@vibe-agent-toolkit/agent-skills 0.2.0-rc.5 → 0.2.0-rc.7

package/dist/schemas/allowed-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowed-tools.js","sourceRoot":"","sources":["../../src/schemas/allowed-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACzD,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,EAAE;YAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,GAAG,EAAE,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,EAAE;QAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO;IACH,KAAK,GAAG,CAAC,CAAC;IACV,KAAK,CAAwB;IAErC,gFAAgF;IAChF,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QAClD,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAClD,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,KAAK;aACvB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;aAC1D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QACjC,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/schemas/index.d.ts

@@ -2,6 +2,7 @@
  * Schema exports for agent-skills package
  */
 export { AgentSkillFrontmatterJsonSchema, AgentSkillFrontmatterSchema, VATAgentSkillFrontmatterSchema, type AgentSkillFrontmatter, type VATAgentSkillFrontmatter, } from './agent-skill-frontmatter.js';
+export { allowedToolsOf, splitAllowedToolsList } from './allowed-tools.js';
 export { detectInstalledPluginsRegistryDrift, InstalledPluginsRegistryJsonSchema, InstalledPluginsRegistrySchema, KNOWN_INSTALLATION_SCOPES, type InstalledPluginsRegistry, type PluginInstallation, } from './installed-plugins-registry.js';
 export { detectKnownMarketplacesRegistryDrift, KNOWN_MARKETPLACE_SOURCE_KINDS, KnownMarketplacesRegistryJsonSchema, KnownMarketplacesRegistrySchema, type KnownMarketplacesRegistry, type MarketplaceEntry, type MarketplaceSource, } from './known-marketplaces-registry.js';
 export type { RegistryShapeDrift } from './registry-drift.js';

package/dist/schemas/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,mCAAmC,EACnC,kCAAkC,EAClC,8BAA8B,EAC9B,yBAAyB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,GACxB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,+BAA+B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,kCAAkC,CAAC;AAE1C,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3E,OAAO,EACL,mCAAmC,EACnC,kCAAkC,EAClC,8BAA8B,EAC9B,yBAAyB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,GACxB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,+BAA+B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,kCAAkC,CAAC;AAE1C,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC"}

package/dist/schemas/index.js

@@ -2,6 +2,7 @@
  * Schema exports for agent-skills package
  */
 export { AgentSkillFrontmatterJsonSchema, AgentSkillFrontmatterSchema, VATAgentSkillFrontmatterSchema, } from './agent-skill-frontmatter.js';
+export { allowedToolsOf, splitAllowedToolsList } from './allowed-tools.js';
 export { detectInstalledPluginsRegistryDrift, InstalledPluginsRegistryJsonSchema, InstalledPluginsRegistrySchema, KNOWN_INSTALLATION_SCOPES, } from './installed-plugins-registry.js';
 export { detectKnownMarketplacesRegistryDrift, KNOWN_MARKETPLACE_SOURCE_KINDS, KnownMarketplacesRegistryJsonSchema, KnownMarketplacesRegistrySchema, } from './known-marketplaces-registry.js';
 export { MarketplaceManifestJsonSchema, MarketplaceManifestSchema, } from './marketplace-manifest.js';

package/dist/schemas/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,GAG/B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,mCAAmC,EACnC,kCAAkC,EAClC,8BAA8B,EAC9B,yBAAyB,GAG1B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,+BAA+B,GAIhC,MAAM,kCAAkC,CAAC;AAI1C,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAE1B,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,GAG/B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3E,OAAO,EACL,mCAAmC,EACnC,kCAAkC,EAClC,8BAA8B,EAC9B,yBAAyB,GAG1B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,+BAA+B,GAIhC,MAAM,kCAAkC,CAAC;AAI1C,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAE1B,MAAM,2BAA2B,CAAC"}

package/dist/schemas/marketplace-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"marketplace-manifest.d.ts","sourceRoot":"","sources":["../../src/schemas/marketplace-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA6DxB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA0B0C,CAAC;AAEjF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;;CAMzC,CAAC"}
+{"version":3,"file":"marketplace-manifest.d.ts","sourceRoot":"","sources":["../../src/schemas/marketplace-manifest.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAwExB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA0B0C,CAAC;AAEjF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;;CAMzC,CAAC"}

package/dist/schemas/marketplace-manifest.js

@@ -1,3 +1,4 @@
+import { hasParentTraversalSegment, isAbsoluteAnyPlatform } from '@vibe-agent-toolkit/utils';
 import { z } from 'zod';
 import { zodToJsonSchema } from 'zod-to-json-schema';
 /**
@@ -26,17 +27,27 @@ const OwnerSchema = z
  * We validate the discriminant (`source` field on objects) but use
  * .passthrough() for provider-specific fields (repo, url, package, etc.).
  *
- * String paths must not use .. directory traversal — Claude Code rejects
- * source paths that resolve outside the marketplace directory.
+ * A string `source` is a path the consumer resolves against the marketplace
+ * root and WALKS, so this refine is the first containment gate. It refuses
+ * every spelling that leaves the root on some platform: an absolute path
+ * (POSIX root, drive letter, UNC) and a `..` segment behind EITHER separator.
+ * Claude Code's installer rejects a source that resolves outside the
+ * marketplace directory, so such an entry cannot ship either way.
+ *
+ * 🪤 The check used to split on `/` alone — `plugins\..\..\x` passed it and
+ * `path.resolve` walked it out of the root on every platform; `/etc` passed it
+ * outright — and the consumer entered whatever it named.
  */
 const PluginSourceSchema = z.union([
     z
         .string()
         .min(1)
-        // eslint-disable-next-line local/no-hardcoded-path-split -- source is a URL-style path, not a filesystem path; forward-slash split is correct
-        .refine((s) => !s.split('/').includes('..'), {
-        message: 'source path must not use .. directory traversal',
-    }),
+        .refine((s) => !isAbsoluteAnyPlatform(s) && !hasParentTraversalSegment(s), (s) => ({
+        // Names the value: the reader's next move is to fix THIS entry.
+        message: `source path "${s}" must be relative to the marketplace directory and stay inside it`
+            + ' (no absolute path, no `..` segment) — Claude Code rejects a plugin source that'
+            + ' resolves outside the marketplace, so this entry cannot be installed',
+    })),
     z.object({ source: z.string() }).passthrough(),
 ]);
 const MarketplacePluginEntrySchema = z

package/dist/schemas/marketplace-manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"marketplace-manifest.js","sourceRoot":"","sources":["../../src/schemas/marketplace-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,GAAG,CAAC;KACnB,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,WAAW,EAAE,CAAC;AAEhB;;;;;;;GAOG;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC;IAClC,CAAC;SACC,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;QACP,8IAA8I;SAC7I,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;QAC5C,OAAO,EAAE,iDAAiD;KAC1D,CAAC;IACH,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG,CAAC;KACpC,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IAClD,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,CAAC;SACP,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;KACpC,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;CACZ,CAAC;KACD,WAAW,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACxC,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAEhE,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;SACtC,QAAQ,CAAC,wBAAwB,CAAC;IAEpC,WAAW,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+CAA+C,CAAC;IAE3D,OAAO,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,8BAA8B,CAAC;IAE1C,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAE5D,OAAO,EAAE,CAAC;SACR,KAAK,CAAC,4BAA4B,CAAC;SACnC,QAAQ,CAAC,+CAA+C,CAAC;CAC3D,CAAC;KACD,WAAW,EAAE;KACb,QAAQ,CAAC,oEAAoE,CAAC,CAAC;AAIjF;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,eAAe,CAC3D,yBAAyB,EACzB;IACC,IAAI,EAAE,qBAAqB;IAC3B,YAAY,EAAE,MAAM;CACpB,CACD,CAAC"}
+{"version":3,"file":"marketplace-manifest.js","sourceRoot":"","sources":["../../src/schemas/marketplace-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,GAAG,CAAC;KACnB,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,WAAW,EAAE,CAAC;AAEhB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC;IAClC,CAAC;SACC,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClF,gEAAgE;QAChE,OAAO,EACN,gBAAgB,CAAC,oEAAoE;cACnF,iFAAiF;cACjF,sEAAsE;KACzE,CAAC,CAAC;IACJ,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG,CAAC;KACpC,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IAClD,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,CAAC;SACP,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;KACpC,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;CACZ,CAAC;KACD,WAAW,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACxC,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAEhE,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;SACtC,QAAQ,CAAC,wBAAwB,CAAC;IAEpC,WAAW,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+CAA+C,CAAC;IAE3D,OAAO,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,8BAA8B,CAAC;IAE1C,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAE5D,OAAO,EAAE,CAAC;SACR,KAAK,CAAC,4BAA4B,CAAC;SACnC,QAAQ,CAAC,+CAA+C,CAAC;CAC3D,CAAC;KACD,WAAW,EAAE;KACb,QAAQ,CAAC,oEAAoE,CAAC,CAAC;AAIjF;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,eAAe,CAC3D,yBAAyB,EACzB;IACC,IAAI,EAAE,qBAAqB;IAC3B,YAAY,EAAE,MAAM;CACpB,CACD,CAAC"}

package/dist/skill-identity.d.ts

@@ -18,4 +18,14 @@
  * some fallback (typically the directory leaf) applies.
  */
 export declare function readDeclaredSkillName(skillMdPath: string): string | undefined;
+/**
+ * The same answer, for a SKILL.md whose BYTES a caller already holds and whose
+ * path may not exist on disk at all — an entry read out of a ZIP's central
+ * directory being the case this was split out for.
+ *
+ * Deliberately the same function as the path-taking reader above rather than a
+ * second parse beside it: two spellings of "what name does this declare" is
+ * exactly how one lane starts answering differently from another.
+ */
+export declare function declaredSkillNameIn(content: string): string | undefined;
 //# sourceMappingURL=skill-identity.d.ts.map

package/dist/skill-identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-identity.d.ts","sourceRoot":"","sources":["../src/skill-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAiB7E"}
+{"version":3,"file":"skill-identity.d.ts","sourceRoot":"","sources":["../src/skill-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS7E;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASvE"}

package/dist/skill-identity.js

@@ -28,6 +28,18 @@ export function readDeclaredSkillName(skillMdPath) {
     catch {
         return undefined;
     }
+    return declaredSkillNameIn(content);
+}
+/**
+ * The same answer, for a SKILL.md whose BYTES a caller already holds and whose
+ * path may not exist on disk at all — an entry read out of a ZIP's central
+ * directory being the case this was split out for.
+ *
+ * Deliberately the same function as the path-taking reader above rather than a
+ * second parse beside it: two spellings of "what name does this declare" is
+ * exactly how one lane starts answering differently from another.
+ */
+export function declaredSkillNameIn(content) {
     const parsed = parseFrontmatter(content);
     if (!parsed.success)
         return undefined;

package/dist/skill-identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"skill-identity.js","sourceRoot":"","sources":["../src/skill-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,iGAAiG;QACjG,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAEtC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEnD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"skill-identity.js","sourceRoot":"","sources":["../src/skill-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,iGAAiG;QACjG,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAEtC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEnD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC"}

package/dist/skill-packager.d.ts

@@ -14,9 +14,10 @@
  * Uses ResourceRegistry + transformContent() from @vibe-agent-toolkit/resources
  * for link resolution and rewriting (replacing the previous inline regex approach).
  */
-import { ResourceRegistry, type ResourcePopulationSource } from '@vibe-agent-toolkit/resources';
+import { ResourceRegistry, type ResourceLink, type ResourcePopulationSource } from '@vibe-agent-toolkit/resources';
 import { type AllowUsageLedger, type ValidationConfig, type ValidationIssue } from '@vibe-agent-toolkit/schema';
 import { type GitTracker } from '@vibe-agent-toolkit/utils/git';
+import { type PackagingTarget } from './content-type-routing.js';
 import { type SkillFileEntry } from './files-config.js';
 import { type ConventionalSuiteProbe, type DeclaredEvalSuite } from './test-input.js';
 import { type PackagingValidationResult, type SkillPackagingConfig } from './validators/packaging-validator.js';
@@ -24,12 +25,6 @@ import { type PackagingValidationResult, type SkillPackagingConfig } from './val
  * Resource naming strategy type
  */
 export type ResourceNamingStrategy = 'basename' | 'resource-id' | 'preserve-path';
-/**
- * Packaging target: determines ZIP directory structure
- * - 'claude-code': Standard VAT format with resources/ subdirectory (default)
- * - 'claude-web': Claude.ai web upload format with references/, scripts/, assets/ subdirectories
- */
-export type PackagingTarget = 'claude-code' | 'claude-web';
 export interface PackageSkillOptions {
     /**
      * Output directory for packaged skill
@@ -111,8 +106,10 @@ export interface PackageSkillOptions {
     /**
      * Packaging target — controls the ZIP directory structure produced.
      *
-     * - 'claude-code' (default): Standard VAT layout with resources/ subdirectory
-     * - 'claude-web': Claude.ai web upload layout with references/, scripts/, assets/ subdirectories
+     * - 'claude-code' (default): Standard VAT layout, routed by extension into
+     *   resources/, scripts/, templates/, assets/
+     * - 'claude-web': Claude.ai web upload layout — every resource flattened into
+     *   references/, extensions ignored (see `PackagingTarget`)
      *
      * Default: 'claude-code'
      */
@@ -390,12 +387,87 @@ export declare function createProjectRegistry(projectRoot: string, options?: Pro
  */
 export declare function synthesizeAssetId(assetPath: string): string;
 /**
- * Determine the resource subdirectory for a file.
+ * Copy a single file, optionally rewriting markdown links using transformContent().
+ *
+ * For markdown files with rewriteLinks enabled:
+ * 1. Reads the source file
+ * 2. Finds the corresponding resource in the "from" registry
+ * 3. Calls transformContent() with the resource's links, unified rules, and "to" registry
+ * 4. Writes the result
+ *
+ * All link rewriting (bundled, excluded, inline, reference-style definitions)
+ * is handled by a single transformContent() call with ordered rules.
+ *
+ * For non-markdown files, performs a plain binary copy.
+ */
+/**
+ * Re-base a resource's link spans onto the frontmatter-stripped body.
+ *
+ * ## 🚨 Why this exists: the span rewrite was INERT here, and could mis-splice
+ *
+ * `transformContent` identifies each link by its parsed `[startOffset,
+ * endOffset)` span rather than by replaying a regex and correlating on href —
+ * which is the whole point, because the two grammars disagree about what the
+ * href IS. Its docstring states the precondition outright: *links must come from
+ * the same bytes as content*.
+ *
+ * This call site violated it. `resource.links` are parsed from the WHOLE FILE,
+ * and `editor.body` has the frontmatter block removed — so every offset was off
+ * by the frontmatter's length. Measured on a four-line skill: span `[45, 77)`
+ * against a body shifted by 40, where `body.slice(45, 81)` is `"ails.\n"`. Every
+ * splice declined and every link fell back to the pre-fix regex path, so the
+ * headline defect (`[![alt](img)](url)` silently not rewritten) was still
+ * shipping. Worse, a stale span can land on a *different*, structurally valid
+ * link and rewrite ITS href to the first link's target.
+ *
+ * ## The re-base is VERIFIED, not assumed
+ *
+ * Subtracting `content.length - body.length` is correct if and only if `body` is
+ * a literal SUFFIX of `content` — that is exactly the statement "every body index
+ * `i` is content index `i + offset`". `String.endsWith` decides it outright, so
+ * the arithmetic is checked rather than argued, and a body that is not a suffix
+ * comes back with its spans REMOVED instead of with coordinates nothing verified.
+ * `openFrontmatter` does yield a suffix today, across CRLF, a commented block, an
+ * absent block and empty input; the check is what keeps that a fact rather than a
+ * comment that outlives the code it describes.
+ *
+ * ⛔ **This used to claim `splicableFrom` as its backstop, and that claim was
+ * false.** The words were: "`splicableFrom` refuses any span whose destination is
+ * not exactly the parser's href, so a misalignment that survives this degrades to
+ * *no rewrite* rather than to a wrong one." It does not. That comparison is keyed
+ * on the HREF, which two links in one document routinely share, so a stale span
+ * landing on a same-href neighbour passes it and the neighbour is rewritten
+ * through the first link's metadata. Constructed and pinned in
+ * `packages/resources/test/content-transform.test.ts` › *two links sharing an
+ * href defeat the destination comparison*, where a tuned frontmatter length makes
+ * two labels swap places. A mitigation keyed on a value the two candidates have
+ * in common cannot be a guarantee, and a guard resting on one is resting on
+ * nothing.
+ *
+ * 🔑 What holds instead, in full, because the precondition has two halves:
+ *
+ * 1. *The spans address `content`* — discharged by the reader, not by this
+ *    function. `resource.links` and `content` must come from the same decode of
+ *    the same file, which is why the caller's read is pinned to
+ *    `readTextContent` with a 🚨 of its own. A second reader is the one way this
+ *    half fails, and it fails invisibly.
+ * 2. *The subtraction maps `content` onto `body`* — discharged here, by
+ *    `endsWith`.
+ *
+ * `splicableFrom`'s destination check remains a useful mitigation for the
+ * residue. It is not counted on, and nothing here degrades gracefully because of
+ * it.
  *
- * For claude-web target: uses the existing references directory.
- * For claude-code target: uses content-type routing based on file extension.
+ * @param content - The file as read, which the links were parsed from
+ * @param body - The frontmatter-stripped body the rewrite will run over
+ * @param links - The resource's links, carrying whole-file offsets
+ * @param onUnverifiable - Called when `body` is not a suffix of `content`, so the
+ *   caller can say which file lost its span-driven rewrite. Never called on the
+ *   normal path.
+ * @returns The same links with offsets stated against `body`, or with no offsets
+ *   at all when the re-base could not be verified
  */
-export declare function getResourceSubdirForFile(filePath: string, target: PackagingTarget): string;
+export declare function bodyRelativeLinks(content: string, body: string, links: readonly ResourceLink[], onUnverifiable: () => void): ResourceLink[];
 /**
  * Extract H1 title from markdown content
  *

package/dist/skill-packager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-packager.d.ts","sourceRoot":"","sources":["../src/skill-packager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,EAGL,gBAAgB,EAYhB,KAAK,wBAAwB,EAE9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAIL,KAAK,gBAAgB,EAErB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AASpC,OAAO,EACL,KAAK,UAAU,EAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EAOL,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAIL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EAIvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAA6B,KAAK,yBAAyB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AA0E3I;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,CAAC;AAElF;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,YAAY,CAAC;AAK3D,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,WAAW,GAAG,KAAK,GAAG,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC;IAE1D;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;;;;;;;;;OAcG;IACH,cAAc,CAAC,EAAE,sBAAsB,CAAC;IAExC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAE9C,kGAAkG;IAClG,sBAAsB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAE7C,mEAAmE;IACnE,2BAA2B,CAAC,EAAE;QAC5B,KAAK,CAAC,EAAE,KAAK,CAAC;YACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;YACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;SAC/B,CAAC,GAAG,SAAS,CAAC;QACf,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACtC,GAAG,SAAS,CAAC;IAEd;;;;OAIG;IACH,QAAQ,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAExC;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAEpC;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAErC;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,cAAc,EAAE,GAAG,SAAS,CAAC;IAErC;;;OAGG;IACH,UAAU,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAE1C;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAErC;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;CAC5C;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,EAClD,aAAa,EAAE,SAAS,iBAAiB,EAAE,EAC3C,oBAAoB,EAAE,sBAAsB,GAC3C,mBAAmB,CAmCrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,KAAK,EAAE,aAAa,CAAC;IAErB;;OAEG;IACH,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IAEF;;OAEG;IACH,SAAS,CAAC,EAAE;QACV,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,sCAAsC;IACtC,kBAAkB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAE1C;;;OAGG;IACH,eAAe,CAAC,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC;IAEhD,uDAAuD;IACvD,mBAAmB,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAE5D,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAClE;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,cAAc,EAAE,EACxB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,gBAAgB,EAC7B,UAAU,GAAE,sBAA2B,GACtC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAiChC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC,CAkX7B;AAgJD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;CACzD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,gBAAgB,CAAC,CAY3B;AAkCD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D;AAycD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,MAAM,CAK1F;AAoiBD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASlE;AAMD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAsC9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,sBAAmC,EAC7C,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CA6CR;AAWD;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;CAUlD"}
+{"version":3,"file":"skill-packager.d.ts","sourceRoot":"","sources":["../src/skill-packager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,EAGL,gBAAgB,EAWhB,KAAK,YAAY,EAEjB,KAAK,wBAAwB,EAE9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAIL,KAAK,gBAAgB,EAErB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AAUpC,OAAO,EACL,KAAK,UAAU,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EAOL,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAIL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EAIvB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAA6B,KAAK,yBAAyB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AA4E3I;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,CAAC;AAKlF,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,WAAW,GAAG,KAAK,GAAG,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC;IAE1D;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;;;;;;;;;OAcG;IACH,cAAc,CAAC,EAAE,sBAAsB,CAAC;IAExC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAE9C,kGAAkG;IAClG,sBAAsB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAE7C,mEAAmE;IACnE,2BAA2B,CAAC,EAAE;QAC5B,KAAK,CAAC,EAAE,KAAK,CAAC;YACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;YACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;SAC/B,CAAC,GAAG,SAAS,CAAC;QACf,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACtC,GAAG,SAAS,CAAC;IAEd;;;;OAIG;IACH,QAAQ,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAExC;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAEpC;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAErC;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,cAAc,EAAE,GAAG,SAAS,CAAC;IAErC;;;OAGG;IACH,UAAU,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAE1C;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAErC;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;CAC5C;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,EAClD,aAAa,EAAE,SAAS,iBAAiB,EAAE,EAC3C,oBAAoB,EAAE,sBAAsB,GAC3C,mBAAmB,CAmCrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,KAAK,EAAE,aAAa,CAAC;IAErB;;OAEG;IACH,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IAEF;;OAEG;IACH,SAAS,CAAC,EAAE;QACV,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,sCAAsC;IACtC,kBAAkB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAE1C;;;OAGG;IACH,eAAe,CAAC,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC;IAEhD,uDAAuD;IACvD,mBAAmB,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAE5D,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAClE;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,cAAc,EAAE,EACxB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,gBAAgB,EAC7B,UAAU,GAAE,sBAA2B,GACtC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAiChC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC,CA0Y7B;AAgJD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;CACzD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,gBAAgB,CAAC,CAe3B;AAkCD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D;AAgtBD;;;;;;;;;;;;;GAaG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,cAAc,EAAE,MAAM,IAAI,GACzB,YAAY,EAAE,CAYhB;AAoUD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASlE;AAMD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAsC9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,sBAAmC,EAC7C,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CA6CR;AAWD;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;CAUlD"}

package/dist/skill-packager.js

@@ -20,12 +20,14 @@ import { basename, dirname } from 'node:path';
 import { DeferredArtifacts, DuplicateResourceIdError, ResourceRegistry, loadConfig, openFrontmatter, resolveLocalHref, rewriteFrontmatterUriReferencesFromSchema, rewriteHtmlLinks, transformContent, parseFileCached, } from '@vibe-agent-toolkit/resources';
 import { allowUnusedIssues, createAllowUsageLedger, runValidationFramework, } from '@vibe-agent-toolkit/schema';
 import { findProjectRoot, isGlob, issueLocation, resolveAssetReference, toForwardSlash, safePath, } from '@vibe-agent-toolkit/utils';
-import { CLAUDE_WEB_REFERENCES_SUBDIR, getTargetSubdir } from './content-type-routing.js';
+import { readTextContent } from '@vibe-agent-toolkit/utils/fs';
+import { getResourceSubdirForFile } from './content-type-routing.js';
 import { applyFilesConfig, buildArtifactHint, droppedGlobMatchesToIssues, explicitFilesConfigDests, globEntryDest, skippedGlobMatchesToIssues, } from './files-config.js';
 import { READ_REMEDY, withFsAttribution } from './fs-attribution.js';
-import { checkBrokenPackagedLinks, checkUnreferencedFiles } from './post-build-checks.js';
+import { checkBrokenPackagedLinks, checkMissingReferencedPaths, checkUnreferencedFiles } from './post-build-checks.js';
 import { checkPackagedTestInput, partitionTestInputFileEntries, resolveTestInputDirs, testInputExcludeRules, testInputFileEntryIssues, testInputLinkIssues, } from './test-input.js';
 import { detectPackagedAgentInstructionFiles } from './validators/agent-instruction-presence.js';
+import { checkPackagedSizeLimit } from './validators/packaged-size-limit.js';
 import { validateSkillForPackaging } from './validators/packaging-validator.js';
 import { materializeIssue } from './validators/rule-engine/index.js';
 import { deferredAssetsToIssues, walkerExclusionsToIssues } from './validators/walker-to-issues.js';
@@ -40,18 +42,20 @@ const WRITE_ACTION = 'written into the bundle';
  * `{{link.rawText}}`, not `{{link.text}}`, for the same two reasons the rewrite
  * branch uses it (see `bundledLinkTemplate`):
  *
- *  - **Correlation.** `transformContent` keys parsed links by href and lets the
- *    FIRST occurrence win, so `link.text` on a second link sharing that href is
- *    the first link's text. `rawText` is the regex's per-occurrence capture, so it
- *    always belongs to the link being replaced. Stripping with `link.text` swapped
- *    one phrase for an unrelated one in shipped prose; the rewrite branch never
- *    exposed it because it re-emits `rawText`.
+ *  - **Per-occurrence identity.** `link.text` is a property of the parsed link,
+ *    and two occurrences sharing an href are two links whose text may differ.
+ *    `rawText` is always the text of the occurrence actually being replaced, so
+ *    it cannot swap one phrase for an unrelated one in shipped prose.
  *  - **Formatting.** `rawText` keeps the inline markup the author wrote, so
  *    ``[`foo.yaml`](…)`` strips to ``` `foo.yaml` ``` rather than bare `foo.yaml`.
  *
- * Text was the ONLY field the collision could corrupt: the map key is the full
- * href including any `#fragment`, so two links that collide there necessarily
- * resolve to the same resource and carry the same fragment.
+ * > This used to explain the first reason as a defence against `transformContent`
+ * > keying parsed links by href and letting the FIRST occurrence win. That
+ * > correlation is gone: `transformContent` now splices each parsed link at its
+ * > own `[startOffset, endOffset)` span, so there is no shared-href map to collide
+ * > in for any link the parser located. `rawText` remains correct and remains the
+ * > right choice — the reasoning above no longer depends on a collision that the
+ * > rewriter can still have.
  */
 const DEFAULT_STRIP_TEMPLATE = '{{link.rawText}}';
 /**
@@ -461,6 +465,30 @@ export async function packageSkill(skillPath, options = {}) {
         ...collisionIssues,
         ...await checkUnreferencedFiles(outputPath, filesConfigDests),
         ...await checkBrokenPackagedLinks(outputPath, droppedGlobDests),
+        // The inverse of checkUnreferencedFiles: paths the docs NAME that the bundle
+        // does not contain. Built phase only — a `files:` dest exists here and not in
+        // the source tree, so the same check at source phase flags every injected
+        // script.
+        //
+        // SKILL-LOCAL, and this is the ONLY caller. The packager knows its own output
+        // directory, not the plugin the skill will be installed into, so there is no
+        // wider root to give it — the sibling-search parameter that measured 1.9%
+        // instead of 3.8% was deleted for having no caller. The shipped rate is 3.8%.
+        ...await checkMissingReferencedPaths(outputPath, target),
+        // The only byte measurement in the pipeline. Built phase for the same reason
+        // as its neighbour above: a `files:` entry materializes files here that the
+        // source tree does not have, so the bytes that ship are only knowable now.
+        //
+        // ⚠️ Runs before step 14, so it does not weigh what `generatePackageArtifacts`
+        // adds. Measured, so the residue is not a guess: the `zip` and `npm` formats
+        // write to `<outputPath>.zip` / `.tgz`, OUTSIDE the bundle and outside the
+        // upload; only the `npm` format's synthetic package.json and the `marketplace`
+        // format's manifest land inside, and both are a few hundred bytes. The order
+        // is not free to change — checkUnreferencedFiles two lines up would flag that
+        // same synthetic package.json — so the under-count is stated rather than
+        // fixed. If an artifact step ever writes something LARGE into outputPath, this
+        // call has to move after it and the framework run with it.
+        ...checkPackagedSizeLimit(outputPath),
         // A receipt for every file a glob matched and the never-package list refused.
         // Reported as an issue, not written to stderr: a file vanishing from a bundle
         // has to be visible in `issueCounts`, or CI reads a clean report for a build
@@ -619,7 +647,7 @@ function withRunAllowUnused(framework, ledger) {
  */
 async function runPostBuildValidation(outputPath, validation, allowLedger) {
     const builtSkillPath = safePath.join(outputPath, 'SKILL.md');
-    return validateSkillForPackaging(builtSkillPath, validation ? { validation } : undefined, 'built', { allowLedger });
+    return validateSkillForPackaging(builtSkillPath, validation ? { validation } : undefined, 'built', { allowLedger, unreadable: 'refuse' });
 }
 /**
  * Assemble the final PackageSkillResult from intermediate data.
@@ -694,6 +722,9 @@ export async function createProjectRegistry(projectRoot, options = {}) {
     const registry = await ResourceRegistry.fromCrawl({
         baseDir: projectRoot,
         include: ['**/*.md'],
+        // A build must not ship a shorter bundle: a directory this crawl cannot
+        // list refuses the run by name — see `RegistryUnreadablePolicy`.
+        unreadable: 'refuse',
         ...(options.populationSource !== undefined && { populationSource: options.populationSource }),
     }, config === undefined ? undefined : { config });
     registry.resolveLinks();
@@ -1096,21 +1127,6 @@ function stampDeferredDestResolvedId(resources, absDestTarget, id) {
     }
     return linked;
 }
-// ============================================================================
-// Path Map Building
-// ============================================================================
-/**
- * Determine the resource subdirectory for a file.
- *
- * For claude-web target: uses the existing references directory.
- * For claude-code target: uses content-type routing based on file extension.
- */
-export function getResourceSubdirForFile(filePath, target) {
-    if (target === 'claude-web') {
-        return CLAUDE_WEB_REFERENCES_SUBDIR;
-    }
-    return getTargetSubdir(filePath);
-}
 /**
  * The FILENAME_COLLISION finding for one pair of sources that package to one dest.
  *
@@ -1295,6 +1311,106 @@ async function copyAndRewriteFiles(skillPath, bundledFiles, ctx) {
  *
  * For non-markdown files, performs a plain binary copy.
  */
+/**
+ * Re-base a resource's link spans onto the frontmatter-stripped body.
+ *
+ * ## 🚨 Why this exists: the span rewrite was INERT here, and could mis-splice
+ *
+ * `transformContent` identifies each link by its parsed `[startOffset,
+ * endOffset)` span rather than by replaying a regex and correlating on href —
+ * which is the whole point, because the two grammars disagree about what the
+ * href IS. Its docstring states the precondition outright: *links must come from
+ * the same bytes as content*.
+ *
+ * This call site violated it. `resource.links` are parsed from the WHOLE FILE,
+ * and `editor.body` has the frontmatter block removed — so every offset was off
+ * by the frontmatter's length. Measured on a four-line skill: span `[45, 77)`
+ * against a body shifted by 40, where `body.slice(45, 81)` is `"ails.\n"`. Every
+ * splice declined and every link fell back to the pre-fix regex path, so the
+ * headline defect (`[![alt](img)](url)` silently not rewritten) was still
+ * shipping. Worse, a stale span can land on a *different*, structurally valid
+ * link and rewrite ITS href to the first link's target.
+ *
+ * ## The re-base is VERIFIED, not assumed
+ *
+ * Subtracting `content.length - body.length` is correct if and only if `body` is
+ * a literal SUFFIX of `content` — that is exactly the statement "every body index
+ * `i` is content index `i + offset`". `String.endsWith` decides it outright, so
+ * the arithmetic is checked rather than argued, and a body that is not a suffix
+ * comes back with its spans REMOVED instead of with coordinates nothing verified.
+ * `openFrontmatter` does yield a suffix today, across CRLF, a commented block, an
+ * absent block and empty input; the check is what keeps that a fact rather than a
+ * comment that outlives the code it describes.
+ *
+ * ⛔ **This used to claim `splicableFrom` as its backstop, and that claim was
+ * false.** The words were: "`splicableFrom` refuses any span whose destination is
+ * not exactly the parser's href, so a misalignment that survives this degrades to
+ * *no rewrite* rather than to a wrong one." It does not. That comparison is keyed
+ * on the HREF, which two links in one document routinely share, so a stale span
+ * landing on a same-href neighbour passes it and the neighbour is rewritten
+ * through the first link's metadata. Constructed and pinned in
+ * `packages/resources/test/content-transform.test.ts` › *two links sharing an
+ * href defeat the destination comparison*, where a tuned frontmatter length makes
+ * two labels swap places. A mitigation keyed on a value the two candidates have
+ * in common cannot be a guarantee, and a guard resting on one is resting on
+ * nothing.
+ *
+ * 🔑 What holds instead, in full, because the precondition has two halves:
+ *
+ * 1. *The spans address `content`* — discharged by the reader, not by this
+ *    function. `resource.links` and `content` must come from the same decode of
+ *    the same file, which is why the caller's read is pinned to
+ *    `readTextContent` with a 🚨 of its own. A second reader is the one way this
+ *    half fails, and it fails invisibly.
+ * 2. *The subtraction maps `content` onto `body`* — discharged here, by
+ *    `endsWith`.
+ *
+ * `splicableFrom`'s destination check remains a useful mitigation for the
+ * residue. It is not counted on, and nothing here degrades gracefully because of
+ * it.
+ *
+ * @param content - The file as read, which the links were parsed from
+ * @param body - The frontmatter-stripped body the rewrite will run over
+ * @param links - The resource's links, carrying whole-file offsets
+ * @param onUnverifiable - Called when `body` is not a suffix of `content`, so the
+ *   caller can say which file lost its span-driven rewrite. Never called on the
+ *   normal path.
+ * @returns The same links with offsets stated against `body`, or with no offsets
+ *   at all when the re-base could not be verified
+ */
+export function bodyRelativeLinks(content, body, links, onUnverifiable) {
+    if (!content.endsWith(body)) {
+        onUnverifiable();
+        return links.map(withoutSpan);
+    }
+    const offset = content.length - body.length;
+    if (offset === 0)
+        return [...links];
+    return links.map((link) => ({
+        ...link,
+        ...(link.startOffset === undefined ? {} : { startOffset: link.startOffset - offset }),
+        ...(link.endOffset === undefined ? {} : { endOffset: link.endOffset - offset }),
+    }));
+}
+/**
+ * The link with its coordinates dropped and everything else kept.
+ *
+ * ⚠️ Dropping them is the point, and returning the link unchanged would be the
+ * bug: an unrebased whole-file span still ADDRESSES the body's bytes, just the
+ * wrong ones, so `splicableFrom` would happily splice at it. Without a span the
+ * link is `UNRECOGNISED`, which routes it to the pre-span regex replay — the
+ * behaviour this call site had before spans existed. A documented degrade, not a
+ * silent one; the caller warns.
+ *
+ * @param link - A link whose offsets could not be re-based
+ * @returns The same link with no `startOffset` and no `endOffset` key
+ */
+function withoutSpan(link) {
+    const stripped = { ...link };
+    delete stripped.startOffset;
+    delete stripped.endOffset;
+    return stripped;
+}
 async function copyAndRewriteFile(sourcePath, targetPath, ctx) {
     // Through the SAME attribution point as the `files:` lanes. This is the default
     // path for every ordinary markdown-linked file in a build — the most-travelled
@@ -1316,10 +1432,34 @@ async function copyAndRewriteFile(sourcePath, targetPath, ctx) {
         await withFsAttribution(subject, () => copyFile(sourcePath, targetPath));
         return;
     }
-    // Read source file
-    const content = await withFsAttribution(subject, 
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- sourcePath is validated
-    () => readFile(sourcePath, 'utf-8'), 
+    // Read source file.
+    //
+    // 🚨 `readTextContent`, never `readFile(path, 'utf-8')` — and here the reason
+    // is sharper than the general one `link-parser.ts:149` gives. THE LINKS WERE
+    // PARSED FROM THIS FILE BY THAT READER, and `bodyRelativeLinks` below
+    // re-bases their offsets by differencing two string lengths. Two different
+    // readers make that subtraction meaningless: `readTextContent` strips a BOM
+    // and decodes UTF-16/32, so on a BOM-bearing file `readFile` returned a
+    // string one character longer, `OPENING_FENCE` (`/^---\r?\n/`) then failed to
+    // match, `openFrontmatter` reported no frontmatter, the offset came out 0,
+    // and every span stayed whole-file — silently reverting the fix this call
+    // site exists to deliver.
+    //
+    // ⛔ This comment used to add "it failed CLOSED rather than corrupting, only
+    // because `splicableFrom` compares the destination to the href." That is not
+    // a guarantee and must not be read as one: the destination check is keyed on
+    // the href, which two links in one document routinely share, so a stale span
+    // landing on a same-href neighbour passes it (constructed in
+    // `content-transform.test.ts` › *two links sharing an href defeat the
+    // destination comparison*). The BOM shift also survives
+    // `bodyRelativeLinks`'s own `endsWith` check, because a body equal to the
+    // content IS a suffix of it — nothing downstream can see that the links came
+    // from a different decode. **One reader is the only thing standing between
+    // this lane and a wrong rewrite.** Do not swap it.
+    //
+    // It also stops a UTF-16 source being written back as mojibake, which the
+    // `utf-8` read did on the copy as well as the rewrite.
+    const { text: content } = await withFsAttribution(subject, () => readTextContent(sourcePath), 
     // Not "copied": the read is the step that failed, and this lane reads before
     // it rewrites, so naming the copy would point past the actual failure.
     'read for link rewriting', READ_REMEDY);
@@ -1362,7 +1502,13 @@ async function copyAndRewriteFile(sourcePath, targetPath, ctx) {
     // for the existing rule/template body-link rewrite contract (unchanged).
     const editor = openFrontmatter(content);
     // Body rewrite (existing behavior, unchanged contract).
-    editor.body = transformContent(editor.body, resource.links, {
+    const rebased = bodyRelativeLinks(content, editor.body, resource.links, () => {
+        ctx.warn(`Rewrote links in '${sourcePath}' without parsed spans: the frontmatter-stripped body is not a ` +
+            `suffix of the file as read, so the offsets the parser reported cannot be moved onto it. ` +
+            `Links are matched by href instead, which is the pre-span behaviour — a link the two grammars ` +
+            `disagree about (an image inside a link, most often) may go unrewritten.`);
+    });
+    editor.body = transformContent(editor.body, rebased, {
         linkRewriteRules: ctx.rewriteRules,
         resourceRegistry: ctx.toRegistry,
         sourceFilePath: targetPath, // Output path so relativePath is computed from output location