@skillsmith/cli 0.8.5 → 0.8.6

package/dist/cli.js

@@ -782,7 +782,7 @@ var init_is_inside_container = __esm({
 
 // ../../node_modules/is-wsl/index.js
 import process4 from "node:process";
-import os6 from "node:os";
+import os5 from "node:os";
 import fs14 from "node:fs";
 var isWsl, is_wsl_default;
 var init_is_wsl = __esm({
@@ -792,7 +792,7 @@ var init_is_wsl = __esm({
       if (process4.platform !== "linux") {
         return false;
       }
-      if (os6.release().toLowerCase().includes("microsoft")) {
+      if (os5.release().toLowerCase().includes("microsoft")) {
         if (isInsideContainer()) {
           return false;
         }
@@ -1332,19 +1332,19 @@ var init_open = __esm({
       }
       const subprocess = childProcess3.spawn(command, cliArguments, childProcessOptions);
       if (options.wait) {
-        return new Promise((resolve19, reject) => {
+        return new Promise((resolve20, reject) => {
           subprocess.once("error", reject);
           subprocess.once("close", (exitCode) => {
             if (!options.allowNonzeroExitCode && exitCode !== 0) {
               reject(new Error(`Exited with code ${exitCode}`));
               return;
             }
-            resolve19(subprocess);
+            resolve20(subprocess);
           });
         });
       }
       if (isFallbackAttempt) {
-        return new Promise((resolve19, reject) => {
+        return new Promise((resolve20, reject) => {
           subprocess.once("error", reject);
           subprocess.once("spawn", () => {
             subprocess.once("close", (exitCode) => {
@@ -1354,17 +1354,17 @@ var init_open = __esm({
                 return;
               }
               subprocess.unref();
-              resolve19(subprocess);
+              resolve20(subprocess);
             });
           });
         });
       }
       subprocess.unref();
-      return new Promise((resolve19, reject) => {
+      return new Promise((resolve20, reject) => {
         subprocess.once("error", reject);
         subprocess.once("spawn", () => {
           subprocess.off("error", reject);
-          resolve19(subprocess);
+          resolve20(subprocess);
         });
       });
     };
@@ -1452,7 +1452,7 @@ import { homedir as homedir8 } from "os";
 // ../core/dist/src/install/paths.js
 import { existsSync } from "node:fs";
 import { homedir } from "node:os";
-import { join } from "node:path";
+import { isAbsolute, join, resolve } from "node:path";
 var CLIENT_NATIVE_PATHS = {
   "claude-code": join(homedir(), ".claude", "skills"),
   cursor: join(homedir(), ".cursor", "skills"),
@@ -1461,7 +1461,8 @@ var CLIENT_NATIVE_PATHS = {
   agents: join(homedir(), ".agents", "skills"),
   opencode: join(homedir(), ".config", "opencode", "skills"),
   hermes: join(homedir(), ".hermes", "skills"),
-  grok: join(homedir(), ".grok", "skills")
+  grok: join(homedir(), ".grok", "skills"),
+  antigravity: join(homedir(), ".gemini", "config", "skills")
 };
 var CANONICAL_CLIENT = "claude-code";
 var CLIENT_DISPLAY_LABELS = {
@@ -1472,7 +1473,8 @@ var CLIENT_DISPLAY_LABELS = {
   agents: "your agent",
   opencode: "OpenCode",
   hermes: "Hermes",
-  grok: "Grok Build"
+  grok: "Grok Build",
+  antigravity: "Antigravity"
 };
 var CLIENT_IDS = Object.freeze([
   "claude-code",
@@ -1482,7 +1484,8 @@ var CLIENT_IDS = Object.freeze([
   "agents",
   "opencode",
   "hermes",
-  "grok"
+  "grok",
+  "antigravity"
 ]);
 function getCanonicalInstallPath() {
   return CLIENT_NATIVE_PATHS[CANONICAL_CLIENT];
@@ -1515,6 +1518,108 @@ function enumerateHarnessPresence() {
     };
   });
 }
+var COMPANION_AGENT_TARGETS = {
+  "claude-code": {
+    dir: join(homedir(), ".claude", "agents"),
+    fileMode: "flat",
+    filenamePattern: "{name}-specialist.md"
+  },
+  cursor: {
+    // AGENT_SHIM_TARGETS.cursor is null (no distinct value) — defaults like
+    // every client with no independent evidence. See doc comment above.
+    dir: join(homedir(), ".claude", "agents"),
+    fileMode: "flat",
+    filenamePattern: "{name}-specialist.md"
+  },
+  copilot: {
+    // PR-review finding (BLOCKING): both dir AND filename are now cited
+    // from AGENT_SHIM_TARGETS.copilot (agent-harness-targets.ts:156,
+    // `skillsmith-agent.agent.md`) and shims.ts's own doc comment ("Copilot
+    // `.agent.md` (Copilot cloud-agent + CLI surfaces, which do not read
+    // `.claude/agents`)") -- this codebase already has independently
+    // verified evidence that Copilot's real companion-agent format is
+    // `<name>.agent.md`, not the generic `-specialist.md` suffix every
+    // other client here defaults to. Writing plain `.md` risked producing
+    // an undiscoverable companion file.
+    dir: join(homedir(), ".copilot", "agents"),
+    fileMode: "flat",
+    filenamePattern: "{name}.agent.md"
+  },
+  windsurf: {
+    // No AGENT_SHIM_TARGETS entry exists for windsurf (not a HarnessId
+    // member) — defaults to today's actual behavior.
+    dir: join(homedir(), ".claude", "agents"),
+    fileMode: "flat",
+    filenamePattern: "{name}-specialist.md"
+  },
+  agents: {
+    // No AGENT_SHIM_TARGETS entry exists for `agents` (not a HarnessId
+    // member) — defaults to today's actual behavior.
+    dir: join(homedir(), ".claude", "agents"),
+    fileMode: "flat",
+    filenamePattern: "{name}-specialist.md"
+  },
+  opencode: {
+    // Directory cited from AGENT_SHIM_TARGETS.opencode (agent-harness-targets.ts)
+    // as independent evidence of OpenCode's own agents-dir convention.
+    // Filename pattern is this map's own naming, not copied from that table.
+    dir: join(homedir(), ".config", "opencode", "agents"),
+    fileMode: "flat",
+    filenamePattern: "{name}-specialist.md"
+  },
+  hermes: {
+    // No AGENT_SHIM_TARGETS entry exists for hermes (not a HarnessId
+    // member) — defaults to today's actual behavior.
+    dir: join(homedir(), ".claude", "agents"),
+    fileMode: "flat",
+    filenamePattern: "{name}-specialist.md"
+  },
+  grok: {
+    // No AGENT_SHIM_TARGETS entry exists for grok (not a HarnessId member)
+    // — defaults to today's actual behavior.
+    dir: join(homedir(), ".claude", "agents"),
+    fileMode: "flat",
+    filenamePattern: "{name}-specialist.md"
+  },
+  antigravity: {
+    // SMI-5982 (Wave 6): directory-package mode, not flat — confirmed via a
+    // live web search against antigravity.google/docs/cli/commands/agents
+    // (2026-08-11): each agent is a directory `<name>/` containing a single
+    // `agent.md` (YAML frontmatter: `name`, `description` only — no
+    // `subagent:` field or equivalent exists in the real schema, confirming
+    // the plan's decision NOT to emit one). `dir` is intentionally a
+    // RELATIVE path (`.agents/agents`, resolved against the process's
+    // invocation directory by Node's fs calls) — project-scoped, per Step 1
+    // of the SMI-5982 plan: this CLI has no existing global-vs-project
+    // install-mode distinction to hook into, so this defaults to
+    // project-scoped rather than inventing scope-detection logic. Global
+    // scope (`~/.gemini/config/agents/`) is an explicit fast-follow.
+    dir: join(".agents", "agents"),
+    fileMode: "directory-package",
+    filenamePattern: "agent.md"
+  }
+};
+function getCompanionAgentTarget(client = CANONICAL_CLIENT) {
+  return COMPANION_AGENT_TARGETS[client];
+}
+function resolveCompanionAgentDir(client = CANONICAL_CLIENT) {
+  return getCompanionAgentTarget(client).dir;
+}
+function resolveCompanionAgentPath(skillName, client = CANONICAL_CLIENT, baseDir) {
+  const target = getCompanionAgentTarget(client);
+  if (target.fileMode === "directory-package" && baseDir === void 0) {
+    throw new Error(`resolveCompanionAgentPath: client "${client}" uses directory-package mode with a relative companion-agent directory, so an explicit baseDir is required \u2014 it cannot safely default to process.cwd() (a long-running MCP server's cwd does not track the calling client's real project; see SMI-5982 PR review).`);
+  }
+  const resolvedDir = isAbsolute(target.dir) ? target.dir : resolve(baseDir, target.dir);
+  if (target.fileMode === "directory-package") {
+    if (skillName === "" || skillName === "." || skillName === ".." || skillName.includes("/") || skillName.includes("\\")) {
+      throw new Error(`Unsafe skill name for directory-package companion path: ${JSON.stringify(skillName)}`);
+    }
+    return join(resolvedDir, skillName, target.filenamePattern);
+  }
+  const filename = target.filenamePattern.replace("{name}", skillName);
+  return join(resolvedDir, filename);
+}
 
 // ../core/dist/src/install/fan-out.js
 import { homedir as homedir2 } from "node:os";
@@ -2700,12 +2805,12 @@ var AGENT_TOOL_PROFILE_NAMES = [
 
 // ../core/dist/src/install/agent-home-relocate.js
 import { homedir as homedir4 } from "node:os";
-import { isAbsolute, join as join6, relative as relative2 } from "node:path";
+import { isAbsolute as isAbsolute2, join as join6, relative as relative2 } from "node:path";
 function relocateUnderHome(absolutePath, homeDir) {
   if (!homeDir)
     return absolutePath;
   const rel = relative2(homedir4(), absolutePath);
-  if (rel.startsWith("..") || isAbsolute(rel))
+  if (rel.startsWith("..") || isAbsolute2(rel))
     return absolutePath;
   return join6(homeDir, rel);
 }
@@ -3694,7 +3799,7 @@ import { existsSync as existsSync10, readFileSync as readFileSync8, rmdirSync, u
 
 // ../core/dist/src/install/agent-manifest-path-guard.js
 import { homedir as homedir7 } from "node:os";
-import { join as join16, relative as relative3, resolve as resolve2, sep } from "node:path";
+import { join as join16, relative as relative3, resolve as resolve3, sep } from "node:path";
 function computeAllowedPathSuffixes() {
   const suffixes = /* @__PURE__ */ new Set();
   const home2 = homedir7();
@@ -3728,7 +3833,7 @@ function allowedPathSuffixes() {
   return cachedSuffixes;
 }
 function isAllowedManifestEntryPath(path27) {
-  const normalized = resolve2(path27);
+  const normalized = resolve3(path27);
   for (const suffix of allowedPathSuffixes()) {
     if (normalized.endsWith(sep + suffix) || normalized === suffix)
       return true;
@@ -3736,8 +3841,8 @@ function isAllowedManifestEntryPath(path27) {
   return false;
 }
 function isAllowedManifestBackupPath(backupPath) {
-  const backupsDir2 = resolve2(getAgentInstallBackupsDir());
-  const normalized = resolve2(backupPath);
+  const backupsDir2 = resolve3(getAgentInstallBackupsDir());
+  const normalized = resolve3(backupPath);
   return normalized === backupsDir2 || normalized.startsWith(backupsDir2 + sep);
 }
 
@@ -19985,7 +20090,7 @@ function validateUrl(url2) {
 }
 
 // ../core/dist/src/validation/path-validators.js
-import { resolve as resolve3 } from "path";
+import { resolve as resolve4 } from "path";
 function validatePath(path27, rootDir) {
   if (!path27) {
     throw new ValidationError("Path cannot be empty", "EMPTY_PATH");
@@ -19993,8 +20098,8 @@ function validatePath(path27, rootDir) {
   if (!rootDir) {
     throw new ValidationError("Root directory cannot be empty", "EMPTY_ROOT_DIR");
   }
-  const normalizedPath = resolve3(rootDir, path27);
-  const normalizedRoot = resolve3(rootDir);
+  const normalizedPath = resolve4(rootDir, path27);
+  const normalizedRoot = resolve4(rootDir);
   const isWithinRoot = normalizedPath.startsWith(normalizedRoot + "/") || normalizedPath === normalizedRoot;
   if (!isWithinRoot) {
     throw new ValidationError(`Path traversal detected: ${path27}`, "PATH_TRAVERSAL", {
@@ -22016,12 +22121,12 @@ var logger3 = createLogger("Sanitization");
 
 // ../core/dist/src/security/pathValidation.js
 init_logger();
-import { resolve as resolve4, normalize, dirname as dirname10, isAbsolute as isAbsolute2 } from "path";
+import { resolve as resolve5, normalize, dirname as dirname10, isAbsolute as isAbsolute3 } from "path";
 import { homedir as homedir9 } from "os";
 var logger4 = createLogger("PathValidation");
 var DEFAULT_ALLOWED_DIRS = [
-  resolve4(homedir9(), ".skillsmith"),
-  resolve4(homedir9(), ".claude")
+  resolve5(homedir9(), ".skillsmith"),
+  resolve5(homedir9(), ".claude")
 ];
 var TEMP_DIRS = ["/tmp", "/var/tmp", "/private/tmp", process.env.TMPDIR].filter(Boolean);
 
@@ -22407,7 +22512,7 @@ var QueueManager = class {
       onMetricsUpdate(false);
       throw new RateLimitQueueFullError(key, this.config.maxQueueSize);
     }
-    return new Promise((resolve19, reject) => {
+    return new Promise((resolve20, reject) => {
       const requestId = randomUUID();
       const queuedAt = Date.now();
       const timeoutHandle = setTimeout(() => {
@@ -22421,7 +22526,7 @@ var QueueManager = class {
       }, this.config.queueTimeoutMs);
       const request = {
         id: requestId,
-        resolve: resolve19,
+        resolve: resolve20,
         reject,
         cost,
         queuedAt,
@@ -22861,7 +22966,7 @@ function calculateDelay(attempt, initialDelayMs, maxDelayMs, backoffMultiplier,
   return delay;
 }
 function sleep2(ms) {
-  return new Promise((resolve19) => setTimeout(resolve19, ms));
+  return new Promise((resolve20) => setTimeout(resolve20, ms));
 }
 async function withRetry(fn, config2 = {}) {
   const { maxRetries = DEFAULT_RETRY_CONFIG.maxRetries, initialDelayMs = DEFAULT_RETRY_CONFIG.initialDelayMs, maxDelayMs = DEFAULT_RETRY_CONFIG.maxDelayMs, backoffMultiplier = DEFAULT_RETRY_CONFIG.backoffMultiplier, jitter = DEFAULT_RETRY_CONFIG.jitter, isRetryable = isTransientError, onRetry } = config2;
@@ -23163,7 +23268,7 @@ var BaseSourceAdapter = class {
    * Delay helper
    */
   delay(ms) {
-    return new Promise((resolve19) => setTimeout(resolve19, ms));
+    return new Promise((resolve20) => setTimeout(resolve20, ms));
   }
   /**
    * Validate configuration
@@ -23188,7 +23293,7 @@ var log4 = createLogger("RawUrlAdapter");
 // ../core/dist/src/sources/LocalFilesystemAdapter.js
 init_logger();
 import { createHash as createHash2 } from "crypto";
-import { basename as basename2, dirname as dirname12, resolve as resolve5, join as join19 } from "path";
+import { basename as basename2, dirname as dirname12, resolve as resolve6, join as join19 } from "path";
 
 // ../core/dist/src/sources/LocalFilesystemAdapter.helpers.js
 import { promises as fs2 } from "fs";
@@ -23590,7 +23695,7 @@ var LocalFilesystemAdapter = class extends BaseSourceAdapter {
       throw new Error("Invalid location: must specify path or repo");
     }
     validatePath(resolvedPath, this.rootDir);
-    const absolutePath = resolve5(resolvedPath);
+    const absolutePath = resolve6(resolvedPath);
     const realResult = await resolveSafeRealpath(absolutePath, this.rootDir, {
       allowSymlinksOutsideRoot: this.allowSymlinksOutsideRoot
     });
@@ -24198,7 +24303,7 @@ function isBetterSqlite3Available() {
 
 // ../core/dist/src/db/drivers/sqljsDriver.js
 import { createRequire as createRequire2 } from "node:module";
-import { existsSync as existsSync13, readFileSync as readFileSync10, writeFileSync as writeFileSync10 } from "node:fs";
+import { existsSync as existsSync13, readFileSync as readFileSync10, writeFileSync as writeFileSync10, renameSync as renameSync3, unlinkSync as unlinkSync3 } from "node:fs";
 
 // ../core/dist/src/db/drivers/corruption.js
 import { existsSync as existsSync12, renameSync as renameSync2 } from "node:fs";
@@ -24420,12 +24525,31 @@ var SqlJsDatabaseAdapter = class {
   }
   /**
    * Persist the in-memory database to file
+   *
+   * SMI-5997: writes atomically (temp file + rename) rather than a direct
+   * writeFileSync to filePath. A direct write truncates the target file
+   * before the new bytes land; a process kill/crash mid-write (OOM, SIGKILL,
+   * machine sleep) during that window leaves a 0-byte file on disk, which
+   * openDatabaseAsync() then silently misclassifies as a fresh/legacy import
+   * instead of a corrupt file — see schema.ts. rename() is atomic on the
+   * same filesystem, so the target is only ever fully-old or fully-new.
    */
   persist() {
     if (this._memory || !this.filePath)
       return;
     const data = this.db.export();
-    writeFileSync10(this.filePath, Buffer.from(data));
+    const tmpPath = `${this.filePath}.tmp`;
+    try {
+      writeFileSync10(tmpPath, Buffer.from(data));
+      renameSync3(tmpPath, this.filePath);
+    } catch (error46) {
+      try {
+        if (existsSync13(tmpPath))
+          unlinkSync3(tmpPath);
+      } catch {
+      }
+      throw error46;
+    }
   }
   /**
    * Export the database as a Uint8Array
@@ -24642,7 +24766,7 @@ function findSimilarBruteForceFromMap(embeddings, queryEmbedding, topK) {
 }
 
 // ../core/dist/src/embeddings/hnsw-search.js
-import { existsSync as existsSync14, mkdirSync as mkdirSync8, readFileSync as readFileSync11, renameSync as renameSync3, unlinkSync as unlinkSync3, writeFileSync as writeFileSync11 } from "fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync8, readFileSync as readFileSync11, renameSync as renameSync4, unlinkSync as unlinkSync4, writeFileSync as writeFileSync11 } from "fs";
 import { dirname as dirname13, join as join21 } from "path";
 var cachedCtor = null;
 async function loadHnswCtor() {
@@ -24704,7 +24828,7 @@ function readLabels(labelsPath) {
 function writeAtomic(tmp, final, contents) {
   mkdirSync8(dirname13(tmp), { recursive: true });
   writeFileSync11(tmp, contents, typeof contents === "string" ? { encoding: "utf-8" } : void 0);
-  renameSync3(tmp, final);
+  renameSync4(tmp, final);
 }
 async function loadOrBuildHnsw(args) {
   const Ctor = await loadHnswCtor();
@@ -24738,11 +24862,11 @@ async function loadOrBuildHnsw(args) {
     } catch (err) {
       try {
         if (existsSync14(paths.bin))
-          unlinkSync3(paths.bin);
+          unlinkSync4(paths.bin);
         if (existsSync14(paths.meta))
-          unlinkSync3(paths.meta);
+          unlinkSync4(paths.meta);
         if (existsSync14(paths.labels))
-          unlinkSync3(paths.labels);
+          unlinkSync4(paths.labels);
       } catch {
       }
       try {
@@ -24805,7 +24929,7 @@ function createHandle(args) {
       return;
     }
     args.index.writeIndexSync(args.paths.binTmp);
-    renameSync3(args.paths.binTmp, args.paths.bin);
+    renameSync4(args.paths.binTmp, args.paths.bin);
     const labelsArr = Array.from(args.labelToId.entries());
     writeAtomic(args.paths.labelsTmp, args.paths.labels, JSON.stringify(labelsArr));
     const meta3 = {
@@ -26298,18 +26422,18 @@ function getState(surface) {
   return state;
 }
 function closeStream(stream) {
-  return new Promise((resolve19) => {
-    const done = () => resolve19();
+  return new Promise((resolve20) => {
+    const done = () => resolve20();
     stream.once("error", done);
     stream.end(done);
   });
 }
 function openStream(filePath) {
-  return new Promise((resolve19, reject) => {
+  return new Promise((resolve20, reject) => {
     const stream = createWriteStream(filePath, { flags: "a" });
     const onOpen = () => {
       cleanup();
-      resolve19(stream);
+      resolve20(stream);
     };
     const onError = (err) => {
       cleanup();
@@ -26329,12 +26453,12 @@ function openStream(filePath) {
   });
 }
 function writeChunk(stream, buf) {
-  return new Promise((resolve19, reject) => {
+  return new Promise((resolve20, reject) => {
     stream.write(buf, (err) => {
       if (err)
         reject(err);
       else
-        resolve19();
+        resolve20();
     });
   });
 }
@@ -27420,10 +27544,10 @@ function addEnvironmentDeps(declared, result) {
     }
   }
   if (declared.environment.os) {
-    for (const os16 of declared.environment.os) {
+    for (const os15 of declared.environment.os) {
       result.push({
         depType: "env_os",
-        depTarget: os16,
+        depTarget: os15,
         depVersion: null,
         depSource: "declared",
         confidence: 1,
@@ -27483,7 +27607,6 @@ import { createHash as createHash7 } from "crypto";
 // ../core/dist/src/services/skill-installation.io.js
 import * as fs4 from "fs/promises";
 import * as path3 from "path";
-import * as os2 from "os";
 
 // ../core/dist/src/utils/safe-fs.js
 import { open, lstat as lstat2, constants as constants2 } from "fs/promises";
@@ -27920,7 +28043,7 @@ async function mkdirNoFollow(baseDir, dir) {
     await ensureDirNoFollow(current);
   }
 }
-async function writeInstallFiles(installPath, skillsDir, skillName, finalSkillContent, subSkillFiles, subagentContent) {
+async function writeInstallFiles(installPath, skillsDir, skillName, finalSkillContent, subSkillFiles, subagentContent, client = CANONICAL_CLIENT, companionBaseDir) {
   const writtenFiles = [];
   let subagentPath;
   const resolvedInstall = path3.resolve(installPath);
@@ -27952,9 +28075,9 @@ async function writeInstallFiles(installPath, skillsDir, skillName, finalSkillCo
       }));
     }
     if (subagentContent) {
-      const agentsDir = path3.join(os2.homedir(), ".claude", "agents");
+      subagentPath = resolveCompanionAgentPath(skillName, client, companionBaseDir);
+      const agentsDir = path3.dirname(subagentPath);
       await fs4.mkdir(agentsDir, { recursive: true });
-      subagentPath = path3.join(agentsDir, skillName + "-specialist.md");
       await safeWriteFile(subagentPath, subagentContent);
       writtenFiles.push(subagentPath);
     }
@@ -27963,6 +28086,10 @@ async function writeInstallFiles(installPath, skillsDir, skillName, finalSkillCo
       await fs4.unlink(filePath).catch(() => {
       });
     }
+    if (subagentPath && getCompanionAgentTarget(client).fileMode === "directory-package") {
+      await fs4.rmdir(path3.dirname(subagentPath)).catch(() => {
+      });
+    }
     if (pathValidated) {
       await fs4.rm(installPath, { recursive: true, force: true }).catch(() => {
       });
@@ -28160,8 +28287,11 @@ async function performUninstall(params) {
     } catch {
     }
     onProgress("manifest", "Updating manifest");
-    delete manifestData.installedSkills[manifestKey];
-    await manifest.save(manifestData);
+    await manifest.updateSafely((current) => {
+      const next = { ...current, installedSkills: { ...current.installedSkills } };
+      delete next.installedSkills[manifestKey];
+      return next;
+    });
     onProgress("done", "Uninstall complete");
     return {
       success: true,
@@ -28225,7 +28355,12 @@ var KNOWN_ERROR_PREFIXES = [
   "Refusing to write to symlink",
   "Refusing to write to hardlinked file",
   "Install path escapes skills directory",
-  "Cannot skip security scan"
+  "Cannot skip security scan",
+  // SMI-5982 PR-review follow-up: resolveCompanionAgentPath()'s required-baseDir guard
+  // (install/paths.ts) — must surface verbatim so a directory-package-mode client (e.g.
+  // a private-registry install with no per-call cwd input) fails closed with a
+  // diagnosable message instead of the generic fallback below.
+  "uses directory-package mode"
 ];
 function sanitizeInstallError(error46) {
   if (error46 instanceof Error) {
@@ -28238,7 +28373,7 @@ function sanitizeInstallError(error46) {
 
 // ../core/dist/src/services/skill-installation.service.js
 import * as path7 from "path";
-import * as os3 from "os";
+import * as os2 from "os";
 
 // ../core/dist/src/services/skill-installation.types.js
 var TRUST_TIER_SCANNER_OPTIONS = {
@@ -28356,7 +28491,7 @@ function skillNameFromSkillId(skillId) {
   return name;
 }
 async function installFromContent(params) {
-  const { db, skillsDir, manifest, client, onProgress, skillId, version: version2, content, force = false } = params;
+  const { db, skillsDir, manifest, client, onProgress, skillId, version: version2, content, force = false, companionBaseDir } = params;
   const skillName = skillNameFromSkillId(skillId);
   const trustTier = CONTENT_INSTALL_TRUST_TIER;
   if (skillName === null) {
@@ -28433,7 +28568,7 @@ async function installFromContent(params) {
     const teamAuthoredSubFiles = Object.entries(content).filter(([filename]) => filename !== "SKILL.md").map(([filename, fileContent]) => ({ filename, content: fileContent }));
     const generatedNoCollision = subSkillFiles.filter((generated) => !teamAuthoredSubFiles.some((team) => team.filename === generated.filename));
     onProgress("write", "Writing skill files");
-    const writeResult = await writeInstallFiles(installPath, skillsDir, skillName, finalSkillContent, [...generatedNoCollision, ...teamAuthoredSubFiles], subagentContent);
+    const writeResult = await writeInstallFiles(installPath, skillsDir, skillName, finalSkillContent, [...generatedNoCollision, ...teamAuthoredSubFiles], subagentContent, client, companionBaseDir);
     if (writeResult.subagentPath) {
       optimizationInfo.subagentPath = writeResult.subagentPath;
     }
@@ -28506,6 +28641,7 @@ function collectTrendWarnings(params) {
 // ../core/dist/src/services/skill-manifest.js
 import * as fs6 from "fs/promises";
 import * as path6 from "path";
+import { randomUUID as randomUUID3 } from "node:crypto";
 var MANIFEST_LOCK_TIMEOUT_MS = 3e4;
 var MANIFEST_LOCK_RETRY_MS = 100;
 var ManifestManager = class {
@@ -28513,19 +28649,56 @@ var ManifestManager = class {
   constructor(manifestPath) {
     this.manifestPath = manifestPath;
   }
+  /**
+   * SMI-6007: distinguishes "no manifest yet" (ENOENT — legitimate first-run
+   * case, safe to synthesize an empty manifest) from "a manifest file exists
+   * but couldn't be read/parsed" (corrupt JSON, permission error, I/O
+   * failure). The latter used to be silently swallowed into the same empty
+   * manifest, which is a real data-loss risk: a caller that then `save()`s
+   * that empty snapshot back out would erase every previously-recorded
+   * install. Now it throws loudly instead, so a corrupt manifest surfaces as
+   * an error rather than silently wiping state on the next write.
+   */
   async load() {
+    let content;
+    try {
+      content = await fs6.readFile(this.manifestPath, "utf-8");
+    } catch (error46) {
+      if (error46.code === "ENOENT") {
+        return { version: "1.0.0", installedSkills: {} };
+      }
+      throw error46;
+    }
     try {
-      const content = await fs6.readFile(this.manifestPath, "utf-8");
       return JSON.parse(content);
-    } catch {
-      return { version: "1.0.0", installedSkills: {} };
+    } catch (error46) {
+      throw new Error("Manifest file at " + this.manifestPath + " exists but is corrupt/unparseable: " + (error46 instanceof Error ? error46.message : String(error46)));
     }
   }
+  /**
+   * SMI-6007: the temp filename now includes a `randomUUID()` suffix (not
+   * just `process.pid`) — two concurrent `save()` calls in the same process
+   * previously collided on an identical `.tmp.<pid>` path, letting one
+   * call's temp file win the write while the other's `rename()` either
+   * clobbered it mid-flight or failed outright. Each call now owns a
+   * uniquely-named temp file for its own lifetime. The write+rename is
+   * wrapped in try/catch so a failure best-effort removes only *this
+   * invocation's* temp file before rethrowing the original error (mirrors
+   * `sqljsDriver.ts`'s `persist()`, SMI-5997) — the error is never swallowed.
+   */
   async save(manifest) {
     await fs6.mkdir(path6.dirname(this.manifestPath), { recursive: true });
-    const tempPath = this.manifestPath + ".tmp." + process.pid;
-    await fs6.writeFile(tempPath, JSON.stringify(manifest, null, 2));
-    await fs6.rename(tempPath, this.manifestPath);
+    const tempPath = this.manifestPath + ".tmp." + process.pid + "." + randomUUID3();
+    try {
+      await fs6.writeFile(tempPath, JSON.stringify(manifest, null, 2));
+      await fs6.rename(tempPath, this.manifestPath);
+    } catch (error46) {
+      try {
+        await fs6.unlink(tempPath);
+      } catch {
+      }
+      throw error46;
+    }
   }
   async acquireLock() {
     const lockPath = this.manifestPath + ".lock";
@@ -28547,7 +28720,7 @@ var ManifestManager = class {
           } catch {
             continue;
           }
-          await new Promise((resolve19) => setTimeout(resolve19, MANIFEST_LOCK_RETRY_MS));
+          await new Promise((resolve20) => setTimeout(resolve20, MANIFEST_LOCK_RETRY_MS));
         } else {
           throw error46;
         }
@@ -28574,8 +28747,8 @@ var ManifestManager = class {
 };
 
 // ../core/dist/src/services/skill-installation.service.js
-var DEFAULT_SKILLS_DIR2 = path7.join(os3.homedir(), ".claude", "skills");
-var DEFAULT_MANIFEST_PATH2 = path7.join(os3.homedir(), ".skillsmith", "manifest.json");
+var DEFAULT_SKILLS_DIR2 = path7.join(os2.homedir(), ".claude", "skills");
+var DEFAULT_MANIFEST_PATH2 = path7.join(os2.homedir(), ".skillsmith", "manifest.json");
 var SkillInstallationService = class {
   db;
   skillRepo;
@@ -28590,6 +28763,7 @@ var SkillInstallationService = class {
   riskHistoryRepo;
   aiDefenceFeedback;
   client;
+  companionBaseDir;
   constructor(params) {
     this.db = params.db;
     this.skillRepo = params.skillRepo;
@@ -28605,6 +28779,7 @@ var SkillInstallationService = class {
     this.aiDefenceFeedback = params.aiDefenceFeedback;
     this.sessionInstalledSkillIds = params.sessionInstalledSkillIds ?? [];
     this.client = params.client ?? CANONICAL_CLIENT;
+    this.companionBaseDir = params.companionBaseDir;
   }
   async install(skillId, options = {}) {
     let trustTier = "unknown";
@@ -28780,7 +28955,7 @@ var SkillInstallationService = class {
       }
       this.onProgress("write", "Writing skill files");
       const subSkillsNoCollision = subSkillFiles.filter((s) => !optionalFiles.filesToWrite.some((o) => o.filename === s.filename));
-      const writeResult = await writeInstallFiles(installPath, this.skillsDir, skillName, finalSkillContent, [...subSkillsNoCollision, ...optionalFiles.filesToWrite], subagentContent);
+      const writeResult = await writeInstallFiles(installPath, this.skillsDir, skillName, finalSkillContent, [...subSkillsNoCollision, ...optionalFiles.filesToWrite], subagentContent, this.client, this.companionBaseDir);
       if (writeResult.subagentPath) {
         optimizationInfo.subagentPath = writeResult.subagentPath;
       }
@@ -28878,6 +29053,7 @@ var SkillInstallationService = class {
       skillsDir: this.skillsDir,
       manifest: this.manifest,
       client: this.client,
+      companionBaseDir: this.companionBaseDir,
       onProgress: this.onProgress
     });
   }
@@ -28980,6 +29156,94 @@ function buildEmptyStackGuidance() {
   return "No technology stack could be derived for recommendations \u2014 this usually means a non-Node project, a stack with no production dependencies, or an unsupported language, not a backend or registry problem. Provide project context (a short description of the project or its tooling) or an explicit list of installed/currently-used skills, then try again.";
 }
 
+// ../core/dist/src/services/context-words.js
+var MAX_CONTEXT_WORDS = 5;
+var CONTEXT_STOPWORDS = /* @__PURE__ */ new Set([
+  // 2-letter
+  "an",
+  "is",
+  "it",
+  "be",
+  "to",
+  "of",
+  "in",
+  "on",
+  "at",
+  "as",
+  "or",
+  "if",
+  "so",
+  "no",
+  "do",
+  "am",
+  "we",
+  "us",
+  "he",
+  "my",
+  "up",
+  // 3-letter
+  "the",
+  "and",
+  "but",
+  "not",
+  "did",
+  "has",
+  "had",
+  "she",
+  "him",
+  "her",
+  "its",
+  "our",
+  "all",
+  "few",
+  "out",
+  "off",
+  "via",
+  "per",
+  "own",
+  "too",
+  "yet",
+  "nor",
+  "you",
+  "are",
+  "was",
+  "for",
+  "may",
+  "who",
+  "why",
+  "how"
+  // Code-review correction (SMI-5986): "any" (TS/SQL keyword), "let"
+  // (JS/Rust keyword), and "can" (CAN-bus acronym) were removed from this
+  // set — each is a real technical term this fix exists to stop dropping,
+  // same class as "git"/"ci"/"aws"/"sql". Leaving them in would have
+  // contradicted this list's own documented promise above.
+]);
+function isKeepChar(ch) {
+  return ch >= "a" && ch <= "z" || ch >= "0" && ch <= "9" || ch === "+" || ch === "#";
+}
+function hasAlphaNumeric(word) {
+  for (let i = 0; i < word.length; i++) {
+    const ch = word[i];
+    if (ch >= "a" && ch <= "z" || ch >= "0" && ch <= "9")
+      return true;
+  }
+  return false;
+}
+function stripEdgePunctuation(word) {
+  let start = 0;
+  while (start < word.length && !isKeepChar(word[start]))
+    start++;
+  let end = word.length;
+  while (end > start && !isKeepChar(word[end - 1]))
+    end--;
+  return word.slice(start, end);
+}
+function extractContextWords(projectContext, maxWords = MAX_CONTEXT_WORDS) {
+  if (!projectContext)
+    return [];
+  return projectContext.toLowerCase().split(/\s+/).map(stripEdgePunctuation).filter((word) => word.length >= 2 && hasAlphaNumeric(word) && !(word.length <= 3 && CONTEXT_STOPWORDS.has(word))).slice(0, maxWords);
+}
+
 // ../core/dist/src/db/schema-sql.js
 var SCHEMA_SQL = `
 -- Enable WAL mode for better concurrent performance
@@ -29584,7 +29848,7 @@ function runMigrations(db) {
           throw error46;
         }
       }
-      db.prepare("INSERT INTO schema_version (version) VALUES (?)").run(migration.version);
+      db.prepare("INSERT OR IGNORE INTO schema_version (version) VALUES (?)").run(migration.version);
       migrationsRun++;
     }
   }
@@ -29615,7 +29879,7 @@ function runMigrationsSafe(db) {
             throw error46;
           }
         }
-        db.prepare("INSERT INTO schema_version (version) VALUES (?)").run(migration.version);
+        db.prepare("INSERT OR IGNORE INTO schema_version (version) VALUES (?)").run(migration.version);
         migrationsRun++;
       } catch (error46) {
         console.warn(`Migration ${migration.version} failed:`, error46);
@@ -29636,11 +29900,23 @@ function initializeSchema(db) {
   db.prepare("INSERT OR IGNORE INTO schema_version (version) VALUES (1)").run();
   runMigrations(db);
 }
+function assertLegacyImportHasTables(db, path27) {
+  const tableCount = db.prepare("SELECT count(*) as count FROM sqlite_master WHERE type='table'").get();
+  if (!tableCount || tableCount.count === 0) {
+    throw new Error(`[Skillsmith] Database at ${path27} has no tables and no version metadata \u2014 it is empty or corrupt, not a legacy import.
+[skillsmith] Run this command in the repo root, then reconnect via /mcp:
+
+    mv "${path27}" "${path27}.corrupt-$(date +%s)"
+
+[skillsmith] (a fresh database will be created automatically on next start)`);
+  }
+}
 function openDatabase(path27) {
   const db = createDatabaseSync(path27);
   db.pragma("foreign_keys = ON");
   const hasSchemaVersion = db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='schema_version'").get();
   if (!hasSchemaVersion) {
+    assertLegacyImportHasTables(db, path27);
     db.exec(`
       CREATE TABLE IF NOT EXISTS schema_version (
         version INTEGER PRIMARY KEY,
@@ -29654,7 +29930,7 @@ function openDatabase(path27) {
 }
 
 // ../core/dist/src/repositories/SkillRepository.js
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 var SkillRepository = class {
   db;
   constructor(db) {
@@ -29740,7 +30016,7 @@ var SkillRepository = class {
    * Create a new skill
    */
   create(input7) {
-    const id = input7.id || randomUUID3();
+    const id = input7.id || randomUUID4();
     const tags = JSON.stringify(input7.tags || []);
     this.stmts.insert.run(
       id,
@@ -29771,7 +30047,7 @@ var SkillRepository = class {
     const insertMany = this.db.transaction((skills) => {
       const created = [];
       for (const input7 of skills) {
-        const id = input7.id || randomUUID3();
+        const id = input7.id || randomUUID4();
         const tags = JSON.stringify(input7.tags || []);
         try {
           this.stmts.insert.run(
@@ -30092,7 +30368,7 @@ function rowToEntry(row) {
 }
 
 // ../core/dist/src/repositories/quarantine/QuarantineRepository.js
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 var QuarantineRepository = class {
   db;
   auditLogger;
@@ -30146,7 +30422,7 @@ var QuarantineRepository = class {
    * @returns Created quarantine entry
    */
   create(input7) {
-    const id = input7.id || randomUUID4();
+    const id = input7.id || randomUUID5();
     const patterns = JSON.stringify(input7.detectedPatterns || []);
     this.stmts.insert.run(
       id,
@@ -30599,17 +30875,17 @@ var MS_PER_DAY = 24 * 60 * 60 * 1e3;
 
 // ../core/dist/src/analytics/storage.js
 import { join as join29, dirname as dirname16 } from "path";
-import { homedir as homedir14 } from "os";
-var ANALYTICS_DIR = join29(homedir14(), ".skillsmith");
+import { homedir as homedir13 } from "os";
+var ANALYTICS_DIR = join29(homedir13(), ".skillsmith");
 var ANALYTICS_DB = join29(ANALYTICS_DIR, "analytics.db");
 
 // ../core/dist/src/analytics/usage-tracker.js
 var SESSION_TIMEOUT_MS = 60 * 60 * 1e3;
 
 // ../core/dist/src/analytics/metrics-exporter.js
-import { join as join30, resolve as resolve9, isAbsolute as isAbsolute3 } from "path";
-import { homedir as homedir15 } from "os";
-var DEFAULT_EXPORT_DIR = join30(homedir15(), ".skillsmith", "exports");
+import { join as join30, resolve as resolve10, isAbsolute as isAbsolute4 } from "path";
+import { homedir as homedir14 } from "os";
+var DEFAULT_EXPORT_DIR = join30(homedir14(), ".skillsmith", "exports");
 
 // ../core/dist/src/repositories/SkillVersionRepository.js
 var SkillVersionRepository = class {
@@ -31343,8 +31619,8 @@ var EventBatcher = class {
       return;
     } catch {
     }
-    await new Promise((resolve19) => {
-      const t = setTimeout(resolve19, this.retryDelayMs);
+    await new Promise((resolve20) => {
+      const t = setTimeout(resolve20, this.retryDelayMs);
       if (typeof t.unref === "function") {
         ;
         t.unref();
@@ -31377,8 +31653,8 @@ var EventBatcher = class {
   }
   drainHandler = () => {
     const drain = this.flush();
-    const timeout = new Promise((resolve19) => {
-      const t = setTimeout(resolve19, this.drainTimeoutMs);
+    const timeout = new Promise((resolve20) => {
+      const t = setTimeout(resolve20, this.drainTimeoutMs);
       if (typeof t.unref === "function") {
         ;
         t.unref();
@@ -31863,7 +32139,7 @@ var SkillsmithApiClient = class {
         if (attempt < this.maxRetries) {
           const delay = calculateBackoff(attempt);
           this.log(`Retrying in ${delay}ms...`);
-          await new Promise((resolve19) => setTimeout(resolve19, delay));
+          await new Promise((resolve20) => setTimeout(resolve20, delay));
         }
       }
     }
@@ -31888,6 +32164,9 @@ var SkillsmithApiClient = class {
     if (options.maxRiskScore !== void 0 && options.maxRiskScore !== null) {
       params.set("max_risk", String(options.maxRiskScore));
     }
+    if (options.compatibility && options.compatibility.length > 0) {
+      params.set("compatibility", options.compatibility.join(","));
+    }
     const endpoint = `/skills-search?${params.toString()}`;
     return withResponseCache(this.responseCache, "search", endpoint, callOptions?.cache === "no-store", () => this.request(endpoint, {}, SearchResponseSchema));
   }
@@ -32525,7 +32804,7 @@ function trackSkillInvoke(params) {
 
 // ../core/dist/src/telemetry/wrap.js
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 var wrapped = /* @__PURE__ */ new Set();
 var emissionGateStorage = new AsyncLocalStorage2();
 var emissionGate;
@@ -32547,7 +32826,7 @@ function truncateErrorMessage(message) {
 }
 function withTelemetry(handler, opts) {
   const wrappedFn = async (...args) => {
-    return runWithCorrelationId(getCorrelationId() ?? randomUUID5(), async () => {
+    return runWithCorrelationId(getCorrelationId() ?? randomUUID6(), async () => {
       const start = Date.now();
       const skillId = opts.extractSkillId(args);
       const framework = opts.extractFramework?.(args) ?? "unknown";
@@ -32996,11 +33275,11 @@ async function scanLocalSkills(skillsRoot) {
 }
 
 // ../core/dist/src/provenance/SourceRecoveryService.js
-import * as os4 from "os";
+import * as os3 from "os";
 import * as path12 from "path";
 var frontmatterParser = new SkillParser({ requireName: false });
 function defaultSkillsRoot() {
-  return path12.join(os4.homedir(), ".claude", "skills");
+  return path12.join(os3.homedir(), ".claude", "skills");
 }
 function candidateSource(candidate) {
   return { owner: candidate.owner, repo: candidate.repo, url: candidate.url };
@@ -33178,7 +33457,7 @@ var SourceRecoveryService = class {
 // ../core/dist/src/provenance/backfill.js
 import { existsSync as existsSync19 } from "fs";
 import * as fs11 from "fs/promises";
-import * as os5 from "os";
+import * as os4 from "os";
 import * as path13 from "path";
 var CONFIDENCE_RANK = {
   unknown: 0,
@@ -33189,7 +33468,7 @@ var CONFIDENCE_RANK = {
   "user-specified": 5
 };
 function defaultManifestPath() {
-  return path13.join(os5.homedir(), ".skillsmith", "manifest.json");
+  return path13.join(os4.homedir(), ".skillsmith", "manifest.json");
 }
 function nonEmpty(value) {
   return typeof value === "string" && value.trim().length > 0;
@@ -33474,8 +33753,8 @@ async function probeEmbeddingCapability(opts = {}) {
   try {
     const result = await Promise.race([
       EmbeddingService.checkAvailability(),
-      new Promise((resolve19) => {
-        timeoutHandle = setTimeout(() => resolve19(TIMEOUT_SENTINEL), timeoutMs);
+      new Promise((resolve20) => {
+        timeoutHandle = setTimeout(() => resolve20(TIMEOUT_SENTINEL), timeoutMs);
       })
     ]);
     if (result === TIMEOUT_SENTINEL) {
@@ -33567,11 +33846,11 @@ import ora from "ora";
 import * as path14 from "node:path";
 
 // src/utils/sanitize.ts
-import { homedir as homedir18 } from "os";
+import { homedir as homedir17 } from "os";
 var logger9 = getCliLogger();
 function sanitizeError(error46) {
   const message = error46 instanceof Error ? error46.message : String(error46);
-  const home2 = homedir18();
+  const home2 = homedir17();
   const escapedHome = home2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   let sanitized = message.replace(new RegExp(escapedHome, "g"), "~");
   sanitized = sanitized.replace(/\/Users\/[^/]+\//g, "~/");
@@ -33582,7 +33861,7 @@ function sanitizeError(error46) {
 
 // src/commands/install.ts
 var logger10 = getCliLogger();
-var VALID_CLIENT_HINT = "Valid IDs: claude-code | cursor | copilot | windsurf | agents | opencode | hermes (Codex users pass --client agents).";
+var VALID_CLIENT_HINT = "Valid IDs: claude-code | cursor | copilot | windsurf | agents | opencode | hermes | grok | antigravity (Codex users pass --client agents).";
 function parseAlsoLink(raw, defaultClient) {
   if (!raw || raw.trim() === "") return [];
   const ids = raw.split(",").map((s) => s.trim()).filter((s) => s !== "");
@@ -33749,6 +34028,13 @@ async function installActionImpl(skillId, opts) {
         manifestPath: DEFAULT_MANIFEST_PATH,
         registryLookup,
         client,
+        // SMI-5982 PR-review follow-up: explicit now that
+        // resolveCompanionAgentPath() no longer defaults a missing baseDir to
+        // process.cwd() itself — this CLI command's real "cwd" IS the
+        // process's invocation directory, so this restores today's exact
+        // behavior explicitly instead of relying on a now-removed implicit
+        // default.
+        companionBaseDir: process.cwd(),
         onProgress: (_stage, detail) => {
           if (spinner) {
             spinner.text = detail;
@@ -34165,6 +34451,13 @@ ${outcome.message}`));
                   registryLookup,
                   skillsDir: getInstallPath(client),
                   client,
+                  // SMI-5982 PR-review follow-up: explicit now that
+                  // resolveCompanionAgentPath() no longer defaults a missing
+                  // baseDir to process.cwd() itself — this CLI command's real
+                  // "cwd" IS the process's invocation directory, so this
+                  // restores today's exact behavior explicitly instead of
+                  // relying on a now-removed implicit default.
+                  companionBaseDir: process.cwd(),
                   onProgress: (_stage, detail) => {
                     installSpinner.text = detail;
                   }
@@ -34566,11 +34859,11 @@ import { readFile as readFile8 } from "fs/promises";
 import { basename as basename6, join as join41 } from "path";
 
 // src/utils/manifest.ts
-import { createHash as createHash9, randomUUID as randomUUID6 } from "crypto";
-import { readFile as readFile7, writeFile as writeFile4, mkdir as mkdir5, rename as rename3 } from "fs/promises";
+import { createHash as createHash9, randomUUID as randomUUID7 } from "crypto";
+import { readFile as readFile7, writeFile as writeFile4, mkdir as mkdir5, rename as rename3, unlink as unlink5 } from "fs/promises";
 import { join as join40, dirname as dirname19 } from "path";
-import { homedir as homedir19 } from "os";
-var SKILLSMITH_DIR = join40(homedir19(), ".skillsmith");
+import { homedir as homedir18 } from "os";
+var SKILLSMITH_DIR = join40(homedir18(), ".skillsmith");
 var MANIFEST_PATH = join40(SKILLSMITH_DIR, "manifest.json");
 async function loadManifest2() {
   try {
@@ -34582,9 +34875,17 @@ async function loadManifest2() {
 }
 async function saveManifest2(manifest) {
   await mkdir5(dirname19(MANIFEST_PATH), { recursive: true });
-  const tmpPath = `${MANIFEST_PATH}.tmp.${process.pid}`;
-  await writeFile4(tmpPath, JSON.stringify(manifest, null, 2));
-  await rename3(tmpPath, MANIFEST_PATH);
+  const tmpPath = `${MANIFEST_PATH}.tmp.${process.pid}.${randomUUID7()}`;
+  try {
+    await writeFile4(tmpPath, JSON.stringify(manifest, null, 2));
+    await rename3(tmpPath, MANIFEST_PATH);
+  } catch (error46) {
+    try {
+      await unlink5(tmpPath);
+    } catch {
+    }
+    throw error46;
+  }
 }
 async function updateManifestEntry(updateFn) {
   const manifest = await loadManifest2();
@@ -34595,7 +34896,7 @@ var ROTATION_DAYS = 365;
 var OVERLAP_DAYS = 7;
 var MS_PER_DAY2 = 864e5;
 function generateAnonymousId2() {
-  return createHash9("sha256").update(randomUUID6()).digest("hex");
+  return createHash9("sha256").update(randomUUID7()).digest("hex");
 }
 function shouldRotateAnonymousId(manifest) {
   const createdAt = manifest.telemetry?.anonymousIdCreatedAt;
@@ -34811,6 +35112,13 @@ Changes for ${skillName}:`));
         manifestPath: DEFAULT_MANIFEST_PATH,
         registryLookup,
         client,
+        // SMI-5982 PR-review follow-up: explicit now that
+        // resolveCompanionAgentPath() no longer defaults a missing baseDir to
+        // process.cwd() itself — this CLI command's real "cwd" IS the
+        // process's invocation directory, so this restores today's exact
+        // behavior explicitly instead of relying on a now-removed implicit
+        // default.
+        companionBaseDir: process.cwd(),
         onProgress: (_stage, detail) => {
           updateSpinner.text = detail;
         }
@@ -35113,7 +35421,7 @@ var InitSkillError = class _InitSkillError extends Error {
 import { input as input2, confirm as confirm3, select as select2 } from "@inquirer/prompts";
 import ora5 from "ora";
 import { mkdir as mkdir9, writeFile as writeFile6, readFile as readFile9, stat as stat7, readdir as readdir7 } from "fs/promises";
-import { dirname as dirname21, join as join44, resolve as resolve11 } from "path";
+import { dirname as dirname21, join as join43, resolve as resolve12 } from "path";
 import { createHash as createHash10 } from "crypto";
 
 // src/utils/skill-name.ts
@@ -35129,8 +35437,8 @@ function validateSkillName(name) {
 // src/commands/author/utils.ts
 import { access as access3 } from "fs/promises";
 import { mkdir as mkdir7 } from "fs/promises";
-import { join as join42, resolve as resolve10 } from "path";
-import { homedir as homedir20 } from "os";
+import { resolve as resolve11 } from "path";
+import { homedir as homedir19 } from "os";
 function printValidationResult(result, filePath) {
   console.log(source_default.bold(`
 Validation Result for ${filePath}:
@@ -35162,8 +35470,8 @@ async function fileExists(path27) {
     return false;
   }
 }
-async function ensureAgentsDirectory(customPath) {
-  const agentsDir = customPath ? resolve10(customPath.replace(/^~/, homedir20())) : join42(homedir20(), ".claude", "agents");
+async function ensureAgentsDirectory(customPath, client) {
+  const agentsDir = customPath ? resolve11(customPath.replace(/^~/, homedir19())) : resolveCompanionAgentDir(client);
   await mkdir7(agentsDir, { recursive: true });
   return agentsDir;
 }
@@ -35218,7 +35526,7 @@ function validateSubagentDefinition(content) {
 
 // src/commands/author/init.helpers.ts
 import { mkdir as mkdir8, writeFile as writeFile5, rm as rm4 } from "fs/promises";
-import { join as join43 } from "path";
+import { join as join42 } from "path";
 
 // src/templates/skill.md.template.ts
 var SKILL_MD_TEMPLATE = `---
@@ -35734,6 +36042,30 @@ args = ["-y", "{{name}}"]
 [mcp_servers.{{name}}.env]
 SKILLSMITH_API_KEY = "sk_live_..."`,
     notes: "Grok Build uses TOML under the [mcp_servers.<name>] table, mirroring the Codex CLI convention above \u2014 confirmed against docs.x.ai for the command/args shape; the env sub-table follows the same pattern as the Codex entry."
+  },
+  // SMI-5982 Wave 6: antigravity added to ClientId (paths.ts); this
+  // Record<SnippetClientId, ClientSnippet> is exhaustive over ClientId, so
+  // this entry is required for the type to compile. Path + shape verified
+  // 2026-08-11 via live web search (antigravity.google/docs/mcp, corroborated
+  // by an independent third-party source): global config at
+  // ~/.gemini/config/mcp_config.json, standard `mcpServers` object shape
+  // (same command/args/env fields every non-Codex/non-OpenCode client uses).
+  antigravity: {
+    label: "Google Antigravity",
+    configPath: "~/.gemini/config/mcp_config.json",
+    format: "json",
+    body: `{
+  "mcpServers": {
+    "{{name}}": {
+      "command": "npx",
+      "args": ["-y", "{{name}}"],
+      "env": {
+        "SKILLSMITH_API_KEY": "sk_live_..."
+      }
+    }
+  }
+}`,
+    notes: "One config file is shared across Antigravity CLI, IDE, and 2.0. A workspace-scoped alternative also exists at .agents/mcp_config.json (project root) if you prefer not to register the server globally."
   }
 };
 function renderSnippet(client, packageName) {
@@ -35769,7 +36101,8 @@ var SNIPPET_DISPLAY_ORDER = Object.freeze([
   "agents",
   "opencode",
   "hermes",
-  "grok"
+  "grok",
+  "antigravity"
 ]);
 
 // src/templates/mcp-server.template.ts
@@ -36115,15 +36448,15 @@ function renderMcpServerTemplates(data) {
 async function scaffoldSkillDirectory(input7) {
   const { skillDir, skillName, description, author, category, createdFresh } = input7;
   try {
-    await mkdir8(join43(skillDir, "scripts"), { recursive: true });
-    await mkdir8(join43(skillDir, "resources"), { recursive: true });
+    await mkdir8(join42(skillDir, "scripts"), { recursive: true });
+    await mkdir8(join42(skillDir, "resources"), { recursive: true });
     const skillMdContent = SKILL_MD_TEMPLATE.replace(/\{\{name\}\}/g, skillName).replace(/\{\{description\}\}/g, description).replace(/\{\{author\}\}/g, author).replace(/\{\{category\}\}/g, category).replace(/\{\{date\}\}/g, (/* @__PURE__ */ new Date()).toISOString().split("T")[0] || "").replace(/\{\{behavioralClassification\}\}/g, "");
-    await writeFile5(join43(skillDir, "SKILL.md"), skillMdContent, "utf-8");
+    await writeFile5(join42(skillDir, "SKILL.md"), skillMdContent, "utf-8");
     const readmeContent = README_MD_TEMPLATE.replace(/\{\{name\}\}/g, skillName).replace(
       /\{\{description\}\}/g,
       description
     );
-    await writeFile5(join43(skillDir, "README.md"), readmeContent, "utf-8");
+    await writeFile5(join42(skillDir, "README.md"), readmeContent, "utf-8");
     const placeholderScript = `#!/usr/bin/env node
 /**
  * ${skillName} - Example Script
@@ -36133,7 +36466,7 @@ async function scaffoldSkillDirectory(input7) {
 
 console.log('${skillName} script executed');
 `;
-    await writeFile5(join43(skillDir, "scripts", "example.js"), placeholderScript, "utf-8");
+    await writeFile5(join42(skillDir, "scripts", "example.js"), placeholderScript, "utf-8");
     const gitignore = `# Dependencies
 node_modules/
 
@@ -36148,7 +36481,7 @@ dist/
 .DS_Store
 Thumbs.db
 `;
-    await writeFile5(join43(skillDir, ".gitignore"), gitignore, "utf-8");
+    await writeFile5(join42(skillDir, ".gitignore"), gitignore, "utf-8");
     return { ok: true };
   } catch (error46) {
     await rollbackPartialScaffold(skillDir, createdFresh);
@@ -36208,7 +36541,7 @@ async function initSkill(name, targetPath, options = {}) {
       { name: "Other", value: "other" }
     ]
   });
-  const skillDir = resolve11(targetPath, skillName);
+  const skillDir = resolve12(targetPath, skillName);
   let skillDirPreExisted = false;
   try {
     await stat7(skillDir);
@@ -36260,15 +36593,15 @@ async function initSkill(name, targetPath, options = {}) {
 async function validateSkill(skillPath) {
   const spinner = ora5("Validating skill...").start();
   try {
-    let filePath = resolve11(skillPath);
+    let filePath = resolve12(skillPath);
     try {
       const stats = await stat7(filePath);
       if (stats.isDirectory()) {
-        filePath = join44(filePath, "SKILL.md");
+        filePath = join43(filePath, "SKILL.md");
       }
     } catch {
       if (!filePath.endsWith(".md")) {
-        filePath = join44(filePath, "SKILL.md");
+        filePath = join43(filePath, "SKILL.md");
       }
     }
     const content = await readFile9(filePath, "utf-8");
@@ -36305,7 +36638,7 @@ async function validateSkill(skillPath) {
 async function publishSkill(skillPath, options = {}) {
   const spinner = ora5("Preparing skill for publishing...").start();
   try {
-    let dirPath = resolve11(skillPath || ".");
+    let dirPath = resolve12(skillPath || ".");
     try {
       const stats = await stat7(dirPath);
       if (!stats.isDirectory()) {
@@ -36315,7 +36648,7 @@ async function publishSkill(skillPath, options = {}) {
       spinner.fail(`Directory not found: ${dirPath}`);
       return false;
     }
-    const skillMdPath = join44(dirPath, "SKILL.md");
+    const skillMdPath = join43(dirPath, "SKILL.md");
     spinner.text = "Validating skill...";
     const content = await readFile9(skillMdPath, "utf-8");
     const parser2 = new SkillParser({ requireName: true });
@@ -36361,7 +36694,7 @@ async function publishSkill(skillPath, options = {}) {
       }).filter((p) => p !== null);
       let totalWarnings = 0;
       for (const mdFile of mdFiles) {
-        const filePath = join44(dirPath, mdFile);
+        const filePath = join43(dirPath, mdFile);
         const fileContent = await readFile9(filePath, "utf-8");
         const result = SkillParser.checkReferences(fileContent, customPatterns);
         if (result.matches.length > 0) {
@@ -36390,7 +36723,7 @@ async function publishSkill(skillPath, options = {}) {
         spinner.start();
       }
     }
-    const manifestPath = join44(dirPath, ".skillsmith-publish.json");
+    const manifestPath = join43(dirPath, ".skillsmith-publish.json");
     await writeFile6(manifestPath, JSON.stringify(publishInfo, null, 2), "utf-8");
     spinner.succeed("Skill prepared for publishing");
     console.log(source_default.bold("\nPublish Information:"));
@@ -36497,7 +36830,7 @@ function createPublishCommand() {
 import { Command as Command5 } from "commander";
 import ora6 from "ora";
 import { readFile as readFile10, writeFile as writeFile7, stat as stat8 } from "fs/promises";
-import { basename as basename7, dirname as dirname22, join as join45, resolve as resolve12 } from "path";
+import { basename as basename7, dirname as dirname22, join as join44, resolve as resolve13 } from "path";
 
 // src/utils/tool-analyzer.ts
 var TOOL_PATTERNS3 = {
@@ -36621,18 +36954,18 @@ var logger14 = getCliLogger();
 async function generateSubagent2(skillPath, options) {
   const spinner = ora6("Generating subagent...").start();
   try {
-    let dirPath = resolve12(skillPath || ".");
+    let dirPath = resolve13(skillPath || ".");
     let skillMdPath;
     try {
       const stats = await stat8(dirPath);
       if (stats.isDirectory()) {
-        skillMdPath = join45(dirPath, "SKILL.md");
+        skillMdPath = join44(dirPath, "SKILL.md");
       } else {
         skillMdPath = dirPath;
         dirPath = dirname22(dirPath);
       }
     } catch {
-      skillMdPath = dirPath.endsWith(".md") ? dirPath : join45(dirPath, "SKILL.md");
+      skillMdPath = dirPath.endsWith(".md") ? dirPath : join44(dirPath, "SKILL.md");
     }
     spinner.text = "Reading SKILL.md...";
     const content = await readFile10(skillMdPath, "utf-8");
@@ -36679,7 +37012,11 @@ async function generateSubagent2(skillPath, options) {
       return;
     }
     const agentsDir = await ensureAgentsDirectory(options.output);
-    const subagentPath = join45(agentsDir, `${basename7(metadata.name)}-specialist.md`);
+    const subagentFilename = getCompanionAgentTarget().filenamePattern.replace(
+      "{name}",
+      basename7(metadata.name)
+    );
+    const subagentPath = join44(agentsDir, subagentFilename);
     if (await fileExists(subagentPath)) {
       if (!options.force) {
         spinner.warn(`Subagent already exists: ${subagentPath}`);
@@ -36739,32 +37076,31 @@ var subagentAction = withTelemetry(subagentActionImpl, {
   extractFramework: () => "cli"
 });
 function createSubagentCommand() {
-  return new Command5("subagent").description("Generate a companion subagent for a skill").argument("[path]", "Path to skill directory", ".").option("-o, --output <path>", "Output directory", "~/.claude/agents").option("--tools <tools>", "Override detected tools (comma-separated)").option("--model <model>", "Model for subagent: sonnet|opus|haiku", "sonnet").option("--skip-claude-md", "Skip CLAUDE.md snippet generation").option("--force", "Overwrite existing subagent definition").action(subagentAction);
+  return new Command5("subagent").description("Generate a companion subagent for a skill").argument("[path]", "Path to skill directory", ".").option("-o, --output <path>", "Output directory (default: ~/.claude/agents)").option("--tools <tools>", "Override detected tools (comma-separated)").option("--model <model>", "Model for subagent: sonnet|opus|haiku", "sonnet").option("--skip-claude-md", "Skip CLAUDE.md snippet generation").option("--force", "Overwrite existing subagent definition").action(subagentAction);
 }
 
 // src/commands/author/transform.ts
 import { Command as Command6 } from "commander";
 import ora7 from "ora";
 import { readFile as readFile11, readdir as readdir8 } from "fs/promises";
-import { join as join46, resolve as resolve13 } from "path";
-import { homedir as homedir21 } from "os";
+import { join as join45, resolve as resolve14 } from "path";
 var logger15 = getCliLogger();
 async function transformSkill2(skillPath, options) {
   const spinner = ora7("Transforming skill...").start();
   try {
-    const dirPath = resolve13(skillPath || ".");
+    const dirPath = resolve14(skillPath || ".");
     if (options.batch) {
       spinner.text = "Processing batch...";
       let skillDirs = [];
       if (dirPath.includes(",")) {
-        skillDirs = dirPath.split(",").map((p) => resolve13(p.trim()));
+        skillDirs = dirPath.split(",").map((p) => resolve14(p.trim()));
       } else {
         const subdirs = await readdir8(dirPath, { withFileTypes: true });
         for (const entry of subdirs) {
           if (entry.isDirectory()) {
-            const skillMdPath2 = join46(dirPath, entry.name, "SKILL.md");
+            const skillMdPath2 = join45(dirPath, entry.name, "SKILL.md");
             if (await fileExists(skillMdPath2)) {
-              skillDirs.push(join46(dirPath, entry.name));
+              skillDirs.push(join45(dirPath, entry.name));
             }
           }
         }
@@ -36786,7 +37122,7 @@ Processing: ${skillDir}`));
       }
       return;
     }
-    const skillMdPath = join46(dirPath, "SKILL.md");
+    const skillMdPath = join45(dirPath, "SKILL.md");
     if (!await fileExists(skillMdPath)) {
       spinner.fail(`No SKILL.md found at: ${skillMdPath}`);
       throw new Error(`No SKILL.md found at: ${skillMdPath}`);
@@ -36800,8 +37136,7 @@ Processing: ${skillDir}`));
       printValidationResult(validation, skillMdPath);
       return;
     }
-    const agentsDir = join46(homedir21(), ".claude", "agents");
-    const subagentPath = join46(agentsDir, `${metadata.name}-specialist.md`);
+    const subagentPath = resolveCompanionAgentPath(metadata.name);
     if (await fileExists(subagentPath)) {
       if (!options.force) {
         spinner.warn(`Subagent already exists: ${subagentPath}`);
@@ -36859,7 +37194,7 @@ import { Command as Command7 } from "commander";
 import { input as input3, confirm as confirm4 } from "@inquirer/prompts";
 import ora8 from "ora";
 import { mkdir as mkdir10, writeFile as writeFile8, stat as stat9 } from "fs/promises";
-import { dirname as dirname23, join as join47, resolve as resolve14 } from "path";
+import { dirname as dirname23, join as join46, resolve as resolve15 } from "path";
 var logger16 = getCliLogger();
 async function initMcpServer(name, options) {
   const serverName = name || await input3({
@@ -36948,7 +37283,7 @@ async function initMcpServer(name, options) {
       }
     }
   }
-  const targetDir = options.output ? resolve14(options.output) : resolve14(".", serverName);
+  const targetDir = options.output ? resolve15(options.output) : resolve15(".", serverName);
   try {
     await stat9(targetDir);
     if (!options.force) {
@@ -36972,10 +37307,10 @@ async function initMcpServer(name, options) {
       author
     });
     await mkdir10(targetDir, { recursive: true });
-    await mkdir10(join47(targetDir, "src"), { recursive: true });
-    await mkdir10(join47(targetDir, "src", "tools"), { recursive: true });
+    await mkdir10(join46(targetDir, "src"), { recursive: true });
+    await mkdir10(join46(targetDir, "src", "tools"), { recursive: true });
     for (const [filePath, content] of files) {
-      const fullPath = join47(targetDir, filePath);
+      const fullPath = join46(targetDir, filePath);
       const dir = dirname23(fullPath);
       await mkdir10(dir, { recursive: true });
       await writeFile8(fullPath, content, "utf-8");
@@ -36995,7 +37330,7 @@ async function initMcpServer(name, options) {
   "mcpServers": {
     "${serverName}": {
       "command": "npx",
-      "args": ["tsx", "${join47(targetDir, "src", "index.ts")}"]
+      "args": ["tsx", "${join46(targetDir, "src", "index.ts")}"]
     }
   }
 }`)
@@ -37177,7 +37512,7 @@ import ora9 from "ora";
 
 // src/commands/recommend.helpers.ts
 import { existsSync as existsSync21, readdirSync as readdirSync2, readFileSync as readFileSync18, statSync as statSync4 } from "node:fs";
-import { join as join48 } from "node:path";
+import { join as join47 } from "node:path";
 
 // src/commands/recommend.types.ts
 var VALID_TRUST_TIERS = [
@@ -37504,7 +37839,7 @@ function getInstalledSkills2() {
   try {
     const entries = readdirSync2(skillsDir);
     for (const entry of entries) {
-      const skillPath = join48(skillsDir, entry);
+      const skillPath = join47(skillsDir, entry);
       const stat13 = statSync4(skillPath);
       if (!stat13.isDirectory()) continue;
       const skill = {
@@ -37513,7 +37848,7 @@ function getInstalledSkills2() {
         tags: [],
         category: null
       };
-      const skillMdPath = join48(skillPath, "SKILL.md");
+      const skillMdPath = join47(skillPath, "SKILL.md");
       if (existsSync21(skillMdPath)) {
         try {
           const content = readFileSync18(skillMdPath, "utf-8");
@@ -37560,8 +37895,7 @@ async function runRecommend(targetPath, options) {
     spinner.start("Finding skill recommendations...");
     const stack = buildStackFromAnalysis(codebaseContext);
     if (options.context) {
-      const contextWords = options.context.toLowerCase().split(/\s+/).filter((w) => w.length > 3).slice(0, 5);
-      stack.push(...contextWords);
+      stack.push(...extractContextWords(options.context));
     }
     if (options.installed?.length) {
       stack.push(...options.installed.map((id) => id.toLowerCase().split("/").pop() ?? id));
@@ -38169,7 +38503,7 @@ function createSyncCommand() {
 
 // src/commands/merge.ts
 import { Command as Command11 } from "commander";
-import { resolve as resolve15 } from "path";
+import { resolve as resolve16 } from "path";
 import { existsSync as existsSync22 } from "fs";
 var logger20 = getCliLogger();
 function formatMergeResult(result) {
@@ -38201,8 +38535,8 @@ async function mergeActionImpl(sourcePath, targetPath, options) {
     logger20.error(`Valid strategies: ${validStrategies.join(", ")}`);
     process.exit(1);
   }
-  const resolvedSource = resolve15(sourcePath);
-  const resolvedTarget = targetPath ? resolve15(targetPath) : getDefaultDbPath();
+  const resolvedSource = resolve16(sourcePath);
+  const resolvedTarget = targetPath ? resolve16(targetPath) : getDefaultDbPath();
   if (!existsSync22(resolvedSource)) {
     logger20.error(`Source database not found: ${resolvedSource}`);
     process.exit(1);
@@ -38393,6 +38727,13 @@ ${message}`));
         skillsDir,
         manifestPath: DEFAULT_MANIFEST_PATH,
         client,
+        // SMI-5982 PR-review follow-up: explicit now that
+        // resolveCompanionAgentPath() no longer defaults a missing baseDir to
+        // process.cwd() itself — this CLI command's real "cwd" IS the
+        // process's invocation directory, so this restores today's exact
+        // behavior explicitly instead of relying on a now-removed implicit
+        // default.
+        companionBaseDir: process.cwd(),
         onProgress: (_stage, detail) => {
           if (spinner) {
             spinner.text = detail;
@@ -38465,13 +38806,13 @@ function createRegistryCommand() {
 import { Command as Command13 } from "commander";
 import ora12 from "ora";
 import { mkdir as mkdir11, copyFile as copyFile2, stat as stat10, readdir as readdir9 } from "fs/promises";
-import { join as join49, dirname as dirname24 } from "path";
+import { join as join48, dirname as dirname24 } from "path";
 var logger22 = getCliLogger();
 function getAssetsPath() {
-  return join49(packageRoot(), "assets", "skillsmith-skill");
+  return join48(packageRoot(), "assets", "skillsmith-skill");
 }
 function getTargetPath() {
-  return join49(getCanonicalInstallPath(), "skillsmith");
+  return join48(getCanonicalInstallPath(), "skillsmith");
 }
 async function directoryExists(path27) {
   try {
@@ -38488,8 +38829,8 @@ async function copyDirectory(src, dest) {
     if (entry.isSymbolicLink()) {
       continue;
     }
-    const srcPath = join49(src, entry.name);
-    const destPath = join49(dest, entry.name);
+    const srcPath = join48(src, entry.name);
+    const destPath = join48(dest, entry.name);
     if (entry.isDirectory()) {
       await mkdir11(destPath, { recursive: true });
       filesCopied += await copyDirectory(srcPath, destPath);
@@ -38822,11 +39163,11 @@ async function loginActionImpl(options) {
       output: process.stdout,
       terminal: false
     });
-    const choice = await new Promise((resolve19) => {
+    const choice = await new Promise((resolve20) => {
       process.stdout.write("Choice [a]: ");
       rl.once("line", (line) => {
         rl.close();
-        resolve19(line.trim().toLowerCase());
+        resolve20(line.trim().toLowerCase());
       });
     });
     if (choice === "" || choice === "a") {
@@ -38933,21 +39274,35 @@ function createWhoamiCommand() {
 // src/commands/diff.ts
 import { Command as Command17 } from "commander";
 import { readFile as readFile12 } from "fs/promises";
-import { join as join50 } from "path";
+import { join as join49 } from "path";
 
 // src/utils/license-types.ts
 var TIER_FEATURES = {
   community: ["basic_search", "skill_install", "local_validation"],
-  individual: ["basic_analytics", "email_support"],
+  individual: [
+    "basic_analytics",
+    "email_support",
+    // SMI-5949: pre-existing drift fix — version_tracking is part of
+    // INDIVIDUAL_FEATURES in the canonical @smith-horn/enterprise package
+    // (packages/enterprise/src/license/FeatureFlags.ts) and was silently
+    // missing here (this file has no compiler backstop, unlike the
+    // Record<FeatureFlag, ...> mirrors in toolFeatureMapping.ts). Caught by
+    // the new TIER_FEATURES.enterprise parity regression test.
+    "version_tracking"
+  ],
   team: [
     // Individual features (inherited)
     "basic_analytics",
     "email_support",
+    "version_tracking",
     // Team features
     "team_workspaces",
     "private_skills",
     "usage_analytics",
     "priority_support",
+    // SMI-5949: pre-existing drift fix — skill_security_audit is part of
+    // TEAM_FEATURES in the canonical package and was silently missing here.
+    "skill_security_audit",
     // SMI-3140: expanded to Team + Enterprise (2026-07-14)
     "compliance_reports"
   ],
@@ -38955,11 +39310,13 @@ var TIER_FEATURES = {
     // Individual features (inherited)
     "basic_analytics",
     "email_support",
+    "version_tracking",
     // Team features (inherited)
     "team_workspaces",
     "private_skills",
     "usage_analytics",
     "priority_support",
+    "skill_security_audit",
     "compliance_reports",
     // Enterprise-only features (canonical names from enterprise package)
     "sso_saml",
@@ -38968,7 +39325,9 @@ var TIER_FEATURES = {
     "siem_export",
     "private_registry",
     "custom_integrations",
-    "advanced_analytics"
+    "advanced_analytics",
+    // SMI-5949: separately-flagged approval gate for private_registry_publish (D-11)
+    "registry_approval"
   ]
 };
 
@@ -39123,7 +39482,7 @@ function diffSections(oldContent, newContent) {
   return { added, removed, modified };
 }
 async function readInstalledSkillContent(skillName) {
-  const skillPath = join50(getCanonicalInstallPath(), skillName, "SKILL.md");
+  const skillPath = join49(getCanonicalInstallPath(), skillName, "SKILL.md");
   try {
     return await readFile12(skillPath, "utf-8");
   } catch {
@@ -39334,15 +39693,15 @@ import { Command as Command22 } from "commander";
 // src/commands/audit-collisions.ts
 import * as crypto12 from "node:crypto";
 import * as fs34 from "node:fs";
-import { homedir as homedir30 } from "node:os";
-import { join as join62 } from "node:path";
+import { homedir as homedir28 } from "node:os";
+import { join as join61 } from "node:path";
 import { Command as Command19 } from "commander";
 import { input as input4, select as select3 } from "@inquirer/prompts";
 
 // ../mcp-server/dist/src/audit/audit-history.js
 import * as crypto3 from "node:crypto";
 import * as fs17 from "node:fs/promises";
-import * as os7 from "node:os";
+import * as os6 from "node:os";
 import * as path16 from "node:path";
 
 // ../mcp-server/node_modules/ulid/dist/node/index.js
@@ -39441,7 +39800,7 @@ function ulid3(seedTime, prng) {
 }
 
 // ../mcp-server/dist/src/audit/audit-history.js
-var DEFAULT_AUDITS_DIR = path16.join(os7.homedir(), ".skillsmith", "audits");
+var DEFAULT_AUDITS_DIR = path16.join(os6.homedir(), ".skillsmith", "audits");
 function newAuditId() {
   return ulid3();
 }
@@ -44552,24 +44911,24 @@ function formatTokens(tokens) {
 // ../mcp-server/dist/src/audit/security-audit.js
 import * as crypto6 from "node:crypto";
 import * as fs22 from "node:fs";
-import * as os11 from "node:os";
+import * as os10 from "node:os";
 
 // ../mcp-server/dist/src/utils/local-inventory.js
 import * as fs20 from "node:fs";
-import * as os8 from "node:os";
+import * as os7 from "node:os";
 import * as path18 from "node:path";
-var DEFAULT_HOME_CLAUDE_DIR = path18.join(os8.homedir(), ".claude");
-var DEFAULT_MANIFEST_PATH3 = path18.join(os8.homedir(), ".skillsmith", "manifest.json");
+var DEFAULT_HOME_CLAUDE_DIR = path18.join(os7.homedir(), ".claude");
+var DEFAULT_MANIFEST_PATH3 = path18.join(os7.homedir(), ".skillsmith", "manifest.json");
 async function scanLocalInventory(opts = {}) {
   const startedAt = process.hrtime.bigint();
-  const homeDir = opts.homeDir ?? os8.homedir();
+  const homeDir = opts.homeDir ?? os7.homedir();
   const claudeDir = opts.homeDir ? path18.join(opts.homeDir, ".claude") : DEFAULT_HOME_CLAUDE_DIR;
   const manifestPath = opts.manifestPath ?? DEFAULT_MANIFEST_PATH3;
   const warnings = [];
   const entries = [];
   const manifest = loadManifest3(manifestPath);
   entries.push(...scanSkills(path18.join(claudeDir, "skills"), manifest, warnings));
-  const agentsSkillsDir = opts.homeDir ? path18.join(opts.homeDir, ".agents", "skills") : path18.join(os8.homedir(), ".agents", "skills");
+  const agentsSkillsDir = opts.homeDir ? path18.join(opts.homeDir, ".agents", "skills") : path18.join(os7.homedir(), ".agents", "skills");
   entries.push(...scanSkills(agentsSkillsDir, manifest, warnings));
   entries.push(...scanCommands(path18.join(claudeDir, "commands"), warnings));
   entries.push(...scanAgents(path18.join(claudeDir, "agents"), warnings));
@@ -44704,7 +45063,7 @@ function coerceDescription2(value) {
 // ../mcp-server/dist/src/audit/security-acceptance.js
 import * as crypto5 from "node:crypto";
 import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readSync as readSync2 } from "node:fs";
-import * as os9 from "node:os";
+import * as os8 from "node:os";
 import * as path19 from "node:path";
 
 // ../mcp-server/dist/src/audit/security-acceptance.types.js
@@ -44716,7 +45075,7 @@ function emptyAcceptanceStore() {
 }
 
 // ../mcp-server/dist/src/audit/security-acceptance.js
-function defaultAcceptancePath(homeDir = os9.homedir()) {
+function defaultAcceptancePath(homeDir = os8.homedir()) {
   return path19.join(homeDir, ".skillsmith", "audits", "security-acceptance.json");
 }
 function fingerprintTuple(f) {
@@ -44954,10 +45313,10 @@ function isAcceptDisabled() {
 
 // ../mcp-server/dist/src/audit/security-baseline.js
 import * as fs21 from "node:fs";
-import * as os10 from "node:os";
+import * as os9 from "node:os";
 import * as path20 from "node:path";
 var SECURITY_BASELINE_VERSION = 1;
-function defaultBaselinePath(homeDir = os10.homedir()) {
+function defaultBaselinePath(homeDir = os9.homedir()) {
   return path20.join(homeDir, ".skillsmith", "audits", "security-baseline.json");
 }
 function emptyBaseline() {
@@ -45045,7 +45404,7 @@ function buildFinding(params) {
 }
 async function runSecurityAudit(opts = {}) {
   const startedAt = process.hrtime.bigint();
-  const homeDir = opts.homeDir ?? os11.homedir();
+  const homeDir = opts.homeDir ?? os10.homedir();
   const auditId = opts.auditId ?? newAuditId();
   const threshold = opts.riskThreshold ?? DEFAULT_RISK_THRESHOLD;
   const readContent = opts.readContent ?? defaultReadContent;
@@ -45348,7 +45707,7 @@ function hashDigest(payload) {
 // ../mcp-server/dist/src/audit/namespace-overrides.js
 import * as crypto8 from "node:crypto";
 import * as fs24 from "node:fs/promises";
-import * as os12 from "node:os";
+import * as os11 from "node:os";
 import * as path22 from "node:path";
 
 // ../mcp-server/dist/src/audit/namespace-overrides.types.js
@@ -45356,7 +45715,7 @@ var CURRENT_VERSION = 1;
 
 // ../mcp-server/dist/src/audit/namespace-overrides.js
 function defaultLedgerPath() {
-  return path22.join(os12.homedir(), ".skillsmith", "namespace-overrides.json");
+  return path22.join(os11.homedir(), ".skillsmith", "namespace-overrides.json");
 }
 var ULID_PREFIX = "ovr_";
 function emptyLedger() {
@@ -45524,7 +45883,7 @@ async function copyDirectory2(src, dest) {
 
 // ../mcp-server/dist/src/audit/rename-engine.apply-paths.js
 import * as fs26 from "node:fs/promises";
-import * as os13 from "node:os";
+import * as os12 from "node:os";
 import * as path24 from "node:path";
 function actionToKind(action) {
   switch (action) {
@@ -45571,7 +45930,7 @@ async function pathExists2(target) {
   }
 }
 async function stageSingleFileForBackup(srcFile) {
-  const tmp = await fs26.mkdtemp(path24.join(os13.tmpdir(), "skillsmith-rename-stage-"));
+  const tmp = await fs26.mkdtemp(path24.join(os12.tmpdir(), "skillsmith-rename-stage-"));
   await fs26.copyFile(srcFile, path24.join(tmp, path24.basename(srcFile)));
   return tmp;
 }
@@ -46298,15 +46657,15 @@ var V1_TEMPLATE_PATTERNS = V1_TEMPLATES.map((t) => t.pattern);
 var MS_PER_DAY3 = 24 * 60 * 60 * 1e3;
 
 // ../mcp-server/dist/src/audit/run-inventory-audit.js
-import * as os15 from "node:os";
+import * as os14 from "node:os";
 
 // ../core/dist/src/audit/exclusions.js
 import { promises as fs30 } from "node:fs";
-import { join as join60 } from "node:path";
+import { join as join59 } from "node:path";
 var EXCLUSIONS_FILE = "audit-exclusions.json";
 var EMPTY_CONFIG = { version: 1, exclusions: [] };
 function getExclusionsPath(opts) {
-  return join60(opts?.configDir ?? getConfigDir(), EXCLUSIONS_FILE);
+  return join59(opts?.configDir ?? getConfigDir(), EXCLUSIONS_FILE);
 }
 async function loadExclusions(opts = {}) {
   const path27 = opts.configPath ?? getExclusionsPath();
@@ -46379,9 +46738,9 @@ function tierAllowsAuditMode(tier, mode) {
 
 // ../mcp-server/dist/src/audit/audit-suggestions.js
 import * as fs31 from "node:fs/promises";
-import * as os14 from "node:os";
+import * as os13 from "node:os";
 import * as path26 from "node:path";
-var DEFAULT_AUDITS_DIR2 = path26.join(os14.homedir(), ".skillsmith", "audits");
+var DEFAULT_AUDITS_DIR2 = path26.join(os13.homedir(), ".skillsmith", "audits");
 async function writeAuditSuggestions(auditId, renameSuggestions, recommendedEdits, opts = {}) {
   const auditsDir = opts.auditsDir ?? DEFAULT_AUDITS_DIR2;
   const auditDir = path26.join(auditsDir, auditId);
@@ -46586,7 +46945,7 @@ function hashFileContent(filePath) {
 // ../mcp-server/dist/src/audit/run-inventory-audit.js
 async function runInventoryAudit(opts = {}) {
   const startedAt = process.hrtime.bigint();
-  const homeDir = opts.homeDir ?? os15.homedir();
+  const homeDir = opts.homeDir ?? os14.homedir();
   const scan = await scanLocalInventory({
     homeDir,
     ...opts.projectDir !== void 0 ? { projectDir: opts.projectDir } : {}
@@ -46768,10 +47127,10 @@ async function requireConfirmationPhrase(expected, prompt) {
   }
 }
 function ledgerPath() {
-  return join62(homedir30(), ".skillsmith", "namespace-overrides.json");
+  return join61(homedir28(), ".skillsmith", "namespace-overrides.json");
 }
 function backupsDir() {
-  return join62(homedir30(), ".skillsmith", "backups");
+  return join61(homedir28(), ".skillsmith", "backups");
 }
 function backupLedgerForReset() {
   const src = ledgerPath();
@@ -46780,7 +47139,7 @@ function backupLedgerForReset() {
   fs34.mkdirSync(dir, { recursive: true, mode: 448 });
   const ts2 = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   const suffix = crypto12.randomBytes(4).toString("hex");
-  const backupFile = join62(dir, `ledger-${ts2}-${suffix}.json`);
+  const backupFile = join61(dir, `ledger-${ts2}-${suffix}.json`);
   fs34.copyFileSync(src, backupFile);
   return backupFile;
 }
@@ -47817,7 +48176,7 @@ import { Command as Command23 } from "commander";
 import { input as input6, confirm as confirm6, select as select4 } from "@inquirer/prompts";
 import ora13 from "ora";
 import { mkdir as mkdir17, writeFile as writeFile15, stat as stat12 } from "fs/promises";
-import { join as join63 } from "path";
+import { join as join62 } from "path";
 var logger30 = getCliLogger();
 var VALID_TYPES = ["basic", "intermediate", "advanced"];
 var VALID_BEHAVIORS = ["autonomous", "guided", "interactive", "configurable"];
@@ -47953,7 +48312,7 @@ async function createSkill(name, options = {}) {
     default: false
   });
   const outputDir = options.output ?? getCanonicalInstallPath();
-  const skillDir = join63(outputDir, skillName);
+  const skillDir = join62(outputDir, skillName);
   let exists = false;
   try {
     await stat12(skillDir);
@@ -48027,16 +48386,16 @@ Thumbs.db
   const spinner = ora13("Scaffolding skill...").start();
   try {
     await mkdir17(skillDir, { recursive: true });
-    await mkdir17(join63(skillDir, "resources"), { recursive: true });
+    await mkdir17(join62(skillDir, "resources"), { recursive: true });
     if (includeScripts) {
-      await mkdir17(join63(skillDir, "scripts"), { recursive: true });
+      await mkdir17(join62(skillDir, "scripts"), { recursive: true });
     }
-    await writeFile15(join63(skillDir, "SKILL.md"), skillMdContent, "utf-8");
-    await writeFile15(join63(skillDir, "README.md"), readmeContent, "utf-8");
-    await writeFile15(join63(skillDir, "CHANGELOG.md"), changelogContent, "utf-8");
-    await writeFile15(join63(skillDir, ".gitignore"), gitignoreContent, "utf-8");
+    await writeFile15(join62(skillDir, "SKILL.md"), skillMdContent, "utf-8");
+    await writeFile15(join62(skillDir, "README.md"), readmeContent, "utf-8");
+    await writeFile15(join62(skillDir, "CHANGELOG.md"), changelogContent, "utf-8");
+    await writeFile15(join62(skillDir, ".gitignore"), gitignoreContent, "utf-8");
     if (includeScripts) {
-      await writeFile15(join63(skillDir, "scripts", "example.js"), scriptContent, "utf-8");
+      await writeFile15(join62(skillDir, "scripts", "example.js"), scriptContent, "utf-8");
     }
     spinner.succeed(`Skill scaffolded at ${skillDir}`);
   } catch (error46) {
@@ -48197,7 +48556,7 @@ var RATE_LIMIT_DELAY = 6e4;
 var DEFAULT_IMPORT_DELAY_MS = 150;
 var IMPORT_DELAY_MS = parseInt(process.env["SKILLSMITH_IMPORT_DELAY_MS"] || "", 10) || DEFAULT_IMPORT_DELAY_MS;
 function sleep3(ms) {
-  return new Promise((resolve19) => setTimeout(resolve19, ms));
+  return new Promise((resolve20) => setTimeout(resolve20, ms));
 }
 function getBackoffDelay(attempt, baseDelay = 1e3) {
   return Math.min(baseDelay * Math.pow(2, attempt), 3e4);
@@ -48409,13 +48768,13 @@ function createImportCommand() {
 
 // src/commands/import-local.ts
 import { Command as Command26 } from "commander";
-import { resolve as resolve17 } from "node:path";
+import { resolve as resolve18 } from "node:path";
 import { promises as fs36 } from "node:fs";
 
 // src/commands/import-local.helpers.ts
 import { createHash as createHash19 } from "node:crypto";
 import { promises as fs35 } from "node:fs";
-import { join as join64, resolve as resolve16, dirname as dirname29, basename as basename10, sep as sep5, relative as relative7 } from "node:path";
+import { join as join63, resolve as resolve17, dirname as dirname29, basename as basename10, sep as sep5, relative as relative7 } from "node:path";
 import matter from "gray-matter";
 var SKILL_FILENAME = "SKILL.md";
 var MAX_DEPTH = 8;
@@ -48423,7 +48782,7 @@ function localSkillId(canonicalPath) {
   return createHash19("sha256").update(canonicalPath).digest("hex").slice(0, 32);
 }
 async function walkSkillFiles(rootDir) {
-  const canonicalRoot = await fs35.realpath(rootDir).catch(() => resolve16(rootDir));
+  const canonicalRoot = await fs35.realpath(rootDir).catch(() => resolve17(rootDir));
   const files = [];
   const skipped = [];
   const visited = /* @__PURE__ */ new Set();
@@ -48436,7 +48795,7 @@ async function walkSkillFiles(rootDir) {
       return;
     }
     for (const entry of entries) {
-      const entryPath = join64(dir, entry.name);
+      const entryPath = join63(dir, entry.name);
       if (entry.isSymbolicLink()) {
         let realPath;
         try {
@@ -48536,7 +48895,7 @@ function toStringArray(value) {
 var logger33 = getCliLogger();
 var WATCH_DEBOUNCE_MS = 500;
 function resolveRoot(opts) {
-  if (opts.path) return resolve17(opts.path);
+  if (opts.path) return resolve18(opts.path);
   if (opts.client) return getInstallPath(opts.client);
   return getCanonicalInstallPath();
 }
@@ -48744,8 +49103,8 @@ function printHumanSummary(result) {
 // src/commands/config.ts
 import * as crypto13 from "node:crypto";
 import * as fs37 from "node:fs";
-import { homedir as homedir31 } from "node:os";
-import { join as join65, dirname as dirname30 } from "node:path";
+import { homedir as homedir29 } from "node:os";
+import { join as join64, dirname as dirname30 } from "node:path";
 import { Command as Command27 } from "commander";
 var logger34 = getCliLogger();
 var CONFIG_DIR3 = ".skillsmith";
@@ -48769,7 +49128,7 @@ function isSupportedKey(key) {
   return SUPPORTED_KEYS.includes(key);
 }
 function configPath() {
-  return join65(homedir31(), CONFIG_DIR3, CONFIG_FILE3);
+  return join64(homedir29(), CONFIG_DIR3, CONFIG_FILE3);
 }
 function readConfigFile2() {
   const path27 = configPath();
@@ -48887,15 +49246,15 @@ import { Command as Command28 } from "commander";
 
 // src/commands/telemetry.action.ts
 import { existsSync as existsSync28, copyFileSync as copyFileSync2, chmodSync as chmodSync9, mkdirSync as mkdirSync14 } from "node:fs";
-import { homedir as homedir33 } from "node:os";
-import { join as join67, dirname as dirname32 } from "node:path";
-import { readdirSync as readdirSync4, unlinkSync as unlinkSync4, statSync as statSync6 } from "node:fs";
+import { homedir as homedir31 } from "node:os";
+import { join as join66, dirname as dirname32 } from "node:path";
+import { readdirSync as readdirSync4, unlinkSync as unlinkSync5, statSync as statSync6 } from "node:fs";
 
 // src/commands/telemetry.helpers.ts
 import * as crypto14 from "node:crypto";
 import * as fs38 from "node:fs";
-import { join as join66, dirname as dirname31 } from "node:path";
-import { homedir as homedir32 } from "node:os";
+import { join as join65, dirname as dirname31 } from "node:path";
+import { homedir as homedir30 } from "node:os";
 var TelemetryHookError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -48906,9 +49265,9 @@ var TelemetryHookError = class extends Error {
 };
 function resolveSettingsPath(scope) {
   if (scope === "user") {
-    return join66(homedir32(), ".claude", "settings.json");
+    return join65(homedir30(), ".claude", "settings.json");
   }
-  return join66(process.cwd(), ".claude", "settings.json");
+  return join65(process.cwd(), ".claude", "settings.json");
 }
 function loadClaudeSettings(scope) {
   const path27 = resolveSettingsPath(scope);
@@ -49000,10 +49359,10 @@ var PRIVACY_URL = "https://skillsmith.app/privacy#telemetry";
 var DEFAULT_ENDPOINT = "https://vrcnzpmndtroqxxoqkzy.supabase.co/functions/v1/events";
 var ORPHAN_TTL_MS = 60 * 60 * 1e3;
 function hookScriptPath() {
-  return join67(homedir33(), ".skillsmith", "hooks", "skill-telemetry.sh");
+  return join66(homedir31(), ".skillsmith", "hooks", "skill-telemetry.sh");
 }
 function runDir() {
-  return join67(homedir33(), ".skillsmith", "run");
+  return join66(homedir31(), ".skillsmith", "run");
 }
 function idTail(id) {
   if (!id) return "(none)";
@@ -49016,10 +49375,10 @@ function gcOrphanRunFiles() {
     const now = Date.now();
     for (const f of readdirSync4(dir)) {
       if (!f.startsWith("skill-")) continue;
-      const fp = join67(dir, f);
+      const fp = join66(dir, f);
       try {
         const st = statSync6(fp);
-        if (now - st.mtimeMs > ORPHAN_TTL_MS) unlinkSync4(fp);
+        if (now - st.mtimeMs > ORPHAN_TTL_MS) unlinkSync5(fp);
       } catch {
       }
     }
@@ -49116,7 +49475,7 @@ async function runStatus() {
   }
 }
 async function runInstallHook(options) {
-  const templateSrc = join67(packageRoot(), "templates", "skill-telemetry.sh");
+  const templateSrc = join66(packageRoot(), "templates", "skill-telemetry.sh");
   if (!existsSync28(templateSrc)) {
     throw new Error(
       "skill-telemetry.sh template not found. Ensure the CLI package is fully built: npm run build"
@@ -49160,7 +49519,7 @@ async function runUninstallHook(options) {
   writeClaudeSettings(scope, updated);
   try {
     const scriptPath = hookScriptPath();
-    if (existsSync28(scriptPath)) unlinkSync4(scriptPath);
+    if (existsSync28(scriptPath)) unlinkSync5(scriptPath);
   } catch {
   }
   const scopeLabel = scope === "user" ? "~/.claude/settings.json" : "./.claude/settings.json";
@@ -49580,13 +49939,13 @@ function createAgentCommand() {
 
 // src/commands/diagnose.ts
 import { mkdirSync as mkdirSync15, readFileSync as readFileSync26, writeFileSync as writeFileSync16 } from "node:fs";
-import { basename as basename11, dirname as dirname33, resolve as resolve18 } from "node:path";
+import { basename as basename11, dirname as dirname33, resolve as resolve19 } from "node:path";
 import { Command as Command31 } from "commander";
 
 // src/commands/log-records.helpers.ts
 import { existsSync as existsSync29, readFileSync as readFileSync25, readdirSync as readdirSync5, statSync as statSync7 } from "node:fs";
-import { homedir as homedir34 } from "node:os";
-import { join as join68 } from "node:path";
+import { homedir as homedir32 } from "node:os";
+import { join as join67 } from "node:path";
 var LOG_FILE_PATTERN = /^skillsmith-[a-z]+-\d{4}-\d{2}-\d{2}\.jsonl(\.\d+)?$/;
 var LOG_LEVEL_ORDER = {
   debug: 0,
@@ -49599,12 +49958,12 @@ function isLogLevel(value) {
   return VALID_LEVELS.has(value);
 }
 function resolveLogDir() {
-  return process.env["SKILLSMITH_LOG_DIR"] || join68(homedir34(), ".skillsmith", "logs");
+  return process.env["SKILLSMITH_LOG_DIR"] || join67(homedir32(), ".skillsmith", "logs");
 }
 function listLogFiles(dir) {
   if (!existsSync29(dir)) return [];
   try {
-    return readdirSync5(dir).filter((name) => LOG_FILE_PATTERN.test(name)).sort().map((name) => join68(dir, name));
+    return readdirSync5(dir).filter((name) => LOG_FILE_PATTERN.test(name)).sort().map((name) => join67(dir, name));
   } catch {
     return [];
   }
@@ -49728,7 +50087,7 @@ function buildBundleContent(summary, files) {
 }
 function writeBundle(bundleOption, summary, files) {
   const rawPath = typeof bundleOption === "string" && bundleOption.length > 0 ? bundleOption : defaultBundlePath();
-  const targetPath = resolve18(rawPath);
+  const targetPath = resolve19(rawPath);
   const content = buildBundleContent(summary, files);
   mkdirSync15(dirname33(targetPath), { recursive: true });
   writeFileSync16(targetPath, content, "utf8");
@@ -49790,7 +50149,7 @@ function createDiagnoseCommand() {
 
 // src/commands/logs.ts
 import { existsSync as existsSync30, readFileSync as readFileSync27, statSync as statSync8 } from "node:fs";
-import { join as join69 } from "node:path";
+import { join as join68 } from "node:path";
 import { Command as Command32 } from "commander";
 var logger39 = getCliLogger();
 var TAIL_SURFACES = ["cli", "mcp", "vscode", "doc-retrieval"];
@@ -49799,7 +50158,7 @@ function todayDateString2() {
 }
 function todaysFilePaths(dir) {
   const date5 = todayDateString2();
-  return TAIL_SURFACES.map((surface) => join69(dir, `skillsmith-${surface}-${date5}.jsonl`));
+  return TAIL_SURFACES.map((surface) => join68(dir, `skillsmith-${surface}-${date5}.jsonl`));
 }
 function resolveLevel(raw) {
   if (raw === void 0) return void 0;
@@ -49854,8 +50213,8 @@ async function startTail(dir, level, opts = {}) {
     usePolling: true,
     interval: 100
   });
-  await new Promise((resolve19) => {
-    watcher.once("ready", resolve19);
+  await new Promise((resolve20) => {
+    watcher.once("ready", resolve20);
   });
   const handleEvent = (path27) => {
     let size;
@@ -49942,10 +50301,10 @@ function shouldShowStartupHeader(commandPath, isTTY) {
 
 // src/utils/node-version.ts
 import { readFileSync as readFileSync28 } from "fs";
-import { join as join70 } from "path";
+import { join as join69 } from "path";
 function loadMinNodeVersion() {
   try {
-    const packageJsonPath2 = join70(packageRoot(), "package.json");
+    const packageJsonPath2 = join69(packageRoot(), "package.json");
     const packageJson2 = JSON.parse(readFileSync28(packageJsonPath2, "utf-8"));
     const engineConstraint = packageJson2.engines?.node ?? ">=22.22.0";
     return engineConstraint.replace(/[>=<^~\s]/g, "");
@@ -50018,14 +50377,14 @@ function checkNodeVersion() {
 
 // src/index.ts
 import { readFileSync as readFileSync29 } from "fs";
-import { join as join71 } from "path";
+import { join as join70 } from "path";
 var logger40 = getCliLogger();
 var versionError = checkNodeVersion();
 if (versionError) {
   logger40.error(versionError);
   process.exit(1);
 }
-var packageJsonPath = join71(packageRoot(), "package.json");
+var packageJsonPath = join70(packageRoot(), "package.json");
 var packageJson = JSON.parse(readFileSync29(packageJsonPath, "utf-8"));
 var CLI_VERSION = packageJson.version;
 var program = new Command33();