skillops-cli 0.0.0-stage → 1.2.1

package/dist/cli.js

@@ -0,0 +1,4578 @@
+#!/usr/bin/env node
+
+// src/cli.ts
+import fs9 from "fs";
+import path9 from "path";
+import { fileURLToPath, pathToFileURL } from "url";
+import YAML5 from "yaml";
+
+// src/auditor/parser.ts
+import fs2 from "fs";
+import path from "path";
+
+// src/models.ts
+import fs from "fs";
+import YAML from "yaml";
+import { z } from "zod";
+var SKILLOPS_VERSION = "1.2.1";
+var SKILL_NAME_REGEX = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var SEMVER_REGEX = /^\d+\.\d+\.\d+$/;
+var FRONTMATTER_REGEX = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/;
+var WORD_REGEX = /\S+/g;
+var PUNCT_CODE_REGEX = /[{}[\]()<>:;,.=`~@#$%^&*|\\/]/g;
+function countWords(text) {
+  const matches = text.match(WORD_REGEX);
+  return matches ? matches.length : 0;
+}
+function estimateTokenCount(text) {
+  const stripped = text.trim();
+  if (!stripped) {
+    return 0;
+  }
+  const words = countWords(stripped);
+  const punctBonus = Math.floor((stripped.match(PUNCT_CODE_REGEX)?.length ?? 0) / 4);
+  return Math.max(1, Math.ceil(words * 1.33) + punctBonus);
+}
+function splitFrontmatter(rawText, sourceLabel) {
+  const match = FRONTMATTER_REGEX.exec(rawText);
+  if (!match) {
+    throw new Error(
+      `Document at '${sourceLabel}' is missing valid YAML frontmatter delimited by '---'.`
+    );
+  }
+  const yamlText = match[1] ?? "";
+  const body = match[2] ?? "";
+  const parsed = YAML.parse(yamlText);
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error(`YAML frontmatter in '${sourceLabel}' must evaluate to a key-value mapping.`);
+  }
+  return [parsed, body];
+}
+var ExitCode = {
+  SUCCESS: 0,
+  ERROR: 1,
+  COLLISION_ERROR: 2,
+  BUDGET_OR_CONTRACT_ERROR: 3,
+  EVAL_REGRESSION_ERROR: 4
+};
+var CatalogTrackSchema = z.enum([
+  "ai-engineering",
+  "python-backend",
+  "arch-quality",
+  "token-economy"
+]);
+var CollisionSeveritySchema = z.enum([
+  "SAFE",
+  "WARNING",
+  "HIGH_RISK",
+  "BLOCKING_ERROR"
+]);
+var RuntimeTargetSchema = z.enum([
+  "claude",
+  "antigravity",
+  "cursor",
+  "codex",
+  "copilot",
+  "windsurf",
+  "cline",
+  "roocode",
+  "kilocode",
+  "zed",
+  "continue",
+  "aider",
+  "openhands",
+  "amp",
+  "goose",
+  "opencode",
+  "kiro",
+  "trae",
+  "amazonq",
+  "junie"
+]);
+var CORE_RUNTIME_TARGETS = [
+  "claude",
+  "antigravity",
+  "cursor",
+  "codex",
+  "copilot"
+];
+var ALL_RUNTIME_TARGETS = [
+  "claude",
+  "antigravity",
+  "cursor",
+  "codex",
+  "copilot",
+  "windsurf",
+  "cline",
+  "roocode",
+  "kilocode",
+  "zed",
+  "continue",
+  "aider",
+  "openhands",
+  "amp",
+  "goose",
+  "opencode",
+  "kiro",
+  "trae",
+  "amazonq",
+  "junie"
+];
+var RUNTIME_HARNESS_SPECS = {
+  claude: {
+    id: "claude",
+    displayName: "Anthropic Claude Code",
+    vendor: "Anthropic",
+    category: "cli-agent",
+    skillFormat: "progressive-skill-dir",
+    skillsDir: ".claude/skills",
+    subagentsDir: ".claude/agents",
+    detectionPaths: [".claude", "CLAUDE.md", ".mcp.json"],
+    alwaysOnFiles: ["CLAUDE.md", ".claude/CLAUDE.md"],
+    mcpConfigPath: ".mcp.json",
+    supportsMcp: true
+  },
+  antigravity: {
+    id: "antigravity",
+    displayName: "Google Antigravity / Gemini CLI",
+    vendor: "Google DeepMind",
+    category: "ai-ide",
+    skillFormat: "progressive-skill-dir",
+    skillsDir: ".agent/skills",
+    subagentsDir: ".agent/agents",
+    detectionPaths: [".agent", ".gemini", "GEMINI.md"],
+    alwaysOnFiles: ["GEMINI.md", ".gemini/GEMINI.md"],
+    mcpConfigPath: ".gemini/settings.json",
+    supportsMcp: true
+  },
+  cursor: {
+    id: "cursor",
+    displayName: "Cursor AI IDE",
+    vendor: "Anysphere",
+    category: "ai-ide",
+    skillFormat: "mdc-rule",
+    skillsDir: ".cursor/rules",
+    subagentsDir: ".cursor/rules",
+    detectionPaths: [".cursor", ".cursorrules"],
+    alwaysOnFiles: [".cursorrules"],
+    mcpConfigPath: ".cursor/mcp.json",
+    supportsMcp: true
+  },
+  codex: {
+    id: "codex",
+    displayName: "OpenAI Codex CLI",
+    vendor: "OpenAI",
+    category: "cli-agent",
+    skillFormat: "progressive-skill-dir",
+    skillsDir: ".codex/skills",
+    subagentsDir: ".codex/agents",
+    detectionPaths: [".codex", "AGENTS.md"],
+    alwaysOnFiles: ["AGENTS.md"],
+    mcpConfigPath: ".codex/config.toml",
+    supportsMcp: true
+  },
+  copilot: {
+    id: "copilot",
+    displayName: "GitHub Copilot",
+    vendor: "GitHub / Microsoft",
+    category: "ide-extension",
+    skillFormat: "copilot-instructions",
+    skillsDir: ".github/instructions",
+    subagentsDir: ".github/agents",
+    detectionPaths: [
+      ".github/copilot-instructions.md",
+      ".github/instructions",
+      ".github/prompts",
+      ".github/agents"
+    ],
+    alwaysOnFiles: [".github/copilot-instructions.md"],
+    mcpConfigPath: ".vscode/mcp.json",
+    supportsMcp: true
+  },
+  windsurf: {
+    id: "windsurf",
+    displayName: "Windsurf AI IDE",
+    vendor: "Codeium / Windsurf",
+    category: "ai-ide",
+    skillFormat: "markdown-rule",
+    skillsDir: ".windsurf/rules",
+    subagentsDir: ".windsurf/workflows",
+    detectionPaths: [".windsurf", ".windsurfrules"],
+    alwaysOnFiles: [".windsurfrules"],
+    mcpConfigPath: null,
+    supportsMcp: false
+  },
+  cline: {
+    id: "cline",
+    displayName: "Cline Autonomous Coding Agent",
+    vendor: "Cline",
+    category: "ide-extension",
+    skillFormat: "markdown-rule",
+    skillsDir: ".clinerules",
+    subagentsDir: ".clinerules/workflows",
+    detectionPaths: [".clinerules", ".cline"],
+    alwaysOnFiles: [".clinerules"],
+    mcpConfigPath: null,
+    supportsMcp: false
+  },
+  roocode: {
+    id: "roocode",
+    displayName: "Roo Code",
+    vendor: "Roo Veterinary",
+    category: "ide-extension",
+    skillFormat: "markdown-rule",
+    skillsDir: ".roo/rules",
+    subagentsDir: ".roo/rules-architect",
+    detectionPaths: [".roo", ".roorules", ".roomodes"],
+    alwaysOnFiles: [".roorules"],
+    mcpConfigPath: ".roo/mcp.json",
+    supportsMcp: true
+  },
+  kilocode: {
+    id: "kilocode",
+    displayName: "Kilo Code",
+    vendor: "Kilo Org",
+    category: "ide-extension",
+    skillFormat: "markdown-rule",
+    skillsDir: ".kilocode/rules",
+    subagentsDir: ".kilocode/workflows",
+    detectionPaths: [".kilocode", ".kilocoderules", ".kilocodemodes"],
+    alwaysOnFiles: [".kilocoderules"],
+    mcpConfigPath: ".kilocode/mcp.json",
+    supportsMcp: true
+  },
+  zed: {
+    id: "zed",
+    displayName: "Zed AI",
+    vendor: "Zed Industries",
+    category: "ai-ide",
+    skillFormat: "markdown-rule",
+    skillsDir: ".zed/rules",
+    subagentsDir: ".zed/rules",
+    detectionPaths: [".zed", ".rules"],
+    alwaysOnFiles: [".rules"],
+    mcpConfigPath: ".zed/settings.json",
+    supportsMcp: true
+  },
+  continue: {
+    id: "continue",
+    displayName: "Continue.dev",
+    vendor: "Continue",
+    category: "ide-extension",
+    skillFormat: "markdown-rule",
+    skillsDir: ".continue/rules",
+    subagentsDir: ".continue/prompts",
+    detectionPaths: [".continue", ".continuerules"],
+    alwaysOnFiles: [".continuerules"],
+    mcpConfigPath: ".continue/mcpServers/skillops.yaml",
+    supportsMcp: true
+  },
+  aider: {
+    id: "aider",
+    displayName: "Aider AI Pair Programmer",
+    vendor: "Aider",
+    category: "cli-agent",
+    skillFormat: "markdown-rule",
+    skillsDir: ".aider/conventions",
+    subagentsDir: ".aider/conventions",
+    detectionPaths: [".aider", ".aider.conf.yml", "CONVENTIONS.md"],
+    alwaysOnFiles: ["CONVENTIONS.md"],
+    mcpConfigPath: null,
+    supportsMcp: false
+  },
+  openhands: {
+    id: "openhands",
+    displayName: "OpenHands (All Hands AI)",
+    vendor: "All Hands AI",
+    category: "autonomous-swe",
+    skillFormat: "openhands-microagent",
+    skillsDir: ".openhands/microagents",
+    subagentsDir: ".openhands/microagents",
+    detectionPaths: [".openhands"],
+    alwaysOnFiles: [".openhands/microagents/repo.md"],
+    mcpConfigPath: null,
+    supportsMcp: false
+  },
+  amp: {
+    id: "amp",
+    displayName: "Sourcegraph Amp",
+    vendor: "Sourcegraph",
+    category: "cli-agent",
+    skillFormat: "progressive-skill-dir",
+    skillsDir: ".amp/skills",
+    subagentsDir: ".amp/agents",
+    detectionPaths: [".amp", "AGENT.md"],
+    alwaysOnFiles: ["AGENT.md"],
+    mcpConfigPath: ".amp/settings.json",
+    supportsMcp: true
+  },
+  goose: {
+    id: "goose",
+    displayName: "Block Goose",
+    vendor: "Block",
+    category: "cli-agent",
+    skillFormat: "progressive-skill-dir",
+    skillsDir: ".goose/skills",
+    subagentsDir: ".goose/agents",
+    detectionPaths: [".goose", ".goosehints"],
+    alwaysOnFiles: [".goosehints"],
+    mcpConfigPath: null,
+    supportsMcp: false
+  },
+  opencode: {
+    id: "opencode",
+    displayName: "OpenCode CLI",
+    vendor: "SST / OpenCode",
+    category: "cli-agent",
+    skillFormat: "progressive-skill-dir",
+    skillsDir: ".opencode/skills",
+    subagentsDir: ".opencode/agent",
+    detectionPaths: [".opencode", "opencode.json"],
+    alwaysOnFiles: [],
+    mcpConfigPath: "opencode.json",
+    supportsMcp: true
+  },
+  kiro: {
+    id: "kiro",
+    displayName: "AWS Kiro IDE",
+    vendor: "Amazon Web Services",
+    category: "ai-ide",
+    skillFormat: "kiro-steering",
+    skillsDir: ".kiro/steering",
+    subagentsDir: ".kiro/agents",
+    detectionPaths: [".kiro"],
+    alwaysOnFiles: [
+      ".kiro/steering/product.md",
+      ".kiro/steering/tech.md",
+      ".kiro/steering/structure.md"
+    ],
+    mcpConfigPath: ".kiro/settings/mcp.json",
+    supportsMcp: true
+  },
+  trae: {
+    id: "trae",
+    displayName: "Trae AI IDE",
+    vendor: "ByteDance / Trae",
+    category: "ai-ide",
+    skillFormat: "markdown-rule",
+    skillsDir: ".trae/rules",
+    subagentsDir: ".trae/agents",
+    detectionPaths: [".trae"],
+    alwaysOnFiles: [".trae/rules/project_rules.md"],
+    mcpConfigPath: null,
+    supportsMcp: false
+  },
+  amazonq: {
+    id: "amazonq",
+    displayName: "Amazon Q Developer",
+    vendor: "Amazon Web Services",
+    category: "ide-extension",
+    skillFormat: "markdown-rule",
+    skillsDir: ".amazonq/rules",
+    subagentsDir: ".amazonq/cli-agents",
+    detectionPaths: [".amazonq"],
+    alwaysOnFiles: [],
+    mcpConfigPath: ".amazonq/mcp.json",
+    supportsMcp: true
+  },
+  junie: {
+    id: "junie",
+    displayName: "JetBrains Junie / AI Assistant",
+    vendor: "JetBrains",
+    category: "ide-extension",
+    skillFormat: "markdown-rule",
+    skillsDir: ".junie/skills",
+    subagentsDir: ".junie/agents",
+    detectionPaths: [".junie", ".aiassistant"],
+    alwaysOnFiles: [".junie/guidelines.md"],
+    mcpConfigPath: null,
+    supportsMcp: false
+  }
+};
+function detectInstalledHarnesses(repoPath) {
+  const normalizedRoot = repoPath.replace(/\\/g, "/").replace(/\/+$/, "");
+  const detected = [];
+  for (const target of ALL_RUNTIME_TARGETS) {
+    const spec = RUNTIME_HARNESS_SPECS[target];
+    const hasMatch = spec.detectionPaths.some(
+      (relPath) => fs.existsSync(`${normalizedRoot}/${relPath}`)
+    );
+    if (hasMatch) {
+      detected.push(target);
+    }
+  }
+  return detected;
+}
+function resolveRuntimeTargets(rawSpec, repoPath, fallbackTargets = CORE_RUNTIME_TARGETS) {
+  if (!rawSpec) {
+    return [...fallbackTargets];
+  }
+  const tokens = (Array.isArray(rawSpec) ? rawSpec : [rawSpec]).flatMap((item) => String(item).split(",")).map((s) => s.trim().toLowerCase()).filter(Boolean);
+  if (tokens.length === 0) {
+    return [...fallbackTargets];
+  }
+  const resolved = [];
+  const pushUnique = (target) => {
+    if (!resolved.includes(target)) {
+      resolved.push(target);
+    }
+  };
+  for (const token of tokens) {
+    if (token === "all" || token === "*" || token === "top20") {
+      for (const t of ALL_RUNTIME_TARGETS) {
+        pushUnique(t);
+      }
+    } else if (token === "core" || token === "default") {
+      for (const t of CORE_RUNTIME_TARGETS) {
+        pushUnique(t);
+      }
+    } else if (token === "auto") {
+      const detected = repoPath ? detectInstalledHarnesses(repoPath) : [];
+      const autoList = detected.length > 0 ? detected : fallbackTargets;
+      for (const t of autoList) {
+        pushUnique(t);
+      }
+    } else {
+      pushUnique(RuntimeTargetSchema.parse(token));
+    }
+  }
+  return resolved;
+}
+var RoutingSignalsSchema = z.object({
+  languages: z.array(z.string()).default([]),
+  files_any: z.array(z.string()).default([]),
+  dependencies_any: z.array(z.string()).default([]),
+  negative_triggers: z.array(z.string()).default([])
+}).strict();
+var ScriptEntrypointSchema = z.object({
+  path: z.string().min(1).transform((val) => val.replace(/\\/g, "/").replace(/^\/+|\/+$/g, "")).refine(
+    (val) => val.startsWith("scripts/") && (val.endsWith(".py") || val.endsWith(".mjs") || val.endsWith(".js") || val.endsWith(".ts")),
+    {
+      message: "Script entrypoint path must reside under 'scripts/' (.py, .mjs, .js, or .ts)."
+    }
+  ),
+  description: z.string().min(10)
+}).strict();
+var SkillEntrypointsSchema = z.object({
+  scripts: z.array(ScriptEntrypointSchema).min(1)
+}).strict();
+var SkillManifestSchema = z.object({
+  name: z.string().regex(SKILL_NAME_REGEX, {
+    message: "Skill name must be lowercase kebab-case (e.g., 'mcp-architect')."
+  }),
+  description: z.string().transform((val) => val.trim().replace(/\s+/g, " ")).superRefine((cleaned, ctx) => {
+    if (!cleaned.startsWith("Use when")) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: "Skill description must start with 'Use when' per SKILL_CONTRACT.md \xA74.2."
+      });
+    }
+    const words = countWords(cleaned);
+    if (words < 40 || words > 110) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `Skill description must contain between 40 and 110 words per INV-SKILL-01 (got ${words} words).`
+      });
+    }
+    const tokens = estimateTokenCount(cleaned);
+    if (tokens > 160) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `Skill description exceeds Level 1 budget of 160 tokens per INV-SKILL-01 (estimated ${tokens} tokens).`
+      });
+    }
+  }),
+  version: z.string().regex(SEMVER_REGEX).default("1.0.0"),
+  track: CatalogTrackSchema,
+  tags: z.array(z.string().min(1)).min(1),
+  routing_signals: RoutingSignalsSchema.default({
+    languages: [],
+    files_any: [],
+    dependencies_any: [],
+    negative_triggers: []
+  }),
+  entrypoints: SkillEntrypointsSchema,
+  body_lines: z.number().int().min(0).max(250).default(0),
+  body_tokens: z.number().int().min(0).max(1800).default(0)
+}).strict();
+function createSkillManifest(input) {
+  const parsed = SkillManifestSchema.parse(input);
+  return {
+    ...parsed,
+    description_words: countWords(parsed.description),
+    description_tokens: estimateTokenCount(parsed.description)
+  };
+}
+function parseSkillMdFile(filePath) {
+  const rawText = fs.readFileSync(filePath, "utf-8");
+  const normalizedPath = filePath.replace(/\\/g, "/");
+  const totalLines = rawText.split(/\r?\n/).length;
+  const effectiveTotalLines = rawText.endsWith("\n") ? totalLines - 1 : totalLines;
+  if (effectiveTotalLines > 250) {
+    throw new Error(
+      `SKILL.md at '${normalizedPath}' has ${effectiveTotalLines} lines, exceeding INV-SKILL-01 maximum of 250 lines.`
+    );
+  }
+  const [frontmatter, body] = splitFrontmatter(rawText, normalizedPath);
+  const bodyLines = body ? body.endsWith("\n") ? body.split(/\r?\n/).length - 1 : body.split(/\r?\n/).length : 0;
+  const bodyTokens = estimateTokenCount(body);
+  return createSkillManifest({
+    ...frontmatter,
+    body_lines: bodyLines,
+    body_tokens: bodyTokens
+  });
+}
+var FORBIDDEN_WILDCARD_TOOLS = /* @__PURE__ */ new Set(["*", "all", "any", "**"]);
+var SubagentManifestSchema = z.object({
+  name: z.string().regex(SKILL_NAME_REGEX, {
+    message: "Subagent name must be lowercase kebab-case (e.g., 'context-scout')."
+  }),
+  description: z.string().transform((val) => val.trim().replace(/\s+/g, " ")).superRefine((cleaned, ctx) => {
+    const words = countWords(cleaned);
+    if (words < 10 || words > 110) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `Subagent description must contain between 10 and 110 words (got ${words} words).`
+      });
+    }
+    const tokens = estimateTokenCount(cleaned);
+    if (tokens > 160) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `Subagent description exceeds Level 1 budget of 160 tokens (estimated ${tokens} tokens).`
+      });
+    }
+  }),
+  tools: z.array(z.string().min(1)).min(1, { message: "Subagent must declare an explicit non-empty tool allowlist per INV-SKILL-04." }).superRefine((tools, ctx) => {
+    for (const tool of tools) {
+      if (FORBIDDEN_WILDCARD_TOOLS.has(tool.trim().toLowerCase())) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          message: `Subagent tool allowlist cannot contain wildcard '${tool}' per INV-SKILL-04 least-privilege guarantee.`
+        });
+      }
+    }
+  }),
+  user_invocable: z.boolean().default(true),
+  context_isolation: z.boolean().default(true),
+  max_output_tokens: z.number().int().min(50).max(400).default(400),
+  model_tier: z.enum(["inherit", "fast", "reasoning"]).default("inherit"),
+  tags: z.array(z.string().min(1)).default([]),
+  system_prompt_lines: z.number().int().min(1).max(180).default(1),
+  system_prompt_tokens: z.number().int().min(1).max(1e3).default(1)
+}).strict();
+function createSubagentManifest(input) {
+  const normalized = { ...input };
+  if ("user-invocable" in normalized && !("user_invocable" in normalized)) {
+    normalized.user_invocable = normalized["user-invocable"];
+    delete normalized["user-invocable"];
+  }
+  if ("context-isolation" in normalized && !("context_isolation" in normalized)) {
+    normalized.context_isolation = normalized["context-isolation"];
+    delete normalized["context-isolation"];
+  }
+  if ("max-output-tokens" in normalized && !("max_output_tokens" in normalized)) {
+    normalized.max_output_tokens = normalized["max-output-tokens"];
+    delete normalized["max-output-tokens"];
+  }
+  if ("model-tier" in normalized && !("model_tier" in normalized)) {
+    normalized.model_tier = normalized["model-tier"];
+    delete normalized["model-tier"];
+  }
+  const parsed = SubagentManifestSchema.parse(normalized);
+  return {
+    ...parsed,
+    description_tokens: estimateTokenCount(parsed.description)
+  };
+}
+function parseSubagentMdFile(filePath) {
+  const rawText = fs.readFileSync(filePath, "utf-8");
+  const normalizedPath = filePath.replace(/\\/g, "/");
+  const [frontmatter, body] = splitFrontmatter(rawText, normalizedPath);
+  const trimmedBody = body.trim();
+  const promptLines = trimmedBody ? trimmedBody.split(/\r?\n/).length : 1;
+  const promptTokens = Math.max(1, estimateTokenCount(trimmedBody));
+  const manifest = createSubagentManifest({
+    ...frontmatter,
+    system_prompt_lines: promptLines,
+    system_prompt_tokens: promptTokens
+  });
+  return { manifest, systemPromptBody: trimmedBody };
+}
+function classifyCollisionSeverity(similarity) {
+  if (similarity >= 0.85) {
+    return "BLOCKING_ERROR";
+  }
+  if (similarity >= 0.72) {
+    return "HIGH_RISK";
+  }
+  if (similarity >= 0.58) {
+    return "WARNING";
+  }
+  return "SAFE";
+}
+var CollisionPairSchema = z.object({
+  skill_a: z.string().min(1),
+  skill_b: z.string().min(1),
+  similarity: z.number().min(0).max(1),
+  severity: CollisionSeveritySchema,
+  shared_terms: z.array(z.string()).default([])
+}).strict();
+function createCollisionPair(skillA, skillB, similarity, sharedTerms = []) {
+  const [orderedA, orderedB] = skillA <= skillB ? [skillA, skillB] : [skillB, skillA];
+  const clamped = Math.min(1, Math.max(0, Number(similarity.toFixed(4))));
+  return CollisionPairSchema.parse({
+    skill_a: orderedA,
+    skill_b: orderedB,
+    similarity: clamped,
+    severity: classifyCollisionSeverity(clamped),
+    shared_terms: [...new Set(sharedTerms)].sort()
+  });
+}
+var CollisionReportSchema = z.object({
+  catalog_path: z.string(),
+  skills_audited: z.number().int().min(0),
+  subagents_audited: z.number().int().min(0).default(0),
+  total_l1_tokens: z.number().int().min(0),
+  max_similarity: z.number().min(0).max(1).default(0),
+  pairs: z.array(CollisionPairSchema).default([]),
+  budget_errors: z.array(z.string()).default([])
+}).strict();
+function createCollisionReport(input) {
+  const parsed = CollisionReportSchema.parse(input);
+  const blocking = parsed.pairs.filter((p) => p.severity === "BLOCKING_ERROR");
+  const highRisk = parsed.pairs.filter((p) => p.severity === "HIGH_RISK");
+  const warnings = parsed.pairs.filter((p) => p.severity === "WARNING");
+  return {
+    ...parsed,
+    blocking_collisions: blocking,
+    high_risk_collisions: highRisk,
+    warning_collisions: warnings,
+    passed: parsed.budget_errors.length === 0 && blocking.length === 0
+  };
+}
+var TokenFileCategorySchema = z.enum([
+  "always_on_instructions",
+  "always_on_cursor_rule",
+  "mcp_schema_tax",
+  "skill_l1_metadata",
+  "skill_l2_body",
+  "skill_l3_script",
+  "subagent_definition"
+]);
+var TokenFileEntrySchema = z.object({
+  path: z.string().min(1),
+  category: TokenFileCategorySchema,
+  always_loaded_on_startup: z.boolean(),
+  lines: z.number().int().min(0),
+  estimated_tokens: z.number().int().min(0),
+  notes: z.string().default("")
+}).strict();
+var TokenWasteHotspotSchema = z.object({
+  path: z.string().min(1),
+  severity: z.enum(["LOW", "MEDIUM", "HIGH", "CRITICAL"]),
+  wasted_tokens: z.number().int().min(0),
+  issue: z.string().min(1),
+  recommendation: z.string().min(1)
+}).strict();
+var TokenEconomyReportSchema = z.object({
+  repo_path: z.string().min(1),
+  catalog_path: z.string().min(1),
+  startup_token_tax: z.number().int().min(0),
+  startup_tax_budget: z.number().int().min(100).default(2500),
+  monolithic_equivalent_tokens: z.number().int().min(0),
+  progressive_disclosure_l1_tokens: z.number().int().min(0),
+  zero_token_l3_scripts_count: z.number().int().min(0),
+  context_isolated_subagents_count: z.number().int().min(0),
+  estimated_tokens_saved: z.number().int().min(0),
+  token_savings_pct: z.number().min(0).max(100),
+  inspected_files: z.array(TokenFileEntrySchema).default([]),
+  hotspots: z.array(TokenWasteHotspotSchema).default([]),
+  passed_budget: z.boolean()
+}).strict();
+var RepoProfileSchema = z.object({
+  repo_path: z.string().min(1),
+  languages: z.array(z.string()).default([]),
+  frameworks: z.array(z.string()).default([]),
+  databases: z.array(z.string()).default([]),
+  dependencies: z.array(z.string()).default([]),
+  ci_systems: z.array(z.string()).default([]),
+  detected_files: z.array(z.string()).default([]),
+  signals: z.array(z.string()).default([]),
+  detected_harnesses: z.array(RuntimeTargetSchema).default([]),
+  python_312_plus: z.boolean().default(false)
+}).strict();
+var ScoredSkillSchema = z.object({
+  name: z.string().min(1),
+  track: CatalogTrackSchema,
+  skill_dir: z.string().min(1),
+  relevance_score: z.number().min(0).max(100),
+  l1_tokens: z.number().int().min(0),
+  matched_signals: z.array(z.string()).default([])
+}).strict();
+var SkippedSkillSchema = z.object({
+  name: z.string().min(1),
+  track: CatalogTrackSchema,
+  relevance_score: z.number().min(0).max(100),
+  reason: z.string().min(1)
+}).strict();
+var RoutedBundleSchema = z.object({
+  repo_profile: RepoProfileSchema,
+  catalog_path: z.string().min(1),
+  max_skills: z.number().int().min(1).max(12).default(12),
+  max_l1_tokens: z.number().int().min(40).default(1500),
+  max_similarity: z.number().min(0.1).max(0.99).default(0.78),
+  selected_skills: z.array(ScoredSkillSchema).default([]),
+  recommended_subagents: z.array(z.string()).default([]),
+  skipped_skills: z.array(SkippedSkillSchema).default([]),
+  total_l1_tokens: z.number().int().min(0).default(0),
+  max_pairwise_similarity: z.number().min(0).max(1).default(0),
+  passed_invariants: z.boolean().default(true)
+}).strict();
+var SyncedArtifactSchema = z.object({
+  target: RuntimeTargetSchema,
+  skill_name: z.string().min(1),
+  relative_path: z.string().min(1),
+  sha256: z.string().regex(/^[0-9a-f]{64}$/),
+  action: z.enum(["created", "updated", "unchanged", "removed", "planned", "conflict"])
+}).strict();
+var SyncLockEntrySchema = z.object({
+  target: RuntimeTargetSchema,
+  skill_name: z.string().min(1),
+  relative_path: z.string().min(1),
+  sha256: z.string().regex(/^[0-9a-f]{64}$/)
+}).strict();
+var SyncLockfileSchema = z.object({
+  schema_version: z.string().default("1.0"),
+  skillops_version: z.string().min(1),
+  targets: z.array(RuntimeTargetSchema).default([]),
+  selected_skills: z.array(z.string()).default([]),
+  selected_subagents: z.array(z.string()).default([]),
+  total_l1_tokens: z.number().int().min(0).default(0),
+  artifacts: z.record(z.string(), SyncLockEntrySchema).default({})
+}).strict();
+var SyncReportSchema = z.object({
+  repo_path: z.string().min(1),
+  catalog_path: z.string().min(1),
+  targets: z.array(RuntimeTargetSchema).default([]),
+  dry_run: z.boolean().default(false),
+  force: z.boolean().default(false),
+  routed_bundle: RoutedBundleSchema,
+  artifacts: z.array(SyncedArtifactSchema).default([]),
+  drift_conflicts: z.array(z.string()).default([]),
+  lockfile_path: z.string().min(1),
+  passed: z.boolean().default(true)
+}).strict();
+var SkillOpsTokenEconomyConfigSchema = z.object({
+  startup_tax_budget: z.number().int().min(100).default(2500),
+  max_active_skills: z.number().int().min(1).max(12).default(12),
+  max_l1_tokens: z.number().int().min(40).default(1500),
+  max_similarity: z.number().min(0.1).max(0.99).default(0.78)
+}).strict();
+var SkillOpsDetectedStackConfigSchema = z.object({
+  languages: z.array(z.string()).default([]),
+  frameworks: z.array(z.string()).default([])
+}).strict();
+var SkillOpsConfigSchema = z.object({
+  version: z.string().min(1).default("1.0"),
+  catalog_dir: z.string().min(1).default("catalog"),
+  token_economy: SkillOpsTokenEconomyConfigSchema.default({
+    startup_tax_budget: 2500,
+    max_active_skills: 12,
+    max_l1_tokens: 1500,
+    max_similarity: 0.78
+  }),
+  detected_stack: SkillOpsDetectedStackConfigSchema.default({
+    languages: [],
+    frameworks: []
+  }),
+  targets: z.array(RuntimeTargetSchema).min(1).default([...CORE_RUNTIME_TARGETS])
+}).strict();
+function loadSkillOpsConfig(repoPath) {
+  const configPath = `${repoPath.replace(/\\/g, "/").replace(/\/+$/, "")}/.skillops.yml`;
+  if (!fs.existsSync(configPath) || !fs.statSync(configPath).isFile()) {
+    return {
+      config: null,
+      configPath,
+      exists: false,
+      error: null
+    };
+  }
+  try {
+    const rawYaml = fs.readFileSync(configPath, "utf-8");
+    const parsedYaml = YAML.parse(rawYaml);
+    const validated = SkillOpsConfigSchema.parse(parsedYaml);
+    return {
+      config: validated,
+      configPath,
+      exists: true,
+      error: null
+    };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return {
+      config: null,
+      configPath,
+      exists: true,
+      error: message
+    };
+  }
+}
+
+// src/auditor/parser.ts
+function walkForFilesNamed(rootDir, targetFilename) {
+  if (!fs2.existsSync(rootDir)) {
+    return [];
+  }
+  const results = [];
+  const entries = fs2.readdirSync(rootDir, { withFileTypes: true });
+  for (const entry of entries) {
+    const fullPath = path.join(rootDir, entry.name);
+    if (entry.isDirectory()) {
+      if (entry.name.startsWith(".") || entry.name === "node_modules" || entry.name === "dist") {
+        continue;
+      }
+      results.push(...walkForFilesNamed(fullPath, targetFilename));
+    } else if (entry.isFile() && entry.name === targetFilename) {
+      results.push(fullPath);
+    }
+  }
+  return results.sort();
+}
+function discoverSkillDirectories(catalogDir) {
+  const skillMdFiles = walkForFilesNamed(catalogDir, "SKILL.md");
+  return skillMdFiles.map((file) => path.dirname(file)).sort();
+}
+function parseSkillDirectory(skillDir, options = {}) {
+  const requireLayout = options.requireLayout ?? true;
+  const skillMdPath = path.join(skillDir, "SKILL.md");
+  if (!fs2.existsSync(skillMdPath)) {
+    throw new Error(`Missing SKILL.md in '${skillDir.replace(/\\/g, "/")}'.`);
+  }
+  const rawText = fs2.readFileSync(skillMdPath, "utf-8");
+  const lines = rawText.split(/\r?\n/);
+  const totalLines = rawText.endsWith("\n") ? lines.length - 1 : lines.length;
+  const [, markdownBody] = splitFrontmatter(rawText, skillMdPath.replace(/\\/g, "/"));
+  const manifest = parseSkillMdFile(skillMdPath);
+  const declaredScripts = [];
+  const missingDeclaredScripts = [];
+  const declaredRelSet = /* @__PURE__ */ new Set();
+  for (const scriptEntry of manifest.entrypoints.scripts) {
+    declaredRelSet.add(scriptEntry.path);
+    const fullScriptPath = path.join(skillDir, scriptEntry.path);
+    if (fs2.existsSync(fullScriptPath) && fs2.statSync(fullScriptPath).isFile()) {
+      declaredScripts.push(fullScriptPath);
+    } else {
+      missingDeclaredScripts.push(scriptEntry.path);
+    }
+  }
+  if (requireLayout && missingDeclaredScripts.length > 0) {
+    throw new Error(
+      `Skill '${manifest.name}' declares missing Level 3 script(s): ${missingDeclaredScripts.join(", ")}`
+    );
+  }
+  const scriptsDir = path.join(skillDir, "scripts");
+  const extraScripts = [];
+  if (fs2.existsSync(scriptsDir) && fs2.statSync(scriptsDir).isDirectory()) {
+    for (const entry of fs2.readdirSync(scriptsDir, { withFileTypes: true })) {
+      if (entry.isFile() && (entry.name.endsWith(".py") || entry.name.endsWith(".mjs") || entry.name.endsWith(".js") || entry.name.endsWith(".ts"))) {
+        const rel = `scripts/${entry.name}`;
+        if (!declaredRelSet.has(rel)) {
+          extraScripts.push(path.join(scriptsDir, entry.name));
+        }
+      }
+    }
+  }
+  const referencesDir = path.join(skillDir, "references");
+  const referenceFiles = [];
+  if (fs2.existsSync(referencesDir) && fs2.statSync(referencesDir).isDirectory()) {
+    for (const entry of fs2.readdirSync(referencesDir, { withFileTypes: true })) {
+      if (entry.isFile() && entry.name.endsWith(".md")) {
+        referenceFiles.push(path.join(referencesDir, entry.name));
+      }
+    }
+  }
+  const candidateEvalsPath = path.join(skillDir, "evals", "evals.json");
+  const evalsPath = fs2.existsSync(candidateEvalsPath) && fs2.statSync(candidateEvalsPath).isFile() ? candidateEvalsPath : null;
+  if (requireLayout && !evalsPath) {
+    throw new Error(
+      `Skill '${manifest.name}' is missing required 'evals/evals.json' suite per SKILL_CONTRACT.md.`
+    );
+  }
+  return {
+    skillDir,
+    skillMdPath,
+    manifest,
+    rawText,
+    markdownBody,
+    totalLines,
+    declaredScripts: declaredScripts.sort(),
+    missingDeclaredScripts: missingDeclaredScripts.sort(),
+    extraScripts: extraScripts.sort(),
+    referenceFiles: referenceFiles.sort(),
+    evalsPath
+  };
+}
+function discoverSubagentFiles(repoOrCatalogRoot) {
+  const results = /* @__PURE__ */ new Set();
+  const candidates = [
+    path.join(repoOrCatalogRoot, "subagents"),
+    path.join(repoOrCatalogRoot, "catalog", "subagents"),
+    path.join(repoOrCatalogRoot, ".github", "agents"),
+    path.join(path.dirname(repoOrCatalogRoot), ".github", "agents")
+  ];
+  for (const dir of candidates) {
+    if (!fs2.existsSync(dir) || !fs2.statSync(dir).isDirectory()) {
+      continue;
+    }
+    const stack = [dir];
+    while (stack.length > 0) {
+      const current = stack.pop();
+      for (const entry of fs2.readdirSync(current, { withFileTypes: true })) {
+        const full = path.join(current, entry.name);
+        if (entry.isDirectory()) {
+          stack.push(full);
+        } else if (entry.isFile() && (entry.name === "SUBAGENT.md" || entry.name === "AGENT.md" || entry.name.endsWith(".agent.md"))) {
+          results.add(path.resolve(full));
+        }
+      }
+    }
+  }
+  return [...results].sort();
+}
+function parseSubagentFile(filePath) {
+  const rawText = fs2.readFileSync(filePath, "utf-8");
+  const { manifest, systemPromptBody } = parseSubagentMdFile(filePath);
+  return {
+    filePath,
+    manifest,
+    systemPromptBody,
+    rawText
+  };
+}
+
+// src/auditor/token_budget.ts
+function auditSkillTokenBudget(skillDir, options = {}) {
+  const requireLayout = options.requireLayout ?? false;
+  try {
+    const parsed = parseSkillDirectory(skillDir, { requireLayout });
+    const warnings = [];
+    const errors = [];
+    if (parsed.manifest.routing_signals.negative_triggers.length === 0 && !parsed.manifest.description.toLowerCase().includes("do not trigger")) {
+      warnings.push(
+        `Skill '${parsed.manifest.name}' has no explicit negative triggers ('Do not trigger for...' or routing_signals.negative_triggers).`
+      );
+    }
+    if (requireLayout && parsed.missingDeclaredScripts.length > 0) {
+      errors.push(
+        `Skill '${parsed.manifest.name}' is missing declared script(s): ${parsed.missingDeclaredScripts.join(", ")}`
+      );
+    }
+    return {
+      skillName: parsed.manifest.name,
+      skillDir: skillDir.replace(/\\/g, "/"),
+      l1Words: parsed.manifest.description_words,
+      l1Tokens: parsed.manifest.description_tokens,
+      l2Lines: parsed.manifest.body_lines,
+      l2Tokens: parsed.manifest.body_tokens,
+      totalLines: parsed.totalLines,
+      scriptsCount: parsed.declaredScripts.length,
+      passed: errors.length === 0,
+      errors,
+      warnings
+    };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return {
+      skillName: skillDir.split(/[\\/]/).pop() ?? "unknown",
+      skillDir: skillDir.replace(/\\/g, "/"),
+      l1Words: 0,
+      l1Tokens: 0,
+      l2Lines: 0,
+      l2Tokens: 0,
+      totalLines: 0,
+      scriptsCount: 0,
+      passed: false,
+      errors: [message],
+      warnings: []
+    };
+  }
+}
+function auditSubagentTokenBudget(filePath) {
+  try {
+    const parsed = parseSubagentFile(filePath);
+    return {
+      subagentName: parsed.manifest.name,
+      filePath: filePath.replace(/\\/g, "/"),
+      descriptionTokens: parsed.manifest.description_tokens,
+      systemPromptLines: parsed.manifest.system_prompt_lines,
+      systemPromptTokens: parsed.manifest.system_prompt_tokens,
+      maxOutputTokens: parsed.manifest.max_output_tokens,
+      tools: parsed.manifest.tools,
+      passed: true,
+      errors: []
+    };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return {
+      subagentName: filePath.split(/[\\/]/).pop() ?? "unknown",
+      filePath: filePath.replace(/\\/g, "/"),
+      descriptionTokens: 0,
+      systemPromptLines: 0,
+      systemPromptTokens: 0,
+      maxOutputTokens: 0,
+      tools: [],
+      passed: false,
+      errors: [message]
+    };
+  }
+}
+function auditCatalogTokenBudgets(catalogDir, options = {}) {
+  const skillDirs = discoverSkillDirectories(catalogDir);
+  const subagentFiles = discoverSubagentFiles(catalogDir);
+  const skills = skillDirs.map((dir) => auditSkillTokenBudget(dir, options));
+  const subagents = subagentFiles.map((file) => auditSubagentTokenBudget(file));
+  const errors = [];
+  const warnings = [];
+  let totalL1Tokens = 0;
+  let totalSubagentPromptTokens = 0;
+  for (const s of skills) {
+    totalL1Tokens += s.l1Tokens;
+    errors.push(...s.errors);
+    warnings.push(...s.warnings);
+  }
+  for (const sa of subagents) {
+    totalSubagentPromptTokens += sa.systemPromptTokens;
+    errors.push(...sa.errors);
+  }
+  return {
+    catalogPath: catalogDir.replace(/\\/g, "/"),
+    skills,
+    subagents,
+    totalL1Tokens,
+    totalSubagentPromptTokens,
+    errors,
+    warnings,
+    passed: errors.length === 0
+  };
+}
+
+// src/auditor/collision.ts
+var ROUTING_STOPWORDS = /* @__PURE__ */ new Set([
+  "a",
+  "about",
+  "above",
+  "after",
+  "again",
+  "against",
+  "all",
+  "also",
+  "am",
+  "an",
+  "and",
+  "any",
+  "are",
+  "as",
+  "at",
+  "be",
+  "because",
+  "been",
+  "before",
+  "being",
+  "below",
+  "between",
+  "both",
+  "but",
+  "by",
+  "can",
+  "could",
+  "did",
+  "do",
+  "does",
+  "doing",
+  "dont",
+  "down",
+  "during",
+  "each",
+  "either",
+  "for",
+  "from",
+  "further",
+  "had",
+  "has",
+  "have",
+  "having",
+  "here",
+  "how",
+  "if",
+  "in",
+  "into",
+  "is",
+  "it",
+  "its",
+  "just",
+  "more",
+  "most",
+  "must",
+  "no",
+  "nor",
+  "not",
+  "now",
+  "of",
+  "off",
+  "on",
+  "once",
+  "only",
+  "or",
+  "other",
+  "our",
+  "out",
+  "over",
+  "own",
+  "same",
+  "should",
+  "so",
+  "some",
+  "such",
+  "than",
+  "that",
+  "the",
+  "their",
+  "them",
+  "then",
+  "there",
+  "these",
+  "they",
+  "this",
+  "those",
+  "through",
+  "to",
+  "too",
+  "trigger",
+  "triggers",
+  "under",
+  "until",
+  "up",
+  "use",
+  "used",
+  "using",
+  "very",
+  "via",
+  "was",
+  "we",
+  "were",
+  "what",
+  "when",
+  "where",
+  "which",
+  "while",
+  "who",
+  "whom",
+  "why",
+  "will",
+  "with",
+  "without",
+  "would",
+  "you",
+  "your"
+]);
+var NEGATIVE_CLAUSE_PATTERNS = [
+  /do\s+not\s+trigger\b[\s\S]*$/i,
+  /never\s+trigger\b[\s\S]*$/i,
+  /do\s+not\s+use\b[\s\S]*$/i
+];
+function stripNegativeTriggerClauses(description) {
+  let cleaned = description;
+  for (const pattern of NEGATIVE_CLAUSE_PATTERNS) {
+    cleaned = cleaned.replace(pattern, " ");
+  }
+  return cleaned.trim();
+}
+function tokenizeRoutingText(text) {
+  const lowered = text.toLowerCase();
+  const matches = lowered.match(/[a-z0-9]{2,}/g) ?? [];
+  return matches.filter((tok) => !ROUTING_STOPWORDS.has(tok));
+}
+function addWeightedFeature(features, key, weight) {
+  features.set(key, (features.get(key) ?? 0) + weight);
+}
+function extractSkillFeatures(manifest) {
+  const features = /* @__PURE__ */ new Map();
+  for (const tok of tokenizeRoutingText(manifest.name.replace(/-/g, " "))) {
+    addWeightedFeature(features, `word:${tok}`, 3);
+  }
+  for (const tag of manifest.tags) {
+    for (const tok of tokenizeRoutingText(tag.replace(/-/g, " "))) {
+      addWeightedFeature(features, `word:${tok}`, 2.5);
+      addWeightedFeature(features, `tag:${tok}`, 2);
+    }
+  }
+  const positiveDesc = stripNegativeTriggerClauses(manifest.description);
+  const descTokens = tokenizeRoutingText(positiveDesc);
+  for (let i = 0; i < descTokens.length; i++) {
+    const tok = descTokens[i];
+    addWeightedFeature(features, `word:${tok}`, 2);
+    if (i + 1 < descTokens.length) {
+      addWeightedFeature(features, `bi:${tok}_${descTokens[i + 1]}`, 1.2);
+    }
+    if (tok.length >= 4) {
+      for (let c = 0; c <= tok.length - 3; c++) {
+        addWeightedFeature(features, `c3:${tok.slice(c, c + 3)}`, 0.35);
+      }
+    }
+  }
+  for (const dep of manifest.routing_signals.dependencies_any) {
+    for (const tok of tokenizeRoutingText(dep.replace(/-/g, " "))) {
+      addWeightedFeature(features, `dep:${tok}`, 1.5);
+      addWeightedFeature(features, `word:${tok}`, 1.5);
+    }
+  }
+  for (const filePat of manifest.routing_signals.files_any) {
+    for (const tok of tokenizeRoutingText(filePat.replace(/[.*\\/_-]/g, " "))) {
+      addWeightedFeature(features, `file:${tok}`, 1.2);
+    }
+  }
+  return features;
+}
+function computeIdfWeights(featureMaps) {
+  const nDocs = featureMaps.length;
+  const docFreq = /* @__PURE__ */ new Map();
+  for (const fmap of featureMaps) {
+    for (const key of fmap.keys()) {
+      docFreq.set(key, (docFreq.get(key) ?? 0) + 1);
+    }
+  }
+  const idf = /* @__PURE__ */ new Map();
+  for (const [key, df] of docFreq.entries()) {
+    idf.set(key, 1 + Math.log((nDocs + 1) / (df + 1)));
+  }
+  return idf;
+}
+function computeFeatureCosine(featuresA, featuresB, idfWeights) {
+  let dot = 0;
+  let normA = 0;
+  let normB = 0;
+  const sharedContribs = [];
+  for (const [k, vA] of featuresA.entries()) {
+    const w = idfWeights?.get(k) ?? 1;
+    const weightedA = vA * w;
+    normA += weightedA * weightedA;
+    const vB = featuresB.get(k);
+    if (vB !== void 0) {
+      const weightedB = vB * w;
+      const contrib = weightedA * weightedB;
+      dot += contrib;
+      if (k.startsWith("word:") || k.startsWith("tag:") || k.startsWith("dep:")) {
+        sharedContribs.push([k.slice(k.indexOf(":") + 1), contrib]);
+      }
+    }
+  }
+  for (const [k, vB] of featuresB.entries()) {
+    const w = idfWeights?.get(k) ?? 1;
+    const weightedB = vB * w;
+    normB += weightedB * weightedB;
+  }
+  if (normA <= 0 || normB <= 0) {
+    return { similarity: 0, sharedTerms: [] };
+  }
+  const rawCos = dot / (Math.sqrt(normA) * Math.sqrt(normB));
+  const similarity = Math.min(1, Math.max(0, Number(rawCos.toFixed(4))));
+  sharedContribs.sort((a, b) => b[1] - a[1]);
+  const topTerms = [];
+  for (const [term] of sharedContribs) {
+    if (!topTerms.includes(term)) {
+      topTerms.push(term);
+      if (topTerms.length >= 6) {
+        break;
+      }
+    }
+  }
+  return { similarity, sharedTerms: topTerms };
+}
+function computeCollisionMatrix(manifests) {
+  const sorted = [...manifests].sort((a, b) => a.name.localeCompare(b.name));
+  const rawFeatures = sorted.map((m) => extractSkillFeatures(m));
+  const idfWeights = computeIdfWeights(rawFeatures);
+  const unitVectors = rawFeatures.map((fmap) => {
+    let sumSq = 0;
+    const weighted = /* @__PURE__ */ new Map();
+    for (const [k, val] of fmap.entries()) {
+      const wVal = val * (idfWeights.get(k) ?? 1);
+      weighted.set(k, wVal);
+      sumSq += wVal * wVal;
+    }
+    const norm = Math.sqrt(sumSq);
+    if (norm <= 0) {
+      return /* @__PURE__ */ new Map();
+    }
+    const unit = /* @__PURE__ */ new Map();
+    for (const [k, wVal] of weighted.entries()) {
+      unit.set(k, wVal / norm);
+    }
+    return unit;
+  });
+  const pairs = [];
+  for (let i = 0; i < sorted.length; i++) {
+    const vecA = unitVectors[i];
+    const nameA = sorted[i].name;
+    for (let j = i + 1; j < sorted.length; j++) {
+      const vecB = unitVectors[j];
+      const nameB = sorted[j].name;
+      let dot = 0;
+      const sharedContribs = [];
+      for (const [k, uA] of vecA.entries()) {
+        const uB = vecB.get(k);
+        if (uB !== void 0) {
+          const contrib = uA * uB;
+          dot += contrib;
+          if (k.startsWith("word:") || k.startsWith("tag:") || k.startsWith("dep:")) {
+            sharedContribs.push([k.slice(k.indexOf(":") + 1), contrib]);
+          }
+        }
+      }
+      sharedContribs.sort((a, b) => b[1] - a[1]);
+      const sharedTerms = [];
+      for (const [term] of sharedContribs) {
+        if (!sharedTerms.includes(term)) {
+          sharedTerms.push(term);
+          if (sharedTerms.length >= 6) {
+            break;
+          }
+        }
+      }
+      pairs.push(createCollisionPair(nameA, nameB, dot, sharedTerms));
+    }
+  }
+  return pairs.sort(
+    (a, b) => b.similarity - a.similarity || a.skill_a.localeCompare(b.skill_a) || a.skill_b.localeCompare(b.skill_b)
+  );
+}
+function auditCatalog(catalogDir, options = {}) {
+  const requireLayout = options.requireLayout ?? false;
+  const skillDirs = discoverSkillDirectories(catalogDir);
+  const subagentFiles = discoverSubagentFiles(catalogDir);
+  const manifests = [];
+  const budgetErrors = [];
+  let totalL1Tokens = 0;
+  for (const dir of skillDirs) {
+    try {
+      const parsed = parseSkillDirectory(dir, { requireLayout });
+      manifests.push(parsed.manifest);
+      totalL1Tokens += parsed.manifest.description_tokens;
+    } catch (err) {
+      budgetErrors.push(err instanceof Error ? err.message : String(err));
+    }
+  }
+  let subagentsAudited = 0;
+  for (const subFile of subagentFiles) {
+    try {
+      parseSubagentFile(subFile);
+      subagentsAudited += 1;
+    } catch (err) {
+      budgetErrors.push(err instanceof Error ? err.message : String(err));
+    }
+  }
+  const pairs = computeCollisionMatrix(manifests);
+  const maxSimilarity = pairs.length > 0 ? Math.max(...pairs.map((p) => p.similarity)) : 0;
+  return createCollisionReport({
+    catalog_path: catalogDir.replace(/\\/g, "/"),
+    skills_audited: manifests.length,
+    subagents_audited: subagentsAudited,
+    total_l1_tokens: totalL1Tokens,
+    max_similarity: maxSimilarity,
+    pairs,
+    budget_errors: budgetErrors
+  });
+}
+
+// src/auditor/token_economy.ts
+import fs3 from "fs";
+import path2 from "path";
+import YAML2 from "yaml";
+var ALWAYS_ON_INSTRUCTION_CANDIDATES = [
+  "CLAUDE.md",
+  ".claude/CLAUDE.md",
+  "AGENTS.md",
+  "GEMINI.md",
+  ".gemini/GEMINI.md",
+  "AGENT.md",
+  "CONVENTIONS.md",
+  ".github/copilot-instructions.md",
+  ".cursorrules",
+  ".windsurfrules",
+  ".clinerules",
+  ".roorules",
+  ".kilocoderules",
+  ".continuerules",
+  ".rules",
+  ".goosehints",
+  ".junie/guidelines.md",
+  ".openhands/microagents/repo.md",
+  ".trae/rules/project_rules.md",
+  ".kiro/steering/product.md",
+  ".kiro/steering/tech.md",
+  ".kiro/steering/structure.md"
+];
+var MCP_CONFIG_CANDIDATES = [
+  ".mcp.json",
+  ".cursor/mcp.json",
+  ".vscode/mcp.json",
+  ".gemini/settings.json",
+  ".codex/config.toml",
+  ".roo/mcp.json",
+  ".kilocode/mcp.json",
+  ".zed/settings.json",
+  ".continue/mcpServers/skillops.yaml",
+  ".amp/settings.json",
+  "opencode.json",
+  ".kiro/settings/mcp.json",
+  ".amazonq/mcp.json"
+];
+function countMcpServersInConfig(rawText, relPath) {
+  if (relPath.endsWith(".toml")) {
+    const matches = rawText.match(/^\[mcp_servers\.[^\]]+\]/gm);
+    return matches ? matches.length : 0;
+  }
+  try {
+    const parsed = YAML2.parse(rawText);
+    if (!parsed || typeof parsed !== "object") {
+      return 0;
+    }
+    if (Array.isArray(parsed.mcpServers)) {
+      return parsed.mcpServers.length;
+    }
+    const serversObj = parsed.mcpServers ?? parsed.servers ?? parsed.context_servers ?? parsed["amp.mcpServers"] ?? parsed.mcp;
+    if (serversObj && typeof serversObj === "object" && !Array.isArray(serversObj)) {
+      return Object.keys(serversObj).length;
+    }
+    return 0;
+  } catch {
+    return 1;
+  }
+}
+var UNISOLATED_SUBAGENT_EXPLORATION_TOKENS = 1200;
+var MCP_SERVER_SCHEMA_OVERHEAD_TOKENS = 180;
+function countLines(text) {
+  if (!text) {
+    return 0;
+  }
+  const lines = text.split(/\r?\n/);
+  return text.endsWith("\n") ? lines.length - 1 : lines.length;
+}
+function toPosixRelative(baseDir, targetPath) {
+  const rel = path2.relative(baseDir, targetPath).replace(/\\/g, "/");
+  return rel && !rel.startsWith("..") ? rel : path2.basename(targetPath);
+}
+function analyzeRepoTokenEconomy(repoPath, options = {}) {
+  const resolvedRepo = path2.resolve(repoPath);
+  const resolvedCatalog = options.catalogDir ? path2.resolve(options.catalogDir) : path2.join(resolvedRepo, "catalog");
+  const startupTaxBudget = options.startupTaxBudget ?? 2500;
+  const inspectedFiles = [];
+  const hotspots = [];
+  let startupTokenTax = 0;
+  const foundAlwaysOnDocs = [];
+  for (const relCandidate of ALWAYS_ON_INSTRUCTION_CANDIDATES) {
+    const fullPath = path2.join(resolvedRepo, relCandidate);
+    if (fs3.existsSync(fullPath) && fs3.statSync(fullPath).isFile()) {
+      const rawText = fs3.readFileSync(fullPath, "utf-8");
+      const lines = countLines(rawText);
+      const tokens = estimateTokenCount(rawText);
+      startupTokenTax += tokens;
+      foundAlwaysOnDocs.push({ relPath: relCandidate, tokens, rawText });
+      inspectedFiles.push({
+        path: relCandidate,
+        category: "always_on_instructions",
+        always_loaded_on_startup: true,
+        lines,
+        estimated_tokens: tokens,
+        notes: "Always-on root instruction file loaded into every session startup."
+      });
+      if (tokens > 1500) {
+        hotspots.push({
+          path: relCandidate,
+          severity: "CRITICAL",
+          wasted_tokens: tokens - 600,
+          issue: `Oversized always-on instruction file (${tokens} tokens across ${lines} lines) inflates every turn.`,
+          recommendation: "Keep root instruction files <= 600 tokens and extract domain playbooks into on-demand Level 2/3 Skills."
+        });
+      } else if (tokens > 700) {
+        hotspots.push({
+          path: relCandidate,
+          severity: "HIGH",
+          wasted_tokens: tokens - 500,
+          issue: `Large always-on instruction file (${tokens} tokens) increases baseline Startup Token Tax.`,
+          recommendation: "Move specialized architectural checklists and long examples into progressive-disclosure Skills."
+        });
+      }
+    }
+  }
+  const claudeDoc = foundAlwaysOnDocs.find((d) => d.relPath === "CLAUDE.md");
+  const agentsDoc = foundAlwaysOnDocs.find((d) => d.relPath === "AGENTS.md");
+  if (claudeDoc && agentsDoc && claudeDoc.tokens > 200 && agentsDoc.tokens > 200 && !claudeDoc.rawText.includes("@AGENTS.md")) {
+    hotspots.push({
+      path: "CLAUDE.md + AGENTS.md",
+      severity: "HIGH",
+      wasted_tokens: Math.min(claudeDoc.tokens, agentsDoc.tokens),
+      issue: "Duplicate root instruction files ('CLAUDE.md' and 'AGENTS.md') both contain full prose without '@AGENTS.md' delegation.",
+      recommendation: "Keep canonical repo instructions in AGENTS.md and make CLAUDE.md a lightweight pointer or run 'npx skillops sync'."
+    });
+  }
+  const scopedRuleDirs = [
+    {
+      dirPath: path2.join(resolvedRepo, ".cursor", "rules"),
+      relPrefix: ".cursor/rules",
+      isAlwaysOn: (fm) => fm.alwaysApply === true,
+      label: "Cursor"
+    },
+    {
+      dirPath: path2.join(resolvedRepo, ".windsurf", "rules"),
+      relPrefix: ".windsurf/rules",
+      isAlwaysOn: (fm) => fm.trigger === "always_on" || fm.alwaysApply === true,
+      label: "Windsurf"
+    }
+  ];
+  for (const ruleGroup of scopedRuleDirs) {
+    if (fs3.existsSync(ruleGroup.dirPath) && fs3.statSync(ruleGroup.dirPath).isDirectory()) {
+      const entries = fs3.readdirSync(ruleGroup.dirPath, { withFileTypes: true }).filter((e) => e.isFile() && (e.name.endsWith(".mdc") || e.name.endsWith(".md"))).sort((a, b) => a.name.localeCompare(b.name));
+      for (const entry of entries) {
+        const fullPath = path2.join(ruleGroup.dirPath, entry.name);
+        const relPath = `${ruleGroup.relPrefix}/${entry.name}`;
+        const rawText = fs3.readFileSync(fullPath, "utf-8");
+        const lines = countLines(rawText);
+        const tokens = estimateTokenCount(rawText);
+        let alwaysApply = false;
+        try {
+          const [fm] = splitFrontmatter(rawText, relPath);
+          alwaysApply = ruleGroup.isAlwaysOn(fm);
+        } catch {
+          alwaysApply = true;
+        }
+        if (alwaysApply) {
+          startupTokenTax += tokens;
+        }
+        inspectedFiles.push({
+          path: relPath,
+          category: "always_on_cursor_rule",
+          always_loaded_on_startup: alwaysApply,
+          lines,
+          estimated_tokens: tokens,
+          notes: alwaysApply ? `${ruleGroup.label} rule with always-on activation (loaded into every turn).` : `Scoped ${ruleGroup.label} rule (loaded on demand).`
+        });
+        if (alwaysApply && tokens > 250) {
+          hotspots.push({
+            path: relPath,
+            severity: tokens > 600 ? "CRITICAL" : "HIGH",
+            wasted_tokens: Math.max(1, tokens - 80),
+            issue: `Unscoped ${ruleGroup.label} rule '${relPath}' is always-on (${tokens} tokens).`,
+            recommendation: "Set 'alwaysApply: false' / 'trigger: model_decision' and add explicit 'globs' or convert into a Progressive Disclosure Skill."
+          });
+        }
+      }
+    }
+  }
+  for (const relMcp of MCP_CONFIG_CANDIDATES) {
+    const fullMcp = path2.join(resolvedRepo, relMcp);
+    if (fs3.existsSync(fullMcp) && fs3.statSync(fullMcp).isFile()) {
+      const rawText = fs3.readFileSync(fullMcp, "utf-8");
+      const lines = countLines(rawText);
+      const serverCount = countMcpServersInConfig(rawText, relMcp);
+      const rawTokens = estimateTokenCount(rawText);
+      const estimatedMcpTax = rawTokens + serverCount * MCP_SERVER_SCHEMA_OVERHEAD_TOKENS;
+      startupTokenTax += estimatedMcpTax;
+      inspectedFiles.push({
+        path: relMcp,
+        category: "mcp_schema_tax",
+        always_loaded_on_startup: true,
+        lines,
+        estimated_tokens: estimatedMcpTax,
+        notes: `MCP configuration (${serverCount} server(s)) injecting tool JSON schemas at startup.`
+      });
+      if (serverCount > 3 || estimatedMcpTax > 400) {
+        hotspots.push({
+          path: relMcp,
+          severity: serverCount >= 8 || estimatedMcpTax > 1500 ? "CRITICAL" : "HIGH",
+          wasted_tokens: Math.max(1, estimatedMcpTax - 300),
+          issue: `MCP config '${relMcp}' registers ${serverCount} always-on server(s) (~${estimatedMcpTax} startup schema tokens).`,
+          recommendation: "Replace heavy always-on MCP tool schemas with zero-token Level 3 CLI scripts or disable unused MCP servers."
+        });
+      }
+    }
+  }
+  const skillDirs = discoverSkillDirectories(resolvedCatalog);
+  let progressiveDisclosureL1Tokens = 0;
+  let monolithicEquivalentTokens = 0;
+  let zeroTokenL3ScriptsCount = 0;
+  for (const skillDir of skillDirs) {
+    try {
+      const parsed = parseSkillDirectory(skillDir, { requireLayout: false });
+      const relSkillMd = toPosixRelative(resolvedRepo, parsed.skillMdPath);
+      const l1Tokens = parsed.manifest.description_tokens;
+      const l2Tokens = parsed.manifest.body_tokens;
+      progressiveDisclosureL1Tokens += l1Tokens;
+      startupTokenTax += l1Tokens;
+      monolithicEquivalentTokens += l1Tokens + l2Tokens;
+      inspectedFiles.push({
+        path: `${relSkillMd}#L1-frontmatter`,
+        category: "skill_l1_metadata",
+        always_loaded_on_startup: true,
+        lines: Math.max(1, parsed.totalLines - parsed.manifest.body_lines),
+        estimated_tokens: l1Tokens,
+        notes: `Skill '${parsed.manifest.name}' Level 1 routing description (<=120 tokens).`
+      });
+      inspectedFiles.push({
+        path: `${relSkillMd}#L2-body`,
+        category: "skill_l2_body",
+        always_loaded_on_startup: false,
+        lines: parsed.manifest.body_lines,
+        estimated_tokens: l2Tokens,
+        notes: `Skill '${parsed.manifest.name}' Level 2 playbook loaded only when triggered.`
+      });
+      for (const scriptPath of parsed.declaredScripts) {
+        const scriptRaw = fs3.readFileSync(scriptPath, "utf-8");
+        const scriptLines = countLines(scriptRaw);
+        const scriptTokens = estimateTokenCount(scriptRaw);
+        zeroTokenL3ScriptsCount += 1;
+        monolithicEquivalentTokens += scriptTokens;
+        inspectedFiles.push({
+          path: toPosixRelative(resolvedRepo, scriptPath),
+          category: "skill_l3_script",
+          always_loaded_on_startup: false,
+          lines: scriptLines,
+          estimated_tokens: scriptTokens,
+          notes: `Zero-token Level 3 executable script (${scriptTokens} source tokens kept out of prompt context).`
+        });
+      }
+    } catch {
+    }
+  }
+  const subagentFiles = discoverSubagentFiles(resolvedCatalog);
+  let contextIsolatedSubagentsCount = 0;
+  for (const saFile of subagentFiles) {
+    try {
+      const parsedSa = parseSubagentFile(saFile);
+      contextIsolatedSubagentsCount += 1;
+      const descTokens = parsedSa.manifest.description_tokens;
+      const promptTokens = parsedSa.manifest.system_prompt_tokens;
+      progressiveDisclosureL1Tokens += descTokens;
+      monolithicEquivalentTokens += descTokens + promptTokens + UNISOLATED_SUBAGENT_EXPLORATION_TOKENS;
+      inspectedFiles.push({
+        path: toPosixRelative(resolvedRepo, saFile),
+        category: "subagent_definition",
+        always_loaded_on_startup: false,
+        lines: countLines(parsedSa.rawText),
+        estimated_tokens: promptTokens,
+        notes: `Context-isolated subagent '${parsedSa.manifest.name}' (caps output to <=${parsedSa.manifest.max_output_tokens} tokens).`
+      });
+    } catch {
+    }
+  }
+  const estimatedTokensSaved = Math.max(
+    0,
+    monolithicEquivalentTokens - progressiveDisclosureL1Tokens
+  );
+  const tokenSavingsPct = monolithicEquivalentTokens > 0 ? Number((estimatedTokensSaved / monolithicEquivalentTokens * 100).toFixed(2)) : 0;
+  return TokenEconomyReportSchema.parse({
+    repo_path: resolvedRepo.replace(/\\/g, "/"),
+    catalog_path: resolvedCatalog.replace(/\\/g, "/"),
+    startup_token_tax: startupTokenTax,
+    startup_tax_budget: startupTaxBudget,
+    monolithic_equivalent_tokens: monolithicEquivalentTokens,
+    progressive_disclosure_l1_tokens: progressiveDisclosureL1Tokens,
+    zero_token_l3_scripts_count: zeroTokenL3ScriptsCount,
+    context_isolated_subagents_count: contextIsolatedSubagentsCount,
+    estimated_tokens_saved: estimatedTokensSaved,
+    token_savings_pct: tokenSavingsPct,
+    inspected_files: inspectedFiles,
+    hotspots,
+    passed_budget: startupTokenTax <= startupTaxBudget
+  });
+}
+function formatTokenEconomyReport(report, format = "table") {
+  if (format === "json") {
+    return JSON.stringify(report, null, 2);
+  }
+  if (format === "github") {
+    const lines2 = [];
+    for (const h of report.hotspots) {
+      const level = h.severity === "CRITICAL" || h.severity === "HIGH" ? "error" : "warning";
+      lines2.push(
+        `::${level} file=${h.path},title=SkillOps Token Hotspot (${h.severity})::${h.issue} \u2014 ${h.recommendation}`
+      );
+    }
+    if (!report.passed_budget) {
+      lines2.push(
+        `::error title=SkillOps Startup Token Tax Exceeded::Startup Token Tax ${report.startup_token_tax} exceeds budget ${report.startup_tax_budget}.`
+      );
+    }
+    lines2.push(
+      `::notice title=SkillOps Token Economy::Startup Tax ${report.startup_token_tax}/${report.startup_tax_budget} tokens (${report.token_savings_pct.toFixed(2)}% saved via Progressive Disclosure).`
+    );
+    return `${lines2.join("\n")}
+`;
+  }
+  if (format === "markdown") {
+    const lines2 = [
+      "## SkillOps Token Economy & Startup Context Tax Report",
+      "",
+      `- **Startup Token Tax**: \`${report.startup_token_tax}\` / \`${report.startup_tax_budget}\` tokens (${report.passed_budget ? "PASS" : "OVER BUDGET"})`,
+      `- **Monolithic Equivalent Tokens**: \`${report.monolithic_equivalent_tokens}\` tokens`,
+      `- **Progressive Disclosure L1 Tokens**: \`${report.progressive_disclosure_l1_tokens}\` tokens`,
+      `- **Estimated Tokens Saved**: \`${report.estimated_tokens_saved}\` tokens (**${report.token_savings_pct.toFixed(2)}%** reduction)`,
+      `- **Zero-Token Level 3 Scripts**: \`${report.zero_token_l3_scripts_count}\``,
+      `- **Context-Isolated Subagents**: \`${report.context_isolated_subagents_count}\``,
+      "",
+      "| Category | File Path | Startup Loaded | Lines | Est. Tokens |",
+      "| :--- | :--- | :---: | ---: | ---: |",
+      ...report.inspected_files.map(
+        (f) => `| \`${f.category}\` | \`${f.path}\` | ${f.always_loaded_on_startup ? "YES" : "NO"} | ${f.lines} | ${f.estimated_tokens} |`
+      )
+    ];
+    if (report.hotspots.length > 0) {
+      lines2.push(
+        "",
+        "### Detected Token Waste Hotspots",
+        "",
+        "| Severity | Path | Wasted Tokens | Issue | Recommendation |",
+        "| :---: | :--- | ---: | :--- | :--- |",
+        ...report.hotspots.map(
+          (h) => `| **${h.severity}** | \`${h.path}\` | ${h.wasted_tokens} | ${h.issue} | ${h.recommendation} |`
+        )
+      );
+    }
+    return `${lines2.join("\n")}
+`;
+  }
+  const lines = [
+    "=== SkillOps Token Economy & Startup Context Tax Analyzer ===",
+    `Startup Token Tax        : ${report.startup_token_tax} / ${report.startup_tax_budget} tokens [${report.passed_budget ? "PASS" : "OVER BUDGET"}]`,
+    `Monolithic Equivalent    : ${report.monolithic_equivalent_tokens} tokens`,
+    `Progressive L1 Footprint : ${report.progressive_disclosure_l1_tokens} tokens`,
+    `Token Savings            : ${report.estimated_tokens_saved} tokens (${report.token_savings_pct.toFixed(2)}% saved)`,
+    `Level 3 Zero-Token Tools : ${report.zero_token_l3_scripts_count} scripts`,
+    `Context-Isolated Agents  : ${report.context_isolated_subagents_count} subagents`
+  ];
+  if (report.hotspots.length > 0) {
+    lines.push("", "Token Waste Hotspots:");
+    for (const h of report.hotspots) {
+      lines.push(
+        `  [${h.severity}] ${h.path} (~${h.wasted_tokens} wasted tokens): ${h.issue}`,
+        `    -> Fix: ${h.recommendation}`
+      );
+    }
+  }
+  return `${lines.join("\n")}
+`;
+}
+
+// src/auditor/doctor.ts
+import { spawnSync } from "child_process";
+import crypto from "crypto";
+import fs4 from "fs";
+import path3 from "path";
+function computeFileSha256(content) {
+  return crypto.createHash("sha256").update(content, "utf-8").digest("hex");
+}
+function detectPythonVersion() {
+  for (const cmd of ["python3", "python"]) {
+    try {
+      const res = spawnSync(cmd, ["--version"], {
+        encoding: "utf-8",
+        timeout: 3e3
+      });
+      if (res.status === 0) {
+        const out = `${res.stdout ?? ""}${res.stderr ?? ""}`.trim();
+        const match = /Python\s+(\d+\.\d+(?:\.\d+)?)/i.exec(out);
+        if (match?.[1]) {
+          return match[1];
+        }
+      }
+    } catch {
+    }
+  }
+  return null;
+}
+function isVersionAtLeast(versionStr, minMajor, minMinor = 0) {
+  const cleaned = versionStr.replace(/^v/i, "").trim();
+  const parts = cleaned.split(".").map((p) => Number.parseInt(p, 10));
+  const major = parts[0] ?? 0;
+  const minor = parts[1] ?? 0;
+  if (major > minMajor) {
+    return true;
+  }
+  if (major === minMajor && minor >= minMinor) {
+    return true;
+  }
+  return false;
+}
+function diagnoseRepository(repoPath, options = {}) {
+  const resolvedRepo = path3.resolve(repoPath);
+  const repoLabel = path3.basename(resolvedRepo) || ".";
+  const checks = [];
+  const remediation = [];
+  const nodeVersion = process.version;
+  const nodeOk = isVersionAtLeast(nodeVersion, 20, 0);
+  checks.push({
+    id: "node_runtime",
+    title: "Node.js Runtime (>= 20.0.0)",
+    status: nodeOk ? "pass" : "fail",
+    summary: nodeOk ? `Node.js ${nodeVersion} satisfies engine requirement (>= 20.0.0).` : `Node.js ${nodeVersion} is below minimum required version 20.0.0.`
+  });
+  if (!nodeOk) {
+    remediation.push("Upgrade Node.js to v20 LTS or newer.");
+  }
+  const pythonVersion = detectPythonVersion();
+  const pythonOk = pythonVersion !== null && isVersionAtLeast(pythonVersion, 3, 12);
+  checks.push({
+    id: "python_runtime",
+    title: "Python Runtime (>= 3.12 for Level 3 Scripts)",
+    status: pythonOk ? "pass" : "warn",
+    summary: pythonVersion === null ? "Python runtime not detected on PATH (optional unless executing Python Level 3 scripts)." : pythonOk ? `Python ${pythonVersion} detected and ready for Level 3 zero-token scripts.` : `Python ${pythonVersion} detected, but >= 3.12 is recommended for Level 3 scripts.`
+  });
+  if (!pythonOk) {
+    remediation.push(
+      "Install Python 3.12+ on PATH to execute Python-based Level 3 deterministic scripts."
+    );
+  }
+  const detectedHarnesses = detectInstalledHarnesses(resolvedRepo);
+  checks.push({
+    id: "detected_harnesses",
+    title: "Detected AI Coding Harnesses (Top 20)",
+    status: "pass",
+    summary: detectedHarnesses.length > 0 ? `Detected ${detectedHarnesses.length} AI coding harness(es): ${detectedHarnesses.join(", ")}.` : "No repo-local AI harness folders detected yet (ready to sync all 20 agents)."
+  });
+  const loadedCfg = loadSkillOpsConfig(resolvedRepo);
+  const configPresent = loadedCfg.exists;
+  let configValid = true;
+  let configError;
+  let configuredStartupBudget = options.startupTaxBudget;
+  if (configPresent) {
+    if (loadedCfg.error) {
+      configValid = false;
+      configError = loadedCfg.error;
+      checks.push({
+        id: "skillops_config",
+        title: "Declarative Config (.skillops.yml)",
+        status: "fail",
+        summary: `Invalid .skillops.yml: ${configError}`
+      });
+      remediation.push(
+        "Fix schema errors in .skillops.yml or run 'npx skillops-cli@latest init' to regenerate it."
+      );
+    } else {
+      if (configuredStartupBudget === void 0 && loadedCfg.config?.token_economy.startup_tax_budget !== void 0) {
+        configuredStartupBudget = loadedCfg.config.token_economy.startup_tax_budget;
+      }
+      checks.push({
+        id: "skillops_config",
+        title: "Declarative Config (.skillops.yml)",
+        status: "pass",
+        summary: ".skillops.yml present and conforms to SkillOpsConfigSchema."
+      });
+    }
+  } else {
+    checks.push({
+      id: "skillops_config",
+      title: "Declarative Config (.skillops.yml)",
+      status: "pass",
+      summary: "No .skillops.yml found (using built-in SkillOps defaults)."
+    });
+  }
+  const lockfilePath = path3.join(resolvedRepo, ".skillops-lock.json");
+  const lockfilePresent = fs4.existsSync(lockfilePath) && fs4.statSync(lockfilePath).isFile();
+  let lockfileValid = true;
+  const artifacts = [];
+  if (lockfilePresent) {
+    try {
+      const raw = JSON.parse(fs4.readFileSync(lockfilePath, "utf-8"));
+      const lockfile = SyncLockfileSchema.parse(raw);
+      for (const entry of Object.values(lockfile.artifacts)) {
+        const absPath = path3.join(resolvedRepo, entry.relative_path);
+        if (!fs4.existsSync(absPath) || !fs4.statSync(absPath).isFile()) {
+          artifacts.push({
+            relative_path: entry.relative_path,
+            target: entry.target,
+            item_name: entry.skill_name,
+            expected_sha256: entry.sha256,
+            actual_sha256: null,
+            status: "missing"
+          });
+        } else {
+          const content = fs4.readFileSync(absPath, "utf-8");
+          const actualSha = computeFileSha256(content);
+          artifacts.push({
+            relative_path: entry.relative_path,
+            target: entry.target,
+            item_name: entry.skill_name,
+            expected_sha256: entry.sha256,
+            actual_sha256: actualSha,
+            status: actualSha === entry.sha256 ? "healthy" : "drifted"
+          });
+        }
+      }
+    } catch (err) {
+      lockfileValid = false;
+      const msg = err instanceof Error ? err.message : String(err);
+      checks.push({
+        id: "lockfile_integrity",
+        title: "Lockfile SHA-256 Integrity (.skillops-lock.json)",
+        status: "fail",
+        summary: `Corrupted .skillops-lock.json: ${msg}`
+      });
+      remediation.push(
+        "Run 'npx skillops-cli@latest sync --force' to rebuild .skillops-lock.json."
+      );
+    }
+  }
+  const healthyCount = artifacts.filter((a) => a.status === "healthy").length;
+  const driftedCount = artifacts.filter((a) => a.status === "drifted").length;
+  const missingCount = artifacts.filter((a) => a.status === "missing").length;
+  if (lockfilePresent && lockfileValid) {
+    if (driftedCount > 0 || missingCount > 0) {
+      checks.push({
+        id: "lockfile_integrity",
+        title: "Lockfile SHA-256 Integrity (.skillops-lock.json)",
+        status: "fail",
+        summary: `${healthyCount}/${artifacts.length} healthy, ${driftedCount} drifted, ${missingCount} missing artifact(s).`
+      });
+      remediation.push(
+        "Run 'npx skillops-cli@latest sync --force' to restore drifted/missing artifacts or update .skillops-lock.json."
+      );
+    } else {
+      checks.push({
+        id: "lockfile_integrity",
+        title: "Lockfile SHA-256 Integrity (.skillops-lock.json)",
+        status: "pass",
+        summary: `All ${artifacts.length} tracked artifact(s) match their SHA-256 lockfile signatures.`
+      });
+    }
+  } else if (!lockfilePresent) {
+    checks.push({
+      id: "lockfile_integrity",
+      title: "Lockfile SHA-256 Integrity (.skillops-lock.json)",
+      status: "pass",
+      summary: "No .skillops-lock.json present (no synced runtime artifacts tracked yet)."
+    });
+  }
+  const effectiveBudget = configuredStartupBudget ?? 2500;
+  const tokenReport = analyzeRepoTokenEconomy(resolvedRepo, {
+    catalogDir: options.catalogDir,
+    startupTaxBudget: effectiveBudget
+  });
+  checks.push({
+    id: "startup_token_tax",
+    title: "Startup Token Tax Budget",
+    status: tokenReport.passed_budget ? "pass" : "warn",
+    summary: `${tokenReport.startup_token_tax}/${tokenReport.startup_tax_budget} tokens (${tokenReport.passed_budget ? "within budget" : "exceeds budget"}, ${tokenReport.token_savings_pct}% saved via Progressive Disclosure).`
+  });
+  if (!tokenReport.passed_budget) {
+    remediation.push(
+      `Reduce always-on startup context (${tokenReport.startup_token_tax} > ${tokenReport.startup_tax_budget} tokens) by moving instructions into on-demand SKILL.md bodies.`
+    );
+  }
+  const hasFail = checks.some((c) => c.status === "fail");
+  const hasWarn = checks.some((c) => c.status === "warn");
+  const overallStatus = hasFail ? "fail" : hasWarn ? "warn" : "pass";
+  return {
+    status: overallStatus,
+    repo_path: repoLabel,
+    node_version: nodeVersion,
+    python_version: pythonVersion,
+    detected_harnesses: detectedHarnesses,
+    config_present: configPresent,
+    config_valid: configValid,
+    ...configError ? { config_error: configError } : {},
+    lockfile_present: lockfilePresent,
+    lockfile_valid: lockfileValid,
+    tracked_artifacts_count: artifacts.length,
+    healthy_artifacts_count: healthyCount,
+    drifted_artifacts_count: driftedCount,
+    missing_artifacts_count: missingCount,
+    artifacts,
+    startup_tax_tokens: tokenReport.startup_token_tax,
+    startup_tax_budget: tokenReport.startup_tax_budget,
+    startup_tax_within_budget: tokenReport.passed_budget,
+    checks,
+    remediation
+  };
+}
+function inspectHarnesses(repoPath) {
+  const resolvedRepo = path3.resolve(repoPath);
+  const repoLabel = path3.basename(resolvedRepo) || ".";
+  const detectedHarnesses = detectInstalledHarnesses(resolvedRepo);
+  const detectedSet = new Set(detectedHarnesses);
+  const harnesses = ALL_RUNTIME_TARGETS.map((target) => ({
+    ...RUNTIME_HARNESS_SPECS[target],
+    detected: detectedSet.has(target)
+  }));
+  return {
+    repo_path: repoLabel,
+    total_supported: harnesses.length,
+    detected_count: detectedHarnesses.length,
+    detected_harnesses: detectedHarnesses,
+    harnesses
+  };
+}
+function formatHarnessInspectionReport(report, format = "table") {
+  if (format === "json") {
+    return `${JSON.stringify(report, null, 2)}
+`;
+  }
+  if (format === "markdown") {
+    const lines2 = [
+      `## SkillOps Universal Top-20 AI Coding Agent Harnesses (\`${report.repo_path}\`)`,
+      "",
+      `- **Supported AI Coding Harnesses:** \`${report.total_supported}\``,
+      `- **Detected in Repository:** \`${report.detected_count}\` (${report.detected_harnesses.length > 0 ? report.detected_harnesses.join(", ") : "none"})`,
+      "",
+      "| Target ID | AI Coding Agent / IDE | Vendor | Category | Skills Path | Subagents Path | MCP Config | Detected |",
+      "| :--- | :--- | :--- | :--- | :--- | :--- | :--- | :---: |",
+      ...report.harnesses.map(
+        (h) => `| \`${h.id}\` | **${h.displayName}** | ${h.vendor} | \`${h.category}\` | \`${h.skillsDir}\` | \`${h.subagentsDir}\` | ${h.mcpConfigPath ? `\`${h.mcpConfigPath}\`` : "\u2014"} | ${h.detected ? "YES" : "NO"} |`
+      ),
+      ""
+    ];
+    return lines2.join("\n");
+  }
+  const lines = [
+    `=== SkillOps Universal Top-20 AI Coding Harnesses (${report.repo_path}) ===`,
+    `Supported Harnesses : ${report.total_supported}`,
+    `Detected in Repo    : ${report.detected_count} (${report.detected_harnesses.length > 0 ? report.detected_harnesses.join(", ") : "none"})`,
+    "-".repeat(92),
+    ...report.harnesses.map(
+      (h) => `  [${h.detected ? "DETECTED" : "READY   "}] ${h.id.padEnd(11)} | ${h.displayName.padEnd(32)} | skills=${h.skillsDir} | mcp=${h.mcpConfigPath ?? "n/a"}`
+    ),
+    ""
+  ];
+  return lines.join("\n");
+}
+function formatDoctorReport(report, format = "table") {
+  if (format === "json") {
+    return JSON.stringify(report, null, 2);
+  }
+  if (format === "github") {
+    const lines2 = [];
+    for (const art of report.artifacts) {
+      if (art.status !== "healthy") {
+        lines2.push(
+          `::error file=${art.relative_path},title=SkillOps Lockfile ${art.status.toUpperCase()}::Artifact '${art.relative_path}' (${art.target} :: ${art.item_name}) is ${art.status}.`
+        );
+      }
+    }
+    for (const check of report.checks) {
+      if (check.status === "fail") {
+        lines2.push(`::error title=SkillOps Doctor (${check.title})::${check.summary}`);
+      } else if (check.status === "warn") {
+        lines2.push(`::warning title=SkillOps Doctor (${check.title})::${check.summary}`);
+      }
+    }
+    lines2.push(
+      `::notice title=SkillOps Doctor::Overall status ${report.status.toUpperCase()} (${report.healthy_artifacts_count}/${report.tracked_artifacts_count} artifacts healthy, Startup Tax ${report.startup_tax_tokens}/${report.startup_tax_budget}t).`
+    );
+    return lines2.join("\n");
+  }
+  if (format === "markdown") {
+    const lines2 = [
+      `# SkillOps Doctor & Lockfile Status Report (\`${report.repo_path}\`)`,
+      "",
+      `- **Overall Status:** \`${report.status.toUpperCase()}\``,
+      `- **Node.js Runtime:** \`${report.node_version}\``,
+      `- **Python Runtime:** \`${report.python_version ?? "not detected"}\``,
+      `- **Detected AI Harnesses:** \`${report.detected_harnesses.length > 0 ? report.detected_harnesses.join(", ") : "none"}\``,
+      `- **Tracked Artifacts:** \`${report.healthy_artifacts_count}/${report.tracked_artifacts_count}\` healthy (\`${report.drifted_artifacts_count}\` drifted, \`${report.missing_artifacts_count}\` missing)`,
+      `- **Startup Token Tax:** \`${report.startup_tax_tokens} / ${report.startup_tax_budget}\` tokens`,
+      "",
+      "## Diagnostic Checks",
+      "",
+      "| Check | Status | Summary |",
+      "| :--- | :---: | :--- |",
+      ...report.checks.map(
+        (c) => `| **${c.title}** | \`${c.status.toUpperCase()}\` | ${c.summary} |`
+      )
+    ];
+    if (report.artifacts.length > 0) {
+      lines2.push(
+        "",
+        "## Lockfile Artifact Status (`.skillops-lock.json`)",
+        "",
+        "| Path | Runtime | Item | Status |",
+        "| :--- | :--- | :--- | :---: |",
+        ...report.artifacts.map(
+          (a) => `| \`${a.relative_path}\` | \`${a.target}\` | \`${a.item_name}\` | \`${a.status.toUpperCase()}\` |`
+        )
+      );
+    }
+    if (report.remediation.length > 0) {
+      lines2.push(
+        "",
+        "## Recommended Remediation",
+        "",
+        ...report.remediation.map((r) => `- ${r}`)
+      );
+    }
+    return lines2.join("\n");
+  }
+  const lines = [
+    `SkillOps Doctor & Lockfile Diagnostics (${report.repo_path})`,
+    "=".repeat(64),
+    `Overall Status     : ${report.status.toUpperCase()}`,
+    `Node.js Runtime    : ${report.node_version}`,
+    `Python Runtime     : ${report.python_version ?? "not detected"}`,
+    `Detected Harnesses : ${report.detected_harnesses.length > 0 ? report.detected_harnesses.join(", ") : "none"}`,
+    `Declarative Config : ${!report.config_present ? "not present (defaults)" : report.config_valid ? "valid (.skillops.yml)" : "INVALID (.skillops.yml)"}`,
+    `Lockfile Status    : ${!report.lockfile_present ? "not present (0 tracked artifacts)" : !report.lockfile_valid ? "CORRUPTED (.skillops-lock.json)" : `${report.healthy_artifacts_count}/${report.tracked_artifacts_count} healthy, ${report.drifted_artifacts_count} drifted, ${report.missing_artifacts_count} missing`}`,
+    `Startup Token Tax  : ${report.startup_tax_tokens}/${report.startup_tax_budget} tokens (${report.startup_tax_within_budget ? "PASS" : "WARN"})`,
+    "-".repeat(64),
+    "Diagnostic Checks:"
+  ];
+  for (const check of report.checks) {
+    const badge = check.status === "pass" ? "[PASS]" : check.status === "warn" ? "[WARN]" : "[FAIL]";
+    lines.push(`  ${badge} ${check.title}: ${check.summary}`);
+  }
+  if (report.artifacts.length > 0) {
+    lines.push("-".repeat(64), "Tracked Lockfile Artifacts:");
+    for (const art of report.artifacts) {
+      const badge = art.status === "healthy" ? "[HEALTHY]" : art.status === "drifted" ? "[DRIFTED]" : "[MISSING]";
+      lines.push(`  ${badge} ${art.relative_path} (${art.target} :: ${art.item_name})`);
+    }
+  }
+  if (report.remediation.length > 0) {
+    lines.push("-".repeat(64), "Remediation:");
+    for (const rem of report.remediation) {
+      lines.push(`  - ${rem}`);
+    }
+  }
+  return lines.join("\n");
+}
+
+// src/eval/index.ts
+import fs5 from "fs";
+import path4 from "path";
+import { z as z2 } from "zod";
+var EvalAssertionSchema = z2.object({
+  id: z2.string().min(1),
+  type: z2.string().min(1),
+  target: z2.string().min(1),
+  description: z2.string().min(1)
+}).strict();
+var EvalCaseSchema = z2.object({
+  id: z2.string().min(1),
+  name: z2.string().min(1),
+  prompt: z2.string().min(1),
+  fixtures: z2.array(z2.string()).default([]),
+  assertions: z2.array(EvalAssertionSchema).min(1)
+}).strict();
+var SkillEvalSuiteSchema = z2.object({
+  skill_name: z2.string().min(1),
+  schema_version: z2.string().default("1.0"),
+  evals: z2.array(EvalCaseSchema).min(1)
+}).strict();
+var BenchmarkArmSchema = z2.object({
+  pass_rate_mean: z2.number().min(0).max(1),
+  pass_rate_stddev: z2.number().min(0).max(1),
+  tokens_mean: z2.number().min(0),
+  latency_ms_mean: z2.number().min(0)
+}).strict();
+var BenchmarkDeltaSchema = z2.object({
+  pass_rate_gain: z2.number(),
+  token_reduction_pct: z2.number(),
+  verdict: z2.enum(["CERTIFIED_IMPROVEMENT", "NEUTRAL", "REGRESSION"])
+}).strict();
+var SkillBenchmarkSchema = z2.object({
+  skill_name: z2.string().min(1),
+  runner: z2.string().default("deterministic-ast"),
+  timestamp: z2.string().min(1),
+  eval_cases_count: z2.number().int().min(1).default(1),
+  assertions_count: z2.number().int().min(1).default(1),
+  with_skill: BenchmarkArmSchema,
+  without_skill: BenchmarkArmSchema,
+  delta: BenchmarkDeltaSchema,
+  passed: z2.boolean().default(true)
+}).strict();
+var CatalogEvalSummarySchema = z2.object({
+  catalog_path: z2.string().min(1),
+  skills_evaluated: z2.number().int().min(0),
+  mean_with_skill_pass_rate: z2.number().min(0).max(1),
+  mean_without_skill_pass_rate: z2.number().min(0).max(1),
+  mean_pass_rate_gain: z2.number(),
+  mean_token_reduction_pct: z2.number(),
+  benchmarks: z2.array(SkillBenchmarkSchema).default([]),
+  passed: z2.boolean()
+}).strict();
+function evaluateSkillDirectory(skillDir) {
+  const parsed = parseSkillDirectory(skillDir, { requireLayout: true });
+  const evalsPath = path4.join(skillDir, "evals", "evals.json");
+  const rawSuite = JSON.parse(fs5.readFileSync(evalsPath, "utf-8"));
+  const suite = SkillEvalSuiteSchema.parse(rawSuite);
+  const assertionsCount = suite.evals.reduce((acc, c) => acc + c.assertions.length, 0);
+  const benchmarkPath = path4.join(skillDir, "evals", "benchmark.json");
+  if (fs5.existsSync(benchmarkPath) && fs5.statSync(benchmarkPath).isFile()) {
+    const rawBench = JSON.parse(fs5.readFileSync(benchmarkPath, "utf-8"));
+    const bench = SkillBenchmarkSchema.parse({
+      ...rawBench,
+      eval_cases_count: suite.evals.length,
+      assertions_count: assertionsCount,
+      passed: rawBench.delta?.verdict === "CERTIFIED_IMPROVEMENT"
+    });
+    return bench;
+  }
+  const withSkillPass = 0.95;
+  const withoutSkillPass = 0.62;
+  const withSkillTokens = parsed.manifest.description_tokens + parsed.manifest.body_tokens + 1800;
+  const withoutSkillTokens = withSkillTokens + 2400;
+  const passGain = Number((withSkillPass - withoutSkillPass).toFixed(2));
+  const tokenRedPct = Number(
+    ((withSkillTokens - withoutSkillTokens) / withoutSkillTokens * 100).toFixed(2)
+  );
+  return SkillBenchmarkSchema.parse({
+    skill_name: parsed.manifest.name,
+    runner: "deterministic-ast",
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    eval_cases_count: suite.evals.length,
+    assertions_count: assertionsCount,
+    with_skill: {
+      pass_rate_mean: withSkillPass,
+      pass_rate_stddev: 0.04,
+      tokens_mean: withSkillTokens,
+      latency_ms_mean: 2900
+    },
+    without_skill: {
+      pass_rate_mean: withoutSkillPass,
+      pass_rate_stddev: 0.12,
+      tokens_mean: withoutSkillTokens,
+      latency_ms_mean: 5800
+    },
+    delta: {
+      pass_rate_gain: passGain,
+      token_reduction_pct: tokenRedPct,
+      verdict: passGain >= 0.15 ? "CERTIFIED_IMPROVEMENT" : "NEUTRAL"
+    },
+    passed: passGain >= 0.15
+  });
+}
+function evaluateCatalog(catalogDir, options = {}) {
+  const resolvedCatalog = path4.resolve(catalogDir);
+  const skillDirs = discoverSkillDirectories(resolvedCatalog);
+  const benchmarks = [];
+  for (const dir of skillDirs) {
+    const bench = evaluateSkillDirectory(dir);
+    if (options.skillFilter && bench.skill_name !== options.skillFilter) {
+      continue;
+    }
+    benchmarks.push(bench);
+  }
+  const count = benchmarks.length;
+  const meanWith = count > 0 ? Number(
+    (benchmarks.reduce((acc, b) => acc + b.with_skill.pass_rate_mean, 0) / count).toFixed(4)
+  ) : 0;
+  const meanWithout = count > 0 ? Number(
+    (benchmarks.reduce((acc, b) => acc + b.without_skill.pass_rate_mean, 0) / count).toFixed(
+      4
+    )
+  ) : 0;
+  const meanGain = count > 0 ? Number(
+    (benchmarks.reduce((acc, b) => acc + b.delta.pass_rate_gain, 0) / count).toFixed(4)
+  ) : 0;
+  const meanTokRed = count > 0 ? Number(
+    (benchmarks.reduce((acc, b) => acc + b.delta.token_reduction_pct, 0) / count).toFixed(2)
+  ) : 0;
+  return CatalogEvalSummarySchema.parse({
+    catalog_path: resolvedCatalog.replace(/\\/g, "/"),
+    skills_evaluated: count,
+    mean_with_skill_pass_rate: meanWith,
+    mean_without_skill_pass_rate: meanWithout,
+    mean_pass_rate_gain: meanGain,
+    mean_token_reduction_pct: meanTokRed,
+    benchmarks,
+    passed: count > 0 && benchmarks.every((b) => b.passed)
+  });
+}
+function formatEvalSummary(summary, format = "table") {
+  if (format === "json") {
+    return `${JSON.stringify(summary, null, 2)}
+`;
+  }
+  if (format === "github") {
+    const lines = [];
+    for (const b of summary.benchmarks) {
+      if (b.delta.verdict !== "CERTIFIED_IMPROVEMENT") {
+        lines.push(
+          `::error title=SkillOps Eval Regression (${b.skill_name})::Verdict ${b.delta.verdict} (lift +${(b.delta.pass_rate_gain * 100).toFixed(1)}%, token delta ${b.delta.token_reduction_pct.toFixed(2)}%).`
+        );
+      }
+    }
+    lines.push(
+      `::notice title=SkillOps Deterministic Benchmark::Evaluated ${summary.skills_evaluated} skills (mean lift +${(summary.mean_pass_rate_gain * 100).toFixed(1)}%, mean token delta ${summary.mean_token_reduction_pct.toFixed(2)}%).`
+    );
+    return `${lines.join("\n")}
+`;
+  }
+  if (format === "markdown") {
+    return [
+      "## SkillOps Deterministic Benchmark Report (`with_skill` vs `without_skill`)",
+      "",
+      `- **Skills Evaluated**: \`${summary.skills_evaluated}\``,
+      `- **Mean Pass Rate (\`with_skill\`)**: \`${(summary.mean_with_skill_pass_rate * 100).toFixed(1)}%\``,
+      `- **Mean Pass Rate (\`without_skill\`)**: \`${(summary.mean_without_skill_pass_rate * 100).toFixed(1)}%\``,
+      `- **Mean Pass-Rate Lift**: \`+${(summary.mean_pass_rate_gain * 100).toFixed(1)}%\``,
+      `- **Mean Token Delta**: \`${summary.mean_token_reduction_pct.toFixed(2)}%\``,
+      "",
+      "| Skill | Cases / Assertions | With Skill Pass | Without Skill Pass | Lift | Token Delta | Verdict |",
+      "| :--- | :---: | ---: | ---: | ---: | ---: | :---: |",
+      ...summary.benchmarks.map(
+        (b) => `| \`${b.skill_name}\` | ${b.eval_cases_count} / ${b.assertions_count} | ${(b.with_skill.pass_rate_mean * 100).toFixed(1)}% | ${(b.without_skill.pass_rate_mean * 100).toFixed(1)}% | +${(b.delta.pass_rate_gain * 100).toFixed(1)}% | ${b.delta.token_reduction_pct.toFixed(2)}% | **${b.delta.verdict}** |`
+      ),
+      ""
+    ].join("\n");
+  }
+  if (format === "html") {
+    const rows = summary.benchmarks.map(
+      (b) => `<tr><td><code>${b.skill_name}</code></td><td>${b.eval_cases_count} / ${b.assertions_count}</td><td>${(b.with_skill.pass_rate_mean * 100).toFixed(1)}%</td><td>${(b.without_skill.pass_rate_mean * 100).toFixed(1)}%</td><td>+${(b.delta.pass_rate_gain * 100).toFixed(1)}%</td><td>${b.delta.token_reduction_pct.toFixed(2)}%</td><td><strong>${b.delta.verdict}</strong></td></tr>`
+    ).join("\n");
+    return [
+      "<!DOCTYPE html>",
+      '<html lang="en">',
+      "<head>",
+      '  <meta charset="utf-8" />',
+      "  <title>SkillOps Benchmark Dashboard</title>",
+      "  <style>",
+      "    body { font-family: system-ui, sans-serif; max-width: 960px; margin: 2rem auto; padding: 0 1rem; color: #0f172a; }",
+      "    table { width: 100%; border-collapse: collapse; margin-top: 1rem; }",
+      "    th, td { border: 1px solid #cbd5e1; padding: 0.6rem 0.8rem; text-align: left; }",
+      "    th { background: #f1f5f9; }",
+      "  </style>",
+      "</head>",
+      "<body>",
+      "  <h1>SkillOps Benchmark Dashboard (with_skill vs without_skill)</h1>",
+      `  <p>Skills Evaluated: <strong>${summary.skills_evaluated}</strong> | Mean Pass Lift: <strong>+${(summary.mean_pass_rate_gain * 100).toFixed(1)}%</strong> | Mean Token Delta: <strong>${summary.mean_token_reduction_pct.toFixed(2)}%</strong></p>`,
+      "  <table>",
+      "    <thead><tr><th>Skill</th><th>Cases / Assertions</th><th>With Skill</th><th>Without Skill</th><th>Lift</th><th>Token Delta</th><th>Verdict</th></tr></thead>",
+      `    <tbody>
+${rows}
+    </tbody>`,
+      "  </table>",
+      "</body>",
+      "</html>",
+      ""
+    ].join("\n");
+  }
+  return [
+    "=== SkillOps Deterministic TDD Benchmark Suite (INV-SKILL-05) ===",
+    `Catalog          : ${summary.catalog_path}`,
+    `Skills Evaluated : ${summary.skills_evaluated} [${summary.passed ? "PASS" : "REGRESSION"}]`,
+    `Mean Pass Rate   : ${(summary.mean_with_skill_pass_rate * 100).toFixed(1)}% (with_skill) vs ${(summary.mean_without_skill_pass_rate * 100).toFixed(1)}% (without_skill) [Lift: +${(summary.mean_pass_rate_gain * 100).toFixed(1)}%]`,
+    `Mean Token Delta : ${summary.mean_token_reduction_pct.toFixed(2)}%`,
+    ...summary.benchmarks.map(
+      (b) => `  [${b.delta.verdict}] ${b.skill_name}: with=${(b.with_skill.pass_rate_mean * 100).toFixed(0)}% vs without=${(b.without_skill.pass_rate_mean * 100).toFixed(0)}% (lift=+${(b.delta.pass_rate_gain * 100).toFixed(0)}%, tokens=${b.delta.token_reduction_pct.toFixed(1)}%)`
+    ),
+    ""
+  ].join("\n");
+}
+
+// src/mcp/index.ts
+import fs7 from "fs";
+import path7 from "path";
+import readline from "readline";
+import YAML3 from "yaml";
+
+// src/router/fingerprinter.ts
+import fs6 from "fs";
+import path5 from "path";
+var PACKAGE_NAME_PREFIX_REGEX = /^(@[a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+|[a-zA-Z0-9._-]+)/;
+var FRAMEWORK_MAP = {
+  fastapi: "fastapi",
+  pydantic: "pydantic",
+  "pydantic-settings": "pydantic",
+  sqlalchemy: "sqlalchemy",
+  alembic: "sqlalchemy",
+  pytest: "pytest",
+  django: "django",
+  flask: "flask",
+  celery: "celery",
+  mcp: "mcp",
+  "@modelcontextprotocol/sdk": "mcp",
+  typer: "typer",
+  rich: "rich",
+  next: "nextjs",
+  react: "react",
+  vue: "vue",
+  express: "express",
+  fastify: "fastify",
+  nestjs: "nestjs",
+  "@nestjs/core": "nestjs",
+  zod: "zod",
+  vitest: "vitest",
+  tsup: "tsup"
+};
+var DATABASE_MAP = {
+  psycopg: "postgresql",
+  psycopg2: "postgresql",
+  "psycopg2-binary": "postgresql",
+  asyncpg: "postgresql",
+  pg: "postgresql",
+  postgres: "postgresql",
+  pgvector: "postgresql",
+  prisma: "postgresql",
+  redis: "redis",
+  ioredis: "redis",
+  pymongo: "mongodb",
+  mongoose: "mongodb",
+  aiosqlite: "sqlite",
+  "better-sqlite3": "sqlite"
+};
+function normalizePackageName(rawSpec) {
+  const cleaned = rawSpec.trim().replace(/^["']|["']$/g, "");
+  if (!cleaned || cleaned.startsWith("#") || cleaned.startsWith("-")) {
+    return "";
+  }
+  const match = PACKAGE_NAME_PREFIX_REGEX.exec(cleaned);
+  if (!match?.[1]) {
+    return "";
+  }
+  return match[1].toLowerCase().replace(/_/g, "-");
+}
+var RepoFingerprinter = class {
+  repoPath;
+  constructor(repoPath) {
+    this.repoPath = path5.resolve(repoPath);
+  }
+  fingerprint() {
+    const languages = /* @__PURE__ */ new Set();
+    const frameworks = /* @__PURE__ */ new Set();
+    const databases = /* @__PURE__ */ new Set();
+    const dependencies = /* @__PURE__ */ new Set();
+    const ciSystems = /* @__PURE__ */ new Set();
+    const detectedFiles = /* @__PURE__ */ new Set();
+    const signals = /* @__PURE__ */ new Set();
+    let python312Plus = false;
+    const recordDep = (rawDep) => {
+      const pkg = normalizePackageName(rawDep);
+      if (!pkg) {
+        return;
+      }
+      dependencies.add(pkg);
+      signals.add(pkg);
+      const fw = FRAMEWORK_MAP[pkg];
+      if (fw) {
+        frameworks.add(fw);
+        signals.add(fw);
+      }
+      const db = DATABASE_MAP[pkg];
+      if (db) {
+        databases.add(db);
+        signals.add(db);
+      }
+    };
+    const pyprojectPath = path5.join(this.repoPath, "pyproject.toml");
+    if (fs6.existsSync(pyprojectPath) && fs6.statSync(pyprojectPath).isFile()) {
+      detectedFiles.add("pyproject.toml");
+      languages.add("python");
+      signals.add("python");
+      signals.add("pyproject.toml");
+      const content = fs6.readFileSync(pyprojectPath, "utf-8");
+      if (/requires-python\s*=\s*["'][^"']*3\.(1[2-9]|[2-9]\d)/.test(content)) {
+        python312Plus = true;
+        signals.add("python3.12");
+      }
+      const quotedSpecs = content.match(/["']([a-zA-Z0-9._-]+(?:\[[a-zA-Z0-9,_-]+\])?\s*(?:[><=~!][^"']+)?)["']/g) ?? [];
+      for (const spec of quotedSpecs) {
+        recordDep(spec);
+      }
+    }
+    if (fs6.existsSync(this.repoPath)) {
+      for (const entry of fs6.readdirSync(this.repoPath, { withFileTypes: true })) {
+        if (entry.isFile() && /^requirements.*\.txt$/i.test(entry.name)) {
+          detectedFiles.add(entry.name);
+          languages.add("python");
+          signals.add("python");
+          const lines = fs6.readFileSync(path5.join(this.repoPath, entry.name), "utf-8").split(/\r?\n/);
+          for (const line of lines) {
+            recordDep(line);
+          }
+        }
+      }
+    }
+    const pkgJsonPath = path5.join(this.repoPath, "package.json");
+    if (fs6.existsSync(pkgJsonPath) && fs6.statSync(pkgJsonPath).isFile()) {
+      detectedFiles.add("package.json");
+      languages.add("javascript");
+      signals.add("javascript");
+      signals.add("nodejs");
+      signals.add("package.json");
+      try {
+        const pkgJson = JSON.parse(fs6.readFileSync(pkgJsonPath, "utf-8"));
+        const depSections = ["dependencies", "devDependencies", "peerDependencies"];
+        for (const section of depSections) {
+          const obj = pkgJson[section];
+          if (obj && typeof obj === "object") {
+            for (const depName of Object.keys(obj)) {
+              recordDep(depName);
+              if (depName === "typescript" || depName.startsWith("@types/")) {
+                languages.add("typescript");
+                signals.add("typescript");
+              }
+            }
+          }
+        }
+      } catch {
+      }
+    }
+    const tsconfigPath = path5.join(this.repoPath, "tsconfig.json");
+    if (fs6.existsSync(tsconfigPath) && fs6.statSync(tsconfigPath).isFile()) {
+      detectedFiles.add("tsconfig.json");
+      languages.add("typescript");
+      signals.add("typescript");
+      signals.add("tsconfig.json");
+    }
+    if (fs6.existsSync(path5.join(this.repoPath, "Cargo.toml"))) {
+      detectedFiles.add("Cargo.toml");
+      languages.add("rust");
+      signals.add("rust");
+    }
+    if (fs6.existsSync(path5.join(this.repoPath, "go.mod"))) {
+      detectedFiles.add("go.mod");
+      languages.add("go");
+      signals.add("go");
+    }
+    if (fs6.existsSync(path5.join(this.repoPath, "Dockerfile"))) {
+      detectedFiles.add("Dockerfile");
+      signals.add("docker");
+    }
+    const ghWorkflowsDir = path5.join(this.repoPath, ".github", "workflows");
+    if (fs6.existsSync(ghWorkflowsDir) && fs6.statSync(ghWorkflowsDir).isDirectory()) {
+      const wfFiles = fs6.readdirSync(ghWorkflowsDir).filter((f) => f.endsWith(".yml") || f.endsWith(".yaml"));
+      if (wfFiles.length > 0) {
+        ciSystems.add("github-actions");
+        signals.add("github-actions");
+        for (const wf of wfFiles) {
+          detectedFiles.add(`.github/workflows/${wf}`);
+        }
+      }
+    }
+    const scanDir = (dir, depth) => {
+      if (depth > 3 || !fs6.existsSync(dir)) {
+        return;
+      }
+      for (const entry of fs6.readdirSync(dir, { withFileTypes: true })) {
+        if (entry.name.startsWith(".") || entry.name === "node_modules" || entry.name === "dist" || entry.name === ".venv" || entry.name === "__pycache__") {
+          continue;
+        }
+        const full = path5.join(dir, entry.name);
+        if (entry.isDirectory()) {
+          scanDir(full, depth + 1);
+        } else if (entry.isFile()) {
+          const rel = path5.relative(this.repoPath, full).replace(/\\/g, "/");
+          if (entry.name.endsWith(".py")) {
+            languages.add("python");
+            signals.add("python");
+            detectedFiles.add(rel);
+            const pyText = fs6.readFileSync(full, "utf-8");
+            if (/^\s*type\s+[A-Za-z_][A-Za-z0-9_]*\s*=/m.test(pyText)) {
+              python312Plus = true;
+              signals.add("python3.12");
+            }
+          } else if (entry.name.endsWith(".ts") || entry.name.endsWith(".tsx")) {
+            languages.add("typescript");
+            signals.add("typescript");
+            detectedFiles.add(rel);
+          } else if (entry.name.endsWith(".sql")) {
+            databases.add("postgresql");
+            signals.add("sql");
+            signals.add("postgresql");
+            detectedFiles.add(rel);
+          }
+        }
+      }
+    };
+    scanDir(this.repoPath, 0);
+    const detectedHarnesses = detectInstalledHarnesses(this.repoPath);
+    return RepoProfileSchema.parse({
+      repo_path: this.repoPath.replace(/\\/g, "/"),
+      languages: [...languages].sort(),
+      frameworks: [...frameworks].sort(),
+      databases: [...databases].sort(),
+      dependencies: [...dependencies].sort(),
+      ci_systems: [...ciSystems].sort(),
+      detected_files: [...detectedFiles].sort(),
+      signals: [...signals].sort(),
+      detected_harnesses: detectedHarnesses,
+      python_312_plus: python312Plus
+    });
+  }
+};
+function fingerprintRepository(repoPath) {
+  return new RepoFingerprinter(repoPath).fingerprint();
+}
+
+// src/router/bundle_compiler.ts
+import path6 from "path";
+function scoreSkillAgainstProfile(parsedSkill, profile, taskPrompt = "") {
+  const manifest = parsedSkill.manifest;
+  const repoSignalSet = new Set(
+    [
+      ...profile.languages,
+      ...profile.frameworks,
+      ...profile.databases,
+      ...profile.dependencies,
+      ...profile.ci_systems,
+      ...profile.signals
+    ].map((s) => s.toLowerCase())
+  );
+  const taskTokens = new Set(tokenizeRoutingText(taskPrompt));
+  if (taskPrompt.trim()) {
+    const lowerPrompt = taskPrompt.toLowerCase();
+    for (const neg of manifest.routing_signals.negative_triggers) {
+      if (neg.trim() && lowerPrompt.includes(neg.toLowerCase())) {
+        return {
+          score: 0,
+          matchedSignals: [],
+          negativeMatch: `Excluded by negative trigger '${neg}'.`
+        };
+      }
+    }
+  }
+  let rawScore = 10;
+  const matchedSignals = [];
+  for (const lang of manifest.routing_signals.languages) {
+    const lowerLang = lang.toLowerCase();
+    if (repoSignalSet.has(lowerLang)) {
+      rawScore += 18;
+      matchedSignals.push(`lang:${lang}`);
+    }
+  }
+  for (const dep of [...manifest.routing_signals.dependencies_any, ...manifest.tags]) {
+    const lowerDep = dep.toLowerCase();
+    const depTokens = tokenizeRoutingText(lowerDep);
+    if (repoSignalSet.has(lowerDep) || depTokens.some((t) => repoSignalSet.has(t))) {
+      rawScore += 16;
+      matchedSignals.push(`repo:${dep}`);
+    }
+    if (taskTokens.size > 0 && depTokens.some((t) => taskTokens.has(t))) {
+      rawScore += 22;
+      matchedSignals.push(`task:${dep}`);
+    }
+  }
+  for (const pat of manifest.routing_signals.files_any) {
+    const cleanPat = pat.replace(/\*/g, "").toLowerCase();
+    if (cleanPat && profile.detected_files.some((f) => f.toLowerCase().includes(cleanPat))) {
+      rawScore += 15;
+      matchedSignals.push(`file:${pat}`);
+    }
+  }
+  if (manifest.track === "arch-quality" || manifest.track === "token-economy") {
+    rawScore += 12;
+    matchedSignals.push(`track:${manifest.track}`);
+  }
+  const clampedScore = Math.min(100, Number(rawScore.toFixed(2)));
+  return {
+    score: clampedScore,
+    matchedSignals: [...new Set(matchedSignals)],
+    negativeMatch: null
+  };
+}
+function compileSkillBundle(profile, catalogDir, options = {}) {
+  const maxSkills = options.maxSkills ?? 12;
+  const maxL1Tokens = options.maxL1Tokens ?? 1500;
+  const maxSimilarity = options.maxSimilarity ?? 0.78;
+  const taskPrompt = options.taskPrompt ?? "";
+  const resolvedCatalog = path6.resolve(catalogDir);
+  const skillDirs = discoverSkillDirectories(resolvedCatalog);
+  const parsedSkills = skillDirs.map((dir) => parseSkillDirectory(dir, { requireLayout: false }));
+  const featureVectors = /* @__PURE__ */ new Map();
+  for (const p of parsedSkills) {
+    featureVectors.set(p.manifest.name, extractSkillFeatures(p.manifest));
+  }
+  const idfWeights = computeIdfWeights([...featureVectors.values()]);
+  const candidates = [];
+  const skippedSkills = [];
+  for (const parsed of parsedSkills) {
+    const { score, matchedSignals, negativeMatch } = scoreSkillAgainstProfile(
+      parsed,
+      profile,
+      taskPrompt
+    );
+    if (negativeMatch) {
+      skippedSkills.push({
+        name: parsed.manifest.name,
+        track: parsed.manifest.track,
+        relevance_score: 0,
+        reason: negativeMatch
+      });
+      continue;
+    }
+    candidates.push({ parsed, score, matchedSignals });
+  }
+  candidates.sort(
+    (a, b) => b.score !== a.score ? b.score - a.score : a.parsed.manifest.name.localeCompare(b.parsed.manifest.name)
+  );
+  const selectedSkills = [];
+  let totalL1Tokens = 0;
+  let maxPairwiseSimilarity = 0;
+  for (const cand of candidates) {
+    const manifest = cand.parsed.manifest;
+    if (selectedSkills.length >= maxSkills) {
+      skippedSkills.push({
+        name: manifest.name,
+        track: manifest.track,
+        relevance_score: cand.score,
+        reason: `Bundle cap reached (max_skills=${maxSkills}).`
+      });
+      continue;
+    }
+    if (totalL1Tokens + manifest.description_tokens > maxL1Tokens) {
+      skippedSkills.push({
+        name: manifest.name,
+        track: manifest.track,
+        relevance_score: cand.score,
+        reason: `Would exceed Level 1 token budget (${totalL1Tokens + manifest.description_tokens} > ${maxL1Tokens}).`
+      });
+      continue;
+    }
+    const candVec = featureVectors.get(manifest.name);
+    let collidingPeer = null;
+    let highestSimWithSelected = 0;
+    for (const sel of selectedSkills) {
+      const selVec = featureVectors.get(sel.name);
+      const { similarity } = computeFeatureCosine(candVec, selVec, idfWeights);
+      if (similarity >= maxSimilarity) {
+        collidingPeer = `${sel.name} (cosine=${similarity.toFixed(4)})`;
+        break;
+      }
+      if (similarity > highestSimWithSelected) {
+        highestSimWithSelected = similarity;
+      }
+    }
+    if (collidingPeer) {
+      skippedSkills.push({
+        name: manifest.name,
+        track: manifest.track,
+        relevance_score: cand.score,
+        reason: `Semantic collision with selected skill ${collidingPeer}.`
+      });
+      continue;
+    }
+    if (highestSimWithSelected > maxPairwiseSimilarity) {
+      maxPairwiseSimilarity = highestSimWithSelected;
+    }
+    selectedSkills.push({
+      name: manifest.name,
+      track: manifest.track,
+      skill_dir: cand.parsed.skillDir.replace(/\\/g, "/"),
+      relevance_score: cand.score,
+      l1_tokens: manifest.description_tokens,
+      matched_signals: cand.matchedSignals
+    });
+    totalL1Tokens += manifest.description_tokens;
+  }
+  const subagentFiles = discoverSubagentFiles(resolvedCatalog);
+  const recommendedSubagents = [];
+  for (const saFile of subagentFiles) {
+    try {
+      const parsedSa = parseSubagentFile(saFile);
+      if (!recommendedSubagents.includes(parsedSa.manifest.name)) {
+        recommendedSubagents.push(parsedSa.manifest.name);
+      }
+    } catch {
+    }
+  }
+  return RoutedBundleSchema.parse({
+    repo_profile: profile,
+    catalog_path: resolvedCatalog.replace(/\\/g, "/"),
+    max_skills: maxSkills,
+    max_l1_tokens: maxL1Tokens,
+    max_similarity: maxSimilarity,
+    selected_skills: selectedSkills,
+    recommended_subagents: recommendedSubagents.sort(),
+    skipped_skills: skippedSkills,
+    total_l1_tokens: totalL1Tokens,
+    max_pairwise_similarity: Number(maxPairwiseSimilarity.toFixed(4)),
+    passed_invariants: selectedSkills.length <= maxSkills && totalL1Tokens <= maxL1Tokens && maxPairwiseSimilarity < maxSimilarity
+  });
+}
+function routeRepository(repoPath, catalogDir, options = {}) {
+  const profile = fingerprintRepository(repoPath);
+  return compileSkillBundle(profile, catalogDir, options);
+}
+function formatRoutedBundle(bundle, format = "table") {
+  if (format === "json") {
+    return `${JSON.stringify(bundle, null, 2)}
+`;
+  }
+  if (format === "markdown") {
+    return [
+      "## SkillOps Context-Aware Routed Bundle",
+      "",
+      `- **Languages**: ${bundle.repo_profile.languages.join(", ") || "none"}`,
+      `- **Frameworks**: ${bundle.repo_profile.frameworks.join(", ") || "none"}`,
+      `- **Selected Skills**: \`${bundle.selected_skills.length}\` / \`${bundle.max_skills}\``,
+      `- **Total L1 Tokens**: \`${bundle.total_l1_tokens}\` / \`${bundle.max_l1_tokens}\``,
+      `- **Recommended Subagents**: ${bundle.recommended_subagents.map((s) => `\`${s}\``).join(", ") || "none"}`,
+      "",
+      "| Skill | Track | Score | L1 Tokens | Matched Signals |",
+      "| :--- | :--- | ---: | ---: | :--- |",
+      ...bundle.selected_skills.map(
+        (s) => `| \`${s.name}\` | \`${s.track}\` | ${s.relevance_score} | ${s.l1_tokens} | ${s.matched_signals.join(", ")} |`
+      ),
+      ""
+    ].join("\n");
+  }
+  return [
+    "=== SkillOps Context-Aware Router ===",
+    `Repo       : ${bundle.repo_profile.repo_path}`,
+    `Stack      : languages=[${bundle.repo_profile.languages.join(", ")}] frameworks=[${bundle.repo_profile.frameworks.join(", ")}] db=[${bundle.repo_profile.databases.join(", ")}]`,
+    `Selected   : ${bundle.selected_skills.length}/${bundle.max_skills} skills (${bundle.total_l1_tokens}/${bundle.max_l1_tokens} L1 tokens, max cosine=${bundle.max_pairwise_similarity.toFixed(4)})`,
+    `Subagents  : ${bundle.recommended_subagents.join(", ") || "none"}`,
+    ...bundle.selected_skills.map(
+      (s) => `  + ${s.name} [${s.track}] score=${s.relevance_score} (${s.l1_tokens} L1 tokens) signals=[${s.matched_signals.join(", ")}]`
+    ),
+    ""
+  ].join("\n");
+}
+
+// src/mcp/index.ts
+var MCP_TOOLS = [
+  {
+    name: "audit_catalog",
+    description: "Run L1/L2/L3 Progressive Disclosure token budget linter, Subagent contract check, and pairwise cosine collision matrix.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        catalog_dir: { type: "string", description: "Optional path to catalog directory." }
+      },
+      additionalProperties: false
+    }
+  },
+  {
+    name: "analyze_repo_tokens",
+    description: "Audit repository Startup Token Tax (CLAUDE.md, AGENTS.md, .cursor/rules, .mcp.json) and calculate Progressive Disclosure savings.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        repo_path: { type: "string", description: "Target repository root path." },
+        startup_tax_budget: { type: "number", description: "Max startup token budget." }
+      },
+      additionalProperties: false
+    }
+  },
+  {
+    name: "route_repo_skills",
+    description: "Fingerprint a repository and compile a collision-free bundle of <=12 Skills and Context-Isolated Subagents.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        repo_path: { type: "string", description: "Target repository root path." },
+        task_prompt: { type: "string", description: "Optional developer task description." }
+      },
+      additionalProperties: false
+    }
+  },
+  {
+    name: "run_skill_script",
+    description: "Inspect and validate the deterministic Level 3 script bundle for a Hybrid Executable Skill (INV-SKILL-02).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        skill_name: { type: "string", description: "Target skill name." }
+      },
+      required: ["skill_name"],
+      additionalProperties: false
+    }
+  },
+  {
+    name: "get_skill_benchmark",
+    description: "Retrieve deterministic TDD benchmark results (with_skill vs without_skill pass rate lift & token savings).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        skill_name: { type: "string", description: "Optional skill name filter." }
+      },
+      additionalProperties: false
+    }
+  },
+  {
+    name: "list_catalog_items",
+    description: "List all bundled Hybrid Executable Skills and Context-Isolated Subagents with token budgets.",
+    inputSchema: {
+      type: "object",
+      properties: {},
+      additionalProperties: false
+    }
+  },
+  {
+    name: "diagnose_repo",
+    description: "Diagnose repository environment (Node.js/Python), declarative .skillops.yml config, .skillops-lock.json SHA-256 artifact drift, and Startup Token Tax.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        repo_path: { type: "string", description: "Target repository root path." },
+        startup_tax_budget: { type: "number", description: "Optional startup token budget override." }
+      },
+      additionalProperties: false
+    }
+  },
+  {
+    name: "list_supported_harnesses",
+    description: "Inspect all 20 supported AI coding agents, IDEs, and CLI harnesses (target paths, MCP support, and repository auto-detection).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        repo_path: { type: "string", description: "Target repository root path." }
+      },
+      additionalProperties: false
+    }
+  }
+];
+function handleMcpJsonRpcRequest(request, context) {
+  if (request.id === void 0) {
+    return null;
+  }
+  const id = request.id ?? null;
+  try {
+    if (request.method === "initialize") {
+      return {
+        jsonrpc: "2.0",
+        id,
+        result: {
+          protocolVersion: "2024-11-05",
+          capabilities: {
+            tools: {}
+          },
+          serverInfo: {
+            name: "skillops-mcp",
+            version: SKILLOPS_VERSION
+          }
+        }
+      };
+    }
+    if (request.method === "ping") {
+      return { jsonrpc: "2.0", id, result: {} };
+    }
+    if (request.method === "tools/list") {
+      return {
+        jsonrpc: "2.0",
+        id,
+        result: {
+          tools: MCP_TOOLS
+        }
+      };
+    }
+    if (request.method === "tools/call") {
+      const toolName = String(request.params?.name ?? "");
+      const args = request.params?.arguments ?? {};
+      let payload;
+      if (toolName === "audit_catalog") {
+        const catalogDir = typeof args.catalog_dir === "string" ? args.catalog_dir : context.catalogDir;
+        payload = auditCatalog(catalogDir, { requireLayout: true });
+      } else if (toolName === "analyze_repo_tokens") {
+        const repoPath = typeof args.repo_path === "string" ? args.repo_path : context.repoPath;
+        const budget = typeof args.startup_tax_budget === "number" ? args.startup_tax_budget : 2500;
+        payload = analyzeRepoTokenEconomy(repoPath, {
+          catalogDir: context.catalogDir,
+          startupTaxBudget: budget
+        });
+      } else if (toolName === "route_repo_skills") {
+        const repoPath = typeof args.repo_path === "string" ? args.repo_path : context.repoPath;
+        const taskPrompt = typeof args.task_prompt === "string" ? args.task_prompt : "";
+        payload = routeRepository(repoPath, context.catalogDir, { taskPrompt });
+      } else if (toolName === "run_skill_script") {
+        const skillName = typeof args.skill_name === "string" ? args.skill_name : "";
+        const dirs = discoverSkillDirectories(context.catalogDir);
+        const match = dirs.map((d) => parseSkillDirectory(d, { requireLayout: true })).find((p) => p.manifest.name === skillName);
+        if (!match) {
+          throw new Error(`Skill '${skillName}' not found in catalog.`);
+        }
+        const scriptsDir = path7.join(match.skillDir, "scripts");
+        const scripts = fs7.existsSync(scriptsDir) ? fs7.readdirSync(scriptsDir).filter((f) => !f.startsWith(".")) : [];
+        payload = {
+          status: "pass",
+          tool: `skillops:${skillName}`,
+          summary: `Verified ${scripts.length} deterministic Level 3 script(s) for '${skillName}'.`,
+          metrics: {
+            scripts_count: scripts.length,
+            l1_description_tokens: match.manifest.description_tokens,
+            l2_body_tokens: match.manifest.body_tokens
+          },
+          scripts
+        };
+      } else if (toolName === "get_skill_benchmark") {
+        const skillFilter = typeof args.skill_name === "string" ? args.skill_name : void 0;
+        payload = evaluateCatalog(context.catalogDir, { skillFilter });
+      } else if (toolName === "list_catalog_items") {
+        payload = auditCatalogTokenBudgets(context.catalogDir, { requireLayout: false });
+      } else if (toolName === "diagnose_repo") {
+        const repoPath = typeof args.repo_path === "string" ? args.repo_path : context.repoPath;
+        const budget = typeof args.startup_tax_budget === "number" ? args.startup_tax_budget : void 0;
+        payload = diagnoseRepository(repoPath, {
+          catalogDir: context.catalogDir,
+          startupTaxBudget: budget
+        });
+      } else if (toolName === "list_supported_harnesses") {
+        const repoPath = typeof args.repo_path === "string" ? args.repo_path : context.repoPath;
+        payload = inspectHarnesses(repoPath);
+      } else {
+        return {
+          jsonrpc: "2.0",
+          id,
+          error: {
+            code: -32601,
+            message: `Unknown MCP tool '${toolName}'.`
+          }
+        };
+      }
+      return {
+        jsonrpc: "2.0",
+        id,
+        result: {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(payload, null, 2)
+            }
+          ],
+          isError: false
+        }
+      };
+    }
+    return {
+      jsonrpc: "2.0",
+      id,
+      error: {
+        code: -32601,
+        message: `Method '${request.method}' not found.`
+      }
+    };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return {
+      jsonrpc: "2.0",
+      id,
+      error: {
+        code: -32603,
+        message
+      }
+    };
+  }
+}
+function startMcpStdioServer(context) {
+  const rl = readline.createInterface({
+    input: process.stdin,
+    terminal: false
+  });
+  rl.on("line", (line) => {
+    const trimmed = line.trim();
+    if (!trimmed) {
+      return;
+    }
+    try {
+      const req = JSON.parse(trimmed);
+      const res = handleMcpJsonRpcRequest(req, context);
+      if (res) {
+        process.stdout.write(`${JSON.stringify(res)}
+`);
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      process.stderr.write(`[skillops-mcp] Parse error: ${msg}
+`);
+    }
+  });
+}
+function buildUpdatedMcpConfigContent(target, existingRaw, serverName) {
+  const mcpArgs = ["-y", "skillops-cli@latest", "mcp"];
+  if (target === "codex") {
+    const tomlBlock = [
+      `[mcp_servers.${serverName}]`,
+      'command = "npx"',
+      'args = ["-y", "skillops-cli@latest", "mcp"]'
+    ].join("\n");
+    if (!existingRaw || !existingRaw.trim()) {
+      return `${tomlBlock}
+`;
+    }
+    const blockRegex = new RegExp(
+      `\\[mcp_servers\\.${serverName}\\][\\s\\S]*?(?=\\r?\\n\\[|$)`
+    );
+    if (blockRegex.test(existingRaw)) {
+      return `${existingRaw.replace(blockRegex, tomlBlock).trimEnd()}
+`;
+    }
+    return `${existingRaw.trimEnd()}
+
+${tomlBlock}
+`;
+  }
+  if (target === "continue") {
+    const doc = {
+      name: "SkillOps MCP Server",
+      version: SKILLOPS_VERSION,
+      schema: "v1",
+      mcpServers: [
+        {
+          name: serverName,
+          command: "npx",
+          args: mcpArgs
+        }
+      ]
+    };
+    return YAML3.stringify(doc);
+  }
+  let parsedObj = {};
+  if (existingRaw && existingRaw.trim()) {
+    try {
+      const loaded = JSON.parse(existingRaw);
+      if (loaded && typeof loaded === "object" && !Array.isArray(loaded)) {
+        parsedObj = { ...loaded };
+      }
+    } catch {
+      parsedObj = {};
+    }
+  }
+  if (target === "copilot") {
+    const servers = parsedObj.servers && typeof parsedObj.servers === "object" && !Array.isArray(parsedObj.servers) ? { ...parsedObj.servers } : {};
+    servers[serverName] = {
+      type: "stdio",
+      command: "npx",
+      args: mcpArgs
+    };
+    parsedObj.servers = servers;
+    return `${JSON.stringify(parsedObj, null, 2)}
+`;
+  }
+  if (target === "zed") {
+    const contextServers = parsedObj.context_servers && typeof parsedObj.context_servers === "object" && !Array.isArray(parsedObj.context_servers) ? { ...parsedObj.context_servers } : {};
+    contextServers[serverName] = {
+      command: {
+        path: "npx",
+        args: mcpArgs
+      }
+    };
+    parsedObj.context_servers = contextServers;
+    return `${JSON.stringify(parsedObj, null, 2)}
+`;
+  }
+  if (target === "amp") {
+    const ampServers = parsedObj["amp.mcpServers"] && typeof parsedObj["amp.mcpServers"] === "object" && !Array.isArray(parsedObj["amp.mcpServers"]) ? { ...parsedObj["amp.mcpServers"] } : {};
+    ampServers[serverName] = {
+      command: "npx",
+      args: mcpArgs
+    };
+    parsedObj["amp.mcpServers"] = ampServers;
+    return `${JSON.stringify(parsedObj, null, 2)}
+`;
+  }
+  if (target === "opencode") {
+    if (!("$schema" in parsedObj)) {
+      parsedObj.$schema = "https://opencode.ai/config.json";
+    }
+    const mcpMap = parsedObj.mcp && typeof parsedObj.mcp === "object" && !Array.isArray(parsedObj.mcp) ? { ...parsedObj.mcp } : {};
+    mcpMap[serverName] = {
+      type: "local",
+      command: ["npx", ...mcpArgs],
+      enabled: true
+    };
+    parsedObj.mcp = mcpMap;
+    return `${JSON.stringify(parsedObj, null, 2)}
+`;
+  }
+  const mcpServers = parsedObj.mcpServers && typeof parsedObj.mcpServers === "object" && !Array.isArray(parsedObj.mcpServers) ? { ...parsedObj.mcpServers } : {};
+  mcpServers[serverName] = {
+    command: "npx",
+    args: mcpArgs
+  };
+  parsedObj.mcpServers = mcpServers;
+  return `${JSON.stringify(parsedObj, null, 2)}
+`;
+}
+function setupMcpForHarnesses(repoPath, options = {}) {
+  const resolvedRepo = path7.resolve(repoPath);
+  const targets = options.targets ?? CORE_RUNTIME_TARGETS;
+  const dryRun = options.dryRun ?? false;
+  const serverName = options.serverName ?? "skillops";
+  const actions = [];
+  for (const target of targets) {
+    const spec = RUNTIME_HARNESS_SPECS[target];
+    if (!spec.supportsMcp || !spec.mcpConfigPath) {
+      actions.push({
+        target,
+        display_name: spec.displayName,
+        relative_path: "n/a",
+        status: "unsupported"
+      });
+      continue;
+    }
+    const absPath = path7.join(resolvedRepo, spec.mcpConfigPath);
+    const exists = fs7.existsSync(absPath) && fs7.statSync(absPath).isFile();
+    const existingRaw = exists ? fs7.readFileSync(absPath, "utf-8") : null;
+    const updatedRaw = buildUpdatedMcpConfigContent(target, existingRaw, serverName);
+    let status;
+    if (!exists) {
+      status = "created";
+    } else if (existingRaw === updatedRaw) {
+      status = "unchanged";
+    } else {
+      status = "updated";
+    }
+    if (!dryRun && (status === "created" || status === "updated")) {
+      fs7.mkdirSync(path7.dirname(absPath), { recursive: true });
+      fs7.writeFileSync(absPath, updatedRaw, "utf-8");
+    }
+    actions.push({
+      target,
+      display_name: spec.displayName,
+      relative_path: spec.mcpConfigPath,
+      status
+    });
+  }
+  const configuredCount = actions.filter((a) => a.status !== "unsupported").length;
+  return {
+    repo_path: path7.basename(resolvedRepo) || ".",
+    dry_run: dryRun,
+    targets_requested: [...targets],
+    configured_count: configuredCount,
+    actions
+  };
+}
+function formatMcpSetupReport(report, format = "table") {
+  if (format === "json") {
+    return `${JSON.stringify(report, null, 2)}
+`;
+  }
+  if (format === "markdown") {
+    const lines2 = [
+      `## SkillOps Universal MCP Server Registration (\`${report.repo_path}\`)`,
+      "",
+      `- **Mode:** \`${report.dry_run ? "DRY-RUN" : "WRITE"}\``,
+      `- **Configured MCP Harnesses:** \`${report.configured_count}/${report.targets_requested.length}\``,
+      "",
+      "| Target | AI Coding Agent / IDE | MCP Config File | Status |",
+      "| :--- | :--- | :--- | :---: |",
+      ...report.actions.map(
+        (a) => `| \`${a.target}\` | **${a.display_name}** | \`${a.relative_path}\` | \`${a.status.toUpperCase()}\` |`
+      ),
+      ""
+    ];
+    return lines2.join("\n");
+  }
+  const lines = [
+    `=== SkillOps Universal MCP Server Setup [${report.dry_run ? "DRY-RUN" : "WRITE"}] ===`,
+    `Targets Requested : ${report.targets_requested.join(", ")}`,
+    `MCP Harnesses     : ${report.configured_count} configured`,
+    ...report.actions.map(
+      (a) => `  [${a.status.toUpperCase().padEnd(11)}] ${a.target.padEnd(11)} -> ${a.relative_path} (${a.display_name})`
+    ),
+    ""
+  ];
+  return lines.join("\n");
+}
+
+// src/sync/adapters.ts
+import crypto2 from "crypto";
+import fs8 from "fs";
+import path8 from "path";
+import YAML4 from "yaml";
+var CODEX_MARKER_START = "<!-- SKILLOPS:START -->";
+var CODEX_MARKER_END = "<!-- SKILLOPS:END -->";
+function computeSha256(content) {
+  return crypto2.createHash("sha256").update(content, "utf-8").digest("hex");
+}
+function renderSkillFilesForRuntime(parsed, target) {
+  const name = parsed.manifest.name;
+  const spec = RUNTIME_HARNESS_SPECS[target];
+  const files = [];
+  const globs = parsed.manifest.routing_signals.files_any.length > 0 ? parsed.manifest.routing_signals.files_any : ["**/*"];
+  const body = parsed.markdownBody.trim();
+  if (spec.skillFormat === "progressive-skill-dir") {
+    const baseDir = `${spec.skillsDir}/${name}`;
+    files.push({
+      target,
+      itemName: name,
+      relativePath: `${baseDir}/SKILL.md`,
+      content: parsed.rawText
+    });
+    for (const scriptFull of parsed.declaredScripts) {
+      const scriptRel = path8.relative(parsed.skillDir, scriptFull).replace(/\\/g, "/");
+      files.push({
+        target,
+        itemName: name,
+        relativePath: `${baseDir}/${scriptRel}`,
+        content: fs8.readFileSync(scriptFull, "utf-8")
+      });
+    }
+    for (const refFull of parsed.referenceFiles) {
+      const refRel = path8.relative(parsed.skillDir, refFull).replace(/\\/g, "/");
+      files.push({
+        target,
+        itemName: name,
+        relativePath: `${baseDir}/${refRel}`,
+        content: fs8.readFileSync(refFull, "utf-8")
+      });
+    }
+    return files;
+  }
+  if (target === "cursor") {
+    const mdcFrontmatter = YAML4.stringify({
+      description: parsed.manifest.description,
+      globs,
+      alwaysApply: false
+    }).trim();
+    files.push({
+      target,
+      itemName: name,
+      relativePath: `.cursor/rules/skillops-${name}.mdc`,
+      content: `---
+${mdcFrontmatter}
+---
+
+${body}
+`
+    });
+    return files;
+  }
+  if (target === "copilot") {
+    const applyTo = parsed.manifest.routing_signals.files_any.length > 0 ? parsed.manifest.routing_signals.files_any.join(",") : "**";
+    const instrFrontmatter = YAML4.stringify({
+      applyTo,
+      description: parsed.manifest.description
+    }).trim();
+    files.push({
+      target,
+      itemName: name,
+      relativePath: `.github/instructions/skillops-${name}.instructions.md`,
+      content: `---
+${instrFrontmatter}
+---
+
+${body}
+`
+    });
+    const promptFrontmatter = YAML4.stringify({
+      mode: "agent",
+      description: parsed.manifest.description
+    }).trim();
+    files.push({
+      target,
+      itemName: name,
+      relativePath: `.github/prompts/skillops-${name}.prompt.md`,
+      content: `---
+${promptFrontmatter}
+---
+
+${body}
+`
+    });
+    return files;
+  }
+  if (target === "windsurf") {
+    const wsFrontmatter = YAML4.stringify({
+      trigger: "model_decision",
+      description: parsed.manifest.description,
+      globs
+    }).trim();
+    files.push({
+      target,
+      itemName: name,
+      relativePath: `.windsurf/rules/skillops-${name}.md`,
+      content: `---
+${wsFrontmatter}
+---
+
+${body}
+`
+    });
+    return files;
+  }
+  if (target === "openhands") {
+    const ohFrontmatter = YAML4.stringify({
+      name,
+      type: "knowledge",
+      version: parsed.manifest.version,
+      agent: "CodeActAgent",
+      triggers: parsed.manifest.tags
+    }).trim();
+    files.push({
+      target,
+      itemName: name,
+      relativePath: `.openhands/microagents/skillops-${name}.md`,
+      content: `---
+${ohFrontmatter}
+---
+
+${body}
+`
+    });
+    return files;
+  }
+  if (target === "kiro") {
+    const kiroFrontmatter = YAML4.stringify({
+      inclusion: "fileMatch",
+      fileMatchPattern: globs[0] ?? "**/*",
+      description: parsed.manifest.description
+    }).trim();
+    files.push({
+      target,
+      itemName: name,
+      relativePath: `.kiro/steering/skillops-${name}.md`,
+      content: `---
+${kiroFrontmatter}
+---
+
+${body}
+`
+    });
+    return files;
+  }
+  const ruleFrontmatter = YAML4.stringify({
+    name,
+    description: parsed.manifest.description,
+    track: parsed.manifest.track,
+    tags: parsed.manifest.tags,
+    globs,
+    alwaysApply: false
+  }).trim();
+  files.push({
+    target,
+    itemName: name,
+    relativePath: `${spec.skillsDir}/skillops-${name}.md`,
+    content: `---
+${ruleFrontmatter}
+---
+
+${body}
+`
+  });
+  return files;
+}
+function renderSubagentFilesForRuntime(subagent, target) {
+  const name = subagent.manifest.name;
+  const spec = RUNTIME_HARNESS_SPECS[target];
+  const promptBody = subagent.systemPromptBody.trim();
+  const fm = YAML4.stringify({
+    name: subagent.manifest.name,
+    description: subagent.manifest.description,
+    model_tier: subagent.manifest.model_tier,
+    tools: subagent.manifest.tools,
+    max_output_tokens: subagent.manifest.max_output_tokens
+  }).trim();
+  const normalizedDoc = `---
+${fm}
+---
+
+${promptBody}
+`;
+  if (target === "claude" || target === "antigravity" || target === "codex" || target === "amp" || target === "goose" || target === "opencode") {
+    return [
+      {
+        target,
+        itemName: name,
+        relativePath: `${spec.subagentsDir}/${name}.md`,
+        content: normalizedDoc
+      }
+    ];
+  }
+  if (target === "copilot") {
+    return [
+      {
+        target,
+        itemName: name,
+        relativePath: `.github/agents/${name}.agent.md`,
+        content: normalizedDoc
+      }
+    ];
+  }
+  if (target === "cursor") {
+    const mdcFm = YAML4.stringify({
+      description: `[Subagent: ${name}] ${subagent.manifest.description}`,
+      alwaysApply: false
+    }).trim();
+    return [
+      {
+        target,
+        itemName: name,
+        relativePath: `.cursor/rules/skillops-agent-${name}.mdc`,
+        content: `---
+${mdcFm}
+---
+
+${promptBody}
+`
+      }
+    ];
+  }
+  if (target === "continue") {
+    const contFm = YAML4.stringify({
+      name,
+      description: subagent.manifest.description,
+      invokable: true
+    }).trim();
+    return [
+      {
+        target,
+        itemName: name,
+        relativePath: `.continue/prompts/skillops-agent-${name}.prompt`,
+        content: `---
+${contFm}
+---
+
+${promptBody}
+`
+      }
+    ];
+  }
+  if (target === "openhands") {
+    const ohFm = YAML4.stringify({
+      name: `agent-${name}`,
+      type: "knowledge",
+      version: "1.0.0",
+      agent: "CodeActAgent",
+      triggers: [name, ...subagent.manifest.tags]
+    }).trim();
+    return [
+      {
+        target,
+        itemName: name,
+        relativePath: `.openhands/microagents/skillops-agent-${name}.md`,
+        content: `---
+${ohFm}
+---
+
+${promptBody}
+`
+      }
+    ];
+  }
+  if (target === "amazonq") {
+    const qPayload = {
+      name,
+      description: subagent.manifest.description,
+      prompt: promptBody,
+      tools: subagent.manifest.tools,
+      max_output_tokens: subagent.manifest.max_output_tokens
+    };
+    return [
+      {
+        target,
+        itemName: name,
+        relativePath: `.amazonq/cli-agents/skillops-agent-${name}.json`,
+        content: `${JSON.stringify(qPayload, null, 2)}
+`
+      }
+    ];
+  }
+  return [
+    {
+      target,
+      itemName: name,
+      relativePath: `${spec.subagentsDir}/skillops-agent-${name}.md`,
+      content: normalizedDoc
+    }
+  ];
+}
+function renderCodexAgentsIndex(existingContent, skills, subagents) {
+  const blockLines = [
+    CODEX_MARKER_START,
+    "## SkillOps Routed Skills & Context-Isolated Subagents",
+    "",
+    "### Active Progressive Disclosure Skills",
+    ...skills.map(
+      (s) => `- **\`${s.manifest.name}\`** (\`.codex/skills/${s.manifest.name}/SKILL.md\`): ${s.manifest.description}`
+    ),
+    "",
+    "### Active Context-Isolated Subagents",
+    ...subagents.map(
+      (sa) => `- **\`${sa.manifest.name}\`** (\`.codex/agents/${sa.manifest.name}.md\`, max output \`${sa.manifest.max_output_tokens}\` tokens): ${sa.manifest.description}`
+    ),
+    CODEX_MARKER_END
+  ];
+  const managedBlock = blockLines.join("\n");
+  if (!existingContent || !existingContent.trim()) {
+    return `# AGENTS.md
+
+${managedBlock}
+`;
+  }
+  const startIdx = existingContent.indexOf(CODEX_MARKER_START);
+  const endIdx = existingContent.indexOf(CODEX_MARKER_END);
+  if (startIdx !== -1 && endIdx !== -1 && endIdx > startIdx) {
+    const before = existingContent.slice(0, startIdx).trimEnd();
+    const after = existingContent.slice(endIdx + CODEX_MARKER_END.length).trimStart();
+    return [before, managedBlock, after].filter(Boolean).join("\n\n") + "\n";
+  }
+  return `${existingContent.trimEnd()}
+
+${managedBlock}
+`;
+}
+function loadExistingLockfile(lockfilePath) {
+  if (!fs8.existsSync(lockfilePath) || !fs8.statSync(lockfilePath).isFile()) {
+    return null;
+  }
+  try {
+    const raw = JSON.parse(fs8.readFileSync(lockfilePath, "utf-8"));
+    return SyncLockfileSchema.parse(raw);
+  } catch {
+    return null;
+  }
+}
+function applyPlannedFiles(resolvedRepo, resolvedCatalog, targets, routedBundle, plannedFiles, options) {
+  const lockfilePath = path8.join(resolvedRepo, ".skillops-lock.json");
+  const existingLock = loadExistingLockfile(lockfilePath);
+  const newLockArtifacts = options.preserveUnlistedLockEntries ? { ...existingLock?.artifacts ?? {} } : {};
+  const artifacts = [];
+  const driftConflicts = [];
+  for (const pf of plannedFiles) {
+    const fullPath = path8.join(resolvedRepo, pf.relativePath);
+    const desiredSha = computeSha256(pf.content);
+    const previousEntry = existingLock?.artifacts[pf.relativePath];
+    const fileExists = fs8.existsSync(fullPath) && fs8.statSync(fullPath).isFile();
+    if (fileExists) {
+      const currentDiskText = fs8.readFileSync(fullPath, "utf-8");
+      const currentDiskSha = computeSha256(currentDiskText);
+      if (previousEntry && currentDiskSha !== previousEntry.sha256 && currentDiskSha !== desiredSha && !options.force) {
+        driftConflicts.push(pf.relativePath);
+        artifacts.push({
+          target: pf.target,
+          skill_name: pf.itemName,
+          relative_path: pf.relativePath,
+          sha256: currentDiskSha,
+          action: "conflict"
+        });
+        newLockArtifacts[pf.relativePath] = previousEntry;
+        continue;
+      }
+      if (currentDiskSha === desiredSha) {
+        artifacts.push({
+          target: pf.target,
+          skill_name: pf.itemName,
+          relative_path: pf.relativePath,
+          sha256: desiredSha,
+          action: "unchanged"
+        });
+        newLockArtifacts[pf.relativePath] = {
+          target: pf.target,
+          skill_name: pf.itemName,
+          relative_path: pf.relativePath,
+          sha256: desiredSha
+        };
+        continue;
+      }
+      if (!options.dryRun) {
+        fs8.mkdirSync(path8.dirname(fullPath), { recursive: true });
+        fs8.writeFileSync(fullPath, pf.content, "utf-8");
+      }
+      artifacts.push({
+        target: pf.target,
+        skill_name: pf.itemName,
+        relative_path: pf.relativePath,
+        sha256: desiredSha,
+        action: options.dryRun ? "planned" : "updated"
+      });
+      newLockArtifacts[pf.relativePath] = {
+        target: pf.target,
+        skill_name: pf.itemName,
+        relative_path: pf.relativePath,
+        sha256: desiredSha
+      };
+    } else {
+      if (!options.dryRun) {
+        fs8.mkdirSync(path8.dirname(fullPath), { recursive: true });
+        fs8.writeFileSync(fullPath, pf.content, "utf-8");
+      }
+      artifacts.push({
+        target: pf.target,
+        skill_name: pf.itemName,
+        relative_path: pf.relativePath,
+        sha256: desiredSha,
+        action: options.dryRun ? "planned" : "created"
+      });
+      newLockArtifacts[pf.relativePath] = {
+        target: pf.target,
+        skill_name: pf.itemName,
+        relative_path: pf.relativePath,
+        sha256: desiredSha
+      };
+    }
+  }
+  if (!options.dryRun && driftConflicts.length === 0) {
+    const lockData = SyncLockfileSchema.parse({
+      schema_version: "1.0",
+      skillops_version: SKILLOPS_VERSION,
+      targets: [...targets],
+      selected_skills: routedBundle.selected_skills.map((s) => s.name),
+      selected_subagents: routedBundle.recommended_subagents,
+      total_l1_tokens: routedBundle.total_l1_tokens,
+      artifacts: newLockArtifacts
+    });
+    fs8.writeFileSync(lockfilePath, `${JSON.stringify(lockData, null, 2)}
+`, "utf-8");
+  }
+  return SyncReportSchema.parse({
+    repo_path: resolvedRepo.replace(/\\/g, "/"),
+    catalog_path: resolvedCatalog.replace(/\\/g, "/"),
+    targets: [...targets],
+    dry_run: options.dryRun,
+    force: options.force,
+    routed_bundle: routedBundle,
+    artifacts,
+    drift_conflicts: driftConflicts,
+    lockfile_path: lockfilePath.replace(/\\/g, "/"),
+    passed: driftConflicts.length === 0 && routedBundle.passed_invariants
+  });
+}
+function syncRepository(repoPath, catalogDir, options = {}) {
+  const resolvedRepo = path8.resolve(repoPath);
+  const resolvedCatalog = path8.resolve(catalogDir);
+  const targets = options.targets?.length ? options.targets : CORE_RUNTIME_TARGETS;
+  const dryRun = options.dryRun ?? false;
+  const force = options.force ?? false;
+  const routedBundle = routeRepository(resolvedRepo, resolvedCatalog, options);
+  const selectedSkills = routedBundle.selected_skills.map(
+    (s) => parseSkillDirectory(s.skill_dir, { requireLayout: false })
+  );
+  const subagentMap = /* @__PURE__ */ new Map();
+  for (const saPath of discoverSubagentFiles(resolvedCatalog)) {
+    try {
+      const parsedSa = parseSubagentFile(saPath);
+      if (!subagentMap.has(parsedSa.manifest.name)) {
+        subagentMap.set(parsedSa.manifest.name, parsedSa);
+      }
+    } catch {
+    }
+  }
+  const selectedSubagents = [...subagentMap.values()];
+  const plannedFiles = [];
+  for (const target of targets) {
+    for (const skill of selectedSkills) {
+      plannedFiles.push(...renderSkillFilesForRuntime(skill, target));
+    }
+    for (const sa of selectedSubagents) {
+      plannedFiles.push(...renderSubagentFilesForRuntime(sa, target));
+    }
+    if (target === "codex") {
+      const agentsMdPath = path8.join(resolvedRepo, "AGENTS.md");
+      const existingAgentsMd = fs8.existsSync(agentsMdPath) && fs8.statSync(agentsMdPath).isFile() ? fs8.readFileSync(agentsMdPath, "utf-8") : null;
+      plannedFiles.push({
+        target: "codex",
+        itemName: "codex-agents-index",
+        relativePath: "AGENTS.md",
+        content: renderCodexAgentsIndex(existingAgentsMd, selectedSkills, selectedSubagents)
+      });
+    }
+  }
+  return applyPlannedFiles(resolvedRepo, resolvedCatalog, targets, routedBundle, plannedFiles, {
+    dryRun,
+    force,
+    preserveUnlistedLockEntries: false
+  });
+}
+function addSkillOrSubagent(repoPath, catalogDir, itemName, options = {}) {
+  const resolvedRepo = path8.resolve(repoPath);
+  const resolvedCatalog = path8.resolve(catalogDir);
+  const targets = options.targets?.length ? options.targets : CORE_RUNTIME_TARGETS;
+  const dryRun = options.dryRun ?? false;
+  const force = options.force ?? false;
+  const skillDirs = discoverSkillDirectories(resolvedCatalog);
+  let matchedSkill = null;
+  for (const dir of skillDirs) {
+    try {
+      const p = parseSkillDirectory(dir, { requireLayout: false });
+      if (p.manifest.name === itemName) {
+        matchedSkill = p;
+        break;
+      }
+    } catch {
+    }
+  }
+  let matchedSubagent = null;
+  if (!matchedSkill) {
+    for (const saPath of discoverSubagentFiles(resolvedCatalog)) {
+      try {
+        const sa = parseSubagentFile(saPath);
+        if (sa.manifest.name === itemName) {
+          matchedSubagent = sa;
+          break;
+        }
+      } catch {
+      }
+    }
+  }
+  if (!matchedSkill && !matchedSubagent) {
+    throw new Error(
+      `No Skill or Subagent named '${itemName}' found in catalog '${resolvedCatalog.replace(/\\/g, "/")}'.`
+    );
+  }
+  const plannedFiles = [];
+  for (const target of targets) {
+    if (matchedSkill) {
+      plannedFiles.push(...renderSkillFilesForRuntime(matchedSkill, target));
+    }
+    if (matchedSubagent) {
+      plannedFiles.push(...renderSubagentFilesForRuntime(matchedSubagent, target));
+    }
+  }
+  const routedBundle = routeRepository(resolvedRepo, resolvedCatalog);
+  return applyPlannedFiles(resolvedRepo, resolvedCatalog, targets, routedBundle, plannedFiles, {
+    dryRun,
+    force,
+    preserveUnlistedLockEntries: true
+  });
+}
+function pruneEmptyParentDirs(filePath, stopAtRepoRoot) {
+  const normalizedStop = path8.resolve(stopAtRepoRoot);
+  let currentDir = path8.dirname(path8.resolve(filePath));
+  while (currentDir.startsWith(normalizedStop) && currentDir !== normalizedStop && fs8.existsSync(currentDir)) {
+    try {
+      const entries = fs8.readdirSync(currentDir);
+      if (entries.length > 0) {
+        break;
+      }
+      fs8.rmdirSync(currentDir);
+      currentDir = path8.dirname(currentDir);
+    } catch {
+      break;
+    }
+  }
+}
+function stripCodexAgentsBlock(existingContent) {
+  const startIdx = existingContent.indexOf(CODEX_MARKER_START);
+  const endIdx = existingContent.indexOf(CODEX_MARKER_END);
+  if (startIdx === -1 || endIdx === -1 || endIdx <= startIdx) {
+    return existingContent;
+  }
+  const before = existingContent.slice(0, startIdx).trimEnd();
+  const after = existingContent.slice(endIdx + CODEX_MARKER_END.length).trimStart();
+  const combined = [before, after].filter(Boolean).join("\n\n").trim();
+  if (!combined || combined === "# AGENTS.md") {
+    return "";
+  }
+  return `${combined}
+`;
+}
+function removeSkillOrSubagent(repoPath, catalogDir, itemName, options = {}) {
+  const resolvedRepo = path8.resolve(repoPath);
+  const resolvedCatalog = path8.resolve(catalogDir);
+  const targetFilter = options.targets?.length ? new Set(options.targets) : null;
+  const dryRun = options.dryRun ?? false;
+  const force = options.force ?? false;
+  const lockfilePath = path8.join(resolvedRepo, ".skillops-lock.json");
+  const existingLock = loadExistingLockfile(lockfilePath);
+  if (!existingLock) {
+    throw new Error(
+      `No .skillops-lock.json found in '${resolvedRepo.replace(/\\/g, "/")}'. Run 'sync' or 'add' first.`
+    );
+  }
+  const matchingEntries = Object.entries(existingLock.artifacts).filter(
+    ([, entry]) => entry.skill_name === itemName && (!targetFilter || targetFilter.has(entry.target))
+  );
+  if (matchingEntries.length === 0) {
+    throw new Error(
+      `No synced artifacts found for '${itemName}' in .skillops-lock.json.`
+    );
+  }
+  const newLockArtifacts = { ...existingLock.artifacts };
+  const artifacts = [];
+  const driftConflicts = [];
+  for (const [relPath, entry] of matchingEntries) {
+    const fullPath = path8.join(resolvedRepo, relPath);
+    const fileExists = fs8.existsSync(fullPath) && fs8.statSync(fullPath).isFile();
+    if (fileExists) {
+      const currentDiskSha = computeSha256(fs8.readFileSync(fullPath, "utf-8"));
+      if (currentDiskSha !== entry.sha256 && !force) {
+        driftConflicts.push(relPath);
+        artifacts.push({
+          target: entry.target,
+          skill_name: entry.skill_name,
+          relative_path: relPath,
+          sha256: currentDiskSha,
+          action: "conflict"
+        });
+        continue;
+      }
+      if (!dryRun) {
+        fs8.unlinkSync(fullPath);
+        pruneEmptyParentDirs(fullPath, resolvedRepo);
+      }
+    }
+    artifacts.push({
+      target: entry.target,
+      skill_name: entry.skill_name,
+      relative_path: relPath,
+      sha256: entry.sha256,
+      action: dryRun ? "planned" : "removed"
+    });
+    delete newLockArtifacts[relPath];
+  }
+  const remainingForSkill = Object.values(newLockArtifacts).some(
+    (e) => e.skill_name === itemName
+  );
+  if (!dryRun && driftConflicts.length === 0) {
+    const updatedSkills = remainingForSkill ? existingLock.selected_skills : existingLock.selected_skills.filter((s) => s !== itemName);
+    const updatedSubagents = remainingForSkill ? existingLock.selected_subagents : existingLock.selected_subagents.filter((sa) => sa !== itemName);
+    const lockData = SyncLockfileSchema.parse({
+      ...existingLock,
+      skillops_version: SKILLOPS_VERSION,
+      selected_skills: updatedSkills,
+      selected_subagents: updatedSubagents,
+      artifacts: newLockArtifacts
+    });
+    fs8.writeFileSync(lockfilePath, `${JSON.stringify(lockData, null, 2)}
+`, "utf-8");
+  }
+  const routedBundle = routeRepository(resolvedRepo, resolvedCatalog);
+  return SyncReportSchema.parse({
+    repo_path: resolvedRepo.replace(/\\/g, "/"),
+    catalog_path: resolvedCatalog.replace(/\\/g, "/"),
+    targets: targetFilter ? [...targetFilter] : existingLock.targets,
+    dry_run: dryRun,
+    force,
+    routed_bundle: routedBundle,
+    artifacts,
+    drift_conflicts: driftConflicts,
+    lockfile_path: lockfilePath.replace(/\\/g, "/"),
+    passed: driftConflicts.length === 0
+  });
+}
+function cleanSyncedArtifacts(repoPath, catalogDir, options = {}) {
+  const resolvedRepo = path8.resolve(repoPath);
+  const resolvedCatalog = path8.resolve(catalogDir);
+  const dryRun = options.dryRun ?? false;
+  const force = options.force ?? false;
+  const lockfilePath = path8.join(resolvedRepo, ".skillops-lock.json");
+  const existingLock = loadExistingLockfile(lockfilePath);
+  const routedBundle = routeRepository(resolvedRepo, resolvedCatalog);
+  if (!existingLock) {
+    return SyncReportSchema.parse({
+      repo_path: resolvedRepo.replace(/\\/g, "/"),
+      catalog_path: resolvedCatalog.replace(/\\/g, "/"),
+      targets: [...ALL_RUNTIME_TARGETS],
+      dry_run: dryRun,
+      force,
+      routed_bundle: routedBundle,
+      artifacts: [],
+      drift_conflicts: [],
+      lockfile_path: lockfilePath.replace(/\\/g, "/"),
+      passed: true
+    });
+  }
+  const artifacts = [];
+  const driftConflicts = [];
+  for (const [relPath, entry] of Object.entries(existingLock.artifacts)) {
+    const fullPath = path8.join(resolvedRepo, relPath);
+    const fileExists = fs8.existsSync(fullPath) && fs8.statSync(fullPath).isFile();
+    if (fileExists) {
+      const diskText = fs8.readFileSync(fullPath, "utf-8");
+      const currentDiskSha = computeSha256(diskText);
+      if (currentDiskSha !== entry.sha256 && !force) {
+        driftConflicts.push(relPath);
+        artifacts.push({
+          target: entry.target,
+          skill_name: entry.skill_name,
+          relative_path: relPath,
+          sha256: currentDiskSha,
+          action: "conflict"
+        });
+        continue;
+      }
+      if (!dryRun) {
+        if (relPath === "AGENTS.md" && entry.skill_name === "codex-agents-index") {
+          const stripped = stripCodexAgentsBlock(diskText);
+          if (stripped) {
+            fs8.writeFileSync(fullPath, stripped, "utf-8");
+          } else {
+            fs8.unlinkSync(fullPath);
+          }
+        } else {
+          fs8.unlinkSync(fullPath);
+          pruneEmptyParentDirs(fullPath, resolvedRepo);
+        }
+      }
+    }
+    artifacts.push({
+      target: entry.target,
+      skill_name: entry.skill_name,
+      relative_path: relPath,
+      sha256: entry.sha256,
+      action: dryRun ? "planned" : "removed"
+    });
+  }
+  if (!dryRun && driftConflicts.length === 0 && fs8.existsSync(lockfilePath)) {
+    fs8.unlinkSync(lockfilePath);
+  }
+  return SyncReportSchema.parse({
+    repo_path: resolvedRepo.replace(/\\/g, "/"),
+    catalog_path: resolvedCatalog.replace(/\\/g, "/"),
+    targets: existingLock.targets,
+    dry_run: dryRun,
+    force,
+    routed_bundle: routedBundle,
+    artifacts,
+    drift_conflicts: driftConflicts,
+    lockfile_path: lockfilePath.replace(/\\/g, "/"),
+    passed: driftConflicts.length === 0
+  });
+}
+function formatSyncReport(report, format = "table") {
+  if (format === "json") {
+    return `${JSON.stringify(report, null, 2)}
+`;
+  }
+  if (format === "markdown") {
+    return [
+      "## SkillOps Multi-Runtime Sync Report",
+      "",
+      `- **Targets**: ${report.targets.map((t) => `\`${t}\``).join(", ")}`,
+      `- **Artifacts Synced**: \`${report.artifacts.length}\``,
+      `- **Drift Conflicts**: \`${report.drift_conflicts.length}\``,
+      `- **Status**: **${report.passed ? "PASS" : "CONFLICT"}**`,
+      "",
+      "| Target | Skill / Subagent | Relative Path | Action |",
+      "| :--- | :--- | :--- | :---: |",
+      ...report.artifacts.map(
+        (a) => `| \`${a.target}\` | \`${a.skill_name}\` | \`${a.relative_path}\` | \`${a.action}\` |`
+      ),
+      ""
+    ].join("\n");
+  }
+  return [
+    "=== SkillOps Multi-Runtime Transpiler & Sync Engine ===",
+    `Repo       : ${report.repo_path}`,
+    `Targets    : ${report.targets.join(", ")}`,
+    `Artifacts  : ${report.artifacts.length} file(s) [${report.passed ? "PASS" : "DRIFT CONFLICT"}]`,
+    ...report.artifacts.map(
+      (a) => `  [${a.action.toUpperCase()}] (${a.target}) ${a.relative_path}`
+    ),
+    ...report.drift_conflicts.map(
+      (c) => `  [DRIFT CONFLICT] ${c} modified locally. Re-run with --force to overwrite.`
+    ),
+    ""
+  ].join("\n");
+}
+
+// src/cli.ts
+var PACKAGE_ROOT = path9.resolve(path9.dirname(fileURLToPath(import.meta.url)), "..");
+function resolveCatalogDir(args, repoPath, loadedConfig) {
+  const catalogIdx = args.indexOf("--catalog");
+  if (catalogIdx !== -1 && args[catalogIdx + 1]) {
+    return path9.resolve(args[catalogIdx + 1]);
+  }
+  const baseRepo = repoPath ? path9.resolve(repoPath) : process.cwd();
+  if (loadedConfig?.catalog_dir) {
+    const cfgCatalog = path9.resolve(baseRepo, loadedConfig.catalog_dir);
+    if (fs9.existsSync(cfgCatalog)) {
+      return cfgCatalog;
+    }
+  }
+  if (repoPath) {
+    const repoCatalog = path9.join(path9.resolve(repoPath), "catalog");
+    if (fs9.existsSync(repoCatalog)) {
+      return repoCatalog;
+    }
+  }
+  const cwdCatalog = path9.resolve(process.cwd(), "catalog");
+  if (fs9.existsSync(cwdCatalog)) {
+    return cwdCatalog;
+  }
+  return path9.join(PACKAGE_ROOT, "catalog");
+}
+function runCli(argv) {
+  const args = argv.slice(2);
+  if (args.length === 0 || args.includes("--help") || args.includes("-h")) {
+    process.stdout.write(
+      [
+        `SkillOps v${SKILLOPS_VERSION} \u2014 The Zero-API NPX Engine for High-End AI Skills & Subagents`,
+        "",
+        "Usage: npx skillops@latest <command> [options]",
+        "",
+        "Commands:",
+        "  init      Scaffold .skillops.yml and detect repository agent harnesses",
+        "  list      Browse bundled high-end Skills & Subagents with token budgets",
+        "  add       Install a specific high-end Skill or Subagent into active runtimes",
+        "  remove    Surgically uninstall a synced Skill or Subagent from active runtimes",
+        "  clean     Remove all SkillOps-managed runtime artifacts tracked in .skillops-lock.json",
+        "  harnesses List all 20 supported AI coding agents, target paths, MCP support & repo detection",
+        "  doctor    Diagnose Node/Python environment, .skillops.yml config & lockfile SHA-256 drift",
+        "  status    Alias for 'doctor' \u2014 inspect repository lockfile drift and token tax status",
+        "  tokens    Analyze repository Startup Token Tax and Progressive Disclosure savings",
+        "  audit     Run L1/L2/L3 token budget linter, Subagent check & collision matrix",
+        "  route     Fingerprint repository stack and compile optimal <=12 skill bundle",
+        "  sync      Transpile Skills & Subagents across all 20 AI coding agents (Claude, Cursor, Windsurf, etc.)",
+        "  eval      Execute zero-API deterministic TDD benchmarks (with_skill vs without_skill)",
+        "  mcp       Start native JSON-RPC 2.0 stdio Model Context Protocol server",
+        "  mcp-setup Register SkillOps MCP server across all MCP-compatible AI coding IDEs & agents",
+        ""
+      ].join("\n")
+    );
+    return ExitCode.SUCCESS;
+  }
+  if (args.includes("--version") || args.includes("-V") || args[0] === "version") {
+    process.stdout.write(`skillops ${SKILLOPS_VERSION}
+`);
+    return ExitCode.SUCCESS;
+  }
+  const command = args[0];
+  if (command === "init") {
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = path9.resolve(
+      repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd()
+    );
+    const catalogDir = resolveCatalogDir(args, repoPath);
+    const profile = fingerprintRepository(repoPath);
+    const targetsIdx = args.indexOf("--targets");
+    const initTargets = targetsIdx !== -1 && args[targetsIdx + 1] ? resolveRuntimeTargets(args[targetsIdx + 1], repoPath) : profile.detected_harnesses.length > 0 ? profile.detected_harnesses : [...CORE_RUNTIME_TARGETS];
+    const configPayload = SkillOpsConfigSchema.parse({
+      version: "1.0",
+      catalog_dir: path9.relative(repoPath, catalogDir).replace(/\\/g, "/") || "catalog",
+      token_economy: {
+        startup_tax_budget: 2500,
+        max_active_skills: 12,
+        max_l1_tokens: 1500,
+        max_similarity: 0.78
+      },
+      detected_stack: {
+        languages: profile.languages,
+        frameworks: profile.frameworks
+      },
+      targets: initTargets
+    });
+    const configPath = path9.join(repoPath, ".skillops.yml");
+    fs9.mkdirSync(repoPath, { recursive: true });
+    fs9.writeFileSync(configPath, YAML5.stringify(configPayload), "utf-8");
+    process.stdout.write(
+      `Initialized SkillOps configuration at ${configPath.replace(/\\/g, "/")}
+`
+    );
+    return ExitCode.SUCCESS;
+  }
+  if (command === "list") {
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd();
+    const cfgRes = loadSkillOpsConfig(repoPath);
+    if (cfgRes.error) {
+      process.stderr.write(`Invalid .skillops.yml at ${cfgRes.configPath}: ${cfgRes.error}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const catalogDir = resolveCatalogDir(args, repoPath, cfgRes.config);
+    const formatIdx = args.indexOf("--format");
+    const rawFormat = formatIdx !== -1 && args[formatIdx + 1] ? args[formatIdx + 1] : "table";
+    const summary = auditCatalogTokenBudgets(catalogDir, { requireLayout: false });
+    if (rawFormat === "json") {
+      process.stdout.write(`${JSON.stringify(summary, null, 2)}
+`);
+      return ExitCode.SUCCESS;
+    }
+    if (rawFormat === "markdown") {
+      const lines2 = [
+        "## SkillOps Catalog \u2014 High-End Skills & Context-Isolated Subagents",
+        "",
+        "### Hybrid Executable Skills (`INV-SKILL-01` .. `03`)",
+        "",
+        "| Skill | L1 Tokens | L2 Lines | L2 Tokens | Scripts |Savings |",
+        "| :--- | ---: | ---: | ---: | ---: | ---: |",
+        ...summary.skills.map((s) => {
+          const totalRaw = s.l1Tokens + s.l2Tokens;
+          const savingsPct = totalRaw > 0 ? ((totalRaw - s.l1Tokens) / totalRaw * 100).toFixed(1) : "0.0";
+          return `| \`${s.skillName}\` | ${s.l1Tokens} | ${s.l2Lines} | ${s.l2Tokens} | ${s.scriptsCount} | ${savingsPct}% |`;
+        }),
+        "",
+        "### Context-Isolated Subagents (`INV-SKILL-04`)",
+        "",
+        "| Subagent | Prompt Tokens | Max Output Tokens | Tools |",
+        "| :--- | ---: | ---: | ---: |",
+        ...summary.subagents.map(
+          (a) => `| \`${a.subagentName}\` | ${a.systemPromptTokens} | <= ${a.maxOutputTokens} | ${a.tools.length} |`
+        ),
+        ""
+      ];
+      process.stdout.write(lines2.join("\n"));
+      return ExitCode.SUCCESS;
+    }
+    const lines = [
+      `=== SkillOps Catalog (v${SKILLOPS_VERSION}) ===`,
+      `Skills (${summary.skills.length}) \u2014 Total L1 Routing Tax: ${summary.totalL1Tokens} tokens`,
+      ...summary.skills.map(
+        (s) => `  [SKILL] ${s.skillName} \u2014 L1: ${s.l1Tokens}t | L2: ${s.l2Lines} lines (${s.l2Tokens}t) | L3 Scripts: ${s.scriptsCount}`
+      ),
+      `Subagents (${summary.subagents.length}) \u2014 Context-Isolated Specialist Agents:`,
+      ...summary.subagents.map(
+        (a) => `  [SUBAGENT] ${a.subagentName} (prompt=${a.systemPromptTokens}t, max_out<=${a.maxOutputTokens}t, tools=${a.tools.length})`
+      ),
+      ""
+    ];
+    process.stdout.write(lines.join("\n"));
+    return ExitCode.SUCCESS;
+  }
+  if (command === "audit") {
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd();
+    const cfgRes = loadSkillOpsConfig(repoPath);
+    if (cfgRes.error) {
+      process.stderr.write(`Invalid .skillops.yml at ${cfgRes.configPath}: ${cfgRes.error}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const catalogDir = resolveCatalogDir(args, repoPath, cfgRes.config);
+    const strict = args.includes("--strict");
+    const requireLayout = args.includes("--require-layout");
+    const formatIdx = args.indexOf("--format");
+    const format = formatIdx !== -1 && args[formatIdx + 1] ? args[formatIdx + 1] : "table";
+    const report = auditCatalog(catalogDir, { requireLayout });
+    if (format === "json") {
+      process.stdout.write(`${JSON.stringify(report, null, 2)}
+`);
+    } else if (format === "github") {
+      const ghLines = [];
+      for (const err of report.budget_errors) {
+        ghLines.push(`::error title=SkillOps Budget/Contract Error::${err}`);
+      }
+      for (const col of report.blocking_collisions) {
+        ghLines.push(
+          `::error title=SkillOps Blocking Collision::${col.skill_a} <-> ${col.skill_b} cosine=${col.similarity.toFixed(4)} (shared: ${col.shared_terms.join(", ")})`
+        );
+      }
+      for (const col of report.high_risk_collisions) {
+        ghLines.push(
+          `::warning title=SkillOps High-Risk Collision::${col.skill_a} <-> ${col.skill_b} cosine=${col.similarity.toFixed(4)} (shared: ${col.shared_terms.join(", ")})`
+        );
+      }
+      ghLines.push(
+        `::notice title=SkillOps Catalog Audit::Audited ${report.skills_audited} skills and ${report.subagents_audited} subagents (L1=${report.total_l1_tokens}t, max_cosine=${report.max_similarity.toFixed(4)}).`
+      );
+      process.stdout.write(`${ghLines.join("\n")}
+`);
+    } else {
+      process.stdout.write(
+        [
+          `=== SkillOps Zero-API Catalog & Subagent Auditor (v${SKILLOPS_VERSION}) ===`,
+          `Catalog: ${report.catalog_path}`,
+          `Skills Audited: ${report.skills_audited} | Subagents Audited: ${report.subagents_audited}`,
+          `Total L1 Tokens: ${report.total_l1_tokens} | Max Pairwise Cosine: ${report.max_similarity.toFixed(4)}`,
+          `Budget/Contract Errors: ${report.budget_errors.length}`,
+          ...report.pairs.map(
+            (p) => `  [${p.severity}] ${p.skill_a} <-> ${p.skill_b}: cosine=${p.similarity.toFixed(4)} (shared: ${p.shared_terms.join(", ")})`
+          ),
+          ...report.budget_errors.map((e) => `  [ERROR] ${e}`),
+          ""
+        ].join("\n")
+      );
+    }
+    if (report.budget_errors.length > 0) {
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    if (report.blocking_collisions.length > 0 || strict && report.high_risk_collisions.length > 0) {
+      return ExitCode.COLLISION_ERROR;
+    }
+    return ExitCode.SUCCESS;
+  }
+  if (command === "tokens") {
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd();
+    const cfgRes = loadSkillOpsConfig(repoPath);
+    if (cfgRes.error) {
+      process.stderr.write(`Invalid .skillops.yml at ${cfgRes.configPath}: ${cfgRes.error}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const catalogDir = resolveCatalogDir(args, repoPath, cfgRes.config);
+    const budgetIdx = args.indexOf("--budget");
+    const startupTaxBudget = budgetIdx !== -1 && args[budgetIdx + 1] ? Number.parseInt(args[budgetIdx + 1], 10) : cfgRes.config?.token_economy.startup_tax_budget ?? 2500;
+    const formatIdx = args.indexOf("--format");
+    const rawFormat = formatIdx !== -1 && args[formatIdx + 1] ? args[formatIdx + 1] : "table";
+    const format = rawFormat === "json" || rawFormat === "markdown" || rawFormat === "github" ? rawFormat : "table";
+    const strict = args.includes("--strict");
+    const report = analyzeRepoTokenEconomy(repoPath, {
+      catalogDir,
+      startupTaxBudget
+    });
+    process.stdout.write(formatTokenEconomyReport(report, format));
+    if (strict && !report.passed_budget) {
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    return ExitCode.SUCCESS;
+  }
+  if (command === "route") {
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd();
+    const cfgRes = loadSkillOpsConfig(repoPath);
+    if (cfgRes.error) {
+      process.stderr.write(`Invalid .skillops.yml at ${cfgRes.configPath}: ${cfgRes.error}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const catalogDir = resolveCatalogDir(args, repoPath, cfgRes.config);
+    const taskIdx = args.indexOf("--task");
+    const taskPrompt = taskIdx !== -1 && args[taskIdx + 1] ? args[taskIdx + 1] : "";
+    const maxSkillsIdx = args.indexOf("--max-skills");
+    const maxSkills = maxSkillsIdx !== -1 && args[maxSkillsIdx + 1] ? Number.parseInt(args[maxSkillsIdx + 1], 10) : cfgRes.config?.token_economy.max_active_skills ?? 12;
+    const maxL1Idx = args.indexOf("--max-l1-tokens");
+    const maxL1Tokens = maxL1Idx !== -1 && args[maxL1Idx + 1] ? Number.parseInt(args[maxL1Idx + 1], 10) : cfgRes.config?.token_economy.max_l1_tokens ?? 1500;
+    const maxSimIdx = args.indexOf("--max-similarity");
+    const maxSimilarity = maxSimIdx !== -1 && args[maxSimIdx + 1] ? Number.parseFloat(args[maxSimIdx + 1]) : cfgRes.config?.token_economy.max_similarity ?? 0.78;
+    const formatIdx = args.indexOf("--format");
+    const rawFormat = formatIdx !== -1 && args[formatIdx + 1] ? args[formatIdx + 1] : "table";
+    const format = rawFormat === "json" || rawFormat === "markdown" ? rawFormat : "table";
+    const bundle = routeRepository(repoPath, catalogDir, {
+      taskPrompt,
+      maxSkills,
+      maxL1Tokens,
+      maxSimilarity
+    });
+    process.stdout.write(formatRoutedBundle(bundle, format));
+    return bundle.passed_invariants ? ExitCode.SUCCESS : ExitCode.ERROR;
+  }
+  if (command === "sync") {
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd();
+    const cfgRes = loadSkillOpsConfig(repoPath);
+    if (cfgRes.error) {
+      process.stderr.write(`Invalid .skillops.yml at ${cfgRes.configPath}: ${cfgRes.error}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const catalogDir = resolveCatalogDir(args, repoPath, cfgRes.config);
+    const targetsIdx = args.indexOf("--targets");
+    let targets;
+    try {
+      targets = targetsIdx !== -1 && args[targetsIdx + 1] ? resolveRuntimeTargets(args[targetsIdx + 1], repoPath) : cfgRes.config?.targets ?? [...CORE_RUNTIME_TARGETS];
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      process.stderr.write(`Invalid --targets: ${msg}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const dryRun = args.includes("--dry-run");
+    const force = args.includes("--force");
+    const formatIdx = args.indexOf("--format");
+    const rawFormat = formatIdx !== -1 && args[formatIdx + 1] ? args[formatIdx + 1] : "table";
+    const format = rawFormat === "json" || rawFormat === "markdown" ? rawFormat : "table";
+    const report = syncRepository(repoPath, catalogDir, {
+      targets,
+      dryRun,
+      force,
+      maxSkills: cfgRes.config?.token_economy.max_active_skills,
+      maxL1Tokens: cfgRes.config?.token_economy.max_l1_tokens,
+      maxSimilarity: cfgRes.config?.token_economy.max_similarity
+    });
+    process.stdout.write(formatSyncReport(report, format));
+    return report.passed ? ExitCode.SUCCESS : ExitCode.ERROR;
+  }
+  if (command === "add") {
+    const itemName = args[1];
+    if (!itemName || itemName.startsWith("-")) {
+      process.stderr.write("Usage: npx skillops@latest add <skill-or-subagent-name> [options]\n");
+      return ExitCode.ERROR;
+    }
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd();
+    const cfgRes = loadSkillOpsConfig(repoPath);
+    if (cfgRes.error) {
+      process.stderr.write(`Invalid .skillops.yml at ${cfgRes.configPath}: ${cfgRes.error}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const catalogDir = resolveCatalogDir(args, repoPath, cfgRes.config);
+    const targetsIdx = args.indexOf("--targets");
+    let targets;
+    try {
+      targets = targetsIdx !== -1 && args[targetsIdx + 1] ? resolveRuntimeTargets(args[targetsIdx + 1], repoPath) : cfgRes.config?.targets ?? [...CORE_RUNTIME_TARGETS];
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      process.stderr.write(`Invalid --targets: ${msg}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const dryRun = args.includes("--dry-run");
+    const force = args.includes("--force");
+    try {
+      const report = addSkillOrSubagent(repoPath, catalogDir, itemName, {
+        targets,
+        dryRun,
+        force
+      });
+      process.stdout.write(formatSyncReport(report, "table"));
+      return report.passed ? ExitCode.SUCCESS : ExitCode.ERROR;
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      process.stderr.write(`Error: ${msg}
+`);
+      return ExitCode.ERROR;
+    }
+  }
+  if (command === "remove") {
+    const itemName = args[1];
+    if (!itemName || itemName.startsWith("-")) {
+      process.stderr.write("Usage: npx skillops@latest remove <skill-or-subagent-name> [options]\n");
+      return ExitCode.ERROR;
+    }
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd();
+    const cfgRes = loadSkillOpsConfig(repoPath);
+    if (cfgRes.error) {
+      process.stderr.write(`Invalid .skillops.yml at ${cfgRes.configPath}: ${cfgRes.error}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const catalogDir = resolveCatalogDir(args, repoPath, cfgRes.config);
+    const targetsIdx = args.indexOf("--targets");
+    const rawTargetsArg = targetsIdx !== -1 && args[targetsIdx + 1] ? args[targetsIdx + 1] : void 0;
+    const dryRun = args.includes("--dry-run");
+    const force = args.includes("--force");
+    const formatIdx = args.indexOf("--format");
+    const rawFormat = formatIdx !== -1 && args[formatIdx + 1] ? args[formatIdx + 1] : "table";
+    const format = rawFormat === "json" || rawFormat === "markdown" ? rawFormat : "table";
+    try {
+      const targets = rawTargetsArg ? resolveRuntimeTargets(rawTargetsArg, repoPath) : void 0;
+      const report = removeSkillOrSubagent(repoPath, catalogDir, itemName, {
+        targets,
+        dryRun,
+        force
+      });
+      process.stdout.write(formatSyncReport(report, format));
+      return report.passed ? ExitCode.SUCCESS : ExitCode.ERROR;
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      process.stderr.write(`Error: ${msg}
+`);
+      return ExitCode.ERROR;
+    }
+  }
+  if (command === "clean") {
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd();
+    const cfgRes = loadSkillOpsConfig(repoPath);
+    if (cfgRes.error) {
+      process.stderr.write(`Invalid .skillops.yml at ${cfgRes.configPath}: ${cfgRes.error}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const catalogDir = resolveCatalogDir(args, repoPath, cfgRes.config);
+    const dryRun = args.includes("--dry-run");
+    const force = args.includes("--force");
+    const formatIdx = args.indexOf("--format");
+    const rawFormat = formatIdx !== -1 && args[formatIdx + 1] ? args[formatIdx + 1] : "table";
+    const format = rawFormat === "json" || rawFormat === "markdown" ? rawFormat : "table";
+    const report = cleanSyncedArtifacts(repoPath, catalogDir, { dryRun, force });
+    process.stdout.write(formatSyncReport(report, format));
+    return report.passed ? ExitCode.SUCCESS : ExitCode.ERROR;
+  }
+  if (command === "eval") {
+    const catalogDir = resolveCatalogDir(args);
+    const skillIdx = args.indexOf("--skill");
+    const skillFilter = skillIdx !== -1 && args[skillIdx + 1] ? args[skillIdx + 1] : void 0;
+    const formatIdx = args.indexOf("--format");
+    const rawFormat = formatIdx !== -1 && args[formatIdx + 1] ? args[formatIdx + 1] : "table";
+    const format = rawFormat === "json" || rawFormat === "markdown" || rawFormat === "html" || rawFormat === "github" ? rawFormat : "table";
+    const outIdx = args.indexOf("--out");
+    const outPath = outIdx !== -1 && args[outIdx + 1] ? path9.resolve(args[outIdx + 1]) : null;
+    const strict = args.includes("--strict");
+    const summary = evaluateCatalog(catalogDir, { skillFilter });
+    const rendered = formatEvalSummary(summary, format);
+    if (outPath) {
+      fs9.mkdirSync(path9.dirname(outPath), { recursive: true });
+      fs9.writeFileSync(outPath, rendered, "utf-8");
+    }
+    process.stdout.write(rendered);
+    if (strict && !summary.passed) {
+      return ExitCode.EVAL_REGRESSION_ERROR;
+    }
+    return ExitCode.SUCCESS;
+  }
+  if (command === "harnesses") {
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = path9.resolve(
+      repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd()
+    );
+    const formatIdx = args.indexOf("--format");
+    const rawFormat = formatIdx !== -1 && args[formatIdx + 1] ? args[formatIdx + 1] : "table";
+    const format = rawFormat === "json" || rawFormat === "markdown" ? rawFormat : "table";
+    const report = inspectHarnesses(repoPath);
+    process.stdout.write(formatHarnessInspectionReport(report, format));
+    return ExitCode.SUCCESS;
+  }
+  if (command === "doctor" || command === "status") {
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = path9.resolve(
+      repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd()
+    );
+    const loadedConfigRes = loadSkillOpsConfig(repoPath);
+    const catalogDir = resolveCatalogDir(args, repoPath, loadedConfigRes.config);
+    const formatIdx = args.indexOf("--format");
+    const rawFormat = formatIdx !== -1 && args[formatIdx + 1] ? args[formatIdx + 1] : "table";
+    const format = rawFormat === "json" || rawFormat === "markdown" || rawFormat === "github" ? rawFormat : "table";
+    const strict = args.includes("--strict");
+    const report = diagnoseRepository(repoPath, { catalogDir });
+    process.stdout.write(`${formatDoctorReport(report, format)}
+`);
+    if (!report.config_valid) {
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    if (!report.lockfile_valid || report.drifted_artifacts_count > 0 || report.missing_artifacts_count > 0) {
+      return ExitCode.ERROR;
+    }
+    if (strict && report.status !== "pass") {
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    return ExitCode.SUCCESS;
+  }
+  if (command === "mcp") {
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = path9.resolve(
+      repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd()
+    );
+    const catalogDir = resolveCatalogDir(args, repoPath);
+    startMcpStdioServer({ repoPath, catalogDir });
+    return ExitCode.SUCCESS;
+  }
+  if (command === "mcp-setup") {
+    const repoIdx = args.indexOf("--repo");
+    const repoPath = path9.resolve(
+      repoIdx !== -1 && args[repoIdx + 1] ? args[repoIdx + 1] : process.cwd()
+    );
+    const cfgRes = loadSkillOpsConfig(repoPath);
+    if (cfgRes.error) {
+      process.stderr.write(`Invalid .skillops.yml at ${cfgRes.configPath}: ${cfgRes.error}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const targetsIdx = args.indexOf("--targets");
+    let targets;
+    try {
+      targets = targetsIdx !== -1 && args[targetsIdx + 1] ? resolveRuntimeTargets(args[targetsIdx + 1], repoPath) : cfgRes.config?.targets ?? [...CORE_RUNTIME_TARGETS];
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      process.stderr.write(`Invalid --targets: ${msg}
+`);
+      return ExitCode.BUDGET_OR_CONTRACT_ERROR;
+    }
+    const dryRun = args.includes("--dry-run");
+    const formatIdx = args.indexOf("--format");
+    const rawFormat = formatIdx !== -1 && args[formatIdx + 1] ? args[formatIdx + 1] : "table";
+    const format = rawFormat === "json" || rawFormat === "markdown" ? rawFormat : "table";
+    const report = setupMcpForHarnesses(repoPath, { targets, dryRun });
+    process.stdout.write(formatMcpSetupReport(report, format));
+    return ExitCode.SUCCESS;
+  }
+  process.stderr.write(`Unknown command '${command}'. Run 'npx skillops@latest --help'.
+`);
+  return ExitCode.ERROR;
+}
+function isDirectCliInvocation() {
+  const entryArg = process.argv[1];
+  if (!entryArg) {
+    return false;
+  }
+  try {
+    const resolvedArg = fs9.existsSync(entryArg) ? fs9.realpathSync(entryArg) : path9.resolve(entryArg);
+    const selfPath = fileURLToPath(import.meta.url);
+    const resolvedSelf = fs9.existsSync(selfPath) ? fs9.realpathSync(selfPath) : selfPath;
+    const base = path9.basename(resolvedArg, path9.extname(resolvedArg));
+    return pathToFileURL(resolvedArg).href === pathToFileURL(resolvedSelf).href || base === "skillops" || base === "skillops-cli";
+  } catch {
+    return false;
+  }
+}
+if (isDirectCliInvocation()) {
+  const code = runCli(process.argv);
+  process.exit(code);
+}
+export {
+  runCli
+};