plugnz 0.0.24 → 0.0.26

package/dist/plugnz.mjs

@@ -9852,7 +9852,7 @@ function escapeRegExp(value) {
 
 // src/hosts/cursor.ts
 import { existsSync as existsSync5, readFileSync as readFileSync4, readdirSync as readdirSync2, statSync as statSync5 } from "node:fs";
-import { join as join8 } from "node:path";
+import { delimiter as delimiter3, join as join8 } from "node:path";
 var cursorTargetProfile = {
   kind: "cursor",
   parseSyncTarget(value, label) {
@@ -9901,7 +9901,10 @@ var cursor = {
   id: "cursor",
   gui: true,
   detect() {
-    return existsSync5(cursorRoot());
+    return locateCursorProbeBinary().kind === "path" || existsSync5(cursorRoot());
+  },
+  detectInstalled() {
+    return locateCursorProbeBinary().kind === "path";
   },
   stores() {
     return [localDir()];
@@ -9944,6 +9947,48 @@ var cursor = {
     return entries;
   }
 };
+function locateCursorProbeBinary() {
+  const override = process.env["OPEN_PLUGIN_CURSOR_BIN"];
+  if (override !== undefined) {
+    if (override.length === 0 || !isExecutableFile(override))
+      return { kind: "refused" };
+    return { kind: "path", path: override };
+  }
+  const found = cursorProbeCandidates().find(isExecutableFile);
+  return found === undefined ? { kind: "absent" } : { kind: "path", path: found };
+}
+function cursorProbePath(env = process.env) {
+  const isolated = env["OPEN_PLUGIN_HOME"];
+  if (isolated !== undefined && isolated.length > 0)
+    return join8(homeRoot(), "bin");
+  return env["PATH"] ?? "";
+}
+function cursorProbeCandidates(env = process.env) {
+  const candidates = [];
+  const pathDirs = cursorProbePath(env).split(delimiter3).filter((dir) => dir.length > 0);
+  for (const name of process.platform === "win32" ? ["cursor.exe", "cursor-agent.exe"] : ["cursor", "cursor-agent"]) {
+    candidates.push(...pathDirs.map((dir) => join8(dir, name)));
+  }
+  const isolated = env["OPEN_PLUGIN_HOME"];
+  const isolatedRun = isolated !== undefined && isolated.length > 0;
+  if (process.platform === "darwin") {
+    candidates.push(join8(homeRoot(), "Applications", "Cursor.app", "Contents", "MacOS", "Cursor"));
+    if (!isolatedRun)
+      candidates.push("/Applications/Cursor.app/Contents/MacOS/Cursor");
+  } else if (process.platform === "linux") {
+    candidates.push(join8(homeRoot(), ".local", "bin", "cursor"), join8(homeRoot(), ".local", "bin", "cursor-agent"));
+    if (!isolatedRun)
+      candidates.push("/usr/local/bin/cursor", "/usr/local/bin/cursor-agent", "/usr/bin/cursor", "/usr/bin/cursor-agent", "/usr/share/cursor/cursor", "/usr/lib/cursor/cursor", "/opt/Cursor/cursor", "/opt/cursor/cursor");
+  } else if (process.platform === "win32") {
+    const localAppData = env["LOCALAPPDATA"];
+    const programFiles = env["ProgramFiles"];
+    if (localAppData !== undefined)
+      candidates.push(join8(localAppData, "Programs", "cursor", "Cursor.exe"));
+    if (!isolatedRun && programFiles !== undefined)
+      candidates.push(join8(programFiles, "Cursor", "Cursor.exe"));
+  }
+  return candidates.filter((path, index, all) => all.indexOf(path) === index);
+}
 function ownershipMarketplace(dir, name) {
   const marker = join8(dir, ".plgnz-install.json");
   if (!existsSync5(marker))
@@ -10675,7 +10720,7 @@ function namesOf(repo) {
 
 // src/hosts/zcode-cli.ts
 import { existsSync as existsSync12, lstatSync as lstatSync5, readFileSync as readFileSync10, realpathSync as realpathSync2 } from "node:fs";
-import { delimiter as delimiter3, dirname as dirname3, join as join15, resolve as resolve7 } from "node:path";
+import { delimiter as delimiter4, dirname as dirname3, join as join15, resolve as resolve7 } from "node:path";
 var zcodeCliTargetProfile = singleInstanceTargetProfile("zcode-cli");
 function zcodeRegistryFile() {
   return join15(zcodeCliRoot(), "plugins", "installed_plugins.json");
@@ -10697,7 +10742,7 @@ function zcodeCliBinaryCandidates(env = process.env) {
     if (isolatedHome === undefined || isolatedHome.length === 0)
       candidates.push("/Applications/ZCode.app/Contents/Resources/glm/zcode.cjs");
   }
-  const pathBinary = (env["PATH"] ?? "").split(delimiter3).filter((dir) => dir.length > 0).map((dir) => join15(dir, "zcode")).find(isExecutableFile);
+  const pathBinary = (env["PATH"] ?? "").split(delimiter4).filter((dir) => dir.length > 0).map((dir) => join15(dir, "zcode")).find(isExecutableFile);
   if (pathBinary !== undefined)
     candidates.push(pathBinary);
   return candidates.filter((path, index, all) => all.indexOf(path) === index);
@@ -11181,7 +11226,8 @@ function yamlStringify(value) {
 var hermesProvenManagedRevisions = [
   "c0d7294769a38c17ceae51d8f7995e66e1dcae27",
   "dce1e9b37581dd62e480a9064dc04a709c2940d3",
-  "6e7b83a2f1c093e992a8d838ed77ea320fbd8e51"
+  "6e7b83a2f1c093e992a8d838ed77ea320fbd8e51",
+  "7dbbb0f4a6ebeec9a8714ec37fa41340fe9e4e00"
 ];
 var hermesTargetProfile = {
   kind: "hermes",
@@ -17933,6 +17979,7 @@ function stagePlugin(source, stage, fallbackName, fallbackVersion) {
     mkdirSync6(dirname8(native), { recursive: true });
     writeFileSync6(native, JSON.stringify({ name: canonicalManifest.name, version: canonicalManifest.version ?? fallbackVersion, description: canonicalManifest.description, skills: "./skills/" }));
   }
+  projectNativeMcp(stage);
   projectRootCommandsToNative(stage);
   projectNativeCommands(stage, native);
   const nativeManifest = parseManifest(native, "Claude Code");
@@ -17945,6 +17992,43 @@ function stagePlugin(source, stage, fallbackName, fallbackVersion) {
   if (fallbackName.length === 0)
     throw new Error("Claude Code plugin name is empty");
 }
+function projectNativeMcp(stage) {
+  const canonical = join27(stage, "mcp.json");
+  const native = join27(stage, ".mcp.json");
+  const declarations = [canonical, native].filter(existsSync21).map((file) => {
+    const value = JSON.parse(readFileSync21(file, "utf8"));
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+      throw new Error(`Claude Code MCP declaration must be an object: ${file}`);
+    const servers = value["mcpServers"];
+    if (servers === null || typeof servers !== "object" || Array.isArray(servers))
+      throw new Error(`Claude Code MCP declaration must contain a server object: ${file}`);
+    return { file, value, servers };
+  });
+  const projectedCanonical = declarations[0]?.file === canonical ? claudeNativeMcpValue(declarations[0].servers) : undefined;
+  const nativeServers = declarations.find((declaration) => declaration.file === native)?.servers;
+  if (projectedCanonical !== undefined && nativeServers !== undefined && canonicalJson2(projectedCanonical) !== canonicalJson2(nativeServers)) {
+    throw new Error("conflicting Claude Code canonical and native MCP declarations");
+  }
+  if (declarations[0]?.file === canonical && !existsSync21(native)) {
+    writeFileSync6(native, JSON.stringify(claudeNativeMcpValue(declarations[0].value), null, 2));
+  }
+}
+function claudeNativeMcpValue(value) {
+  if (typeof value === "string")
+    return value.replaceAll("${PLUGIN_ROOT}", "${CLAUDE_PLUGIN_ROOT}");
+  if (Array.isArray(value))
+    return value.map(claudeNativeMcpValue);
+  if (value !== null && typeof value === "object")
+    return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, claudeNativeMcpValue(item)]));
+  return value;
+}
+function canonicalJson2(value) {
+  if (Array.isArray(value))
+    return JSON.stringify(value.map(canonicalJson2));
+  if (value !== null && typeof value === "object")
+    return JSON.stringify(Object.entries(value).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, item]) => [key, canonicalJson2(item)]));
+  return JSON.stringify(value) ?? "null";
+}
 function projectRootCommandsToNative(stage) {
   const nativeCommands = join27(stage, ".claude", "commands");
   if (existsSync21(nativeCommands))
@@ -18491,6 +18575,12 @@ function createClaudeCodeLifecycleHost(input) {
         return decision;
       if (request.operation !== "install" && request.operation !== "update")
         return decision;
+      if (request.snapshot.inventory.hookDeclarations.some((declaration) => declaration.form === "portable-hooks") && !claudeReflectionPermissionsSupported(request.snapshot.inventory, request.snapshot.packageRoot)) {
+        return selectLifecycleRoute(definition.id, definition.evidenceProfiles.map((profile) => ({
+          ...profile,
+          semantics: { ...profile.semantics, "ordinary-skills": "unsupported", agents: "unsupported", "permissions-preprocessing": "unsupported" }
+        })), request);
+      }
       if (request.snapshot.inventory.componentDefinitions.some((component) => component.kind === "agent" && (component.root !== "agents" || component.dialect !== "markdown"))) {
         return selectLifecycleRoute(definition.id, definition.evidenceProfiles.map((profile) => ({
           ...profile,
@@ -18534,12 +18624,56 @@ function claudeRouteEvidence(contracts, facts) {
     return { route: "managed", hold: "same-version-bytes" };
   return { route: "native", proofId: `claude-native-update-${contract.version}-git` };
 }
+function claudeReflectionPermissionsSupported(inventory, root) {
+  const agents = inventory.componentDefinitions.filter((component) => component.kind === "agent");
+  const agentPaths = new Set(agents.map((component) => component.path));
+  if (inventory.components.permissionsPreprocessing.some((path) => !agentPaths.has(path)))
+    return false;
+  if (!inventory.components.skills.every((path) => {
+    try {
+      const raw = readFileSync21(join27(root, path), "utf8");
+      const match = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)([\s\S]*)$/u.exec(raw);
+      if (!match || /!`[\s\S]*?`/u.test(raw))
+        return false;
+      const header = yamlParse(match[1] ?? "");
+      return !PERMISSION_FIELDS.some((field) => Object.hasOwn(header, field));
+    } catch {
+      return false;
+    }
+  }))
+    return false;
+  return agents.every((component) => {
+    if (component.root !== "agents" || component.dialect !== "markdown")
+      return false;
+    try {
+      const raw = readFileSync21(join27(root, component.path), "utf8");
+      const match = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)([\s\S]*)$/u.exec(raw);
+      if (!match || /!`[\s\S]*?`/u.test(raw))
+        return false;
+      const header = yamlParse(match[1] ?? "");
+      if (Object.keys(header).some((key) => !["name", "description", "model", "tools"].includes(key)) || header["model"] !== "inherit")
+        return false;
+      const tools = typeof header["tools"] === "string" ? header["tools"].split(",").map((tool) => tool.trim()).sort() : [];
+      return tools.length === 2 && tools[0] === "Read" && tools[1] === "Write";
+    } catch {
+      return false;
+    }
+  });
+}
+function claudeReflectionHookProfile() {
+  const hooks = portableHookProfile(hookAdapter, "managed", ["install", "update", "disable", "retire"]);
+  return createCapabilityEvidenceProfile({
+    ...hooks,
+    semantics: { ...hooks.semantics, "ordinary-skills": "supported", agents: "supported", "permissions-preprocessing": "supported" },
+    evidence: [...hooks.evidence, "docs/evidence/claude-code-2.1.285-reflection-20261016.json"]
+  });
+}
 function claudeCodeLifecycleDefinition(contracts) {
   const version = claudeVersionObservation(observeClaudeCodeVersion());
   const detectedVersion = version.kind === "detected" ? version.version : undefined;
   return {
     id: "claude-code",
-    evidenceProfiles: [...claudeEvidenceProfiles(detectedVersion, contracts), portableHookProfile(hookAdapter, "managed", ["install", "update", "disable", "retire"])],
+    evidenceProfiles: [...claudeEvidenceProfiles(detectedVersion, contracts), claudeReflectionHookProfile()],
     probeVersion: async () => version,
     observeTarget: async (target) => ({ target, installations: observeClaudeInstallations(target, detectedVersion) }),
     observeNativeMutationScope: async (request) => ({
@@ -18713,11 +18847,11 @@ function claudeVersionObservation(observed) {
     return { kind: "detected", version: observed.version, probeId: observed.probeId };
   return { kind: observed.kind };
 }
-var CLAUDE_MANAGED_RELEASES = new Set(["2.1.275", "2.1.295", "2.1.296"]);
+var CLAUDE_MANAGED_RELEASES = new Set(["2.1.275", "2.1.285", "2.1.295", "2.1.296"]);
 function claudeEvidenceProfiles(version, contracts) {
   if (version === undefined)
     return [];
-  const managed = CLAUDE_MANAGED_RELEASES.has(version) ? [claudeProfile(version, "managed", ["local", "git"], ["install", "update", "disable", "retire"])] : [];
+  const managed = CLAUDE_MANAGED_RELEASES.has(version) ? [claudeProfile(version, "managed", ["local", "git"], version === "2.1.285" ? ["install", "update", "retire"] : ["install", "update", "disable", "retire"])] : [];
   const native = contracts.filter((contract) => contract.version === version && sandboxPasses(contract));
   if (native.length > 1)
     throw new Error(`ambiguous Claude Code native update contract for ${version}`);
@@ -18742,7 +18876,8 @@ function claudeProfile(version, route, sourceTypes, operations) {
         "docs/evidence/claude-code-2.1.296-native-20261013.json",
         "docs/evidence/claude-code-2.1.296-invocation-20261013.json",
         "docs/evidence/claude-code-2.1.296-agents-20261013.json"
-      ] : []
+      ] : [],
+      ...version === "2.1.285" ? ["docs/evidence/oh-my-ai-native-host-compat-20261015.json"] : []
     ]
   });
 }
@@ -18760,11 +18895,23 @@ var CLAUDE_PROJECTED_SEMANTICS = new Set([
   "reversible-disable"
 ]);
 function claudeSemantics(version) {
+  const supported = version === "2.1.285" ? OH_MY_AI_INSTALL_SEMANTICS : CLAUDE_PROJECTED_SEMANTICS;
   return Object.fromEntries(PACKAGE_SEMANTICS.map((semantic) => [
     semantic,
-    CLAUDE_PROJECTED_SEMANTICS.has(semantic) || version === "2.1.296" && (semantic === "model-invocation-control" || semantic === "agents") ? "supported" : "unsupported"
+    supported.has(semantic) || version === "2.1.296" && (semantic === "model-invocation-control" || semantic === "agents") ? "supported" : "unsupported"
   ]));
 }
+var OH_MY_AI_INSTALL_SEMANTICS = new Set([
+  "ordinary-skills",
+  "mcp",
+  "resources",
+  "auto-update-control",
+  "readback",
+  "rollback",
+  "activation-reload",
+  "retirement",
+  "retention-safety"
+]);
 function observeClaudeInstallations(target, version) {
   assertLifecycleMarketplaceEnvelope(version);
   const registry = readRegistry(join27(pluginsDir(), "installed_plugins.json"));
@@ -20053,7 +20200,8 @@ function wins(left, right) {
   }
   return left > right;
 }
-var CODEX_ROUTE_VERSION = "0.162.0";
+var CODEX_NATIVE_ROUTE_VERSION = "0.162.0";
+var CODEX_MANAGED_ROUTE_VERSIONS = ["0.161.0", "0.162.0"];
 var NATIVE_UPGRADE_TIMEOUT_MS = 120000;
 var codexMarketplaceCheckoutRollback = "unverified";
 function nativeUpgradeTimeout() {
@@ -20068,15 +20216,17 @@ function nativeUpgradeTimeout() {
 var RELOAD_EFFECTIVE = { requirement: "reload", status: "effective" };
 var UPDATE_SEMANTICS = ["ordinary-skills", "resources", "auto-update-control", "readback", "rollback", "activation-reload"];
 var MANAGED_SEMANTICS = [...UPDATE_SEMANTICS, "retirement", "retention-safety", "model-invocation-control", "commands", "mcp"];
+var OH_MY_AI_INSTALL_SEMANTICS2 = ["ordinary-skills", "mcp", "resources", "auto-update-control", "readback", "rollback", "activation-reload"];
 var codexEvidenceProfiles = [
   portableHookProfile(hookAdapter2, "managed", ["install", "update", "retire"]),
-  codexRouteProfile("native", ["update"], UPDATE_SEMANTICS, ["docs/research/native-plugin-update-capabilities-2026-10-09.md", "docs/evidence/codex-native-released-20261011.md"]),
-  codexRouteProfile("managed", ["install", "update", "retire"], MANAGED_SEMANTICS, [
+  codexRouteProfile(CODEX_NATIVE_ROUTE_VERSION, "native", ["update"], UPDATE_SEMANTICS, ["docs/research/native-plugin-update-capabilities-2026-10-09.md", "docs/evidence/codex-native-released-20261011.md"]),
+  ...CODEX_MANAGED_ROUTE_VERSIONS.map((version) => codexRouteProfile(version, "managed", ["install", "update", "retire"], version === "0.161.0" ? [...OH_MY_AI_INSTALL_SEMANTICS2, "retirement", "retention-safety"] : MANAGED_SEMANTICS, [
     "docs/hosts/codex.md",
     "docs/adr/0004-retain-plugin-state-on-removal.md",
     "docs/evidence/codex-policy-mcp-20261013.json",
-    "docs/evidence/codex-native-released-20261011.md"
-  ])
+    "docs/evidence/codex-native-released-20261011.md",
+    ...version === "0.161.0" ? ["docs/evidence/oh-my-ai-native-host-compat-20261015.json"] : []
+  ]))
 ];
 var codexLifecycleDefinition = {
   id: "codex",
@@ -20116,7 +20266,7 @@ var codexLifecycleDefinition = {
   cleanup: async (reference) => cleanupCodexStage(reference)
 };
 var codexLifecycle = createLifecycleHostAdapter(codexLifecycleDefinition);
-function codexRouteProfile(route, operations, supportedSemantics, evidence) {
+function codexRouteProfile(detectedVersion, route, operations, supportedSemantics, evidence) {
   const checkoutRollback = route === "native" ? codexMarketplaceCheckoutRollback : "supported";
   if (checkoutRollback !== "unverified" && route === "native") {
     throw new Error("codex marketplace checkout rollback must stay unverified");
@@ -20127,7 +20277,7 @@ function codexRouteProfile(route, operations, supportedSemantics, evidence) {
     semantics[semantic] = supported.has(semantic) ? "supported" : "unsupported";
   return createCapabilityEvidenceProfile({
     host: "codex",
-    detectedVersion: CODEX_ROUTE_VERSION,
+    detectedVersion,
     sourceTypes: ["git", "local"],
     operations,
     route,
@@ -22212,8 +22362,8 @@ function unexposed(phase) {
 }
 
 // src/hosts/cursor-writer.ts
-import { accessSync as accessSync5, constants as constants5, cpSync as cpSync8, existsSync as existsSync24, lstatSync as lstatSync18, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync8, readFileSync as readFileSync26, readdirSync as readdirSync17, renameSync as renameSync6, rmSync as rmSync9, statSync as statSync12, writeFileSync as writeFileSync9 } from "node:fs";
-import { delimiter as delimiter4, join as join32, resolve as resolve19 } from "node:path";
+import { cpSync as cpSync8, existsSync as existsSync24, lstatSync as lstatSync18, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync8, readFileSync as readFileSync26, readdirSync as readdirSync17, renameSync as renameSync6, rmSync as rmSync9, statSync as statSync12, writeFileSync as writeFileSync9 } from "node:fs";
+import { join as join32, resolve as resolve19 } from "node:path";
 import { tmpdir as tmpdir5 } from "node:os";
 
 // src/hosts/cursor-adoption.ts
@@ -23065,37 +23215,6 @@ function probeCursorVersion() {
     return { kind: "unparseable" };
   return { kind: "detected", version, probeId: `cursor-${version}` };
 }
-function locateCursorProbeBinary() {
-  const override = process.env["OPEN_PLUGIN_CURSOR_BIN"];
-  if (override !== undefined) {
-    if (override.length === 0 || !existsSync24(override))
-      return { kind: "refused" };
-    return { kind: "path", path: override };
-  }
-  const found = whichOnPath(cursorProbePath(), "cursor");
-  return found === undefined ? { kind: "absent" } : { kind: "path", path: found };
-}
-function cursorProbePath() {
-  const isolated = process.env["OPEN_PLUGIN_HOME"];
-  if (isolated !== undefined && isolated.length > 0)
-    return join32(homeRoot(), "bin");
-  return process.env["PATH"] ?? "";
-}
-function whichOnPath(pathEnv, name) {
-  for (const dir of pathEnv.split(delimiter4)) {
-    if (dir.length === 0)
-      continue;
-    const candidate = join32(dir, name);
-    try {
-      accessSync5(candidate, constants5.X_OK);
-      if (statSync12(candidate).isFile())
-        return candidate;
-    } catch {
-      continue;
-    }
-  }
-  return;
-}
 function cursorVersion(stdout) {
   const line = stdout.split(/\r?\n/u).map((item) => item.trim()).find((item) => item.length > 0);
   if (line === undefined)
@@ -23776,16 +23895,30 @@ var supportedSemantics = new Set([
   "activation-reload",
   "reversible-disable"
 ]);
-var ompManagedProfiles = ["18.1.4", "18.10.3"].map((detectedVersion) => createCapabilityEvidenceProfile({
+var ohMyAiInstallSemantics = new Set([
+  "ordinary-skills",
+  "mcp",
+  "resources",
+  "auto-update-control",
+  "readback",
+  "rollback",
+  "activation-reload",
+  "retirement",
+  "retention-safety"
+]);
+var ompManagedProfiles = ["18.1.4", "18.8.7", "18.10.3"].map((detectedVersion) => createCapabilityEvidenceProfile({
   host: "omp",
   detectedVersion,
   sourceTypes: ["local", "git"],
-  operations: ["install", "update", "disable", "retire"],
+  operations: detectedVersion === "18.8.7" ? ["install", "update", "retire"] : ["install", "update", "disable", "retire"],
   route: "managed",
   operationStatus: "supported",
-  semantics: Object.fromEntries(PACKAGE_SEMANTICS.map((semantic) => [semantic, supportedSemantics.has(semantic) ? "supported" : "unsupported"])),
+  semantics: Object.fromEntries(PACKAGE_SEMANTICS.map((semantic) => [
+    semantic,
+    (detectedVersion === "18.8.7" ? ohMyAiInstallSemantics : supportedSemantics).has(semantic) ? "supported" : "unsupported"
+  ])),
   evidence: [
-    detectedVersion === "18.10.3" ? "docs/evidence/omp-native-extension-package-20261013.json" : "docs/evidence/omp-native-extension-package-20260923.json",
+    detectedVersion === "18.10.3" ? "docs/evidence/omp-native-extension-package-20261013.json" : detectedVersion === "18.8.7" ? "docs/evidence/oh-my-ai-native-host-compat-20261015.json" : "docs/evidence/omp-native-extension-package-20260923.json",
     "docs/hosts/omp.md",
     "docs/research/native-plugin-update-capabilities-2026-10-09.md"
   ]
@@ -26151,11 +26284,11 @@ var digest6 = (value) => {
   hash.update(value);
   return hash.digest("hex").slice(0, 16);
 };
-function canonicalJson2(value) {
+function canonicalJson3(value) {
   if (Array.isArray(value))
-    return `array:${JSON.stringify(value.map((item) => canonicalJson2(item)))}`;
+    return `array:${JSON.stringify(value.map((item) => canonicalJson3(item)))}`;
   if (value !== null && typeof value === "object")
-    return `object:${JSON.stringify(Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, item]) => [key, canonicalJson2(item)]))}`;
+    return `object:${JSON.stringify(Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, item]) => [key, canonicalJson3(item)]))}`;
   return JSON.stringify(value);
 }
 var grokWriter = {
@@ -26502,7 +26635,7 @@ ${doc.prompt}`);
   }
   const legacyMcp = join38(dir, "mcp.json");
   const nativeMcp = join38(dir, ".mcp.json");
-  if (existsSync30(legacyMcp) && existsSync30(nativeMcp) && canonicalJson2(JSON.parse(readFileSync32(legacyMcp, "utf8")).mcpServers) !== canonicalJson2(JSON.parse(readFileSync32(nativeMcp, "utf8")).mcpServers))
+  if (existsSync30(legacyMcp) && existsSync30(nativeMcp) && canonicalJson3(JSON.parse(readFileSync32(legacyMcp, "utf8")).mcpServers) !== canonicalJson3(JSON.parse(readFileSync32(nativeMcp, "utf8")).mcpServers))
     throw new Error(`conflicting Grok MCP declarations: ${legacyMcp} and ${nativeMcp}`);
   if (existsSync30(legacyMcp) && !existsSync30(nativeMcp))
     cpSync13(legacyMcp, nativeMcp);
@@ -27821,11 +27954,11 @@ async function probeZcodeVersion(target) {
 function zcodePluginDataDir(nativeId) {
   return join40(zcodeCliRoot(), "plugins", "data", nativeId.replace(/[^a-zA-Z0-9_.@-]/g, "-"));
 }
-function canonicalJson3(value) {
+function canonicalJson4(value) {
   if (Array.isArray(value))
-    return `[${value.map((item) => canonicalJson3(item)).join(",")}]`;
+    return `[${value.map((item) => canonicalJson4(item)).join(",")}]`;
   if (isObject4(value))
-    return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson3(value[key])}`).join(",")}}`;
+    return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson4(value[key])}`).join(",")}}`;
   return JSON.stringify(value) ?? "null";
 }
 function sha2562(text) {
@@ -27866,7 +27999,7 @@ function assertStageCleanupAuthority(stage, reference) {
   } else if (!artifact?.startsWith("sha256:"))
     throw new Error("ZCode cleanup stage has no captured artifact authority");
   const exactEntries = (root, expected) => {
-    if (canonicalJson3(readdirSync24(root).sort()) !== canonicalJson3(expected.sort()))
+    if (canonicalJson4(readdirSync24(root).sort()) !== canonicalJson4(expected.sort()))
       throw new Error("ZCode cleanup stage layout changed");
   };
   exactEntries(stage, ["marketplace", "resources", "stage-receipt.json"]);
@@ -27887,10 +28020,10 @@ function assertStageCleanupAuthority(stage, reference) {
   if (marker.resourcePath !== join40(realpathSync6(zcodeCliRoot()), "plgnz-resources", marketplaceName2(marker.nativeId), marker.fingerprint))
     throw new Error("ZCode cleanup stage native root was redirected");
   const expectedReceipt = { attemptId: reference.attemptId, operationId: reference.operationId, sourceRevision: marker.source, packageFingerprint: marker.fingerprint, projectedFingerprint: digest };
-  if (canonicalJson3(readJson3(join40(stage, "stage-receipt.json"))) !== canonicalJson3(expectedReceipt))
+  if (canonicalJson4(readJson3(join40(stage, "stage-receipt.json"))) !== canonicalJson4(expectedReceipt))
     throw new Error("ZCode cleanup stage receipt changed");
   const expectedMarket = { name: marketplaceName2(marker.nativeId), plugins: [{ name, source: `./plugins/${name}` }] };
-  if (canonicalJson3(readJson3(join40(market, "marketplace.json"))) !== canonicalJson3(expectedMarket))
+  if (canonicalJson4(readJson3(join40(market, "marketplace.json"))) !== canonicalJson4(expectedMarket))
     throw new Error("ZCode cleanup stage marketplace changed");
 }
 function readConfigObject() {
@@ -27915,7 +28048,7 @@ function retainedState(nativeId) {
   const dataDir = zcodePluginDataDir(nativeId);
   const pluginData = existsSync31(dataDir) && statSync13(dataDir).isDirectory() ? { state: "present", fingerprint: fingerprintTree(dataDir) } : { state: "absent", fingerprint: null };
   const options = optionValue(nativeId);
-  const inactiveMetadata = options === undefined ? { state: "absent", fingerprint: null } : { state: "present", fingerprint: sha2562(canonicalJson3(options)) };
+  const inactiveMetadata = options === undefined ? { state: "absent", fingerprint: null } : { state: "present", fingerprint: sha2562(canonicalJson4(options)) };
   return { pluginData, inactiveMetadata };
 }
 function installationFor(native) {
@@ -28774,6 +28907,30 @@ if __name__ == "__main__":
         sys.argv[0] = sys.argv[0][:-4]
     sys.exit(main())
 `;
+var hermesNativeBootstrap7dbbb0f = `import os, re, sys
+os.environ.pop('PYTHONHOME', None)
+os.environ.pop('PYTHONPATH', None)
+sys.path.insert(0, '/__PLUGNZ_HERMES_ROOT__')
+if sys.argv[1:2] == ['--print-runtime-command']: sys.dont_write_bytecode = True
+from hermes_constants import get_default_hermes_root
+os.environ['HERMES_HOME'] = os.environ.get('HERMES_HOME') or str(get_default_hermes_root())
+if sys.argv[1:2] == ['--print-runtime-command']:
+    from pathlib import Path
+    from hermes_cli._launchers import print_runtime_command
+    print_runtime_command(Path('/__PLUGNZ_HERMES_ROOT__'), sys.argv[2:])
+    sys.exit(0)
+import hermes_bootstrap
+if sys.argv[1:2] == ['--run-module']:
+    import runpy
+    if len(sys.argv) < 3: sys.exit('hermes: --run-module needs a module')
+    module = sys.argv.pop(2)
+    del sys.argv[1]
+    runpy.run_module(module, run_name='__main__', alter_sys=True)
+    sys.exit(0)
+from hermes_cli.main import main
+sys.argv[0] = re.sub(r'(-script\\.pyw|\\.exe)?$', '', sys.argv[0])
+sys.exit(main())
+`;
 
 // src/hosts/hermes-writer.ts
 var MARKER11 = ".plgnz-install.json";
@@ -29277,7 +29434,7 @@ exec `.length));
     if (bindings.length !== 1)
       return;
     const root = literalPythonPath(bindings[0][1]);
-    if (root === undefined || code.replaceAll(bindings[0][1], "'/__PLUGNZ_HERMES_ROOT__'") !== hermesNativeBootstrap)
+    if (root === undefined || ![hermesNativeBootstrap, hermesNativeBootstrap7dbbb0f].includes(code.replaceAll(bindings[0][1], "'/__PLUGNZ_HERMES_ROOT__'")))
       return;
     return root !== undefined && isAbsolute12(root) && existsSync32(join41(root, "hermes_cli", "main.py")) && realpathSync7(join41(root, "hermes_cli", "main.py")).startsWith(`${realpathSync7(root)}/`) && verifiedSourceImportClosure(realpathSync7(root)) ? realpathSync7(root) : undefined;
   }
@@ -29407,12 +29564,12 @@ var hermesManagedProfiles = hermesProvenManagedRevisions.map((detectedVersion) =
   host: "hermes",
   detectedVersion,
   sourceTypes: ["local", "git"],
-  operations: ["install", "update", "disable", "retire"],
+  operations: detectedVersion === "7dbbb0f4a6ebeec9a8714ec37fa41340fe9e4e00" ? ["install", "update", "retire"] : ["install", "update", "disable", "retire"],
   route: "managed",
   operationStatus: "supported",
-  semantics: Object.fromEntries(PACKAGE_SEMANTICS.map((semantic) => [semantic, HERMES_SUPPORTED.has(semantic) ? "supported" : "unsupported"])),
+  semantics: Object.fromEntries(PACKAGE_SEMANTICS.map((semantic) => [semantic, HERMES_SUPPORTED.has(semantic) && !(detectedVersion === "7dbbb0f4a6ebeec9a8714ec37fa41340fe9e4e00" && semantic === "reversible-disable") ? "supported" : "unsupported"])),
   evidence: [
-    detectedVersion === "c0d7294769a38c17ceae51d8f7995e66e1dcae27" ? "docs/evidence/hermes-native-loader-c0d7294-20260923.json" : detectedVersion === "6e7b83a2f1c093e992a8d838ed77ea320fbd8e51" ? "docs/evidence/hermes-native-loader-6e7b83a-20261013.json" : "docs/evidence/hermes-native-loader-dce1e9b-20261011.json",
+    detectedVersion === "c0d7294769a38c17ceae51d8f7995e66e1dcae27" ? "docs/evidence/hermes-native-loader-c0d7294-20260923.json" : detectedVersion === "6e7b83a2f1c093e992a8d838ed77ea320fbd8e51" ? "docs/evidence/hermes-native-loader-6e7b83a-20261013.json" : detectedVersion === "7dbbb0f4a6ebeec9a8714ec37fa41340fe9e4e00" ? "docs/evidence/hermes-native-loader-7dbbb0f-20261015.json" : "docs/evidence/hermes-native-loader-dce1e9b-20261011.json",
     "docs/hosts/hermes.md",
     "docs/research/native-plugin-update-capabilities-2026-10-09.md"
   ]
@@ -34021,7 +34178,7 @@ function legacyCommandAction(command) {
 // package.json
 var package_default = {
   name: "plugnz",
-  version: "0.0.24",
+  version: "0.0.26",
   description: "Install, diagnose and update agent plugins (Agent Plugins spec) and MCP configs across Claude Code, Codex, Cursor, Kimi and more",
   license: "MIT",
   type: "module",
@@ -34493,17 +34650,22 @@ function select(available, targets) {
   for (const target of targets)
     if (!known.has(target))
       return { selected: [], error: `unknown target '${target}' (known: ${[...known.keys()].join(", ")})` };
-  const selected = targets.length === 0 ? [...available] : targets.map((target) => known.get(target));
+  if (targets.length === 0)
+    return { selected: available.filter(detectInstalled) };
+  const selected = targets.map((target) => known.get(target));
   const absent = selected.find((host) => !host.detect());
-  if (absent !== undefined && targets.length > 0)
+  if (absent !== undefined)
     return { selected: [], error: `requested target '${absent.id}' is not present on this machine` };
   return { selected: selected.filter((host) => host.detect()) };
 }
+function detectInstalled(host) {
+  return host.detectInstalled?.() ?? host.detect();
+}
 function selectProfiles(targets) {
   const duplicate = targets.find((target, index) => targets.indexOf(target) !== index);
   if (duplicate !== undefined)
     return { selected: [], error: `duplicate target '${duplicate}'` };
-  const selected = targets.length === 0 ? writers.filter((writer) => writer.detect()).map((writer) => findConsumerProfile(writer.id)).filter((profile) => profile !== undefined) : targets.map(findConsumerProfile);
+  const selected = targets.length === 0 ? writers.filter(detectInstalled).map((writer) => findConsumerProfile(writer.id)).filter((profile) => profile !== undefined) : targets.map(findConsumerProfile);
   const unknownIndex = selected.findIndex((profile) => profile === undefined);
   if (unknownIndex !== -1)
     return { selected: [], error: `unknown target '${targets[unknownIndex]}' (known: ${consumerProfiles.map((profile) => profile.id).join(", ")})` };
@@ -34631,7 +34793,7 @@ function splitAddTargets(requested, dryRun) {
   }
   let detected;
   try {
-    detected = writers.filter((writer) => writer.detect());
+    detected = writers.filter(detectInstalled);
   } catch (error) {
     return { kind: "refused", report: reportFor("add", dryRun, [], [], {
       terminalPhase: "preflight",
@@ -35425,7 +35587,7 @@ async function main(argv) {
     const disallowed = rejectDisallowed(flags, new Set(["all"]));
     if (disallowed || flags.positionals.length > 0)
       fail4(`plugnz targets: ${disallowed ?? "unexpected argument"}`, 2);
-    const present = hosts.filter((h) => h.detect());
+    const present = hosts.filter(detectInstalled);
     if (json) {
       console.log(JSON.stringify(flags.all ? consumerProfiles : present.map((h) => h.id), null, 2));
     } else {
@@ -35764,7 +35926,7 @@ async function main(argv) {
       }
     }
     const candidates = flags.targets.length > 0 ? writers.filter((writer) => flags.targets.includes(writer.id)) : flags.all ? [...writers] : writers.filter((writer) => writer.gui);
-    const detected = candidates.filter((writer) => writer.detect());
+    const detected = candidates.filter((writer) => flags.targets.length > 0 ? writer.detect() : detectInstalled(writer));
     if (detected.length === 0) {
       console.error("plugnz pin: No detected writer targets");
       return 1;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "plugnz",
-  "version": "0.0.24",
+  "version": "0.0.26",
   "description": "Install, diagnose and update agent plugins (Agent Plugins spec) and MCP configs across Claude Code, Codex, Cursor, Kimi and more",
   "license": "MIT",
   "type": "module",