exonous 2.10.4 → 2.10.8

package/assets/machine/hooks/lib/pr-template-validate.cjs

@@ -9,6 +9,7 @@ const { resolveTemplate } = require('./template.cjs');
 const { gitEnv } = require('./paths.cjs');
 
 const MAX_CHANGED_FILES = 30;
+const PR_CREATE_GUIDANCE = 'Use `exonous pr create --base <base> --head <branch> --title <title> --body-file <file>` so the validated PR and its handoff are created together';
 
 function normalize(text) {
   return text.normalize('NFC').toLowerCase();
@@ -95,6 +96,7 @@ function validateGhPrCreateCommand(command, cwd = process.cwd()) {
 
 module.exports = {
   MAX_CHANGED_FILES,
+  PR_CREATE_GUIDANCE,
   validateBodyContent,
   validateBodyFile,
   validateGhPrCreateCommand,

package/assets/machine/hooks/pyle.cjs

@@ -6,7 +6,7 @@ const { spawnSync } = require('child_process');
 
 // A half-updated or broken runtime must still block git/gh: Windsurf, for one, only blocks on exit 2.
 let payload, token, repoRoot, gitEnv, gitOut, analyze, isolationProblem, redirectionProblem;
-let parseOptions, has, COMMIT, PUSH, GH_PR_CREATE, validatePrCreate, prFields;
+let parseOptions, has, COMMIT, PUSH, GH_PR_CREATE, PR_CREATE_GUIDANCE;
 let loadError = null;
 try {
   payload = require('./lib/payload.cjs');
@@ -14,7 +14,7 @@ try {
   ({ repoRoot, gitEnv, gitOut } = require('./lib/paths.cjs'));
   ({ analyze, isolationProblem, redirectionProblem } = require('./lib/shell.cjs'));
   ({ parseOptions, has, COMMIT, PUSH, GH_PR_CREATE } = require('./lib/cli-options.cjs'));
-  ({ validatePrCreate, prFields } = require('./lib/pr-template-validate.cjs'));
+  ({ PR_CREATE_GUIDANCE } = require('./lib/pr-template-validate.cjs'));
 } catch (err) {
   loadError = err;
 }
@@ -185,8 +185,7 @@ function checkPr(call) {
   if (parsed.error) return `cannot verify its options: ${parsed.error}`;
   if (has(parsed, 'help')) return null;
   if (parsed.positional.length) return `unexpected argument "${parsed.positional[0]}"`;
-  const result = validatePrCreate(prFields(parsed), call.cwd);
-  return result.ok ? null : result.reason.replace(/\.$/, '');
+  return PR_CREATE_GUIDANCE;
 }
 
 // ── Gate ─────────────────────────────────────────────────────────────────────

package/assets/skills/commit-changes/SKILL.md

@@ -12,11 +12,12 @@ exonous gates `git commit`, `git push` and `gh pr create` in every gated AI tool
 ```
 /commit-changes → /security-review → /code-review → exonous token commit → git commit   (token: one commit of the staged tree, 15 min)
 force-push or push to main/master → only on the user's explicit request → exonous token push → git push
-/make-pr → ≤ 30 changed files → body at `exonous draft-path` → exonous validate-pr <file> → gh pr create --body-file <file>
+/make-pr → ≤ 30 changed files → body at `exonous draft-path` → exonous validate-pr <file> → exonous pr create --body-file <file>
 ```
 
 - Run each gated command **alone** (optionally after one `cd <dir> &&`): no `&&` chains, pipes, `;`, wrappers, `sh -c`, `-a`/`-i`/`-o`/`-p` or pathspecs on `git commit`.
-- If the gate blocks you, read its reason, run `exonous workflow commit` (or `pr`), fix what it names, then retry. Never work around it.
+- If the gate blocks you before execution, read its reason, run `exonous workflow commit` (or `pr`), fix what it names, then retry the managed command. Never work around it.
+- After remote PR success, memory failure or `no-vault` never justifies repeating creation. For ambiguous output, inspect the remote PR state before another attempt; use `/make-pr`'s explicit handoff fallback for a confirmed existing PR.
 
 Steps:
 1. Run `git status --short` and `git branch --show-current`. If there is nothing to commit and nothing unpushed, say so and stop.

package/assets/skills/make-pr/SKILL.md

@@ -15,10 +15,8 @@ model: sonnet
 3. Leia `git log origin/<base>..HEAD --oneline`, `git diff --stat origin/<base>...HEAD` e os hunks relevantes. Conte `git diff --name-only origin/<base>...HEAD`: máximo 30 arquivos. Acima disso, proponha divisão coesa antes de abrir PRs menores/empilhadas.
 4. Execute `exonous template`. Escreva um corpo humano, conciso e em PT-BR, com todos os títulos na ordem do template. No padrão: `## Resumo`, `## Principais mudanças`, `## Arquitetura & implementação`, `## Antes → Agora`, `## Roteiro de teste`. Seção inaplicável mantém título e `_N/A — não aplicável a esta mudança_`. Relate apenas validação observada; sem menção a agentes/IA, créditos ou coautoria. Título convencional em inglês (`type: short description`); `$ARGUMENTS` pode orientar título/contexto.
 5. Execute `exonous draft-path`, grave o corpo nesse caminho literal e execute `exonous validate-pr <draft-path>`. Corrija falhas antes de continuar.
-6. Execute como comando isolado (opcionalmente após um `cd <dir> &&`):
-   `gh pr create --base <base> --head <current-branch> --title "<title>" --body-file <draft-path>`
-   Gate bloqueou: leia a razão, rode `exonous workflow pr`, corrija e tente novamente. Falha do `gh`: reporte; não grave handoff de PR criada.
-7. **Só após sucesso do `gh`**, preserve a URL retornada e grave silenciosamente um JSON temporário privado com:
-   `{"v":1,"k":"pr","g":[["pr","url","<URL retornada>"],["pr","did","<principal mudança concreta>"],["pr","proof","<comando e resultado realmente observado; ou validação pendente>"],["pr","next","<próxima ação concreta>"]]}`
-   Resuma o que foi feito em uma tripla `did` curta e concreta. Use valores únicos e referências curtas, sem nós redundantes, narrativa ou segredos. Execute `exonous handoff save --body-file <temporário>`. O helper acrescenta instante/repo/branch/HEAD e salva no único vault central existente. Capture o resultado sem mostrá-lo; `no-vault`, helper ausente ou erro de gravação não transforma a PR criada em falha nem pede/cria vault.
-8. Remova apenas os temporários desta execução (corpo e handoff). Retorne a URL da PR, sem anúncio adicional sobre o handoff.
+6. Execute `exonous pr create --base <base> --head <current-branch> --title "<title>" --body-file <draft-path>`; acrescente `--draft` quando solicitado. O helper nativo valida uma cópia privada do corpo e envia esses mesmos bytes ao `gh`, sem shell. Criação direta por `gh pr create` é bloqueada. CLI legado: atualize para o nativo; não contorne o gate.
+7. Sucesso com uma única URL canônica `https://github.com/<owner>/<repo>/pull/<número>` grava automaticamente um handoff mínimo no vault central existente. Falha, sinal ou saída ambígua: relate o resultado e verifique o estado remoto antes de qualquer nova tentativa. Erro de memória ou `no-vault` não repete a criação, não pede/cria vault e preserva o rascunho.
+8. O helper remove sua cópia privada e, após salvar, somente o rascunho esperado deste checkout quando ele continua intacto. Preserve corpos arbitrários, alterados ou de outro checkout. Retorne a URL da PR, sem anúncio adicional sobre o handoff.
+
+Fallback explícito para uma PR já criada e confirmada: grave um JSON temporário privado `{"v":1,"k":"pr","g":[["pr","url","<URL canônica confirmada>"],["pr","proof","PR criada"],["pr","next","revisar PR"]]}` e execute `exonous handoff save --body-file <temporário>`. A mesma URL retorna `already-saved` sem substituir o primeiro registro. Remova apenas esse temporário; não recrie a PR nem registre título, corpo ou saída do `gh` na memória.

package/assets/skills/ui-design/reference/adapt.md

@@ -52,7 +52,7 @@ Breakpoints (typical): mobile 320–767; tablet 768–1023; desktop 1024+—or c
 
 Techniques: Grid/Flex reflow; container queries; `clamp()`; media queries; show/hide per context.
 
-Touch: larger targets; spacing; replace hover-only paths; touch feedback; thumb zones.
+Touch: larger targets; spacing; replace hover-only paths; touch feedback; thumb zones. Handle `pointercancel`, lost capture, blur, and extra pointers; arbitrate dragging against scrolling and restore a usable state after interruption.
 
 Content: avoid heavy `display:none` downloads; progressive enhancement; lazy load; responsive images (`srcset`, `picture`).
 
@@ -64,7 +64,7 @@ Test real devices—DevTools emulation is incomplete.
 
 ## Verify
 
-Real devices; orientations; major browsers; OS variants; touch/mouse/keyboard; 320px and 4K edges; throttled network.
+Real devices; orientations; major browsers; OS variants; touch/mouse/keyboard; 320px and 4K edges; throttled network. Test interrupted drags and scroll recovery. Screenshots establish layout, not gesture behavior; record the actual device, OS, and browser engine for gesture tests.
 
 Then `/ui-design polish`.
 

package/assets/skills/ui-design/reference/adapt.native.md

@@ -28,7 +28,7 @@ Reconform: platform nav, platform controls, touch-first, Dynamic Type/sp. Full p
 
 ## Verify
 
-Drive structure from size classes—never device-model checks. Safe areas/insets in every configuration. Simulators for breadth; hardware for posture, gestures, performance.
+Drive structure from size classes—never device-model checks. Safe areas/insets in every configuration. Simulators for breadth; hardware for posture, gestures, performance. Exercise gesture cancellation, focus loss, extra touches, scroll competition, and recovery. Screenshots prove layout only; name the actual device, OS, and native runtime tested (plus browser engine for embedded web gestures).
 
 Then `/ui-design polish`.
 

package/assets/skills/ui-design/reference/critique.md

@@ -7,8 +7,8 @@ Lock a single review target, execute **Track A** (judgment) and **Track B** (ins
 - Track A and Track B are both required every run.
 - Exposed Task/subagent tooling → launch A and B as **parallel isolated workers** (see exo-designer briefs below). Parent-thread execution is **degraded** unless no subagent tool exists (or the user declined where the harness asks)—banner: `⚠️ DEGRADED: single-context (<reason>)`.
 - **Track A must finish before Track B influences synthesis.** Instrumentation output still anchors the merge even though it is deterministic.
-- Omitting B fails the command unless the detect CLI is absent or crashed after a genuine attempt.
-- Viewable targets require browser inspection when automation exists.
+- Omitting B fails the command unless the detect CLI is absent or crashed after a genuine attempt. For native-only targets, B inspects platform tooling and runtime behavior; mark the web detector and DOM overlay inapplicable without attempting them. Both tracks and the complete UX judgment remain required; web targets retain every detector/browser requirement.
+- Viewable web targets require browser inspection when automation exists; native-only targets use available platform inspection.
 - Critique-only servers: `--background`, recorded stop method, stop before final report unless the user keeps them.
 - Claim in-page overlays only after successful script injection **and** an in-tab detector pass.
 - **Questions are last** in the message—full report first; nothing after questions.
@@ -56,7 +56,7 @@ Spawn **exo-designer** with an isolated brief equivalent to:
 
 Spawn **exo-designer** with an isolated brief equivalent to:
 
-**CLI scan:**
+**CLI scan (web targets; native-only targets use applicable platform/runtime evidence):**
 
 ```bash
 <skill-dir>/scripts/ui-design detect --json [markup-targets...]
@@ -68,7 +68,7 @@ Spawn **exo-designer** with an isolated brief equivalent to:
 - Process exit code 0 = clean; 2 = findings present.
 - Missing detector → report unavailable; continue manual/browser review.
 
-**Browser overlay (required for viewable targets when automation exists):**
+**Browser overlay (required for viewable web targets when automation exists; native-only targets use platform inspection):**
 
 1. Fresh tab; prefer harness browser tools over custom Playwright.
 2. Preflight **mutable** injection (`document.title`, append `<script>`). Read-only evaluate does not count.
@@ -337,8 +337,8 @@ Renormalize totals when 7 and/or 10 are `n/a`; never display `/40` on a partial
 
 B must return structured bundles the parent can merge without rerun:
 
-1. CLI: exit code, finding count, top rules with paths (or “skipped: URL-only”)
-2. Browser: injection yes/no, port used, console excerpt or “none”
+1. CLI: exit code, finding count, top rules with paths (or “skipped: URL-only” / “inapplicable: native-only” with platform evidence)
+2. Browser: injection yes/no, port used, console excerpt or “none”; native-only targets report platform inspection and mark the DOM overlay inapplicable
 3. False positives: list with one-line rebuttal each
 4. Skips: step name + reason (mutation blocked, tool missing, user URL only)
 

package/assets/skills/ui-design/reference/harden.md

@@ -61,14 +61,14 @@ Responsive type: `clamp()`; 16px body floor on mobile (14px only for truly secon
 
 RTL: logical properties (`margin-inline-start`, `padding-inline`, `border-inline-end`) or `[dir="rtl"]` transforms.
 
-UTF-8 everywhere; test CJK and emoji.
+UTF-8 everywhere; test CJK and emoji. Preserve canonical stored text; derive search-normalized values separately. Do not strip meaningful diacritics, joiners, or other script characters to simplify matching.
 
 ```javascript
 new Intl.DateTimeFormat('de-DE').format(date);
 new Intl.NumberFormat('en-US', { style: 'currency', currency: 'USD' }).format(n);
 ```
 
-Pluralization via i18n library, not English-only string hacks.
+Use the active locale for dates, numbers, currency, and pluralization; the examples above illustrate APIs, not fixed locales for every user. Pluralization via i18n library, not English-only string hacks.
 
 ### Errors
 
@@ -82,6 +82,8 @@ Graceful degradation: core path without JS where possible; alt text; progressive
 
 ### Edge cases
 
+Gestures: handle `pointercancel`, lost pointer capture, and window blur; define extra-pointer behavior. Resolve scroll conflicts without trapping the page; clear drag state and recover to a usable position after interruption.
+
 Empty, loading (named operation, estimates), large data (pagination/virtual scroll), double-submit guards, race handling, optimistic rollback, permission states with explanation, browser feature detection + polyfills.
 
 ### Validation
@@ -109,7 +111,7 @@ const throttledScroll = throttle(handleScroll, 100);
 
 ## Testing
 
-Manual: extremes, locales, offline, 3G throttle, screen reader, keyboard-only, old browsers.
+Manual: extremes, locales, offline, 3G throttle, screen reader, keyboard-only, old browsers. Screenshots prove layout only; gesture evidence names the actual device, OS, and browser engine tested, including interruption and recovery.
 
 Automated: unit edge cases, integration errors, E2E critical paths, visual regression, axe/WAVE.
 

package/assets/skills/ui-design/reference/hooks.md

@@ -61,7 +61,7 @@ Manual `<skill-dir>/scripts/ui-design detect` honors project ignores unless `--n
 <skill-dir>/scripts/ui-design hooks <action> [args...]
 ```
 
-Relay stdout verbatim. After `off`: note hook stays off until `on`. After `on`: note next UI edit triggers hook.
+Relay stdout verbatim. After `off`: note hook stays off until `on`. After `on`: report configuration enabled; verify host loading and any required approval before claiming the next edit will run the hook. An enabled setting, manifest, or CLI consent record alone does not prove the host loaded or approved it; report unavailable host evidence explicitly. Keep the existing event timing.
 
 ## Triage
 

package/assets/skills/ui-design/reference/styles/direction.md

@@ -58,7 +58,7 @@ Before implementation, commit to a deterministic layout pick (seed from brief le
 
 ## Motion rules
 
-If `MOTION_INTENSITY > 4`, ship visible motion (hero enter, section reveals, CTA hover)—or lower the dial and stay static. Every animation needs a one-sentence purpose (hierarchy, story, feedback, state). Max one horizontal marquee per page. GSAP pin/scrub: `start: "top top"`, cleanup in `useEffect`. Honor `prefers-reduced-motion` for intensity >3. No mixing GSAP/Three with Motion in one component tree. Spring default when using Motion: `stiffness: 100`, `damping: 20`. Grain/noise only on fixed `pointer-events-none` overlays.
+If `MOTION_INTENSITY > 4`, ship visible motion (hero enter, section reveals, CTA hover)—or lower the dial and stay static. Every animation needs a one-sentence purpose (hierarchy, story, feedback, state). Max one horizontal marquee per page. GSAP pin/scrub: `start: "top top"`, cleanup in `useEffect`. Honor `prefers-reduced-motion` for intensity >3. Keep a complete static fallback when motion is reduced, unsupported, or interrupted; content and controls must remain available. No mixing GSAP/Three with Motion in one component tree. Spring default when using Motion: `stiffness: 100`, `damping: 20`. Grain/noise only on fixed `pointer-events-none` overlays.
 
 ## States & forms
 
@@ -66,7 +66,7 @@ Ship loading (layout-matched skeletons), empty, error, hover, active (`scale-[0.
 
 ## Assets
 
-Landings are visual: prefer project image tools, then seeded placeholder photography (`picsum.photos/seed/{topic}/{w}/{h}`), never div-built fake dashboards. Logo walls use real SVG marks (e.g. simple-icons CDN) or invented monogram SVGs—not plain text faux logos; no category subtitles under logos. Minimal briefs still need real photography in key slots.
+Landings are visual: prefer project image tools, then seeded placeholder photography (`picsum.photos/seed/{topic}/{w}/{h}`), never div-built fake dashboards. Logo walls use real SVG marks (e.g. simple-icons CDN) or invented monogram SVGs—not plain text faux logos; no category subtitles under logos. Choose assets that serve the brief; static or type-led work does not require an asset kit. Verify real assets render at every delivered viewport width. Reserve image dimensions or aspect ratios, use responsive sources, and set loading priority for actual visibility rather than lazy-loading the first-view focal image.
 
 ## Content bans
 
@@ -78,7 +78,7 @@ Neon outer glows, gradient-filled giant headlines, custom cursors, three equal f
 
 ## Performance & a11y
 
-Animate transform/opacity only. Dark mode designed up front with paired tokens. Target LCP <2.5s, INP <200ms, CLS <0.1. Document z-index layers; do not spam arbitrary high z-index. Cards only when elevation means hierarchy; tint shadows to background hue; one radius system per page.
+Animate transform/opacity only. Dark mode designed up front with paired tokens. Target LCP <2.5s, INP <200ms, CLS <0.1. Label lab measurements with their device/network conditions; use available field data for real-user conclusions and disclose when it is absent. Document z-index layers; do not spam arbitrary high z-index. Cards only when elevation means hierarchy; tint shadows to background hue; one radius system per page.
 
 ## Internal plan (before UI code)
 
@@ -90,6 +90,7 @@ Document briefly: chosen dials and why; AIDA sections present; hero width/line m
 - Zero em-dashes; single page theme; locked accent and radius system
 - Hero viewport, nav, eyebrow, zigzag, CTA, and form contrast rules pass
 - Bento/images/logos/marquee/motion/GSAP rules pass; no scroll listeners in state
-- Mobile collapse, `min-h-[100dvh]`, cleanup on effects, empty/load/error states
+- Mobile collapse, content-sized sections, cleanup on effects, empty/load/error states; use viewport minimum height only where the composition needs it
+- Assets visible at delivered widths; reserved image dimensions and loading priorities checked; static fallback usable; lab and field evidence identified
 - Content and Section 9-style tells absent; dependencies verified; one icon family
 - Dashboards/tools: stop—use Operate mode and official dense UI systems instead

package/assets/skills/ui-design/reference/typeset.md

@@ -40,6 +40,7 @@ Fewest roles/families for unmistakable hierarchy. Combine size, weight, space, t
 
 - Body readable and zoomable; 1rem/16px web floor unless dense role, platform norm, or user setting says otherwise.
 - Prose 45–75ch; wider lines → more leading.
+- Progressively enhance web headings with `text-wrap: balance` and body copy with `text-wrap: pretty` where supported; keep readable fallback wrapping and preserve intentional line breaks. Verify at delivered widths and languages.
 - Light-on-dark: slightly more leading, tracking, and weight when the face needs it.
 - Tune leading to face, width, language, contrast—not one global ratio.
 - Repeat roles identically across states.

package/assets/skills/ui-design/scripts/ENGINE-CHECKSUMS

@@ -0,0 +1,6 @@
+version 0.1.5
+0d48b6e16aa97664fdbe607d5da9ae320e389a1843e0ff1328f8c2530530320d  impeccable-darwin-arm64
+153971b0c00719dff9ebac13370cb7dbbbe12838b696fbaf3f7ab0b1b3726b52  impeccable-darwin-x64
+bc4fa28bc8ccbb018795a99a4ece95ada898a6f1885f14281389d0e6ef2a2f98  impeccable-linux-arm64
+cf5231a4b1ae66996c85b033800b1dad0797e590eae2f21ef2579430af187f19  impeccable-linux-x64
+477e544fc8880a5e82e427490cb9a5f5adab480c0e02966d33fd50772b531c71  impeccable-windows-x64.exe

package/assets/skills/ui-design/scripts/impeccable

@@ -1,206 +1,96 @@
 #!/bin/sh
-# Impeccable launcher. Runs the platform binary shipped next to this script:
-#   <this dir>/bin/<os>-<arch>/impeccable
-# Order: $IMPECCABLE_BIN, the sibling binary, ~/.impeccable/bin/impeccable,
-# the version-pinned cache, then `impeccable` on PATH. Never needs Node.
-# The unversioned home binary and the PATH candidate are validated with the
-# engine-probe handshake first: the retired 3.x npm CLI also installed a bin
-# named `impeccable`, and exec'ing it would fail every verb with
-# "Unknown command". Trusted candidates (IMPECCABLE_BIN, the sibling binary,
-# the version-pinned cache) are exec'd without a probe: hooks run them on
-# every edit and must stay fast.
 set -eu
 
-# True when the candidate answers the engine handshake (prints
-# "impeccable-engine <version>", exit 0). Quiet and fast (<100ms).
-# IMPECCABLE_LAUNCHER_PROBE marks the child as a probe: a copy of this
-# launcher reached recursively (e.g. symlinked onto PATH as `impeccable`)
-# then skips its own probes and refuses to download, so probing stays cheap
-# and can never loop.
-probe_ok() {
-  case "$(IMPECCABLE_LAUNCHER_PROBE=1 "$1" engine-probe 2>/dev/null || true)" in
-    impeccable-engine*) return 0 ;;
-  esac
-  return 1
-}
-probing=${IMPECCABLE_LAUNCHER_PROBE:-}
-
 dir=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
-
-# What the binary needs to know about its home: the skill directory (for
-# reference/*.md and command-metadata.json) and how to name itself in the
-# commands it prints. Exported BEFORE any exec below, including the
-# IMPECCABLE_BIN override: an engine binary reached with no IMPECCABLE_SKILL_DIR
-# cannot find reference/*.md (so native platform refs never inline) or read its
-# own version (so UPDATE_AVAILABLE never fires). Setting it here covers every
-# candidate the launcher can exec.
 : "${IMPECCABLE_SKILL_DIR:=$(CDPATH= cd -- "$dir/.." && pwd)}"
 : "${IMPECCABLE_SELF:=$0}"
 export IMPECCABLE_SKILL_DIR IMPECCABLE_SELF
 
-if [ -n "${IMPECCABLE_BIN:-}" ] && [ -x "${IMPECCABLE_BIN}" ]; then
-  exec "${IMPECCABLE_BIN}" "$@"
+refuse() {
+  echo "impeccable: engine integrity: $*; reinstall exonous or set IMPECCABLE_BIN to an explicitly trusted engine." >&2
+  exit 127
+}
+if [ "${IMPECCABLE_BIN+x}" = x ]; then
+  [ -f "$IMPECCABLE_BIN" ] && [ -x "$IMPECCABLE_BIN" ] || refuse 'invalid IMPECCABLE_BIN override'
+  exec "$IMPECCABLE_BIN" "$@"
 fi
-
-case "$(uname -s 2>/dev/null || echo unknown)" in
-  Darwin) os=darwin ;;
-  Linux) os=linux ;;
-  MINGW*|MSYS*|CYGWIN*|Windows_NT) os=windows ;;
-  *) os=unknown ;;
+version=$(awk '
+  { sub(/\r$/, ""); if (NR != 1 || $0 != "0.1.5") bad = 1 }
+  END { if (NR != 1 || bad) exit 1; print "0.1.5" }
+' "$dir/VERSION" 2>/dev/null) || refuse 'VERSION missing or invalid'
+[ "$version" = 0.1.5 ] || refuse 'VERSION mismatch'
+manifest="$dir/ENGINE-CHECKSUMS"
+[ -f "$manifest" ] || refuse 'manifest missing'
+awk '
+  { sub(/\r$/, "") }
+  NR == 1 { if ($0 != "version 0.1.5") exit 1; next }
+  { if (NF != 2 || length($1) != 64 || $1 ~ /[^a-f0-9]/ || $0 != $1 "  " $2 || seen[$2]++) exit 1
+    if ($2 !~ /^impeccable-(darwin|linux)-(arm64|x64)$/ && $2 != "impeccable-windows-x64.exe") exit 1 }
+  END { if (NR < 2) exit 1 }
+' "$manifest" || refuse 'invalid manifest'
+case "$(uname -s)" in
+  Darwin) os=darwin;; Linux) os=linux;; MINGW*|MSYS*|CYGWIN*|Windows_NT) os=windows;; *) refuse 'unsupported platform';;
 esac
-case "$(uname -m 2>/dev/null || echo unknown)" in
-  arm64|aarch64) arch=arm64 ;;
-  x86_64|amd64) arch=x64 ;;
-  *) arch=unknown ;;
+case "$(uname -m)" in
+  arm64|aarch64) arch=arm64;; x86_64|amd64) arch=x64;; *) refuse 'unsupported architecture';;
 esac
-
-bin="$dir/bin/$os-$arch/impeccable"
-[ "$os" = windows ] && bin="$bin.exe"
-
-if [ -x "$bin" ]; then
-  exec "$bin" "$@"
-fi
-if [ -f "$bin" ]; then
-  # Lost the executable bit in transit (zip extraction, some copiers).
-  chmod +x "$bin" 2>/dev/null && exec "$bin" "$@"
-fi
-# On Windows (an MSYS/Git Bash shell) the cached names carry .exe so this
-# launcher and impeccable.cmd share one cache.
-exe=""
-[ "$os" = windows ] && exe=".exe"
-home_bin="${HOME:-/nonexistent}/.impeccable/bin/impeccable$exe"
-if [ -z "$probing" ] && [ -x "$home_bin" ] && probe_ok "$home_bin"; then
-  exec "$home_bin" "$@"
-fi
-# Version-pinned user cache, filled by the download below or by `impeccable update`.
-version=""
-[ -f "$dir/VERSION" ] && version=$(tr -d '[:space:]' < "$dir/VERSION")
-cache_root="${IMPECCABLE_HOME:-${HOME:-/nonexistent}/.impeccable}"
-cached="$cache_root/bin/$version/impeccable$exe"
-if [ -n "$version" ] && [ -x "$cached" ]; then
-  exec "$cached" "$@"
-fi
-if [ -z "$probing" ] && command -v impeccable >/dev/null 2>&1 && probe_ok impeccable; then
-  exec impeccable "$@"
+exe=
+if [ "$os" = windows ]; then arch=x64; exe=.exe; fi
+asset="impeccable-$os-$arch$exe"
+expected=$(awk -v asset="$asset" '{sub(/\r$/, ""); if ($2 == asset) print $1}' "$manifest")
+[ -n "$expected" ] || refuse "manifest missing hash for $asset"
+if command -v sha256sum >/dev/null 2>&1; then
+  hash_tool=sha256sum
+elif command -v shasum >/dev/null 2>&1; then
+  hash_tool=shasum
+else
+  refuse 'SHA256 tool unavailable'
 fi
-
-# Last resort: fetch this version's binary for the current platform from the
-# public release channel into the user cache. Needs network; sandboxes without
-# egress preinstall the binary on PATH instead.
-setup_help() {
-  echo "Engine $version setup needs network access and write permission to $cache_root/bin/$version." >&2
-  echo "Run this launcher ($0) with engine-probe in a terminal that has those permissions, then retry the original command." >&2
-  echo "Alternatively, set IMPECCABLE_HOME to a writable cache location, or IMPECCABLE_BIN to a preinstalled engine binary." >&2
-}
-fetch_url() {
-  if command -v curl >/dev/null 2>&1; then
-    curl -fsSL --retry 2 -o "$tmp" "$1" 2>/dev/null
-  elif command -v wget >/dev/null 2>&1; then
-    wget -q -O "$tmp" "$1" 2>/dev/null
+verify() {
+  [ -f "$1" ] || refuse "not a regular file: $1"
+  if [ "$hash_tool" = shasum ]; then
+    digest=$(shasum -a 256 "$1") || refuse 'SHA256 failed'
   else
-    return 1
+    digest=$(sha256sum "$1") || refuse 'SHA256 failed'
   fi
+  actual=${digest%% *}
+  [ "$actual" = "$expected" ] || refuse "checksum mismatch: $1"
 }
-check_download() {
-  download_file=${1:-$tmp}
-  if [ ! -f "$download_file" ]; then
-    rm -f "$tmp.sha256"
-    echo "impeccable: download completed but the file was removed before execution: $url; check your antivirus quarantine or logs. Refusing to continue; do not disable protection." >&2
-    exit 127
-  fi
-  if [ ! -s "$download_file" ]; then
-    rm -f "$download_file" "$tmp.sha256"
-    echo "impeccable: downloaded file is empty: $url; refusing the unverified download" >&2
-    exit 127
+run_verified() {
+  verify "$1"
+  candidate=$1
+  shift
+  if [ ! -x "$candidate" ]; then
+    chmod +x "$candidate" 2>/dev/null || refuse "cannot make engine executable: $candidate"
   fi
+  exec "$candidate" "$@"
 }
-if [ -n "$probing" ]; then
-  # Inside another launcher's probe: no download, fail fast and quiet.
-  exit 127
-fi
-if [ -n "$version" ] && [ "$os" != unknown ] && [ "$arch" != unknown ]; then
-  base="${IMPECCABLE_DOWNLOAD_BASE:-https://github.com/pbakaus/impeccable/releases/download}"
-  asset="impeccable-$os-$arch"
-  [ "$os" = windows ] && asset="$asset.exe"
-  url="$base/engine-v$version/$asset"
-  tmp="$cache_root/bin/$version/.impeccable.part.$$"
-  if ! mkdir -p "$cache_root/bin/$version" 2>/dev/null; then
-    echo "impeccable: engine $version is not installed; cannot create cache directory: $cache_root/bin/$version" >&2
-    setup_help
-    exit 127
-  fi
-  # Check the actual staging file, not just directory existence: a cache from
-  # an earlier run can be readable but no longer writable inside a sandbox.
-  if ! (umask 077; : > "$tmp") 2>/dev/null; then
-    echo "impeccable: engine $version is not installed; cannot write to cache directory: $cache_root/bin/$version" >&2
-    setup_help
-    exit 127
-  fi
-  fetched=0
-  if fetch_url "$url"; then
-    fetched=1
-  elif [ "$os" = windows ] && [ "$arch" = arm64 ]; then
-    # Windows on ARM runs x64 binaries; fall back when no arm64 asset exists.
-    url="$base/engine-v$version/impeccable-windows-x64.exe"
-    fetch_url "$url" && fetched=1
-  fi
-  if [ "$fetched" = 1 ]; then
-    check_download
-    # Fail closed: a freshly downloaded binary runs only after verifying
-    # against its .sha256 sidecar. A sidecar that cannot be fetched, or a
-    # machine with no sha256 tool, refuses the download instead of exec'ing
-    # an unverified binary. (A binary already on PATH or in the cache that
-    # passes engine-probe is unaffected.)
-    sidecar_ok=0
-    if command -v curl >/dev/null 2>&1; then
-      curl -fsSL --retry 2 -o "$tmp.sha256" "$url.sha256" 2>/dev/null && sidecar_ok=1
-    elif command -v wget >/dev/null 2>&1; then
-      wget -q -O "$tmp.sha256" "$url.sha256" 2>/dev/null && sidecar_ok=1
-    fi
-    check_download
-    expected=""
-    [ "$sidecar_ok" = 1 ] && expected=$(cut -d' ' -f1 < "$tmp.sha256")
-    actual=""
-    if command -v shasum >/dev/null 2>&1; then
-      if digest=$(shasum -a 256 "$tmp" 2>/dev/null); then actual=${digest%% *}; fi
-    elif command -v sha256sum >/dev/null 2>&1; then
-      if digest=$(sha256sum "$tmp" 2>/dev/null); then actual=${digest%% *}; fi
-    fi
-    check_download
-    rm -f "$tmp.sha256"
-    if [ -z "$expected" ] || [ -z "$actual" ]; then
-      rm -f "$tmp"
-      echo "impeccable: cannot verify $url against $url.sha256 (sidecar unavailable or hashing failed); refusing the unverified download" >&2
-      exit 127
-    fi
-    if [ "$actual" != "$expected" ]; then
-      rm -f "$tmp"
-      echo "impeccable: checksum mismatch downloading $url" >&2
-      exit 127
-    fi
-    check_download
-    if ! chmod +x "$tmp" 2>/dev/null; then
-      check_download
-      rm -f "$tmp"
-      echo "impeccable: could not make the verified download executable: $url" >&2
-      exit 127
-    fi
-    check_download
-    if ! mv -f "$tmp" "$cached" 2>/dev/null; then
-      check_download
-      rm -f "$tmp"
-      echo "impeccable: could not cache the verified download: $url" >&2
-      exit 127
-    fi
-    check_download "$cached"
-    exec "$cached" "$@"
-  fi
-  rm -f "$tmp" 2>/dev/null
-  echo "impeccable: could not download engine $version from $url; check network access, the release URL, and curl or wget availability." >&2
-  setup_help
-  exit 127
+cache_root="${IMPECCABLE_HOME:-${HOME:-/nonexistent}/.impeccable}"
+cached="$cache_root/bin/$version/impeccable$exe"
+sibling="$dir/bin/$os-$arch/impeccable$exe"
+home_bin="${HOME:-/nonexistent}/.impeccable/bin/impeccable$exe"
+for candidate in "$sibling" "$home_bin" "$cached"; do
+  if [ -e "$candidate" ]; then run_verified "$candidate" "$@"; fi
+done
+candidate=$(command -v "impeccable$exe" || true)
+if [ -n "$candidate" ]; then run_verified "$candidate" "$@"; fi
+[ -z "${IMPECCABLE_LAUNCHER_PROBE:-}" ] || refuse 'no authenticated engine installed'
+mkdir -p "$cache_root/bin/$version" 2>/dev/null || refuse "cannot create cache: $cache_root"
+staging=$(umask 077; mktemp -d "$cache_root/bin/$version/.impeccable.XXXXXXXX") || refuse 'cannot create private staging directory'
+trap 'rm -f "$staging/engine"; rmdir "$staging" 2>/dev/null || true' EXIT
+trap 'exit 127' HUP INT TERM
+tmp="$staging/engine"
+url="${IMPECCABLE_DOWNLOAD_BASE:-https://github.com/pbakaus/impeccable/releases/download}/engine-v$version/$asset"
+if command -v curl >/dev/null 2>&1; then
+  curl -fsSL --retry 2 -o "$tmp" "$url" || refuse "could not download $url; check network access and cache permissions"
+elif command -v wget >/dev/null 2>&1; then
+  wget -q -O "$tmp" "$url" || refuse "could not download $url; check network access and cache permissions"
+else
+  refuse 'curl or wget unavailable'
 fi
-
-echo "impeccable: no engine binary for $os-$arch found (looked in $bin, $cached, PATH)." >&2
-echo "Download impeccable-$os-$arch from https://github.com/pbakaus/impeccable/releases (tag engine-v$version) into $cache_root/bin/$version/impeccable$exe (then chmod +x), or set IMPECCABLE_BIN to a preinstalled engine binary. Docs: https://impeccable.style" >&2
-exit 127
+verify "$tmp"
+chmod +x "$tmp" || refuse 'cannot make verified download executable'
+mv -f "$tmp" "$cached" || refuse 'cannot publish verified download'
+rmdir "$staging" || refuse 'cannot remove staging directory'
+trap - EXIT HUP INT TERM
+run_verified "$cached" "$@"

package/assets/skills/ui-design/scripts/impeccable.cmd

@@ -1,214 +1,4 @@
 @echo off
 setlocal
-rem Impeccable launcher (Windows). Runs bin\windows-<arch>\impeccable.exe next
-rem to this file, else a cached or freshly downloaded engine binary.
-rem
-rem Structure notes (this file is exercised by dry parsing and string-level
-rem tests, not yet on a real Windows machine):
-rem - No multi-line parenthesized blocks: cmd expands %var% at block parse
-rem   time, which made the old download path read back empty %url%/%cached%.
-rem   Linear goto flow keeps every expansion on its own line, and avoids
-rem   delayed expansion eating ! characters in user arguments.
-rem - The unversioned user binary and the PATH candidate are validated with
-rem   the engine-probe handshake (see :probe) so the retired 3.x npm CLI,
-rem   whose bin is also named impeccable, is never exec'd. IMPECCABLE_BIN,
-rem   the sibling binary, and the version-pinned cache stay trusted.
-rem - Downloads are verified against the .sha256 sidecar via certutil and
-rem   fail closed: a missing sidecar or hash tool refuses the download. On
-rem   ARM64 the arm64 asset is tried first and the x64 asset is the
-rem   fallback (Windows on ARM runs x64 binaries).
-if not defined IMPECCABLE_SKILL_DIR set "IMPECCABLE_SKILL_DIR=%~dp0.."
-if not defined IMPECCABLE_SELF set "IMPECCABLE_SELF=%~f0"
-set "arch=x64"
-if /I "%PROCESSOR_ARCHITECTURE%"=="ARM64" set "arch=arm64"
-
-if not defined IMPECCABLE_BIN goto no_env_bin
-if not exist "%IMPECCABLE_BIN%" goto no_env_bin
-set "run=%IMPECCABLE_BIN%"
-goto run
-:no_env_bin
-
-set "bin=%~dp0bin\windows-%arch%\impeccable.exe"
-if not exist "%bin%" goto no_sibling
-set "run=%bin%"
-goto run
-:no_sibling
-
-set "home_bin=%USERPROFILE%\.impeccable\bin\impeccable.exe"
-if not exist "%home_bin%" goto no_home_bin
-if defined IMPECCABLE_LAUNCHER_PROBE goto no_home_bin
-call :probe "%home_bin%"
-if not "%probe_ok%"=="1" goto no_home_bin
-set "run=%home_bin%"
-goto run
-:no_home_bin
-
-set "version="
-if exist "%~dp0VERSION" set /p version=<"%~dp0VERSION"
-if not defined IMPECCABLE_HOME set "IMPECCABLE_HOME=%USERPROFILE%\.impeccable"
-set "cached=%IMPECCABLE_HOME%\bin\%version%\impeccable.exe"
-if not defined version goto no_cache
-if not exist "%cached%" goto no_cache
-set "run=%cached%"
-goto run
-:no_cache
-
-if defined IMPECCABLE_LAUNCHER_PROBE goto download
-where impeccable >nul 2>nul
-if errorlevel 1 goto download
-call :probe impeccable
-if not "%probe_ok%"=="1" goto download
-impeccable %*
-exit /b
-
-:download
-rem Last resort: fetch this version's binary from the release channel into
-rem the version-pinned user cache, verify it, then run it. Never inside
-rem another launcher's probe: fail fast and quiet instead.
-if defined IMPECCABLE_LAUNCHER_PROBE exit /b 127
-if not defined version goto fail
-where curl.exe >nul 2>nul
-if errorlevel 1 goto curl_missing
-if not defined IMPECCABLE_DOWNLOAD_BASE set "IMPECCABLE_DOWNLOAD_BASE=https://github.com/pbakaus/impeccable/releases/download"
-if exist "%IMPECCABLE_HOME%\bin\%version%\" goto cache_ready
-mkdir "%IMPECCABLE_HOME%\bin\%version%" >nul 2>nul
-if errorlevel 1 goto cache_directory_failed
-:cache_ready
-rem Check the staging file too: an existing directory may be read-only.
-rem Redirection failures do not reliably update ERRORLEVEL in cmd.exe;
-rem branch on the command's failure directly. Never treat a directory as a
-rem staging file (later del cleanup would prompt to delete its contents).
-if exist "%cached%.part\" goto cache_write_failed
-(type nul >"%cached%.part") 2>nul || goto cache_write_failed
-set "asset=impeccable-windows-%arch%.exe"
-set "url=%IMPECCABLE_DOWNLOAD_BASE%/engine-v%version%/%asset%"
-curl.exe -fsSL -o "%cached%.part" "%url%" >nul 2>nul
-if not errorlevel 1 goto verify
-if not "%arch%"=="arm64" goto download_failed
-set "asset=impeccable-windows-x64.exe"
-set "url=%IMPECCABLE_DOWNLOAD_BASE%/engine-v%version%/%asset%"
-curl.exe -fsSL -o "%cached%.part" "%url%" >nul 2>nul
-if errorlevel 1 goto download_failed
-
-:verify
-call :check_download
-if errorlevel 1 exit /b 127
-rem Mirrors the sh launcher and fails closed: a freshly downloaded binary
-rem runs only after verifying against its .sha256 sidecar. A sidecar that
-rem cannot be fetched, or an empty certutil result, refuses the download
-rem instead of running an unverified binary.
-curl.exe -fsSL -o "%cached%.sha256" "%url%.sha256" >nul 2>nul
-if errorlevel 1 goto verify_refuse
-set "expected="
-set /p expected=<"%cached%.sha256"
-for /f "tokens=1" %%h in ("%expected%") do set "expected=%%h"
-call :check_download
-if errorlevel 1 exit /b 127
-set "actual="
-rem Reuse the sidecar staging file after reading expected. Check certutil's
-rem status before parsing: its error text on stdout is not a digest.
-certutil -hashfile "%cached%.part" SHA256 >"%cached%.sha256" 2>nul
-if errorlevel 1 goto verify_refuse
-call :check_download
-if errorlevel 1 exit /b 127
-for /f "usebackq skip=1 delims=" %%h in ("%cached%.sha256") do if not defined actual set "actual=%%h"
-del "%cached%.sha256" >nul 2>nul
-if not defined expected goto verify_refuse
-if not defined actual goto verify_refuse
-set "actual=%actual: =%"
-if /I "%actual%"=="%expected%" goto place
-del "%cached%.part" >nul 2>nul
-echo impeccable: checksum mismatch downloading %url% 1>&2
-exit /b 127
-
-:verify_refuse
-call :check_download
-if errorlevel 1 exit /b 127
-del "%cached%.part" >nul 2>nul
-del "%cached%.sha256" >nul 2>nul
-echo impeccable: cannot verify %url% against %url%.sha256; refusing the unverified download 1>&2
-exit /b 127
-
-:check_download
-set "download_file=%~1"
-if not defined download_file set "download_file=%cached%.part"
-if not exist "%download_file%" goto download_missing
-for %%f in ("%download_file%") do if %%~zf==0 goto download_empty
-exit /b 0
-
-:download_missing
-del "%cached%.sha256" >nul 2>nul
-echo impeccable: download completed but the file was removed before execution: %url%; check your antivirus quarantine or logs. Refusing to continue; do not disable protection. 1>&2
-exit /b 127
-
-:download_empty
-del "%download_file%" >nul 2>nul
-del "%cached%.sha256" >nul 2>nul
-echo impeccable: downloaded file is empty: %url%; refusing the unverified download 1>&2
-exit /b 127
-
-:place
-call :check_download
-if errorlevel 1 exit /b 127
-move /y "%cached%.part" "%cached%" >nul 2>nul
-if errorlevel 1 goto place_failed
-call :check_download "%cached%"
-if errorlevel 1 exit /b 127
-set "run=%cached%"
-goto run
-
-:place_failed
-call :check_download
-if errorlevel 1 exit /b 127
-del "%cached%.part" >nul 2>nul
-echo impeccable: could not cache the verified download: %url% 1>&2
-exit /b 127
-
-:run
-"%run%" %*
-exit /b
-
-:probe
-rem Sets probe_ok=1 when %1 answers the engine handshake: prints
-rem "impeccable-engine <version>" and exits 0. The 3.x npm CLI answers any
-rem unknown verb with "Unknown command", exit 1, so it never passes.
-set "probe_ok="
-set "probe_tmp=%TEMP%\impeccable-probe-%RANDOM%%RANDOM%.txt"
-set "IMPECCABLE_LAUNCHER_PROBE=1"
-"%~1" engine-probe >"%probe_tmp%" 2>nul
-set "probe_err=%ERRORLEVEL%"
-set "IMPECCABLE_LAUNCHER_PROBE="
-if not "%probe_err%"=="0" goto probe_done
-findstr /b /c:"impeccable-engine" "%probe_tmp%" >nul 2>nul
-if not errorlevel 1 set "probe_ok=1"
-:probe_done
-del "%probe_tmp%" >nul 2>nul
-exit /b 0
-
-:cache_directory_failed
-echo impeccable: engine %version% is not installed; cannot create cache directory: "%IMPECCABLE_HOME%\bin\%version%" 1>&2
-goto setup_failed
-
-:cache_write_failed
-echo impeccable: engine %version% is not installed; cannot write to cache directory: "%IMPECCABLE_HOME%\bin\%version%" 1>&2
-goto setup_failed
-
-:curl_missing
-echo impeccable: cannot download engine %version%; curl.exe is unavailable. 1>&2
-goto setup_failed
-
-:download_failed
-del "%cached%.part" >nul 2>nul
-echo impeccable: could not download engine %version% from %url%; check network access and the release URL. 1>&2
-
-:setup_failed
-echo Engine %version% setup needs network access and write permission to "%IMPECCABLE_HOME%\bin\%version%". 1>&2
-echo Run this launcher ("%~f0") with engine-probe in a terminal that has those permissions, then retry the original command. 1>&2
-echo Alternatively, set IMPECCABLE_HOME to a writable cache location, or IMPECCABLE_BIN to a preinstalled engine binary. 1>&2
-exit /b 127
-
-:fail
-del "%cached%.part" >nul 2>nul
-echo impeccable: no engine binary found (looked in %bin%, %cached%, PATH). 1>&2
-echo Download impeccable-windows-%arch%.exe from https://github.com/pbakaus/impeccable/releases (tag engine-v%version%) and save it as %cached%, or set IMPECCABLE_BIN to a preinstalled engine binary. Docs: https://impeccable.style 1>&2
-exit /b 127
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%~dp0impeccable.ps1" %*
+exit /b %errorlevel%

package/assets/skills/ui-design/scripts/impeccable.ps1

@@ -0,0 +1,93 @@
+$ErrorActionPreference = 'Stop'
+$engineArgs = $args
+$staging = $null
+
+function Refuse([string] $message) {
+    throw "engine integrity: $message; reinstall exonous or set IMPECCABLE_BIN to an explicitly trusted engine."
+}
+function Verify([string] $file, [string] $expected) {
+    if (-not (Test-Path -LiteralPath $file -PathType Leaf)) { Refuse "not a regular file: $file" }
+    $actual = (Get-FileHash -LiteralPath $file -Algorithm SHA256).Hash.ToLowerInvariant()
+    if ($actual -cne $expected) { Refuse "checksum mismatch: $file" }
+}
+try {
+    if (-not $env:IMPECCABLE_SKILL_DIR) { $env:IMPECCABLE_SKILL_DIR = Split-Path $PSScriptRoot -Parent }
+    if (-not $env:IMPECCABLE_SELF) { $env:IMPECCABLE_SELF = Join-Path $PSScriptRoot 'impeccable.cmd' }
+    if (Test-Path Env:IMPECCABLE_BIN) {
+        if (-not $env:IMPECCABLE_BIN -or -not (Test-Path -LiteralPath $env:IMPECCABLE_BIN -PathType Leaf)) { Refuse 'invalid IMPECCABLE_BIN override' }
+        & $env:IMPECCABLE_BIN @engineArgs
+        exit $LASTEXITCODE
+    }
+    $version = (Get-Content -LiteralPath (Join-Path $PSScriptRoot 'VERSION') -Raw).Replace("`r`n", "`n")
+    if ($version.EndsWith("`n")) { $version = $version.Substring(0, $version.Length - 1) }
+    if ($version -cne '0.1.5') { Refuse 'VERSION mismatch' }
+    $lines = @(Get-Content -LiteralPath (Join-Path $PSScriptRoot 'ENGINE-CHECKSUMS'))
+    if ($lines.Count -lt 2 -or $lines[0] -cne 'version 0.1.5') { Refuse 'manifest version missing or mismatched' }
+    $hashes = @{}
+    foreach ($line in $lines[1..($lines.Count - 1)]) {
+        if ($line -cnotmatch '^([a-f0-9]{64})  (impeccable-(?:darwin|linux)-(?:arm64|x64)|impeccable-windows-x64\.exe)$') { Refuse 'invalid manifest entry' }
+        $assetName = $Matches[2]
+        if ($hashes.ContainsKey($assetName)) { Refuse 'duplicate manifest asset' }
+        $hashes[$assetName] = $Matches[1]
+    }
+    $asset = 'impeccable-windows-x64.exe'
+    $expected = $hashes[$asset]
+    if (-not $expected) { Refuse 'manifest missing Windows x64 hash' }
+    $cacheRoot = $env:IMPECCABLE_HOME
+    if (-not $cacheRoot) { $cacheRoot = Join-Path $env:USERPROFILE '.impeccable' }
+    $cached = Join-Path $cacheRoot 'bin\0.1.5\impeccable.exe'
+    $candidates = @(
+        (Join-Path $PSScriptRoot 'bin\windows-x64\impeccable.exe'),
+        (Join-Path $env:USERPROFILE '.impeccable\bin\impeccable.exe'),
+        $cached
+    )
+    foreach ($entry in ($env:PATH -split ';')) {
+        if ($entry) { $candidates += Join-Path $entry 'impeccable.exe' }
+    }
+    foreach ($candidate in $candidates) {
+        if (-not (Test-Path -LiteralPath $candidate)) { continue }
+        Verify $candidate $expected
+        & $candidate @engineArgs
+        exit $LASTEXITCODE
+    }
+    if ($env:IMPECCABLE_LAUNCHER_PROBE) { Refuse 'no authenticated engine installed' }
+    $cacheDir = Split-Path $cached -Parent
+    [IO.Directory]::CreateDirectory($cacheDir) | Out-Null
+    $staging = Join-Path $cacheDir ('.impeccable.' + [Guid]::NewGuid().ToString('N'))
+    $acl = New-Object System.Security.AccessControl.DirectorySecurity
+    $acl.SetAccessRuleProtection($true, $false)
+    $owner = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
+    $acl.SetOwner($owner)
+    $rule = [System.Security.AccessControl.FileSystemAccessRule]::new($owner, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
+    $acl.AddAccessRule($rule)
+    [IO.Directory]::CreateDirectory($staging, $acl) | Out-Null
+    $tmp = Join-Path $staging 'engine'
+    $base = $env:IMPECCABLE_DOWNLOAD_BASE
+    if (-not $base) { $base = 'https://github.com/pbakaus/impeccable/releases/download' }
+    $url = "$base/engine-v$version/$asset"
+    & curl.exe -fsSL --retry 2 -o $tmp $url
+    if ($LASTEXITCODE -ne 0) { Refuse "could not download $url; check network access and cache permissions" }
+    Verify $tmp $expected
+    if ([IO.File]::Exists($cached)) {
+        [IO.File]::Replace($tmp, $cached, $null)
+    } else {
+        try { [IO.File]::Move($tmp, $cached) }
+        catch {
+            if (-not [IO.File]::Exists($cached)) { throw }
+            [IO.File]::Replace($tmp, $cached, $null)
+        }
+    }
+    Verify $cached $expected
+    Remove-Item -LiteralPath $staging
+    $staging = $null
+    & $cached @engineArgs
+    exit $LASTEXITCODE
+} catch {
+    [Console]::Error.WriteLine("impeccable: $($_.Exception.Message); reinstall exonous or set IMPECCABLE_BIN explicitly.")
+    exit 127
+} finally {
+    if ($staging -and (Test-Path -LiteralPath $staging)) {
+        Remove-Item -LiteralPath (Join-Path $staging 'engine') -Force -ErrorAction SilentlyContinue
+        Remove-Item -LiteralPath $staging -Force -ErrorAction SilentlyContinue
+    }
+}

package/assets/skills/ui-design/scripts/ui-design.mjs

@@ -2,6 +2,7 @@
 // ui-design — runs the bundled design engine with exonous defaults: no telemetry, no self-update, rebranded agent-facing output.
 import { spawn, spawnSync } from 'node:child_process';
 import fs from 'node:fs';
+import { createHash } from 'node:crypto';
 import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -46,18 +47,48 @@ export function cmdQuote(value) {
   return `"${text.replace(/(\\+)$/, '$1$1')}"`;
 }
 
-/** The trusted engine binaries impeccable.cmd would run (no probe needed), so arguments skip cmd.exe entirely. */
+function integrityError(message) {
+  return Object.assign(new Error(`engine integrity: ${message}; reinstall exonous or set IMPECCABLE_BIN to an explicitly trusted engine`), { code: 127 });
+}
+
+export function engineManifest(dir) {
+  try {
+    const version = fs.readFileSync(path.join(dir, 'VERSION'), 'utf8').replace(/\r\n/g, '\n').replace(/\n$/, '');
+    const lines = fs.readFileSync(path.join(dir, 'ENGINE-CHECKSUMS'), 'utf8').replace(/\r\n/g, '\n').replace(/\n$/, '').split('\n');
+    if (version !== '0.1.5' || lines.shift() !== `version ${version}`) throw new Error('version mismatch');
+    const hashes = new Map();
+    for (const line of lines) {
+      const match = line.match(/^([a-f0-9]{64})  (impeccable-(?:darwin|linux)-(?:arm64|x64)|impeccable-windows-x64\.exe)$/);
+      if (!match || hashes.has(match[2])) throw new Error('invalid or duplicate asset');
+      hashes.set(match[2], match[1]);
+    }
+    if (!hashes.size) throw new Error('missing assets');
+    return hashes;
+  } catch (error) {
+    throw integrityError(`invalid manifest: ${error.message}`);
+  }
+}
+
 export function windowsEngine(dir, env = process.env) {
-  const arch = /^arm64$/i.test(env.PROCESSOR_ARCHITECTURE ?? '') ? 'arm64' : 'x64';
-  const versionFile = path.join(dir, 'VERSION');
-  const version = fs.existsSync(versionFile) ? fs.readFileSync(versionFile, 'utf8').split(/\r?\n/)[0].trim() : '';
+  if (Object.hasOwn(env, 'IMPECCABLE_BIN')) {
+    if (env.IMPECCABLE_BIN && fs.statSync(env.IMPECCABLE_BIN, { throwIfNoEntry: false })?.isFile()) return env.IMPECCABLE_BIN;
+    throw integrityError('invalid IMPECCABLE_BIN override');
+  }
+  const expected = engineManifest(dir).get('impeccable-windows-x64.exe');
+  if (!expected) throw integrityError('manifest missing Windows x64 hash');
   const cacheRoot = env.IMPECCABLE_HOME || (env.USERPROFILE && path.join(env.USERPROFILE, '.impeccable'));
   const candidates = [
-    env.IMPECCABLE_BIN,
-    path.join(dir, 'bin', `windows-${arch}`, 'impeccable.exe'),
-    version && cacheRoot && path.join(cacheRoot, 'bin', version, 'impeccable.exe'),
+    path.join(dir, 'bin', 'windows-x64', 'impeccable.exe'),
+    env.USERPROFILE && path.join(env.USERPROFILE, '.impeccable', 'bin', 'impeccable.exe'),
+    cacheRoot && path.join(cacheRoot, 'bin', '0.1.5', 'impeccable.exe'),
+    ...(env.PATH || '').split(path.delimiter).filter(Boolean).map((entry) => path.join(entry, 'impeccable.exe')),
   ];
-  return candidates.find((file) => file && fs.existsSync(file)) ?? null;
+  for (const file of candidates.filter(Boolean)) {
+    if (!fs.existsSync(file)) continue;
+    if (!fs.statSync(file).isFile() || createHash('sha256').update(fs.readFileSync(file)).digest('hex') !== expected) throw integrityError(`checksum mismatch: ${file}`);
+    return file;
+  }
+  return null;
 }
 
 export function engineCommand(dir, args, platform = process.platform, env = process.env) {
@@ -101,7 +132,7 @@ export function main(args = process.argv.slice(2), platform = process.platform,
   try {
     run = engineCommand(dir, args, platform);
   } catch (error) {
-    fail(error.message, 2);
+    fail(error.message, error.code === 127 ? 127 : 2);
   }
 
   if (BUFFERED.has(verb)) {

package/assets/skills/ui-motion/SKILL.md

@@ -79,13 +79,15 @@ High-frequency paths, keyboard actions, and data users must read should stay sti
 
 ### Performance
 
-Animate **transform** and **opacity** (plus sanctioned **clip-path** where recipes allow). Avoid width/height/margin/padding/top/left — they trigger layout every frame.
+Prefer **transform** and **opacity** (plus sanctioned **clip-path** where recipes allow). Per-frame changes to width/height/margin/padding/top/left can trigger layout; distinguish those updates from library-managed layout transitions.
 
 - CSS transitions retarget mid-flight; keyframes restart — use transitions for rapid toggles (toasts, stacks).
-- Springs carry velocity through interruption — good for drags.
-- Motion library shorthand `x`/`y`/`scale` runs on the main thread; under load use `transform: "translateX(...)"` for GPU paths.
+- Springs carry velocity through interruption — good for drags. Cancellation or removal must leave intended content visible, focus valid, and state settled without waiting for callbacks from animations that no longer run.
+- Diagnose before optimizing: identify the installed library version, feature used, and target browser. Profile the interaction under representative load before replacing `x`/`y`/`scale` with a full `transform` string; syntax alone proves neither execution thread nor GPU acceleration.
 - Do not drive child transforms via a CSS variable on a parent — set `transform` on the element being moved.
 
+Avoid redundant entrances on both a container and its children. Sequencing must keep controls usable while motion runs.
+
 ### Physicality shortcuts
 
 - Press: `scale(0.97)` on `:active`, ~160ms ease-out.

package/assets/skills/ui-motion/reference/review.md

@@ -16,18 +16,20 @@ Specialized motion review only. Default **flag**; approval is earned.
 4. **Sub-300ms UI** — unless justified (drawer/marketing tiers).
 5. **Origin & physicality** — trigger-anchored origin; no `scale(0)`; modals centered OK.
 6. **Interruptibility** — transitions/springs for rapid/gesture UI; not keyframes that restart.
-7. **GPU props** — transform/opacity; no layout props; Motion shorthands under load → full transform string.
+7. **Measured performance** — prefer transform/opacity; distinguish per-frame layout updates from library-managed layout transitions. Record installed library version, feature, and browser; profile under load before recommending full `transform` over `x`/`y`/`scale`. Neither syntax guarantees GPU acceleration.
 8. **Accessibility** — reduced motion (gentler, not zero); hover behind `(hover: hover) and (pointer: fine)`.
 9. **Asymmetric timing** — slow deliberate user phase, fast system response.
 10. **Cohesion** — motion matches product personality; blur(2px) seam optional on bad crossfades.
 
 ### Escalate immediately
 
-`transition: all`; `scale(0)`; ease-in on UI; animation on keyboard/high-frequency; UI >300ms unjustified; center origin on anchored popover; keyframes on toasts/toggles; layout animation; Motion x/y on busy pages; parent CSS var driving child transform; missing reduced-motion or hover gate; symmetric press/release on hold flows; group entrance without 30–80ms stagger.
+`transition: all`; `scale(0)`; ease-in on UI; animation on keyboard/high-frequency; UI >300ms unjustified; center origin on anchored popover; keyframes on toasts/toggles; unmeasured per-frame layout updates; parent CSS var driving child transform; missing reduced-motion or hover gate; symmetric press/release on hold flows; redundant container/child entrances; sequencing that blocks input; cancellation that strands content, focus, or final state.
 
 ### Fix preference order
 
-1. Delete animation → 2. Reduce → 3. Fix easing → 4. Fix origin/physicality → 5. Interruptible mechanism → 6. GPU path → 7. Asymmetric timing → 8. Polish (stagger, blur, `@starting-style`, spring) → 9. A11y & cohesion.
+Diagnose the cause before optimizing; validate performance findings under representative load.
+
+1. Delete animation → 2. Reduce → 3. Fix easing → 4. Fix origin/physicality → 5. Interruptible mechanism → 6. Measured rendering improvement → 7. Asymmetric timing → 8. Polish (stagger, blur, `@starting-style`, spring) → 9. A11y & cohesion.
 
 ### Required output
 
@@ -38,7 +40,7 @@ Specialized motion review only. Default **flag**; approval is earned.
 
 **Verdict tiers:** feel-breaking → simplifications → performance → interruptibility → origin/cohesion → a11y.
 
-Close with **Block** (any feel-breaking, keyboard motion, scale(0), ease-in, easy GPU fix missed) or **Approve**.
+Close with **Block** (any feel-breaking, keyboard motion, scale(0), ease-in, confirmed performance defect left unresolved) or **Approve**.
 
 Cite `file:line`. Values from reference tables below — never approximate.
 
@@ -72,11 +74,11 @@ No `scale(0)` — use 0.9–0.97 + opacity. Popovers: `transform-origin: var(--t
 
 ### 4. Interruptibility
 
-Transitions vs keyframes; `@starting-style` or mount flag; springs for gestures `{ type: "spring", duration: 0.5, bounce: 0.2 }` bounce 0.1–0.3; velocity dismiss > ~0.11; rubber-band not wall; asymmetric hold/release.
+Transitions vs keyframes; `@starting-style` or mount flag; springs for gestures `{ type: "spring", duration: 0.5, bounce: 0.2 }` bounce 0.1–0.3; velocity dismiss > ~0.11; rubber-band not wall; asymmetric hold/release. Cancel or remove motion without losing intended visible content, valid focus, or final state; no waiting for callbacks that removal eliminates.
 
 ### 5. Performance
 
-transform/opacity; no `transition: all`; no parent `--var` driving child transform; Motion → transform string; CSS/WAAPI for predetermined under load; blur <20px.
+Prefer transform/opacity; no `transition: all`; no parent `--var` driving child transform; blur <20px. Check installed library version, feature, and browser; separate layout transitions from per-frame updates and profile under representative load before changing `x`/`y`/`scale` to full `transform`. Record evidence rather than assuming thread or GPU behavior.
 
 ### 6. Accessibility
 
@@ -84,7 +86,7 @@ Reduced motion + hover gating (snippets in `SKILL.md`).
 
 ### 7. Cohesion & tokens
 
-Personality match; consolidate duplicate beziers; stagger 30–80ms; crossfade blur mask.
+Personality match; consolidate duplicate beziers; decorative stagger 30–80ms without blocking interaction; crossfade blur mask. Avoid simultaneous redundant entrances on containers and their children.
 
 ### 8. Missed opportunities
 

package/assets/skills/ui-motion/reference/web.md

@@ -27,7 +27,7 @@ Same frequency and purpose tables as `SKILL.md`. Keyboard-initiated → stop wit
 | Class/attribute toggles | CSS transition |
 | Mount entry, no JS | `@starting-style` |
 | Predetermined motion under load | CSS `@keyframes` / animation |
-| JS control, CSS perf | WAAPI `element.animate()` |
+| JS control over animation timing | WAAPI `element.animate()` |
 | Springs, layout, exit, gestures | Motion (`motion.dev`) |
 
 ### 4. Properties
@@ -36,7 +36,7 @@ Same frequency and purpose tables as `SKILL.md`. Keyboard-initiated → stop wit
 - No `scale(0)` entrances.
 - Trigger-anchored surfaces: `transform-origin: var(--transform-origin)`.
 - `translateY(100%)` = one element height — prefer over px.
-- Motion: full `transform` string, not `x`/`y` shorthands under load.
+- Before changing Motion `x`/`y`/`scale` to a full `transform` string, identify the installed version, feature, and browser; profile under representative load. Separate library-managed layout transitions from per-frame layout updates. Neither notation guarantees a compositor or GPU path.
 
 ### 5. Easing, duration, springs
 
@@ -53,7 +53,9 @@ Bounce 0.1–0.3; reserve visible bounce for dismiss/playful cases.
 
 ### 6. Interruption & exit
 
-Transitions (or springs) for rapid fire; symmetric enter/exit paths for dismiss surfaces; slow deliberate press, fast release (hold-to-confirm pattern).
+Diagnose the failing interaction before tuning timing or changing tools. Use transitions (or springs) for rapid fire; symmetric enter/exit paths for dismiss surfaces; slow deliberate press, fast release (hold-to-confirm pattern).
+
+When cancelling or removing motion, preserve intended visible content, focus, and final application state. Complete state changes directly; do not await an eliminated animation callback. Avoid redundant container/child entrances and keep controls interactive throughout sequencing.
 
 ### 7. A11y
 
@@ -67,7 +69,7 @@ Transitions (or springs) for rapid fire; symmetric enter/exit paths for dismiss
 | `scale(0)` enter | `scale(0.95)` + opacity |
 | `ease-in` on UI | ease-out + strong bezier |
 | Keyframes on toasts/toggles | Transitions |
-| Motion x/y under load | `transform` string |
+| Unmeasured shorthand replacement | Profile the installed version, feature, and browser under load |
 | Ungated hover | fine-pointer media query |
 
 ## Recipes

package/assets/techne/scripts/hooks/config-guard.js

@@ -21,7 +21,7 @@ const PATTERNS = [
   // eslint.config.mjs, prettier.config.base.cjs, stylelint.config.shared.ts, …
   /^(eslint|prettier|stylelint|commitlint|oxlint)\.config(\.[\w-]+)*\.(js|mjs|cjs|ts|mts|cts)$/,
   // .eslintrc.json, .prettierrc.shared.yml, .stylelintrc.base.cjs, .markdownlint.jsonc, …
-  /^\.(eslintrc|prettierrc|stylelintrc|markdownlintrc|markdownlint|markdownlint-cli2)(\.[\w-]+)*\.(js|mjs|cjs|ts|json|jsonc|yml|yaml|toml)$/,
+  /^\.(eslintrc|prettierrc|stylelintrc|markdownlintrc|markdownlint|markdownlint-cli2)(\.[\w-]+)*\.(js|mjs|cjs|ts|mts|cts|json|jsonc|json5|yml|yaml|toml)$/,
 ];
 
 function isGuarded(file) {
@@ -33,18 +33,22 @@ module.exports = function configGuard(payload, { truncated }) {
   if (process.env.EXONOUS_ALLOW_CONFIG_EDITS === '1') return null;
   if (truncated) return { block: 'Hook payload too large to inspect; refusing the edit. Make a smaller edit.' };
   const input = payload?.tool_input || {};
-  const file = input.file_path || input.path;
-  if (typeof file !== 'string' || !isGuarded(file)) return null;
+  const destinations = [input, ...(Array.isArray(input.edits) ? input.edits : [])];
+  for (const edit of destinations) {
+    const file = edit?.file_path || edit?.path || input.file_path || input.path;
+    if (typeof file !== 'string' || !isGuarded(file)) continue;
 
-  const absolute = path.resolve(payload.cwd || process.cwd(), file);
-  try {
-    fs.lstatSync(absolute);
-  } catch (err) {
-    if (err.code === 'ENOENT') return null;
+    const absolute = path.resolve(payload.cwd || process.cwd(), file);
+    try {
+      fs.lstatSync(absolute);
+    } catch (err) {
+      if (err.code === 'ENOENT') continue;
+    }
+    return {
+      block: `${path.basename(file)} is a lint/format config. Fix the code so it satisfies the rules instead of weakening them. If the user asked for this config change, they can allow it with EXONOUS_ALLOW_CONFIG_EDITS=1.`,
+    };
   }
-  return {
-    block: `${path.basename(file)} is a lint/format config. Fix the code so it satisfies the rules instead of weakening them. If the user asked for this config change, they can allow it with EXONOUS_ALLOW_CONFIG_EDITS=1.`,
-  };
+  return null;
 };
 
 module.exports.isGuarded = isGuarded;

package/assets/techne/scripts/hooks/stop-checks.js

@@ -103,7 +103,11 @@ function typecheck(files, cwd, run, report) {
     if (!tsc) continue;
     const res = run(tsc, ['--noEmit', '--pretty', 'false', '-p', project], project);
     if (res.skipped || res.status === 0) continue;
-    const relevant = res.output.split('\n').filter((line) => group.some((f) => line.includes(path.relative(project, f))));
+    const edited = new Set(group.map((file) => path.resolve(file)));
+    const relevant = res.output.split('\n').filter((line) => {
+      const diagnostic = line.match(/^(.+)\(\d+,\d+\):/);
+      return diagnostic && edited.has(path.resolve(project, diagnostic[1].replace(/[\\/]/g, path.sep)));
+    });
     if (relevant.length) report(`type errors in edited files:\n${relevant.slice(0, 30).join('\n')}`);
   }
 }

package/assets/techne/skills/go/reference/patterns.md

@@ -57,7 +57,7 @@ Avoid sending on unbuffered channels without a receiver; prefer buffer size 1 pl
 | String assembly in loop | `strings.Builder` |
 | Map/set membership hot path | `map[T]struct{}` |
 
-Profile before `sync.Pool`; misuse adds complexity.
+Profile before `sync.Pool`. Copy returned bytes or strings into owned memory before returning the buffer to the pool.
 
 ## Tooling
 

package/assets/techne/skills/quality/reference/verification-loop.md

@@ -7,6 +7,7 @@ Run after a feature chunk, refactor, or before opening a PR. Complements editor
 ### 1 — Build
 
 ```bash
+set -o pipefail
 npm run build 2>&1 | tail -20
 # or pnpm build / bun run build — match the repo
 ```
@@ -17,22 +18,24 @@ npm run build 2>&1 | tail -20
 
 ```bash
 set -o pipefail
-npx --no-install tsc --noEmit 2>&1 | head -30
+npx --no-install tsc --noEmit 2>&1 | sed -n '1,30p'
 # Python: pyright . or mypy per project
 ```
 
-Report error count; fix blocking type errors on touched files at minimum.
+The filter consumes all output; `pipefail` preserves a failing tool status. Report error count; fix blocking type errors on touched files at minimum.
 
 ### 3 — Lint
 
 ```bash
-npm run lint 2>&1 | head -30
+set -o pipefail
+npm run lint 2>&1 | sed -n '1,30p'
 # Python: ruff check .
 ```
 
 ### 4 — Tests + coverage
 
 ```bash
+set -o pipefail
 npm run test -- --coverage 2>&1 | tail -50
 ```
 

package/package.json

@@ -1 +1 @@
-{"name":"exonous","version":"2.10.4","description":"The mind outside your head for coding agents: enforced workflow, anchored memory and a disciplined agent roster for Claude Code and Cursor.","repository":"github:zaqueu-1/exonous","gitHead":"2d79f67602b31dd6886a58c78f9c3e223e843ea9","bin":{"exonous":"bin/native.cjs"},"engines":{"node":">=18.0.0"}}
+{"name":"exonous","version":"2.10.8","description":"The mind outside your head for coding agents: enforced workflow, anchored memory and a disciplined agent roster for Claude Code and Cursor.","repository":"github:zaqueu-1/exonous","gitHead":"fb3470dcdb28ff9f513895a498d1a7ca7705a37f","bin":{"exonous":"bin/native.cjs"},"engines":{"node":">=18.0.0"}}