yugoo-design 0.1.2 → 0.2.0

package/payload/shared/scripts/{core-entry-B6zaTh1o.mjs → core-entry-DESmwP78.mjs}

@@ -1563,186 +1563,6 @@ function DesignResumeActionId(value) {
 	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,255}$/.test(value)) throw new Error(`invalid resume action id ${JSON.stringify(value)}`);
 	return value;
 }
-//#endregion
-//#region packages/core/src/project-content-transaction.ts
-/** Recoverable same-project content adoption. Git is the publication authority. */
-const marker$1 = (root) => join(root, ".git", "design-system-content-adoption");
-const pendingPath = (root) => join(marker$1(root), "pending.json");
-/** Every ordinary project read fails closed while crash/journal reconciliation is pending. */
-async function assertProjectContentSettled(root) {
-	try {
-		await lstat(marker$1(root));
-	} catch (error) {
-		if (error.code === "ENOENT") return;
-		throw error;
-	}
-	throw new Error("project content: adoption reconciliation is pending; recover this exact project before reading or writing");
-}
-function target(root, path) {
-	if (path !== "project.json" && !path.startsWith("design_files/")) throw new Error("project content: adoption path is outside project content");
-	if (/[\\:\u0000-\u001f]/u.test(path) || path.split("/").some((part) => !part || part === "." || part === "..")) throw new Error("project content: unsafe adoption path");
-	const result = resolve(root, path), rel = relative(root, result);
-	if (isAbsolute(rel) || rel.startsWith("..")) throw new Error("project content: adoption path escapes project");
-	return result;
-}
-async function readOptional(path) {
-	try {
-		const info = await lstat(path);
-		if (!info.isFile() || info.isSymbolicLink()) throw new Error("project content: expected a regular file");
-		return await readFile(path);
-	} catch (error) {
-		if (error.code === "ENOENT") return void 0;
-		throw error;
-	}
-}
-async function noSymlinkParents(root, path) {
-	for (let current = dirname(path); current !== root; current = dirname(current)) try {
-		if (!(await lstat(current)).isDirectory()) throw new Error("project content: unsafe parent directory");
-	} catch (error) {
-		if (error.code !== "ENOENT") throw error;
-	}
-}
-async function durableWrite(path, bytes) {
-	const temp = `${path}.${randomUUID()}.tmp`;
-	const file = await open(temp, "wx", 384);
-	try {
-		await file.writeFile(bytes);
-		await file.sync();
-	} finally {
-		await file.close();
-	}
-	try {
-		await rename(temp, path);
-	} finally {
-		await rm(temp, { force: true });
-	}
-}
-const encoded = (bytes) => bytes === void 0 ? null : Buffer.from(bytes).toString("base64");
-const decoded = (bytes) => bytes === null ? void 0 : Buffer.from(bytes, "base64");
-const same = (left, right) => left === void 0 ? right === void 0 : right !== void 0 && Buffer.from(left).equals(Buffer.from(right));
-/** No registry change, new project identity, serial pin update or second model authority. */
-var ProjectContentTransaction = class {
-	options;
-	git;
-	constructor(options) {
-		this.options = options;
-		if (!isAbsolute(options.root)) throw new Error("project content: root must be absolute");
-		this.git = new GitVersioning(options.spawn, options.root);
-	}
-	async adopt(input) {
-		return this.options.mutate(async () => {
-			await assertProjectContentSettled(this.options.root);
-			if (!input.files.has("project.json") || input.files.size > 4096 || !/^[a-f0-9]{64}$/u.test(input.contentHash)) throw new Error("project content: invalid bounded candidate adoption");
-			if (await this.git.head() !== input.sourceCheckpoint) throw new Error("project content: stale migration checkpoint");
-			const files = new Map([...input.files].map(([path, bytes]) => [path, bytes === void 0 ? void 0 : Buffer.from(bytes)]));
-			const sourceText = await this.git.readTextAt(input.sourceCheckpoint, "project.json");
-			const targetBytes = files.get("project.json");
-			if (!sourceText || !targetBytes) throw new Error("project content: source and target metadata are required");
-			const source = parseDesignProjectJson(sourceText), metadata = parseDesignProjectJson(targetBytes.toString("utf8"));
-			if (source.id !== input.projectId || metadata.id !== source.id || metadata.createdAt !== source.createdAt || metadata.name !== source.name || metadata.knowledge.provider !== source.knowledge.provider || metadata.kit?.contentHash !== input.contentHash) throw new Error("project content: candidate must preserve project identity and own the target fingerprint");
-			let total = 0;
-			const entries = [];
-			for (const [path, after] of files) {
-				const livePath = target(this.options.root, path);
-				await noSymlinkParents(this.options.root, livePath);
-				const before = await this.git.readBytesAt(input.sourceCheckpoint, path, void 0, 67108864);
-				if (!same(before, await readOptional(livePath))) throw new Error(`project content: uncommitted edit at ${path}; preserve it before migration`);
-				total += (before?.byteLength ?? 0) + (after?.byteLength ?? 0);
-				if (total > 134217728) throw new Error("project content: migration receipt exceeds byte limit");
-				entries.push({
-					path,
-					before: encoded(before),
-					after: encoded(after)
-				});
-			}
-			await input.validate(files);
-			if (await this.git.head() !== input.sourceCheckpoint) throw new Error("project content: stale migration checkpoint");
-			for (const entry of entries) if (!same(decoded(entry.before), await readOptional(target(this.options.root, entry.path)))) throw new Error(`project content: edit arrived during validation at ${entry.path}`);
-			const pending = {
-				formatVersion: 1,
-				operationId: randomUUID(),
-				projectId: input.projectId,
-				sourceCheckpoint: input.sourceCheckpoint,
-				contentHash: input.contentHash,
-				entries,
-				...this.options.journalOwner === void 0 ? {} : { journalOwner: this.options.journalOwner }
-			};
-			const staging = `${marker$1(this.options.root)}-${pending.operationId}.tmp`;
-			await mkdir(staging);
-			try {
-				await durableWrite(join(staging, "pending.json"), Buffer.from(JSON.stringify(pending)));
-				await rename(staging, marker$1(this.options.root));
-			} finally {
-				await rm(staging, {
-					recursive: true,
-					force: true
-				});
-			}
-			await this.options.boundary?.("prepared");
-			await this.git.commitExact(`design: content upgrade ${pending.operationId}`, files, input.sourceCheckpoint);
-			await this.options.boundary?.("committed");
-			return this.reconcile(pending);
-		});
-	}
-	async recover() {
-		return this.options.mutate(async () => {
-			const bytes = await readOptional(pendingPath(this.options.root));
-			if (!bytes) {
-				await assertProjectContentSettled(this.options.root);
-				return;
-			}
-			if (bytes.length > 188743680) throw new Error("project content: oversized recovery receipt");
-			const pending = JSON.parse(bytes.toString("utf8"));
-			const base64 = (value) => value === null || typeof value === "string" && Buffer.from(value, "base64").toString("base64") === value;
-			if (pending.formatVersion !== 1 || !Array.isArray(pending.entries) || !pending.entries.length || pending.entries.length > 4096 || !/^[a-f0-9]{64}$/u.test(pending.contentHash) || !/^[a-f0-9-]{36}$/u.test(pending.operationId) || !/^[a-f0-9-]{36}$/u.test(pending.projectId) || !/^[a-f0-9]{40,64}$/u.test(pending.sourceCheckpoint) || pending.journalOwner !== void 0 && (typeof pending.journalOwner !== "string" || !pending.journalOwner || pending.journalOwner.length > 256 || /[\u0000-\u001f]/u.test(pending.journalOwner)) || !pending.entries.some((entry) => entry.path === "project.json") || new Set(pending.entries.map((entry) => entry.path)).size !== pending.entries.length || pending.entries.some((entry) => typeof entry.path !== "string" || !base64(entry.before) || !base64(entry.after))) throw new Error("project content: invalid recovery receipt");
-			const metadataEntry = pending.entries.find((entry) => entry.path === "project.json");
-			const beforeMetadata = decoded(metadataEntry.before), afterMetadata = decoded(metadataEntry.after);
-			if (!beforeMetadata || !afterMetadata || !same(beforeMetadata, await this.git.readBytesAt(pending.sourceCheckpoint, "project.json"))) throw new Error("project content: recovery source metadata does not match its checkpoint");
-			const before = parseDesignProjectJson(beforeMetadata.toString("utf8")), after = parseDesignProjectJson(afterMetadata.toString("utf8"));
-			if (before.id !== pending.projectId || after.id !== pending.projectId || before.name !== after.name || before.createdAt !== after.createdAt || before.knowledge.provider !== after.knowledge.provider || after.kit?.contentHash !== pending.contentHash) throw new Error("project content: invalid recovery identity/fingerprint");
-			const head = await this.git.head();
-			if (!((await this.git.history(1))[0]?.subject === `design: content upgrade ${pending.operationId}`)) {
-				for (const entry of pending.entries) if (!same(decoded(entry.before), await readOptional(target(this.options.root, entry.path))) || !same(decoded(entry.before), head ? await this.git.readBytesAt(head, entry.path) : void 0)) throw new Error("project content: external edit conflicts with recovery; preserve it before retry");
-				await rm(marker$1(this.options.root), { recursive: true });
-				return;
-			}
-			return this.reconcile(pending);
-		});
-	}
-	async reconcile(pending) {
-		const checkpoint = await this.git.head();
-		if (!checkpoint || checkpoint === pending.sourceCheckpoint) throw new Error("project content: adoption did not publish a checkpoint");
-		const history = await this.git.history(2);
-		if (history[0]?.commit !== checkpoint || history[1]?.commit !== pending.sourceCheckpoint || history[0]?.subject !== `design: content upgrade ${pending.operationId}`) throw new Error("project content: HEAD changed after adoption; reconcile the exact checkpoint before continuing");
-		for (const entry of pending.entries) {
-			const path = target(this.options.root, entry.path);
-			await noSymlinkParents(this.options.root, path);
-			const live = await readOptional(path), after = decoded(entry.after);
-			if (!same(after, await this.git.readBytesAt(checkpoint, entry.path))) throw new Error("project content: receipt does not match committed candidate");
-			if (!same(live, decoded(entry.before)) && !same(live, after)) throw new Error(`project content: external edit conflicts at ${entry.path}`);
-		}
-		for (const entry of pending.entries) {
-			const path = target(this.options.root, entry.path), bytes = decoded(entry.after);
-			if (bytes === void 0) await rm(path, { force: true });
-			else {
-				await mkdir(dirname(path), { recursive: true });
-				await durableWrite(path, bytes);
-			}
-		}
-		await this.options.boundary?.("files-synced");
-		const receipt = {
-			operationId: pending.operationId,
-			projectId: pending.projectId,
-			sourceCheckpoint: pending.sourceCheckpoint,
-			checkpoint,
-			contentHash: pending.contentHash
-		};
-		await this.options.record(receipt, pending.journalOwner);
-		await this.options.boundary?.("journal-recorded");
-		await rm(marker$1(this.options.root), { recursive: true });
-		return receipt;
-	}
-};
 const PROJECT_KIND = "dsh-design-project";
 const PROJECT_FILE = "project.json";
 const PROJECT_README_FILE = "README.md";
@@ -2076,7 +1896,6 @@ var DesignProjectManager = class {
 	/** Display-only identity read. Does not authorize publication or execution. */
 	async readMetadata(projectRoot) {
 		const root = requireRoot(projectRoot);
-		await assertProjectContentSettled(root);
 		await this.fs.requireDirectory(root);
 		await this.fs.requireDirectory(join(root, DESIGN_FILES_DIRECTORY));
 		await this.fs.readText(join(root, ".gitignore"));
@@ -2125,6 +1944,88 @@ var DesignProjectManager = class {
 	}
 };
 //#endregion
+//#region packages/core/src/data-table.ts
+const DATA_TABLE_TYPES = [
+	"text",
+	"number",
+	"boolean",
+	"date",
+	"select"
+];
+const DATA_TABLE_LIMITS = {
+	columns: 64,
+	rows: 500,
+	cell: 1e4
+};
+const object$2 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+const dataTableId = (v) => typeof v === "string" && /^[A-Za-z][\w-]{0,63}$/.test(v) && ![
+	"__proto__",
+	"constructor",
+	"prototype"
+].includes(v);
+function dataTableCellIssue(column, value) {
+	if (value === void 0 || value === "") return;
+	if (typeof value !== "string" || value.length > DATA_TABLE_LIMITS.cell) return "invalid_value";
+	if (column.type === "number" && (!/^[+-]?(?:\d+(?:\.\d*)?|\.\d+)(?:[eE][+-]?\d+)?$/.test(value) || !Number.isFinite(Number(value)))) return "number";
+	if (column.type === "boolean" && !["true", "false"].includes(value)) return "boolean";
+	if (column.type === "date" && (!/^\d{4}-\d{2}-\d{2}$/.test(value) || !Number.isFinite(Date.parse(value)) || new Date(value).toISOString().slice(0, 10) !== value)) return "date";
+	if (column.type === "select" && !column.options?.includes(value)) return "select";
+}
+/** Structural errors prohibit editing; cell errors stay visible and repairable. */
+function dataTableIssues(value, cells = true) {
+	if (value === void 0) return [];
+	if (!object$2(value) || !Array.isArray(value.columns) || !object$2(value.rows)) return ["Expected columns and rows"];
+	const errors = [], ids = /* @__PURE__ */ new Set();
+	if (Object.keys(value).some((k) => !["columns", "rows"].includes(k))) errors.push("Unknown table property");
+	if (value.columns.length > DATA_TABLE_LIMITS.columns || Object.keys(value.rows).length > DATA_TABLE_LIMITS.rows) errors.push("Sample table exceeds row/column limit");
+	for (const column of value.columns) {
+		if (!object$2(column) || !dataTableId(column.id) || ids.has(column.id)) {
+			errors.push("Invalid or duplicate field ID");
+			continue;
+		}
+		ids.add(column.id);
+		if (typeof column.name !== "string" || !column.name.trim() || column.name.length > 120) errors.push(`${column.id}: invalid name`);
+		if (!DATA_TABLE_TYPES.includes(column.type)) errors.push(`${column.id}: invalid type`);
+		if (column.role !== void 0 && ![
+			"dimension",
+			"value",
+			"attribute"
+		].includes(String(column.role))) errors.push(`${column.id}: invalid role`);
+		for (const key of ["unit", "description"]) if (column[key] !== void 0 && typeof column[key] !== "string") errors.push(`${column.id}: invalid ${key}`);
+		if (column.options !== void 0 && (!Array.isArray(column.options) || column.options.length > 100 || column.options.some((v) => typeof v !== "string" || !v.trim() || v.length > 120) || new Set(column.options).size !== column.options.length)) errors.push(`${column.id}: invalid choices`);
+		if (column.type === "select" && (!Array.isArray(column.options) || column.options.length === 0)) errors.push(`${column.id}: choices required`);
+	}
+	for (const [id, row] of Object.entries(value.rows)) {
+		if (!dataTableId(id) || !object$2(row)) {
+			errors.push("Invalid row");
+			continue;
+		}
+		for (const [key, cell] of Object.entries(row)) if (!ids.has(key) || typeof cell !== "string") errors.push(`${id}.${key}: unknown field or non-text cell`);
+		else if (cells) {
+			const issue = dataTableCellIssue(value.columns.find((c) => object$2(c) && c.id === key), cell);
+			if (issue) errors.push(`${id}.${key}: ${issue}`);
+		}
+	}
+	return errors;
+}
+/** Ensure the declared editor cannot escape its Bundle's schema authority. */
+function dataTableSchemaMatches(spec) {
+	const columns = spec.properties?.columns, rows = spec.properties?.rows, column = columns?.items;
+	return spec.type === "object" && spec.additional_properties === false && spec.required?.includes("columns") === true && spec.required?.includes("rows") === true && Object.keys(spec.properties ?? {}).every((key) => ["columns", "rows"].includes(key)) && columns?.type === "array" && column?.type === "object" && [
+		"id",
+		"name",
+		"type"
+	].every((key) => column.required?.includes(key)) && column.required?.every((key) => [
+		"id",
+		"name",
+		"type"
+	].includes(key)) === true && ["id", "name"].every((key) => column.properties?.[key]?.type === "string") && column.properties?.type?.type === "enum" && DATA_TABLE_TYPES.every((type) => column.properties.type.values?.includes(type)) && column.properties.type.values?.length === DATA_TABLE_TYPES.length && column.properties?.role?.type === "enum" && [
+		"dimension",
+		"value",
+		"attribute"
+	].every((role) => column.properties.role.values?.includes(role)) && ["unit", "description"].every((key) => column.properties?.[key]?.type === "string") && column.properties?.options?.type === "array" && column.properties.options.items?.type === "string" && rows?.type === "map" && rows.value?.type === "map" && rows.value.value?.type === "string";
+}
+//#endregion
 //#region node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js
 var require_identity = /* @__PURE__ */ __commonJSMin(((exports) => {
 	const ALIAS = Symbol.for("yaml.alias");
@@ -8947,7 +8848,7 @@ function validatorFromSchemaYaml(text) {
 	};
 }
 //#endregion
-//#region packages/core/src/runtime-drivers.ts
+//#region packages/core/src/design-driver-id.ts
 const DRIVER_ID = /^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*(?:\/v[1-9][0-9]*)$/;
 /**
 * Whether a string is a well-formed versioned dotted identifier ending in `/vN`.
@@ -9216,6 +9117,7 @@ function stringPair(value, left, right) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) && nonEmptyText(value[left]) && nonEmptyText(value[right]);
 }
 const LEAF_OPERATORS = [
+	"data_table",
 	"non_empty_map",
 	"non_empty_list",
 	"non_empty_string",
@@ -9254,6 +9156,7 @@ function assertStatePath(value, ruleId, operand) {
 }
 function assertRootLeafPaths(check, ruleId) {
 	for (const operator of [
+		"data_table",
 		"non_empty_map",
 		"non_empty_list",
 		"non_empty_string",
@@ -9561,6 +9464,7 @@ function statePath(subject, path) {
 }
 /** Evaluate one leaf check against one subject; returns true on failure. */
 function leafFails(check, subject, readField, state = subject) {
+	if ("data_table" in check) return dataTableIssues(readField(subject, String(check.data_table))).length > 0;
 	if ("exclusive_fields" in check) {
 		const spec = check.exclusive_fields;
 		const values = spec.fields.map((field) => readField(subject, field));
@@ -9924,30 +9828,18 @@ const PANEL_COMPONENT_CATALOG = {
 		description: "Switch between uniquely identified, titled children with keyboard-accessible tabs; inactive content stays mounted to preserve drafts.",
 		autoOrder: 2
 	},
-	split: {
-		description: "Compose sidebar and main slots.",
-		autoOrder: 3
-	},
 	stack: {
 		description: "Arrange child components vertically.",
 		autoOrder: 1
 	},
 	panel_workspace: {
-		description: "Full-height workspace with a resizable navigation sidebar.",
+		description: "Layout shell with sidebar/main slots. Plain main content scrolls within the shell; use record_workspace with record_inspector for record selection and editing.",
 		ownsWorkspace: true
 	},
 	text_block: {
 		description: "Show escaped plain-text guidance; never executable markup.",
 		autoOrder: 4
 	},
-	record_nav: {
-		description: "Navigate a declared record collection.",
-		sourceBound: true
-	},
-	record_tree: {
-		description: "Show record hierarchy using declared parent bindings.",
-		sourceBound: true
-	},
 	record_form: {
 		description: "Edit records using declared fields and schema constraints. Static sections may opt into form.header detail/card, form.reorder:false and finite form.body field/row/group/tabs composition. Record-local tabs reuse mounted shared tabs; titled collapsible groups preserve their values. Unconsumed visible fields remain rendered. Fields can opt into choice_layout, radio_custom user-triggered custom_focus, select allow_clear:false and token_list token_add_mode:menu for presets plus a cancellable custom-entry card. Omitted configuration preserves legacy behavior; generated-origin forms reject these static extensions.",
 		sourceBound: true,
@@ -10037,12 +9929,17 @@ const PANEL_COMPONENT_CATALOG = {
 		ownsWorkspace: true
 	},
 	record_inspector: { description: "Edit the selected record inside its owning record workspace. Optional authored sources compose same-record root and nested section views, preserving their canonical field bindings." },
+	math_document: {
+		description: "Read mathematical statements beside their plain-language explanations, notation and source pointers. Authored math bindings use declared text/rows fields in a record workspace; optional LaTeX editing uses the existing field/save authority. Rendering is not mathematical verification.",
+		sourceBound: true
+	},
 	record_preview: { description: "Preview the selected record title, body and optional action without executing it. Static form.body groups may embed the same component via sidecar; bindings are declared same-section text fields and the preview follows that exact form record, stacking below fields in narrow containers. Generated-origin forms reject this static extension." },
 	record_related_editor: { description: "Edit child records referencing the selected parent; additions bind that parent explicitly. Optional authored record_table groups the same declared editors into complete table columns without converting canonical records. Optional inherit_from_graph presents ancestors' associated records as read-only source-linked groups, never copies or resolves domain policy conflicts." },
 	relation_graph: { description: "Interact with record nodes and binary edges or ordered role-bearing participants; multi-party relation centers project the original relation record." },
 	reference_graph: { description: "Read-only relation canvas derived from declared in-workspace record references; details edit the original records, never a graph copy. Nodes may use label_scope: record for a root text label declared on the same canonical collection. Links use target or finite targets matching the field options_from_section/options_from_sections; missing or ambiguous identities stay diagnostic without guessed edges." },
+	data_table: { description: "Authored editable sample-data grid with saved column definitions, field types and row identities. Bound to a declared data_table field inside a record workspace; edits use existing save ports. Supports text, number, boolean, date and select cells, field properties and two-index matrix viewing. No file upload or expressions; not enabled for generated panels." },
 	record_matrix: { description: "Pivot a declared rows field inside the selected record." },
-	record_artifact: { description: "Preview an existing artifact of the selected record." },
+	record_artifact: { description: "Preview an existing artifact of the selected record, or inline related artifacts through an explicit record_select reference_field. Missing related records create no empty view; unreadable referenced files remain visible." },
 	structured_data: {
 		description: "Read structured saved data without changing it.",
 		autoOrder: 10
@@ -10322,6 +10219,86 @@ function validateIncidentDeletion(sections, fields) {
 	return errors;
 }
 //#endregion
+//#region packages/core/src/panel-authoring-reference.ts
+/** Exact catalog identity, not another vocabulary or a browser crypto dependency. */
+function panelAuthoringCatalogIdentity() {
+	return JSON.stringify({
+		catalog: PANEL_COMPONENT_CATALOG,
+		generated: GENERATED_COMPONENT_KINDS
+	});
+}
+const object$1 = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+/** Query trusted packaged source references; never reads host paths or executes declarations. */
+function queryPanelAuthoringReference(material, name, reference, type) {
+	if (!Object.hasOwn(PANEL_COMPONENT_CATALOG, name)) throw Error("Unknown panel component");
+	if (![
+		"contract",
+		"docs",
+		"examples"
+	].includes(reference) || type !== void 0 && reference !== "contract") throw Error("Invalid authoring reference query");
+	if (!object$1(material) || material.format !== "panel-authoring-reference/v1" || material.catalogIdentity !== panelAuthoringCatalogIdentity() || !object$1(material.components) || !object$1(material.contracts) || Object.keys(material.components).length !== COMPONENT_KINDS.length || !COMPONENT_KINDS.every((kind) => Object.hasOwn(material.components, kind))) throw Error("Authoring reference is missing or incompatible with the installed catalog");
+	const entry = material.components[name];
+	if (!object$1(entry) || entry.component !== name) throw Error("Missing component authoring reference");
+	const follow = (value) => {
+		if (!object$1(value) || typeof value.name !== "string" || !Object.hasOwn(material.contracts, value.name)) throw Error("Missing referenced local contract");
+		return {
+			...value,
+			read: {
+				name,
+				reference: "contract",
+				type: value.name
+			}
+		};
+	};
+	if (reference === "docs") {
+		if (!object$1(entry.documentation) || !Array.isArray(entry.documentation.sections) || !entry.documentation.sections.length) throw Error("Missing component documentation");
+		return {
+			component: name,
+			documentation: {
+				...entry.documentation,
+				read: {
+					name,
+					reference: "docs"
+				}
+			},
+			limits: entry.limits,
+			protocolStatus: entry.protocolStatus
+		};
+	}
+	if (reference === "examples") {
+		if (!Array.isArray(entry.examples)) throw Error("Missing component examples");
+		return {
+			component: name,
+			examples: entry.examples,
+			coverage: entry.examples.length ? "existing-structure-validated-usages" : "no-existing-usage",
+			limits: entry.limits
+		};
+	}
+	if (type !== void 0) {
+		if (!Object.hasOwn(material.contracts, type)) throw Error("Unknown local contract type or property");
+		const declaration = material.contracts[type];
+		if (!object$1(declaration) || declaration.name !== type || typeof declaration.declaration !== "string" || !declaration.declaration.trim()) throw Error("Missing local contract declaration");
+		if (!Array.isArray(declaration.references)) throw Error("Missing local contract references");
+		return {
+			component: name,
+			contract: {
+				...declaration,
+				references: declaration.references.map(follow)
+			},
+			limits: entry.limits,
+			protocolStatus: entry.protocolStatus
+		};
+	}
+	if (!Array.isArray(entry.contracts) || !object$1(material.hostCallbackContract)) throw Error("Missing component contract references");
+	return {
+		...entry,
+		contracts: entry.contracts.map(follow),
+		examples: void 0,
+		documentation: void 0,
+		hostCallbackContract: material.hostCallbackContract
+	};
+}
+//#endregion
 //#region packages/core/src/panel-dsl.ts
 /**
 * Design-panel DSL: the declarative contract a Design Bundle uses to describe
@@ -10377,6 +10354,7 @@ const CONTROL_KINDS = [
 	"key_value",
 	"toggle",
 	"artifact_ref",
+	"data_table",
 	"rows",
 	"source_list",
 	"token_list",
@@ -10510,6 +10488,14 @@ function validatePanelManifest(manifest) {
 			if (field.required !== void 0) errors.push(`field ${field.key}: use required or required_in, not both`);
 		}
 		if (!CONTROL_KINDS.includes(field.control)) errors.push(`field "${field.key}" has unknown control "${String(field.control)}"`);
+		if (field.control === "data_table" && [
+			"columns",
+			"options",
+			"item_fields",
+			"max_rows",
+			"options_from_panel",
+			"options_from_section"
+		].some((key) => field[key] !== void 0)) errors.push(`field ${field.key}: data_table uses saved column definitions, not static editor options`);
 		const choiceControl = [
 			"select",
 			"radio",
@@ -11257,6 +11243,98 @@ function validatePanelManifest(manifest) {
 				return field?.control !== "record_select" || field.readonly || targets.length !== family.length || family.some((value) => !targets.includes(value));
 			})) errors.push(`${path}: navigation_hierarchy needs editable parent references over the workspace sources`);
 		}
+		if (component.math !== void 0 && component.component !== "math_document") errors.push(`${path}: math belongs to math_document`);
+		if (component.component === "math_document") {
+			const config = component.math;
+			if (!workspace?.includes(component.source ?? "") || !config || typeof config !== "object" || Array.isArray(config)) errors.push(`${path}: math_document requires a workspace source and math bindings`);
+			else {
+				if (Object.keys(config).some((key) => ![
+					"heading",
+					"introduction",
+					"notes",
+					"complete",
+					"symbols",
+					"statements",
+					"output",
+					"checks",
+					"provenance"
+				].includes(key))) errors.push(`${path}: unknown math binding`);
+				const used = /* @__PURE__ */ new Set();
+				const bind = (key, controls) => {
+					const field = typeof key === "string" && isSafeDottedPath(key) && !key.includes(".") ? fieldOf(component.source, key) : void 0;
+					if (!field || field.hidden || !controls.includes(field.control) || used.has(String(key))) errors.push(`${path}: math needs distinct declared visible ${controls.join("/")} fields (${String(key)})`);
+					used.add(String(key));
+					return field;
+				};
+				bind(config.heading, ["text"]);
+				for (const key of [
+					"introduction",
+					"notes",
+					"complete"
+				]) if (config[key] !== void 0) bind(config[key], ["text", "textarea"]);
+				for (const key of ["symbols", "statements"]) {
+					const rows = config[key];
+					if (rows === void 0 && key === "symbols") continue;
+					if (!rows || typeof rows !== "object" || Array.isArray(rows)) {
+						errors.push(`${path}: math ${key} needs row bindings`);
+						continue;
+					}
+					if (Object.keys(rows).some((key) => ![
+						"field",
+						"formula",
+						"meaning",
+						"title",
+						"source",
+						"details"
+					].includes(key))) errors.push(`${path}: unknown math row binding`);
+					const field = bind(rows.field, ["rows"]);
+					if (!field?.columns?.length || field.columns.some((column) => !["text", "textarea"].includes(column.control))) errors.push(`${path}: math entries require text/textarea columns`);
+					if (rows.details !== void 0 && (!isStringList(rows.details) || rows.details.length > 6)) errors.push(`${path}: math details must be a list of up to six columns`);
+					const columns = [
+						rows.formula,
+						rows.meaning,
+						rows.title,
+						rows.source,
+						...Array.isArray(rows.details) ? rows.details : []
+					].filter((value) => value !== void 0);
+					if (typeof rows.formula !== "string" || typeof rows.meaning !== "string" || new Set(columns).size !== columns.length || columns.some((key) => !field?.columns?.some((column) => column.key === key && ["text", "textarea"].includes(column.control)))) errors.push(`${path}: math row bindings need distinct declared text columns`);
+				}
+				const readonlyBind = (key, controls) => {
+					const field = bind(key, controls);
+					if (field && field.readonly !== true) errors.push(`${path}: math output, checks and provenance fields must be readonly`);
+				};
+				for (const [key, allowed] of [["output", ["file", "format"]], ["checks", [
+					"status",
+					"summary",
+					"evidence"
+				]]]) {
+					const group = config[key];
+					if (group === void 0) continue;
+					if (!group || typeof group !== "object" || Array.isArray(group) || Object.keys(group).some((name) => !allowed.includes(name))) {
+						errors.push(`${path}: invalid math ${key} bindings`);
+						continue;
+					}
+					if (key === "output") {
+						const output = config.output;
+						readonlyBind(output.file, ["artifact_ref"]);
+						if (output.format !== void 0) readonlyBind(output.format, ["text"]);
+					} else {
+						const checks = config.checks;
+						readonlyBind(checks.status, ["select"]);
+						readonlyBind(checks.summary, ["text", "textarea"]);
+						if (checks.evidence !== void 0) readonlyBind(checks.evidence, ["text", "textarea"]);
+					}
+				}
+				if (config.provenance !== void 0) {
+					if (!isStringList(config.provenance)) errors.push(`${path}: math provenance must list declared readonly fields`);
+					else for (const key of config.provenance) readonlyBind(key, [
+						"text",
+						"textarea",
+						"artifact_ref"
+					]);
+				}
+			}
+		}
 		if (component.component === "record_related_editor") {
 			const reference = fieldOf(component.source, component.bindings?.reference);
 			const referenceTargets = reference?.options_from_sections ?? (reference?.options_from_section ? [reference.options_from_section] : []);
@@ -11465,14 +11543,22 @@ function validatePanelManifest(manifest) {
 			"relation_graph",
 			"reference_graph",
 			"record_matrix",
+			"data_table",
 			"record_artifact"
 		].includes(component.component) && !scope) errors.push(`${path}: ${component.component} requires record_workspace`);
 		if (component.component === "record_artifact") {
 			if (!scope?.includes(component.source ?? "")) errors.push(`${path}: artifact source must belong to workspace`);
 			if (!ownsField(component.source, component.artifact?.field) || !fields.some((field) => isEditorField(field) && field.key === component.artifact?.field && field.control === "artifact_ref")) errors.push(`${path}: artifact must bind a declared artifact_ref field`);
+			const reference = component.artifact?.reference_field;
+			if (reference !== void 0) {
+				const field = fields.find((field) => isEditorField(field) && field.key === reference && field.applies_to?.includes(component.source ?? "") === true);
+				if (!field || field.hidden || field.visible_when || field.control !== "record_select" || !scope?.includes(field.options_from_section ?? "") || field.options_from_section === component.source) errors.push(`${path}: artifact reference_field must bind a record_select to another workspace section`);
+			}
+			const explanation = component.artifact?.explanation_field;
+			if (explanation !== void 0 && !fields.some((field) => isEditorField(field) && field.key === explanation && field.applies_to?.includes(component.source ?? "") && !field.hidden && !field.visible_when && ["text", "textarea"].includes(field.control))) errors.push(`${path}: artifact explanation_field must bind declared visible text`);
 		}
-		if (component.references !== void 0 && component.component !== "reference_graph") errors.push(`${path}: references belongs to reference_graph`);
-		if (component.component === "reference_graph") {
+		if (component.references !== void 0 && !["reference_graph", "relation_graph"].includes(component.component)) errors.push(`${path}: references belongs to a reference or participant relation graph`);
+		if (component.component === "reference_graph" || component.component === "relation_graph" && component.references !== void 0) {
 			const bindings = component.references;
 			if (!bindings || !Array.isArray(bindings.nodes) || !bindings.nodes.length || !Array.isArray(bindings.links)) errors.push(`${path}: reference_graph needs nodes and links`);
 			else {
@@ -11544,7 +11630,11 @@ function validatePanelManifest(manifest) {
 					}
 				}
 			}
-			if (component.graph !== void 0 || component.children?.length) errors.push(`${path}: reference_graph cannot own editable graph bindings or children`);
+			if (component.component === "reference_graph" && (component.graph !== void 0 || component.children?.length)) errors.push(`${path}: reference_graph cannot own editable graph bindings or children`);
+			if (component.component === "relation_graph") {
+				const primary = Array.isArray(bindings?.nodes) ? bindings.nodes.find((node) => node?.source === component.graph?.nodes) : void 0;
+				if (!component.graph?.participants || !primary || primary.label_field !== component.graph.label_field || Array.isArray(bindings?.nodes) && bindings.nodes.some((node) => node?.source === component.graph?.edges) || bindings?.layout !== void 0 || component.children?.length) errors.push(`${path}: relation references need participants, the same primary node label, no relation-section nodes, layout or children`);
+			}
 		}
 		if (component.component === "relation_graph") {
 			const graph = component.graph;
@@ -11675,6 +11765,11 @@ function validatePanelManifest(manifest) {
 				}
 			}
 		}
+		if (component.table !== void 0 && component.component !== "data_table") errors.push(`${path}: table binding requires data_table`);
+		if (component.component === "data_table") {
+			const binding = component.table;
+			if (!scope?.includes(component.source ?? "") || !binding || typeof binding !== "object" || Object.keys(binding).some((key) => key !== "field") || !ownsField(component.source, binding.field) || !fields.some((field) => isEditorField(field) && field.key === binding.field && field.control === "data_table" && field.applies_to?.includes(component.source ?? ""))) errors.push(`${path}: data_table requires a declared data_table field in its workspace source`);
+		}
 		if (component.component === "record_matrix") {
 			const matrix = component.matrix;
 			if (!scope?.includes(component.source ?? "")) errors.push(`${path}: matrix source must belong to workspace`);
@@ -12654,6 +12749,7 @@ function collectionRecordSpec(spec) {
 function controlAcceptsSchema(control, spec) {
 	if (control === "record_map" || control === "source_reference_map") return spec.type === "map" && spec.value?.type === "object";
 	if (control === "radio_custom") return spec.type === "string";
+	if (control === "data_table") return dataTableSchemaMatches(spec);
 	if (control === "rows") return spec.type === "array";
 	if (control === "list" || control === "multi_select" || control === "record_multi_select" || control === "source_list" || control === "token_list") return spec.type === "array" && (spec.items?.type === "string" || spec.items?.type === "enum" && spec.items.values?.every((value) => typeof value === "string") === true);
 	if (control === "number") return spec.type === "number";
@@ -13042,9 +13138,9 @@ async function loadDesignBundle(fs, location, expectedPin) {
 	if (frontmatter.meta.description !== void 0 && typeof frontmatter.meta.description !== "string") throw new Error(`design kit: ${base}/SKILL.md description must be a string`);
 	const manifest = parseSkillManifest(slots["skill.yaml"], `${base}/skill.yaml`);
 	if (manifest.name !== entry) throw new Error(`design kit: ${base}/skill.yaml name must equal directory ${JSON.stringify(entry)}`);
-	if (manifest.version === void 0) throw new Error(`design kit: ${base}/skill.yaml must declare a top-level version`);
-	if (typeof manifest.version !== "string") throw new Error(`design kit: ${base}/skill.yaml version must be a string`);
-	const bundleVersion = DesignBundleVersion(manifest.version);
+	if (manifest.version === void 0 && !location.current) throw new Error(`design kit: ${base}/skill.yaml must declare a top-level version`);
+	if (manifest.version !== void 0 && typeof manifest.version !== "string") throw new Error(`design kit: ${base}/skill.yaml version must be a string`);
+	const bundleVersion = DesignBundleVersion(manifest.version ?? "1.0");
 	assertSkillRuntime(manifest, `${base}/skill.yaml`);
 	const title = parseBilingualManifestField(manifest, "title", `${base}/skill.yaml`);
 	const label = parseBilingualManifestField(manifest, "label", `${base}/skill.yaml`);
@@ -13123,6 +13219,8 @@ async function loadDesignBundle(fs, location, expectedPin) {
 	const bundleResources = await collectResourceInputs(fs, base, "", void 0, realBundleRootConfinement);
 	const skill = {
 		resourceRoot: base,
+		sourceId: location.sourceId,
+		sourceFs: fs,
 		...manifest.identity === void 0 ? {} : { catalogName },
 		name: typeof frontmatter.meta.name === "string" ? frontmatter.meta.name : entry,
 		authority,
@@ -13135,7 +13233,7 @@ async function loadDesignBundle(fs, location, expectedPin) {
 		execution: manifest.execution,
 		metadata
 	};
-	if (expectedPin && ((skill.catalogName ?? skill.name) !== expectedPin.name || String(skill.version) !== expectedPin.version)) throw new Error("design bundle: exact pin does not match content");
+	if (expectedPin && ((skill.catalogName ?? skill.name) !== expectedPin.name || expectedPin.version !== void 0 && String(skill.version) !== expectedPin.version)) throw new Error("design bundle: exact pin does not match content");
 	return Object.freeze({
 		skill: Object.freeze(skill),
 		resourceRoot: base,
@@ -13153,9 +13251,9 @@ async function loadDesignKit(fs, location, options) {
 	const { meta, body } = parseFrontmatter(mindsetText, paths.mindsetPath);
 	const name = meta.name;
 	if (typeof name !== "string" || name.trim() === "") throw new Error(`design kit: mindset file missing "name" frontmatter: ${paths.mindsetPath}`);
-	if (meta.version === void 0) throw new Error(`design kit: mindset file missing "version" frontmatter: ${paths.mindsetPath}`);
-	if (typeof meta.version !== "string") throw new Error(`design kit: mindset file "version" frontmatter must be a string: ${paths.mindsetPath}`);
-	const version = DesignKitVersion(meta.version);
+	if (meta.version === void 0 && !options.current) throw new Error(`design kit: mindset file missing "version" frontmatter: ${paths.mindsetPath}`);
+	if (meta.version !== void 0 && typeof meta.version !== "string") throw new Error(`design kit: mindset file "version" frontmatter must be a string: ${paths.mindsetPath}`);
+	const version = DesignKitVersion(meta.version ?? "1.0");
 	const relationsPath = paths.relationsPath ?? resolve(paths.rootDir, "relations.yaml");
 	let relationsSource;
 	if (fs.realPath !== void 0 && realKitRoot !== void 0) try {
@@ -13196,7 +13294,7 @@ async function loadDesignKit(fs, location, options) {
 			}]));
 			if (!resolver) throw new Error("design kit: independent mounts require a Bundle resolver");
 			bundle = await resolver(entry);
-			if (!bundle || (bundle.skill.catalogName ?? bundle.skill.name) !== entry.name || String(bundle.skill.version) !== entry.version) throw new Error(`design kit: unavailable exact Bundle ${entry.name}@${entry.version}`);
+			if (!bundle || (bundle.skill.catalogName ?? bundle.skill.name) !== entry.name || !options.current && String(bundle.skill.version) !== entry.version) throw new Error(`design kit: unavailable exact Bundle ${entry.name}@${entry.version}`);
 			if (bundle.skill.name !== entry.bindingKey) throw new Error("design kit: bindingKey must preserve the Bundle runtime name and data paths");
 		} else {
 			const base = resolve(paths.skillsDir, entry.name);
@@ -13229,6 +13327,9 @@ async function loadDesignKit(fs, location, options) {
 	});
 	return {
 		sourceRoot: paths.rootDir,
+		sourceLocation: paths,
+		sourceId: options.sourceId,
+		sourceFs: fs,
 		name,
 		version,
 		...typeof meta.description === "string" ? { description: meta.description } : {},
@@ -13252,8 +13353,8 @@ function canonical$7(value) {
 }
 /** Paths are installation details; all authored methods, manifests and captured resources participate. */
 function projectKitContentHash(kit) {
-	const { sourceRoot: _root, ...definition } = kit;
-	const skills = kit.skills.map(({ resourceRoot: _resourceRoot, ...skill }) => skill);
+	const { sourceRoot: _root, sourceLocation: _location, sourceFs: _fs, sourceId: _sourceId, ...definition } = kit;
+	const skills = kit.skills.map(({ resourceRoot: _resourceRoot, sourceFs: _fs, sourceId: _sourceId, ...skill }) => skill);
 	return createHash("sha256").update(JSON.stringify(canonical$7({
 		...definition,
 		skills
@@ -13283,362 +13384,628 @@ function composeProjectKit(pin, base, replacements) {
 	if (pin.contentHash !== void 0 && pin.contentHash !== projectKitContentHash(kit)) throw new Error("project content: pinned definitions changed; restore the exact closure or explicitly migrate");
 	return kit;
 }
-/** Numeric exact-version ordering, never lexicographic and never a version range. */
-function compareContentVersions(left, right) {
-	DesignBundleVersion(left);
-	DesignBundleVersion(right);
-	const a = left.split(".").map(BigInt), b = right.split(".").map(BigInt);
-	return a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : a[1] < b[1] ? -1 : a[1] > b[1] ? 1 : 0;
-}
-/** New projects choose one already validated complete Kit composition. */
-function latestInstalledKit(kits, name) {
-	return kits.filter((kit) => kit.name === name).reduce((latest, kit) => latest === void 0 || compareContentVersions(kit.version, latest.version) > 0 ? kit : latest, void 0);
-}
 //#endregion
-//#region packages/core/src/project-content-definition.ts
-const slots = {
-	"skill.yaml": "skillYaml",
-	"schema.yaml": "schemaYaml",
-	"validation.yaml": "validationYaml",
-	"panel.yaml": "panelYaml",
-	"renderer.md": "rendererMd"
-};
-function resources(kit) {
-	const result = /* @__PURE__ */ new Map([["mindset.md", kit.mindsetSource ?? kit.mindset]]);
-	for (const skill of kit.skills) {
-		const prefix = `${skill.name}/`;
-		result.set(`${prefix}SKILL.md`, skill.content);
-		for (const [file, field] of Object.entries(slots)) {
-			const text = skill.metadata?.[field];
-			if (typeof text === "string") result.set(`${prefix}${file}`, text);
+//#region packages/core/src/content-store.ts
+/** File-backed immutable content. The caller supplies trusted installation provenance. */
+const contentNodeFs = {
+	readText: async (path) => {
+		try {
+			return await readFile(path, "utf8");
+		} catch (error) {
+			if (error.code === "ENOENT") return void 0;
+			throw error;
 		}
-	}
-	for (const [path, text] of Object.entries(kit.resources ?? {})) if (!result.has(path)) result.set(path, text);
+	},
+	listDir: (path) => readdir(path),
+	isDirectory: async (path) => (await lstat(path)).isDirectory(),
+	realPath: async (path) => (await import("node:fs/promises")).realpath(path)
+};
+const emptyIndex = () => ({
+	formatVersion: 1,
+	kits: [],
+	bundles: []
+});
+const encode = (name) => {
+	if (!name || name.includes("\0")) throw new Error("content: invalid identity");
+	return Buffer.from(name, "utf8").toString("hex");
+};
+const key$1 = (pin) => `${pin.name}\0${pin.version}`;
+function confinedRelativePath(root, path) {
+	const result = relative(root, resolve(root, path));
+	if (!result || result === ".." || result.startsWith("../") || isAbsolute(result)) throw new Error("content: Kit entry path escapes retained root");
 	return result;
 }
-function migrationDefinitionReadPlan(source, target) {
-	const inputs = {
-		source: resources(source),
-		target: resources(target)
-	};
-	const names = new Set([...source.skills, ...target.skills].map((skill) => skill.name));
-	const changed = /* @__PURE__ */ new Set();
-	for (const name of names) {
-		const a = source.skills.find((skill) => skill.name === name), b = target.skills.find((skill) => skill.name === name);
-		const paths = new Set([...inputs.source.keys(), ...inputs.target.keys()].filter((path) => path.startsWith(`${name}/`)));
-		if (!a || !b || a.version !== b.version || [...paths].some((path) => inputs.source.get(path) !== inputs.target.get(path))) changed.add(name);
-	}
-	const relevant = new Set(changed);
-	for (const skill of [...source.skills, ...target.skills]) {
-		const declarations = [
-			skill.metadata?.schemaYaml,
-			skill.metadata?.panelYaml,
-			skill.metadata?.validationYaml
-		].filter((value) => typeof value === "string").join("\n");
-		for (const name of names) if (name !== skill.name && declarations.includes(`${name}/`) && (changed.has(skill.name) || changed.has(name))) {
-			relevant.add(skill.name);
-			relevant.add(name);
-		}
-	}
-	const required = {};
-	for (const side of ["source", "target"]) {
-		const kit = side === "source" ? source : target;
-		const selected = {};
-		for (const [path, text] of inputs[side]) {
-			const owner = kit.skills.find((skill) => path.startsWith(`${skill.name}/`));
-			if (!owner && /\.(md|ya?ml|json)$/u.test(path) || owner && relevant.has(owner.name) && (changed.has(owner.name) && /\.md$/u.test(path) || [
-				"skill.yaml",
-				"schema.yaml",
-				"validation.yaml",
-				"panel.yaml"
-			].includes(path.slice(owner.name.length + 1)))) selected[path] = text;
-		}
-		required[side] = JSON.stringify({
-			kit: {
-				name: kit.name,
-				version: kit.version
-			},
-			changed: [...changed],
-			relevant: [...relevant],
-			relationVocabulary: kit.relationVocabulary,
-			files: selected,
-			availableResources: ["complete", ...inputs[side].keys()]
-		}, null, 2);
-	}
+function retainedKitLocation(rootDir, paths) {
+	if (!paths) return rootDir;
+	if (Object.values(paths).some((path) => isAbsolute(path))) throw new Error("content: retained Kit paths must be relative");
 	return {
-		required,
-		resources: inputs
+		rootDir,
+		skillsDir: join(rootDir, "skills"),
+		mindsetPath: resolve(rootDir, confinedRelativePath(rootDir, paths.mindset)),
+		manifestPath: resolve(rootDir, confinedRelativePath(rootDir, paths.manifest)),
+		...paths.relations === void 0 ? {} : { relationsPath: resolve(rootDir, confinedRelativePath(rootDir, paths.relations)) }
 	};
 }
-//#endregion
-//#region packages/core/src/project-content-candidate.ts
-/** Model-facing candidate capability, shared by native Host adapters; never a live project path. */
-var ProjectContentCandidate = class {
+/** Copy bytes, rejecting symlinks and special files. Also hash empty directories. */
+async function copyTree(source, target, digest = createHash("sha256"), relativePath = "", budget = {
+	bytes: 0,
+	nodes: 0
+}) {
+	if (++budget.nodes > 2e4 || relativePath.split("/").length > 32) throw new Error("content: resource tree exceeds limits");
+	const info = await lstat(source);
+	if (info.isSymbolicLink()) throw new Error(`content: symlink resource is not retained: ${source}`);
+	if (info.isDirectory()) {
+		digest.update(`directory\0${relativePath}\0`);
+		await mkdir(target, { recursive: true });
+		for (const entry of (await readdir(source)).sort()) await copyTree(join(source, entry), join(target, entry), digest, relativePath ? `${relativePath}/${entry}` : entry, budget);
+	} else if (info.isFile()) {
+		budget.bytes += info.size;
+		if (budget.bytes > 134217728) throw new Error("content: resource bytes exceed limits");
+		const bytes = await readFile(source);
+		digest.update(`file\0${relativePath}\0${bytes.length}\0`).update(bytes);
+		await writeFile(target, bytes, {
+			flag: "wx",
+			mode: info.mode & 511
+		});
+	} else throw new Error(`content: unsupported resource ${source}`);
+}
+/** Exact version catalog; editable sources and their discovery are not this authority. */
+var DesignContentStore = class {
 	root;
-	definitionsPath;
-	covered = {
-		source: /* @__PURE__ */ new Set(),
-		target: /* @__PURE__ */ new Set()
-	};
-	totals = {};
-	constructor(root, definitionsPath) {
-		this.root = root;
-		this.definitionsPath = definitionsPath;
-		if (!isAbsolute(root) || !isAbsolute(definitionsPath)) throw new Error("migration: absolute Host-bound candidate roots required");
+	constructor(stateRoot) {
+		if (!isAbsolute(stateRoot)) throw new Error("content: stateRoot must be absolute");
+		this.root = join(stateRoot, "content");
 	}
-	async path(path) {
-		if (!path || path.length > 4096 || /[\\:\u0000-\u001f]/u.test(path) || path.split("/").some((part) => !part || part === "." || part === "..") || path.split("/").length > 32) throw new Error("migration: use a bounded candidate Design-Files-relative path");
-		const root = join(this.root, "design_files"), full = join(root, path);
-		for (let current = dirname(full);; current = dirname(current)) {
-			try {
-				const info = await lstat(current);
-				if (!info.isDirectory() || info.isSymbolicLink()) throw new Error("migration: unsafe candidate parent");
-			} catch (error) {
-				if (error.code !== "ENOENT") throw error;
+	async index() {
+		const text = await contentNodeFs.readText(join(this.root, "index.json"));
+		if (text === void 0) return emptyIndex();
+		const data = JSON.parse(text);
+		if (data.formatVersion !== 1 || !Array.isArray(data.kits) || !Array.isArray(data.bundles)) throw new Error("content: invalid retained index");
+		for (const entry of [...data.kits, ...data.bundles]) {
+			if (typeof entry.name !== "string" || typeof entry.version !== "string" || typeof entry.sourceId !== "string" || !/^[a-f0-9]{64}$/.test(entry.hash)) throw new Error("content: invalid retained entry");
+			encode(entry.name);
+			if (entry.kitPaths !== void 0) {
+				if (typeof entry.kitPaths.mindset !== "string" || typeof entry.kitPaths.manifest !== "string" || entry.kitPaths.relations !== void 0 && typeof entry.kitPaths.relations !== "string") throw new Error("content: invalid retained Kit paths");
+				retainedKitLocation(this.directory("kits", entry), entry.kitPaths);
 			}
-			if (current === root) break;
-		}
-		try {
-			const info = await lstat(full);
-			if (!info.isFile() || info.isSymbolicLink()) throw new Error("migration: expected a regular candidate file");
-		} catch (error) {
-			if (error.code !== "ENOENT") throw error;
-		}
-		return full;
-	}
-	async readDefinition(side, offset, resource = "required") {
-		if (side !== "source" && side !== "target" || !Number.isSafeInteger(offset) || offset < 0 || offset % 12e3) throw new Error("migration: invalid definition page");
-		const definitions = JSON.parse(await readFile(this.definitionsPath, "utf8"));
-		const plan = Array.isArray(definitions.source.skills) && Array.isArray(definitions.target.skills) ? migrationDefinitionReadPlan(definitions.source, definitions.target) : void 0;
-		const text = resource === "complete" || !plan ? JSON.stringify(definitions[side], null, 2) : resource === "required" ? plan.required[side] : plan.resources[side].get(resource);
-		if (!text || offset >= text.length) throw new Error("migration: definition offset exceeds bounds");
-		const end = Math.min(offset + 12e3, text.length);
-		if (resource === "required") {
-			this.covered[side].add(offset / 12e3);
-			this.totals[side] = text.length;
 		}
-		return {
-			text: text.slice(offset, end),
-			total: text.length,
-			nextOffset: end === text.length ? null : end
-		};
+		return data;
 	}
-	assertDefinitionsRead() {
-		for (const side of ["source", "target"]) if (!this.totals[side] || this.covered[side].size !== Math.ceil(this.totals[side] / 12e3)) throw new Error("migration: read both complete required methods and contracts before submitting evidence");
-	}
-	async list() {
-		const result = [];
-		let nodes = 0;
-		const walk = async (directory, prefix) => {
-			const info = await lstat(directory);
-			if (!info.isDirectory() || info.isSymbolicLink()) throw new Error("migration: unsafe candidate directory");
-			for (const entry of await readdir(directory, { withFileTypes: true })) {
-				if (++nodes > 4096 || prefix.split("/").length > 32 || entry.isSymbolicLink()) throw new Error("migration: bounded regular candidate files required");
-				const path = `${prefix}${entry.name}`;
-				if (entry.isDirectory()) await walk(join(directory, entry.name), `${path}/`);
-				else if (entry.isFile()) result.push(path);
-				else throw new Error("migration: non-regular candidate file");
-			}
-		};
-		await walk(join(this.root, "design_files"), "");
-		return result;
+	directory(kind, pin) {
+		const version = kind === "kits" ? DesignKitVersion(pin.version) : DesignBundleVersion(pin.version);
+		return join(this.root, kind, encode(pin.name), String(version));
 	}
-	async read(path, offset) {
-		if (!Number.isSafeInteger(offset) || offset < 0) throw new Error("migration: invalid candidate offset");
-		const file = await this.path(path);
-		if ((await lstat(file)).size > 8388608) throw new Error("migration: candidate file byte limit");
-		const text = await readFile(file, "utf8");
-		if (offset > text.length) throw new Error("migration: candidate offset exceeds bounds");
-		const end = Math.min(offset + 12e3, text.length);
-		return {
-			text: text.slice(offset, end),
-			total: text.length,
-			nextOffset: end === text.length ? null : end
-		};
+	async listBundles() {
+		return (await this.index()).bundles.map(({ name, version }) => Object.freeze({
+			name,
+			version
+		}));
 	}
-	async write(path, content) {
-		if (Buffer.byteLength(content) > 8388608) throw new Error("migration: candidate file byte limit");
-		const file = await this.path(path);
-		await mkdir(dirname(file), { recursive: true });
-		await writeFile(file, content);
+	async listKits() {
+		return (await this.index()).kits.map(({ name, version }) => Object.freeze({
+			name,
+			version
+		}));
 	}
-};
-//#endregion
-//#region packages/core/src/project-content-migration.ts
-/** Native-Agent semantic migration in an isolated candidate, followed by same-ID adoption. */
-async function candidateFiles(root) {
-	const result = /* @__PURE__ */ new Map();
-	let bytes = 0, nodes = 0;
-	const walk = async (directory, prefix) => {
-		for (const item of await readdir(directory, { withFileTypes: true })) {
-			if (++nodes > 4096 || prefix.split("/").length > 32 || /[\\:\u0000-\u001f]/u.test(item.name)) throw new Error("migration: candidate exceeds confinement limits");
-			const path = join(directory, item.name), key = `${prefix}/${item.name}`;
-			const info = await lstat(path);
-			if (info.isSymbolicLink()) throw new Error("migration: candidate cannot contain symlinks");
-			if (info.isDirectory()) await walk(path, key);
-			else if (info.isFile()) {
-				bytes += info.size;
-				if (bytes > 67108864) throw new Error("migration: candidate exceeds byte limit");
-				result.set(key, await readFile(path));
-			} else throw new Error("migration: candidate contains non-regular resources");
-		}
-	};
-	await walk(join(root, "design_files"), "design_files");
-	result.set("project.json", await readFile(join(root, "project.json")));
-	return result;
-}
-var ProjectContentMigration = class {
-	ports;
-	git;
-	manager;
-	candidates = /* @__PURE__ */ new Map();
-	constructor(ports) {
-		this.ports = ports;
-		if (!isAbsolute(ports.root) || !isAbsolute(ports.stateRoot)) throw new Error("migration: exact absolute project and state roots are required");
-		const location = relative(ports.root, ports.stateRoot);
-		if (!location || location !== ".." && !location.startsWith("../") && !location.startsWith("..\\") && !isAbsolute(location)) throw new Error("migration: candidate storage must be outside the live project");
-		this.git = new GitVersioning(ports.spawn, ports.root);
-		this.manager = new DesignProjectManager({ spawn: ports.spawn });
-	}
-	directory(id) {
-		if (!/^[a-f0-9-]{36}$/u.test(id)) throw new Error("migration: invalid exact candidate id");
-		return join(this.ports.stateRoot, "content-migrations", id);
-	}
-	canonicalSources(plan, evidence) {
-		if (evidence.status !== "equivalent" || !evidence.summary?.trim() || evidence.unresolvedFacts.length) throw new Error(`migration: unresolved semantic decisions require user input: ${evidence.unresolvedFacts.join("; ")}`);
-		const sources = plan.sourceFiles.filter((path) => /^design_files\/([^/]+)\/\1\.json$/u.test(path));
-		if (sources.some((path) => !evidence.sources.some((source) => source.file === path && source.explanation.trim()))) throw new Error("migration: native evidence must account for every saved canonical source");
-		return sources;
-	}
-	/** Bound tools consume an exact prepared operation; model arguments never choose its root. */
-	async candidate(id) {
-		const directory = this.directory(id);
-		const plan = JSON.parse(await readFile(join(directory, "plan.json"), "utf8"));
-		if (plan.formatVersion !== 1 || plan.id !== id) throw new Error("migration: invalid candidate plan");
-		const current = await this.manager.open(this.ports.root);
-		if (current.metadata.id !== plan.projectId || !sameProjectContentPin(current.metadata.kit, plan.sourcePin) || await this.git.head() !== plan.sourceCheckpoint) throw new Error("migration: candidate is not bound to the current exact project checkpoint");
-		const cached = this.candidates.get(id);
-		if (cached) return cached;
-		const candidate = new ProjectContentCandidate(join(directory, "candidate"), join(directory, "definitions.json"));
-		this.candidates.set(id, candidate);
-		return candidate;
-	}
-	async prepare(targetPin) {
-		return this.ports.mutate(async () => {
-			await this.ports.assertQuiescent();
-			const project = await this.manager.open(this.ports.root);
-			if (!project.metadata.kit) throw new Error("migration: activate a Kit before selecting a version");
-			if (targetPin.name !== project.metadata.kit.name) throw new Error("migration: version selection preserves the active Kit catalog identity");
-			const status = await this.manager.status(project);
-			if (status.dirty) throw new Error("migration: preserve or settle uncommitted project edits before upgrading");
-			const source = await this.ports.resolveKit(project.metadata.kit), target = await this.ports.resolveKit(targetPin);
-			if (!source || !target) throw new Error("migration: restore the full exact source and target definitions before upgrading");
-			if (target.name !== targetPin.name || target.version !== targetPin.version) throw new Error("migration: exact target resolution required");
-			await this.ports.assertCompatible(target);
-			const id = randomUUID(), directory = this.directory(id), candidateRoot = join(directory, "candidate");
-			await mkdir(join(candidateRoot, "design_files"), { recursive: true });
-			const paths = (await this.git.listPathsAt(status.head)).filter((path) => path.startsWith("design_files/"));
-			if (paths.length > 4096) throw new Error("migration: project exceeds file limit");
-			let total = 0;
-			for (const path of paths) {
-				if (/[\\:\u0000-\u001f]/u.test(path) || path.split("/").some((part) => !part || part === "." || part === "..")) throw new Error("migration: unsafe source path");
-				const bytes = await this.git.readBytesAt(status.head, path, void 0, 67108864);
-				if (!bytes || (total += bytes.byteLength) > 67108864) throw new Error("migration: project exceeds byte limit");
-				await mkdir(dirname(join(candidateRoot, path)), { recursive: true });
-				await writeFile(join(candidateRoot, path), bytes, { flag: "wx" });
-			}
-			const effectivePin = {
-				...targetPin,
-				contentHash: projectKitContentHash(target)
-			};
-			const plan = {
-				formatVersion: 1,
-				id,
-				projectId: project.metadata.id,
-				sourceCheckpoint: status.head,
-				sourcePin: project.metadata.kit,
-				targetPin: effectivePin,
-				sourceHash: projectKitContentHash(source),
-				sourceFiles: paths
-			};
-			await writeFile(join(candidateRoot, "project.json"), `${JSON.stringify({
-				...project.metadata,
-				kit: effectivePin
-			}, null, 2)}\n`, { flag: "wx" });
-			const definitions = join(directory, "definitions.json");
-			await writeFile(definitions, JSON.stringify({
-				source,
-				target
-			}, null, 2), {
-				flag: "wx",
-				mode: 256
-			});
-			await writeFile(join(directory, "plan.json"), JSON.stringify(plan), {
-				flag: "wx",
-				mode: 256
+	/** Publish an independent version even when no Kit mounts it. */
+	async retainBundle(rootDir, options, expectedPin) {
+		const bundle = await loadDesignBundle(contentNodeFs, {
+			rootDir,
+			sourceId: options.sourceId
+		}, expectedPin);
+		const pin = {
+			name: bundle.skill.catalogName ?? bundle.skill.name,
+			version: String(bundle.skill.version)
+		};
+		await mkdir(this.root, { recursive: true });
+		const lock = join(this.root, ".retain.lock");
+		await writeFile(lock, String(process.pid), { flag: "wx" });
+		const staging = join(this.root, `.staging-${randomUUID()}`);
+		try {
+			await mkdir(staging);
+			const directory = join(staging, "bundle");
+			await mkdir(directory);
+			const digest = createHash("sha256");
+			await copyTree(rootDir, join(directory, "files"), digest);
+			await loadDesignBundle(contentNodeFs, {
+				rootDir: join(directory, "files"),
+				sourceId: options.sourceId
+			}, pin);
+			const current = await this.index();
+			await this.publish([{
+				kind: "bundles",
+				entry: {
+					...pin,
+					sourceId: options.sourceId,
+					hash: digest.digest("hex")
+				},
+				directory
+			}], staging, {
+				formatVersion: 1,
+				kits: [...current.kits],
+				bundles: [...current.bundles]
 			});
-			return {
-				id,
-				projectId: plan.projectId,
-				sourceCheckpoint: plan.sourceCheckpoint,
-				candidateRoot,
-				definitions,
-				method: "Use an isolated native Host Producer. Read every page of both required reading sets: complete changed domain methods and output contracts, related cross-Bundle contracts and shared constraints. Every original resource and complete source/target definition remains available on demand; read additional evidence when needed for semantic fidelity. Modify only the exact candidate directory. Preserve saved user facts, stable IDs, references and existing assets. Translate semantics; schema validity alone does not establish equivalence. Account for every existing canonical source in the evidence receipt. If new facts or domain decisions are needed, return needs-user-input with exact unresolved facts; never invent values to pass validation. Return the actual native execution proof and semantic evidence. Only the owning Core transaction may adopt this candidate into the original project; do not edit or repin that project yourself."
-			};
+		} finally {
+			await rm(staging, {
+				recursive: true,
+				force: true
+			});
+			await rm(lock, { force: true });
+		}
+		return await this.resolveBundle(pin);
+	}
+	async resolveBundle(pin) {
+		const entry = (await this.index()).bundles.find((e) => key$1(e) === key$1(pin));
+		if (!entry) return void 0;
+		const rootDir = join(this.directory("bundles", pin), "files");
+		if (await hashTree(rootDir) !== entry.hash) throw new Error("content: retained Bundle hash mismatch");
+		return loadDesignBundle(contentNodeFs, {
+			rootDir,
+			sourceId: entry.sourceId
+		}, pin);
+	}
+	async loadRetainedKit(pin) {
+		const entry = (await this.index()).kits.find((e) => key$1(e) === key$1(pin));
+		if (!entry) return void 0;
+		const rootDir = join(this.directory("kits", pin), "files");
+		if (await hashTree(rootDir) !== entry.hash) throw new Error("content: retained Kit hash mismatch");
+		const kit = await loadDesignKit(contentNodeFs, retainedKitLocation(rootDir, entry.kitPaths), {
+			sourceId: entry.sourceId,
+			resolveBundle: (bundle) => this.resolveBundle(bundle)
 		});
+		if (kit.name !== pin.name || String(kit.version) !== pin.version) throw new Error("content: retained Kit pin mismatch");
+		return kit;
 	}
-	async finish(id, proof, evidence) {
-		const directory = this.directory(id), candidateRoot = join(directory, "candidate");
-		const plan = JSON.parse(await readFile(join(directory, "plan.json"), "utf8"));
-		if (plan.formatVersion !== 1 || plan.id !== id) throw new Error("migration: invalid candidate plan");
-		await this.ports.verifyNativeProducer(proof, candidateRoot);
-		const canonicalSources = this.canonicalSources(plan, evidence);
-		const files = await candidateFiles(candidateRoot);
-		for (const path of plan.sourceFiles.filter((path) => !canonicalSources.includes(path))) {
-			const original = await this.git.readBytesAt(plan.sourceCheckpoint, path);
-			if (!files.get(path) || !Buffer.from(files.get(path)).equals(Buffer.from(original))) throw new Error(`migration: preserve existing asset/source ${path}`);
-		}
-		if (canonicalSources.some((path) => !files.has(path))) throw new Error("migration: canonical sources cannot disappear during upgrade");
-		return new ProjectContentTransaction(this.ports).adopt({
-			projectId: plan.projectId,
-			sourceCheckpoint: plan.sourceCheckpoint,
-			contentHash: plan.targetPin.contentHash,
-			files,
-			validate: async (captured) => {
-				await this.ports.assertQuiescent();
-				if (!sameProjectContentPin((await this.manager.open(this.ports.root)).metadata.kit, plan.sourcePin)) throw new Error("migration: project content selection changed");
-				const source = await this.ports.resolveKit(plan.sourcePin), target = await this.ports.resolveKit(plan.targetPin);
-				if (!source || !target || projectKitContentHash(source) !== plan.sourceHash || projectKitContentHash(target) !== plan.targetPin.contentHash) throw new Error("migration: source or target definitions changed");
-				if (!sameProjectContentPin(parseDesignProjectJson(Buffer.from(captured.get("project.json")).toString("utf8")).kit, plan.targetPin)) throw new Error("migration: candidate changed the authorized exact target");
-				await this.ports.assertCompatible(target);
-				await this.ports.validate(target, captured);
-				await this.ports.assertQuiescent();
+	/** Reuse a verified closure from another configured store without exposing or
+	* inferring its internal layout. The source index owns provenance and paths. */
+	async retainKitFrom(source, pin) {
+		const entry = (await source.index()).kits.find((value) => key$1(value) === key$1(pin));
+		const kit = await source.loadRetainedKit(pin);
+		if (!entry || !kit) throw new Error("content: unavailable exact retained Kit source");
+		const root = join(source.directory("kits", pin), "files");
+		return this.retainKitClosure(retainedKitLocation(root, entry.kitPaths), {
+			sourceId: entry.sourceId,
+			resolveBundle: (bundle) => source.resolveBundle(bundle)
+		});
+	}
+	/** All project reads and writes resolve the same exact closure. */
+	async resolveProjectKit(pin) {
+		const base = await this.loadRetainedKit(pin);
+		if (!base) return void 0;
+		return composeProjectKit(pin, base, await Promise.all(projectBundleOverrides(pin, base).map(async (target) => {
+			const bundle = await this.resolveBundle(target);
+			if (!bundle) throw new Error(`project content: unavailable exact Bundle ${target.name}@${target.version}`);
+			return bundle;
+		})));
+	}
+	/** Retain a complete validated closure; publish index only after every byte is ready. */
+	async retainKitClosure(location, options) {
+		if (typeof location === "string") location = await resolveDesignKitPackage(contentNodeFs, location) ?? location;
+		const bundles = /* @__PURE__ */ new Map();
+		const kit = await loadDesignKit(contentNodeFs, location, {
+			...options,
+			...options.resolveBundle === void 0 ? {} : { resolveBundle: async (pin) => {
+				const bundle = await options.resolveBundle(pin);
+				if (bundle) bundles.set(key$1(pin), bundle);
+				return bundle;
+			} }
+		});
+		for (const skill of kit.skills) if (!bundles.has(key$1({
+			name: skill.catalogName ?? skill.name,
+			version: String(skill.version)
+		}))) {
+			const bundle = await loadDesignBundle(contentNodeFs, {
+				rootDir: skill.resourceRoot,
+				sourceId: options.sourceId
+			}, {
+				name: skill.catalogName ?? skill.name,
+				version: String(skill.version)
+			});
+			bundles.set(key$1({
+				name: skill.catalogName ?? skill.name,
+				version: String(skill.version)
+			}), bundle);
+		}
+		await mkdir(this.root, { recursive: true });
+		const lock = join(this.root, ".retain.lock");
+		await writeFile(lock, String(process.pid), { flag: "wx" });
+		const staging = join(this.root, `.staging-${randomUUID()}`);
+		try {
+			await mkdir(staging);
+			const current = await this.index();
+			const next = {
+				formatVersion: 1,
+				kits: [...current.kits],
+				bundles: [...current.bundles]
+			};
+			const staged = [];
+			for (const bundle of bundles.values()) {
+				const pin = {
+					name: bundle.skill.catalogName ?? bundle.skill.name,
+					version: String(bundle.skill.version)
+				};
+				const sourceId = await this.bundleSourceId(bundle, options, pin);
+				const directory = join(staging, `bundle-${staged.length}`);
+				await mkdir(directory);
+				const digest = createHash("sha256");
+				await copyTree(bundle.resourceRoot, join(directory, "files"), digest);
+				if ((await loadDesignBundle(contentNodeFs, {
+					rootDir: join(directory, "files"),
+					sourceId
+				}, pin)).skill.authority !== bundle.skill.authority) throw new Error("content: Bundle authority changed during retention");
+				const entry = {
+					...pin,
+					sourceId,
+					hash: digest.digest("hex")
+				};
+				staged.push({
+					kind: "bundles",
+					entry,
+					directory
+				});
+			}
+			const directory = join(staging, "kit");
+			await mkdir(join(directory, "files"), { recursive: true });
+			const root = typeof location === "string" ? location : location.rootDir;
+			const originalManifest = await contentNodeFs.readText(typeof location === "string" ? join(root, "kit.yaml") : location.manifestPath ?? join(root, "kit.yaml"));
+			let kitPaths;
+			if (originalManifest !== void 0) {
+				kitPaths = {
+					mindset: confinedRelativePath(root, typeof location === "string" ? join(root, "mindset.md") : location.mindsetPath),
+					manifest: confinedRelativePath(root, typeof location === "string" ? join(root, "kit.yaml") : location.manifestPath ?? join(root, "kit.yaml")),
+					...typeof location === "string" || location.relationsPath === void 0 ? {} : { relations: confinedRelativePath(root, location.relationsPath) }
+				};
+				if (kitPaths.mindset === "mindset.md" && kitPaths.manifest === "kit.yaml" && (kitPaths.relations === void 0 || kitPaths.relations === "relations.yaml")) kitPaths = void 0;
+				await copyTree(root, join(directory, "files"), createHash("sha256"));
+			} else {
+				const engineering = /* @__PURE__ */ new Set([
+					"skills",
+					"node_modules",
+					"lib",
+					"dist",
+					"src",
+					"test",
+					"tests",
+					"scripts",
+					".git",
+					".cache",
+					"package.json",
+					"pnpm-lock.yaml",
+					"package-lock.json",
+					"yarn.lock",
+					"tsconfig.json",
+					"tsdown.config.ts"
+				]);
+				for (const name of (await readdir(root)).sort()) {
+					if (engineering.has(name) || name === "mindset.md" || name === "kit.yaml" || name === "relations.yaml" || /^(smoke-|test-|preview-|compare-).*\.(mjs|html)$/.test(name)) continue;
+					await copyTree(join(root, name), join(directory, "files", name), createHash("sha256"), name);
+				}
+				await writeFile(join(directory, "files", "mindset.md"), kit.mindsetSource);
+				const relations = await contentNodeFs.readText(typeof location === "string" ? join(root, "relations.yaml") : location.relationsPath ?? join(root, "relations.yaml"));
+				if (relations !== void 0) await writeFile(join(directory, "files", "relations.yaml"), relations);
+				await writeFile(join(directory, "files", "kit.yaml"), (0, import_dist.stringify)({
+					version: 1,
+					mounts: kit.skills.map((s) => ({
+						bindingKey: s.name,
+						name: s.catalogName ?? s.name,
+						version: String(s.version)
+					}))
+				}));
 			}
+			const stagedByPin = new Map(staged.map((s) => [key$1(s.entry), s]));
+			const verified = await loadDesignKit(contentNodeFs, retainedKitLocation(join(directory, "files"), kitPaths), {
+				sourceId: options.sourceId,
+				resolveBundle: async (pin) => {
+					const value = stagedByPin.get(key$1(pin));
+					return value ? loadDesignBundle(contentNodeFs, {
+						rootDir: join(value.directory, "files"),
+						sourceId: value.entry.sourceId
+					}, pin) : void 0;
+				}
+			});
+			if (verified.name !== kit.name || verified.version !== kit.version) throw new Error("content: source changed while retaining Kit");
+			const kitHash = await hashTree(join(directory, "files"));
+			staged.push({
+				kind: "kits",
+				entry: {
+					name: kit.name,
+					version: String(kit.version),
+					hash: kitHash,
+					sourceId: options.sourceId,
+					...kitPaths === void 0 ? {} : { kitPaths }
+				},
+				directory
+			});
+			await this.publish(staged, staging, next);
+		} finally {
+			await rm(staging, {
+				recursive: true,
+				force: true
+			});
+			await rm(lock, { force: true });
+		}
+		return await this.loadRetainedKit({
+			name: kit.name,
+			version: String(kit.version)
 		});
 	}
-	/** Same target validation inside the still-attached native generator's repair loop. */
-	async validateCandidate(id, evidence) {
-		const directory = this.directory(id);
-		const plan = JSON.parse(await readFile(join(directory, "plan.json"), "utf8"));
-		if (plan.formatVersion !== 1 || plan.id !== id) throw new Error("migration: invalid candidate plan");
-		this.canonicalSources(plan, evidence);
-		await this.ports.assertQuiescent();
-		const source = await this.ports.resolveKit(plan.sourcePin), target = await this.ports.resolveKit(plan.targetPin);
-		if (!source || !target || projectKitContentHash(source) !== plan.sourceHash || projectKitContentHash(target) !== plan.targetPin.contentHash) throw new Error("migration: source or target definitions changed");
-		await this.ports.assertCompatible(target);
-		const files = await candidateFiles(join(directory, "candidate"));
-		if (!sameProjectContentPin(parseDesignProjectJson(Buffer.from(files.get("project.json")).toString("utf8")).kit, plan.targetPin)) throw new Error("migration: candidate changed the authorized exact target");
-		for (const path of plan.sourceFiles) {
-			if (!files.has(path)) throw new Error("migration: canonical sources cannot disappear during upgrade");
-			if (!/^design_files\/([^/]+)\/\1\.json$/u.test(path) && !Buffer.from(files.get(path)).equals(Buffer.from(await this.git.readBytesAt(plan.sourceCheckpoint, path)))) throw new Error(`migration: preserve existing asset/source ${path}`);
-		}
-		await this.ports.validate(target, files);
-		await this.ports.assertQuiescent();
-	}
-	async recover() {
-		return new ProjectContentTransaction(this.ports).recover();
+	async publish(staged, staging, next) {
+		for (const value of staged) {
+			const existing = next[value.kind].find((e) => key$1(e) === key$1(value.entry));
+			if (existing && (existing.hash !== value.entry.hash || existing.sourceId !== value.entry.sourceId || JSON.stringify(existing.kitPaths) !== JSON.stringify(value.entry.kitPaths))) throw new Error(`content: immutable ${value.kind} pin conflict ${value.entry.name}@${value.entry.version}`);
+		}
+		for (const value of staged) {
+			if (next[value.kind].some((e) => key$1(e) === key$1(value.entry))) continue;
+			const target = this.directory(value.kind, value.entry);
+			await mkdir(resolve(target, ".."), { recursive: true });
+			await writeFile(join(value.directory, "metadata.json"), JSON.stringify(value.entry));
+			try {
+				await rename(value.directory, target);
+			} catch (error) {
+				if (!["EEXIST", "ENOTEMPTY"].includes(error.code ?? "")) throw error;
+				const previous = JSON.parse(await readFile(join(target, "metadata.json"), "utf8"));
+				if (previous.hash !== value.entry.hash || previous.sourceId !== value.entry.sourceId || JSON.stringify(previous.kitPaths) !== JSON.stringify(value.entry.kitPaths)) throw new Error("content: unindexed immutable version conflict");
+			}
+			next[value.kind].push(value.entry);
+		}
+		const indexPath = join(staging, "index.json");
+		await writeFile(indexPath, JSON.stringify(next));
+		await rename(indexPath, join(this.root, "index.json"));
+	}
+	async bundleSourceId(bundle, options, pin) {
+		const sourceId = bundle.sourceId ?? options.sourceId;
+		if ((await loadDesignBundle(contentNodeFs, {
+			rootDir: bundle.resourceRoot,
+			sourceId
+		}, pin)).skill.authority !== bundle.skill.authority) throw new Error("content: resolver must supply original trusted sourceId");
+		return sourceId;
+	}
+};
+async function hashTree(root) {
+	const digest = createHash("sha256");
+	async function walk(path, rel) {
+		const info = await lstat(path);
+		if (info.isSymbolicLink()) throw new Error("content: symlink in retained content");
+		if (info.isDirectory()) {
+			digest.update(`directory\0${rel}\0`);
+			for (const name of (await readdir(path)).sort()) await walk(join(path, name), rel ? `${rel}/${name}` : name);
+		} else if (info.isFile()) {
+			const bytes = await readFile(path);
+			digest.update(`file\0${rel}\0${bytes.length}\0`).update(bytes);
+		} else throw new Error("content: unsupported retained resource");
 	}
+	await walk(root, "");
+	return digest.digest("hex");
+}
+//#endregion
+//#region packages/core/src/project-kit-source.ts
+/** One editable, byte-complete Kit source per project. No local release catalog. */
+const DESIGN_PROJECT_KIT_DIRECTORY = "design_kit";
+const identity = (name) => {
+	if (!/^[a-z][a-z0-9_]*$/u.test(name)) throw new Error("project Kit: invalid Bundle identity");
+	return name;
 };
+function rootOf(projectRoot) {
+	if (!isAbsolute(projectRoot)) throw new Error("project Kit: absolute project root required");
+	return join(projectRoot, DESIGN_PROJECT_KIT_DIRECTORY);
+}
+function localPath(root, path) {
+	const rel = relative(root, resolve(root, path));
+	if (!rel || isAbsolute(rel) || rel === ".." || rel.startsWith("../")) throw new Error("project Kit: source path escapes its root");
+	return rel;
+}
+async function exists(path) {
+	try {
+		await lstat(path);
+		return true;
+	} catch (error) {
+		if (error.code === "ENOENT") return false;
+		throw error;
+	}
+}
+/** Virtual S2 trees and real retained trees preserve the same complete bytes. */
+async function copySource(fs, source, target, checks) {
+	if (!fs.readBytes) {
+		const before = await revisionOf(source);
+		checks.push(async () => {
+			if (before !== await revisionOf(source)) throw new Error("project Kit: source changed while copying; retry from current source");
+		});
+		return copyTree(source, target);
+	}
+	const budget = {
+		bytes: 0,
+		nodes: 0
+	};
+	const walk = async (path, to, depth) => {
+		if (++budget.nodes > 2e4 || depth > 32) throw new Error("project Kit: source tree exceeds limits");
+		if (await fs.isDirectory?.(path)) {
+			await mkdir(to, { recursive: true });
+			for (const name of (await fs.listDir(path)).sort()) {
+				if (!name || name === "." || name === ".." || /[\\/\u0000]/u.test(name)) throw new Error("project Kit: invalid resource path");
+				await walk(join(path, name), join(to, name), depth + 1);
+			}
+		} else {
+			const bytes = await fs.readBytes(path);
+			if (!bytes) throw new Error(`project Kit: missing source resource ${path}`);
+			budget.bytes += bytes.byteLength;
+			if (budget.bytes > 134217728) throw new Error("project Kit: source bytes exceed limits");
+			await writeFile(to, bytes, { flag: "wx" });
+		}
+	};
+	await walk(source, target, 0);
+}
+/** Hash the current bytes, including binary assets and empty directories. Not a release pin. */
+async function revisionOf(root) {
+	const hash = createHash("sha256"), budget = {
+		bytes: 0,
+		nodes: 0
+	};
+	const walk = async (path, rel) => {
+		const stat = await lstat(path);
+		if (stat.isSymbolicLink()) throw new Error(`project Kit: symlink source is unsupported: ${rel}`);
+		if (++budget.nodes > 2e4 || rel.split("/").length > 32) throw new Error("project Kit: source tree exceeds limits");
+		if (stat.isDirectory()) {
+			hash.update(`directory\0${rel}\0`);
+			for (const name of (await readdir(path)).sort()) await walk(join(path, name), rel ? `${rel}/${name}` : name);
+		} else if (stat.isFile()) {
+			budget.bytes += stat.size;
+			if (budget.bytes > 134217728) throw new Error("project Kit: source bytes exceed limits");
+			const bytes = await readFile(path);
+			hash.update(`file\0${rel}\0${bytes.length}\0`).update(bytes);
+		} else throw new Error(`project Kit: unsupported source resource ${rel}`);
+	};
+	await walk(root, "");
+	return hash.digest("hex");
+}
+/** Existing but invalid source is diagnosed; a library fallback never hides edits. */
+async function loadProjectKit(projectRoot) {
+	const root = rootOf(projectRoot), revision = await revisionOf(root);
+	const layout = JSON.parse(await readFile(join(root, "source.json"), "utf8"));
+	if (layout.format !== 1 || !Array.isArray(layout.bundles) || typeof layout.kit?.sourceId !== "string") throw new Error("project Kit: invalid source layout");
+	const kitRoot = join(root, "kit");
+	const kit = await loadDesignKit(contentNodeFs, {
+		rootDir: kitRoot,
+		skillsDir: join(kitRoot, "skills"),
+		mindsetPath: resolve(kitRoot, localPath(kitRoot, layout.kit.mindset)),
+		manifestPath: resolve(kitRoot, localPath(kitRoot, layout.kit.manifest)),
+		...layout.kit.relations ? { relationsPath: resolve(kitRoot, localPath(kitRoot, layout.kit.relations)) } : {}
+	}, {
+		sourceId: layout.kit.sourceId,
+		current: true,
+		resolveBundle: async (pin) => {
+			const source = layout.bundles.find((item) => item.name === pin.name);
+			if (!source) throw new Error(`project Kit: missing mounted Bundle ${pin.name}`);
+			return loadDesignBundle(contentNodeFs, {
+				rootDir: join(root, "bundles", identity(source.name)),
+				sourceId: source.sourceId,
+				current: true
+			}, { name: source.name });
+		}
+	});
+	if (revision !== await revisionOf(root)) throw new Error("project Kit: source changed while loading; retry using the current files");
+	return {
+		kit,
+		revision
+	};
+}
+/** Initialize once from the actual selected/retained closure; later reads use project files. */
+async function ensureProjectKit(projectRoot, options) {
+	const root = rootOf(projectRoot);
+	if (await exists(root)) return loadProjectKit(projectRoot);
+	if (!(await lstat(projectRoot)).isDirectory()) throw new Error("project Kit: project directory unavailable");
+	const kit = await options.loadSource();
+	if (!kit.sourceRoot || !kit.sourceId) throw new Error("project Kit: original complete Kit source is unavailable");
+	const sourceFs = kit.sourceFs ?? contentNodeFs;
+	const location = kit.sourceLocation ?? {
+		rootDir: kit.sourceRoot,
+		mindsetPath: join(kit.sourceRoot, "mindset.md"),
+		skillsDir: join(kit.sourceRoot, "skills")
+	};
+	const staging = `${root}.tmp-${randomUUID()}`;
+	const kitRoot = join(staging, "kit");
+	const checks = [];
+	const layout = {
+		format: 1,
+		kit: {
+			sourceId: kit.sourceId,
+			mindset: localPath(location.rootDir, location.mindsetPath),
+			manifest: localPath(location.rootDir, location.manifestPath ?? join(location.rootDir, "kit.yaml")),
+			...location.relationsPath ? { relations: localPath(location.rootDir, location.relationsPath) } : {}
+		},
+		bundles: []
+	};
+	try {
+		await mkdir(staging);
+		if (await sourceFs.readText(location.manifestPath ?? join(location.rootDir, "kit.yaml")) !== void 0) await copySource(sourceFs, location.rootDir, kitRoot, checks);
+		else {
+			await mkdir(kitRoot);
+			const engineering = /* @__PURE__ */ new Set([
+				"skills",
+				"node_modules",
+				"lib",
+				"dist",
+				"src",
+				"test",
+				"tests",
+				"scripts",
+				".git",
+				".cache",
+				"package.json",
+				"pnpm-lock.yaml",
+				"package-lock.json",
+				"yarn.lock",
+				"tsconfig.json",
+				"tsdown.config.ts"
+			]);
+			for (const name of await sourceFs.listDir(location.rootDir)) {
+				if (engineering.has(name) || [
+					"mindset.md",
+					"kit.yaml",
+					"relations.yaml"
+				].includes(name) || /^(smoke-|test-|preview-|compare-).*\.(mjs|html)$/u.test(name)) continue;
+				await copySource(sourceFs, join(location.rootDir, name), join(kitRoot, name), checks);
+			}
+			layout.kit.mindset = "mindset.md";
+			layout.kit.manifest = "kit.yaml";
+			await writeFile(join(kitRoot, "mindset.md"), kit.mindsetSource);
+			const relations = await sourceFs.readText(location.relationsPath ?? join(location.rootDir, "relations.yaml"));
+			if (relations !== void 0) {
+				layout.kit.relations = "relations.yaml";
+				await writeFile(join(kitRoot, "relations.yaml"), relations);
+			}
+			await writeFile(join(kitRoot, "kit.yaml"), (0, import_dist.stringify)({
+				version: 1,
+				mounts: kit.skills.map((skill) => ({
+					bindingKey: skill.name,
+					name: skill.catalogName ?? skill.name,
+					version: String(skill.version)
+				}))
+			}));
+		}
+		await mkdir(join(staging, "bundles"));
+		for (const skill of kit.skills) {
+			const name = identity(skill.catalogName ?? skill.name);
+			if (!skill.resourceRoot || !skill.sourceId) throw new Error(`project Kit: original complete Bundle source unavailable: ${name}`);
+			await copySource(skill.sourceFs ?? contentNodeFs, skill.resourceRoot, join(staging, "bundles", name), checks);
+			layout.bundles.push({
+				name,
+				sourceId: skill.sourceId
+			});
+		}
+		await writeFile(join(staging, "source.json"), JSON.stringify(layout, null, 2) + "\n");
+		const verified = await loadDesignKit(contentNodeFs, {
+			rootDir: kitRoot,
+			skillsDir: join(kitRoot, "skills"),
+			mindsetPath: join(kitRoot, layout.kit.mindset),
+			manifestPath: join(kitRoot, layout.kit.manifest),
+			...layout.kit.relations ? { relationsPath: join(kitRoot, layout.kit.relations) } : {}
+		}, {
+			sourceId: layout.kit.sourceId,
+			current: true,
+			resolveBundle: (pin) => {
+				const source = layout.bundles.find((item) => item.name === pin.name);
+				return source ? loadDesignBundle(contentNodeFs, {
+					rootDir: join(staging, "bundles", source.name),
+					sourceId: source.sourceId,
+					current: true
+				}, { name: source.name }) : Promise.resolve(void 0);
+			}
+		});
+		for (const check of checks) await check();
+		if (projectKitContentHash(verified) !== projectKitContentHash(kit)) throw new Error("project Kit: source changed while copying; retry from the current source");
+		try {
+			await rename(staging, root);
+		} catch (error) {
+			if (!["EEXIST", "ENOTEMPTY"].includes(error.code ?? "")) throw error;
+		}
+	} finally {
+		await rm(staging, {
+			recursive: true,
+			force: true
+		});
+	}
+	return loadProjectKit(projectRoot);
+}
 //#endregion
 //#region packages/core/src/design-project-paths.ts
 /** User-owned projects belong in Documents; runtime state has separate owners. */
@@ -14312,27 +14679,58 @@ var DesignProjectRegistry = class {
 //#endregion
 //#region packages/core/src/design-project-records.ts
 /** Safe explicit-path Git publication for the project's single durable records. */
+const MAX_PUBLICATION_ATTEMPTS = 3;
+const sameBytes = (left, right) => left === void 0 ? right === void 0 : right !== void 0 && Buffer.from(left).equals(right);
+/** Only the existing publication-CAS failures are retryable. */
+function stalePublication(error) {
+	if (!(error instanceof Error)) return false;
+	return error.message === "design git native: stale-publication" || error.message === "design git: publication revision is stale" || error.message.startsWith("design git: publication revision is stale: expected ");
+}
 /** Caller owns the existing project mutation lane. This adds no lock or identity ticket. */
 async function commitDesignProjectRecords(input) {
 	designProjectRecordsRoot(input.projectRoot);
 	if (!input.paths.length || !input.message.trim()) throw new Error("design records: explicit files and a commit message are required");
 	const git = new GitVersioning(input.spawn ?? nodeDesignProjectSpawn, input.projectRoot);
-	const head = await git.head(input.signal);
+	let head = await git.head(input.signal);
 	if (!head) throw new Error("design records: an initialized Design Project is required");
-	if (input.expectedHead !== void 0 && input.expectedHead !== head && await git.designEvidenceRevisionAt(input.expectedHead, input.signal) !== await git.designEvidenceRevisionAt(head, input.signal)) throw new Error("design records: Design evidence changed before record publication");
+	const evidence = await git.designEvidenceRevisionAt(head, input.signal);
+	if (input.expectedHead !== void 0 && input.expectedHead !== head && await git.designEvidenceRevisionAt(input.expectedHead, input.signal) !== evidence) throw new Error("design records: Design evidence changed before record publication");
 	const bytes = /* @__PURE__ */ new Map();
-	for (const path of input.paths) {
+	const baseline = /* @__PURE__ */ new Map();
+	const read = async (path) => {
+		const file = await resolveConfinedFilePath(input.projectRoot, path);
+		try {
+			return await readFile(file);
+		} catch (error) {
+			if (error.code !== "ENOENT") throw error;
+			return;
+		}
+	};
+	for (const path of new Set(input.paths)) {
 		input.signal?.throwIfAborted();
 		if (!path.startsWith(`design_records/`)) throw new Error("design records: path is outside the project record directory");
-		const file = await resolveConfinedFilePath(input.projectRoot, path);
+		bytes.set(path, await read(path));
+		baseline.set(path, await git.readBytesAt(input.expectedHead ?? head, path, input.signal));
+	}
+	for (let attempt = 0; attempt < MAX_PUBLICATION_ATTEMPTS; attempt++) {
+		input.signal?.throwIfAborted();
+		if (attempt > 0) {
+			head = await git.head(input.signal);
+			if (!head || await git.designEvidenceRevisionAt(head, input.signal) !== evidence) throw new Error("design records: Design evidence changed during record publication");
+		}
+		for (const [path, frozen] of bytes) {
+			if (!sameBytes(await read(path), frozen)) throw new Error("design records: target bytes changed during record publication");
+			const current = await git.readBytesAt(head, path, input.signal);
+			if (!sameBytes(current, baseline.get(path)) && !sameBytes(current, frozen)) throw new Error("design records: committed target changed during record publication");
+		}
 		try {
-			bytes.set(path, await readFile(file));
+			return await git.commitExact(input.message, bytes, head, input.signal);
 		} catch (error) {
-			if (error.code !== "ENOENT") throw error;
-			bytes.set(path, void 0);
+			input.signal?.throwIfAborted();
+			if (!stalePublication(error) || attempt === 2) throw error;
 		}
 	}
-	return git.commitExact(input.message, bytes, head, input.signal);
+	throw new Error("design records: publication attempts exhausted");
 }
 //#endregion
 //#region packages/core/src/design-knowledge.ts
@@ -16783,7 +17181,8 @@ function serializeDesignClarityAuthority(authority) {
 	}, null, 2)}\n`;
 }
 /**
-* Read and strictly parse one project's clarity authority.
+* Read and strictly parse the local file for an explicit report/retry operation.
+* Display and context reads use readCommittedDesignClarityAuthority instead.
 * @param projectStateRoot - trusted records root inside one project.
 * @param projectId - the project the document must be bound to.
 * @returns the validated authority, or undefined when no assessment exists.
@@ -16797,16 +17196,34 @@ async function readDesignClarityAuthority(projectStateRoot, projectId) {
 		if (error.code === "ENOENT") return void 0;
 		throw error;
 	}
+	return decodeDesignClarityAuthority(bytes, projectId);
+}
+/** Decode the same strict document from a local retry file or committed blob. */
+function decodeDesignClarityAuthority(bytes, projectId) {
 	if (bytes.byteLength > MAX_AUTHORITY_BYTES) throw new Error(`design clarity authority: file exceeds ${MAX_AUTHORITY_BYTES} bytes`);
 	let decoded;
 	try {
-		decoded = JSON.parse(bytes.toString("utf8"));
+		decoded = JSON.parse(Buffer.from(bytes).toString("utf8"));
 	} catch (error) {
 		throw new Error("design clarity authority: invalid JSON", { cause: error });
 	}
 	return parseDesignClarityAuthority(decoded, projectId);
 }
 /**
+* Read the last Git-published assessment from the same project authority file.
+* A local replacement whose publication failed is retained for explicit retry,
+* but cannot replace the last successful score in display or Agent context.
+* This read never commits, repairs, migrates, or folds journal audit facts.
+*/
+async function readCommittedDesignClarityAuthority(projectRoot, projectId, options) {
+	options?.signal?.throwIfAborted();
+	await resolveConfinedFilePath(designProjectRecordsRoot(projectRoot), DESIGN_CLARITY_AUTHORITY_FILE);
+	const git = new GitVersioning(options?.spawn ?? nodeDesignProjectSpawn, projectRoot);
+	const head = await git.head(options?.signal);
+	const bytes = head === void 0 ? void 0 : await git.readBytesAt(head, `${DESIGN_PROJECT_RECORDS_DIRECTORY}/${DESIGN_CLARITY_AUTHORITY_FILE}`, options?.signal, MAX_AUTHORITY_BYTES);
+	return bytes === void 0 ? void 0 : decodeDesignClarityAuthority(bytes, projectId);
+}
+/**
 * Atomically replace one project's clarity authority document.
 * @param projectStateRoot - trusted records root inside one project.
 * @param authority - validated authority document to persist.
@@ -18135,6 +18552,99 @@ async function pendingMustEditAuthorityForSave(records, kitName, kitVersion, ski
 	return pendingMustEditAuthority(records, kitName, kitVersion, skillName, head, (commit) => commit === release);
 }
 //#endregion
+//#region packages/core/src/panel-save.ts
+/** Shared main-conversation contract for the user's Save and assess action. */
+const DESIGN_PANEL_SAVE_ASSESSMENT_GUIDANCE = [
+	"The user chose Save and assess next step. After a meaningful Panel save, you must assess the latest saved Design evidence against the agreed user scope and call report_design_clarity in this same main-conversation continuation before asking the next question, recommending another Bundle or ending your reply.",
+	"Use the current server-supplied project, saved checkpoint and Kit input. If those inputs have changed, read the current Design context before reporting; do not assess a superseded checkpoint as current. Explain known evidence and gaps without inventing facts or a zero score.",
+	"Several saves delivered together need one assessment of their latest relevant state. An unchanged or replayed save does not require another score; reuse an existing assessment only when its saved Design evidence, Kit content and reasoning still apply to the current agreed scope.",
+	"A later user stop, cancellation or instruction not to assess takes priority. If the reporting capability is unavailable or reporting fails, state that limitation and preserve the saved result; a missing score does not block independently authorized Design work.",
+	"No second evaluator is required. Do not start another model or Bundle, reopen a settled invocation, or rewrite saved Design Files just to assess them. Existing user-input handoffs and main-Agent permissions remain in force."
+].join(" ");
+/** Decode bounded Panel attachment transport; store enforces path ownership. */
+function parsePanelArtifacts(skill, value) {
+	if (value === void 0) return void 0;
+	if (!Array.isArray(value) || value.length > 64) throw new Error("design panel: artifacts must be a list of at most 64 files");
+	const artifacts = {};
+	let totalBytes = 0;
+	for (const raw of value) {
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new Error("design panel: each artifact must be an object");
+		const entry = raw;
+		const path = entry.path;
+		const content = entry.content;
+		if (typeof path !== "string" || typeof content !== "string") throw new Error("design panel: each artifact requires string path and content");
+		const encoding = entry.encoding;
+		if (encoding !== void 0 && encoding !== "base64") throw new Error("design panel: artifact encoding must be base64 when present");
+		if (Object.keys(entry).some((key) => key !== "path" && key !== "content" && key !== "encoding")) throw new Error("design panel: artifact entries accept only path, content and encoding");
+		if (Object.hasOwn(artifacts, path)) throw new Error(`design panel: duplicate artifact path ${JSON.stringify(path)}`);
+		let prepared = content;
+		let bytes = Buffer.byteLength(content, "utf8");
+		if (encoding === "base64") {
+			if (content === "" || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u.test(content)) throw new Error(`design panel: artifact ${JSON.stringify(path)} is not canonical base64`);
+			const decoded = Buffer.from(content, "base64");
+			if (decoded.toString("base64") !== content) throw new Error(`design panel: artifact ${JSON.stringify(path)} is not canonical base64`);
+			prepared = Uint8Array.from(decoded);
+			bytes = decoded.byteLength;
+		}
+		if (bytes > 16777216) throw new Error(`design panel: artifact ${JSON.stringify(path)} exceeds 16 MiB`);
+		totalBytes += bytes;
+		if (totalBytes > 67108864) throw new Error("design panel: artifacts exceed 64 MiB in total");
+		artifacts[path] = prepared;
+	}
+	return Object.freeze(artifacts);
+}
+/**
+* Build the model-facing note that carries the authoritative git diff.
+* @param skill - the skill whose panel was saved.
+* @param diff - the unified diff of the save commit.
+* @returns the `<panel_save_context>` note text.
+*/
+function buildPanelSaveNote(skill, diff, clarityInput) {
+	return [
+		"<panel_save_context>",
+		`The backend has already persisted the "${skill}" panel edits. The raw Git diff below is the authoritative change record. Do not call a write tool to apply it again.`,
+		"<git_diff>",
+		diff,
+		"</git_diff>",
+		`This is a change diff, not the complete "${skill}" state. Reuse it and the evidence already available; read the saved JSON or a referenced artifact only when needed context is absent or the diff is insufficient.`,
+		...clarityInput === void 0 ? [] : [
+			DESIGN_PANEL_SAVE_ASSESSMENT_GUIDANCE,
+			`Call report_design_clarity with input=${JSON.stringify(clarityInput)} and evidence-based U/S/T for the latest saved Design state and agreed user scope. The Design save is already completed independently of this report.`,
+			"The current assembly supplies design_clarity_input for project, saved commit and Kit content. Use current user intent to decide whether the saved reasoning needs reassessment; conversational scope is not an identity ticket.",
+			"Several saved edits may be assessed together. Reuse a score only when its evidence and reasoning remain applicable; corrections and same-turn reassessment are allowed. Reporting failure does not undo the save or block authorized work, and old scores are not fresh evidence."
+		],
+		"</panel_save_context>"
+	].join("\n");
+}
+/**
+* Apply one panel edit: validate, persist, version, and build the agent note.
+* @param store - the session's Design Files store.
+* @param edit - the panel save (owning skill + post-edit state).
+* @param settleEvent - awaited plugin Journal settlement after commit.
+* @param validate - write-time schema validator (fail loud).
+* @param artifacts - deterministic files prepared by the runtime driver.
+* @param ownedArtifacts - complete artifact set retained by this Bundle.
+* @param signal - cancellation before transaction acceptance.
+* @returns the commit, diff, and the note to inject into the next turn.
+*/
+async function applyPanelEdit(store, edit, settleEvent, validate, artifacts, ownedArtifacts, signal, audit) {
+	const { commit, diff } = await store.write(edit.skill, edit.state, {
+		origin: "panel",
+		...validate === void 0 ? {} : { validate },
+		...artifacts === void 0 ? {} : { artifacts },
+		...ownedArtifacts === void 0 ? {} : { ownedArtifacts },
+		...signal === void 0 ? {} : { signal },
+		...audit === void 0 ? {} : { audit },
+		settleEvent
+	});
+	return {
+		skill: edit.skill,
+		commit,
+		diff,
+		note: buildPanelSaveNote(edit.skill, diff)
+	};
+}
+//#endregion
 //#region packages/core/src/validate-design.ts
 /**
 * Renderability checkpoint (the second validation layer). Given a design skill
@@ -18162,453 +18672,72 @@ async function validateSkillDesign(skill, state, options = {}) {
 			const result = validatorFromSchemaYaml(schemaYaml)(state);
 			if (!result.ok) issues.push({
 				code: "schema_violation",
-				message: result.error,
-				repair_hint: "Bring the design state into conformance with the skill schema before persisting."
-			});
-		} else issues.push({
-			code: "schema_missing",
-			message: `skill "${skill.name}" has no schema.yaml`,
-			repair_hint: "Add a schema.yaml data contract for the skill."
-		});
-	}
-	const validationYaml = skill.metadata?.validationYaml;
-	if (typeof validationYaml === "string") {
-		const doc = parseValidationYaml(validationYaml);
-		const stateEnv = {
-			skill: skill.name,
-			state: stateRecord,
-			...options.artifactText === void 0 ? {} : { artifactText: options.artifactText }
-		};
-		if (scopes.has("state")) issues.push(...await evaluateValidationRules(doc, stateEnv, "state", options.resolveValidationDriver));
-		if (scopes.has("candidate")) {
-			if (options.candidate === void 0) throw new Error("validateSkillDesign: candidate scope requires options.candidate");
-			const candidate = options.candidate;
-			const candidateState = {
-				content: candidate.content,
-				...candidate.metadata === void 0 ? {} : { metadata: candidate.metadata }
-			};
-			issues.push(...await evaluateValidationRules(doc, {
-				skill: skill.name,
-				state: candidateState,
-				candidate
-			}, "candidate", options.resolveValidationDriver));
-		}
-		if (scopes.has("completion")) issues.push(...await evaluateValidationRules(doc, stateEnv, "completion", options.resolveValidationDriver));
-	}
-	if (!validatesCandidateState) return issues;
-	const manifest = skill.metadata?.skillManifest;
-	if ((typeof manifest === "object" && manifest !== null && !Array.isArray(manifest) && typeof manifest.presentation === "object" && manifest.presentation !== null && !Array.isArray(manifest.presentation) ? manifest.presentation : void 0)?.mode === "declarative") {
-		const panelYaml = skill.metadata?.panelYaml;
-		if (typeof panelYaml !== "string") {
-			issues.push({
-				code: "panel_missing",
-				message: `skill "${skill.name}" has no panel.yaml`,
-				repair_hint: "Add a panel.yaml so the declarative design can be visualized and edited."
-			});
-			return issues;
-		}
-		try {
-			const panel = (0, import_dist.parse)(panelYaml);
-			if (panel.version !== 1) issues.push({
-				code: "panel_version",
-				message: `panel manifest version ${String(panel.version)} is unsupported`,
-				repair_hint: "Set version: 1 in panel.yaml."
-			});
-			if (panel.ui === void 0) issues.push({
-				code: "panel_no_ui",
-				message: "panel manifest has no ui tree",
-				repair_hint: "Define the ui component tree in panel.yaml."
-			});
-		} catch (error) {
-			issues.push({
-				code: "panel_unparseable",
-				message: error instanceof Error ? error.message : String(error),
-				repair_hint: "Fix the panel.yaml syntax."
-			});
-		}
-	}
-	return issues;
-}
-//#endregion
-//#region packages/core/src/content-store.ts
-/** File-backed immutable content. The caller supplies trusted installation provenance. */
-const contentNodeFs = {
-	readText: async (path) => {
-		try {
-			return await readFile(path, "utf8");
-		} catch (error) {
-			if (error.code === "ENOENT") return void 0;
-			throw error;
-		}
-	},
-	listDir: (path) => readdir(path),
-	isDirectory: async (path) => (await lstat(path)).isDirectory(),
-	realPath: async (path) => (await import("node:fs/promises")).realpath(path)
-};
-const emptyIndex = () => ({
-	formatVersion: 1,
-	kits: [],
-	bundles: []
-});
-const encode = (name) => {
-	if (!name || name.includes("\0")) throw new Error("content: invalid identity");
-	return Buffer.from(name, "utf8").toString("hex");
-};
-const key$1 = (pin) => `${pin.name}\0${pin.version}`;
-function confinedRelativePath(root, path) {
-	const result = relative(root, resolve(root, path));
-	if (!result || result === ".." || result.startsWith("../") || isAbsolute(result)) throw new Error("content: Kit entry path escapes retained root");
-	return result;
-}
-function retainedKitLocation(rootDir, paths) {
-	if (!paths) return rootDir;
-	if (Object.values(paths).some((path) => isAbsolute(path))) throw new Error("content: retained Kit paths must be relative");
-	return {
-		rootDir,
-		skillsDir: join(rootDir, "skills"),
-		mindsetPath: resolve(rootDir, confinedRelativePath(rootDir, paths.mindset)),
-		manifestPath: resolve(rootDir, confinedRelativePath(rootDir, paths.manifest)),
-		...paths.relations === void 0 ? {} : { relationsPath: resolve(rootDir, confinedRelativePath(rootDir, paths.relations)) }
-	};
-}
-/** Copy bytes, rejecting symlinks and special files. Also hash empty directories. */
-async function copyTree(source, target, digest, relativePath = "", budget = {
-	bytes: 0,
-	nodes: 0
-}) {
-	if (++budget.nodes > 2e4 || relativePath.split("/").length > 32) throw new Error("content: resource tree exceeds limits");
-	const info = await lstat(source);
-	if (info.isSymbolicLink()) throw new Error(`content: symlink resource is not retained: ${source}`);
-	if (info.isDirectory()) {
-		digest.update(`directory\0${relativePath}\0`);
-		await mkdir(target, { recursive: true });
-		for (const entry of (await readdir(source)).sort()) await copyTree(join(source, entry), join(target, entry), digest, relativePath ? `${relativePath}/${entry}` : entry, budget);
-	} else if (info.isFile()) {
-		budget.bytes += info.size;
-		if (budget.bytes > 134217728) throw new Error("content: resource bytes exceed limits");
-		const bytes = await readFile(source);
-		digest.update(`file\0${relativePath}\0${bytes.length}\0`).update(bytes);
-		await writeFile(target, bytes, {
-			flag: "wx",
-			mode: info.mode & 511
-		});
-	} else throw new Error(`content: unsupported resource ${source}`);
-}
-/** Exact version catalog; editable sources and their discovery are not this authority. */
-var DesignContentStore = class {
-	root;
-	constructor(stateRoot) {
-		if (!isAbsolute(stateRoot)) throw new Error("content: stateRoot must be absolute");
-		this.root = join(stateRoot, "content");
-	}
-	async index() {
-		const text = await contentNodeFs.readText(join(this.root, "index.json"));
-		if (text === void 0) return emptyIndex();
-		const data = JSON.parse(text);
-		if (data.formatVersion !== 1 || !Array.isArray(data.kits) || !Array.isArray(data.bundles)) throw new Error("content: invalid retained index");
-		for (const entry of [...data.kits, ...data.bundles]) {
-			if (typeof entry.name !== "string" || typeof entry.version !== "string" || typeof entry.sourceId !== "string" || !/^[a-f0-9]{64}$/.test(entry.hash)) throw new Error("content: invalid retained entry");
-			encode(entry.name);
-			if (entry.kitPaths !== void 0) {
-				if (typeof entry.kitPaths.mindset !== "string" || typeof entry.kitPaths.manifest !== "string" || entry.kitPaths.relations !== void 0 && typeof entry.kitPaths.relations !== "string") throw new Error("content: invalid retained Kit paths");
-				retainedKitLocation(this.directory("kits", entry), entry.kitPaths);
-			}
-		}
-		return data;
-	}
-	directory(kind, pin) {
-		const version = kind === "kits" ? DesignKitVersion(pin.version) : DesignBundleVersion(pin.version);
-		return join(this.root, kind, encode(pin.name), String(version));
-	}
-	async listBundles() {
-		return (await this.index()).bundles.map(({ name, version }) => Object.freeze({
-			name,
-			version
-		}));
-	}
-	async listKits() {
-		return (await this.index()).kits.map(({ name, version }) => Object.freeze({
-			name,
-			version
-		}));
-	}
-	/** Publish an independent version even when no Kit mounts it. */
-	async retainBundle(rootDir, options, expectedPin) {
-		const bundle = await loadDesignBundle(contentNodeFs, {
-			rootDir,
-			sourceId: options.sourceId
-		}, expectedPin);
-		const pin = {
-			name: bundle.skill.catalogName ?? bundle.skill.name,
-			version: String(bundle.skill.version)
-		};
-		await mkdir(this.root, { recursive: true });
-		const lock = join(this.root, ".retain.lock");
-		await writeFile(lock, String(process.pid), { flag: "wx" });
-		const staging = join(this.root, `.staging-${randomUUID()}`);
-		try {
-			await mkdir(staging);
-			const directory = join(staging, "bundle");
-			await mkdir(directory);
-			const digest = createHash("sha256");
-			await copyTree(rootDir, join(directory, "files"), digest);
-			await loadDesignBundle(contentNodeFs, {
-				rootDir: join(directory, "files"),
-				sourceId: options.sourceId
-			}, pin);
-			const current = await this.index();
-			await this.publish([{
-				kind: "bundles",
-				entry: {
-					...pin,
-					sourceId: options.sourceId,
-					hash: digest.digest("hex")
-				},
-				directory
-			}], staging, {
-				formatVersion: 1,
-				kits: [...current.kits],
-				bundles: [...current.bundles]
-			});
-		} finally {
-			await rm(staging, {
-				recursive: true,
-				force: true
-			});
-			await rm(lock, { force: true });
-		}
-		return await this.resolveBundle(pin);
-	}
-	async resolveBundle(pin) {
-		const entry = (await this.index()).bundles.find((e) => key$1(e) === key$1(pin));
-		if (!entry) return void 0;
-		const rootDir = join(this.directory("bundles", pin), "files");
-		if (await hashTree(rootDir) !== entry.hash) throw new Error("content: retained Bundle hash mismatch");
-		return loadDesignBundle(contentNodeFs, {
-			rootDir,
-			sourceId: entry.sourceId
-		}, pin);
-	}
-	async loadRetainedKit(pin) {
-		const entry = (await this.index()).kits.find((e) => key$1(e) === key$1(pin));
-		if (!entry) return void 0;
-		const rootDir = join(this.directory("kits", pin), "files");
-		if (await hashTree(rootDir) !== entry.hash) throw new Error("content: retained Kit hash mismatch");
-		const kit = await loadDesignKit(contentNodeFs, retainedKitLocation(rootDir, entry.kitPaths), {
-			sourceId: entry.sourceId,
-			resolveBundle: (bundle) => this.resolveBundle(bundle)
+				message: result.error,
+				repair_hint: "Bring the design state into conformance with the skill schema before persisting."
+			});
+		} else issues.push({
+			code: "schema_missing",
+			message: `skill "${skill.name}" has no schema.yaml`,
+			repair_hint: "Add a schema.yaml data contract for the skill."
 		});
-		if (kit.name !== pin.name || String(kit.version) !== pin.version) throw new Error("content: retained Kit pin mismatch");
-		return kit;
 	}
-	/** All project reads and writes resolve the same exact closure. */
-	async resolveProjectKit(pin) {
-		const base = await this.loadRetainedKit(pin);
-		if (!base) return void 0;
-		return composeProjectKit(pin, base, await Promise.all(projectBundleOverrides(pin, base).map(async (target) => {
-			const bundle = await this.resolveBundle(target);
-			if (!bundle) throw new Error(`project content: unavailable exact Bundle ${target.name}@${target.version}`);
-			return bundle;
-		})));
+	const validationYaml = skill.metadata?.validationYaml;
+	if (typeof validationYaml === "string") {
+		const doc = parseValidationYaml(validationYaml);
+		const stateEnv = {
+			skill: skill.name,
+			state: stateRecord,
+			...options.artifactText === void 0 ? {} : { artifactText: options.artifactText }
+		};
+		if (scopes.has("state")) issues.push(...await evaluateValidationRules(doc, stateEnv, "state", options.resolveValidationDriver));
+		if (scopes.has("candidate")) {
+			if (options.candidate === void 0) throw new Error("validateSkillDesign: candidate scope requires options.candidate");
+			const candidate = options.candidate;
+			const candidateState = {
+				content: candidate.content,
+				...candidate.metadata === void 0 ? {} : { metadata: candidate.metadata }
+			};
+			issues.push(...await evaluateValidationRules(doc, {
+				skill: skill.name,
+				state: candidateState,
+				candidate
+			}, "candidate", options.resolveValidationDriver));
+		}
+		if (scopes.has("completion")) issues.push(...await evaluateValidationRules(doc, stateEnv, "completion", options.resolveValidationDriver));
 	}
-	/** Retain a complete validated closure; publish index only after every byte is ready. */
-	async retainKitClosure(location, options) {
-		if (typeof location === "string") location = await resolveDesignKitPackage(contentNodeFs, location) ?? location;
-		const bundles = /* @__PURE__ */ new Map();
-		const kit = await loadDesignKit(contentNodeFs, location, {
-			...options,
-			...options.resolveBundle === void 0 ? {} : { resolveBundle: async (pin) => {
-				const bundle = await options.resolveBundle(pin);
-				if (bundle) bundles.set(key$1(pin), bundle);
-				return bundle;
-			} }
-		});
-		for (const skill of kit.skills) if (!bundles.has(key$1({
-			name: skill.catalogName ?? skill.name,
-			version: String(skill.version)
-		}))) {
-			const bundle = await loadDesignBundle(contentNodeFs, {
-				rootDir: skill.resourceRoot,
-				sourceId: options.sourceId
-			}, {
-				name: skill.catalogName ?? skill.name,
-				version: String(skill.version)
+	if (!validatesCandidateState) return issues;
+	const manifest = skill.metadata?.skillManifest;
+	if ((typeof manifest === "object" && manifest !== null && !Array.isArray(manifest) && typeof manifest.presentation === "object" && manifest.presentation !== null && !Array.isArray(manifest.presentation) ? manifest.presentation : void 0)?.mode === "declarative") {
+		const panelYaml = skill.metadata?.panelYaml;
+		if (typeof panelYaml !== "string") {
+			issues.push({
+				code: "panel_missing",
+				message: `skill "${skill.name}" has no panel.yaml`,
+				repair_hint: "Add a panel.yaml so the declarative design can be visualized and edited."
 			});
-			bundles.set(key$1({
-				name: skill.catalogName ?? skill.name,
-				version: String(skill.version)
-			}), bundle);
+			return issues;
 		}
-		await mkdir(this.root, { recursive: true });
-		const lock = join(this.root, ".retain.lock");
-		await writeFile(lock, String(process.pid), { flag: "wx" });
-		const staging = join(this.root, `.staging-${randomUUID()}`);
 		try {
-			await mkdir(staging);
-			const current = await this.index();
-			const next = {
-				formatVersion: 1,
-				kits: [...current.kits],
-				bundles: [...current.bundles]
-			};
-			const staged = [];
-			for (const bundle of bundles.values()) {
-				const pin = {
-					name: bundle.skill.catalogName ?? bundle.skill.name,
-					version: String(bundle.skill.version)
-				};
-				const sourceId = await this.bundleSourceId(bundle, options, pin);
-				const directory = join(staging, `bundle-${staged.length}`);
-				await mkdir(directory);
-				const digest = createHash("sha256");
-				await copyTree(bundle.resourceRoot, join(directory, "files"), digest);
-				if ((await loadDesignBundle(contentNodeFs, {
-					rootDir: join(directory, "files"),
-					sourceId
-				}, pin)).skill.authority !== bundle.skill.authority) throw new Error("content: Bundle authority changed during retention");
-				const entry = {
-					...pin,
-					sourceId,
-					hash: digest.digest("hex")
-				};
-				staged.push({
-					kind: "bundles",
-					entry,
-					directory
-				});
-			}
-			const directory = join(staging, "kit");
-			await mkdir(join(directory, "files"), { recursive: true });
-			const root = typeof location === "string" ? location : location.rootDir;
-			const originalManifest = await contentNodeFs.readText(typeof location === "string" ? join(root, "kit.yaml") : location.manifestPath ?? join(root, "kit.yaml"));
-			let kitPaths;
-			if (originalManifest !== void 0) {
-				kitPaths = {
-					mindset: confinedRelativePath(root, typeof location === "string" ? join(root, "mindset.md") : location.mindsetPath),
-					manifest: confinedRelativePath(root, typeof location === "string" ? join(root, "kit.yaml") : location.manifestPath ?? join(root, "kit.yaml")),
-					...typeof location === "string" || location.relationsPath === void 0 ? {} : { relations: confinedRelativePath(root, location.relationsPath) }
-				};
-				if (kitPaths.mindset === "mindset.md" && kitPaths.manifest === "kit.yaml" && (kitPaths.relations === void 0 || kitPaths.relations === "relations.yaml")) kitPaths = void 0;
-				await copyTree(root, join(directory, "files"), createHash("sha256"));
-			} else {
-				const engineering = /* @__PURE__ */ new Set([
-					"skills",
-					"node_modules",
-					"lib",
-					"dist",
-					"src",
-					"test",
-					"tests",
-					"scripts",
-					".git",
-					".cache",
-					"package.json",
-					"pnpm-lock.yaml",
-					"package-lock.json",
-					"yarn.lock",
-					"tsconfig.json",
-					"tsdown.config.ts"
-				]);
-				for (const name of (await readdir(root)).sort()) {
-					if (engineering.has(name) || name === "mindset.md" || name === "kit.yaml" || name === "relations.yaml" || /^(smoke-|test-|preview-|compare-).*\.(mjs|html)$/.test(name)) continue;
-					await copyTree(join(root, name), join(directory, "files", name), createHash("sha256"), name);
-				}
-				await writeFile(join(directory, "files", "mindset.md"), kit.mindsetSource);
-				const relations = await contentNodeFs.readText(typeof location === "string" ? join(root, "relations.yaml") : location.relationsPath ?? join(root, "relations.yaml"));
-				if (relations !== void 0) await writeFile(join(directory, "files", "relations.yaml"), relations);
-				await writeFile(join(directory, "files", "kit.yaml"), (0, import_dist.stringify)({
-					version: 1,
-					mounts: kit.skills.map((s) => ({
-						bindingKey: s.name,
-						name: s.catalogName ?? s.name,
-						version: String(s.version)
-					}))
-				}));
-			}
-			const stagedByPin = new Map(staged.map((s) => [key$1(s.entry), s]));
-			const verified = await loadDesignKit(contentNodeFs, retainedKitLocation(join(directory, "files"), kitPaths), {
-				sourceId: options.sourceId,
-				resolveBundle: async (pin) => {
-					const value = stagedByPin.get(key$1(pin));
-					return value ? loadDesignBundle(contentNodeFs, {
-						rootDir: join(value.directory, "files"),
-						sourceId: value.entry.sourceId
-					}, pin) : void 0;
-				}
+			const panel = (0, import_dist.parse)(panelYaml);
+			if (panel.version !== 1) issues.push({
+				code: "panel_version",
+				message: `panel manifest version ${String(panel.version)} is unsupported`,
+				repair_hint: "Set version: 1 in panel.yaml."
 			});
-			if (verified.name !== kit.name || verified.version !== kit.version) throw new Error("content: source changed while retaining Kit");
-			const kitHash = await hashTree(join(directory, "files"));
-			staged.push({
-				kind: "kits",
-				entry: {
-					name: kit.name,
-					version: String(kit.version),
-					hash: kitHash,
-					sourceId: options.sourceId,
-					...kitPaths === void 0 ? {} : { kitPaths }
-				},
-				directory
+			if (panel.ui === void 0) issues.push({
+				code: "panel_no_ui",
+				message: "panel manifest has no ui tree",
+				repair_hint: "Define the ui component tree in panel.yaml."
 			});
-			await this.publish(staged, staging, next);
-		} finally {
-			await rm(staging, {
-				recursive: true,
-				force: true
+		} catch (error) {
+			issues.push({
+				code: "panel_unparseable",
+				message: error instanceof Error ? error.message : String(error),
+				repair_hint: "Fix the panel.yaml syntax."
 			});
-			await rm(lock, { force: true });
-		}
-		return await this.loadRetainedKit({
-			name: kit.name,
-			version: String(kit.version)
-		});
-	}
-	async publish(staged, staging, next) {
-		for (const value of staged) {
-			const existing = next[value.kind].find((e) => key$1(e) === key$1(value.entry));
-			if (existing && (existing.hash !== value.entry.hash || existing.sourceId !== value.entry.sourceId || JSON.stringify(existing.kitPaths) !== JSON.stringify(value.entry.kitPaths))) throw new Error(`content: immutable ${value.kind} pin conflict ${value.entry.name}@${value.entry.version}`);
-		}
-		for (const value of staged) {
-			if (next[value.kind].some((e) => key$1(e) === key$1(value.entry))) continue;
-			const target = this.directory(value.kind, value.entry);
-			await mkdir(resolve(target, ".."), { recursive: true });
-			await writeFile(join(value.directory, "metadata.json"), JSON.stringify(value.entry));
-			try {
-				await rename(value.directory, target);
-			} catch (error) {
-				if (!["EEXIST", "ENOTEMPTY"].includes(error.code ?? "")) throw error;
-				const previous = JSON.parse(await readFile(join(target, "metadata.json"), "utf8"));
-				if (previous.hash !== value.entry.hash || previous.sourceId !== value.entry.sourceId || JSON.stringify(previous.kitPaths) !== JSON.stringify(value.entry.kitPaths)) throw new Error("content: unindexed immutable version conflict");
-			}
-			next[value.kind].push(value.entry);
 		}
-		const indexPath = join(staging, "index.json");
-		await writeFile(indexPath, JSON.stringify(next));
-		await rename(indexPath, join(this.root, "index.json"));
-	}
-	async bundleSourceId(bundle, options, pin) {
-		const sourceId = bundle.sourceId ?? options.sourceId;
-		if ((await loadDesignBundle(contentNodeFs, {
-			rootDir: bundle.resourceRoot,
-			sourceId
-		}, pin)).skill.authority !== bundle.skill.authority) throw new Error("content: resolver must supply original trusted sourceId");
-		return sourceId;
-	}
-};
-async function hashTree(root) {
-	const digest = createHash("sha256");
-	async function walk(path, rel) {
-		const info = await lstat(path);
-		if (info.isSymbolicLink()) throw new Error("content: symlink in retained content");
-		if (info.isDirectory()) {
-			digest.update(`directory\0${rel}\0`);
-			for (const name of (await readdir(path)).sort()) await walk(join(path, name), rel ? `${rel}/${name}` : name);
-		} else if (info.isFile()) {
-			const bytes = await readFile(path);
-			digest.update(`file\0${rel}\0${bytes.length}\0`).update(bytes);
-		} else throw new Error("content: unsupported retained resource");
 	}
-	await walk(root, "");
-	return digest.digest("hex");
+	return issues;
 }
 //#endregion
 //#region packages/core/src/design-execution-derivation.ts
@@ -19590,6 +19719,7 @@ On DSH the main Agent can begin with a bounded text/sourceFiles query and pass t
 When Companion context supplies coverage.basis, forward it as the query basis with the unchanged project/checkpoint/revision pins. A source-projection view includes only verified file-derived records, explicit references and literal fields; semantic candidates and other non-file interpretations are outside it, even if a later semantic publication becomes available. Its status can remain failed for semantic maintenance while these basic reads are available; preserve sourceCheckpoint and do not call the semantic layer current. Unprojected, incomplete or stale sources remain unavailable rather than supplying invented pins. Legacy historical-snapshot coverage does not assert semantic completeness or current source projection policy.
 Use the shared Design KAG to answer a current design question, not to inspect or connect every node.
 Start from the current task, changed sourceFiles or exact record IDs. Pin project, checkpoint and graph revision; page with unchanged filters.
+The text filter is a case-insensitive literal substring over serialized projected entities and relations. Spaces are literal; it does not tokenize a question or perform query-vector search. Prefer a short verbatim keyword grounded in the source. sourceFiles filters exact provenance.evidence[].source values; copy the recorded Design-Files-relative path without adding a host root or design_files/ prefix. Combined filters must all match. Zero matches only means no records matched those filters in that snapshot; it does not prove a missing source fact, an incomplete index or an embedding failure. evidence.sourceReadRequired=true always requests verification in the original source, including when matches exist; it is not a failure or lag flag. Use the available Knowledge status and coverage to assess freshness and embedding readiness separately, and verify the pinned source evidence. Different current and published commits alone do not prove stale Design evidence when source equivalence has been established.
 Use ontologyTypes to select schema-derived kinds, recordKinds to separate records/content/artifacts, and identityQualities to distinguish stable anchors from structural or anonymous instances. These are generated projection facts, not manually assigned domain roles. Use incidentTo and direction for one-hop neighborhoods; relationTypes can narrow purpose. Expand only as needed, deduplicate and stop when the question is supported or the bounded search cannot resolve it.
 Relation reading separates meaning, origin, semantic direction and lifecycle. relationMeanings/relationOrigins filter before pagination; relationTypes still matches exact stored types. direction incoming/outgoing is STORAGE from/to, even for symmetric similar/contradicts; use both to recall both sides. Unknown types keep their raw name and unknown semantic direction: do not infer meaning from producer, labels or visual proximity.
 A heavily cited shared style is not necessarily a central business capability; choose relation meaning for the question instead of ranking every edge together. Do not infer mandatory node layers from schema names or visual positions.
@@ -19610,7 +19740,7 @@ Integrate receipts without echoing artifact bytes. Read relevant artifact conten
 const DESIGN_WORKER_EVIDENCE_GUIDANCE = `Use the assignment's shared decisions and relevant evidence before requesting more context. Do not automatically reread the complete project, shared specifications or sibling artifacts already sufficiently represented in the brief.
 For a material gap, read the smallest relevant source record or excerpt with available read-only tools; widen only when necessary. Check current source evidence if the brief conflicts with it or a relevant revision changed. Report that conflict to the executor rather than silently changing shared decisions. Exact assets and file-backed validators still read their authoritative files.
 Keep ownership to the assigned artifact. Return its receipt or path, meaningful validation evidence, and any unresolved dependency or inconsistency; do not return the artifact body or claim cross-artifact acceptance. Your executor owns integration.`;
-`${KNOWLEDGE_AGENTIC_GUIDANCE}${DESIGN_EXECUTOR_EVIDENCE_GUIDANCE}${RECONSTRUCTION_METHOD}`;
+`${KNOWLEDGE_AGENTIC_GUIDANCE}${DESIGN_EXECUTOR_EVIDENCE_GUIDANCE}${RECONSTRUCTION_METHOD}${DESIGN_PANEL_SAVE_ASSESSMENT_GUIDANCE}`;
 /** Evidence standard for the structured U/S/T clarity report. */
 const DESIGN_CORE_CLARITY_RUBRIC_PROMPT = `<design_clarity_rubric>
 Ignore files under _experiences/: derived demonstrations and sample content are not product evidence. Assess only the original owning design facts.
@@ -20159,8 +20289,6 @@ function genericPanelNode(components, context) {
 		if (!GENERIC_COMPONENTS.has(node.component) || seen.has(node.id)) throw new Error("auto panel: untrusted or duplicate generated component");
 		if (node.component === "stack" || node.component === "tabs") {
 			if (node.slots !== void 0) throw new Error("auto panel: generated layout has unrendered slots");
-		} else if (node.component === "split") {
-			if (node.children !== void 0 || Object.keys(node.slots ?? {}).some((key) => key !== "sidebar" && key !== "main")) throw new Error("auto panel: generated split has unrendered branches");
 		} else if (node.children !== void 0 || node.slots !== void 0) throw new Error("auto panel: generated leaf has unrendered branches");
 		if (node.card_groups !== void 0) throw new Error("auto panel: authored card groups are not supported");
 		if (node.sidebar_icon !== void 0) throw new Error("auto panel: authored sidebar icons are not supported");
@@ -20215,7 +20343,7 @@ function genericPanelNode(components, context) {
 			if (Object.entries(declared).filter(([key, spec]) => spec.knowledge?.role !== "metadata" && !shown.has(key)).length > 0 && !hasStructuredSource(manifest.ui, (section.records_path ?? section.id).split(".")[0])) throw new Error("auto panel: record fields omitted without readable overview");
 		}
 		for (const child of node.children ?? []) visit(child);
-		for (const child of Object.values(node.slots ?? {})) if (child !== void 0) visit(child);
+		for (const child of Object.values(node.slots ?? {})) if (child != null) visit(child);
 	};
 	visit(manifest.ui);
 	for (const [key, spec] of Object.entries(context.schema.properties ?? {})) {
@@ -21028,4 +21156,4 @@ var DesignContinuousReviewClock = class {
 	}
 };
 //#endregion
-export { DesignKnowledgeRevision as $, DesignContentStore as A, validatorFromSchemaYaml as At, parseDesignClarityReported as B, DesignAdvisoryJournal as C, readConfinedText as Ct, OFFICIAL_REFLECTION_PROFILE as D, writeConfinedText as Dt, OFFICIAL_GROUNDING_PROFILE as E, writeConfinedBytes as Et, readDesignClarityAuthority as F, ProjectContentTransaction as Ft, advanceDesignKnowledgePublication as G, runDesignProjectCommand as H, writeDesignClarityAuthority as I, DesignBundleVersion as It, refreshDesignKnowledge as J, readDesignKnowledgePublication as K, designClarityDigest as L, DesignKitVersion as Lt, pendingMustEditAuthorityForSave as M, DesignProjectManager as Mt, DesignExecutionHandoffJournal as N, nodeDesignProjectSpawn as Nt, officialAdvisoryProfile as O, compileSchema as Ot, DesignJournalStorage as P, parseDesignProjectJson as Pt, pointerKey as Q, designClarityInputMatches as R, GitVersioning as Rt, queryKnowledgeSnapshot as S, readConfinedBytes as St, OFFICIAL_ALIGNMENT_PROFILE as T, resolveConfinedFilePath as Tt, restoreDesignKnowledgeRecords as U, parseDesignCommand as V, saveDesignKnowledgeRecords as W, readSourceDesignKnowledge as X, storedKnowledgeGraph as Y, readCompleteDesignKnowledge as Z, DESIGN_EXECUTOR_EVIDENCE_GUIDANCE as _, resolveSemanticCapability as _t, autoPanelGenerationPrompt as a, projectBundleOverrides as at, knowledgeQueryFilters as b, PANEL_COMPONENT_CATALOG as bt, resolveAutoPanel as c, createDirectoryBundleResolver as ct, knowledgeReviewSchema as d, parseFrontmatter as dt, commitDesignProjectRecords as et, publishKnowledgeReview as f, parseKitMounts as ft, DESIGN_CORE_CLARITY_RUBRIC_PROMPT as g, reviewSupportOf as gt, DESIGN_CLARITY_OUTPUT_SCHEMA as h, designOntologyCoverage as ht, writeDesignReviewPolicy as i, latestInstalledKit as it, validateSkillDesign as j, require_dist as jt, deriveCurrentDesignExecutionGate as k, parseSchemaYaml as kt, retainResolvedAutoPanel as l, loadDesignBundle as lt, readAdvisoryDesignKnowledge as m, resolveDesignKitPackage as mt, DesignReviewPublicationQueue as n, ProjectContentMigration as nt, publishAutoPanelComponents as o, projectKitContentHash as ot, splitKnowledgeReviewResult as p, parseMindsetSkillNames as pt, readPublishedDesignKnowledge as q, readDesignReviewPolicy as r, composeProjectKit as rt, assertResolvedAutoPanelSave as s, sameProjectContentPin as st, DesignContinuousReviewClock as t, DesignProjectRegistry as tt, knowledgeReviewGuidance as u, loadDesignKit as ut, DESIGN_WORKER_EVIDENCE_GUIDANCE as v, COMPONENT_KINDS as vt, renderAdvisoryReviewMemory as w, removeConfinedFile as wt, knowledgeReadResult as x, requireDesignFileRelativePath as xt, KNOWLEDGE_AGENTIC_GUIDANCE as y, GENERATED_COMPONENT_KINDS as yt, parseDesignClarityInput as z, designProjectRecordsRoot as zt };
+export { storedKnowledgeGraph as $, validateSkillDesign as A, writeConfinedText as At, writeDesignClarityAuthority as B, designProjectRecordsRoot as Bt, DesignAdvisoryJournal as C, PANEL_COMPONENT_CATALOG as Ct, OFFICIAL_REFLECTION_PROFILE as D, removeConfinedFile as Dt, OFFICIAL_GROUNDING_PROFILE as E, readConfinedText as Et, pendingMustEditAuthorityForSave as F, DesignProjectManager as Ft, parseDesignCommand as G, designClarityInputMatches as H, DesignExecutionHandoffJournal as I, nodeDesignProjectSpawn as It, saveDesignKnowledgeRecords as J, runDesignProjectCommand as K, DesignJournalStorage as L, DesignBundleVersion as Lt, applyPanelEdit as M, parseSchemaYaml as Mt, buildPanelSaveNote as N, validatorFromSchemaYaml as Nt, officialAdvisoryProfile as O, resolveConfinedFilePath as Ot, parsePanelArtifacts as P, require_dist as Pt, refreshDesignKnowledge as Q, readCommittedDesignClarityAuthority as R, DesignKitVersion as Rt, queryKnowledgeSnapshot as S, GENERATED_COMPONENT_KINDS as St, OFFICIAL_ALIGNMENT_PROFILE as T, readConfinedBytes as Tt, parseDesignClarityInput as U, designClarityDigest as V, parseDesignClarityReported as W, readDesignKnowledgePublication as X, advanceDesignKnowledgePublication as Y, readPublishedDesignKnowledge as Z, DESIGN_EXECUTOR_EVIDENCE_GUIDANCE as _, resolveDesignKitPackage as _t, autoPanelGenerationPrompt as a, ensureProjectKit as at, knowledgeQueryFilters as b, resolveSemanticCapability as bt, resolveAutoPanel as c, projectBundleOverrides as ct, knowledgeReviewSchema as d, createDirectoryBundleResolver as dt, readSourceDesignKnowledge as et, publishKnowledgeReview as f, loadDesignBundle as ft, DESIGN_CORE_CLARITY_RUBRIC_PROMPT as g, parseMindsetSkillNames as gt, DESIGN_CLARITY_OUTPUT_SCHEMA as h, parseKitMounts as ht, writeDesignReviewPolicy as i, DesignProjectRegistry as it, DESIGN_PANEL_SAVE_ASSESSMENT_GUIDANCE as j, compileSchema as jt, deriveCurrentDesignExecutionGate as k, writeConfinedBytes as kt, retainResolvedAutoPanel as l, projectKitContentHash as lt, readAdvisoryDesignKnowledge as m, parseFrontmatter as mt, DesignReviewPublicationQueue as n, DesignKnowledgeRevision as nt, publishAutoPanelComponents as o, DesignContentStore as ot, splitKnowledgeReviewResult as p, loadDesignKit as pt, restoreDesignKnowledgeRecords as q, readDesignReviewPolicy as r, commitDesignProjectRecords as rt, assertResolvedAutoPanelSave as s, composeProjectKit as st, DesignContinuousReviewClock as t, readCompleteDesignKnowledge as tt, knowledgeReviewGuidance as u, sameProjectContentPin as ut, DESIGN_WORKER_EVIDENCE_GUIDANCE as v, designOntologyCoverage as vt, renderAdvisoryReviewMemory as w, requireDesignFileRelativePath as wt, knowledgeReadResult as x, queryPanelAuthoringReference as xt, KNOWLEDGE_AGENTIC_GUIDANCE as y, reviewSupportOf as yt, readDesignClarityAuthority as z, GitVersioning as zt };