plugnz 0.0.4 → 0.0.5

package/src/hosts/pi-writer.ts

@@ -1,111 +0,0 @@
-/** Transactional standalone-skill writer for Pi 0.80.10. */
-import { existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from 'node:fs';
-import { basename, dirname, join, resolve } from 'node:path';
-import { tmpdir } from 'node:os';
-import type { AddOptions, HostWriter, InstalledPlugin, PinOptions, PinOutcome } from '../host';
-import type { PluginSource, ResolvedSource } from '../source';
-import { pi, piRoot, skillsDir } from './pi';
-import { projectPluginForPi } from '../conversion';
-
-const MARKER = '.plgnz-install.json';
-type Owner = { source: string; pluginId: string; fingerprint: string };
-type Move = { target: string; backup?: string };
-
-export const piWriter: HostWriter = {
-  ...pi,
-  async add(plugin: PluginSource, resolved: ResolvedSource, opts?: AddOptions): Promise<void | 'unchanged'> {
-    const market = plugin.marketplace ?? 'local'; const id = `${plugin.name}@${market}`;
-    identity(plugin.name, 'plugin'); identity(market, 'marketplace');
-    assertPiStore();
-    const stageParent = opts?.dryRun ? tmpdir() : dirname(skillsDir());
-    if (!opts?.dryRun) mkdirSync(stageParent, { recursive: true });
-    const stage = mkdtempSync(join(stageParent, '.plgnz-pi-stage-'));
-    try {
-      const target = join(skillsDir(), packageName(plugin.name, market));
-      const staged = stagePlugin(plugin.dir, stage, plugin.name, market);
-      writeFileSync(join(staged, MARKER), JSON.stringify({ source: resolved.sourceUri, pluginId: id, fingerprint: plugin.contentFingerprint ?? '' } satisfies Owner));
-      checkTarget(target, id, resolved.sourceUri);
-      const prior = ownedFor(id, resolved.sourceUri);
-      const unchanged = prior.length === 1 && prior[0] === target && owner(target)?.fingerprint === (plugin.contentFingerprint ?? '') && sameTree(staged, target);
-      if (opts?.dryRun) {
-        console.log(`[pi] would activate standalone package: ${target}`);
-        return unchanged ? 'unchanged' : undefined;
-      }
-      ensureStore();
-      if (unchanged) return 'unchanged';
-      const backups: Move[] = [];
-      try {
-        for (const candidate of [...new Set([target, ...prior])]) {
-          if (!existsSync(candidate)) { backups.push({ target: candidate }); continue; }
-          const backupRoot = mkdtempSync(join(skillsDir(), '.plgnz-pi-backup-'));
-          const backup = join(backupRoot, 'previous'); renameSync(candidate, backup); backups.push({ target: candidate, backup });
-        }
-        renameSync(staged, target);
-      } catch (error) {
-        for (const move of backups.reverse()) { rmSync(move.target, { recursive: true, force: true }); if (move.backup !== undefined) renameSync(move.backup, move.target); }
-        throw error;
-      }
-      for (const move of backups) if (move.backup !== undefined) rmSync(dirname(move.backup), { recursive: true, force: true });
-    } finally { rmSync(stage, { recursive: true, force: true }); }
-  },
-  async pin(_plugin: InstalledPlugin, _opts?: PinOptions): Promise<PinOutcome> { return { changes: [], refusals: [] }; },
-  async remove(id: string): Promise<void> {
-    if (!/^[a-z0-9][a-z0-9._-]*@[a-z0-9][a-z0-9._-]*$/iu.test(id)) throw new Error(`unsafe Pi plugin id: ${id}`);
-    assertPiStore();
-    const targets = ownedFor(id);
-    if (targets.length === 0) throw new Error(`Pi has no wholly plgnz-owned standalone skills for ${id}; refusing to remove`);
-    const moves: Move[] = [];
-    try {
-      for (const target of targets) {
-        const backupRoot = mkdtempSync(join(skillsDir(), '.plgnz-pi-remove-'));
-        const backup = join(backupRoot, 'previous'); renameSync(target, backup); moves.push({ target, backup });
-      }
-    } catch (error) {
-      for (const move of moves.reverse()) if (move.backup !== undefined) renameSync(move.backup, move.target);
-      throw error;
-    }
-    for (const move of moves) if (move.backup !== undefined) rmSync(dirname(move.backup), { recursive: true, force: true });
-  },
-};
-
-function stagePlugin(source: string, stage: string, plugin: string, market: string): string {
-  assertTree(source);
-  const root = join(source, 'skills');
-  if (!existsSync(root) || !lstatSync(root).isDirectory()) throw new Error('Pi standalone delivery requires plugin skills/ directories');
-  const destination = join(stage, packageName(plugin, market)); projectPluginForPi(source, destination, plugin);
-  const skillFiles: string[] = [];
-  const walk = (dir: string): void => { for (const entry of readdirSync(dir)) { const path = join(dir, entry); const stat = lstatSync(path); if (stat.isDirectory()) walk(path); else if (entry === 'SKILL.md') skillFiles.push(path); } };
-  walk(join(destination, 'skills'));
-  for (const skill of skillFiles) {
-    const relative = skill.slice(join(destination, 'skills').length + 1).split('/');
-    const sourceName = relative.length >= 2 ? relative[relative.length - 2] : undefined;
-    if (sourceName === undefined) throw new Error(`Pi skill has no directory name: ${skill}`);
-    const name = `${plugin}-${sourceName}`; piSkillName(name);
-    if (name.length > 64) throw new Error(`Pi standalone skill name exceeds 64 characters: ${name}`);
-    const text = readFileSync(skill, 'utf8');
-    if (!/^---\n[\s\S]*?^description\s*:\s*\S[\s\S]*?^---\s*$/m.test(text)) throw new Error(`Pi skill needs frontmatter description: ${skill}`);
-    writeFileSync(skill, namespaceSkill(text, name));
-  }
-  if (skillFiles.length === 0) throw new Error('Pi standalone delivery found no SKILL.md files');
-  assertTree(destination); return destination;
-}
-
-function namespaceSkill(text: string, name: string): string {
-  const end = text.indexOf('\n---', 3); if (!text.startsWith('---\n') || end === -1) throw new Error('Pi skill frontmatter is malformed');
-  const front = text.slice(0, end + 4);
-  const next = /^name\s*:/m.test(front) ? front.replace(/^name\s*:.*$/m, `name: ${name}`) : front.slice(0, -4) + `\nname: ${name}\n---`;
-  return next + text.slice(end + 4);
-}
-
-function packageName(plugin: string, market: string): string { return `${market}___${plugin}`; }
-function owner(dir: string): Owner | null { const file = join(dir, MARKER); if (!existsSync(file)) return null; try { const x: unknown = JSON.parse(readFileSync(file, 'utf8')); if (typeof x !== 'object' || x === null || Array.isArray(x)) throw new Error('not an object'); const r = x as Record<string, unknown>; if (typeof r.source !== 'string' || typeof r.pluginId !== 'string' || typeof r.fingerprint !== 'string') throw new Error('fields are invalid'); return r as Owner; } catch (error) { throw new Error(`invalid Pi ownership marker: ${file} (${(error as Error).message})`); } }
-function ownedFor(id: string, source?: string): string[] { assertPiStore(); if (!existsSync(skillsDir())) return []; const out: string[] = []; for (const name of readdirSync(skillsDir())) { const path = join(skillsDir(), name); if (!lstatSync(path).isDirectory()) continue; const mark = owner(path); if (mark?.pluginId === id && (source === undefined || mark.source === source)) out.push(path); } return out; }
-function checkTarget(target: string, id: string, source: string): void { assertUnder(skillsDir(), target); if (!existsSync(target)) return; const mark = owner(target); if (mark === null) throw new Error(`Pi standalone skill is unowned; refusing to replace it: ${target}`); if (mark.pluginId !== id || mark.source !== source) throw new Error(`Pi standalone skill belongs to another source; refusing to replace it: ${target}`); }
-function sameTree(stage: string, target: string): boolean { if (!existsSync(target)) return false; const bytes = readFileSync as unknown as (path: string) => Uint8Array; const list = (root: string): string[] => { const out: string[] = []; const walk = (dir: string, prefix: string): void => { for (const name of readdirSync(dir).sort()) { if (name === MARKER) continue; const path = join(dir, name), relative = prefix ? `${prefix}/${name}` : name, stat = lstatSync(path); if (stat.isDirectory()) walk(path, relative); else if (stat.isFile()) out.push(`${relative}:${Array.from(bytes(path)).join(',')}`); else throw new Error(`Pi standalone skill contains unsupported entry: ${path}`); } }; walk(root, ''); return out; }; return JSON.stringify(list(stage)) === JSON.stringify(list(target)); }
-function assertTree(root: string): void { const stat = lstatSync(root); if (stat.isSymbolicLink() || !stat.isDirectory()) throw new Error(`Pi plugin root is not a real directory: ${root}`); for (const name of readdirSync(root)) { const path = join(root, name), child = lstatSync(path); if (child.isSymbolicLink()) throw new Error(`Pi plugin contains symlink: ${path}`); if (child.isDirectory()) assertTree(path); else if (!child.isFile()) throw new Error(`Pi plugin contains unsupported entry: ${path}`); } }
-function identity(value: string, label: string): void { if (!/^[a-z0-9][a-z0-9._-]*$/iu.test(value)) throw new Error(`unsafe Pi ${label}: ${value}`); }
-function piSkillName(value: string): void { if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/u.test(value)) throw new Error(`Pi standalone skill name is not lowercase-hyphenated: ${value}`); }
-function ensureStore(): void { assertPiStore(); mkdirSync(piRoot(), { recursive: true }); assertRealDirectory(piRoot()); mkdirSync(skillsDir(), { recursive: true }); assertRealDirectory(skillsDir()); }
-function assertPiStore(): void { const root = piRoot(); const home = dirname(dirname(root)); let current = home; for (const part of [basename(dirname(root)), basename(root)]) { current = join(current, part); if (existsSync(current) && lstatSync(current).isSymbolicLink()) throw new Error(`Pi managed path component is a symlink: ${current}`); } if (existsSync(root)) assertRealDirectory(root); if (existsSync(skillsDir())) { assertUnder(root, skillsDir()); assertRealDirectory(skillsDir()); } }
-function assertRealDirectory(path: string): void { const stat = lstatSync(path); if (stat.isSymbolicLink()) throw new Error(`Pi managed path component is a symlink: ${path}`); if (!stat.isDirectory()) throw new Error(`Pi managed path component is not a directory: ${path}`); }
-function assertUnder(root: string, path: string): void { const base = resolve(root), candidate = resolve(path); if (candidate !== base && !candidate.startsWith(`${base}/`)) throw new Error(`Pi path escapes standalone skills store: ${path}`); let current = base; for (const part of candidate.slice(base.length).split('/').filter(Boolean)) { current = join(current, part); if (existsSync(current) && lstatSync(current).isSymbolicLink()) throw new Error(`Pi managed path component is a symlink: ${current}`); } }

package/src/hosts/pi.ts

@@ -1,48 +0,0 @@
-/** Read-only Pi standalone-skill catalog (Pi 0.80.10; docs/hosts/pi.md). */
-import { existsSync, lstatSync, readFileSync, readdirSync } from 'node:fs';
-import { join, resolve } from 'node:path';
-import type { HostReader, InstalledPlugin, McpServerEntry } from '../host';
-
-const MARKER = '.plgnz-install.json';
-
-export function skillsDir(): string { return join(piRoot(), 'skills'); }
-
-/** Pi root: host override, isolated open-plugin home, then the user's home. */
-export function piRoot(): string {
-  const explicit = process.env['OPEN_PLUGIN_PI_ROOT'];
-  if (explicit && explicit.length > 0) return resolve(explicit);
-  const home = process.env['OPEN_PLUGIN_HOME'] || process.env['HOME'] || '.';
-  return join(home, '.pi', 'agent');
-}
-
-function owner(dir: string): { pluginId: string } | null {
-  const file = join(dir, MARKER);
-  if (!existsSync(file)) return null;
-  try {
-    const value: unknown = JSON.parse(readFileSync(file, 'utf8'));
-    if (typeof value !== 'object' || value === null || Array.isArray(value)) throw new Error(`invalid Pi ownership marker: ${file}`);
-    const pluginId = (value as Record<string, unknown>).pluginId;
-    if (typeof pluginId !== 'string') throw new Error(`invalid Pi ownership marker: ${file}`);
-    return { pluginId };
-  } catch (error) { if (error instanceof Error && error.message.startsWith('invalid Pi ownership marker:')) throw error; throw new Error(`invalid Pi ownership marker: ${file}`); }
-}
-
-export const pi: HostReader = {
-  id: 'pi', gui: false,
-  detect: () => existsSync(piRoot()),
-  stores: () => [skillsDir()],
-  listInstalled(): InstalledPlugin[] {
-    if (!existsSync(skillsDir())) return [];
-    const result: InstalledPlugin[] = [];
-    for (const entry of readdirSync(skillsDir())) {
-      const dir = join(skillsDir(), entry);
-      if (!lstatSync(dir).isDirectory()) continue;
-      const marker = owner(dir);
-      if (marker === null) continue; // User-owned standalone skills are never claimed.
-      const at = marker.pluginId.indexOf('@');
-      result.push({ id: marker.pluginId, name: at === -1 ? marker.pluginId : marker.pluginId.slice(0, at), ...(at === -1 ? {} : { marketplace: marker.pluginId.slice(at + 1) }), path: dir, enabled: true });
-    }
-    return result;
-  },
-  mcpEntries: (): McpServerEntry[] => [],
-};

package/src/hosts/writers.ts

@@ -1,23 +0,0 @@
-/**
- * The writer side of the host registry — `add`/`pin`/`update`/`remove`
- * consume this list; doctor never does (see src/hosts/index.ts for why the
- * two lists live in separate modules).
- */
-import type { HostWriter } from '../host';
-import { claudeCodeWriter } from './claude-code-writer';
-import { codexWriter } from './codex-writer';
-import { kimiWriter } from './kimi-writer';
-import { cursorWriter } from './cursor-writer';
-import { ompWriter } from './omp-writer';
-import { piWriter } from './pi-writer';
-import { dcodeWriter } from './dcode-writer';
-import { opencodeWriter } from './opencode-writer';
-import { grokWriter } from './grok-writer';
-import { zcodeCliWriter } from './zcode-cli-writer';
-import { hermesWriter } from './hermes-writer';
-
-/** Active mutation routes: native plugin stores only. */
-export const writers: HostWriter[] = [claudeCodeWriter, codexWriter, kimiWriter, cursorWriter, ompWriter, hermesWriter, dcodeWriter, grokWriter, zcodeCliWriter];
-
-/** Legacy standalone writers are retained solely to remove plgnz-owned installs safely. */
-export const cleanupWriters: HostWriter[] = [...writers, piWriter, opencodeWriter];

package/src/hosts/zcode-cli-writer.ts

@@ -1,239 +0,0 @@
-/** Official ZCode CLI marketplace writer. */
-import { cpSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs';
-import { dirname, join, relative, resolve } from 'node:path';
-import { tmpdir } from 'node:os';
-import type { AddOptions, HostWriter, InstalledPlugin, PinOptions, PinOutcome } from '../host';
-import type { PluginSource, ResolvedSource } from '../source';
-import { fingerprintTree } from '../fingerprint';
-import { assertZcodeNativeRegistryReadable, readZcodeEnabledPluginIds, readZcodeNativeRecords, readZcodeOwnership, runOfficialZcode, zcodeCli, zcodeMarketplaceRoot, zcodeResourceRoot, zcodeSafeInstallRoot } from './zcode-cli';
-import { normalizeCommandTree } from '../conversion';
-import { zcodeCliRoot } from '../paths';
-
-declare const Bun: any;
-
-const MARKER = '.plgnz-install.json';
-type Ownership = { owner: 'plgnz'; schema: 1; logicalId: string; nativeId: string; fingerprint: string; source: string; resourcePath: string };
-
-export const zcodeCliWriter: HostWriter = {
-  ...zcodeCli,
-  supportsAdoption: false,
-  async add(plugin: PluginSource, resolved: ResolvedSource, opts?: AddOptions): Promise<void | 'unchanged'> {
-    if (opts?.adoptExisting) throw new Error('Official ZCode adoption is not implemented; refusing an unowned native install');
-    assertName(plugin.name, 'plugin name');
-    const logicalId = plugin.marketplace === undefined ? plugin.name : `${plugin.name}@${plugin.marketplace}`;
-    const fingerprint = requireFingerprint(plugin);
-    const nativeVersion = versionFor(plugin, fingerprint);
-    const market = ownedMarketplace(logicalId);
-    const nativeId = `${plugin.name}@${market}`;
-    assertZcodeNativeRegistryReadable();
-    const prior = nativeById(nativeId);
-    if (prior !== undefined) provePrior(prior, logicalId, nativeId, resolved.sourceUri);
-    const stageParent = join(zcodeCliRoot(), '.plgnz-zcode-stage');
-    mkdirSync(opts?.dryRun ? tmpdir() : stageParent, { recursive: true });
-    const stage = mkdtempSync(join(opts?.dryRun ? tmpdir() : stageParent, 'candidate-'));
-    const stagedMarket = join(stage, market); const stagedResources = join(stage, 'resources');
-    const marketRoot = join(zcodeMarketplaceRoot(), market); const resourceRoot = join(zcodeResourceRoot(), market, fingerprint);
-    try {
-      stagePackage(plugin, stagedMarket, stagedResources, resourceRoot, logicalId, nativeId, nativeVersion, fingerprint, resolved.sourceUri);
-      rejectCommandCollisions(stagedMarket, nativeId, prior?.installPath);
-      assertReplaceableOwnedRoots(marketRoot, resourceRoot, plugin.name, prior, logicalId, nativeId, resolved.sourceUri);
-      if (prior !== undefined && prior.version === nativeVersion && readZcodeEnabledPluginIds().get(nativeId) === true && sameCandidate(prior, stagedMarket, stagedResources, resourceRoot, logicalId, nativeId, resolved.sourceUri, fingerprint)) return 'unchanged';
-      if (opts?.dryRun) return;
-      const marketBackup = moveAside(marketRoot);
-      const resourceBackup = moveAside(resourceRoot);
-      try {
-        mkdirSync(dirname(marketRoot), { recursive: true }); mkdirSync(dirname(resourceRoot), { recursive: true });
-        renameSync(stagedMarket, marketRoot);
-        renameSync(stagedResources, resourceRoot);
-        const expectedResourceFingerprint = fingerprintTree(resourceRoot);
-        if (prior === undefined) {
-          runOfficialZcode(['plugins', 'marketplace', 'add', marketRoot]);
-          runOfficialZcode(['plugins', 'install', nativeId]);
-        } else {
-          runOfficialZcode(['plugins', 'marketplace', 'update', market]);
-          runOfficialZcode(['plugins', 'update', nativeId]);
-        }
-        proveActive(nativeId, logicalId, resolved.sourceUri, fingerprint, nativeVersion, join(marketRoot, 'plugins', plugin.name), resourceRoot, expectedResourceFingerprint);
-      } catch (error) {
-        // The old cache remains native-selected on documented update failure.
-        // Restore the old marketplace source before trying a compensating refresh.
-        rmSync(marketRoot, { recursive: true, force: true }); marketBackup.rollback();
-        rmSync(resourceRoot, { recursive: true, force: true }); resourceBackup.rollback();
-        if (prior !== undefined) restorePrior(nativeId, market, prior);
-        else removeCandidate(nativeId, logicalId, resolved.sourceUri, fingerprint);
-        throw error;
-      }
-      marketBackup.commit(); resourceBackup.commit();
-    } finally { rmSync(stage, { recursive: true, force: true }); }
-  },
-  async remove(id: string): Promise<void> {
-    assertZcodeNativeRegistryReadable();
-    const native = nativeForLogical(id);
-    if (native === undefined) throw new Error(`Official ZCode plugin ${id} is not a proven plgnz-owned install`);
-    runOfficialZcode(['plugins', 'uninstall', native.id, '--force']);
-    if (nativeById(native.id) !== undefined) throw new Error(`Official ZCode did not remove ${id}`);
-  },
-  async pin(_plugin: InstalledPlugin, _opts?: PinOptions): Promise<PinOutcome> { return { changes: [], refusals: [] }; },
-};
-
-/** Stages a namespaced command projection without invoking the native CLI. */
-export function projectZcodePlugin(source: string, destination: string, resourceCopy: string, resourceLinkRoot: string, logicalId: string, nativeId: string, nativeVersion: string, fingerprint: string, sourceUri: string): void {
-  const input = resolve(source); const target = resolve(destination); const ownedResources = resolve(resourceCopy); const links = resolve(resourceLinkRoot);
-  if (!existsSync(input) || !statSync(input).isDirectory()) throw new Error(`ZCode plugin source is not a directory: ${input}`);
-  if (target.startsWith(`${input}/`) || ownedResources.startsWith(`${input}/`)) throw new Error('ZCode projected outputs must not be inside the source');
-  assertNoSymlinks(input); cpSync(input, target, { recursive: true });
-  validateRootManifest(target);
-  projectCommands(target, sourceName(target));
-  projectUserOnlySkills(target, ownedResources, links, sourceName(target));
-  const manifest: Record<string, unknown> = { name: sourceName(target), version: nativeVersion };
-  const rootManifest = readJson(join(target, 'plugin.json'));
-  for (const key of ['description', 'author', 'license']) if (typeof rootManifest?.[key] === 'string') manifest[key] = rootManifest[key];
-  if (hasSkill(target)) manifest['skills'] = 'skills';
-  if (hasCommand(target)) manifest['commands'] = 'commands';
-  mkdirSync(join(target, '.zcode-plugin'), { recursive: true });
-  writeFileSync(join(target, '.zcode-plugin', 'plugin.json'), `${JSON.stringify(manifest, null, 2)}\n`);
-  writeFileSync(join(target, MARKER), `${JSON.stringify({ owner: 'plgnz', schema: 1, logicalId, nativeId, fingerprint, source: sourceUri, resourcePath: resourceLinkRoot } satisfies Ownership, null, 2)}\n`);
-  assertNoSymlinks(target); assertNoSymlinks(ownedResources);
-}
-
-function stagePackage(plugin: PluginSource, market: string, resources: string, resourceLinkRoot: string, logicalId: string, nativeId: string, nativeVersion: string, fingerprint: string, source: string): void {
-  const packageRoot = join(market, 'plugins', plugin.name);
-  mkdirSync(dirname(packageRoot), { recursive: true }); mkdirSync(resources, { recursive: true });
-  projectZcodePlugin(plugin.dir, packageRoot, resources, resourceLinkRoot, logicalId, nativeId, nativeVersion, fingerprint, source);
-  writeFileSync(join(market, 'marketplace.json'), `${JSON.stringify({ name: nativeId.slice(nativeId.indexOf('@') + 1), plugins: [{ name: plugin.name, source: `./plugins/${plugin.name}` }] }, null, 2)}\n`);
-}
-
-function projectCommands(root: string, pluginName: string): void {
-  const source = join(root, 'commands'); if (!existsSync(source)) return;
-  if (!statSync(source).isDirectory()) throw new Error(`ZCode commands path is not a directory: ${source}`);
-  const temp = join(root, '.plgnz-zcode-commands'); renameSync(source, temp);
-  try {
-    normalizeCommandTree(temp);
-    copyCommandTree(temp, join(root, 'commands', pluginName));
-  } finally { rmSync(temp, { recursive: true, force: true }); }
-}
-function copyCommandTree(source: string, dest: string): void {
-  for (const entry of readdirSync(source)) {
-    const from = join(source, entry); const to = join(dest, entry); const stat = lstatSync(from);
-    if (stat.isSymbolicLink()) throw new Error(`ZCode command source contains symlink: ${from}`);
-    if (stat.isDirectory()) { copyCommandTree(from, to); continue; }
-    if (!stat.isFile() || !entry.endsWith('.md')) throw new Error(`ZCode command source must be Markdown: ${from}`);
-    const text = readFileSync(from, 'utf8'); validateCommand(text, from); mkdirSync(dirname(to), { recursive: true }); writeFileSync(to, text);
-  }
-}
-function projectUserOnlySkills(root: string, resources: string, resourceLinks: string, pluginName: string): void {
-  const skills = join(root, 'skills'); if (!existsSync(skills)) return;
-  if (!statSync(skills).isDirectory()) throw new Error(`ZCode skills path is not a directory: ${skills}`);
-  for (const entry of readdirSync(skills)) {
-    const dir = join(skills, entry); if (!statSync(dir).isDirectory()) throw new Error(`ZCode skill is not a directory: ${dir}`);
-    const skill = join(dir, 'SKILL.md'); if (!existsSync(skill)) continue;
-    const raw = readFileSync(skill, 'utf8'); const fm = frontmatter(raw, skill);
-    const hidden = fm.values['disable-model-invocation'] ?? fm.values['disable_model_invocation'];
-    const invocable = fm.values['user-invocable'] ?? fm.values['user_invocable'];
-    if (hidden !== undefined && typeof hidden !== 'boolean') throw new Error(`ZCode disable-model-invocation must be boolean: ${skill}`);
-    if (invocable !== undefined && typeof invocable !== 'boolean') throw new Error(`ZCode user-invocable must be boolean: ${skill}`);
-    if (hidden !== true) continue;
-    if (invocable === false) throw new Error(`ZCode cannot represent user-invocable: false as a command: ${skill}`);
-    const name = typeof fm.values['name'] === 'string' ? fm.values['name'] : entry; assertName(name, 'user-only skill name');
-    const command = join(root, 'commands', pluginName, `${name}.md`);
-    if (existsSync(command)) throw new Error(`ZCode command collision for user-only skill ${name}`);
-    for (const key of Object.keys(fm.values)) if (!['name', 'description', 'disable-model-invocation', 'disable_model_invocation', 'user-invocable', 'user_invocable', 'argument-hint', 'allowed-tools', 'disable-noninteractive', 'model', 'skills'].includes(key)) throw new Error(`ZCode unsupported user-only skill metadata ${key}: ${skill}`);
-    const resource = join(resources, 'skills', entry); const linkResource = join(resourceLinks, 'skills', entry); copyResources(dir, resource);
-    const commandMeta: string[] = [`description: ${JSON.stringify(typeof fm.values['description'] === 'string' ? fm.values['description'] : name)}`];
-    for (const key of ['argument-hint', 'allowed-tools', 'disable-noninteractive', 'model', 'skills']) {
-      const value = fm.values[key]; if (value === undefined) continue;
-      commandMeta.push(`${key}: ${key === 'argument-hint' ? argumentHint(value, skill) : JSON.stringify(value)}`);
-    }
-    const body = raw.slice(fm.end); validateCommand(`---\n${commandMeta.join('\n')}\n---\n${body}`, skill);
-    mkdirSync(dirname(command), { recursive: true });
-    writeFileSync(command, `---\n${commandMeta.join('\n')}\n---\n${rewriteLinks(body, dir, linkResource, skill)}`);
-    rmSync(dir, { recursive: true, force: true });
-  }
-}
-function copyResources(source: string, destination: string): void {
-  mkdirSync(destination, { recursive: true });
-  for (const name of readdirSync(source)) {
-    if (name === 'SKILL.md') continue;
-    const from = join(source, name); const stat = lstatSync(from); if (stat.isSymbolicLink()) throw new Error(`ZCode resource contains symlink: ${from}`);
-    cpSync(from, join(destination, name), { recursive: true });
-  }
-}
-function rewriteLinks(body: string, source: string, resources: string, label: string): string {
-  if (/\]\s*\[[^\]]+\]/u.test(body)) throw new Error(`ZCode unsupported reference-style Markdown link: ${label}`);
-  // Inline code spans are not links; mask them before rewriting so example
-  // syntax like `[title](link)` inside backticks stays literal (CommonMark).
-  const spans: string[] = [];
-  const masked = body.replace(/(`+)([\s\S]*?)\1/gu, (all) => { spans.push(all); return `\u0000${spans.length - 1}\u0000`; });
-  const rewritten = masked.replace(/(!?\[[^\]]*\])\(([^)\s]+)(\s+[^)]*)?\)/gu, (all, text: string, target: string, suffix: string | undefined) => {
-    if (/^(?:https?:|mailto:|#)/iu.test(target)) return all;
-    if (target.startsWith('/') || target.includes('\\')) throw new Error(`ZCode unsupported absolute resource reference: ${label}`);
-    const absolute = resolve(source, target); const rel = relative(source, absolute);
-    if (rel === '' || rel.startsWith('..') || !existsSync(absolute) || !statSync(absolute).isFile()) throw new Error(`ZCode resource reference escapes or is missing: ${label} (${target})`);
-    return `${text}(${join(resources, rel)}${suffix ?? ''})`;
-  });
-  return rewritten.replace(/\u0000(\d+)\u0000/gu, (_, index: string) => spans[Number(index)] ?? '');
-}
-function validateCommand(raw: string, file: string): void {
-  const fm = frontmatter(raw, file);
-  for (const key of Object.keys(fm.values)) if (!['description', 'argument-hint', 'disable-noninteractive', 'model', 'skills'].includes(key)) throw new Error(`ZCode unsupported command metadata ${key}: ${file}`);
-  if (/(?:^|\n)\s*!|!`/u.test(raw.slice(fm.end))) throw new Error(`ZCode shell command expansion is unsupported: ${file}`);
-}
-function validateRootManifest(root: string): void {
-  const manifest = readJson(join(root, 'plugin.json'));
-  if (manifest === null || typeof manifest['name'] !== 'string') throw new Error(`ZCode projection requires plugin.json name: ${root}`);
-  for (const key of Object.keys(manifest)) if (['hooks', 'mcpServers', 'agents', 'agent', 'executables'].includes(key)) throw new Error(`ZCode root plugin semantic is unsupported: ${key}`);
-}
-function sourceName(root: string): string { const name = readJson(join(root, 'plugin.json'))?.['name']; if (typeof name !== 'string') throw new Error(`ZCode projection requires plugin.json name: ${root}`); return name; }
-function readJson(file: string): Record<string, unknown> | null { try { const value: unknown = JSON.parse(readFileSync(file, 'utf8')); return isObject(value) ? value : null; } catch { return null; } }
-function frontmatter(raw: string, file: string): { values: Record<string, unknown>; end: number } { const match = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/u.exec(raw); if (match === null) throw new Error(`ZCode command or user-only skill needs YAML frontmatter: ${file}`); let value: unknown; try { value = Bun.YAML.parse(match[1] ?? ''); } catch { throw new Error(`ZCode invalid YAML frontmatter: ${file}`); } if (!isObject(value)) throw new Error(`ZCode YAML frontmatter must be a mapping: ${file}`); return { values: value, end: match[0].length }; }
-function hasSkill(root: string): boolean { const dir = join(root, 'skills'); return existsSync(dir) && readdirSync(dir).some(name => existsSync(join(dir, name, 'SKILL.md'))); }
-function hasCommand(root: string): boolean { const dir = join(root, 'commands'); return existsSync(dir) && commandNames(dir).length > 0; }
-function commandNames(dir: string, prefix = ''): string[] { if (!existsSync(dir)) return []; const out: string[] = []; for (const name of readdirSync(dir)) { const path = join(dir, name); if (statSync(path).isDirectory()) out.push(...commandNames(path, prefix === '' ? name : `${prefix}:${name}`)); else if (name.endsWith('.md')) out.push(`${prefix === '' ? '' : `${prefix}:`}${name.slice(0, -3)}`); } return out; }
-function rejectCommandCollisions(stagedMarket: string, nativeId: string, ownPrior?: string): void {
-  const candidate = commandNames(join(stagedMarket, 'plugins'));
-  const own = ownPrior === undefined ? undefined : resolve(ownPrior);
-  const enabled = readZcodeEnabledPluginIds();
-  for (const native of readZcodeNativeRecords()) {
-    if (enabled.get(native.id) !== true) continue;
-    if (own !== undefined && resolve(native.installPath) === own) continue;
-    const root = zcodeSafeInstallRoot(native.installPath); if (root === undefined) throw new Error(`Official ZCode native root is unsafe: ${native.installPath}`);
-    const overlap = commandNames(join(root, 'commands')).find(name => candidate.includes(name));
-    if (overlap !== undefined) throw new Error(`ZCode command ${overlap} collides with enabled native plugin ${native.id}`);
-  }
-}
-function nativeById(id: string) { const rows = readZcodeNativeRecords().filter(row => row.id === id); if (rows.length > 1) throw new Error(`Official ZCode native id is ambiguous: ${id}`); return rows[0]; }
-function nativeForLogical(logicalId: string) {
-  const rows = readZcodeNativeRecords().filter(row => zcodeSafeInstallRoot(row.installPath) !== undefined && readZcodeOwnership(row.installPath)?.logicalId === logicalId && readZcodeOwnership(row.installPath)?.nativeId === row.id);
-  if (rows.length > 1) throw new Error(`Official ZCode logical install is ambiguous: ${logicalId}`);
-  if (rows[0]?.scope !== undefined && rows[0].scope !== 'user') throw new Error(`Official ZCode workspace-scoped install is unsupported: ${logicalId}`);
-  return rows[0];
-}
-function sameCandidate(prior: NonNullable<ReturnType<typeof nativeById>>, market: string, resources: string, resourceRoot: string, logical: string, native: string, source: string, fingerprint: string): boolean {
-  const marker = readZcodeOwnership(prior.installPath);
-  if (marker?.logicalId !== logical || marker.nativeId !== native || marker.source !== source || marker.fingerprint !== fingerprint || marker.resourcePath !== resourceRoot || !existsSync(resourceRoot)) return false;
-  try { return fingerprintTree(join(market, 'plugins', prior.name)) === fingerprintTree(prior.installPath) && fingerprintTree(resources) === fingerprintTree(resourceRoot); }
-  catch { return false; }
-}
-function assertReplaceableOwnedRoots(market: string, resources: string, name: string, prior: ReturnType<typeof nativeById>, logical: string, native: string, source: string): void {
-  if (!existsSync(market) && !existsSync(resources)) return;
-  if (prior === undefined) throw new Error(`Official ZCode owned path already exists without a proven native install: ${existsSync(market) ? market : resources}`);
-  const priorRoot = zcodeSafeInstallRoot(prior.installPath); const marker = priorRoot === undefined ? null : readZcodeOwnership(priorRoot);
-  if (marker?.logicalId !== logical || marker.nativeId !== native || marker.source !== source) throw new Error(`Official ZCode existing paths are not proven owned: ${native}`);
-  if (existsSync(market)) {
-    assertNoSymlinks(market); const staged = readZcodeOwnership(join(market, 'plugins', name));
-    if (staged?.logicalId !== logical || staged.nativeId !== native || staged.source !== source) throw new Error(`Official ZCode marketplace root is not proven owned: ${market}`);
-  }
-  if (existsSync(resources) && marker.resourcePath !== resources) throw new Error(`Official ZCode resource root is not proven owned: ${resources}`);
-}
-function provePrior(prior: ReturnType<typeof nativeById>, logical: string, native: string, source: string): void { if (prior === undefined) return; const root = zcodeSafeInstallRoot(prior.installPath); const marker = root === undefined ? null : readZcodeOwnership(root); if (prior.scope !== 'user' || marker?.logicalId !== logical || marker.nativeId !== native || marker.source !== source) throw new Error(`Official ZCode ${native} is not a proven user-scoped plgnz-owned install`); }
-function proveActive(native: string, logical: string, source: string, fingerprint: string, version: string, expectedPackage: string, expectedResources: string, expectedResourceFingerprint: string): void { const row = nativeById(native); const root = row === undefined ? undefined : zcodeSafeInstallRoot(row.installPath); const marker = root === undefined ? null : readZcodeOwnership(root); if (row === undefined || root === undefined || row.version !== version || readZcodeEnabledPluginIds().get(native) !== true || marker?.logicalId !== logical || marker.nativeId !== native || marker.source !== source || marker.fingerprint !== fingerprint || marker.resourcePath !== expectedResources || fingerprintTree(root) !== fingerprintTree(expectedPackage) || fingerprintTree(expectedResources) !== expectedResourceFingerprint) throw new Error(`Official ZCode native readback did not activate ${native}`); }
-function restorePrior(native: string, market: string, prior: NonNullable<ReturnType<typeof nativeById>>): void { runOfficialZcode(['plugins', 'marketplace', 'update', market]); runOfficialZcode(['plugins', 'update', native]); const restored = nativeById(native); if (restored?.version !== prior.version || readZcodeEnabledPluginIds().get(native) !== true) throw new Error(`Official ZCode could not restore prior ${native}`); }
-function removeCandidate(native: string, logical: string, source: string, fingerprint: string): void { const row = nativeById(native); const marker = row === undefined ? null : readZcodeOwnership(row.installPath); if (row !== undefined && marker?.logicalId === logical && marker.source === source && marker.fingerprint === fingerprint) runOfficialZcode(['plugins', 'uninstall', native, '--force']); }
-function versionFor(plugin: PluginSource, fingerprint: string): string { const canonical = plugin.version ?? '0.0.0'; if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u.test(canonical)) throw new Error(`ZCode needs canonical semver before plgnz metadata: ${canonical}`); return `${canonical}+plgnz.${fingerprint.slice(0, 16).toLowerCase()}`; }
-function ownedMarketplace(logical: string): string { const h = new Bun.CryptoHasher('sha256'); h.update(logical); return `plgnz-${h.digest('hex').slice(0, 16)}`; }
-function requireFingerprint(plugin: PluginSource): string { const fp = plugin.contentFingerprint ?? fingerprintTree(plugin.dir); if (!/^[0-9a-f]{16,}$/iu.test(fp)) throw new Error('ZCode requires a content fingerprint'); return fp.toLowerCase(); }
-function moveAside(path: string): { rollback(): void; commit(): void } { if (!existsSync(path)) return { rollback: () => {}, commit: () => {} }; const backup = `${path}.plgnz-backup-${Date.now()}`; renameSync(path, backup); return { rollback: () => { if (!existsSync(path)) renameSync(backup, path); }, commit: () => rmSync(backup, { recursive: true, force: true }) }; }
-function assertName(value: string, label: string): void { if (!/^[a-z0-9][a-z0-9._-]*$/iu.test(value)) throw new Error(`ZCode unsafe ${label}: ${value}`); }
-function argumentHint(value: unknown, file: string): string { if (typeof value === 'string') return JSON.stringify(value); if (Array.isArray(value) && value.every(item => typeof item === 'string')) return `[${value.join(' ')}]`; throw new Error(`ZCode argument-hint must be text or text list: ${file}`); }
-function assertNoSymlinks(root: string): void { const visit = (path: string): void => { const stat = lstatSync(path); if (stat.isSymbolicLink()) throw new Error(`ZCode source contains symlink: ${path}`); if (stat.isDirectory()) for (const child of readdirSync(path)) visit(join(path, child)); }; visit(root); }
-function isObject(value: unknown): value is Record<string, unknown> { return typeof value === 'object' && value !== null && !Array.isArray(value); }

package/src/hosts/zcode-cli.ts

@@ -1,195 +0,0 @@
-/**
- * Official ZCode CLI reader.
- *
- * `doctor` must be read-only, so this module reads ZCode's installed registry
- * directly. It never invokes `plugins list`: that command initializes bundled
- * plugins in an otherwise empty store (evidence 2026-09-23).
- */
-import { existsSync, lstatSync, readFileSync, realpathSync } from 'node:fs';
-import { dirname, join, resolve } from 'node:path';
-import type { HostReader, InstalledPlugin, McpServerEntry } from '../host';
-import { homeRoot, zcodeCliConfigRoot, zcodeCliRoot, zcodeStorageRoot } from '../paths';
-
-declare const Bun: any;
-declare const TextDecoder: any;
-
-type NativeRecord = { id: string; name: string; marketplace: string; version: string; installPath: string; scope: 'user' | 'workspace' };
-type Ownership = { owner: 'plgnz'; schema: 1; logicalId: string; nativeId: string; fingerprint: string; source: string; resourcePath?: string };
-
-export function zcodeRegistryFile(): string { return join(zcodeCliRoot(), 'plugins', 'installed_plugins.json'); }
-export function zcodeMarketplaceRoot(): string { return join(zcodeCliRoot(), 'plgnz-marketplaces'); }
-export function zcodeResourceRoot(): string { return join(zcodeCliRoot(), 'plgnz-resources'); }
-export function zcodeCliBinary(): string | undefined { return process.env['OPEN_PLUGIN_ZCODE_CLI_BIN']; }
-
-/**
- * Candidate official CLI executables, most authoritative first. An explicit
- * `OPEN_PLUGIN_ZCODE_CLI_BIN` override is exclusive — candidates stop at it so
- * isolated roots and tests never reach a real desktop bundle. Without an
- * override the desktop app's bundled official CLI is probed: it reports the
- * same official identity (`doctor --json` → zcode/zcode-cli, bare-semver
- * `--version`, executable node shebang) and shares the `~/.zcode/cli` store
- * (evidence 2026-10-07). An isolated `OPEN_PLUGIN_HOME` never falls through to
- * a system-wide bundle.
- */
-export function zcodeCliBinaryCandidates(env: Record<string, string | undefined> = process.env): string[] {
-  const override = env['OPEN_PLUGIN_ZCODE_CLI_BIN'];
-  if (override !== undefined && override.length > 0) return [override];
-  const homeBundle = join(homeRoot(), 'Applications', 'ZCode.app', 'Contents', 'Resources', 'glm', 'zcode.cjs');
-  const systemBundle = '/Applications/ZCode.app/Contents/Resources/glm/zcode.cjs';
-  const isolatedHome = process.env['OPEN_PLUGIN_HOME'];
-  if (process.platform !== 'darwin') return [];
-  if (isolatedHome !== undefined && isolatedHome.length > 0) return [homeBundle];
-  return [homeBundle, systemBundle].filter((path, index, all) => all.indexOf(path) === index);
-}
-
-/** Official CLI gets its storage parent through this supported test override. */
-export function zcodeCliEnv(): Record<string, string | undefined> {
-  // Never inherit a caller's real HOME/storage into tests or an explicit root.
-  return { ...process.env, HOME: homeRoot(), ZCODE_STORAGE_DIR: zcodeStorageRoot() };
-}
-
-export function readZcodeNativeRecords(): NativeRecord[] {
-  const file = zcodeRegistryFile();
-  if (!existsSync(file)) return [];
-  let value: unknown;
-  try { value = JSON.parse(readFileSync(file, 'utf8')); } catch { return []; }
-  if (!isObject(value) || value['version'] !== 1 || !Array.isArray(value['plugins'])) return [];
-  const out: NativeRecord[] = [];
-  for (const row of value['plugins']) {
-    if (!isObject(row)) continue;
-    const id = text(row['id']); const name = text(row['name']); const marketplace = text(row['marketplace']);
-    const version = text(row['version']); const installPath = text(row['installPath']);
-    const scope = row['scope'];
-    if (id === undefined || name === undefined || marketplace === undefined || version === undefined || installPath === undefined || (scope !== 'user' && scope !== 'workspace')) throw new Error(`Official ZCode registry has an unsupported plugin record: ${file}`);
-    out.push({ id, name, marketplace, version, installPath, scope });
-  }
-  return out;
-}
-
-/** Writers fail closed rather than mistaking a corrupt native registry for an empty store. */
-export function assertZcodeNativeRegistryReadable(): void {
-  const file = zcodeRegistryFile();
-  if (!existsSync(file)) return;
-  let value: unknown;
-  try { value = JSON.parse(readFileSync(file, 'utf8')); } catch { throw new Error(`Official ZCode registry is invalid: ${file}`); }
-  if (!isObject(value) || value['version'] !== 1 || !Array.isArray(value['plugins']) || value['plugins'].some(row => !isObject(row) || (row['scope'] !== 'user' && row['scope'] !== 'workspace'))) throw new Error(`Official ZCode registry is unsupported: ${file}`);
-}
-
-export function readZcodeOwnership(root: string): Ownership | null {
-  const file = join(root, '.plgnz-install.json');
-  try {
-    if (lstatSync(file).isSymbolicLink()) return null;
-    const value: unknown = JSON.parse(readFileSync(file, 'utf8'));
-    if (!isObject(value) || value['owner'] !== 'plgnz' || value['schema'] !== 1) return null;
-    const logicalId = text(value['logicalId']); const nativeId = text(value['nativeId']); const fingerprint = text(value['fingerprint']); const source = text(value['source']);
-    const resourcePath = text(value['resourcePath']);
-    return logicalId === undefined || nativeId === undefined || fingerprint === undefined || source === undefined ? null : { owner: 'plgnz', schema: 1, logicalId, nativeId, fingerprint, source, ...(resourcePath === undefined ? {} : { resourcePath }) };
-  } catch { return null; }
-}
-
-/** Detection requires an official terminal CLI binary and official doctor shape. */
-function isOfficialZcodeCliBinary(binary: string): boolean {
-  if (!existsSync(binary)) return false;
-  try {
-    const versionResult = Bun.spawnSync([binary, '--version'], { stdout: 'pipe', stderr: 'pipe', env: zcodeCliEnv(), timeout: 10_000 });
-    if (versionResult.exitCode !== 0 || !(versionResult.stdout instanceof Uint8Array)) return false;
-    const version = new TextDecoder().decode(versionResult.stdout).trim();
-    if (/zcode-app-cli/iu.test(version) || !/^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/u.test(version)) return false;
-    const result = Bun.spawnSync([binary, 'doctor', '--json'], { stdout: 'pipe', stderr: 'pipe', env: zcodeCliEnv(), timeout: 10_000 });
-    if (result.exitCode !== 0 || !(result.stdout instanceof Uint8Array)) return false;
-    const stdout = new TextDecoder().decode(result.stdout);
-    if (/zcode-app-cli/iu.test(stdout)) return false;
-    const value: unknown = JSON.parse(stdout);
-    if (!isObject(value) || !isObject(value['cli'])) return false;
-    return value['cli']['name'] === 'zcode' && value['cli']['processName'] === 'zcode-cli';
-  } catch { return false; }
-}
-
-/** The first candidate that exists and passes the official-identity gate. */
-export function resolveOfficialZcodeCli(): string | undefined {
-  return zcodeCliBinaryCandidates().find((binary) => isOfficialZcodeCliBinary(binary));
-}
-
-export function isOfficialZcodeCli(): boolean {
-  return resolveOfficialZcodeCli() !== undefined;
-}
-
-export function runOfficialZcode(args: string[]): string {
-  const binary = resolveOfficialZcodeCli();
-  if (binary === undefined) throw new Error('Official ZCode CLI required: set OPEN_PLUGIN_ZCODE_CLI_BIN to a binary whose doctor --json reports zcode/zcode-cli, or install the ZCode desktop app (its bundled CLI is probed automatically on darwin)');
-  const result = Bun.spawnSync([binary, ...args], { stdout: 'pipe', stderr: 'pipe', env: zcodeCliEnv(), timeout: 30_000 });
-  const stdout = result.stdout instanceof Uint8Array ? new TextDecoder().decode(result.stdout) : '';
-  const stderr = result.stderr instanceof Uint8Array ? new TextDecoder().decode(result.stderr) : '';
-  if (result.exitCode !== 0) throw new Error(`Official ZCode CLI ${args.join(' ')} failed: ${(stderr || stdout).trim()}`);
-  return stdout;
-}
-
-export const zcodeCli: HostReader = {
-  id: 'zcode-cli',
-  gui: false,
-  detect: isOfficialZcodeCli,
-  stores: () => [join(zcodeCliRoot(), 'plugins', 'cache'), zcodeMarketplaceRoot(), zcodeResourceRoot()],
-  listInstalled(): InstalledPlugin[] {
-    const enabled = readZcodeEnabledPluginIds();
-    const seen = new Set<string>();
-    return readZcodeNativeRecords().map((native) => {
-      const root = zcodeSafeInstallRoot(native.installPath);
-      const marker = root === undefined ? null : readZcodeOwnership(root);
-      const owned = marker !== null && marker.nativeId === native.id;
-      const id = owned ? marker.logicalId : native.id;
-      if (seen.has(id)) throw new Error(`Official ZCode installed identity is ambiguous: ${id}`);
-      seen.add(id);
-      const at = id.indexOf('@');
-      return {
-        id,
-        name: owned ? native.name : at < 0 ? id : id.slice(0, at),
-        ...(owned ? { marketplace: marker.logicalId.includes('@') ? marker.logicalId.slice(marker.logicalId.indexOf('@') + 1) : undefined } : { marketplace: native.marketplace }),
-        ...(root === undefined ? {} : { path: root, contentRoots: contentRoots(root, marker) }),
-        version: native.version,
-        enabled: enabled.get(native.id) === true,
-      };
-    });
-  },
-  mcpEntries: (): McpServerEntry[] => [],
-};
-
-export function zcodeSafeInstallRoot(path: string): string | undefined {
-  try {
-    const root = canonical(path); const cache = canonical(join(zcodeCliRoot(), 'plugins', 'cache'));
-    if (!root.startsWith(`${cache}/`) || lstatSync(root).isSymbolicLink()) return undefined;
-    return root;
-  } catch { return undefined; }
-}
-function canonical(path: string): string {
-  return realpathSync(path);
-}
-function contentRoots(native: string, marker: Ownership | null): Record<string, string> {
-  const roots: Record<string, string> = { native };
-  if (marker?.resourcePath !== undefined) {
-    try {
-      const resource = canonical(marker.resourcePath); const owned = canonical(zcodeResourceRoot());
-      if (resource.startsWith(`${owned}/`)) roots['resources'] = resource;
-    } catch { /* missing resources are reported by doctor through native fingerprint drift */ }
-  }
-  return roots;
-}
-export function readZcodeEnabledPluginIds(): Map<string, boolean> {
-  const result = new Map<string, boolean>(); let globallyEnabled = true;
-  for (const config of effectiveConfigPaths()) {
-    let value: unknown; try { value = JSON.parse(readFileSync(config, 'utf8')); } catch { continue; }
-    if (!isObject(value) || !isObject(value['plugins'])) continue;
-    const plugins = value['plugins'];
-    if (typeof plugins['enabled'] === 'boolean') globallyEnabled = plugins['enabled'];
-    if (isObject(plugins['enabledPlugins'])) for (const [id, enabled] of Object.entries(plugins['enabledPlugins'])) if (typeof enabled === 'boolean') result.set(id, enabled);
-  }
-  if (!globallyEnabled) for (const id of result.keys()) result.set(id, false);
-  return result;
-}
-function effectiveConfigPaths(): string[] {
-  const paths = [join(zcodeCliConfigRoot(), 'config.json')]; const dirs: string[] = []; let current = resolve(process.cwd()); let foundWorktree = false;
-  while (true) { dirs.push(current); if (existsSync(join(current, '.git'))) { foundWorktree = true; break; } const parent = dirname(current); if (parent === current) break; current = parent; }
-  for (const dir of (foundWorktree ? dirs.reverse() : [dirs[0]!])) paths.push(join(dir, 'zcode.json'), join(dir, '.zcode', 'config.json'));
-  return paths.filter(existsSync);
-}
-function text(value: unknown): string | undefined { return typeof value === 'string' && value.length > 0 ? value : undefined; }
-function isObject(value: unknown): value is Record<string, unknown> { return typeof value === 'object' && value !== null && !Array.isArray(value); }