plugnz 0.0.22 → 0.0.23

package/dist/plugnz.mjs

@@ -6957,8 +6957,17 @@ var require_public_api = __commonJS(function(exports) {
 });
 
 // src/hooks.ts
-import { existsSync as existsSync15, readFileSync as readFileSync14 } from "node:fs";
+import { lstatSync as lstatSync8, readFileSync as readFileSync14 } from "node:fs";
 import { isAbsolute as isAbsolute7, join as join19, resolve as resolve10 } from "node:path";
+function hookEffectGap(required, supported) {
+  for (const effect of HOOK_EFFECTS) {
+    if (required?.[effect] !== true)
+      continue;
+    if (supported?.[effect] !== true)
+      return { effect, status: supported?.[effect] === false ? "unsupported" : "unverified" };
+  }
+  return null;
+}
 function record(value, label) {
   if (typeof value !== "object" || value === null || Array.isArray(value))
     throw new Error(label + " must be an object");
@@ -6977,8 +6986,9 @@ function text2(value, label, nonblank = true) {
 function validateHookConfig(value) {
   const root = record(value, "Hook configuration");
   keys(root, ["version", "hooks"], "Hook configuration");
-  if (root["version"] !== 1)
-    throw new Error("Hook configuration version must be 1");
+  const version = root["version"];
+  if (version !== 1 && version !== 2)
+    throw new Error("Hook configuration version must be 1 or 2");
   const sourceHooks = record(root["hooks"], "hooks");
   keys(sourceHooks, HOOK_EVENTS, "hooks");
   const hooks = {};
@@ -6991,7 +7001,22 @@ function validateHookConfig(value) {
     hooks[event] = handlers.map((value, index) => {
       const label = event + "[" + index + "]";
       const handler = record(value, label);
-      keys(handler, ["command", "tools", "timeoutMs"], label);
+      keys(handler, version === 1 ? ["command", "tools", "timeoutMs"] : ["command", "tools", "timeoutMs", "requires"], label);
+      let requires;
+      if (version === 2) {
+        const effects = handler["requires"] === undefined ? {} : record(handler["requires"], label + ".requires");
+        keys(effects, HOOK_EFFECTS, label + ".requires");
+        for (const effect of HOOK_EFFECTS) {
+          if (effects[effect] !== undefined && typeof effects[effect] !== "boolean")
+            throw new Error(label + ".requires." + effect + " must be boolean");
+        }
+        requires = { ...effects };
+        if (requires.continue === true && event !== "turn.stop")
+          throw new Error(label + ": continue is only available at turn.stop");
+        if (event === "turn.stop" && requires.context === true !== (requires.continue === true)) {
+          throw new Error(label + ": turn.stop requires context:true and continue:true together");
+        }
+      }
       const command = handler["command"];
       if (!Array.isArray(command) || command.length === 0)
         throw new Error(label + ".command must be a nonempty argv array");
@@ -7009,15 +7034,25 @@ function validateHookConfig(value) {
       if (timeout !== undefined && (typeof timeout !== "number" || !Number.isInteger(timeout) || timeout < 1 || timeout > MAX_HOOK_TIMEOUT_MS)) {
         throw new Error(label + ".timeoutMs must be an integer from 1 to " + MAX_HOOK_TIMEOUT_MS);
       }
-      return { command: argv, ...tools === undefined ? {} : { tools }, ...timeout === undefined ? {} : { timeoutMs: timeout } };
+      return { command: argv, ...tools === undefined ? {} : { tools }, ...timeout === undefined ? {} : { timeoutMs: timeout }, ...requires === undefined ? {} : { requires } };
     });
   }
-  return { version: 1, hooks };
+  return { version, hooks };
 }
 function readHookConfig(pluginRoot) {
   const path = join19(pluginRoot, HOOK_CONFIG_FILE);
-  if (!existsSync15(path))
-    return;
+  let stat;
+  try {
+    stat = lstatSync8(path);
+  } catch (error) {
+    if (error.code === "ENOENT")
+      return;
+    throw error;
+  }
+  if (stat.isSymbolicLink())
+    throw new Error("Hook source symlinks are unsupported: " + path);
+  if (!stat.isFile())
+    throw new Error("Hook manifest must be a regular file: " + path);
   let value;
   try {
     value = JSON.parse(readFileSync14(path, "utf8"));
@@ -7026,9 +7061,10 @@ function readHookConfig(pluginRoot) {
   }
   return validateHookConfig(value);
 }
-var HOOK_EVENTS, HOOK_CONFIG_FILE = "plugnz.hooks.json", DEFAULT_HOOK_TIMEOUT_MS = 1e4, MAX_HOOK_TIMEOUT_MS = 60000;
+var HOOK_EVENTS, HOOK_CONFIG_FILE = "plugnz.hooks.json", DEFAULT_HOOK_TIMEOUT_MS = 1e4, MAX_HOOK_TIMEOUT_MS = 60000, HOOK_EFFECTS;
 var init_hooks = __esm(() => {
   HOOK_EVENTS = ["session.start", "turn.stop", "tool.before", "tool.after"];
+  HOOK_EFFECTS = ["context", "continue"];
 });
 
 // src/hosts/command-hooks.ts
@@ -7111,7 +7147,7 @@ var init_command_hooks = __esm(() => {
 });
 
 // src/hosts/command-hook-manifest.ts
-import { existsSync as existsSync16, mkdirSync, readFileSync as readFileSync15, rmSync, writeFileSync } from "node:fs";
+import { existsSync as existsSync15, mkdirSync, readFileSync as readFileSync15, rmSync, writeFileSync } from "node:fs";
 import { dirname as dirname4, join as join20 } from "node:path";
 function manifest(path) {
   let parsed;
@@ -7134,13 +7170,13 @@ function manifest(path) {
 function prepareCommandHookManifest(stagingRoot, relativeNativePath, removeRoot) {
   const rootPath = join20(stagingRoot, "plugin.json");
   const nativePath = join20(stagingRoot, relativeNativePath);
-  const root = existsSync16(rootPath) ? manifest(rootPath) : undefined;
+  const root = existsSync15(rootPath) ? manifest(rootPath) : undefined;
   if (root) {
     const unsupported = Object.keys(root).find((key) => !IDENTITY_FIELDS.includes(key));
     if (unsupported)
       throw new Error('Hook build cannot project root plugin.json field "' + unsupported + '"; use an explicit native plugin manifest');
   }
-  const native = existsSync16(nativePath) ? manifest(nativePath) : undefined;
+  const native = existsSync15(nativePath) ? manifest(nativePath) : undefined;
   if (!native && !root)
     throw new Error("Hook build requires a plugin identity in plugin.json or " + relativeNativePath);
   if (native) {
@@ -7187,6 +7223,33 @@ var init_claude_code_hooks = __esm(() => {
   hookAdapter = { ...adapter, prepare: prepareHookPlugin };
 });
 
+// src/compatibility.ts
+function requireCompatible(profile, capability) {
+  const status = profile.capabilities[capability];
+  if (status !== "supported")
+    throw new CompatibilityError(profile.id, capability, status, profile.evidence);
+}
+function compatibilityEvidenceId(evidence) {
+  return typeof evidence === "string" && evidence.trim().length > 0 ? evidence : null;
+}
+var CompatibilityError;
+var init_compatibility = __esm(() => {
+  CompatibilityError = class CompatibilityError extends Error {
+    target;
+    capability;
+    status;
+    evidence;
+    constructor(target, capability, status, evidence, diagnostic) {
+      super(diagnostic ?? `target '${target}' is ${status} for ${capability}; evidence: ${evidence}`);
+      this.target = target;
+      this.capability = capability;
+      this.status = status;
+      this.evidence = evidence;
+      this.name = "CompatibilityError";
+    }
+  };
+});
+
 // src/hosts/codex-hooks.ts
 function prepareHookPlugin2(stagingRoot) {
   prepareCommandHookManifest(stagingRoot, ".codex-plugin/plugin.json", true);
@@ -7530,13 +7593,13 @@ var init_zcode_cli_hooks = __esm(() => {
 
 // src/hook-build.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
-import { cpSync, existsSync as existsSync18, lstatSync as lstatSync9, mkdirSync as mkdirSync2, mkdtempSync, readFileSync as readFileSync17, readdirSync as readdirSync10, realpathSync as realpathSync3, renameSync, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { cpSync, existsSync as existsSync17, lstatSync as lstatSync10, mkdirSync as mkdirSync2, mkdtempSync, readFileSync as readFileSync17, readdirSync as readdirSync10, realpathSync as realpathSync3, renameSync, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname6, isAbsolute as isAbsolute8, join as join22, relative as relative4, resolve as resolve11 } from "node:path";
 import { fileURLToPath } from "node:url";
 function hookRuntimeSource() {
   const moduleDir = dirname6(fileURLToPath(import.meta.url));
   const source = join22(moduleDir, "hooks.ts");
-  if (existsSync18(source) && process.versions["bun"]) {
+  if (existsSync17(source) && process.versions["bun"]) {
     if (developmentRuntime !== undefined)
       return developmentRuntime;
     const built = spawnSync3(process.execPath, ["build", source, "--target=node", "--format=esm"], {
@@ -7553,14 +7616,14 @@ function hookRuntimeSource() {
     return output;
   }
   for (const path of [join22(moduleDir, RUNTIME_FILE), join22(moduleDir, "..", "dist", RUNTIME_FILE)]) {
-    if (existsSync18(path))
+    if (existsSync17(path))
       return readFileSync17(path, "utf8");
   }
   throw new Error("Hook runtime is missing from the distribution; rebuild with bun run build");
 }
 function entryExists2(path) {
   try {
-    lstatSync9(path);
+    lstatSync10(path);
     return true;
   } catch (error) {
     if (error.code === "ENOENT")
@@ -7576,7 +7639,7 @@ function artifactPath(root, path) {
   let current = root;
   for (const part of path.split("/").slice(0, -1)) {
     current = join22(current, part);
-    if (entryExists2(current) && (lstatSync9(current).isSymbolicLink() || !lstatSync9(current).isDirectory())) {
+    if (entryExists2(current) && (lstatSync10(current).isSymbolicLink() || !lstatSync10(current).isDirectory())) {
       throw new Error("Generated hook artifact parent is not an owned directory: " + current);
     }
   }
@@ -7584,8 +7647,15 @@ function artifactPath(root, path) {
 }
 function emitHooksToDirectory(adapter, configValue, stagingRoot) {
   const config = validateHookConfig(configValue);
+  for (const event of HOOK_EVENTS) {
+    for (const [index, handler] of (config.hooks[event] ?? []).entries()) {
+      const gap = hookEffectGap(handler.requires, adapter.capabilities[event]);
+      if (gap !== null)
+        throw new CompatibilityError(adapter.id, "hooks", gap.status, "docs/hooks.md", `${adapter.id}: ${event}[${index}] requires ${gap.effect}, but that effect is ${gap.status}`);
+    }
+  }
   const root = resolve11(stagingRoot);
-  if (!existsSync18(root) || lstatSync9(root).isSymbolicLink() || !lstatSync9(root).isDirectory())
+  if (!existsSync17(root) || lstatSync10(root).isSymbolicLink() || !lstatSync10(root).isDirectory())
     throw new Error("Hook staging root must be a directory");
   adapter.prepare?.(root);
   const artifacts = adapter.emit(config);
@@ -7616,7 +7686,7 @@ function copyAuthoredTree(source, destination, top = true) {
       continue;
     const from = join22(source, name);
     const to = join22(destination, name);
-    const stat = lstatSync9(from);
+    const stat = lstatSync10(from);
     if (stat.isSymbolicLink())
       throw new Error("Hook source symlinks are unsupported: " + from);
     if (stat.isDirectory())
@@ -7630,7 +7700,7 @@ function copyAuthoredTree(source, destination, top = true) {
 function prospectivePath(path) {
   const suffix = [];
   let parent = resolve11(path);
-  while (!existsSync18(parent)) {
+  while (!existsSync17(parent)) {
     const next = dirname6(parent);
     if (next === parent)
       throw new Error("Cannot resolve output ancestor: " + path);
@@ -7641,7 +7711,7 @@ function prospectivePath(path) {
 }
 function buildHooks(pluginDir, targets, outputDir) {
   const requestedSource = resolve11(pluginDir);
-  if (!existsSync18(requestedSource) || lstatSync9(requestedSource).isSymbolicLink() || !lstatSync9(requestedSource).isDirectory()) {
+  if (!existsSync17(requestedSource) || lstatSync10(requestedSource).isSymbolicLink() || !lstatSync10(requestedSource).isDirectory()) {
     throw new Error("Hook source must be a directory: " + requestedSource);
   }
   const source = realpathSync3(requestedSource);
@@ -7664,7 +7734,7 @@ function buildHooks(pluginDir, targets, outputDir) {
   const physicalOutput = prospectivePath(output);
   if (physicalOutput === source || physicalOutput.startsWith(source + "/"))
     throw new Error("Hook output must be outside the plugin source");
-  if (entryExists2(output) && (lstatSync9(output).isSymbolicLink() || !lstatSync9(output).isDirectory() || readdirSync10(output).length !== 0)) {
+  if (entryExists2(output) && (lstatSync10(output).isSymbolicLink() || !lstatSync10(output).isDirectory() || readdirSync10(output).length !== 0)) {
     throw new Error("Hook output must be absent or an empty directory: " + output);
   }
   mkdirSync2(dirname6(output), { recursive: true });
@@ -7686,6 +7756,7 @@ function buildHooks(pluginDir, targets, outputDir) {
 var hookAdapters, RUNTIME_FILE = "hook-runtime.mjs", developmentRuntime;
 var init_hook_build = __esm(() => {
   init_hooks();
+  init_compatibility();
   init_claude_code_hooks();
   init_codex_hooks();
   init_omp_hooks();
@@ -7708,6 +7779,7 @@ function runHookCli(args) {
         throw new Error("targets takes no arguments");
       console.log(JSON.stringify({
         version: 1,
+        configVersions: [1, 2],
         targets: hookAdapters.map(({ id, baselineVersion, capabilities }) => ({ id, baselineVersion, capabilities }))
       }, null, 2));
       return 0;
@@ -13085,28 +13157,21 @@ function formatFinding(f) {
 // src/hosts/claude-code-writer.ts
 init_claude_code_hooks();
 
-// src/compatibility.ts
-class CompatibilityError extends Error {
-  target;
-  capability;
-  status;
-  evidence;
-  constructor(target, capability, status, evidence, diagnostic) {
-    super(diagnostic ?? `target '${target}' is ${status} for ${capability}; evidence: ${evidence}`);
-    this.target = target;
-    this.capability = capability;
-    this.status = status;
-    this.evidence = evidence;
-    this.name = "CompatibilityError";
-  }
-}
-function requireCompatible(profile, capability) {
-  const status = profile.capabilities[capability];
-  if (status !== "supported")
-    throw new CompatibilityError(profile.id, capability, status, profile.evidence);
-}
-function compatibilityEvidenceId(evidence) {
-  return typeof evidence === "string" && evidence.trim().length > 0 ? evidence : null;
+// src/capability-evidence.ts
+init_compatibility();
+
+// src/installation-verification.ts
+function installationVerification(report) {
+  return {
+    schemaVersion: 1,
+    operations: report.outcomes.filter((outcome) => outcome.coverage === "desired-pair").map((outcome) => ({
+      operationId: outcome.operationId,
+      compatibility: outcome.reason?.code === "capability.unsupported" ? "unsupported" : outcome.reason?.code === "capability.unverified" ? "unverified" : outcome.result === "succeeded" ? "admitted" : "unknown",
+      registration: report.command.dryRun ? "not-checked" : outcome.result === "succeeded" && outcome.resourceState === "present" && outcome.activationState === "active-conforming" ? "verified" : "unknown",
+      executionApproval: "not-checked",
+      delivery: "not-observed"
+    }))
+  };
 }
 
 // src/error-diagnostic.ts
@@ -13209,7 +13274,7 @@ function parseLifecycleReport(value) {
   if (!isObject2(value)) {
     throw invalid4("lifecycle report must be an object");
   }
-  exactFields3(value, ["schemaVersion", "command", "plan", "outcomes", "summary", "recovery", "adoptions"], "lifecycle report");
+  exactFields3(value, ["schemaVersion", "command", "plan", "outcomes", "summary", "recovery", "adoptions", "verification"], "lifecycle report");
   if (value["schemaVersion"] !== LIFECYCLE_REPORT_SCHEMA_VERSION) {
     throw invalid4("lifecycle report schemaVersion must be 1");
   }
@@ -13321,6 +13386,14 @@ function parseLifecycleReport(value) {
       assertAdoptionRecoveryStatus(receipt, modern);
   }
   assertSummary(summary, outcomes, command["dryRun"], receipts, adoptions);
+  if (value["verification"] !== undefined) {
+    if (commandName !== "add" && commandName !== "update")
+      throw invalid4("installation verification only applies to add/update");
+    const expected = installationVerification(value);
+    if (canonicalAdoptionJson(value["verification"]) !== canonicalAdoptionJson(expected)) {
+      throw contradiction("installation verification contradicts its outcomes or claims unobserved approval/delivery");
+    }
+  }
   return value;
 }
 function matchesAdoptionRecovery(record, receipt) {
@@ -13820,7 +13893,7 @@ function isObject2(value) {
 
 // src/semantic-inventory.ts
 init_hooks();
-import { existsSync as existsSync17, lstatSync as lstatSync8, readFileSync as readFileSync16, readdirSync as readdirSync9 } from "node:fs";
+import { existsSync as existsSync16, lstatSync as lstatSync9, readFileSync as readFileSync16, readdirSync as readdirSync9 } from "node:fs";
 import { dirname as dirname5, join as join21, relative as relative3 } from "node:path";
 var PACKAGE_SEMANTICS = [
   "ordinary-skills",
@@ -13874,7 +13947,14 @@ function inventoryPackageSemantics(plugin) {
       events,
       handlerTypes: ["command"],
       handlerFacets: [],
-      groups: events.map((event) => ({ event, matcher: null, matcherKind: "all", handlerTypes: ["command"], handlerFacets: [] }))
+      groups: portableHooks.version === 1 ? events.map((event) => ({ event, matcher: null, matcherKind: "all", handlerTypes: ["command"], handlerFacets: [] })) : events.flatMap((event) => (portableHooks.hooks[event] ?? []).map((handler) => ({
+        event,
+        matcher: null,
+        matcherKind: "all",
+        handlerTypes: ["command"],
+        handlerFacets: [],
+        requiredEffects: handler.requires ?? {}
+      })))
     });
   }
   const resources = files.filter((path) => (["assets/", "references/", "resources/"].some((root) => path.startsWith(root)) || path.startsWith("skills/") && !path.endsWith("/SKILL.md") || path.startsWith("hooks/") || path.startsWith(".claude/hooks/")) && !sidecars.has(path) && !hookInventory.configPaths.has(path));
@@ -14011,7 +14091,7 @@ function inventorySkillPolicy(root, skill) {
     }
   }
   const sidecar = `${dirname5(skill)}/agents/openai.yaml`;
-  if (existsSync17(join21(root, sidecar))) {
+  if (existsSync16(join21(root, sidecar))) {
     const parsed = parseYamlObject(readFileSync16(join21(root, sidecar), "utf8"), `Codex invocation sidecar ${sidecar}`);
     const policy = parsed["policy"];
     if (policy !== undefined) {
@@ -14095,7 +14175,7 @@ function readSemanticManifests(root) {
     ".plugin/plugin.json",
     ".claude-plugin/plugin.json",
     ".codex-plugin/plugin.json"
-  ].filter((path) => existsSync17(join21(root, path))).map((path) => ({
+  ].filter((path) => existsSync16(join21(root, path))).map((path) => ({
     ...parseJsonObject(join21(root, path), `plugin manifest ${path}`),
     path
   }));
@@ -14183,13 +14263,13 @@ function declaredHookPath(root, declaration) {
     invalid5(`declared hook path must be a canonical file inside the plugin root: ${declaration}`);
   }
   const absolute = join21(root, path);
-  if (!existsSync17(absolute))
+  if (!existsSync16(absolute))
     invalid5(`declared hook configuration does not exist: ${declaration}`);
-  const stat = lstatSync8(absolute);
+  const stat = lstatSync9(absolute);
   if (stat.isDirectory()) {
     const document = `${path}/hooks.json`;
     const documentPath = join21(root, document);
-    if (!existsSync17(documentPath) || !lstatSync8(documentPath).isFile()) {
+    if (!existsSync16(documentPath) || !lstatSync9(documentPath).isFile()) {
       invalid5(`declared hook directory must contain hooks.json: ${declaration}`);
     }
     return { path: document, directory: true };
@@ -14301,7 +14381,7 @@ function walkFiles(root) {
       if (entry === ".git" || entry === "node_modules" || entry === ".plgnz-install.json")
         continue;
       const path = join21(dir, entry);
-      const stat = lstatSync8(path);
+      const stat = lstatSync9(path);
       if (stat.isSymbolicLink())
         invalid5(`package semantic inventory refuses symlink: ${portable(relative3(root, path))}`);
       if (stat.isDirectory())
@@ -14324,7 +14404,7 @@ var COMPONENT_ROOT_SPECS = [
 var UNSUPPORTED_COMPONENT_ROOTS = [".codex/commands", ".codex/agents"];
 function inventoryComponentRoots(root) {
   for (const unsupported of UNSUPPORTED_COMPONENT_ROOTS) {
-    if (existsSync17(join21(root, unsupported)))
+    if (existsSync16(join21(root, unsupported)))
       invalid5(`unsupported component root: ${unsupported}`);
   }
   const definitions = [];
@@ -14332,9 +14412,9 @@ function inventoryComponentRoots(root) {
   const permissionPaths = new Set;
   for (const spec of COMPONENT_ROOT_SPECS) {
     const directory = join21(root, spec.root);
-    if (!existsSync17(directory))
+    if (!existsSync16(directory))
       continue;
-    const rootStat = lstatSync8(directory);
+    const rootStat = lstatSync9(directory);
     if (!rootStat.isDirectory())
       invalid5(`component root must be a directory: ${spec.root}`);
     const entries = readdirSync9(directory).sort();
@@ -14344,7 +14424,7 @@ function inventoryComponentRoots(root) {
     for (const entry of entries) {
       const absolute = join21(directory, entry);
       const path = `${spec.root}/${entry}`;
-      const stat = lstatSync8(absolute);
+      const stat = lstatSync9(absolute);
       if (!stat.isFile())
         invalid5(`component root entries must be regular files: ${path}`);
       const suffix = Object.keys(spec.dialects).find((candidate) => entry.endsWith(candidate));
@@ -14474,6 +14554,8 @@ var PERMISSION_FIELDS = [
 ];
 
 // src/capability-evidence.ts
+init_hooks();
+
 class PackageCapabilityError extends CompatibilityError {
   gaps;
   constructor(target, admission) {
@@ -14704,6 +14786,9 @@ function hookDeclarationProblem(declaration, selectedManifest, policy) {
     const unsupportedFacet = group.handlerFacets.find((facet) => policy.unsupportedHandlerFacets.includes(facet));
     if (unsupportedFacet !== undefined)
       return unsupportedHookProblem(hookHandlerFacetProblem(unsupportedFacet));
+    const gap = hookEffectGap(group.requiredEffects, policy.supportedEffects?.[group.event]);
+    if (gap !== null)
+      return { status: gap.status, diagnostic: `event '${group.event}' requires ${gap.effect}, but that effect is ${gap.status}` };
   }
   return null;
 }
@@ -14737,7 +14822,16 @@ function normalizeHookPolicy(input) {
   const matcherlessEvents = uniqueStrings(input.matcherlessEvents, "matcherless hook event").sort();
   const supportedMatcherKinds = uniqueStrings(input.supportedMatcherKinds, "hook matcher kind").sort();
   const unsupportedHandlerFacets = uniqueStrings(input.unsupportedHandlerFacets, "unsupported hook handler facet").sort();
+  let supportedEffects;
+  if (input.supportedEffects !== undefined) {
+    supportedEffects = Object.freeze(Object.fromEntries(Object.entries(input.supportedEffects).sort(([a], [b]) => a.localeCompare(b)).map(([event, effects]) => {
+      if (!supportedEvents.includes(event) || effects === null || typeof effects !== "object" || Array.isArray(effects) || Object.keys(effects).some((key) => !HOOK_EFFECTS.includes(key)) || Object.values(effects).some((value) => typeof value !== "boolean"))
+        throw new Error("Invalid hook effect evidence for " + event);
+      return [event, Object.freeze(Object.fromEntries(HOOK_EFFECTS.filter((effect) => effects[effect] !== undefined).map((effect) => [effect, effects[effect]])))];
+    })));
+  }
   return Object.freeze({
+    ...supportedEffects === undefined ? {} : { supportedEffects },
     manifestPrecedence: Object.freeze(manifestPrecedence),
     supportedForms: Object.freeze(supportedForms),
     supportedEvents: Object.freeze(supportedEvents),
@@ -14788,6 +14882,7 @@ function portableHookProfile(adapter, route, operations) {
       supported.has(semantic) ? "supported" : "unsupported"
     ])),
     hookPolicy: {
+      supportedEffects: Object.fromEntries(HOOK_EVENTS.map((event) => [event, { context: adapter.capabilities[event].context, continue: adapter.capabilities[event].continue }])),
       manifestPrecedence: ["plugin.json", ".plugin/plugin.json", ".claude-plugin/plugin.json", ".codex-plugin/plugin.json", ".zcode-plugin/plugin.json"],
       supportedForms: ["portable-hooks"],
       supportedEvents: HOOK_EVENTS,
@@ -14803,7 +14898,7 @@ function portableHookProfile(adapter, route, operations) {
 // src/hook-install.ts
 init_hook_build();
 init_hooks();
-import { cpSync as cpSync2, existsSync as existsSync19, mkdirSync as mkdirSync3, mkdtempSync as mkdtempSync2, readFileSync as readFileSync18, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync18, mkdirSync as mkdirSync3, mkdtempSync as mkdtempSync2, readFileSync as readFileSync18, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { join as join23 } from "node:path";
 import { tmpdir } from "node:os";
 function preflightPortableHooks(adapter, source) {
@@ -14820,9 +14915,9 @@ function compilePortableHooksInStage(adapter, stage, options = {}) {
   const config = readHookConfig(stage);
   if (config === undefined)
     return false;
-  if (options.retainCanonicalIdentity && existsSync19(join23(stage, "plugin.json"))) {
+  if (options.retainCanonicalIdentity && existsSync18(join23(stage, "plugin.json"))) {
     const identity = join23(stage, ".plugin", "plugin.json");
-    if (!existsSync19(identity)) {
+    if (!existsSync18(identity)) {
       mkdirSync3(join23(stage, ".plugin"), { recursive: true });
       cpSync2(join23(stage, "plugin.json"), identity);
     }
@@ -14844,18 +14939,18 @@ function registerProjectedExtension(stage, key, entry) {
 }
 
 // src/hosts/claude-code-writer.ts
-import { cpSync as cpSync5, existsSync as existsSync22, lstatSync as lstatSync12, mkdirSync as mkdirSync6, mkdtempSync as mkdtempSync5, readFileSync as readFileSync21, readdirSync as readdirSync13, renameSync as renameSync3, rmSync as rmSync6, statSync as statSync9, writeFileSync as writeFileSync6 } from "node:fs";
+import { cpSync as cpSync5, existsSync as existsSync21, lstatSync as lstatSync13, mkdirSync as mkdirSync6, mkdtempSync as mkdtempSync5, readFileSync as readFileSync21, readdirSync as readdirSync13, renameSync as renameSync3, rmSync as rmSync6, statSync as statSync9, writeFileSync as writeFileSync6 } from "node:fs";
 import { dirname as dirname8, join as join27, relative as relative7, resolve as resolve15 } from "node:path";
 import { tmpdir as tmpdir2 } from "node:os";
 
 // src/conversion.ts
-import { cpSync as cpSync4, existsSync as existsSync21, lstatSync as lstatSync11, mkdirSync as mkdirSync5, mkdtempSync as mkdtempSync4, readFileSync as readFileSync20, readdirSync as readdirSync12, rmSync as rmSync5, statSync as statSync8, writeFileSync as writeFileSync4 } from "node:fs";
+import { cpSync as cpSync4, existsSync as existsSync20, lstatSync as lstatSync12, mkdirSync as mkdirSync5, mkdtempSync as mkdtempSync4, readFileSync as readFileSync20, readdirSync as readdirSync12, rmSync as rmSync5, statSync as statSync8, writeFileSync as writeFileSync4 } from "node:fs";
 import { basename as basename3, dirname as dirname7, join as join25, resolve as resolve13 } from "node:path";
 import { spawnSync as spawnSync5 } from "node:child_process";
 
 // src/source.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
-import { cpSync as cpSync3, existsSync as existsSync20, lstatSync as lstatSync10, mkdirSync as mkdirSync4, mkdtempSync as mkdtempSync3, readFileSync as readFileSync19, readdirSync as readdirSync11, renameSync as renameSync2, rmSync as rmSync4, statSync as statSync7 } from "node:fs";
+import { cpSync as cpSync3, existsSync as existsSync19, lstatSync as lstatSync11, mkdirSync as mkdirSync4, mkdtempSync as mkdtempSync3, readFileSync as readFileSync19, readdirSync as readdirSync11, renameSync as renameSync2, rmSync as rmSync4, statSync as statSync7 } from "node:fs";
 import { join as join24, basename as basename2, isAbsolute as isAbsolute9, relative as relative5, resolve as resolve12 } from "node:path";
 function resolveSource(source) {
   const parsed = parseSource(source);
@@ -14870,7 +14965,7 @@ function resolveSource(source) {
     targetDir = freezeRemoteSource(parsed.fetchLocator, sha, parsed.binding.locator);
   } else {
     targetDir = sourceUri;
-    if (!existsSync20(targetDir))
+    if (!existsSync19(targetDir))
       throw new Error(`Local source not found: ${targetDir}`);
     targetDir = assertSafeSourceTree(targetDir);
     sourceRoot = targetDir;
@@ -14895,7 +14990,7 @@ function resolveSource(source) {
   const mp1 = join24(targetDir, ".claude-plugin", "marketplace.json");
   const mp2 = join24(targetDir, ".omp-plugin", "marketplace.json");
   const mp3 = join24(targetDir, "marketplace.json");
-  const mpPath = existsSync20(mp1) ? mp1 : existsSync20(mp2) ? mp2 : existsSync20(mp3) ? mp3 : null;
+  const mpPath = existsSync19(mp1) ? mp1 : existsSync19(mp2) ? mp2 : existsSync19(mp3) ? mp3 : null;
   if (mpPath !== null) {
     const data = parseMarketplace(mpPath);
     const marketplaceName = typeof data["name"] === "string" ? data["name"] : "local";
@@ -14912,7 +15007,7 @@ function resolveSource(source) {
       const pDir = resolve12(targetDir, entry["source"]);
       if (!isInside(targetDir, pDir))
         throw new Error(`Marketplace plugin source escapes collection root: ${entry["source"]}`);
-      if (!existsSync20(pDir) || !statSync7(pDir).isDirectory())
+      if (!existsSync19(pDir) || !statSync7(pDir).isDirectory())
         throw new Error(`Marketplace plugin source is not a directory: ${entry["source"]}`);
       plugins.push(pluginFromDir(pDir, marketplaceName, targetDir, sourceRoot));
     }
@@ -14967,7 +15062,7 @@ function freezeLocalSource(source) {
     if (fingerprintTree(verification) !== fingerprint)
       throw new Error(`Local source changed while it was being frozen: ${source}`);
     const target = join24(snapshots, fingerprint);
-    if (existsSync20(target)) {
+    if (existsSync19(target)) {
       if (fingerprintTree(assertSafeSourceTree(target)) !== fingerprint)
         throw new Error(`Cached Source snapshot is corrupt: ${target}`);
       return target;
@@ -14985,7 +15080,7 @@ function copySourceTree(source, destination) {
       continue;
     const from = join24(source, entry);
     const to = join24(destination, entry);
-    const stat = lstatSync10(from);
+    const stat = lstatSync11(from);
     if (stat.isSymbolicLink())
       throw new Error(`Symlink resources are not supported: ${from}`);
     if (stat.isDirectory()) {
@@ -15034,9 +15129,9 @@ function parseSource(source) {
 }
 function canonicalLocalArgument(source) {
   const path = resolve12(source);
-  if (!existsSync20(path))
+  if (!existsSync19(path))
     return path;
-  if (lstatSync10(path).isSymbolicLink())
+  if (lstatSync11(path).isSymbolicLink())
     throw new Error(`Symlink resources are not supported: ${path}`);
   return realpath(path);
 }
@@ -15108,7 +15203,7 @@ function freezeRemoteSource(fetchLocator, revision, displayLocator) {
     rmSync4(join24(candidate, ".git"), { recursive: true, force: true });
     const fingerprint = fingerprintTree(candidate);
     const target = join24(snapshots, fingerprint);
-    if (existsSync20(target)) {
+    if (existsSync19(target)) {
       if (fingerprintTree(assertSafeSourceTree(target)) !== fingerprint)
         throw new Error(`Cached Source snapshot is corrupt: ${target}`);
       return target;
@@ -15167,12 +15262,12 @@ function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isPluginDir(dir) {
-  return manifestPaths(dir).some(existsSync20) || existsSync20(join24(dir, ".mcp.json")) || existsSync20(join24(dir, "mcp.json"));
+  return manifestPaths(dir).some(existsSync19) || existsSync19(join24(dir, ".mcp.json")) || existsSync19(join24(dir, "mcp.json"));
 }
 function readPluginManifest(dir) {
   let selected;
   for (const path of manifestPaths(dir)) {
-    if (!existsSync20(path))
+    if (!existsSync19(path))
       continue;
     const current = parsePluginManifest(path);
     if (selected === undefined) {
@@ -15221,7 +15316,7 @@ var UNSUPPORTED_CLAUDE_COMPONENTS = new Set(["agents", "hooks", "mcpServers", "o
 function projectPluginForCodex(sourceDir, destinationDir) {
   const source = resolve13(sourceDir);
   const destination = resolve13(destinationDir);
-  if (!existsSync21(source) || !statSync8(source).isDirectory())
+  if (!existsSync20(source) || !statSync8(source).isDirectory())
     throw new Error(`plugin source is not a directory: ${source}`);
   if (destination === source || destination.startsWith(`${source}/`))
     throw new Error("destination must not be inside the plugin source");
@@ -15250,7 +15345,7 @@ function projectPluginForCodex(sourceDir, destinationDir) {
 function projectPluginForOmp(sourceDir, destinationDir, options) {
   const source = resolve13(sourceDir);
   const destination = resolve13(destinationDir);
-  if (!existsSync21(source) || !statSync8(source).isDirectory())
+  if (!existsSync20(source) || !statSync8(source).isDirectory())
     throw new Error(`plugin source is not a directory: ${source}`);
   if (destination === source || destination.startsWith(`${source}/`))
     throw new Error("destination must not be inside the plugin source");
@@ -15275,11 +15370,11 @@ function projectPluginForOmp(sourceDir, destinationDir, options) {
     writeOmpCommand(destination, `${options.namespace}:${command.name}`, command.description, command.argumentHint, rewriteOmpCommandReferences(command.body, commandNames, options.namespace), join25(options.activeRoot, ".plgnz", "source", relativeCommandBase(source, command.source)), projected);
   }
   const skills = join25(source, "skills");
-  if (existsSync21(skills)) {
+  if (existsSync20(skills)) {
     for (const entry of readdirSync12(skills).sort()) {
       const skillDir = join25(skills, entry);
       const skillFile = join25(skillDir, "SKILL.md");
-      if (!statSync8(skillDir).isDirectory() || !existsSync21(skillFile))
+      if (!statSync8(skillDir).isDirectory() || !existsSync20(skillFile))
         continue;
       const parsed = parseManualSkill(skillDir);
       if (parsed.userInvocable === false)
@@ -15348,7 +15443,7 @@ function parseManualSkill(directory) {
   if (hint !== undefined && typeof hint !== "string")
     throw new Error(`argument hint must be text: ${path}`);
   const sidecar = join25(directory, "agents", "openai.yaml");
-  const implicit = existsSync21(sidecar) ? readImplicitPolicy(sidecar) : undefined;
+  const implicit = existsSync20(sidecar) ? readImplicitPolicy(sidecar) : undefined;
   if (implicit !== undefined && typeof manual === "boolean" && implicit === manual)
     throw new Error(`conflicting invocation policy for native skill ${name}`);
   return { name, description, ...typeof hint === "string" ? { argumentHint: hint } : {}, ...typeof userInvocable === "boolean" ? { userInvocable } : {}, manual: manual === true || implicit === false, body: match[2] ?? "", metadata };
@@ -15369,7 +15464,7 @@ ${match[2] ?? ""}`);
 function projectPluginForHermes(sourceDir, destinationDir, companionDir) {
   const source = resolve13(sourceDir);
   const destination = resolve13(destinationDir);
-  if (!existsSync21(source) || !statSync8(source).isDirectory())
+  if (!existsSync20(source) || !statSync8(source).isDirectory())
     throw new Error(`plugin source is not a directory: ${source}`);
   if (destination === source || destination.startsWith(`${source}/`))
     throw new Error("destination must not be inside the plugin source");
@@ -15490,11 +15585,11 @@ Use skill_view with the exact qualified name when a listed skill matches the tas
 }
 function projectHermesSkills(stage) {
   const root = join25(stage, "skills");
-  if (!existsSync21(root))
+  if (!existsSync20(root))
     return [];
   const result = readdirSync12(root).sort().flatMap((entry) => {
     const skill = join25(root, entry, "SKILL.md");
-    if (!existsSync21(skill))
+    if (!existsSync20(skill))
       return [];
     const match = readFileSync20(skill, "utf8").match(/^---\r?\n([\s\S]*?)\r?\n---/);
     if (match === null)
@@ -15515,7 +15610,7 @@ function projectHermesSkills(stage) {
 }
 function validateClaudeNativeSemantics(source, commands) {
   const file = join25(source, ".claude-plugin", "plugin.json");
-  if (!existsSync21(file))
+  if (!existsSync20(file))
     return;
   const parsed = JSON.parse(readFileSync20(file, "utf8"));
   if (!isRecord4(parsed))
@@ -15527,7 +15622,7 @@ function validateClaudeNativeSemantics(source, commands) {
   if (parsed["skills"] !== undefined && parsed["skills"] !== "./skills" && parsed["skills"] !== "./skills/") {
     throw new Error(`Claude native skills pointer is unsupported for Codex conversion: ${file}`);
   }
-  if (parsed["skills"] !== undefined && (!existsSync21(join25(source, "skills")) || !statSync8(join25(source, "skills")).isDirectory())) {
+  if (parsed["skills"] !== undefined && (!existsSync20(join25(source, "skills")) || !statSync8(join25(source, "skills")).isDirectory())) {
     throw new Error(`Claude native skills pointer cannot be preserved for Codex conversion: ${file}`);
   }
   if (parsed["commands"] === undefined)
@@ -15550,10 +15645,10 @@ function assertSafeTree(root) {
 }
 function discoverCommands(source) {
   const claude = join25(source, ".claude", "commands");
-  if (existsSync21(claude))
+  if (existsSync20(claude))
     return readCommandDirectory(claude, "markdown");
   const root = join25(source, "commands");
-  if (!existsSync21(root))
+  if (!existsSync20(root))
     return [];
   const markdown = readCommandDirectory(root, "markdown");
   return markdown.length > 0 ? markdown : readCommandDirectory(root, "toml");
@@ -15626,7 +15721,7 @@ function commandFrom(path, description, argumentHint, userInvocable, disableMode
 }
 function normalizeCommandSources(root) {
   const dir = join25(root, "commands");
-  if (!existsSync21(dir))
+  if (!existsSync20(dir))
     return;
   if (!statSync8(dir).isDirectory())
     throw new Error(`commands path is not a directory: ${dir}`);
@@ -15635,7 +15730,7 @@ function normalizeCommandSources(root) {
 function normalizeCommandTree(dir) {
   const stats = readdirSync12(dir).sort().map((name) => {
     const path = join25(dir, name);
-    const stat = lstatSync11(path);
+    const stat = lstatSync12(path);
     if (stat.isSymbolicLink())
       throw new Error(`command source contains symlink: ${path}`);
     return { name, path, isDirectory: stat.isDirectory(), isFile: stat.isFile() };
@@ -15673,7 +15768,7 @@ ${body}` };
 function projectPluginForPi(sourceDir, destinationDir, namespace) {
   const source = resolve13(sourceDir);
   const destination = resolve13(destinationDir);
-  if (!existsSync21(source) || !statSync8(source).isDirectory())
+  if (!existsSync20(source) || !statSync8(source).isDirectory())
     throw new Error(`plugin source is not a directory: ${source}`);
   if (destination === source || destination.startsWith(`${source}/`))
     throw new Error("destination must not be inside the plugin source");
@@ -15691,7 +15786,7 @@ function writePiCommandSkill(stage, command, namespace, names) {
   if (command.userInvocable === false)
     throw new Error(`user-invocable: false has no proven Pi skill equivalent: ${command.source}`);
   const skillDir = join25(stage, "skills", command.name);
-  if (existsSync21(skillDir))
+  if (existsSync20(skillDir))
     throw new Error(`collision: command ${command.name} would replace an existing skill`);
   const body = command.body.replace(/\$ARGUMENTS\b/gu, "the text after this /skill invocation").replace(/(^|[^A-Za-z0-9_-])\/([a-z0-9][a-z0-9-]*)(?=\s|$|[.,:;!?])/giu, (whole, prefix, name) => names.has(name) ? `${prefix}/skill:${namespace}-${name}` : whole);
   mkdirSync5(skillDir, { recursive: true });
@@ -15718,7 +15813,7 @@ function validateMetadata(metadata, path) {
 }
 function writeCommandSkill(stage, command, namespace, commandNames) {
   const skillDir = join25(stage, "skills", command.name);
-  if (existsSync21(skillDir))
+  if (existsSync20(skillDir))
     throw new Error(`collision: command ${command.name} would replace an existing skill`);
   const body = command.body.replace(/\$ARGUMENTS\b/gu, "the invocation tail").replace(/(^|[^A-Za-z0-9_-])\/([a-z0-9][a-z0-9-]*)(?=\s|$|[.,:;!?])/giu, (whole, prefix, name) => commandNames.has(name) ? `${prefix}$${namespace}:${name}` : whole);
   const hint = command.argumentHint === undefined ? "" : `argument-hint: ${yamlString(command.argumentHint)}
@@ -15755,7 +15850,7 @@ function hermesSkillUserOnly(skill, metadata) {
   if (user === false)
     throw new Error(`Hermes cannot preserve user-invocable: false: ${skill}`);
   const sidecar = join25(dirname7(skill), "agents", "openai.yaml");
-  const implicit = existsSync21(sidecar) ? readImplicitPolicy(sidecar) : undefined;
+  const implicit = existsSync20(sidecar) ? readImplicitPolicy(sidecar) : undefined;
   if (disable !== undefined && implicit !== undefined && implicit !== !disable)
     throw new Error(`conflicting invocation policy for Hermes skill ${skill}`);
   const userOnly = disable === true || implicit === false;
@@ -15781,14 +15876,14 @@ ${yamlStringify(metadata).trimEnd()}
 }
 function translateNativeSkillPolicies(stage) {
   const skills = join25(stage, "skills");
-  if (!existsSync21(skills))
+  if (!existsSync20(skills))
     return;
   for (const entry of readdirSync12(skills)) {
     const skill = join25(skills, entry);
     if (!statSync8(skill).isDirectory())
       continue;
     const file = join25(skill, "SKILL.md");
-    if (!existsSync21(file))
+    if (!existsSync20(file))
       continue;
     const source = readFileSync20(file, "utf8");
     const match = source.match(/^---\r?\n([\s\S]*?)\r?\n---/);
@@ -15796,7 +15891,7 @@ function translateNativeSkillPolicies(stage) {
     const manual = metadata["disable-model-invocation"] === true;
     const automatic = metadata["disable-model-invocation"] === false;
     const sidecar = join25(skill, "agents", "openai.yaml");
-    if (existsSync21(sidecar)) {
+    if (existsSync20(sidecar)) {
       const policy = readImplicitPolicy(sidecar);
       if (policy !== undefined && (manual && policy !== false || automatic && policy !== true)) {
         throw new Error(`conflicting invocation policy for native skill ${entry}`);
@@ -15824,7 +15919,7 @@ function readImplicitPolicy(path) {
   return policy["allow_implicit_invocation"];
 }
 function writePolicy(path, allowImplicit) {
-  const existing = existsSync21(path) ? readFileSync20(path, "utf8").replace(/\s*$/u, "") : "";
+  const existing = existsSync20(path) ? readFileSync20(path, "utf8").replace(/\s*$/u, "") : "";
   const suffix = `policy:
   allow_implicit_invocation: ${allowImplicit}
 `;
@@ -17658,7 +17753,7 @@ var claudeCodeWriter = {
     const marketplacesFile = join27(pluginsDir(), "known_marketplaces.json");
     const snapshotRoot = resolved.snapshotDir ?? resolved.sourceUri;
     const frozenSource = resolved.snapshot !== undefined;
-    const wrapper = frozenSource || !existsSync22(join27(snapshotRoot, ".claude-plugin", "marketplace.json")) ? join27(pluginsDir(), "marketplaces", `.plgnz-${marketplace}`) : undefined;
+    const wrapper = frozenSource || !existsSync21(join27(snapshotRoot, ".claude-plugin", "marketplace.json")) ? join27(pluginsDir(), "marketplaces", `.plgnz-${marketplace}`) : undefined;
     for (const path of [slot, registryFile, settingsFile, marketplacesFile])
       assertManagedPath(path);
     const registry = readRegistry(registryFile);
@@ -17669,9 +17764,9 @@ var claudeCodeWriter = {
     const owned = ownedRegistryTarget(registry, id, resolved.sourceUri, slot, version);
     const matchedCatalogMember = legacy === undefined && !alreadyOwned && !hasUserRegistryInstall(registry, id) && matchesNativeCatalogMember(marketplaces, marketplace, plugin, resolved);
     const preserveNativeMarketplace = legacy !== undefined || alreadyOwned || matchedCatalogMember;
-    const target = owned ?? (legacy !== undefined && existsSync22(join27(slot, version)) && readOwnership(join27(slot, version)) === null ? join27(slot, `${version}.plgnz`) : join27(slot, version));
+    const target = owned ?? (legacy !== undefined && existsSync21(join27(slot, version)) && readOwnership(join27(slot, version)) === null ? join27(slot, `${version}.plgnz`) : join27(slot, version));
     assertManagedPath(target);
-    if (existsSync22(target))
+    if (existsSync21(target))
       assertNoSymlinks2(target);
     const existing = readOwnership(target);
     assertTargetIsReplaceable(target, existing, id, resolved.sourceUri);
@@ -17742,7 +17837,7 @@ var claudeCodeWriter = {
     }
   },
   async pin(plugin, opts) {
-    if (plugin.path === undefined || !existsSync22(plugin.path))
+    if (plugin.path === undefined || !existsSync21(plugin.path))
       return { changes: [], refusals: [] };
     return pinPluginMcpFiles(plugin.path, mcpCandidates(), opts);
   },
@@ -17752,7 +17847,7 @@ var claudeCodeWriter = {
     for (const path of [registryFile, settingsFile])
       assertManagedPath(path);
     const settings = readSettings(settingsFile);
-    if (!existsSync22(registryFile)) {
+    if (!existsSync21(registryFile)) {
       const enabled = settings["enabledPlugins"];
       if (typeof enabled === "object" && enabled !== null && !Array.isArray(enabled) && enabled[id] === true)
         writeSettings(settingsFile, settingsWithEnabled(settings, id, false));
@@ -17803,7 +17898,7 @@ var claudeCodeWriter = {
       if (readOwnership(copy)?.pluginId === id) {
         rmSync6(copy, { recursive: true, force: true });
         const manifest = join27(path, ".claude-plugin", "marketplace.json");
-        if (existsSync22(manifest)) {
+        if (existsSync21(manifest)) {
           const document = JSON.parse(readFileSync21(manifest, "utf8"));
           if (typeof document === "object" && document !== null && !Array.isArray(document)) {
             const current = document;
@@ -17827,14 +17922,14 @@ function stagePlugin(source, stage, fallbackName, fallbackVersion) {
   compilePortableHooksInStage(hookAdapter, stage);
   const root = join27(stage, "plugin.json");
   const canonical = join27(stage, ".plugin", "plugin.json");
-  const manifest = existsSync22(canonical) ? canonical : existsSync22(root) ? root : undefined;
+  const manifest = existsSync21(canonical) ? canonical : existsSync21(root) ? root : undefined;
   if (manifest === undefined)
     throw new Error("Claude Code stage has no Agent Plugins manifest");
   const canonicalManifest = parseManifest(manifest, "canonical");
   if (canonicalManifest.name !== fallbackName)
     throw new Error(`Claude Code canonical manifest name ${canonicalManifest.name} does not match selected plugin ${fallbackName}`);
   const native = join27(stage, ".claude-plugin", "plugin.json");
-  if (!existsSync22(native)) {
+  if (!existsSync21(native)) {
     mkdirSync6(dirname8(native), { recursive: true });
     writeFileSync6(native, JSON.stringify({ name: canonicalManifest.name, version: canonicalManifest.version ?? fallbackVersion, description: canonicalManifest.description, skills: "./skills/" }));
   }
@@ -17844,7 +17939,7 @@ function stagePlugin(source, stage, fallbackName, fallbackVersion) {
   if (nativeManifest.name !== canonicalManifest.name || canonicalManifest.version !== undefined && nativeManifest.version !== canonicalManifest.version)
     throw new Error("Claude Code native manifest identity does not match the canonical manifest");
   for (const path of [join27(stage, "skills"), join27(stage, "commands"), join27(stage, ".claude", "commands")]) {
-    if (existsSync22(path) && !statSync9(path).isDirectory())
+    if (existsSync21(path) && !statSync9(path).isDirectory())
       throw new Error(`Claude Code stage native content path is not a directory: ${path}`);
   }
   if (fallbackName.length === 0)
@@ -17852,10 +17947,10 @@ function stagePlugin(source, stage, fallbackName, fallbackVersion) {
 }
 function projectRootCommandsToNative(stage) {
   const nativeCommands = join27(stage, ".claude", "commands");
-  if (existsSync22(nativeCommands))
+  if (existsSync21(nativeCommands))
     return;
   const rootCommands = join27(stage, "commands");
-  if (!existsSync22(rootCommands))
+  if (!existsSync21(rootCommands))
     return;
   const entries = readdirSync13(rootCommands).sort();
   const markdown = entries.filter((file) => file.endsWith(".md"));
@@ -17874,7 +17969,7 @@ function projectRootCommandsToNative(stage) {
 }
 function projectNativeCommands(stage, native) {
   const commandsRoot = join27(stage, ".claude", "commands");
-  if (!existsSync22(commandsRoot))
+  if (!existsSync21(commandsRoot))
     return;
   const commands = readdirSync13(commandsRoot).filter((file) => file.endsWith(".md")).sort().map((file) => `./.claude/commands/${file}`);
   if (commands.length === 0)
@@ -17909,7 +18004,7 @@ function parseManifest(file, kind) {
   return { name: manifest["name"], ...typeof manifest["version"] === "string" ? { version: manifest["version"] } : {}, ...typeof manifest["description"] === "string" ? { description: manifest["description"] } : {} };
 }
 function readRegistry(file) {
-  if (!existsSync22(file))
+  if (!existsSync21(file))
     return { version: 2, plugins: {} };
   let value;
   try {
@@ -17925,7 +18020,7 @@ function readRegistry(file) {
   return { version: typeof root["version"] === "number" ? root["version"] : 2, plugins: root["plugins"] };
 }
 function readSettings(file) {
-  if (!existsSync22(file))
+  if (!existsSync21(file))
     return {};
   let value;
   try {
@@ -17941,7 +18036,7 @@ function readSettings(file) {
   return settings;
 }
 function readMarketplaces(file) {
-  if (!existsSync22(file))
+  if (!existsSync21(file))
     return {};
   let value;
   try {
@@ -17972,14 +18067,14 @@ function assertLifecycleMarketplaceEnvelope(version) {
 function marketplacesWithLocalSource(marketplaces, name, sourcePath, sourceIdentity, plugin, forceWrapper) {
   const manifest = join27(sourcePath, ".claude-plugin", "marketplace.json");
   const catalog = validateMarketplaceRegistration(marketplaces, name, sourcePath, sourceIdentity, plugin, forceWrapper);
-  if (forceWrapper || !existsSync22(manifest)) {
+  if (forceWrapper || !existsSync21(manifest)) {
     const marker = join27(catalog, OWNERSHIP);
     const copy = join27(catalog, "plugins", plugin.name);
     rmSync6(copy, { recursive: true, force: true });
     cpSync5(plugin.dir, copy, { recursive: true });
     writeFileSync6(join27(copy, OWNERSHIP), JSON.stringify({ source: sourceIdentity, pluginId: `${plugin.name}@${name}`, fingerprint: plugin.contentFingerprint ?? "" }));
     mkdirSync6(join27(catalog, ".claude-plugin"), { recursive: true });
-    const current = existsSync22(join27(catalog, ".claude-plugin", "marketplace.json")) ? JSON.parse(readFileSync21(join27(catalog, ".claude-plugin", "marketplace.json"), "utf8")) : {};
+    const current = existsSync21(join27(catalog, ".claude-plugin", "marketplace.json")) ? JSON.parse(readFileSync21(join27(catalog, ".claude-plugin", "marketplace.json"), "utf8")) : {};
     const plugins = Array.isArray(current.plugins) ? current.plugins.filter((entry) => !(typeof entry === "object" && entry !== null && entry["name"] === plugin.name)) : [];
     plugins.push({ name: plugin.name, source: `./plugins/${plugin.name}` });
     writeFileSync6(join27(catalog, ".claude-plugin", "marketplace.json"), JSON.stringify({ name, owner: { name: "plgnz" }, plugins }));
@@ -17999,17 +18094,17 @@ function validateMarketplaceRegistration(marketplaces, name, sourcePath, sourceI
   if (!sourcePath.startsWith("/"))
     throw new Error(`Claude Code marketplace registration for remote source ${name} is unverified`);
   const manifest = join27(sourcePath, ".claude-plugin", "marketplace.json");
-  const catalog = !forceWrapper && existsSync22(manifest) ? sourcePath : join27(pluginsDir(), "marketplaces", `.plgnz-${name}`);
-  if (!existsSync22(manifest) && existsSync22(catalog)) {
+  const catalog = !forceWrapper && existsSync21(manifest) ? sourcePath : join27(pluginsDir(), "marketplaces", `.plgnz-${name}`);
+  if (!existsSync21(manifest) && existsSync21(catalog)) {
     assertNoSymlinks2(catalog);
     const wrapper = readOwnership(catalog);
     if (wrapper?.pluginId !== `marketplace@${name}` || wrapper.source !== "plgnz-wrapper")
       throw new Error(`Claude Code marketplace wrapper ${catalog} is foreign; refusing to replace it`);
     const copy = join27(catalog, "plugins", plugin.name);
-    if (existsSync22(copy) && readOwnership(copy)?.source !== sourceIdentity)
+    if (existsSync21(copy) && readOwnership(copy)?.source !== sourceIdentity)
       throw new Error(`Claude Code marketplace wrapper plugin ${copy} is foreign; refusing to replace it`);
   }
-  if (existsSync22(join27(catalog, ".claude-plugin", "marketplace.json"))) {
+  if (existsSync21(join27(catalog, ".claude-plugin", "marketplace.json"))) {
     let document;
     try {
       document = JSON.parse(readFileSync21(join27(catalog, ".claude-plugin", "marketplace.json"), "utf8"));
@@ -18041,7 +18136,7 @@ function restoreMetadata(registryFile, registry, settingsFile, settings, marketp
   }
 }
 function snapshotDirectory(directory) {
-  if (!existsSync22(directory))
+  if (!existsSync21(directory))
     return;
   assertNoSymlinks2(directory);
   const snapshot = mkdtempSync5(join27(tmpdir2(), "plgnz-claude-wrapper-"));
@@ -18053,7 +18148,7 @@ function restoreDirectory(directory, snapshot) {
     return;
   rmSync6(directory, { recursive: true, force: true });
   const previous = snapshot === undefined ? undefined : join27(snapshot, "previous");
-  if (previous !== undefined && existsSync22(previous)) {
+  if (previous !== undefined && existsSync21(previous)) {
     mkdirSync6(dirname8(directory), { recursive: true });
     renameSync3(previous, directory);
   }
@@ -18117,7 +18212,7 @@ function assertNoForeignRegistryEntry(registry, id, target, source, adoptedLegac
     if (typeof row !== "object" || row === null || row["scope"] !== "user")
       continue;
     const path = row["installPath"];
-    if (typeof path !== "string" || path === target || !existsSync22(path))
+    if (typeof path !== "string" || path === target || !existsSync21(path))
       continue;
     if (path === adoptedLegacy)
       continue;
@@ -18135,7 +18230,7 @@ function validateLegacyUserInstall(registry, id, slot, plugin) {
     throw new Error(`claude-code user install ${id} is ambiguous; refusing adoption`);
   const row = users[0];
   const path = row["installPath"];
-  if (typeof path !== "string" || dirname8(path) !== slot || !existsSync22(path))
+  if (typeof path !== "string" || dirname8(path) !== slot || !existsSync21(path))
     throw new Error(`claude-code user install ${id} is outside its native cache slot; refusing adoption`);
   assertNoSymlinks2(path);
   if (readOwnership(path) !== null)
@@ -18153,7 +18248,7 @@ function ownedRegistryTarget(registry, id, source, slot, version) {
   if (users.length !== 1)
     return;
   const path = users[0]["installPath"];
-  if (typeof path !== "string" || dirname8(path) !== slot || path !== join27(slot, `${version}.plgnz`) || !existsSync22(path))
+  if (typeof path !== "string" || dirname8(path) !== slot || path !== join27(slot, `${version}.plgnz`) || !existsSync21(path))
     return;
   const ownership = readOwnership(path);
   return ownership?.pluginId === id && ownership.source === source ? path : undefined;
@@ -18164,7 +18259,7 @@ function hasAdoptedRegistryInstall(registry, id, source, slot) {
   if (users.length !== 1)
     return false;
   const path = users[0]["installPath"];
-  if (typeof path !== "string" || dirname8(path) !== slot || !existsSync22(path))
+  if (typeof path !== "string" || dirname8(path) !== slot || !existsSync21(path))
     return false;
   const ownership = readOwnership(path);
   return ownership?.pluginId === id && ownership.source === source && ownership.adopted === true;
@@ -18188,7 +18283,7 @@ function matchesNativeCatalogMember(marketplaces, name, plugin, resolved) {
   if (!containedPath(resolved.sourceUri, plugin.sourceDir ?? plugin.dir))
     return false;
   const manifest = join27(catalog, ".claude-plugin", "marketplace.json");
-  if (!existsSync22(manifest))
+  if (!existsSync21(manifest))
     return false;
   assertCatalogPath(catalog, manifest);
   let document;
@@ -18212,7 +18307,7 @@ function matchesNativeCatalogMember(marketplaces, name, plugin, resolved) {
   if (!containedPath(catalog, nativeDir) || nativeDir === resolve15(catalog))
     return false;
   assertCatalogPath(catalog, nativeDir);
-  if (!existsSync22(nativeDir) || !lstatSync12(nativeDir).isDirectory())
+  if (!existsSync21(nativeDir) || !lstatSync13(nativeDir).isDirectory())
     return false;
   const stages = mkdtempSync5(join27(tmpdir2(), "plgnz-claude-catalog-proof-"));
   try {
@@ -18239,7 +18334,7 @@ function assertCatalogPath(root, path) {
   for (const part of ["", ...relative7(current, target).split("/").filter(Boolean)]) {
     if (part !== "")
       current = join27(current, part);
-    const stat = lstatSync12(current);
+    const stat = lstatSync13(current);
     if (stat.isSymbolicLink())
       throw new Error(`Claude Code native catalog path contains symlink: ${current}`);
     if (current !== target && !stat.isDirectory())
@@ -18247,7 +18342,7 @@ function assertCatalogPath(root, path) {
   }
 }
 function assertTargetIsReplaceable(target, ownership, id, source) {
-  if (existsSync22(target) && ownership === null)
+  if (existsSync21(target) && ownership === null)
     throw new Error(`claude-code cache slot ${target} is unowned; refusing to replace it`);
   if (ownership !== null && (ownership.pluginId !== id || ownership.source !== source))
     throw new Error(`claude-code cache slot ${target} has a different owned source identity; refusing to replace it`);
@@ -18264,7 +18359,7 @@ function assertManagedPath(path) {
       current = join27(current, part);
     let stat;
     try {
-      stat = lstatSync12(current);
+      stat = lstatSync13(current);
     } catch (error) {
       if (error.code === "ENOENT")
         return;
@@ -18284,7 +18379,7 @@ function cleanupPriorOwnedPaths(registry, id, active, source) {
     if (typeof row !== "object" || row === null)
       continue;
     const path = row["installPath"];
-    if (typeof path !== "string" || path === active || !existsSync22(path))
+    if (typeof path !== "string" || path === active || !existsSync21(path))
       continue;
     const ownership = readOwnership(path);
     if (ownership?.pluginId === id && ownership.source === source)
@@ -18293,7 +18388,7 @@ function cleanupPriorOwnedPaths(registry, id, active, source) {
 }
 function readOwnership(dir) {
   const file = join27(dir, OWNERSHIP);
-  if (!existsSync22(file))
+  if (!existsSync21(file))
     return null;
   try {
     const parsed = JSON.parse(readFileSync21(file, "utf8"));
@@ -18318,7 +18413,7 @@ function readOwnership(dir) {
   }
 }
 function activate(stage, target, slot) {
-  if (!existsSync22(target)) {
+  if (!existsSync21(target)) {
     renameSync3(stage, target);
     return { commit: () => {}, rollback: () => rmSync6(target, { recursive: true, force: true }) };
   }
@@ -18339,13 +18434,13 @@ function moveAside(path, parent = dirname8(path)) {
   const backup = join27(backupRoot, "previous");
   renameSync3(path, backup);
   return { commit: () => rmSync6(backupRoot, { recursive: true, force: true }), rollback: () => {
-    if (existsSync22(backup))
+    if (existsSync21(backup))
       renameSync3(backup, path);
     rmSync6(backupRoot, { recursive: true, force: true });
   } };
 }
 function sameTree(left, right) {
-  if (!existsSync22(right))
+  if (!existsSync21(right))
     return false;
   const listing = (root) => {
     const out = [];
@@ -18373,11 +18468,11 @@ function bytesKey(path) {
   return hash.digest("hex");
 }
 function assertNoSymlinks2(dir) {
-  if (lstatSync12(dir).isSymbolicLink())
+  if (lstatSync13(dir).isSymbolicLink())
     throw new Error(`Claude Code cache contains symlink: ${dir}`);
   for (const entry of readdirSync13(dir)) {
     const path = join27(dir, entry);
-    const stat = lstatSync12(path);
+    const stat = lstatSync13(path);
     if (stat.isSymbolicLink())
       throw new Error(`Claude Code cache contains symlink: ${path}`);
     if (stat.isDirectory())
@@ -18538,7 +18633,7 @@ function claudeCodeLifecycleDefinition(contracts) {
     retire: async (prepared) => {
       retireLifecycleCatalog(prepared.handle.nativeId, prepared.handle.scopeId);
       const installPath = recordedInstallPath(prepared.handle.nativeId);
-      const existed = installPath !== undefined && existsSync22(installPath);
+      const existed = installPath !== undefined && existsSync21(installPath);
       if (installPath !== undefined)
         rmSync6(installPath, { recursive: true, force: true });
       dropUserRow(prepared.handle.nativeId);
@@ -18693,7 +18788,7 @@ function observeClaudeInstallations(target, version) {
     if (typeof recordedPath !== "string")
       continue;
     const installPath = resolve15(recordedPath);
-    if (!existsSync22(installPath))
+    if (!existsSync21(installPath))
       continue;
     const marker = readOwnership(installPath);
     const digest = fingerprintTree(installPath);
@@ -18770,7 +18865,7 @@ function activationIdentity(activation) {
 function claudeReadback(identity, absentRoute, version) {
   assertLifecycleMarketplaceEnvelope(version);
   const installPath = recordedInstallPath(identity.nativeId);
-  const present = installPath !== undefined && existsSync22(installPath);
+  const present = installPath !== undefined && existsSync21(installPath);
   const retention = {
     pluginData: retained(resolve15(join27(pluginsDir(), "plugin-data", identity.nativeId))),
     inactiveMetadata: retained(resolve15(join27(pluginsDir(), "inactive-metadata", identity.nativeId)))
@@ -18804,7 +18899,7 @@ function claudeReadback(identity, absentRoute, version) {
 }
 function installedRoute(installPath) {
   const file = join27(installPath, ".plgnz-lifecycle.json");
-  if (!existsSync22(file))
+  if (!existsSync21(file))
     return "managed";
   try {
     const parsed = JSON.parse(readFileSync21(file, "utf8"));
@@ -18817,7 +18912,7 @@ function installedRoute(installPath) {
 }
 function observedOwnedRoute(installPath) {
   const file = join27(installPath, ".plgnz-lifecycle.json");
-  if (!existsSync22(file))
+  if (!existsSync21(file))
     return;
   const value = JSON.parse(readFileSync21(file, "utf8"));
   if (typeof value !== "object" || value === null || Array.isArray(value))
@@ -18828,7 +18923,7 @@ function observedOwnedRoute(installPath) {
   return route;
 }
 function retained(path) {
-  if (!existsSync22(path))
+  if (!existsSync21(path))
     return { state: "absent", fingerprint: null };
   return { state: "present", fingerprint: fingerprintTree(path) };
 }
@@ -18875,14 +18970,14 @@ function registeredLifecycleCatalogMember(nativeId) {
   if (!isRecord6(entry) || !isRecord6(entry["source"]) || entry["source"]["source"] !== "directory" || typeof entry["source"]["path"] !== "string" || entry["installLocation"] !== entry["source"]["path"])
     return null;
   const root = entry["source"]["path"];
-  if (!root.startsWith("/") || resolve15(root) !== root || !existsSync22(root))
+  if (!root.startsWith("/") || resolve15(root) !== root || !existsSync21(root))
     return null;
   assertCatalogPath(root, join27(root, ".claude-plugin", "marketplace.json"));
   const selected = catalogEntries(lifecycleCatalogDocument(root, market)).filter((item) => isCatalogMember(item, nativeId));
   if (selected.length !== 1 || !isRecord6(selected[0]) || typeof selected[0]["source"] !== "string" || !selected[0]["source"].startsWith("./"))
     return null;
   const member = resolve15(root, selected[0]["source"]);
-  if (!containedPath(root, member) || root === member || !existsSync22(member))
+  if (!containedPath(root, member) || root === member || !existsSync21(member))
     return null;
   assertCatalogPath(root, member);
   assertNoSymlinks2(member);
@@ -18896,7 +18991,7 @@ function matchingForeignLifecycleCatalog(nativeId, scopeId, target, packageRoot,
     return null;
   if (!foreignLifecycleEntryEquivalent(catalog.entry))
     return null;
-  if (!existsSync22(join27(catalog.member, ".claude-plugin", "plugin.json")))
+  if (!existsSync21(join27(catalog.member, ".claude-plugin", "plugin.json")))
     return null;
   const proof = mkdtempSync5(join27(tmpdir2(), "plgnz-claude-native-member-"));
   try {
@@ -18913,7 +19008,7 @@ function matchingForeignLifecycleCatalog(nativeId, scopeId, target, packageRoot,
 }
 function lifecycleCatalogDocument(root, market) {
   const file = join27(root, ".claude-plugin", "marketplace.json");
-  if (!existsSync22(file))
+  if (!existsSync21(file))
     return null;
   const parsed = JSON.parse(readFileSync21(file, "utf8"));
   if (!isRecord6(parsed) || parsed["name"] !== market || !Array.isArray(parsed["plugins"]))
@@ -18961,7 +19056,7 @@ function validateLifecycleCatalog(nativeId, scopeId) {
   assertManagedPath(join27(root, ".claude-plugin", "marketplace.json"));
   assertManagedPath(join27(root, OWNERSHIP));
   assertManagedPath(copy);
-  if (existsSync22(root)) {
+  if (existsSync21(root)) {
     const owner = readOwnership(root);
     if (owner?.source !== "plgnz-wrapper" || owner.pluginId !== `marketplace@${market}`)
       throw new Error(`Claude Code marketplace wrapper ${root} is foreign; refusing to replace it`);
@@ -18970,7 +19065,7 @@ function validateLifecycleCatalog(nativeId, scopeId) {
   const selected = catalogEntries(document).filter((entry) => isCatalogMember(entry, nativeId));
   if (selected.length > 1 || selected.some((entry) => !isRecord6(entry) || entry["source"] !== `./plugins/${nativeId.slice(0, nativeId.indexOf("@"))}`))
     throw new Error(`Claude Code marketplace member ${nativeId} is foreign or ambiguous; refusing to replace it`);
-  if (existsSync22(copy)) {
+  if (existsSync21(copy)) {
     assertNoSymlinks2(copy);
     const owner = readOwnership(copy);
     if (owner?.pluginId !== nativeId || owner.scopeId !== scopeId)
@@ -19016,7 +19111,7 @@ function lifecycleCatalogConforms(nativeId, installPath, target) {
   if (registered !== null && registered.root !== lifecycleCatalogRoot(nativeId)) {
     if (owner?.scopeId === undefined)
       return false;
-    const manifest = existsSync22(join27(installPath, ".plugin", "plugin.json")) ? join27(installPath, ".plugin", "plugin.json") : join27(installPath, "plugin.json");
+    const manifest = existsSync21(join27(installPath, ".plugin", "plugin.json")) ? join27(installPath, ".plugin", "plugin.json") : join27(installPath, "plugin.json");
     return matchingForeignLifecycleCatalog(nativeId, owner.scopeId, target, installPath, parseManifest(manifest, "canonical").version ?? "") !== null;
   }
   const known = readMarketplaces(join27(pluginsDir(), "known_marketplaces.json"))[market];
@@ -19026,7 +19121,7 @@ function lifecycleCatalogConforms(nativeId, installPath, target) {
   if (entries.length !== 1 || catalogEntryFingerprint(entries[0]) !== catalogEntryFingerprint(ownedLifecycleCatalogEntry(nativeId)))
     return false;
   const copy = lifecycleCatalogCopy(nativeId);
-  if (!existsSync22(copy))
+  if (!existsSync21(copy))
     return false;
   assertManagedPath(copy);
   assertNoSymlinks2(copy);
@@ -19035,13 +19130,13 @@ function lifecycleCatalogConforms(nativeId, installPath, target) {
 }
 function lifecycleContentRoots(nativeId, installPath, digest) {
   const copy = registeredLifecycleCatalogMember(nativeId)?.member ?? lifecycleCatalogCopy(nativeId);
-  return [{ label: "plugin", path: installPath, fingerprint: digest }, ...existsSync22(copy) ? [{ label: "catalog-plugin", path: copy, fingerprint: fingerprintTree(copy) }] : [], ...lifecycleCatalogEntryObservation(nativeId)];
+  return [{ label: "plugin", path: installPath, fingerprint: digest }, ...existsSync21(copy) ? [{ label: "catalog-plugin", path: copy, fingerprint: fingerprintTree(copy) }] : [], ...lifecycleCatalogEntryObservation(nativeId)];
 }
 function retireLifecycleCatalog(nativeId, scopeId) {
   validateLifecycleCatalogRetirement(nativeId, scopeId);
   const root = lifecycleCatalogRoot(nativeId);
   const copy = lifecycleCatalogCopy(nativeId);
-  if (!existsSync22(root))
+  if (!existsSync21(root))
     return;
   assertManagedPath(root);
   const market = marketplaceName(nativeId);
@@ -19049,7 +19144,7 @@ function retireLifecycleCatalog(nativeId, scopeId) {
   if (owner?.source !== "plgnz-wrapper" || owner.pluginId !== `marketplace@${market}`)
     return;
   const document = lifecycleCatalogDocument(root, market);
-  if (existsSync22(copy)) {
+  if (existsSync21(copy)) {
     const member = readOwnership(copy);
     if (member?.pluginId !== nativeId || member.scopeId !== scopeId)
       throw new Error(`Claude Code catalog retirement cannot prove ownership: ${copy}`);
@@ -19071,17 +19166,17 @@ function retireLifecycleCatalog(nativeId, scopeId) {
   }
 }
 function emptyOwnedCatalogContainer(root) {
-  if (!existsSync22(root))
+  if (!existsSync21(root))
     return true;
   if (readdirSync13(root).some((name) => ![OWNERSHIP, ".claude-plugin", "plugins"].includes(name)))
     return false;
-  if (existsSync22(join27(root, ".claude-plugin")) && readdirSync13(join27(root, ".claude-plugin")).some((name) => name !== "marketplace.json"))
+  if (existsSync21(join27(root, ".claude-plugin")) && readdirSync13(join27(root, ".claude-plugin")).some((name) => name !== "marketplace.json"))
     return false;
-  return !existsSync22(join27(root, "plugins")) || readdirSync13(join27(root, "plugins")).length === 0;
+  return !existsSync21(join27(root, "plugins")) || readdirSync13(join27(root, "plugins")).length === 0;
 }
 function validateLifecycleCatalogRetirement(nativeId, scopeId) {
   const root = lifecycleCatalogRoot(nativeId);
-  if (!existsSync22(root))
+  if (!existsSync21(root))
     return;
   assertManagedPath(root);
   assertManagedPath(join27(root, OWNERSHIP));
@@ -19098,7 +19193,7 @@ function validateLifecycleCatalogRetirement(nativeId, scopeId) {
   const selected = catalogEntries(lifecycleCatalogDocument(root, marketplaceName(nativeId))).filter((entry) => isCatalogMember(entry, nativeId));
   if (selected.length > 1 || selected.some((entry) => !isRecord6(entry) || entry["source"] !== `./plugins/${nativeId.slice(0, nativeId.indexOf("@"))}`))
     throw new Error(`Claude Code catalog retirement found a foreign or ambiguous member: ${nativeId}`);
-  if (existsSync22(copy)) {
+  if (existsSync21(copy)) {
     assertNoSymlinks2(copy);
     const member = readOwnership(copy);
     if (member?.pluginId !== nativeId || member.scopeId !== scopeId)
@@ -19109,9 +19204,9 @@ function captureLifecycleCatalog(reference, nativeId) {
   const root = lifecycleCatalogRoot(nativeId);
   const market = marketplaceName(nativeId);
   const document = lifecycleCatalogDocument(root, market);
-  writeFileSync6(join27(reference, "catalog.json"), JSON.stringify({ document, selected: catalogEntries(document).filter((entry) => isCatalogMember(entry, nativeId)), marker: existsSync22(join27(root, OWNERSHIP)) ? readFileSync21(join27(root, OWNERSHIP), "utf8") : null }));
+  writeFileSync6(join27(reference, "catalog.json"), JSON.stringify({ document, selected: catalogEntries(document).filter((entry) => isCatalogMember(entry, nativeId)), marker: existsSync21(join27(root, OWNERSHIP)) ? readFileSync21(join27(root, OWNERSHIP), "utf8") : null }));
   const copy = lifecycleCatalogCopy(nativeId);
-  if (existsSync22(copy)) {
+  if (existsSync21(copy)) {
     assertNoSymlinks2(copy);
     cpSync5(copy, join27(reference, "catalog-plugin"), { recursive: true });
   }
@@ -19120,7 +19215,7 @@ function restoreLifecycleCatalog(reference, nativeId, scopeId) {
   const saved = JSON.parse(readFileSync21(join27(reference, "catalog.json"), "utf8"));
   const root = lifecycleCatalogRoot(nativeId);
   assertManagedPath(root);
-  if (existsSync22(root)) {
+  if (existsSync21(root)) {
     assertManagedPath(join27(root, OWNERSHIP));
     const owner = readOwnership(root);
     if (owner?.source !== "plgnz-wrapper" || owner.pluginId !== `marketplace@${marketplaceName(nativeId)}`)
@@ -19132,14 +19227,14 @@ function restoreLifecycleCatalog(reference, nativeId, scopeId) {
   const siblings = catalogEntries(current).filter((entry) => !isCatalogMember(entry, nativeId));
   const copy = lifecycleCatalogCopy(nativeId);
   assertManagedPath(copy);
-  if (existsSync22(copy)) {
+  if (existsSync21(copy)) {
     assertNoSymlinks2(copy);
     const owner = readOwnership(copy);
     if (owner?.pluginId !== nativeId || owner.scopeId !== scopeId)
       throw new Error(`Claude Code rollback refuses a foreign catalog member: ${copy}`);
   }
   rmSync6(copy, { recursive: true, force: true });
-  if (existsSync22(join27(reference, "catalog-plugin"))) {
+  if (existsSync21(join27(reference, "catalog-plugin"))) {
     mkdirSync6(dirname8(copy), { recursive: true });
     cpSync5(join27(reference, "catalog-plugin"), copy, { recursive: true });
   }
@@ -19182,7 +19277,7 @@ function captureRollback(attemptId, operationId, nativeId) {
   writeFileSync6(join27(reference, "known-marketplace.json"), JSON.stringify({ marketplace: marketplace ?? null, entry: knownEntry }));
   captureLifecycleCatalog(reference, nativeId);
   const installPath = recordedInstallPath(nativeId);
-  if (installPath !== undefined && existsSync22(installPath)) {
+  if (installPath !== undefined && existsSync21(installPath)) {
     cpSync5(installPath, join27(reference, "install"), { recursive: true });
     writeFileSync6(join27(reference, "install-path.txt"), installPath);
   }
@@ -19204,7 +19299,7 @@ function mutateInstall(handle, stagingRoot) {
   }
   const beforeCatalog = lifecycleSelectedMutationState(handle.nativeId);
   const installPath = cacheSlot(handle.nativeId, slotVersion(handle.packageVersion, handle.sourceRevision));
-  const before = existsSync22(installPath) ? fingerprintTree(installPath) : null;
+  const before = existsSync21(installPath) ? fingerprintTree(installPath) : null;
   rmSync6(installPath, { recursive: true, force: true });
   mkdirSync6(dirname8(installPath), { recursive: true });
   cpSync5(stagingRoot, installPath, { recursive: true });
@@ -19239,7 +19334,7 @@ function lifecycleSelectedMutationState(nativeId) {
   const member = registeredLifecycleCatalogMember(nativeId)?.member ?? lifecycleCatalogCopy(nativeId);
   return catalogEntryFingerprint({
     catalogEntry: lifecycleCatalogEntryObservation(nativeId),
-    member: existsSync22(member) ? fingerprintTree(member) : null,
+    member: existsSync21(member) ? fingerprintTree(member) : null,
     registration: known[market] ?? null,
     extraRegistration: isRecord6(extra) ? extra[market] ?? null : null,
     installedRows: readRegistry(join27(pluginsDir(), "installed_plugins.json")).plugins[nativeId] ?? null,
@@ -19271,15 +19366,15 @@ function restoreRollback(handle) {
   const registryFile = join27(pluginsDir(), "installed_plugins.json");
   const appliedSlot = cacheSlot(handle.nativeId, slotVersion(handle.packageVersion, handle.sourceRevision));
   const savedPath = join27(reference, "install-path.txt");
-  const previousSlot = existsSync22(savedPath) ? readFileSync21(savedPath, "utf8") : undefined;
-  if (previousSlot !== undefined && resolve15(previousSlot) !== appliedSlot && !existsSync22(appliedSlot)) {
+  const previousSlot = existsSync21(savedPath) ? readFileSync21(savedPath, "utf8") : undefined;
+  if (previousSlot !== undefined && resolve15(previousSlot) !== appliedSlot && !existsSync21(appliedSlot)) {
     throw new Error(`claude-code rollback cannot remove the updated cache slot: ${appliedSlot}`);
   }
   const beforeEntry = JSON.stringify(readRegistry(registryFile).plugins[handle.nativeId] ?? null);
   const beforeEnabled = JSON.stringify(enabledPlugins()[handle.nativeId] ?? null);
-  const beforeMarkets = existsSync22(join27(pluginsDir(), "known_marketplaces.json")) ? readFileSync21(join27(pluginsDir(), "known_marketplaces.json"), "utf8") : "";
-  const beforeApplied = existsSync22(appliedSlot) ? fingerprintTree(appliedSlot) : null;
-  const beforePrevious = previousSlot !== undefined && existsSync22(previousSlot) ? fingerprintTree(previousSlot) : null;
+  const beforeMarkets = existsSync21(join27(pluginsDir(), "known_marketplaces.json")) ? readFileSync21(join27(pluginsDir(), "known_marketplaces.json"), "utf8") : "";
+  const beforeApplied = existsSync21(appliedSlot) ? fingerprintTree(appliedSlot) : null;
+  const beforePrevious = previousSlot !== undefined && existsSync21(previousSlot) ? fingerprintTree(previousSlot) : null;
   restoreLifecycleCatalog(reference, handle.nativeId, handle.scopeId);
   restorePluginSlice(handle.nativeId, reference);
   if (previousSlot !== undefined && resolve15(previousSlot) !== appliedSlot)
@@ -19287,15 +19382,15 @@ function restoreRollback(handle) {
   const installPath = previousSlot ?? recordedInstallPath(handle.nativeId) ?? appliedSlot;
   const backup = join27(reference, "install");
   rmSync6(installPath, { recursive: true, force: true });
-  if (existsSync22(backup)) {
+  if (existsSync21(backup)) {
     mkdirSync6(dirname8(installPath), { recursive: true });
     cpSync5(backup, installPath, { recursive: true });
   }
   const afterEntry = JSON.stringify(readRegistry(registryFile).plugins[handle.nativeId] ?? null);
   const afterEnabled = JSON.stringify(enabledPlugins()[handle.nativeId] ?? null);
-  const afterMarkets = existsSync22(join27(pluginsDir(), "known_marketplaces.json")) ? readFileSync21(join27(pluginsDir(), "known_marketplaces.json"), "utf8") : "";
-  const afterApplied = existsSync22(appliedSlot) ? fingerprintTree(appliedSlot) : null;
-  const afterPrevious = previousSlot !== undefined && existsSync22(previousSlot) ? fingerprintTree(previousSlot) : null;
+  const afterMarkets = existsSync21(join27(pluginsDir(), "known_marketplaces.json")) ? readFileSync21(join27(pluginsDir(), "known_marketplaces.json"), "utf8") : "";
+  const afterApplied = existsSync21(appliedSlot) ? fingerprintTree(appliedSlot) : null;
+  const afterPrevious = previousSlot !== undefined && existsSync21(previousSlot) ? fingerprintTree(previousSlot) : null;
   return {
     receiptId: `claude-rollback-${handle.operationId}`,
     changed: beforeEntry !== afterEntry || beforeEnabled !== afterEnabled || beforeMarkets !== afterMarkets || beforeApplied !== afterApplied || beforePrevious !== afterPrevious
@@ -19343,13 +19438,13 @@ function restoreKnownMarketplace(reference) {
   if (typeof saved.marketplace !== "string")
     return;
   const file = join27(pluginsDir(), "known_marketplaces.json");
-  const hadFile = existsSync22(file);
+  const hadFile = existsSync21(file);
   const current = hadFile ? readMarketplaces(file) : {};
   if (saved.entry === null) {
     if (!hadFile || !Object.hasOwn(current, saved.marketplace))
       return;
     const root = lifecycleCatalogRoot(`rollback@${saved.marketplace}`);
-    if (existsSync22(root) && (catalogEntries(lifecycleCatalogDocument(root, saved.marketplace)).length > 0 || !emptyOwnedCatalogContainer(root)))
+    if (existsSync21(root) && (catalogEntries(lifecycleCatalogDocument(root, saved.marketplace)).length > 0 || !emptyOwnedCatalogContainer(root)))
       return;
     const next = { ...current };
     delete next[saved.marketplace];
@@ -19405,7 +19500,7 @@ function hasForeignMarketplaceSibling(nativeId, marketplace) {
   if (!isRecord6(registration) || !isRecord6(registration["source"]) || registration["source"]["source"] !== "directory" || typeof registration["source"]["path"] !== "string")
     return false;
   const root = registration["source"]["path"];
-  if (!root.startsWith("/") || !existsSync22(root))
+  if (!root.startsWith("/") || !existsSync21(root))
     return false;
   const document = lifecycleCatalogDocument(root, marketplace);
   return catalogEntries(document).some((entry) => {
@@ -19414,14 +19509,14 @@ function hasForeignMarketplaceSibling(nativeId, marketplace) {
     if (!isRecord6(entry) || typeof entry["name"] !== "string" || typeof entry["source"] !== "string" || !entry["source"].startsWith("./"))
       return true;
     const member = resolve15(root, entry["source"]);
-    if (!containedPath(root, member) || member === root || !existsSync22(member))
+    if (!containedPath(root, member) || member === root || !existsSync21(member))
       return true;
     assertCatalogPath(root, member);
     return readOwnership(member)?.pluginId !== `${entry["name"]}@${marketplace}`;
   });
 }
 function plgnzOwnedInstall(id, installPath) {
-  if (typeof installPath !== "string" || !existsSync22(installPath))
+  if (typeof installPath !== "string" || !existsSync21(installPath))
     return false;
   return readOwnership(installPath)?.pluginId === id;
 }
@@ -19451,19 +19546,19 @@ function disableMarketplaceAutoUpdate(nativeId) {
 
 // src/hosts/codex-writer.ts
 init_codex_hooks();
-import { chmodSync, cpSync as cpSync6, existsSync as existsSync23, lstatSync as lstatSync14, mkdirSync as mkdirSync7, mkdtempSync as mkdtempSync6, readFileSync as readFileSync23, readdirSync as readdirSync14, renameSync as renameSync4, rmSync as rmSync7, statSync as statSync10, writeFileSync as writeFileSync7 } from "node:fs";
+import { chmodSync, cpSync as cpSync6, existsSync as existsSync22, lstatSync as lstatSync15, mkdirSync as mkdirSync7, mkdtempSync as mkdtempSync6, readFileSync as readFileSync23, readdirSync as readdirSync14, renameSync as renameSync4, rmSync as rmSync7, statSync as statSync10, writeFileSync as writeFileSync7 } from "node:fs";
 import { dirname as dirname9, join as join29, resolve as resolve16 } from "node:path";
 import { tmpdir as tmpdir3 } from "node:os";
 
 // src/hosts/codex-marketplace-proof.ts
-import { lstatSync as lstatSync13, readFileSync as readFileSync22 } from "node:fs";
+import { lstatSync as lstatSync14, readFileSync as readFileSync22 } from "node:fs";
 import { join as join28 } from "node:path";
 var codexMarketplaceMetadataFile = ".codex-marketplace-install.json";
 function codexMarketplaceSourceFingerprint(checkout, expected) {
   try {
     let stat;
     try {
-      stat = lstatSync13(join28(checkout, codexMarketplaceMetadataFile));
+      stat = lstatSync14(join28(checkout, codexMarketplaceMetadataFile));
     } catch (error) {
       if (error.code === "ENOENT")
         return fingerprintSourceTree(checkout);
@@ -19509,13 +19604,13 @@ var codexWriter = {
         validateStage(stage);
         writeFileSync7(join29(stage, OWNERSHIP2), JSON.stringify({ source: resolved.sourceUri, pluginId: id, fingerprint: plugin.contentFingerprint ?? "" }));
         assertManagedPath2(codexHome(), slot);
-        if (existsSync23(slot)) {
+        if (existsSync22(slot)) {
           assertNoSymlinks3(slot);
           assertNoWinningForeignVersion(slot, version, id, resolved.sourceUri);
           const marker = readOwnership2(targetDir);
           if (marker !== null && (marker.source !== resolved.sourceUri || marker.pluginId !== id))
             throw new Error(`codex cache slot ${targetDir} has a different owned source identity; refusing to replace it`);
-          if (existsSync23(targetDir) && marker === null && !sameTree2(stage, targetDir)) {
+          if (existsSync22(targetDir) && marker === null && !sameTree2(stage, targetDir)) {
             if (!opts.adoptExisting)
               throw new Error(`codex cache slot ${targetDir} is unowned and differs from the staged representation; pass --adopt-existing to take ownership explicitly`);
             validateCachedIdentity(targetDir, plugin.name, version);
@@ -19541,8 +19636,8 @@ var codexWriter = {
       ensureNativeManifest(stage, plugin.name, version);
       validateStage(stage);
       writeFileSync7(join29(stage, OWNERSHIP2), JSON.stringify({ source: resolved.sourceUri, pluginId: id, fingerprint: plugin.contentFingerprint ?? "" }));
-      const identicalUnowned = existsSync23(targetDir) && marker === null && sameTree2(stage, targetDir);
-      if (existsSync23(targetDir) && marker === null && !identicalUnowned) {
+      const identicalUnowned = existsSync22(targetDir) && marker === null && sameTree2(stage, targetDir);
+      if (existsSync22(targetDir) && marker === null && !identicalUnowned) {
         if (!opts?.adoptExisting)
           throw new Error(`codex cache slot ${targetDir} is unowned and differs from the staged representation; pass --adopt-existing to take ownership explicitly`);
         validateCachedIdentity(targetDir, plugin.name, version);
@@ -19579,7 +19674,7 @@ var codexWriter = {
     }
   },
   async pin(plugin, opts) {
-    if (plugin.path === undefined || !existsSync23(plugin.path))
+    if (plugin.path === undefined || !existsSync22(plugin.path))
       return { changes: [], refusals: [] };
     return pinPluginMcpFiles(plugin.path, mcpCandidates2(), opts);
   },
@@ -19590,7 +19685,7 @@ var codexWriter = {
     const owned = [];
     if (at !== -1) {
       const slot = join29(codexHome(), "plugins", "cache", id.slice(at + 1), id.slice(0, at));
-      if (existsSync23(slot)) {
+      if (existsSync22(slot)) {
         assertNoSymlinks3(slot);
         for (const version of readdirSync14(slot)) {
           const candidate = join29(slot, version);
@@ -19601,7 +19696,7 @@ var codexWriter = {
         }
       }
     }
-    if (existsSync23(configPath)) {
+    if (existsSync22(configPath)) {
       const toml = readFileSync23(configPath, "utf8");
       const header = `[plugins."${id}"]`;
       const idx = toml.indexOf(header);
@@ -19623,7 +19718,7 @@ enabled = false
   }
 };
 function enable(configPath, id) {
-  let toml = existsSync23(configPath) ? readFileSync23(configPath, "utf8") : "";
+  let toml = existsSync22(configPath) ? readFileSync23(configPath, "utf8") : "";
   parseConfigToml(toml, configPath);
   let newToml = toml;
   const header = `[plugins."${id}"]`;
@@ -19667,7 +19762,7 @@ function parseConfigToml(text, path) {
   }
 }
 function isEnabled(configPath, id) {
-  if (!existsSync23(configPath))
+  if (!existsSync22(configPath))
     return false;
   const toml = readFileSync23(configPath, "utf8");
   const header = `[plugins."${id}"]`;
@@ -19680,7 +19775,7 @@ function isEnabled(configPath, id) {
   return !/^enabled\s*=\s*false\s*$/mu.test(block);
 }
 function readConfigSnapshot(path) {
-  if (!existsSync23(path))
+  if (!existsSync22(path))
     return { existed: false };
   const read = readFileSync23;
   return { existed: true, bytes: read(path) };
@@ -19701,7 +19796,7 @@ function validVersionSegment(value) {
 }
 function readOwnership2(dir) {
   const file = join29(dir, OWNERSHIP2);
-  if (!existsSync23(file))
+  if (!existsSync22(file))
     return null;
   try {
     const value = JSON.parse(readFileSync23(file, "utf8"));
@@ -19725,12 +19820,12 @@ function validateStage(stage) {
   if (readPluginManifest(stage) === undefined)
     throw new Error("Codex stage has no Agent Plugins manifest");
   const skills = join29(stage, "skills");
-  if (existsSync23(skills) && !statSync10(skills).isDirectory())
+  if (existsSync22(skills) && !statSync10(skills).isDirectory())
     throw new Error("Codex stage skills path is not a directory");
 }
 function validateCachedIdentity(target, expectedName, expectedVersion) {
   const candidates = [join29(target, ".codex-plugin", "plugin.json"), join29(target, "plugin.json"), join29(target, ".plugin", "plugin.json")];
-  const manifest = candidates.find(existsSync23);
+  const manifest = candidates.find(existsSync22);
   if (manifest === undefined)
     throw new Error(`unowned Codex cache slot has no manifest: ${target}`);
   const value = JSON.parse(readFileSync23(manifest, "utf8"));
@@ -19740,7 +19835,7 @@ function validateCachedIdentity(target, expectedName, expectedVersion) {
   if (record["name"] === expectedName && record["version"] === expectedVersion)
     return;
   if (manifest === candidates[0] && record["name"] === expectedName && nativeBuildVariant(expectedVersion, record["version"])) {
-    const canonical = candidates.slice(1).find(existsSync23);
+    const canonical = candidates.slice(1).find(existsSync22);
     if (canonical !== undefined) {
       const canonicalValue = JSON.parse(readFileSync23(canonical, "utf8"));
       if (typeof canonicalValue === "object" && canonicalValue !== null && !Array.isArray(canonicalValue)) {
@@ -19765,7 +19860,7 @@ function ensureNativeManifest(stage, fallbackName, fallbackVersion) {
     throw new Error("Codex stage has no Agent Plugins manifest");
   for (const path of ["plugin.json", ".plugin/plugin.json", ".claude-plugin/plugin.json"]) {
     const file = join29(stage, path);
-    if (existsSync23(file) && JSON.parse(readFileSync23(file, "utf8")).mcpServers !== undefined) {
+    if (existsSync22(file) && JSON.parse(readFileSync23(file, "utf8")).mcpServers !== undefined) {
       throw new Error("Codex inline manifest MCP projection is unverified; use mcp.json or .mcp.json");
     }
   }
@@ -19773,7 +19868,7 @@ function ensureNativeManifest(stage, fallbackName, fallbackVersion) {
   const version = sourceManifest.version ?? fallbackVersion;
   const description = sourceManifest.description ?? `Plugin ${name}`;
   let overlay = {};
-  if (existsSync23(native)) {
+  if (existsSync22(native)) {
     const value = JSON.parse(readFileSync23(native, "utf8"));
     if (typeof value !== "object" || value === null || Array.isArray(value))
       throw new Error("Codex native plugin manifest must be an object");
@@ -19787,10 +19882,10 @@ function ensureNativeManifest(stage, fallbackName, fallbackVersion) {
     }
   }
   const pointer = overlay["mcpServers"];
-  if (pointer !== undefined && (typeof pointer !== "string" || !pointer.startsWith("./") || pointer.includes("\\") || pointer.split("/").includes("..") || !existsSync23(join29(stage, pointer)))) {
+  if (pointer !== undefined && (typeof pointer !== "string" || !pointer.startsWith("./") || pointer.includes("\\") || pointer.split("/").includes("..") || !existsSync22(join29(stage, pointer)))) {
     throw new Error("Codex native MCP pointer must name an existing plugin-local file");
   }
-  const mcpFiles = ["mcp.json", ".mcp.json", ...typeof pointer === "string" ? [pointer] : []].map((path) => join29(stage, path)).filter(existsSync23);
+  const mcpFiles = ["mcp.json", ".mcp.json", ...typeof pointer === "string" ? [pointer] : []].map((path) => join29(stage, path)).filter(existsSync22);
   const declarations = mcpFiles.map((file) => {
     const value = JSON.parse(readFileSync23(file, "utf8"));
     if (value === null || typeof value !== "object" || Array.isArray(value) || !("mcpServers" in value) || value.mcpServers === null || typeof value.mcpServers !== "object" || Array.isArray(value.mcpServers)) {
@@ -19807,7 +19902,7 @@ function ensureNativeManifest(stage, fallbackName, fallbackVersion) {
     version,
     description,
     skills: overlay["skills"] ?? "./skills/",
-    ...overlay["mcpServers"] === undefined && existsSync23(join29(stage, "mcp.json")) && !existsSync23(join29(stage, ".mcp.json")) ? { mcpServers: "./mcp.json" } : {}
+    ...overlay["mcpServers"] === undefined && existsSync22(join29(stage, "mcp.json")) && !existsSync22(join29(stage, ".mcp.json")) ? { mcpServers: "./mcp.json" } : {}
   }));
 }
 function mcpDeclarationIdentity(value) {
@@ -19825,9 +19920,9 @@ function assertManagedPath2(root, target) {
   for (const part of ["", ...suffix.split("/").filter(Boolean)]) {
     if (part !== "")
       current = join29(current, part);
-    if (!existsSync23(current))
+    if (!existsSync22(current))
       continue;
-    const stat = lstatSync14(current);
+    const stat = lstatSync15(current);
     if (stat.isSymbolicLink())
       throw new Error(`Codex managed path component is a symlink: ${current}`);
     if (!stat.isDirectory())
@@ -19836,16 +19931,16 @@ function assertManagedPath2(root, target) {
 }
 function assertManagedConfigPath(root, path) {
   assertManagedPath2(root, dirname9(path));
-  if (!existsSync23(path))
+  if (!existsSync22(path))
     return;
-  const stat = lstatSync14(path);
+  const stat = lstatSync15(path);
   if (stat.isSymbolicLink())
     throw new Error(`Codex managed config is a symlink: ${path}`);
   if (!stat.isFile())
     throw new Error(`Codex managed config is not a file: ${path}`);
 }
 function activate2(stage, target, slot) {
-  if (!existsSync23(target)) {
+  if (!existsSync22(target)) {
     renameSync4(stage, target);
     return { commit: () => {}, rollback: () => rmSync7(target, { recursive: true, force: true }) };
   }
@@ -19920,7 +20015,7 @@ function assertNoSymlinks3(dir) {
   const walk = (current) => {
     for (const entry of readdirSync14(current)) {
       const path = join29(current, entry);
-      const stat = lstatSync14(path);
+      const stat = lstatSync15(path);
       if (stat.isSymbolicLink())
         throw new Error(`Codex managed slot contains symlink: ${path}`);
       if (stat.isDirectory())
@@ -20049,10 +20144,10 @@ function revalidateCodexTarget(handle) {
     for (const root of handle.expected.contentRoots)
       assertRequestedCacheOwnership(root.path, handle.prior.contentRoots);
   }
-  if (existsSync23(join29(bundle, "marketplace.json"))) {
+  if (existsSync22(join29(bundle, "marketplace.json"))) {
     const metadata = JSON.parse(readFileSync23(join29(bundle, "marketplace.json"), "utf8"));
     const checkout = marketplaceCheckout(metadata.marketplace);
-    const actual = existsSync23(checkout) ? fingerprintTree(checkout) : null;
+    const actual = existsSync22(checkout) ? fingerprintTree(checkout) : null;
     if (actual !== metadata.fingerprint)
       throw new Error("Codex marketplace checkout changed after rollback capture");
   }
@@ -20249,13 +20344,13 @@ async function retireCodex(prepared) {
 }
 function restampNativeUpgrade(prepared) {
   const markerPath = join29(prepared.stagingRoot, OWNERSHIP2);
-  if (!existsSync23(markerPath))
+  if (!existsSync22(markerPath))
     return;
   const marker = readFileSync23(markerPath, "utf8");
   const version = pluginVersion(prepared.stagingRoot);
   if (validVersionSegment(version)) {
     const destination = cacheDestination(prepared.handle.nativeId, version);
-    if (existsSync23(destination) && statSync10(destination).isDirectory()) {
+    if (existsSync22(destination) && statSync10(destination).isDirectory()) {
       assertManagedPath2(codexHome(), destination);
       writeFileSync7(join29(destination, OWNERSHIP2), marker);
     }
@@ -20264,7 +20359,7 @@ function restampNativeUpgrade(prepared) {
     if (nativeId === prepared.handle.nativeId)
       continue;
     const path = codex.listInstalled().find((plugin) => plugin.id === nativeId)?.path;
-    if (path === undefined || !existsSync23(path))
+    if (path === undefined || !existsSync22(path))
       continue;
     const existing = readOwnership2(path);
     if (existing?.pluginId === nativeId)
@@ -20283,7 +20378,7 @@ function restampNativeUpgrade(prepared) {
 function priorInstallMarker(prepared, nativeId) {
   const bundle = rollbackBundle(prepared.handle.attemptId, prepared.handle.operationId);
   const manifestPath = join29(bundle, "manifest.json");
-  if (!existsSync23(manifestPath))
+  if (!existsSync22(manifestPath))
     return null;
   const manifest = parseRollbackManifest(readFileSync23(manifestPath, "utf8"));
   const install = manifest.installs.find((item) => item.nativeId === nativeId);
@@ -20320,11 +20415,11 @@ function readCodexInstall(handle) {
 function cleanupCodexStage(reference) {
   releasePriorSourceRepair(reference);
   const stage = resolve16(join29(codexHome(), ".plgnz-lifecycle", `${reference.attemptId}:${reference.operationId}`));
-  if (existsSync23(stage))
+  if (existsSync22(stage))
     rmSync7(stage, { recursive: true, force: true });
   const rollback = rollbackBundle(reference.attemptId, reference.operationId);
   assertManagedPath2(codexHome(), rollback);
-  if (existsSync23(rollback))
+  if (existsSync22(rollback))
     rmSync7(rollback, { recursive: true, force: true });
   return { cleanupId: `cleanup:${reference.attemptId}:${reference.operationId}`, completed: true };
 }
@@ -20384,7 +20479,7 @@ function pluginDataRoots(nativeId) {
   ];
 }
 function retainedTree(paths) {
-  const present = paths.filter((path) => existsSync23(path));
+  const present = paths.filter((path) => existsSync22(path));
   const [only, ...rest] = present;
   if (only === undefined)
     return { state: "absent", fingerprint: null };
@@ -20425,7 +20520,7 @@ function cacheDestination(nativeId, version) {
 }
 function cacheFingerprint(nativeId) {
   const path = codex.listInstalled().find((plugin) => plugin.id === nativeId)?.path;
-  if (path === undefined || !existsSync23(path))
+  if (path === undefined || !existsSync22(path))
     return null;
   try {
     return fingerprintTree(path);
@@ -20476,7 +20571,7 @@ function codexRollbackReference(attemptId, operationId) {
   const reference = `codex:${attemptId}:${operationId}`;
   const bundle = rollbackBundle(attemptId, operationId);
   const capture = join29(bundle, "native-cache.json");
-  if (!existsSync23(capture))
+  if (!existsSync22(capture))
     return reference;
   const digest = new CryptoHasher("sha256").update(readFileSync23(capture, "utf8")).update("\x00").update(readFileSync23(join29(bundle, "manifest.json"), "utf8")).digest("hex");
   return `${reference}:native-cache-sha256:${digest}`;
@@ -20488,14 +20583,14 @@ function nativeCacheFingerprint(root, ignoreOwnership = false) {
   const hash = new CryptoHasher("sha256");
   const read = readFileSync23;
   const walk = (path, relative) => {
-    const stat = lstatSync14(path);
+    const stat = lstatSync15(path);
     if (stat.isSymbolicLink() || !stat.isDirectory() && !stat.isFile())
       throw new Error(`Codex native cache contains an unsafe resource: ${path}`);
     hash.update(`${stat.isDirectory() ? "d" : "f"}\x00${relative}\x00${stat.mode & 4095}\x00`);
     if (stat.isDirectory()) {
       for (const entry of readdirSync14(path).sort()) {
         if (ignoreOwnership && relative === "" && entry === OWNERSHIP2) {
-          const marker = lstatSync14(join29(path, entry));
+          const marker = lstatSync15(join29(path, entry));
           if (marker.isSymbolicLink() || !marker.isFile())
             throw new Error("Codex attempted cache ownership marker is unsafe");
           continue;
@@ -20525,7 +20620,7 @@ function nativeSlotIsOwned(installation, source) {
   const activeProof = nativeCacheFingerprint(active.path);
   return readdirSync14(slot).every((version) => {
     const path = join29(slot, version);
-    const stat = lstatSync14(path);
+    const stat = lstatSync15(path);
     if (stat.isSymbolicLink())
       throw new Error("Codex native cache slot is redirected");
     if (!validVersionSegment(version) || !stat.isDirectory())
@@ -20574,7 +20669,7 @@ function captureNativeCacheSnapshots(projection) {
 }
 function readNativeCacheSnapshots(handle) {
   const file = join29(rollbackBundle(handle.attemptId, handle.operationId), "native-cache.json");
-  if (!existsSync23(file))
+  if (!existsSync22(file))
     throw new Error("Codex complete native cache rollback capture is missing");
   if (handle.rollbackReference !== codexRollbackReference(handle.attemptId, handle.operationId))
     throw new Error("Codex complete native cache authority differs from its sealed rollback reference");
@@ -20615,7 +20710,7 @@ function saveCodexRollback(attemptId, operationId, nativeIds) {
   assertManagedPath2(codexHome(), bundle);
   rmSync7(bundle, { recursive: true, force: true });
   mkdirSync7(bundle, { recursive: true });
-  const toml = existsSync23(configFile()) ? readFileSync23(configFile(), "utf8") : "";
+  const toml = existsSync22(configFile()) ? readFileSync23(configFile(), "utf8") : "";
   const tables = nativeIds.map((nativeId) => ({ nativeId, block: extractPluginTable(toml, nativeId) }));
   const installs = nativeIds.map((nativeId, index) => {
     const slot = pluginSlot(nativeId);
@@ -20632,7 +20727,7 @@ function saveCodexRollback(attemptId, operationId, nativeIds) {
 function restoreCodexRollback(handle) {
   const bundle = rollbackBundle(handle.attemptId, handle.operationId);
   const manifestPath = join29(bundle, "manifest.json");
-  if (!existsSync23(manifestPath))
+  if (!existsSync22(manifestPath))
     throw new Error(`codex lifecycle rollback bundle is missing: ${handle.operationId}`);
   const manifest = parseRollbackManifest(readFileSync23(manifestPath, "utf8"));
   assertMarketplaceRollbackCurrent(handle);
@@ -20669,7 +20764,7 @@ function marketplaceCheckout(marketplace) {
   return path;
 }
 function assertNativeRollbackSurfaces(handle, manifest, bundle) {
-  const config = existsSync23(configFile()) ? readFileSync23(configFile(), "utf8") : "";
+  const config = existsSync22(configFile()) ? readFileSync23(configFile(), "utf8") : "";
   for (const table of manifest.tables) {
     if (extractPluginTable(config, table.nativeId) !== table.block)
       throw new Error("Codex affected plugin config changed outside the captured native attempt; refusing rollback before any restore write");
@@ -20684,14 +20779,14 @@ function assertNativeRollbackSurfaces(handle, manifest, bundle) {
     const currentFingerprint = nativeCacheFingerprint(slot.path);
     if (currentFingerprint === slot.fingerprint)
       return { ...slot, currentFingerprint };
-    const projected = projections.find((path) => existsSync23(path) && readOwnership2(path)?.pluginId === slot.nativeId);
+    const projected = projections.find((path) => existsSync22(path) && readOwnership2(path)?.pluginId === slot.nativeId);
     let containsCandidate = false;
     for (const version of readdirSync14(slot.path)) {
       const path = join29(slot.path, version);
-      if (!validVersionSegment(version) || !lstatSync14(path).isDirectory())
+      if (!validVersionSegment(version) || !lstatSync15(path).isDirectory())
         throw new Error("Codex complete cache contains an unproven resource; refusing rollback before any restore write");
       const priorVersion = join29(saved, version);
-      if (existsSync23(priorVersion) && nativeCacheFingerprint(path) === nativeCacheFingerprint(priorVersion))
+      if (existsSync22(priorVersion) && nativeCacheFingerprint(path) === nativeCacheFingerprint(priorVersion))
         continue;
       if (projected === undefined || version !== pluginVersion(projected) || (readOwnership2(path) === null ? nativeCacheFingerprint(path, true) !== nativeCacheFingerprint(projected, true) : nativeCacheFingerprint(path) !== nativeCacheFingerprint(projected))) {
         throw new Error("Codex complete cache changed outside the captured native attempt; refusing rollback before any restore write");
@@ -20710,7 +20805,7 @@ function captureMarketplaceRollback(projection) {
     throw new Error("native Codex mutation has no bounded marketplace");
   const checkout = marketplaceCheckout(marketplace);
   const bundle = rollbackBundle(projection.attemptId, projection.operationId);
-  const fingerprint = existsSync23(checkout) ? fingerprintTree(checkout) : null;
+  const fingerprint = existsSync22(checkout) ? fingerprintTree(checkout) : null;
   if (fingerprint !== null) {
     const snapshot = join29(bundle, "marketplace");
     cpSync6(checkout, snapshot, { recursive: true });
@@ -20721,13 +20816,13 @@ function captureMarketplaceRollback(projection) {
 }
 function captureAttemptedMarketplace(handle) {
   const metadata = join29(rollbackBundle(handle.attemptId, handle.operationId), "marketplace.json");
-  if (!existsSync23(metadata))
+  if (!existsSync22(metadata))
     return;
   const marketplace = marketplaceOf(handle.nativeId);
   if (marketplace === null || handle.sourceLocator === null)
     return;
   const checkout = marketplaceCheckout(marketplace);
-  if (!existsSync23(checkout))
+  if (!existsSync22(checkout))
     return;
   const capture = JSON.parse(readFileSync23(metadata, "utf8"));
   if (typeof capture["sourceFingerprint"] !== "string" || !/^[0-9a-f]{64}$/u.test(capture["sourceFingerprint"]))
@@ -20742,14 +20837,14 @@ function captureAttemptedMarketplace(handle) {
 }
 function assertMarketplaceRollbackCurrent(handle) {
   const metadata = join29(rollbackBundle(handle.attemptId, handle.operationId), "marketplace.json");
-  if (!existsSync23(metadata))
+  if (!existsSync22(metadata))
     return;
   const row = JSON.parse(readFileSync23(metadata, "utf8"));
   const marketplace = marketplaceOf(handle.nativeId);
   if (marketplace === null || row["marketplace"] !== marketplace || row["fingerprint"] !== null && (typeof row["fingerprint"] !== "string" || !/^[0-9a-f]{64}$/u.test(row["fingerprint"])) || row["attemptedFingerprint"] !== undefined && (typeof row["attemptedFingerprint"] !== "string" || !/^[0-9a-f]{64}$/u.test(row["attemptedFingerprint"])))
     throw new Error("invalid Codex marketplace rollback capture");
   const checkout = marketplaceCheckout(marketplace);
-  const current = existsSync23(checkout) ? fingerprintTree(checkout) : null;
+  const current = existsSync22(checkout) ? fingerprintTree(checkout) : null;
   if (current !== row["fingerprint"] && current !== row["attemptedFingerprint"]) {
     throw new Error("Codex marketplace checkout changed outside the captured native attempt; refusing rollback before any restore write");
   }
@@ -20760,7 +20855,7 @@ function assertMarketplaceRollbackCurrent(handle) {
 function restoreMarketplaceRollback(handle) {
   const bundle = rollbackBundle(handle.attemptId, handle.operationId);
   const metadata = join29(bundle, "marketplace.json");
-  if (!existsSync23(metadata))
+  if (!existsSync22(metadata))
     return;
   const capture = JSON.parse(readFileSync23(metadata, "utf8"));
   if (typeof capture !== "object" || capture === null || Array.isArray(capture))
@@ -20771,7 +20866,7 @@ function restoreMarketplaceRollback(handle) {
     throw new Error("invalid Codex marketplace rollback identity");
   const checkout = marketplaceCheckout(marketplace);
   if (row["fingerprint"] === null) {
-    if (existsSync23(checkout))
+    if (existsSync22(checkout))
       rmSync7(checkout, { recursive: true });
     return;
   }
@@ -20803,18 +20898,18 @@ function pluginSlot(nativeId) {
   return join29(codexHome(), "plugins", "cache", marketplace, name);
 }
 function slotVersions(slot) {
-  if (!existsSync23(slot))
+  if (!existsSync22(slot))
     return [];
   return readdirSync14(slot).filter((version) => {
     try {
-      return lstatSync14(join29(slot, version)).isDirectory();
+      return lstatSync15(join29(slot, version)).isDirectory();
     } catch {
       return false;
     }
   }).sort();
 }
 function removeUnsnapshotVersions(slot, versions) {
-  if (slot === null || !existsSync23(slot))
+  if (slot === null || !existsSync22(slot))
     return;
   assertManagedPath2(codexHome(), slot);
   const kept = new Set(versions);
@@ -20827,10 +20922,10 @@ function removeUnsnapshotVersions(slot, versions) {
   }
 }
 function rollbackSurface(nativeIds) {
-  const config = existsSync23(configFile()) ? readFileSync23(configFile(), "utf8") : "absent";
+  const config = existsSync22(configFile()) ? readFileSync23(configFile(), "utf8") : "absent";
   const slots = nativeIds.map((nativeId) => {
     const slot = pluginSlot(nativeId);
-    if (slot === null || !existsSync23(slot))
+    if (slot === null || !existsSync22(slot))
       return `${nativeId}:`;
     return `${nativeId}:${slotVersions(slot).map((version) => {
       const path = join29(slot, version);
@@ -20860,7 +20955,7 @@ function extractPluginTable(toml, id) {
 }
 function restorePluginTables(tables) {
   const configPath = configFile();
-  const current = existsSync23(configPath) ? readFileSync23(configPath, "utf8") : "";
+  const current = existsSync22(configPath) ? readFileSync23(configPath, "utf8") : "";
   let next = current;
   for (const table of tables)
     next = applyPluginTable(next, table.nativeId, table.block);
@@ -20998,7 +21093,7 @@ function nativeProjection2(request) {
   }
   if (request.pins.length > 0)
     return { kind: "requires-managed", reasonId: "pins-present" };
-  if (existsSync23(join29(request.snapshot.snapshotRoot, codexMarketplaceMetadataFile))) {
+  if (existsSync22(join29(request.snapshot.snapshotRoot, codexMarketplaceMetadataFile))) {
     return { kind: "requires-managed", reasonId: "native-reserved-source-metadata" };
   }
   const marketplace = marketplaceOf(request.snapshot.nativeId);
@@ -21024,16 +21119,16 @@ function nativeProjection2(request) {
 }
 function assertRequestedCacheOwnership(destination, observedRoots) {
   assertManagedPath2(codexHome(), destination);
-  if (existsSync23(destination) && !observedRoots.some((root) => root.path === destination)) {
+  if (existsSync22(destination) && !observedRoots.some((root) => root.path === destination)) {
     throw new Error("Codex inactive requested version has no captured active ownership; refusing to replace it");
   }
   const slot = dirname9(destination);
-  if (!existsSync23(slot))
+  if (!existsSync22(slot))
     return;
   const requested = destination.slice(slot.length + 1);
   for (const version of readdirSync14(slot)) {
     const path = join29(slot, version);
-    if (lstatSync14(path).isDirectory() && wins(version, requested) && !observedRoots.some((root) => root.path === path)) {
+    if (lstatSync15(path).isDirectory() && wins(version, requested) && !observedRoots.some((root) => root.path === path)) {
       throw new Error(`Codex inactive cache version ${version} has no captured retirement authority and would remain active over ${requested}`);
     }
   }
@@ -21083,7 +21178,7 @@ function marketplaceOf(nativeId) {
   return nativeId.slice(at + 1);
 }
 function readConfigDocument() {
-  if (!existsSync23(configFile()))
+  if (!existsSync22(configFile()))
     return null;
   try {
     const parsed = parse(readFileSync23(configFile(), "utf8"));
@@ -21121,7 +21216,7 @@ function comparePrerelease2(left, right) {
 }
 
 // src/hosts/kimi-writer.ts
-import { cpSync as cpSync7, existsSync as existsSync24, lstatSync as lstatSync15, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync7, readFileSync as readFileSync24, readdirSync as readdirSync15, realpathSync as realpathSync4, renameSync as renameSync5, rmSync as rmSync8, statSync as statSync11, writeFileSync as writeFileSync8 } from "node:fs";
+import { cpSync as cpSync7, existsSync as existsSync23, lstatSync as lstatSync16, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync7, readFileSync as readFileSync24, readdirSync as readdirSync15, realpathSync as realpathSync4, renameSync as renameSync5, rmSync as rmSync8, statSync as statSync11, writeFileSync as writeFileSync8 } from "node:fs";
 import { dirname as dirname10, isAbsolute as isAbsolute11, join as join30, resolve as resolve17 } from "node:path";
 import { tmpdir as tmpdir4 } from "node:os";
 var MARKER4 = ".plgnz-install.json";
@@ -21137,7 +21232,7 @@ var samePhysicalKimiNativeIdentity = (plugin, prior, observation) => {
   const managed = managedPluginPath(plugin.name);
   const registryFile = join30(pluginsDir2(), "installed.json");
   assertKimiManaged(plugin.name, managed, registryFile);
-  if (!existsSync24(managed))
+  if (!existsSync23(managed))
     return null;
   const rows = readRegistry2(registryFile).plugins.filter((row) => row.id === plugin.name || sameRoot(row.root, managed));
   if (rows.length !== 1 || rows[0].id !== plugin.name || rows[0].enabled !== true || !sameRoot(rows[0].root, managed))
@@ -21188,8 +21283,8 @@ var kimiWriter = {
       const differentSource = marker !== null && !lifecycleLocalSource && marker.source !== resolved.sourceUri;
       if (marker !== null && (differentSource || !markerHasExpectedIdentity))
         throw new Error(`Kimi plugin ${id} belongs to another source; refusing to replace it`);
-      const same = existsSync24(target) && sameTree3(stage, target);
-      if (existsSync24(target) && marker === null && !same) {
+      const same = existsSync23(target) && sameTree3(stage, target);
+      if (existsSync23(target) && marker === null && !same) {
         if (!opts?.adoptExisting)
           throw new Error(`Kimi managed plugin ${id} is unowned and differs from the staged representation; pass --adopt-existing to take ownership explicitly`);
         validateNativeIdentity(target, id);
@@ -21207,13 +21302,13 @@ var kimiWriter = {
       }
       if (unchanged)
         return "unchanged";
-      const registryBefore = existsSync24(registryFile) ? readFileSync24(registryFile, "utf8") : undefined;
+      const registryBefore = existsSync23(registryFile) ? readFileSync24(registryFile, "utf8") : undefined;
       const backup = moveAside2(target, managedRoot);
       try {
         await nativeInstall(stage, kimiRootPath(), resolveKimiBinary());
         const after = readRegistry2(registryFile);
         const row = after.plugins.find((candidate) => candidate.id === id);
-        if (row === undefined || row.enabled !== true || !sameRoot(row.root, target) || !existsSync24(target) || !sameTree3(stage, target)) {
+        if (row === undefined || row.enabled !== true || !sameRoot(row.root, target) || !existsSync23(target) || !sameTree3(stage, target)) {
           throw new Error(`Kimi native install did not produce enabled managed plugin ${id}`);
         }
       } catch (error) {
@@ -21228,7 +21323,7 @@ var kimiWriter = {
     }
   },
   async pin(plugin, opts) {
-    if (plugin.path === undefined || !existsSync24(plugin.path))
+    if (plugin.path === undefined || !existsSync23(plugin.path))
       return { changes: [], refusals: [] };
     return pinPluginMcpFiles(plugin.path, mcpCandidates3(), opts);
   },
@@ -21272,7 +21367,7 @@ function sameRoot(value, target) {
   }
 }
 function readRegistry2(path) {
-  if (!existsSync24(path))
+  if (!existsSync23(path))
     return { version: 1, plugins: [] };
   let raw;
   try {
@@ -21292,18 +21387,18 @@ function restore(path, value) {
 }
 function restoreRegistryRow(registryFile, id, reference) {
   const rowFile = join30(reference, "registry.row.json");
-  const priorRow = existsSync24(rowFile) ? parseJson(rowFile, "Kimi registry row") : undefined;
+  const priorRow = existsSync23(rowFile) ? parseJson(rowFile, "Kimi registry row") : undefined;
   if (priorRow !== undefined && priorRow.id !== id)
     throw new Error(`Kimi rollback row is not ${id}`);
-  const live = existsSync24(registryFile) ? readRegistry2(registryFile) : { version: 1, plugins: [] };
+  const live = existsSync23(registryFile) ? readRegistry2(registryFile) : { version: 1, plugins: [] };
   const plugins = live.plugins.filter((row) => row.id !== id);
   if (priorRow !== undefined)
     plugins.push(priorRow);
-  if (plugins.length === 0 && existsSync24(join30(reference, "registry.absent"))) {
+  if (plugins.length === 0 && existsSync23(join30(reference, "registry.absent"))) {
     rmSync8(registryFile, { force: true });
     return;
   }
-  if (!existsSync24(registryFile) && plugins.length === 0)
+  if (!existsSync23(registryFile) && plugins.length === 0)
     return;
   writeFileSync8(registryFile, JSON.stringify({ version: 1, plugins }));
 }
@@ -21324,13 +21419,13 @@ function projectStagedKimi(stage, expectedName) {
     if (manifest[key] !== undefined)
       throw new Error(`Kimi root manifest ${key} is unsupported without an explicit native declaration`);
   const skills = join30(stage, "skills");
-  if (existsSync24(skills) && !statSync11(skills).isDirectory())
+  if (existsSync23(skills) && !statSync11(skills).isDirectory())
     throw new Error(`Kimi skills path is not a directory: ${skills}`);
-  if (existsSync24(skills))
+  if (existsSync23(skills))
     assertKimiSkillPolicies(skills);
   const native = join30(stage, "kimi.plugin.json");
   let supplied = {};
-  if (existsSync24(native)) {
+  if (existsSync23(native)) {
     supplied = parseJson(native, "Kimi native manifest");
     if (supplied.name !== undefined && supplied.name !== expectedName)
       throw new Error(`Kimi native manifest name conflicts with ${expectedName}`);
@@ -21348,7 +21443,7 @@ function projectStagedKimi(stage, expectedName) {
   }
   const commands = prepareCommands(stage, typeof supplied.commands === "string" ? supplied.commands : undefined);
   const mcpServers = collectMcpServers(stage, manifest, supplied);
-  const nativeManifest = { name: expectedName, ...typeof manifest.version === "string" ? { version: manifest.version } : {}, ...typeof manifest.description === "string" ? { description: manifest.description } : {}, ...existsSync24(skills) ? { skills: "./skills/" } : {}, ...commands !== undefined ? { commands } : {}, ...mcpServers !== undefined ? { mcpServers } : {} };
+  const nativeManifest = { name: expectedName, ...typeof manifest.version === "string" ? { version: manifest.version } : {}, ...typeof manifest.description === "string" ? { description: manifest.description } : {}, ...existsSync23(skills) ? { skills: "./skills/" } : {}, ...commands !== undefined ? { commands } : {}, ...mcpServers !== undefined ? { mcpServers } : {} };
   writeFileSync8(native, JSON.stringify(nativeManifest, null, 2));
   assertNoSymlinks4(stage);
 }
@@ -21371,12 +21466,12 @@ function collectMcpServers(stage, manifest, supplied) {
   };
   add("native manifest", supplied.mcpServers);
   const legacyNative = join30(stage, ".kimi-plugin", "plugin.json");
-  if (existsSync24(legacyNative))
+  if (existsSync23(legacyNative))
     add(".kimi-plugin/plugin.json", parseJson(legacyNative, ".kimi-plugin/plugin.json").mcpServers);
   add("root plugin manifest", manifest.mcpServers);
   for (const file of [".mcp.json", "mcp.json"]) {
     const path = join30(stage, file);
-    if (!existsSync24(path))
+    if (!existsSync23(path))
       continue;
     add(file, parseJson(path, file).mcpServers);
   }
@@ -21384,14 +21479,14 @@ function collectMcpServers(stage, manifest, supplied) {
 }
 function prepareCommands(stage, supplied) {
   const commands = join30(stage, "commands");
-  if (existsSync24(commands) && !statSync11(commands).isDirectory())
+  if (existsSync23(commands) && !statSync11(commands).isDirectory())
     throw new Error(`Kimi commands path is not a directory: ${commands}`);
   const claude = join30(stage, ".claude", "commands");
-  const selected = supplied === undefined ? existsSync24(claude) ? "./.claude/commands/" : existsSync24(commands) ? "./commands/" : undefined : supplied.endsWith("/") ? supplied : `${supplied}/`;
+  const selected = supplied === undefined ? existsSync23(claude) ? "./.claude/commands/" : existsSync23(commands) ? "./commands/" : undefined : supplied.endsWith("/") ? supplied : `${supplied}/`;
   if (selected === undefined)
     return;
   const dir = selected.startsWith("./.claude/") ? claude : commands;
-  if (!existsSync24(dir))
+  if (!existsSync23(dir))
     throw new Error(`Kimi native commands pointer has no directory: ${selected}`);
   assertMarkdownCommandTree(dir);
   if (!containsMarkdown(dir))
@@ -21401,7 +21496,7 @@ function prepareCommands(stage, supplied) {
 function assertKimiSkillPolicies(dir) {
   for (const name of readdirSync15(dir)) {
     const path = join30(dir, name);
-    const stat = lstatSync15(path);
+    const stat = lstatSync16(path);
     if (stat.isDirectory())
       assertKimiSkillPolicies(path);
     else if (stat.isFile() && name === "SKILL.md") {
@@ -21434,7 +21529,7 @@ function openingFrontmatter2(raw, path) {
 function assertMarkdownCommandTree(dir) {
   for (const name of readdirSync15(dir)) {
     const path = join30(dir, name);
-    const stat = lstatSync15(path);
+    const stat = lstatSync16(path);
     if (stat.isSymbolicLink())
       throw new Error(`Kimi command source contains symlink: ${path}`);
     if (stat.isDirectory())
@@ -21465,7 +21560,7 @@ function containsMarkdown(dir) {
   });
 }
 function readSourceManifest(stage) {
-  const file = [join30(stage, "plugin.json"), join30(stage, ".plugin", "plugin.json")].find(existsSync24);
+  const file = [join30(stage, "plugin.json"), join30(stage, ".plugin", "plugin.json")].find(existsSync23);
   if (file === undefined)
     throw new Error("Kimi stage has no Agent Plugins manifest");
   return parseJson(file, "Agent Plugins manifest");
@@ -21482,7 +21577,7 @@ function parseJson(path, label) {
 }
 function validateNativeIdentity(target, id) {
   const file = join30(target, "kimi.plugin.json");
-  if (!existsSync24(file) || parseJson(file, "Kimi native manifest").name !== id)
+  if (!existsSync23(file) || parseJson(file, "Kimi native manifest").name !== id)
     throw new Error(`unowned Kimi managed plugin has no matching native manifest: ${target}`);
 }
 function readOwnership3(target) {
@@ -21514,7 +21609,7 @@ function rewriteOwnership(target, ownership) {
   }
 }
 function sameTree3(left, right) {
-  if (!existsSync24(right))
+  if (!existsSync23(right))
     return false;
   const readBytes = readFileSync24;
   const list = (root) => {
@@ -21525,7 +21620,7 @@ function sameTree3(left, right) {
           continue;
         const path = join30(dir, name);
         const rel = prefix ? `${prefix}/${name}` : name;
-        const stat = lstatSync15(path);
+        const stat = lstatSync16(path);
         if (stat.isSymbolicLink())
           throw new Error(`Kimi plugin contains symlink: ${path}`);
         if (stat.isDirectory())
@@ -21543,14 +21638,14 @@ function sameTree3(left, right) {
 }
 function assertNoSymlinks4(root) {
   const walk = (dir) => {
-    const stat = lstatSync15(dir);
+    const stat = lstatSync16(dir);
     if (stat.isSymbolicLink())
       throw new Error(`Kimi plugin contains symlink: ${dir}`);
     if (!stat.isDirectory())
       throw new Error(`Kimi plugin path is not a directory: ${dir}`);
     for (const name of readdirSync15(dir)) {
       const path = join30(dir, name);
-      const child = lstatSync15(path);
+      const child = lstatSync16(path);
       if (child.isSymbolicLink())
         throw new Error(`Kimi plugin contains symlink: ${path}`);
       if (child.isDirectory())
@@ -21562,7 +21657,7 @@ function assertNoSymlinks4(root) {
   walk(root);
 }
 function moveAside2(target, root) {
-  if (!existsSync24(target))
+  if (!existsSync23(target))
     return { commit: () => {}, rollback: () => {} };
   mkdirSync8(root, { recursive: true });
   const dir = mkdtempSync7(join30(root, ".plgnz-kimi-backup-"));
@@ -21575,7 +21670,7 @@ function moveAside2(target, root) {
 }
 function lstatIfPresent(path) {
   try {
-    return lstatSync15(path);
+    return lstatSync16(path);
   } catch (error) {
     if (error.code === "ENOENT")
       return;
@@ -21591,7 +21686,7 @@ function assertManagedPath3(root, target) {
   for (const part of selected.slice(base.length).split("/").filter(Boolean)) {
     if (lstatIfPresent(current) === undefined)
       break;
-    const stat = lstatSync15(current);
+    const stat = lstatSync16(current);
     if (stat.isSymbolicLink())
       throw new Error(`Kimi managed path component is a symlink: ${current}`);
     if (!stat.isDirectory())
@@ -21632,7 +21727,7 @@ function currentKimiVersion(exitCode, version) {
 }
 function resolveKimiBinary() {
   const binary = kimiBinaryPath();
-  if (!existsSync24(binary))
+  if (!existsSync23(binary))
     throw new Error(`current Kimi Code binary not found: ${binary}`);
   const probed = readKimiBinaryVersion(binary);
   if (currentKimiVersion(probed.exitCode, probed.version) === undefined)
@@ -21842,11 +21937,11 @@ var kimiLifecycle = {
     const managed = managedPluginPath(projection.packageName);
     const registryFile = join30(pluginsDir2(), "installed.json");
     assertKimiManaged(projection.packageName, managed, registryFile);
-    if (existsSync24(managed))
+    if (existsSync23(managed))
       cpSync7(managed, join30(rollbackReference, "managed"), { recursive: true });
-    const priorRow = existsSync24(registryFile) ? readRegistry2(registryFile).plugins.find((row) => row.id === projection.packageName) : undefined;
+    const priorRow = existsSync23(registryFile) ? readRegistry2(registryFile).plugins.find((row) => row.id === projection.packageName) : undefined;
     if (priorRow === undefined) {
-      if (!existsSync24(registryFile))
+      if (!existsSync23(registryFile))
         writeFileSync8(join30(rollbackReference, "registry.absent"), "");
     } else
       writeFileSync8(join30(rollbackReference, "registry.row.json"), JSON.stringify(priorRow));
@@ -21874,10 +21969,10 @@ var kimiLifecycle = {
     const managed = managedPluginPath(id);
     const registryFile = join30(pluginsDir2(), "installed.json");
     assertKimiManaged(id, managed, registryFile);
-    const priorRow = existsSync24(registryFile) ? readRegistry2(registryFile).plugins.find((row) => row.id === id) : undefined;
-    const marker = existsSync24(managed) ? readOwnership3(managed) : null;
+    const priorRow = existsSync23(registryFile) ? readRegistry2(registryFile).plugins.find((row) => row.id === id) : undefined;
+    const marker = existsSync23(managed) ? readOwnership3(managed) : null;
     const legacyMarker = marker !== null && !marker.pluginId.includes("@") && prepared.handle.nativeId.startsWith(`${marker.pluginId}@`);
-    if (existsSync24(managed) && priorRow?.enabled === true && sameRoot(priorRow.root, managed) && sameTree3(prepared.stagingRoot, managed)) {
+    if (existsSync23(managed) && priorRow?.enabled === true && sameRoot(priorRow.root, managed) && sameTree3(prepared.stagingRoot, managed)) {
       if (legacyMarker) {
         rewriteOwnership(managed, {
           ...marker,
@@ -21888,12 +21983,12 @@ var kimiLifecycle = {
       }
       return { receiptId: `kimi-apply:${prepared.handle.attemptId}:${prepared.handle.operationId}`, changed: false };
     }
-    const registryBefore = existsSync24(registryFile) ? readFileSync24(registryFile, "utf8") : undefined;
+    const registryBefore = existsSync23(registryFile) ? readFileSync24(registryFile, "utf8") : undefined;
     const backup = moveAside2(managed, dirname10(managed));
     try {
       await nativeInstall(prepared.stagingRoot, kimiRootPath(), resolveKimiBinary());
       const row = readRegistry2(registryFile).plugins.find((candidate) => candidate.id === id);
-      if (row === undefined || row.enabled !== true || !sameRoot(row.root, managed) || !existsSync24(managed) || !sameTree3(prepared.stagingRoot, managed)) {
+      if (row === undefined || row.enabled !== true || !sameRoot(row.root, managed) || !existsSync23(managed) || !sameTree3(prepared.stagingRoot, managed)) {
         throw new Error(`Kimi native install did not produce enabled managed plugin ${id}`);
       }
       backup.commit();
@@ -21916,7 +22011,7 @@ var kimiLifecycle = {
     const reference = handle.rollbackReference;
     rmSync8(managed, { recursive: true, force: true });
     const backup = join30(reference, "managed");
-    if (existsSync24(backup))
+    if (existsSync23(backup))
       cpSync7(backup, managed, { recursive: true });
     restoreRegistryRow(registryFile, id, reference);
     return { receiptId: `kimi-rollback:${handle.attemptId}:${handle.operationId}`, changed: true };
@@ -21924,7 +22019,7 @@ var kimiLifecycle = {
   cleanup: async (reference) => {
     const root = join30(pluginsDir2(), ".plgnz-kimi-lifecycle");
     rmSync8(join30(root, safeSegment(reference.attemptId)), { recursive: true, force: true });
-    if (existsSync24(root) && readdirSync15(root).length === 0)
+    if (existsSync23(root) && readdirSync15(root).length === 0)
       rmSync8(root, { recursive: true, force: true });
     return { cleanupId: `kimi-cleanup:${reference.attemptId}:${reference.operationId}`, completed: true };
   }
@@ -21948,8 +22043,8 @@ function assertKimiManaged(packageName, managed, registryFile) {
 function kimiReadback(handle) {
   const managed = managedPluginPath(handle.packageName);
   const registryFile = join30(pluginsDir2(), "installed.json");
-  const row = existsSync24(registryFile) ? readRegistry2(registryFile).plugins.find((candidate) => candidate.id === handle.packageName) : undefined;
-  const present = row !== undefined && existsSync24(managed) && sameRoot(row.root, managed);
+  const row = existsSync23(registryFile) ? readRegistry2(registryFile).plugins.find((candidate) => candidate.id === handle.packageName) : undefined;
+  const present = row !== undefined && existsSync23(managed) && sameRoot(row.root, managed);
   const enabled = present && row?.enabled === true;
   const digest = present ? fingerprintTree(managed) : null;
   return {
@@ -21970,7 +22065,7 @@ function kimiReadback(handle) {
 }
 function probeKimiBinary() {
   const binary = kimiBinaryPath();
-  if (!existsSync24(binary))
+  if (!existsSync23(binary))
     return { kind: "unknown" };
   const probed = readKimiBinaryVersion(binary);
   const version = currentKimiVersion(probed.exitCode, probed.version);
@@ -22113,12 +22208,12 @@ function unexposed(phase) {
 }
 
 // src/hosts/cursor-writer.ts
-import { accessSync as accessSync5, constants as constants5, cpSync as cpSync8, existsSync as existsSync25, lstatSync as lstatSync17, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync8, readFileSync as readFileSync26, readdirSync as readdirSync17, renameSync as renameSync6, rmSync as rmSync9, statSync as statSync12, writeFileSync as writeFileSync9 } from "node:fs";
+import { accessSync as accessSync5, constants as constants5, cpSync as cpSync8, existsSync as existsSync24, lstatSync as lstatSync18, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync8, readFileSync as readFileSync26, readdirSync as readdirSync17, renameSync as renameSync6, rmSync as rmSync9, statSync as statSync12, writeFileSync as writeFileSync9 } from "node:fs";
 import { delimiter as delimiter4, join as join32, resolve as resolve19 } from "node:path";
 import { tmpdir as tmpdir5 } from "node:os";
 
 // src/hosts/cursor-adoption.ts
-import { accessSync as accessSync4, constants as constants4, lstatSync as lstatSync16, readFileSync as readFileSync25, readdirSync as readdirSync16 } from "node:fs";
+import { accessSync as accessSync4, constants as constants4, lstatSync as lstatSync17, readFileSync as readFileSync25, readdirSync as readdirSync16 } from "node:fs";
 import { dirname as dirname11, join as join31, resolve as resolve18 } from "node:path";
 var MARKER5 = ".plgnz-install.json";
 function proveCursorLegacyAdoption(request) {
@@ -22279,7 +22374,7 @@ function readTree(root) {
   const tree = new Map;
   const walk = (dir, prefix) => {
     for (const name of readdirSync16(dir).sort()) {
-      const path = join31(dir, name), relative = prefix === "" ? name : `${prefix}/${name}`, stat = lstatSync16(path);
+      const path = join31(dir, name), relative = prefix === "" ? name : `${prefix}/${name}`, stat = lstatSync17(path);
       if (stat.isSymbolicLink())
         fail3(`symlink resource: ${relative}`);
       if (stat.isDirectory()) {
@@ -22297,7 +22392,7 @@ function readTree(root) {
 function safeAncestors(root, allowMissing) {
   for (let path = resolve18(root);; path = dirname11(path)) {
     if (!allowMissing || present(path)) {
-      const stat = lstatSync16(path);
+      const stat = lstatSync17(path);
       if (stat.isSymbolicLink() || !stat.isDirectory())
         fail3(`unsafe directory: ${path}`);
     }
@@ -22349,7 +22444,7 @@ function parseManifest2(entry) {
 }
 function present(path) {
   try {
-    lstatSync16(path);
+    lstatSync17(path);
     return true;
   } catch (error) {
     if (error.code === "ENOENT")
@@ -22410,8 +22505,8 @@ var cursorWriter = {
       if (marker !== null && (differentSource || !matchesOwnership(marker.pluginId, id, ownershipId))) {
         throw new Error(`Cursor local plugin ${id} belongs to another source; refusing to replace it`);
       }
-      const identicalUnowned = existsSync25(target) && marker === null && sameTree4(stage, target);
-      if (existsSync25(target) && marker === null && !identicalUnowned) {
+      const identicalUnowned = existsSync24(target) && marker === null && sameTree4(stage, target);
+      if (existsSync24(target) && marker === null && !identicalUnowned) {
         if (!opts?.adoptExisting)
           throw new Error(`Cursor local plugin ${id} is unowned and differs from the staged representation; pass --adopt-existing to take ownership explicitly`);
         validateExistingIdentity(target, id, sourceVersion(plugin.dir));
@@ -22430,7 +22525,7 @@ var cursorWriter = {
     }
   },
   async pin(plugin, opts) {
-    if (plugin.path === undefined || !existsSync25(plugin.path))
+    if (plugin.path === undefined || !existsSync24(plugin.path))
       return { changes: [], refusals: [] };
     return pinPluginMcpFiles(plugin.path, mcpCandidates4(), opts);
   },
@@ -22464,7 +22559,7 @@ function projectCommandsToSkills(stage) {
       throw new Error(`Cursor command projection collision: ${command.name}`);
     seen.add(command.name);
     const target = join32(stage, "skills", command.name, "SKILL.md");
-    if (existsSync25(target))
+    if (existsSync24(target))
       throw new Error(`Cursor command collides with an existing skill: ${command.name}`);
     mkdirSync9(join32(stage, "skills", command.name), { recursive: true });
     const body = command.body.endsWith(`
@@ -22482,13 +22577,13 @@ ${body}`);
   }
 }
 function hasCommands(root) {
-  return existsSync25(join32(root, "commands")) || existsSync25(join32(root, ".claude", "commands"));
+  return existsSync24(join32(root, "commands")) || existsSync24(join32(root, ".claude", "commands"));
 }
 function ensureCursorManifest(stage, expectedName) {
   const cursorManifest = join32(stage, ".cursor-plugin", "plugin.json");
-  if (existsSync25(cursorManifest))
+  if (existsSync24(cursorManifest))
     return;
-  const source = manifestCandidates(stage).find(existsSync25);
+  const source = manifestCandidates(stage).find(existsSync24);
   if (source === undefined)
     throw new Error("Cursor stage has no Agent Plugins manifest");
   mkdirSync9(join32(stage, ".cursor-plugin"), { recursive: true });
@@ -22501,7 +22596,7 @@ function validateStage2(stage, expectedName) {
   const native = parseManifest3(join32(stage, ".cursor-plugin", "plugin.json"));
   if (native.name !== expectedName)
     throw new Error(`Cursor manifest identity does not match ${expectedName}`);
-  const canonicalPath = manifestCandidates(stage).find(existsSync25);
+  const canonicalPath = manifestCandidates(stage).find(existsSync24);
   if (canonicalPath !== undefined) {
     const canonical = parseManifest3(canonicalPath);
     if (native.name !== canonical.name || canonical.version !== undefined && native.version !== canonical.version) {
@@ -22509,14 +22604,14 @@ function validateStage2(stage, expectedName) {
     }
   }
   const skills = join32(stage, "skills");
-  if (existsSync25(skills) && !statSync12(skills).isDirectory())
+  if (existsSync24(skills) && !statSync12(skills).isDirectory())
     throw new Error("Cursor stage skills path is not a directory");
 }
 function manifestCandidates(root) {
   return [join32(root, ".claude-plugin", "plugin.json"), join32(root, "plugin.json"), join32(root, ".plugin", "plugin.json")];
 }
 function sourceVersion(root) {
-  const manifest = [join32(root, ".cursor-plugin", "plugin.json"), ...manifestCandidates(root)].find(existsSync25);
+  const manifest = [join32(root, ".cursor-plugin", "plugin.json"), ...manifestCandidates(root)].find(existsSync24);
   return manifest === undefined ? undefined : parseManifest3(manifest).version;
 }
 function parseManifest3(path) {
@@ -22537,7 +22632,7 @@ function parseManifest3(path) {
 }
 function validateExistingIdentity(target, expectedName, expectedVersion) {
   const manifest = join32(target, ".cursor-plugin", "plugin.json");
-  if (!existsSync25(manifest))
+  if (!existsSync24(manifest))
     throw new Error(`unowned Cursor local plugin has no native manifest: ${target}`);
   const parsed = parseManifest3(manifest);
   if (parsed.name !== expectedName || parsed.version !== expectedVersion)
@@ -22545,7 +22640,7 @@ function validateExistingIdentity(target, expectedName, expectedVersion) {
 }
 function readOwnership4(target) {
   const marker = join32(target, OWNERSHIP3);
-  if (!existsSync25(marker))
+  if (!existsSync24(marker))
     return null;
   try {
     const value = JSON.parse(readFileSync26(marker, "utf8"));
@@ -22589,7 +22684,7 @@ function ownsNativeDirectory(markerId, nativeId) {
   return markerId.startsWith(prefix) && validIdentity2(markerId.slice(prefix.length));
 }
 function activate3(stage, target, root) {
-  if (!existsSync25(target)) {
+  if (!existsSync24(target)) {
     renameSync6(stage, target);
     return { commit: () => {} };
   }
@@ -22606,7 +22701,7 @@ function activate3(stage, target, root) {
   return { commit: () => rmSync9(backupRoot, { recursive: true, force: true }) };
 }
 function sameTree4(left, right) {
-  if (!existsSync25(right))
+  if (!existsSync24(right))
     return false;
   const entries = (root) => {
     const out = [];
@@ -22616,7 +22711,7 @@ function sameTree4(left, right) {
           continue;
         const path = join32(dir, name);
         const relative = prefix === "" ? name : `${prefix}/${name}`;
-        const stat = lstatSync17(path);
+        const stat = lstatSync18(path);
         if (stat.isSymbolicLink())
           throw new Error(`Cursor managed plugin contains symlink: ${path}`);
         if (stat.isDirectory())
@@ -22643,15 +22738,15 @@ function assertManagedDirectory(root, target) {
     throw new Error(`Cursor managed path escapes its store: ${target}`);
   let current = resolvedRoot;
   for (const part of resolvedTarget.slice(resolvedRoot.length).split("/").filter(Boolean)) {
-    if (existsSync25(current))
+    if (existsSync24(current))
       assertDirectoryNotLink(current);
     current = join32(current, part);
   }
-  if (existsSync25(current))
+  if (existsSync24(current))
     assertDirectoryNotLink(current);
 }
 function assertDirectoryNotLink(path) {
-  const stat = lstatSync17(path);
+  const stat = lstatSync18(path);
   if (stat.isSymbolicLink())
     throw new Error(`Cursor managed path component is a symlink: ${path}`);
   if (!stat.isDirectory())
@@ -22659,14 +22754,14 @@ function assertDirectoryNotLink(path) {
 }
 function assertNoSymlinks5(root) {
   const walk = (dir) => {
-    const stat = lstatSync17(dir);
+    const stat = lstatSync18(dir);
     if (stat.isSymbolicLink())
       throw new Error(`Cursor plugin source contains symlink: ${dir}`);
     if (!stat.isDirectory())
       throw new Error(`Cursor plugin source is not a directory: ${dir}`);
     for (const name of readdirSync17(dir)) {
       const path = join32(dir, name);
-      const entry = lstatSync17(path);
+      const entry = lstatSync18(path);
       if (entry.isSymbolicLink())
         throw new Error(`Cursor plugin source contains symlink: ${path}`);
       if (entry.isDirectory())
@@ -22866,7 +22961,7 @@ var cursorLifecycleDefinition = {
     const handle = prepared.handle;
     const target = managedPluginDir(handle.target.instance, handle.nativeId);
     refuseForeignScope(target, handle.scopeId, handle.nativeId);
-    if (existsSync25(target) && fingerprintTree(target) === fingerprintTree(prepared.stagingRoot)) {
+    if (existsSync24(target) && fingerprintTree(target) === fingerprintTree(prepared.stagingRoot)) {
       return { receiptId: receipt("apply", handle), changed: false };
     }
     const root = localDir(handle.target.instance);
@@ -22887,7 +22982,7 @@ var cursorLifecycleDefinition = {
   async retire(prepared) {
     const handle = prepared.handle;
     const target = managedPluginDir(handle.target.instance, handle.nativeId);
-    if (!existsSync25(target))
+    if (!existsSync24(target))
       return { receiptId: receipt("retire", handle), changed: false };
     refuseForeignScope(target, handle.scopeId, handle.nativeId);
     rmSync9(target, { recursive: true, force: true });
@@ -22909,15 +23004,15 @@ var cursorLifecycleDefinition = {
     const root = localDir(handle.target.instance);
     const target = managedPluginDir(handle.target.instance, handle.nativeId);
     const backup = join32(handle.rollbackReference, "active");
-    const restore = prior.presence === "present" && existsSync25(backup);
+    const restore = prior.presence === "present" && existsSync24(backup);
     if (!restore) {
-      if (prior.presence === "present" || !existsSync25(target))
+      if (prior.presence === "present" || !existsSync24(target))
         return { receiptId: receipt("rollback", handle), changed: false };
       refuseForeignScope(target, handle.scopeId, handle.nativeId);
       rmSync9(target, { recursive: true, force: true });
       return { receiptId: receipt("rollback", handle), changed: true };
     }
-    if (existsSync25(target)) {
+    if (existsSync24(target)) {
       refuseForeignScope(target, handle.scopeId, handle.nativeId);
       if (fingerprintTree(target) === fingerprintTree(backup))
         return { receiptId: receipt("rollback", handle), changed: false };
@@ -22969,7 +23064,7 @@ function probeCursorVersion() {
 function locateCursorProbeBinary() {
   const override = process.env["OPEN_PLUGIN_CURSOR_BIN"];
   if (override !== undefined) {
-    if (override.length === 0 || !existsSync25(override))
+    if (override.length === 0 || !existsSync24(override))
       return { kind: "refused" };
     return { kind: "path", path: override };
   }
@@ -23012,7 +23107,7 @@ function decodeStdout(bytes) {
 }
 function inventoryLocalStore(target) {
   const root = localDir(target.instance);
-  if (!existsSync25(root))
+  if (!existsSync24(root))
     return { target, installations: [] };
   const installations = [];
   for (const entry of readdirSync17(root)) {
@@ -23033,7 +23128,7 @@ function inventoryLocalStore(target) {
 }
 function readLocalInstallation(entry, dir) {
   const manifestPath = join32(dir, ".cursor-plugin", "plugin.json");
-  if (!existsSync25(manifestPath))
+  if (!existsSync24(manifestPath))
     return;
   let manifest;
   let marker = null;
@@ -23135,7 +23230,7 @@ function applyRecordedPins(stage, pins) {
   for (const pin of pins) {
     let found = false;
     for (const file of [join32(stage, ".mcp.json"), join32(stage, "mcp.json")]) {
-      if (!existsSync25(file))
+      if (!existsSync24(file))
         continue;
       const parsed = JSON.parse(readFileSync26(file, "utf8"));
       if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
@@ -23164,7 +23259,7 @@ function projectReadback(identity) {
     inactiveMetadata: retainedResource(instance, identity.nativeId, "metadata")
   };
   const dir = join32(localDir(instance), identity.nativeId);
-  if (!existsSync25(dir)) {
+  if (!existsSync24(dir)) {
     return {
       adapterId: identity.adapterId,
       target: identity.target,
@@ -23200,9 +23295,9 @@ function projectReadback(identity) {
 }
 function retainedResource(instance, nativeId, kind) {
   const dir = retentionDir(instance, nativeId, kind);
-  if (!existsSync25(dir))
+  if (!existsSync24(dir))
     return { state: "absent", fingerprint: null };
-  const stat = lstatSync17(dir);
+  const stat = lstatSync18(dir);
   if (stat.isSymbolicLink() || !stat.isDirectory())
     throw new Error(`Cursor retained ${kind} is not a directory: ${dir}`);
   return { state: "present", fingerprint: fingerprintTree(dir) };
@@ -23220,7 +23315,7 @@ function captureRollback2(instance, attemptId, operationId, nativeId, prior) {
   rmSync9(reference, { recursive: true, force: true });
   mkdirSync9(reference, { recursive: true });
   const active = join32(localDir(instance), nativeId);
-  if (existsSync25(active))
+  if (existsSync24(active))
     cpSync8(active, join32(reference, "active"), { recursive: true });
   writeFileSync9(join32(reference, "prior.json"), `${JSON.stringify(prior)}
 `);
@@ -23253,7 +23348,7 @@ function absentRoute(action, route) {
   }
 }
 function refuseForeignScope(target, scopeId, nativeId) {
-  if (!existsSync25(target))
+  if (!existsSync24(target))
     return;
   const marker = readOwnership4(target);
   if (marker === null || !ownsNativeDirectory(marker.pluginId, nativeId)) {
@@ -23282,7 +23377,7 @@ function receipt(kind, handle) {
 
 // src/hosts/omp-writer.ts
 init_omp_hooks();
-import { cpSync as cpSync9, existsSync as existsSync26, lstatSync as lstatSync18, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync9, readFileSync as readFileSync27, readdirSync as readdirSync18, readlinkSync as readlinkSync2, renameSync as renameSync7, rmSync as rmSync10, symlinkSync, writeFileSync as writeFileSync10 } from "node:fs";
+import { cpSync as cpSync9, existsSync as existsSync25, lstatSync as lstatSync19, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync9, readFileSync as readFileSync27, readdirSync as readdirSync18, readlinkSync as readlinkSync2, renameSync as renameSync7, rmSync as rmSync10, symlinkSync, writeFileSync as writeFileSync10 } from "node:fs";
 import { dirname as dirname12, join as join33, resolve as resolve20 } from "node:path";
 import { tmpdir as tmpdir6 } from "node:os";
 var MARKER6 = ".plgnz-install.json";
@@ -23378,7 +23473,7 @@ var ompWriter = {
     }
   },
   async pin(plugin, opts) {
-    if (plugin.path === undefined || !existsSync26(plugin.path))
+    if (plugin.path === undefined || !existsSync25(plugin.path))
       return { changes: [], refusals: [] };
     return pinPluginMcpFiles(plugin.path, mcpCandidates5(), opts);
   },
@@ -23472,7 +23567,7 @@ function registryInstallPaths(registry) {
 }
 function findOwned(id) {
   const root = join33(pluginsDir3(), MANAGED);
-  if (!existsSync26(root))
+  if (!existsSync25(root))
     return null;
   for (const name of readdirSync18(root)) {
     const path = join33(root, name);
@@ -23490,7 +23585,7 @@ function assertOwnedLink(path, target, owned) {
 }
 function lstatExists(path) {
   try {
-    lstatSync18(path);
+    lstatSync19(path);
     return true;
   } catch {
     return false;
@@ -23498,7 +23593,7 @@ function lstatExists(path) {
 }
 function linkPointsTo(path, target) {
   try {
-    return lstatSync18(path).isSymbolicLink() && resolve20(dirname12(path), readlinkSync2(path)) === resolve20(target);
+    return lstatSync19(path).isSymbolicLink() && resolve20(dirname12(path), readlinkSync2(path)) === resolve20(target);
   } catch {
     return false;
   }
@@ -23538,7 +23633,7 @@ function mkdirSafe(path) {
   const parentBoundary = dirname12(boundary);
   for (let current = target;; current = dirname12(current)) {
     if (lstatExists(current)) {
-      const stat = lstatSync18(current);
+      const stat = lstatSync19(current);
       if (stat.isSymbolicLink() || !stat.isDirectory())
         throw new Error(`OMP managed path is unsafe: ${current}`);
     }
@@ -23548,7 +23643,7 @@ function mkdirSafe(path) {
   mkdirSync10(path, { recursive: true });
   let current = target;
   while (true) {
-    const stat = lstatSync18(current);
+    const stat = lstatSync19(current);
     if (stat.isSymbolicLink() || !stat.isDirectory())
       throw new Error(`OMP managed path is unsafe: ${current}`);
     if (current === boundary)
@@ -23564,7 +23659,7 @@ function assertExistingDirectoryTree(boundaryPath, targetPath, label) {
   for (let current = target;; current = dirname12(current)) {
     if (!lstatExists(current))
       throw new Error(`${label} has no safe native copy`);
-    const stat = lstatSync18(current);
+    const stat = lstatSync19(current);
     if (stat.isSymbolicLink() || !stat.isDirectory())
       throw new Error(`${label} contains a symlink or non-directory component: ${current}`);
     if (current === boundary)
@@ -23572,7 +23667,7 @@ function assertExistingDirectoryTree(boundaryPath, targetPath, label) {
   }
 }
 function sameTree5(left, right) {
-  if (!existsSync26(right))
+  if (!existsSync25(right))
     return false;
   const bytes = readFileSync27;
   const list = (root) => {
@@ -23583,7 +23678,7 @@ function sameTree5(left, right) {
           continue;
         const path = join33(dir, name);
         const rel = prefix ? `${prefix}/${name}` : name;
-        const stat = lstatSync18(path);
+        const stat = lstatSync19(path);
         if (stat.isSymbolicLink())
           throw new Error(`OMP managed plugin contains symlink: ${path}`);
         if (stat.isDirectory())
@@ -23601,7 +23696,7 @@ function sameTree5(left, right) {
 }
 function ownership2(path) {
   const marker = join33(path, MARKER6);
-  if (!existsSync26(marker))
+  if (!existsSync25(marker))
     return null;
   const value = readDoc(marker, {}, "ownership marker");
   if (typeof value.source !== "string" || typeof value.pluginId !== "string" || typeof value.fingerprint !== "string" || typeof value.packageName !== "string")
@@ -23620,7 +23715,7 @@ function ownership2(path) {
   };
 }
 function readDoc(path, fallback, label) {
-  if (!existsSync26(path))
+  if (!existsSync25(path))
     return fallback;
   try {
     const value = JSON.parse(readFileSync27(path, "utf8"));
@@ -23650,7 +23745,7 @@ function writeDoc(path, value) {
   writeFileSync10(path, JSON.stringify(value, null, 2));
 }
 function snapshot(path) {
-  return existsSync26(path) ? readFileSync27(path, "utf8") : undefined;
+  return existsSync25(path) ? readFileSync27(path, "utf8") : undefined;
 }
 function restore2(path, value) {
   if (value === undefined)
@@ -23872,7 +23967,7 @@ async function observeInventory(target) {
   return { target, installations: omp.listInstalled().map((plugin) => installationOf(plugin)) };
 }
 function installationOf(plugin) {
-  const path = plugin.path !== undefined && existsSync26(plugin.path) ? resolve20(plugin.path) : undefined;
+  const path = plugin.path !== undefined && existsSync25(plugin.path) ? resolve20(plugin.path) : undefined;
   if (path === undefined) {
     return {
       nativeId: plugin.id,
@@ -23913,7 +24008,7 @@ function sourceOf2(owner) {
 }
 function observeReadback(identity) {
   const target = managedPackageDir(identity.nativeId);
-  const present = existsSync26(target) && linkPointsTo(managedLink(identity.nativeId), target);
+  const present = existsSync25(target) && linkPointsTo(managedLink(identity.nativeId), target);
   const retention = retentionOf(identity.nativeId);
   if (!present) {
     return {
@@ -23957,17 +24052,17 @@ function retentionOf(nativeId) {
   };
 }
 function resourceObservation(path) {
-  if (!existsSync26(path))
+  if (!existsSync25(path))
     return { state: "absent", fingerprint: null };
   return { state: "present", fingerprint: fingerprintTree(path) };
 }
 function lockMetadataObservation(nativeId) {
-  if (!existsSync26(lockPath()))
+  if (!existsSync25(lockPath()))
     return { state: "absent", fingerprint: null };
   return { state: "present", fingerprint: sha256(canonical3(metadataView(readDoc(lockPath(), {}, "lockfile"), npmName(nativeId)))) };
 }
 function plannedLockMetadata(nativeId, version) {
-  const lock = existsSync26(lockPath()) ? readDoc(lockPath(), {}, "lockfile") : { plugins: {}, settings: {} };
+  const lock = existsSync25(lockPath()) ? readDoc(lockPath(), {}, "lockfile") : { plugins: {}, settings: {} };
   const plugins = isDoc(lock.plugins) ? lock.plugins : {};
   const npm = npmName(nativeId);
   const next = { ...lock, plugins: { ...plugins, [npm]: activatedEntry(entry(plugins[npm]), version) } };
@@ -24005,7 +24100,7 @@ function captureRollback3(nativeId, attemptId, operationId) {
   mkdirSafe(preparationDir2(attemptId, operationId));
   mkdirSync10(reference, { recursive: true });
   const target = managedPackageDir(nativeId);
-  if (existsSync26(target))
+  if (existsSync25(target))
     cpSync9(target, join33(reference, "package"), { recursive: true });
   writeFileSync10(join33(reference, "state.json"), JSON.stringify({ lock: captureLockRow(nativeId), link: currentLinkTarget(managedLink(nativeId)) }));
   return resolve20(reference);
@@ -24015,7 +24110,7 @@ function restoreRollback2(nativeId, reference) {
   const target = managedPackageDir(nativeId);
   rmSync10(target, { recursive: true, force: true });
   const backup = join33(reference, "package");
-  if (existsSync26(backup)) {
+  if (existsSync25(backup)) {
     mkdirSafe(dirname12(target));
     cpSync9(backup, target, { recursive: true });
   }
@@ -24029,7 +24124,7 @@ function restoreRollback2(nativeId, reference) {
 }
 function captureLockRow(nativeId) {
   const packageName = npmName(nativeId);
-  if (!existsSync26(lockPath()))
+  if (!existsSync25(lockPath()))
     return { packageName, present: false, row: null };
   const lock = readDoc(lockPath(), {}, "lockfile");
   const plugins = isDoc(lock.plugins) ? lock.plugins : {};
@@ -24039,7 +24134,7 @@ function captureLockRow(nativeId) {
 }
 function restoreLockRow(saved) {
   const file = lockPath();
-  if (!existsSync26(file)) {
+  if (!existsSync25(file)) {
     if (!saved.present)
       return;
     writeDoc(file, { plugins: { [saved.packageName]: saved.row } });
@@ -24055,7 +24150,7 @@ function restoreLockRow(saved) {
 }
 function currentLinkTarget(path) {
   try {
-    return lstatSync18(path).isSymbolicLink() ? resolve20(dirname12(path), readlinkSync2(path)) : null;
+    return lstatSync19(path).isSymbolicLink() ? resolve20(dirname12(path), readlinkSync2(path)) : null;
   } catch {
     return null;
   }
@@ -24097,7 +24192,7 @@ async function applyManaged(handle, stagingRoot) {
 }
 function activationAlreadyCurrent(nativeId, stage, version) {
   const target = managedPackageDir(nativeId);
-  if (!existsSync26(target) || !existsSync26(stage) || fingerprintTree(stage) !== fingerprintTree(target) || !linkPointsTo(managedLink(nativeId), target))
+  if (!existsSync25(target) || !existsSync25(stage) || fingerprintTree(stage) !== fingerprintTree(target) || !linkPointsTo(managedLink(nativeId), target))
     return false;
   const lock = readDoc(lockPath(), { plugins: {}, settings: {} }, "lockfile");
   const plugins = object8(lock.plugins, "lockfile plugins");
@@ -24158,9 +24253,10 @@ function captureRecorded(activation, route, attemptId, operationId, affectedOper
 // src/native-hook-writer.ts
 init_hooks();
 init_hook_build();
-import { chmodSync as chmodSync2, cpSync as cpSync10, existsSync as existsSync27, lstatSync as lstatSync19, mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync10, renameSync as renameSync8, rmSync as rmSync11, writeFileSync as writeFileSync11 } from "node:fs";
+import { chmodSync as chmodSync2, cpSync as cpSync10, existsSync as existsSync26, lstatSync as lstatSync20, mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync10, renameSync as renameSync8, rmSync as rmSync11, writeFileSync as writeFileSync11 } from "node:fs";
 import { dirname as dirname13, join as join34 } from "node:path";
 import { tmpdir as tmpdir7 } from "node:os";
+init_compatibility();
 function probeHookHostVersion(command, override) {
   const binary = process.env[override] ?? which(command);
   if (!binary)
@@ -24182,8 +24278,8 @@ function createNativeHookWriter(options) {
     if (reader.listInstalled().some((item) => item.id === id && item.path !== target)) {
       throw new Error("Native hook identity already belongs to a historical standalone install; remove that owned install before retrying: " + id);
     }
-    const owner = existsSync27(target) ? readHookOwner(target) : null;
-    if (existsSync27(target) && (owner === null || owner.pluginId !== id || owner.source !== source)) {
+    const owner = existsSync26(target) ? readHookOwner(target) : null;
+    if (existsSync26(target) && (owner === null || owner.pluginId !== id || owner.source !== source)) {
       throw new Error("Native hook package is not owned for this source: " + target);
     }
     const raw = registrationText(registration);
@@ -24207,7 +24303,7 @@ function createNativeHookWriter(options) {
     }, [profile]);
     if (admission.status === "refused")
       throw new PackageCapabilityError(store.id, admission);
-    if (existsSync27(join34(plugin.dir, NATIVE_HOOK_MARKER)))
+    if (existsSync26(join34(plugin.dir, NATIVE_HOOK_MARKER)))
       throw new Error("Source contains reserved native hook ownership metadata");
     preflightPortableHooks(adapter, plugin.dir);
     checkTarget(idFor(plugin), resolved.sourceUri);
@@ -24232,7 +24328,7 @@ function createNativeHookWriter(options) {
           fingerprint: plugin.contentFingerprint ?? fingerprintTree(plugin.dir)
         }) + `
 `);
-        const unchanged = existsSync27(target) && fingerprintTree(target) === fingerprintTree(compiled) && registrationEnabled(registration);
+        const unchanged = existsSync26(target) && fingerprintTree(target) === fingerprintTree(compiled) && registrationEnabled(registration);
         if (opts?.dryRun) {
           console.log("[" + store.id + "] would register native hooks: " + target);
           return unchanged ? "unchanged" : undefined;
@@ -24249,7 +24345,7 @@ function createNativeHookWriter(options) {
         const expectedFingerprint = fingerprintTree(stage);
         let activated = false, moved = false, committed = false;
         try {
-          if (existsSync27(target)) {
+          if (existsSync26(target)) {
             renameSync8(target, backup);
             moved = true;
           }
@@ -24268,7 +24364,7 @@ function createNativeHookWriter(options) {
             renameSync8(backup, target);
           throw error;
         } finally {
-          if (committed || !existsSync27(backup))
+          if (committed || !existsSync26(backup))
             rmSync11(transaction, { recursive: true, force: true });
         }
       } finally {
@@ -24278,7 +24374,7 @@ function createNativeHookWriter(options) {
     async remove(id, removeOptions) {
       const target = hookPackagePath(store, id);
       assertHookPath(store, target);
-      if (!existsSync27(target))
+      if (!existsSync26(target))
         return options.legacyRemove(id, removeOptions);
       const owner = readHookOwner(target);
       if (owner === null || owner.pluginId !== id || removeOptions?.source !== undefined && owner.source !== removeOptions.source) {
@@ -24301,12 +24397,12 @@ function createNativeHookWriter(options) {
           committed = true;
         } catch (error) {
           restoreRegistration(registration, before, after);
-          if (!existsSync27(target))
+          if (!existsSync26(target))
             renameSync8(backup, target);
           throw error;
         }
       } finally {
-        if (committed || !existsSync27(backup))
+        if (committed || !existsSync26(backup))
           rmSync11(transaction, { recursive: true, force: true });
       }
     },
@@ -24320,11 +24416,10 @@ function nextRegistration(registration, raw, enabled) {
     return enabled ? registration.content : undefined;
   const value = registrationDocument(registration, raw);
   const previous = value[registration.field] ?? [];
-  const entries = previous.filter((entry) => entry !== registration.entry);
-  if (enabled)
-    entries.push(registration.entry);
-  if (entries.length === 0 && !Object.hasOwn(value, registration.field) && !enabled)
+  const present = previous.includes(registration.entry);
+  if (enabled === present)
     return raw;
+  const entries = enabled ? [...previous, registration.entry] : previous.filter((entry) => entry !== registration.entry);
   value[registration.field] = entries;
   return JSON.stringify(value, null, 2) + `
 `;
@@ -24349,7 +24444,7 @@ function writeExactFile(path, text) {
     rmSync11(path, { force: true });
     return;
   }
-  const mode = existsSync27(path) ? lstatSync19(path).mode & 511 : 420;
+  const mode = existsSync26(path) ? lstatSync20(path).mode & 511 : 420;
   mkdirSync11(dirname13(path), { recursive: true });
   const temporary = mkdtempSync10(join34(dirname13(path), ".plugnz-hook-write-"));
   try {
@@ -24363,7 +24458,7 @@ function writeExactFile(path, text) {
 }
 
 // src/hosts/pi-writer.ts
-import { existsSync as existsSync28, lstatSync as lstatSync20, mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync11, readFileSync as readFileSync29, readdirSync as readdirSync19, renameSync as renameSync9, rmSync as rmSync12, writeFileSync as writeFileSync12 } from "node:fs";
+import { existsSync as existsSync27, lstatSync as lstatSync21, mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync11, readFileSync as readFileSync29, readdirSync as readdirSync19, renameSync as renameSync9, rmSync as rmSync12, writeFileSync as writeFileSync12 } from "node:fs";
 import { basename as basename4, dirname as dirname14, join as join35, resolve as resolve21 } from "node:path";
 import { tmpdir as tmpdir8 } from "node:os";
 var MARKER7 = ".plgnz-install.json";
@@ -24397,7 +24492,7 @@ var piWriter = {
       const backups = [];
       try {
         for (const candidate of [...new Set([target, ...prior])]) {
-          if (!existsSync28(candidate)) {
+          if (!existsSync27(candidate)) {
             backups.push({ target: candidate });
             continue;
           }
@@ -24454,7 +24549,7 @@ var piWriter = {
 function stagePlugin4(source, stage, plugin, market) {
   assertTree(source);
   const root = join35(source, "skills");
-  if (!existsSync28(root) || !lstatSync20(root).isDirectory())
+  if (!existsSync27(root) || !lstatSync21(root).isDirectory())
     throw new Error("Pi standalone delivery requires plugin skills/ directories");
   const destination = join35(stage, packageName(plugin, market));
   projectPluginForPi(source, destination, plugin);
@@ -24462,7 +24557,7 @@ function stagePlugin4(source, stage, plugin, market) {
   const walk = (dir) => {
     for (const entry of readdirSync19(dir)) {
       const path = join35(dir, entry);
-      const stat = lstatSync20(path);
+      const stat = lstatSync21(path);
       if (stat.isDirectory())
         walk(path);
       else if (entry === "SKILL.md")
@@ -24506,7 +24601,7 @@ function packageName(plugin, market) {
 }
 function owner2(dir) {
   const file = join35(dir, MARKER7);
-  if (!existsSync28(file))
+  if (!existsSync27(file))
     return null;
   try {
     const x = JSON.parse(readFileSync29(file, "utf8"));
@@ -24522,12 +24617,12 @@ function owner2(dir) {
 }
 function ownedFor(id, source) {
   assertPiStore();
-  if (!existsSync28(skillsDir()))
+  if (!existsSync27(skillsDir()))
     return [];
   const out = [];
   for (const name of readdirSync19(skillsDir())) {
     const path = join35(skillsDir(), name);
-    if (!lstatSync20(path).isDirectory())
+    if (!lstatSync21(path).isDirectory())
       continue;
     const mark = owner2(path);
     if (mark?.pluginId === id && (source === undefined || mark.source === source))
@@ -24537,7 +24632,7 @@ function ownedFor(id, source) {
 }
 function checkTarget(target, id, source) {
   assertUnder(skillsDir(), target);
-  if (!existsSync28(target))
+  if (!existsSync27(target))
     return;
   const mark = owner2(target);
   if (mark === null)
@@ -24546,7 +24641,7 @@ function checkTarget(target, id, source) {
     throw new Error(`Pi standalone skill belongs to another source; refusing to replace it: ${target}`);
 }
 function sameTree6(stage, target) {
-  if (!existsSync28(target))
+  if (!existsSync27(target))
     return false;
   const bytes = readFileSync29;
   const list = (root) => {
@@ -24555,7 +24650,7 @@ function sameTree6(stage, target) {
       for (const name of readdirSync19(dir).sort()) {
         if (name === MARKER7)
           continue;
-        const path = join35(dir, name), relative = prefix ? `${prefix}/${name}` : name, stat = lstatSync20(path);
+        const path = join35(dir, name), relative = prefix ? `${prefix}/${name}` : name, stat = lstatSync21(path);
         if (stat.isDirectory())
           walk(path, relative);
         else if (stat.isFile())
@@ -24570,11 +24665,11 @@ function sameTree6(stage, target) {
   return JSON.stringify(list(stage)) === JSON.stringify(list(target));
 }
 function assertTree(root) {
-  const stat = lstatSync20(root);
+  const stat = lstatSync21(root);
   if (stat.isSymbolicLink() || !stat.isDirectory())
     throw new Error(`Pi plugin root is not a real directory: ${root}`);
   for (const name of readdirSync19(root)) {
-    const path = join35(root, name), child = lstatSync20(path);
+    const path = join35(root, name), child = lstatSync21(path);
     if (child.isSymbolicLink())
       throw new Error(`Pi plugin contains symlink: ${path}`);
     if (child.isDirectory())
@@ -24604,18 +24699,18 @@ function assertPiStore() {
   let current = home;
   for (const part of [basename4(dirname14(root)), basename4(root)]) {
     current = join35(current, part);
-    if (existsSync28(current) && lstatSync20(current).isSymbolicLink())
+    if (existsSync27(current) && lstatSync21(current).isSymbolicLink())
       throw new Error(`Pi managed path component is a symlink: ${current}`);
   }
-  if (existsSync28(root))
+  if (existsSync27(root))
     assertRealDirectory(root);
-  if (existsSync28(skillsDir())) {
+  if (existsSync27(skillsDir())) {
     assertUnder(root, skillsDir());
     assertRealDirectory(skillsDir());
   }
 }
 function assertRealDirectory(path) {
-  const stat = lstatSync20(path);
+  const stat = lstatSync21(path);
   if (stat.isSymbolicLink())
     throw new Error(`Pi managed path component is a symlink: ${path}`);
   if (!stat.isDirectory())
@@ -24628,7 +24723,7 @@ function assertUnder(root, path) {
   let current = base;
   for (const part of candidate.slice(base.length).split("/").filter(Boolean)) {
     current = join35(current, part);
-    if (existsSync28(current) && lstatSync20(current).isSymbolicLink())
+    if (existsSync27(current) && lstatSync21(current).isSymbolicLink())
       throw new Error(`Pi managed path component is a symlink: ${current}`);
   }
 }
@@ -24644,7 +24739,7 @@ var piHookWriter = createNativeHookWriter({
 });
 
 // src/hosts/dcode-writer.ts
-import { cpSync as cpSync11, existsSync as existsSync29, lstatSync as lstatSync21, mkdirSync as mkdirSync13, mkdtempSync as mkdtempSync12, readFileSync as readFileSync30, readdirSync as readdirSync20, realpathSync as realpathSync5, renameSync as renameSync10, rmSync as rmSync13, writeFileSync as writeFileSync13 } from "node:fs";
+import { cpSync as cpSync11, existsSync as existsSync28, lstatSync as lstatSync22, mkdirSync as mkdirSync13, mkdtempSync as mkdtempSync12, readFileSync as readFileSync30, readdirSync as readdirSync20, realpathSync as realpathSync5, renameSync as renameSync10, rmSync as rmSync13, writeFileSync as writeFileSync13 } from "node:fs";
 import { basename as basename5, dirname as dirname15, join as join36, resolve as resolve22 } from "node:path";
 import { tmpdir as tmpdir9 } from "node:os";
 import { spawn as spawnChild } from "node:child_process";
@@ -24673,7 +24768,7 @@ function nativePython() {
     throw new Error("dcode native lock runtime is unavailable");
   const shebang = readFileSync30(binary, "utf8").split(/\r?\n/, 1)[0] ?? "";
   const match = /^#!(\/[^\s]+python(?:\d+(?:\.\d+)?)?)$/u.exec(shebang);
-  if (match?.[1] === undefined || !existsSync29(match[1]))
+  if (match?.[1] === undefined || !existsSync28(match[1]))
     throw new Error("dcode native Python interpreter is unverified; set OPEN_PLUGIN_DCODE_PYTHON_BIN to its verified interpreter");
   return match[1];
 }
@@ -24774,7 +24869,7 @@ function observeDcodeTarget(target) {
       throw new Error(`dcode install record ${nativeId} has duplicate rows`);
     const path = rowInstall(rows[0], nativeId);
     assertCachePath(path);
-    const present = existsSync29(path);
+    const present = existsSync28(path);
     const marker = present ? ownership3(path) : null;
     const body = present ? readDoc2(join36(path, MARKER8), {}, "ownership marker") : {};
     const owned = marker?.pluginId === nativeId;
@@ -24795,7 +24890,7 @@ function observeDcodeTarget(target) {
   });
 }
 function dcodeLifecycleReadback(binding) {
-  if (existsSync29(join36(dcodeStateDir(), READBACK_FAULT)))
+  if (existsSync28(join36(dcodeStateDir(), READBACK_FAULT)))
     throw new Error(`dcode readback failed for ${binding.nativeId}`);
   const installations = observeDcodeTarget(binding.target);
   const row = installations.find((item) => item.nativeId === binding.nativeId);
@@ -24816,7 +24911,7 @@ function dcodeLifecycleReadback(binding) {
     transition: { requirement: present ? "restart" : "none", status: "effective" },
     installedFingerprint: present ? row.installedFingerprint : null,
     contentRoots: present ? row.contentRoots : [],
-    retention: { pluginData: existsSync29(dataRoot) ? { state: "present", fingerprint: fingerprintTree(dataRoot) } : { state: "absent", fingerprint: null }, inactiveMetadata: { state: "absent", fingerprint: null } }
+    retention: { pluginData: existsSync28(dataRoot) ? { state: "present", fingerprint: fingerprintTree(dataRoot) } : { state: "absent", fingerprint: null }, inactiveMetadata: { state: "absent", fingerprint: null } }
   };
 }
 function captureDcodeRollback(binding, attemptId, operationId) {
@@ -24825,13 +24920,13 @@ function captureDcodeRollback(binding, attemptId, operationId) {
   const registry = readRegistry3(dcodeRegistryFile());
   const enabled = boolObject(readEnablement(dcodeEnablementFile()).enabledPlugins, "enabledPlugins");
   const row = object9(registry.plugins, "registry plugins")[binding.nativeId];
-  const state = { row: row ?? null, enabled: enabled[binding.nativeId] ?? null, registryExisted: existsSync29(dcodeRegistryFile()), enablementExisted: existsSync29(dcodeEnablementFile()) };
+  const state = { row: row ?? null, enabled: enabled[binding.nativeId] ?? null, registryExisted: existsSync28(dcodeRegistryFile()), enablementExisted: existsSync28(dcodeEnablementFile()) };
   writeFileSync13(join36(dir, "state.json"), JSON.stringify(state));
   for (const [index, item] of rowsFor(row).entries()) {
     const path = rowInstall(item, binding.nativeId);
     assertCachePath(path);
     assertNoSymlinks6(path);
-    if (existsSync29(path))
+    if (existsSync28(path))
       cpSync11(path, join36(dir, `content-${index}`), { recursive: true });
   }
   return dir;
@@ -24917,7 +25012,7 @@ var dcodeDefinition = {
   stageActivation: async (request) => {
     const dir = lifecycleDirectory(request.snapshot.attemptId, request.snapshot.operationId);
     const stagingRoot = join36(dir, "stage");
-    if (existsSync29(stagingRoot))
+    if (existsSync28(stagingRoot))
       throw new Error("dcode preparation stage already exists");
     mkdirSync13(stagingRoot, { recursive: true });
     const manifest = declaredManifest(request.snapshot.packageRoot, request.snapshot.packageName);
@@ -24939,7 +25034,7 @@ var dcodeDefinition = {
     const found = new Set;
     for (const candidate of dcodeMcpCandidates()) {
       const file = join36(projection.stagingRoot, candidate.kind === "spec" ? candidate.file : candidate.manifest);
-      if (!existsSync29(file))
+      if (!existsSync28(file))
         continue;
       const body = readDoc2(file, {}, "MCP document");
       if (typeof body.mcpServers !== "object" || body.mcpServers === null || Array.isArray(body.mcpServers))
@@ -24979,7 +25074,7 @@ var dcodeDefinition = {
       if (manifest.version !== projection.packageVersion)
         throw new Error("dcode legacy version differs; refusing adoption");
     }
-    if (existsSync29(target) && ownership3(target)?.pluginId !== projection.nativeId)
+    if (existsSync28(target) && ownership3(target)?.pluginId !== projection.nativeId)
       throw new Error("dcode lifecycle target is not owned");
     const rollbackReference = captureDcodeRollback(projection, projection.attemptId, projection.operationId);
     writeFileSync13(join36(rollbackReference, "next-path.json"), JSON.stringify({ target }));
@@ -24998,7 +25093,7 @@ var dcodeDefinition = {
     const target = lifecycleSlot(prepared.handle.nativeId, prepared.handle.projectedFingerprint);
     assertCachePath(target);
     mkdirSync13(dirname15(target), { recursive: true });
-    if (existsSync29(target)) {
+    if (existsSync28(target)) {
       const marker = ownership3(target);
       if (marker?.pluginId !== prepared.handle.nativeId)
         throw new Error("dcode lifecycle activation would overwrite foreign content");
@@ -25038,22 +25133,22 @@ var dcodeDefinition = {
   },
   rollback: async (handle) => {
     await acquireNativeLock(handle.attemptId, handle.operationId);
-    if (!existsSync29(join36(handle.rollbackReference, "state.json")))
+    if (!existsSync28(join36(handle.rollbackReference, "state.json")))
       throw new Error("dcode rollback snapshot is missing; recovery refused");
     const state = readDoc2(join36(handle.rollbackReference, "state.json"), {}, "rollback state");
     if (recoveringNativeLocks.has(`${handle.attemptId}:${handle.operationId}`))
       assertRecoveryRollbackMetadata(handle, state);
     for (const [index, root] of handle.prior.contentRoots.entries()) {
       const backup = join36(handle.rollbackReference, `content-${index}`);
-      if (!existsSync29(backup) || fingerprintTree(backup) !== root.fingerprint)
+      if (!existsSync28(backup) || fingerprintTree(backup) !== root.fingerprint)
         throw new Error("dcode rollback snapshot bytes do not match the sealed prior");
-      if (recoveringNativeLocks.has(`${handle.attemptId}:${handle.operationId}`) && existsSync29(root.path) && fingerprintTree(root.path) !== root.fingerprint)
+      if (recoveringNativeLocks.has(`${handle.attemptId}:${handle.operationId}`) && existsSync28(root.path) && fingerprintTree(root.path) !== root.fingerprint)
         throw new Error("dcode prior root changed outside the sealed operation; refusing stale overwrite");
     }
     const target = handle.projectedFingerprint === null ? undefined : lifecycleSlot(handle.nativeId, handle.projectedFingerprint);
     if (target !== undefined)
       assertCachePath(target);
-    if (target !== undefined && existsSync29(target) && !handle.prior.contentRoots.some((root) => resolve22(root.path) === resolve22(target))) {
+    if (target !== undefined && existsSync28(target) && !handle.prior.contentRoots.some((root) => resolve22(root.path) === resolve22(target))) {
       if (ownership3(target)?.pluginId !== handle.nativeId || recoveringNativeLocks.has(`${handle.attemptId}:${handle.operationId}`) && fingerprintTree(target) !== handle.projectedFingerprint)
         throw new Error("dcode rollback candidate differs from the sealed operation; refusing stale overwrite");
       rmSync13(target, { recursive: true });
@@ -25062,7 +25157,7 @@ var dcodeDefinition = {
       const path = rowInstall(row, handle.nativeId);
       assertCachePath(path);
       const backup = join36(handle.rollbackReference, `content-${index}`);
-      if (existsSync29(backup)) {
+      if (existsSync28(backup)) {
         mkdirSync13(dirname15(path), { recursive: true });
         cpSync11(backup, path, { recursive: true });
       }
@@ -25096,14 +25191,14 @@ var dcodeDefinition = {
       const next = readDoc2(nextFile, {}, "cleanup target");
       if (disposition === "verified-commit" && recovering !== undefined) {
         const retiredRoots = recovering.prior.contentRoots.filter((root) => !recovering.expected.contentRoots.some((next) => resolve22(next.path) === resolve22(root.path)));
-        if (existsSync29(priorFile))
+        if (existsSync28(priorFile))
           assertRecoveryRollbackMetadata(recovering, readDoc2(priorFile, {}, "rollback state"));
-        else if (retiredRoots.some((root) => existsSync29(root.path)))
+        else if (retiredRoots.some((root) => existsSync28(root.path)))
           throw new Error("dcode cleanup prior metadata is missing; recovery refused");
-        if (existsSync29(nextFile) && (typeof next.target !== "string" || !recovering.expected.contentRoots.some((root) => resolve22(root.path) === resolve22(next.target))))
+        if (existsSync28(nextFile) && (typeof next.target !== "string" || !recovering.expected.contentRoots.some((root) => resolve22(root.path) === resolve22(next.target))))
           throw new Error("dcode cleanup target differs from the sealed expected root; recovery refused");
         for (const root of retiredRoots) {
-          if (existsSync29(root.path) && fingerprintTree(root.path) !== root.fingerprint)
+          if (existsSync28(root.path) && fingerprintTree(root.path) !== root.fingerprint)
             throw new Error("dcode cleanup prior root changed; refusing stale deletion");
         }
         for (const root of retiredRoots)
@@ -25185,7 +25280,7 @@ var dcodeWriter = {
       const slot = ownership3(target);
       if (slot !== null && (slot.source !== resolved.sourceUri || slot.pluginId !== id))
         throw new Error(`dcode plugin ${id} belongs to another source; refusing to replace it`);
-      if (existsSync29(target) && slot === null)
+      if (existsSync28(target) && slot === null)
         throw new Error(`dcode cache target is unowned; refusing to replace it: ${target}`);
       const former = prior.kind === "none" ? undefined : prior.path;
       const unchanged = (former === undefined || resolve22(former) === resolve22(target)) && slot?.kind === "current" && slot.fingerprint === sourceFingerprint && slot.projectedFingerprint === projected && slot.sourceRevision === resolved.sha && sameTree7(stage, target);
@@ -25229,13 +25324,13 @@ var dcodeWriter = {
       }
     } finally {
       rmSync13(stage, { recursive: true, force: true });
-      if (opts?.dryRun !== true && existsSync29(managedRoot) && readdirSync20(managedRoot).every((name) => name.startsWith(".plgnz-dcode-"))) {
+      if (opts?.dryRun !== true && existsSync28(managedRoot) && readdirSync20(managedRoot).every((name) => name.startsWith(".plgnz-dcode-"))) {
         rmSync13(managedRoot, { recursive: true, force: true });
       }
     }
   },
   async pin(plugin, opts) {
-    if (plugin.path === undefined || !existsSync29(plugin.path))
+    if (plugin.path === undefined || !existsSync28(plugin.path))
       return { changes: [], refusals: [] };
     assertCachePath(plugin.path);
     if (ownership3(plugin.path)?.pluginId !== plugin.id)
@@ -25319,7 +25414,7 @@ function assessPrior(value, id, source, adopt, name, version, sourceDir) {
     throw new Error(`dcode plugin ${id} has a conflicting ownership marker`);
   if (!adopt)
     throw new Error(`dcode install record ${id} is not plgnz-owned; refusing to replace it`);
-  if (!existsSync29(install) || lstatSync21(install).isSymbolicLink() || !lstatSync21(install).isDirectory()) {
+  if (!existsSync28(install) || lstatSync22(install).isSymbolicLink() || !lstatSync22(install).isDirectory()) {
     throw new Error(`dcode install record ${id} is not plgnz-owned; refusing to replace it`);
   }
   assertNoSymlinks6(install);
@@ -25342,7 +25437,7 @@ function assessPrior(value, id, source, adopt, name, version, sourceDir) {
   return { kind: "adoptable", path: install };
 }
 function declaredManifest(dir, expectedName) {
-  const manifest = MANIFESTS.map((relative) => join36(dir, relative)).find((file) => existsSync29(file));
+  const manifest = MANIFESTS.map((relative) => join36(dir, relative)).find((file) => existsSync28(file));
   if (manifest === undefined)
     throw new Error("dcode stage has no supported plugin manifest");
   let parsed;
@@ -25367,7 +25462,7 @@ function stagePlugin5(source, stage, name, version) {
     throw new Error(`dcode manifest identity does not match ${name}`);
 }
 function forceAutoUpdateOff(dir) {
-  const manifest = MANIFESTS.map((relative) => join36(dir, relative)).find((file) => existsSync29(file));
+  const manifest = MANIFESTS.map((relative) => join36(dir, relative)).find((file) => existsSync28(file));
   if (manifest === undefined)
     throw new Error("dcode stage has no supported plugin manifest");
   const parsed = object9(JSON.parse(readFileSync30(manifest, "utf8")), "manifest");
@@ -25381,7 +25476,7 @@ function forceAutoUpdateOff(dir) {
 `);
 }
 function assertReadback(id, registryFile, enablementFile, target, version, projected, sourceRevision) {
-  if (existsSync29(join36(dcodeStateDir(), READBACK_FAULT)))
+  if (existsSync28(join36(dcodeStateDir(), READBACK_FAULT)))
     throw new Error(`dcode readback failed for ${id}`);
   const registry = readRegistry3(registryFile);
   const enablement = readEnablement(enablementFile);
@@ -25407,18 +25502,18 @@ function assertReadback(id, registryFile, enablementFile, target, version, proje
 function retireFormer(path) {
   try {
     assertCachePath(path);
-    const stat = lstatSync21(path);
+    const stat = lstatSync22(path);
     if (stat.isSymbolicLink() || !stat.isDirectory())
       throw new Error("former cache is not a directory");
     const backup = join36(dirname15(path), `.plgnz-dcode-retire-${basename5(path)}`);
-    if (existsSync29(backup)) {
-      if (!lstatSync21(backup).isDirectory())
+    if (existsSync28(backup)) {
+      if (!lstatSync22(backup).isDirectory())
         throw new Error("retire destination is not a directory");
       rmSync13(backup, { recursive: true, force: true });
     }
     renameSync10(path, backup);
     rmSync13(backup, { recursive: true, force: true });
-    if (existsSync29(path))
+    if (existsSync28(path))
       throw new Error("former cache remains");
     return;
   } catch {
@@ -25440,7 +25535,7 @@ function listTree(root) {
         continue;
       const file = join36(dir, entry);
       const relative = prefix ? `${prefix}/${entry}` : entry;
-      const stat = lstatSync21(file);
+      const stat = lstatSync22(file);
       if (stat.isSymbolicLink())
         throw new Error(`dcode plugin contains symlink: ${file}`);
       if (stat.isDirectory())
@@ -25455,12 +25550,12 @@ function listTree(root) {
   return out;
 }
 function sameTree7(left, right) {
-  if (!existsSync29(right))
+  if (!existsSync28(right))
     return false;
   return JSON.stringify(listTree(left)) === JSON.stringify(listTree(right));
 }
 function readDoc2(file, fallback, label) {
-  if (!existsSync29(file))
+  if (!existsSync28(file))
     return fallback;
   try {
     const value = JSON.parse(readFileSync30(file, "utf8"));
@@ -25520,7 +25615,7 @@ function ownership3(dir) {
   assertManagedPath4(dir);
   const file = join36(dir, MARKER8);
   assertManagedPath4(file);
-  if (!existsSync29(file))
+  if (!existsSync28(file))
     return null;
   try {
     const value = object9(JSON.parse(readFileSync30(file, "utf8")), "ownership marker");
@@ -25550,7 +25645,7 @@ function writeDoc2(file, value) {
 }
 function snapshot2(file) {
   const read = readFileSync30;
-  return existsSync29(file) ? read(file) : undefined;
+  return existsSync28(file) ? read(file) : undefined;
 }
 function restore3(file, before) {
   try {
@@ -25563,7 +25658,7 @@ function restore3(file, before) {
   } catch {}
 }
 function activate5(stage, target, parent) {
-  if (!existsSync29(target)) {
+  if (!existsSync28(target)) {
     renameSync10(stage, target);
     return { commit: () => {}, rollback: () => rmSync13(target, { recursive: true, force: true }) };
   }
@@ -25589,7 +25684,7 @@ function moveAside3(path, parent = dirname15(path)) {
   return {
     commit: () => rmSync13(backupRoot, { recursive: true, force: true }),
     rollback: () => {
-      if (existsSync29(backup))
+      if (existsSync28(backup))
         renameSync10(backup, path);
       rmSync13(backupRoot, { recursive: true, force: true });
     }
@@ -25598,7 +25693,7 @@ function moveAside3(path, parent = dirname15(path)) {
 function assertNoSymlinks6(dir) {
   for (const entry of readdirSync20(dir)) {
     const file = join36(dir, entry);
-    const stat = lstatSync21(file);
+    const stat = lstatSync22(file);
     if (stat.isSymbolicLink())
       throw new Error(`dcode plugin contains symlink: ${file}`);
     if (stat.isDirectory())
@@ -25615,19 +25710,19 @@ function assertCachePath(path) {
   if (target === root || !target.startsWith(`${root}/`))
     throw new Error(`dcode path escapes managed cache: ${path}`);
   let current = root;
-  if (existsSync29(current) && lstatSync21(current).isSymbolicLink())
+  if (existsSync28(current) && lstatSync22(current).isSymbolicLink())
     throw new Error(`dcode native path contains symlink: ${current}`);
   const relative = target.slice(root.length).replace(/^\//, "");
   for (const part of relative.length === 0 ? [] : relative.split("/")) {
     if (part === "" || part === "." || part === "..")
       throw new Error(`dcode path escapes managed cache: ${path}`);
     current = join36(current, part);
-    if (!existsSync29(current))
+    if (!existsSync28(current))
       return;
-    if (lstatSync21(current).isSymbolicLink())
+    if (lstatSync22(current).isSymbolicLink())
       throw new Error(`dcode native path contains symlink: ${current}`);
   }
-  if (!existsSync29(target) || !existsSync29(root))
+  if (!existsSync28(target) || !existsSync28(root))
     return;
   const realRoot = realpathSync5(root);
   const realTarget = realpathSync5(target);
@@ -25640,18 +25735,18 @@ function assertManagedPath4(path) {
   if (target !== root && !target.startsWith(`${root}/`))
     throw new Error(`dcode path escapes native root: ${path}`);
   let current = root;
-  if (existsSync29(current) && lstatSync21(current).isSymbolicLink())
+  if (existsSync28(current) && lstatSync22(current).isSymbolicLink())
     throw new Error(`dcode native path contains symlink: ${current}`);
   const relative = target.slice(root.length).replace(/^\//, "");
   for (const part of relative ? relative.split("/") : []) {
     current = join36(current, part);
-    if (existsSync29(current) && lstatSync21(current).isSymbolicLink())
+    if (existsSync28(current) && lstatSync22(current).isSymbolicLink())
       throw new Error(`dcode native path contains symlink: ${current}`);
   }
 }
 
 // src/hosts/opencode-writer.ts
-import { cpSync as cpSync12, existsSync as existsSync30, lstatSync as lstatSync22, mkdirSync as mkdirSync14, mkdtempSync as mkdtempSync13, readFileSync as readFileSync31, readdirSync as readdirSync21, renameSync as renameSync11, rmSync as rmSync14, writeFileSync as writeFileSync14 } from "node:fs";
+import { cpSync as cpSync12, existsSync as existsSync29, lstatSync as lstatSync23, mkdirSync as mkdirSync14, mkdtempSync as mkdtempSync13, readFileSync as readFileSync31, readdirSync as readdirSync21, renameSync as renameSync11, rmSync as rmSync14, writeFileSync as writeFileSync14 } from "node:fs";
 import { dirname as dirname16, join as join37 } from "node:path";
 import { tmpdir as tmpdir10 } from "node:os";
 var MARKER9 = ".plgnz-install.json";
@@ -25683,7 +25778,7 @@ var opencodeWriter = {
       try {
         for (const key of keys2()) {
           const target = targets[key];
-          if (!existsSync30(target)) {
+          if (!existsSync29(target)) {
             moves.push({ target });
             continue;
           }
@@ -25722,7 +25817,7 @@ var opencodeWriter = {
     const targets = targetsFor(name, plugin);
     assertStore();
     for (const key of keys2())
-      if (existsSync30(targets[key])) {
+      if (existsSync29(targets[key])) {
         assertManagedTree(targets[key]);
         if (!owned(targets[key], id))
           throw new Error(`OpenCode target is not owned by ${id}: ${targets[key]}`);
@@ -25731,7 +25826,7 @@ var opencodeWriter = {
     try {
       for (const key of keys2()) {
         const target = targets[key];
-        if (!existsSync30(target))
+        if (!existsSync29(target))
           continue;
         const root = mkdtempSync13(join37(dirname16(target), ".plgnz-opencode-remove-"));
         const backup = join37(root, "previous");
@@ -25777,13 +25872,13 @@ function stagePackage(source, stage, name, activePrivateRoot, ownerValue) {
   return { private: privateRoot, skills, commands };
 }
 function sourceCommands(source) {
-  const root = existsSync30(join37(source, ".claude", "commands")) ? join37(source, ".claude", "commands") : join37(source, "commands");
-  if (!existsSync30(root))
+  const root = existsSync29(join37(source, ".claude", "commands")) ? join37(source, ".claude", "commands") : join37(source, "commands");
+  if (!existsSync29(root))
     return [];
   const out = [];
   const walk = (dir) => {
     for (const entry of readdirSync21(dir).sort()) {
-      const path = join37(dir, entry), stat = lstatSync22(path);
+      const path = join37(dir, entry), stat = lstatSync23(path);
       if (stat.isDirectory()) {
         walk(path);
         continue;
@@ -25804,12 +25899,12 @@ function sourceCommands(source) {
 }
 function manualSkills(source) {
   const root = join37(source, "skills");
-  if (!existsSync30(root))
+  if (!existsSync29(root))
     return [];
   const out = [];
   const walk = (dir) => {
     for (const entry of readdirSync21(dir).sort()) {
-      const path = join37(dir, entry), stat = lstatSync22(path);
+      const path = join37(dir, entry), stat = lstatSync23(path);
       if (stat.isDirectory())
         walk(path);
       else if (stat.isFile() && entry === "SKILL.md") {
@@ -25915,7 +26010,7 @@ function targetsFor(name, commandNamespace) {
 }
 function owner3(path) {
   const file = join37(path, MARKER9);
-  if (!existsSync30(file))
+  if (!existsSync29(file))
     return null;
   try {
     const value = JSON.parse(readFileSync31(file, "utf8"));
@@ -25935,7 +26030,7 @@ function owned(privateTarget, id, source) {
 }
 function checkTargets(targets, id, source) {
   for (const key of keys2())
-    if (existsSync30(targets[key])) {
+    if (existsSync29(targets[key])) {
       assertManagedTree(targets[key]);
       if (!owned(targets[key], id, source))
         throw new Error(`OpenCode target is unowned or belongs to another source: ${targets[key]}`);
@@ -25945,7 +26040,7 @@ function allSame(staged, targets) {
   return keys2().every((key) => sameTree8(staged[key], targets[key]));
 }
 function sameTree8(a, b) {
-  if (!existsSync30(a) || !existsSync30(b))
+  if (!existsSync29(a) || !existsSync29(b))
     return false;
   const bytes = readFileSync31;
   const list = (root) => {
@@ -25954,7 +26049,7 @@ function sameTree8(a, b) {
       for (const name of readdirSync21(dir).sort()) {
         if (name === MARKER9)
           continue;
-        const path = join37(dir, name), rel = prefix ? `${prefix}/${name}` : name, stat = lstatSync22(path);
+        const path = join37(dir, name), rel = prefix ? `${prefix}/${name}` : name, stat = lstatSync23(path);
         if (stat.isDirectory())
           walk(path, rel);
         else if (stat.isFile())
@@ -25969,11 +26064,11 @@ function sameTree8(a, b) {
   return JSON.stringify(list(a)) === JSON.stringify(list(b));
 }
 function assertTree2(root) {
-  const stat = lstatSync22(root);
+  const stat = lstatSync23(root);
   if (stat.isSymbolicLink() || !stat.isDirectory())
     throw new Error(`OpenCode plugin root is not a real directory: ${root}`);
   for (const name of readdirSync21(root)) {
-    const path = join37(root, name), child = lstatSync22(path);
+    const path = join37(root, name), child = lstatSync23(path);
     if (name === MARKER9)
       throw new Error(`OpenCode plugin reserves ${MARKER9}: ${path}`);
     if (child.isSymbolicLink())
@@ -25985,11 +26080,11 @@ function assertTree2(root) {
   }
 }
 function assertManagedTree(root) {
-  const stat = lstatSync22(root);
+  const stat = lstatSync23(root);
   if (stat.isSymbolicLink() || !stat.isDirectory())
     throw new Error(`OpenCode managed tree is unsafe: ${root}`);
   for (const name of readdirSync21(root)) {
-    const path = join37(root, name), child = lstatSync22(path);
+    const path = join37(root, name), child = lstatSync23(path);
     if (child.isSymbolicLink())
       throw new Error(`OpenCode managed tree contains symlink: ${path}`);
     if (child.isDirectory())
@@ -26000,11 +26095,11 @@ function assertManagedTree(root) {
 }
 function assertSupportedRoot(source) {
   for (const entry of ["agents", "hooks", ".claude/agents", ".claude/hooks", "mcp.json", ".mcp.json"])
-    if (existsSync30(join37(source, entry)))
+    if (existsSync29(join37(source, entry)))
       throw new Error(`OpenCode cannot preserve root ${entry} semantics: ${join37(source, entry)}`);
   for (const file of ["plugin.json", ".plugin/plugin.json", ".claude-plugin/plugin.json"]) {
     const path = join37(source, file);
-    if (!existsSync30(path))
+    if (!existsSync29(path))
       continue;
     let manifest;
     try {
@@ -26021,7 +26116,7 @@ function assertSupportedRoot(source) {
 }
 function assertStore() {
   for (const path of [opencodeRoot(), join37(opencodeRoot(), ".plgnz"), opencodePackagesDir(), opencodeSkillsDir(), opencodeCommandsDir()])
-    if (existsSync30(path) && (!lstatSync22(path).isDirectory() || lstatSync22(path).isSymbolicLink()))
+    if (existsSync29(path) && (!lstatSync23(path).isDirectory() || lstatSync23(path).isSymbolicLink()))
       throw new Error(`OpenCode managed path is unsafe: ${path}`);
 }
 function ensureStore2() {
@@ -26043,7 +26138,7 @@ var opencodeHookWriter = createNativeHookWriter({
 
 // src/hosts/grok-writer.ts
 import { spawnSync as spawnSync6 } from "node:child_process";
-import { cpSync as cpSync13, existsSync as existsSync31, lstatSync as lstatSync23, mkdirSync as mkdirSync15, mkdtempSync as mkdtempSync14, readFileSync as readFileSync32, readdirSync as readdirSync22, readlinkSync as readlinkSync3, renameSync as renameSync12, rmSync as rmSync15, symlinkSync as symlinkSync2, writeFileSync as writeFileSync15 } from "node:fs";
+import { cpSync as cpSync13, existsSync as existsSync30, lstatSync as lstatSync24, mkdirSync as mkdirSync15, mkdtempSync as mkdtempSync14, readFileSync as readFileSync32, readdirSync as readdirSync22, readlinkSync as readlinkSync3, renameSync as renameSync12, rmSync as rmSync15, symlinkSync as symlinkSync2, writeFileSync as writeFileSync15 } from "node:fs";
 import { dirname as dirname17, join as join38, resolve as resolve24 } from "node:path";
 import { tmpdir as tmpdir11 } from "node:os";
 var stableId = (plugin) => plugin.marketplace === undefined ? plugin.name : `${plugin.name}@${plugin.marketplace}`;
@@ -26082,7 +26177,7 @@ var grokWriter = {
     const activation = join38(grokRoot(), "plugins", plugin.name);
     const existingNative = grok.listInstalled().find((candidate) => candidate.name === plugin.name)?.path;
     assertActivationLink(activation, existingNative);
-    const unchanged = lstatExists2(activation) && prior !== undefined && priorMarker?.fingerprint === plugin.contentFingerprint && priorMarker?.nativeFingerprint === nativeFingerprint && existsSync31(join38(prior, "plugins", plugin.name)) && fingerprintTree(join38(prior, "plugins", plugin.name)) === nativeFingerprint && current(id, prior, plugin.name, nativeFingerprint);
+    const unchanged = lstatExists2(activation) && prior !== undefined && priorMarker?.fingerprint === plugin.contentFingerprint && priorMarker?.nativeFingerprint === nativeFingerprint && existsSync30(join38(prior, "plugins", plugin.name)) && fingerprintTree(join38(prior, "plugins", plugin.name)) === nativeFingerprint && current(id, prior, plugin.name, nativeFingerprint);
     if (opts?.dryRun)
       return unchanged ? "unchanged" : undefined;
     if (unchanged)
@@ -26228,7 +26323,7 @@ function basename6(path) {
 function assertActivationLink(link, nativePath) {
   if (!lstatExists2(link))
     return;
-  if (nativePath === undefined || !lstatSync23(link).isSymbolicLink() || canonical(nativePath) === undefined || canonical(link) !== canonical(nativePath)) {
+  if (nativePath === undefined || !lstatSync24(link).isSymbolicLink() || canonical(nativePath) === undefined || canonical(link) !== canonical(nativePath)) {
     throw new Error(`Grok activation path is not the registered native plugin: ${link}`);
   }
 }
@@ -26294,7 +26389,7 @@ function validateGrokSource(dir) {
 }
 function projectGrokSource(dir) {
   const manifest = join38(dir, "plugin.json");
-  if (existsSync31(manifest)) {
+  if (existsSync30(manifest)) {
     const doc = JSON.parse(readFileSync32(manifest, "utf8"));
     if (doc["permissions"] !== undefined)
       throw new Error(`Grok permission semantics are unverified: ${manifest}`);
@@ -26302,13 +26397,13 @@ function projectGrokSource(dir) {
       throw new Error(`Grok custom command path is unverified: ${manifest}`);
   }
   const skills = join38(dir, "skills");
-  if (existsSync31(skills))
+  if (existsSync30(skills))
     for (const name of readdirSync22(skills)) {
       const skill = join38(skills, name);
-      if (!lstatSync23(skill).isDirectory())
+      if (!lstatSync24(skill).isDirectory())
         continue;
       const file = join38(skill, "SKILL.md");
-      if (!existsSync31(file))
+      if (!existsSync30(file))
         continue;
       const raw = readFileSync32(file, "utf8");
       const fm = openingFrontmatter3(raw, file);
@@ -26318,7 +26413,7 @@ function projectGrokSource(dir) {
         normalizeBooleanPolicy(fm, "user-invocable", "user_invocable", file);
       const sidecar = join38(skill, "agents", "openai.yaml");
       let sidecarManual;
-      if (existsSync31(sidecar)) {
+      if (existsSync30(sidecar)) {
         const parsed = yamlParse(readFileSync32(sidecar, "utf8"));
         const policy = parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed["policy"] : undefined;
         if (policy !== undefined) {
@@ -26340,19 +26435,19 @@ function projectGrokSource(dir) {
   const commands = join38(dir, "commands");
   const claudeCommands = join38(dir, ".claude", "commands");
   const seen = new Set;
-  for (const source of [existsSync31(commands) ? commands : claudeCommands]) {
-    if (!existsSync31(source))
+  for (const source of [existsSync30(commands) ? commands : claudeCommands]) {
+    if (!existsSync30(source))
       continue;
     for (const entry of readdirSync22(source)) {
       const path = join38(source, entry);
-      const stat = lstatSync23(path);
+      const stat = lstatSync24(path);
       if (!stat.isFile() || !/\.(md|toml)$/u.test(entry))
         continue;
       const name = entry.replace(/\.(md|toml)$/u, "");
       if (seen.has(name))
         throw new Error(`duplicate Grok command ${name}`);
       seen.add(name);
-      if (existsSync31(join38(skills, name, "SKILL.md")))
+      if (existsSync30(join38(skills, name, "SKILL.md")))
         throw new Error(`Grok command ${name} collides with a native skill`);
       const output = join38(commands, `${name}.md`);
       if (entry.endsWith(".md")) {
@@ -26403,11 +26498,11 @@ ${doc.prompt}`);
   }
   const legacyMcp = join38(dir, "mcp.json");
   const nativeMcp = join38(dir, ".mcp.json");
-  if (existsSync31(legacyMcp) && existsSync31(nativeMcp) && canonicalJson2(JSON.parse(readFileSync32(legacyMcp, "utf8")).mcpServers) !== canonicalJson2(JSON.parse(readFileSync32(nativeMcp, "utf8")).mcpServers))
+  if (existsSync30(legacyMcp) && existsSync30(nativeMcp) && canonicalJson2(JSON.parse(readFileSync32(legacyMcp, "utf8")).mcpServers) !== canonicalJson2(JSON.parse(readFileSync32(nativeMcp, "utf8")).mcpServers))
     throw new Error(`conflicting Grok MCP declarations: ${legacyMcp} and ${nativeMcp}`);
-  if (existsSync31(legacyMcp) && !existsSync31(nativeMcp))
+  if (existsSync30(legacyMcp) && !existsSync30(nativeMcp))
     cpSync13(legacyMcp, nativeMcp);
-  if (existsSync31(nativeMcp)) {
+  if (existsSync30(nativeMcp)) {
     const value = JSON.parse(readFileSync32(nativeMcp, "utf8"));
     const servers = value?.["mcpServers"];
     if (!value || typeof value !== "object" || !servers || typeof servers !== "object" || Array.isArray(servers))
@@ -26457,28 +26552,28 @@ function legacyCandidate(plugin, adopt, prior) {
     throw new Error(`Grok ${plugin.name}: an existing native install is not plgnz-owned; refusing to replace it`);
   const installed = canonical(matches[0].path);
   const base = canonical(join38(grokRoot(), "installed-plugins"));
-  if (installed === undefined || base === undefined || !installed.startsWith(`${base}/`) || lstatSync23(matches[0].path).isSymbolicLink())
+  if (installed === undefined || base === undefined || !installed.startsWith(`${base}/`) || lstatSync24(matches[0].path).isSymbolicLink())
     throw new Error(`Grok ${plugin.name}: legacy native path is unsafe`);
   const rows = repos().filter(([, repo]) => canonical(typeof repo.path === "string" ? repo.path : "") === installed);
   if (rows.length !== 1 || provenanceOf(rows[0][1]) !== null || namesOf(rows[0][1]).length !== 1 || namesOf(rows[0][1])[0] !== plugin.name)
     throw new Error(`Grok ${plugin.name}: legacy native identity is ambiguous`);
   const source = localSourceOf(rows[0][1]);
-  if (source === undefined || !existsSync31(source) || lstatSync23(source).isSymbolicLink())
+  if (source === undefined || !existsSync30(source) || lstatSync24(source).isSymbolicLink())
     throw new Error(`Grok ${plugin.name}: legacy source is missing or unsafe`);
   const oldManifest = JSON.parse(readFileSync32(join38(installed, "plugin.json"), "utf8"));
   const newManifest = JSON.parse(readFileSync32(join38(plugin.dir, "plugin.json"), "utf8"));
   if (oldManifest.name !== plugin.name || newManifest.name !== plugin.name || oldManifest.version !== newManifest.version || fingerprintTree(source) !== fingerprintTree(installed))
     throw new Error(`Grok ${plugin.name}: legacy source, version, and native bytes must match before adoption`);
   const link = join38(grokRoot(), "plugins", plugin.name);
-  if (existsSync31(link) || lstatExists2(link)) {
-    if (!lstatSync23(link).isSymbolicLink() || canonical(resolve24(dirname17(link), readlinkSync3(link))) !== installed)
+  if (existsSync30(link) || lstatExists2(link)) {
+    if (!lstatSync24(link).isSymbolicLink() || canonical(resolve24(dirname17(link), readlinkSync3(link))) !== installed)
       throw new Error(`Grok ${plugin.name}: unmanaged same-name plugin link blocks adoption`);
   }
   return { source, fingerprint: fingerprintTree(installed), ...lstatExists2(link) ? { link } : {} };
 }
 function lstatExists2(path) {
   try {
-    lstatSync23(path);
+    lstatSync24(path);
     return true;
   } catch {
     return false;
@@ -26505,7 +26600,7 @@ function assertOwnedRoot(root) {
   let current = base;
   for (const part of relative) {
     current = join38(current, part);
-    const stat = lstatSync23(current);
+    const stat = lstatSync24(current);
     if (stat.isSymbolicLink() || !stat.isDirectory())
       throw new Error(`Grok marketplace root is not a safe owned directory: ${current}`);
   }
@@ -26697,7 +26792,7 @@ function configPriorRecord(attemptId, operationId) {
 }
 function discardStage(attemptId, operationId) {
   const record = stageRecord(attemptId, operationId);
-  if (existsSync31(record)) {
+  if (existsSync30(record)) {
     const stage = readFileSync32(record, "utf8").trim();
     if (stage !== "")
       rmSync15(stage, { recursive: true, force: true });
@@ -26763,7 +26858,7 @@ function marketplacePathOf(repo) {
 }
 function savedRegistryRepo(directory) {
   const file = join38(directory, "registry-repo.json");
-  if (!existsSync31(file))
+  if (!existsSync30(file))
     return { key: null, repo: null };
   const value = JSON.parse(readFileSync32(file, "utf8"));
   const key = typeof value.key === "string" ? value.key : null;
@@ -26833,7 +26928,7 @@ function captureHostSnapshot(directory, nativeId, packageName, attemptId, operat
   rmSync15(directory, { recursive: true, force: true });
   mkdirSync15(directory, { recursive: true });
   const priorConfig = configPriorRecord(attemptId, operationId);
-  if (existsSync31(priorConfig))
+  if (existsSync30(priorConfig))
     cpSync13(priorConfig, join38(directory, "config-prior.json"));
   const plugin = grok.listInstalled().find((candidate) => candidate.id === nativeId);
   if (plugin?.path !== undefined) {
@@ -26851,7 +26946,7 @@ function captureHostSnapshot(directory, nativeId, packageName, attemptId, operat
   const matched = matchingRegistryRepo(nativeId, packageName);
   writeFileSync15(join38(directory, "registry-repo.json"), JSON.stringify(matched === undefined ? { key: null } : { key: matched[0], repo: matched[1] }));
   const link = join38(grokRoot(), "plugins", packageName);
-  if (lstatExists2(link) && lstatSync23(link).isSymbolicLink())
+  if (lstatExists2(link) && lstatSync24(link).isSymbolicLink())
     writeFileSync15(join38(directory, "link.txt"), readlinkSync3(link));
 }
 function freshNativePaths(directory, marketplacePath) {
@@ -26870,17 +26965,17 @@ function freshNativePaths(directory, marketplacePath) {
 }
 function restoreActivationLink(directory, packageName) {
   const link = join38(grokRoot(), "plugins", packageName);
-  if (existsSync31(join38(directory, "link.txt"))) {
+  if (existsSync30(join38(directory, "link.txt"))) {
     if (lstatExists2(link))
       rmSync15(link);
     symlinkSync2(readFileSync32(join38(directory, "link.txt"), "utf8"), link);
     return;
   }
-  if (lstatExists2(link) && lstatSync23(link).isSymbolicLink())
+  if (lstatExists2(link) && lstatSync24(link).isSymbolicLink())
     rmSync15(link);
 }
 function restoreConfigFile(record) {
-  if (!existsSync31(record))
+  if (!existsSync30(record))
     return;
   const value = JSON.parse(readFileSync32(record, "utf8"));
   const file = configFile3();
@@ -26898,8 +26993,8 @@ function restoreHostSnapshot(directory, scopeId, nativeId, packageName) {
   const finalPath = lifecycleMarketplace(scopeId, nativeId);
   const backupPath = join38(directory, "backup-path.txt");
   const nativePathFile = join38(directory, "native-path.txt");
-  const hadNative = existsSync31(nativePathFile);
-  const hadMarketplace = existsSync31(join38(directory, "marketplace"));
+  const hadNative = existsSync30(nativePathFile);
+  const hadMarketplace = existsSync30(join38(directory, "marketplace"));
   if (!hadNative)
     for (const native of freshNativePaths(directory, finalPath))
       rmSync15(native, { recursive: true, force: true });
@@ -26919,7 +27014,7 @@ function restoreHostSnapshot(directory, scopeId, nativeId, packageName) {
   restoreRegistryKey(directory, finalPath, packageName);
   restoreActivationLink(directory, packageName);
   restoreRecordedConfig(directory);
-  if (existsSync31(backupPath))
+  if (existsSync30(backupPath))
     rmSync15(readFileSync32(backupPath, "utf8"), { recursive: true, force: true });
   if (hadNative) {
     run(["plugin", "update", packageName]);
@@ -26946,7 +27041,7 @@ ${tail}`;
 }
 function pinPluginAutoUpdate(attemptId, operationId) {
   const file = configFile3();
-  const present = existsSync31(file);
+  const present = existsSync30(file);
   const current = present ? readFileSync32(file, "utf8") : "";
   const record = configPriorRecord(attemptId, operationId);
   mkdirSync15(dirname17(record), { recursive: true });
@@ -27048,7 +27143,7 @@ var grokLifecycleDefinition = {
       refreshStagedFingerprint(prepared.stagingRoot, nativeFingerprint);
       const finalPath = lifecycleMarketplace(prepared.handle.scopeId, prepared.handle.nativeId);
       const stagedRoot = dirname17(dirname17(prepared.stagingRoot));
-      const backup = existsSync31(finalPath) ? `${finalPath}.plgnz-backup-${prepared.handle.attemptId}` : undefined;
+      const backup = existsSync30(finalPath) ? `${finalPath}.plgnz-backup-${prepared.handle.attemptId}` : undefined;
       if (backup !== undefined)
         renameSync12(finalPath, backup);
       renameSync12(stagedRoot, finalPath);
@@ -27136,25 +27231,25 @@ function createGrokLifecycleAdapter() {
 
 // src/hosts/zcode-cli-writer.ts
 init_zcode_cli_hooks();
-import { chmodSync as chmodSync3, cpSync as cpSync14, existsSync as existsSync32, lstatSync as lstatSync25, mkdirSync as mkdirSync16, mkdtempSync as mkdtempSync15, readFileSync as readFileSync34, readdirSync as readdirSync24, realpathSync as realpathSync6, renameSync as renameSync13, rmSync as rmSync16, statSync as statSync13, writeFileSync as writeFileSync16 } from "node:fs";
+import { chmodSync as chmodSync3, cpSync as cpSync14, existsSync as existsSync31, lstatSync as lstatSync26, mkdirSync as mkdirSync16, mkdtempSync as mkdtempSync15, readFileSync as readFileSync34, readdirSync as readdirSync24, realpathSync as realpathSync6, renameSync as renameSync13, rmSync as rmSync16, statSync as statSync13, writeFileSync as writeFileSync16 } from "node:fs";
 import { basename as basename7, dirname as dirname19, join as join40, resolve as resolve26 } from "node:path";
 import { tmpdir as tmpdir12 } from "node:os";
 
 // src/hosts/zcode-cli-projection.ts
-import { lstatSync as lstatSync24, readFileSync as readFileSync33, readdirSync as readdirSync23 } from "node:fs";
+import { lstatSync as lstatSync25, readFileSync as readFileSync33, readdirSync as readdirSync23 } from "node:fs";
 import { dirname as dirname18, join as join39, relative as relative8, resolve as resolve25 } from "node:path";
 var encode2 = (value) => new TextEncoder().encode(value);
 var decode = (value) => new TextDecoder().decode(value);
 function readZcodeProjectionTree(root) {
   const tree = new Map;
   const walk = (path, prefix) => {
-    const stat = lstatSync24(path);
+    const stat = lstatSync25(path);
     if (stat.isSymbolicLink())
       throw new Error(`ZCode projection contains symlink: ${path}`);
     if (!stat.isDirectory())
       throw new Error(`ZCode projection root is not a directory: ${path}`);
     for (const name of readdirSync23(path).sort()) {
-      const file = join39(path, name), key = prefix === "" ? name : `${prefix}/${name}`, child = lstatSync24(file);
+      const file = join39(path, name), key = prefix === "" ? name : `${prefix}/${name}`, child = lstatSync25(file);
       if (child.isSymbolicLink())
         throw new Error(`ZCode projection contains symlink: ${file}`);
       if (child.isDirectory()) {
@@ -27426,7 +27521,7 @@ function projectZcodePlugin(source, destination, resourceCopy, resourceLinkRoot,
   const target = resolve26(destination);
   const ownedResources = resolve26(resourceCopy);
   const links = resolve26(resourceLinkRoot);
-  if (!existsSync32(input) || !statSync13(input).isDirectory())
+  if (!existsSync31(input) || !statSync13(input).isDirectory())
     throw new Error(`ZCode plugin source is not a directory: ${input}`);
   if (target === input || ownedResources === input || target.startsWith(`${input}/`) || ownedResources.startsWith(`${input}/`))
     throw new Error("ZCode projected outputs must not be inside the source");
@@ -27438,7 +27533,7 @@ function projectZcodePlugin(source, destination, resourceCopy, resourceLinkRoot,
   }
   for (const output of [target, ownedResources]) {
     try {
-      lstatSync25(output);
+      lstatSync26(output);
       assertNoSymlinks7(output);
     } catch (error) {
       if (error.code !== "ENOENT")
@@ -27487,7 +27582,7 @@ function readJson3(file) {
   }
 }
 function commandNames(dir, prefix = "") {
-  if (!existsSync32(dir))
+  if (!existsSync31(dir))
     return [];
   const out = [];
   for (const name of readdirSync24(dir)) {
@@ -27532,7 +27627,7 @@ function nativeForLogical(logicalId) {
 }
 function sameCandidate(prior, market, resources, resourceRoot, logical, native, source, fingerprint) {
   const marker = readZcodeOwnership(prior.installPath);
-  if (marker?.logicalId !== logical || marker.nativeId !== native || marker.source !== source || marker.fingerprint !== fingerprint || marker.resourcePath !== resourceRoot || !existsSync32(resourceRoot))
+  if (marker?.logicalId !== logical || marker.nativeId !== native || marker.source !== source || marker.fingerprint !== fingerprint || marker.resourcePath !== resourceRoot || !existsSync31(resourceRoot))
     return false;
   try {
     return fingerprintTree(join40(market, "plugins", prior.name)) === fingerprintTree(prior.installPath) && fingerprintTree(resources) === fingerprintTree(resourceRoot);
@@ -27541,21 +27636,21 @@ function sameCandidate(prior, market, resources, resourceRoot, logical, native,
   }
 }
 function assertReplaceableOwnedRoots(market, resources, name, prior, logical, native, source) {
-  if (!existsSync32(market) && !existsSync32(resources))
+  if (!existsSync31(market) && !existsSync31(resources))
     return;
   if (prior === undefined)
-    throw new Error(`Official ZCode owned path already exists without a proven native install: ${existsSync32(market) ? market : resources}`);
+    throw new Error(`Official ZCode owned path already exists without a proven native install: ${existsSync31(market) ? market : resources}`);
   const priorRoot = zcodeSafeInstallRoot(prior.installPath);
   const marker = priorRoot === undefined ? null : readZcodeOwnership(priorRoot);
   if (marker?.logicalId !== logical || marker.nativeId !== native || marker.source !== source)
     throw new Error(`Official ZCode existing paths are not proven owned: ${native}`);
-  if (existsSync32(market)) {
+  if (existsSync31(market)) {
     assertNoSymlinks7(market);
     const staged = readZcodeOwnership(join40(market, "plugins", name));
     if (staged?.logicalId !== logical || staged.nativeId !== native || staged.source !== source)
       throw new Error(`Official ZCode marketplace root is not proven owned: ${market}`);
   }
-  if (existsSync32(resources) && marker.resourcePath !== resources)
+  if (existsSync31(resources) && marker.resourcePath !== resources)
     throw new Error(`Official ZCode resource root is not proven owned: ${resources}`);
 }
 function provePrior(prior, logical, native, source) {
@@ -27613,12 +27708,12 @@ function requireFingerprint(plugin) {
   return fp.toLowerCase();
 }
 function moveAside4(path) {
-  if (!existsSync32(path))
+  if (!existsSync31(path))
     return { rollback: () => {}, commit: () => {} };
   const backup = `${path}.plgnz-backup-${Date.now()}`;
   renameSync13(path, backup);
   return { rollback: () => {
-    if (!existsSync32(path))
+    if (!existsSync31(path))
       renameSync13(backup, path);
   }, commit: () => rmSync16(backup, { recursive: true, force: true }) };
 }
@@ -27628,7 +27723,7 @@ function assertName(value, label) {
 }
 function assertNoSymlinks7(root) {
   const visit = (path) => {
-    const stat = lstatSync25(path);
+    const stat = lstatSync26(path);
     if (stat.isSymbolicLink())
       throw new Error(`ZCode source contains symlink: ${path}`);
     if (stat.isDirectory())
@@ -27745,7 +27840,7 @@ function capturedNativeRoot(reference, attemptId, operationId) {
   const root = dirname19(dirname19(dirname19(reference)));
   for (const ancestor of [join40(root, "plgnz-lifecycle"), join40(root, "plgnz-lifecycle", attemptId), reference]) {
     try {
-      if (lstatSync25(ancestor).isSymbolicLink())
+      if (lstatSync26(ancestor).isSymbolicLink())
         throw new Error("ZCode captured snapshot ancestor was redirected");
     } catch (error) {
       if (!isObject4(error) || error["code"] !== "ENOENT")
@@ -27757,7 +27852,7 @@ function capturedNativeRoot(reference, attemptId, operationId) {
   return root;
 }
 function assertStageCleanupAuthority(stage, reference) {
-  if (lstatSync25(dirname19(stage)).isSymbolicLink() || lstatSync25(stage).isSymbolicLink())
+  if (lstatSync26(dirname19(stage)).isSymbolicLink() || lstatSync26(stage).isSymbolicLink())
     throw new Error("ZCode cleanup stage is redirected");
   assertNoSymlinks7(stage);
   const artifact = reference.artifactId;
@@ -27796,7 +27891,7 @@ function assertStageCleanupAuthority(stage, reference) {
 }
 function readConfigObject() {
   const file = join40(zcodeCliConfigRoot(), "config.json");
-  if (!existsSync32(file))
+  if (!existsSync31(file))
     return null;
   const value = JSON.parse(readFileSync34(file, "utf8"));
   if (!isObject4(value))
@@ -27814,7 +27909,7 @@ function optionValue(nativeId) {
 }
 function retainedState(nativeId) {
   const dataDir = zcodePluginDataDir(nativeId);
-  const pluginData = existsSync32(dataDir) && statSync13(dataDir).isDirectory() ? { state: "present", fingerprint: fingerprintTree(dataDir) } : { state: "absent", fingerprint: null };
+  const pluginData = existsSync31(dataDir) && statSync13(dataDir).isDirectory() ? { state: "present", fingerprint: fingerprintTree(dataDir) } : { state: "absent", fingerprint: null };
   const options = optionValue(nativeId);
   const inactiveMetadata = options === undefined ? { state: "absent", fingerprint: null } : { state: "present", fingerprint: sha2562(canonicalJson3(options)) };
   return { pluginData, inactiveMetadata };
@@ -27906,9 +28001,9 @@ function resourceObservation2(root, digest) {
   const expected = join40(zcodeResourceRoot(), marketplaceName2(marker.nativeId), marker.fingerprint);
   if (canonicalExistingPath(resourcePath) !== canonicalExistingPath(expected))
     throw new Error("ZCode resource receipt names a foreign root");
-  if (!existsSync32(resourcePath))
+  if (!existsSync31(resourcePath))
     return { roots, conforming: false };
-  if (lstatSync25(resourcePath).isSymbolicLink())
+  if (lstatSync26(resourcePath).isSymbolicLink())
     throw new Error("ZCode resource receipt root is redirected");
   const resource = realpathSync6(resourcePath);
   const owned = realpathSync6(zcodeResourceRoot());
@@ -27922,7 +28017,7 @@ function retirementSnapshot(attemptId, operationId, nativeId) {
   const dir = join40(realpathSync6(zcodeCliRoot()), "plgnz-lifecycle", attemptId, operationId);
   if (canonicalExistingPath(dir) !== dir)
     throw new Error("ZCode rollback snapshot path is redirected");
-  if (existsSync32(dir)) {
+  if (existsSync31(dir)) {
     if (!statSync13(dir).isDirectory())
       throw new Error(`ZCode rollback snapshot already exists and is not a directory: ${dir}`);
     return dir;
@@ -27934,17 +28029,17 @@ function retirementSnapshot(attemptId, operationId, nativeId) {
     cpSync14(root, join40(dir, "cache"), { recursive: true });
   writeFileSync16(join40(dir, "install-path.txt"), root ?? "");
   const registry = zcodeRegistryFile();
-  if (existsSync32(registry))
+  if (existsSync31(registry))
     cpSync14(registry, join40(dir, "installed_plugins.json"));
   const config = join40(zcodeCliConfigRoot(), "config.json");
-  if (existsSync32(config))
+  if (existsSync31(config))
     cpSync14(config, join40(dir, "config.json"));
   return dir;
 }
 function canonicalExistingPath(path) {
   const missing = [];
   let current = path;
-  while (!existsSync32(current)) {
+  while (!existsSync31(current)) {
     const parent = dirname19(current);
     if (parent === current)
       throw new Error(`ZCode path does not exist: ${path}`);
@@ -27960,7 +28055,7 @@ function isCacheInstallPath(path) {
 }
 function removeRegistryPlugin(nativeId) {
   const file = zcodeRegistryFile();
-  if (!existsSync32(file))
+  if (!existsSync31(file))
     return false;
   const value = JSON.parse(readFileSync34(file, "utf8"));
   if (!isObject4(value) || !Array.isArray(value["plugins"]))
@@ -27976,7 +28071,7 @@ function removeRegistryPlugin(nativeId) {
 }
 function removeEnabledFlag(nativeId) {
   const file = join40(zcodeCliConfigRoot(), "config.json");
-  if (!existsSync32(file))
+  if (!existsSync31(file))
     return;
   const value = readConfigObject();
   if (value === null || !isObject4(value["plugins"]) || !isObject4(value["plugins"]["enabledPlugins"]))
@@ -27988,7 +28083,7 @@ function removeEnabledFlag(nativeId) {
 `);
 }
 function snapshotRegistryRow(file, nativeId) {
-  if (!existsSync32(file))
+  if (!existsSync31(file))
     return;
   const value = JSON.parse(readFileSync34(file, "utf8"));
   if (!isObject4(value) || !Array.isArray(value["plugins"]))
@@ -28001,9 +28096,9 @@ function snapshotRegistryRow(file, nativeId) {
 function restoreRegistryPlugin(nativeId, snapshotFile) {
   const saved = snapshotRegistryRow(snapshotFile, nativeId);
   const file = zcodeRegistryFile();
-  if (!existsSync32(file) && saved === undefined)
+  if (!existsSync31(file) && saved === undefined)
     return;
-  const live = existsSync32(file) ? JSON.parse(readFileSync34(file, "utf8")) : { version: 1, plugins: [] };
+  const live = existsSync31(file) ? JSON.parse(readFileSync34(file, "utf8")) : { version: 1, plugins: [] };
   if (!isObject4(live) || !Array.isArray(live["plugins"]))
     throw new Error(`Official ZCode registry is unsupported: ${file}`);
   const plugins = live["plugins"].filter((row) => !isObject4(row) || row["id"] !== nativeId);
@@ -28023,8 +28118,8 @@ function configSection(config, key) {
 }
 function restorePluginConfig(nativeId, snapshotFile) {
   const file = join40(zcodeCliConfigRoot(), "config.json");
-  const snapshot = existsSync32(snapshotFile) ? readConfigObjectFrom(snapshotFile) : null;
-  const live = existsSync32(file) ? readConfigObject() : {};
+  const snapshot = existsSync31(snapshotFile) ? readConfigObjectFrom(snapshotFile) : null;
+  const live = existsSync31(file) ? readConfigObject() : {};
   if (live === null)
     throw new Error(`Official ZCode config is unsupported: ${file}`);
   const savedPlugins = snapshot !== null && isObject4(snapshot["plugins"]) ? snapshot["plugins"] : undefined;
@@ -28067,7 +28162,7 @@ function stageLayout(stagingRoot) {
   return { marketStage, resourcesStage: join40(dirname19(marketStage), "resources") };
 }
 function recordTree(dir, name, path) {
-  const existed = existsSync32(path);
+  const existed = existsSync31(path);
   writeFileSync16(join40(dir, `${name}-path.txt`), path);
   writeFileSync16(join40(dir, `${name}-existed.txt`), existed ? "1" : "0");
   if (existed)
@@ -28078,7 +28173,7 @@ function knownMarketplacesFile() {
 }
 function readKnownMarketplaces() {
   const file = knownMarketplacesFile();
-  if (!existsSync32(file))
+  if (!existsSync31(file))
     return {};
   const value = JSON.parse(readFileSync34(file, "utf8"));
   if (!isObject4(value))
@@ -28097,7 +28192,7 @@ function writeKnownMarketplaces(markets) {
 }
 function recordMarketplaceEntry(dir, market) {
   const flag = join40(dir, "marketplace-entry.txt");
-  if (existsSync32(flag))
+  if (existsSync31(flag))
     return;
   const markets = readKnownMarketplaces();
   const present = Object.hasOwn(markets, market);
@@ -28107,7 +28202,7 @@ function recordMarketplaceEntry(dir, market) {
 }
 function restoreMarketplaceEntry(dir, market) {
   const flag = join40(dir, "marketplace-entry.txt");
-  if (!existsSync32(flag))
+  if (!existsSync31(flag))
     return;
   const markets = readKnownMarketplaces();
   if (readFileSync34(flag, "utf8") !== "1") {
@@ -28118,7 +28213,7 @@ function restoreMarketplaceEntry(dir, market) {
     return;
   }
   const savedFile = join40(dir, "marketplace-entry.json");
-  if (!existsSync32(savedFile))
+  if (!existsSync31(savedFile))
     throw new Error("ZCode rollback marketplace entry is missing");
   const saved = JSON.parse(readFileSync34(savedFile, "utf8"));
   markets[market] = saved;
@@ -28126,9 +28221,9 @@ function restoreMarketplaceEntry(dir, market) {
 }
 function activationSnapshot(attemptId, operationId, nativeId, marketplace, resources) {
   const dir = retirementSnapshot(attemptId, operationId, nativeId);
-  if (!existsSync32(join40(dir, "marketplace-path.txt")))
+  if (!existsSync31(join40(dir, "marketplace-path.txt")))
     recordTree(dir, "marketplace", marketplace);
-  if (!existsSync32(join40(dir, "resources-path.txt")))
+  if (!existsSync31(join40(dir, "resources-path.txt")))
     recordTree(dir, "resources", resources);
   recordMarketplaceEntry(dir, marketplaceName2(nativeId));
   return dir;
@@ -28136,7 +28231,7 @@ function activationSnapshot(attemptId, operationId, nativeId, marketplace, resou
 function restoreRecordedTree(dir, name, ownedRoot) {
   const pathFile = join40(dir, `${name}-path.txt`);
   const existedFile = join40(dir, `${name}-existed.txt`);
-  if (!existsSync32(pathFile) || !existsSync32(existedFile))
+  if (!existsSync31(pathFile) || !existsSync31(existedFile))
     return;
   const path = readFileSync34(pathFile, "utf8");
   const existed = readFileSync34(existedFile, "utf8") === "1";
@@ -28147,9 +28242,9 @@ function restoreRecordedTree(dir, name, ownedRoot) {
   if (!target.startsWith(`${owned}/`))
     throw new Error(`ZCode rollback ${name} path is outside its root`);
   const copy = join40(dir, name);
-  if (existed && !existsSync32(copy))
+  if (existed && !existsSync31(copy))
     throw new Error(`ZCode rollback ${name} copy is missing`);
-  if (!existed && existsSync32(copy))
+  if (!existed && existsSync31(copy))
     throw new Error(`ZCode rollback ${name} copy has no path`);
   rmSync16(target, { recursive: true, force: true });
   if (!existed)
@@ -28219,7 +28314,7 @@ var zcodeCliLifecycleDefinition = {
     const resourceRoot = join40(realpathSync6(zcodeCliRoot()), "plgnz-resources", market, snapshot.packageFingerprint);
     const stageParent = join40(zcodeCliRoot(), ".plgnz-zcode-stage");
     mkdirSync16(stageParent, { recursive: true });
-    if (lstatSync25(stageParent).isSymbolicLink())
+    if (lstatSync26(stageParent).isSymbolicLink())
       throw new Error("ZCode staging parent is redirected");
     const stage = activationStage(request.selection.attemptId, request.selection.operationId);
     mkdirSync16(stage);
@@ -28311,7 +28406,7 @@ var zcodeCliLifecycleDefinition = {
     const resourceRoot = marker.resourcePath;
     const prior = nativeById(nativeId);
     const priorRoot = prior === undefined ? undefined : zcodeSafeInstallRoot(prior.installPath);
-    const unchanged = prior !== undefined && priorRoot !== undefined && prior.version === nativeVersion && readZcodeEnabledPluginIds().get(nativeId) === true && fingerprintTree(priorRoot) === fingerprintTree(prepared.stagingRoot) && existsSync32(resourceRoot) && fingerprintTree(resourceRoot) === fingerprintTree(resourcesStage);
+    const unchanged = prior !== undefined && priorRoot !== undefined && prior.version === nativeVersion && readZcodeEnabledPluginIds().get(nativeId) === true && fingerprintTree(priorRoot) === fingerprintTree(prepared.stagingRoot) && existsSync31(resourceRoot) && fingerprintTree(resourceRoot) === fingerprintTree(resourcesStage);
     if (unchanged)
       return { receiptId: `apply:${prepared.handle.attemptId}:${prepared.handle.operationId}`, changed: false };
     const marketBackup = moveAside4(marketRoot);
@@ -28364,11 +28459,11 @@ var zcodeCliLifecycleDefinition = {
   rollback: async (handle) => {
     capturedNativeRoot(handle.rollbackReference, handle.attemptId, handle.operationId);
     const dir = handle.rollbackReference;
-    if (!existsSync32(dir) || !statSync13(dir).isDirectory())
+    if (!existsSync31(dir) || !statSync13(dir).isDirectory())
       throw new Error("ZCode rollback snapshot is missing");
-    const installPath = existsSync32(join40(dir, "install-path.txt")) ? readFileSync34(join40(dir, "install-path.txt"), "utf8") : "";
+    const installPath = existsSync31(join40(dir, "install-path.txt")) ? readFileSync34(join40(dir, "install-path.txt"), "utf8") : "";
     const cache = join40(dir, "cache");
-    const cachePresent = existsSync32(cache);
+    const cachePresent = existsSync31(cache);
     if (installPath.length > 0 && !cachePresent)
       throw new Error("ZCode rollback cache copy is missing");
     if (installPath.length === 0 && cachePresent)
@@ -28406,7 +28501,7 @@ var zcodeCliLifecycleDefinition = {
       const parent = join40(realpathSync6(zcodeCliRoot()), "plgnz-lifecycle");
       for (const candidate of [parent, join40(parent, reference.attemptId), join40(parent, reference.attemptId, reference.operationId)]) {
         try {
-          const stat = lstatSync25(candidate);
+          const stat = lstatSync26(candidate);
           if (stat.isSymbolicLink() || candidate === join40(parent, reference.attemptId, reference.operationId))
             throw new Error("ZCode pre-seal cleanup has no captured snapshot authority");
         } catch (error) {
@@ -28416,7 +28511,7 @@ var zcodeCliLifecycleDefinition = {
       }
     }
     try {
-      if (lstatSync25(dirname19(stage)).isSymbolicLink())
+      if (lstatSync26(dirname19(stage)).isSymbolicLink())
         throw new Error("ZCode cleanup staging parent is redirected");
     } catch (error) {
       if (!isObject4(error) || error["code"] !== "ENOENT")
@@ -28424,7 +28519,7 @@ var zcodeCliLifecycleDefinition = {
     }
     let stagePresent = true;
     try {
-      lstatSync25(stage);
+      lstatSync26(stage);
     } catch (error) {
       if (!isObject4(error) || error["code"] !== "ENOENT")
         throw error;
@@ -28442,7 +28537,7 @@ var zcodeCliLifecycleDefinition = {
 var zcodeCliLifecycle = createLifecycleHostAdapter(zcodeCliLifecycleDefinition);
 
 // src/hosts/hermes-writer.ts
-import { chmodSync as chmodSync4, cpSync as cpSync15, existsSync as existsSync33, lstatSync as lstatSync26, mkdirSync as mkdirSync17, mkdtempSync as mkdtempSync16, readFileSync as readFileSync35, readdirSync as readdirSync25, realpathSync as realpathSync7, renameSync as renameSync14, rmSync as rmSync17, statSync as statSync14, writeFileSync as writeFileSync17 } from "node:fs";
+import { chmodSync as chmodSync4, cpSync as cpSync15, existsSync as existsSync32, lstatSync as lstatSync27, mkdirSync as mkdirSync17, mkdtempSync as mkdtempSync16, readFileSync as readFileSync35, readdirSync as readdirSync25, realpathSync as realpathSync7, renameSync as renameSync14, rmSync as rmSync17, statSync as statSync14, writeFileSync as writeFileSync17 } from "node:fs";
 import { basename as basename8, dirname as dirname20, isAbsolute as isAbsolute12, join as join41, resolve as resolve27 } from "node:path";
 import { tmpdir as tmpdir13 } from "node:os";
 
@@ -28714,12 +28809,12 @@ var hermesWriter = {
       assertReplaceable(target, packageStage, id, ownershipId, resolved.sourceUri, opts?.adoptExisting === true, validatePackage);
       if (hasCompanion)
         assertReplaceable(companion, companionStage, companionId, ownershipId, resolved.sourceUri, opts?.adoptExisting === true, validateCompanion);
-      else if (existsSync33(companion))
+      else if (existsSync32(companion))
         assertReplaceable(companion, undefined, companionId, ownershipId, resolved.sourceUri, opts?.adoptExisting === true, validateCompanion);
       const primaryMarker = readOwnership5(target);
       const companionMarker = readOwnership5(companion);
       const unchangedPrimary = primaryMarker?.pluginId === ownershipId && primaryMarker.fingerprint === ownership.fingerprint && sameTree9(packageStage, target);
-      const unchangedCompanion = hasCompanion ? companionMarker?.pluginId === ownershipId && companionMarker.fingerprint === ownership.fingerprint && sameTree9(companionStage, companion) : !existsSync33(companion);
+      const unchangedCompanion = hasCompanion ? companionMarker?.pluginId === ownershipId && companionMarker.fingerprint === ownership.fingerprint && sameTree9(companionStage, companion) : !existsSync32(companion);
       if (opts?.dryRun)
         return unchangedPrimary && unchangedCompanion ? "unchanged" : undefined;
       if (unchangedPrimary && unchangedCompanion) {
@@ -28731,7 +28826,7 @@ var hermesWriter = {
         changes.push(replaceTarget(packageStage, target, root));
         if (hasCompanion)
           changes.push(replaceTarget(companionStage, companion, root));
-        else if (existsSync33(companion))
+        else if (existsSync32(companion))
           changes.push(removeTarget(companion, root));
         updatePluginConfig(effectiveConfigPath(), [id, ...hasCompanion ? [companionId] : []], hasCompanion ? [] : [companionId]);
         for (const change of changes)
@@ -28763,14 +28858,14 @@ var hermesWriter = {
       return;
     const changes = [];
     try {
-      if (existsSync33(target))
+      if (existsSync32(target))
         changes.push(removeTarget(target, root));
       const companionMarker = readOwnership5(companion);
       const disable = [nativeId];
       if (companionMarker !== null && companionMarker.pluginId === marker.pluginId && companionMarker.source === marker.source && companionMarker.fingerprint === marker.fingerprint) {
         changes.push(removeTarget(companion, root));
         disable.push(companionId);
-      } else if (!existsSync33(companion))
+      } else if (!existsSync32(companion))
         disable.push(companionId);
       updatePluginConfig(effectiveConfigPath(), [], disable);
       for (const change of changes)
@@ -28783,7 +28878,7 @@ var hermesWriter = {
   }
 };
 function assertReplaceable(target, stage, expected, ownershipId, source, adopt, validate) {
-  if (!existsSync33(target))
+  if (!existsSync32(target))
     return;
   const marker = readOwnership5(target);
   if (marker !== null) {
@@ -28801,7 +28896,7 @@ function assertReplaceable(target, stage, expected, ownershipId, source, adopt,
 function validatePackage(root, expected) {
   assertTree3(root);
   const manifest = join41(root, "plugin.json");
-  if (!existsSync33(manifest))
+  if (!existsSync32(manifest))
     throw new Error("Hermes stage has no Agent Plugins manifest");
   let value;
   try {
@@ -28817,7 +28912,7 @@ function validatePackage(root, expected) {
 function validateCompanion(root, expected) {
   assertTree3(root);
   const manifest = join41(root, "plugin.yaml");
-  if (!existsSync33(manifest) || !existsSync33(join41(root, "__init__.py")))
+  if (!existsSync32(manifest) || !existsSync32(join41(root, "__init__.py")))
     throw new Error(`Hermes native companion is incomplete: ${root}`);
   const value = yamlParse(readFileSync35(manifest, "utf8"));
   if (!value || typeof value !== "object" || Array.isArray(value) || value.name !== expected)
@@ -28825,7 +28920,7 @@ function validateCompanion(root, expected) {
 }
 function readOwnership5(target) {
   const file = join41(target, MARKER11);
-  if (!existsSync33(file))
+  if (!existsSync32(file))
     return null;
   try {
     const value = JSON.parse(readFileSync35(file, "utf8"));
@@ -28840,7 +28935,7 @@ function readOwnership5(target) {
   }
 }
 function replaceTarget(stage, target, root) {
-  if (!existsSync33(target)) {
+  if (!existsSync32(target)) {
     renameSync14(stage, target);
     return { commit: () => {}, rollback: () => rmSync17(target, { recursive: true, force: true }) };
   }
@@ -28865,14 +28960,14 @@ function removeTarget(target, root) {
   const backup = join41(backupRoot, "previous");
   renameSync14(target, backup);
   return { commit: () => rmSync17(backupRoot, { recursive: true, force: true }), rollback: () => {
-    if (!existsSync33(target))
+    if (!existsSync32(target))
       renameSync14(backup, target);
     rmSync17(backupRoot, { recursive: true, force: true });
   } };
 }
 function updatePluginConfig(configured, enable, disable) {
-  const actual = existsSync33(configured) && lstatSync26(configured).isSymbolicLink() ? realpathSync7(configured) : configured;
-  const exists = existsSync33(actual);
+  const actual = existsSync32(configured) && lstatSync27(configured).isSymbolicLink() ? realpathSync7(configured) : configured;
+  const exists = existsSync32(actual);
   const original = exists ? readFileSync35(actual, "utf8") : "";
   let parsed = {};
   if (original.trim() !== "") {
@@ -28930,7 +29025,7 @@ function effectiveConfigPath() {
   const configured = resolve27(hermesConfigPath());
   if (native === configured)
     return configured;
-  if (!existsSync33(native) || !existsSync33(configured))
+  if (!existsSync32(native) || !existsSync32(configured))
     throw new Error(`Hermes only reads ${native}; configured path ${configured} must already resolve to the same file`);
   const nativeReal = realpathSync7(native);
   const configuredReal = realpathSync7(configured);
@@ -28939,7 +29034,7 @@ function effectiveConfigPath() {
   throw new Error(`Hermes only reads ${native}; configured path ${configured} is a different file`);
 }
 function sameTree9(left, right) {
-  if (!existsSync33(right))
+  if (!existsSync32(right))
     return false;
   const list = (root) => {
     const out = [];
@@ -28947,7 +29042,7 @@ function sameTree9(left, right) {
       for (const name of readdirSync25(dir).sort()) {
         if (name === MARKER11)
           continue;
-        const path = join41(dir, name), relative = prefix ? `${prefix}/${name}` : name, stat = lstatSync26(path);
+        const path = join41(dir, name), relative = prefix ? `${prefix}/${name}` : name, stat = lstatSync27(path);
         if (stat.isSymbolicLink())
           throw new Error(`Hermes plugin contains symlink: ${path}`);
         if (stat.isDirectory())
@@ -28967,13 +29062,13 @@ function readBytes2(path) {
   return readFileSync35(path);
 }
 function assertTree3(root) {
-  const stat = lstatSync26(root);
+  const stat = lstatSync27(root);
   if (stat.isSymbolicLink() || !stat.isDirectory())
     throw new Error(`Hermes plugin source is not a real directory: ${root}`);
   for (const name of readdirSync25(root)) {
     if (name === MARKER11)
       continue;
-    const path = join41(root, name), entry = lstatSync26(path);
+    const path = join41(root, name), entry = lstatSync27(path);
     if (entry.isSymbolicLink())
       throw new Error(`Hermes plugin contains symlink: ${path}`);
     if (entry.isDirectory())
@@ -28988,15 +29083,15 @@ function assertManagedPath5(root, target) {
     throw new Error(`Hermes managed path escapes its store: ${target}`);
   let current = base;
   for (const part of selected.slice(base.length).split("/").filter(Boolean)) {
-    if (existsSync33(current)) {
-      const stat = lstatSync26(current);
+    if (existsSync32(current)) {
+      const stat = lstatSync27(current);
       if (stat.isSymbolicLink() || !stat.isDirectory())
         throw new Error(`Hermes managed path component is unsafe: ${current}`);
     }
     current = join41(current, part);
   }
-  if (existsSync33(current)) {
-    const stat = lstatSync26(current);
+  if (existsSync32(current)) {
+    const stat = lstatSync27(current);
     if (stat.isSymbolicLink() || !stat.isDirectory())
       throw new Error(`Hermes managed path component is unsafe: ${current}`);
   }
@@ -29144,7 +29239,7 @@ function verifiedSourceImportClosure(root) {
       if (entry.startsWith(".") || entry === "__pycache__" || entry === "node_modules")
         continue;
       const path = join41(directory, entry);
-      const stat = lstatSync26(path);
+      const stat = lstatSync27(path);
       if (stat.isSymbolicLink()) {
         if (entry.endsWith(".py") || statSync14(path).isDirectory())
           return false;
@@ -29156,7 +29251,7 @@ function verifiedSourceImportClosure(root) {
   return visit(root, true);
 }
 function hermesExecutableSource(binary, depth = 0) {
-  if (depth > 4 || !isAbsolute12(binary) || !existsSync33(binary))
+  if (depth > 4 || !isAbsolute12(binary) || !existsSync32(binary))
     return;
   const executable = realpathSync7(binary);
   if (!statSync14(executable).isFile())
@@ -29168,7 +29263,7 @@ exec `)) {
 exec `.length));
     if (args?.length === 2 && args[1] === "$@")
       return hermesExecutableSource(args[0], depth + 1);
-    if (args?.length !== 5 || args[1] !== "-I" || args[2] !== "-c" || args[4] !== "$@" || !isAbsolute12(args[0]) || !/^python(?:\d+(?:\.\d+)*)?$/u.test(basename8(args[0])) || !existsSync33(args[0]))
+    if (args?.length !== 5 || args[1] !== "-I" || args[2] !== "-c" || args[4] !== "$@" || !isAbsolute12(args[0]) || !/^python(?:\d+(?:\.\d+)*)?$/u.test(basename8(args[0])) || !existsSync32(args[0]))
       return;
     const code = args[3];
     if (!code.startsWith(`import os, re, sys
@@ -29180,26 +29275,26 @@ exec `.length));
     const root = literalPythonPath(bindings[0][1]);
     if (root === undefined || code.replaceAll(bindings[0][1], "'/__PLUGNZ_HERMES_ROOT__'") !== hermesNativeBootstrap)
       return;
-    return root !== undefined && isAbsolute12(root) && existsSync33(join41(root, "hermes_cli", "main.py")) && realpathSync7(join41(root, "hermes_cli", "main.py")).startsWith(`${realpathSync7(root)}/`) && verifiedSourceImportClosure(realpathSync7(root)) ? realpathSync7(root) : undefined;
+    return root !== undefined && isAbsolute12(root) && existsSync32(join41(root, "hermes_cli", "main.py")) && realpathSync7(join41(root, "hermes_cli", "main.py")).startsWith(`${realpathSync7(root)}/`) && verifiedSourceImportClosure(realpathSync7(root)) ? realpathSync7(root) : undefined;
   }
   const interpreter = /^#!([^\n]+)\n/u.exec(text)?.[1];
-  if (interpreter === undefined || !isAbsolute12(interpreter) || !existsSync33(interpreter) || !/^python(?:\d+(?:\.\d+)*)?$/u.test(basename8(interpreter)) || text.slice(text.indexOf(`
+  if (interpreter === undefined || !isAbsolute12(interpreter) || !existsSync32(interpreter) || !/^python(?:\d+(?:\.\d+)*)?$/u.test(basename8(interpreter)) || text.slice(text.indexOf(`
 `) + 1) !== hermesUvConsoleBody)
     return;
   const venv = dirname20(dirname20(executable));
-  if (dirname20(interpreter) !== join41(venv, "bin") || !existsSync33(join41(venv, "pyvenv.cfg")))
+  if (dirname20(interpreter) !== join41(venv, "bin") || !existsSync32(join41(venv, "pyvenv.cfg")))
     return;
-  if (existsSync33(join41(venv, "bin", "pyvenv.cfg")) || !isolatedVenvConfig(readFileSync35(join41(venv, "pyvenv.cfg"), "utf8")) || process.env["PYTHONHOME"] || process.env["PYTHONPATH"])
+  if (existsSync32(join41(venv, "bin", "pyvenv.cfg")) || !isolatedVenvConfig(readFileSync35(join41(venv, "pyvenv.cfg"), "utf8")) || process.env["PYTHONHOME"] || process.env["PYTHONPATH"])
     return;
   if (hasImportShadow(join41(venv, "bin"), ["hermes_cli", "sitecustomize", "usercustomize", "_virtualenv"]))
     return;
   const lib = join41(venv, "lib");
-  if (!existsSync33(lib))
+  if (!existsSync32(lib))
     return;
   const roots = [];
   for (const python of readdirSync25(lib).filter((name) => /^python\d+\.\d+$/u.test(name))) {
     const packages = join41(lib, python, "site-packages");
-    if (!existsSync33(packages))
+    if (!existsSync32(packages))
       continue;
     if (hasImportShadow(packages, ["hermes_cli", "sitecustomize", "usercustomize", "_virtualenv"], ["_virtualenv.py"]))
       return;
@@ -29207,13 +29302,13 @@ exec `.length));
       const distribution = join41(packages, name);
       const metadata = join41(distribution, "direct_url.json");
       const entry = join41(distribution, "entry_points.txt");
-      if (!existsSync33(metadata) || !existsSync33(entry) || !/^hermes\s*=\s*hermes_cli\.main:main$/mu.test(readFileSync35(entry, "utf8")))
+      if (!existsSync32(metadata) || !existsSync32(entry) || !/^hermes\s*=\s*hermes_cli\.main:main$/mu.test(readFileSync35(entry, "utf8")))
         continue;
       const direct = JSON.parse(readFileSync35(metadata, "utf8"));
       if (typeof direct !== "object" || direct === null || !("url" in direct) || typeof direct.url !== "string" || !("dir_info" in direct) || typeof direct.dir_info !== "object" || direct.dir_info === null || !("editable" in direct.dir_info) || direct.dir_info.editable !== true || !direct.url.startsWith("file:///"))
         continue;
       const root = decodeURIComponent(direct.url.slice("file://".length));
-      if (!isAbsolute12(root) || !existsSync33(join41(root, "hermes_cli", "main.py")))
+      if (!isAbsolute12(root) || !existsSync32(join41(root, "hermes_cli", "main.py")))
         continue;
       const sourceModules = [
         "hermes_cli",
@@ -29221,7 +29316,7 @@ exec `.length));
         "hermes_constants",
         "pm",
         ...readdirSync25(root).filter((name) => name.endsWith(".py")).map((name) => name.slice(0, -3)),
-        ...readdirSync25(root).filter((name) => existsSync33(join41(root, name, "__init__.py")))
+        ...readdirSync25(root).filter((name) => existsSync32(join41(root, name, "__init__.py")))
       ];
       if (hasImportShadow(packages, sourceModules) || hasImportShadow(join41(venv, "bin"), sourceModules))
         return;
@@ -29236,11 +29331,11 @@ exec `.length));
         const pth = readFileSync35(join41(packages, pthName), "utf8").trim();
         if (pthName === `_virtualenv.pth` && pth === "import _virtualenv") {
           const helper = join41(packages, "_virtualenv.py");
-          if (!existsSync33(helper) || new CryptoHasher("sha256").update(readFileSync35(helper, "utf8")).digest("hex") !== "cfb3db86aaa53bb62b5ff764970bec2d71c9228590a0ebec57f6ec926cc0bf1a")
+          if (!existsSync32(helper) || new CryptoHasher("sha256").update(readFileSync35(helper, "utf8")).digest("hex") !== "cfb3db86aaa53bb62b5ff764970bec2d71c9228590a0ebec57f6ec926cc0bf1a")
             return;
         } else if (pthName === `__editable__.hermes_agent-${version}.pth` && pth === root)
           binding = true;
-        else if (pthName === `__editable__.hermes_agent-${version}.pth` && pth === `import ${finder}; ${finder}.install()` && existsSync33(join41(packages, `${finder}.py`)) && verifiedEditableFinder(readFileSync35(join41(packages, `${finder}.py`), "utf8"), root, version))
+        else if (pthName === `__editable__.hermes_agent-${version}.pth` && pth === `import ${finder}; ${finder}.install()` && existsSync32(join41(packages, `${finder}.py`)) && verifiedEditableFinder(readFileSync35(join41(packages, `${finder}.py`), "utf8"), root, version))
           binding = true;
         else
           return;
@@ -29253,7 +29348,7 @@ exec `.length));
 }
 function observeHermesRevision() {
   const binary = process.env["OPEN_PLUGIN_HERMES_BIN"] ?? which("hermes");
-  if (!binary || !existsSync33(binary))
+  if (!binary || !existsSync32(binary))
     return { kind: "unknown", diagnostic: "Select an existing Hermes launcher with OPEN_PLUGIN_HERMES_BIN; a profile config does not identify its runtime" };
   try {
     const root = hermesExecutableSource(binary);
@@ -29327,14 +29422,14 @@ function resolveInstanceConfig(root, configPath) {
   const configured = resolve27(configPath);
   if (native === configured)
     return configured;
-  if (!existsSync33(native) || !existsSync33(configured))
+  if (!existsSync32(native) || !existsSync32(configured))
     throw new Error(`Hermes only reads ${native}; configured path ${configured} must already resolve to the same file`);
   if (realpathSync7(native) === realpathSync7(configured))
     return configured;
   throw new Error(`Hermes only reads ${native}; configured path ${configured} is a different file`);
 }
 function actualConfig(configPath) {
-  return existsSync33(configPath) && lstatSync26(configPath).isSymbolicLink() ? realpathSync7(configPath) : configPath;
+  return existsSync32(configPath) && lstatSync27(configPath).isSymbolicLink() ? realpathSync7(configPath) : configPath;
 }
 function workDir(store, attemptId, operationId) {
   return join41(store.root, ".plgnz-lifecycle", encodeURIComponent(attemptId), encodeURIComponent(operationId));
@@ -29403,7 +29498,7 @@ function sameLifecycleOwner(marker, claim) {
   return installed !== null && installed.pluginId === claim.pluginId && installed.scopeId === claim.scopeId && installed.sourceType === claim.sourceType && installed.locator === claim.locator;
 }
 function assertLifecycleOwned(target, claim, handle) {
-  if (!existsSync33(target))
+  if (!existsSync32(target))
     return;
   const marker = readMarker(target);
   if (marker === null)
@@ -29433,7 +29528,7 @@ function copyReplace(stage, target, root) {
 }
 function flagSet(configPath, key) {
   const actual = actualConfig(configPath);
-  if (!existsSync33(actual))
+  if (!existsSync32(actual))
     return new Set;
   const parsed = yamlParse(readFileSync35(actual, "utf8"));
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
@@ -29459,7 +29554,7 @@ function activationMatches(configPath, packageName, companionId, hasCompanion) {
 }
 function entryValue(configPath, packageName) {
   const actual = actualConfig(configPath);
-  if (!existsSync33(actual))
+  if (!existsSync32(actual))
     return;
   const parsed = yamlParse(readFileSync35(actual, "utf8"));
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
@@ -29492,7 +29587,7 @@ function sha2563(value) {
 }
 function retentionFor(store, packageName) {
   const dataDir = join41(store.root, "plugin-data", hermesPluginDataNamespace(packageName));
-  const pluginData = existsSync33(dataDir) && lstatSync26(dataDir).isDirectory() ? { state: "present", fingerprint: fingerprintTree(dataDir) } : { state: "absent", fingerprint: null };
+  const pluginData = existsSync32(dataDir) && lstatSync27(dataDir).isDirectory() ? { state: "present", fingerprint: fingerprintTree(dataDir) } : { state: "absent", fingerprint: null };
   const entry = entryValue(store.configPath, packageName);
   const inactiveMetadata = entry === undefined ? { state: "absent", fingerprint: null } : { state: "present", fingerprint: sha2563(JSON.stringify(canonicalValue(entry))) };
   return { pluginData, inactiveMetadata };
@@ -29501,7 +29596,7 @@ function atomicFingerprint(packageDir, companionDir) {
   const temp = mkdtempSync16(join41(tmpdir13(), "plgnz-hermes-atomic-"));
   try {
     cpSync15(packageDir, join41(temp, "package"), { recursive: true });
-    if (companionDir !== undefined && existsSync33(companionDir))
+    if (companionDir !== undefined && existsSync32(companionDir))
       cpSync15(companionDir, join41(temp, "commands"), { recursive: true });
     return fingerprintTree(temp);
   } finally {
@@ -29510,7 +29605,7 @@ function atomicFingerprint(packageDir, companionDir) {
 }
 function readConfigDocument2(configPath) {
   const actual = actualConfig(configPath);
-  if (!existsSync33(actual))
+  if (!existsSync32(actual))
     return null;
   const text = readFileSync35(actual, "utf8");
   if (text.trim() === "")
@@ -29568,7 +29663,7 @@ function membership(list, id, present) {
 }
 function writeConfigDocument(configPath, doc) {
   const actual = actualConfig(configPath);
-  const exists = existsSync33(actual);
+  const exists = existsSync32(actual);
   const mode = exists ? statSync14(actual).mode & 511 : null;
   mkdirSync17(dirname20(actual), { recursive: true });
   const temp = join41(dirname20(actual), `.plgnz-hermes-rollback-${Date.now()}-${Math.random().toString(16).slice(2)}.yaml`);
@@ -29616,18 +29711,18 @@ function saveRollback(store, reference, packageName, packageDir, companionDir) {
   mkdirSync17(reference, { recursive: true });
   const companionId = hermesCommandCompanionId(packageName);
   writeFileSync17(join41(reference, "config-slice.json"), JSON.stringify(captureConfigSlice(store.configPath, packageName, companionId)));
-  if (existsSync33(packageDir))
+  if (existsSync32(packageDir))
     cpSync15(packageDir, join41(reference, "package"), { recursive: true });
-  if (existsSync33(companionDir))
+  if (existsSync32(companionDir))
     cpSync15(companionDir, join41(reference, "commands"), { recursive: true });
 }
 function restoreRollback3(store, reference, packageDir, companionDir) {
   const slice = JSON.parse(readFileSync35(join41(reference, "config-slice.json"), "utf8"));
   rmSync17(packageDir, { recursive: true, force: true });
   rmSync17(companionDir, { recursive: true, force: true });
-  if (existsSync33(join41(reference, "package")))
+  if (existsSync32(join41(reference, "package")))
     cpSync15(join41(reference, "package"), packageDir, { recursive: true });
-  if (existsSync33(join41(reference, "commands")))
+  if (existsSync32(join41(reference, "commands")))
     cpSync15(join41(reference, "commands"), companionDir, { recursive: true });
   restoreConfigSlice(store.configPath, slice);
 }
@@ -29676,7 +29771,7 @@ var hermesLifecycleDefinition = {
     try {
       const store = storeFor(target);
       const actual = actualConfig(store.configPath);
-      if (!existsSync33(actual) || !statSync14(actual).isFile())
+      if (!existsSync32(actual) || !statSync14(actual).isFile())
         return { kind: "unknown" };
       const text = readFileSync35(actual, "utf8");
       if (text.trim() !== "") {
@@ -29759,9 +29854,9 @@ var hermesLifecycleDefinition = {
     const companionStage = join41(stagingRoot, "commands");
     mkdirSync17(packageStage, { recursive: true });
     projectPluginForHermes(request.snapshot.packageRoot, packageStage, companionStage);
-    if (existsSync33(companionStage) && readdirSync25(companionStage).length === 0)
+    if (existsSync32(companionStage) && readdirSync25(companionStage).length === 0)
       rmSync17(companionStage, { recursive: true });
-    const hasCompanion = existsSync33(companionStage);
+    const hasCompanion = existsSync32(companionStage);
     validatePackage(packageStage, request.snapshot.packageName);
     if (hasCompanion)
       validateCompanion(companionStage, hermesCommandCompanionId(request.snapshot.packageName));
@@ -29785,7 +29880,7 @@ var hermesLifecycleDefinition = {
     if (projection.pins.length === 0)
       return [];
     const mcp = join41(projection.stagingRoot, "package", "mcp.json");
-    if (!existsSync33(mcp))
+    if (!existsSync32(mcp))
       throw new Error(`Hermes pin set has no mcp.json: ${mcp}`);
     const value = JSON.parse(readFileSync35(mcp, "utf8"));
     const servers = value.mcpServers ?? {};
@@ -29804,7 +29899,7 @@ var hermesLifecycleDefinition = {
     const paths = packagePaths(store, projection.packageName);
     const prior = withIdentity(inspect(store, projection.nativeId, projection.packageName, "none"), projection.target, projection.scopeId, projection.packageName, projection.nativeId);
     capturePriorSourceRepair(projection, prior.installedFingerprint);
-    const hasCompanion = existsSync33(join41(projection.stagingRoot, "commands"));
+    const hasCompanion = existsSync32(join41(projection.stagingRoot, "commands"));
     const contentRoots = [{ label: "package", path: paths.packageDir, fingerprint: fingerprintTree(join41(projection.stagingRoot, "package")) }];
     if (hasCompanion)
       contentRoots.push({ label: "commands", path: paths.companionDir, fingerprint: fingerprintTree(join41(projection.stagingRoot, "commands")) });
@@ -29841,15 +29936,15 @@ var hermesLifecycleDefinition = {
     assertManagedPath5(store.pluginsDir, paths.companionDir);
     const stagedPackage = join41(prepared.stagingRoot, "package");
     const stagedCompanion = join41(prepared.stagingRoot, "commands");
-    const hasCompanion = existsSync33(stagedCompanion);
+    const hasCompanion = existsSync32(stagedCompanion);
     const owner = ownerFromHandle(prepared.handle);
     assertLifecycleOwned(paths.packageDir, owner, prepared.handle);
     if (hasCompanion)
       assertLifecycleOwned(paths.companionDir, owner, prepared.handle);
-    else if (existsSync33(paths.companionDir))
+    else if (existsSync32(paths.companionDir))
       assertLifecycleOwned(paths.companionDir, owner, prepared.handle);
     mkdirSync17(store.pluginsDir, { recursive: true });
-    const unchanged = existsSync33(paths.packageDir) && atomicFingerprint(paths.packageDir, hasCompanion ? paths.companionDir : undefined) === fingerprintTree(prepared.stagingRoot) && activationMatches(store.configPath, prepared.handle.packageName, paths.companionId, hasCompanion);
+    const unchanged = existsSync32(paths.packageDir) && atomicFingerprint(paths.packageDir, hasCompanion ? paths.companionDir : undefined) === fingerprintTree(prepared.stagingRoot) && activationMatches(store.configPath, prepared.handle.packageName, paths.companionId, hasCompanion);
     if (unchanged)
       return { receiptId: `apply:${prepared.handle.attemptId}:${prepared.handle.operationId}`, changed: false };
     const changes = [];
@@ -29857,7 +29952,7 @@ var hermesLifecycleDefinition = {
       changes.push(copyReplace(stagedPackage, paths.packageDir, store.pluginsDir));
       if (hasCompanion)
         changes.push(copyReplace(stagedCompanion, paths.companionDir, store.pluginsDir));
-      else if (existsSync33(paths.companionDir))
+      else if (existsSync32(paths.companionDir))
         changes.push(removeTarget(paths.companionDir, store.pluginsDir));
       updatePluginConfig(store.configPath, [prepared.handle.packageName, ...hasCompanion ? [paths.companionId] : []], hasCompanion ? [] : [paths.companionId]);
       for (const change of changes)
@@ -29883,11 +29978,11 @@ var hermesLifecycleDefinition = {
     const source = prepared.handle.sourceLocator ?? prepared.handle.sourceRevision;
     const changes = [];
     try {
-      if (existsSync33(paths.packageDir)) {
+      if (existsSync32(paths.packageDir)) {
         assertLifecycleOwned(paths.packageDir, ownerFromHandle(prepared.handle));
         changes.push(removeTarget(paths.packageDir, store.pluginsDir));
       }
-      if (existsSync33(paths.companionDir)) {
+      if (existsSync32(paths.companionDir)) {
         const marker = readMarker(paths.companionDir);
         if (marker !== null && marker.pluginId === prepared.handle.nativeId && marker.source === source)
           changes.push(removeTarget(paths.companionDir, store.pluginsDir));
@@ -30234,7 +30329,7 @@ function invalidSelection2(diagnostic) {
 }
 
 // src/recorded-pins.ts
-import { existsSync as existsSync34, readFileSync as readFileSync36 } from "node:fs";
+import { existsSync as existsSync33, readFileSync as readFileSync36 } from "node:fs";
 import { isAbsolute as isAbsolute13, join as join42, resolve as resolve28 } from "node:path";
 function resolveRecordedPinExecutables(packageRoot, servers) {
   const pins = [];
@@ -30257,7 +30352,7 @@ function resolveRecordedPinExecutables(packageRoot, servers) {
 function recordedPinCommand(packageRoot, server) {
   for (const name of [".mcp.json", "mcp.json"]) {
     const file = join42(packageRoot, name);
-    if (!existsSync34(file))
+    if (!existsSync33(file))
       continue;
     let parsed;
     try {
@@ -31434,6 +31529,14 @@ function writeState(records, file = stateFile()) {
   validateLegacyInstallRecords(records);
   atomicWrite(file, JSON.stringify({ version: 1, installs: records }, null, 2));
 }
+function writeInstallLedger(records, changed, binding) {
+  const loaded = readLifecycleState();
+  if (loaded.sourceVersion !== 2) {
+    writeState(records);
+    return;
+  }
+  writeLifecycleState(withLegacyWriterRecord(loaded.state, changed, binding), { globalPreflight: "succeeded" });
+}
 function withLegacyWriterRecord(state, record, binding) {
   const source = persistedSource(binding);
   const scope = createDeploymentScopeIdentity(source, { kind: record.host, instance: "default" });
@@ -33446,6 +33549,9 @@ function selectTargets(all, options) {
   return defaultPinTargets(all);
 }
 
+// src/update.ts
+init_compatibility();
+
 // src/native-identity.ts
 function captureNativeIdentity(writer, plugin) {
   let nativeId = null;
@@ -33497,7 +33603,12 @@ function shortSha2(sha) {
 async function runUpdate(name, options = {}) {
   const hosts = options.writers ?? writers;
   let state = options.state ?? readState();
-  const save = options.writeState ?? writeState;
+  const save = (records, changed, binding) => {
+    if (options.writeState !== undefined)
+      options.writeState(records);
+    else
+      writeInstallLedger(records, changed, binding);
+  };
   const prefix = options.dryRun === true ? "[dry-run] " : "";
   const findings = [];
   let mutationStarted = false;
@@ -33626,7 +33737,7 @@ async function runUpdate(name, options = {}) {
         const pending = { ...record, pending: "install" };
         record = pending;
         const next = state.map((candidate) => candidate === persistedRecord ? pending : candidate);
-        save(next);
+        save(next, pending, resolved.snapshot.binding);
         state = next;
         recordMutationStarted = true;
         mutationStarted = true;
@@ -33713,7 +33824,7 @@ async function runUpdate(name, options = {}) {
     delete finalized.pending;
     const next = state.map((candidate) => candidate === record ? finalized : candidate);
     try {
-      save(next);
+      save(next, finalized, resolved.snapshot.binding);
     } catch (error) {
       findings.push(findingFor(record, {
         mark: "✗",
@@ -33847,6 +33958,9 @@ function findConsumerProfile(id) {
   return byId.get(id);
 }
 
+// src/cli.ts
+init_compatibility();
+
 // src/legacy-install-outcome.ts
 function serializeLegacyInstallOutcomes(report) {
   const rows = report.outcomes.map((outcome) => ({
@@ -33903,7 +34017,7 @@ function legacyCommandAction(command) {
 // package.json
 var package_default = {
   name: "plugnz",
-  version: "0.0.22",
+  version: "0.0.23",
   description: "Install, diagnose and update agent plugins (Agent Plugins spec) and MCP configs across Claude Code, Codex, Cursor, Kimi and more",
   license: "MIT",
   type: "module",
@@ -34361,6 +34475,10 @@ function printReport(report, mode) {
     const legacy = serializeLegacyInstallOutcomes(report);
     for (const item of legacy)
       console.log(`${item.target}	${item.status}	${item.plugin}${item.diagnostic ? `	${item.diagnostic}` : ""}`);
+    for (const facts of report.verification?.operations ?? []) {
+      const outcome = report.outcomes.find((row) => row.operationId === facts.operationId);
+      console.log(`${outcome.scope.target.kind}	${outcome.package}	compatibility=${facts.compatibility} registration=${facts.registration} executionApproval=${facts.executionApproval} delivery=${facts.delivery}`);
+    }
   }
 }
 function select(available, targets) {
@@ -34663,14 +34781,6 @@ async function runPlannerAdd(source, binding, targets, flags) {
     command: { ...executed.report.command, name: "add" }
   });
 }
-function writeInstallLedger(records, changed, binding) {
-  const loaded = readLifecycleState();
-  if (loaded.sourceVersion !== 2) {
-    writeState(records);
-    return;
-  }
-  writeLifecycleState(withLegacyWriterRecord(loaded.state, changed, binding), { globalPreflight: "succeeded" });
-}
 async function runWriterAdd(source, selectedWriters, flags, mode) {
   let resolved;
   try {
@@ -35002,7 +35112,8 @@ async function runRecordedLifecycleUpdate(flags, state) {
     const scope = scopes.get(activation.scopeId);
     if (scope === undefined || scope.target.instance !== "default" || !kinds.has(scope.target.kind))
       return [];
-    if (requested !== undefined && requested !== activation.packageId && requested !== activation.nativeId)
+    const writer = present.selected.find((candidate) => candidate.id === scope.target.kind);
+    if (!requestedPersistedIdentityMatches(writer, activation.packageId, activation.nativeId, requested))
       return [];
     return [{ scope, packageId: activation.packageId }];
   });
@@ -35080,6 +35191,7 @@ async function runRecordedLifecycleUpdate(flags, state) {
   });
 }
 function emitAddReport(report, mode) {
+  report = parseLifecycleReport({ ...report, verification: installationVerification(report) });
   if (mode === "json")
     return emitValidatedReport(report, true);
   printReport(report, mode);