@rely-ai/caliber 1.30.7 → 1.31.0

package/dist/bin.js

@@ -25,7 +25,7 @@ __export(config_exports, {
   writeConfigFile: () => writeConfigFile
 });
 import fs4 from "fs";
-import path5 from "path";
+import path6 from "path";
 import os2 from "os";
 function getMaxPromptTokens() {
   const config = loadConfig();
@@ -125,8 +125,8 @@ var CONFIG_DIR, CONFIG_FILE, DEFAULT_MODELS, MODEL_CONTEXT_WINDOWS, DEFAULT_CONT
 var init_config = __esm({
   "src/llm/config.ts"() {
     "use strict";
-    CONFIG_DIR = path5.join(os2.homedir(), ".caliber");
-    CONFIG_FILE = path5.join(CONFIG_DIR, "config.json");
+    CONFIG_DIR = path6.join(os2.homedir(), ".caliber");
+    CONFIG_FILE = path6.join(CONFIG_DIR, "config.json");
     DEFAULT_MODELS = {
       anthropic: "claude-sonnet-4-6",
       vertex: "claude-sonnet-4-6",
@@ -233,11 +233,11 @@ var init_types = __esm({
 // src/utils/editor.ts
 import { execSync as execSync13, spawn as spawn3 } from "child_process";
 import fs26 from "fs";
-import path22 from "path";
+import path23 from "path";
 import os6 from "os";
 function getEmptyFilePath(proposedPath) {
   fs26.mkdirSync(DIFF_TEMP_DIR, { recursive: true });
-  const tempPath = path22.join(DIFF_TEMP_DIR, path22.basename(proposedPath));
+  const tempPath = path23.join(DIFF_TEMP_DIR, path23.basename(proposedPath));
   fs26.writeFileSync(tempPath, "");
   return tempPath;
 }
@@ -278,7 +278,7 @@ var init_editor = __esm({
   "src/utils/editor.ts"() {
     "use strict";
     IS_WINDOWS3 = process.platform === "win32";
-    DIFF_TEMP_DIR = path22.join(os6.tmpdir(), "caliber-diff");
+    DIFF_TEMP_DIR = path23.join(os6.tmpdir(), "caliber-diff");
   }
 });
 
@@ -504,7 +504,7 @@ __export(lock_exports, {
   releaseLock: () => releaseLock
 });
 import fs37 from "fs";
-import path29 from "path";
+import path30 from "path";
 import os8 from "os";
 function isCaliberRunning() {
   try {
@@ -538,7 +538,7 @@ var LOCK_FILE, STALE_MS;
 var init_lock = __esm({
   "src/lib/lock.ts"() {
     "use strict";
-    LOCK_FILE = path29.join(os8.tmpdir(), ".caliber.lock");
+    LOCK_FILE = path30.join(os8.tmpdir(), ".caliber.lock");
     STALE_MS = 10 * 60 * 1e3;
   }
 });
@@ -546,17 +546,17 @@ var init_lock = __esm({
 // src/cli.ts
 import { Command } from "commander";
 import fs47 from "fs";
-import path38 from "path";
+import path39 from "path";
 import { fileURLToPath } from "url";
 
 // src/commands/init.ts
-import path25 from "path";
+import path26 from "path";
 import chalk14 from "chalk";
 import fs32 from "fs";
 
 // src/fingerprint/index.ts
 import fs8 from "fs";
-import path7 from "path";
+import path8 from "path";
 
 // src/fingerprint/git.ts
 import { execSync } from "child_process";
@@ -801,10 +801,25 @@ function readExistingConfigs(dir) {
 
 // src/fingerprint/code-analysis.ts
 import fs3 from "fs";
-import path4 from "path";
+import path5 from "path";
 import { execSync as execSync3 } from "child_process";
 
 // src/lib/sanitize.ts
+import path4 from "path";
+function sanitizePath(component) {
+  const cleaned = component.replace(/\.\./g, "").replace(/[/\\]/g, "-").replace(/-{2,}/g, "-").replace(/^-+|-+$/g, "");
+  if (!cleaned) {
+    throw new Error(`Invalid path component: ${component}`);
+  }
+  return cleaned;
+}
+function assertPathWithinDir(filePath, baseDir) {
+  const resolved = path4.resolve(baseDir, filePath);
+  const resolvedBase = path4.resolve(baseDir);
+  if (!resolved.startsWith(resolvedBase + path4.sep) && resolved !== resolvedBase) {
+    throw new Error(`Path traversal detected: ${filePath} escapes ${baseDir}`);
+  }
+}
 var KNOWN_PREFIX_PATTERNS = [
   // Anthropic (before generic sk- pattern)
   [/sk-ant-[A-Za-z0-9_-]{20,}/g, "[REDACTED]"],
@@ -828,9 +843,13 @@ var KNOWN_PREFIX_PATTERNS = [
   // Bearer tokens
   [/[Bb]earer\s+[A-Za-z0-9_\-.]{20,}/g, "[REDACTED]"],
   // PEM private keys
-  [/-----BEGIN[A-Z ]+KEY-----[\s\S]+?-----END[A-Z ]+KEY-----/g, "[REDACTED]"]
+  [/-----BEGIN[A-Z ]+KEY-----[\s\S]+?-----END[A-Z ]+KEY-----/g, "[REDACTED]"],
+  // Database connection strings with credentials
+  [/(postgresql|mysql|mongodb(\+srv)?|redis|amqp):\/\/[^@\s]+:[^@\s]+@[^\s'"]+/g, "[REDACTED]"],
+  // GitLab tokens
+  [/glpat-[a-zA-Z0-9_-]{20,}/g, "[REDACTED]"]
 ];
-var SENSITIVE_ASSIGNMENT = /(?:api[_-]?key|secret[_-]?key|password|token|credential|auth[_-]?token|private[_-]?key)\s*[:=]\s*['"]?([^\s'"]{8,500})['"]?/gi;
+var SENSITIVE_ASSIGNMENT = /(?:api[_-]?key|secret[_-]?key|password|token|credential|auth[_-]?token|private[_-]?key|database[_-]?url|connection[_-]?string)\s*[:=]\s*['"]?([^\s'"]{8,500})['"]?/gi;
 function sanitizeSecrets(text) {
   let result = text;
   for (const [pattern, replacement] of KNOWN_PREFIX_PATTERNS) {
@@ -949,12 +968,15 @@ var SKIP_PATTERNS = [
   /\.d\.ts$/,
   /\.generated\./,
   /\.snap$/,
-  /^\.env($|\.)/
+  /^\.env($|\.)/,
+  /\.(pem|key|crt|cer|pfx|p12|jks|keystore)$/,
+  /^id_(rsa|ed25519|ecdsa)$/,
+  /^(known_hosts|authorized_keys)$/
 ];
 var COMMENT_LINE = {
-  "c": /^\s*\/\//,
-  "h": /^\s*#/,
-  "x": /^\s*<!--.*-->\s*$/
+  c: /^\s*\/\//,
+  h: /^\s*#/,
+  x: /^\s*<!--.*-->\s*$/
 };
 var EXT_COMMENT = {
   ".ts": "c",
@@ -1060,7 +1082,6 @@ function extractSkeleton(content, ext) {
   const lines = content.split("\n");
   const result = [];
   let braceDepth = 0;
-  let inSignature = false;
   let skipBody = false;
   if ([".py", ".pyw", ".rb"].includes(ext)) {
     return extractSkeletonIndentBased(lines, ext);
@@ -1086,7 +1107,9 @@ function extractSkeleton(content, ext) {
       }
       continue;
     }
-    const isFnOrClass = /^\s*(export\s+)?(default\s+)?(async\s+)?(function|class|const\s+\w+\s*=\s*(async\s*)?\(|pub\s+fn|fn|func)\s/.test(trimmed) || /^\s*(def|func|fn|pub fn|pub async fn)\s/.test(trimmed);
+    const isFnOrClass = /^\s*(export\s+)?(default\s+)?(async\s+)?(function|class|const\s+\w+\s*=\s*(async\s*)?\(|pub\s+fn|fn|func)\s/.test(
+      trimmed
+    ) || /^\s*(def|func|fn|pub fn|pub async fn)\s/.test(trimmed);
     if (isFnOrClass && braceDepth === 0) {
       result.push(line);
       const opens = (line.match(/{/g) || []).length;
@@ -1114,7 +1137,7 @@ function extractSkeleton(content, ext) {
   }
   return result.join("\n");
 }
-function extractSkeletonIndentBased(lines, ext) {
+function extractSkeletonIndentBased(lines, _ext) {
   const result = [];
   let skipIndent = -1;
   for (const line of lines) {
@@ -1146,18 +1169,18 @@ function extractSkeletonIndentBased(lines, ext) {
 }
 function extractImports(content, filePath) {
   const imports = [];
-  const dir = path4.dirname(filePath);
+  const dir = path5.dirname(filePath);
   for (const line of content.split("\n")) {
     const trimmed = line.trim();
     const jsMatch = trimmed.match(/(?:from|require\()\s*['"]([^'"]+)['"]/);
     if (jsMatch && jsMatch[1].startsWith(".")) {
-      imports.push(path4.normalize(path4.join(dir, jsMatch[1])));
+      imports.push(path5.normalize(path5.join(dir, jsMatch[1])));
       continue;
     }
     const pyMatch = trimmed.match(/^from\s+(\.[.\w]*)\s+import/);
     if (pyMatch) {
       const modulePath = pyMatch[1].replace(/\./g, "/");
-      imports.push(path4.normalize(path4.join(dir, modulePath)));
+      imports.push(path5.normalize(path5.join(dir, modulePath)));
       continue;
     }
     const goMatch = trimmed.match(/^\s*"([^"]+)"/);
@@ -1170,11 +1193,20 @@ function extractImports(content, filePath) {
 function buildImportCounts(files) {
   const counts = /* @__PURE__ */ new Map();
   for (const [filePath, content] of files) {
-    const ext = path4.extname(filePath).toLowerCase();
+    const ext = path5.extname(filePath).toLowerCase();
     if (!SOURCE_EXTENSIONS.has(ext)) continue;
     const imports = extractImports(content, filePath);
     for (const imp of imports) {
-      const candidates = [imp, imp + ".ts", imp + ".js", imp + ".tsx", imp + ".jsx", imp + "/index.ts", imp + "/index.js", imp + ".py"];
+      const candidates = [
+        imp,
+        imp + ".ts",
+        imp + ".js",
+        imp + ".tsx",
+        imp + ".jsx",
+        imp + "/index.ts",
+        imp + "/index.js",
+        imp + ".py"
+      ];
       for (const candidate of candidates) {
         const normalized = candidate.replace(/\\/g, "/");
         if (files.has(normalized)) {
@@ -1204,7 +1236,7 @@ function getGitFrequency(dir) {
 function groupByDirectory(files) {
   const groups = /* @__PURE__ */ new Map();
   for (const f of files) {
-    const dir = path4.dirname(f.path);
+    const dir = path5.dirname(f.path);
     const group = groups.get(dir) || [];
     group.push(f);
     groups.set(dir, group);
@@ -1216,7 +1248,9 @@ function structuralFingerprint(content, ext) {
   const bucket = Math.floor(lines.length / 10) * 10;
   const first = (lines[0] || "").trim().slice(0, 50);
   const imports = lines.filter((l) => /^\s*(import |from |require\(|use )/.test(l)).length;
-  const fns = lines.filter((l) => /^\s*(export\s+)?(async\s+)?(function |def |func |fn |pub fn |class )/.test(l)).length;
+  const fns = lines.filter(
+    (l) => /^\s*(export\s+)?(async\s+)?(function |def |func |fn |pub fn |class )/.test(l)
+  ).length;
   return `${ext}:${bucket}:${imports}:${fns}:${first}`;
 }
 function analyzeCode(dir) {
@@ -1225,14 +1259,14 @@ function analyzeCode(dir) {
   let totalChars = 0;
   for (const relPath of allPaths) {
     try {
-      totalChars += fs3.statSync(path4.join(dir, relPath)).size;
+      totalChars += fs3.statSync(path5.join(dir, relPath)).size;
     } catch {
     }
   }
   const fileContents = /* @__PURE__ */ new Map();
   for (const relPath of allPaths) {
     try {
-      const content = fs3.readFileSync(path4.join(dir, relPath), "utf-8");
+      const content = fs3.readFileSync(path5.join(dir, relPath), "utf-8");
       if (content.split("\n").length <= 500) fileContents.set(relPath, content);
     } catch {
     }
@@ -1242,7 +1276,7 @@ function analyzeCode(dir) {
   const scored = [];
   let compressedChars = 0;
   for (const [relPath, rawContent] of fileContents) {
-    const ext = path4.extname(relPath).toLowerCase();
+    const ext = path5.extname(relPath).toLowerCase();
     const compressed = compressContent(rawContent, ext);
     const skeleton = extractSkeleton(compressed, ext);
     compressedChars += compressed.length;
@@ -1263,7 +1297,12 @@ function analyzeCode(dir) {
     const repFP = structuralFingerprint(rep.compressed, rep.ext);
     const similar = group.slice(1).filter((f) => structuralFingerprint(f.compressed, f.ext) === repFP);
     const unique = group.slice(1).filter((f) => structuralFingerprint(f.compressed, f.ext) !== repFP);
-    const repEntry = { path: rep.path, content: sanitizeSecrets(rep.compressed), size: rep.compressed.length, priority: rep.score };
+    const repEntry = {
+      path: rep.path,
+      content: sanitizeSecrets(rep.compressed),
+      size: rep.compressed.length,
+      priority: rep.score
+    };
     const repSize = rep.path.length + rep.compressed.length + 10;
     if (includedChars + repSize <= CHAR_BUDGET) {
       result.push(repEntry);
@@ -1271,18 +1310,28 @@ function analyzeCode(dir) {
     }
     if (similar.length > 0) {
       dupGroups++;
-      const names = similar.map((f) => path4.basename(f.path));
+      const names = similar.map((f) => path5.basename(f.path));
       const summary = `(${similar.length} similar file${similar.length === 1 ? "" : "s"} in ${dirPath}/: ${names.join(", ")})`;
       const summarySize = summary.length + 30;
       if (includedChars + summarySize <= CHAR_BUDGET) {
-        result.push({ path: `[similar to ${rep.path}]`, content: summary, size: summary.length, priority: rep.score });
+        result.push({
+          path: `[similar to ${rep.path}]`,
+          content: summary,
+          size: summary.length,
+          priority: rep.score
+        });
         includedChars += summarySize;
       }
     }
     for (const f of unique) {
       const skeletonSize = f.path.length + f.skeleton.length + 10;
       if (includedChars + skeletonSize <= CHAR_BUDGET) {
-        result.push({ path: f.path, content: sanitizeSecrets(f.skeleton), size: f.skeleton.length, priority: f.score });
+        result.push({
+          path: f.path,
+          content: sanitizeSecrets(f.skeleton),
+          size: f.skeleton.length,
+          priority: f.score
+        });
         includedChars += skeletonSize;
       }
     }
@@ -1292,7 +1341,12 @@ function analyzeCode(dir) {
     if (includedPaths.has(f.path)) continue;
     const skeletonSize = f.path.length + f.skeleton.length + 10;
     if (includedChars + skeletonSize > CHAR_BUDGET) continue;
-    result.push({ path: f.path, content: sanitizeSecrets(f.skeleton), size: f.skeleton.length, priority: f.score });
+    result.push({
+      path: f.path,
+      content: sanitizeSecrets(f.skeleton),
+      size: f.skeleton.length,
+      priority: f.score
+    });
     includedChars += skeletonSize;
   }
   return {
@@ -1308,7 +1362,7 @@ function analyzeCode(dir) {
 }
 function walkDir(base, rel, depth, maxDepth, files) {
   if (depth > maxDepth) return;
-  const fullPath = path4.join(base, rel);
+  const fullPath = path5.join(base, rel);
   let entries;
   try {
     entries = fs3.readdirSync(fullPath, { withFileTypes: true });
@@ -1324,7 +1378,7 @@ function walkDir(base, rel, depth, maxDepth, files) {
     } else if (entry.isFile()) {
       if (SKIP_FILES.has(entry.name)) continue;
       if (SKIP_PATTERNS.some((p) => p.test(entry.name))) continue;
-      const ext = path4.extname(entry.name).toLowerCase();
+      const ext = path5.extname(entry.name).toLowerCase();
       if (TEXT_EXTENSIONS.has(ext) || depth === 0 && !ext && !entry.name.startsWith(".")) {
         files.push(relPath);
       }
@@ -1332,7 +1386,7 @@ function walkDir(base, rel, depth, maxDepth, files) {
   }
 }
 function filePriority(filePath) {
-  const base = path4.basename(filePath);
+  const base = path5.basename(filePath);
   const entryPoints = /* @__PURE__ */ new Set([
     "index.ts",
     "index.js",
@@ -2076,7 +2130,7 @@ function isClaudeCliAvailable() {
 
 // src/llm/utils.ts
 function extractJson(text) {
-  const startIdx = text.search(/[\[{]/);
+  const startIdx = text.search(/[[{]/);
   if (startIdx === -1) return null;
   let depth = 0;
   let inString = false;
@@ -2831,14 +2885,14 @@ init_config();
 
 // src/fingerprint/cache.ts
 import fs7 from "fs";
-import path6 from "path";
+import path7 from "path";
 import crypto from "crypto";
 import { execSync as execSync7 } from "child_process";
 var CACHE_VERSION = 1;
 var CACHE_DIR = ".caliber/cache";
 var CACHE_FILE = "fingerprint.json";
 function getCachePath(dir) {
-  return path6.join(dir, CACHE_DIR, CACHE_FILE);
+  return path7.join(dir, CACHE_DIR, CACHE_FILE);
 }
 function getGitHead(dir) {
   try {
@@ -2897,7 +2951,7 @@ function loadFingerprintCache(dir, fileTree) {
 function saveFingerprintCache(dir, fileTree, codeAnalysis, languages, frameworks, tools, workspaces) {
   const cachePath = getCachePath(dir);
   try {
-    const cacheDir = path6.dirname(cachePath);
+    const cacheDir = path7.dirname(cachePath);
     if (!fs7.existsSync(cacheDir)) {
       fs7.mkdirSync(cacheDir, { recursive: true });
     }
@@ -2971,7 +3025,7 @@ async function collectFingerprint(dir) {
 }
 function readPackageName(dir) {
   try {
-    const pkgPath = path7.join(dir, "package.json");
+    const pkgPath = path8.join(dir, "package.json");
     if (!fs8.existsSync(pkgPath)) return void 0;
     const pkg3 = JSON.parse(fs8.readFileSync(pkgPath, "utf-8"));
     return pkg3.name;
@@ -2987,7 +3041,7 @@ async function enrichWithLLM(fingerprint) {
     const suffixCounts = {};
     for (const entry of fingerprint.fileTree) {
       if (entry.endsWith("/")) continue;
-      const ext = path7.extname(entry).toLowerCase();
+      const ext = path8.extname(entry).toLowerCase();
       if (ext) {
         suffixCounts[ext] = (suffixCounts[ext] || 0) + 1;
       }
@@ -3004,20 +3058,20 @@ async function enrichWithLLM(fingerprint) {
 
 // src/scanner/index.ts
 import fs9 from "fs";
-import path8 from "path";
+import path9 from "path";
 import crypto2 from "crypto";
 import os4 from "os";
 function detectPlatforms() {
   const home = os4.homedir();
   return {
-    claude: fs9.existsSync(path8.join(home, ".claude")),
+    claude: fs9.existsSync(path9.join(home, ".claude")),
     cursor: fs9.existsSync(getCursorConfigDir()),
-    codex: fs9.existsSync(path8.join(home, ".codex"))
+    codex: fs9.existsSync(path9.join(home, ".codex"))
   };
 }
 function scanLocalState(dir) {
   const items = [];
-  const claudeMdPath = path8.join(dir, "CLAUDE.md");
+  const claudeMdPath = path9.join(dir, "CLAUDE.md");
   if (fs9.existsSync(claudeMdPath)) {
     items.push({
       type: "rule",
@@ -3027,10 +3081,10 @@ function scanLocalState(dir) {
       path: claudeMdPath
     });
   }
-  const skillsDir = path8.join(dir, ".claude", "skills");
+  const skillsDir = path9.join(dir, ".claude", "skills");
   if (fs9.existsSync(skillsDir)) {
     for (const file of fs9.readdirSync(skillsDir).filter((f) => f.endsWith(".md"))) {
-      const filePath = path8.join(skillsDir, file);
+      const filePath = path9.join(skillsDir, file);
       items.push({
         type: "skill",
         platform: "claude",
@@ -3040,7 +3094,7 @@ function scanLocalState(dir) {
       });
     }
   }
-  const mcpJsonPath = path8.join(dir, ".mcp.json");
+  const mcpJsonPath = path9.join(dir, ".mcp.json");
   if (fs9.existsSync(mcpJsonPath)) {
     try {
       const mcpJson = JSON.parse(fs9.readFileSync(mcpJsonPath, "utf-8"));
@@ -3059,7 +3113,7 @@ function scanLocalState(dir) {
       warnScanSkip(".mcp.json", error);
     }
   }
-  const agentsMdPath = path8.join(dir, "AGENTS.md");
+  const agentsMdPath = path9.join(dir, "AGENTS.md");
   if (fs9.existsSync(agentsMdPath)) {
     items.push({
       type: "rule",
@@ -3069,11 +3123,11 @@ function scanLocalState(dir) {
       path: agentsMdPath
     });
   }
-  const codexSkillsDir = path8.join(dir, ".agents", "skills");
+  const codexSkillsDir = path9.join(dir, ".agents", "skills");
   if (fs9.existsSync(codexSkillsDir)) {
     try {
       for (const name of fs9.readdirSync(codexSkillsDir)) {
-        const skillFile = path8.join(codexSkillsDir, name, "SKILL.md");
+        const skillFile = path9.join(codexSkillsDir, name, "SKILL.md");
         if (fs9.existsSync(skillFile)) {
           items.push({
             type: "skill",
@@ -3088,7 +3142,7 @@ function scanLocalState(dir) {
       warnScanSkip(".agents/skills", error);
     }
   }
-  const cursorrulesPath = path8.join(dir, ".cursorrules");
+  const cursorrulesPath = path9.join(dir, ".cursorrules");
   if (fs9.existsSync(cursorrulesPath)) {
     items.push({
       type: "rule",
@@ -3098,10 +3152,10 @@ function scanLocalState(dir) {
       path: cursorrulesPath
     });
   }
-  const cursorRulesDir = path8.join(dir, ".cursor", "rules");
+  const cursorRulesDir = path9.join(dir, ".cursor", "rules");
   if (fs9.existsSync(cursorRulesDir)) {
     for (const file of fs9.readdirSync(cursorRulesDir).filter((f) => f.endsWith(".mdc"))) {
-      const filePath = path8.join(cursorRulesDir, file);
+      const filePath = path9.join(cursorRulesDir, file);
       items.push({
         type: "rule",
         platform: "cursor",
@@ -3111,11 +3165,11 @@ function scanLocalState(dir) {
       });
     }
   }
-  const cursorSkillsDir = path8.join(dir, ".cursor", "skills");
+  const cursorSkillsDir = path9.join(dir, ".cursor", "skills");
   if (fs9.existsSync(cursorSkillsDir)) {
     try {
       for (const name of fs9.readdirSync(cursorSkillsDir)) {
-        const skillFile = path8.join(cursorSkillsDir, name, "SKILL.md");
+        const skillFile = path9.join(cursorSkillsDir, name, "SKILL.md");
         if (fs9.existsSync(skillFile)) {
           items.push({
             type: "skill",
@@ -3130,7 +3184,7 @@ function scanLocalState(dir) {
       warnScanSkip(".cursor/skills", error);
     }
   }
-  const cursorMcpPath = path8.join(dir, ".cursor", "mcp.json");
+  const cursorMcpPath = path9.join(dir, ".cursor", "mcp.json");
   if (fs9.existsSync(cursorMcpPath)) {
     try {
       const mcpJson = JSON.parse(fs9.readFileSync(cursorMcpPath, "utf-8"));
@@ -3165,17 +3219,17 @@ function warnScanSkip(target, error) {
 function getCursorConfigDir() {
   const home = os4.homedir();
   if (process.platform === "darwin") {
-    return path8.join(home, "Library", "Application Support", "Cursor");
+    return path9.join(home, "Library", "Application Support", "Cursor");
   }
   if (process.platform === "win32") {
-    return path8.join(home, "AppData", "Roaming", "Cursor");
+    return path9.join(home, "AppData", "Roaming", "Cursor");
   }
-  return path8.join(home, ".config", "Cursor");
+  return path9.join(home, ".config", "Cursor");
 }
 
 // src/fingerprint/sources.ts
 import fs10 from "fs";
-import path9 from "path";
+import path10 from "path";
 
 // src/scoring/utils.ts
 import { existsSync as existsSync2, readFileSync, readdirSync } from "fs";
@@ -3242,12 +3296,14 @@ function isGitRepo2(dir) {
 function checkGitIgnored(dir, paths) {
   if (paths.length === 0) return /* @__PURE__ */ new Set();
   try {
-    const result = execFileSync(
-      "git",
-      ["check-ignore", ...paths],
-      { cwd: dir, encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }
+    const result = execFileSync("git", ["check-ignore", ...paths], {
+      cwd: dir,
+      encoding: "utf-8",
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    return new Set(
+      result.split("\n").map((l) => l.trim()).filter(Boolean)
     );
-    return new Set(result.split("\n").map((l) => l.trim()).filter(Boolean));
   } catch (err) {
     if (err && typeof err === "object" && "status" in err && err.status === 1) {
       return /* @__PURE__ */ new Set();
@@ -3271,7 +3327,10 @@ function collectProjectStructure(dir, maxDepth = 2) {
         if (name.startsWith(".") && IGNORED_DIRS.has(name)) continue;
         dirEntries.push({ name, rel: relative(dir, join(currentDir, name)) });
       }
-      const gitIgnored = useGit ? checkGitIgnored(dir, dirEntries.map((d) => d.rel)) : null;
+      const gitIgnored = useGit ? checkGitIgnored(
+        dir,
+        dirEntries.map((d) => d.rel)
+      ) : null;
       for (const entry of entries) {
         const name = entry.name;
         if (name.startsWith(".") && IGNORED_DIRS.has(name)) continue;
@@ -3454,7 +3513,9 @@ function countTreeLines(content) {
   return count;
 }
 function calculateDuplicatePercent(content1, content2) {
-  const lines1 = new Set(content1.split("\n").map((l) => l.trim()).filter((l) => l.length > 10));
+  const lines1 = new Set(
+    content1.split("\n").map((l) => l.trim()).filter((l) => l.length > 10)
+  );
   const lines2 = content2.split("\n").map((l) => l.trim()).filter((l) => l.length > 10);
   const overlapping = lines2.filter((l) => lines1.has(l)).length;
   return lines2.length > 0 ? Math.round(overlapping / lines2.length * 100) : 0;
@@ -3473,7 +3534,9 @@ function isEntryMentioned(entry, contentLower) {
   if (lastSegment && lastSegment.length > 3) variants.push(lastSegment);
   return variants.some((v) => {
     const escaped = v.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-    return new RegExp(`(?:^|[\\s\`/"'\\.,(])${escaped}(?:[\\s\`/"'.,;:!?)\\\\]|$)`, "i").test(contentLower);
+    return new RegExp(`(?:^|[\\s\`/"'\\.,(])${escaped}(?:[\\s\`/"'.,;:!?)\\\\]|$)`, "i").test(
+      contentLower
+    );
   });
 }
 function classifyLine(line, inCodeBlock) {
@@ -3484,7 +3547,8 @@ function classifyLine(line, inCodeBlock) {
   if (/`[^`]+`/.test(trimmed)) return "concrete";
   if (/[a-zA-Z0-9_-]+\/[a-zA-Z0-9_.-]+\.[a-zA-Z]{1,5}/.test(trimmed)) return "concrete";
   if (/[a-zA-Z0-9_]{4,}\/[a-zA-Z0-9_.-]/.test(trimmed)) return "concrete";
-  if (/\b[a-zA-Z0-9_-]+\.[a-zA-Z]{1,5}\b/.test(trimmed) && !/\b(e\.g|i\.e|vs|etc)\b/i.test(trimmed)) return "concrete";
+  if (/\b[a-zA-Z0-9_-]+\.[a-zA-Z]{1,5}\b/.test(trimmed) && !/\b(e\.g|i\.e|vs|etc)\b/i.test(trimmed))
+    return "concrete";
   return "abstract";
 }
 
@@ -3494,29 +3558,29 @@ var SOURCE_CONTENT_LIMIT = 2e3;
 var README_CONTENT_LIMIT = 1e3;
 var ORIGIN_PRIORITY = { cli: 0, config: 1, workspace: 2 };
 function loadSourcesConfig(dir) {
-  const configPath = path9.join(dir, ".caliber", "sources.json");
+  const configPath = path10.join(dir, ".caliber", "sources.json");
   const content = readFileOrNull(configPath);
   if (!content) return [];
   try {
     const parsed = JSON.parse(content);
     if (!Array.isArray(parsed.sources)) {
-      console.warn("Warning: .caliber/sources.json is malformed (missing sources array), skipping sources");
+      console.warn(
+        "Warning: .caliber/sources.json is malformed (missing sources array), skipping sources"
+      );
       return [];
     }
-    return parsed.sources.filter(
-      (s) => s.type && (s.path || s.url)
-    );
+    return parsed.sources.filter((s) => s.type && (s.path || s.url));
   } catch {
     console.warn("Warning: .caliber/sources.json is malformed, skipping sources");
     return [];
   }
 }
 function writeSourcesConfig(dir, sources2) {
-  const configDir = path9.join(dir, ".caliber");
+  const configDir = path10.join(dir, ".caliber");
   if (!fs10.existsSync(configDir)) {
     fs10.mkdirSync(configDir, { recursive: true });
   }
-  const configPath = path9.join(configDir, "sources.json");
+  const configPath = path10.join(configDir, "sources.json");
   fs10.writeFileSync(configPath, JSON.stringify({ sources: sources2 }, null, 2) + "\n", "utf-8");
 }
 function detectSourceType(absPath) {
@@ -3527,14 +3591,14 @@ function detectSourceType(absPath) {
   }
 }
 function isInsideDir(childPath, parentDir) {
-  const relative2 = path9.relative(parentDir, childPath);
-  return !relative2.startsWith("..") && !path9.isAbsolute(relative2);
+  const relative2 = path10.relative(parentDir, childPath);
+  return !relative2.startsWith("..") && !path10.isAbsolute(relative2);
 }
 function resolveAllSources(dir, cliSources, workspaces) {
   const seen = /* @__PURE__ */ new Map();
-  const projectRoot = path9.resolve(dir);
+  const projectRoot = path10.resolve(dir);
   for (const src of cliSources) {
-    const absPath = path9.resolve(dir, src);
+    const absPath = path10.resolve(dir, src);
     if (seen.has(absPath)) continue;
     const type = detectSourceType(absPath);
     seen.set(absPath, {
@@ -3547,12 +3611,12 @@ function resolveAllSources(dir, cliSources, workspaces) {
   for (const cfg of configSources) {
     if (cfg.type === "url") continue;
     if (!cfg.path) continue;
-    const absPath = path9.resolve(dir, cfg.path);
+    const absPath = path10.resolve(dir, cfg.path);
     if (seen.has(absPath)) continue;
     seen.set(absPath, { absPath, config: cfg, origin: "config" });
   }
   for (const ws of workspaces) {
-    const absPath = path9.resolve(dir, ws);
+    const absPath = path10.resolve(dir, ws);
     if (seen.has(absPath)) continue;
     if (!isInsideDir(absPath, projectRoot)) continue;
     seen.set(absPath, {
@@ -3594,13 +3658,13 @@ function collectSourceSummary(resolved, projectDir) {
   if (config.type === "file") {
     return collectFileSummary(resolved, projectDir);
   }
-  const summaryPath = path9.join(absPath, ".caliber", "summary.json");
+  const summaryPath = path10.join(absPath, ".caliber", "summary.json");
   const summaryContent = readFileOrNull(summaryPath);
   if (summaryContent) {
     try {
       const published = JSON.parse(summaryContent);
       return {
-        name: published.name || path9.basename(absPath),
+        name: published.name || path10.basename(absPath),
         type: "repo",
         role: config.role || published.role || "related-repo",
         description: config.description || published.description || "",
@@ -3614,7 +3678,7 @@ function collectSourceSummary(resolved, projectDir) {
   }
   return collectRepoSummary(resolved, projectDir);
 }
-function collectRepoSummary(resolved, projectDir) {
+function collectRepoSummary(resolved, _projectDir) {
   const { config, origin, absPath } = resolved;
   const packageName = readPackageName(absPath);
   let topLevelDirs;
@@ -3625,13 +3689,13 @@ function collectRepoSummary(resolved, projectDir) {
     keyFiles = entries.filter((e) => e.isFile() && !e.name.startsWith(".")).map((e) => e.name).slice(0, 15);
   } catch {
   }
-  const claudeMdContent = readFileOrNull(path9.join(absPath, "CLAUDE.md"));
+  const claudeMdContent = readFileOrNull(path10.join(absPath, "CLAUDE.md"));
   const existingClaudeMd = claudeMdContent ? claudeMdContent.slice(0, SOURCE_CONTENT_LIMIT) : void 0;
-  const readmeContent = readFileOrNull(path9.join(absPath, "README.md"));
+  const readmeContent = readFileOrNull(path10.join(absPath, "README.md"));
   const readmeExcerpt = readmeContent ? readmeContent.slice(0, README_CONTENT_LIMIT) : void 0;
   const gitRemoteUrl = getGitRemoteUrl(absPath);
   return {
-    name: packageName || path9.basename(absPath),
+    name: packageName || path10.basename(absPath),
     type: "repo",
     role: config.role || "related-repo",
     description: config.description || "",
@@ -3644,11 +3708,11 @@ function collectRepoSummary(resolved, projectDir) {
     packageName
   };
 }
-function collectFileSummary(resolved, projectDir) {
+function collectFileSummary(resolved, _projectDir) {
   const { config, origin, absPath } = resolved;
   const content = readFileOrNull(absPath);
   return {
-    name: path9.basename(absPath),
+    name: path10.basename(absPath),
     type: "file",
     role: config.role || "reference-doc",
     description: config.description || content?.slice(0, 100).split("\n")[0] || "",
@@ -3692,15 +3756,15 @@ init_config();
 // src/utils/dependencies.ts
 import { readFileSync as readFileSync2 } from "fs";
 import { join as join2 } from "path";
-function readFileOrNull2(path40) {
+function readFileOrNull2(path41) {
   try {
-    return readFileSync2(path40, "utf-8");
+    return readFileSync2(path41, "utf-8");
   } catch {
     return null;
   }
 }
-function readJsonOrNull(path40) {
-  const content = readFileOrNull2(path40);
+function readJsonOrNull(path41) {
+  const content = readFileOrNull2(path41);
   if (!content) return null;
   try {
     return JSON.parse(content);
@@ -3742,18 +3806,24 @@ function extractNpmDeps(dir) {
     /^prettier-/,
     /^@typescript-eslint\//
   ];
-  return Object.keys(deps).filter((d) => !trivial.has(d) && !d.startsWith("@types/") && !trivialPatterns.some((p) => p.test(d))).slice(0, 30);
+  return Object.keys(deps).filter(
+    (d) => !trivial.has(d) && !d.startsWith("@types/") && !trivialPatterns.some((p) => p.test(d))
+  ).slice(0, 30);
 }
 function extractPythonDeps(dir) {
   const reqTxt = readFileOrNull2(join2(dir, "requirements.txt"));
   if (reqTxt) {
-    return reqTxt.split("\n").map((l) => l.trim().split(/[=<>!~\[]/)[0].trim()).filter((l) => l && !l.startsWith("#")).slice(0, 30);
+    return reqTxt.split("\n").map(
+      (l) => l.trim().split(/[=<>!~[]/)[0].trim()
+    ).filter((l) => l && !l.startsWith("#")).slice(0, 30);
   }
   const pyproject = readFileOrNull2(join2(dir, "pyproject.toml"));
   if (pyproject) {
     const depMatch = pyproject.match(/dependencies\s*=\s*\[([\s\S]*?)\]/);
     if (depMatch) {
-      return depMatch[1].split("\n").map((l) => l.trim().replace(/["',]/g, "").split(/[=<>!~\[]/)[0].trim()).filter((l) => l.length > 0).slice(0, 30);
+      return depMatch[1].split("\n").map(
+        (l) => l.trim().replace(/["',]/g, "").split(/[=<>!~[]/)[0].trim()
+      ).filter((l) => l.length > 0).slice(0, 30);
     }
   }
   return [];
@@ -4291,7 +4361,7 @@ import fs18 from "fs";
 
 // src/writers/claude/index.ts
 import fs11 from "fs";
-import path10 from "path";
+import path11 from "path";
 
 // src/writers/pre-commit-block.ts
 init_resolve_caliber();
@@ -4368,9 +4438,9 @@ function writeClaudeConfig(config) {
   written.push("CLAUDE.md");
   if (config.skills?.length) {
     for (const skill of config.skills) {
-      const skillDir = path10.join(".claude", "skills", skill.name);
+      const skillDir = path11.join(".claude", "skills", skill.name);
       if (!fs11.existsSync(skillDir)) fs11.mkdirSync(skillDir, { recursive: true });
-      const skillPath = path10.join(skillDir, "SKILL.md");
+      const skillPath = path11.join(skillDir, "SKILL.md");
       const frontmatter = [
         "---",
         `name: ${skill.name}`,
@@ -4400,7 +4470,7 @@ function writeClaudeConfig(config) {
 
 // src/writers/cursor/index.ts
 import fs12 from "fs";
-import path11 from "path";
+import path12 from "path";
 function writeCursorConfig(config) {
   const written = [];
   if (config.cursorrules) {
@@ -4410,18 +4480,18 @@ function writeCursorConfig(config) {
   const preCommitRule = getCursorPreCommitRule();
   const learningsRule = getCursorLearningsRule();
   const allRules = [...config.rules || [], preCommitRule, learningsRule];
-  const rulesDir = path11.join(".cursor", "rules");
+  const rulesDir = path12.join(".cursor", "rules");
   if (!fs12.existsSync(rulesDir)) fs12.mkdirSync(rulesDir, { recursive: true });
   for (const rule of allRules) {
-    const rulePath = path11.join(rulesDir, rule.filename);
+    const rulePath = path12.join(rulesDir, rule.filename);
     fs12.writeFileSync(rulePath, rule.content);
     written.push(rulePath);
   }
   if (config.skills?.length) {
     for (const skill of config.skills) {
-      const skillDir = path11.join(".cursor", "skills", skill.name);
+      const skillDir = path12.join(".cursor", "skills", skill.name);
       if (!fs12.existsSync(skillDir)) fs12.mkdirSync(skillDir, { recursive: true });
-      const skillPath = path11.join(skillDir, "SKILL.md");
+      const skillPath = path12.join(skillDir, "SKILL.md");
       const frontmatter = [
         "---",
         `name: ${skill.name}`,
@@ -4436,7 +4506,7 @@ function writeCursorConfig(config) {
   if (config.mcpServers && Object.keys(config.mcpServers).length > 0) {
     const cursorDir = ".cursor";
     if (!fs12.existsSync(cursorDir)) fs12.mkdirSync(cursorDir, { recursive: true });
-    const mcpPath = path11.join(cursorDir, "mcp.json");
+    const mcpPath = path12.join(cursorDir, "mcp.json");
     let existingServers = {};
     try {
       if (fs12.existsSync(mcpPath)) {
@@ -4454,16 +4524,16 @@ function writeCursorConfig(config) {
 
 // src/writers/codex/index.ts
 import fs13 from "fs";
-import path12 from "path";
+import path13 from "path";
 function writeCodexConfig(config) {
   const written = [];
   fs13.writeFileSync("AGENTS.md", appendLearningsBlock(appendPreCommitBlock(config.agentsMd)));
   written.push("AGENTS.md");
   if (config.skills?.length) {
     for (const skill of config.skills) {
-      const skillDir = path12.join(".agents", "skills", skill.name);
+      const skillDir = path13.join(".agents", "skills", skill.name);
       if (!fs13.existsSync(skillDir)) fs13.mkdirSync(skillDir, { recursive: true });
-      const skillPath = path12.join(skillDir, "SKILL.md");
+      const skillPath = path13.join(skillDir, "SKILL.md");
       const frontmatter = [
         "---",
         `name: ${skill.name}`,
@@ -4480,19 +4550,19 @@ function writeCodexConfig(config) {
 
 // src/writers/github-copilot/index.ts
 import fs14 from "fs";
-import path13 from "path";
+import path14 from "path";
 function writeGithubCopilotConfig(config) {
   const written = [];
   if (config.instructions) {
     fs14.mkdirSync(".github", { recursive: true });
-    fs14.writeFileSync(path13.join(".github", "copilot-instructions.md"), appendLearningsBlock(appendPreCommitBlock(config.instructions)));
+    fs14.writeFileSync(path14.join(".github", "copilot-instructions.md"), appendLearningsBlock(appendPreCommitBlock(config.instructions)));
     written.push(".github/copilot-instructions.md");
   }
   if (config.instructionFiles?.length) {
-    const instructionsDir = path13.join(".github", "instructions");
+    const instructionsDir = path14.join(".github", "instructions");
     fs14.mkdirSync(instructionsDir, { recursive: true });
     for (const file of config.instructionFiles) {
-      fs14.writeFileSync(path13.join(instructionsDir, file.filename), file.content);
+      fs14.writeFileSync(path14.join(instructionsDir, file.filename), file.content);
       written.push(`.github/instructions/${file.filename}`);
     }
   }
@@ -4501,14 +4571,14 @@ function writeGithubCopilotConfig(config) {
 
 // src/writers/backup.ts
 import fs15 from "fs";
-import path14 from "path";
+import path15 from "path";
 function createBackup(files) {
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  const backupDir = path14.join(BACKUPS_DIR, timestamp);
+  const backupDir = path15.join(BACKUPS_DIR, timestamp);
   for (const file of files) {
     if (!fs15.existsSync(file)) continue;
-    const dest = path14.join(backupDir, file);
-    const destDir = path14.dirname(dest);
+    const dest = path15.join(backupDir, file);
+    const destDir = path15.dirname(dest);
     if (!fs15.existsSync(destDir)) {
       fs15.mkdirSync(destDir, { recursive: true });
     }
@@ -4517,9 +4587,9 @@ function createBackup(files) {
   return backupDir;
 }
 function restoreBackup(backupDir, file) {
-  const backupFile = path14.join(backupDir, file);
+  const backupFile = path15.join(backupDir, file);
   if (!fs15.existsSync(backupFile)) return false;
-  const destDir = path14.dirname(file);
+  const destDir = path15.dirname(file);
   if (!fs15.existsSync(destDir)) {
     fs15.mkdirSync(destDir, { recursive: true });
   }
@@ -4530,7 +4600,7 @@ function restoreBackup(backupDir, file) {
 // src/lib/builtin-skills.ts
 init_resolve_caliber();
 import fs16 from "fs";
-import path15 from "path";
+import path16 from "path";
 function buildSkillContent(skill) {
   const frontmatter = `---
 name: ${skill.name}
@@ -4668,18 +4738,18 @@ var SAVE_LEARNING_SKILL = {
 };
 var BUILTIN_SKILLS = [FIND_SKILLS_SKILL, SAVE_LEARNING_SKILL];
 var PLATFORM_CONFIGS = [
-  { platformDir: ".claude", skillsDir: path15.join(".claude", "skills") },
-  { platformDir: ".cursor", skillsDir: path15.join(".cursor", "skills") },
-  { platformDir: ".agents", skillsDir: path15.join(".agents", "skills") }
+  { platformDir: ".claude", skillsDir: path16.join(".claude", "skills") },
+  { platformDir: ".cursor", skillsDir: path16.join(".cursor", "skills") },
+  { platformDir: ".agents", skillsDir: path16.join(".agents", "skills") }
 ];
 function ensureBuiltinSkills() {
   const written = [];
   for (const { platformDir, skillsDir } of PLATFORM_CONFIGS) {
     if (!fs16.existsSync(platformDir)) continue;
     for (const skill of BUILTIN_SKILLS) {
-      const skillPath = path15.join(skillsDir, skill.name, "SKILL.md");
+      const skillPath = path16.join(skillsDir, skill.name, "SKILL.md");
       if (fs16.existsSync(skillPath)) continue;
-      fs16.mkdirSync(path15.dirname(skillPath), { recursive: true });
+      fs16.mkdirSync(path16.dirname(skillPath), { recursive: true });
       fs16.writeFileSync(skillPath, buildSkillContent(skill));
       written.push(skillPath);
     }
@@ -4713,10 +4783,7 @@ function fileChecksum(filePath) {
 function writeSetup(setup) {
   const filesToWrite = getFilesToWrite(setup);
   const filesToDelete = (setup.deletions || []).map((d) => d.filePath).filter((f) => fs18.existsSync(f));
-  const existingFiles = [
-    ...filesToWrite.filter((f) => fs18.existsSync(f)),
-    ...filesToDelete
-  ];
+  const existingFiles = [...filesToWrite.filter((f) => fs18.existsSync(f)), ...filesToDelete];
   const backupDir = existingFiles.length > 0 ? createBackup(existingFiles) : void 0;
   const written = [];
   if (setup.targetAgent.includes("claude") && setup.claude) {
@@ -4809,7 +4876,8 @@ function getFilesToWrite(setup) {
   if (setup.targetAgent.includes("github-copilot") && setup.copilot) {
     if (setup.copilot.instructions) files.push(".github/copilot-instructions.md");
     if (setup.copilot.instructionFiles) {
-      for (const f of setup.copilot.instructionFiles) files.push(`.github/instructions/${f.filename}`);
+      for (const f of setup.copilot.instructionFiles)
+        files.push(`.github/instructions/${f.filename}`);
     }
   }
   return files;
@@ -4828,10 +4896,10 @@ function ensureGitignore() {
 
 // src/writers/staging.ts
 import fs19 from "fs";
-import path16 from "path";
-var STAGED_DIR = path16.join(CALIBER_DIR, "staged");
-var PROPOSED_DIR = path16.join(STAGED_DIR, "proposed");
-var CURRENT_DIR = path16.join(STAGED_DIR, "current");
+import path17 from "path";
+var STAGED_DIR = path17.join(CALIBER_DIR, "staged");
+var PROPOSED_DIR = path17.join(STAGED_DIR, "proposed");
+var CURRENT_DIR = path17.join(STAGED_DIR, "current");
 function normalizeContent(content) {
   return content.split("\n").map((line) => line.trimEnd()).join("\n").replace(/\n{3,}/g, "\n\n").trim();
 }
@@ -4841,22 +4909,29 @@ function stageFiles(files, projectDir) {
   let modifiedFiles = 0;
   const stagedFiles = [];
   for (const file of files) {
-    const originalPath = path16.join(projectDir, file.path);
+    assertPathWithinDir(file.path, projectDir);
+    const originalPath = path17.join(projectDir, file.path);
     if (fs19.existsSync(originalPath)) {
       const existing = fs19.readFileSync(originalPath, "utf-8");
       if (normalizeContent(existing) === normalizeContent(file.content)) {
         continue;
       }
     }
-    const proposedPath = path16.join(PROPOSED_DIR, file.path);
-    fs19.mkdirSync(path16.dirname(proposedPath), { recursive: true });
+    const proposedPath = path17.join(PROPOSED_DIR, file.path);
+    fs19.mkdirSync(path17.dirname(proposedPath), { recursive: true });
     fs19.writeFileSync(proposedPath, file.content);
     if (fs19.existsSync(originalPath)) {
-      const currentPath = path16.join(CURRENT_DIR, file.path);
-      fs19.mkdirSync(path16.dirname(currentPath), { recursive: true });
+      const currentPath = path17.join(CURRENT_DIR, file.path);
+      fs19.mkdirSync(path17.dirname(currentPath), { recursive: true });
       fs19.copyFileSync(originalPath, currentPath);
       modifiedFiles++;
-      stagedFiles.push({ relativePath: file.path, proposedPath, currentPath, originalPath, isNew: false });
+      stagedFiles.push({
+        relativePath: file.path,
+        proposedPath,
+        currentPath,
+        originalPath,
+        isNew: false
+      });
     } else {
       newFiles++;
       stagedFiles.push({ relativePath: file.path, proposedPath, isNew: true });
@@ -4882,11 +4957,17 @@ function collectSetupFiles(setup, targetAgent) {
     const skills = claude.skills;
     if (Array.isArray(skills)) {
       for (const skill of skills) {
-        files.push({ path: `.claude/skills/${skill.name}/SKILL.md`, content: buildSkillContent(skill) });
+        files.push({
+          path: `.claude/skills/${sanitizePath(skill.name)}/SKILL.md`,
+          content: buildSkillContent(skill)
+        });
       }
     }
     for (const builtin of BUILTIN_SKILLS) {
-      files.push({ path: `.claude/skills/${builtin.name}/SKILL.md`, content: buildSkillContent(builtin) });
+      files.push({
+        path: `.claude/skills/${builtin.name}/SKILL.md`,
+        content: buildSkillContent(builtin)
+      });
     }
   }
   if (codex) {
@@ -4894,38 +4975,58 @@ function collectSetupFiles(setup, targetAgent) {
     const codexSkills = codex.skills;
     if (Array.isArray(codexSkills)) {
       for (const skill of codexSkills) {
-        files.push({ path: `.agents/skills/${skill.name}/SKILL.md`, content: buildSkillContent(skill) });
+        files.push({
+          path: `.agents/skills/${sanitizePath(skill.name)}/SKILL.md`,
+          content: buildSkillContent(skill)
+        });
       }
     }
     for (const builtin of BUILTIN_SKILLS) {
-      files.push({ path: `.agents/skills/${builtin.name}/SKILL.md`, content: buildSkillContent(builtin) });
+      files.push({
+        path: `.agents/skills/${builtin.name}/SKILL.md`,
+        content: buildSkillContent(builtin)
+      });
     }
   }
   if (cursor) {
-    if (cursor.cursorrules) files.push({ path: ".cursorrules", content: cursor.cursorrules });
+    if (cursor.cursorrules)
+      files.push({ path: ".cursorrules", content: cursor.cursorrules });
     const cursorSkills = cursor.skills;
     if (Array.isArray(cursorSkills)) {
       for (const skill of cursorSkills) {
-        files.push({ path: `.cursor/skills/${skill.name}/SKILL.md`, content: buildSkillContent(skill) });
+        files.push({
+          path: `.cursor/skills/${sanitizePath(skill.name)}/SKILL.md`,
+          content: buildSkillContent(skill)
+        });
       }
     }
     for (const builtin of BUILTIN_SKILLS) {
-      files.push({ path: `.cursor/skills/${builtin.name}/SKILL.md`, content: buildSkillContent(builtin) });
+      files.push({
+        path: `.cursor/skills/${builtin.name}/SKILL.md`,
+        content: buildSkillContent(builtin)
+      });
     }
     const rules = cursor.rules;
     if (Array.isArray(rules)) {
       for (const rule of rules) {
-        files.push({ path: `.cursor/rules/${rule.filename}`, content: rule.content });
+        files.push({ path: `.cursor/rules/${sanitizePath(rule.filename)}`, content: rule.content });
       }
     }
   }
   const copilot = setup.copilot;
   if (copilot) {
-    if (copilot.instructions) files.push({ path: ".github/copilot-instructions.md", content: copilot.instructions });
+    if (copilot.instructions)
+      files.push({
+        path: ".github/copilot-instructions.md",
+        content: copilot.instructions
+      });
     const instructionFiles = copilot.instructionFiles;
     if (Array.isArray(instructionFiles)) {
       for (const file of instructionFiles) {
-        files.push({ path: `.github/instructions/${file.filename}`, content: file.content });
+        files.push({
+          path: `.github/instructions/${sanitizePath(file.filename)}`,
+          content: file.content
+        });
       }
     }
   }
@@ -4934,7 +5035,8 @@ function collectSetupFiles(setup, targetAgent) {
     const agentRefs = [];
     if (claude) agentRefs.push("See `CLAUDE.md` for Claude Code configuration.");
     if (cursor) agentRefs.push("See `.cursor/rules/` for Cursor rules.");
-    if (agentRefs.length === 0) agentRefs.push("See CLAUDE.md and .cursor/rules/ for agent configurations.");
+    if (agentRefs.length === 0)
+      agentRefs.push("See CLAUDE.md and .cursor/rules/ for agent configurations.");
     const stubContent = `# AGENTS.md
 
 This project uses AI coding agents configured by [Caliber](https://github.com/caliber-ai-org/ai-setup).
@@ -4949,8 +5051,8 @@ ${agentRefs.join(" ")}
 // src/lib/learning-hooks.ts
 init_resolve_caliber();
 import fs21 from "fs";
-import path17 from "path";
-var SETTINGS_PATH = path17.join(".claude", "settings.json");
+import path18 from "path";
+var SETTINGS_PATH = path18.join(".claude", "settings.json");
 var HOOK_TAILS = [
   { event: "PostToolUse", tail: "learn observe", description: "Caliber: recording tool usage for session learning" },
   { event: "PostToolUseFailure", tail: "learn observe --failure", description: "Caliber: recording tool failure for session learning" },
@@ -4975,7 +5077,7 @@ function readSettings() {
   }
 }
 function writeSettings(settings) {
-  const dir = path17.dirname(SETTINGS_PATH);
+  const dir = path18.dirname(SETTINGS_PATH);
   if (!fs21.existsSync(dir)) fs21.mkdirSync(dir, { recursive: true });
   fs21.writeFileSync(SETTINGS_PATH, JSON.stringify(settings, null, 2));
 }
@@ -5011,7 +5113,7 @@ function installLearningHooks() {
   writeSettings(settings);
   return { installed: true, alreadyInstalled: false };
 }
-var CURSOR_HOOKS_PATH = path17.join(".cursor", "hooks.json");
+var CURSOR_HOOKS_PATH = path18.join(".cursor", "hooks.json");
 var CURSOR_HOOK_EVENTS = [
   { event: "postToolUse", tail: "learn observe" },
   { event: "postToolUseFailure", tail: "learn observe --failure" },
@@ -5027,7 +5129,7 @@ function readCursorHooks() {
   }
 }
 function writeCursorHooks(config) {
-  const dir = path17.dirname(CURSOR_HOOKS_PATH);
+  const dir = path18.dirname(CURSOR_HOOKS_PATH);
   if (!fs21.existsSync(dir)) fs21.mkdirSync(dir, { recursive: true });
   fs21.writeFileSync(CURSOR_HOOKS_PATH, JSON.stringify(config, null, 2));
 }
@@ -5102,9 +5204,9 @@ init_resolve_caliber();
 
 // src/lib/state.ts
 import fs22 from "fs";
-import path18 from "path";
+import path19 from "path";
 import { execSync as execSync8 } from "child_process";
-var STATE_FILE = path18.join(CALIBER_DIR, ".caliber-state.json");
+var STATE_FILE = path19.join(CALIBER_DIR, ".caliber-state.json");
 function normalizeTargetAgent(value) {
   if (Array.isArray(value)) return value;
   if (typeof value === "string") {
@@ -5312,8 +5414,8 @@ var SECRET_PATTERNS = [
   /AKIA[A-Z0-9]{16}/,
   /ghp_[a-zA-Z0-9]{36}/,
   /ghu_[a-zA-Z0-9]{36}/,
-  /glpat-[a-zA-Z0-9\-_]{20,}/,
-  /xox[bpors]-[a-zA-Z0-9\-]{10,}/,
+  /glpat-[a-zA-Z0-9_-]{20,}/,
+  /xox[bpors]-[a-zA-Z0-9-]{10,}/,
   /(?:password|secret|token|api_key)\s*[:=]\s*["'][^"']{8,}["']/i
 ];
 var SECRET_PLACEHOLDER_PATTERNS = [
@@ -5325,31 +5427,13 @@ var SECRET_PLACEHOLDER_PATTERNS = [
   /CHANGE[_-]?ME/i,
   /<[^>]+>/
 ];
-var CURSOR_ONLY_CHECKS = /* @__PURE__ */ new Set([
-  "cursor_rules_exist",
-  "cursor_mdc_rules"
-]);
-var CLAUDE_ONLY_CHECKS = /* @__PURE__ */ new Set([
-  "claude_md_exists",
-  "claude_md_freshness"
-]);
-var BOTH_ONLY_CHECKS = /* @__PURE__ */ new Set([
-  "cross_platform_parity",
-  "no_duplicate_content"
-]);
-var CODEX_ONLY_CHECKS = /* @__PURE__ */ new Set([
-  "codex_agents_md_exists"
-]);
-var COPILOT_ONLY_CHECKS = /* @__PURE__ */ new Set([
-  "copilot_instructions_exists"
-]);
-var NON_CODEX_CHECKS = /* @__PURE__ */ new Set([
-  "agents_md_exists"
-]);
-var CLAUDE_OR_CODEX_CHECKS = /* @__PURE__ */ new Set([
-  "skills_exist",
-  "open_skills_format"
-]);
+var CURSOR_ONLY_CHECKS = /* @__PURE__ */ new Set(["cursor_rules_exist", "cursor_mdc_rules"]);
+var CLAUDE_ONLY_CHECKS = /* @__PURE__ */ new Set(["claude_md_exists", "claude_md_freshness"]);
+var BOTH_ONLY_CHECKS = /* @__PURE__ */ new Set(["cross_platform_parity", "no_duplicate_content"]);
+var CODEX_ONLY_CHECKS = /* @__PURE__ */ new Set(["codex_agents_md_exists"]);
+var COPILOT_ONLY_CHECKS = /* @__PURE__ */ new Set(["copilot_instructions_exists"]);
+var NON_CODEX_CHECKS = /* @__PURE__ */ new Set(["agents_md_exists"]);
+var CLAUDE_OR_CODEX_CHECKS = /* @__PURE__ */ new Set(["skills_exist", "open_skills_format"]);
 var GRADE_THRESHOLDS = [
   { minScore: 85, grade: "A" },
   { minScore: 70, grade: "B" },
@@ -5616,7 +5700,12 @@ function checkQuality(dir) {
     suggestion: concretenessPoints < 3 && totalMeaningful > 0 ? `${abstractCount} lines are generic prose \u2014 replace with specific instructions referencing project files` : void 0,
     fix: concretenessPoints < 3 && totalMeaningful > 0 ? {
       action: "replace_vague",
-      data: { abstractLines: abstractExamples, abstractCount, concreteCount, ratio: Math.round(concreteRatio * 100) },
+      data: {
+        abstractLines: abstractExamples,
+        abstractCount,
+        concreteCount,
+        ratio: Math.round(concreteRatio * 100)
+      },
       instruction: `Replace generic prose with specific references. Examples of vague lines: ${abstractExamples.join("; ")}`
     } : void 0
   });
@@ -5743,7 +5832,7 @@ function checkGrounding(dir) {
 }
 
 // src/scoring/checks/accuracy.ts
-import { existsSync as existsSync4, statSync as statSync2 } from "fs";
+import { existsSync as existsSync4, statSync } from "fs";
 import { execSync as execSync9 } from "child_process";
 import { join as join5 } from "path";
 init_resolve_caliber();
@@ -5769,7 +5858,7 @@ function detectGitDrift(dir) {
       const filePath = join5(dir, file);
       if (!existsSync4(filePath)) continue;
       try {
-        const mtime = statSync2(filePath).mtime.getTime();
+        const mtime = statSync(filePath).mtime.getTime();
         if (mtime > headTime) {
           return { commitsSinceConfigUpdate: 0, lastConfigCommit: "uncommitted (recently modified)", isGitRepo: true };
         }
@@ -5882,7 +5971,7 @@ function checkAccuracy(dir) {
 
 // src/scoring/checks/freshness.ts
 init_resolve_caliber();
-import { existsSync as existsSync5, statSync as statSync3 } from "fs";
+import { existsSync as existsSync5, statSync as statSync2 } from "fs";
 import { execSync as execSync10 } from "child_process";
 import { join as join6 } from "path";
 function getCommitsSinceConfigUpdate(dir) {
@@ -5897,7 +5986,7 @@ function getCommitsSinceConfigUpdate(dir) {
       const filePath = join6(dir, file);
       if (!existsSync5(filePath)) continue;
       try {
-        const mtime = statSync3(filePath).mtime.getTime();
+        const mtime = statSync2(filePath).mtime.getTime();
         if (mtime > headTime) {
           return 0;
         }
@@ -6194,8 +6283,8 @@ function checkSources(dir) {
 
 // src/scoring/dismissed.ts
 import fs23 from "fs";
-import path19 from "path";
-var DISMISSED_FILE = path19.join(CALIBER_DIR, "dismissed-checks.json");
+import path20 from "path";
+var DISMISSED_FILE = path20.join(CALIBER_DIR, "dismissed-checks.json");
 function readDismissedChecks() {
   try {
     if (!fs23.existsSync(DISMISSED_FILE)) return [];
@@ -6464,12 +6553,12 @@ import chalk5 from "chalk";
 
 // src/telemetry/config.ts
 import fs24 from "fs";
-import path20 from "path";
+import path21 from "path";
 import os5 from "os";
 import crypto4 from "crypto";
 import { execSync as execSync12 } from "child_process";
-var CONFIG_DIR2 = path20.join(os5.homedir(), ".caliber");
-var CONFIG_FILE2 = path20.join(CONFIG_DIR2, "config.json");
+var CONFIG_DIR2 = path21.join(os5.homedir(), ".caliber");
+var CONFIG_FILE2 = path21.join(CONFIG_DIR2, "config.json");
 var runtimeDisabled = false;
 function readConfig() {
   try {
@@ -6668,7 +6757,7 @@ function detectLocalPlatforms() {
   return platforms.size > 0 ? Array.from(platforms) : ["claude"];
 }
 function sanitizeSlug(slug) {
-  return slug.replace(/[^a-zA-Z0-9_\-]/g, "-").replace(/^-+|-+$/g, "");
+  return slug.replace(/[^a-zA-Z0-9_-]/g, "-").replace(/^-+|-+$/g, "");
 }
 function getSkillPath(platform, slug) {
   const safe = sanitizeSlug(slug);
@@ -6706,9 +6795,12 @@ async function searchSkillsSh(technologies) {
   const bestBySlug = /* @__PURE__ */ new Map();
   for (const tech of technologies) {
     try {
-      const resp = await fetch(`https://skills.sh/api/search?q=${encodeURIComponent(tech)}&limit=10`, {
-        signal: AbortSignal.timeout(1e4)
-      });
+      const resp = await fetch(
+        `https://skills.sh/api/search?q=${encodeURIComponent(tech)}&limit=10`,
+        {
+          signal: AbortSignal.timeout(1e4)
+        }
+      );
       if (!resp.ok) continue;
       const data = await resp.json();
       if (!data.skills?.length) continue;
@@ -6767,9 +6859,7 @@ async function searchAwesomeClaudeCode(technologies) {
   }
 }
 async function searchAllProviders(technologies, platform) {
-  const searches = [
-    searchSkillsSh(technologies)
-  ];
+  const searches = [searchSkillsSh(technologies)];
   if (platform === "claude" || !platform) {
     searches.push(searchAwesomeClaudeCode(technologies));
   }
@@ -6829,18 +6919,24 @@ ${candidateList}`,
 function buildProjectContext(fingerprint, platforms) {
   const parts = [];
   if (fingerprint.packageName) parts.push(`Package: ${fingerprint.packageName}`);
-  if (fingerprint.languages.length > 0) parts.push(`Languages: ${fingerprint.languages.join(", ")}`);
-  if (fingerprint.frameworks.length > 0) parts.push(`Frameworks: ${fingerprint.frameworks.join(", ")}`);
+  if (fingerprint.languages.length > 0)
+    parts.push(`Languages: ${fingerprint.languages.join(", ")}`);
+  if (fingerprint.frameworks.length > 0)
+    parts.push(`Frameworks: ${fingerprint.frameworks.join(", ")}`);
   if (fingerprint.description) parts.push(`Description: ${fingerprint.description}`);
   if (fingerprint.fileTree.length > 0) {
-    parts.push(`
+    parts.push(
+      `
 File tree (${fingerprint.fileTree.length} files):
-${fingerprint.fileTree.slice(0, 50).join("\n")}`);
+${fingerprint.fileTree.slice(0, 50).join("\n")}`
+    );
   }
   if (fingerprint.existingConfigs.claudeMd) {
-    parts.push(`
+    parts.push(
+      `
 Existing CLAUDE.md (first 500 chars):
-${fingerprint.existingConfigs.claudeMd.slice(0, 500)}`);
+${fingerprint.existingConfigs.claudeMd.slice(0, 500)}`
+    );
   }
   const deps = extractTopDeps();
   if (deps.length > 0) {
@@ -6923,20 +7019,18 @@ function extractTopDeps() {
       /^@typescript-eslint\//,
       /^@commitlint\//
     ];
-    return deps.filter(
-      (d) => !trivial.has(d) && !trivialPatterns.some((p) => p.test(d))
-    );
+    return deps.filter((d) => !trivial.has(d) && !trivialPatterns.some((p) => p.test(d)));
   } catch {
     return [];
   }
 }
 async function searchSkills(fingerprint, targetPlatforms, onStatus) {
   const installedSkills = getInstalledSkills(targetPlatforms);
-  const technologies = [...new Set([
-    ...fingerprint.languages,
-    ...fingerprint.frameworks,
-    ...extractTopDeps()
-  ].filter(Boolean))];
+  const technologies = [
+    ...new Set(
+      [...fingerprint.languages, ...fingerprint.frameworks, ...extractTopDeps()].filter(Boolean)
+    )
+  ];
   if (technologies.length === 0) {
     return { results: [], contentMap: /* @__PURE__ */ new Map() };
   }
@@ -6968,10 +7062,12 @@ async function searchSkills(fingerprint, targetPlatforms, onStatus) {
   }
   onStatus?.("Fetching skill content...");
   const contentMap = /* @__PURE__ */ new Map();
-  await Promise.all(results.map(async (rec) => {
-    const content = await fetchSkillContent(rec);
-    if (content) contentMap.set(rec.slug, content);
-  }));
+  await Promise.all(
+    results.map(async (rec) => {
+      const content = await fetchSkillContent(rec);
+      if (content) contentMap.set(rec.slug, content);
+    })
+  );
   const available = results.filter((r) => contentMap.has(r.slug));
   return { results: available, contentMap };
 }
@@ -7017,10 +7113,12 @@ async function querySkills(query) {
   const top = results.slice(0, 5);
   const fetchSpinner = ora("Verifying availability...").start();
   const contentMap = /* @__PURE__ */ new Map();
-  await Promise.all(top.map(async (rec) => {
-    const content = await fetchSkillContent(rec);
-    if (content) contentMap.set(rec.slug, content);
-  }));
+  await Promise.all(
+    top.map(async (rec) => {
+      const content = await fetchSkillContent(rec);
+      if (content) contentMap.set(rec.slug, content);
+    })
+  );
   const available = top.filter((r) => contentMap.has(r.slug));
   fetchSpinner.succeed(`${available.length} available`);
   if (!available.length) {
@@ -7035,7 +7133,11 @@ async function querySkills(query) {
     console.log(`     ${r.reason || r.name}`);
   }
   console.log("");
-  console.log(chalk6.dim(`  Install with: ${resolveCaliber()} skills --install ${available.map((r) => r.slug).join(",")}`));
+  console.log(
+    chalk6.dim(
+      `  Install with: ${resolveCaliber()} skills --install ${available.map((r) => r.slug).join(",")}`
+    )
+  );
   console.log("");
 }
 async function installBySlug(slugStr) {
@@ -7057,10 +7159,12 @@ async function installBySlug(slugStr) {
     return;
   }
   const contentMap = /* @__PURE__ */ new Map();
-  await Promise.all(matched.map(async (rec) => {
-    const content = await fetchSkillContent(rec);
-    if (content) contentMap.set(rec.slug, content);
-  }));
+  await Promise.all(
+    matched.map(async (rec) => {
+      const content = await fetchSkillContent(rec);
+      if (content) contentMap.set(rec.slug, content);
+    })
+  );
   const installable = matched.filter((r) => contentMap.has(r.slug));
   if (!installable.length) {
     spinner.fail("Could not fetch skill content.");
@@ -7097,13 +7201,17 @@ async function searchAndInstallSkills(targetPlatforms) {
   const fingerprint = await collectFingerprint(process.cwd());
   const platforms = targetPlatforms ?? detectLocalPlatforms();
   const installedSkills = getInstalledSkills(platforms);
-  const technologies = [...new Set([
-    ...fingerprint.languages,
-    ...fingerprint.frameworks,
-    ...extractTopDeps()
-  ].filter(Boolean))];
+  const technologies = [
+    ...new Set(
+      [...fingerprint.languages, ...fingerprint.frameworks, ...extractTopDeps()].filter(Boolean)
+    )
+  ];
   if (technologies.length === 0) {
-    console.log(chalk6.yellow("Could not detect any languages or dependencies. Try running from a project root."));
+    console.log(
+      chalk6.yellow(
+        "Could not detect any languages or dependencies. Try running from a project root."
+      )
+    );
     throw new Error("__exit__");
   }
   const primaryPlatform = platforms.includes("claude") ? "claude" : platforms[0];
@@ -7133,7 +7241,9 @@ async function searchAndInstallSkills(targetPlatforms) {
         scoreSpinner.succeed("No highly relevant skills found for your specific project.");
         return;
       }
-      scoreSpinner.succeed(`${results.length} relevant skill${results.length > 1 ? "s" : ""} for your project`);
+      scoreSpinner.succeed(
+        `${results.length} relevant skill${results.length > 1 ? "s" : ""} for your project`
+      );
     } catch {
       scoreSpinner.warn("Could not score relevance \u2014 showing top results");
       results = newCandidates.slice(0, 20);
@@ -7143,10 +7253,12 @@ async function searchAndInstallSkills(targetPlatforms) {
   }
   const fetchSpinner = ora("Verifying skill availability...").start();
   const contentMap = /* @__PURE__ */ new Map();
-  await Promise.all(results.map(async (rec) => {
-    const content = await fetchSkillContent(rec);
-    if (content) contentMap.set(rec.slug, content);
-  }));
+  await Promise.all(
+    results.map(async (rec) => {
+      const content = await fetchSkillContent(rec);
+      if (content) contentMap.set(rec.slug, content);
+    })
+  );
   const available = results.filter((r) => contentMap.has(r.slug));
   if (!available.length) {
     fetchSpinner.fail("No installable skills found \u2014 content could not be fetched.");
@@ -7194,9 +7306,13 @@ async function interactiveSelect(recs) {
       if (hasScores) {
         const scoreColor = rec.score >= 90 ? chalk6.green : rec.score >= 70 ? chalk6.yellow : chalk6.dim;
         const reasonMax = Math.max(cols - prefixWidth - scoreWidth - nameWidth - 2, 20);
-        lines.push(`  ${ptr} ${check} ${scoreColor(String(rec.score).padStart(3))}   ${rec.name.padEnd(nameWidth)}${chalk6.dim(rec.reason.slice(0, reasonMax))}`);
+        lines.push(
+          `  ${ptr} ${check} ${scoreColor(String(rec.score).padStart(3))}   ${rec.name.padEnd(nameWidth)}${chalk6.dim(rec.reason.slice(0, reasonMax))}`
+        );
       } else {
-        lines.push(`  ${ptr} ${check} ${rec.name.padEnd(nameWidth)}${rec.detected_technology.padEnd(16)} ${chalk6.dim(rec.source_url || "")}`);
+        lines.push(
+          `  ${ptr} ${check} ${rec.name.padEnd(nameWidth)}${rec.detected_technology.padEnd(16)} ${chalk6.dim(rec.source_url || "")}`
+        );
       }
     }
     lines.push("");
@@ -7252,7 +7368,9 @@ async function interactiveSelect(recs) {
             console.log(chalk6.dim("\n  No skills selected.\n"));
             resolve3(null);
           } else {
-            resolve3(Array.from(selected).sort().map((i) => recs[i]));
+            resolve3(
+              Array.from(selected).sort().map((i) => recs[i])
+            );
           }
           break;
         case "q":
@@ -7321,17 +7439,25 @@ function printSkills(recs) {
   const prefixWidth = 2;
   console.log(chalk6.bold("\n  Skills\n"));
   if (hasScores) {
-    console.log(" ".repeat(prefixWidth) + chalk6.dim("Score".padEnd(scoreWidth)) + chalk6.dim("Name".padEnd(nameWidth)) + chalk6.dim("Why"));
+    console.log(
+      " ".repeat(prefixWidth) + chalk6.dim("Score".padEnd(scoreWidth)) + chalk6.dim("Name".padEnd(nameWidth)) + chalk6.dim("Why")
+    );
   } else {
-    console.log(" ".repeat(prefixWidth) + chalk6.dim("Name".padEnd(nameWidth)) + chalk6.dim("Technology".padEnd(18)) + chalk6.dim("Source"));
+    console.log(
+      " ".repeat(prefixWidth) + chalk6.dim("Name".padEnd(nameWidth)) + chalk6.dim("Technology".padEnd(18)) + chalk6.dim("Source")
+    );
   }
   console.log(chalk6.dim("  " + "\u2500".repeat(Math.min(cols - 4, 90))));
   for (const rec of recs) {
     if (hasScores) {
       const reasonMax = Math.max(cols - prefixWidth - scoreWidth - nameWidth - 2, 20);
-      console.log(`  ${String(rec.score).padStart(3)}   ${rec.name.padEnd(nameWidth)}${chalk6.dim(rec.reason.slice(0, reasonMax))}`);
+      console.log(
+        `  ${String(rec.score).padStart(3)}   ${rec.name.padEnd(nameWidth)}${chalk6.dim(rec.reason.slice(0, reasonMax))}`
+      );
     } else {
-      console.log(`  ${rec.name.padEnd(nameWidth)}${rec.detected_technology.padEnd(16)} ${chalk6.dim(rec.source_url || "")}`);
+      console.log(
+        `  ${rec.name.padEnd(nameWidth)}${rec.detected_technology.padEnd(16)} ${chalk6.dim(rec.source_url || "")}`
+      );
     }
   }
   console.log("");
@@ -7551,11 +7677,11 @@ function countIssuePoints(issues) {
 }
 async function scoreAndRefine(setup, dir, sessionHistory, callbacks) {
   const existsCache = /* @__PURE__ */ new Map();
-  const cachedExists = (path40) => {
-    const cached = existsCache.get(path40);
+  const cachedExists = (path41) => {
+    const cached = existsCache.get(path41);
     if (cached !== void 0) return cached;
-    const result = existsSync9(path40);
-    existsCache.set(path40, result);
+    const result = existsSync9(path41);
+    existsCache.set(path41, result);
     return result;
   };
   const projectStructure = collectProjectStructure(dir);
@@ -7695,7 +7821,7 @@ async function runScoreRefineWithSpinner(setup, dir, sessionHistory) {
 
 // src/lib/debug-report.ts
 import fs25 from "fs";
-import path21 from "path";
+import path22 from "path";
 var DebugReport = class {
   sections = [];
   startTime;
@@ -7764,7 +7890,7 @@ var DebugReport = class {
       lines.push(`| **Total** | **${formatMs(totalMs)}** |`);
       lines.push("");
     }
-    const dir = path21.dirname(outputPath);
+    const dir = path22.dirname(outputPath);
     if (!fs25.existsSync(dir)) {
       fs25.mkdirSync(dir, { recursive: true });
     }
@@ -8450,7 +8576,11 @@ function formatWhatChanged(setup) {
     lines.push(`${action} AGENTS.md`);
   }
   const allSkills = [];
-  for (const [platform, obj] of [["claude", claude], ["codex", codex], ["cursor", cursor]]) {
+  for (const [_platform, obj] of [
+    ["claude", claude],
+    ["codex", codex],
+    ["cursor", cursor]
+  ]) {
     const skills = obj?.skills;
     if (Array.isArray(skills)) {
       for (const s of skills) allSkills.push(s.name);
@@ -8467,7 +8597,9 @@ function formatWhatChanged(setup) {
   }
   const deletions = setup.deletions;
   if (Array.isArray(deletions) && deletions.length > 0) {
-    lines.push(`Removing ${deletions.length} file${deletions.length === 1 ? "" : "s"}: ${deletions.map((d) => d.filePath).join(", ")}`);
+    lines.push(
+      `Removing ${deletions.length} file${deletions.length === 1 ? "" : "s"}: ${deletions.map((d) => d.filePath).join(", ")}`
+    );
   }
   return lines;
 }
@@ -8565,7 +8697,9 @@ function printSetupSummary(setup) {
       console.log("");
     }
   }
-  console.log(`  ${chalk12.green("+")} ${chalk12.dim("new")}  ${chalk12.yellow("~")} ${chalk12.dim("modified")}  ${chalk12.red("-")} ${chalk12.dim("removed")}`);
+  console.log(
+    `  ${chalk12.green("+")} ${chalk12.dim("new")}  ${chalk12.yellow("~")} ${chalk12.dim("modified")}  ${chalk12.red("-")} ${chalk12.dim("removed")}`
+  );
   console.log("");
 }
 function displayTokenUsage() {
@@ -8580,11 +8714,17 @@ function displayTokenUsage() {
   for (const m of summary) {
     totalIn += m.inputTokens;
     totalOut += m.outputTokens;
-    const cacheInfo = m.cacheReadTokens > 0 || m.cacheWriteTokens > 0 ? chalk12.dim(` (cache: ${m.cacheReadTokens.toLocaleString()} read, ${m.cacheWriteTokens.toLocaleString()} write)`) : "";
-    console.log(`    ${chalk12.dim(m.model)}: ${m.inputTokens.toLocaleString()} in / ${m.outputTokens.toLocaleString()} out  (${m.calls} call${m.calls === 1 ? "" : "s"})${cacheInfo}`);
+    const cacheInfo = m.cacheReadTokens > 0 || m.cacheWriteTokens > 0 ? chalk12.dim(
+      ` (cache: ${m.cacheReadTokens.toLocaleString()} read, ${m.cacheWriteTokens.toLocaleString()} write)`
+    ) : "";
+    console.log(
+      `    ${chalk12.dim(m.model)}: ${m.inputTokens.toLocaleString()} in / ${m.outputTokens.toLocaleString()} out  (${m.calls} call${m.calls === 1 ? "" : "s"})${cacheInfo}`
+    );
   }
   if (summary.length > 1) {
-    console.log(`    ${chalk12.dim("Total")}: ${totalIn.toLocaleString()} in / ${totalOut.toLocaleString()} out`);
+    console.log(
+      `    ${chalk12.dim("Total")}: ${totalIn.toLocaleString()} in / ${totalOut.toLocaleString()} out`
+    );
   }
   console.log("");
 }
@@ -8593,9 +8733,9 @@ function displayTokenUsage() {
 init_config();
 import chalk13 from "chalk";
 import fs30 from "fs";
-import path23 from "path";
+import path24 from "path";
 function isFirstRun(dir) {
-  const caliberDir = path23.join(dir, ".caliber");
+  const caliberDir = path24.join(dir, ".caliber");
   try {
     const stat = fs30.statSync(caliberDir);
     return !stat.isDirectory();
@@ -8665,7 +8805,7 @@ function ensurePermissions(fingerprint) {
 }
 function writeErrorLog(config, rawOutput, error, stopReason) {
   try {
-    const logPath = path23.join(process.cwd(), ".caliber", "error-log.md");
+    const logPath = path24.join(process.cwd(), ".caliber", "error-log.md");
     const lines = [
       `# Generation Error \u2014 ${(/* @__PURE__ */ new Date()).toISOString()}`,
       "",
@@ -8678,7 +8818,7 @@ function writeErrorLog(config, rawOutput, error, stopReason) {
       lines.push("## Error", "```", error, "```", "");
     }
     lines.push("## Raw LLM Output", "```", rawOutput || "(empty)", "```");
-    fs30.mkdirSync(path23.join(process.cwd(), ".caliber"), { recursive: true });
+    fs30.mkdirSync(path24.join(process.cwd(), ".caliber"), { recursive: true });
     fs30.writeFileSync(logPath, lines.join("\n"));
     console.log(chalk13.dim(`
   Error log written to .caliber/error-log.md`));
@@ -8731,12 +8871,12 @@ ${JSON.stringify(checkList, null, 2)}`,
 
 // src/scoring/history.ts
 import fs31 from "fs";
-import path24 from "path";
+import path25 from "path";
 var HISTORY_FILE = "score-history.jsonl";
 var MAX_ENTRIES = 500;
 var TRIM_THRESHOLD = MAX_ENTRIES + 50;
 function historyFilePath() {
-  return path24.join(CALIBER_DIR, HISTORY_FILE);
+  return path25.join(CALIBER_DIR, HISTORY_FILE);
 }
 function recordScore(result, trigger) {
   const entry = {
@@ -8801,14 +8941,16 @@ async function initCommand(options) {
   const bin = resolveCaliber();
   const firstRun = isFirstRun(process.cwd());
   if (firstRun) {
-    console.log(brand.bold(`
+    console.log(
+      brand.bold(`
    \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2557     \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2557
   \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551     \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557
   \u2588\u2588\u2551     \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551     \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D
   \u2588\u2588\u2551     \u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2551     \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u255D  \u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557
   \u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551  \u2588\u2588\u2551
    \u255A\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u255D
-  `));
+  `)
+    );
     console.log(chalk14.dim("  Scan your project and generate tailored config files for"));
     console.log(chalk14.dim("  Claude Code, Cursor, Codex, and GitHub Copilot.\n"));
     console.log(title.bold("  How it works:\n"));
@@ -8822,7 +8964,11 @@ async function initCommand(options) {
   const platforms = detectPlatforms();
   if (!platforms.claude && !platforms.cursor && !platforms.codex) {
     console.log(chalk14.yellow("  \u26A0 No supported AI platforms detected (Claude, Cursor, Codex)."));
-    console.log(chalk14.yellow("    Caliber will still generate config files, but they won't be auto-installed.\n"));
+    console.log(
+      chalk14.yellow(
+        "    Caliber will still generate config files, but they won't be auto-installed.\n"
+      )
+    );
   }
   const report = options.debugReport ? new DebugReport() : null;
   console.log(title.bold("  Step 1/4 \u2014 Connect\n"));
@@ -8846,9 +8992,12 @@ async function initCommand(options) {
   console.log(chalk14.dim(modelLine + "\n"));
   if (report) {
     report.markStep("Provider connection");
-    report.addSection("LLM Provider", `- **Provider**: ${config.provider}
+    report.addSection(
+      "LLM Provider",
+      `- **Provider**: ${config.provider}
 - **Model**: ${displayModel}
-- **Fast model**: ${fastModel || "none"}`);
+- **Fast model**: ${fastModel || "none"}`
+    );
   }
   await validateModel({ fast: true });
   let targetAgent;
@@ -8865,21 +9014,29 @@ async function initCommand(options) {
   console.log(chalk14.dim(`  Target: ${targetAgent.join(", ")}
 `));
   trackInitAgentSelected(targetAgent, agentAutoDetected);
-  let baselineScore = computeLocalScore(process.cwd(), targetAgent);
+  const baselineScore = computeLocalScore(process.cwd(), targetAgent);
   console.log(chalk14.dim("\n  Current config score:"));
   displayScoreSummary(baselineScore);
   if (options.verbose) {
     for (const c of baselineScore.checks) {
-      log(options.verbose, `  ${c.passed ? "\u2713" : "\u2717"} ${c.name}: ${c.earnedPoints}/${c.maxPoints}${c.suggestion ? ` \u2014 ${c.suggestion}` : ""}`);
+      log(
+        options.verbose,
+        `  ${c.passed ? "\u2713" : "\u2717"} ${c.name}: ${c.earnedPoints}/${c.maxPoints}${c.suggestion ? ` \u2014 ${c.suggestion}` : ""}`
+      );
     }
   }
   if (report) {
     report.markStep("Baseline scoring");
-    report.addSection("Scoring: Baseline", `**Score**: ${baselineScore.score}/100
+    report.addSection(
+      "Scoring: Baseline",
+      `**Score**: ${baselineScore.score}/100
 
 | Check | Passed | Points | Max |
 |-------|--------|--------|-----|
-` + baselineScore.checks.map((c) => `| ${c.name} | ${c.passed ? "Yes" : "No"} | ${c.earnedPoints} | ${c.maxPoints} |`).join("\n"));
+` + baselineScore.checks.map(
+        (c) => `| ${c.name} | ${c.passed ? "Yes" : "No"} | ${c.earnedPoints} | ${c.maxPoints} |`
+      ).join("\n")
+    );
     report.addSection("Generation: Target Agents", targetAgent.join(", "));
   }
   const hasExistingConfig = !!(baselineScore.checks.some((c) => c.id === "claude_md_exists" && c.passed) || baselineScore.checks.some((c) => c.id === "cursorrules_exists" && c.passed));
@@ -8896,7 +9053,9 @@ async function initCommand(options) {
   if (hasExistingConfig && baselineScore.score === 100) {
     trackInitScoreComputed(baselineScore.score, passingCount, failingCount, true);
     console.log(chalk14.bold.green("  Your config is already optimal \u2014 nothing to change.\n"));
-    console.log(chalk14.dim("  Run ") + chalk14.hex("#83D1EB")(`${bin} init --force`) + chalk14.dim(" to regenerate anyway.\n"));
+    console.log(
+      chalk14.dim("  Run ") + chalk14.hex("#83D1EB")(`${bin} init --force`) + chalk14.dim(" to regenerate anyway.\n")
+    );
     if (!options.force) return;
   }
   const allFailingChecks = baselineScore.checks.filter((c) => !c.passed && c.maxPoints > 0);
@@ -8912,7 +9071,9 @@ async function initCommand(options) {
       }
     }
     console.log("");
-    console.log(chalk14.dim("  Run ") + chalk14.hex("#83D1EB")(`${bin} init --force`) + chalk14.dim(" to regenerate anyway.\n"));
+    console.log(
+      chalk14.dim("  Run ") + chalk14.hex("#83D1EB")(`${bin} init --force`) + chalk14.dim(" to regenerate anyway.\n")
+    );
     return;
   }
   console.log(title.bold("  Step 2/4 \u2014 Engine\n"));
@@ -8931,8 +9092,14 @@ async function initCommand(options) {
   const TASK_STACK = display.add("Detecting project stack", { pipelineLabel: "Scan" });
   const TASK_CONFIG = display.add("Generating configs", { depth: 1, pipelineLabel: "Generate" });
   const TASK_SKILLS_GEN = display.add("Generating skills", { depth: 2, pipelineLabel: "Skills" });
-  const TASK_SKILLS_SEARCH = display.add("Searching community skills", { depth: 1, pipelineLabel: "Search", pipelineRow: 1 });
-  const TASK_SCORE_REFINE = display.add("Validating & refining config", { pipelineLabel: "Validate" });
+  const TASK_SKILLS_SEARCH = display.add("Searching community skills", {
+    depth: 1,
+    pipelineLabel: "Search",
+    pipelineRow: 1
+  });
+  const TASK_SCORE_REFINE = display.add("Validating & refining config", {
+    pipelineLabel: "Validate"
+  });
   display.start();
   display.enableWaitingContent();
   try {
@@ -8942,21 +9109,39 @@ async function initCommand(options) {
     const stackSummary = stackParts.join(", ") || "no languages";
     const largeRepoNote = fingerprint.fileTree.length > 5e3 ? ` (${fingerprint.fileTree.length.toLocaleString()} files, smart sampling active)` : "";
     display.update(TASK_STACK, "done", stackSummary + largeRepoNote);
-    trackInitProjectDiscovered(fingerprint.languages.length, fingerprint.frameworks.length, fingerprint.fileTree.length);
-    log(options.verbose, `Fingerprint: ${fingerprint.languages.length} languages, ${fingerprint.frameworks.length} frameworks, ${fingerprint.fileTree.length} files`);
+    trackInitProjectDiscovered(
+      fingerprint.languages.length,
+      fingerprint.frameworks.length,
+      fingerprint.fileTree.length
+    );
+    log(
+      options.verbose,
+      `Fingerprint: ${fingerprint.languages.length} languages, ${fingerprint.frameworks.length} frameworks, ${fingerprint.fileTree.length} files`
+    );
     const cliSources = options.source || [];
     const workspaces = getDetectedWorkspaces(process.cwd());
     const sources2 = resolveAllSources(process.cwd(), cliSources, workspaces);
     if (sources2.length > 0) {
       fingerprint.sources = sources2;
-      log(options.verbose, `Sources: ${sources2.length} resolved (${sources2.map((s) => s.name).join(", ")})`);
+      log(
+        options.verbose,
+        `Sources: ${sources2.length} resolved (${sources2.map((s) => s.name).join(", ")})`
+      );
     }
     if (report) {
-      report.addJson("Fingerprint: Git", { remote: fingerprint.gitRemoteUrl, packageName: fingerprint.packageName });
+      report.addJson("Fingerprint: Git", {
+        remote: fingerprint.gitRemoteUrl,
+        packageName: fingerprint.packageName
+      });
       report.addCodeBlock("Fingerprint: File Tree", fingerprint.fileTree.join("\n"));
-      report.addJson("Fingerprint: Detected Stack", { languages: fingerprint.languages, frameworks: fingerprint.frameworks, tools: fingerprint.tools });
+      report.addJson("Fingerprint: Detected Stack", {
+        languages: fingerprint.languages,
+        frameworks: fingerprint.frameworks,
+        tools: fingerprint.tools
+      });
       report.addJson("Fingerprint: Existing Configs", fingerprint.existingConfigs);
-      if (fingerprint.codeAnalysis) report.addJson("Fingerprint: Code Analysis", fingerprint.codeAnalysis);
+      if (fingerprint.codeAnalysis)
+        report.addJson("Fingerprint: Code Analysis", fingerprint.codeAnalysis);
     }
     const isEmpty = fingerprint.fileTree.length < 3;
     if (isEmpty) {
@@ -8987,13 +9172,26 @@ async function initCommand(options) {
       let passingChecks;
       let currentScore;
       if (hasExistingConfig && localBaseline.score >= 95 && !options.force) {
-        const currentLlmFixable = localBaseline.checks.filter((c) => !c.passed && c.maxPoints > 0 && !NON_LLM_CHECKS.has(c.id));
-        failingChecks = currentLlmFixable.map((c) => ({ name: c.name, suggestion: c.suggestion, fix: c.fix }));
+        const currentLlmFixable = localBaseline.checks.filter(
+          (c) => !c.passed && c.maxPoints > 0 && !NON_LLM_CHECKS.has(c.id)
+        );
+        failingChecks = currentLlmFixable.map((c) => ({
+          name: c.name,
+          suggestion: c.suggestion,
+          fix: c.fix
+        }));
         passingChecks = localBaseline.checks.filter((c) => c.passed).map((c) => ({ name: c.name }));
         currentScore = localBaseline.score;
       }
       if (report) {
-        const fullPrompt = buildGeneratePrompt(fingerprint, targetAgent, fingerprint.description, failingChecks, currentScore, passingChecks);
+        const fullPrompt = buildGeneratePrompt(
+          fingerprint,
+          targetAgent,
+          fingerprint.description,
+          failingChecks,
+          currentScore,
+          passingChecks
+        );
         report.addCodeBlock("Generation: Full LLM Prompt", fullPrompt);
       }
       const result = await generateSetup(
@@ -9113,7 +9311,10 @@ async function initCommand(options) {
     if (rawOutput) report.addCodeBlock("Generation: Raw LLM Response", rawOutput);
     report.addJson("Generation: Parsed Config", generatedSetup);
   }
-  log(options.verbose, `Generation completed: ${elapsedMs}ms, stopReason: ${genStopReason || "end_turn"}`);
+  log(
+    options.verbose,
+    `Generation completed: ${elapsedMs}ms, stopReason: ${genStopReason || "end_turn"}`
+  );
   console.log(title.bold("  Step 3/4 \u2014 Review\n"));
   const setupFiles = collectSetupFiles(generatedSetup, targetAgent);
   const staged = stageFiles(setupFiles, process.cwd());
@@ -9125,10 +9326,18 @@ async function initCommand(options) {
     }
     console.log("");
   }
-  console.log(chalk14.dim(`  ${chalk14.green(`${staged.newFiles} new`)} / ${chalk14.yellow(`${staged.modifiedFiles} modified`)} file${totalChanges !== 1 ? "s" : ""}`));
+  console.log(
+    chalk14.dim(
+      `  ${chalk14.green(`${staged.newFiles} new`)} / ${chalk14.yellow(`${staged.modifiedFiles} modified`)} file${totalChanges !== 1 ? "s" : ""}`
+    )
+  );
   if (skillSearchResult.results.length > 0) {
-    console.log(chalk14.dim(`  ${chalk14.cyan(`${skillSearchResult.results.length}`)} community skills available to install
-`));
+    console.log(
+      chalk14.dim(
+        `  ${chalk14.cyan(`${skillSearchResult.results.length}`)} community skills available to install
+`
+      )
+    );
   } else {
     console.log("");
   }
@@ -9164,8 +9373,12 @@ async function initCommand(options) {
     }
     const updatedFiles = collectSetupFiles(generatedSetup, targetAgent);
     const restaged = stageFiles(updatedFiles, process.cwd());
-    console.log(chalk14.dim(`  ${chalk14.green(`${restaged.newFiles} new`)} / ${chalk14.yellow(`${restaged.modifiedFiles} modified`)} file${restaged.newFiles + restaged.modifiedFiles !== 1 ? "s" : ""}
-`));
+    console.log(
+      chalk14.dim(
+        `  ${chalk14.green(`${restaged.newFiles} new`)} / ${chalk14.yellow(`${restaged.modifiedFiles} modified`)} file${restaged.newFiles + restaged.modifiedFiles !== 1 ? "s" : ""}
+`
+      )
+    );
     printSetupSummary(generatedSetup);
     const { openReview: openRev } = await Promise.resolve().then(() => (init_review(), review_exports));
     await openRev("terminal", restaged.stagedFiles);
@@ -9192,7 +9405,8 @@ async function initCommand(options) {
       const agentRefs = [];
       if (claude) agentRefs.push("See `CLAUDE.md` for Claude Code configuration.");
       if (cursor) agentRefs.push("See `.cursor/rules/` for Cursor rules.");
-      if (agentRefs.length === 0) agentRefs.push("See CLAUDE.md and .cursor/rules/ for agent configurations.");
+      if (agentRefs.length === 0)
+        agentRefs.push("See CLAUDE.md and .cursor/rules/ for agent configurations.");
       const stubContent = `# AGENTS.md
 
 This project uses AI coding agents configured by [Caliber](https://github.com/caliber-ai-org/ai-setup).
@@ -9239,31 +9453,49 @@ ${agentRefs.join(" ")}
   if (afterScore.score < baselineScore.score) {
     trackInitScoreRegression(baselineScore.score, afterScore.score);
     console.log("");
-    console.log(chalk14.yellow(`  Score would drop from ${baselineScore.score} to ${afterScore.score} \u2014 reverting changes.`));
+    console.log(
+      chalk14.yellow(
+        `  Score would drop from ${baselineScore.score} to ${afterScore.score} \u2014 reverting changes.`
+      )
+    );
     try {
       const { restored, removed } = undoSetup();
       if (restored.length > 0 || removed.length > 0) {
-        console.log(chalk14.dim(`  Reverted ${restored.length + removed.length} file${restored.length + removed.length === 1 ? "" : "s"} from backup.`));
+        console.log(
+          chalk14.dim(
+            `  Reverted ${restored.length + removed.length} file${restored.length + removed.length === 1 ? "" : "s"} from backup.`
+          )
+        );
       }
     } catch {
     }
-    console.log(chalk14.dim("  Run ") + chalk14.hex("#83D1EB")(`${bin} init --force`) + chalk14.dim(" to override.\n"));
+    console.log(
+      chalk14.dim("  Run ") + chalk14.hex("#83D1EB")(`${bin} init --force`) + chalk14.dim(" to override.\n")
+    );
     return;
   }
   if (report) {
     report.markStep("Post-write scoring");
-    report.addSection("Scoring: Post-Write", `**Score**: ${afterScore.score}/100 (delta: ${afterScore.score - baselineScore.score >= 0 ? "+" : ""}${afterScore.score - baselineScore.score})
+    report.addSection(
+      "Scoring: Post-Write",
+      `**Score**: ${afterScore.score}/100 (delta: ${afterScore.score - baselineScore.score >= 0 ? "+" : ""}${afterScore.score - baselineScore.score})
 
 | Check | Passed | Points | Max |
 |-------|--------|--------|-----|
-` + afterScore.checks.map((c) => `| ${c.name} | ${c.passed ? "Yes" : "No"} | ${c.earnedPoints} | ${c.maxPoints} |`).join("\n"));
+` + afterScore.checks.map(
+        (c) => `| ${c.name} | ${c.passed ? "Yes" : "No"} | ${c.earnedPoints} | ${c.maxPoints} |`
+      ).join("\n")
+    );
   }
   recordScore(afterScore, "init");
   displayScoreDelta(baselineScore, afterScore);
   if (options.verbose) {
     log(options.verbose, `Final score: ${afterScore.score}/100`);
     for (const c of afterScore.checks.filter((ch) => !ch.passed)) {
-      log(options.verbose, `  Still failing: ${c.name} (${c.earnedPoints}/${c.maxPoints})${c.suggestion ? ` \u2014 ${c.suggestion}` : ""}`);
+      log(
+        options.verbose,
+        `  Still failing: ${c.name} (${c.earnedPoints}/${c.maxPoints})${c.suggestion ? ` \u2014 ${c.suggestion}` : ""}`
+      );
     }
   }
   let communitySkillsInstalled = 0;
@@ -9277,7 +9509,9 @@ ${agentRefs.join(" ")}
     }
   }
   console.log("");
-  console.log(`  ${chalk14.green("\u2713")} Docs auto-refresh          ${chalk14.dim(`agents run ${resolveCaliber()} refresh before commits`)}`);
+  console.log(
+    `  ${chalk14.green("\u2713")} Docs auto-refresh          ${chalk14.dim(`agents run ${resolveCaliber()} refresh before commits`)}`
+  );
   trackInitHookSelected("config-instructions");
   const hasLearnableAgent = targetAgent.includes("claude") || targetAgent.includes("cursor");
   let enableLearn = false;
@@ -9288,17 +9522,24 @@ ${agentRefs.join(" ")}
       if (enableLearn) {
         if (targetAgent.includes("claude")) {
           const r = installLearningHooks();
-          if (r.installed) console.log(`  ${chalk14.green("\u2713")} Learning hooks installed for Claude Code`);
-          else if (r.alreadyInstalled) console.log(chalk14.dim("  Claude Code learning hooks already installed"));
+          if (r.installed)
+            console.log(`  ${chalk14.green("\u2713")} Learning hooks installed for Claude Code`);
+          else if (r.alreadyInstalled)
+            console.log(chalk14.dim("  Claude Code learning hooks already installed"));
         }
         if (targetAgent.includes("cursor")) {
           const r = installCursorLearningHooks();
           if (r.installed) console.log(`  ${chalk14.green("\u2713")} Learning hooks installed for Cursor`);
-          else if (r.alreadyInstalled) console.log(chalk14.dim("  Cursor learning hooks already installed"));
+          else if (r.alreadyInstalled)
+            console.log(chalk14.dim("  Cursor learning hooks already installed"));
         }
-        console.log(chalk14.dim("    Run ") + chalk14.hex("#83D1EB")(`${bin} learn status`) + chalk14.dim(" to see insights"));
+        console.log(
+          chalk14.dim("    Run ") + chalk14.hex("#83D1EB")(`${bin} learn status`) + chalk14.dim(" to see insights")
+        );
       } else {
-        console.log(chalk14.dim("  Skipped. Run ") + chalk14.hex("#83D1EB")(`${bin} learn install`) + chalk14.dim(" later to enable."));
+        console.log(
+          chalk14.dim("  Skipped. Run ") + chalk14.hex("#83D1EB")(`${bin} learn install`) + chalk14.dim(" later to enable.")
+        );
       }
     } else {
       enableLearn = true;
@@ -9307,28 +9548,46 @@ ${agentRefs.join(" ")}
     }
   }
   console.log(chalk14.bold.green("\n  Configuration complete!"));
-  console.log(chalk14.dim("  Your AI agents now understand your project's architecture, build commands,"));
-  console.log(chalk14.dim("  testing patterns, and conventions. All changes are backed up automatically.\n"));
+  console.log(
+    chalk14.dim("  Your AI agents now understand your project's architecture, build commands,")
+  );
+  console.log(
+    chalk14.dim("  testing patterns, and conventions. All changes are backed up automatically.\n")
+  );
   const done = chalk14.green("\u2713");
   const skip = chalk14.dim("\u2013");
   console.log(chalk14.bold("  What was configured:\n"));
-  console.log(`    ${done}  Config generated          ${title(`${bin} score`)} ${chalk14.dim("for full breakdown")}`);
-  console.log(`    ${done}  Docs auto-refresh        ${chalk14.dim(`agents run ${bin} refresh before commits`)}`);
+  console.log(
+    `    ${done}  Config generated          ${title(`${bin} score`)} ${chalk14.dim("for full breakdown")}`
+  );
+  console.log(
+    `    ${done}  Docs auto-refresh        ${chalk14.dim(`agents run ${bin} refresh before commits`)}`
+  );
   if (hasLearnableAgent) {
     if (enableLearn) {
-      console.log(`    ${done}  Session learning          ${chalk14.dim("agent learns from your feedback")}`);
+      console.log(
+        `    ${done}  Session learning          ${chalk14.dim("agent learns from your feedback")}`
+      );
     } else {
-      console.log(`    ${skip}  Session learning          ${title(`${bin} learn install`)} to enable later`);
+      console.log(
+        `    ${skip}  Session learning          ${title(`${bin} learn install`)} to enable later`
+      );
     }
   }
   if (communitySkillsInstalled > 0) {
-    console.log(`    ${done}  Community skills          ${chalk14.dim(`${communitySkillsInstalled} skill${communitySkillsInstalled > 1 ? "s" : ""} installed for your stack`)}`);
+    console.log(
+      `    ${done}  Community skills          ${chalk14.dim(`${communitySkillsInstalled} skill${communitySkillsInstalled > 1 ? "s" : ""} installed for your stack`)}`
+    );
   } else if (skillSearchResult.results.length > 0) {
     console.log(`    ${skip}  Community skills          ${chalk14.dim("available but skipped")}`);
   }
   console.log(chalk14.bold("\n  Explore next:\n"));
-  console.log(`    ${title(`${bin} skills`)}       Find more community skills as your codebase evolves`);
-  console.log(`    ${title(`${bin} score`)}        See the full scoring breakdown with improvement tips`);
+  console.log(
+    `    ${title(`${bin} skills`)}       Find more community skills as your codebase evolves`
+  );
+  console.log(
+    `    ${title(`${bin} score`)}        See the full scoring breakdown with improvement tips`
+  );
   console.log(`    ${title(`${bin} undo`)}         Revert all changes from this run`);
   console.log("");
   if (options.showTokens) {
@@ -9336,10 +9595,12 @@ ${agentRefs.join(" ")}
   }
   if (report) {
     report.markStep("Finished");
-    const reportPath = path25.join(process.cwd(), ".caliber", "debug-report.md");
+    const reportPath = path26.join(process.cwd(), ".caliber", "debug-report.md");
     report.write(reportPath);
-    console.log(chalk14.dim(`  Debug report written to ${path25.relative(process.cwd(), reportPath)}
-`));
+    console.log(
+      chalk14.dim(`  Debug report written to ${path26.relative(process.cwd(), reportPath)}
+`)
+    );
   }
 }
 
@@ -9565,30 +9826,39 @@ async function regenerateCommand(options) {
 // src/commands/score.ts
 import fs34 from "fs";
 import os7 from "os";
-import path26 from "path";
+import path27 from "path";
 import { execFileSync as execFileSync2 } from "child_process";
 import chalk18 from "chalk";
 init_resolve_caliber();
 var CONFIG_FILES = ["CLAUDE.md", "AGENTS.md", ".cursorrules", "CALIBER_LEARNINGS.md"];
 var CONFIG_DIRS = [".claude", ".cursor"];
 function scoreBaseRef(ref, target) {
-  if (!/^[\w.\-\/~^@{}]+$/.test(ref)) return null;
-  const tmpDir = fs34.mkdtempSync(path26.join(os7.tmpdir(), "caliber-compare-"));
+  if (!/^[\w.\-/~^@{}]+$/.test(ref)) return null;
+  const tmpDir = fs34.mkdtempSync(path27.join(os7.tmpdir(), "caliber-compare-"));
   try {
     for (const file of CONFIG_FILES) {
       try {
-        const content = execFileSync2("git", ["show", `${ref}:${file}`], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
-        fs34.writeFileSync(path26.join(tmpDir, file), content);
+        const content = execFileSync2("git", ["show", `${ref}:${file}`], {
+          encoding: "utf-8",
+          stdio: ["pipe", "pipe", "pipe"]
+        });
+        fs34.writeFileSync(path27.join(tmpDir, file), content);
       } catch {
       }
     }
     for (const dir of CONFIG_DIRS) {
       try {
-        const files = execFileSync2("git", ["ls-tree", "-r", "--name-only", ref, `${dir}/`], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim().split("\n").filter(Boolean);
+        const files = execFileSync2("git", ["ls-tree", "-r", "--name-only", ref, `${dir}/`], {
+          encoding: "utf-8",
+          stdio: ["pipe", "pipe", "pipe"]
+        }).trim().split("\n").filter(Boolean);
         for (const file of files) {
-          const filePath = path26.join(tmpDir, file);
-          fs34.mkdirSync(path26.dirname(filePath), { recursive: true });
-          const content = execFileSync2("git", ["show", `${ref}:${file}`], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
+          const filePath = path27.join(tmpDir, file);
+          fs34.mkdirSync(path27.dirname(filePath), { recursive: true });
+          const content = execFileSync2("git", ["show", `${ref}:${file}`], {
+            encoding: "utf-8",
+            stdio: ["pipe", "pipe", "pipe"]
+          });
           fs34.writeFileSync(filePath, content);
         }
       } catch {
@@ -9611,13 +9881,25 @@ async function scoreCommand(options) {
   if (options.compare) {
     const baseResult = scoreBaseRef(options.compare, target);
     if (!baseResult) {
-      console.error(chalk18.red(`Could not score ref "${options.compare}" \u2014 branch or ref not found.`));
+      console.error(
+        chalk18.red(`Could not score ref "${options.compare}" \u2014 branch or ref not found.`)
+      );
       process.exitCode = 1;
       return;
     }
     const delta = result.score - baseResult.score;
     if (options.json) {
-      console.log(JSON.stringify({ current: result, base: { score: baseResult.score, grade: baseResult.grade, ref: options.compare }, delta }, null, 2));
+      console.log(
+        JSON.stringify(
+          {
+            current: result,
+            base: { score: baseResult.score, grade: baseResult.grade, ref: options.compare },
+            delta
+          },
+          null,
+          2
+        )
+      );
       return;
     }
     if (options.quiet) {
@@ -9629,9 +9911,13 @@ async function scoreCommand(options) {
     const separator2 = chalk18.gray("  " + "\u2500".repeat(53));
     console.log(separator2);
     if (delta > 0) {
-      console.log(chalk18.green(`  +${delta}`) + chalk18.gray(` from ${options.compare} (${baseResult.score}/100)`));
+      console.log(
+        chalk18.green(`  +${delta}`) + chalk18.gray(` from ${options.compare} (${baseResult.score}/100)`)
+      );
     } else if (delta < 0) {
-      console.log(chalk18.red(`  ${delta}`) + chalk18.gray(` from ${options.compare} (${baseResult.score}/100)`));
+      console.log(
+        chalk18.red(`  ${delta}`) + chalk18.gray(` from ${options.compare} (${baseResult.score}/100)`)
+      );
     } else {
       console.log(chalk18.gray(`  No change from ${options.compare} (${baseResult.score}/100)`));
     }
@@ -9651,18 +9937,24 @@ async function scoreCommand(options) {
   console.log(separator);
   const bin = resolveCaliber();
   if (result.score < 40) {
-    console.log(chalk18.gray("  Run ") + chalk18.hex("#83D1EB")(`${bin} init`) + chalk18.gray(" to generate a complete, optimized config."));
+    console.log(
+      chalk18.gray("  Run ") + chalk18.hex("#83D1EB")(`${bin} init`) + chalk18.gray(" to generate a complete, optimized config.")
+    );
   } else if (result.score < 70) {
-    console.log(chalk18.gray("  Run ") + chalk18.hex("#83D1EB")(`${bin} init`) + chalk18.gray(" to improve your config."));
+    console.log(
+      chalk18.gray("  Run ") + chalk18.hex("#83D1EB")(`${bin} init`) + chalk18.gray(" to improve your config.")
+    );
   } else {
-    console.log(chalk18.green("  Looking good!") + chalk18.gray(" Run ") + chalk18.hex("#83D1EB")(`${bin} regenerate`) + chalk18.gray(" to rebuild from scratch."));
+    console.log(
+      chalk18.green("  Looking good!") + chalk18.gray(" Run ") + chalk18.hex("#83D1EB")(`${bin} regenerate`) + chalk18.gray(" to rebuild from scratch.")
+    );
   }
   console.log("");
 }
 
 // src/commands/refresh.ts
 import fs38 from "fs";
-import path30 from "path";
+import path31 from "path";
 import chalk19 from "chalk";
 import ora6 from "ora";
 
@@ -9741,7 +10033,7 @@ function collectDiff(lastSha) {
 
 // src/writers/refresh.ts
 import fs35 from "fs";
-import path27 from "path";
+import path28 from "path";
 function writeRefreshDocs(docs) {
   const written = [];
   if (docs.claudeMd) {
@@ -9757,31 +10049,31 @@ function writeRefreshDocs(docs) {
     written.push(".cursorrules");
   }
   if (docs.cursorRules) {
-    const rulesDir = path27.join(".cursor", "rules");
+    const rulesDir = path28.join(".cursor", "rules");
     if (!fs35.existsSync(rulesDir)) fs35.mkdirSync(rulesDir, { recursive: true });
     for (const rule of docs.cursorRules) {
-      fs35.writeFileSync(path27.join(rulesDir, rule.filename), rule.content);
+      fs35.writeFileSync(path28.join(rulesDir, rule.filename), rule.content);
       written.push(`.cursor/rules/${rule.filename}`);
     }
   }
   if (docs.claudeSkills) {
-    const skillsDir = path27.join(".claude", "skills");
+    const skillsDir = path28.join(".claude", "skills");
     if (!fs35.existsSync(skillsDir)) fs35.mkdirSync(skillsDir, { recursive: true });
     for (const skill of docs.claudeSkills) {
-      fs35.writeFileSync(path27.join(skillsDir, skill.filename), skill.content);
+      fs35.writeFileSync(path28.join(skillsDir, skill.filename), skill.content);
       written.push(`.claude/skills/${skill.filename}`);
     }
   }
   if (docs.copilotInstructions) {
     fs35.mkdirSync(".github", { recursive: true });
-    fs35.writeFileSync(path27.join(".github", "copilot-instructions.md"), appendLearningsBlock(appendPreCommitBlock(docs.copilotInstructions)));
+    fs35.writeFileSync(path28.join(".github", "copilot-instructions.md"), appendLearningsBlock(appendPreCommitBlock(docs.copilotInstructions)));
     written.push(".github/copilot-instructions.md");
   }
   if (docs.copilotInstructionFiles) {
-    const instructionsDir = path27.join(".github", "instructions");
+    const instructionsDir = path28.join(".github", "instructions");
     fs35.mkdirSync(instructionsDir, { recursive: true });
     for (const file of docs.copilotInstructionFiles) {
-      fs35.writeFileSync(path27.join(instructionsDir, file.filename), file.content);
+      fs35.writeFileSync(path28.join(instructionsDir, file.filename), file.content);
       written.push(`.github/instructions/${file.filename}`);
     }
   }
@@ -9868,7 +10160,7 @@ Changed files: ${diff.changedFiles.join(", ")}`);
 
 // src/learner/writer.ts
 import fs36 from "fs";
-import path28 from "path";
+import path29 from "path";
 
 // src/learner/utils.ts
 var TYPE_PREFIX_RE = /^\*\*\[[^\]]+\]\*\*\s*/;
@@ -9993,9 +10285,9 @@ function writeLearnedSection(content) {
   return writeLearnedSectionTo(LEARNINGS_FILE, LEARNINGS_HEADER, readLearnedSection(), content);
 }
 function writeLearnedSkill(skill) {
-  const skillDir = path28.join(".claude", "skills", skill.name);
+  const skillDir = path29.join(".claude", "skills", skill.name);
   if (!fs36.existsSync(skillDir)) fs36.mkdirSync(skillDir, { recursive: true });
-  const skillPath = path28.join(skillDir, "SKILL.md");
+  const skillPath = path29.join(skillDir, "SKILL.md");
   if (!skill.isNew && fs36.existsSync(skillPath)) {
     const existing = fs36.readFileSync(skillPath, "utf-8");
     fs36.writeFileSync(skillPath, existing.trimEnd() + "\n\n" + skill.content);
@@ -10072,8 +10364,8 @@ function discoverGitRepos(parentDir) {
     const entries = fs38.readdirSync(parentDir, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
-      const childPath = path30.join(parentDir, entry.name);
-      if (fs38.existsSync(path30.join(childPath, ".git"))) {
+      const childPath = path31.join(parentDir, entry.name);
+      if (fs38.existsSync(path31.join(childPath, ".git"))) {
         repos.push(childPath);
       }
     }
@@ -10159,7 +10451,7 @@ async function refreshSingleRepo(repoDir, options) {
   const filesToWrite = response.docsUpdated || [];
   const preRefreshContents = /* @__PURE__ */ new Map();
   for (const filePath of filesToWrite) {
-    const fullPath = path30.resolve(repoDir, filePath);
+    const fullPath = path31.resolve(repoDir, filePath);
     try {
       preRefreshContents.set(filePath, fs38.readFileSync(fullPath, "utf-8"));
     } catch {
@@ -10171,7 +10463,7 @@ async function refreshSingleRepo(repoDir, options) {
   const postScore = computeLocalScore(repoDir, targetAgent);
   if (postScore.score < preScore.score) {
     for (const [filePath, content] of preRefreshContents) {
-      const fullPath = path30.resolve(repoDir, filePath);
+      const fullPath = path31.resolve(repoDir, filePath);
       if (content === null) {
         try {
           fs38.unlinkSync(fullPath);
@@ -10233,7 +10525,7 @@ async function refreshCommand(options) {
 `));
     const originalDir = process.cwd();
     for (const repo of repos) {
-      const repoName = path30.basename(repo);
+      const repoName = path31.basename(repo);
       try {
         process.chdir(repo);
         await refreshSingleRepo(repo, { ...options, label: repoName });
@@ -10259,9 +10551,9 @@ import fs40 from "fs";
 // src/lib/hooks.ts
 init_resolve_caliber();
 import fs39 from "fs";
-import path31 from "path";
+import path32 from "path";
 import { execSync as execSync15 } from "child_process";
-var SETTINGS_PATH2 = path31.join(".claude", "settings.json");
+var SETTINGS_PATH2 = path32.join(".claude", "settings.json");
 var REFRESH_TAIL = "refresh --quiet";
 var HOOK_DESCRIPTION = "Caliber: auto-refreshing docs based on code changes";
 function getHookCommand() {
@@ -10276,7 +10568,7 @@ function readSettings2() {
   }
 }
 function writeSettings2(settings) {
-  const dir = path31.dirname(SETTINGS_PATH2);
+  const dir = path32.dirname(SETTINGS_PATH2);
   if (!fs39.existsSync(dir)) fs39.mkdirSync(dir, { recursive: true });
   fs39.writeFileSync(SETTINGS_PATH2, JSON.stringify(settings, null, 2));
 }
@@ -10344,14 +10636,14 @@ ${PRECOMMIT_END}`;
 function getGitHooksDir() {
   try {
     const gitDir = execSync15("git rev-parse --git-dir", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
-    return path31.join(gitDir, "hooks");
+    return path32.join(gitDir, "hooks");
   } catch {
     return null;
   }
 }
 function getPreCommitPath() {
   const hooksDir = getGitHooksDir();
-  return hooksDir ? path31.join(hooksDir, "pre-commit") : null;
+  return hooksDir ? path32.join(hooksDir, "pre-commit") : null;
 }
 function isPreCommitHookInstalled() {
   const hookPath = getPreCommitPath();
@@ -10365,7 +10657,7 @@ function installPreCommitHook() {
   }
   const hookPath = getPreCommitPath();
   if (!hookPath) return { installed: false, alreadyInstalled: false };
-  const hooksDir = path31.dirname(hookPath);
+  const hooksDir = path32.dirname(hookPath);
   if (!fs39.existsSync(hooksDir)) fs39.mkdirSync(hooksDir, { recursive: true });
   let content = "";
   if (fs39.existsSync(hookPath)) {
@@ -10615,7 +10907,7 @@ async function configCommand() {
 
 // src/commands/learn.ts
 import fs44 from "fs";
-import path35 from "path";
+import path36 from "path";
 import chalk23 from "chalk";
 
 // src/learner/stdin.ts
@@ -10647,7 +10939,7 @@ function readStdin() {
 
 // src/learner/storage.ts
 import fs41 from "fs";
-import path32 from "path";
+import path33 from "path";
 var MAX_RESPONSE_LENGTH = 2e3;
 var DEFAULT_STATE = {
   sessionId: null,
@@ -10661,10 +10953,10 @@ function ensureLearningDir() {
   }
 }
 function sessionFilePath() {
-  return path32.join(getLearningDir(), LEARNING_SESSION_FILE);
+  return path33.join(getLearningDir(), LEARNING_SESSION_FILE);
 }
 function stateFilePath() {
-  return path32.join(getLearningDir(), LEARNING_STATE_FILE);
+  return path33.join(getLearningDir(), LEARNING_STATE_FILE);
 }
 function truncateResponse(response) {
   const str = JSON.stringify(response);
@@ -10736,7 +11028,7 @@ function resetState() {
 var LOCK_FILE2 = "finalize.lock";
 var LOCK_STALE_MS = 5 * 60 * 1e3;
 function lockFilePath() {
-  return path32.join(getLearningDir(), LOCK_FILE2);
+  return path33.join(getLearningDir(), LOCK_FILE2);
 }
 function acquireFinalizeLock() {
   ensureLearningDir();
@@ -10782,10 +11074,10 @@ function releaseFinalizeLock() {
 
 // src/lib/notifications.ts
 import fs42 from "fs";
-import path33 from "path";
+import path34 from "path";
 import chalk22 from "chalk";
 function notificationFilePath() {
-  return path33.join(getLearningDir(), "last-finalize-summary.json");
+  return path34.join(getLearningDir(), "last-finalize-summary.json");
 }
 function writeFinalizeSummary(summary) {
   try {
@@ -10967,7 +11259,7 @@ init_config();
 
 // src/learner/roi.ts
 import fs43 from "fs";
-import path34 from "path";
+import path35 from "path";
 var DEFAULT_TOTALS = {
   totalWasteTokens: 0,
   totalWasteSeconds: 0,
@@ -10981,7 +11273,7 @@ var DEFAULT_TOTALS = {
   lastSessionTimestamp: ""
 };
 function roiFilePath() {
-  return path34.join(getLearningDir(), LEARNING_ROI_FILE);
+  return path35.join(getLearningDir(), LEARNING_ROI_FILE);
 }
 function readROIStats() {
   const filePath = roiFilePath();
@@ -11171,7 +11463,9 @@ Return a JSON object: {"matchedIndices": [0, 2]} or {"matchedIndices": []} if no
     const json = extractJson(raw);
     if (json) {
       const parsed = JSON.parse(json);
-      const indices = (parsed.matchedIndices || []).filter((i) => typeof i === "number" && i >= 0 && i < learnings.length);
+      const indices = (parsed.matchedIndices || []).filter(
+        (i) => typeof i === "number" && i >= 0 && i < learnings.length
+      );
       return { matchedIndices: indices, unmatchedFailures: failureEvents.length - indices.length };
     }
   } catch {
@@ -11209,7 +11503,7 @@ var AUTO_SETTLE_MS = 200;
 var INCREMENTAL_INTERVAL = 50;
 function writeFinalizeError(message) {
   try {
-    const errorPath = path35.join(getLearningDir(), LEARNING_LAST_ERROR_FILE);
+    const errorPath = path36.join(getLearningDir(), LEARNING_LAST_ERROR_FILE);
     if (!fs44.existsSync(getLearningDir())) fs44.mkdirSync(getLearningDir(), { recursive: true });
     fs44.writeFileSync(errorPath, JSON.stringify({
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
@@ -11221,7 +11515,7 @@ function writeFinalizeError(message) {
 }
 function readFinalizeError() {
   try {
-    const errorPath = path35.join(getLearningDir(), LEARNING_LAST_ERROR_FILE);
+    const errorPath = path36.join(getLearningDir(), LEARNING_LAST_ERROR_FILE);
     if (!fs44.existsSync(errorPath)) return null;
     return JSON.parse(fs44.readFileSync(errorPath, "utf-8"));
   } catch {
@@ -11270,7 +11564,7 @@ async function learnObserveCommand(options) {
         const { resolveCaliber: resolveCaliber2 } = await Promise.resolve().then(() => (init_resolve_caliber(), resolve_caliber_exports));
         const bin = resolveCaliber2();
         const { spawn: spawn4 } = await import("child_process");
-        const logPath = path35.join(getLearningDir(), LEARNING_FINALIZE_LOG);
+        const logPath = path36.join(getLearningDir(), LEARNING_FINALIZE_LOG);
         if (!fs44.existsSync(getLearningDir())) fs44.mkdirSync(getLearningDir(), { recursive: true });
         const logFd = fs44.openSync(logPath, "a");
         spawn4(bin, ["learn", "finalize", "--auto", "--incremental"], {
@@ -11560,7 +11854,7 @@ async function learnStatusCommand() {
   if (lastError) {
     console.log(`Last error: ${chalk23.red(lastError.error)}`);
     console.log(chalk23.dim(`  at ${lastError.timestamp}`));
-    const logPath = path35.join(getLearningDir(), LEARNING_FINALIZE_LOG);
+    const logPath = path36.join(getLearningDir(), LEARNING_FINALIZE_LOG);
     if (fs44.existsSync(logPath)) {
       console.log(chalk23.dim(`  Full log: ${logPath}`));
     }
@@ -11842,7 +12136,7 @@ async function insightsCommand(options) {
 
 // src/commands/sources.ts
 import fs45 from "fs";
-import path36 from "path";
+import path37 from "path";
 import chalk25 from "chalk";
 init_resolve_caliber();
 async function sourcesListCommand() {
@@ -11859,9 +12153,9 @@ async function sourcesListCommand() {
   if (configSources.length > 0) {
     for (const source of configSources) {
       const sourcePath = source.path || source.url || "";
-      const exists = source.path ? fs45.existsSync(path36.resolve(dir, source.path)) : false;
+      const exists = source.path ? fs45.existsSync(path37.resolve(dir, source.path)) : false;
       const status = exists ? chalk25.green("reachable") : chalk25.red("not found");
-      const hasSummary = source.path && fs45.existsSync(path36.join(path36.resolve(dir, source.path), ".caliber", "summary.json"));
+      const hasSummary = source.path && fs45.existsSync(path37.join(path37.resolve(dir, source.path), ".caliber", "summary.json"));
       console.log(`  ${chalk25.bold(source.role || source.type)}  ${chalk25.dim(sourcePath)}`);
       console.log(`    Type: ${source.type}  Status: ${status}${hasSummary ? "  " + chalk25.cyan("has summary.json") : ""}`);
       if (source.description) console.log(`    ${chalk25.dim(source.description)}`);
@@ -11871,7 +12165,7 @@ async function sourcesListCommand() {
   if (workspaces.length > 0) {
     console.log(chalk25.dim("  Auto-detected workspaces:"));
     for (const ws of workspaces) {
-      const exists = fs45.existsSync(path36.resolve(dir, ws));
+      const exists = fs45.existsSync(path37.resolve(dir, ws));
       console.log(`    ${exists ? chalk25.green("\u25CF") : chalk25.red("\u25CF")} ${ws}`);
     }
     console.log("");
@@ -11879,7 +12173,7 @@ async function sourcesListCommand() {
 }
 async function sourcesAddCommand(sourcePath) {
   const dir = process.cwd();
-  const absPath = path36.resolve(dir, sourcePath);
+  const absPath = path37.resolve(dir, sourcePath);
   if (!fs45.existsSync(absPath)) {
     console.log(chalk25.red(`
   Path not found: ${sourcePath}
@@ -11895,7 +12189,7 @@ async function sourcesAddCommand(sourcePath) {
   }
   const existing = loadSourcesConfig(dir);
   const alreadyConfigured = existing.some(
-    (s) => s.path && path36.resolve(dir, s.path) === absPath
+    (s) => s.path && path37.resolve(dir, s.path) === absPath
   );
   if (alreadyConfigured) {
     console.log(chalk25.yellow(`
@@ -11944,7 +12238,7 @@ async function sourcesRemoveCommand(name) {
 
 // src/commands/publish.ts
 import fs46 from "fs";
-import path37 from "path";
+import path38 from "path";
 import chalk26 from "chalk";
 import ora7 from "ora";
 init_config();
@@ -11959,10 +12253,10 @@ async function publishCommand() {
   const spinner = ora7("Generating project summary...").start();
   try {
     const fingerprint = await collectFingerprint(dir);
-    const claudeMd = readFileOrNull(path37.join(dir, "CLAUDE.md"));
+    const claudeMd = readFileOrNull(path38.join(dir, "CLAUDE.md"));
     const topLevelDirs = fingerprint.fileTree.filter((f) => f.endsWith("/") && !f.includes("/")).map((f) => f.replace(/\/$/, ""));
     const summary = {
-      name: fingerprint.packageName || path37.basename(dir),
+      name: fingerprint.packageName || path38.basename(dir),
       version: "1.0.0",
       description: fingerprint.description || "",
       languages: fingerprint.languages,
@@ -11974,7 +12268,7 @@ async function publishCommand() {
       summary.conventions = claudeMd.slice(0, 2e3);
     }
     try {
-      const pkgContent = readFileOrNull(path37.join(dir, "package.json"));
+      const pkgContent = readFileOrNull(path38.join(dir, "package.json"));
       if (pkgContent) {
         const pkg3 = JSON.parse(pkgContent);
         if (pkg3.scripts) {
@@ -11987,14 +12281,14 @@ async function publishCommand() {
       }
     } catch {
     }
-    const outputDir = path37.join(dir, ".caliber");
+    const outputDir = path38.join(dir, ".caliber");
     if (!fs46.existsSync(outputDir)) {
       fs46.mkdirSync(outputDir, { recursive: true });
     }
-    const outputPath = path37.join(outputDir, "summary.json");
+    const outputPath = path38.join(outputDir, "summary.json");
     fs46.writeFileSync(outputPath, JSON.stringify(summary, null, 2) + "\n", "utf-8");
     spinner.succeed("Project summary published");
-    console.log(`  ${chalk26.green("\u2713")} ${path37.relative(dir, outputPath)}`);
+    console.log(`  ${chalk26.green("\u2713")} ${path38.relative(dir, outputPath)}`);
     console.log(chalk26.dim("\n  Other projects can now reference this repo as a source."));
     console.log(chalk26.dim("  When they run `caliber init`, they'll read this summary automatically.\n"));
   } catch (err) {
@@ -12006,9 +12300,9 @@ async function publishCommand() {
 }
 
 // src/cli.ts
-var __dirname = path38.dirname(fileURLToPath(import.meta.url));
+var __dirname = path39.dirname(fileURLToPath(import.meta.url));
 var pkg = JSON.parse(
-  fs47.readFileSync(path38.resolve(__dirname, "..", "package.json"), "utf-8")
+  fs47.readFileSync(path39.resolve(__dirname, "..", "package.json"), "utf-8")
 );
 var program = new Command();
 var displayVersion = process.env.CALIBER_LOCAL ? `${pkg.version}-local` : pkg.version;
@@ -12096,16 +12390,14 @@ learn.command("add <content>").description("Add a learning directly (used by age
 
 // src/utils/version-check.ts
 import fs48 from "fs";
-import path39 from "path";
+import path40 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { execSync as execSync16, execFileSync as execFileSync3 } from "child_process";
 import chalk27 from "chalk";
 import ora8 from "ora";
 import confirm2 from "@inquirer/confirm";
-var __dirname_vc = path39.dirname(fileURLToPath2(import.meta.url));
-var pkg2 = JSON.parse(
-  fs48.readFileSync(path39.resolve(__dirname_vc, "..", "package.json"), "utf-8")
-);
+var __dirname_vc = path40.dirname(fileURLToPath2(import.meta.url));
+var pkg2 = JSON.parse(fs48.readFileSync(path40.resolve(__dirname_vc, "..", "package.json"), "utf-8"));
 function getChannel(version) {
   const match = version.match(/-(dev|next)\./);
   return match ? match[1] : "latest";
@@ -12128,8 +12420,11 @@ function isNewer(registry, current) {
 }
 function getInstalledVersion() {
   try {
-    const globalRoot = execSync16("npm root -g", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
-    const pkgPath = path39.join(globalRoot, "@rely-ai", "caliber", "package.json");
+    const globalRoot = execSync16("npm root -g", {
+      encoding: "utf-8",
+      stdio: ["pipe", "pipe", "pipe"]
+    }).trim();
+    const pkgPath = path40.join(globalRoot, "@rely-ai", "caliber", "package.json");
     return JSON.parse(fs48.readFileSync(pkgPath, "utf-8")).version;
   } catch {
     return null;
@@ -12164,17 +12459,18 @@ Run ${chalk27.bold(`npm install -g @rely-ai/caliber${installTag}`)} to upgrade.
       );
       return;
     }
-    console.log(
-      chalk27.yellow(`
-Update available: ${current} -> ${latest}`)
-    );
-    const shouldUpdate = await confirm2({ message: "Would you like to update now? (Y/n)", default: true });
+    console.log(chalk27.yellow(`
+Update available: ${current} -> ${latest}`));
+    const shouldUpdate = await confirm2({
+      message: "Would you like to update now? (Y/n)",
+      default: true
+    });
     if (!shouldUpdate) {
       console.log();
       return;
     }
     const tag = channel === "latest" ? latest : channel;
-    if (!/^[\w.\-]+$/.test(tag)) return;
+    if (!/^[\w.-]+$/.test(tag)) return;
     const spinner = ora8("Updating caliber...").start();
     try {
       execFileSync3("npm", ["install", "-g", `@rely-ai/caliber@${tag}`], {
@@ -12185,8 +12481,10 @@ Update available: ${current} -> ${latest}`)
       const installed = getInstalledVersion();
       if (installed !== latest) {
         spinner.fail(`Update incomplete \u2014 got ${installed ?? "unknown"}, expected ${latest}`);
-        console.log(chalk27.yellow(`Run ${chalk27.bold(`npm install -g @rely-ai/caliber@${tag}`)} manually.
-`));
+        console.log(
+          chalk27.yellow(`Run ${chalk27.bold(`npm install -g @rely-ai/caliber@${tag}`)} manually.
+`)
+        );
         return;
       }
       spinner.succeed(chalk27.green(`Updated to ${latest}`));