agent-valley 2.2.1 → 2.3.1

package/dist/index.js

@@ -6439,6 +6439,72 @@ var init_zod = __esm(() => {
   init_external();
 });
 
+// ../../packages/core/src/oma/skill-matrix-schema.ts
+var hash, name, bounded, path, skillCompatibilityConfigSchema, skillCompatibilityPolicySchema, omaConfigSchema, matrixSkillSchema, matrixReportSchema;
+var init_skill_matrix_schema = __esm(() => {
+  init_zod();
+  hash = string2().regex(/^[a-f0-9]{64}$/);
+  name = string2().regex(/^[a-z0-9][a-z0-9-]{0,127}$/);
+  bounded = string2().trim().min(1).max(2000);
+  path = string2().min(1).max(4096).refine((value) => !value.includes("\x00"));
+  skillCompatibilityConfigSchema = strictObject({
+    report_path: path,
+    max_age_hours: number2().finite().positive().max(8760).default(168),
+    mode: _enum(["warn", "require"])
+  });
+  skillCompatibilityPolicySchema = strictObject({
+    reportPath: path,
+    maxAgeHours: number2().finite().positive().max(8760),
+    mode: _enum(["warn", "require"])
+  });
+  omaConfigSchema = strictObject({
+    mode: _enum(["off", "strict"]).default("off"),
+    skill_compatibility: skillCompatibilityConfigSchema.optional()
+  });
+  matrixSkillSchema = object({
+    name,
+    hash,
+    caseId: bounded,
+    requiredFiles: array(path).min(1).max(500),
+    missingFiles: array(path).max(500),
+    excludedReferences: array(object({ path, reason: bounded })).max(500)
+  });
+  matrixReportSchema = object({
+    schemaVersion: literal(1),
+    kind: literal("skill-compatibility-matrix"),
+    mode: _enum(["plan", "live"]),
+    status: _enum(["planned", "completed", "cancelled", "interrupted"]),
+    createdAt: exports_iso.datetime(),
+    omaVersion: bounded,
+    host: object({ platform: bounded, arch: bounded, node: bounded }),
+    suiteHash: hash,
+    sourceKind: _enum(["synthetic", "installed"]),
+    delivery: _enum(["native", "injected"]),
+    auditScope: _enum(["fixture-contract", "read-reference"]),
+    protocolVersion: literal("oma-skill-matrix-v2"),
+    bundle: object({ hash, skills: array(matrixSkillSchema).min(1).max(100) }).optional(),
+    cases: array(object({ id: bounded, skill: name })).max(100),
+    models: object({ claude: bounded.nullable(), codex: bounded.nullable() }),
+    cells: array(object({
+      caseId: bounded,
+      skill: name,
+      vendor: _enum(["claude", "codex"]),
+      status: _enum(["pass", "fail", "unverifiable", "error"]),
+      contentHash: hash,
+      checks: array(object({
+        id: bounded,
+        status: _enum(["pass", "fail", "unverifiable"]),
+        detail: bounded,
+        proof: _enum(["read", "canary"]).optional()
+      })).max(1000),
+      nativeActivation: _enum(["observed", "unobserved"]),
+      cliVersion: string2().regex(/^[\w .()+/-]{1,160}$/).nullable(),
+      model: bounded.nullable(),
+      durationMs: number2().finite().nonnegative()
+    })).max(200)
+  });
+});
+
 // ../../packages/core/src/config/task-schema.ts
 var reportPath, taskSchema, resolvedTaskSchema;
 var init_task_schema = __esm(() => {
@@ -6896,6 +6962,7 @@ var init_execution = __esm(() => {
 var actorType, text, amount, routingCandidateSchema, chiefOperatingPolicySchema, operatingRunSchema, routeEvidenceSchema, reviewDecisionSchema, chiefOperationsSchema;
 var init_operations = __esm(() => {
   init_zod();
+  init_skill_matrix_schema();
   actorType = string2().regex(/^[a-z0-9][a-z0-9-]{0,127}$/);
   text = string2().trim().min(1).max(2000);
   amount = number2().finite().nonnegative();
@@ -6914,6 +6981,7 @@ var init_operations = __esm(() => {
     reviewVendor: _enum(["prefer", "require", "off"]),
     readyActors: array(actorType).max(20).optional(),
     memory: boolean2(),
+    skillCompatibility: skillCompatibilityPolicySchema.optional(),
     metricTargets: array(strictObject({
       name: text,
       unit: text.optional(),
@@ -7232,7 +7300,7 @@ function chiefExecutionPolicy(config) {
     autoResume: execution.auto_resume
   } : {});
 }
-function chiefOperatingPolicy(config, readyActors, automatic = true) {
+function chiefOperatingPolicy(config, readyActors, automatic = true, skillCompatibility) {
   return chiefOperatingPolicySchema.parse({
     routing: config.routing ? {
       candidates: config.routing.candidates.map((item) => ({
@@ -7247,7 +7315,8 @@ function chiefOperatingPolicy(config, readyActors, automatic = true) {
     reviewVendor: config.review_vendor ?? "prefer",
     memory: config.memory ?? true,
     metricTargets: config.metric_targets,
-    readyActors
+    readyActors,
+    skillCompatibility
   });
 }
 function chiefCapturePolicy(config) {
@@ -14575,7 +14644,7 @@ function mergeConfigs(global2, project, env) {
     tunnel: buildTunnelConfig(project),
     verify: buildVerifyConfig(project),
     task: project?.task?.kind === "analysis" ? { kind: "analysis", reportPath: project.task.report_path } : { kind: "code" },
-    oma: { mode: project?.oma?.mode ?? "off" },
+    oma: project?.oma ?? { mode: "off" },
     chief: global2?.chief || project?.chief ? mergeChiefConfig(global2?.chief, project?.chief) : undefined
   };
 }
@@ -14613,6 +14682,7 @@ Symphony cannot start until all config errors are resolved.`);
 var globalConfigSchema, projectConfigSchema, githubConfigSchema, mergedConfigSchema;
 var init_yaml_loader = __esm(() => {
   init_zod();
+  init_skill_matrix_schema();
   init_actor_schema();
   init_budget_schema();
   init_chief_schema();
@@ -14706,7 +14776,7 @@ var init_yaml_loader = __esm(() => {
     tunnel: tunnelProjectSchema,
     verify: verifyProjectSchema,
     task: taskSchema.optional(),
-    oma: object({ mode: _enum(["off", "strict"]).default("off") }).optional(),
+    oma: omaConfigSchema.optional(),
     chief: chiefConfigSchema.optional()
   }).strict().overwrite(normalizeActorDefaults);
   githubConfigSchema = object({
@@ -14775,7 +14845,7 @@ var init_yaml_loader = __esm(() => {
     tunnel: tunnelMergedSchema,
     verify: verifyMergedSchema,
     task: resolvedTaskSchema.optional(),
-    oma: object({ mode: _enum(["off", "strict"]) }).optional(),
+    oma: omaConfigSchema.optional(),
     chief: chiefConfigSchema.optional()
   }).superRefine((cfg, ctx) => {
     if (cfg.trackerKind === "linear") {
@@ -20724,7 +20794,7 @@ var init_readdirp = __esm(() => {
 
 // ../../node_modules/.bun/chokidar@5.0.0/node_modules/chokidar/handler.js
 import { watch as fs_watch, unwatchFile, watchFile } from "node:fs";
-import { realpath as fsrealpath, lstat as lstat18, open as open11, stat as stat4 } from "node:fs/promises";
+import { realpath as fsrealpath, lstat as lstat18, open as open12, stat as stat4 } from "node:fs/promises";
 import { type as osType } from "node:os";
 import * as sp from "node:path";
 function createFsWatchInstance(path, options, listener, errHandler, emitRaw) {
@@ -20755,9 +20825,9 @@ class NodeFsHandler {
   _watchWithNodeFs(path, listener) {
     const opts = this.fsw.options;
     const directory = sp.dirname(path);
-    const basename2 = sp.basename(path);
+    const basename = sp.basename(path);
     const parent = this.fsw._getWatchedDir(directory);
-    parent.add(basename2);
+    parent.add(basename);
     const absolutePath = sp.resolve(path);
     const options = {
       persistent: opts.persistent
@@ -20767,7 +20837,7 @@ class NodeFsHandler {
     let closer;
     if (opts.usePolling) {
       const enableBin = opts.interval !== opts.binaryInterval;
-      options.interval = enableBin && isBinaryPath(basename2) ? opts.binaryInterval : opts.interval;
+      options.interval = enableBin && isBinaryPath(basename) ? opts.binaryInterval : opts.interval;
       closer = setFsWatchFileListener(path, absolutePath, options, {
         listener,
         rawEmitter: this.fsw._emitRaw
@@ -20786,10 +20856,10 @@ class NodeFsHandler {
       return;
     }
     const dirname = sp.dirname(file);
-    const basename2 = sp.basename(file);
+    const basename = sp.basename(file);
     const parent = this.fsw._getWatchedDir(dirname);
     let prevStats = stats;
-    if (parent.has(basename2))
+    if (parent.has(basename))
       return;
     const listener = async (path, newStats) => {
       if (!this.fsw._throttle(THROTTLE_MODE_WATCH, file, 5))
@@ -20814,9 +20884,9 @@ class NodeFsHandler {
             prevStats = newStats;
           }
         } catch (error) {
-          this.fsw._remove(dirname, basename2);
+          this.fsw._remove(dirname, basename);
         }
-      } else if (parent.has(basename2)) {
+      } else if (parent.has(basename)) {
         const at = newStats.atimeMs;
         const mt = newStats.mtimeMs;
         if (!at || at <= mt || mt !== prevStats.mtimeMs) {
@@ -21066,7 +21136,7 @@ var STR_DATA = "data", STR_END = "end", STR_CLOSE = "close", EMPTY_FN = () => {}
         cont.watcherUnusable = true;
       if (isWindows && error.code === "EPERM") {
         try {
-          const fd = await open11(path, "r");
+          const fd = await open12(path, "r");
           await fd.close();
           broadcastErr(error);
         } catch (err) {}
@@ -22448,8 +22518,8 @@ function canonicalConfig(config) {
 // src/agent-provisioning.ts
 import { spawn as spawn17 } from "node:child_process";
 import { mkdtempSync, rmSync as rmSync2 } from "node:fs";
-import { homedir as homedir7, tmpdir as tmpdir4 } from "node:os";
-import { delimiter as delimiter3, join as join46 } from "node:path";
+import { homedir as homedir8, tmpdir as tmpdir4 } from "node:os";
+import { delimiter as delimiter3, join as join47 } from "node:path";
 function runTerminalCommand(request, spawnCommand = spawn17) {
   return new Promise((resolve) => {
     let child;
@@ -22492,13 +22562,13 @@ function runTerminalCommand(request, spawnCommand = spawn17) {
 function defaults() {
   return {
     platform: process.platform,
-    home: homedir7(),
+    home: homedir8(),
     env: process.env,
     resolveBinary: resolveBinaryPath,
     discover: discoverAgents,
     runCommand: runTerminalCommand,
     supportsLoginCommand: (agent, path, env) => supportsNativeLoginCommand(agent, path, { env }),
-    makeTempDir: () => mkdtempSync(join46(tmpdir4(), "av-agent-install-")),
+    makeTempDir: () => mkdtempSync(join47(tmpdir4(), "av-agent-install-")),
     removeTempDir: (path) => rmSync2(path, { recursive: true, force: true })
   };
 }
@@ -22525,7 +22595,7 @@ async function runOfficialInstaller(installerUrl, deps, options = {}) {
   let directory;
   try {
     directory = deps.makeTempDir();
-    const scriptPath = join46(directory, "install.sh");
+    const scriptPath = join47(directory, "install.sh");
     const request = { env: options.env ?? deps.env, ...options.cwd ? { cwd: options.cwd } : {} };
     const download = await deps.runCommand({
       command: curl,
@@ -22596,7 +22666,7 @@ async function installChiefAgent(agent, overrides = {}) {
     const install = await runOfficialInstaller(plan.installerUrl, deps);
     if (!install.success)
       return commandFailure(install.stage === "download" ? "Installer download" : "Installation", install, plan.documentation);
-    const localBin = join46(deps.home, ".local", "bin");
+    const localBin = join47(deps.home, ".local", "bin");
     const pathParts = (deps.env.PATH ?? "").split(delimiter3);
     if (!pathParts.includes(localBin))
       deps.env.PATH = [localBin, ...pathParts.filter(Boolean)].join(delimiter3);
@@ -22698,17 +22768,17 @@ var init_agent_provisioning = __esm(() => {
 // src/oma-provisioning.ts
 import { mkdtempSync as mkdtempSync2, rmSync as rmSync3 } from "node:fs";
 import { chmod as chmod4, lstat as lstat19, readdir as readdir12, readFile as readFile16, realpath as realpath25, unlink as unlink8, writeFile as writeFile14 } from "node:fs/promises";
-import { homedir as homedir8, tmpdir as tmpdir5 } from "node:os";
-import { delimiter as delimiter4, isAbsolute as isAbsolute15, join as join47, relative as relative14, resolve as resolve27 } from "node:path";
+import { homedir as homedir9, tmpdir as tmpdir5 } from "node:os";
+import { delimiter as delimiter4, isAbsolute as isAbsolute16, join as join48, relative as relative15, resolve as resolve29 } from "node:path";
 function defaults2() {
-  const home = homedir8();
+  const home = homedir9();
   return {
     platform: process.platform,
     home,
     env: process.env,
-    resolveBinary: (name) => resolveBinaryPath(name, name === "bun" ? [join47(process.env.BUN_INSTALL ?? join47(home, ".bun"), "bin", "bun")] : []),
+    resolveBinary: (name) => resolveBinaryPath(name, name === "bun" ? [join48(process.env.BUN_INSTALL ?? join48(home, ".bun"), "bin", "bun")] : []),
     runCommand: runTerminalCommand,
-    makeTempDir: () => mkdtempSync2(join47(tmpdir5(), "av-oma-install-")),
+    makeTempDir: () => mkdtempSync2(join48(tmpdir5(), "av-oma-install-")),
     removeTempDir: (path) => rmSync3(path, { recursive: true, force: true })
   };
 }
@@ -22729,7 +22799,7 @@ async function present(path) {
 }
 async function installedVersion2(skills) {
   try {
-    const marker = JSON.parse(await readFile16(join47(skills, "_version.json"), "utf8"));
+    const marker = JSON.parse(await readFile16(join48(skills, "_version.json"), "utf8"));
     return marker.schemaVersion === 2 && marker.mode === "project" && typeof marker.version === "string" && /^\d+\.\d+\.\d+(?:-[a-zA-Z0-9.-]+)?$/.test(marker.version) ? marker.version : null;
   } catch {
     return null;
@@ -22738,7 +22808,7 @@ async function installedVersion2(skills) {
 async function snapshotConfig(agents) {
   const snapshots = [];
   for (const name of CUSTOM_CONFIG_NAMES) {
-    const path = join47(agents, name);
+    const path = join48(agents, name);
     if (!await present(path))
       continue;
     const file = await lstat19(path);
@@ -22758,10 +22828,10 @@ async function restoreConfig(agents, snapshots) {
     ["oma-config.yaml", "oma-config.cue"],
     ["oma-config.local.yaml", "oma-config.local.cue"]
   ]) {
-    if (!pair.some((name) => original.has(join47(agents, name))))
+    if (!pair.some((name) => original.has(join48(agents, name))))
       continue;
     for (const name of pair) {
-      const path = join47(agents, name);
+      const path = join48(agents, name);
       if (!original.has(path))
         await unlink8(path).catch((error) => {
           if (error.code !== "ENOENT")
@@ -22771,17 +22841,17 @@ async function restoreConfig(agents, snapshots) {
   }
 }
 async function workspacePath(input) {
-  if (!input.trim() || !isAbsolute15(input))
+  if (!input.trim() || !isAbsolute16(input))
     return null;
-  const root = resolve27(input);
+  const root = resolve29(input);
   if (!await directory2(root))
     return null;
-  for (const path of [join47(root, ".agents"), join47(root, ".agents", "skills")]) {
+  for (const path of [join48(root, ".agents"), join48(root, ".agents", "skills")]) {
     if (!await present(path))
       continue;
     const actual = await realpath25(path);
-    const location = relative14(await realpath25(root), actual);
-    if (location === ".." || location.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute15(location))
+    const location = relative15(await realpath25(root), actual);
+    if (location === ".." || location.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute16(location))
       return null;
   }
   return root;
@@ -22791,7 +22861,7 @@ async function inspectOma(workspaceRoot, _overrides = {}) {
     const root = await workspacePath(workspaceRoot);
     if (!root)
       return { success: false, message: "Choose an existing absolute workspace with project-local OMA files." };
-    const skills = join47(root, ".agents", "skills");
+    const skills = join48(root, ".agents", "skills");
     const version = await installedVersion2(skills);
     if (!version)
       throw new Error("Invalid installed metadata");
@@ -22799,7 +22869,7 @@ async function inspectOma(workspaceRoot, _overrides = {}) {
     if (!entries.length)
       throw new Error("No installed skills");
     for (const entry of entries) {
-      if (!entry.isDirectory() || !(await lstat19(join47(skills, entry.name, "SKILL.md"))).isFile())
+      if (!entry.isDirectory() || !(await lstat19(join48(skills, entry.name, "SKILL.md"))).isFile())
         throw new Error("Incomplete installed skill");
     }
     return {
@@ -22847,16 +22917,16 @@ async function prepareOma(workspaceRoot, overrides = {}) {
     delete environment.OMA_YES;
     environment.CI = "true";
     const paths = [
-      deps.env.BUN_INSTALL_BIN ?? join47(deps.env.BUN_INSTALL ?? join47(deps.home, ".bun"), "bin"),
-      join47(deps.home, ".local", "bin")
+      deps.env.BUN_INSTALL_BIN ?? join48(deps.env.BUN_INSTALL ?? join48(deps.home, ".bun"), "bin"),
+      join48(deps.home, ".local", "bin")
     ];
     environment.PATH = [...new Set([...paths, ...(environment.PATH ?? "").split(delimiter4).filter(Boolean)])].join(delimiter4);
     const request = { command: bun, env: environment, cwd: root, timeoutMs: 300000 };
     const latest = await deps.runCommand({ ...request, args: ["install", "--global", LATEST_PACKAGE] });
     if (!latest.success)
       return failure3("OMA CLI update", latest);
-    const agents = join47(root, ".agents");
-    const existing = await installedVersion2(join47(agents, "skills")) !== null || await directory2(join47(agents, "skills")) && (await present(join47(agents, "oma-config.yaml")) || await present(join47(agents, "mcp.json")) || await directory2(join47(agents, "workflows")));
+    const agents = join48(root, ".agents");
+    const existing = await installedVersion2(join48(agents, "skills")) !== null || await directory2(join48(agents, "skills")) && (await present(join48(agents, "oma-config.yaml")) || await present(join48(agents, "mcp.json")) || await directory2(join48(agents, "workflows")));
     const custom = await snapshotConfig(agents);
     const args = existing ? ["update", "--yes", "--with-new-skills", "--all"] : ["install"];
     let installed;
@@ -24343,9 +24413,9 @@ var init_ui = __esm(() => {
 
 // src/setup/workspace-step.ts
 import { statSync as statSync3 } from "node:fs";
-import { isAbsolute as isAbsolute16 } from "node:path";
+import { isAbsolute as isAbsolute17 } from "node:path";
 async function validateOrderWorkspace(path) {
-  if (!isAbsolute16(path))
+  if (!isAbsolute17(path))
     return "Set workspace.root in av.yaml to an absolute Git repository path.";
   try {
     if (!statSync3(path).isDirectory())
@@ -24372,7 +24442,7 @@ async function stepWorkspace(ctx, step, total) {
       validate: (v) => {
         if (!v?.trim())
           return "Required";
-        if (!isAbsolute16(v.trim()))
+        if (!isAbsolute17(v.trim()))
           return "Must be an absolute path";
       }
     });
@@ -24399,7 +24469,7 @@ var init_workspace_step = __esm(() => {
 
 // src/setup/noninteractive-config.ts
 import { lstat as lstat20, realpath as realpath26 } from "node:fs/promises";
-import { isAbsolute as isAbsolute17, join as join48, parse as parsePath, resolve as resolve28 } from "node:path";
+import { isAbsolute as isAbsolute18, join as join49, parse as parsePath, resolve as resolve30 } from "node:path";
 function validateNoninteractiveOptions(options) {
   if (!options.yes || options.edit || options.mode !== undefined && options.mode !== "order")
     throw new Error("Use av setup --yes only for local order setup; --edit and --mode tracker require interactive setup.");
@@ -24442,7 +24512,7 @@ function selectChief(options, deps, project, global2) {
   const globalActor = actor(global2);
   const selected = options.actor ?? runtime?.actorType ?? projectActor.type ?? globalActor.type;
   if (!selected)
-    throw new Error(`actor.type is missing in ${join48(deps.projectRoot, "av.yaml")} and ${deps.globalConfigPath}, and the current agent runtime is unknown. Rerun av setup --yes --actor <current-vendor> --model <current-model-or-empty>.`);
+    throw new Error(`actor.type is missing in ${join49(deps.projectRoot, "av.yaml")} and ${deps.globalConfigPath}, and the current agent runtime is unknown. Rerun av setup --yes --actor <current-vendor> --model <current-model-or-empty>.`);
   const actorType = selected;
   const actorSource = options.actor !== undefined ? "explicit" : runtime ? "runtime" : projectActor.type ? "project" : "global";
   const previousType = projectActor.type ?? globalActor.type;
@@ -24480,14 +24550,14 @@ async function prepareNoninteractiveConfig(options, deps) {
   validateNoninteractiveOptions(options);
   let projectRoot;
   try {
-    projectRoot = await realpath26(resolve28(deps.projectRoot));
+    projectRoot = await realpath26(resolve30(deps.projectRoot));
     if (!(await lstat20(projectRoot)).isDirectory())
       throw new Error("not a directory");
   } catch {
     throw new Error(`AV configuration directory ${deps.projectRoot} does not exist. Run av setup from an existing directory.`);
   }
-  const globalPath = resolve28(deps.globalConfigPath);
-  const projectPath = join48(projectRoot, "av.yaml");
+  const globalPath = resolve30(deps.globalConfigPath);
+  const projectPath = join49(projectRoot, "av.yaml");
   const project = await configFile(projectPath, projectConfigSchema);
   const global2 = await configFile(globalPath, globalConfigSchema);
   const chief = selectChief(options, { ...deps, projectRoot, globalConfigPath: globalPath }, project.raw, global2.raw);
@@ -24504,7 +24574,7 @@ async function prepareNoninteractiveConfig(options, deps) {
   }
   const savedWorkspace = project.raw.workspace?.root;
   const selectedWorkspace = options.workspace ?? savedWorkspace ?? projectRoot;
-  const workspacePath = isAbsolute17(selectedWorkspace) ? selectedWorkspace : resolve28(projectRoot, selectedWorkspace);
+  const workspacePath = isAbsolute18(selectedWorkspace) ? selectedWorkspace : resolve30(projectRoot, selectedWorkspace);
   const workspaceError = await validateOrderWorkspace(workspacePath);
   if (workspaceError)
     throw new Error(workspaceError);
@@ -24539,7 +24609,7 @@ var init_noninteractive_config = __esm(() => {
 });
 
 // src/setup/noninteractive.ts
-import { join as join49, parse as parsePath2, resolve as resolve29 } from "node:path";
+import { join as join50, parse as parsePath2, resolve as resolve31 } from "node:path";
 function rerunCommand(result, options) {
   const quote = (value) => `'${value.replace(/'/g, "'\\''")}'`;
   return `cd ${quote(result.projectRoot)} && av setup --yes --actor ${result.chief.actorType} --model ${quote(result.chief.model ?? "")} --workspace ${quote(result.workspace ?? result.projectRoot)} --oma ${options.oma ?? "prepare"} --json`;
@@ -24550,11 +24620,11 @@ async function setupNoninteractive(options, overrides = {}) {
     version: 1,
     status: "failed",
     exitCode: 1,
-    projectRoot: resolve29(deps.projectRoot),
+    projectRoot: resolve31(deps.projectRoot),
     workspace: null,
     config: {
-      project: join49(resolve29(deps.projectRoot), "av.yaml"),
-      global: resolve29(deps.globalConfigPath),
+      project: join50(resolve31(deps.projectRoot), "av.yaml"),
+      global: resolve31(deps.globalConfigPath),
       saved: false
     },
     chief: {
@@ -25035,7 +25105,7 @@ var init_container_step = __esm(() => {
 });
 
 // src/setup/metric-step.ts
-import { isAbsolute as isAbsolute18 } from "node:path";
+import { isAbsolute as isAbsolute19 } from "node:path";
 async function text12(message, initialValue, validate) {
   const value = await text10({
     message: `${message} (:back goes back)`,
@@ -25119,7 +25189,7 @@ async function stepMetrics(ctx) {
         draft.token_env = token;
     } else {
       const file = await text12("Repository-relative JSON file", old?.file ?? "metrics/revenue.json", (value) => {
-        if (!value || value.length > 2000 || isAbsolute18(value) || /^[A-Za-z]:/.test(value) || value.startsWith("\\") || value.split(/[\\/]/).includes(".."))
+        if (!value || value.length > 2000 || isAbsolute19(value) || /^[A-Za-z]:/.test(value) || value.startsWith("\\") || value.split(/[\\/]/).includes(".."))
           return "Use a relative file inside the repository, without ..";
       });
       if (navigated2(file))
@@ -25127,18 +25197,18 @@ async function stepMetrics(ctx) {
       draft.file = file;
     }
     for (const field of ["value_path", "timestamp_path", "unit_path"]) {
-      const value = await text12(`JSON ${field}`, old?.[field] ?? field.replace("_path", ""), path3);
+      const value = await text12(`JSON ${field}`, old?.[field] ?? field.replace("_path", ""), path4);
       if (navigated2(value))
         return value;
       draft[field] = value;
     }
-    const start = await text12("JSON measurement window start path (optional; blank omits window)", old?.window_start_path ?? "", (value) => value ? path3(value) : undefined);
+    const start = await text12("JSON measurement window start path (optional; blank omits window)", old?.window_start_path ?? "", (value) => value ? path4(value) : undefined);
     if (navigated2(start))
       return start;
     delete draft.window_start_path;
     delete draft.window_end_path;
     if (start) {
-      const end = await text12("JSON measurement window end path", old?.window_end_path ?? "window.end", path3);
+      const end = await text12("JSON measurement window end path", old?.window_end_path ?? "window.end", path4);
       if (navigated2(end))
         return end;
       draft.window_start_path = start;
@@ -25184,7 +25254,7 @@ async function stepMetrics(ctx) {
   ctx.chiefChanged = true;
   log2.info("Metric settings are saved after confirmation. Measurements are collected at mission runtime; setup does not contact the source. Set --duration or chief.execution.max_duration_sec long enough for work and the full measurement/observation windows. The default mission limit is 86400 seconds including waits; Stripe's default measurement window is also 86400 seconds.");
 }
-var envName3 = (value) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(value), navigated2 = (value) => typeof value !== "string", required2 = (limit) => (value) => value && value.length <= limit ? undefined : `Enter 1 to ${limit} characters.`, environment = (optional = false) => (value) => optional && !value || envName3(value) ? undefined : "Enter an environment variable name, never a token or URL.", number4 = (minimum, maximum) => (value) => value && Number.isInteger(Number(value)) && Number(value) >= minimum && Number(value) <= maximum ? undefined : `Enter a whole number from ${minimum} to ${maximum}.`, path3 = (value) => {
+var envName3 = (value) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(value), navigated2 = (value) => typeof value !== "string", required2 = (limit) => (value) => value && value.length <= limit ? undefined : `Enter 1 to ${limit} characters.`, environment = (optional = false) => (value) => optional && !value || envName3(value) ? undefined : "Enter an environment variable name, never a token or URL.", number4 = (minimum, maximum) => (value) => value && Number.isInteger(Number(value)) && Number(value) >= minimum && Number(value) <= maximum ? undefined : `Enter a whole number from ${minimum} to ${maximum}.`, path4 = (value) => {
   const result = metricSourceSchema.shape.value_path.safeParse(value);
   return result.success ? undefined : "Use dot-separated JSON keys or array indexes, without prototype keys.";
 };
@@ -27577,8 +27647,8 @@ var init_issue = __esm(() => {
 
 // src/login.ts
 import { existsSync as existsSync9, mkdirSync as mkdirSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync5 } from "node:fs";
-import { homedir as homedir9 } from "node:os";
-import { join as join50 } from "node:path";
+import { homedir as homedir10 } from "node:os";
+import { join as join51 } from "node:path";
 function ensureConfigDir() {
   if (!existsSync9(CONFIG_DIR)) {
     mkdirSync4(CONFIG_DIR, { recursive: true, mode: 448 });
@@ -27753,8 +27823,8 @@ var import_picocolors14, CONFIG_DIR, CREDENTIALS_FILE;
 var init_login = __esm(() => {
   init_dist6();
   import_picocolors14 = __toESM(require_picocolors(), 1);
-  CONFIG_DIR = join50(homedir9(), ".agent-valley");
-  CREDENTIALS_FILE = join50(CONFIG_DIR, "credentials.json");
+  CONFIG_DIR = join51(homedir10(), ".agent-valley");
+  CREDENTIALS_FILE = join51(CONFIG_DIR, "credentials.json");
 });
 
 // src/index.ts
@@ -27762,7 +27832,7 @@ init_project_config_path();
 init_yaml_loader();
 import { spawn as spawn24, spawnSync as spawnSync5 } from "node:child_process";
 import { existsSync as existsSync10, unlinkSync as unlinkSync2 } from "node:fs";
-import { resolve as resolve30 } from "node:path";
+import { resolve as resolve32 } from "node:path";
 
 // ../../packages/core/src/version.ts
 import { readFileSync as readFileSync2 } from "node:fs";
@@ -27872,7 +27942,7 @@ function humanReadableArgName(arg) {
 // ../../node_modules/.bun/commander@15.0.0/node_modules/commander/lib/command.js
 import { EventEmitter } from "node:events";
 import childProcess from "node:child_process";
-import path from "node:path";
+import path2 from "node:path";
 import fs from "node:fs";
 import process2 from "node:process";
 import { stripVTControlCharacters as stripVTControlCharacters2 } from "node:util";
@@ -29016,10 +29086,10 @@ Expecting one of '${allowedValues.join("', '")}'`);
     args = args.slice();
     const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
     function findFile(baseDir, baseName) {
-      const localBin = path.resolve(baseDir, baseName);
+      const localBin = path2.resolve(baseDir, baseName);
       if (fs.existsSync(localBin))
         return localBin;
-      if (sourceExt.includes(path.extname(baseName)))
+      if (sourceExt.includes(path2.extname(baseName)))
         return;
       const foundExt = sourceExt.find((ext) => fs.existsSync(`${localBin}${ext}`));
       if (foundExt)
@@ -29037,19 +29107,19 @@ Expecting one of '${allowedValues.join("', '")}'`);
       } catch {
         resolvedScriptPath = this._scriptPath;
       }
-      executableDir = path.resolve(path.dirname(resolvedScriptPath), executableDir);
+      executableDir = path2.resolve(path2.dirname(resolvedScriptPath), executableDir);
     }
     if (executableDir) {
       let localFile = findFile(executableDir, executableFile);
       if (!localFile && !subcommand._executableFile && this._scriptPath) {
-        const legacyName = path.basename(this._scriptPath, path.extname(this._scriptPath));
+        const legacyName = path2.basename(this._scriptPath, path2.extname(this._scriptPath));
         if (legacyName !== this._name) {
           localFile = findFile(executableDir, `${legacyName}-${subcommand._name}`);
         }
       }
       executableFile = localFile || executableFile;
     }
-    const launchWithNode = sourceExt.includes(path.extname(executableFile));
+    const launchWithNode = sourceExt.includes(path2.extname(executableFile));
     let proc;
     if (process2.platform !== "win32") {
       if (launchWithNode) {
@@ -29640,13 +29710,13 @@ Expecting one of '${allowedValues.join("', '")}'`);
       cmd.helpGroup(this._defaultCommandGroup);
   }
   nameFromFilename(filename) {
-    this._name = path.basename(filename, path.extname(filename));
+    this._name = path2.basename(filename, path2.extname(filename));
     return this;
   }
-  executableDir(path2) {
-    if (path2 === undefined)
+  executableDir(path) {
+    if (path === undefined)
       return this._executableDir;
-    this._executableDir = path2;
+    this._executableDir = path;
     return this;
   }
   helpInformation(contextOptions) {
@@ -29824,7 +29894,7 @@ var import_picocolors15 = __toESM(require_picocolors(), 1);
 
 // src/agent-client-commands.ts
 init_client_integrations();
-import { resolve as resolve21 } from "node:path";
+import { resolve as resolve22 } from "node:path";
 
 // src/mcp-oauth.ts
 init_webapi();
@@ -48175,7 +48245,7 @@ async function startAvMcpHttp(api, options) {
 // src/mission-api.ts
 import { randomUUID as randomUUID17 } from "node:crypto";
 import { lstat as lstat15, readdir as readdir8, realpath as realpath21 } from "node:fs/promises";
-import { isAbsolute as isAbsolute12, join as join37 } from "node:path";
+import { isAbsolute as isAbsolute13, join as join38 } from "node:path";
 
 // ../../packages/core/src/chief/reports.ts
 init_zod();
@@ -48938,7 +49008,7 @@ var sha256 = string2().regex(/^[a-f0-9]{64}$/);
 function safeVerificationPath(path) {
   return path.length > 0 && path.length <= 1024 && !isAbsolute2(path) && !/^[a-z]:/i.test(path) && !/[\\\0\r\n]/.test(path) && path.split("/").every((part) => part !== "" && part !== "." && part !== "..") && !/^(?:\.git(?:\/|$)|\.agent-valley(?:\/|$)|\.agents\/(?:state|results)(?:\/|$))/.test(path);
 }
-var path2 = string2().refine(safeVerificationPath, "Use a literal relative product path inside the worktree.");
+var path3 = string2().refine(safeVerificationPath, "Use a literal relative product path inside the worktree.");
 var testPath = (name, nodeOnly = false) => safeVerificationPath(name) && !name.startsWith("-") && !/[*?{}]/.test(name) && !name.startsWith("node_modules/") && (nodeOnly ? /(?:\.test|\.spec)\.(?:js|mjs|cjs)$/ : /(?:\.test|\.spec)\.(?:[cm]?[jt]sx?)$/).test(name);
 function verificationCommandTestPaths(program, args) {
   if (program === "bun" && args[0] === "test")
@@ -48975,14 +49045,14 @@ function safeVerificationCommand(program, args) {
 var goalVerificationCheckSchema = discriminatedUnion("kind", [
   strictObject({
     kind: literal("file"),
-    path: path2,
+    path: path3,
     minBytes: number2().int().min(1).max(4194304).default(1),
     contains: array(text4).min(1).max(10).optional(),
     sha256: sha256.optional()
   }),
   strictObject({
     kind: literal("json"),
-    path: path2,
+    path: path3,
     pointer: string2().max(1024).refine((value) => value === "" || /^(?:\/(?:[^~]|~[01])*)+$/.test(value), {
       message: "Use an RFC 6901 JSON pointer such as /engines/node."
     }),
@@ -49444,16 +49514,29 @@ function routeEvidence(mission) {
 function price2(candidate) {
   return candidate.inputPerMillionUsd !== undefined && candidate.outputPerMillionUsd !== undefined ? candidate.inputPerMillionUsd + candidate.outputPerMillionUsd : Number.POSITIVE_INFINITY;
 }
-function selectWorkActor(mission, actor, taskId) {
+function workActorCandidates(mission, actor, preserveExplicit = false) {
   const routing = mission.operatingPolicy?.routing;
-  if (!routing || actor.id === mission.chiefId || !mission.availableAgents && actor.model)
+  if (!routing || actor.id === mission.chiefId || !mission.availableAgents && (actor.model || preserveExplicit))
+    return [{ actorType: actor.agentType, model: actor.model }];
+  const ready = mission.operatingPolicy?.readyActors ?? mission.availableAgents ?? [];
+  return routing.candidates.filter((candidate) => ready.includes(candidate.actorType));
+}
+function selectWorkActor(mission, actor, taskId, compatibleRoutes) {
+  const routing = mission.operatingPolicy?.routing;
+  if (!routing || actor.id === mission.chiefId || !mission.availableAgents && (actor.model || compatibleRoutes)) {
+    if (compatibleRoutes && !compatibleRoutes.has(routeKey({ actorType: actor.agentType, model: actor.model })))
+      throw new Error("Skill compatibility required: the configured Actor/model has no current passing evidence. Refresh oma.skill_compatibility.report_path in av.yaml; explicit Actors are not rerouted.");
     return { actor, reason: "Preserved the configured Actor and explicit model." };
+  }
   const ready = mission.operatingPolicy?.readyActors ?? mission.availableAgents ?? [];
   const candidates = routing.candidates.filter((candidate) => ready.includes(candidate.actorType));
   if (!candidates.length)
     throw new Error("No configured work routing candidate is ready. Install/login a candidate CLI or update chief.routing.candidates in av.yaml.");
+  const compatible = compatibleRoutes ? candidates.filter((candidate) => compatibleRoutes.has(routeKey(candidate))) : candidates;
+  if (!compatible.length)
+    throw new Error("Skill compatibility required: no ready work candidate has current passing installed evidence. Refresh oma.skill_compatibility.report_path in av.yaml with explicit models before retrying.");
   const evidence = routeEvidence(mission);
-  const eligible = candidates.filter((candidate) => {
+  const eligible = compatible.filter((candidate) => {
     const observed = evidence.find((item) => routeKey(item) === routeKey(candidate));
     return !observed || observed.samples < routing.minSamples || observed.successes / observed.samples >= routing.minSuccessRate;
   });
@@ -49515,6 +49598,10 @@ function operationsEvidence(mission) {
     pricingBasis: "Estimates from configured input/output prices and actual adapter-reported tokens; excludes unreported cache/reasoning/subagent usage and subscription billing.",
     routeQuality: routeEvidence(mission).slice(0, 20),
     reviewPolicy: mission.operatingPolicy?.reviewVendor ?? "legacy independent Actor",
+    skillCompatibility: mission.operatingPolicy?.skillCompatibility ? {
+      mode: mission.operatingPolicy.skillCompatibility.mode,
+      recentChecks: mission.history.filter((entry) => entry.stage === "skill-compatibility").slice(-10)
+    } : undefined,
     recentRuns: runs.slice(-20),
     crossVendorReviews: mission.operations?.reviewDecisions.slice(-20) ?? [],
     organizationContext: mission.organizationContext,
@@ -49530,6 +49617,10 @@ function operationsReportLines(mission) {
     `기록된 token·설정 단가 기반 부분 비용 추정 USD ${evidence.knownEstimatedCostUsd.toFixed(6)} / 비용 미확인 ${evidence.unknownCostRuns}회 / 전체 추정 ${evidence.totalEstimatedCostUsd === null ? "미확인" : `USD ${evidence.totalEstimatedCostUsd.toFixed(6)}`}`,
     `최근 독립 리뷰 배정: 다른 vendor ${evidence.crossVendorReviews.filter((review) => review.crossVendor).length}회 / 동일 vendor fallback ${evidence.crossVendorReviews.filter((review) => !review.crossVendor).length}회 / 실제 리뷰 통과 ${evidence.crossVendorReviews.filter((review) => review.outcome === "passed").length}회`,
     `vendor 리뷰 정책: ${evidence.reviewPolicy}`,
+    ...evidence.skillCompatibility ? [
+      `OMA 스킬 읽기·참조 정책: ${evidence.skillCompatibility.mode}; AV 실행 환경 또는 작업 품질 인증이 아닙니다.`,
+      ...evidence.skillCompatibility.recentChecks.map((entry) => `${entry.at}: ${entry.message}`)
+    ] : [],
     ...mission.organizationContext ? [
       `계획·리뷰에 제공한 조직 근거: 승인 memory ${mission.organizationContext.memories.length}개 / 과거 outcome ${mission.organizationContext.outcomes.length}개 / 기록된 metric sample ${mission.organizationContext.metrics.length}개`
     ] : [],
@@ -49557,15 +49648,15 @@ var chiefReportSchema = strictObject({
   checks: entries,
   remaining: entries
 });
-function bounded(value, limit = 500) {
+function bounded2(value, limit = 500) {
   const content = value.trim();
   return content.length <= limit ? content : `${content.slice(0, limit - 8)}… [생략]`;
 }
 function compact(values, limit = 20) {
   if (values.length <= limit)
-    return values.map((value) => bounded(value)).filter(Boolean);
+    return values.map((value) => bounded2(value)).filter(Boolean);
   return [
-    ...values.slice(0, limit - 1).map((value) => bounded(value)).filter(Boolean),
+    ...values.slice(0, limit - 1).map((value) => bounded2(value)).filter(Boolean),
     `${values.length - limit + 1}개 항목 생략`
   ];
 }
@@ -49580,7 +49671,7 @@ function criteria(mission) {
 function incompleteReasons(mission) {
   const reasons = [];
   if (mission.error)
-    reasons.push(`${["waiting", "paused"].includes(mission.status) ? "대기·중단 이유" : "실패 원인"}: ${bounded(mission.error, 450)}`);
+    reasons.push(`${["waiting", "paused"].includes(mission.status) ? "대기·중단 이유" : "실패 원인"}: ${bounded2(mission.error, 450)}`);
   if (mission.status !== "completed")
     reasons.push(`미션 상태: ${mission.status}. 완료 판정이 없습니다.`);
   if (!mission.verification)
@@ -49633,33 +49724,33 @@ function incompleteReasons(mission) {
 }
 function decisionEvidence(mission) {
   const actions = { repair: "수정", reassign: "담당 교체", replan: "재계획", wait: "대기", stop: "중단" };
-  return (mission.supervision?.decisions ?? []).slice(-20).map((decision) => bounded(`${decision.round}차 ${actions[decision.action]}${decision.taskId ? ` / 작업 ${decision.taskId}` : ""}${decision.personaId ? ` / 담당 ${decision.personaId}` : ""}: ${decision.reason}`));
+  return (mission.supervision?.decisions ?? []).slice(-20).map((decision) => bounded2(`${decision.round}차 ${actions[decision.action]}${decision.taskId ? ` / 작업 ${decision.taskId}` : ""}${decision.personaId ? ` / 담당 ${decision.personaId}` : ""}: ${decision.reason}`));
 }
 function reviewEvidence(review) {
   return review ? {
     passed: review.passed,
-    summary: bounded(review.summary),
+    summary: bounded2(review.summary),
     findings: compact(review.findings),
     criteria: review.criteria?.slice(0, 20).map((item) => ({
-      criterion: bounded(item.criterion),
+      criterion: bounded2(item.criterion),
       passed: item.passed,
-      evidence: bounded(item.evidence)
+      evidence: bounded2(item.evidence)
     }))
   } : undefined;
 }
 function verificationEvidence(verification) {
   return verification ? {
     ok: verification.ok,
-    output: verification.output ? bounded(verification.output, 3000) : undefined,
-    fingerprint: bounded(verification.fingerprint, 128)
+    output: verification.output ? bounded2(verification.output, 3000) : undefined,
+    fingerprint: bounded2(verification.fingerprint, 128)
   } : undefined;
 }
 function advisoryEvidence(kind, advisory) {
   return advisory ? {
     kind: `upfront ${kind} advice; historical snapshot; not current approval`,
-    planKey: bounded(advisory.planKey, 128),
+    planKey: bounded2(advisory.planKey, 128),
     reviewerId: advisory.reviewerId,
-    fingerprint: bounded(advisory.fingerprint, 128),
+    fingerprint: bounded2(advisory.fingerprint, 128),
     review: reviewEvidence(advisory.review)
   } : undefined;
 }
@@ -49669,24 +49760,24 @@ function historicalEvidence(mission) {
     const verification = decision.evidence?.verification;
     const review = decision.evidence?.finalReview;
     if (verification)
-      lines.push(bounded(`${decision.round}차 판단 당시 검증: ${verification.ok ? "통과" : "실패"} / 파일 상태 ${bounded(verification.fingerprint, 128)}${verification.output ? ` / ${bounded(verification.output, 250)}` : ""}`));
+      lines.push(bounded2(`${decision.round}차 판단 당시 검증: ${verification.ok ? "통과" : "실패"} / 파일 상태 ${bounded2(verification.fingerprint, 128)}${verification.output ? ` / ${bounded2(verification.output, 250)}` : ""}`));
     if (review) {
-      lines.push(bounded(`${decision.round}차 판단 당시 최종 리뷰: ${review.passed ? "통과" : "실패"} / ${bounded(review.summary, 350)}`));
-      lines.push(...compact(review.findings, 3).map((finding) => bounded(`${decision.round}차 판단 당시 지적: ${finding}`)));
+      lines.push(bounded2(`${decision.round}차 판단 당시 최종 리뷰: ${review.passed ? "통과" : "실패"} / ${bounded2(review.summary, 350)}`));
+      lines.push(...compact(review.findings, 3).map((finding) => bounded2(`${decision.round}차 판단 당시 지적: ${finding}`)));
     }
     return lines;
   });
 }
 function checkEvidence(mission) {
   return compact([
-    `운영자 검증: ${mission.verification ? mission.verification.ok ? "통과" : "실패" : "미실행"} / 명령: ${bounded(mission.supervision?.operatorVerifyCommand ?? mission.verifyCommand, 350)}`,
+    `운영자 검증: ${mission.verification ? mission.verification.ok ? "통과" : "실패" : "미실행"} / 명령: ${bounded2(mission.supervision?.operatorVerifyCommand ?? mission.verifyCommand, 350)}`,
     ...mission.verification?.output ? [`검증 출력: ${mission.verification.output}`] : [],
     `Chief Director 최종 리뷰: ${mission.finalReview ? mission.finalReview.passed && mission.finalReview.findings.length === 0 ? "통과" : "실패" : "미실행"}${mission.finalReview ? ` / ${mission.finalReview.summary}` : ""}`,
     ...mission.tasks.map((task) => `${task.id}: 상태 ${task.status}, 시도 ${task.attempts}회, 독립 리뷰 ${task.review ? task.review.passed && task.review.findings.length === 0 ? "통과" : "실패" : "미실행"} / 리뷰어 ${task.reviewerId}`)
   ]);
 }
 function criterionEvidence(mission) {
-  return (mission.finalReview?.criteria ?? []).map((item) => bounded(`${bounded(item.criterion, 200)}: ${item.passed ? "통과" : "실패"} / 근거: ${bounded(item.evidence, 250)}`));
+  return (mission.finalReview?.criteria ?? []).map((item) => bounded2(`${bounded2(item.criterion, 200)}: ${item.passed ? "통과" : "실패"} / 근거: ${bounded2(item.evidence, 250)}`));
 }
 function reportPrompt(mission) {
   const goal = mission.supervision?.operatorGoal ?? mission.goal;
@@ -49714,8 +49805,8 @@ function reportPrompt(mission) {
     '{"summary":"result","eli5":"plain-language result and user impact","goalAssessment":"criteria and actual verdict","assumptions":[],"decisions":[],"deliverables":[],"checks":[],"remaining":[]}',
     `Report evidence (JSON data):
 ${JSON.stringify({
-      operatorGoal: bounded(goal, 4000),
-      interpretation: mission.goalBrief ? bounded(mission.goalBrief.interpretation, 2000) : undefined,
+      operatorGoal: bounded2(goal, 4000),
+      interpretation: mission.goalBrief ? bounded2(mission.goalBrief.interpretation, 2000) : undefined,
       assumptions: compact(mission.goalBrief?.assumptions ?? []),
       successCriteria: compact(criteria(mission)),
       status: mission.status,
@@ -49724,9 +49815,9 @@ ${JSON.stringify({
       containerObservation: mission.containerObservation,
       verdict: incompleteReasons(mission).length === 0 ? "completed" : "incomplete",
       incompleteReasons: incompleteReasons(mission),
-      error: mission.error ? bounded(mission.error, 2000) : undefined,
-      workspace: bounded(mission.workspace.path, 2000),
-      branch: bounded(mission.workspace.branch),
+      error: mission.error ? bounded2(mission.error, 2000) : undefined,
+      workspace: bounded2(mission.workspace.path, 2000),
+      branch: bounded2(mission.workspace.branch),
       chiefId: mission.chiefId,
       technicalLeadId: mission.technicalLeadId,
       technicalAdvice: advisoryEvidence("technical", mission.technicalReview),
@@ -49736,10 +49827,10 @@ ${JSON.stringify({
       marketingAdvice: advisoryEvidence("marketing", mission.marketingReview),
       actors: mission.personas.slice(0, 20).map((persona) => ({
         id: persona.id,
-        name: bounded(persona.name),
-        role: bounded(persona.role),
-        cli: bounded(persona.agentType),
-        model: persona.model ? bounded(persona.model) : "native default (actual model not recorded)",
+        name: bounded2(persona.name),
+        role: bounded2(persona.role),
+        cli: bounded2(persona.agentType),
+        model: persona.model ? bounded2(persona.model) : "native default (actual model not recorded)",
         selectedSkills: persona.skills.slice(0, 30)
       })),
       decisions: decisions.map((decision) => ({
@@ -49747,8 +49838,8 @@ ${JSON.stringify({
         action: decision.action,
         taskId: decision.taskId,
         actorId: decision.personaId,
-        reason: bounded(decision.reason),
-        instructions: decision.instructions ? bounded(decision.instructions) : undefined,
+        reason: bounded2(decision.reason),
+        instructions: decision.instructions ? bounded2(decision.instructions) : undefined,
         historicalEvidence: decision.evidence && snapshotDecisions.has(decision) ? {
           kind: "evidence at the recovery decision; not current approval",
           finalReview: reviewEvidence(decision.evidence.finalReview),
@@ -49757,25 +49848,25 @@ ${JSON.stringify({
       })),
       tasks: mission.tasks.slice(0, 12).map((state) => ({
         id: state.id,
-        title: bounded(mission.plan?.tasks.find((task) => task.id === state.id)?.title ?? state.id),
+        title: bounded2(mission.plan?.tasks.find((task) => task.id === state.id)?.title ?? state.id),
         actorId: mission.plan?.tasks.find((task) => task.id === state.id)?.personaId,
         reviewerId: state.reviewerId,
         status: state.status,
         attempts: state.attempts,
-        actorClaim: state.output ? bounded(state.output, 3000) : undefined,
+        actorClaim: state.output ? bounded2(state.output, 3000) : undefined,
         review: reviewEvidence(state.review)
       })),
-      verifyCommand: bounded(mission.supervision?.operatorVerifyCommand ?? mission.verifyCommand, 1200),
+      verifyCommand: bounded2(mission.supervision?.operatorVerifyCommand ?? mission.verifyCommand, 1200),
       verification: verificationEvidence(mission.verification),
       goalVerification: mission.goalVerification,
       execution: mission.execution,
       executionPolicy: mission.executionPolicy,
       finalReview: reviewEvidence(mission.finalReview),
       history: mission.history.slice(-30).map((event) => ({
-        at: bounded(event.at),
-        stage: bounded(event.stage),
+        at: bounded2(event.at),
+        stage: bounded2(event.stage),
         taskId: event.taskId,
-        message: bounded(event.message)
+        message: bounded2(event.message)
       }))
     })}`
   ].join(`
@@ -49797,10 +49888,10 @@ function parseReport(source) {
 function fallbackReport(mission) {
   const reasons = incompleteReasons(mission);
   const complete = reasons.length === 0;
-  const goal = bounded(mission.supervision?.operatorGoal ?? mission.goal, 350);
+  const goal = bounded2(mission.supervision?.operatorGoal ?? mission.goal, 350);
   return {
     summary: complete ? "작업, 독립 리뷰, 운영자 검증과 Chief Director 최종 리뷰를 통과했습니다." : "목표는 미완료입니다. 확인된 미해결 조건과 보관된 실행 기록을 보고합니다.",
-    eli5: complete ? `“${goal}”을 위한 결과물을 만들고, 다른 담당자의 점검과 지정한 확인 절차를 마쳤습니다. 결과물은 아래 작업 경로에 보관되어 있어 직접 확인할 수 있습니다.` : `“${goal}”을 위해 작업했지만, 아직 모든 확인 절차를 통과한 결과는 아닙니다. ${bounded(reasons[0] ?? "완료 증거가 없습니다.", 350)} 이미 만든 작업은 보관되어 있습니다. Chief Director가 기록한 판단과 다음 관측·재개 시각, 아직 충족되지 않은 조건을 아래에서 보고합니다.`,
+    eli5: complete ? `“${goal}”을 위한 결과물을 만들고, 다른 담당자의 점검과 지정한 확인 절차를 마쳤습니다. 결과물은 아래 작업 경로에 보관되어 있어 직접 확인할 수 있습니다.` : `“${goal}”을 위해 작업했지만, 아직 모든 확인 절차를 통과한 결과는 아닙니다. ${bounded2(reasons[0] ?? "완료 증거가 없습니다.", 350)} 이미 만든 작업은 보관되어 있습니다. Chief Director가 기록한 판단과 다음 관측·재개 시각, 아직 충족되지 않은 조건을 아래에서 보고합니다.`,
     goalAssessment: complete ? "기록된 성공 기준에 대해 작업별 독립 리뷰와 운영자 검증이 통과했고, Chief Director가 최종 승인했습니다." : "성공 기준 전체의 충족을 확인하지 못했습니다. 일부 작업이나 검증이 통과했더라도 목표 달성으로 표시하지 않습니다.",
     assumptions: compact(mission.goalBrief?.assumptions ?? []),
     decisions: decisionEvidence(mission),
@@ -49818,7 +49909,7 @@ function fallbackReport(mission) {
   };
 }
 function markdown(value, limit = 1200) {
-  return bounded(value, limit).replace(/[\p{Cc}\p{Cf}]/gu, " ").replace(/\s+/g, " ").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/[\\`*_{}[\]()#+.!|~-]/g, "\\$&");
+  return bounded2(value, limit).replace(/[\p{Cc}\p{Cf}]/gu, " ").replace(/\s+/g, " ").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/[\\`*_{}[\]()#+.!|~-]/g, "\\$&");
 }
 function list(values) {
   return values.length ? compact(values).map((value) => `- ${markdown(value)}`).join(`
@@ -50333,12 +50424,12 @@ async function assertMissionWorkspace(mission) {
 }
 
 // ../../packages/core/src/chief/parallel-workspace.ts
-var hash = (value) => createHash10("sha256").update(value).digest("hex");
+var hash2 = (value) => createHash10("sha256").update(value).digest("hex");
 var same = (a, b) => JSON.stringify(a) === JSON.stringify(b);
 function identity3(missionId, taskId, attempt) {
   if (!taskId || taskId.length > 200 || !Number.isSafeInteger(attempt) || attempt < 1)
     throw new Error("Use a valid task ID and positive attempt number for each parallel Actor.");
-  return `${hash(missionId).slice(0, 16)}-${hash(taskId).slice(0, 16)}-${attempt}`;
+  return `${hash2(missionId).slice(0, 16)}-${hash2(taskId).slice(0, 16)}-${attempt}`;
 }
 async function paths(source, missionId, taskId, attempt) {
   const root = await parallelRoot(source);
@@ -50482,7 +50573,7 @@ async function collectTaskDelivery(mission, workspace) {
     version: 1,
     workspace,
     patchPath: location.patch,
-    patchSha256: hash(patch),
+    patchSha256: hash2(patch),
     deliveryTree: final.tree,
     changes,
     status: "prepared"
@@ -50498,7 +50589,7 @@ async function integrateTaskDelivery(mission, input) {
   if (delivery.workspace.missionId !== mission.id || !same(delivery.workspace, input.workspace) || delivery.patchSha256 !== input.patchSha256 || delivery.patchPath !== location.patch)
     throw new Error("Parallel delivery does not match its persisted task identity and patch. Inspect the saved artifacts before recovery.");
   const patch = await readFile4(location.patch);
-  if (hash(patch) !== delivery.patchSha256)
+  if (hash2(patch) !== delivery.patchSha256)
     throw new Error("Parallel delivery patch changed. Restore its saved SHA256 before integration.");
   const current = await captureParallelBaseline(mission.workspace.path);
   const images = await parallelTreeImages(mission.workspace.path, current.tree);
@@ -66141,7 +66232,11 @@ ${details}` : ""}`);
     timeoutSec,
     maxRepairs,
     maxRounds,
-    operatingPolicy: chiefOperatingPolicy(chiefConfig, readyActors, !profile),
+    operatingPolicy: chiefOperatingPolicy(chiefConfig, readyActors, !profile, project?.oma?.skill_compatibility ? {
+      reportPath: resolve11(root, project.oma.skill_compatibility.report_path),
+      maxAgeHours: project.oma.skill_compatibility.max_age_hours,
+      mode: project.oma.skill_compatibility.mode
+    } : undefined),
     capturePolicy: chiefCapturePolicy(chiefConfig),
     executionPolicy,
     metricSourcePolicy: chiefConfig.metric_sources,
@@ -66472,7 +66567,7 @@ async function launchMission(input) {
 // src/operation-api.ts
 import { randomUUID as randomUUID16 } from "node:crypto";
 import { realpath as realpath20 } from "node:fs/promises";
-import { join as join36 } from "node:path";
+import { join as join37 } from "node:path";
 
 // ../../packages/core/src/chief/continuous-store.ts
 import { randomUUID as randomUUID9 } from "node:crypto";
@@ -66676,10 +66771,10 @@ class ContinuousOperationStore {
 }
 
 // src/chief-continuous.ts
-import { execFile as execFile4 } from "node:child_process";
+import { execFile as execFile5 } from "node:child_process";
 import { randomUUID as randomUUID15 } from "node:crypto";
 import { mkdir as mkdir17, realpath as realpath19, rename as rename7, unlink as unlink7, writeFile as writeFile13 } from "node:fs/promises";
-import { join as join35, resolve as resolve19 } from "node:path";
+import { join as join36, resolve as resolve20 } from "node:path";
 import { promisify as promisify2 } from "node:util";
 
 // ../../packages/core/src/chief/container-observation-command.ts
@@ -67676,7 +67771,7 @@ async function createContinuousMissionWorkspace(repositoryRoot, operationId, bas
 init_execution();
 
 // src/chief-continuous-decision.ts
-import { join as join34 } from "node:path";
+import { join as join35 } from "node:path";
 
 // ../../packages/core/src/chief/coordinator-run.ts
 init_execution();
@@ -67771,13 +67866,13 @@ init_execution();
 
 // ../../packages/core/src/chief/runtime.ts
 import { randomUUID as randomUUID11 } from "node:crypto";
-import { join as join27, resolve as resolve15 } from "node:path";
+import { join as join28, resolve as resolve16 } from "node:path";
 
 // ../../packages/core/src/oma/receipt-adapter.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync4, lstatSync as lstatSync2, readdirSync, readFileSync as readFileSync9 } from "node:fs";
+import { existsSync as existsSync4, lstatSync as lstatSync3, readFileSync as readFileSync9 } from "node:fs";
 import { mkdir as mkdir12, writeFile as writeFile9 } from "node:fs/promises";
-import { isAbsolute as isAbsolute7, join as join25, relative as relative7, resolve as resolve14, sep as sep9 } from "node:path";
+import { basename as basename2, dirname as dirname7, isAbsolute as isAbsolute8, join as join26, relative as relative8, resolve as resolve15, sep as sep10 } from "node:path";
 
 // ../../packages/core/src/config/workflow-router.ts
 import { readFileSync as readFileSync8 } from "node:fs";
@@ -68093,27 +68188,107 @@ function ensureLatestOmaCli(options = {}) {
   return pending;
 }
 
+// ../../packages/core/src/oma/receipt-storage.ts
+import { createHash as createHash16 } from "node:crypto";
+import { lstatSync as lstatSync2, readdirSync, realpathSync as realpathSync5 } from "node:fs";
+import { homedir as homedir6 } from "node:os";
+import { basename, dirname as dirname6, isAbsolute as isAbsolute7, join as join25, relative as relative7, resolve as resolve14, sep as sep9 } from "node:path";
+var OMA_RUN_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function absolutePath(value, key) {
+  if (!isAbsolute7(value) || Array.from(value).some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127))
+    throw new Error(`${key} must be an absolute path without control characters`);
+  return resolve14(value);
+}
+function omaReceiptDirectories(workspace, options = {}) {
+  const env = options.env ?? process.env;
+  const profile = env.OMA_PROFILE ?? "0";
+  if (!/^(0|[1-9][0-9]{0,9})$/.test(profile))
+    throw new Error("OMA_PROFILE must be a non-negative profile number");
+  const stateHome = env.OMA_STATE_HOME === undefined ? absolutePath(env.OMA_HOME || join25(options.home ?? homedir6(), ".oma"), "OMA_HOME") : absolutePath(env.OMA_STATE_HOME, "OMA_STATE_HOME");
+  const project = createHash16("sha256").update(realpathSync5(resolve14(workspace))).digest("hex");
+  return [
+    join25(stateHome, "u", profile, "projects", project, "agent-runs"),
+    ...profile === "0" ? [join25(resolve14(workspace), ".agents", "state", "agent-runs")] : []
+  ];
+}
+function regularDirectory(path) {
+  try {
+    const stat = lstatSync2(path);
+    if (!stat.isDirectory() || stat.isSymbolicLink())
+      throw new Error("OMA receipt directory is not a regular directory");
+    return true;
+  } catch (error) {
+    if (error.code === "ENOENT")
+      return false;
+    throw error;
+  }
+}
+function validateDirectory(directory, workspace) {
+  if (!regularDirectory(directory))
+    return false;
+  const legacy = join25(resolve14(workspace), ".agents", "state", "agent-runs");
+  const boundary = directory === legacy ? resolve14(workspace) : dirname6(dirname6(dirname6(dirname6(dirname6(directory)))));
+  const components = relative7(boundary, directory).split(sep9).filter(Boolean);
+  let path = boundary;
+  for (const component of components) {
+    path = join25(path, component);
+    if (!regularDirectory(path))
+      throw new Error("OMA receipt directory changed during inspection");
+  }
+  return true;
+}
+function listOmaRunFiles(workspace, options = {}) {
+  return omaReceiptDirectories(workspace, options).flatMap((directory) => {
+    if (!validateDirectory(directory, workspace))
+      return [];
+    return readdirSync(directory).filter((name) => name.endsWith(".json") && OMA_RUN_ID.test(name.slice(0, -5))).map((name) => join25(directory, name));
+  });
+}
+function resolveOmaReceiptPath(workspace, entry, options = {}) {
+  const name = basename(entry);
+  if (!name.endsWith(".json") || !OMA_RUN_ID.test(name.slice(0, -5)))
+    throw new Error("Invalid receipt filename");
+  if (entry === name)
+    return join25(resolve14(workspace), ".agents", "state", "agent-runs", name);
+  if (!isAbsolute7(entry) || resolve14(entry) !== entry)
+    throw new Error("Invalid receipt path");
+  if (!omaReceiptDirectories(workspace, options).includes(dirname6(entry)))
+    throw new Error("OMA receipt is outside the selected project/profile");
+  if (!validateDirectory(dirname6(entry), workspace))
+    throw new Error("OMA receipt directory is missing");
+  return entry;
+}
+
 // ../../packages/core/src/oma/receipt-adapter.ts
 var OMA_RECEIPT_SCHEMA_VERSION = 1;
-var RUN_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var HASH = /^[a-f0-9]{64}$/;
-var defaultIO2 = {
-  listRunFiles: (workspacePath) => {
-    const dir = join25(workspacePath, ".agents", "state", "agent-runs");
-    return readdirSync(dir).filter((name) => RUN_ID.test(name.slice(0, -5)) && name.endsWith(".json"));
-  },
-  readReceipt: (path) => {
-    if (!lstatSync2(path).isFile())
-      throw new Error("Receipt is not a regular file");
-    return readFileSync9(path, "utf-8");
-  },
-  runCli: (args, cwd) => {
-    const result = spawnSync2("oma", args, { cwd, encoding: "utf-8", timeout: 15000, maxBuffer: 1024 * 1024 });
-    if (result.error)
-      throw result.error;
-    return { exitCode: result.status, stdout: result.stdout };
-  }
-};
+function createOmaEvidenceIO(options = {}) {
+  const env = { ...options.env ?? process.env, OMA_SKIP_VERSION_CHECK: "1" };
+  if (options.home !== undefined && !env.OMA_HOME)
+    env.OMA_HOME = join26(options.home, ".oma");
+  const storage = { ...options, env };
+  return {
+    listRunFiles: (workspacePath) => listOmaRunFiles(workspacePath, storage),
+    resolveRunFile: (workspacePath, entry) => resolveOmaReceiptPath(workspacePath, entry, storage),
+    readReceipt: (path) => {
+      if (!lstatSync3(path).isFile())
+        throw new Error("Receipt is not a regular file");
+      return readFileSync9(path, "utf-8");
+    },
+    runCli: (args, cwd) => {
+      const result = spawnSync2("oma", args, {
+        cwd,
+        env,
+        encoding: "utf-8",
+        timeout: 15000,
+        maxBuffer: 1024 * 1024
+      });
+      if (result.error)
+        throw result.error;
+      return { exitCode: result.status, stdout: result.stdout };
+    }
+  };
+}
 function fail(reason) {
   return { ok: false, reason };
 }
@@ -68137,17 +68312,17 @@ async function prepareOmaAttempt(request, dependencies = {}) {
   const routed = routeIssue(`${request.issue.title}
 ${request.issue.description ?? ""}`, table);
   for (const workflow of routed.workflows) {
-    const file = join25(request.workspace.path, ".agents", "workflows", `${workflow}.md`);
+    const file = join26(request.workspace.path, ".agents", "workflows", `${workflow}.md`);
     if (!existsSync4(file))
       throw new Error(`OMA workflow file missing in target worktree: ${file}`);
   }
   await ensureLatestOmaCli({ io: dependencies.latestCliIO });
-  const path = join25(request.workspace.path, ".agents", "results", `plan-${request.attempt.id}.json`);
+  const path = join26(request.workspace.path, ".agents", "results", `plan-${request.attempt.id}.json`);
   const plan = {
     session_id: request.attempt.id,
     lineage_id: request.attempt.id,
     valley_issue_id: request.issue.id,
-    valley_workspace: resolve14(request.workspace.path),
+    valley_workspace: resolve15(request.workspace.path),
     tasks: [
       {
         id: request.attempt.id,
@@ -68167,7 +68342,7 @@ ${request.issue.description ?? ""}`, table);
       }
     ]
   };
-  await mkdir12(join25(request.workspace.path, ".agents", "results"), { recursive: true });
+  await mkdir12(join26(request.workspace.path, ".agents", "results"), { recursive: true });
   await writeFile9(path, JSON.stringify(plan, null, 2), { encoding: "utf-8", flag: "wx" });
   return path;
 }
@@ -68195,8 +68370,8 @@ function buildOmaGuidance(request) {
   ].join(`
 `);
 }
-function validateOmaEvidence(request, io = defaultIO2) {
-  const root = resolve14(request.workspace.path);
+function validateOmaEvidence(request, io = createOmaEvidenceIO()) {
+  const root = resolve15(request.workspace.path);
   if (!request.verifyCommand.trim())
     return fail("Strict OMA mode has no configured verify command");
   let cliVersion;
@@ -68210,26 +68385,37 @@ function validateOmaEvidence(request, io = defaultIO2) {
     return fail(`OMA CLI unavailable: ${String(err)}`);
   }
   let receipts;
+  const locations = new Map;
   try {
-    receipts = io.listRunFiles(root).map((name) => {
-      if (!RUN_ID.test(name.slice(0, -5)) || !name.endsWith(".json"))
+    receipts = io.listRunFiles(root).map((entry) => {
+      const name = basename2(entry);
+      const path = (io.resolveRunFile ?? resolveOmaReceiptPath)(root, entry);
+      if (!OMA_RUN_ID.test(name.slice(0, -5)) || !name.endsWith(".json"))
         throw new Error("Invalid receipt filename");
-      const parsed = JSON.parse(io.readReceipt(join25(root, ".agents", "state", "agent-runs", name)));
+      const parsed = JSON.parse(io.readReceipt(path));
       if (!isRecord(parsed) || parsed.runId !== name.slice(0, -5))
         throw new Error("Malformed run receipt");
+      locations.set(parsed, dirname7(path));
       return parsed;
     });
   } catch (err) {
     return fail(`Missing or malformed OMA receipt: ${String(err)}`);
   }
-  const forAttempt = receipts.filter((run) => run.sessionId === request.attempt.id && run.agentId === request.agentId).sort((a, b) => Number(a.sequence) - Number(b.sequence));
+  const forAttempt = receipts.filter((run) => run.sessionId === request.attempt.id && run.agentId === request.agentId);
+  if (forAttempt.some((run) => !Number.isSafeInteger(run.sequence) || Number(run.sequence) < 1))
+    return fail("OMA receipt sequence is malformed");
+  if (new Set(forAttempt.map((run) => run.sequence)).size !== forAttempt.length)
+    return fail("OMA receipt sequence is ambiguous across matching runs");
+  if (new Set(forAttempt.map((run) => locations.get(run))).size > 1)
+    return fail("Matching OMA receipts span multiple stores; generate current evidence in the active CLI's selected project/profile");
+  forAttempt.sort((a, b) => Number(a.sequence) - Number(b.sequence));
   const run = forAttempt.at(-1);
   if (!run)
     return fail("No OMA receipt is bound to this Valley attempt");
   if (run.schemaVersion !== OMA_RECEIPT_SCHEMA_VERSION) {
     return fail(`OMA CLI ${cliVersion} returned an unsupported receipt schema. AV requires agent-run schema v${OMA_RECEIPT_SCHEMA_VERSION}; update AV and OMA (npm install -g oh-my-agent@latest), then generate and verify a compatible receipt.`);
   }
-  if (run.taskId !== request.attempt.id || !RUN_ID.test(String(run.runId))) {
+  if (run.taskId !== request.attempt.id || !OMA_RUN_ID.test(String(run.runId))) {
     return fail("OMA receipt task identity is incompatible");
   }
   if (run.workspace !== root || run.artifactRoot !== root || run.status !== "completed" || run.exitCode !== 0) {
@@ -68263,12 +68449,12 @@ function validateOmaEvidence(request, io = defaultIO2) {
     if (!template?.includes("{{attempt.id}}"))
       return fail("Analysis requires a configured current-attempt report path");
     const expanded = template.replaceAll("{{attempt.id}}", request.attempt.id);
-    const target = resolve14(root, expanded);
-    const subpath = relative7(root, target);
-    if (isAbsolute7(expanded) || expanded.split(/[\\/]/).includes("..") || subpath === "" || subpath === ".." || subpath.startsWith(`..${sep9}`) || isAbsolute7(subpath)) {
+    const target = resolve15(root, expanded);
+    const subpath = relative8(root, target);
+    if (isAbsolute8(expanded) || expanded.split(/[\\/]/).includes("..") || subpath === "" || subpath === ".." || subpath.startsWith(`..${sep10}`) || isAbsolute8(subpath)) {
       return fail("Configured analysis report escapes the workspace");
     }
-    if (!isRecord(run.artifacts) || !Object.entries(run.artifacts).some(([path, hash]) => !isAbsolute7(path) && !path.split(/[\\/]/).includes("..") && resolve14(root, path) === target && HASH.test(String(hash)))) {
+    if (!isRecord(run.artifacts) || !Object.entries(run.artifacts).some(([path, hash]) => !isAbsolute8(path) && !path.split(/[\\/]/).includes("..") && resolve15(root, path) === target && HASH.test(String(hash)))) {
       return fail("OMA receipt does not bind the configured current-attempt report");
     }
   }
@@ -68285,7 +68471,7 @@ function validateOmaEvidence(request, io = defaultIO2) {
   for (const check of run.checks) {
     if (!isRecord(check) || !stringArray(check.command) || !check.command.length || typeof check.cwd !== "string")
       return fail("OMA verification receipt is malformed");
-    latestChecks.set(JSON.stringify([check.command, resolve14(check.cwd)]), check);
+    latestChecks.set(JSON.stringify([check.command, resolve15(check.cwd)]), check);
   }
   if ([...latestChecks.values()].some((check) => check.exitCode !== 0 || check.before !== run.after || check.after !== run.after)) {
     return fail("An OMA verification check failed or is stale");
@@ -68307,6 +68493,214 @@ function validateOmaEvidence(request, io = defaultIO2) {
   return { ok: true, runId: String(run.runId) };
 }
 
+// ../../packages/core/src/oma/skill-matrix-adapter.ts
+import { posix } from "node:path";
+
+// ../../packages/core/src/oma/skill-matrix-io.ts
+init_skill_matrix_schema();
+import { execFile as execFile4 } from "node:child_process";
+import { constants as constants5 } from "node:fs";
+import { open as open7 } from "node:fs/promises";
+var MAX_BYTES = 4 * 1024 * 1024;
+async function command(binary, args, signal) {
+  return new Promise((resolve, reject) => {
+    execFile4(binary, args, {
+      encoding: "utf8",
+      timeout: 1e4,
+      maxBuffer: MAX_BYTES,
+      signal,
+      ...binary === "oma" ? { env: { ...process.env, OMA_SKIP_VERSION_CHECK: "1" } } : {}
+    }, (error, stdout) => {
+      if (error)
+        reject(new Error(`${binary} local diagnostic command failed. Check its installation/version and retry.`));
+      else
+        resolve(stdout);
+    });
+  });
+}
+async function readReport(path) {
+  const file = await open7(path, constants5.O_RDONLY | constants5.O_NOFOLLOW | constants5.O_NONBLOCK);
+  try {
+    const info = await file.stat();
+    if (!info.isFile() || info.size > MAX_BYTES)
+      throw new Error("Matrix report must be a regular file at most 4 MiB.");
+    const bytes = Buffer.alloc(info.size + 1);
+    let length = 0;
+    while (length < bytes.length) {
+      const result = await file.read(bytes, length, bytes.length - length, length);
+      if (!result.bytesRead)
+        break;
+      length += result.bytesRead;
+    }
+    if (length !== info.size)
+      throw new Error("Matrix report changed during the read. Retry after its writer finishes.");
+    return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, length)));
+  } finally {
+    await file.close();
+  }
+}
+var defaultSkillMatrixDeps = {
+  now: Date.now,
+  platform: process.platform,
+  arch: process.arch,
+  readReport,
+  plan: async (workspace, skills, signal) => JSON.parse(await command("oma", [
+    "skills",
+    "matrix",
+    "--project-root",
+    workspace,
+    "--skills",
+    skills.join(","),
+    "--delivery",
+    "injected",
+    "--vendors",
+    "claude,codex",
+    "--json"
+  ], signal)),
+  cliVersion: async (vendor, signal) => {
+    const version = (await command(vendor, ["--version"], signal)).trim();
+    return /^[\w .()+/-]{1,160}$/.test(version) ? version : null;
+  }
+};
+function parseSkillMatrix(value) {
+  const parsed = matrixReportSchema.safeParse(value);
+  if (!parsed.success)
+    throw new Error("Matrix report uses an unsupported or malformed evidence contract. Regenerate it with the current OMA CLI.");
+  const report = parsed.data;
+  const unique = (values) => new Set(values).size === values.length;
+  if (!unique(report.cases.map((entry) => entry.id)) || !unique(report.cells.map((entry) => `${entry.vendor}\x00${entry.caseId}`)) || report.bundle && (!unique(report.bundle.skills.map((entry) => entry.name)) || !unique(report.bundle.skills.map((entry) => entry.caseId))) || report.cells.some((cell) => !unique(cell.checks.map((check) => check.id))))
+    throw new Error("Matrix report repeats a skill, case or vendor cell. Regenerate an unambiguous report.");
+  return report;
+}
+
+// ../../packages/core/src/oma/skill-matrix-adapter.ts
+var scope = "installed injected read-reference audit; not AV runtime or task-quality certification";
+var safeNames = /^[a-z0-9][a-z0-9-]{0,127}$/;
+var remediation = "Regenerate the installed injected matrix with explicit models, then set oma.skill_compatibility.report_path in av.yaml.";
+var matrixRouteKey = (route) => `${route.actorType}\x00${route.model ?? ""}`;
+function sourceProblem(report) {
+  if (report.sourceKind !== "installed" || report.delivery !== "injected" || report.auditScope !== "read-reference" || !report.bundle)
+    return "Evidence is not an installed, injected, read-reference audit. Synthetic probes cannot authorize installed skills.";
+  return;
+}
+function sameCoverage(a, b) {
+  const sorted = (items) => JSON.stringify([...items].sort());
+  return a.hash === b.hash && a.caseId === b.caseId && sorted(a.requiredFiles) === sorted(b.requiredFiles) && sorted(a.missingFiles) === sorted(b.missingFiles) && JSON.stringify(a.excludedReferences) === JSON.stringify(b.excludedReferences);
+}
+function assessRoute(report, plan, skills, route, version) {
+  const result = (status, reason) => ({
+    ...route,
+    status,
+    reason
+  });
+  if (route.actorType !== "claude" && route.actorType !== "codex")
+    return result("unknown", "This matrix protocol measures only Claude and Codex.");
+  if (!route.model)
+    return result("unknown", "The candidate uses an unpinned native model default; it cannot match a measured model.");
+  if (!version)
+    return result("unknown", "The current native CLI version could not be verified.");
+  for (const name of skills) {
+    const current = plan.bundle?.skills.find((entry) => entry.name === name);
+    const saved = report.bundle?.skills.find((entry) => entry.name === name);
+    if (!current || !saved)
+      return result("unknown", `Skill ${name} has no complete installed audit coverage.`);
+    if (!sameCoverage(current, saved))
+      return result("unknown", `Skill ${name} content or reference coverage changed after the audit.`);
+    if (current.missingFiles.length || current.excludedReferences.length || saved.missingFiles.length || saved.excludedReferences.length)
+      return result("unknown", `Skill ${name} has missing or excluded references; complete its audit coverage first.`);
+    if (!report.cases.some((entry) => entry.id === saved.caseId && entry.skill === name))
+      return result("unknown", `Skill ${name} required case is absent from the measured selection.`);
+    const cell = report.cells.find((entry) => entry.caseId === saved.caseId && entry.vendor === route.actorType);
+    if (!cell || cell.skill !== name || cell.contentHash !== current.hash)
+      return result("unknown", `Skill ${name} lacks a matching measured vendor cell.`);
+    if (cell.cliVersion !== version)
+      return result("unknown", `Skill ${name} was measured with a different or unknown native CLI version.`);
+    if (cell.model !== route.model)
+      return result("unknown", `Skill ${name} was measured with a different or unknown reported model.`);
+    if (cell.status !== "pass" || !cell.checks.length || cell.checks.some((check) => check.status !== "pass"))
+      return result(cell.status === "fail" ? "fail" : "unknown", `Skill ${name} audit is ${cell.status}; passing read-reference evidence is required.`);
+    const entry = `${name}/SKILL.md`;
+    if (!current.requiredFiles.includes(entry))
+      return result("unknown", `Skill ${name} audit omits its installed SKILL.md.`);
+    const required = [
+      "process",
+      "output",
+      "content",
+      "integrity",
+      "reference-coverage",
+      ...current.requiredFiles.filter((file) => file !== entry).map((file) => `reference:${posix.relative(name, file)}`)
+    ];
+    if (required.some((id) => !cell.checks.some((check) => check.id === id && check.status === "pass" && (id === "content" || id.startsWith("reference:") ? check.proof === "read" : true))))
+      return result("unknown", `Skill ${name} audit lacks a mandatory successful read-reference check.`);
+  }
+  return result("pass", "All selected skills have current passing installed injected read-reference evidence.");
+}
+async function inspectSkillCompatibility(policy, workspace, selectedSkills, routes, deps = defaultSkillMatrixDeps, signal) {
+  const unknown = (reason) => ({
+    scope,
+    routes: routes.map((route) => ({ ...route, status: "unknown", reason }))
+  });
+  if (selectedSkills?.length === 0)
+    return {
+      scope,
+      routes: routes.map((route) => ({
+        ...route,
+        status: "pass",
+        reason: "No skills selected; no compatibility claim is required."
+      }))
+    };
+  try {
+    if (signal?.aborted)
+      throw new Error("Interrupted");
+    const report = parseSkillMatrix(await deps.readReport(policy.reportPath));
+    const source = sourceProblem(report);
+    if (source)
+      return unknown(source);
+    if (report.mode !== "live" || report.status !== "completed")
+      return unknown("The report is not a completed live measurement; a plan is unmeasured.");
+    const age = deps.now() - Date.parse(report.createdAt);
+    if (age < -60000 || age > policy.maxAgeHours * 3600000)
+      return unknown("The cached matrix is stale or has a future timestamp.");
+    if (report.host.platform !== deps.platform || report.host.arch !== deps.arch)
+      return unknown("The matrix host platform or architecture differs from this runtime.");
+    const skills = [...new Set(selectedSkills ?? report.bundle?.skills.map((entry) => entry.name) ?? [])];
+    if (!skills.length || skills.length > 100 || skills.some((name) => !safeNames.test(name)))
+      return unknown("Select a bounded list of valid installed skill names.");
+    const plan = parseSkillMatrix(await deps.plan(workspace, skills, signal));
+    if (sourceProblem(plan) || plan.mode !== "plan" || plan.status !== "planned")
+      return unknown("OMA did not return a supported installed injected plan.");
+    if (plan.omaVersion !== report.omaVersion)
+      return unknown("The OMA version changed after measurement; refresh the cached matrix.");
+    if (plan.host.platform !== deps.platform || plan.host.arch !== deps.arch)
+      return unknown("The current OMA plan host does not match this runtime.");
+    const versions = new Map;
+    for (const route of routes) {
+      if (versions.has(route.actorType) || route.actorType !== "claude" && route.actorType !== "codex")
+        continue;
+      try {
+        versions.set(route.actorType, await deps.cliVersion(route.actorType, signal));
+      } catch {
+        versions.set(route.actorType, null);
+      }
+    }
+    if (signal?.aborted)
+      throw new Error("Interrupted");
+    return {
+      scope,
+      routes: routes.map((route) => assessRoute(report, plan, skills, route, versions.get(route.actorType) ?? null))
+    };
+  } catch {
+    if (signal?.aborted)
+      throw new Error("Skill compatibility inspection interrupted before Actor launch.");
+    return unknown(`The cached report or local OMA plan could not be validated. ${remediation}`);
+  }
+}
+function assertCompatibleRoute(route, inspection) {
+  const result = inspection.routes.find((entry) => matrixRouteKey(entry) === matrixRouteKey(route));
+  if (result?.status !== "pass")
+    throw new Error(`Skill compatibility required for ${route.actorType}/${route.model ?? "native default"}: ${result?.reason ?? "no matching evidence"} ${remediation}`);
+}
+
 // ../../packages/core/src/orchestrator/agent-runner.ts
 init_logger();
 import { AsyncLocalStorage } from "node:async_hooks";
@@ -68798,9 +69192,9 @@ async function withMissionDeadline(mission, parent, run) {
 
 // ../../packages/core/src/chief/skills.ts
 init_dist();
-import { constants as constants5 } from "node:fs";
-import { lstat as lstat11, mkdir as mkdir13, open as open7, readdir as readdir6, realpath as realpath14, stat, writeFile as writeFile10 } from "node:fs/promises";
-import { isAbsolute as isAbsolute8, join as join26, relative as relative8, sep as sep10 } from "node:path";
+import { constants as constants6 } from "node:fs";
+import { lstat as lstat11, mkdir as mkdir13, open as open8, readdir as readdir6, realpath as realpath14, stat, writeFile as writeFile10 } from "node:fs/promises";
+import { isAbsolute as isAbsolute9, join as join27, relative as relative9, sep as sep11 } from "node:path";
 var MAX_SKILL_BYTES = 256000;
 var MAX_METADATA_BYTES = 16384;
 var MAX_CATALOG_SIZE = 100;
@@ -68809,8 +69203,8 @@ var MAX_HARNESS_ENTRIES = 5000;
 var SKILL_NAME = /^[a-z0-9][a-z0-9-]{0,127}$/;
 var OMA_SKILL_NAME = /^oma-[a-z0-9][a-z0-9-]{0,123}$/;
 function inside(root, path) {
-  const child = relative8(root, path);
-  return child !== "" && child !== ".." && !child.startsWith(`..${sep10}`) && !isAbsolute8(child);
+  const child = relative9(root, path);
+  return child !== "" && child !== ".." && !child.startsWith(`..${sep11}`) && !isAbsolute9(child);
 }
 function excludedResource(name) {
   return [
@@ -68833,11 +69227,11 @@ async function prepareMissionSkills(sourceRepositoryPath, workspacePath) {
   if (!source)
     return;
   const workspace = await realpath14(workspacePath);
-  const agents = join26(workspace, ".agents");
+  const agents = join27(workspace, ".agents");
   await mkdir13(agents, { recursive: true });
   if (!inside(workspace, await realpath14(agents)))
     throw new Error("The target .agents directory escapes the mission worktree. Fix its symlink before creating this order.");
-  const target = join26(agents, "skills");
+  const target = join27(agents, "skills");
   await mkdir13(target, { recursive: true });
   const targetRoot = await skillRoot(workspace);
   if (!targetRoot)
@@ -68858,13 +69252,13 @@ async function prepareMissionSkills(sourceRepositoryPath, workspacePath) {
         continue;
       if (++entries > MAX_HARNESS_ENTRIES)
         throw new Error("The installed skill resources exceed 5,000 entries. Remove unused resources before creating this order.");
-      const from = await realpath14(join26(sourceDirectory, name)).catch(() => {
+      const from = await realpath14(join27(sourceDirectory, name)).catch(() => {
         return;
       });
       if (!from || !inside(sourceRoot, from))
         continue;
       const info = await stat(from);
-      const to = join26(targetDirectory, name);
+      const to = join27(targetDirectory, name);
       const existing = await lstat11(to).catch(() => {
         return;
       });
@@ -68880,7 +69274,7 @@ async function prepareMissionSkills(sourceRepositoryPath, workspacePath) {
         const parent = await realpath14(targetDirectory);
         if (parent !== destinationRoot && !inside(destinationRoot, parent))
           throw new Error("A target skill resource escapes the mission worktree. Fix its symlink before creating this order.");
-        const file = await open7(from, constants5.O_RDONLY | constants5.O_NOFOLLOW | constants5.O_NONBLOCK);
+        const file = await open8(from, constants6.O_RDONLY | constants6.O_NOFOLLOW | constants6.O_NONBLOCK);
         try {
           const current = await file.stat();
           if (!current.isFile())
@@ -68919,7 +69313,7 @@ async function skillRoot(workspacePath) {
   });
   if (!workspace)
     return;
-  const root = await realpath14(join26(workspace, ".agents", "skills")).catch(() => {
+  const root = await realpath14(join27(workspace, ".agents", "skills")).catch(() => {
     return;
   });
   if (!root)
@@ -68933,7 +69327,7 @@ async function skillRoot(workspacePath) {
 async function skillPath(root, name) {
   if (!SKILL_NAME.test(name))
     throw new Error(`Invalid skill name: ${name}. Select an installed skill directory name.`);
-  const path = await realpath14(join26(root, name, "SKILL.md")).catch(() => {
+  const path = await realpath14(join27(root, name, "SKILL.md")).catch(() => {
     throw new Error(`Skill ${name}/SKILL.md is missing. Restore that installed skill in ${root} before resuming.`);
   });
   if (!inside(root, path))
@@ -68941,7 +69335,7 @@ async function skillPath(root, name) {
   return path;
 }
 async function readSkill(path, metadataOnly) {
-  const file = await open7(path, constants5.O_RDONLY | constants5.O_NOFOLLOW | constants5.O_NONBLOCK);
+  const file = await open8(path, constants6.O_RDONLY | constants6.O_NOFOLLOW | constants6.O_NONBLOCK);
   try {
     const info = await file.stat();
     if (!info.isFile())
@@ -68989,7 +69383,7 @@ function metadata(source, name, path) {
 async function descriptor(root, name) {
   if (!OMA_SKILL_NAME.test(name))
     return;
-  const directory = await realpath14(join26(root, name));
+  const directory = await realpath14(join27(root, name));
   if (!inside(root, directory) || !(await stat(directory)).isDirectory())
     return;
   const path = await skillPath(root, name);
@@ -69169,11 +69563,13 @@ class ChiefRuntime {
   store;
   signal;
   onStage;
+  skillMatrixDeps;
   runners = new Set;
-  constructor(store, signal, onStage = () => {}) {
+  constructor(store, signal, onStage = () => {}, skillMatrixDeps) {
     this.store = store;
     this.signal = signal;
     this.onStage = onStage;
+    this.skillMatrixDeps = skillMatrixDeps;
   }
   ports() {
     return {
@@ -69244,18 +69640,32 @@ class ChiefRuntime {
       workspace,
       availableSkills: mission.availableSkills?.map((skill) => ({
         ...skill,
-        path: join27(workspace.path, ".agents", "skills", skill.name, "SKILL.md")
+        path: join28(workspace.path, ".agents", "skills", skill.name, "SKILL.md")
       }))
     };
     if (signal?.aborted)
       throw new Error("Order interrupted. Resume it with av order --resume followed by its mission ID.");
-    const route = stage === "work" ? selectWorkActor(mission, persona, context?.taskId) : undefined;
+    const compatibilityPolicy = mission.operatingPolicy?.skillCompatibility;
+    const compatibility = stage === "work" && compatibilityPolicy ? await inspectSkillCompatibility(compatibilityPolicy, workspace.path, persona.skills, workActorCandidates(mission, persona, compatibilityPolicy.mode === "require"), this.skillMatrixDeps, signal) : undefined;
+    const compatibleRoutes = compatibilityPolicy?.mode === "require" && compatibility ? new Set(compatibility.routes.filter((entry) => entry.status === "pass").map(matrixRouteKey)) : undefined;
+    if (compatibility && compatibilityPolicy)
+      mission.history.push({
+        at: new Date().toISOString(),
+        stage: "skill-compatibility",
+        message: `${compatibilityPolicy.mode}: ${compatibility.routes.map((entry) => `${entry.actorType}/${entry.model ?? "native default"} ${entry.status}: ${entry.reason}`).join("; ")} Scope: ${compatibility.scope}.`,
+        ...context?.taskId ? { taskId: context.taskId } : {}
+      });
+    const route = stage === "work" ? selectWorkActor(mission, persona, context?.taskId, compatibleRoutes) : undefined;
     persona = route?.actor ?? persona;
+    if (compatibility && compatibilityPolicy) {
+      if (compatibilityPolicy.mode === "require")
+        assertCompatibleRoute({ actorType: persona.agentType, model: persona.model }, compatibility);
+    }
     this.onStage(stage, persona);
     const attempt = {
       id: randomUUID11(),
       issueId: mission.id,
-      workspacePath: resolve15(workspace.path),
+      workspacePath: resolve16(workspace.path),
       startedAt: new Date().toISOString(),
       finishedAt: null,
       exitCode: null,
@@ -69461,16 +69871,16 @@ init_execution();
 // src/chief-supervisor.ts
 import { spawn as spawn16 } from "node:child_process";
 import { randomUUID as randomUUID13 } from "node:crypto";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 init_execution();
 
 // src/chief-delivery.ts
-import { createHash as createHash17 } from "node:crypto";
+import { createHash as createHash18 } from "node:crypto";
 import { mkdir as mkdir15, writeFile as writeFile12 } from "node:fs/promises";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 
 // ../../packages/core/src/chief/report-delivery.ts
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 
 // ../../packages/core/src/chief/report-delivery-adapters.ts
 init_report_delivery_contract();
@@ -69851,20 +70261,20 @@ init_report_delivery_contract();
 // ../../packages/core/src/chief/report-delivery-outbox.ts
 init_zod();
 init_report_delivery_contract();
-import { createHash as createHash16, randomUUID as randomUUID12 } from "node:crypto";
-import { constants as constants6 } from "node:fs";
-import { mkdir as mkdir14, open as open8, readdir as readdir7, readFile as readFile11, realpath as realpath15, rename as rename6, unlink as unlink5, writeFile as writeFile11 } from "node:fs/promises";
-import { isAbsolute as isAbsolute9, join as join28, relative as relative9, resolve as resolve16 } from "node:path";
-var hash2 = string2().regex(/^[a-f0-9]{64}$/);
+import { createHash as createHash17, randomUUID as randomUUID12 } from "node:crypto";
+import { constants as constants7 } from "node:fs";
+import { mkdir as mkdir14, open as open9, readdir as readdir7, readFile as readFile11, realpath as realpath15, rename as rename6, unlink as unlink5, writeFile as writeFile11 } from "node:fs/promises";
+import { isAbsolute as isAbsolute10, join as join29, relative as relative10, resolve as resolve17 } from "node:path";
+var hash3 = string2().regex(/^[a-f0-9]{64}$/);
 var outboxRecordSchema = strictObject({
   version: literal(1),
-  id: hash2,
+  id: hash3,
   missionId: string2().regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/),
   missionStatus: _enum(["completed", "failed"]),
   destinationId: string2().regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/),
   channel: string2().regex(/^[a-z][a-z0-9-]{0,63}$/),
-  reportHash: hash2,
-  destinationHash: hash2.optional(),
+  reportHash: hash3,
+  destinationHash: hash3.optional(),
   goal: string2().max(32000),
   markdown: string2().max(256000),
   reportPath: string2().max(4096),
@@ -69878,7 +70288,7 @@ var outboxRecordSchema = strictObject({
   message: string2().max(1000)
 }).refine((record) => record.nextPart <= record.parts && (record.status !== "delivered" || record.nextPart === record.parts));
 function sha2562(content) {
-  return createHash16("sha256").update(content).digest("hex");
+  return createHash17("sha256").update(content).digest("hex");
 }
 function receipt(record) {
   const {
@@ -69896,12 +70306,12 @@ function receipt(record) {
 class ReportOutbox {
   directory;
   constructor(stateDir) {
-    this.directory = join28(stateDir, "report-outbox");
+    this.directory = join29(stateDir, "report-outbox");
   }
   path(id) {
-    if (!hash2.safeParse(id).success)
+    if (!hash3.safeParse(id).success)
       throw new Error("Invalid report receipt ID. Use av reports to find a receipt.");
-    return join28(this.directory, `${id}.json`);
+    return join29(this.directory, `${id}.json`);
   }
   lock(id) {
     return new MissionStore(this.directory).lock(id);
@@ -69957,18 +70367,18 @@ async function verifiedAttachment(attachment, artifactRoot, readBytes) {
   try {
     const root = await realpath15(artifactRoot);
     const path = await realpath15(attachment.path);
-    const local = relative9(root, path);
-    if (!local || local.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || local === ".." || isAbsolute9(local))
+    const local = relative10(root, path);
+    if (!local || local.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || local === ".." || isAbsolute10(local))
       throw failure;
-    if (resolve16(attachment.path) !== attachment.path)
+    if (resolve17(attachment.path) !== attachment.path)
       throw failure;
-    const file = await open8(attachment.path, constants6.O_RDONLY | constants6.O_NOFOLLOW);
+    const file = await open9(attachment.path, constants7.O_RDONLY | constants7.O_NOFOLLOW);
     try {
       const stat = await file.stat();
       if (!stat.isFile() || stat.size !== attachment.sizeBytes)
         throw failure;
       if (!readBytes) {
-        const digest = createHash16("sha256");
+        const digest = createHash17("sha256");
         for await (const chunk of file.createReadStream({ autoClose: false }))
           digest.update(chunk);
         if (digest.digest("hex") !== attachment.sha256)
@@ -70015,7 +70425,7 @@ function dependencies(stateDir, overrides) {
     env: overrides.env ?? process.env,
     registry: { ...createReportChannelRegistry(fetch2), ...overrides.registry },
     attachments: overrides.attachments ?? [],
-    artifactRoot: overrides.artifactRoot ?? join29(stateDir, "captures"),
+    artifactRoot: overrides.artifactRoot ?? join30(stateDir, "captures"),
     now: overrides.now ?? (() => new Date)
   };
 }
@@ -70196,8 +70606,8 @@ init_chief_schema();
 init_yaml_loader();
 async function saveAndDeliverMissionReport(mission, root) {
   const repository = mission.repositoryRoot ?? root;
-  const directory = join30(root, ".agent-valley/reports");
-  const reportPath = join30(directory, `${mission.id}.md`);
+  const directory = join31(root, ".agent-valley/reports");
+  const reportPath = join31(directory, `${mission.id}.md`);
   const report = renderReport(mission);
   await mkdir15(directory, { recursive: true, mode: 448 });
   await writeFile12(reportPath, report, { mode: 384 });
@@ -70212,12 +70622,12 @@ ${explanation.eli5}`);
   try {
     const config = mergeChiefConfig(loadGlobalConfig()?.chief, loadProjectConfig(root)?.chief);
     const attachments = [...mission.capture?.attachments ?? []];
-    const artifactRoot = join30(repository, ".agent-valley/captures");
+    const artifactRoot = join31(repository, ".agent-valley/captures");
     if (config.reporting?.destinations.length) {
       const bytes = Buffer.from(report);
-      const sha256 = createHash17("sha256").update(bytes).digest("hex");
-      const reportDirectory = join30(artifactRoot, mission.id);
-      const attachmentPath = join30(reportDirectory, `report-${sha256}.md`);
+      const sha256 = createHash18("sha256").update(bytes).digest("hex");
+      const reportDirectory = join31(artifactRoot, mission.id);
+      const attachmentPath = join31(reportDirectory, `report-${sha256}.md`);
       await mkdir15(reportDirectory, { recursive: true, mode: 448 });
       await writeFile12(attachmentPath, bytes, { mode: 384 });
       attachments.push({
@@ -70228,7 +70638,7 @@ ${explanation.eli5}`);
         sha256
       });
     }
-    const receipts = await dispatchMissionReport(mission, report, reportPath, config.reporting, join30(repository, ".agent-valley"), {
+    const receipts = await dispatchMissionReport(mission, report, reportPath, config.reporting, join31(repository, ".agent-valley"), {
       attachments,
       artifactRoot
     });
@@ -70318,7 +70728,7 @@ function runWorker(args, root, signal) {
 async function superviseOrder(goal, options, root, dependencies = {}) {
   assertNotManagedRun();
   const id = options.resume ?? options.missionId ?? randomUUID13();
-  const store = new MissionStore(join31(root, ".agent-valley/missions"));
+  const store = new MissionStore(join32(root, ".agent-valley/missions"));
   const controller = new AbortController;
   const interrupt = () => controller.abort();
   dependencies.signal?.addEventListener("abort", interrupt, { once: true });
@@ -70497,9 +70907,9 @@ Return one valid JSON object under the original charter and pinned evidence.` :
 
 // ../../packages/core/src/chief/metric-source-adapters.ts
 init_metric_source_policy();
-import { constants as constants7 } from "node:fs";
-import { lstat as lstat12, open as open9, realpath as realpath16 } from "node:fs/promises";
-import { isAbsolute as isAbsolute10, relative as relative10, resolve as resolve17, sep as sep11 } from "node:path";
+import { constants as constants8 } from "node:fs";
+import { lstat as lstat12, open as open10, realpath as realpath16 } from "node:fs/promises";
+import { isAbsolute as isAbsolute11, relative as relative11, resolve as resolve18, sep as sep12 } from "node:path";
 var MAX_METRIC_RESPONSE_BYTES = 2000000;
 function metricSourceEnvironment(request, name) {
   if (!name || !request.env[name]?.trim())
@@ -70584,19 +70994,19 @@ var jsonFileMetricAdapter = {
   async collect(request) {
     const root = await realpath16(request.repositoryRoot);
     const name = request.source.file;
-    if (!name || isAbsolute10(name))
+    if (!name || isAbsolute11(name))
       throw new MetricSourceError("Metric file must be relative to the source repository. Set chief.metric_sources.sources[].file in av.yaml.");
-    const path = resolve17(root, name);
-    const within = relative10(root, path);
-    if (!within || within.startsWith(`..${sep11}`) || within === ".." || isAbsolute10(within))
+    const path = resolve18(root, name);
+    const within = relative11(root, path);
+    if (!within || within.startsWith(`..${sep12}`) || within === ".." || isAbsolute11(within))
       throw new MetricSourceError("Metric file escapes the source repository. Choose a repository-relative JSON file.");
     let current = root;
-    for (const part of within.split(sep11)) {
-      current = resolve17(current, part);
+    for (const part of within.split(sep12)) {
+      current = resolve18(current, part);
       if ((await lstat12(current)).isSymbolicLink())
         throw new MetricSourceError("Metric file and parent directories must not be symlinks. Choose a regular JSON file inside the source repository.");
     }
-    const file = await open9(path, constants7.O_RDONLY | constants7.O_NOFOLLOW);
+    const file = await open10(path, constants8.O_RDONLY | constants8.O_NOFOLLOW);
     try {
       const stat = await file.stat();
       if (!stat.isFile() || stat.size > MAX_METRIC_RESPONSE_BYTES || await realpath16(path) !== path)
@@ -70997,9 +71407,9 @@ function createMissionMetricPorts(repository, mission, dependencies = {}) {
 
 // src/chief-tool-config.ts
 import { randomUUID as randomUUID14 } from "node:crypto";
-import { constants as constants8 } from "node:fs";
-import { link as link2, lstat as lstat13, mkdir as mkdir16, open as open10, realpath as realpath17, unlink as unlink6 } from "node:fs/promises";
-import { join as join32 } from "node:path";
+import { constants as constants9 } from "node:fs";
+import { link as link2, lstat as lstat13, mkdir as mkdir16, open as open11, realpath as realpath17, unlink as unlink6 } from "node:fs/promises";
+import { join as join33 } from "node:path";
 init_dist2();
 init_client_toml();
 var maximumBytes = 1024 * 1024;
@@ -71018,7 +71428,7 @@ async function assertLocalPath(root, local) {
   const parts = local.split("/");
   let current = root;
   for (const [index, part] of parts.entries()) {
-    current = join32(current, part);
+    current = join33(current, part);
     const stats = await lstat13(current).catch((error) => {
       if (error.code === "ENOENT")
         return;
@@ -71032,7 +71442,7 @@ async function assertLocalPath(root, local) {
   return true;
 }
 async function readPrivateFile(path) {
-  const file = await open10(path, constants8.O_RDONLY | constants8.O_NOFOLLOW);
+  const file = await open11(path, constants9.O_RDONLY | constants9.O_NOFOLLOW);
   try {
     const stats = await file.stat();
     if (!stats.isFile() || stats.size > maximumBytes)
@@ -71075,9 +71485,9 @@ async function privateExclude(original, target, paths) {
   ]);
   const common = targetCommon.trim();
   const path = exclude.trim();
-  if (common !== join32(target, ".git") && common !== originalCommon.trim() || path !== join32(common, "info", "exclude") || await realpath17(common) !== common)
+  if (common !== join33(target, ".git") && common !== originalCommon.trim() || path !== join33(common, "info", "exclude") || await realpath17(common) !== common)
     throw new ChiefToolConfigError("Chief MCP configuration requires the workspace's own Git metadata or its original repository's shared worktree metadata.");
-  const info = join32(common, "info");
+  const info = join33(common, "info");
   const infoStats = await lstat13(info).catch((error) => {
     if (error.code === "ENOENT")
       return;
@@ -71095,7 +71505,7 @@ async function privateExclude(original, target, paths) {
   const patterns = paths.flatMap((local) => [`/${local}`, `/${local}.av-mcp-*.tmp`]).filter((pattern) => !lines.has(pattern));
   if (!patterns.length)
     return;
-  const file = await open10(path, constants8.O_WRONLY | constants8.O_APPEND | constants8.O_CREAT | constants8.O_NOFOLLOW, 384);
+  const file = await open11(path, constants9.O_WRONLY | constants9.O_APPEND | constants9.O_CREAT | constants9.O_NOFOLLOW, 384);
   try {
     await file.writeFile(`${content && !content.endsWith(`
 `) ? `
@@ -71116,14 +71526,14 @@ async function prepareToolConfig(originalRepository, targetWorkspace) {
       continue;
     if (!await assertLocalPath(original, config.path))
       continue;
-    const content = selectedNamespace(await readPrivateFile(join32(original, config.path)), config.namespace, config.toml);
+    const content = selectedNamespace(await readPrivateFile(join33(original, config.path)), config.namespace, config.toml);
     if (content)
       selected.push({ path: config.path, content });
   }
   if (!selected.length)
     return;
   for (const root of [original, target]) {
-    const stats = await lstat13(join32(root, ".git"));
+    const stats = await lstat13(join33(root, ".git"));
     if (stats.isSymbolicLink() || !stats.isFile() && !stats.isDirectory() || await realpath17((await parallelGit(root, ["rev-parse", "--show-toplevel"])).trim()) !== root)
       throw new ChiefToolConfigError("Chief MCP tools require original local Git repository metadata. Restore the workspace before starting Chief.");
   }
@@ -71131,16 +71541,16 @@ async function prepareToolConfig(originalRepository, targetWorkspace) {
   for (const config of selected) {
     const parts = config.path.split("/");
     if (parts.length > 1) {
-      const parent = join32(target, ...parts.slice(0, -1));
+      const parent = join33(target, ...parts.slice(0, -1));
       await mkdir16(parent, { recursive: true, mode: 448 });
       if (await realpath17(parent) !== parent)
         throw new ChiefToolConfigError("Chief MCP configuration parent redirects through a symlink. Restore its local directory.");
     }
     if (await assertLocalPath(target, config.path))
       continue;
-    const path = join32(target, config.path);
+    const path = join33(target, config.path);
     const temporary = `${path}.av-mcp-${randomUUID14()}.tmp`;
-    const file = await open10(temporary, "wx", 384);
+    const file = await open11(temporary, "wx", 384);
     try {
       await file.writeFile(config.content);
     } finally {
@@ -71169,10 +71579,10 @@ async function prepareChiefToolConfig(originalRepository, targetWorkspace) {
 
 // src/tool-discovery.ts
 init_client_toml();
-import { constants as constants9 } from "node:fs";
+import { constants as constants10 } from "node:fs";
 import { access, lstat as lstat14, readFile as readFile12, realpath as realpath18 } from "node:fs/promises";
-import { homedir as homedir6 } from "node:os";
-import { delimiter as delimiter2, isAbsolute as isAbsolute11, join as join33, resolve as resolve18 } from "node:path";
+import { homedir as homedir7 } from "node:os";
+import { delimiter as delimiter2, isAbsolute as isAbsolute12, join as join34, resolve as resolve19 } from "node:path";
 var binaries = [
   "docker",
   "orb",
@@ -71188,10 +71598,10 @@ var binaries = [
 var MAX_CONFIG_BYTES = 1048576;
 var record4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
 async function executable(name, env) {
-  for (const directory of (env.PATH ?? "").split(delimiter2).filter(isAbsolute11)) {
+  for (const directory of (env.PATH ?? "").split(delimiter2).filter(isAbsolute12)) {
     try {
-      const path = join33(directory, name);
-      await access(path, constants9.X_OK);
+      const path = join34(directory, name);
+      await access(path, constants10.X_OK);
       if ((await lstat14(await realpath18(path))).isFile())
         return true;
     } catch {}
@@ -71244,7 +71654,7 @@ async function mcpNames(path, scope, project, requestedRoot) {
 }
 async function discoverTools(root, dependencies = {}) {
   const env = dependencies.env ?? process.env;
-  const home = dependencies.home ?? homedir6();
+  const home = dependencies.home ?? homedir7();
   const project = await realpath18(root);
   const projectFiles = [
     ".mcp.json",
@@ -71255,11 +71665,11 @@ async function discoverTools(root, dependencies = {}) {
     ".codex/config.toml"
   ];
   const userFiles = [".claude.json", ".cursor/mcp.json", ".qwen/settings.json", ".gemini/settings.json"];
-  const codexHome = env.CODEX_HOME && isAbsolute11(env.CODEX_HOME) ? env.CODEX_HOME : join33(home, ".codex");
+  const codexHome = env.CODEX_HOME && isAbsolute12(env.CODEX_HOME) ? env.CODEX_HOME : join34(home, ".codex");
   const configs = [
-    ...projectFiles.map((path) => ({ path: join33(project, path), scope: "project" })),
-    ...userFiles.map((path) => ({ path: resolve18(home, path), scope: "user" })),
-    { path: join33(codexHome, "config.toml"), scope: "user" }
+    ...projectFiles.map((path) => ({ path: join34(project, path), scope: "project" })),
+    ...userFiles.map((path) => ({ path: resolve19(home, path), scope: "user" })),
+    { path: join34(codexHome, "config.toml"), scope: "user" }
   ];
   const [cli, mcp] = await Promise.all([
     Promise.all(binaries.map(async (name) => ({
@@ -71271,7 +71681,7 @@ async function discoverTools(root, dependencies = {}) {
       availability: await executable(name, env) ? "available" : "unavailable",
       reason: "Executable presence only; service access, daemon state and login are unverified."
     }))),
-    Promise.all(configs.map(({ path, scope }) => mcpNames(path, scope, project, resolve18(root))))
+    Promise.all(configs.map(({ path, scope }) => mcpNames(path, scope, project, resolve19(root))))
   ]);
   return [...cli, ...mcp.flat()];
 }
@@ -71306,7 +71716,7 @@ function continuousDecisionPrompt(operation, mission, tools, previousReport) {
 async function decideContinuousGoal(operation, decisionId, root, dependencies = {}) {
   if (!operation.baseline)
     throw new Error("An accepted operation baseline is required before selecting a goal.");
-  const store = new MissionStore(join34(root, ".agent-valley", "operation-decisions", operation.id));
+  const store = new MissionStore(join35(root, ".agent-valley", "operation-decisions", operation.id));
   const unlock = await store.lock(decisionId);
   const runtime = (dependencies.runtime ?? ((storage, signal) => new ChiefRuntime(storage, signal)))(store, dependencies.signal);
   let mission;
@@ -71415,7 +71825,7 @@ async function decideContinuousGoal(operation, decisionId, root, dependencies =
     const previousId = operation.history.at(-1)?.missionId;
     let previousReport;
     if (previousId) {
-      const previous = await new MissionStore(join34(root, ".agent-valley", "missions")).load(previousId);
+      const previous = await new MissionStore(join35(root, ".agent-valley", "missions")).load(previousId);
       if (previous.repositoryRoot !== operation.repositoryRoot || previous.status !== "completed")
         throw new Error("The previous accepted child's evidence no longer matches this operation. Restore its saved checkpoint before selecting another goal.");
       previousReport = renderReport(previous).slice(0, 16000);
@@ -71446,7 +71856,7 @@ async function decideContinuousGoal(operation, decisionId, root, dependencies =
 }
 
 // src/chief-continuous.ts
-var execute = promisify2(execFile4);
+var execute = promisify2(execFile5);
 var orderKeys = [
   "workspace",
   "verify",
@@ -71474,7 +71884,7 @@ function integerOption(value, name, maximum) {
   return number;
 }
 function operationStore(root) {
-  return new ContinuousOperationStore(join35(resolve19(root), ".agent-valley", "operations"));
+  return new ContinuousOperationStore(join36(resolve20(root), ".agent-valley", "operations"));
 }
 async function restoreOperationOrigin(repository, workspace) {
   const env = { ...process.env, ...clearedGitEnvironment };
@@ -71530,7 +71940,7 @@ async function newOperation(charter, options, root, id) {
     ...config.executionPolicy.maxEstimatedCostUsd !== undefined ? { cost: String(config.executionPolicy.maxEstimatedCostUsd) } : {}
   });
   if (typeof settings.actors === "string")
-    settings.actors = resolve19(root, settings.actors);
+    settings.actors = resolve20(root, settings.actors);
   const now = new Date().toISOString();
   return operationSchema.parse({
     id,
@@ -71592,9 +72002,9 @@ function renderOperationReport(operation) {
 `);
 }
 async function saveOperationReport(root, operation) {
-  const directory = join35(root, ".agent-valley", "operation-reports");
+  const directory = join36(root, ".agent-valley", "operation-reports");
   await mkdir17(directory, { recursive: true, mode: 448 });
-  const path = join35(directory, `${operation.id}.md`);
+  const path = join36(directory, `${operation.id}.md`);
   const temporary = `${path}.${randomUUID15()}.tmp`;
   try {
     await writeFile13(temporary, renderOperationReport(operation), { mode: 384, flag: "wx" });
@@ -71629,7 +72039,7 @@ async function runOperation(charter, options, root = process.cwd(), dependencies
       if (decisionBudgetKeys.some((key) => options[key] !== undefined)) {
         if (operation.currentMissionId || !operation.decisionId)
           throw new Error("Operation resume budget reconciliation applies only to an active decision checkpoint. Adjust the current child's budget with av order --resume <child-id>.");
-        const decisions = new MissionStore(join35(root, ".agent-valley", "operation-decisions", operation.id));
+        const decisions = new MissionStore(join36(root, ".agent-valley", "operation-decisions", operation.id));
         const unlockDecision = await decisions.lock(operation.decisionId);
         try {
           const decision = await decisions.load(operation.decisionId);
@@ -71675,7 +72085,7 @@ async function runOperation(charter, options, root = process.cwd(), dependencies
     console.log(`Operation ${id}
 Charter: ${operation.charter}
 Resume: av order --resume ${id}`);
-    const missions = new MissionStore(join35(root, ".agent-valley", "missions"));
+    const missions = new MissionStore(join36(root, ".agent-valley", "missions"));
     return await runContinuousOperation(operation, {
       signal: controller.signal,
       ...dependencies.now ? { now: dependencies.now } : {},
@@ -71783,7 +72193,7 @@ class OperationApi {
     this.root = root;
     this.workspace = workspace;
     this.dependencies = dependencies;
-    this.store = new ContinuousOperationStore(join36(root, ".agent-valley/operations"));
+    this.store = new ContinuousOperationStore(join37(root, ".agent-valley/operations"));
     this.jobs = new MissionJobs(root, "operation-jobs");
   }
   order(raw) {
@@ -72021,17 +72431,17 @@ class MissionApi {
     this.projectRoot = projectRoot;
     this.workspace = workspace;
     this.dependencies = dependencies;
-    this.store = new MissionStore(join37(projectRoot, ".agent-valley/missions"));
+    this.store = new MissionStore(join38(projectRoot, ".agent-valley/missions"));
     this.jobs = new MissionJobs(projectRoot);
     this.operationApi = new OperationApi(projectRoot, workspace, dependencies);
     this.operationJobs = new MissionJobs(projectRoot, "operation-jobs");
   }
   static async create(workspace, dependencies = {}) {
-    if (!isAbsolute12(workspace))
+    if (!isAbsolute13(workspace))
       throw new Error("Set an absolute Git repository path in av mcp --workspace <path>.");
     const projectRoot = await realpath21(workspace);
     const target = loadProjectConfig(projectRoot)?.workspace?.root ?? projectRoot;
-    if (!isAbsolute12(target))
+    if (!isAbsolute13(target))
       throw new Error("Set workspace.root in av.yaml to an absolute Git repository path.");
     return new MissionApi(projectRoot, await realpath21(target), dependencies);
   }
@@ -72060,7 +72470,7 @@ class MissionApi {
   async order(raw) {
     assertNotManagedRun(this.dependencies.env);
     const input = mcpOrderSchema.parse(raw);
-    if (input.workspace && (!isAbsolute12(input.workspace) || await realpath21(input.workspace) !== this.workspace))
+    if (input.workspace && (!isAbsolute13(input.workspace) || await realpath21(input.workspace) !== this.workspace))
       throw new Error("This AV server is bound to another workspace. Start av mcp --workspace for the target repository.");
     return this.serializeOrder(async () => {
       if (input.requestId) {
@@ -72083,7 +72493,7 @@ class MissionApi {
   async list() {
     this.assertOpen();
     await ensureAvDirectory(this.projectRoot, ["missions"]);
-    const ids = new Set((await readdir8(join37(this.projectRoot, ".agent-valley/missions"))).filter((name) => name.endsWith(".json")).map((name) => missionIdSchema.parse(name.slice(0, -5))));
+    const ids = new Set((await readdir8(join38(this.projectRoot, ".agent-valley/missions"))).filter((name) => name.endsWith(".json")).map((name) => missionIdSchema.parse(name.slice(0, -5))));
     for (const job of await this.jobs.list())
       ids.add(job.missionId);
     return {
@@ -72237,7 +72647,7 @@ class MissionApi {
   async load(id) {
     await ensureAvDirectory(this.projectRoot, ["missions"]);
     try {
-      const path = join37(this.projectRoot, ".agent-valley/missions", `${missionIdSchema.parse(id)}.json`);
+      const path = join38(this.projectRoot, ".agent-valley/missions", `${missionIdSchema.parse(id)}.json`);
       const stat = await lstat15(path);
       if (!stat.isFile() || stat.isSymbolicLink())
         throw new Error(`Mission record must be a regular file: ${path}. Remove the symlink before retrying.`);
@@ -72263,7 +72673,7 @@ class MissionApi {
 init_client_integrations_assets();
 init_client_integrations_files();
 import { lstat as lstat16, readdir as readdir9, realpath as realpath22 } from "node:fs/promises";
-import { dirname as dirname6, join as join38, relative as relative11, resolve as resolve20 } from "node:path";
+import { dirname as dirname8, join as join39, relative as relative12, resolve as resolve21 } from "node:path";
 
 // src/plugin-assets.ts
 import { copyFile as copyFile2, mkdir as mkdir18, readFile as readFile13 } from "node:fs/promises";
@@ -72430,7 +72840,7 @@ async function projectDirectory(workspace) {
   if (typeof workspace !== "string" || !workspace.trim())
     throw new Error("Pass --workspace /absolute/AV-project to bind every exported MCP server to its AV configuration.");
   try {
-    const project = await realpath22(resolve20(workspace));
+    const project = await realpath22(resolve21(workspace));
     if (!(await lstat16(project)).isDirectory())
       throw new Error("not a directory");
     return project;
@@ -72453,7 +72863,7 @@ function remoteEndpoint(value) {
 async function outputDirectory(output) {
   if (typeof output !== "string" || !output.trim())
     throw new Error("Pass --output /absolute/export-directory to write the generated AV plugin packages.");
-  const target = resolve20(output);
+  const target = resolve21(output);
   let ancestor = target;
   for (;; ) {
     try {
@@ -72462,11 +72872,11 @@ async function outputDirectory(output) {
         throw exportConflict(ancestor, "symbolic link exports are not modified");
       if (!info.isDirectory())
         throw exportConflict(ancestor, "expected an output directory");
-      return join38(await realpath22(ancestor), relative11(ancestor, target));
+      return join39(await realpath22(ancestor), relative12(ancestor, target));
     } catch (error) {
       if (error.code !== "ENOENT")
         throw error;
-      ancestor = dirname6(ancestor);
+      ancestor = dirname8(ancestor);
     }
   }
 }
@@ -72481,13 +72891,13 @@ async function outputFiles(root, directory = root) {
   }
   const files = [];
   for (const entry of entries) {
-    const path = join38(directory, entry.name);
+    const path = join39(directory, entry.name);
     if (entry.isSymbolicLink())
       throw exportConflict(path, "symbolic links are not modified");
     if (entry.isDirectory())
       files.push(...await outputFiles(root, path));
     else if (entry.isFile())
-      files.push(relative11(root, path).split("\\").join("/"));
+      files.push(relative12(root, path).split("\\").join("/"));
     else
       throw exportConflict(path, "expected regular export files");
   }
@@ -72518,21 +72928,21 @@ async function exportPluginPackages(options) {
   if (output === workspace)
     throw exportConflict(output, "the output directory must be separate from the AV project root");
   const { manifest } = await loadPluginManifestAsset(options.sourceManifest ? [options.sourceManifest] : undefined);
-  const { content: skill } = await loadClientSkillAsset(options.sourceSkillRoot ? [join38(options.sourceSkillRoot, "SKILL.md")] : clientSkillAssetCandidates());
+  const { content: skill } = await loadClientSkillAsset(options.sourceSkillRoot ? [join39(options.sourceSkillRoot, "SKILL.md")] : clientSkillAssetCandidates());
   const { content: license } = await loadPluginLicenseAsset(options.sourceLicense ? [options.sourceLicense] : undefined);
   const packageFiles = pluginPackageFiles(manifest, skill, license, { workspace, remoteUrl });
-  const receipt = await integrationFile(output, join38(output, receiptName2), "", 384);
+  const receipt = await integrationFile(output, join39(output, receiptName2), "", 384);
   const hashes = ownedFileHashes(receipt.before, receipt.path);
   const existing = await outputFiles(output);
   for (const path of existing) {
     if (path === receiptName2)
       continue;
     if (!packageFiles.has(path) || hashes[path] === undefined)
-      throw exportConflict(join38(output, path), "unowned files are retained");
+      throw exportConflict(join39(output, path), "unowned files are retained");
   }
   const files = [];
   for (const [path, content] of packageFiles) {
-    const file = await integrationFile(output, join38(output, path), content, 420);
+    const file = await integrationFile(output, join39(output, path), content, 420);
     if (hashes[path] !== undefined && (file.before === null || contentHash(file.before) !== hashes[path]))
       throw exportConflict(file.path, "the exported file was changed or removed locally");
     if (hashes[path] === undefined && file.before !== null)
@@ -72551,11 +72961,11 @@ async function exportPluginPackages(options) {
     transport: remoteUrl ? "streamable-http" : "stdio",
     files: await applyIntegrationFiles(output, [...files, receipt]),
     packages: {
-      portable: join38(output, "portable/av"),
-      claude: join38(output, "claude/plugins/av"),
-      cursor: join38(output, "cursor/plugins/av"),
-      qwen: join38(output, "qwen/av"),
-      antigravity: join38(output, "antigravity/av")
+      portable: join39(output, "portable/av"),
+      claude: join39(output, "claude/plugins/av"),
+      cursor: join39(output, "cursor/plugins/av"),
+      qwen: join39(output, "qwen/av"),
+      antigravity: join39(output, "antigravity/av")
     }
   };
 }
@@ -72588,7 +72998,7 @@ function registerAgentClientCommands(program) {
     ].some((value) => value !== undefined))
       throw new Error("OAuth gateway options require av mcp --http. Omit them to use local stdio.");
     const oauth = options.http ? resolveMcpOAuthOptions(options) : undefined;
-    const project = resolve21(options.workspace);
+    const project = resolve22(options.workspace);
     const api = await MissionApi.create(project);
     const workspace = api.targetWorkspace;
     try {
@@ -72618,7 +73028,7 @@ function registerAgentClientCommands(program) {
 // src/chief.ts
 import { randomUUID as randomUUID19 } from "node:crypto";
 import { realpath as realpath23 } from "node:fs/promises";
-import { join as join40 } from "node:path";
+import { join as join41 } from "node:path";
 
 // ../../packages/core/src/chief/coordinator-container.ts
 init_execution();
@@ -73135,7 +73545,7 @@ function selectTaskReviewer(mission, task, state) {
 }
 
 // ../../packages/core/src/chief/coordinator.ts
-var bounded2 = (value) => value.slice(-32000);
+var bounded3 = (value) => value.slice(-32000);
 async function coordinate(mission, ports) {
   Object.assign(mission, validateMission(mission));
   const operatorGoal = mission.goal;
@@ -73199,7 +73609,7 @@ async function coordinate(mission, ports) {
         if (task.effectScope === "external" && state.effectState === "unknown")
           throw new MissionPause(`External effect ${task.id} has no established destination outcome and will not be repeated.`, "unknown-effect");
         if (task.effectScope !== "external" || state.effectState !== "completed") {
-          state.output = bounded2(await run(persona(task.personaId), workPrompt(mission, task, state, persona(task.personaId)), "work", task.id));
+          state.output = bounded3(await run(persona(task.personaId), workPrompt(mission, task, state, persona(task.personaId)), "work", task.id));
           if (task.effectScope === "external")
             state.effectState = "completed";
         }
@@ -73373,7 +73783,7 @@ async function coordinate(mission, ports) {
       mission.fingerprint = await ports.fingerprint(mission);
       mission.verification = {
         ok: result.ok,
-        output: result.output ? bounded2(result.output) : undefined,
+        output: result.output ? bounded3(result.output) : undefined,
         fingerprint: mission.fingerprint
       };
       if (mission.verificationMode === "chief" && !mission.goalVerification?.ok) {
@@ -73472,7 +73882,7 @@ async function coordinate(mission, ports) {
       return mission;
     }
     mission.status = "failed";
-    mission.error = bounded2(error instanceof Error ? error.message : String(error));
+    mission.error = bounded3(error instanceof Error ? error.message : String(error));
     if (error instanceof ReadOnlyViolation || error instanceof ContractViolation || error instanceof CheckpointError)
       executionState(mission).failureKind = "integrity";
     if (error instanceof ReadOnlyViolation)
@@ -73489,7 +73899,7 @@ async function coordinate(mission, ports) {
           if (reportError instanceof ReadOnlyViolation) {
             executionState(mission).failureKind = "integrity";
             invalidate();
-            mission.error = bounded2(`${mission.error}
+            mission.error = bounded3(`${mission.error}
 ${reportError.message}`);
             mission.report = fallbackReport(mission);
           }
@@ -73506,14 +73916,14 @@ init_execution();
 
 // ../../packages/core/src/workspace/delivery-strategy.ts
 init_logger();
-import { lstatSync as lstatSync3 } from "node:fs";
+import { lstatSync as lstatSync4 } from "node:fs";
 
 // ../../packages/core/src/workspace/isolated-branch-import.ts
 init_worktree_lifecycle();
 import { randomUUID as randomUUID18 } from "node:crypto";
 import { mkdtemp, rm as rm5 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join39 } from "node:path";
+import { join as join40 } from "node:path";
 async function importIsolatedBranch(workspace, root) {
   if (!isIsolatedGitWorkspace(workspace))
     return null;
@@ -73560,7 +73970,7 @@ async function importIsolatedBranch(workspace, root) {
 `).filter(Boolean);
     if (commits.length === 0)
       return null;
-    temporaryWorktree = await mkdtemp(join39(tmpdir3(), "av-branch-import-"));
+    temporaryWorktree = await mkdtemp(join40(tmpdir3(), "av-branch-import-"));
     const added = await runCommand("git", ["worktree", "add", "--detach", temporaryWorktree, currentHead], {
       cwd: root
     });
@@ -73833,7 +74243,7 @@ function gitFailure(action, result, fix) {
 }
 function linkedWorktreePath(workspace) {
   try {
-    return lstatSync3(`${workspace.path}/.git`).isFile() ? workspace.path : null;
+    return lstatSync4(`${workspace.path}/.git`).isFile() ? workspace.path : null;
   } catch {
     return null;
   }
@@ -74140,7 +74550,7 @@ async function runOrder(goal, options, root = process.cwd()) {
   assertNotManagedRun();
   if (!options.resume && [options.retry, options.resolveEffect, options.effectResult, options.accountRun, options.accountCost].some((value) => value !== undefined && value !== false))
     throw new Error("Use --resume <id> for retry, external-effect resolution or cost reconciliation.");
-  const store = new MissionStore(join40(root, ".agent-valley/missions"));
+  const store = new MissionStore(join41(root, ".agent-valley/missions"));
   const id = options.resume ?? options.missionId ?? randomUUID19();
   const unlock = await store.lock(id);
   const abortController = new AbortController;
@@ -74318,7 +74728,7 @@ async function dispatchOrder(goal, options, root = process.cwd(), dependencies =
     };
     const [operation, mission] = await Promise.all([
       operationStore(root).load(options.resume).catch(missing),
-      new MissionStore(join40(root, ".agent-valley", "missions")).load(options.resume).catch(missing)
+      new MissionStore(join41(root, ".agent-valley", "missions")).load(options.resume).catch(missing)
     ]);
     if (operation && mission)
       throw new Error(`Saved ID ${options.resume} names both an operation and a mission. Use --once to resume the mission; inspect av operations before resuming the operation.`);
@@ -74376,7 +74786,7 @@ function registerChiefCommands(program) {
       process.once("SIGTERM", stop);
       try {
         while (!controller.signal.aborted) {
-          const store = new MissionStore(join40(process.cwd(), ".agent-valley/missions"));
+          const store = new MissionStore(join41(process.cwd(), ".agent-valley/missions"));
           for (const mission of await store.list()) {
             if (controller.signal.aborted)
               break;
@@ -74399,7 +74809,7 @@ function registerChiefCommands(program) {
       }
       return;
     }
-    const missions = await new MissionStore(join40(process.cwd(), ".agent-valley/missions")).list();
+    const missions = await new MissionStore(join41(process.cwd(), ".agent-valley/missions")).list();
     if (!missions.length)
       console.log("No orders yet. Run bun av order --help.");
     for (const mission of missions) {
@@ -74412,17 +74822,17 @@ function registerChiefCommands(program) {
 
 // src/chief-organization.ts
 import { readFile as readFile15, stat as stat2 } from "node:fs/promises";
-import { isAbsolute as isAbsolute13, join as join41, resolve as resolve22 } from "node:path";
+import { isAbsolute as isAbsolute14, join as join42, resolve as resolve23 } from "node:path";
 init_chief_schema();
 init_yaml_loader();
 function organizationRepository(root, workspace) {
   const repository = workspace ?? loadProjectConfig(root)?.workspace?.root ?? root;
-  if (!isAbsolute13(repository))
+  if (!isAbsolute14(repository))
     throw new Error("Set workspace.root in av.yaml or --workspace to an absolute source repository path.");
   return repository;
 }
 async function inputFile(file) {
-  const path = resolve22(file);
+  const path = resolve23(file);
   const info = await stat2(path);
   if (!info.isFile() || info.size > 2000000)
     throw new Error("Use a regular JSON input file no larger than 2 MB.");
@@ -74466,22 +74876,22 @@ function registerOrganizationCommands(program) {
   });
   const reports = program.command("reports").description("Inspect and retry third-party report attachments");
   reports.command("list").option("--workspace <path>", "Source repository").action(async (opts) => {
-    console.log(JSON.stringify(await listReportDeliveries(join41(organizationRepository(process.cwd(), opts.workspace), ".agent-valley")), null, 2));
+    console.log(JSON.stringify(await listReportDeliveries(join42(organizationRepository(process.cwd(), opts.workspace), ".agent-valley")), null, 2));
   });
   reports.command("retry").option("--workspace <path>", "Source repository").action(async (opts) => {
     const config = mergeChiefConfig(loadGlobalConfig()?.chief, loadProjectConfig()?.chief);
     if (!config.reporting)
       throw new Error("Set chief.reporting.destinations in av.yaml before retrying reports.");
-    console.log(JSON.stringify(await retryPendingReports(config.reporting, join41(organizationRepository(process.cwd(), opts.workspace), ".agent-valley")), null, 2));
+    console.log(JSON.stringify(await retryPendingReports(config.reporting, join42(organizationRepository(process.cwd(), opts.workspace), ".agent-valley")), null, 2));
   });
 }
 
 // src/config-watch.ts
 init_project_config_path();
-import { resolve as resolve25 } from "node:path";
+import { resolve as resolve26 } from "node:path";
 async function watchConfig(root, globalPath, onChange) {
   await Promise.resolve().then(() => init_chokidar());
-  const watcher = watch([resolve25(root, PROJECT_CONFIG_FILENAME), globalPath], { ignoreInitial: true });
+  const watcher = watch([resolve26(root, PROJECT_CONFIG_FILENAME), globalPath], { ignoreInitial: true });
   watcher.on("all", (event, path) => {
     if (["add", "change", "unlink"].includes(event))
       onChange(path);
@@ -74497,10 +74907,10 @@ var import_picocolors = __toESM(require_picocolors(), 1);
 init_project_config_path();
 init_yaml_loader();
 init_doctor_checks();
-import { join as join45 } from "node:path";
+import { join as join46 } from "node:path";
 
 // src/doctor-oma-checks.ts
-import { join as join44 } from "node:path";
+import { join as join45 } from "node:path";
 function checkOma(project, deps) {
   const strict = project?.oma?.mode === "strict";
   const order = !!project && !project.tracker && !project.linear && !project.github;
@@ -74588,7 +74998,7 @@ function checkOma(project, deps) {
     fix: "Set verify.command to a deterministic non-build check in av.yaml before using oma.mode: strict.",
     critical: true
   });
-  const triggerPath = join44(deps.cwd, ".agents", "hooks", "core", "triggers.json");
+  const triggerPath = join45(deps.cwd, ".agents", "hooks", "core", "triggers.json");
   let table = null;
   try {
     table = parseTriggerTable(deps.readFileSync(triggerPath));
@@ -74605,7 +75015,7 @@ function checkOma(project, deps) {
     return results;
   }
   results.push({ id: "oma.triggers", name: "OMA trigger table", status: "pass", message: triggerPath, critical: false });
-  const missing = Object.entries(table.workflows).filter(([name, workflow]) => !workflow.persistent && !table.excludedWorkflows.includes(name)).map(([name]) => join44(deps.cwd, ".agents", "workflows", `${name}.md`)).filter((path) => !deps.existsSync(path));
+  const missing = Object.entries(table.workflows).filter(([name, workflow]) => !workflow.persistent && !table.excludedWorkflows.includes(name)).map(([name]) => join45(deps.cwd, ".agents", "workflows", `${name}.md`)).filter((path) => !deps.existsSync(path));
   results.push(missing.length === 0 ? {
     id: "oma.workflows",
     name: "OMA workflow files",
@@ -74623,6 +75033,37 @@ function checkOma(project, deps) {
   return results;
 }
 
+// src/doctor-skill-matrix-checks.ts
+import { resolve as resolve27 } from "node:path";
+async function checkSkillMatrix(project, global2, deps) {
+  const config = project?.oma?.skill_compatibility;
+  if (!config)
+    return [];
+  const projectActor = project?.actor ?? project?.agent;
+  const globalActor = global2?.actor ?? global2?.agent;
+  const actorType = projectActor?.type ?? globalActor?.type ?? "claude";
+  const model = projectActor?.model ?? (globalActor?.type === actorType ? globalActor.model : undefined);
+  const inspection = await inspectSkillCompatibility({
+    reportPath: resolve27(deps.cwd, config.report_path),
+    maxAgeHours: config.max_age_hours,
+    mode: config.mode
+  }, resolve27(deps.cwd, project?.workspace?.root ?? "."), undefined, [{ actorType, model }], deps.skillMatrix);
+  const route = inspection.routes[0];
+  const status = route?.status ?? "unknown";
+  return [
+    {
+      id: "oma.skill-compatibility",
+      name: "OMA skill read-reference compatibility",
+      status,
+      message: `${config.mode}: ${actorType}/${model ?? "native default"}: ${route?.reason ?? "Evidence unavailable."} Scope: ${inspection.scope}. Work dispatch rechecks its own selected skills and candidates.`,
+      ...status !== "pass" ? {
+        fix: "Generate a completed installed injected matrix with explicit models and set oma.skill_compatibility.report_path in av.yaml. av doctor never runs a live matrix."
+      } : {},
+      critical: config.mode === "require"
+    }
+  ];
+}
+
 // src/doctor-config-checks.ts
 function checkTunnel(project, deps) {
   const provider = project?.tunnel?.provider ?? "ngrok";
@@ -74649,7 +75090,7 @@ function checkTunnel(project, deps) {
     }
     const mode = project?.tunnel?.cloudflare?.mode ?? "quick";
     if (mode === "named") {
-      const certPath = join45(deps.home, ".cloudflared", "cert.pem");
+      const certPath = join46(deps.home, ".cloudflared", "cert.pem");
       if (!deps.existsSync(certPath)) {
         return {
           id: "tunnel",
@@ -74689,7 +75130,7 @@ function checkTunnel(project, deps) {
       critical: false
     };
   }
-  const ngrokConfigPath = deps.platform === "darwin" ? join45(deps.home, "Library", "Application Support", "ngrok", "ngrok.yml") : join45(deps.home, ".config", "ngrok", "ngrok.yml");
+  const ngrokConfigPath = deps.platform === "darwin" ? join46(deps.home, "Library", "Application Support", "ngrok", "ngrok.yml") : join46(deps.home, ".config", "ngrok", "ngrok.yml");
   if (!deps.existsSync(ngrokConfigPath)) {
     return {
       id: "tunnel",
@@ -74760,7 +75201,7 @@ function checkConfig(deps) {
       critical: true
     });
   }
-  const projectPath = join45(deps.cwd, PROJECT_CONFIG_FILENAME);
+  const projectPath = join46(deps.cwd, PROJECT_CONFIG_FILENAME);
   try {
     project = deps.loadProjectConfig(deps.cwd);
     results.push(project ? {
@@ -74877,10 +75318,11 @@ async function runDoctorChecks(deps, options = {}) {
   results.push(checkTunnel(project, deps));
   results.push(checkWebhookSecret(project));
   results.push(...checkOma(project, deps));
+  results.push(...await checkSkillMatrix(project, global2, deps));
   return results;
 }
 function computeExitCode(results) {
-  return results.some((r) => r.critical && r.status === "fail") ? 1 : 0;
+  return results.some((r) => r.critical && (r.status === "fail" || r.status === "unknown")) ? 1 : 0;
 }
 function summarize(results) {
   return { passed: results.filter((r) => r.status === "pass").length, total: results.length };
@@ -74955,7 +75397,7 @@ async function registerLinearWebhook(root, tunnelUrl) {
 init_yaml_loader();
 import { existsSync as existsSync5, readFileSync as readFileSync10, writeFileSync as writeFileSync2 } from "node:fs";
 import { createServer as createServer3 } from "node:net";
-import { resolve as resolve26 } from "node:path";
+import { resolve as resolve28 } from "node:path";
 import { setTimeout as delay } from "node:timers/promises";
 
 // src/webhook-proxy.ts
@@ -75070,12 +75512,12 @@ function resolveServerPort(root, runningPort) {
   return String(port);
 }
 function resolveRuntimePaths(root, cliDir) {
-  const dashboardCwd = resolve26(root, "apps/dashboard");
-  if (!existsSync5(resolve26(dashboardCwd, "package.json"))) {
+  const dashboardCwd = resolve28(root, "apps/dashboard");
+  if (!existsSync5(resolve28(dashboardCwd, "package.json"))) {
     throw new Error(`Dashboard source is missing at ${dashboardCwd}. Clone https://github.com/first-fluke/agent-valley, run bun install, then run bun av setup and bun av dev from that checkout. The standalone CLI does not include the dashboard.`);
   }
-  const bundled = resolve26(cliDir, "supervisor.js");
-  const supervisorScript = existsSync5(bundled) ? bundled : resolve26(cliDir, "supervisor.ts");
+  const bundled = resolve28(cliDir, "supervisor.js");
+  const supervisorScript = existsSync5(bundled) ? bundled : resolve28(cliDir, "supervisor.ts");
   if (!existsSync5(supervisorScript)) {
     throw new Error(`Supervisor is missing at ${supervisorScript}. Run bun av up from an intact Agent Valley checkout.`);
   }
@@ -75354,8 +75796,8 @@ function spawnTunnel(config, input) {
 
 // src/index.ts
 var ROOT = process.cwd();
-var PID_FILE = resolve30(ROOT, ".av.pid");
-var LOG_FILE = resolve30(ROOT, ".av.log");
+var PID_FILE = resolve32(ROOT, ".av.pid");
+var LOG_FILE = resolve32(ROOT, ".av.log");
 function ensureConfig() {
   if (!existsSync10(resolveProjectConfigPath(ROOT))) {
     console.log(import_picocolors15.default.red("No av.yaml found. Run `av setup` first."));