cordisx 0.1.0-beta.13 → 0.1.0-beta.14

package/dist/skills/cordisx/SKILL.md

@@ -0,0 +1,74 @@
+---
+name: cordisx
+description: Route and complete CordisX user requests from one goal-oriented entry point. Use for installation, startup, configuration, Marketplace sources, installing or managing plugins, current CordisX documentation, experience-based Q&A, and creating, updating, debugging, or verifying a CordisX plugin. Select the relevant bundled guidance without asking the user to choose a lower-level Skill.
+---
+
+# CordisX
+
+Start from the user's goal. Route to the smallest relevant bundled Skill, then
+complete the work in the current task. Do not expose Skill selection as a
+prerequisite or create another task merely to invoke a specialist.
+
+The bundled revision and owning source for this entry are recorded in
+[version.json](version.json).
+
+## Choose guidance
+
+- For installation, startup, configuration, Marketplace sources, installed
+  plugin management, current or version-specific behavior, commands,
+  compatibility, architecture, or public contracts, read
+  [cordisx-docs](../cordisx-docs/SKILL.md).
+- For practical experience, known pitfalls, contextual tradeoffs, and
+  evidence-backed workarounds, read
+  [cordisx-qa](../cordisx-qa/SKILL.md).
+- For plugin feasibility, creation, implementation, debugging, packaging, or
+  verification, read
+  [cordisx-plugin-development](../cordisx-plugin-development/SKILL.md).
+- For a mixed request, use each relevant guide in dependency order. Resolve
+  product facts before applying experience or changing plugin code.
+
+If a referenced bundled Skill is unavailable, say which guidance is missing
+and use the owning public documentation when it is accessible. Do not pretend
+that every third-party Skill picker hides or automatically selects these
+entries; this routing behavior applies when the `cordisx` entry is invoked.
+Keep the sibling Skills normally discoverable and do not disable implicit Skill
+selection.
+
+## Preserve source roles
+
+- Treat versioned documentation and public contracts as authority for product
+  behavior. Do not turn a workaround or one user's observation into a product
+  guarantee.
+- Treat Q&A as contextual experience. State its applicability and evidence,
+  and link the governing documentation when a rule has become normative.
+- Keep repository contribution conventions separate from plugin admission.
+  A third-party plugin may use a legal unscoped package name or the publisher's
+  own scope; CordisX repository branches, scopes, approvals, and release steps
+  apply only when that repository actually owns the work.
+- Treat the user's requested goal as authorization for its normal necessary
+  steps within the active tool, repository, and Host boundaries; do not ask for
+  confirmation again at every reversible step. Do not infer unrelated grants
+  or extend the request to an App launch, upload, publication, or release.
+
+## Answer and act
+
+For an informational request, remain read-only unless the user asks for a
+change. For an installation, startup, configuration, source, or plugin-management
+request, follow the version-compatible Docs instructions and perform the normal
+steps covered by the request. Reuse available context and authorization instead
+of asking the user to repeat setup details or approve each routine step.
+
+For implementation, make the smallest supported change and select evidence
+that matches the claim. Do not launch a native App merely because CordisX is
+involved; native evidence is needed only for behavior that depends on the real
+native Host path and when launching it is authorized.
+
+Report state precisely. Keep these terms distinct:
+
+- **implemented**: the source change exists;
+- **tested**: named checks passed for the stated scope;
+- **merged**: the owning repository accepted the change;
+- **published**: a release artifact is available from its distribution source;
+- **installed**: the relevant environment contains that artifact.
+
+Do not imply a later state from an earlier one.

package/dist/skills/cordisx/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "CordisX"
+  short_description: "Route and complete CordisX requests from one entry"
+  default_prompt: "Use $cordisx to understand my CordisX goal, select the relevant bundled guidance, and complete the request without asking me to choose a lower-level Skill."

package/dist/skills/cordisx/version.json

@@ -0,0 +1,4 @@
+{
+  "version": "2026-09-20.1",
+  "source": "https://github.com/cordisx/cordisx/tree/main/skills/cordisx"
+}

package/dist/skills/cordisx-docs/SKILL.md

@@ -0,0 +1,41 @@
+---
+name: cordisx-docs
+description: Find standard CordisX documentation for usage, configuration, supported capabilities, and versioned plugin contracts. Use when a CordisX answer or action needs an authoritative reference; practical experience belongs to cordisx-qa.
+---
+
+# CordisX Documentation
+
+Read the [task index](https://raw.githubusercontent.com/cordisx/docs/main/skills/index.md)
+and follow only the route relevant to the user's request. Fetch the linked owner
+document rather than answering product commands from memory or downloading the
+whole documentation set.
+
+- For adoption, follow the Host entry and preserve existing setup. Do not run
+  installation merely because the user asks a question.
+- For an existing plugin, use the Marketplace and the user's selected source.
+  Read that plugin's own guide for service configuration and login.
+- For practical questions, workarounds, or lessons from earlier use, consult
+  `cordisx-qa` when available. Use the owner documentation to check any product
+  claims; a reported experience does not redefine the contract.
+- For plugin implementation, use `cordisx-plugin-development` when available;
+  this Skill supplies references, not a duplicate development workflow.
+- If the user provides a private entry, read it only in the authorized context.
+  Keep private URLs, source metadata, and credentials out of public files.
+
+Read product guides, not repository maintenance rules, for end-user tasks.
+Distinguish required compatibility and runtime constraints from optional advice
+and first-party conventions. Do not require third-party developers to adopt
+CordisX's organization scope, repository layout, approval process, or release
+workflow. Consult contribution rules only when the user is contributing to that
+specific repository. If a companion Skill is unavailable, follow the relevant
+owner guide directly; do not make installing another Skill a prerequisite.
+
+Resolve relative links against the containing document's URL. A prerequisite
+already completed need not be performed again. An inaccessible link is a missing
+reference, not permission to guess endpoints or commands. Documentation on `main`
+may be newer than the installed CLI; check help and the installed release tag
+before applying version-sensitive instructions.
+
+Distinguish installation, running Host, plugin activation, permission state, and
+provider-account login. Documentation discovery does not authorize additional
+effects. Cite the source used and report what was actually verified.

package/dist/skills/cordisx-docs/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "CordisX Docs"
+  short_description: "Find standard CordisX documentation"
+  default_prompt: "Use $cordisx-docs to find the authoritative guide for my CordisX question."

package/dist/skills/cordisx-docs/upstream.json

@@ -0,0 +1,10 @@
+{
+  "repository": "https://github.com/cordisx/docs",
+  "commit": "4841581393a702e13fecd9d9993d0c082b608fc0",
+  "path": "skills/cordisx-docs",
+  "files": {
+    "SKILL.md": "sha256:fc6ce59c4fb97ef4fa13f66ab1f3cd423bf827dc57080cfc37db19ab4bc2ab10",
+    "agents/openai.yaml": "sha256:bf1757305e80c3b91bdee0795d1410c321b88bba31517f28a115a1f46f3bfce6",
+    "version.json": "sha256:6580bc014f8e4e5083a2f616d744bd20035fe3819f5fbadeb05c9ec3010aba52"
+  }
+}

package/dist/skills/cordisx-docs/version.json

@@ -0,0 +1,4 @@
+{
+  "version": "2026-09-20.1",
+  "source": "https://github.com/cordisx/docs/tree/main/skills/cordisx-docs"
+}

package/dist/skills/cordisx-plugin-development/SKILL.md

@@ -7,6 +7,11 @@ description: Assess the feasibility of a requested CordisX customization, then c
 
 Build plugins against the public CordisX contract. Keep the Host responsible for shared UI and runtime policy; keep business behavior and visual design in the owning plugin. Bundled revision and owning source are recorded in [version.json](version.json); the launching CLI deploys this complete tree by content digest.
 
+For current product facts and version compatibility, read
+[cordisx-docs](../cordisx-docs/SKILL.md). For evidence-backed user experience,
+known pitfalls, or recording a Q&A entry, read
+[cordisx-qa](../cordisx-qa/SKILL.md). Do not copy either source into this Skill.
+
 ## Read the relevant references
 
 - Assess any requested product behavior before scaffolding or editing: [feasibility-assessment.md](references/feasibility-assessment.md)
@@ -18,12 +23,13 @@ Build plugins against the public CordisX contract. Keep the Host responsible for
 - Run or deliver the result: [verification.md](references/verification.md)
 - Continue work inside an already-running development session: [live-plugin-development.md](references/live-plugin-development.md)
 
-## Native plugin debugging tool boundary
+## Native plugin debugging boundary
 
-When debugging or verifying a CordisX plugin in a CordisX-launched Codex Host,
-never use Computer Use/CUA, including for screenshots or native UI inspection.
-Use CordisX development launch, Host injection, logs, permission diagnostics,
-and its authorized CDP/debug mechanisms. Read
+When a claim requires the CordisX-launched native Host, use the active
+environment's authorized CordisX development launch, Host injection, logs,
+permission diagnostics, and debugging mechanisms. Tool availability is not
+authorization: respect explicit user, Host, and tool restrictions, and never
+use another access path to bypass a denial. Read
 [the debugging workflow and permission boundary](references/live-plugin-development.md#choose-debugging-tools-before-accessing-the-host)
 before accessing the running Host.
 
@@ -43,12 +49,12 @@ before accessing the running Host.
 2. Proceed directly for a supported plugin request. If it needs a missing CordisX or Cordis capability, do not fake it with private Host state; explain the gap and smallest public contribution path. A plugin request alone does not authorize Host-core changes or an external PR.
 3. Select the creation mode from the user's project: one standalone plugin, a dedicated multi-plugin workspace, or `.cordisx/plugins/<id>` embedded in an existing business project. Preserve an existing package-manager workspace instead of rebuilding the project around CordisX.
 4. If `CORDISX_DEV_ENTRY` is set, use that exact legacy single-plugin entry and running launch. For config-driven development, use the explicit or discovered project config and all enabled entries. Do not start a second Vite or Electron process for each plugin.
-5. When creating a plugin, infer a concise product slug and use the maintained `create-cordisx-plugin` generator in the selected mode. Keep the scaffolding command as an implementation detail unless the user asks for it.
+5. When creating a plugin, infer a concise product slug and use the maintained `create-cordisx-plugin` generator in the selected mode. A third-party package may use a legal unscoped name or a scope controlled by its publisher; do not impose CordisX repository naming or release conventions. Keep the scaffolding command as an implementation detail unless the user asks for it.
 6. Define the manifest, localized product copy, contributions, config schema, permissions, React boundaries, and lifecycle behavior. Put activation effects under Cordis ownership and keep ESM top-level evaluation free of product side effects.
 7. Keep visual choices inside Host-supported components, tokens, semantic roles, and controlled visual seats. Locate a maintained example, but do not copy generated fixtures wholesale.
 8. Choose focused checks for the changed behavior. Show a useful preview early; add regression tests where they catch a real contract, React, or lifecycle failure, without requiring new tests for every reversible visual edit.
-9. Run the project through `cordisx dev`. Verify automatic file updates and, when relevant, the Manager's development reload for one active local plugin.
-10. Exercise the real isolated native `app://` path for native claims; use Playground evidence only for the behavior it actually hosts.
+9. Run `cordisx dev` only when live development evidence is relevant and the launch is authorized. Verify automatic file updates and, when relevant, the Manager's development reload for one active local plugin.
+10. Exercise the real isolated native `app://` path only for native claims; use Playground evidence only for the behavior it actually hosts. Do not launch an App solely for prose, metadata, or static checks.
 11. For production delivery, use the generated `cordisx/vite` helper config and retain its complete indexed Vite ESM graph. Do not duplicate the production Rollup policy or flatten dynamic imports, CSS, or static assets into a hand-built single file.
 12. Report implementation, verification, limitations, and planned work separately.
 
@@ -62,4 +68,4 @@ before accessing the running Host.
 
 ## Delivery
 
-Provide exact evidence: focused tests, owner-repository gates, diff check, generated-project checks, and the relevant real runtime. A production graph check validates formal `artifact.json`, its entry, lazy chunks, CSS, and assets separately from development transport. For Vite/native work, distinguish React Fast Refresh, plugin lifecycle replacement, CordisX renderer restart, and full Electron restart. Honor the active preview agreement: keep a protected review session available, or update an independent debug instance directly when the user has authorized restart/HMR. Preserve persistent data and non-target instances.
+Provide exact evidence appropriate to the user's repository and claim: focused tests, diff checks, generated-project checks, and the relevant runtime when needed. CordisX maintainer gates are not admission requirements for third-party plugins. A production graph check validates formal `artifact.json`, its entry, lazy chunks, CSS, and assets separately from development transport. For Vite/native work, distinguish React Fast Refresh, plugin lifecycle replacement, CordisX renderer restart, and full Electron restart. Honor the active preview agreement: keep a protected review session available, or update an independent debug instance directly when the user has authorized restart/HMR. Preserve persistent data and non-target instances.

package/dist/skills/cordisx-plugin-development/agents/openai.yaml

@@ -1,4 +1,4 @@
 interface:
   display_name: "CordisX Plugin Development"
   short_description: "Assess and build CordisX plugins in real projects"
-  default_prompt: "Use $cordisx-plugin-development to assess this request, create or update the plugin when public capabilities support it, and use Host notifications for operation feedback, and verify it using CordisX development and debug mechanisms without Computer Use/CUA."
+  default_prompt: "Use $cordisx-plugin-development to assess this request, create or update the plugin when public capabilities support it, and verify it with evidence appropriate to the requested behavior and active authorization."

package/dist/skills/cordisx-plugin-development/references/live-plugin-development.md

@@ -5,11 +5,13 @@ including when the current session is already attached to a development project.
 
 ## Choose debugging tools before accessing the Host
 
-This boundary applies to the CordisX-launched Codex test instance, including
-startup failures, UI inspection, screenshots, interactions, HMR and permission
-failures. Never select Computer Use/CUA for this work: do not attach it to the
-Codex app, enumerate its windows, capture its screen or automate its native UI.
-Do not replace it with generic desktop automation or a generic browser launch.
+This boundary applies when work accesses a CordisX-launched Codex test instance,
+including startup failures, UI inspection, screenshots, interactions, HMR and
+permission failures. First read the active user, Host, and tool restrictions.
+Use CordisX-owned diagnostics and debugging mechanisms for CordisX runtime
+claims. Computer Use/CUA, desktop automation, or a generic browser must not be
+used as a workaround for an explicit restriction, and generic browser evidence
+does not prove behavior in the native `app://` Host.
 
 1. Identify the authorized test instance from the CordisX launch/config and
    loaded plugin entry. Check the effective Host/CLI build, profile/data mode
@@ -41,14 +43,14 @@ the installed Codex app, or access unrelated profiles, windows or data. The
 is part of the authorized development launch; it cannot override an applicable
 user, Host or tool denial.
 
-If CUA was selected accidentally, acknowledge the tool-selection error and read
-the actual restriction before continuing. A tool-specific unsupported surface
-or capability limitation does not by itself establish that the user lacks
+If a selected tool is prohibited or unsupported for the target, acknowledge the
+tool-selection error and read the actual restriction before continuing. A
+tool-specific limitation does not by itself establish that the user lacks
 authority to debug their own test instance. Continue through CordisX only when
 the action is independently authorized and no applicable denial prohibits it;
 when a restriction's scope is unclear, stop that action and report the exact
-restriction while continuing permitted source/log checks. Do not turn a mistaken
-tool choice into a blanket refusal of CordisX debugging.
+restriction while continuing permitted source/log checks. Do not turn one
+unavailable tool into a blanket refusal of CordisX debugging.
 
 ## Locate the active project
 
@@ -113,9 +115,10 @@ immutable Vite graph per plugin and keeps source-level dynamic imports, CSS,
 and static assets independently loadable. Production replacement uses CordisX
 package generations, not the development HMR socket.
 
-For native behavior, verify the actual isolated `app://` App launched by
-CordisX. A Playground or browser harness is useful supporting evidence only
-when it exposes the same public capability.
+For a claim about native behavior, verify the actual isolated `app://` App
+launched by CordisX when that launch is authorized. A Playground or browser
+harness is useful supporting evidence only when it exposes the same public
+capability. Non-native claims do not require an App launch.
 
 For a native Host interaction, use only a cataloged extension point. If the
 contract is unavailable in the installed CordisX version, say so plainly

package/dist/skills/cordisx-plugin-development/references/plugin-authoring.md

@@ -5,13 +5,13 @@
 - Read [project-layouts-and-development.md](project-layouts-and-development.md) before creating files. Choose the layout from the user's project; do not force a business repository into a dedicated plugin monorepo.
 - Use the maintained `create-cordisx-plugin` generator. Infer a concise product slug, keep standalone single-plugin as the default, and select workspace or embedded mode when those shapes fit. Keep the scaffolding command as an implementation detail unless the user asks for it.
 - Do not copy development fixtures as production packages without auditing every field.
-- Keep plugin id, display name, descriptions, permissions, contributions, package files, runtime localization, and both `README.md` and `README.zh-Hans.md` explicit.
+- Keep plugin id, display name, descriptions, permissions, contributions, package files, runtime localization, and the user-facing README material required by the owning project explicit.
 - Include build, focused tests, package inspection, and install/dry-run checks appropriate to the owner repository.
 - Preserve the complete generated `dist/runtime/` Vite graph. The package allowlist must include its formal `artifact.json`, entry, chunks, CSS, and assets; do not copy only `module.js`, and keep declarations or test output outside the graph root.
 - Point a portable package manifest at the prebuilt `dist/runtime/module.js`; keep local development config entries pointed at source for Vite/HMR.
 - Use `cordisXPluginViteConfig()` from the public `cordisx/vite` entry instead of copying its Rollup, singleton virtualization, or artifact-index rules into a plugin project.
-- Declare license and distribution metadata intentionally.
-- Keep a newly created plugin private and `UNLICENSED` by default. Ask only for missing publication metadata when the user requests sharing or publication; an explicit publication request is already authorization and must not trigger redundant confirmation.
+- Declare license and distribution metadata intentionally when the project will be shared or published. A legal unscoped package name or a scope controlled by the publisher is valid; CordisX's own package scope, branch names, approvals, and release workflow are not plugin admission requirements.
+- When publication is outside the request, keep the generated project private and avoid inventing publication metadata. When the user requests sharing or publication, use their intended registry, naming, scope, and license, and ask only for material details that are still missing.
 
 ## Structured contributions
 

package/dist/skills/cordisx-plugin-development/references/verification.md

@@ -13,8 +13,9 @@
 
 ## Development transport
 
+- Use this section when the request or claim needs live development transport. For prose, metadata, static schema, or packaging-only work, choose the narrower focused checks and do not start an App solely to satisfy this checklist.
 - Run `cordisx dev --dry-run` from the same directory and config-discovery path that users will use. For multiple plugins, prove that every enabled config entry resolves.
-- Run one launcher-owned Vite server and one Electron App for the project. Do not start a development server per plugin.
+- When an authorized live run is needed, use one launcher-owned Vite server and one Electron App for the project. Do not start a development server per plugin.
 - Verify both update triggers when applicable: save a local source file and invoke **Reload plugin** in Manager for one active local-development plugin.
 - Classify the observed result correctly. A refresh-compatible React component edit may retain component state; plugin entry, manifest, or activation changes replace that plugin through the Cordis generation transaction; Host modules outside a refresh boundary restart the CordisX renderer in the current document; config and Node-side launcher changes require restarting the command.
 - A source write proves only that an update was triggered. Inspect the runtime result and verify disposer cleanup, a single active registration/root, and last-good behavior after a failed candidate.
@@ -26,10 +27,10 @@ loader. Do not add a second WebSocket or CDP source-transfer path for production
 
 ## Real native App and Playground
 
-- Use `cordisx dev` for claims about the installed native App. The expected path is an isolated Electron launch whose `app://` renderer imports the launcher-owned loopback Vite entry; do not substitute Computer Use or a generic browser launch.
+- Use `cordisx dev` for claims about the installed native App when that launch is in scope and authorized. The expected path is an isolated Electron launch whose `app://` renderer imports the launcher-owned loopback Vite entry; generic browser evidence does not establish that native path.
 - CDP is the initial bootstrap and native policy-control seam. Before reload it grants loopback access to the exact target origin and enables CSP bypass. Subsequent modules and update notifications use Vite HTTP and Vite's own WebSocket. Source maps are separate resources fetched on demand; readiness follows the current installation's Vite bootstrap acknowledgement rather than a generic page-load event. Stopping restores the permission to `prompt`, disables the bypass, disconnects HMR, and removes Vite-injected styles even when plugin disposal fails.
 - Confirm the native renderer reaches ready and exercise the intended UI or contribution. On stop, verify the Vite/CDP ports, in-memory session state, and launcher-owned process/profile resources are released. The stable dependency cache under `CORDISX_HOME/cache/native-vite` should remain; reject symlinked or foreign-owned cache leaves, and verify that a second launch from the same CLI and workspace roots reuses the cache without an optimizer-triggered reload.
-- Apply the [debugging tool boundary](live-plugin-development.md#choose-debugging-tools-before-accessing-the-host) before native inspection or interaction. Use CordisX diagnostics and authorized CDP/debug mechanisms; never use Computer Use/CUA. A permitted harness does not establish user interaction or acceptance.
+- Apply the [debugging tool boundary](live-plugin-development.md#choose-debugging-tools-before-accessing-the-host) before native inspection or interaction. Use only mechanisms authorized for that target and action; do not use a different tool to bypass an explicit user, Host, or tool denial. A permitted harness does not establish user interaction or acceptance.
 - Test the actual native state transition relevant to the claim, including replacement of native layout when applicable. Changing fixture labels inside an `app://` page remains simulated evidence; it does not prove the real operation or full native flow.
 - Confirm the inspected window is foreground and running the intended module when verifying pointer or rendering behavior. Check behavior after the update, not just receipt of an HMR notification.
 - Use the maintained local Playground when it directly covers the feature under test.
@@ -41,8 +42,8 @@ loader. Do not add a second WebSocket or CDP source-transfer path for production
 
 ## Delivery evidence
 
-- Run the applicable owner gate and checks that support the claim; keep full gates at the repository-required merge/release boundary rather than every preview edit.
-- Run typecheck, build, package/install checks, audit, and diff check when required by the repository.
+- Run the checks required by the repository that owns the plugin and the evidence needed for the claim. CordisX Host maintainer gates apply only to CordisX-owned changes.
+- Run typecheck, build, package/install checks, audit, and diff check when required by that repository or delivery target.
 - Record real request evidence: no lazy chunk/CSS/image before the feature is opened; those resources appear after the trigger; a second open does not issue a second evaluation; and a replaced generation cannot become active later.
 - Exercise the relevant real runtime in the needed theme and layout states; these should confirm rules already encoded in components and tests, not serve as the first design review.
 - Honor the current preview agreement. Preserve a protected review instance; use already-authorized restart/HMR for an independent debug instance while retaining persistent data and non-target windows.

package/dist/skills/cordisx-plugin-development/version.json

@@ -1,4 +1,4 @@
 {
-  "version": "2026-09-10.2",
+  "version": "2026-09-20.1",
   "source": "https://github.com/cordisx/cordisx/tree/main/skills/cordisx-plugin-development"
 }

package/dist/skills/cordisx-qa/SKILL.md

@@ -0,0 +1,83 @@
+---
+name: cordisx-qa
+description: Answer and, when explicitly requested, record CordisX user-experience questions with context and evidence. Use for common usage questions, known pitfalls, practical tradeoffs, observed workarounds, and questions about what is implemented, tested, released, or installed. This is Question & Answer guidance, not software quality assurance or a substitute for versioned CordisX documentation.
+---
+
+# CordisX User Experience Q&A
+
+Answer the user's actual question with the shortest evidence-backed explanation
+that resolves it. Q&A captures contextual product experience; it does not own
+the standard product contract. Questions about what CordisX officially supports
+or how a command works belong to Docs even when phrased as a question. The
+bundled revision and owning source are recorded in
+[version.json](version.json).
+
+## Find the answer
+
+1. Identify the relevant CordisX version, Host, operating mode, project shape,
+   and action when they materially affect the answer. Reuse facts already in
+   context instead of asking for them again.
+2. For product commands, compatibility, configuration, architecture, security,
+   or public contracts, read [cordisx-docs](../cordisx-docs/SKILL.md) first.
+3. Search the owning Host user guides before inventing a new answer. Start with
+   the [user experience Q&A](https://github.com/cordisx/cordisx/blob/main/.agents/docs/user-experience-qa.md)
+   and use the linked
+   [startup Q&A](https://github.com/cordisx/cordisx/blob/main/.agents/docs/startup-qa.md)
+   for launch and setup questions.
+4. Prefer evidence from the applicable version's docs, source, diagnostics,
+   focused checks, or an explicitly described observation. Keep a suggestion
+   labeled as a suggestion.
+
+## Answer format
+
+Use a natural answer for simple questions. When context or evidence matters,
+make these elements clear without forcing a rigid template:
+
+- **Answer:** the practical resolution or decision;
+- **Applies when:** version, platform, mode, or project conditions;
+- **Basis:** the documentation, diagnostic, test, or observation supporting it;
+- **Status:** implemented, tested, merged, published, or installed, when the
+  distinction matters.
+
+Do not generalize one incident into a universal rule. If reliable evidence is
+missing or conflicting, say what is known, what remains uncertain, and the
+smallest read-only check that would distinguish the possibilities.
+
+## Record experience only on request
+
+Record a new Q&A entry when the user asks to preserve or update the experience.
+Use their requested destination or an existing personal or project Q&A record.
+For a contribution to shared product documentation, use the existing owner
+document when one covers the topic; the Host user-experience Q&A is for
+cross-topic experience that has no better owner.
+
+If the shared source is unavailable or not writable, save a local Markdown
+Q&A draft in the current authorized workspace or notes location and report its
+path. Personal notes do not require access to CordisX's repositories. Do not
+write user experience into an installed, launcher-managed Skill directory or
+claim that a local draft has been published to the shared documentation.
+
+Write the entry as a real question and answer. Include its applicability and
+evidence, link the normative documentation, and retain meaningful limitations
+or failed approaches. When repeated evidence becomes a supported product rule,
+update or link the owning documentation rather than maintaining a competing
+rule in Q&A.
+
+Do not publish raw conversations, private logs, credentials, account details,
+local paths, task identifiers, or internal-only data. Redact or summarize the
+minimum reusable fact. Do not automatically record every interaction, and do
+not claim an edit was recorded, merged, published, or installed without direct
+evidence for that state.
+
+## Boundaries
+
+- Informational queries are read-only. They do not authorize configuration
+  changes, grants, App launches, uploads, publishing, or releases.
+- Q&A does not grant access or turn an unavailable capability into an available
+  one. Use existing authorization and report the missing boundary honestly.
+- Repository branch names, package scopes, approvals, and release processes
+  apply only to their owning repository. Third-party plugins may use legal
+  unscoped names or the publisher's own scope.
+- For plugin implementation or debugging, use
+  [cordisx-plugin-development](../cordisx-plugin-development/SKILL.md) after
+  resolving the user's question.

package/dist/skills/cordisx-qa/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "CordisX User Experience Q&A"
+  short_description: "Answer CordisX usage questions with context and evidence"
+  default_prompt: "Use $cordisx-qa to answer this CordisX user-experience question with its applicability, evidence, and exact implementation or release status."

package/dist/skills/cordisx-qa/version.json

@@ -0,0 +1,4 @@
+{
+  "version": "2026-09-20.1",
+  "source": "https://github.com/cordisx/cordisx/tree/main/skills/cordisx-qa"
+}

package/dist/src/cli/run-command-dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-command-dispatch.d.ts","sourceRoot":"","sources":["../../../src/cli/run-command-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D,OAAO,EAAE,KAAK,oBAAoB,EAAmB,MAAM,YAAY,CAAA;AAGvE,OAAO,EAAE,KAAK,wBAAwB,EAA2B,MAAM,eAAe,CAAA;AACtF,OAAO,EAAE,KAAK,iBAAiB,EAAiE,MAAM,kBAAkB,CAAA;AAExH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,oBAAoB,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAA;IACjF,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAA;IAC5C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAA;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,oBAAoB,EAChC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAyEzC;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAyCzC"}
+{"version":3,"file":"run-command-dispatch.d.ts","sourceRoot":"","sources":["../../../src/cli/run-command-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D,OAAO,EAAE,KAAK,oBAAoB,EAAmB,MAAM,YAAY,CAAA;AAGvE,OAAO,EAAE,KAAK,wBAAwB,EAA2B,MAAM,eAAe,CAAA;AACtF,OAAO,EAAE,KAAK,iBAAiB,EAAiE,MAAM,kBAAkB,CAAA;AAExH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,oBAAoB,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAA;IACjF,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAA;IAC5C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAA;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,oBAAoB,EAChC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAyEzC;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CA0CzC"}

package/dist/src/cli/run-command-dispatch.js

@@ -90,6 +90,7 @@ export async function prepareCliCommand(argv, runtime) {
         runtime.internalRunInjectedHost,
         runtime.internalAgentHistoryHost,
         runtime.internalBuiltinSkillSourceDir,
+        runtime.internalBuiltinSkillsSourceRootDir,
         runtime.internalSharedHomeDir,
         runtime.internalBuildRendererBundle,
         runtime.internalObserveOwnerDocuments,

package/dist/src/cli/run-command-dispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-command-dispatch.js","sourceRoot":"","sources":["../../../src/cli/run-command-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAA8B,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAC9G,OAAO,EAA6B,eAAe,EAAE,MAAM,YAAY,CAAA;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AACnF,OAAO,EAAiC,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACtF,OAAO,EAA0B,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAYxH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAgC,EAChC,OAA0B;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAA;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACxC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IAC9C,MAAM,iBAAiB,GAA0B;QAC/C,GAAG,EAAE,WAAW;QAChB,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;KACvE,CAAA;IACD,MAAM,UAAU,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAA;IAC3D,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,CAAA;QACZ,OAAM;IACR,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAA;QACxD,MAAM,CAAC,0BAA0B,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC,CAAA;QAChG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QACvC,OAAM;IACR,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAChC,MAAM,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAA;QAClG,OAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAA;IACtG,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACzC,IACE,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,IAAI,CAC7D,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,CACtE;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACxC,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAA;QAC9E,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,IAAI,GAAG,CAAC,cAAc,CAAA;QAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,QAAQ,IAAI,QAAQ,CAAA;QAC3F,IAAI,IAAI,KAAK,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IAClG,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC;QAC9C,MAAM;QACN,UAAU;QACV,KAAK;QACL,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChH,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClH,CAAC,CAAA;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,SAAS,CACP,MAAM,OAAO,CAAC,iBAAiB,CAAC;gBAC9B,cAAc,EAAE,kBAAkB,CAAC,UAAU,CAAC;gBAC9C,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;aAC7B,CAAC,EACF,MAAM,CACP,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,SAAS,CACnB;gBACE,MAAM,EAAE,aAAa;gBACrB,KAAK;gBACL,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,UAAU,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aACnE,EACD,IAAI,EACJ,CAAC,CACF,CAAC,CAAA;QACJ,CAAC;QACD,OAAM;IACR,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IACvG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAuB,EACvB,OAA0B;IAE1B,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;QAC/B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC5D,MAAM,cAAc,CAClB,IAAI,EACJ,kBAAkB,CAChB,qBAAqB,CAAC;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;YAC/B,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SACvE,CAAC,CACH,EACD,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAC9B,CAAA;QACD,OAAM;IACR,CAAC;IACD,MAAM,gBAAgB,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAC9C,IAAI,gBAAgB,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAC7C,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACrD,OAAM;IACR,CAAC;IACD,MAAM,kBAAkB,GAAG;QACzB,OAAO,CAAC,uBAAuB;QAC/B,OAAO,CAAC,wBAAwB;QAChC,OAAO,CAAC,6BAA6B;QACrC,OAAO,CAAC,qBAAqB;QAC7B,OAAO,CAAC,2BAA2B;QACnC,OAAO,CAAC,6BAA6B;KACtC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAA;IACpC,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,KAAK,OAAO;WACtD,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAA;IAC/F,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9D,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACrD,OAAM;IACR,CAAC;IACD,MAAM,oBAAoB,GAAG,CAAC,gBAAgB,CAAC,MAAM,KAAK,KAAK,IAAI,eAAe;QAChF,CAAC,CAAC,EAAE,GAAG,gBAAgB,EAAE,MAAM,EAAE,QAAiB,EAAE;QACpD,CAAC,CAAC,gBAAgB,CAGjB,CAAA;IACH,OAAO,iBAAiB,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAA;AACzD,CAAC"}
+{"version":3,"file":"run-command-dispatch.js","sourceRoot":"","sources":["../../../src/cli/run-command-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAA8B,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAC9G,OAAO,EAA6B,eAAe,EAAE,MAAM,YAAY,CAAA;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AACnF,OAAO,EAAiC,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACtF,OAAO,EAA0B,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAYxH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAgC,EAChC,OAA0B;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAA;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACxC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IAC9C,MAAM,iBAAiB,GAA0B;QAC/C,GAAG,EAAE,WAAW;QAChB,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;KACvE,CAAA;IACD,MAAM,UAAU,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAA;IAC3D,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,CAAA;QACZ,OAAM;IACR,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAA;QACxD,MAAM,CAAC,0BAA0B,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC,CAAA;QAChG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QACvC,OAAM;IACR,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAChC,MAAM,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAA;QAClG,OAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAA;IACtG,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACzC,IACE,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,IAAI,CAC7D,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,CACtE;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACxC,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAA;QAC9E,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,IAAI,GAAG,CAAC,cAAc,CAAA;QAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,QAAQ,IAAI,QAAQ,CAAA;QAC3F,IAAI,IAAI,KAAK,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IAClG,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC;QAC9C,MAAM;QACN,UAAU;QACV,KAAK;QACL,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChH,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClH,CAAC,CAAA;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,SAAS,CACP,MAAM,OAAO,CAAC,iBAAiB,CAAC;gBAC9B,cAAc,EAAE,kBAAkB,CAAC,UAAU,CAAC;gBAC9C,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;aAC7B,CAAC,EACF,MAAM,CACP,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,SAAS,CACnB;gBACE,MAAM,EAAE,aAAa;gBACrB,KAAK;gBACL,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,UAAU,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aACnE,EACD,IAAI,EACJ,CAAC,CACF,CAAC,CAAA;QACJ,CAAC;QACD,OAAM;IACR,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IACvG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAuB,EACvB,OAA0B;IAE1B,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;QAC/B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC5D,MAAM,cAAc,CAClB,IAAI,EACJ,kBAAkB,CAChB,qBAAqB,CAAC;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;YAC/B,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SACvE,CAAC,CACH,EACD,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAC9B,CAAA;QACD,OAAM;IACR,CAAC;IACD,MAAM,gBAAgB,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAC9C,IAAI,gBAAgB,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAC7C,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACrD,OAAM;IACR,CAAC;IACD,MAAM,kBAAkB,GAAG;QACzB,OAAO,CAAC,uBAAuB;QAC/B,OAAO,CAAC,wBAAwB;QAChC,OAAO,CAAC,6BAA6B;QACrC,OAAO,CAAC,kCAAkC;QAC1C,OAAO,CAAC,qBAAqB;QAC7B,OAAO,CAAC,2BAA2B;QACnC,OAAO,CAAC,6BAA6B;KACtC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAA;IACpC,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,KAAK,OAAO;WACtD,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAA;IAC/F,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9D,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACrD,OAAM;IACR,CAAC;IACD,MAAM,oBAAoB,GAAG,CAAC,gBAAgB,CAAC,MAAM,KAAK,KAAK,IAAI,eAAe;QAChF,CAAC,CAAC,EAAE,GAAG,gBAAgB,EAAE,MAAM,EAAE,QAAiB,EAAE;QACpD,CAAC,CAAC,gBAAgB,CAGjB,CAAA;IACH,OAAO,iBAAiB,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAA;AACzD,CAAC"}

package/dist/src/cli/run-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-command.d.ts","sourceRoot":"","sources":["../../../src/cli/run-command.ts"],"names":[],"mappings":"AA+EA,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAG5E,OAAO,EACL,KAAK,6BAA6B,EAGnC,MAAM,+BAA+B,CAAA;AAwCtC,OAAO,EAKL,KAAK,iBAAiB,EAYvB,MAAM,kBAAkB,CAAA;AAczB,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAA;IAC/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,wBAAsB,yCAAyC,CAAC,KAAK,EAAE;IACrE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAA;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC,GAAG,OAAO,CAAC,qCAAqC,CAAC,CA2CjD;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8tB3G"}
+{"version":3,"file":"run-command.d.ts","sourceRoot":"","sources":["../../../src/cli/run-command.ts"],"names":[],"mappings":"AA+EA,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAG5E,OAAO,EACL,KAAK,6BAA6B,EAGnC,MAAM,+BAA+B,CAAA;AAmCtC,OAAO,EAKL,KAAK,iBAAiB,EAavB,MAAM,kBAAkB,CAAA;AAczB,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAA;IAC/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,wBAAsB,yCAAyC,CAAC,KAAK,EAAE;IACrE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAA;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC,GAAG,OAAO,CAAC,qCAAqC,CAAC,CA2CjD;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6uB3G"}

package/dist/src/cli/run-command.js

@@ -39,13 +39,13 @@ import { PlatformProviderPluginLifecycleRuntime } from '../launcher/platform-pro
 import { stagePluginPackageSourceV1 } from '../launcher/packages/index.js';
 import { CORDISX_PLUGIN_MANIFEST_SCHEMA_V13, normalizePluginManifestV13 } from '../runtime-exact-request-permissions.js';
 import { CORDISX_PLUGIN_MANIFEST_SCHEMA_V14, normalizePluginManifestV14 } from '../launcher/latest-runtime-manifest.js';
-import { deployBundledCordisXSkill, } from '../launcher/builtin-skill.js';
+import { deployBundledCordisXSkill, deployBundledCordisXSkills } from '../launcher/builtin-skill.js';
 import { createOwnerDocumentBridgeHandler, entityInstallationId, OwnerDocumentLeaseRegistry, } from '../launcher/owner-document-rpc.js';
 import { managedBackendRuntimeServiceAccess } from '../launcher/packages/managed-backend-service-access.js';
 import { ManagedServiceRuntime } from '../launcher/managed-service-runtime.js';
 import { ManagedServiceNodeHost } from '../launcher/managed-service-node-host.js';
 import { ManagedServicePluginLifecycleRuntime } from '../launcher/managed-service-plugin-lifecycle.js';
-import { agentHistoryHost, assertProductionGraphLaunchOwnership, cliProxyServiceConfigApis, deployBuiltinSkillWithoutOverwritingUserChanges, pluginIdentities, printPlan, providerConfigs, recoveredActivation, rootFromConfigPath, runInjectedHost, } from './run-support.js';
+import { agentHistoryHost, assertProductionGraphLaunchOwnership, cliProxyServiceConfigApis, deployBuiltinSkillsWithoutOverwritingUserChanges, deployBuiltinSkillWithoutOverwritingUserChanges, pluginIdentities, printPlan, providerConfigs, recoveredActivation, rootFromConfigPath, runInjectedHost, } from './run-support.js';
 import { attachActiveBrowserGraphs, buildRendererComposition, createProductionGraphBootstrap, createRendererLifecycleProjection, } from './renderer-composition.js';
 import { prepareCliCommand } from './run-command-dispatch.js';
 import { shouldEnableNativeSubmission } from './native-submission-launch-policy.js';
@@ -673,14 +673,25 @@ export async function runCordisXCli(argv, runtime = {}) {
                     stdout(`[cordisx] native managed Desktop providers unavailable: ${String(error)}`);
                 }
             }
-            await deployBuiltinSkillWithoutOverwritingUserChanges(deployBundledCordisXSkill(plan, {
-                ...(runtime.internalBuiltinSkillSourceDir === undefined
-                    ? {}
-                    : { sourceDir: runtime.internalBuiltinSkillSourceDir }),
-                ...(runtime.internalSharedHomeDir === undefined
-                    ? {}
-                    : { sharedHomeOverride: runtime.internalSharedHomeDir }),
-            }), stdout);
+            if (runtime.internalBuiltinSkillSourceDir !== undefined
+                && runtime.internalBuiltinSkillsSourceRootDir === undefined) {
+                await deployBuiltinSkillWithoutOverwritingUserChanges(deployBundledCordisXSkill(plan, {
+                    sourceDir: runtime.internalBuiltinSkillSourceDir,
+                    ...(runtime.internalSharedHomeDir === undefined
+                        ? {}
+                        : { sharedHomeOverride: runtime.internalSharedHomeDir }),
+                }), stdout);
+            }
+            else {
+                await deployBuiltinSkillsWithoutOverwritingUserChanges(deployBundledCordisXSkills(plan, {
+                    ...(runtime.internalBuiltinSkillsSourceRootDir === undefined
+                        ? {}
+                        : { sourceRootDir: runtime.internalBuiltinSkillsSourceRootDir }),
+                    ...(runtime.internalSharedHomeDir === undefined
+                        ? {}
+                        : { sharedHomeOverride: runtime.internalSharedHomeDir }),
+                }), stdout);
+            }
             productionPluginManagement = await openProductionPluginManagementComposition({
                 configPath,
                 homeDir: rootFromConfigPath(configPath),