plugnz 0.0.32 → 0.0.33

package/dist/plugnz.mjs

@@ -15375,7 +15375,7 @@ function registerProjectedExtension(stage, key, entry) {
 
 // src/hosts/claude-code-writer.ts
 import { cpSync as cpSync5, existsSync as existsSync21, lstatSync as lstatSync15, mkdirSync as mkdirSync6, mkdtempSync as mkdtempSync5, readFileSync as readFileSync23, readdirSync as readdirSync14, renameSync as renameSync3, rmSync as rmSync7, statSync as statSync9, writeFileSync as writeFileSync8 } from "node:fs";
-import { dirname as dirname8, join as join29, relative as relative7, resolve as resolve16 } from "node:path";
+import { dirname as dirname8, join as join29, relative as relative7, resolve as resolve17 } from "node:path";
 import { tmpdir as tmpdir2 } from "node:os";
 
 // src/conversion.ts
@@ -16802,6 +16802,60 @@ function pinPluginMcpFiles(pluginDir, candidates, opts = {}) {
   return { changes, refusals };
 }
 
+// src/legacy-claim-ownership.ts
+import { resolve as resolve15 } from "node:path";
+function resolveLegacyV1MarkerScopeId(input) {
+  const { target, nativeId, marker, installedFingerprint } = input;
+  if (marker === null || marker === undefined)
+    return;
+  if (marker.scopeId !== undefined)
+    return;
+  const matches = input.matchesPluginId ?? ((markerId, expectedId) => markerId === expectedId);
+  if (!matches(marker.pluginId, nativeId))
+    return;
+  if (installedFingerprint === null || installedFingerprint.length === 0)
+    return;
+  let loaded;
+  try {
+    loaded = readLifecycleState();
+  } catch {
+    return;
+  }
+  const candidates = loaded.state.activations.filter((activation) => {
+    if (activation.ownership.kind !== "legacy-claim" || activation.ownership.prior !== "plgnz" || activation.route.kind !== "legacy-unverified") {
+      return false;
+    }
+    if (activation.nativeId !== nativeId && activation.nativeId !== marker.pluginId) {
+      return false;
+    }
+    if (activation.fingerprints.source === undefined || activation.fingerprints.source !== marker.fingerprint) {
+      return false;
+    }
+    if (activation.fingerprints.installed === undefined || activation.fingerprints.installed !== installedFingerprint) {
+      return false;
+    }
+    const scope = loaded.state.scopes.find((row) => row.id === activation.scopeId);
+    if (scope === undefined || scope.target.kind !== target.kind || scope.target.instance !== target.instance) {
+      return false;
+    }
+    return matchesLegacyMarkerSource(scope.source, marker.source, activation.sourceRevision);
+  });
+  if (candidates.length !== 1)
+    return;
+  return candidates[0].scopeId;
+}
+function legacyV1MarkerMatchesScope(input) {
+  return resolveLegacyV1MarkerScopeId(input) === input.scopeId;
+}
+function matchesLegacyMarkerSource(source, markerSource, sourceRevision) {
+  if (source.kind === "local") {
+    if (!markerSource.startsWith("/"))
+      return false;
+    return resolve15(markerSource) === resolve15(source.locator);
+  }
+  return markerSource === source.locator || source.ref !== "HEAD" && markerSource === `${source.locator}#${source.ref}` || sourceRevision !== undefined && markerSource === sourceRevision;
+}
+
 // src/scope-inventory.ts
 var SCOPE_ID = /^scope-v1-[0-9a-f]{64}$/u;
 function projectScopeInventory(state, query) {
@@ -16909,7 +16963,7 @@ function key(value) {
 }
 
 // src/lifecycle-runtime.ts
-import { isAbsolute as isAbsolute10, relative as relative6, resolve as resolve15 } from "node:path";
+import { isAbsolute as isAbsolute10, relative as relative6, resolve as resolve16 } from "node:path";
 class LifecycleHostPhaseError extends Error {
   phase;
   reason;
@@ -17092,7 +17146,7 @@ function createFrozenPackageSnapshot(input) {
 function createResolvedLifecyclePins(input) {
   const pins = input.map(({ server, executable }) => {
     stable3(server, "pin server");
-    if (!isAbsolute10(executable) || resolve15(executable) !== executable)
+    if (!isAbsolute10(executable) || resolve16(executable) !== executable)
       invariant(`pin executable must be a canonical absolute path: ${executable}`);
     return Object.freeze({ server, executable });
   });
@@ -18161,7 +18215,7 @@ function sameTarget(left, right) {
   return canonicalJson(frozenTarget(left)) === canonicalJson(frozenTarget(right));
 }
 function canonicalAbsolute(path, label) {
-  if (!isAbsolute10(path) || resolve15(path) !== path)
+  if (!isAbsolute10(path) || resolve16(path) !== path)
     invariant(`${label} must be a canonical absolute path`);
   return path;
 }
@@ -18953,8 +19007,8 @@ function matchesNativeCatalogMember(marketplaces, name, plugin, resolved) {
   const memberSource = selected[0]["source"];
   if (typeof memberSource !== "string" || !memberSource.startsWith("./"))
     return false;
-  const nativeDir = resolve16(catalog, memberSource);
-  if (!containedPath(catalog, nativeDir) || nativeDir === resolve16(catalog))
+  const nativeDir = resolve17(catalog, memberSource);
+  if (!containedPath(catalog, nativeDir) || nativeDir === resolve17(catalog))
     return false;
   assertCatalogPath(catalog, nativeDir);
   if (!existsSync21(nativeDir) || !lstatSync15(nativeDir).isDirectory())
@@ -18973,14 +19027,14 @@ function matchesNativeCatalogMember(marketplaces, name, plugin, resolved) {
 function containedPath(root, path) {
   if (!root.startsWith("/") || !path.startsWith("/"))
     return false;
-  const suffix = relative7(resolve16(root), resolve16(path));
+  const suffix = relative7(resolve17(root), resolve17(path));
   return suffix !== ".." && !suffix.startsWith("../") && !suffix.startsWith("..\\");
 }
 function assertCatalogPath(root, path) {
   if (!containedPath(root, path))
     throw new Error(`Claude Code native catalog member escapes catalog: ${path}`);
-  const target = resolve16(path);
-  let current = resolve16(root);
+  const target = resolve17(path);
+  let current = resolve17(root);
   for (const part of ["", ...relative7(current, target).split("/").filter(Boolean)]) {
     if (part !== "")
       current = join29(current, part);
@@ -18998,8 +19052,8 @@ function assertTargetIsReplaceable(target, ownership, id, source) {
     throw new Error(`claude-code cache slot ${target} has a different owned source identity; refusing to replace it`);
 }
 function assertManagedPath(path) {
-  const root = resolve16(join29(pluginsDir(), ".."));
-  const target = resolve16(path);
+  const root = resolve17(join29(pluginsDir(), ".."));
+  const target = resolve17(path);
   const suffix = relative7(root, target);
   if (suffix === ".." || suffix.startsWith("../") || suffix.startsWith("..\\"))
     throw new Error(`Claude Code managed path escapes its root: ${path}`);
@@ -19291,7 +19345,7 @@ function claudeCodeLifecycleDefinition(contracts) {
       const result = nativeProjection(contracts, request, detectedVersion);
       if ("snapshot" in request && result.kind === "requires-managed") {
         for (const path of ["known_marketplaces.json", "installed_plugins.json", "../settings.json"])
-          assertManagedPath(resolve16(join29(pluginsDir(), path)));
+          assertManagedPath(resolve17(join29(pluginsDir(), path)));
         assertManagedPath(cacheSlot(request.snapshot.nativeId, slotVersion(request.snapshot.inventory.package.version, request.snapshot.immutableRevision)));
         if (!matchingForeignLifecycleCatalog(request.snapshot.nativeId, request.snapshot.scopeId, request.snapshot.target, request.snapshot.packageRoot, request.snapshot.inventory.package.version ?? request.snapshot.immutableRevision))
           validateLifecycleCatalog(request.snapshot.nativeId, request.snapshot.scopeId);
@@ -19558,7 +19612,7 @@ function observeClaudeInstallations(target, version) {
     const recordedPath = row["installPath"];
     if (typeof recordedPath !== "string")
       continue;
-    const installPath = resolve16(recordedPath);
+    const installPath = resolve17(recordedPath);
     if (!existsSync21(installPath))
       continue;
     const marker = readOwnership(installPath);
@@ -19566,6 +19620,7 @@ function observeClaudeInstallations(target, version) {
     const sha = row["gitCommitSha"];
     const revision = typeof sha === "string" && /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/u.test(sha) ? sha : undefined;
     const locator = marker === null ? undefined : gitLocator(marker.source);
+    const resolvedScopeId = marker?.pluginId === id ? marker.scopeId ?? resolveLegacyV1MarkerScopeId({ target, nativeId: id, marker, installedFingerprint: digest }) : undefined;
     const observedRoute = marker?.pluginId === id && marker.scopeId !== undefined ? observedOwnedRoute(installPath) : undefined;
     const on = enabledPlugins[id] === true;
     const at = id.indexOf("@");
@@ -19575,7 +19630,7 @@ function observeClaudeInstallations(target, version) {
       ownership: marker?.pluginId === id ? {
         kind: "owned",
         proof: marker.adopted === true ? "adopted" : "created",
-        scopeId: marker.scopeId ?? `claude-code:${id}`,
+        scopeId: resolvedScopeId ?? `claude-code:${id}`,
         proofId: `claude-code:${id}`
       } : { kind: "unmanaged" },
       presence: "present",
@@ -19638,8 +19693,8 @@ function claudeReadback(identity, absentRoute, version) {
   const installPath = recordedInstallPath(identity.nativeId);
   const present = installPath !== undefined && existsSync21(installPath);
   const retention = {
-    pluginData: retained(resolve16(join29(pluginsDir(), "plugin-data", identity.nativeId))),
-    inactiveMetadata: retained(resolve16(join29(pluginsDir(), "inactive-metadata", identity.nativeId)))
+    pluginData: retained(resolve17(join29(pluginsDir(), "plugin-data", identity.nativeId))),
+    inactiveMetadata: retained(resolve17(join29(pluginsDir(), "inactive-metadata", identity.nativeId)))
   };
   if (!present || installPath === undefined) {
     return {
@@ -19711,7 +19766,7 @@ function recordedInstallPath(nativeId) {
       continue;
     const record = row;
     if (record["scope"] === "user" && typeof record["installPath"] === "string")
-      return resolve16(record["installPath"]);
+      return resolve17(record["installPath"]);
   }
   return;
 }
@@ -19719,13 +19774,13 @@ function cacheSlot(nativeId, version) {
   const at = nativeId.indexOf("@");
   const name = at === -1 ? nativeId : nativeId.slice(0, at);
   const market = at === -1 ? "local" : nativeId.slice(at + 1);
-  return resolve16(join29(pluginsDir(), "cache", market, name, version));
+  return resolve17(join29(pluginsDir(), "cache", market, name, version));
 }
 function lifecycleCatalogRoot(nativeId) {
   const market = marketplaceName(nativeId);
   if (market === undefined || market.includes("/") || market.includes("\\"))
     throw new Error("Claude Code lifecycle native identity has no safe marketplace");
-  return resolve16(join29(pluginsDir(), "marketplaces", `.plgnz-${market}`));
+  return resolve17(join29(pluginsDir(), "marketplaces", `.plgnz-${market}`));
 }
 function lifecycleCatalogCopy(nativeId) {
   const name = nativeId.slice(0, nativeId.indexOf("@"));
@@ -19741,13 +19796,13 @@ function registeredLifecycleCatalogMember(nativeId) {
   if (!isRecord6(entry) || !isRecord6(entry["source"]) || entry["source"]["source"] !== "directory" || typeof entry["source"]["path"] !== "string" || entry["installLocation"] !== entry["source"]["path"])
     return null;
   const root = entry["source"]["path"];
-  if (!root.startsWith("/") || resolve16(root) !== root || !existsSync21(root))
+  if (!root.startsWith("/") || resolve17(root) !== root || !existsSync21(root))
     return null;
   assertCatalogPath(root, join29(root, ".claude-plugin", "marketplace.json"));
   const selected = catalogEntries(lifecycleCatalogDocument(root, market)).filter((item) => isCatalogMember(item, nativeId));
   if (selected.length !== 1 || !isRecord6(selected[0]) || typeof selected[0]["source"] !== "string" || !selected[0]["source"].startsWith("./"))
     return null;
-  const member = resolve16(root, selected[0]["source"]);
+  const member = resolve17(root, selected[0]["source"]);
   if (!containedPath(root, member) || root === member || !existsSync21(member))
     return null;
   assertCatalogPath(root, member);
@@ -19836,23 +19891,30 @@ function validateLifecycleCatalog(nativeId, scopeId) {
   const selected = catalogEntries(document).filter((entry) => isCatalogMember(entry, nativeId));
   if (selected.length > 1 || selected.some((entry) => !isRecord6(entry) || entry["source"] !== `./plugins/${nativeId.slice(0, nativeId.indexOf("@"))}`))
     throw new Error(`Claude Code marketplace member ${nativeId} is foreign or ambiguous; refusing to replace it`);
+  const installed = recordedInstallPath(nativeId);
+  const installedOwner = installed === undefined || !existsSync21(installed) ? null : readOwnership(installed);
+  const installedScopeId = installed === undefined || installedOwner === null ? undefined : installedOwner.scopeId ?? resolveLegacyV1MarkerScopeId({ target: { kind: "claude-code", instance: "default" }, nativeId, marker: installedOwner, installedFingerprint: fingerprintTree(installed) });
   if (existsSync21(copy)) {
     assertNoSymlinks2(copy);
     const owner = readOwnership(copy);
-    if (owner?.pluginId !== nativeId || owner.scopeId !== scopeId)
+    const copyScopeId = owner?.scopeId !== undefined ? owner.scopeId : owner?.pluginId === nativeId && installed !== undefined && existsSync21(installed) && installedScopeId === scopeId && owner.source === installedOwner?.source && owner.fingerprint === installedOwner?.fingerprint && (fingerprintTree(copy) === fingerprintTree(installed) || fingerprintSourceTree(copy, [OWNERSHIP]) === owner.fingerprint && readFileSync23(join29(copy, OWNERSHIP), "utf8") === readFileSync23(join29(installed, OWNERSHIP), "utf8")) ? scopeId : undefined;
+    if (owner?.pluginId !== nativeId || copyScopeId !== scopeId)
       throw new Error(`Claude Code marketplace member ${copy} has a different owned scope; refusing to replace it`);
   } else if (selected.length > 0) {
-    const installed = recordedInstallPath(nativeId);
-    const owner = installed === undefined ? null : readOwnership(installed);
-    if (owner?.pluginId !== nativeId || owner.scopeId !== scopeId)
+    if (installedOwner?.pluginId !== nativeId || installedScopeId !== scopeId)
       throw new Error(`Claude Code marketplace member ${nativeId} has no ownership proof; refusing to replace it`);
   }
   const known = readMarketplaces(join29(pluginsDir(), "known_marketplaces.json"));
   const extra = readSettings(join29(pluginsDir(), "..", "settings.json"))["extraKnownMarketplaces"];
+  const sameLegacyLocalSource = (candidatePath) => installedScopeId === scopeId && typeof candidatePath === "string" && candidatePath.startsWith("/") && createDeploymentScopeIdentity({ kind: "local", locator: candidatePath }, { kind: "claude-code", instance: "default" }).id === scopeId;
   for (const entry of [known[market], isRecord6(extra) ? extra[market] : undefined]) {
     if (entry === undefined)
       continue;
-    if (!isRecord6(entry) || !isRecord6(entry["source"]) || entry["source"]["source"] !== "directory" || entry["source"]["path"] !== root || entry["installLocation"] !== undefined && entry["installLocation"] !== root)
+    const sourcePath = isRecord6(entry) && isRecord6(entry["source"]) ? entry["source"]["path"] : undefined;
+    const allowedPath = sourcePath === root || sameLegacyLocalSource(sourcePath);
+    const installLoc = isRecord6(entry) ? entry["installLocation"] : undefined;
+    const allowedInstallLoc = installLoc === undefined || installLoc === root || installLoc === sourcePath && sameLegacyLocalSource(sourcePath);
+    if (!isRecord6(entry) || !isRecord6(entry["source"]) || entry["source"]["source"] !== "directory" || !allowedPath || !allowedInstallLoc)
       throw new Error(`Claude Code marketplace ${market} is registered from a different source; refusing to replace it`);
   }
 }
@@ -19879,11 +19941,12 @@ function lifecycleCatalogConforms(nativeId, installPath, target) {
     return false;
   const registered = registeredLifecycleCatalogMember(nativeId);
   const owner = readOwnership(installPath);
+  const ownerScopeId = owner?.scopeId ?? (owner?.pluginId === nativeId ? resolveLegacyV1MarkerScopeId({ target, nativeId, marker: owner, installedFingerprint: fingerprintTree(installPath) }) : undefined);
   if (registered !== null && registered.root !== lifecycleCatalogRoot(nativeId)) {
-    if (owner?.scopeId === undefined)
+    if (ownerScopeId === undefined)
       return false;
     const manifest = existsSync21(join29(installPath, ".plugin", "plugin.json")) ? join29(installPath, ".plugin", "plugin.json") : join29(installPath, "plugin.json");
-    return matchingForeignLifecycleCatalog(nativeId, owner.scopeId, target, installPath, parseManifest(manifest, "canonical").version ?? "") !== null;
+    return matchingForeignLifecycleCatalog(nativeId, ownerScopeId, target, installPath, parseManifest(manifest, "canonical").version ?? "") !== null;
   }
   const known = readMarketplaces(join29(pluginsDir(), "known_marketplaces.json"))[market];
   if (!isRecord6(known) || !isRecord6(known["source"]) || known["source"]["source"] !== "directory" || known["source"]["path"] !== lifecycleCatalogRoot(nativeId) || known["installLocation"] !== lifecycleCatalogRoot(nativeId))
@@ -20029,7 +20092,7 @@ function slotVersion(version, revision) {
   return selected;
 }
 function lifecyclePath(kind, attemptId, operationId) {
-  return resolve16(join29(pluginsDir(), kind, attemptId, operationId));
+  return resolve17(join29(pluginsDir(), kind, attemptId, operationId));
 }
 function captureRollback(attemptId, operationId, nativeId) {
   const reference = lifecyclePath(".plgnz-rollback", attemptId, operationId);
@@ -20138,7 +20201,7 @@ function restoreRollback(handle) {
   const appliedSlot = cacheSlot(handle.nativeId, slotVersion(handle.packageVersion, handle.sourceRevision));
   const savedPath = join29(reference, "install-path.txt");
   const previousSlot = existsSync21(savedPath) ? readFileSync23(savedPath, "utf8") : undefined;
-  if (previousSlot !== undefined && resolve16(previousSlot) !== appliedSlot && !existsSync21(appliedSlot)) {
+  if (previousSlot !== undefined && resolve17(previousSlot) !== appliedSlot && !existsSync21(appliedSlot)) {
     throw new Error(`claude-code rollback cannot remove the updated cache slot: ${appliedSlot}`);
   }
   const beforeEntry = JSON.stringify(readRegistry(registryFile).plugins[handle.nativeId] ?? null);
@@ -20148,7 +20211,7 @@ function restoreRollback(handle) {
   const beforePrevious = previousSlot !== undefined && existsSync21(previousSlot) ? fingerprintTree(previousSlot) : null;
   restoreLifecycleCatalog(reference, handle.nativeId, handle.scopeId);
   restorePluginSlice(handle.nativeId, reference);
-  if (previousSlot !== undefined && resolve16(previousSlot) !== appliedSlot)
+  if (previousSlot !== undefined && resolve17(previousSlot) !== appliedSlot)
     rmSync7(appliedSlot, { recursive: true, force: true });
   const installPath = previousSlot ?? recordedInstallPath(handle.nativeId) ?? appliedSlot;
   const backup = join29(reference, "install");
@@ -20279,7 +20342,7 @@ function hasForeignMarketplaceSibling(nativeId, marketplace) {
       return false;
     if (!isRecord6(entry) || typeof entry["name"] !== "string" || typeof entry["source"] !== "string" || !entry["source"].startsWith("./"))
       return true;
-    const member = resolve16(root, entry["source"]);
+    const member = resolve17(root, entry["source"]);
     if (!containedPath(root, member) || member === root || !existsSync21(member))
       return true;
     assertCatalogPath(root, member);
@@ -20318,7 +20381,7 @@ function disableMarketplaceAutoUpdate(nativeId) {
 // src/hosts/codex-writer.ts
 init_codex_hooks();
 import { chmodSync, cpSync as cpSync6, existsSync as existsSync22, lstatSync as lstatSync17, mkdirSync as mkdirSync7, mkdtempSync as mkdtempSync6, readFileSync as readFileSync25, readdirSync as readdirSync15, readlinkSync as readlinkSync2, renameSync as renameSync4, rmSync as rmSync8, statSync as statSync10, writeFileSync as writeFileSync9 } from "node:fs";
-import { dirname as dirname9, join as join31, resolve as resolve17 } from "node:path";
+import { dirname as dirname9, join as join31, resolve as resolve18 } from "node:path";
 import { tmpdir as tmpdir3 } from "node:os";
 
 // src/hosts/codex-agent-config.ts
@@ -20997,7 +21060,7 @@ function assertNoWinningForeignVersion(slot, requested, id, source, handle) {
     if (!statSync10(candidate).isDirectory() || version === requested)
       continue;
     const marker = readOwnership2(candidate);
-    if (wins(version, requested) && (marker?.pluginId !== id || marker.source !== source) && !(handle !== undefined && marker !== null && fingerprintTree(candidate) === handle.prior.installedFingerprint && priorSourceRepairAllows(handle, (proof) => historicalGitMarker(marker, proof)))) {
+    if (wins(version, requested) && (marker?.pluginId !== id || marker.source !== source) && !(handle !== undefined && marker !== null && fingerprintTree(candidate) === handle.prior.installedFingerprint && (priorSourceRepairAllows(handle, (proof) => historicalGitMarker(marker, proof)) || legacyV1MarkerMatchesScope({ target: handle.target, scopeId: handle.scopeId, nativeId: id, marker, installedFingerprint: handle.prior.installedFingerprint })))) {
       throw new Error(`foreign Codex cache version ${version} would remain active over ${requested}`);
     }
   }
@@ -21010,7 +21073,7 @@ function cleanupOwnedVersions(slot, active, id, source, handle) {
     const marker = readOwnership2(candidate);
     if (handle !== undefined && !handle.prior.contentRoots.some((root) => root.path === candidate && root.fingerprint === fingerprintTree(candidate)))
       continue;
-    if (marker?.pluginId === id && (marker.source === source || handle !== undefined && fingerprintTree(candidate) === handle.prior.installedFingerprint && priorSourceRepairAllows(handle, (proof) => historicalGitMarker(marker, proof))))
+    if (marker?.pluginId === id && (marker.source === source || handle !== undefined && fingerprintTree(candidate) === handle.prior.installedFingerprint && (priorSourceRepairAllows(handle, (proof) => historicalGitMarker(marker, proof)) || legacyV1MarkerMatchesScope({ target: handle.target, scopeId: handle.scopeId, nativeId: id, marker, installedFingerprint: handle.prior.installedFingerprint }))))
       rmSync8(candidate, { recursive: true, force: true });
   }
 }
@@ -21170,7 +21233,7 @@ function revalidateCodexTarget(handle) {
 }
 function stageCodexActivation(request) {
   const stagingId = `${request.snapshot.attemptId}:${request.snapshot.operationId}`;
-  const stagingRoot = resolve17(join31(codexHome(), ".plgnz-lifecycle", stagingId));
+  const stagingRoot = resolve18(join31(codexHome(), ".plgnz-lifecycle", stagingId));
   assertManagedPath2(codexHome(), stagingRoot);
   rmSync8(stagingRoot, { recursive: true, force: true });
   mkdirSync7(stagingRoot, { recursive: true });
@@ -21281,7 +21344,7 @@ function applyManagedCodexActivation(prepared) {
   const source = readOwnership2(stagingRoot)?.source ?? handle.sourceLocator ?? handle.sourceRevision;
   assertNoWinningForeignVersion(slot, version, handle.nativeId, source, handle);
   const marker = readOwnership2(targetDir);
-  if (marker !== null && (marker.source !== source || marker.pluginId !== handle.nativeId) && !(fingerprintTree(targetDir) === handle.prior.installedFingerprint && priorSourceRepairAllows(handle, (proof) => historicalGitMarker(marker, proof)))) {
+  if (marker !== null && (marker.source !== source || marker.pluginId !== handle.nativeId) && !(fingerprintTree(targetDir) === handle.prior.installedFingerprint && (priorSourceRepairAllows(handle, (proof) => historicalGitMarker(marker, proof)) || legacyV1MarkerMatchesScope({ target: handle.target, scopeId: handle.scopeId, nativeId: handle.nativeId, marker, installedFingerprint: handle.prior.installedFingerprint })))) {
     throw new Error(`codex cache slot ${targetDir} has a different owned source identity; refusing to replace it`);
   }
   const before = cacheFingerprint(handle.nativeId);
@@ -21430,7 +21493,7 @@ function readCodexInstall(handle) {
 }
 function cleanupCodexStage(reference) {
   releasePriorSourceRepair(reference);
-  const stage = resolve17(join31(codexHome(), ".plgnz-lifecycle", `${reference.attemptId}:${reference.operationId}`));
+  const stage = resolve18(join31(codexHome(), ".plgnz-lifecycle", `${reference.attemptId}:${reference.operationId}`));
   if (existsSync22(stage))
     rmSync8(stage, { recursive: true, force: true });
   const rollback = rollbackBundle(reference.attemptId, reference.operationId);
@@ -21593,7 +21656,7 @@ function codexRollbackReference(attemptId, operationId) {
   return `${reference}:native-cache-sha256:${digest}`;
 }
 function rollbackBundle(attemptId, operationId) {
-  return resolve17(join31(codexHome(), ".plgnz-rollback", attemptId, operationId));
+  return resolve18(join31(codexHome(), ".plgnz-rollback", attemptId, operationId));
 }
 function nativeCacheFingerprint(root, ignoreOwnership = false) {
   const hash = new CryptoHasher("sha256");
@@ -21777,7 +21840,7 @@ function restoreCodexRollback(handle) {
 function marketplaceCheckout(marketplace) {
   if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/u.test(marketplace))
     throw new Error("unsafe Codex marketplace identity");
-  const path = resolve17(join31(codexHome(), ".tmp", "marketplaces", marketplace));
+  const path = resolve18(join31(codexHome(), ".tmp", "marketplaces", marketplace));
   assertManagedPath2(codexHome(), path);
   return path;
 }
@@ -22056,8 +22119,8 @@ function parseRollbackVersions(value) {
 function installationRecord(plugin) {
   const linked = plugin.path !== undefined && lstatSync17(plugin.path).isSymbolicLink();
   const owned = plugin.path === undefined || linked ? null : readOwnership2(plugin.path);
-  const ownership = owned?.pluginId === plugin.id ? { kind: "owned", proof: "created", scopeId: owned.scopeId ?? `codex:${plugin.id}`, proofId: `marker:${plugin.id}` } : { kind: "unmanaged" };
   if (plugin.path === undefined) {
+    const ownership = owned?.pluginId === plugin.id ? { kind: "owned", proof: "created", scopeId: owned.scopeId ?? `codex:${plugin.id}`, proofId: `marker:${plugin.id}` } : { kind: "unmanaged" };
     return {
       nativeId: plugin.id,
       packageName: plugin.name,
@@ -22072,6 +22135,8 @@ function installationRecord(plugin) {
     };
   }
   const installedFingerprint = linked ? new CryptoHasher("sha256").update(`codex-unmanaged-symlink\x00${readlinkSync2(plugin.path)}`).digest("hex") : fingerprintTree(plugin.path);
+  const resolvedScopeId = owned?.pluginId === plugin.id ? owned.scopeId ?? resolveLegacyV1MarkerScopeId({ target: { kind: "codex", instance: "default" }, nativeId: plugin.id, marker: owned, installedFingerprint }) : undefined;
+  const ownership = owned?.pluginId === plugin.id ? { kind: "owned", proof: "created", scopeId: resolvedScopeId ?? `codex:${plugin.id}`, proofId: `marker:${plugin.id}` } : { kind: "unmanaged" };
   return {
     nativeId: plugin.id,
     packageName: plugin.name,
@@ -22242,7 +22307,7 @@ function comparePrerelease2(left, right) {
 
 // src/hosts/kimi-writer.ts
 import { cpSync as cpSync7, existsSync as existsSync23, lstatSync as lstatSync18, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync7, readFileSync as readFileSync26, readdirSync as readdirSync16, realpathSync as realpathSync4, renameSync as renameSync5, rmSync as rmSync9, statSync as statSync11, writeFileSync as writeFileSync10 } from "node:fs";
-import { dirname as dirname10, isAbsolute as isAbsolute11, join as join32, resolve as resolve18 } from "node:path";
+import { dirname as dirname10, isAbsolute as isAbsolute11, join as join32, resolve as resolve19 } from "node:path";
 import { tmpdir as tmpdir4 } from "node:os";
 var MARKER4 = ".plgnz-install.json";
 var samePhysicalKimiNativeIdentity = (plugin, prior, observation) => {
@@ -22388,7 +22453,7 @@ function sameRoot(value, target) {
     const right = statSync11(target);
     return left.dev === right.dev && left.ino === right.ino;
   } catch {
-    return resolve18(value) === resolve18(target);
+    return resolve19(value) === resolve19(target);
   }
 }
 function readRegistry2(path) {
@@ -22703,8 +22768,8 @@ function lstatIfPresent(path) {
   }
 }
 function assertManagedPath3(root, target) {
-  const base = resolve18(root);
-  const selected = resolve18(target);
+  const base = resolve19(root);
+  const selected = resolve19(target);
   if (selected !== base && !selected.startsWith(`${base}/`))
     throw new Error(`Kimi managed path escapes its home: ${target}`);
   let current = base;
@@ -23125,7 +23190,7 @@ function readKimiInstallations() {
       presence: "present",
       enablement: enabled ? "enabled" : "disabled",
       activation: enabled ? "active" : "inactive",
-      ...owned && resolve18(plugin.path) === resolve18(managedPluginPath(plugin.name)) ? { observedRoute: "native" } : {},
+      ...owned && resolve19(plugin.path) === resolve19(managedPluginPath(plugin.name)) ? { observedRoute: "native" } : {},
       installedFingerprint: digest,
       installedVersion: null,
       source: owned ? kimiSourceIdentity(marker) : null,
@@ -23234,12 +23299,12 @@ function unexposed(phase) {
 
 // src/hosts/cursor-writer.ts
 import { cpSync as cpSync8, existsSync as existsSync24, lstatSync as lstatSync20, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync8, readFileSync as readFileSync28, readdirSync as readdirSync18, renameSync as renameSync6, rmSync as rmSync10, statSync as statSync12, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join34, resolve as resolve20 } from "node:path";
+import { join as join34, resolve as resolve21 } from "node:path";
 import { tmpdir as tmpdir5 } from "node:os";
 
 // src/hosts/cursor-adoption.ts
 import { accessSync as accessSync4, constants as constants4, lstatSync as lstatSync19, readFileSync as readFileSync27, readdirSync as readdirSync17 } from "node:fs";
-import { dirname as dirname11, join as join33, resolve as resolve19 } from "node:path";
+import { dirname as dirname11, join as join33, resolve as resolve20 } from "node:path";
 var MARKER5 = ".plgnz-install.json";
 function proveCursorLegacyAdoption(request) {
   const legacy = parseLegacyRecordProof(request.legacy);
@@ -23263,7 +23328,7 @@ function proveCursorLegacyAdoption(request) {
     if (path === undefined)
       fail3("collection identity has no marketplace manifest");
     const marketplace = json(readFileSync27(path), "collection");
-    const candidates = Array.isArray(marketplace.plugins) ? marketplace.plugins.filter((value) => plainObject(value) && typeof value.source === "string" && resolve19(snapshot.snapshotRoot, value.source) === snapshot.packageRoot) : [];
+    const candidates = Array.isArray(marketplace.plugins) ? marketplace.plugins.filter((value) => plainObject(value) && typeof value.source === "string" && resolve20(snapshot.snapshotRoot, value.source) === snapshot.packageRoot) : [];
     if ((typeof marketplace.name === "string" ? marketplace.name : "local") !== snapshot.collectionName || candidates.length !== 1)
       fail3("collection identity or package binding differs");
   }
@@ -23273,7 +23338,7 @@ function proveCursorLegacyAdoption(request) {
   const pins = resolvedPins.map((pin) => pin.server);
   if (canonicalAdoptionJson(pins) !== canonicalAdoptionJson(legacy.snapshot.activation.pins) || new Set(pins).size !== pins.length)
     fail3("resolved pins differ from retained original");
-  const root = resolve19(join33(localDir(snapshot.target.instance), snapshot.nativeId));
+  const root = resolve20(join33(localDir(snapshot.target.instance), snapshot.nativeId));
   for (const alias of logicalAliases) {
     if (alias !== snapshot.nativeId && present(join33(localDir(snapshot.target.instance), alias)))
       fail3("ambiguous second physical alias");
@@ -23415,7 +23480,7 @@ function readTree(root) {
   return tree;
 }
 function safeAncestors(root, allowMissing) {
-  for (let path = resolve19(root);; path = dirname11(path)) {
+  for (let path = resolve20(root);; path = dirname11(path)) {
     if (!allowMissing || present(path)) {
       const stat = lstatSync19(path);
       if (stat.isSymbolicLink() || !stat.isDirectory())
@@ -23757,8 +23822,8 @@ function hashBytes(path) {
   return Array.from(read(path)).join(",");
 }
 function assertManagedDirectory(root, target) {
-  const resolvedRoot = resolve20(cursorRoot());
-  const resolvedTarget = resolve20(target);
+  const resolvedRoot = resolve21(cursorRoot());
+  const resolvedTarget = resolve21(target);
   if (resolvedTarget !== resolvedRoot && !resolvedTarget.startsWith(`${resolvedRoot}/`))
     throw new Error(`Cursor managed path escapes its store: ${target}`);
   let current = resolvedRoot;
@@ -23919,7 +23984,7 @@ var cursorLifecycleDefinition = {
   async stageActivation(request) {
     assertSafeIdentity2(request.snapshot.nativeId);
     const preparation = lifecycleDir(request.snapshot.target.instance, "prepare", request.snapshot.attemptId, request.snapshot.operationId);
-    const stagingRoot = resolve20(join34(preparation, "stage"));
+    const stagingRoot = resolve21(join34(preparation, "stage"));
     rmSync10(stagingRoot, { recursive: true, force: true });
     mkdirSync9(preparation, { recursive: true });
     stagePlugin3(request.snapshot.packageRoot, stagingRoot, request.snapshot.nativeId);
@@ -23941,7 +24006,7 @@ var cursorLifecycleDefinition = {
       nativeId: projection.nativeId,
       routeWhenAbsent: "none"
     });
-    const active = resolve20(managedPluginDir(projection.target.instance, projection.nativeId));
+    const active = resolve21(managedPluginDir(projection.target.instance, projection.nativeId));
     return {
       prior,
       expected: {
@@ -24114,13 +24179,13 @@ function inventoryLocalStore(target) {
     } catch {
       continue;
     }
-    const installation = readLocalInstallation(entry, dir);
+    const installation = readLocalInstallation(target.instance, entry, dir);
     if (installation !== undefined)
       installations.push(installation);
   }
   return { target, installations };
 }
-function readLocalInstallation(entry, dir) {
+function readLocalInstallation(instance, entry, dir) {
   const manifestPath = join34(dir, ".cursor-plugin", "plugin.json");
   if (!existsSync24(manifestPath))
     return;
@@ -24156,10 +24221,10 @@ function readLocalInstallation(entry, dir) {
       installedFingerprint: digest,
       installedVersion: manifest?.version ?? null,
       source: null,
-      contentRoots: [{ label: "local", path: resolve20(dir), fingerprint: digest }]
+      contentRoots: [{ label: "local", path: resolve21(dir), fingerprint: digest }]
     };
   }
-  const ownership = ownershipOf(entry, marker);
+  const ownership = ownershipOf(instance, entry, marker, digest);
   return {
     nativeId: entry,
     packageName: manifest.name,
@@ -24171,7 +24236,7 @@ function readLocalInstallation(entry, dir) {
     installedFingerprint: digest,
     installedVersion: manifest.version ?? null,
     source: sourceOf(marker),
-    contentRoots: [{ label: "local", path: resolve20(dir), fingerprint: digest }]
+    contentRoots: [{ label: "local", path: resolve21(dir), fingerprint: digest }]
   };
 }
 function unreadableFingerprint(nativeId) {
@@ -24180,16 +24245,19 @@ function unreadableFingerprint(nativeId) {
   hash.update(nativeId);
   return hash.digest("hex");
 }
-function ownershipOf(nativeId, marker) {
-  if (marker === null || marker.scopeId === undefined)
+function ownershipOf(instance, nativeId, marker, installedFingerprint) {
+  if (marker === null)
     return { kind: "unmanaged" };
   if (!ownsNativeDirectory(marker.pluginId, nativeId))
     return { kind: "ambiguous", proofIds: [`cursor-marker-${nativeId}`] };
+  const scopeId = marker.scopeId ?? resolveLegacyV1MarkerScopeId({ target: { kind: "cursor", instance }, nativeId, marker, installedFingerprint, matchesPluginId: ownsNativeDirectory });
+  if (scopeId === undefined)
+    return { kind: "unmanaged" };
   return {
     kind: "owned",
     proof: marker.proof === "adopted" ? "adopted" : "created",
-    scopeId: marker.scopeId,
-    proofId: `cursor-${nativeId}-${marker.scopeId}`
+    scopeId,
+    proofId: `cursor-${nativeId}-${scopeId}`
   };
 }
 function sourceOf(marker) {
@@ -24283,7 +24351,7 @@ function projectReadback(identity) {
     activation: "active",
     transition: RELOAD_REQUIRED,
     installedFingerprint: digest,
-    contentRoots: [{ label: "local", path: resolve20(dir), fingerprint: digest }],
+    contentRoots: [{ label: "local", path: resolve21(dir), fingerprint: digest }],
     retention
   };
 }
@@ -24298,8 +24366,8 @@ function retainedResource(instance, nativeId, kind) {
 }
 function retentionDir(instance, nativeId, kind) {
   assertSafeIdentity2(nativeId);
-  const dir = resolve20(join34(cursorInstanceRoot(instance), "plugins", "retained", nativeId, kind));
-  const root = resolve20(cursorRoot());
+  const dir = resolve21(join34(cursorInstanceRoot(instance), "plugins", "retained", nativeId, kind));
+  const root = resolve21(cursorRoot());
   if (dir !== root && !dir.startsWith(`${root}/`))
     throw new Error(`Cursor retention path escapes its store: ${dir}`);
   return dir;
@@ -24316,7 +24384,7 @@ function captureRollback2(instance, attemptId, operationId, nativeId, prior) {
   return reference;
 }
 function lifecycleDir(instance, kind, attemptId, operationId) {
-  return resolve20(join34(cursorInstanceRoot(instance), "plugins", ".plgnz-lifecycle", kind, operationKey(attemptId, operationId)));
+  return resolve21(join34(cursorInstanceRoot(instance), "plugins", ".plgnz-lifecycle", kind, operationKey(attemptId, operationId)));
 }
 function operationKey(attemptId, operationId) {
   const hash = new CryptoHasher("sha256");
@@ -24372,7 +24440,7 @@ function receipt(kind, handle) {
 // src/hosts/omp-writer.ts
 init_omp_hooks();
 import { cpSync as cpSync9, existsSync as existsSync25, lstatSync as lstatSync21, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync9, readFileSync as readFileSync29, readdirSync as readdirSync19, readlinkSync as readlinkSync3, renameSync as renameSync7, rmSync as rmSync11, symlinkSync, writeFileSync as writeFileSync12 } from "node:fs";
-import { dirname as dirname12, join as join35, resolve as resolve21 } from "node:path";
+import { dirname as dirname12, join as join35, resolve as resolve22 } from "node:path";
 import { tmpdir as tmpdir6 } from "node:os";
 var MARKER6 = ".plgnz-install.json";
 var MANAGED = "plgnz";
@@ -24524,7 +24592,7 @@ function validateLegacy(rows, id, name, version, adopt) {
     if (typeof row.installPath !== "string" || typeof row.version !== "string" || row.version !== version || marketplace === undefined)
       throw new Error(`OMP marketplace install ${id} has no safe native copy`);
     const expected = join35(cache, `${marketplace}___${name}___${version}`);
-    if (resolve21(row.installPath) !== resolve21(expected))
+    if (resolve22(row.installPath) !== resolve22(expected))
       throw new Error(`OMP marketplace install ${id} is outside its approved cache slot`);
     assertExistingDirectoryTree(cache, row.installPath, `OMP marketplace install ${id}`);
     const manifest = readDoc(join35(row.installPath, "plugin.json"), {}, "legacy plugin manifest");
@@ -24533,7 +24601,7 @@ function validateLegacy(rows, id, name, version, adopt) {
   }
 }
 function cleanupLegacy(row, name, retainedPaths) {
-  if (typeof row.installPath !== "string" || retainedPaths.has(resolve21(row.installPath)))
+  if (typeof row.installPath !== "string" || retainedPaths.has(resolve22(row.installPath)))
     return;
   const legacyLink = join35(pluginsDir3(), "node_modules", name);
   if (linkPointsTo(legacyLink, row.installPath))
@@ -24555,7 +24623,7 @@ function registryInstallPaths(registry) {
     if (Array.isArray(value)) {
       for (const row of value)
         if (isDoc(row) && typeof row.installPath === "string")
-          paths.add(resolve21(row.installPath));
+          paths.add(resolve22(row.installPath));
     }
   return paths;
 }
@@ -24587,7 +24655,7 @@ function lstatExists(path) {
 }
 function linkPointsTo(path, target) {
   try {
-    return lstatSync21(path).isSymbolicLink() && resolve21(dirname12(path), readlinkSync3(path)) === resolve21(target);
+    return lstatSync21(path).isSymbolicLink() && resolve22(dirname12(path), readlinkSync3(path)) === resolve22(target);
   } catch {
     return false;
   }
@@ -24620,8 +24688,8 @@ function activate4(stage, target) {
   } };
 }
 function mkdirSafe(path) {
-  const boundary = resolve21(pluginsDir3());
-  const target = resolve21(path);
+  const boundary = resolve22(pluginsDir3());
+  const target = resolve22(path);
   if (target !== boundary && !target.startsWith(`${boundary}/`))
     throw new Error(`OMP managed path escapes the plugin store: ${target}`);
   const parentBoundary = dirname12(boundary);
@@ -24646,8 +24714,8 @@ function mkdirSafe(path) {
   }
 }
 function assertExistingDirectoryTree(boundaryPath, targetPath, label) {
-  const boundary = resolve21(boundaryPath);
-  const target = resolve21(targetPath);
+  const boundary = resolve22(boundaryPath);
+  const target = resolve22(targetPath);
   if (target !== boundary && !target.startsWith(`${boundary}/`))
     throw new Error(`${label} escapes its approved cache root`);
   for (let current = target;; current = dirname12(current)) {
@@ -24845,7 +24913,7 @@ var ompLifecycleDefinition = {
       sourceRevision: request.snapshot.immutableRevision,
       sourceLocator: locator
     }));
-    return { stagingId: `${request.snapshot.attemptId}:${request.snapshot.operationId}`, stagingRoot: resolve21(stage) };
+    return { stagingId: `${request.snapshot.attemptId}:${request.snapshot.operationId}`, stagingRoot: resolve22(stage) };
   },
   applyLifecycleDirectives: () => Promise.resolve([]),
   applyPins: async (projection) => {
@@ -24925,16 +24993,16 @@ function npmName(nativeId) {
 }
 function managedPackageDir(nativeId) {
   const { marketplace, plugin } = parsePublicId(nativeId);
-  return resolve21(join35(pluginsDir3(), MANAGED, nativeSlug(marketplace, plugin)));
+  return resolve22(join35(pluginsDir3(), MANAGED, nativeSlug(marketplace, plugin)));
 }
 function managedLink(nativeId) {
-  return resolve21(join35(pluginsDir3(), "node_modules", npmName(nativeId)));
+  return resolve22(join35(pluginsDir3(), "node_modules", npmName(nativeId)));
 }
 function lockPath() {
   return join35(pluginsDir3(), "omp-plugins.lock.json");
 }
 function preparationDir2(attemptId, operationId) {
-  return resolve21(join35(pluginsDir3(), ".plgnz-lifecycle", encodeURIComponent(attemptId), encodeURIComponent(operationId)));
+  return resolve22(join35(pluginsDir3(), ".plgnz-lifecycle", encodeURIComponent(attemptId), encodeURIComponent(operationId)));
 }
 function unprovenCandidate(nativeId) {
   const { marketplace, plugin } = parsePublicId(nativeId);
@@ -24975,7 +25043,7 @@ async function observeInventory(target) {
   return { target, installations: omp.listInstalled().map((plugin) => installationOf(plugin)) };
 }
 function installationOf(plugin) {
-  const path = plugin.path !== undefined && existsSync25(plugin.path) ? resolve21(plugin.path) : undefined;
+  const path = plugin.path !== undefined && existsSync25(plugin.path) ? resolve22(plugin.path) : undefined;
   if (path === undefined) {
     return {
       nativeId: plugin.id,
@@ -24993,14 +25061,15 @@ function installationOf(plugin) {
   const owner = ownership2(path);
   const digest = fingerprintTree(path);
   const enabled = plugin.enabled !== false;
+  const resolvedScopeId = owner?.pluginId === plugin.id ? owner.scopeId ?? resolveLegacyV1MarkerScopeId({ target: { kind: "omp", instance: "default" }, nativeId: plugin.id, marker: owner, installedFingerprint: digest }) : undefined;
   return {
     nativeId: plugin.id,
     packageName: plugin.name,
-    ownership: owner?.scopeId !== undefined ? { kind: "owned", proof: "created", scopeId: owner.scopeId, proofId: owner.fingerprint } : { kind: "unmanaged" },
+    ownership: resolvedScopeId !== undefined && owner !== null ? { kind: "owned", proof: "created", scopeId: resolvedScopeId, proofId: owner.fingerprint } : { kind: "unmanaged" },
     presence: "present",
     enablement: enabled ? "enabled" : "disabled",
     activation: enabled ? "active" : "inactive",
-    ...owner?.scopeId !== undefined && owner.pluginId === plugin.id && path === resolve21(managedPackageDir(plugin.id)) && linkPointsTo(managedLink(plugin.id), path) ? { observedRoute: "managed" } : {},
+    ...owner?.scopeId !== undefined && owner.pluginId === plugin.id && path === resolve22(managedPackageDir(plugin.id)) && linkPointsTo(managedLink(plugin.id), path) ? { observedRoute: "managed" } : {},
     installedFingerprint: digest,
     installedVersion: plugin.version ?? null,
     source: sourceOf2(owner),
@@ -25111,7 +25180,7 @@ function captureRollback3(nativeId, attemptId, operationId) {
   if (existsSync25(target))
     cpSync9(target, join35(reference, "package"), { recursive: true });
   writeFileSync12(join35(reference, "state.json"), JSON.stringify({ lock: captureLockRow(nativeId), link: currentLinkTarget(managedLink(nativeId)) }));
-  return resolve21(reference);
+  return resolve22(reference);
 }
 function restoreRollback2(nativeId, reference) {
   const state = JSON.parse(readFileSync29(join35(reference, "state.json"), "utf8"));
@@ -25158,7 +25227,7 @@ function restoreLockRow(saved) {
 }
 function currentLinkTarget(path) {
   try {
-    return lstatSync21(path).isSymbolicLink() ? resolve21(dirname12(path), readlinkSync3(path)) : null;
+    return lstatSync21(path).isSymbolicLink() ? resolve22(dirname12(path), readlinkSync3(path)) : null;
   } catch {
     return null;
   }
@@ -25467,7 +25536,7 @@ function writeExactFile(path, text) {
 
 // src/hosts/pi-writer.ts
 import { existsSync as existsSync27, lstatSync as lstatSync23, mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync11, readFileSync as readFileSync31, readdirSync as readdirSync20, renameSync as renameSync9, rmSync as rmSync13, writeFileSync as writeFileSync14 } from "node:fs";
-import { basename as basename4, dirname as dirname14, join as join37, resolve as resolve22 } from "node:path";
+import { basename as basename4, dirname as dirname14, join as join37, resolve as resolve23 } from "node:path";
 import { tmpdir as tmpdir8 } from "node:os";
 var MARKER7 = ".plgnz-install.json";
 var piWriter = {
@@ -25725,7 +25794,7 @@ function assertRealDirectory(path) {
     throw new Error(`Pi managed path component is not a directory: ${path}`);
 }
 function assertUnder(root, path) {
-  const base = resolve22(root), candidate = resolve22(path);
+  const base = resolve23(root), candidate = resolve23(path);
   if (candidate !== base && !candidate.startsWith(`${base}/`))
     throw new Error(`Pi path escapes standalone skills store: ${path}`);
   let current = base;
@@ -25748,7 +25817,7 @@ var piHookWriter = createNativeHookWriter({
 
 // src/hosts/dcode-writer.ts
 import { cpSync as cpSync11, existsSync as existsSync28, lstatSync as lstatSync24, mkdirSync as mkdirSync13, mkdtempSync as mkdtempSync12, readFileSync as readFileSync32, readdirSync as readdirSync21, realpathSync as realpathSync5, renameSync as renameSync10, rmSync as rmSync14, writeFileSync as writeFileSync15 } from "node:fs";
-import { basename as basename5, dirname as dirname15, join as join38, resolve as resolve23 } from "node:path";
+import { basename as basename5, dirname as dirname15, join as join38, resolve as resolve24 } from "node:path";
 import { tmpdir as tmpdir9 } from "node:os";
 import { spawn as spawnChild } from "node:child_process";
 var MARKER8 = ".plgnz-install.json";
@@ -25941,7 +26010,7 @@ function captureDcodeRollback(binding, attemptId, operationId) {
 }
 function assertRecoveryRollbackMetadata(handle, state) {
   const rows = rowsFor(state.row);
-  if (rows.length !== handle.prior.contentRoots.length || rows.some((row, index) => resolve23(rowInstall(row, handle.nativeId)) !== resolve23(handle.prior.contentRoots[index].path)) || handle.prior.presence === "present" && state.enabled === true !== (handle.prior.enablement === "enabled"))
+  if (rows.length !== handle.prior.contentRoots.length || rows.some((row, index) => resolve24(rowInstall(row, handle.nativeId)) !== resolve24(handle.prior.contentRoots[index].path)) || handle.prior.presence === "present" && state.enabled === true !== (handle.prior.enablement === "enabled"))
     throw new Error("dcode rollback registry snapshot differs from the sealed prior; recovery refused");
 }
 async function lockPreparation(binding, attemptId, operationId, expectedObservationId) {
@@ -26156,7 +26225,7 @@ var dcodeDefinition = {
     const target = handle.projectedFingerprint === null ? undefined : lifecycleSlot(handle.nativeId, handle.projectedFingerprint);
     if (target !== undefined)
       assertCachePath(target);
-    if (target !== undefined && existsSync28(target) && !handle.prior.contentRoots.some((root) => resolve23(root.path) === resolve23(target))) {
+    if (target !== undefined && existsSync28(target) && !handle.prior.contentRoots.some((root) => resolve24(root.path) === resolve24(target))) {
       if (ownership3(target)?.pluginId !== handle.nativeId || recoveringNativeLocks.has(`${handle.attemptId}:${handle.operationId}`) && fingerprintTree(target) !== handle.projectedFingerprint)
         throw new Error("dcode rollback candidate differs from the sealed operation; refusing stale overwrite");
       rmSync14(target, { recursive: true });
@@ -26179,7 +26248,7 @@ var dcodeDefinition = {
   },
   beginRecovery: async (handle) => {
     const reference = join38(lifecycleDirectory(handle.attemptId, handle.operationId), "rollback");
-    if (resolve23(handle.rollbackReference) !== resolve23(reference))
+    if (resolve24(handle.rollbackReference) !== resolve24(reference))
       throw new Error("dcode recovery reference escapes the operation-owned artifact directory");
     assertManagedPath4(reference);
     for (const root of [...handle.prior.contentRoots, ...handle.expected.contentRoots])
@@ -26198,12 +26267,12 @@ var dcodeDefinition = {
       const priorFile = join38(dir, "rollback", "state.json");
       const next = readDoc2(nextFile, {}, "cleanup target");
       if (disposition === "verified-commit" && recovering !== undefined) {
-        const retiredRoots = recovering.prior.contentRoots.filter((root) => !recovering.expected.contentRoots.some((next) => resolve23(next.path) === resolve23(root.path)));
+        const retiredRoots = recovering.prior.contentRoots.filter((root) => !recovering.expected.contentRoots.some((next) => resolve24(next.path) === resolve24(root.path)));
         if (existsSync28(priorFile))
           assertRecoveryRollbackMetadata(recovering, readDoc2(priorFile, {}, "rollback state"));
         else if (retiredRoots.some((root) => existsSync28(root.path)))
           throw new Error("dcode cleanup prior metadata is missing; recovery refused");
-        if (existsSync28(nextFile) && (typeof next.target !== "string" || !recovering.expected.contentRoots.some((root) => resolve23(root.path) === resolve23(next.target))))
+        if (existsSync28(nextFile) && (typeof next.target !== "string" || !recovering.expected.contentRoots.some((root) => resolve24(root.path) === resolve24(next.target))))
           throw new Error("dcode cleanup target differs from the sealed expected root; recovery refused");
         for (const root of retiredRoots) {
           if (existsSync28(root.path) && fingerprintTree(root.path) !== root.fingerprint)
@@ -26216,7 +26285,7 @@ var dcodeDefinition = {
         for (const row of rowsFor(prior.row)) {
           const path = rowInstall(row, reference.operationId);
           assertCachePath(path);
-          if (resolve23(path) !== resolve23(next.target))
+          if (resolve24(path) !== resolve24(next.target))
             rmSync14(path, { recursive: true, force: true });
         }
       }
@@ -26291,7 +26360,7 @@ var dcodeWriter = {
       if (existsSync28(target) && slot === null)
         throw new Error(`dcode cache target is unowned; refusing to replace it: ${target}`);
       const former = prior.kind === "none" ? undefined : prior.path;
-      const unchanged = (former === undefined || resolve23(former) === resolve23(target)) && slot?.kind === "current" && slot.fingerprint === sourceFingerprint && slot.projectedFingerprint === projected && slot.sourceRevision === resolved.sha && sameTree7(stage, target);
+      const unchanged = (former === undefined || resolve24(former) === resolve24(target)) && slot?.kind === "current" && slot.fingerprint === sourceFingerprint && slot.projectedFingerprint === projected && slot.sourceRevision === resolved.sha && sameTree7(stage, target);
       const nextRegistry = { ...registry, plugins: { ...plugins, [id]: [{ installPath: target }] } };
       const nextEnablement = { ...enablement, enabledPlugins: { ...enabled, [id]: true } };
       if (opts?.dryRun) {
@@ -26325,7 +26394,7 @@ var dcodeWriter = {
         throw error;
       }
       activation.commit();
-      if (former !== undefined && resolve23(former) !== resolve23(target)) {
+      if (former !== undefined && resolve24(former) !== resolve24(target)) {
         const retained = retireFormer(former);
         if (retained !== undefined)
           console.error(`[dcode] retained former cache: ${retained}`);
@@ -26492,7 +26561,7 @@ function assertReadback(id, registryFile, enablementFile, target, version, proje
   if (rows.length !== 1)
     throw new Error(`dcode readback failed for ${id}`);
   const install = rowInstall(rows[0], id);
-  if (resolve23(install) !== resolve23(target))
+  if (resolve24(install) !== resolve24(target))
     throw new Error(`dcode readback path mismatch for ${id}`);
   if (rows[0].version !== undefined && rows[0].version !== null)
     throw new Error(`dcode managed install is eligible for native auto-update: ${id}`);
@@ -26713,8 +26782,8 @@ function assertIdentity2(value, label) {
     throw new Error(`invalid dcode ${label}`);
 }
 function assertCachePath(path) {
-  const root = resolve23(dcodeCacheRoot());
-  const target = resolve23(path);
+  const root = resolve24(dcodeCacheRoot());
+  const target = resolve24(path);
   if (target === root || !target.startsWith(`${root}/`))
     throw new Error(`dcode path escapes managed cache: ${path}`);
   let current = root;
@@ -26738,8 +26807,8 @@ function assertCachePath(path) {
     throw new Error(`dcode path escapes managed cache: ${path}`);
 }
 function assertManagedPath4(path) {
-  const root = resolve23(dcodeRoot());
-  const target = resolve23(path);
+  const root = resolve24(dcodeRoot());
+  const target = resolve24(path);
   if (target !== root && !target.startsWith(`${root}/`))
     throw new Error(`dcode path escapes native root: ${path}`);
   let current = root;
@@ -27147,7 +27216,7 @@ var opencodeHookWriter = createNativeHookWriter({
 // src/hosts/grok-writer.ts
 import { spawnSync as spawnSync6 } from "node:child_process";
 import { cpSync as cpSync13, existsSync as existsSync30, lstatSync as lstatSync26, mkdirSync as mkdirSync15, mkdtempSync as mkdtempSync14, readFileSync as readFileSync34, readdirSync as readdirSync23, readlinkSync as readlinkSync4, renameSync as renameSync12, rmSync as rmSync16, symlinkSync as symlinkSync2, writeFileSync as writeFileSync17 } from "node:fs";
-import { dirname as dirname17, join as join40, resolve as resolve25 } from "node:path";
+import { dirname as dirname17, join as join40, resolve as resolve26 } from "node:path";
 import { tmpdir as tmpdir11 } from "node:os";
 var stableId = (plugin) => plugin.marketplace === undefined ? plugin.name : `${plugin.name}@${plugin.marketplace}`;
 var digest6 = (value) => {
@@ -27574,7 +27643,7 @@ function legacyCandidate(plugin, adopt, prior) {
     throw new Error(`Grok ${plugin.name}: legacy source, version, and native bytes must match before adoption`);
   const link = join40(grokRoot(), "plugins", plugin.name);
   if (existsSync30(link) || lstatExists2(link)) {
-    if (!lstatSync26(link).isSymbolicLink() || canonical(resolve25(dirname17(link), readlinkSync4(link))) !== installed)
+    if (!lstatSync26(link).isSymbolicLink() || canonical(resolve26(dirname17(link), readlinkSync4(link))) !== installed)
       throw new Error(`Grok ${plugin.name}: unmanaged same-name plugin link blocks adoption`);
   }
   return { source, fingerprint: fingerprintTree(installed), ...lstatExists2(link) ? { link } : {} };
@@ -27658,17 +27727,17 @@ function probeGrokVersion() {
   return parseGrokVersionOutput(result.stdout ?? "", result.status);
 }
 function lifecycleMarketplace(scopeId, nativeId) {
-  return resolve25(join40(marketplacesRoot(), `plgnz-${digest6(`${scopeId}\x00${nativeId}`)}`));
+  return resolve26(join40(marketplacesRoot(), `plgnz-${digest6(`${scopeId}\x00${nativeId}`)}`));
 }
 function marketplacePluginPath(scopeId, nativeId, packageName) {
-  return resolve25(join40(lifecycleMarketplace(scopeId, nativeId), "plugins", packageName));
+  return resolve26(join40(lifecycleMarketplace(scopeId, nativeId), "plugins", packageName));
 }
 function samePath(left, right) {
-  return (canonical(left) ?? resolve25(left)) === (canonical(right) ?? resolve25(right));
+  return (canonical(left) ?? resolve26(left)) === (canonical(right) ?? resolve26(right));
 }
 function registryNativePath(nativeId) {
   const installed = grok.listInstalled().find((plugin) => plugin.id === nativeId && plugin.path !== undefined);
-  return installed?.path === undefined ? undefined : resolve25(installed.path);
+  return installed?.path === undefined ? undefined : resolve26(installed.path);
 }
 function declaredVersion(dir) {
   try {
@@ -27727,7 +27796,7 @@ function installationRecord2(plugin) {
     installedFingerprint: digest,
     installedVersion: declaredVersion(plugin.path),
     source: { type: "local", immutableRevision: marker?.immutableRevision ?? digest, locator: null },
-    contentRoots: [{ label: "native", path: resolve25(plugin.path), fingerprint: digest }]
+    contentRoots: [{ label: "native", path: resolve26(plugin.path), fingerprint: digest }]
   };
 }
 function targetInventory(target) {
@@ -27774,7 +27843,7 @@ function liveReadback(handle) {
     activation: enabled ? "active" : "inactive",
     transition: RELOAD_EFFECTIVE2,
     installedFingerprint: digest,
-    contentRoots: [{ label: "native", path: resolve25(plugin.path), fingerprint: digest }],
+    contentRoots: [{ label: "native", path: resolve26(plugin.path), fingerprint: digest }],
     retention: ABSENT_RETENTION
   };
 }
@@ -27826,7 +27895,7 @@ function stageMarketplace(snapshot) {
     writeFileSync17(catalog, JSON.stringify({ name: basename6(finalPath), plugins: [{ name: snapshot.packageName, source: `./plugins/${snapshot.packageName}` }] }));
     writeStagedMarker(stagedRoot, snapshot, fingerprintTree(stagedPlugin));
     run(["plugin", "validate", stagedPlugin]);
-    return { stagingId: `stage:${snapshot.attemptId}:${snapshot.operationId}`, stagingRoot: resolve25(stagedPlugin) };
+    return { stagingId: `stage:${snapshot.attemptId}:${snapshot.operationId}`, stagingRoot: resolve26(stagedPlugin) };
   } catch (error) {
     discardStage(snapshot.attemptId, snapshot.operationId);
     throw error;
@@ -27851,7 +27920,7 @@ function applyRecordedPins2(pluginDir, pins) {
   return pins.map(({ server }) => server);
 }
 function rollbackDirectory(attemptId, operationId) {
-  return resolve25(join40(grokRoot(), "plgnz-rollback", `${attemptId}-${operationId}`));
+  return resolve26(join40(grokRoot(), "plgnz-rollback", `${attemptId}-${operationId}`));
 }
 function pluginNamesOf(repo) {
   const plugins = repo["plugins"];
@@ -27940,7 +28009,7 @@ function captureHostSnapshot(directory, nativeId, packageName, attemptId, operat
     cpSync13(priorConfig, join40(directory, "config-prior.json"));
   const plugin = grok.listInstalled().find((candidate) => candidate.id === nativeId);
   if (plugin?.path !== undefined) {
-    const native = resolve25(plugin.path);
+    const native = resolve26(plugin.path);
     cpSync13(native, join40(directory, "native"), { recursive: true });
     writeFileSync17(join40(directory, "native-path.txt"), native);
   }
@@ -27961,13 +28030,13 @@ function freshNativePaths(directory, marketplacePath) {
   const paths = new Set;
   const saved = savedRegistryRepo(directory);
   if (saved.repo !== null && typeof saved.repo["path"] === "string" && pluginNamesOf(saved.repo).length === 0)
-    paths.add(resolve25(saved.repo["path"]));
+    paths.add(resolve26(saved.repo["path"]));
   for (const [, repo] of repos()) {
     if (typeof repo.path !== "string")
       continue;
     const provenance = provenanceOf(repo);
     if (provenance !== null && samePath(provenance.root, marketplacePath))
-      paths.add(resolve25(repo.path));
+      paths.add(resolve26(repo.path));
   }
   return [...paths];
 }
@@ -28216,7 +28285,7 @@ function withRecordedInstallPath(handle, observedPath) {
   if (handle.action !== "install" || handle.prior.presence !== "absent")
     return handle;
   const recorded = registryNativePath(handle.nativeId);
-  if (recorded === undefined || observedPath === undefined || resolve25(observedPath) !== recorded)
+  if (recorded === undefined || observedPath === undefined || resolve26(observedPath) !== recorded)
     return handle;
   return {
     ...handle,
@@ -28240,12 +28309,12 @@ function createGrokLifecycleAdapter() {
 // src/hosts/zcode-cli-writer.ts
 init_zcode_cli_hooks();
 import { chmodSync as chmodSync3, cpSync as cpSync14, existsSync as existsSync31, lstatSync as lstatSync28, mkdirSync as mkdirSync16, mkdtempSync as mkdtempSync15, readFileSync as readFileSync36, readdirSync as readdirSync25, realpathSync as realpathSync6, renameSync as renameSync13, rmSync as rmSync17, statSync as statSync13, writeFileSync as writeFileSync18 } from "node:fs";
-import { basename as basename7, dirname as dirname19, join as join42, resolve as resolve27 } from "node:path";
+import { basename as basename7, dirname as dirname19, join as join42, resolve as resolve28 } from "node:path";
 import { tmpdir as tmpdir12 } from "node:os";
 
 // src/hosts/zcode-cli-projection.ts
 import { lstatSync as lstatSync27, readFileSync as readFileSync35, readdirSync as readdirSync24 } from "node:fs";
-import { dirname as dirname18, join as join41, relative as relative8, resolve as resolve26 } from "node:path";
+import { dirname as dirname18, join as join41, relative as relative8, resolve as resolve27 } from "node:path";
 var encode2 = (value) => new TextEncoder().encode(value);
 var decode = (value) => new TextDecoder().decode(value);
 function readZcodeProjectionTree(root) {
@@ -28547,7 +28616,7 @@ ${body}`, skill);
           return all;
         if (target.startsWith("/") || target.includes("\\"))
           throw new Error(`ZCode unsupported absolute resource reference: ${skill}`);
-        const rel = relative8(resolve26(source, skillRoot), resolve26(source, skillRoot, target));
+        const rel = relative8(resolve27(source, skillRoot), resolve27(source, skillRoot, target));
         if (rel === "" || rel.startsWith("..") || resources.get(`${skillRoot}/${rel}`)?.kind !== "file")
           throw new Error(`ZCode resource reference escapes or is missing: ${skill} (${target})`);
         return `${label}(${join41(resourceLinks, skillRoot, rel)}${suffix ?? ""})`;
@@ -28658,10 +28727,10 @@ var zcodeCliWriter = {
   }
 };
 function projectZcodePlugin(source, destination, resourceCopy, resourceLinkRoot, logicalId, nativeId, nativeVersion, fingerprint, sourceUri) {
-  const input = resolve27(source);
-  const target = resolve27(destination);
-  const ownedResources = resolve27(resourceCopy);
-  const links = resolve27(resourceLinkRoot);
+  const input = resolve28(source);
+  const target = resolve28(destination);
+  const ownedResources = resolve28(resourceCopy);
+  const links = resolve28(resourceLinkRoot);
   if (!existsSync31(input) || !statSync13(input).isDirectory())
     throw new Error(`ZCode plugin source is not a directory: ${input}`);
   if (target === input || ownedResources === input || target.startsWith(`${input}/`) || ownedResources.startsWith(`${input}/`))
@@ -28737,12 +28806,12 @@ function commandNames(dir, prefix = "") {
 }
 function rejectCommandCollisions(stagedMarket, nativeId, ownPrior) {
   const candidate = commandNames(join42(stagedMarket, "plugins"));
-  const own = ownPrior === undefined ? undefined : resolve27(ownPrior);
+  const own = ownPrior === undefined ? undefined : resolve28(ownPrior);
   const enabled = readZcodeEnabledPluginIds();
   for (const native of readZcodeNativeRecords()) {
     if (enabled.get(native.id) !== true)
       continue;
-    if (own !== undefined && resolve27(native.installPath) === own)
+    if (own !== undefined && resolve28(native.installPath) === own)
       continue;
     const root = zcodeSafeInstallRoot(native.installPath);
     if (root === undefined)
@@ -29045,7 +29114,7 @@ function capturedNativeRoot(reference, attemptId, operationId) {
         throw error;
     }
   }
-  if (resolve27(reference) !== reference || reference !== join42(root, "plgnz-lifecycle", attemptId, operationId) || canonicalExistingPath(root) !== root || canonicalExistingPath(reference) !== reference || realpathSync6(zcodeCliRoot()) !== root)
+  if (resolve28(reference) !== reference || reference !== join42(root, "plgnz-lifecycle", attemptId, operationId) || canonicalExistingPath(root) !== root || canonicalExistingPath(reference) !== reference || realpathSync6(zcodeCliRoot()) !== root)
     throw new Error("ZCode captured native root was redirected");
   return root;
 }
@@ -29736,7 +29805,7 @@ var zcodeCliLifecycle = createLifecycleHostAdapter(zcodeCliLifecycleDefinition);
 
 // src/hosts/hermes-writer.ts
 import { chmodSync as chmodSync4, cpSync as cpSync15, existsSync as existsSync32, lstatSync as lstatSync29, mkdirSync as mkdirSync17, mkdtempSync as mkdtempSync16, readFileSync as readFileSync37, readdirSync as readdirSync26, realpathSync as realpathSync7, renameSync as renameSync14, rmSync as rmSync18, statSync as statSync14, writeFileSync as writeFileSync19 } from "node:fs";
-import { basename as basename8, dirname as dirname20, isAbsolute as isAbsolute12, join as join43, resolve as resolve28 } from "node:path";
+import { basename as basename8, dirname as dirname20, isAbsolute as isAbsolute12, join as join43, resolve as resolve29 } from "node:path";
 import { tmpdir as tmpdir13 } from "node:os";
 
 // src/hosts/hermes-launcher-templates.ts
@@ -30243,8 +30312,8 @@ function updatePluginConfig(configured, enable, disable) {
   }
 }
 function effectiveConfigPath() {
-  const native = resolve28(join43(hermesRoot(), "config.yaml"));
-  const configured = resolve28(hermesConfigPath());
+  const native = resolve29(join43(hermesRoot(), "config.yaml"));
+  const configured = resolve29(hermesConfigPath());
   if (native === configured)
     return configured;
   if (!existsSync32(native) || !existsSync32(configured))
@@ -30300,7 +30369,7 @@ function assertTree3(root) {
   }
 }
 function assertManagedPath5(root, target) {
-  const base = resolve28(root), selected = resolve28(target);
+  const base = resolve29(root), selected = resolve29(target);
   if (selected !== base && !selected.startsWith(`${base}/`))
     throw new Error(`Hermes managed path escapes its store: ${target}`);
   let current = base;
@@ -30640,8 +30709,8 @@ function storeFor(target) {
   return { root: identity.root, configPath: resolveInstanceConfig(identity.root, identity.configPath), pluginsDir: join43(identity.root, "plugins") };
 }
 function resolveInstanceConfig(root, configPath) {
-  const native = resolve28(join43(root, "config.yaml"));
-  const configured = resolve28(configPath);
+  const native = resolve29(join43(root, "config.yaml"));
+  const configured = resolve29(configPath);
   if (native === configured)
     return configured;
   if (!existsSync32(native) || !existsSync32(configured))
@@ -31552,7 +31621,7 @@ function invalidSelection2(diagnostic) {
 
 // src/recorded-pins.ts
 import { existsSync as existsSync33, readFileSync as readFileSync38 } from "node:fs";
-import { isAbsolute as isAbsolute13, join as join44, resolve as resolve29 } from "node:path";
+import { isAbsolute as isAbsolute13, join as join44, resolve as resolve30 } from "node:path";
 function resolveRecordedPinExecutables(packageRoot, servers) {
   const pins = [];
   const dropped = [];
@@ -31600,11 +31669,11 @@ function absolutePinExecutable(command) {
   if (command.includes("/")) {
     if (!isAbsolute13(command))
       return null;
-    const canonical = resolve29(command);
+    const canonical = resolve30(command);
     return canonical === command ? command : null;
   }
   const found = which2(command);
-  return found === null ? null : resolve29(found);
+  return found === null ? null : resolve30(found);
 }
 
 // src/planner.ts
@@ -33536,7 +33605,7 @@ class Ledger {
     return this.state.attempts.find((attempt) => attempt.id === attemptId)?.journal.find((row) => row.operationId === operationId)?.state;
   }
   activation(scopeId, packageId, nativeId) {
-    return this.state.activations.find((row) => row.scopeId === scopeId && row.packageId === packageId && row.nativeId === nativeId);
+    return this.state.activations.find((row) => row.scopeId === scopeId && (row.packageId === packageId || row.ownership.kind === "legacy-claim" && row.nativeId === nativeId) && row.nativeId === nativeId);
   }
   scope(scopeId) {
     return this.state.scopes.find((row) => row.id === scopeId);
@@ -33840,7 +33909,7 @@ function legacyMarketplaceAlias(row, canonical) {
   if (separator <= 0 || row.packageId !== row.nativeId)
     return false;
   const name = row.nativeId.slice(0, separator);
-  return name === canonical.packageId && name === canonical.nativeId;
+  return name === canonical.packageId && (name === canonical.nativeId || row.nativeId === canonical.nativeId);
 }
 function legacyBareMarketplaceAlias(row, canonical) {
   return isBareMarketplaceAlias(row, canonical.scopeId, canonical.packageId, canonical.nativeId);
@@ -35239,7 +35308,7 @@ function legacyCommandAction(command) {
 // package.json
 var package_default = {
   name: "plugnz",
-  version: "0.0.32",
+  version: "0.0.33",
   description: "Install, diagnose and update agent plugins (Agent Plugins spec) and MCP configs across Claude Code, Codex, Cursor, Kimi and more",
   license: "MIT",
   type: "module",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "plugnz",
-  "version": "0.0.32",
+  "version": "0.0.33",
   "description": "Install, diagnose and update agent plugins (Agent Plugins spec) and MCP configs across Claude Code, Codex, Cursor, Kimi and more",
   "license": "MIT",
   "type": "module",