const rows = registry.length > 0 ? registry.map(projectSkillCatalogRow).join(`
+`) : PROJECT_SKILLS_CATALOG_EMPTY_ROW;
+  const section = `${PROJECT_SKILLS_CATALOG_START}
 ## Project Skills
 
 | Module | Skill | Target | Entry |
 |---|---|---|---|
 ${rows}
-<!-- gdskills:project-skills:end -->`;
+${PROJECT_SKILLS_CATALOG_END}`;
   const current = await pathExists(catalogPath) ? await readFile57(catalogPath, "utf8") : `# Metaproject Skills Catalog
 `;
-  const start = "<!-- gdskills:project-skills:start -->";
-  const end = "<!-- gdskills:project-skills:end -->";
+  const start = PROJECT_SKILLS_CATALOG_START;
+  const end = PROJECT_SKILLS_CATALOG_END;
   const startIndex = current.indexOf(start);
   const endIndex = current.indexOf(end);
   const next = startIndex >= 0 && endIndex > startIndex ? `${current.slice(0, startIndex).trimEnd()}
@@ -36285,7 +36667,7 @@ ${current.slice(endIndex + end.length).trimStart()}` : `${current.trimEnd()}
 
 ${section}
 `;
-  await writeFileAtomic(catalogPath, next);
+  await writeContained(projectRoot, PROJECT_SKILLS_CATALOG_PATH, next);
 }
 function inferModule(target) {
   const normalized = toPosix(target).replace(/^\.\//, "");
@@ -36303,9 +36685,11 @@ function inferSkillName(target) {
   const base = path113.basename(normalized).replace(/\.[^.]+$/, "");
   return base || "entity";
 }
-function slugify5(value) {
-  const slug = value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-  return slug || "entity";
+function projectSkillSlug(value) {
+  return slugOf(value) || "entity";
+}
+function slugOf(value) {
+  return value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
 function titleize(value) {
   return value.split("-").filter(Boolean).map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join(" ");
@@ -36422,7 +36806,7 @@ class ProposalLifecycleService {
       if (manifest.status === "archived")
         throw new ProposalLifecycleError("guard_denied", "workspace is archived");
       const file = this.proposalPath(workspaceId, proposal.id);
-      await mkdir34(path114.dirname(file), { recursive: true, mode: 448 });
+      await mkdir33(path114.dirname(file), { recursive: true, mode: 448 });
       return withFileLock(`${file}.lock`, async () => {
         const consume = this.options.wrapUpAuthority.consume(input.wrapUp, { actor, workspaceId });
         if (consume !== "ok")
@@ -36450,7 +36834,7 @@ class ProposalLifecycleService {
     return this.options.workspaces.withAuthorizedActor({ actorContext: actor, workspaceId: input.workspaceId, action: "review", execute: async (manifest) => {
       const proposal = await this.loadProposal(input.workspaceId, input.proposalId);
       const ledger = this.ledgerPath(input.workspaceId);
-      await mkdir34(path114.dirname(ledger), { recursive: true, mode: 448 });
+      await mkdir33(path114.dirname(ledger), { recursive: true, mode: 448 });
       return withFileLock(`${ledger}.lock`, async () => {
         const records = (await this.records(ledger)).filter((record) => record.proposalId === proposal.id);
         const events = records.filter((record) => record.recordType === "proposal-transition");
@@ -36902,7 +37286,7 @@ function normalizeProposalLifecycleResult(value) {
   return JSON.parse(JSON.stringify(value));
 }
 // src/sac/collaboration-service.ts
-import { appendFile as appendFile8, mkdir as mkdir35, readFile as readFile60 } from "fs/promises";
+import { appendFile as appendFile8, mkdir as mkdir34, readFile as readFile60 } from "fs/promises";
 import { randomUUID as randomUUID8 } from "crypto";
 import path115 from "path";
 class CollaborationServiceError extends Error {
@@ -36956,7 +37340,7 @@ class CollaborationService {
         occurredAt: (this.input.now ?? (() => new Date))().toISOString(),
         ...suppliedHandoff ? { handoff: { ...suppliedHandoff, from: actor.subject } } : {}
       });
-      await mkdir35(path115.dirname(this.file(manifest.id)), { recursive: true, mode: 448 });
+      await mkdir34(path115.dirname(this.file(manifest.id)), { recursive: true, mode: 448 });
       await appendFile8(this.file(manifest.id), `${JSON.stringify(activity)}
 `, { mode: 384 });
       return normalizeCollaborationResult(activity);
@@ -37005,13 +37389,13 @@ function normalizeCollaborationResult(value) {
 }
 // src/session/external-slate.ts
 init_fs();
-import { mkdir as mkdir37, readdir as readdir20, readFile as readFile61 } from "fs/promises";
+import { mkdir as mkdir36, readdir as readdir20, readFile as readFile61 } from "fs/promises";
 import path117 from "path";
 
 // src/sac/machine-wrap-up.ts
 init_fs();
 import { createHash as createHash30, randomUUID as randomUUID10 } from "crypto";
-import { mkdir as mkdir36 } from "fs/promises";
+import { mkdir as mkdir35 } from "fs/promises";
 import path116 from "path";
 
 // src/sac/workspace-resolve.ts
@@ -37212,7 +37596,7 @@ ${safeSeeds.content}`;
     summary = result.text.trim().length > 0 ? result.text.trim() : mechanicalSummary(summaryDiff, course);
   }
   const evidenceDir = path116.join(input.cwd, ".metaproject", "workspaces", input.workspaceId, "machine-evidence");
-  await mkdir36(evidenceDir, { recursive: true });
+  await mkdir35(evidenceDir, { recursive: true });
   const diffFile = `${input.kind}.${shortHash}.diff.txt`;
   const flowFile = `${input.kind}.${shortHash}.flow.json`;
   const seedsFile = `${input.kind}.${shortHash}.seeds.json`;
@@ -37255,7 +37639,7 @@ async function writeFlooredArchiveArtifact(params) {
     return { ok: false, code: "security_denied", detail: floor.reason };
   const body = floor.bodies[0];
   const archiveDir = path116.join(params.dir, "slate-archive");
-  await mkdir36(archiveDir, { recursive: true });
+  await mkdir35(archiveDir, { recursive: true });
   await writeFileAtomic(path116.join(archiveDir, params.filename), body.content);
   if (floor.notice !== undefined) {
     await writeFileAtomic(path116.join(archiveDir, `${params.filename}${ARCHIVE_REDACTION_NOTICE_SUFFIX}`), floor.notice);
@@ -37295,7 +37679,7 @@ async function writeWrapUpOutcomeArtifact(cwd, dir, trigger, now, groups) {
     const refusalIso = now().toISOString();
     const refusalFilename = `${refusalIso.replace(/[:.]/g, "-")}-wrap-up-outcome.json`;
     const archiveDir = path116.join(dir, "slate-archive");
-    await mkdir36(archiveDir, { recursive: true });
+    await mkdir35(archiveDir, { recursive: true });
     await writeFileAtomic(path116.join(archiveDir, refusalFilename), `${JSON.stringify({
       recordType: "wrap-up-outcome",
       trigger,
@@ -37462,7 +37846,7 @@ async function readExternalSlate(cwd, externalSessionId) {
   }
 }
 async function writeExternalSlate(cwd, externalSessionId, update) {
-  await mkdir37(externalSlatesDir(cwd), { recursive: true });
+  await mkdir36(externalSlatesDir(cwd), { recursive: true });
   return withFileLock(externalSlateLockPath(cwd, externalSessionId), async () => {
     const prev = await readExternalSlate(cwd, externalSessionId);
     const next = update(prev);
@@ -37488,7 +37872,7 @@ function isExternalSlateStale(slate, now = () => new Date) {
   return now().getTime() - lastWriteMs > DEFAULT_LOCK_STALE_MS;
 }
 async function closeExternalSlate(cwd, externalSessionId, trigger, now = () => new Date) {
-  await mkdir37(externalSlatesDir(cwd), { recursive: true });
+  await mkdir36(externalSlatesDir(cwd), { recursive: true });
   return withFileLock(externalSlateLockPath(cwd, externalSessionId), async () => {
     const external = await readExternalSlate(cwd, externalSessionId);
     if (!external || external.closedAt !== undefined)
@@ -37689,18 +38073,32 @@ var SCHEMA_REGISTRY2 = {
 
 // src/standard/profiles.ts
 init_fs();
+init_entrypoint_targets();
 import path118 from "path";
 import { readFile as readFile62 } from "fs/promises";
 var AGENT_MODULES = ["gdgraph", "gdctx", "gdskills", "gdwiki", "memory"];
 var CI_MODULES = ["health", "testing"];
-var ROOT_ENTRYPOINTS = ["AGENTS.md", "agents.md", "CLAUDE.md", "claude.md"];
 var INDEX_LINK = ".metaproject/index.md";
+function namedEntrypoints(manifest) {
+  const agentEntrypoints = manifest.agentEntrypoints;
+  const named = [];
+  const seen = new Set;
+  for (const entry of normalizeEntrypointTargets(agentEntrypoints).targets.root) {
+    if (entry.runtime === "codex" && entry.scope === "local" && entry.mode === "skip")
+      continue;
+    if (seen.has(entry.path.toLowerCase()))
+      continue;
+    seen.add(entry.path.toLowerCase());
+    named.push({ path: entry.path, scope: entry.scope });
+  }
+  return named;
+}
 function enabledModuleKeys(manifest) {
   const modules = manifest.modules ?? {};
   return Object.entries(modules).filter(([, entry]) => entry?.enabled === true).map(([key]) => key);
 }
-async function rootEntrypointLinksIndex(cwd) {
-  for (const name of ROOT_ENTRYPOINTS) {
+async function rootEntrypointLinksIndex(cwd, manifest) {
+  for (const { path: name } of namedEntrypoints(manifest)) {
     const filePath = path118.join(cwd, name);
     if (!await pathExists(filePath)) {
       continue;
@@ -37748,7 +38146,7 @@ async function evaluateProfiles(cwd, manifest) {
     satisfied.push("minimal");
   }
   const hasAgentModule = AGENT_MODULES.some((key) => new Set(enabledModuleKeys(manifest)).has(key));
-  const agent = minimal && hasAgentModule && await rootEntrypointLinksIndex(cwd) && await pathExists(path118.join(cwd, ".metaproject", "rules"));
+  const agent = minimal && hasAgentModule && await rootEntrypointLinksIndex(cwd, manifest) && await pathExists(path118.join(cwd, ".metaproject", "rules"));
   if (agent) {
     satisfied.push("agent");
   }
@@ -37895,7 +38293,6 @@ function validateBranch(value, schema, rootSchema) {
   walk4(value, schema, "$", rootSchema, errors);
   return errors;
 }
-var ROOT_ENTRYPOINTS2 = ["AGENTS.md", "agents.md", "CLAUDE.md", "claude.md"];
 var INDEX_LINK2 = ".metaproject/index.md";
 var MODULE_PATH_FIELDS = [
   "core",
@@ -37988,14 +38385,14 @@ async function validateWorkspace2(cwd) {
       }
     }
   }
-  for (const name of ROOT_ENTRYPOINTS2) {
+  for (const { path: name, scope } of namedEntrypoints(manifest)) {
     const filePath = path119.join(cwd, name);
     if (!await pathExists(filePath)) {
       continue;
     }
     const content = await readFile63(filePath, "utf8");
     if (!content.includes(INDEX_LINK2)) {
-      errors.push(issue("entrypoint-missing-index-link", `Root entrypoint ${name} does not link ${INDEX_LINK2}`, `Add a reference to ${INDEX_LINK2} in ${name} (\`keryx rules sync\` does this).`));
+      errors.push(issue("entrypoint-missing-index-link", `Root entrypoint ${name} does not link ${INDEX_LINK2}`, scope === "local" ? `Run \`keryx update\` to put the managed block back into ${name}.` : `Add a reference to ${INDEX_LINK2} in ${name} (\`keryx rules sync\` does this).`));
     }
   }
   const profileEval = await evaluateProfiles(cwd, manifest);
@@ -38148,6 +38545,12 @@ var HELP_GROUPS = [
     group: "Look and feel",
     summary: "Open the theme picker \u2014 /theme [name] applies immediately."
   },
+  {
+    kind: "slash",
+    name: "/settings",
+    group: "Look and feel",
+    summary: "Every setting in one place, each with its On/Off or value buttons."
+  },
   { kind: "slash", name: "/model", group: "Look and feel", summary: "Switch the model." },
   {
     kind: "slash",
@@ -38505,6 +38908,12 @@ var HELP_GROUPS = [
     group: "External agents, ACP and MCP",
     summary: "Hand a task to an external agent CLI \u2014 /delegate <agent> <task>."
   },
+  {
+    kind: "slash",
+    name: "/external-agents",
+    group: "External agents, ACP and MCP",
+    summary: "Turn the external agent runtime on or off \u2014 /external-agents [on|off]; not the /external privacy switch."
+  },
   {
     kind: "slash",
     name: "/demote",