chore: bump version to 0.16.0

2026-08-15 14:02:04 +02:00 · 2026-08-05 13:39:31 +00:00
106 changed files with 675 additions and 6049 deletions
@@ -8,7 +8,7 @@ body:
      value: |
        Thanks for requesting a new agent! Before submitting, please check if the agent is already supported.

-        **Currently supported agents**: Alquimia AI, Amp, Antigravity, Auggie CLI, Claude Code, Cline, CodeBuddy, Codex CLI, Command Code, Cursor, Devin for Terminal, Factory Droid, Firebender, Forge, Gemini CLI, GitHub Copilot, Goose, Grok Build, Hermes Agent, IBM Bob, Junie, Kilo Code, Kimi Code, Kiro CLI, Lingma, Mistral Vibe, Oh My Pi, opencode, Pi Coding Agent, Qoder CLI, Qwen Code, RovoDev ACLI, SHAI, Tabnine CLI, Trae, ZCode, Zed
+        **Currently supported agents**: Alquimia AI, Amp, Antigravity, Auggie CLI, Claude Code, Cline, CodeBuddy, Codex CLI, Cursor, Devin for Terminal, Factory Droid, Firebender, Forge, Gemini CLI, GitHub Copilot, Goose, Grok Build, Hermes Agent, IBM Bob, Junie, Kilo Code, Kimi Code, Kiro CLI, Lingma, Mistral Vibe, Oh My Pi, opencode, Pi Coding Agent, Qoder CLI, Qwen Code, RovoDev ACLI, SHAI, Tabnine CLI, Trae, ZCode, Zed

  - type: input
    id: agent-name
@@ -70,7 +70,6 @@ body:
        - Cline
        - CodeBuddy
        - Codex CLI
-        - Command Code
        - Cursor
        - Devin for Terminal
        - Factory Droid
@@ -64,7 +64,6 @@ body:
        - Cline
        - CodeBuddy
        - Codex CLI
-        - Command Code
        - Cursor
        - Devin for Terminal
        - Factory Droid
@@ -1,9 +1,9 @@
 {
  "entries": {
-    "actions/checkout@v7.0.1": {
+    "actions/checkout@v6.0.3": {
      "repo": "actions/checkout",
-      "version": "v7.0.1",
-      "sha": "3d3c42e5aac5ba805825da76410c181273ba90b1"
+      "version": "v6.0.3",
+      "sha": "df4cb1c069e1874edd31b4311f1884172cec0e10"
    },
    "actions/download-artifact@v8.0.1": {
      "repo": "actions/download-artifact",
@@ -15,20 +15,10 @@
      "version": "v9.0.0",
      "sha": "3a2844b7e9c422d3c10d287c895573f7108da1b3"
    },
-    "actions/setup-node@v7.0.0": {
+    "actions/setup-node@v6.4.0": {
      "repo": "actions/setup-node",
-      "version": "v7.0.0",
-      "sha": "820762786026740c76f36085b0efc47a31fe5020"
-    },
-    "actions/setup-python@v7.0.0": {
-      "repo": "actions/setup-python",
-      "version": "v7.0.0",
-      "sha": "5fda3b95a4ea91299a34e894583c3862153e4b97"
-    },
-    "astral-sh/setup-uv@v9.0.0": {
-      "repo": "astral-sh/setup-uv",
-      "version": "v9.0.0",
-      "sha": "c771a70e6277c0a99b617c7a806ffedaca235ff9"
+      "version": "v6.4.0",
+      "sha": "48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e"
    },
    "actions/upload-artifact@v7.0.1": {
      "repo": "actions/upload-artifact",
@@ -1,5 +1,5 @@
 # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"c64e3dc29aca89e48108bb6d4eb877f6264b4cec9cd56dcd36827893802d2a64","body_hash":"cade22e5083254b735200f4ff7d686104e4ccab848ff7355141b9689354834db","compiler_version":"v0.79.8","strict":true,"agent_id":"copilot","engine_versions":{"copilot":"1.0.60"}}
-# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_CI_TRIGGER_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"3d3c42e5aac5ba805825da76410c181273ba90b1","version":"v7.0.1"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"820762786026740c76f36085b0efc47a31fe5020","version":"v7.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"},{"repo":"github/gh-aw-actions/setup","sha":"c0338fef4749d08c21f8f975fb0e37efa17dda47","version":"v0.79.8"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2","digest":"sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2@sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2","digest":"sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2@sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2","digest":"sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2@sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.25","digest":"sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.25@sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa"},{"image":"ghcr.io/github/github-mcp-server:v1.1.2","digest":"sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c","pinned_image":"ghcr.io/github/github-mcp-server:v1.1.2@sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c"}]}
+# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_CI_TRIGGER_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"df4cb1c069e1874edd31b4311f1884172cec0e10","version":"v6.0.3"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e","version":"v6.4.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"},{"repo":"github/gh-aw-actions/setup","sha":"c0338fef4749d08c21f8f975fb0e37efa17dda47","version":"v0.79.8"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2","digest":"sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2@sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2","digest":"sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2@sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2","digest":"sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2@sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.25","digest":"sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.25@sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa"},{"image":"ghcr.io/github/github-mcp-server:v1.1.2","digest":"sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c","pinned_image":"ghcr.io/github/github-mcp-server:v1.1.2@sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c"}]}
 # This file was automatically generated by gh-aw (v0.79.8). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
 #
 #    ___                   _   _      
@@ -1,5 +1,5 @@
 # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"687ea37b376b3b918331c13fce6cdbf5b9898bab8e514ca57b662b92b6d3cd2c","body_hash":"83b7e917f475d6ddf32f17e7da09dd4097a01dddbcbbf8eeec673912285de8b2","compiler_version":"v0.79.8","strict":true,"agent_id":"copilot","engine_versions":{"copilot":"1.0.60"}}
-# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_CI_TRIGGER_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"3d3c42e5aac5ba805825da76410c181273ba90b1","version":"v7.0.1"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"820762786026740c76f36085b0efc47a31fe5020","version":"v7.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"},{"repo":"github/gh-aw-actions/setup","sha":"c0338fef4749d08c21f8f975fb0e37efa17dda47","version":"v0.79.8"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2","digest":"sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2@sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2","digest":"sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2@sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2","digest":"sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2@sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.25","digest":"sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.25@sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa"},{"image":"ghcr.io/github/github-mcp-server:v1.1.2","digest":"sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c","pinned_image":"ghcr.io/github/github-mcp-server:v1.1.2@sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c"}]}
+# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_CI_TRIGGER_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"df4cb1c069e1874edd31b4311f1884172cec0e10","version":"v6.0.3"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e","version":"v6.4.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"},{"repo":"github/gh-aw-actions/setup","sha":"c0338fef4749d08c21f8f975fb0e37efa17dda47","version":"v0.79.8"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2","digest":"sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2@sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2","digest":"sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2@sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2","digest":"sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2@sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.25","digest":"sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.25@sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa"},{"image":"ghcr.io/github/github-mcp-server:v1.1.2","digest":"sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c","pinned_image":"ghcr.io/github/github-mcp-server:v1.1.2@sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c"}]}
 # This file was automatically generated by gh-aw (v0.79.8). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
 #
 #    ___                   _   _      
@@ -1,5 +1,5 @@
 # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"b4ba1db5fdec754fa825cc3160879924118bc454a781eed70ef6c90beab83a95","body_hash":"cb6c19088fa13da0a8320c174e8c14c4887d2c8a005a5cb2d2d2faa3f890de39","compiler_version":"v0.79.8","strict":true,"agent_id":"copilot","engine_versions":{"copilot":"1.0.60"}}
-# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_CI_TRIGGER_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"3d3c42e5aac5ba805825da76410c181273ba90b1","version":"v7.0.1"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"820762786026740c76f36085b0efc47a31fe5020","version":"v7.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"},{"repo":"github/gh-aw-actions/setup","sha":"c0338fef4749d08c21f8f975fb0e37efa17dda47","version":"v0.79.8"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2","digest":"sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2@sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2","digest":"sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2@sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2","digest":"sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2@sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.25","digest":"sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.25@sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa"},{"image":"ghcr.io/github/github-mcp-server:v1.1.2","digest":"sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c","pinned_image":"ghcr.io/github/github-mcp-server:v1.1.2@sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c"}]}
+# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_CI_TRIGGER_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"df4cb1c069e1874edd31b4311f1884172cec0e10","version":"v6.0.3"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e","version":"v6.4.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"},{"repo":"github/gh-aw-actions/setup","sha":"c0338fef4749d08c21f8f975fb0e37efa17dda47","version":"v0.79.8"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2","digest":"sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2@sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2","digest":"sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2@sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2","digest":"sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2@sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.25","digest":"sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.25@sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa"},{"image":"ghcr.io/github/github-mcp-server:v1.1.2","digest":"sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c","pinned_image":"ghcr.io/github/github-mcp-server:v1.1.2@sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c"}]}
 # This file was automatically generated by gh-aw (v0.79.8). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
 #
 #    ___                   _   _      
@@ -1,5 +1,5 @@
 # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"00c226f69fb7ec2b63755304328cee6ecddbcedbe4a9840310e5f430bd3949f0","body_hash":"44428ecd81ba0e5ed7bb16436052e6cc3479fe4ad02414812e574d17830a464e","compiler_version":"v0.79.8","strict":true,"agent_id":"copilot","engine_versions":{"copilot":"1.0.60"}}
-# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"3d3c42e5aac5ba805825da76410c181273ba90b1","version":"v7.0.1"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"820762786026740c76f36085b0efc47a31fe5020","version":"v7.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"},{"repo":"github/gh-aw-actions/setup","sha":"c0338fef4749d08c21f8f975fb0e37efa17dda47","version":"v0.79.8"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2","digest":"sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2@sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2","digest":"sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2@sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2","digest":"sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2@sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.25","digest":"sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.25@sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa"},{"image":"ghcr.io/github/github-mcp-server:v1.1.2","digest":"sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c","pinned_image":"ghcr.io/github/github-mcp-server:v1.1.2@sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c"}]}
+# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"df4cb1c069e1874edd31b4311f1884172cec0e10","version":"v6.0.3"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e","version":"v6.4.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"},{"repo":"github/gh-aw-actions/setup","sha":"c0338fef4749d08c21f8f975fb0e37efa17dda47","version":"v0.79.8"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2","digest":"sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2@sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2","digest":"sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2@sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2","digest":"sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2@sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.25","digest":"sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.25@sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa"},{"image":"ghcr.io/github/github-mcp-server:v1.1.2","digest":"sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c","pinned_image":"ghcr.io/github/github-mcp-server:v1.1.2@sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c"}]}
 # This file was automatically generated by gh-aw (v0.79.8). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
 #
 #    ___                   _   _      
@@ -1,5 +1,5 @@
 # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"aafdb01f262d603577971994522575829802b93d9042d62446313955485df558","body_hash":"4596de2b7de95c7c73c05caedc5c1e97724b39d09d21e9b0dbfc8b570312798a","compiler_version":"v0.79.8","strict":true,"agent_id":"copilot","engine_versions":{"copilot":"1.0.60"}}
-# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_CI_TRIGGER_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"3d3c42e5aac5ba805825da76410c181273ba90b1","version":"v7.0.1"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"820762786026740c76f36085b0efc47a31fe5020","version":"v7.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"},{"repo":"github/gh-aw-actions/setup","sha":"c0338fef4749d08c21f8f975fb0e37efa17dda47","version":"v0.79.8"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2","digest":"sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2@sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2","digest":"sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2@sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2","digest":"sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2@sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.25","digest":"sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.25@sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa"},{"image":"ghcr.io/github/github-mcp-server:v1.1.2","digest":"sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c","pinned_image":"ghcr.io/github/github-mcp-server:v1.1.2@sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c"}]}
+# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_CI_TRIGGER_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"df4cb1c069e1874edd31b4311f1884172cec0e10","version":"v6.0.3"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e","version":"v6.4.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"},{"repo":"github/gh-aw-actions/setup","sha":"c0338fef4749d08c21f8f975fb0e37efa17dda47","version":"v0.79.8"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2","digest":"sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.2@sha256:f88e5b17b6b7a600117bc121114d6ce2155c88c983c0c939c5df884f730fa1d6"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2","digest":"sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2@sha256:ee39841d980878ebbb87592903b06d31a1af500c71525c9616f7e8e2a27041a4"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2","digest":"sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.2@sha256:2e3a717e5f19a654cd9a2263beb52012b56bcb68562ec5ae2e42f9d156b49591"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.25","digest":"sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.25@sha256:c10331ad17668ef89f38f5e356678788a40b0cd5fef96e8f92e1d9c1de47cbaa"},{"image":"ghcr.io/github/github-mcp-server:v1.1.2","digest":"sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c","pinned_image":"ghcr.io/github/github-mcp-server:v1.1.2@sha256:30197479d8036c7811892bc07e06f9a05c9ef3cdd79bc59f256d50647f95788c"}]}
 # This file was automatically generated by gh-aw (v0.79.8). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
 #
 #    ___                   _   _      
@@ -60,22 +60,6 @@ permissions:
 checkout:
  fetch-depth: 0

-network:
-  allowed:
-    - defaults
-    - pypi.org
-    - files.pythonhosted.org
-
-steps:
-  - name: Setup uv
-    uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
-  - name: Set up Python
-    uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
-    with:
-      python-version: "3.14"
-  - name: Install Python test dependencies
-    run: uv pip install --system -e ".[test]"
-
 safe-outputs:
  noop:
    report-as-issue: false
@@ -22,11 +22,11 @@ jobs:
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: Initialize CodeQL
-        uses: github/codeql-action/init@d1ba80a13dd99fba24a470575428917156a28b43 # v4
+        uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4
        with:
          languages: ${{ matrix.language }}

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@d1ba80a13dd99fba24a470575428917156a28b43 # v4
+        uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4
        with:
          category: "/language:${{ matrix.language }}"
@@ -37,7 +37,7 @@ jobs:
          fi

      - name: Run markdownlint-cli2
-        uses: DavidAnson/markdownlint-cli2-action@21c1be1b93ad9ed58fa840aacc3f279cde2a72ff # v24.2.0
+        uses: DavidAnson/markdownlint-cli2-action@6bf21b07787794f89a243495939cd651942aeabe # v24.1.0
        with:
          globs: |
            '**/*.md'
@@ -2,57 +2,6 @@

 <!-- insert new changelog below this comment -->

-## [0.16.2] - 2026-08-10
-
-### Changed
-
- Add Command Code integration to spec-kit (#4019)
- fix(workflows): strip a resolved condition before the true/false check (#3883)
- fix(workflows): guard a non-string overlay edit 'operation' (#3881)
- fix: bound response read in integration catalog fetch (#3818)
- Fix bug-test Python dependency provisioning (#4030)
- fix(bundle): escape Rich markup in bundle CLI error and status output (#4023)
- fix(presets): skip an unreadable restore source in `preset remove` (#4020)
- Add Keel Discovery extension to community catalog (#4035)
- fix: show error details in preset catalog config read failure (#3840)
- Update Reconcile Extension to v1.1.0 (#4034)
- Add Model Routing Governance preset to community catalog (#4033)
- fix: use missing_ok=True in integration JSON removal (#3846)
- fix: use missing_ok=True in extension cache clear (#3845)
- fix(extensions): reject duplicate provides.templates/scripts names (#4016)
- feat(presets): resolve constitution templates at command time (#3984)
- [bug-fix] Fix preset-wrap-drops-argument-hint: inherit argument-hint from core template (#3996)
- docs: document installing specify-cli from a custom package index (#4032)
- feat(extensions): accept provides.templates and provides.scripts in manifest (#4012)
- fix(presets): treat an unreadable core template as missing (#3961)
- chore: release 0.16.1, begin 0.16.2.dev0 development (#4014)
-
-## [0.16.1] - 2026-08-07
-
-### Changed
-
- fix(integrations): wrap a non-UTF-8 catalog response (#4011)
- fix(events): skip an unreadable command template (#3956)
- fix(bundle): wrap malformed YAML in a local .zip bundle manifest (#4013)
- chore(deps): bump github/codeql-action/analyze from 4.37.3 to 4.37.5 (#4005)
- chore(deps): bump DavidAnson/markdownlint-cli2-action (#4006)
- fix(agent-context): recurse for nested plans in Python mtime fallback (#3757)
- fix: add utf-8 encoding to extension and preset registry file I/O (#3834)
- fix(init): escape user-supplied values in `specify init` output (#3787)
- fix: bound response read in integration catalog fetch (#3812)
- fix: use missing_ok for temp file cleanup to avoid masking errors (#3803)
- fix(workflows): handle an unreadable run state in `workflow status` (#3999)
- feat(init): scaffold managed .specify/.gitignore (#4000)
- fix(scripts): stop check-prerequisites text mode crashing on a legacy stdout code page (#3890)
- fix(presets): return None for an unreadable layer in resolve_content (#3959)
- fix(extensions): start fresh on a non-UTF-8 extension registry (#3998)
- Fix init-force-preset-desync: reapply presets/extensions on init --here --force (#3995)
- fix(skills): apply the line-anchored delimiter scan to hermes and kimi (#3739)
- fix(archives): wrap the bare EOFError a truncated tar.gz raises (#3938)
- test(integrations): guard multiline/control-char SKILL.md frontmatter escaping (#3392)
- fix(scripts): stop setup-tasks text mode crashing on a legacy code page (#3892)
- chore: release 0.16.0, begin 0.16.1.dev0 development (#3992)
-
 ## [0.16.0] - 2026-08-05

 ### Changed
@@ -90,7 +90,7 @@ Bare `specify self upgrade` executes immediately, matching the no-prompt behavio

 ### 3. Establish project principles

-Launch your coding agent in the project directory. Most agents expose spec-kit as `/speckit.*` slash commands; Codex CLI and Command Code in skills mode use `$speckit-*` instead; GitHub Copilot CLI uses `/agents` to select the agent or address it directly in a prompt.
+Launch your coding agent in the project directory. Most agents expose spec-kit as `/speckit.*` slash commands; Codex CLI in skills mode uses `$speckit-*` instead; GitHub Copilot CLI uses `/agents` to select the agent or address it directly in a prompt.

 Use the **`/speckit.constitution`** command to create your project's governing principles and development guidelines that will guide all subsequent development.

@@ -72,7 +72,6 @@ The following community-contributed extensions are available in [`catalog.commun
 | Iterate | Iterate on spec documents with a two-phase define-and-apply workflow — refine specs mid-implementation and go straight back to building | `docs` | Read+Write | [spec-kit-iterate](https://github.com/imviancagrace/spec-kit-iterate) |
 | Jira Integration | Create Jira Epics, Stories, and Issues from spec-kit specifications and task breakdowns with configurable hierarchy and custom field support | `integration` | Read+Write | [spec-kit-jira](https://github.com/mbachorik/spec-kit-jira) |
 | Jira Integration (Sync Engine) | Idempotent, drift-aware, fail-closed reconcile engine mirroring spec-kit specs into Jira (Epic per repo, Story per spec, Subtask per phase) | `integration` | Read+Write | [spec-kit-jira-sync](https://github.com/ashbrener/spec-kit-jira-sync) |
-| Keel Discovery | A Spec Kit extension that puts customer evidence upstream of /speckit.specify, and audits what you shipped against it afterwards | `process` | Read+Write | [spec-kit-keel](https://github.com/keeldiscovery/spec-kit-keel) |
 | Learning Extension | Generate educational guides from implementations and enhance clarifications with mentoring context | `docs` | Read+Write | [spec-kit-learn](https://github.com/imviancagrace/spec-kit-learn) |
 | Linear Integration | Mirror spec-kit feature directories into Linear (filesystem → Linear, reconcile-based, unidirectional). | `integration` | Read+Write | [spec-kit-linear-sync](https://github.com/ashbrener/spec-kit-linear-sync) |
 | Linear Weave | Weave Spec Kit into Linear: pull requirements, mirror tasks.md into sub-issues, sync statuses | `integration` | Read+Write | [spec-kit-linear-weave](https://github.com/tonydwoodhouse/spec-kit-linear-weave) |
@@ -25,7 +25,6 @@ The following community-contributed presets customize how Spec Kit behaves — o
 | iSAQB Architecture Governance | Adds iSAQB/CPSA-F and arc42 architecture governance with audit-ready evidence for goals, views, resumability, partial-failure scenarios, ADRs, risks, and technical debt. | 13 templates, 3 commands | — | [spec-kit-preset-isaqb-architecture-governance](https://github.com/hindermath/spec-kit-preset-isaqb-architecture-governance) |
 | Jira Issue Tracking | Overrides `speckit.taskstoissues` to create Jira epics, stories, and tasks instead of GitHub Issues via Atlassian MCP tools | 1 command | — | [spec-kit-preset-jira](https://github.com/luno/spec-kit-preset-jira) |
 | Model Driven Engineering | Focuses on streamlined commands, app repository support, cross-spec support, and capability-aware project memory for model-driven engineering workflows | 6 templates, 11 commands | MDE extension | [spec-kit-preset-mde](https://github.com/AI-MDE/spec-kit-preset-mde) |
-| Model Routing Governance | Maps provider-neutral Spec Kit roles to validated harness-local runner profiles without storing model availability, credentials, or machine-specific selections in Git. | 4 templates, 2 commands, 2 scripts | — | [spec-kit-preset-model-routing-governance](https://github.com/hindermath/spec-kit-preset-model-routing-governance) |
 | Multi-Repo Branching | Coordinates feature branch creation across multiple git repositories (independent repos and submodules) during plan and tasks phases | 2 commands | — | [spec-kit-preset-multi-repo-branching](https://github.com/sakitA/spec-kit-preset-multi-repo-branching) |
 | Parallel Autonomous Run Governance | Coordinates permission-bounded autonomous campaigns while preserving the project's learner and accessibility contract across workers and consolidation. | 9 templates, 5 commands, 2 scripts | autonomous-run-governance >=0.2.2; optional: intake-review-governance >=0.1.0 | [spec-kit-preset-parallel-autonomous-run-governance](https://github.com/hindermath/spec-kit-preset-parallel-autonomous-run-governance) |
 | Pirate Speak (Full) | Transforms all Spec Kit output into pirate speak — specs become "Voyage Manifests", plans become "Battle Plans", tasks become "Crew Assignments" | 6 templates, 9 commands | — | [spec-kit-presets](https://github.com/mnriem/spec-kit-presets) |
@@ -35,27 +35,6 @@ pipx install specify-cli==0.12.11
 pip install specify-cli==0.12.11
 ```

-## Install from a custom or private package index
-
-Some environments (corporate networks, mirrors, proxies, or artifact feeds) require installing `specify-cli` from a package index other than the default public PyPI. Each Python tool exposes a way to point at a different index — configure it before running the install commands above. Substitute your own index URL for the placeholder shown here.
-
-```bash
-# uv — via environment variable (applies to the whole command)
-UV_DEFAULT_INDEX=https://your-index.example.com/pypi/simple/ uv tool install specify-cli
-
-# uv — via flag
-uv tool install --default-index https://your-index.example.com/pypi/simple/ specify-cli
-
-# pipx — pass a pip argument through
-pipx install specify-cli --index-url https://your-index.example.com/pypi/simple/
-
-# pip
-pip install specify-cli --index-url https://your-index.example.com/pypi/simple/
-```
-
-> [!NOTE]
-> The same index configuration applies to pinned installs, upgrades (`--force`/`--upgrade`), and one-time usage — set the environment variable or flag on those commands too. If your index requires authentication, follow your tool's documentation and prefer credential environment variables, keyring, or netrc; do not embed secrets in command-line URLs because they can leak through shell history, process listings, or logs. Avoid committing secrets. For fully offline installs, see the [air-gapped installation guide](air-gapped.md).
-
 ## Verify

 ```bash
@@ -50,7 +50,7 @@ pipx install specify-cli
 pip install specify-cli
 ```

-To install a specific release, pin the version — for example `uv tool install specify-cli==0.12.11`. See the [PyPI installation guide](install/pypi.md) for details, including how to upgrade and how to [install from a custom or private package index](install/pypi.md#install-from-a-custom-or-private-package-index).
+To install a specific release, pin the version — for example `uv tool install specify-cli==0.12.11`. See the [PyPI installation guide](install/pypi.md) for details, including how to upgrade.

 ### One-time Usage

@@ -57,8 +57,6 @@ specify init my-project --integration copilot --preset compliance

 > **Two resolution axes.** `SPECIFY_INIT_DIR` selects the **project** (which directory contains `.specify/`); `SPECIFY_FEATURE_DIRECTORY` / `.specify/feature.json` select the **feature** within that project. They are independent — project first, then feature.

-> **Version control.** `specify init` scaffolds a managed `.specify/.gitignore` that excludes machine-local state — `feature.json` (the current-feature pointer, rewritten on every feature switch) and per-machine extension `extensions/*/local-config.yml` overrides — while leaving everything else under `.specify/` (constitution, templates, scripts, extension config) shareable so teams stay aligned. Like the rest of `.specify/`'s shared scripts and templates, the file is tracked in the shared-infrastructure manifest: your edits are preserved on re-init and `specify init --here --force` restores the managed content. It is intentionally left in place by `specify integration uninstall`, which only removes the uninstalled agent's own files.
-
 > **Symlinked project roots.** `SPECIFY_INIT_DIR` relocates *where* the project is, not *how* a command treats symlinks: each command keeps its existing cwd-path stance. Commands that traverse and write project files through broad input paths (`bundle`, `workflow run <file>`) refuse a symlinked `.specify/` to preserve write confinement. Other project-scoped commands keep their existing behavior when `SPECIFY_INIT_DIR` points at a project root, which may include following a symlinked `.specify/`.

 ## Check Installed Tools
@@ -14,7 +14,6 @@ The Specify CLI supports a wide range of AI coding agents. When you run `specify
 | [Cline](https://github.com/cline/cline)                                              | `cline`          | IDE-based agent                                                                                                                           |
 | [CodeBuddy CLI](https://www.codebuddy.cn/docs/cli/installation)                      | `codebuddy`      |                                                                                                                                           |
 | [Codex CLI](https://github.com/openai/codex)                                         | `codex`          | Skills-based integration; installs skills into `.agents/skills` and invokes them as `$speckit-<command>` |
-| [Command Code](https://commandcode.ai/docs)                                          | `command-code`   | Skills-based integration; installs skills into `.commandcode/skills/` and invokes them as `$speckit-<command>` |
 | [Cursor](https://cursor.sh/)                                                         | `cursor-agent`   |                                                                                                                                           |
 | [Devin for Terminal](https://cli.devin.ai/docs)                                      | `devin`          | Skills-based integration; installs skills into `.devin/skills/` and invokes them as `/speckit-<command>` |
 | [Factory Droid](https://docs.factory.ai/cli/getting-started/overview)               | `droid`          | Skills-based integration; installs skills into `.factory/skills/` and invokes them as `/speckit-<command>`                               |
@@ -280,7 +279,6 @@ The currently declared multi-install safe integrations are:
 | `cline` | `.clinerules/workflows` |
 | `codebuddy` | `.codebuddy/commands` |
 | `codex` | `.agents/skills` |
-| `command-code` | `.commandcode/skills` |
 | `cursor-agent` | `.cursor/skills` |
 | `droid` | `.factory/skills` |
 | `firebender` | `.firebender/commands` |
@@ -40,25 +40,12 @@ requires:
      required: boolean    # Optional, default: false

 provides:
-  commands:              # At least one of commands/templates/scripts/hooks/events required
+  commands:              # Required, at least one command
    - name: string       # Required, pattern: ^speckit\.[a-z0-9-]+\.[a-z0-9-]+$
      file: string       # Required, relative path to command file
      description: string # Required
      aliases: [string]  # Optional, same pattern as name; namespace must match extension.id and must not shadow core or installed extension commands

-  templates:             # Optional, array of declared templates. Always resolve
-                          # as "replace" -- 'strategy' is not an authorable field here.
-    - name: string       # Required, pattern: ^[a-z0-9-]+$
-      file: string       # Required, relative path to template file
-      description: string # Optional
-
-  scripts:               # Optional, array of declared scripts. Always resolve
-                          # as "replace" -- 'strategy' is not an authorable field here.
-    - name: string       # Required, pattern: ^[a-z0-9-]+$
-      file: string       # Required, relative path to script file
-      description: string # Optional
-      runtimes: [string] # Optional, subset of: bash, powershell, python
-
  config:                # Optional, array of config files
    - name: string       # Config file name
      template: string   # Template file path
@@ -124,29 +111,6 @@ defaults:                # Optional, default configuration values
 - **Examples**: `speckit.jira.specstoissues`, `speckit.linear.sync`
 - **Invalid**: `jira.specstoissues`, `speckit.command`, `speckit.jira.CreateIssues`

-#### `provides.templates[].name` / `provides.scripts[].name`
-
- **Type**: string
- **Pattern**: `^[a-z0-9-]+$`
- **Description**: Unlike commands, templates and scripts are not invoked by
-  name, so they use the same plain slug pattern as `extension.id` rather than
-  the namespaced command pattern.
- **Examples**: `myext-template`, `myext-collect`
-
-#### `provides.templates[].strategy` / `provides.scripts[].strategy`
-
- Not an authorable field. Extension-contributed templates and scripts are
-  always resolved as `replace`; a manifest that includes a `strategy` key on
-  one of these entries is rejected with a `ValidationError`. Composable
-  strategies (`wrap`/`prepend`/`append`) are preset-only.
-
-#### `provides.scripts[].runtimes`
-
- **Type**: array of strings
- **Values**: `bash`, `powershell`, `python`
- **Description**: Declares which runtimes the script supports. Purely
-  informational metadata — it is not used to select or invoke the script.
-
 #### `hooks`

 - **Type**: object
@@ -179,8 +143,6 @@ manifest.version                   # str: Version
 manifest.description               # str: Description
 manifest.requires_speckit_version  # str: Required spec-kit version
 manifest.commands                  # List[Dict]: Command definitions
-manifest.templates                 # List[Dict]: Declared template definitions
-manifest.scripts                   # List[Dict]: Declared script definitions
 manifest.hooks                     # Dict: Hook definitions
 ```

@@ -177,16 +177,9 @@ Compatibility requirements.

 What the extension provides.

-**Optional sub-fields:**
+**Optional sub-fields**:

- `commands`: Array of command objects
- `templates`: Array of template objects
- `scripts`: Array of script objects
-
-`hooks` and `events` are separate top-level manifest fields (siblings of
-`provides`, not nested under it — see [`hooks`](#hooks) below). At least one
-of `provides.commands`, `provides.templates`, `provides.scripts`, `hooks`, or
-`events` is required.
+- `commands`: Array of command objects (at least one command or hook is required)

 **Command object**:

@@ -195,21 +188,6 @@ of `provides.commands`, `provides.templates`, `provides.scripts`, `hooks`, or
 - `description`: Command description (optional)
 - `aliases`: Alternative command names (optional, array; each must match `speckit.{ext-id}.{command}`)

-**Template object**:
-
- `name`: Template name (lowercase, alphanumeric, hyphens — e.g. `myext-template`)
- `file`: Path to template file (relative to extension root)
- `description`: Template description (optional)
-
-**Script object**:
-
- `name`: Script name (lowercase, alphanumeric, hyphens — e.g. `myext-collect`)
- `file`: Path to script file (relative to extension root)
- `description`: Script description (optional)
- `runtimes`: Runtimes the script supports (optional, array; subset of `bash`, `powershell`, `python` — informational only, not used to select or invoke the script)
-
-Extension-provided templates and scripts always resolve as `replace`; a manifest that includes a `strategy` key on one of these entries is rejected with a `ValidationError`. Composable strategies (`wrap`/`prepend`/`append`) are preset-only.
-
 ### Optional Fields

 #### `hooks`
@@ -11,8 +11,8 @@ Usage: update_agent_context.py [plan_path]

 When ``plan_path`` is omitted, the script derives it from
 ``.specify/feature.json`` (written by /speckit-specify). Falls back to the most
-recently modified ``plan.md`` found anywhere under ``specs/`` — scoped layouts
-nest it as ``specs/<scope>/<feature>/plan.md`` — only when feature.json is
+recently modified ``plan.md`` anywhere under ``specs/`` (including nested scoped
+layouts such as ``specs/<scope>/<feature>/plan.md``) only when feature.json is
 absent or its plan does not exist yet.
 """

@@ -173,31 +173,16 @@ def _resolve_plan_path(project_root: str) -> str:

    if not plan_path:
        root = Path(project_root).resolve()
-        specs = root / "specs"
-
-        def _resolved_rel(p: Path) -> Path | None:
-            # Resolve symlinks before checking containment: relative_to() is
-            # lexical and would otherwise accept a plan reached through a specs/
-            # symlink that points outside the project, emitting an
-            # in-project-looking path for an out-of-project file (or picking it
-            # as "most recent").
+        plans = sorted(
+            (root / "specs").rglob("plan.md"),
+            key=lambda p: p.stat().st_mtime,
+            reverse=True,
+        )
+        if plans:
            try:
-                return p.resolve().relative_to(root)
-            except (OSError, ValueError):
-                return None
-
-        # Recurse (rather than the old one-level specs/*/plan.md glob) so scoped
-        # layouts created via SPECIFY_FEATURE_DIRECTORY, e.g.
-        # specs/<scope>/<feature>/plan.md, are still discovered when
-        # feature.json is absent (#3024). Mirrors the bash and PowerShell twins.
-        candidates = []
-        for p in specs.rglob("plan.md"):
-            rel = _resolved_rel(p)
-            if rel is not None:
-                candidates.append((p, rel))
-        candidates.sort(key=lambda pr: pr[0].stat().st_mtime, reverse=True)
-        if candidates:
-            plan_path = candidates[0][1].as_posix()
+                plan_path = plans[0].relative_to(root).as_posix()
+            except ValueError:
+                plan_path = ""
    return plan_path


@@ -1,6 +1,6 @@
 {
  "schema_version": "1.0",
-  "updated_at": "2026-08-10T00:00:00Z",
+  "updated_at": "2026-08-04T00:00:00Z",
  "catalog_url": "https://raw.githubusercontent.com/github/spec-kit/main/extensions/catalog.community.json",
  "extensions": {
    "adrkit": {
@@ -2107,40 +2107,6 @@
      "created_at": "2026-06-08T00:00:00Z",
      "updated_at": "2026-06-24T00:00:00Z"
    },
-    "keel": {
-      "name": "Keel Discovery",
-      "id": "keel",
-      "description": "A Spec Kit extension that puts customer evidence upstream of /speckit.specify, and audits what you shipped against it afterwards.",
-      "author": "Keel Discovery",
-      "version": "0.1.1",
-      "download_url": "https://github.com/keeldiscovery/spec-kit-keel/archive/refs/tags/v0.1.1.zip",
-      "repository": "https://github.com/keeldiscovery/spec-kit-keel",
-      "homepage": "https://keeldiscovery.com",
-      "documentation": "https://github.com/keeldiscovery/spec-kit-keel/blob/main/README.md",
-      "changelog": "https://github.com/keeldiscovery/spec-kit-keel/blob/main/CHANGELOG.md",
-      "license": "Apache-2.0",
-      "category": "process",
-      "effect": "read-write",
-      "requires": {
-        "speckit_version": ">=0.15.0"
-      },
-      "provides": {
-        "commands": 5,
-        "hooks": 2
-      },
-      "tags": [
-        "discovery",
-        "evidence",
-        "customer-research",
-        "validation",
-        "traceability"
-      ],
-      "verified": false,
-      "downloads": 0,
-      "stars": 0,
-      "created_at": "2026-08-10T00:00:00Z",
-      "updated_at": "2026-08-10T00:00:00Z"
-    },
    "learn": {
      "name": "Learning Extension",
      "id": "learn",
@@ -3440,8 +3406,8 @@
      "id": "reconcile",
      "description": "Reconcile implementation drift by surgically updating the feature's own spec, plan, and tasks.",
      "author": "Stanislav Deviatov",
-      "version": "1.1.0",
-      "download_url": "https://github.com/stn1slv/spec-kit-reconcile/archive/refs/tags/v1.1.0.zip",
+      "version": "1.0.0",
+      "download_url": "https://github.com/stn1slv/spec-kit-reconcile/archive/refs/tags/v1.0.0.zip",
      "repository": "https://github.com/stn1slv/spec-kit-reconcile",
      "homepage": "https://github.com/stn1slv/spec-kit-reconcile",
      "documentation": "https://github.com/stn1slv/spec-kit-reconcile/blob/main/README.md",
@@ -3466,7 +3432,7 @@
      "downloads": 0,
      "stars": 0,
      "created_at": "2026-03-14T00:00:00Z",
-      "updated_at": "2026-08-10T00:00:00Z"
+      "updated_at": "2026-03-14T00:00:00Z"
    },
    "red-team": {
      "name": "Red Team",
@@ -84,15 +84,6 @@
      "repository": "https://github.com/github/spec-kit",
      "tags": ["cli", "skills"]
    },
-    "command-code": {
-      "id": "command-code",
-      "name": "Command Code",
-      "version": "1.0.0",
-      "description": "Command Code CLI skills-based integration",
-      "author": "spec-kit-core",
-      "repository": "https://github.com/github/spec-kit",
-      "tags": ["cli", "skills"]
-    },
    "devin": {
      "id": "devin",
      "name": "Devin for Terminal",
@@ -59,19 +59,6 @@ Content resolution functions for composition:
 - **Bash**: `resolve_template_content()` in `scripts/bash/common.sh` (templates only; command/script composition is handled by the Python resolver)
 - **PowerShell**: `Resolve-TemplateContent` in `scripts/powershell/common.ps1` (templates only; command/script composition is handled by the Python resolver)

-### Constitution lifecycle
-
-Initialization resolves `constitution-template` through the full stack and seeds
-`.specify/memory/constitution.md` once. Existing files are preserved byte-for-byte. On subsequent
-`/constitution` runs, the command resolves the current composed template at runtime and uses the live
-constitution as the source of project-specific values and amendments.
-
-Preset installation, removal, enablement, disablement, and priority changes do not materialize
-`constitution-template` by default. When the enabled preset registry contains `constitution-sync`,
-those operations may reconcile the live file, but only if its provenance hash proves it is still
-generated content. Missing files may be seeded when the preset is installed; authored or edited
-constitutions are never overwritten.
-
 ## Command Registration

 When a preset is installed with `type: "command"` entries, the `PresetManager` registers them into all detected agent directories using the shared `CommandRegistrar` from `src/specify_cli/agents.py`.
@@ -15,16 +15,6 @@ If no preset is installed, core templates are used — exactly the same behavior

 Template resolution happens **at runtime** — although preset files are copied into `.specify/presets/<id>/` during installation, Spec Kit walks the resolution stack on every template lookup rather than merging templates into a single location.

-`constitution-template` follows the same runtime model. Project initialization seeds
-`.specify/memory/constitution.md` once so downstream commands always have a constitution to read.
-After that, installing, removing, enabling, disabling, or reprioritizing presets does not rewrite the
-live constitution. Each `/constitution` run resolves the current composed `constitution-template`,
-then applies existing project values and amendments to that scaffold.
-
-Teams that intentionally want preset stack changes to refresh an unchanged generated constitution can
-install the bundled `constitution-sync` preset. It restores guarded install-time materialization in
-addition to its command-time propagation behavior; authored constitutions remain protected.
-
 For detailed resolution and command registration flows, see [ARCHITECTURE.md](ARCHITECTURE.md).

 ## Command Overrides
@@ -1,6 +1,6 @@
 {
  "schema_version": "1.0",
-  "updated_at": "2026-08-10T00:00:00Z",
+  "updated_at": "2026-07-28T00:00:00Z",

  "catalog_url": "https://raw.githubusercontent.com/github/spec-kit/main/presets/catalog.community.json",
  "presets": {
@@ -541,35 +541,6 @@
      "created_at": "2026-05-08T00:00:00Z",
      "updated_at": "2026-05-08T00:00:00Z"
    },
-    "model-routing-governance": {
-      "name": "Model Routing Governance",
-      "id": "model-routing-governance",
-      "version": "0.1.4",
-      "description": "Maps provider-neutral Spec Kit roles to validated harness-local runner profiles without storing model availability, credentials, or machine-specific selections in Git.",
-      "author": "Thorsten Hindermann",
-      "repository": "https://github.com/hindermath/spec-kit-preset-model-routing-governance",
-      "download_url": "https://github.com/hindermath/spec-kit-preset-model-routing-governance/archive/refs/tags/v0.1.4.zip",
-      "homepage": "https://github.com/hindermath/spec-kit-preset-model-routing-governance",
-      "documentation": "https://github.com/hindermath/spec-kit-preset-model-routing-governance/blob/v0.1.4/README.md",
-      "license": "MIT",
-      "requires": {
-        "speckit_version": ">=0.8.3"
-      },
-      "provides": {
-        "templates": 4,
-        "commands": 2,
-        "scripts": 2
-      },
-      "tags": [
-        "model-routing",
-        "agents",
-        "governance",
-        "provider-neutral",
-        "cross-platform"
-      ],
-      "created_at": "2026-08-10T00:00:00Z",
-      "updated_at": "2026-08-10T00:00:00Z"
-    },
    "multi-repo-branching": {
      "name": "Multi-Repo Branching",
      "id": "multi-repo-branching",
@@ -1,6 +1,6 @@
 {
  "schema_version": "1.0",
-  "updated_at": "2026-08-04T00:00:00Z",
+  "updated_at": "2026-04-24T00:00:00Z",
  "catalog_url": "https://raw.githubusercontent.com/github/spec-kit/main/presets/catalog.json",
  "presets": {
    "lean": {
@@ -30,7 +30,7 @@
      "name": "Constitution Template Sync",
      "id": "constitution-sync",
      "version": "1.0.0",
-      "description": "Opt-in: restores guarded install-time constitution seeding and /constitution propagation for teams that treat materialized templates as reviewed artifacts.",
+      "description": "Opt-in: restores /constitution propagation of amended guidance into plan/spec/tasks templates and installed command files, for teams that treat materialized templates as reviewed artifacts.",
      "author": "github",
      "repository": "https://github.com/github/spec-kit",
      "license": "MIT",
@@ -1,15 +1,13 @@
 # Constitution Template Sync

-An **opt-in** preset that restores materialized constitution workflows. It refreshes an unchanged
-generated `.specify/memory/constitution.md` when constitution-providing presets are installed,
-removed, enabled, disabled, or reprioritized. After `/constitution` updates the live file, it also
-aligns `plan-template.md`, `spec-template.md`, `tasks-template.md`, project-local command files, and
+An **opt-in** preset that restores `/constitution`'s ability to propagate amended guidance into your
+project's own templates and command files. After you update the constitution, it aligns
+`plan-template.md`, `spec-template.md`, `tasks-template.md`, project-local command files, and
 guidance docs so they reflect the current principles.

 This propagation used to be built into `/constitution`; it was dropped when the command moved to the
-preset model. Installing this preset opts you back into materialization: preset stack changes refresh
-the generated constitution, and `/constitution` propagates its guidance into reviewed, committed
-artifacts instead of relying on runtime resolution alone.
+preset model. Installing this preset opts you back into it: you get the guidance materialized into
+reviewed, committed artifacts instead of relying on runtime resolution alone.

 > **What you're opting into.** Propagation was removed deliberately — it duplicates the constitution
 > as the source of truth and can fight the composition stack (materialized edits get shadowed or
@@ -30,12 +28,7 @@ versioned preset a core team maintains.

 ## What it does

-Its presence enables core's guarded install-time constitution reconciliation. Installing the preset
-materializes the currently resolved `constitution-template`; later stack changes re-materialize it
-only while the live file still matches its recorded generated-content hash. Human edits disable
-automatic replacement.
-
-It also ships a single `wrap`-strategy override of `speckit.constitution`. It composes on top of the
+Ships a single `wrap`-strategy override of `speckit.constitution`. It composes on top of the
 current core command (via `{CORE_TEMPLATE}`), so it stays forward-compatible with core changes, and
 appends a propagation pass that, after the constitution is written:

@@ -50,8 +43,6 @@ appends a propagation pass that, after the constitution is written:
 - It does **not** disable runtime resolution. `plan`, `tasks`, and `analyze` still read the live
  constitution every run; this preset adds materialized copies on top — it does not replace the
  source of truth.
- It does **not** overwrite an authored or edited constitution. Install-time reconciliation only
-  replaces content whose provenance proves it is an unchanged generated file.
 - It does **not** edit versioned, package-owned files — templates or command files provided or
  wrapped by another preset or extension. Those are recomposed from the resolution stack, so it
  only ever writes into your project's own `.specify/templates/` scaffolds and command files that
@@ -4,7 +4,7 @@ preset:
  id: "constitution-sync"
  name: "Constitution Template Sync"
  version: "1.0.0"
-  description: "Opt-in: restores guarded install-time constitution seeding and /constitution propagation for teams that treat materialized templates as reviewed artifacts."
+  description: "Opt-in: restores /constitution propagation of amended guidance into plan/spec/tasks templates and installed command files, for teams that treat materialized templates as reviewed artifacts."
  author: "github"
  repository: "https://github.com/github/spec-kit"
  license: "MIT"
@@ -1,6 +1,6 @@
 [project]
 name = "specify-cli"
-version = "0.16.2"
+version = "0.16.0"
 description = "Specify CLI, part of GitHub Spec Kit. A tool to bootstrap your projects for Spec-Driven Development (SDD)."
 readme = "README.md"
 requires-python = ">=3.11"
@@ -12,7 +12,6 @@
 #   --require-tasks     Require tasks.md to exist (for implementation phase)
 #   --include-tasks     Include tasks.md in AVAILABLE_DOCS list
 #   --paths-only        Only output path variables (no validation)
-#   --template NAME     Include composed template content in JSON output
 #   --help, -h          Show help message
 #
 # OUTPUTS:
@@ -27,10 +26,9 @@ JSON_MODE=false
 REQUIRE_TASKS=false
 INCLUDE_TASKS=false
 PATHS_ONLY=false
-TEMPLATE_NAME=""

-while [[ $# -gt 0 ]]; do
-    case "$1" in
+for arg in "$@"; do
+    case "$arg" in
        --json)
            JSON_MODE=true
            ;;
@@ -43,14 +41,6 @@ while [[ $# -gt 0 ]]; do
        --paths-only)
            PATHS_ONLY=true
            ;;
-        --template)
-            shift
-            if [[ $# -eq 0 ]]; then
-                echo "ERROR: --template requires a template name" >&2
-                exit 1
-            fi
-            TEMPLATE_NAME="$1"
-            ;;
        --help|-h)
            cat << 'EOF'
 Usage: check-prerequisites.sh [OPTIONS]
@@ -62,7 +52,6 @@ OPTIONS:
  --require-tasks     Require tasks.md to exist (for implementation phase)
  --include-tasks     Include tasks.md in AVAILABLE_DOCS list
  --paths-only        Only output path variables (no prerequisite validation)
-  --template NAME     Include composed template content in JSON output
  --help, -h          Show this help message

 EXAMPLES:
@@ -79,11 +68,10 @@ EOF
            exit 0
            ;;
        *)
-            echo "ERROR: Unknown option '$1'. Use --help for usage information." >&2
+            echo "ERROR: Unknown option '$arg'. Use --help for usage information." >&2
            exit 1
            ;;
    esac
-    shift
 done

 # Source common functions
@@ -168,16 +156,6 @@ if $INCLUDE_TASKS && [[ -f "$TASKS" ]]; then
    docs+=("tasks.md")
 fi

-TEMPLATE_CONTENT=""
-if [[ -n "$TEMPLATE_NAME" ]]; then
-    if TEMPLATE_CONTENT=$(resolve_template_content "$TEMPLATE_NAME" "$REPO_ROOT"; status=$?; printf x; exit "$status"); then
-        TEMPLATE_CONTENT="${TEMPLATE_CONTENT%x}"
-    else
-        echo "ERROR: Could not resolve required $TEMPLATE_NAME from the template override stack for $REPO_ROOT" >&2
-        exit 1
-    fi
-fi
-
 # Output results
 if $JSON_MODE; then
    # Build JSON array of documents
@@ -187,18 +165,10 @@ if $JSON_MODE; then
        else
            json_docs=$(printf '%s\n' "${docs[@]}" | jq -R . | jq -s .)
        fi
-        if [[ -n "$TEMPLATE_NAME" ]]; then
-            jq -cn \
-                --arg feature_dir "$FEATURE_DIR" \
-                --argjson docs "$json_docs" \
-                --arg template_content "$TEMPLATE_CONTENT" \
-                '{FEATURE_DIR:$feature_dir,AVAILABLE_DOCS:$docs,TEMPLATE_CONTENT:$template_content}'
-        else
-            jq -cn \
-                --arg feature_dir "$FEATURE_DIR" \
-                --argjson docs "$json_docs" \
-                '{FEATURE_DIR:$feature_dir,AVAILABLE_DOCS:$docs}'
-        fi
+        jq -cn \
+            --arg feature_dir "$FEATURE_DIR" \
+            --argjson docs "$json_docs" \
+            '{FEATURE_DIR:$feature_dir,AVAILABLE_DOCS:$docs}'
    else
        if [[ ${#docs[@]} -eq 0 ]]; then
            json_docs="[]"
@@ -206,12 +176,7 @@ if $JSON_MODE; then
            json_docs=$(for d in "${docs[@]}"; do printf '"%s",' "$(json_escape "$d")"; done)
            json_docs="[${json_docs%,}]"
        fi
-        if [[ -n "$TEMPLATE_NAME" ]]; then
-            printf '{"FEATURE_DIR":"%s","AVAILABLE_DOCS":%s,"TEMPLATE_CONTENT":"%s"}\n' \
-                "$(json_escape "$FEATURE_DIR")" "$json_docs" "$(json_escape "$TEMPLATE_CONTENT")"
-        else
-            printf '{"FEATURE_DIR":"%s","AVAILABLE_DOCS":%s}\n' "$(json_escape "$FEATURE_DIR")" "$json_docs"
-        fi
+        printf '{"FEATURE_DIR":"%s","AVAILABLE_DOCS":%s}\n' "$(json_escape "$FEATURE_DIR")" "$json_docs"
    fi
 else
    # Text output
@@ -398,101 +398,6 @@ json_escape() {
 check_file() { [[ -f "$1" ]] && echo "  ✓ $2" || echo "  ✗ $2"; }
 check_dir() { [[ -d "$1" && -n $(ls -A "$1" 2>/dev/null) ]] && echo "  ✓ $2" || echo "  ✗ $2"; }

-_python3_command() {
-    if command -v python3 >/dev/null 2>&1 &&
-        python3 -c 'import sys; raise SystemExit(sys.version_info.major != 3)' >/dev/null 2>&1; then
-        printf '%s\n' "python3"
-    elif command -v python >/dev/null 2>&1 &&
-        python -c 'import sys; raise SystemExit(sys.version_info.major != 3)' >/dev/null 2>&1; then
-        printf '%s\n' "python"
-    elif command -v py >/dev/null 2>&1 &&
-        py -3 -c 'import sys' >/dev/null 2>&1; then
-        printf '%s\n' "py -3"
-    else
-        return 1
-    fi
-}
-
-_sorted_extension_ids() {
-    local ext_dir="$1"
-    local python_spec
-    if python_spec=$(_python3_command); then
-        local -a python_cmd
-        read -r -a python_cmd <<< "$python_spec"
-        local py_stderr sorted_ids
-        py_stderr=$(mktemp)
-        if sorted_ids=$(SPECKIT_EXTENSIONS="$ext_dir" "${python_cmd[@]}" -c "
-import json, os, re, sys
-from pathlib import Path
-
-root = Path(os.environ['SPECKIT_EXTENSIONS'])
-registered = {}
-registry = root / '.registry'
-if os.path.lexists(registry):
-    if not registry.is_file():
-        print('registry_invalid: not a regular file', file=sys.stderr)
-        sys.exit(1)
-    try:
-        data = json.loads(registry.read_text(encoding='utf-8'))
-    except Exception as exc:
-        print('registry_invalid: ' + str(exc), file=sys.stderr)
-        sys.exit(1)
-    if not isinstance(data, dict):
-        print('registry_invalid: root must be a mapping', file=sys.stderr)
-        sys.exit(1)
-    raw_extensions = data.get('extensions', {})
-    if not isinstance(raw_extensions, dict):
-        print('registry_invalid: extensions must be a mapping', file=sys.stderr)
-        sys.exit(1)
-    registered = raw_extensions
-
-def priority(value):
-    if isinstance(value, bool):
-        return 10
-    try:
-        parsed = int(value)
-        return parsed if parsed >= 1 else 10
-    except (TypeError, ValueError, OverflowError):
-        return 10
-
-ranked = []
-for ext_id, meta in registered.items():
-    if isinstance(ext_id, str) and re.fullmatch(r'[a-z0-9-]+', ext_id) and isinstance(meta, dict) and bool(meta.get('enabled', True)):
-        ranked.append((priority(meta.get('priority')), ext_id))
-for path in root.iterdir():
-    if path.is_dir() and re.fullmatch(r'[a-z0-9-]+', path.name) and path.name not in registered:
-        ranked.append((10, path.name))
-for _, ext_id in sorted(ranked):
-    print(ext_id)
-" 2>"$py_stderr"); then
-            rm -f "$py_stderr"
-            printf '%s\n' "$sorted_ids"
-            return 0
-        else
-            echo "Error: invalid extension registry $ext_dir/.registry" >&2
-            rm -f "$py_stderr"
-            return 1
-        fi
-    fi
-
-    if [ -e "$ext_dir/.registry" ] || [ -L "$ext_dir/.registry" ]; then
-        if [ ! -f "$ext_dir/.registry" ] || [ ! -r "$ext_dir/.registry" ]; then
-            echo "Error: invalid extension registry $ext_dir/.registry" >&2
-            return 1
-        fi
-        echo "Error: Python 3 is required to honor the extension registry" >&2
-        return 2
-    fi
-
-    local ext extension_id
-    for ext in "$ext_dir"/*/; do
-        [ -d "$ext" ] || continue
-        extension_id=$(basename "$ext")
-        case "$extension_id" in *[!a-z0-9-]*) continue ;; esac
-        printf '%s\n' "$extension_id"
-    done
-}
-
 # Resolve a template name to a file path using the priority stack:
 #   1. .specify/templates/overrides/
 #   2. .specify/presets/<preset-id>/templates/ (sorted by priority from .registry)
@@ -503,8 +408,6 @@ resolve_template() {
    local repo_root="$2"
    local base="$repo_root/.specify/templates"

-    case "$template_name" in ""|*[!a-z0-9-]*) return 1 ;; esac
-
    # Priority 1: Project overrides
    local override="$base/overrides/${template_name}.md"
    [ -f "$override" ] && echo "$override" && return 0
@@ -513,32 +416,19 @@ resolve_template() {
    local presets_dir="$repo_root/.specify/presets"
    if [ -d "$presets_dir" ]; then
        local registry_file="$presets_dir/.registry"
-        local python_spec=""
-        local -a python_cmd=()
-        if python_spec=$(_python3_command); then
-            read -r -a python_cmd <<< "$python_spec"
-        fi
-        if [ -f "$registry_file" ] && [ "${#python_cmd[@]}" -gt 0 ]; then
+        if [ -f "$registry_file" ] && command -v python3 >/dev/null 2>&1; then
            # Read preset IDs sorted by priority (lower number = higher precedence).
            # The python3 call is wrapped in an if-condition so that set -e does not
            # abort the function when python3 exits non-zero (e.g. invalid JSON).
            local sorted_presets=""
-            if sorted_presets=$(SPECKIT_REGISTRY="$registry_file" "${python_cmd[@]}" -c "
-import json, re, sys, os
+            if sorted_presets=$(SPECKIT_REGISTRY="$registry_file" python3 -c "
+import json, sys, os
 try:
-    with open(os.environ['SPECKIT_REGISTRY'], encoding='utf-8') as f:
+    with open(os.environ['SPECKIT_REGISTRY']) as f:
        data = json.load(f)
    presets = data.get('presets', {})
-    def priority(meta):
-        if not isinstance(meta, dict) or isinstance(meta.get('priority'), bool):
-            return 10
-        try:
-            value = int(meta.get('priority', 10))
-            return value if value >= 1 else 10
-        except (TypeError, ValueError, OverflowError):
-            return 10
-    for pid, meta in sorted(presets.items(), key=lambda x: (priority(x[1]), x[0])):
-        if isinstance(meta, dict) and bool(meta.get('enabled', True)) and re.fullmatch(r'[a-z0-9-]+', pid):
+    for pid, meta in sorted(presets.items(), key=lambda x: x[1].get('priority', 10) if isinstance(x[1], dict) else 10):
+        if isinstance(meta, dict) and meta.get('enabled', True) is not False:
            print(pid)
 except Exception:
    sys.exit(1)
@@ -548,8 +438,6 @@ except Exception:
                    while IFS= read -r preset_id; do
                        local candidate="$presets_dir/$preset_id/templates/${template_name}.md"
                        [ -f "$candidate" ] && echo "$candidate" && return 0
-                        candidate="$presets_dir/$preset_id/${template_name}.md"
-                        [ -f "$candidate" ] && echo "$candidate" && return 0
                    done <<< "$sorted_presets"
                fi
                # python3 succeeded but registry has no presets — nothing to search
@@ -559,8 +447,6 @@ except Exception:
                    [ -d "$preset" ] || continue
                    local candidate="$preset/templates/${template_name}.md"
                    [ -f "$candidate" ] && echo "$candidate" && return 0
-                    candidate="$preset/${template_name}.md"
-                    [ -f "$candidate" ] && echo "$candidate" && return 0
                done
            fi
        else
@@ -569,8 +455,6 @@ except Exception:
                [ -d "$preset" ] || continue
                local candidate="$preset/templates/${template_name}.md"
                [ -f "$candidate" ] && echo "$candidate" && return 0
-                candidate="$preset/${template_name}.md"
-                [ -f "$candidate" ] && echo "$candidate" && return 0
            done
        fi
    fi
@@ -578,17 +462,13 @@ except Exception:
    # Priority 3: Extension-provided templates
    local ext_dir="$repo_root/.specify/extensions"
    if [ -d "$ext_dir" ]; then
-        local sorted_extensions=""
-        if ! sorted_extensions=$(_sorted_extension_ids "$ext_dir"); then
-            return 2
-        fi
-        while IFS= read -r extension_id; do
-            [ -n "$extension_id" ] || continue
-            local ext="$ext_dir/$extension_id"
+        for ext in "$ext_dir"/*/; do
+            [ -d "$ext" ] || continue
+            # Skip hidden directories (e.g. .backup, .cache)
+            case "$(basename "$ext")" in .*) continue;; esac
            local candidate="$ext/templates/${template_name}.md"
-            [ -f "$candidate" ] || candidate="$ext/${template_name}.md"
            [ -f "$candidate" ] && echo "$candidate" && return 0
-        done <<< "$sorted_extensions"
+        done
    fi

    # Priority 4: Core templates
@@ -612,8 +492,6 @@ resolve_template_content() {
    local repo_root="$2"
    local base="$repo_root/.specify/templates"

-    case "$template_name" in ""|*[!a-z0-9-]*) return 1 ;; esac
-
    # Collect all layers (highest priority first)
    local -a layer_paths=()
    local -a layer_strategies=()
@@ -621,206 +499,133 @@ resolve_template_content() {
    # Priority 1: Project overrides (always "replace")
    local override="$base/overrides/${template_name}.md"
    if [ -f "$override" ]; then
-        if ! cat "$override"; then
-            echo "Error: failed to read template layer $override" >&2
-            return 2
-        fi
-        return 0
+        layer_paths+=("$override")
+        layer_strategies+=("replace")
    fi

-    local effective_base_found=false
-
    # Priority 2: Installed presets (sorted by priority from .registry)
    local presets_dir="$repo_root/.specify/presets"
    if [ -d "$presets_dir" ]; then
        local registry_file="$presets_dir/.registry"
        local sorted_presets=""
-        local registry_parsed=false
-        local python_spec=""
-        local -a python_cmd=()
-        if python_spec=$(_python3_command); then
-            read -r -a python_cmd <<< "$python_spec"
-        fi
-        if [ -f "$registry_file" ] && [ "${#python_cmd[@]}" -gt 0 ]; then
-            if sorted_presets=$(SPECKIT_REGISTRY="$registry_file" "${python_cmd[@]}" -c "
-import json, re, sys, os
+        if [ -f "$registry_file" ] && command -v python3 >/dev/null 2>&1; then
+            if sorted_presets=$(SPECKIT_REGISTRY="$registry_file" python3 -c "
+import json, sys, os
 try:
-    with open(os.environ['SPECKIT_REGISTRY'], encoding='utf-8') as f:
+    with open(os.environ['SPECKIT_REGISTRY']) as f:
        data = json.load(f)
    presets = data.get('presets', {})
-    def priority(meta):
-        if not isinstance(meta, dict) or isinstance(meta.get('priority'), bool):
-            return 10
-        try:
-            value = int(meta.get('priority', 10))
-            return value if value >= 1 else 10
-        except (TypeError, ValueError, OverflowError):
-            return 10
-    for pid, meta in sorted(presets.items(), key=lambda x: (priority(x[1]), x[0])):
-        if isinstance(meta, dict) and bool(meta.get('enabled', True)) and re.fullmatch(r'[a-z0-9-]+', pid):
+    for pid, meta in sorted(presets.items(), key=lambda x: x[1].get('priority', 10) if isinstance(x[1], dict) else 10):
+        if isinstance(meta, dict) and meta.get('enabled', True) is not False:
            print(pid)
 except Exception:
    sys.exit(1)
 " 2>/dev/null); then
-                registry_parsed=true
-            fi
-        fi
-        if [ "$registry_parsed" = false ]; then
-            for preset in "$presets_dir"/*/; do
-                [ -d "$preset" ] || continue
-                local fallback_id
-                fallback_id=$(basename "$preset")
-                case "$fallback_id" in *[!a-z0-9-]*) continue ;; esac
-                sorted_presets+="${sorted_presets:+$'\n'}$fallback_id"
-            done
-        fi
-
-        if [ -n "$sorted_presets" ]; then
-            while IFS= read -r preset_id; do
-                local strategy="replace"
-                local manifest_file=""
-                local manifest="$presets_dir/$preset_id/preset.yml"
-                local manifest_declared=false
-                if [ -f "$manifest" ]; then
-                    if [ "${#python_cmd[@]}" -eq 0 ]; then
-                        echo "Error: Python 3 and PyYAML are required to resolve preset template composition" >&2
-                        return 2
-                    fi
-                    local result
-                    local py_stderr
-                    local parse_status
-                    py_stderr=$(mktemp)
-                    if result=$(SPECKIT_MANIFEST="$manifest" SPECKIT_TMPL="$template_name" "${python_cmd[@]}" -c "
+                if [ -n "$sorted_presets" ]; then
+                    local yaml_warned=false
+                    while IFS= read -r preset_id; do
+                        # Read strategy and file path from preset manifest
+                        local strategy="replace"
+                        local manifest_file=""
+                        local manifest="$presets_dir/$preset_id/preset.yml"
+                        if [ -f "$manifest" ] && command -v python3 >/dev/null 2>&1; then
+                            # Requires PyYAML; falls back to replace/convention if unavailable
+                            local result
+                            local py_stderr
+                            py_stderr=$(mktemp)
+                            result=$(SPECKIT_MANIFEST="$manifest" SPECKIT_TMPL="$template_name" python3 -c "
 import sys, os
 try:
    import yaml
 except ImportError:
    print('yaml_missing', file=sys.stderr)
-    sys.exit(2)
+    print('replace\t')
+    sys.exit(0)
 try:
-    with open(os.environ['SPECKIT_MANIFEST'], encoding='utf-8') as f:
+    with open(os.environ['SPECKIT_MANIFEST']) as f:
        data = yaml.safe_load(f)
-    if not isinstance(data, dict):
-        raise ValueError('manifest root must be a mapping')
-    if 'provides' not in data:
-        raise ValueError('manifest missing provides section')
-    provides = data['provides']
-    if not isinstance(provides, dict):
-        raise ValueError('manifest provides must be a mapping')
-    if 'templates' not in provides:
-        raise ValueError('manifest provides missing templates')
-    templates = provides['templates']
-    if not isinstance(templates, list):
-        raise ValueError('manifest templates must be a list')
-    if not templates:
-        raise ValueError('manifest must provide at least one template')
-    valid_types = ('template', 'command', 'script')
-    valid_strategies = ('replace', 'prepend', 'append', 'wrap')
-    for t in templates:
-        if not isinstance(t, dict):
-            raise ValueError('manifest template entries must be mappings')
-        if 'type' not in t or 'name' not in t or 'file' not in t:
-            raise ValueError('manifest template entry missing type, name, or file')
-        for field in ('type', 'name', 'file'):
-            if not isinstance(t[field], str):
-                raise ValueError('manifest template ' + field + ' must be a string')
-        if t['type'] not in valid_types:
-            raise ValueError('invalid manifest template type')
-        strategy = t.get('strategy', 'replace')
-        if not isinstance(strategy, str):
-            raise ValueError('manifest template strategy must be a string')
-        strategy = strategy.lower()
-        if strategy not in valid_strategies:
-            raise ValueError('invalid manifest template strategy')
-        if t['type'] == 'script' and strategy not in ('replace', 'wrap'):
-            raise ValueError('invalid manifest script strategy')
-    for t in templates:
+    for t in data.get('provides', {}).get('templates', []):
        if t.get('name') == os.environ['SPECKIT_TMPL'] and t.get('type', 'template') == 'template':
-            file_value = t.get('file', '')
-            strategy = t.get('strategy', 'replace')
-            print('found\t' + strategy + '\t' + file_value)
+            print(t.get('strategy', 'replace') + '\t' + t.get('file', ''))
            sys.exit(0)
-    print('absent\treplace\t')
-except Exception as exc:
-    print(f'manifest_invalid: {exc}', file=sys.stderr)
-    sys.exit(3)
-" 2>"$py_stderr"); then
-                        parse_status=0
-                    else
-                        parse_status=$?
-                    fi
-                    if [ "$parse_status" -ne 0 ]; then
-                        if [ "$parse_status" -eq 2 ]; then
-                            echo "Error: PyYAML is required to resolve preset template composition" >&2
-                        else
-                            echo "Error: invalid preset manifest $manifest" >&2
+    print('replace\t')
+except Exception:
+    print('replace\t')
+" 2>"$py_stderr")
+                            local parse_status=$?
+                            if [ $parse_status -eq 0 ] && [ -n "$result" ]; then
+                                IFS=$'\t' read -r strategy manifest_file <<< "$result"
+                                strategy=$(printf '%s' "$strategy" | tr '[:upper:]' '[:lower:]')
+                            fi
+                            if [ "$yaml_warned" = false ] && grep -q 'yaml_missing' "$py_stderr" 2>/dev/null; then
+                                echo "Warning: PyYAML not available; composition strategies may be ignored" >&2
+                                yaml_warned=true
+                            fi
+                            rm -f "$py_stderr"
                        fi
-                        rm -f "$py_stderr"
-                        return 2
+                        # Try manifest file path first, then convention path
+                        local candidate=""
+                        if [ -n "$manifest_file" ]; then
+                            # Reject absolute paths and parent traversal
+                            case "$manifest_file" in
+                                /*|*../*|../*) manifest_file="" ;;
+                            esac
+                        fi
+                        if [ -n "$manifest_file" ]; then
+                            local mf="$presets_dir/$preset_id/$manifest_file"
+                            [ -f "$mf" ] && candidate="$mf"
+                        fi
+                        if [ -z "$candidate" ]; then
+                            local cf="$presets_dir/$preset_id/templates/${template_name}.md"
+                            [ -f "$cf" ] && candidate="$cf"
+                        fi
+                        if [ -n "$candidate" ]; then
+                            layer_paths+=("$candidate")
+                            layer_strategies+=("$strategy")
+                        fi
+                    done <<< "$sorted_presets"
+                fi
+            else
+                # python3 failed — fall back to unordered directory scan (replace only)
+                for preset in "$presets_dir"/*/; do
+                    [ -d "$preset" ] || continue
+                    local candidate="$preset/templates/${template_name}.md"
+                    if [ -f "$candidate" ]; then
+                        layer_paths+=("$candidate")
+                        layer_strategies+=("replace")
                    fi
-                    if [ -n "$result" ]; then
-                        local declaration
-                        IFS=$'\t' read -r declaration strategy manifest_file <<< "$result"
-                        [ "$declaration" = "found" ] && manifest_declared=true
-                        strategy=$(printf '%s' "$strategy" | tr '[:upper:]' '[:lower:]')
-                    fi
-                    rm -f "$py_stderr"
-                fi
-
-                local candidate=""
-                if [ -n "$manifest_file" ]; then
-                    case "$manifest_file" in
-                        /*|*../*|../*) manifest_file="" ;;
-                    esac
-                fi
-                if [ -n "$manifest_file" ]; then
-                    local mf="$presets_dir/$preset_id/$manifest_file"
-                    [ -f "$mf" ] && candidate="$mf"
-                fi
-                if [ -z "$candidate" ] && [ "$manifest_declared" = false ]; then
-                    local cf="$presets_dir/$preset_id/templates/${template_name}.md"
-                    [ -f "$cf" ] && candidate="$cf"
-                    if [ -z "$candidate" ]; then
-                        cf="$presets_dir/$preset_id/${template_name}.md"
-                        [ -f "$cf" ] && candidate="$cf"
-                    fi
-                fi
-                if [ -n "$candidate" ]; then
+                done
+            fi
+        else
+            # No python3 or registry — fall back to unordered directory scan (replace only)
+            for preset in "$presets_dir"/*/; do
+                [ -d "$preset" ] || continue
+                local candidate="$preset/templates/${template_name}.md"
+                if [ -f "$candidate" ]; then
                    layer_paths+=("$candidate")
-                    layer_strategies+=("$strategy")
-                    if [ "$strategy" = "replace" ]; then
-                        effective_base_found=true
-                        break
-                    fi
+                    layer_strategies+=("replace")
                fi
-            done <<< "$sorted_presets"
+            done
        fi
    fi

    # Priority 3: Extension-provided templates (always "replace")
    local ext_dir="$repo_root/.specify/extensions"
-    if [ "$effective_base_found" = false ] && [ -d "$ext_dir" ]; then
-        local sorted_extensions=""
-        if ! sorted_extensions=$(_sorted_extension_ids "$ext_dir"); then
-            return 2
-        fi
-        while IFS= read -r extension_id; do
-            [ -n "$extension_id" ] || continue
-            local ext="$ext_dir/$extension_id"
+    if [ -d "$ext_dir" ]; then
+        for ext in "$ext_dir"/*/; do
+            [ -d "$ext" ] || continue
+            case "$(basename "$ext")" in .*) continue;; esac
            local candidate="$ext/templates/${template_name}.md"
-            [ -f "$candidate" ] || candidate="$ext/${template_name}.md"
            if [ -f "$candidate" ]; then
                layer_paths+=("$candidate")
                layer_strategies+=("replace")
-                effective_base_found=true
-                break
            fi
-        done <<< "$sorted_extensions"
+        done
    fi

    # Priority 4: Core templates (always "replace")
    local core="$base/${template_name}.md"
-    if [ "$effective_base_found" = false ] && [ -f "$core" ]; then
+    if [ -f "$core" ]; then
        layer_paths+=("$core")
        layer_strategies+=("replace")
    fi
@@ -837,18 +642,12 @@ except Exception as exc:
    # If the top (highest-priority) layer is replace, it wins entirely —
    # lower layers are irrelevant regardless of their strategies.
    if [ "${layer_strategies[0]}" = "replace" ]; then
-        if ! cat "${layer_paths[0]}"; then
-            echo "Error: failed to read template layer ${layer_paths[0]}" >&2
-            return 2
-        fi
+        cat "${layer_paths[0]}"
        return 0
    fi

    if [ "$has_composition" = false ]; then
-        if ! cat "${layer_paths[0]}"; then
-            echo "Error: failed to read template layer ${layer_paths[0]}" >&2
-            return 2
-        fi
+        cat "${layer_paths[0]}"
        return 0
    fi

@@ -864,16 +663,12 @@ except Exception as exc:
    done

    if [ $base_idx -lt 0 ]; then
-        echo "Error: template '$template_name' has composing layers but no replace base" >&2
-        return 2
+        return 1  # no base layer found
    fi

    # Read the base content; compose layers above the base (higher priority)
    local content
-    if ! content=$(cat "${layer_paths[$base_idx]}"; status=$?; printf x; exit "$status"); then
-        echo "Error: failed to read template layer ${layer_paths[$base_idx]}" >&2
-        return 2
-    fi
+    content=$(cat "${layer_paths[$base_idx]}"; printf x)
    content="${content%x}"

    for (( i=base_idx-1; i>=0; i-- )); do
@@ -881,26 +676,17 @@ except Exception as exc:
        local strat="${layer_strategies[$i]}"
        local layer_content
        # Preserve trailing newlines
-        if ! layer_content=$(cat "$path"; status=$?; printf x; exit "$status"); then
-            echo "Error: failed to read template layer $path" >&2
-            return 2
-        fi
+        layer_content=$(cat "$path"; printf x)
        layer_content="${layer_content%x}"

        case "$strat" in
            replace) content="$layer_content" ;;
-            prepend)
-                content=$(printf '%s\n\n%s' "$layer_content" "$content"; printf x)
-                content="${content%x}"
-                ;;
-            append)
-                content=$(printf '%s\n\n%s' "$content" "$layer_content"; printf x)
-                content="${content%x}"
-                ;;
+            prepend) content="$(printf '%s\n\n%s' "$layer_content" "$content")" ;;
+            append)  content="$(printf '%s\n\n%s' "$content" "$layer_content")" ;;
            wrap)
                case "$layer_content" in
                    *'{CORE_TEMPLATE}'*) ;;
-                    *) echo "Error: wrap strategy missing {CORE_TEMPLATE} placeholder" >&2; return 2 ;;
+                    *) echo "Error: wrap strategy missing {CORE_TEMPLATE} placeholder" >&2; return 1 ;;
                esac
                while [[ "$layer_content" == *'{CORE_TEMPLATE}'* ]]; do
                    local before="${layer_content%%\{CORE_TEMPLATE\}*}"
@@ -909,7 +695,7 @@ except Exception as exc:
                done
                content="$layer_content"
                ;;
-            *) echo "Error: unknown strategy '$strat'" >&2; return 2 ;;
+            *) echo "Error: unknown strategy '$strat'" >&2; return 1 ;;
        esac
    done

@@ -339,27 +339,12 @@ if [ "$DRY_RUN" != true ]; then
        exit 1
    fi

-    NEEDS_SPEC=false
-    SPEC_TEMPLATE_FOUND=false
-    SPEC_TEMPLATE_CONTENT=""
-    if [ ! -f "$SPEC_FILE" ]; then
-        NEEDS_SPEC=true
-        if SPEC_TEMPLATE_CONTENT=$(resolve_template_content "spec-template" "$REPO_ROOT"; status=$?; printf x; exit "$status"); then
-            SPEC_TEMPLATE_CONTENT="${SPEC_TEMPLATE_CONTENT%x}"
-            SPEC_TEMPLATE_FOUND=true
-        else
-            resolve_status=$?
-            if [ "$resolve_status" -ne 1 ]; then
-                exit "$resolve_status"
-            fi
-        fi
-    fi
-
    mkdir -p "$FEATURE_DIR"

-    if [ "$NEEDS_SPEC" = true ]; then
-        if [ "$SPEC_TEMPLATE_FOUND" = true ]; then
-            printf '%s' "$SPEC_TEMPLATE_CONTENT" > "$SPEC_FILE"
+    if [ ! -f "$SPEC_FILE" ]; then
+        TEMPLATE=$(resolve_template "spec-template" "$REPO_ROOT") || true
+        if [ -n "$TEMPLATE" ] && [ -f "$TEMPLATE" ]; then
+            cp "$TEMPLATE" "$SPEC_FILE"
        else
            echo "Warning: Spec template not found; created empty spec file" >&2
            touch "$SPEC_FILE"
@@ -1,57 +0,0 @@
-#!/usr/bin/env bash
-
-set -e
-
-SCRIPT_DIR="$(CDPATH="" cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
-source "$SCRIPT_DIR/common.sh"
-
-JSON_MODE=false
-TEMPLATE_NAME=""
-
-for arg in "$@"; do
-    case "$arg" in
-        --json) JSON_MODE=true ;;
-        --help|-h)
-            echo "Usage: $0 <template-name> [--json]"
-            exit 0
-            ;;
-        -*)
-            echo "ERROR: Unknown option '$arg'" >&2
-            exit 1
-            ;;
-        *)
-            if [[ -n "$TEMPLATE_NAME" ]]; then
-                echo "ERROR: Unexpected argument '$arg'" >&2
-                exit 1
-            fi
-            TEMPLATE_NAME="$arg"
-            ;;
-    esac
-done
-
-if [[ -z "$TEMPLATE_NAME" ]]; then
-    echo "ERROR: Template name is required" >&2
-    exit 1
-fi
-
-REPO_ROOT=$(get_repo_root)
-if TEMPLATE_CONTENT=$(resolve_template_content "$TEMPLATE_NAME" "$REPO_ROOT"; status=$?; printf x; exit "$status"); then
-    TEMPLATE_CONTENT="${TEMPLATE_CONTENT%x}"
-else
-    echo "ERROR: Could not resolve required $TEMPLATE_NAME from the template override stack for $REPO_ROOT" >&2
-    exit 1
-fi
-
-if $JSON_MODE; then
-    if has_jq; then
-        jq -cn \
-            --arg template_name "$TEMPLATE_NAME" \
-            --arg template_content "$TEMPLATE_CONTENT" \
-            '{TEMPLATE_NAME:$template_name,TEMPLATE_CONTENT:$template_content}'
-    else
-        printf '{"TEMPLATE_NAME":"%s","TEMPLATE_CONTENT":"%s"}\n' \
-            "$(json_escape "$TEMPLATE_NAME")" "$(json_escape "$TEMPLATE_CONTENT")"
-    fi
-else
-    printf '%s' "$TEMPLATE_CONTENT"
-fi
@@ -43,23 +43,21 @@ if [[ -f "$IMPL_PLAN" ]]; then
        echo "Plan already exists at $IMPL_PLAN, skipping template copy"
    fi
 else
-    if resolve_template_content "plan-template" "$REPO_ROOT" > "$IMPL_PLAN"; then
+    TEMPLATE=$(resolve_template "plan-template" "$REPO_ROOT") || true
+    if [[ -n "$TEMPLATE" ]] && [[ -f "$TEMPLATE" ]]; then
+        cp "$TEMPLATE" "$IMPL_PLAN"
        if $JSON_MODE; then
            echo "Copied plan template to $IMPL_PLAN" >&2
        else
            echo "Copied plan template to $IMPL_PLAN"
        fi
    else
-        resolve_status=$?
-        rm -f "$IMPL_PLAN"
-        if [ "$resolve_status" -ne 1 ]; then
-            exit "$resolve_status"
-        fi
        if $JSON_MODE; then
            echo "Warning: Plan template not found" >&2
        else
            echo "Warning: Plan template not found"
        fi
+        # Create a basic plan file if template doesn't exist
        touch "$IMPL_PLAN"
    fi
 fi
@@ -51,9 +51,7 @@ fi

 # Resolve tasks template through override stack
 TASKS_TEMPLATE=$(resolve_template "tasks-template" "$REPO_ROOT") || true
-if TASKS_TEMPLATE_CONTENT=$(resolve_template_content "tasks-template" "$REPO_ROOT"; status=$?; printf x; exit "$status"); then
-    TASKS_TEMPLATE_CONTENT="${TASKS_TEMPLATE_CONTENT%x}"
-else
+if [[ -z "$TASKS_TEMPLATE" ]] || [[ ! -f "$TASKS_TEMPLATE" ]]; then
    echo "ERROR: Could not resolve required tasks-template from the template override stack for $REPO_ROOT" >&2
    echo "Template 'tasks-template' was not found in any supported location (overrides, presets, extensions, or shared core). Add an override at .specify/templates/overrides/tasks-template.md, or run 'specify init' / reinstall shared infra to restore the core .specify/templates/tasks-template.md template." >&2
    exit 1
@@ -71,8 +69,7 @@ if $JSON_MODE; then
            --arg feature_dir "$FEATURE_DIR" \
            --argjson docs "$json_docs" \
            --arg tasks_template "${TASKS_TEMPLATE:-}" \
-            --arg tasks_template_content "$TASKS_TEMPLATE_CONTENT" \
-            '{FEATURE_DIR:$feature_dir,AVAILABLE_DOCS:$docs,TASKS_TEMPLATE:$tasks_template,TASKS_TEMPLATE_CONTENT:$tasks_template_content}'
+            '{FEATURE_DIR:$feature_dir,AVAILABLE_DOCS:$docs,TASKS_TEMPLATE:$tasks_template}'
    else
        if [[ ${#docs[@]} -eq 0 ]]; then
            json_docs="[]"
@@ -80,8 +77,8 @@ if $JSON_MODE; then
            json_docs=$(for d in "${docs[@]}"; do printf '"%s",' "$(json_escape "$d")"; done)
            json_docs="[${json_docs%,}]"
        fi
-        printf '{"FEATURE_DIR":"%s","AVAILABLE_DOCS":%s,"TASKS_TEMPLATE":"%s","TASKS_TEMPLATE_CONTENT":"%s"}\n' \
-            "$(json_escape "$FEATURE_DIR")" "$json_docs" "$(json_escape "${TASKS_TEMPLATE:-}")" "$(json_escape "$TASKS_TEMPLATE_CONTENT")"
+        printf '{"FEATURE_DIR":"%s","AVAILABLE_DOCS":%s,"TASKS_TEMPLATE":"%s"}\n' \
+            "$(json_escape "$FEATURE_DIR")" "$json_docs" "$(json_escape "${TASKS_TEMPLATE:-}")"
    fi
 else
    echo "FEATURE_DIR: $FEATURE_DIR"
@@ -12,7 +12,6 @@
 #   -RequireTasks       Require tasks.md to exist (for implementation phase)
 #   -IncludeTasks       Include tasks.md in AVAILABLE_DOCS list
 #   -PathsOnly          Only output path variables (no validation)
-#   -Template NAME      Include composed template content in JSON output
 #   -Help, -h           Show help message

 [CmdletBinding()]
@@ -21,7 +20,6 @@ param(
    [switch]$RequireTasks,
    [switch]$IncludeTasks,
    [switch]$PathsOnly,
-    [string]$Template,
    [switch]$Help
 )

@@ -39,7 +37,6 @@ OPTIONS:
  -RequireTasks       Require tasks.md to exist (for implementation phase)
  -IncludeTasks       Include tasks.md in AVAILABLE_DOCS list
  -PathsOnly          Only output path variables (no prerequisite validation)
-  -Template NAME      Include composed template content in JSON output
  -Help, -h           Show this help message

 EXAMPLES:
@@ -132,26 +129,13 @@ if ($IncludeTasks -and (Test-Path $paths.TASKS)) {
    $docs += 'tasks.md'
 }

-$templateContent = $null
-if ($Template) {
-    $templateContent = Resolve-TemplateContent -TemplateName $Template -RepoRoot $paths.REPO_ROOT
-    if ($null -eq $templateContent) {
-        [Console]::Error.WriteLine("ERROR: Could not resolve required $Template from the template override stack for $($paths.REPO_ROOT)")
-        exit 1
-    }
-}
-
 # Output results
 if ($Json) {
    # JSON output
-    $result = [ordered]@{
+    [PSCustomObject]@{
        FEATURE_DIR = $paths.FEATURE_DIR
        AVAILABLE_DOCS = $docs
-    }
-    if ($Template) {
-        $result.TEMPLATE_CONTENT = $templateContent
-    }
-    [PSCustomObject]$result | ConvertTo-Json -Compress
+    } | ConvertTo-Json -Compress
 } else {
    # Text output
    Write-Output "FEATURE_DIR:$($paths.FEATURE_DIR)"
@@ -332,82 +332,6 @@ function Get-Python3Command {
    return $null
 }

-function Get-NormalizedPriority {
-    param($Value)
-
-    if ($Value -is [bool]) { return 10 }
-    if ($Value -is [string]) {
-        $integerText = $Value.Trim()
-        if ($integerText -cnotmatch '^[+-]?[0-9]+(?:_[0-9]+)*$') { return 10 }
-        $Value = $integerText.Replace('_', '')
-    }
-    try {
-        $parsedPriority = [System.Numerics.BigInteger]$Value
-    } catch {
-        return 10
-    }
-    return $(if ($parsedPriority -ge 1) { $parsedPriority } else { 10 })
-}
-
-function Get-SortedExtensionIds {
-    param([Parameter(Mandatory=$true)][string]$ExtensionsDir)
-
-    $registeredNames = @()
-    $ranked = @()
-    $registryFile = Join-Path $ExtensionsDir '.registry'
-    # Detect any filesystem entry at the registry path without following symlinks.
-    # Test-Path follows links and reports $false for a dangling symlink, so a
-    # broken .registry symlink would otherwise bypass this guard and let the
-    # directory scan below enable every on-disk extension. Enumerating the parent
-    # directory still observes a broken symlink as an entry.
-    $registryEntry = Get-ChildItem -LiteralPath $ExtensionsDir -Force -ErrorAction SilentlyContinue |
-        Where-Object { $_.Name -eq '.registry' } |
-        Select-Object -First 1
-    if ($registryEntry) {
-        if (-not (Test-Path -LiteralPath $registryFile -PathType Leaf)) {
-            throw "Invalid extension registry ${registryFile}: not a regular file"
-        }
-        try {
-            $data = [System.IO.File]::ReadAllText($registryFile, [System.Text.Encoding]::UTF8) | ConvertFrom-Json
-        } catch {
-            throw "Invalid extension registry ${registryFile}: $($_.Exception.Message)"
-        }
-        if ($null -eq $data -or $data -isnot [PSCustomObject]) {
-            throw "Invalid extension registry ${registryFile}: root must be a mapping"
-        }
-        $extensionsProperty = $data.PSObject.Properties['extensions']
-        if ($extensionsProperty) {
-            if ($extensionsProperty.Value -isnot [PSCustomObject]) {
-                throw "Invalid extension registry ${registryFile}: 'extensions' must be a mapping"
-            }
-            $extensions = $extensionsProperty.Value
-        } else {
-            $extensions = [PSCustomObject]@{}
-        }
-        $registeredNames = @($extensions.PSObject.Properties | ForEach-Object { $_.Name })
-        foreach ($entry in $extensions.PSObject.Properties) {
-            if ($entry.Name -cnotmatch '^[a-z0-9-]+$' -or $entry.Value -isnot [PSCustomObject]) {
-                continue
-            }
-            $enabledProperty = $entry.Value.PSObject.Properties['enabled']
-            if ($enabledProperty -and -not [bool]$enabledProperty.Value) { continue }
-            $priority = 10
-            $priorityProperty = $entry.Value.PSObject.Properties['priority']
-            if ($priorityProperty) {
-                $priority = Get-NormalizedPriority -Value $priorityProperty.Value
-            }
-            $ranked += [PSCustomObject]@{ Priority = $priority; Id = $entry.Name }
-        }
-    }
-
-    foreach ($directory in Get-ChildItem -Path $ExtensionsDir -Directory -ErrorAction SilentlyContinue) {
-        if ($directory.Name -cmatch '^[a-z0-9-]+$' -and $directory.Name -cnotin $registeredNames) {
-            $ranked += [PSCustomObject]@{ Priority = 10; Id = $directory.Name }
-        }
-    }
-    return $ranked | Sort-Object Priority, Id | ForEach-Object { $_.Id }
-}
-
 # Resolve a template name to a file path using the priority stack:
 #   1. .specify/templates/overrides/
 #   2. .specify/presets/<preset-id>/templates/ (sorted by priority from .registry)
@@ -419,8 +343,6 @@ function Resolve-Template {
        [Parameter(Mandatory=$true)][string]$RepoRoot
    )

-    if ($TemplateName -cnotmatch '^[a-z0-9-]+$') { return $null }
-
    $base = Join-Path $RepoRoot '.specify/templates'

    # Priority 1: Project overrides
@@ -435,7 +357,7 @@ function Resolve-Template {
        $registryParsed = $false
        if (Test-Path $registryFile) {
            try {
-                $registryData = [System.IO.File]::ReadAllText($registryFile, [System.Text.Encoding]::UTF8) | ConvertFrom-Json
+                $registryData = Get-Content $registryFile -Raw | ConvertFrom-Json
                if ($null -eq $registryData -or $registryData -isnot [PSCustomObject]) {
                    throw 'Registry root must be an object'
                }
@@ -450,20 +372,30 @@ function Resolve-Template {
                        param($Entry)
                        if ($Entry.Value -is [PSCustomObject]) {
                            $priorityProperty = $Entry.Value.PSObject.Properties['priority']
-                            if ($priorityProperty) {
-                                return Get-NormalizedPriority -Value $priorityProperty.Value
-                            }
+                            if ($priorityProperty) { return $priorityProperty.Value }
                        }
                        return 10
                    }
+                    if ($presetEntries.Count -gt 1) {
+                        $allNumeric = $true
+                        $allStrings = $true
+                        foreach ($entry in $presetEntries) {
+                            $priority = & $priorityFor $entry
+                            if ($null -eq $priority -or $priority -isnot [ValueType]) {
+                                $allNumeric = $false
+                            }
+                            if ($null -eq $priority -or $priority -isnot [string]) {
+                                $allStrings = $false
+                            }
+                        }
+                        if (-not $allNumeric -and -not $allStrings) {
+                            throw 'Registry priorities are not mutually orderable'
+                        }
+                    }
                    $sortedPresets = $presetEntries |
                        Where-Object { $_.Value -is [PSCustomObject] } |
-                        Where-Object {
-                            $enabled = $_.Value.PSObject.Properties['enabled']
-                            -not $enabled -or [bool]$enabled.Value
-                        } |
-                        Where-Object { $_.Name -cmatch '^[a-z0-9-]+$' } |
-                        Sort-Object @{ Expression = { & $priorityFor $_ } }, @{ Expression = { $_.Name } } |
+                        Where-Object { $null -eq $_.Value.enabled -or $_.Value.enabled -ne $false } |
+                        Sort-Object { & $priorityFor $_ } |
                        ForEach-Object { $_.Name }
                }
                $registryParsed = $true
@@ -476,16 +408,12 @@ function Resolve-Template {
            foreach ($presetId in $sortedPresets) {
                $candidate = Join-Path $presetsDir "$presetId/templates/$TemplateName.md"
                if (Test-Path $candidate) { return $candidate }
-                $candidate = Join-Path $presetsDir "$presetId/$TemplateName.md"
-                if (Test-Path $candidate) { return $candidate }
            }
        } else {
            # Fallback: alphabetical directory order
            foreach ($preset in Get-ChildItem -Path $presetsDir -Directory -ErrorAction SilentlyContinue | Where-Object { $_.Name -notlike '.*' } | Sort-Object Name) {
                $candidate = Join-Path $preset.FullName "templates/$TemplateName.md"
                if (Test-Path $candidate) { return $candidate }
-                $candidate = Join-Path $preset.FullName "$TemplateName.md"
-                if (Test-Path $candidate) { return $candidate }
            }
        }
    }
@@ -493,11 +421,8 @@ function Resolve-Template {
    # Priority 3: Extension-provided templates
    $extDir = Join-Path $RepoRoot '.specify/extensions'
    if (Test-Path $extDir) {
-        foreach ($extensionId in Get-SortedExtensionIds -ExtensionsDir $extDir) {
-            $candidate = Join-Path $extDir "$extensionId/templates/$TemplateName.md"
-            if (-not (Test-Path $candidate)) {
-                $candidate = Join-Path $extDir "$extensionId/$TemplateName.md"
-            }
+        foreach ($ext in Get-ChildItem -Path $extDir -Directory -ErrorAction SilentlyContinue | Where-Object { $_.Name -notlike '.*' } | Sort-Object Name) {
+            $candidate = Join-Path $ext.FullName "templates/$TemplateName.md"
            if (Test-Path $candidate) { return $candidate }
        }
    }
@@ -518,10 +443,6 @@ function Resolve-TemplateContent {
        [Parameter(Mandatory=$true)][string]$RepoRoot
    )

-    if ($TemplateName -cnotmatch '^[a-z0-9-]+$') {
-        return $null
-    }
-
    $base = Join-Path $RepoRoot '.specify/templates'

    # Collect all layers (highest priority first)
@@ -531,77 +452,49 @@ function Resolve-TemplateContent {
    # Priority 1: Project overrides (always "replace")
    $override = Join-Path $base "overrides/$TemplateName.md"
    if (Test-Path $override) {
-        return [System.IO.File]::ReadAllText(
-            $override,
-            [System.Text.Encoding]::UTF8
-        )
+        $layerPaths += $override
+        $layerStrategies += 'replace'
    }

-    $effectiveBaseFound = $false
-
    # Priority 2: Installed presets (sorted by priority from .registry)
    $presetsDir = Join-Path $RepoRoot '.specify/presets'
    if (Test-Path $presetsDir) {
        $registryFile = Join-Path $presetsDir '.registry'
        $sortedPresets = @()
-        $registryParsed = $false
        if (Test-Path $registryFile) {
            try {
-                $registryData = [System.IO.File]::ReadAllText($registryFile, [System.Text.Encoding]::UTF8) | ConvertFrom-Json
-                if ($null -eq $registryData -or $registryData -isnot [PSCustomObject]) {
-                    throw 'Registry root must be an object'
-                }
-                $presetsProperty = $registryData.PSObject.Properties['presets']
-                if ($presetsProperty) {
-                    $presets = $presetsProperty.Value
-                    if ($null -eq $presets -or $presets -isnot [PSCustomObject]) {
-                        throw 'Registry presets must be an object'
-                    }
-                    $presetEntries = @($presets.PSObject.Properties)
-                    $priorityFor = {
-                        param($Entry)
-                        if ($Entry.Value -is [PSCustomObject]) {
-                            $priorityProperty = $Entry.Value.PSObject.Properties['priority']
-                            if ($priorityProperty) {
-                                return Get-NormalizedPriority -Value $priorityProperty.Value
-                            }
-                        }
-                        return 10
-                    }
-                    $sortedPresets = $presetEntries |
-                        Where-Object { $_.Value -is [PSCustomObject] } |
-                        Where-Object {
-                            $enabled = $_.Value.PSObject.Properties['enabled']
-                            -not $enabled -or [bool]$enabled.Value
-                        } |
-                        Where-Object { $_.Name -cmatch '^[a-z0-9-]+$' } |
-                        Sort-Object @{ Expression = { & $priorityFor $_ } }, @{ Expression = { $_.Name } } |
+                $registryData = Get-Content $registryFile -Raw | ConvertFrom-Json
+                $presets = $registryData.presets
+                if ($presets) {
+                    $sortedPresets = $presets.PSObject.Properties |
+                        Where-Object { $null -eq $_.Value.enabled -or $_.Value.enabled -ne $false } |
+                        Sort-Object { if ($null -ne $_.Value.priority) { $_.Value.priority } else { 10 } } |
                        ForEach-Object { $_.Name }
                }
-                $registryParsed = $true
            } catch {
-                $registryParsed = $false
+                $sortedPresets = @()
            }
        }

-        if (-not $registryParsed) {
-            $sortedPresets = Get-ChildItem -Path $presetsDir -Directory -ErrorAction SilentlyContinue |
-                Where-Object { $_.Name -cmatch '^[a-z0-9-]+$' } |
-                Sort-Object Name |
-                ForEach-Object { $_.Name }
-        }
-
-        $pyCmd = @(Get-Python3Command)
-        foreach ($presetId in $sortedPresets) {
+        if ($sortedPresets.Count -gt 0) {
+            $pyCmd = Get-Python3Command
+            if (-not $pyCmd) {
+                # Check if any preset has strategy fields that would be ignored
+                foreach ($pid in $sortedPresets) {
+                    $mf = Join-Path $presetsDir "$pid/preset.yml"
+                    if ((Test-Path $mf) -and (Select-String -Path $mf -Pattern 'strategy:' -Quiet -ErrorAction SilentlyContinue)) {
+                        Write-Warning "No Python 3 found; preset composition strategies will be ignored"
+                        break
+                    }
+                }
+            }
+            $yamlWarned = $false
+            foreach ($presetId in $sortedPresets) {
                # Read strategy and file path from preset manifest
                $strategy = 'replace'
                $manifestFilePath = ''
-                $manifestDeclared = $false
                $manifest = Join-Path $presetsDir "$presetId/preset.yml"
-                if ((Test-Path $manifest) -and -not $pyCmd) {
-                    throw "Python 3 and PyYAML are required to resolve preset template composition"
-                }
-                if (Test-Path $manifest) {
+                if ((Test-Path $manifest) -and $pyCmd) {
                    try {
                        # Use Python to parse YAML manifest for strategy and file path
                        $pyArgs = if ($pyCmd.Count -gt 1) { $pyCmd[1..($pyCmd.Count-1)] } else { @() }
@@ -612,71 +505,32 @@ try:
    import yaml
 except ImportError:
    print('yaml_missing', file=sys.stderr)
-    sys.exit(2)
+    print('replace\t')
+    sys.exit(0)
 try:
-    with open(sys.argv[1], encoding='utf-8') as f:
+    with open(sys.argv[1]) as f:
        data = yaml.safe_load(f)
-    if not isinstance(data, dict):
-        raise ValueError('manifest root must be a mapping')
-    if 'provides' not in data:
-        raise ValueError('manifest missing provides section')
-    provides = data['provides']
-    if not isinstance(provides, dict):
-        raise ValueError('manifest provides must be a mapping')
-    if 'templates' not in provides:
-        raise ValueError('manifest provides missing templates')
-    templates = provides['templates']
-    if not isinstance(templates, list):
-        raise ValueError('manifest templates must be a list')
-    if not templates:
-        raise ValueError('manifest must provide at least one template')
-    valid_types = ('template', 'command', 'script')
-    valid_strategies = ('replace', 'prepend', 'append', 'wrap')
-    for t in templates:
-        if not isinstance(t, dict):
-            raise ValueError('manifest template entries must be mappings')
-        if 'type' not in t or 'name' not in t or 'file' not in t:
-            raise ValueError('manifest template entry missing type, name, or file')
-        for field in ('type', 'name', 'file'):
-            if not isinstance(t[field], str):
-                raise ValueError('manifest template ' + field + ' must be a string')
-        if t['type'] not in valid_types:
-            raise ValueError('invalid manifest template type')
-        strategy = t.get('strategy', 'replace')
-        if not isinstance(strategy, str):
-            raise ValueError('manifest template strategy must be a string')
-        strategy = strategy.lower()
-        if strategy not in valid_strategies:
-            raise ValueError('invalid manifest template strategy')
-        if t['type'] == 'script' and strategy not in ('replace', 'wrap'):
-            raise ValueError('invalid manifest script strategy')
-    for t in templates:
+    for t in data.get('provides', {}).get('templates', []):
        if t.get('name') == sys.argv[2] and t.get('type', 'template') == 'template':
-            file_value = t.get('file', '')
-            strategy = t.get('strategy', 'replace')
-            print('found\t' + strategy + '\t' + file_value)
+            print(t.get('strategy', 'replace') + '\t' + t.get('file', ''))
            sys.exit(0)
-    print('absent\treplace\t')
-except Exception as exc:
-    print(f'manifest_invalid: {exc}', file=sys.stderr)
-    sys.exit(3)
+    print('replace\t')
+except Exception:
+    print('replace\t')
 "@ $manifest $TemplateName 2>$pyStderrFile
-                        if ($LASTEXITCODE -ne 0) {
-                            if ($LASTEXITCODE -eq 2) {
-                                throw "PyYAML is required to resolve preset template composition"
-                            }
-                            throw "Invalid preset manifest $manifest"
-        }
                        if ($stratResult) {
-                            $parts = $stratResult.Trim() -split "`t", 3
-                            $manifestDeclared = $parts[0] -eq 'found'
-                            $strategy = $parts[1].ToLowerInvariant()
-                            if ($parts.Count -gt 2 -and $parts[2]) { $manifestFilePath = $parts[2] }
+                            $parts = $stratResult.Trim() -split "`t", 2
+                            $strategy = $parts[0].ToLowerInvariant()
+                            if ($parts.Count -gt 1 -and $parts[1]) { $manifestFilePath = $parts[1] }
+                        }
+                        if (-not $yamlWarned -and (Test-Path $pyStderrFile) -and (Get-Content $pyStderrFile -Raw -ErrorAction SilentlyContinue) -match 'yaml_missing') {
+                            Write-Warning "PyYAML not available; composition strategies may be ignored"
+                            $yamlWarned = $true
                        }
                        Remove-Item $pyStderrFile -Force -ErrorAction SilentlyContinue
                    } catch {
+                        $strategy = 'replace'
                        if ($pyStderrFile) { Remove-Item $pyStderrFile -Force -ErrorAction SilentlyContinue }
-                        throw
                    }
                }
                # Try manifest file path first, then convention path
@@ -691,45 +545,42 @@ except Exception as exc:
                    $mf = Join-Path $presetsDir "$presetId/$manifestFilePath"
                    if (Test-Path $mf) { $candidate = $mf }
                }
-                if (-not $candidate -and -not $manifestDeclared) {
+                if (-not $candidate) {
                    $cf = Join-Path $presetsDir "$presetId/templates/$TemplateName.md"
                    if (Test-Path $cf) { $candidate = $cf }
-                    if (-not $candidate) {
-                        $cf = Join-Path $presetsDir "$presetId/$TemplateName.md"
-                        if (Test-Path $cf) { $candidate = $cf }
-                    }
                }
                if ($candidate) {
                    $layerPaths += $candidate
                    $layerStrategies += $strategy
-                    if ($strategy -eq 'replace') {
-                        $effectiveBaseFound = $true
-                        break
-                    }
                }
            }
+        } else {
+            # Fallback: alphabetical directory order (no registry or parse failure)
+            foreach ($preset in Get-ChildItem -Path $presetsDir -Directory -ErrorAction SilentlyContinue | Where-Object { $_.Name -notlike '.*' }) {
+                $candidate = Join-Path $preset.FullName "templates/$TemplateName.md"
+                if (Test-Path $candidate) {
+                    $layerPaths += $candidate
+                    $layerStrategies += 'replace'
+                }
+            }
+        }
    }

    # Priority 3: Extension-provided templates (always "replace")
    $extDir = Join-Path $RepoRoot '.specify/extensions'
-    if (-not $effectiveBaseFound -and (Test-Path $extDir)) {
-        foreach ($extensionId in Get-SortedExtensionIds -ExtensionsDir $extDir) {
-            $candidate = Join-Path $extDir "$extensionId/templates/$TemplateName.md"
-            if (-not (Test-Path $candidate)) {
-                $candidate = Join-Path $extDir "$extensionId/$TemplateName.md"
-            }
+    if (Test-Path $extDir) {
+        foreach ($ext in Get-ChildItem -Path $extDir -Directory -ErrorAction SilentlyContinue | Where-Object { $_.Name -notlike '.*' } | Sort-Object Name) {
+            $candidate = Join-Path $ext.FullName "templates/$TemplateName.md"
            if (Test-Path $candidate) {
                $layerPaths += $candidate
                $layerStrategies += 'replace'
-                $effectiveBaseFound = $true
-                break
            }
        }
    }

    # Priority 4: Core templates (always "replace")
    $core = Join-Path $base "$TemplateName.md"
-    if (-not $effectiveBaseFound -and (Test-Path $core)) {
+    if (Test-Path $core) {
        $layerPaths += $core
        $layerStrategies += 'replace'
    }
@@ -739,7 +590,7 @@ except Exception as exc:
    # If the top (highest-priority) layer is replace, it wins entirely --
    # lower layers are irrelevant regardless of their strategies.
    if ($layerStrategies[0] -eq 'replace') {
-        return [System.IO.File]::ReadAllText($layerPaths[0], [System.Text.Encoding]::UTF8)
+        return (Get-Content $layerPaths[0] -Raw)
    }

    # Check if any layer uses a non-replace strategy
@@ -749,7 +600,7 @@ except Exception as exc:
    }

    if (-not $hasComposition) {
-        return [System.IO.File]::ReadAllText($layerPaths[0], [System.Text.Encoding]::UTF8)
+        return (Get-Content $layerPaths[0] -Raw)
    }

    # Find the effective base: scan from highest priority (index 0) downward
@@ -761,22 +612,14 @@ except Exception as exc:
            break
        }
    }
-    if ($baseIdx -lt 0) {
-        throw "Template '$TemplateName' has composing layers but no replace base"
-    }
+    if ($baseIdx -lt 0) { return $null }

-    $content = [System.IO.File]::ReadAllText(
-        $layerPaths[$baseIdx],
-        [System.Text.Encoding]::UTF8
-    )
+    $content = Get-Content $layerPaths[$baseIdx] -Raw

    for ($i = $baseIdx - 1; $i -ge 0; $i--) {
        $path = $layerPaths[$i]
        $strat = $layerStrategies[$i]
-        $layerContent = [System.IO.File]::ReadAllText(
-            $path,
-            [System.Text.Encoding]::UTF8
-        )
+        $layerContent = Get-Content $path -Raw

        switch ($strat) {
            'replace' { $content = $layerContent }
@@ -262,16 +262,13 @@ if (-not $DryRun) {
        exit 1
    }

-    $needsSpec = -not (Test-Path -PathType Leaf $specFile)
-    $content = $null
-    if ($needsSpec) {
-        $content = Resolve-TemplateContent -TemplateName 'spec-template' -RepoRoot $repoRoot
-    }
-
    New-Item -ItemType Directory -Path $featureDir -Force | Out-Null

-    if ($needsSpec) {
-        if ($null -ne $content) {
+    if (-not (Test-Path -PathType Leaf $specFile)) {
+        $template = Resolve-Template -TemplateName 'spec-template' -RepoRoot $repoRoot
+        if ($template -and (Test-Path $template)) {
+            # Read the template content and write it to the spec file with UTF-8 encoding without BOM
+            $content = [System.IO.File]::ReadAllText($template)
            $utf8NoBom = New-Object System.Text.UTF8Encoding($false)
            [System.IO.File]::WriteAllText($specFile, $content, $utf8NoBom)
        } else {
@@ -1,38 +0,0 @@
-#!/usr/bin/env pwsh
-
-param(
-    [Parameter(Position=0)]
-    [string]$TemplateName,
-    [switch]$Json,
-    [switch]$Help
-)
-
-$ErrorActionPreference = 'Stop'
-
-if ($Help) {
-    Write-Output "Usage: resolve-template.ps1 <template-name> [-Json]"
-    exit 0
-}
-
-if (-not $TemplateName) {
-    [Console]::Error.WriteLine("ERROR: Template name is required")
-    exit 1
-}
-
-. "$PSScriptRoot/common.ps1"
-
-$repoRoot = Get-RepoRoot
-$templateContent = Resolve-TemplateContent -TemplateName $TemplateName -RepoRoot $repoRoot
-if ($null -eq $templateContent) {
-    [Console]::Error.WriteLine("ERROR: Could not resolve required $TemplateName from the template override stack for $repoRoot")
-    exit 1
-}
-
-if ($Json) {
-    [PSCustomObject]@{
-        TEMPLATE_NAME = $TemplateName
-        TEMPLATE_CONTENT = $templateContent
-    } | ConvertTo-Json -Compress
-} else {
-    [Console]::Out.Write($templateContent)
-}
@@ -41,8 +41,10 @@ if (Test-Path $paths.IMPL_PLAN -PathType Leaf) {
        Write-Output "Plan already exists at $($paths.IMPL_PLAN), skipping template copy"
    }
 } else {
-    $content = Resolve-TemplateContent -TemplateName 'plan-template' -RepoRoot $paths.REPO_ROOT
-    if ($null -ne $content) {
+    $template = Resolve-Template -TemplateName 'plan-template' -RepoRoot $paths.REPO_ROOT
+    if ($template -and (Test-Path $template)) {
+        # Read the template content and write it to the implementation plan file with UTF-8 encoding without BOM
+        $content = [System.IO.File]::ReadAllText($template)
        $utf8NoBom = New-Object System.Text.UTF8Encoding($false)
        [System.IO.File]::WriteAllText($paths.IMPL_PLAN, $content, $utf8NoBom)
        # Emit the copy status like the bash twin (setup-plan.sh); route to stderr
@@ -57,17 +57,12 @@ if (Test-Path $paths.QUICKSTART) { $docs += 'quickstart.md' }

 # Resolve tasks template through override stack
 $tasksTemplate = Resolve-Template -TemplateName 'tasks-template' -RepoRoot $paths.REPO_ROOT
-$tasksTemplateContent = Resolve-TemplateContent -TemplateName 'tasks-template' -RepoRoot $paths.REPO_ROOT
-if ($null -eq $tasksTemplateContent) {
+if (-not $tasksTemplate -or -not (Test-Path -LiteralPath $tasksTemplate -PathType Leaf)) {
    [Console]::Error.WriteLine("ERROR: Could not resolve required tasks-template from the template override stack for $($paths.REPO_ROOT)")
    [Console]::Error.WriteLine("Template 'tasks-template' was not found in any supported location (overrides, presets, extensions, or shared core). Add an override at .specify/templates/overrides/tasks-template.md, or run 'specify init' / reinstall shared infra to restore the core .specify/templates/tasks-template.md template.")
    exit 1
 }
-if ($tasksTemplate -and (Test-Path -LiteralPath $tasksTemplate -PathType Leaf)) {
-    $tasksTemplate = (Resolve-Path -LiteralPath $tasksTemplate).Path
-} else {
-    $tasksTemplate = ''
-}
+$tasksTemplate = (Resolve-Path -LiteralPath $tasksTemplate).Path

 # Output results
 if ($Json) {
@@ -75,7 +70,6 @@ if ($Json) {
        FEATURE_DIR    = $paths.FEATURE_DIR
        AVAILABLE_DOCS = $docs
        TASKS_TEMPLATE = $tasksTemplate
-        TASKS_TEMPLATE_CONTENT = $tasksTemplateContent
    } | ConvertTo-Json -Compress
 } else {
    Write-Output "FEATURE_DIR: $($paths.FEATURE_DIR)"
@@ -9,22 +9,10 @@ from dataclasses import dataclass
 from pathlib import Path

 try:
-    from common import (
-        FeaturePaths,
-        TemplateResolutionError,
-        format_speckit_command,
-        get_feature_paths,
-        resolve_template_content,
-    )
+    from common import FeaturePaths, format_speckit_command, get_feature_paths
 except ImportError:  # pragma: no cover - direct execution from unusual cwd
    sys.path.insert(0, str(Path(__file__).resolve().parent))
-    from common import (
-        FeaturePaths,
-        TemplateResolutionError,
-        format_speckit_command,
-        get_feature_paths,
-        resolve_template_content,
-    )
+    from common import FeaturePaths, format_speckit_command, get_feature_paths


 def _json_line(payload: object) -> str:
@@ -40,7 +28,6 @@ OPTIONS:
  --require-tasks     Require tasks.md to exist (for implementation phase)
  --include-tasks     Include tasks.md in AVAILABLE_DOCS list
  --paths-only        Only output path variables (no prerequisite validation)
-  --template NAME     Include composed template content in JSON output
  --help, -h          Show this help message

 EXAMPLES:
@@ -62,7 +49,6 @@ class Args:
    require_tasks: bool = False
    include_tasks: bool = False
    paths_only: bool = False
-    template_name: str | None = None


 def _parse_args(argv: list[str]) -> Args:
@@ -70,11 +56,8 @@ def _parse_args(argv: list[str]) -> Args:
    require_tasks = False
    include_tasks = False
    paths_only = False
-    template_name = None

-    index = 0
-    while index < len(argv):
-        arg = argv[index]
+    for arg in argv:
        if arg == "--json":
            json_mode = True
        elif arg == "--require-tasks":
@@ -83,15 +66,6 @@ def _parse_args(argv: list[str]) -> Args:
            include_tasks = True
        elif arg == "--paths-only":
            paths_only = True
-        elif arg == "--template":
-            index += 1
-            if index >= len(argv):
-                print(
-                    "ERROR: --template requires a template name",
-                    file=sys.stderr,
-                )
-                raise SystemExit(1)
-            template_name = argv[index]
        elif arg in {"--help", "-h"}:
            sys.stdout.write(HELP_TEXT)
            raise SystemExit(0)
@@ -101,14 +75,12 @@ def _parse_args(argv: list[str]) -> Args:
                file=sys.stderr,
            )
            raise SystemExit(1)
-        index += 1

    return Args(
        json_mode=json_mode,
        require_tasks=require_tasks,
        include_tasks=include_tasks,
        paths_only=paths_only,
-        template_name=template_name,
    )


@@ -158,31 +130,14 @@ def _print_paths_only(paths: FeaturePaths, json_mode: bool) -> None:
    print(f"TASKS: {paths.tasks}")


-def _status_marker(ok: bool) -> str:
-    """Return the status glyph, downgraded to ASCII when stdout cannot encode it.
-
-    On Windows sys.stdout falls back to the ANSI code page whenever it is not a
-    console - a pipe or a file redirect, which is how agents and workflow steps
-    invoke these scripts - and U+2713 is unencodable in cp1252, so printing it
-    raised UnicodeEncodeError and aborted the report right after
-    "AVAILABLE_DOCS:". "[OK]"/"[FAIL]" is the ASCII rendering these markers
-    already have in-tree: see Test-FileExists in scripts/powershell/common.ps1
-    and normalize_status_text in tests/parity_helpers.py.
-    """
-    glyph = "✓" if ok else "✗"
-    try:
-        glyph.encode(getattr(sys.stdout, "encoding", None) or "utf-8")
-    except (LookupError, UnicodeEncodeError):
-        return "[OK]" if ok else "[FAIL]"
-    return glyph
-
-
 def _check_file(path: Path, description: str) -> None:
-    print(f"  {_status_marker(path.is_file())} {description}")
+    marker = "✓" if path.is_file() else "✗"
+    print(f"  {marker} {description}")


 def _check_dir(path: Path, description: str) -> None:
-    print(f"  {_status_marker(_dir_has_entries(path))} {description}")
+    marker = "✓" if _dir_has_entries(path) else "✗"
+    print(f"  {marker} {description}")


 def _print_text_results(paths: FeaturePaths, include_tasks: bool) -> None:
@@ -239,32 +194,9 @@ def main(argv: list[str] | None = None) -> int:
        return 1

    docs = _available_docs(paths, args.include_tasks)
-    template_content = None
-    if args.template_name:
-        try:
-            template_content = resolve_template_content(
-                args.template_name, paths.repo_root
-            )
-        except TemplateResolutionError as exc:
-            print(f"ERROR: {exc}", file=sys.stderr)
-            return 1
-        if template_content is None:
-            print(
-                f"ERROR: Could not resolve required {args.template_name} from "
-                f"the template override stack for {paths.repo_root}",
-                file=sys.stderr,
-            )
-            return 1
-
    if args.json_mode:
-        payload: dict[str, object] = {
-            "FEATURE_DIR": str(paths.feature_dir),
-            "AVAILABLE_DOCS": docs,
-        }
-        if args.template_name:
-            payload["TEMPLATE_CONTENT"] = template_content
        sys.stdout.write(
-            _json_line(payload)
+            _json_line({"FEATURE_DIR": str(paths.feature_dir), "AVAILABLE_DOCS": docs})
        )
    else:
        _print_text_results(paths, args.include_tasks)
@@ -4,7 +4,6 @@ from __future__ import annotations

 import json
 import os
-import re
 import sys
 from dataclasses import dataclass
 from pathlib import Path
@@ -183,30 +182,12 @@ def get_feature_paths(
    )


-_SAFE_COMPONENT_PATTERN = re.compile(r"[a-z0-9-]+")
-
-
-def _is_safe_component(value: object) -> bool:
-    return (
-        isinstance(value, str)
-        and _SAFE_COMPONENT_PATTERN.fullmatch(value) is not None
-    )
-
-
-def _normalize_priority(value: object) -> int:
-    if isinstance(value, bool):
-        return 10
-    try:
-        priority = int(value)
-    except (TypeError, ValueError, OverflowError):
-        return 10
-    return priority if priority >= 1 else 10
-
-
 def _sorted_preset_ids(presets_dir: Path) -> list[str]:
    registry = presets_dir / ".registry"
    if registry.is_file():
-        # Invalid JSON or registry shapes fall back to the directory scan below.
+        # Mirrors bash: any failure while reading or sorting the registry
+        # (invalid JSON, non-dict shapes, unorderable priority values) falls
+        # back to the directory scan below.
        try:
            data = json.loads(registry.read_text(encoding="utf-8"))
            presets = data.get("presets", {})
@@ -214,18 +195,11 @@ def _sorted_preset_ids(presets_dir: Path) -> list[str]:
                pid
                for pid, meta in sorted(
                    presets.items(),
-                    key=lambda kv: (
-                        _normalize_priority(kv[1].get("priority"))
-                        if isinstance(kv[1], dict)
-                        else 10,
-                        kv[0],
-                    ),
-                )
-                if (
-                    _is_safe_component(pid)
-                    and isinstance(meta, dict)
-                    and bool(meta.get("enabled", True))
+                    key=lambda kv: kv[1].get("priority", 10)
+                    if isinstance(kv[1], dict)
+                    else 10,
                )
+                if isinstance(meta, dict) and meta.get("enabled", True) is not False
            ]
        except Exception:
            pass
@@ -233,78 +207,12 @@ def _sorted_preset_ids(presets_dir: Path) -> list[str]:
        return sorted(
            p.name
            for p in presets_dir.iterdir()
-            if p.is_dir() and _is_safe_component(p.name)
+            if p.is_dir() and not p.name.startswith(".")
        )
    except OSError:
        return []


-def _sorted_extension_ids(extensions_dir: Path) -> list[str]:
-    registry = extensions_dir / ".registry"
-    registered_ids: set[str] = set()
-    extensions: dict[object, object] = {}
-    if os.path.lexists(registry):
-        if not registry.is_file():
-            raise TemplateResolutionError(
-                f"Invalid extension registry {registry}: not a regular file"
-            )
-        try:
-            data = json.loads(registry.read_text(encoding="utf-8"))
-        except (OSError, UnicodeError, json.JSONDecodeError) as exc:
-            raise TemplateResolutionError(
-                f"Failed to parse extension registry {registry}: {exc}"
-            ) from exc
-        if not isinstance(data, dict):
-            raise TemplateResolutionError(
-                f"Invalid extension registry {registry}: root must be a mapping"
-            )
-        raw_extensions = data.get("extensions", {})
-        if not isinstance(raw_extensions, dict):
-            raise TemplateResolutionError(
-                f"Invalid extension registry {registry}: "
-                "'extensions' must be a mapping"
-            )
-        extensions = raw_extensions
-        registered_ids = {
-            ext_id for ext_id in extensions if isinstance(ext_id, str)
-        }
-
-    ranked: list[tuple[int, str]] = []
-    for ext_id, metadata in extensions.items():
-        if (
-            _is_safe_component(ext_id)
-            and isinstance(metadata, dict)
-            and bool(metadata.get("enabled", True))
-        ):
-            ranked.append((_normalize_priority(metadata.get("priority")), ext_id))
-
-    try:
-        ranked.extend(
-            (10, path.name)
-            for path in extensions_dir.iterdir()
-            if (
-                path.is_dir()
-                and _is_safe_component(path.name)
-                and path.name not in registered_ids
-            )
-        )
-    except OSError:
-        pass
-    return [ext_id for _, ext_id in sorted(ranked)]
-
-
-def _conventional_template(
-    base_dir: Path, template_name: str
-) -> Path | None:
-    for candidate in (
-        base_dir / "templates" / f"{template_name}.md",
-        base_dir / f"{template_name}.md",
-    ):
-        if candidate.is_file():
-            return candidate
-    return None
-
-
 def resolve_template(template_name: str, repo_root: Path) -> Path | None:
    """Resolve a template name to a file path using the priority stack.

@@ -314,9 +222,6 @@ def resolve_template(template_name: str, repo_root: Path) -> Path | None:
      3. .specify/extensions/<ext-id>/templates/ (hidden directories skipped)
      4. .specify/templates/ (core)
    """
-    if not _is_safe_component(template_name):
-        return None
-
    base = repo_root / ".specify" / "templates"

    override = base / "overrides" / f"{template_name}.md"
@@ -326,18 +231,21 @@ def resolve_template(template_name: str, repo_root: Path) -> Path | None:
    presets_dir = repo_root / ".specify" / "presets"
    if presets_dir.is_dir():
        for preset_id in _sorted_preset_ids(presets_dir):
-            candidate = _conventional_template(
-                presets_dir / preset_id, template_name
-            )
-            if candidate is not None:
+            candidate = presets_dir / preset_id / "templates" / f"{template_name}.md"
+            if candidate.is_file():
                return candidate

    ext_dir = repo_root / ".specify" / "extensions"
    if ext_dir.is_dir():
-        for extension_id in _sorted_extension_ids(ext_dir):
-            ext = ext_dir / extension_id
-            candidate = _conventional_template(ext, template_name)
-            if candidate is not None:
+        try:
+            extensions = sorted(p for p in ext_dir.iterdir() if p.is_dir())
+        except OSError:
+            extensions = []
+        for ext in extensions:
+            if ext.name.startswith("."):
+                continue
+            candidate = ext / "templates" / f"{template_name}.md"
+            if candidate.is_file():
                return candidate

    core = base / f"{template_name}.md"
@@ -346,175 +254,6 @@ def resolve_template(template_name: str, repo_root: Path) -> Path | None:
    return None


-class TemplateResolutionError(RuntimeError):
-    """Raised when template layers exist but cannot be composed safely."""
-
-
-# Mirror the canonical PresetManifest contract (see src/specify_cli/presets)
-# so runtime resolution rejects the same structurally malformed manifests.
-_VALID_TEMPLATE_TYPES = ("template", "command", "script")
-_VALID_TEMPLATE_STRATEGIES = ("replace", "prepend", "append", "wrap")
-_VALID_SCRIPT_STRATEGIES = ("replace", "wrap")
-
-
-def _validate_manifest_template_entry(entry: object) -> None:
-    """Validate a single manifest template entry against the canonical rules."""
-    if not isinstance(entry, dict):
-        raise ValueError("manifest template entries must be mappings")
-    if "type" not in entry or "name" not in entry or "file" not in entry:
-        raise ValueError("manifest template entry missing type, name, or file")
-    for field in ("type", "name", "file"):
-        if not isinstance(entry[field], str):
-            raise ValueError(f"manifest template {field} must be a string")
-    if entry["type"] not in _VALID_TEMPLATE_TYPES:
-        raise ValueError(f"invalid manifest template type '{entry['type']}'")
-    strategy = entry.get("strategy", "replace")
-    if not isinstance(strategy, str):
-        raise ValueError("manifest template strategy must be a string")
-    strategy = strategy.lower()
-    if strategy not in _VALID_TEMPLATE_STRATEGIES:
-        raise ValueError(f"invalid manifest template strategy '{strategy}'")
-    if entry["type"] == "script" and strategy not in _VALID_SCRIPT_STRATEGIES:
-        raise ValueError(
-            f"invalid manifest script strategy '{strategy}'"
-        )
-
-
-def _preset_template_layer(
-    preset_dir: Path, template_name: str
-) -> tuple[Path, str] | None:
-    """Return the preset template path and composition strategy."""
-    manifest_path = preset_dir / "preset.yml"
-    conventional = _conventional_template(preset_dir, template_name)
-
-    try:
-        import yaml
-    except ImportError as exc:
-        if manifest_path.is_file():
-            raise TemplateResolutionError(
-                "PyYAML is required to resolve preset template composition"
-            ) from exc
-        return (conventional, "replace") if conventional is not None else None
-
-    if manifest_path.is_file():
-        try:
-            manifest = yaml.safe_load(manifest_path.read_text(encoding="utf-8"))
-            if not isinstance(manifest, dict):
-                raise ValueError("manifest root must be a mapping")
-            if "provides" not in manifest:
-                raise ValueError("manifest missing provides section")
-            provides = manifest["provides"]
-            if not isinstance(provides, dict):
-                raise ValueError("manifest provides must be a mapping")
-            if "templates" not in provides:
-                raise ValueError("manifest provides missing templates")
-            templates = provides["templates"]
-            if not isinstance(templates, list):
-                raise ValueError("manifest templates must be a list")
-            if not templates:
-                raise ValueError("manifest must provide at least one template")
-            for entry in templates:
-                _validate_manifest_template_entry(entry)
-            for entry in templates:
-                if (
-                    entry.get("name") != template_name
-                    or entry.get("type", "template") != "template"
-                ):
-                    continue
-                file_value = entry.get("file", "")
-                strategy = entry.get("strategy", "replace")
-                relative = Path(file_value)
-                if (
-                    not relative
-                    or relative.is_absolute()
-                    or ".." in relative.parts
-                ):
-                    return None
-                candidate = preset_dir / relative
-                if not candidate.is_file():
-                    return None
-                return candidate, strategy.lower()
-        except (OSError, UnicodeError, ValueError, yaml.YAMLError) as exc:
-            raise TemplateResolutionError(
-                f"Failed to parse preset manifest {manifest_path}: {exc}"
-            ) from exc
-
-    return (conventional, "replace") if conventional is not None else None
-
-
-def resolve_template_content(template_name: str, repo_root: Path) -> str | None:
-    """Resolve and compose template content through the project layer stack."""
-    if not _is_safe_component(template_name):
-        return None
-
-    layers: list[tuple[Path, str]] = []
-
-    def compose_from_base() -> str:
-        try:
-            content = layers[-1][0].read_bytes().decode("utf-8")
-            for path, strategy in reversed(layers[:-1]):
-                layer_content = path.read_bytes().decode("utf-8")
-                if strategy == "prepend":
-                    content = f"{layer_content}\n\n{content}"
-                elif strategy == "append":
-                    content = f"{content}\n\n{layer_content}"
-                elif strategy == "wrap":
-                    placeholder = "{CORE_TEMPLATE}"
-                    if placeholder not in layer_content:
-                        raise TemplateResolutionError(
-                            f"Wrap layer {path} is missing {placeholder}"
-                        )
-                    content = layer_content.replace(placeholder, content)
-                else:
-                    raise TemplateResolutionError(
-                        f"Unknown template composition strategy '{strategy}' in {path}"
-                    )
-        except (OSError, UnicodeError) as exc:
-            raise TemplateResolutionError(
-                f"Failed to read template layer for '{template_name}': {exc}"
-            ) from exc
-        return content
-
-    override = (
-        repo_root
-        / ".specify"
-        / "templates"
-        / "overrides"
-        / f"{template_name}.md"
-    )
-    if override.is_file():
-        layers.append((override, "replace"))
-        return compose_from_base()
-
-    presets_dir = repo_root / ".specify" / "presets"
-    for preset_id in _sorted_preset_ids(presets_dir):
-        layer = _preset_template_layer(presets_dir / preset_id, template_name)
-        if layer is not None:
-            layers.append(layer)
-            if layer[1] == "replace":
-                return compose_from_base()
-
-    extensions_dir = repo_root / ".specify" / "extensions"
-    for extension_id in _sorted_extension_ids(extensions_dir):
-        extension_dir = extensions_dir / extension_id
-        candidate = _conventional_template(extension_dir, template_name)
-        if candidate is not None:
-            layers.append((candidate, "replace"))
-            return compose_from_base()
-
-    core = repo_root / ".specify" / "templates" / f"{template_name}.md"
-    if core.is_file():
-        layers.append((core, "replace"))
-        return compose_from_base()
-
-    if not layers:
-        return None
-
-    raise TemplateResolutionError(
-        f"Template '{template_name}' has composing layers but no replace base"
-    )
-
-
 def get_invoke_separator(repo_root: Path) -> str:
    integration_json = repo_root / ".specify" / "integration.json"
    if not integration_json.is_file():
@@ -7,25 +7,16 @@ import datetime
 import json
 import re
 import shlex
+import shutil
 import sys
 from dataclasses import dataclass
 from pathlib import Path

 try:
-    from common import (
-        TemplateResolutionError,
-        get_repo_root,
-        persist_feature_json,
-        resolve_template_content,
-    )
+    from common import get_repo_root, persist_feature_json, resolve_template
 except ImportError:  # pragma: no cover - direct execution from unusual cwd
    sys.path.insert(0, str(Path(__file__).resolve().parent))
-    from common import (
-        TemplateResolutionError,
-        get_repo_root,
-        persist_feature_json,
-        resolve_template_content,
-    )
+    from common import get_repo_root, persist_feature_json, resolve_template


 def _json_line(payload: object) -> str:
@@ -383,22 +374,12 @@ def main(argv: list[str] | None = None) -> int:
                )
            return 1

-        template_content = None
-        needs_spec = not spec_file.is_file()
-        if needs_spec:
-            try:
-                template_content = resolve_template_content(
-                    "spec-template", repo_root
-                )
-            except TemplateResolutionError as exc:
-                print(f"Error: {exc}", file=sys.stderr)
-                return 1
-
        feature_dir.mkdir(parents=True, exist_ok=True)

-        if needs_spec:
-            if template_content is not None:
-                spec_file.write_bytes(template_content.encode("utf-8"))
+        if not spec_file.is_file():
+            template = resolve_template("spec-template", repo_root)
+            if template is not None and template.is_file():
+                shutil.copy(template, spec_file)
            else:
                print(
                    "Warning: Spec template not found; created empty spec file",
@@ -1,63 +0,0 @@
-#!/usr/bin/env python3
-"""Resolve composed template content from the project template stack."""
-
-from __future__ import annotations
-
-import argparse
-import json
-import sys
-from pathlib import Path
-
-try:
-    from common import (
-        TemplateResolutionError,
-        get_repo_root,
-        resolve_template_content,
-    )
-except ImportError:  # pragma: no cover - direct execution from unusual cwd
-    sys.path.insert(0, str(Path(__file__).resolve().parent))
-    from common import (
-        TemplateResolutionError,
-        get_repo_root,
-        resolve_template_content,
-    )
-
-
-def main(argv: list[str] | None = None) -> int:
-    parser = argparse.ArgumentParser()
-    parser.add_argument("template_name")
-    parser.add_argument("--json", action="store_true")
-    args = parser.parse_args(argv)
-
-    repo_root = get_repo_root(Path(__file__))
-    try:
-        content = resolve_template_content(args.template_name, repo_root)
-    except TemplateResolutionError as exc:
-        print(f"ERROR: {exc}", file=sys.stderr)
-        return 1
-    if content is None:
-        print(
-            f"ERROR: Could not resolve required {args.template_name} from the "
-            f"template override stack for {repo_root}",
-            file=sys.stderr,
-        )
-        return 1
-
-    if args.json:
-        print(
-            json.dumps(
-                {
-                    "TEMPLATE_NAME": args.template_name,
-                    "TEMPLATE_CONTENT": content,
-                },
-                ensure_ascii=False,
-                separators=(",", ":"),
-            )
-        )
-    else:
-        sys.stdout.write(content)
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())
@@ -4,22 +4,15 @@
 from __future__ import annotations

 import json
+import shutil
 import sys
 from pathlib import Path

 try:
-    from common import (
-        TemplateResolutionError,
-        get_feature_paths,
-        resolve_template_content,
-    )
+    from common import get_feature_paths, resolve_template
 except ImportError:  # pragma: no cover - direct execution from unusual cwd
    sys.path.insert(0, str(Path(__file__).resolve().parent))
-    from common import (
-        TemplateResolutionError,
-        get_feature_paths,
-        resolve_template_content,
-    )
+    from common import get_feature_paths, resolve_template


 def _json_line(payload: object) -> str:
@@ -62,13 +55,9 @@ def main(argv: list[str] | None = None) -> int:
            file=status_stream,
        )
    else:
-        try:
-            template_content = resolve_template_content("plan-template", paths.repo_root)
-        except TemplateResolutionError as exc:
-            print(f"Error: {exc}", file=sys.stderr)
-            return 1
-        if template_content is not None:
-            paths.impl_plan.write_bytes(template_content.encode("utf-8"))
+        template = resolve_template("plan-template", paths.repo_root)
+        if template is not None and template.is_file():
+            shutil.copy(template, paths.impl_plan)
            print(f"Copied plan template to {paths.impl_plan}", file=status_stream)
        else:
            print("Warning: Plan template not found", file=status_stream)
@@ -10,21 +10,17 @@ from pathlib import Path
 try:
    from common import (
        FeaturePaths,
-        TemplateResolutionError,
        format_speckit_command,
        get_feature_paths,
        resolve_template,
-        resolve_template_content,
    )
 except ImportError:  # pragma: no cover - direct execution from unusual cwd
    sys.path.insert(0, str(Path(__file__).resolve().parent))
    from common import (
        FeaturePaths,
-        TemplateResolutionError,
        format_speckit_command,
        get_feature_paths,
        resolve_template,
-        resolve_template_content,
    )


@@ -59,31 +55,14 @@ def _available_docs(paths: FeaturePaths) -> list[str]:
    return docs


-def _status_marker(ok: bool) -> str:
-    """Return the status glyph, downgraded to ASCII when stdout cannot encode it.
-
-    On Windows sys.stdout falls back to the ANSI code page whenever it is not a
-    console - a pipe or a file redirect, which is how agents and workflow steps
-    invoke these scripts - and U+2713 is unencodable in cp1252, so printing it
-    raised UnicodeEncodeError and aborted the report mid-listing.
-    "[OK]"/"[FAIL]" is the ASCII rendering these markers already have in-tree:
-    see Test-FileExists in scripts/powershell/common.ps1 and
-    normalize_status_text in tests/parity_helpers.py.
-    """
-    glyph = "✓" if ok else "✗"
-    try:
-        glyph.encode(getattr(sys.stdout, "encoding", None) or "utf-8")
-    except (LookupError, UnicodeEncodeError):
-        return "[OK]" if ok else "[FAIL]"
-    return glyph
-
-
 def _check_file(path: Path, description: str) -> None:
-    print(f"  {_status_marker(path.is_file())} {description}")
+    marker = "✓" if path.is_file() else "✗"
+    print(f"  {marker} {description}")


 def _check_dir(path: Path, description: str) -> None:
-    print(f"  {_status_marker(_dir_has_entries(path))} {description}")
+    marker = "✓" if _dir_has_entries(path) else "✗"
+    print(f"  {marker} {description}")


 def main(argv: list[str] | None = None) -> int:
@@ -124,14 +103,8 @@ def main(argv: list[str] | None = None) -> int:

    docs = _available_docs(paths)

-    try:
-        tasks_template_content = resolve_template_content(
-            "tasks-template", paths.repo_root
-        )
-    except TemplateResolutionError as exc:
-        print(f"ERROR: {exc}", file=sys.stderr)
-        return 1
-    if tasks_template_content is None:
+    tasks_template = resolve_template("tasks-template", paths.repo_root)
+    if tasks_template is None or not tasks_template.is_file():
        print(
            "ERROR: Could not resolve required tasks-template from the template "
            f"override stack for {paths.repo_root}",
@@ -148,21 +121,18 @@ def main(argv: list[str] | None = None) -> int:
        return 1

    if json_mode:
-        tasks_template = resolve_template("tasks-template", paths.repo_root)
        sys.stdout.write(
            _json_line(
                {
                    "FEATURE_DIR": str(paths.feature_dir),
                    "AVAILABLE_DOCS": docs,
-                    "TASKS_TEMPLATE": str(tasks_template) if tasks_template else "",
-                    "TASKS_TEMPLATE_CONTENT": tasks_template_content,
+                    "TASKS_TEMPLATE": str(tasks_template),
                }
            )
        )
    else:
-        tasks_template = resolve_template("tasks-template", paths.repo_root)
        print(f"FEATURE_DIR: {paths.feature_dir}")
-        print(f"TASKS_TEMPLATE: {tasks_template or 'not found'}")
+        print(f"TASKS_TEMPLATE: {tasks_template}")
        print("AVAILABLE_DOCS:")
        _check_file(paths.research, "research.md")
        _check_file(paths.data_model, "data-model.md")
@@ -10,7 +10,6 @@ import struct
 import tarfile
 import unicodedata
 import zipfile
-import zlib
 from collections.abc import Iterator
 from contextlib import ExitStack, contextmanager
 from ipaddress import IPv4Address, IPv6Address, ip_address
@@ -70,19 +69,6 @@ _ZIP_MAX_COMMENT_BYTES = (1 << 16) - 1
 _BOUNDED_ZIP_COMPRESSION_METHODS = frozenset(
    (zipfile.ZIP_STORED, zipfile.ZIP_DEFLATED)
 )
-#: Decompression failures a truncated or corrupt gzip stream raises from
-#: ``tarfile``. Most are wrapped in ``TarError``, but two escape raw, and
-#: neither derives from ``TarError`` or ``OSError``, so both bypass a
-#: ``(TarError, OSError)`` handler:
-#:
-#: * ``EOFError`` -- from the gzip layer when the stream ends before its
-#:   end-of-stream marker, i.e. a truncated archive.
-#: * ``zlib.error`` -- from a corrupt deflate block. ``tarfile`` converts this
-#:   to ``ReadError`` while reading a member *header*, but the forward seek it
-#:   performs to skip member *data* sits outside that conversion, so a corrupt
-#:   region past the first header escapes raw.
-_TAR_DECOMPRESSION_ERRORS = (tarfile.TarError, EOFError, zlib.error)
-
 _ARCHIVE_CONTENT_TYPES: dict[str, ArchiveFormat] = {
    "application/gzip": "tar.gz",
    "application/x-gzip": "tar.gz",
@@ -180,11 +166,7 @@ def detect_archive_format(
                try:
                    with tarfile.open(fileobj=archive_file, mode="r:gz"):
                        is_tar_gz = True
-                except _TAR_DECOMPRESSION_ERRORS:
-                    # A truncated gzip stream raises a bare EOFError here rather
-                    # than a TarError, so catching only TarError let it escape
-                    # this probe as a raw exception instead of leaving
-                    # ``is_tar_gz`` False and reporting the format mismatch.
+                except tarfile.TarError:
                    pass
            archive_file.seek(0)
        except OSError as exc:
@@ -1095,7 +1077,7 @@ def safe_extract_tar(
            mode="r:gz",
            fileobj=archive_file,
        )
-    except (*_TAR_DECOMPRESSION_ERRORS, OSError) as exc:
+    except (tarfile.TarError, OSError) as exc:
        _raise_from(error_type, f"Invalid tar.gz archive: {archive_path}", exc)

    with archive:
@@ -1167,7 +1149,7 @@ def safe_extract_tar(
                            f"of {max_total_bytes} bytes",
                        )
                validated.append((member, normalized_name, is_dir))
-        except (*_TAR_DECOMPRESSION_ERRORS, OSError) as exc:
+        except (tarfile.TarError, OSError) as exc:
            _raise_from(
                error_type,
                f"Invalid tar.gz archive: {archive_path}",
@@ -9,7 +9,7 @@ and ``specify init``'s next-steps output stay consistent.
 from __future__ import annotations

 # Agents that render $speckit-<name> (chat invocation) when in skills mode.
-DOLLAR_SKILLS_AGENTS: frozenset[str] = frozenset({"codex", "zcode", "command-code"})
+DOLLAR_SKILLS_AGENTS: frozenset[str] = frozenset({"codex", "zcode"})

 # Agents that always render /speckit-<name>, regardless of ai_skills.
 ALWAYS_SLASH_AGENTS: frozenset[str] = frozenset({"devin", "droid", "grok", "trae", "zed"})
@@ -192,8 +192,8 @@ def handle_vscode_settings(sub_item, dest_file, rel_path, verbose=False, tracker

            os.replace(temp_path, target_file)
        except Exception:
-            if temp_path:
-                temp_path.unlink(missing_ok=True)
+            if temp_path and temp_path.exists():
+                temp_path.unlink()
            raise

    try:
@@ -45,12 +45,7 @@ def _fail(message: str) -> None:
    """Print an actionable error to stderr and exit non-zero."""
    # Use the stderr console so the error never lands on stdout, which under
    # ``--json`` carries the machine-readable payload and must stay parseable.
-    # Escape the message: every caller passes ``str(exc)`` from a BundlerError
-    # that interpolates untrusted data (a CLI argument, a catalog url, a
-    # bundle.yml field), so a '[...]' in it would be parsed as a Rich style tag
-    # -- silently swallowing the text, or raising MarkupError on an unbalanced
-    # closer and replacing the whole message with a traceback.
-    err_console.print(f"[red]Error:[/red] {_escape_markup(message)}", style=None)
+    err_console.print(f"[red]Error:[/red] {message}", style=None)
    raise typer.Exit(code=1)


@@ -337,10 +332,9 @@ def bundle_list(
    console.print("\n[bold cyan]Installed bundles:[/bold cyan]\n")
    for record in records:
        console.print(
-            f"  [bold]{_escape_markup(str(record.bundle_id))}[/bold] "
-            f"v{_escape_markup(str(record.version))} "
+            f"  [bold]{record.bundle_id}[/bold] v{record.version} "
            f"[dim]({len(record.contributed_components)} components, "
-            f"installed {_escape_markup(str(record.installed_at))})[/dim]"
+            f"installed {record.installed_at})[/dim]"
        )


@@ -400,13 +394,13 @@ def bundle_install(
            )
            console.print(
                f"[cyan]No Spec Kit project here; initializing with integration "
-                f"'{_escape_markup(str(init_integration))}'…[/cyan]"
+                f"'{init_integration}'…[/cyan]"
            )
            _run_init(init_integration, script_type=_default_script_type(), offline=offline)
            project_root = require_project_root()

        for overlap in _bundle_overlaps(project_root, manifest, offline=offline):
-            console.print(f"[yellow]![/yellow] {_escape_markup(str(overlap))}")
+            console.print(f"[yellow]![/yellow] {overlap}")

        # For an already-initialized project, the project's recorded active
        # integration is authoritative — an explicit --integration must not be
@@ -421,7 +415,7 @@ def bundle_install(
            integration_explicit=bool(integration) and detected is None,
        )
        for warning in plan.warnings:
-            console.print(f"[yellow]![/yellow] {_escape_markup(str(warning))}")
+            console.print(f"[yellow]![/yellow] {warning}")

        result = install_bundle(
            project_root,
@@ -434,7 +428,7 @@ def bundle_install(
        return

    console.print(
-        f"[green]✓[/green] Installed '{_escape_markup(str(result.bundle_id))}' "
+        f"[green]✓[/green] Installed '{result.bundle_id}' "
        f"({len(result.installed)} added, {len(result.skipped)} already present)."
    )

@@ -486,10 +480,7 @@ def bundle_update(
                integration_explicit=bool(integration) and detected is None,
            )
            install_bundle(project_root, plan, installer, manifest=manifest, refresh=True)
-            console.print(
-                f"[green]✓[/green] Updated '{_escape_markup(str(target))}' "
-                f"to v{_escape_markup(str(plan.version))}."
-            )
+            console.print(f"[green]✓[/green] Updated '{target}' to v{plan.version}.")
    except BundlerError as exc:
        _fail(str(exc))
        return
@@ -511,7 +502,7 @@ def bundle_remove(
        return

    console.print(
-        f"[green]✓[/green] Removed '{_escape_markup(str(result.bundle_id))}' "
+        f"[green]✓[/green] Removed '{result.bundle_id}' "
        f"({len(result.uninstalled)} uninstalled, {len(result.skipped)} kept for other bundles)."
    )

@@ -551,16 +542,13 @@ def bundle_validate(
        return

    for warning in report.warnings:
-        console.print(f"[yellow]![/yellow] {_escape_markup(str(warning))}")
+        console.print(f"[yellow]![/yellow] {warning}")
    if not report.ok:
        console.print("[red]Manifest is invalid:[/red]")
        for error in report.errors:
-            console.print(f"  [red]-[/red] {_escape_markup(str(error))}")
+            console.print(f"  [red]-[/red] {error}")
        raise typer.Exit(code=1)
-    console.print(
-        f"[green]✓[/green] {_escape_markup(str(manifest.bundle.id))} "
-        "is well-formed and valid."
-    )
+    console.print(f"[green]✓[/green] {manifest.bundle.id} is well-formed and valid.")


@bundle_app.command("build")
@@ -583,9 +571,8 @@ def bundle_build(
        return

    console.print(
-        f"[green]✓[/green] Built {_escape_markup(result.artifact_path.name)} "
-        f"({result.file_count} files) → "
-        f"{_escape_markup(str(result.artifact_path))}"
+        f"[green]✓[/green] Built {result.artifact_path.name} "
+        f"({result.file_count} files) → {result.artifact_path}"
    )


@@ -604,7 +591,7 @@ def bundle_init(
            init_integration = _resolve_init_integration(integration, None)
            console.print(
                f"[cyan]Initializing a Spec Kit project with integration "
-                f"'{_escape_markup(str(init_integration))}'…[/cyan]"
+                f"'{init_integration}'…[/cyan]"
            )
            _run_init(init_integration, script_type=_default_script_type(), offline=offline)
            project_root = require_project_root()
@@ -612,10 +599,7 @@ def bundle_init(
        _fail(str(exc))
        return

-    console.print(
-        f"[green]✓[/green] Spec Kit project ready at "
-        f"{_escape_markup(str(project_root))}."
-    )
+    console.print(f"[green]✓[/green] Spec Kit project ready at {project_root}.")
    if bundle:
        bundle_install(bundle, integration=integration, offline=offline)

@@ -639,11 +623,10 @@ def catalog_list() -> None:
    only_builtin = all(s.scope == Scope.BUILTIN for s in sources)
    for source in sources:
        console.print(
-            f"  [bold]{_escape_markup(str(source.id))}[/bold]  "
-            f"priority={source.priority}  "
+            f"  [bold]{source.id}[/bold]  priority={source.priority}  "
            f"policy={source.install_policy.value}  scope={source.scope.value}"
        )
-        console.print(f"    [dim]{_escape_markup(str(source.url))}[/dim]")
+        console.print(f"    [dim]{source.url}[/dim]")
    if only_builtin:
        console.print("\n[dim]Using the built-in default stack.[/dim]")

@@ -668,7 +651,7 @@ def catalog_add(
        return

    console.print(
-        f"[green]✓[/green] Added catalog '{_escape_markup(str(source.id))}' "
+        f"[green]✓[/green] Added catalog '{source.id}' "
        f"(priority {source.priority}, {source.install_policy.value})."
    )

@@ -687,10 +670,7 @@ def catalog_remove(
        _fail(str(exc))
        return

-    console.print(
-        f"[green]✓[/green] Removed catalog source "
-        f"'{_escape_markup(str(removed))}'."
-    )
+    console.print(f"[green]✓[/green] Removed catalog source '{removed}'.")


 # ZIP magic-byte signatures used to detect .zip payloads from REST API asset
@@ -791,17 +771,7 @@ def _local_manifest_source(arg: str):
                error_type=BundlerError,
                label="bundle manifest",
            )
-        try:
-            data = _yaml.safe_load(io.BytesIO(raw))
-        except _yaml.YAMLError as exc:
-            # The sibling directory/bundle.yml branches reach YAML through
-            # load_yaml(), which turns a parse failure into a BundlerError. This
-            # branch parses inline, so without this it raises a raw YAMLError --
-            # neither a ValueError nor an OSError -- which escapes
-            # bundle_install()'s `except BundlerError` as a traceback.
-            raise BundlerError(
-                f"Invalid YAML in bundle.yml inside '{candidate}': {exc}"
-            ) from exc
+        data = _yaml.safe_load(io.BytesIO(raw))
        return BundleManifest.from_dict(data)

    if candidate.name == "bundle.yml" or candidate.suffix in (".yml", ".yaml"):
@@ -3,16 +3,13 @@
 from __future__ import annotations

 import os
-import shlex
 import shutil
-import subprocess
 import sys
 from pathlib import Path
 from typing import Any

 import typer
 from rich.live import Live
-from rich.markup import escape as _escape_markup
 from rich.panel import Panel

 from .._agent_config import (
@@ -172,25 +169,6 @@ def _install_extension_during_init(project_path: Path, ext_spec: str, speckit_ve
    return f"{manifest.name} v{manifest.version} installed"


-def _shell_quote_arg(value: str) -> str:
-    """Quote *value* as one argument for the shells of the host OS.
-
-    The Next Steps ``cd`` line is copy-pasted into whichever shell ran
-    ``specify init``, so it is quoted for the host the same way
-    ``_version._render_argv`` renders its copy-pasteable installer command:
-    ``list2cmdline`` on Windows, ``shlex.quote`` elsewhere. The Windows branch
-    must emit double quotes -- ``cd 'my project'`` is a path-not-found in
-    cmd.exe, while ``cd "my project"`` is accepted by cmd.exe, PowerShell and
-    Git Bash alike. A value needing no quoting is returned unchanged.
-
-    Whitespace only. PowerShell also glob-expands ``[``/``]`` and expands
-    ``$``/backtick inside double quotes, so such a name still needs
-    ``Set-Location -LiteralPath`` there -- syntax invalid in cmd.exe and sh, so
-    this shell-neutral line cannot cover it.
-    """
-    return subprocess.list2cmdline([value]) if os.name == "nt" else shlex.quote(value)
-
-
 def ensure_constitution_from_template(
    project_path: Path, tracker: StepTracker | None = None
 ) -> None:
@@ -373,10 +351,7 @@ def register(app: typer.Typer) -> None:
        if integration:
            resolved_integration = get_integration(integration)
            if not resolved_integration:
-                console.print(
-                    f"[red]Error:[/red] Unknown integration: "
-                    f"'{_escape_markup(str(integration))}'"
-                )
+                console.print(f"[red]Error:[/red] Unknown integration: '{integration}'")
                available = ", ".join(sorted(INTEGRATION_REGISTRY))
                console.print(f"[yellow]Available integrations:[/yellow] {available}")
                raise typer.Exit(1)
@@ -453,27 +428,26 @@ def register(app: typer.Typer) -> None:
            project_path = Path(project_name).resolve()
            dir_existed_before = project_path.exists()
            if project_path.exists():
-                safe_name = _escape_markup(str(project_name))
                if not project_path.is_dir():
                    console.print(
-                        f"[red]Error:[/red] '{safe_name}' exists but is not a directory."
+                        f"[red]Error:[/red] '{project_name}' exists but is not a directory."
                    )
                    raise typer.Exit(1)
                existing_items = list(project_path.iterdir())
                if force:
                    if existing_items:
                        console.print(
-                            f"[yellow]Warning:[/yellow] Directory '{safe_name}' is not empty ({len(existing_items)} items)"
+                            f"[yellow]Warning:[/yellow] Directory '{project_name}' is not empty ({len(existing_items)} items)"
                        )
                        console.print(
                            "[yellow]Template files will be merged with existing content and may overwrite existing files[/yellow]"
                        )
                    console.print(
-                        f"[cyan]--force supplied: merging into existing directory '[cyan]{safe_name}[/cyan]'[/cyan]"
+                        f"[cyan]--force supplied: merging into existing directory '[cyan]{project_name}[/cyan]'[/cyan]"
                    )
                else:
                    error_panel = Panel(
-                        f"Directory already exists: '[cyan]{safe_name}[/cyan]'\n"
+                        f"Directory already exists: '[cyan]{project_name}[/cyan]'\n"
                        "Please choose a different project name or remove the existing directory.\n"
                        "Use [bold]--force[/bold] to merge into the existing directory.",
                        title="[red]Directory Conflict[/red]",
@@ -487,7 +461,7 @@ def register(app: typer.Typer) -> None:
        if integration:
            if integration not in AGENT_CONFIG:
                console.print(
-                    f"[red]Error:[/red] Invalid integration '{_escape_markup(str(integration))}'. Choose from: {', '.join(AGENT_CONFIG.keys())}"
+                    f"[red]Error:[/red] Invalid integration '{integration}'. Choose from: {', '.join(AGENT_CONFIG.keys())}"
                )
                raise typer.Exit(1)
            selected_ai = integration
@@ -526,14 +500,12 @@ def register(app: typer.Typer) -> None:
        setup_lines = [
            "[cyan]Specify Project Setup[/cyan]",
            "",
-            f"{'Project':<15} [green]{_escape_markup(project_path.name)}[/green]",
-            f"{'Working Path':<15} [dim]{_escape_markup(str(current_dir))}[/dim]",
+            f"{'Project':<15} [green]{project_path.name}[/green]",
+            f"{'Working Path':<15} [dim]{current_dir}[/dim]",
        ]

        if not here:
-            setup_lines.append(
-                f"{'Target Path':<15} [dim]{_escape_markup(str(project_path))}[/dim]"
-            )
+            setup_lines.append(f"{'Target Path':<15} [dim]{project_path}[/dim]")

        console.print(
            Panel("\n".join(setup_lines), border_style="cyan", padding=(1, 2))
@@ -560,7 +532,7 @@ def register(app: typer.Typer) -> None:
        if script_type:
            if script_type not in SCRIPT_TYPE_CHOICES:
                console.print(
-                    f"[red]Error:[/red] Invalid script type '{_escape_markup(str(script_type))}'. Choose from: {', '.join(SCRIPT_TYPE_CHOICES.keys())}"
+                    f"[red]Error:[/red] Invalid script type '{script_type}'. Choose from: {', '.join(SCRIPT_TYPE_CHOICES.keys())}"
                )
                raise typer.Exit(1)
            selected_script = script_type
@@ -599,6 +571,8 @@ def register(app: typer.Typer) -> None:
            tracker.add(key, label)

        if extensions:
+            from rich.markup import escape as _escape_markup
+
            for i, ext_spec in enumerate(extensions):
                tracker.add(
                    f"extension-{i}", f"Install extension: {_escape_markup(ext_spec)}"
@@ -661,30 +635,6 @@ def register(app: typer.Typer) -> None:
                )
                manifest.save()

-                if force:
-                    from ..integrations._helpers import (
-                        _register_extensions_for_agent,
-                        _register_presets_for_agent,
-                    )
-
-                    _register_extensions_for_agent(
-                        project_path,
-                        resolved_integration.key,
-                        force=True,
-                        continuing=(
-                            "The project was re-initialized, but installed extensions"
-                            " may need re-registration."
-                        ),
-                    )
-                    _register_presets_for_agent(
-                        project_path,
-                        resolved_integration.key,
-                        continuing=(
-                            "The project was re-initialized, but installed presets"
-                            " may need re-registration."
-                        ),
-                    )
-
                integration_settings = _with_integration_setting(
                    {},
                    resolved_integration.key,
@@ -853,6 +803,8 @@ def register(app: typer.Typer) -> None:

                # Install extensions specified via --extension
                if extensions:
+                    from rich.markup import escape as _escape_markup
+
                    from ..extensions._commands import _refresh_events_and_warn

                    speckit_ver = get_speckit_version()
@@ -942,7 +894,7 @@ def register(app: typer.Typer) -> None:
            if agent_folder:
                security_notice = Panel(
                    f"Some agents may store credentials, auth tokens, or other identifying and private artifacts in the agent folder within your project.\n"
-                    f"Consider adding [cyan]{_escape_markup(str(agent_folder))}[/cyan] (or parts of it) to [cyan].gitignore[/cyan] to prevent accidental credential leakage.",
+                    f"Consider adding [cyan]{agent_folder}[/cyan] (or parts of it) to [cyan].gitignore[/cyan] to prevent accidental credential leakage.",
                    title="[yellow]Agent Folder Security[/yellow]",
                    border_style="yellow",
                    padding=(1, 2),
@@ -953,7 +905,7 @@ def register(app: typer.Typer) -> None:
        steps_lines = []
        if not here:
            steps_lines.append(
-                f"1. Go to the project folder: [cyan]cd {_escape_markup(_shell_quote_arg(str(project_name)))}[/cyan]"
+                f"1. Go to the project folder: [cyan]cd {project_name}[/cyan]"
            )
            step_num = 2
        else:
@@ -548,15 +548,7 @@ def _resolve_event_command_argv(
    """
    from .integrations.base import IntegrationBase

-    try:
-        content = template_path.read_text(encoding="utf-8")
-    except (OSError, UnicodeDecodeError):
-        # An unreadable or undecodable template cannot declare a runnable
-        # script. Degrade to "no argv" like every other failure in this
-        # resolver (missing frontmatter, malformed YAML, absent scripts)
-        # instead of leaking a raw traceback through
-        # resolve_and_run_event_command.
-        return None
+    content = template_path.read_text(encoding="utf-8")
    m = re.match(r'^---\n(.*?)\n---', content, re.DOTALL)
    if not m:
        return None
@@ -61,13 +61,6 @@ _FALLBACK_CORE_COMMAND_NAMES = frozenset(
 )
 EXTENSION_COMMAND_NAME_PATTERN = re.compile(r"^speckit\.([a-z0-9-]+)\.([a-z0-9-]+)$")

-# Naming pattern for provides.templates / provides.scripts entries. Unlike
-# commands, these are not namespaced (they aren't invoked via a command
-# name), so they follow the same plain slug pattern as extension.id.
-VALID_EXTENSION_ARTIFACT_NAME_PATTERN = re.compile(r"^[a-z0-9-]+$")
-
-VALID_SCRIPT_RUNTIMES = frozenset({"bash", "powershell", "python"})
-
 VALID_EFFECTS = frozenset({"read-only", "read-write"})

 DEFAULT_HOOK_PRIORITY = 10
@@ -375,17 +368,11 @@ class ExtensionManifest:
                f"Invalid provides: expected a mapping, got {type(provides).__name__}"
            )
        commands = provides.get("commands", [])
-        templates = provides.get("templates", [])
-        scripts = provides.get("scripts", [])
        hooks = self.data.get("hooks")
        events = self.data.get("events")

        if "commands" in provides and not isinstance(commands, list):
            raise ValidationError("Invalid provides.commands: expected a list")
-        if "templates" in provides and not isinstance(templates, list):
-            raise ValidationError("Invalid provides.templates: expected a list")
-        if "scripts" in provides and not isinstance(scripts, list):
-            raise ValidationError("Invalid provides.scripts: expected a list")
        if "hooks" in self.data and not isinstance(hooks, dict):
            raise ValidationError("Invalid hooks: expected a mapping")
        if "events" in self.data:
@@ -395,17 +382,9 @@ class ExtensionManifest:
        has_commands = bool(commands)
        has_hooks = bool(hooks)
        has_events = bool(events)
-        has_templates = bool(templates)
-        has_scripts = bool(scripts)

-        if not has_commands and not has_hooks and not has_events and not has_templates and not has_scripts:
-            raise ValidationError(
-                "Extension must provide at least one command, hook, or event "
-                "(or a declared template/script)"
-            )
-
-        self._validate_provided_artifacts(templates, section="templates", singular="template")
-        self._validate_provided_artifacts(scripts, section="scripts", singular="script")
+        if not has_commands and not has_hooks and not has_events:
+            raise ValidationError("Extension must provide at least one command, hook, or event")

        # Validate hook values (if present).
        # Each event is a single mapping or a list of mappings.
@@ -566,80 +545,6 @@ class ExtensionManifest:
                        f"The extension author should update the manifest."
                    )

-    @staticmethod
-    def _validate_provided_artifacts(entries: List[Any], section: str, singular: str) -> None:
-        """Validate provides.templates / provides.scripts entries.
-
-        Mirrors the shape/path-safety checks PresetManifest applies to its
-        non-command templates, minus 'type' (the section name already
-        distinguishes template vs script) and 'strategy' (extension-provided
-        artifacts are always 'replace' -- see the forced-replace resolver
-        behavior for extension layers in presets/__init__.py). A present
-        'strategy' key is rejected rather than silently ignored, so an author
-        who copies a preset-style entry gets a clear error instead of a
-        silently-dropped field. Duplicate names within a section are also
-        rejected: the resolver returns the first matching entry by name
-        (``PresetResolver._extension_manifest_declared_template``), so a
-        later duplicate would be silently unreachable while still being
-        exposed by ``ExtensionManifest.templates``/``.scripts``.
-        """
-        seen_names: set[str] = set()
-        for entry in entries:
-            if not isinstance(entry, dict):
-                raise ValidationError(
-                    f"Each entry in 'provides.{section}' must be a mapping"
-                )
-            if "name" not in entry or "file" not in entry:
-                raise ValidationError(f"{singular.capitalize()} missing 'name' or 'file'")
-
-            name = entry["name"]
-            if not isinstance(name, str):
-                raise ValidationError(
-                    f"Invalid {singular} name: expected a string, got {type(name).__name__}"
-                )
-            if not VALID_EXTENSION_ARTIFACT_NAME_PATTERN.match(name):
-                raise ValidationError(
-                    f"Invalid {singular} name '{name}': "
-                    "must be lowercase alphanumeric with hyphens only"
-                )
-            if name in seen_names:
-                raise ValidationError(
-                    f"Duplicate {singular} name '{name}' in 'provides.{section}'"
-                )
-            seen_names.add(name)
-
-            file_value = entry["file"]
-            reason = relative_extension_path_violation(file_value)
-            if reason:
-                label = repr(file_value) if isinstance(file_value, str) else f"for {singular} '{name}'"
-                raise ValidationError(f"Invalid {singular} 'file' {label}: {reason}")
-
-            if "description" in entry and not isinstance(entry["description"], str):
-                raise ValidationError(
-                    f"Invalid {singular} description for '{name}': expected a string"
-                )
-
-            if "strategy" in entry:
-                raise ValidationError(
-                    f"Invalid {singular} entry '{name}': 'strategy' is not authorable for "
-                    "extension-provided artifacts, which always use 'replace' semantics"
-                )
-
-            if section == "scripts" and "runtimes" in entry:
-                runtimes = entry["runtimes"]
-                if not isinstance(runtimes, list) or not all(
-                    isinstance(r, str) for r in runtimes
-                ):
-                    raise ValidationError(
-                        f"Invalid runtimes for script '{name}': expected a list of strings"
-                    )
-                invalid = sorted(set(runtimes) - VALID_SCRIPT_RUNTIMES)
-                if invalid:
-                    raise ValidationError(
-                        f"Invalid runtimes {invalid} for script '{name}': "
-                        f"must be one of {sorted(VALID_SCRIPT_RUNTIMES)}"
-                    )
-
    @staticmethod
    def _try_correct_command_name(name: str, ext_id: str) -> Optional[str]:
        """Try to auto-correct a non-conforming command name to the required pattern.
@@ -710,16 +615,6 @@ class ExtensionManifest:
            return []
        return raw

-    @property
-    def templates(self) -> List[Dict[str, Any]]:
-        """Get list of declared templates (provides.templates)."""
-        return self.data.get("provides", {}).get("templates", [])
-
-    @property
-    def scripts(self) -> List[Dict[str, Any]]:
-        """Get list of declared scripts (provides.scripts)."""
-        return self.data.get("provides", {}).get("scripts", [])
-
    @property
    def hooks(self) -> Dict[str, Any]:
        """Get hook definitions."""
@@ -755,13 +650,6 @@ class ExtensionRegistry:
        if not self.registry_path.exists():
            return {"schema_version": self.SCHEMA_VERSION, "extensions": {}}

-        # A non-regular file (e.g. a directory at the registry path) is not a
-        # readable registry. Recover to empty so construction — used by the
-        # install/enable/disable flows — does not crash. Resolution paths that
-        # must fail closed consult is_corrupt() instead of relying on this.
-        if not self.registry_path.is_file():
-            return {"schema_version": self.SCHEMA_VERSION, "extensions": {}}
-
        try:
            with open(self.registry_path, "r", encoding="utf-8") as f:
                data = json.load(f)
@@ -772,47 +660,10 @@ class ExtensionRegistry:
            if not isinstance(data.get("extensions"), dict):
                data["extensions"] = {}
            return data
-        except (json.JSONDecodeError, UnicodeDecodeError, FileNotFoundError):
-            # Corrupted or missing registry, start fresh. A registry whose
-            # bytes cannot be decoded as UTF-8 is the same corruption class as
-            # malformed JSON — only the exception type differs, and it is
-            # raised by the text-mode read before JSON parsing begins. OSError
-            # is deliberately not caught: the data may be intact on disk, and
-            # starting fresh would let a later _save() wipe it.
+        except (json.JSONDecodeError, FileNotFoundError):
+            # Corrupted or missing registry, start fresh
            return {"schema_version": self.SCHEMA_VERSION, "extensions": {}}

-    def is_corrupt(self) -> bool:
-        """Report whether an existing registry file is present but unreadable.
-
-        ``_load`` deliberately recovers from a corrupt registry by normalizing
-        it to an empty mapping so install/enable/disable flows keep working.
-        Resolution paths, however, must fail closed: a corrupt registry that
-        normalizes to ``{}`` would otherwise cause every on-disk extension
-        directory to be admitted as an unregistered, enabled extension. This
-        probe lets those callers distinguish "no registry" (safe) from
-        "registry exists but is invalid" (unsafe) without changing recovery
-        behavior. An absent registry returns ``False``; a directory, broken
-        or dangling symlink, non-regular file, unreadable file, non-mapping
-        root, or non-mapping ``extensions`` value returns ``True``.
-        """
-        # os.path.lexists (not Path.exists) so a dangling symlink is detected
-        # rather than followed to a non-existent target and mistaken for an
-        # absent registry — which would reopen the fail-open directory scan.
-        if not os.path.lexists(self.registry_path):
-            return False
-        if not self.registry_path.is_file():
-            return True
-        try:
-            with open(self.registry_path, "r", encoding="utf-8") as f:
-                data = json.load(f)
-        except (json.JSONDecodeError, OSError, UnicodeDecodeError):
-            return True
-        if not isinstance(data, dict):
-            return True
-        if "extensions" in data and not isinstance(data["extensions"], dict):
-            return True
-        return False
-
    def _save(self):
        """Save registry to disk."""
        self.extensions_dir.mkdir(parents=True, exist_ok=True)
@@ -4459,10 +4310,11 @@ class ConfigManager:
        Returns an empty list if the registry is missing or corrupted
        (fresh project, ad-hoc test harness) so ``_get_env_config`` degrades
        to its pre-fix behaviour rather than crashing. ``UnicodeError`` is
-        kept alongside ``OSError`` as belt-and-braces: ``_load()`` now starts
-        fresh on non-UTF-8 registry bytes itself, but catching it here too
-        keeps this call site degrading gracefully rather than breaking *every*
-        config read if that handling ever regresses.
+        caught alongside ``OSError`` because ``ExtensionRegistry._load()``
+        opens the file in text mode and only handles ``JSONDecodeError`` /
+        ``FileNotFoundError``, so a registry file with non-UTF-8 bytes would
+        otherwise surface a ``UnicodeDecodeError`` here and break *every*
+        config read instead of degrading gracefully.

        Used by ``_get_env_config`` to detect env vars whose remainder claims
        a longer, sibling-owned prefix (e.g. ``SPECKIT_GIT_HOOKS_URL`` is
@@ -56,7 +56,6 @@ def _register_builtins() -> None:
    from .cline import ClineIntegration
    from .codebuddy import CodebuddyIntegration
    from .codex import CodexIntegration
-    from .command_code import CommandCodeIntegration
    from .copilot import CopilotIntegration
    from .cursor_agent import CursorAgentIntegration
    from .devin import DevinIntegration
@@ -96,7 +95,6 @@ def _register_builtins() -> None:
    _register(ClineIntegration())
    _register(CodebuddyIntegration())
    _register(CodexIntegration())
-    _register(CommandCodeIntegration())
    _register(CopilotIntegration())
    _register(CursorAgentIntegration())
    _register(DevinIntegration())
@@ -207,7 +207,7 @@ class IntegrationCatalog(CatalogStackBase):
                        max_bytes=MAX_JSON_METADATA_BYTES,
                        error_type=IntegrationCatalogError,
                        label=f"catalog from {entry.url}",
-                    ).decode("utf-8")
+                    )
                )

            shape_error = _catalog_shape_error(catalog_data)
@@ -237,15 +237,6 @@ class IntegrationCatalog(CatalogStackBase):
            raise IntegrationCatalogError(
                f"Failed to fetch catalog from {entry.url}: {exc}"
            )
-        except UnicodeDecodeError as exc:
-            # A non-UTF-8 response body fails at .decode() before json.loads()
-            # ever runs, so JSONDecodeError below does not cover it (the two are
-            # sibling ValueError subclasses, not parent/child). Without this the
-            # raw UnicodeDecodeError escapes _get_merged_integrations()'s
-            # "warn and skip this catalog" handler and kills the whole command.
-            raise IntegrationCatalogError(
-                f"Catalog from {entry.url} is not valid UTF-8: {exc}"
-            )
        except json.JSONDecodeError as exc:
            raise IntegrationCatalogError(
                f"Invalid JSON in catalog from {entry.url}: {exc}"
@@ -1,41 +0,0 @@
-"""Command Code integration — skills-based agent.
-
-Command Code loads agent skills from ``.commandcode/skills/speckit-<name>/SKILL.md``
-(project) or ``~/.commandcode/skills/`` (personal). Skills are invoked in chat
-with ``$speckit-<name>``.
-"""
-
-from __future__ import annotations
-
-from ..base import IntegrationOption, SkillsIntegration
-
-
-class CommandCodeIntegration(SkillsIntegration):
-    """Integration for Command Code CLI."""
-
-    key = "command-code"
-    config = {
-        "name": "Command Code",
-        "folder": ".commandcode/",
-        "commands_subdir": "skills",
-        "install_url": "https://commandcode.ai/docs",
-        "requires_cli": True,
-    }
-    registrar_config = {
-        "dir": ".commandcode/skills",
-        "format": "markdown",
-        "args": "$ARGUMENTS",
-        "extension": "/SKILL.md",
-    }
-    multi_install_safe = True
-
-    @classmethod
-    def options(cls) -> list[IntegrationOption]:
-        return [
-            IntegrationOption(
-                "--skills",
-                is_flag=True,
-                default=True,
-                help="Install as agent skills (default for Command Code)",
-            ),
-        ]
@@ -121,27 +121,13 @@ class HermesIntegration(SkillsIntegration):
            command_name = src_file.stem  # e.g. "plan"
            skill_name = f"speckit-{command_name.replace('.', '-')}"

-            # Parse frontmatter for description. Locate the closing ``---`` on
-            # its own line rather than with ``raw.split("---", 2)`` — a bare
-            # substring split stops at the first ``---`` *anywhere*, including
-            # one inside a value such as ``description: Separate sections
-            # with ---``, which truncates the frontmatter and drops later keys.
-            # The block between the delimiters is parsed unstripped so trailing
-            # newlines in literal (``|``) block scalars survive.
+            # Parse frontmatter for description
            frontmatter: dict[str, Any] = {}
            if raw.startswith("---"):
-                fm_lines = raw.splitlines(keepends=True)
-                fm_close = next(
-                    (
-                        i
-                        for i in range(1, len(fm_lines))
-                        if fm_lines[i].rstrip() == "---"
-                    ),
-                    None,
-                )
-                if fm_close is not None:
+                parts = raw.split("---", 2)
+                if len(parts) >= 3:
                    try:
-                        fm = yaml.safe_load("".join(fm_lines[1:fm_close]))
+                        fm = yaml.safe_load(parts[1])
                        if isinstance(fm, dict):
                            frontmatter = fm
                    except yaml.YAMLError:
@@ -157,26 +143,10 @@ class HermesIntegration(SkillsIntegration):
                project_root=project_root,
            )
            # Strip the processed frontmatter — we rebuild it for skills.
-            # Scan for the closing ``---`` on its own line rather than
-            # ``split("---", 2)`` so a ``---`` embedded in a value does not
-            # truncate the frontmatter and spill it into the body.
            if processed_body.startswith("---"):
-                body_lines = processed_body.splitlines(keepends=True)
-                close_idx = next(
-                    (
-                        i
-                        for i in range(1, len(body_lines))
-                        if body_lines[i].rstrip() == "---"
-                    ),
-                    None,
-                )
-                if close_idx is not None:
-                    # Keep whatever trails the ``---`` marker on the closing
-                    # line so the body stays byte-for-byte identical to
-                    # ``split("---", 2)[2]`` for well-formed templates.
-                    processed_body = body_lines[close_idx][3:] + "".join(
-                        body_lines[close_idx + 1 :]
-                    )
+                parts = processed_body.split("---", 2)
+                if len(parts) >= 3:
+                    processed_body = parts[2]

            # Select description
            description = frontmatter.get("description", "")
@@ -323,24 +323,14 @@ def _is_speckit_generated_skill(skill_dir: Path) -> bool:
    if not content.startswith("---"):
        return False

-    # Locate the closing ``---`` on its own line rather than with
-    # ``content.split("---", 2)`` — a bare substring split stops at the first
-    # ``---`` *anywhere*, including one inside a value such as
-    # ``description: Separate sections with ---``, which truncates the parsed
-    # frontmatter and can drop the metadata block this check relies on (so a
-    # Speckit-generated skill would not be recognized on teardown).
-    lines = content.splitlines(keepends=True)
-    close_idx = next(
-        (i for i in range(1, len(lines)) if lines[i].rstrip() == "---"),
-        None,
-    )
-    if close_idx is None:
+    parts = content.split("---", 2)
+    if len(parts) < 3:
        return False

    try:
        import yaml

-        frontmatter = yaml.safe_load("".join(lines[1:close_idx]))
+        frontmatter = yaml.safe_load(parts[1])
    except Exception:
        return False

@@ -451,7 +451,8 @@ class IntegrationManifest:
            _ensure_safe_manifest_destination(self.project_root, path)
            os.replace(temp_path, path)
        finally:
-            temp_path.unlink(missing_ok=True)
+            if temp_path.exists():
+                temp_path.unlink()
        return path

    @classmethod
@@ -56,7 +56,6 @@ from ..shared_infra import (


 _CONSTITUTION_PROVENANCE_FILE = ".constitution-template.json"
-_CONSTITUTION_SYNC_PRESET_ID = "constitution-sync"


 def _content_sha256(content: bytes) -> str:
@@ -179,7 +178,7 @@ def _substitute_core_template(
        by the core template body and core_frontmatter holds the core template's parsed
        frontmatter (so callers can inherit scripts/agent_scripts from it).  Both are
        unchanged / empty when the placeholder is absent or the core template file does
-        not exist or cannot be read.
+        not exist.
    """
    if "{CORE_TEMPLATE}" not in body:
        return body, {}
@@ -209,23 +208,7 @@ def _substitute_core_template(
    if core_file is None:
        return body, {}

-    # Treat an unreadable/undecodable core template like a missing one so a
-    # single corrupted project override cannot crash command registration —
-    # the wrap-strategy callers already skip an unreadable preset source with
-    # a warning (CommandRegistrar.register_pack).
-    try:
-        core_content = core_file.read_text(encoding="utf-8")
-    except (OSError, UnicodeDecodeError) as exc:
-        import warnings
-
-        warnings.warn(
-            f"Ignoring core template for command '{cmd_name}': could not read "
-            f"'{core_file.name}' ({exc.__class__.__name__}: {exc}).",
-            stacklevel=2,
-        )
-        return body, {}
-
-    core_frontmatter, core_body = registrar.parse_frontmatter(core_content)
+    core_frontmatter, core_body = registrar.parse_frontmatter(core_file.read_text(encoding="utf-8"))
    return body.replace("{CORE_TEMPLATE}", core_body), core_frontmatter


@@ -2760,7 +2743,7 @@ class PresetManager:
            if frontmatter.get("strategy") == "wrap":
                body, core_frontmatter = _substitute_core_template(body, cmd_name, self.project_root, registrar)
                frontmatter = dict(frontmatter)
-                for key in ("scripts", "agent_scripts", "argument-hint"):
+                for key in ("scripts", "agent_scripts"):
                    if key not in frontmatter and key in core_frontmatter:
                        frontmatter[key] = core_frontmatter[key]

@@ -3268,30 +3251,6 @@ class PresetManager:
            if source in owned_sources:
                shutil.rmtree(skill_subdir)

-    @staticmethod
-    def _warn_unrestored_skill(
-        skill_name: str, source_file: Path, exc: BaseException
-    ) -> None:
-        """Warn that a skill kept preset content because its restore source is unreadable.
-
-        Skipping the restore is the safe recovery — the alternative branch
-        deletes the skill outright — but it is still a partial removal: the
-        preset directory and registry entry go away while this ``SKILL.md``
-        keeps the removed preset's content, and reconciliation never revisits
-        it because the name is left out of ``mutated_names``. Name the skill
-        and the source so the condition is actionable instead of silent.
-        """
-        import warnings
-
-        warnings.warn(
-            f"Skill '{skill_name}' still contains the removed preset's content: "
-            f"its restore source '{source_file}' could not be read "
-            f"({exc.__class__.__name__}: {exc}). The skill was left in place "
-            f"rather than deleted. Fix or remove that file and re-run "
-            f"'specify preset add'/'specify preset remove' to refresh it.",
-            stacklevel=2,
-        )
-
    def _unregister_skills_in_dir(
        self,
        skill_names: List[str],
@@ -3418,20 +3377,8 @@ class PresetManager:
                core_file = None

            if core_file:
-                # Restore from core template. An unreadable/undecodable
-                # source cannot produce restored content, so leave the
-                # existing skill untouched rather than leaking a raw
-                # OSError/UnicodeDecodeError out of `preset remove` — and
-                # rather than falling through to the rmtree below, which
-                # would delete a skill precisely when its replacement
-                # cannot be generated. Matches the `continue` guards above
-                # (unsafe name, missing subdir, foreign owner), which also
-                # skip without recording the name as mutated.
-                try:
-                    content = core_file.read_text(encoding="utf-8")
-                except (OSError, UnicodeDecodeError) as exc:
-                    self._warn_unrestored_skill(skill_name, core_file, exc)
-                    continue
+                # Restore from core template
+                content = core_file.read_text(encoding="utf-8")
                frontmatter, body = registrar.parse_frontmatter(content)
                if isinstance(selected_ai, str):
                    body = registrar.resolve_skill_placeholders(
@@ -3472,16 +3419,7 @@ class PresetManager:
                continue

            if extension_restore:
-                # Same boundary as the core-template branch above: an
-                # unreadable extension source leaves the skill in place
-                # instead of crashing or being deleted.
-                try:
-                    content = extension_restore["source_file"].read_text(encoding="utf-8")
-                except (OSError, UnicodeDecodeError) as exc:
-                    self._warn_unrestored_skill(
-                        skill_name, extension_restore["source_file"], exc
-                    )
-                    continue
+                content = extension_restore["source_file"].read_text(encoding="utf-8")
                frontmatter, body = registrar.parse_frontmatter(content)
                # Mirror the register-time rewrite (#2101): resolve
                # extension-relative subdir references (agents/,
@@ -3648,10 +3586,13 @@ class PresetManager:
                    stacklevel=2,
                )

-        # Materialize constitution-template changes only for projects that opt
-        # into the constitution-sync preset. The core /constitution command
-        # resolves this template on demand; constitution-sync preserves the
-        # previous install-time behavior for teams that want reviewed snapshots.
+        # Seed/re-seed memory/constitution.md from a preset-provided
+        # constitution-template. The constitution is the only template that is
+        # materialized to a live file rather than resolved on demand, so a
+        # preset that ships one (e.g. strategy: replace with a ratified
+        # constitution) must be propagated here. Guard against clobbering an
+        # already-authored constitution by only replacing a file whose recorded
+        # hash (or exact legacy core-template content) proves it was generated.
        self._seed_constitution_from_preset(manifest, dest_dir)

        return manifest
@@ -3659,13 +3600,14 @@ class PresetManager:
    def _seed_constitution_from_preset(
        self, manifest: PresetManifest, preset_dir: Path
    ) -> None:
-        """Seed memory/constitution.md when constitution-sync opts into snapshots.
+        """Seed memory/constitution.md from a preset constitution-template.

-        Installing constitution-sync itself materializes the currently resolved
-        stack. Later preset installs only reconcile when they provide a
-        ``constitution-template``. Authored constitutions are never overwritten.
+        Only runs when the preset declares a ``type: template`` entry named
+        ``constitution-template`` or provides one at a convention path, and the
+        live memory file is either missing or is an unchanged generated file.
+        Authored constitutions are never overwritten.
        """
-        provides_constitution = manifest.id == _CONSTITUTION_SYNC_PRESET_ID or any(
+        provides_constitution = any(
            t.get("type") == "template" and t.get("name") == "constitution-template"
            for t in manifest.templates
        ) or any(
@@ -3686,7 +3628,7 @@ class PresetManager:
    def reconcile_constitution(
        self, failure_context: str, *, create_if_missing: bool = False
    ) -> None:
-        """Reconcile an opted-in generated constitution without failing a change."""
+        """Reconcile generated constitution content without failing a persisted change."""
        try:
            self._reconcile_constitution(create_if_missing=create_if_missing)
        except (OSError, UnicodeDecodeError, PresetValidationError, ValueError) as exc:
@@ -3698,11 +3640,7 @@ class PresetManager:
            )

    def _reconcile_constitution(self, *, create_if_missing: bool = False) -> None:
-        """Materialize the winning layer when constitution-sync is enabled."""
-        sync_metadata = self.registry.get(_CONSTITUTION_SYNC_PRESET_ID)
-        if sync_metadata is None or not sync_metadata.get("enabled", True):
-            return
-
+        """Materialize the winning constitution layer when the live file is generated."""
        memory_constitution = (
            self.project_root / ".specify" / "memory" / "constitution.md"
        )
@@ -5008,18 +4946,6 @@ class PresetResolver:
                self._manifest_cache[key] = None
        return self._manifest_cache[key]

-    @staticmethod
-    def _is_safe_registry_id(value: object) -> bool:
-        return isinstance(value, str) and re.fullmatch(r"[a-z0-9-]+", value) is not None
-
-    def _get_all_presets_by_priority(self) -> List[tuple[str, dict]]:
-        registry = PresetRegistry(self.presets_dir)
-        return [
-            (pack_id, metadata)
-            for pack_id, metadata in registry.list_by_priority()
-            if self._is_safe_registry_id(pack_id)
-        ]
-
    def _manifest_declared_template(
        self, pack_dir: Path, template_name: str, template_type: str
    ) -> tuple[dict | None, Path | None]:
@@ -5053,64 +4979,6 @@ class PresetResolver:
                return tmpl, None
        return None, None

-    def _extension_manifest_declared_template(
-        self, ext_dir: Path, template_name: str, template_type: str
-    ) -> tuple[dict | None, Path | None]:
-        """Resolve an extension's manifest-declared command/template/script entry and usable file.
-
-        Mirrors ``_manifest_declared_template`` (for presets): returns ``(entry, candidate)``
-        where ``entry`` is the matching ``provides.<type>`` mapping, or ``None`` if the
-        extension has no (valid) manifest or doesn't declare this ``(name, type)``.
-        ``candidate`` is the declared ``file:`` resolved under ``ext_dir`` IFF it is a
-        regular file that stays within ``ext_dir`` (guards against path traversal via a
-        malformed manifest, mirroring ``resolve_extension_command_via_manifest``);
-        ``None`` otherwise.
-
-        The manifest is authoritative: when ``entry`` is not ``None`` but ``candidate`` is
-        ``None``, callers must NOT fall back to convention-based lookup — that would mask
-        a typo or pick up an undeclared file. Shared by ``resolve()`` and
-        ``collect_all_layers()`` so their manifest-first resolution cannot silently
-        diverge (the divergence flagged in review on #4012).
-        """
-        if template_type not in ("command", "template", "script"):
-            return None, None
-        ext_manifest_path = ext_dir / "extension.yml"
-        if not ext_manifest_path.exists():
-            return None, None
-        from ..extensions import ExtensionManifest, ValidationError as ExtValidationError
-
-        try:
-            ext_manifest = ExtensionManifest(ext_manifest_path)
-        except (ExtValidationError, yaml.YAMLError, OSError, TypeError, AttributeError):
-            return None, None
-        if template_type == "command":
-            entries = ext_manifest.commands
-        elif template_type == "template":
-            entries = ext_manifest.templates
-        else:
-            entries = ext_manifest.scripts
-        for entry in entries:
-            if entry.get("name") != template_name:
-                continue
-            file_rel = entry.get("file")
-            if not file_rel:
-                return entry, None
-            rel_path = Path(file_rel)
-            if rel_path.is_absolute():
-                return entry, None
-            candidate = ext_dir / rel_path
-            try:
-                # Resolve only for the containment check, not for the
-                # returned path -- resolving the returned path would follow
-                # symlinks in ext_dir's ancestors (e.g. a symlinked tmp dir
-                # on macOS) and diverge from the unresolved paths convention
-                # lookup returns for the same directory.
-                candidate.resolve().relative_to(ext_dir.resolve())  # raises ValueError if outside
-            except (OSError, ValueError):
-                return entry, None
-            return entry, (candidate if candidate.is_file() else None)
-        return None, None
-
    def _get_all_extensions_by_priority(self) -> list[tuple[int, str, dict | None]]:
        """Build unified list of registered and unregistered extensions sorted by priority.

@@ -5125,16 +4993,6 @@ class PresetResolver:
            return []

        registry = ExtensionRegistry(self.extensions_dir)
-        # Fail closed on a corrupt registry. ExtensionRegistry._load() recovers
-        # by normalizing an unreadable registry to an empty mapping, which would
-        # otherwise cause the directory scan below to admit every on-disk
-        # directory as an unregistered, enabled extension — a fail-open path
-        # that could supply constitution content from an invalid registry state.
-        if registry.is_corrupt():
-            raise PresetValidationError(
-                f"Invalid extension registry {registry.registry_path}: "
-                "refusing to enumerate extensions"
-            )
        # Use keys() to track ALL extensions (including corrupted entries) without deep copy
        # This prevents corrupted entries from being picked up as "unregistered" dirs
        registered_extension_ids = registry.keys()
@@ -5146,8 +5004,6 @@ class PresetResolver:

        # Only include enabled extensions in the result
        for ext_id, metadata in all_registered:
-            if not self._is_safe_registry_id(ext_id):
-                continue
            # Skip disabled extensions
            if not metadata.get("enabled", True):
                continue
@@ -5156,7 +5012,7 @@ class PresetResolver:

        # Add unregistered directories with implicit priority=10
        for ext_dir in self.extensions_dir.iterdir():
-            if not ext_dir.is_dir() or not self._is_safe_registry_id(ext_dir.name):
+            if not ext_dir.is_dir() or ext_dir.name.startswith("."):
                continue
            if ext_dir.name not in registered_extension_ids:
                all_extensions.append((10, ext_dir.name, None))
@@ -5222,7 +5078,8 @@ class PresetResolver:

        # Priority 2: Installed presets (sorted by priority — lower number wins)
        if not skip_presets and self.presets_dir.exists():
-            for pack_id, _metadata in self._get_all_presets_by_priority():
+            registry = PresetRegistry(self.presets_dir)
+            for pack_id, _metadata in registry.list_by_priority():
                pack_dir = self.presets_dir / pack_id
                # The preset manifest is authoritative: if it declares this
                # template with an explicit ``file:``, resolve to that path —
@@ -5258,16 +5115,6 @@ class PresetResolver:
            ext_dir = self.extensions_dir / ext_id
            if not ext_dir.is_dir():
                continue
-            # The extension manifest is authoritative, same as preset manifests
-            # above: check it before convention-based lookup so a declared entry
-            # at a non-conventional path wins over a stale conventional file.
-            entry, manifest_candidate = self._extension_manifest_declared_template(
-                ext_dir, template_name, template_type
-            )
-            if manifest_candidate is not None:
-                return manifest_candidate
-            if entry is not None:
-                continue
            for subdir in subdirs:
                if subdir:
                    candidate = ext_dir / subdir / f"{template_name}{ext}"
@@ -5425,11 +5272,13 @@ class PresetResolver:
            return {"path": resolved_str, "source": "project override"}

        if str(self.presets_dir) in resolved_str and self.presets_dir.exists():
-            for pack_id, metadata in self._get_all_presets_by_priority():
+            registry = PresetRegistry(self.presets_dir)
+            for pack_id, _metadata in registry.list_by_priority():
                pack_dir = self.presets_dir / pack_id
                try:
                    resolved.relative_to(pack_dir)
-                    version = metadata.get("version", "?")
+                    meta = registry.get(pack_id)
+                    version = meta.get("version", "?") if meta else "?"
                    return {
                        "path": resolved_str,
                        "source": f"{pack_id} v{version}",
@@ -5515,7 +5364,8 @@ class PresetResolver:

        # Priority 2: Installed presets (sorted by priority — lower number = higher precedence)
        if self.presets_dir.exists():
-            for pack_id, metadata in self._get_all_presets_by_priority():
+            registry = PresetRegistry(self.presets_dir)
+            for pack_id, metadata in registry.list_by_priority():
                pack_dir = self.presets_dir / pack_id
                # Read strategy and manifest file path from preset manifest
                strategy = "replace"
@@ -5574,15 +5424,27 @@ class PresetResolver:
            ext_dir = self.extensions_dir / ext_id
            if not ext_dir.is_dir():
                continue
-            # The extension manifest is authoritative, same as preset manifests
-            # above: check it before convention-based lookup so a declared entry
-            # at a non-conventional path wins over a stale conventional file, and
-            # a declared-but-missing file isn't silently masked by convention.
-            entry, candidate = self._extension_manifest_declared_template(
-                ext_dir, template_name, template_type
-            )
-            if entry is None:
-                candidate = _find_in_subdirs(ext_dir)
+            # Try convention-based lookup first
+            candidate = _find_in_subdirs(ext_dir)
+            # If not found and this is a command, check extension manifest
+            if candidate is None and template_type == "command":
+                ext_manifest_path = ext_dir / "extension.yml"
+                if ext_manifest_path.exists():
+                    try:
+                        from ..extensions import ExtensionManifest, ValidationError as ExtValidationError
+                        ext_manifest = ExtensionManifest(ext_manifest_path)
+                        for cmd in ext_manifest.commands:
+                            if cmd.get("name") == template_name:
+                                cmd_file = cmd.get("file")
+                                if cmd_file:
+                                    c = ext_dir / cmd_file
+                                    if c.exists():
+                                        candidate = c
+                                break
+                    except (ExtValidationError, yaml.YAMLError):
+                        # Invalid extension manifest — fall back to
+                        # convention-based lookup (already attempted above).
+                        pass
            if candidate:
                if ext_meta:
                    version = ext_meta.get("version", "?")
@@ -5714,7 +5576,7 @@ class PresetResolver:
        if not layers:
            return None

-        def _read_layer_content(layer: Dict[str, Any]) -> Optional[str]:
+        def _read_layer_content(layer: Dict[str, Any]) -> str:
            """Read a layer's raw text, rewriting extension-relative subdir
            references (agents/, knowledge-base/, etc.) to their installed
            location when the layer is extension-provided (#2101).
@@ -5724,18 +5586,8 @@ class PresetResolver:
            rewrite when it wins outright above or serves as the
            composition base below — never as a mid-stack composing
            (append/prepend/wrap) layer.
-
-            Returns None when the layer cannot be read or decoded:
-            collect_all_layers deliberately keeps a non-UTF-8 legacy layer
-            (with its "replace" default) so unrelated commands still
-            resolve, so the same tolerance must apply here — the documented
-            contract is "Composed content string, or None if not found",
-            not a raw UnicodeDecodeError at composition time.
            """
-            try:
-                text = layer["path"].read_text(encoding="utf-8")
-            except (OSError, UnicodeDecodeError):
-                return None
+            text = layer["path"].read_text(encoding="utf-8")
            extension_id = layer.get("extension_id")
            extension_dir = layer.get("extension_dir")
            if extension_id and extension_dir:
@@ -5773,8 +5625,6 @@ class PresetResolver:
        # Convert to reversed_layers index
        base_reversed_idx = len(layers) - 1 - base_layer_idx
        content = _read_layer_content(layers[base_layer_idx])
-        if content is None:
-            return None
        # Compose only the layers above the base (higher priority = lower index in layers,
        # higher index in reversed_layers). Process bottom-up from base+1.
        start_idx = base_reversed_idx + 1
@@ -5818,12 +5668,7 @@ class PresetResolver:

        # Apply composition layers from bottom to top
        for layer in reversed_layers[start_idx:]:
-            try:
-                layer_content = layer["path"].read_text(encoding="utf-8")
-            except (OSError, UnicodeDecodeError):
-                # Same tolerance as _read_layer_content: an unreadable layer
-                # means the composed result cannot be produced.
-                return None
+            layer_content = layer["path"].read_text(encoding="utf-8")
            strategy = layer["strategy"]

            if is_command:
@@ -5880,7 +5725,7 @@ class PresetResolver:
            # Inherit scripts/agent_scripts from base frontmatter if missing
            if base_frontmatter_text and base_frontmatter_text != top_frontmatter_text:
                base_fm = _parse_fm_yaml(base_frontmatter_text)
-                for key in ("scripts", "agent_scripts", "argument-hint"):
+                for key in ("scripts", "agent_scripts"):
                    if key not in top_fm and key in base_fm:
                        top_fm[key] = base_fm[key]

@@ -9,7 +9,6 @@ keeps working.
 from __future__ import annotations

 import os
-import re
 from pathlib import Path

 import typer
@@ -353,26 +352,9 @@ def preset_resolve(
    from .. import _require_specify_project
    from . import PresetResolver

-    is_command = "." in template_name
-    valid_name = (
-        re.fullmatch(r"[a-z0-9-]+(?:\.[a-z0-9-]+)+", template_name)
-        if is_command
-        else re.fullmatch(r"[a-z0-9-]+", template_name)
-    )
-    if valid_name is None:
-        typer.echo(
-            f"Error: invalid template name '{template_name}'; "
-            "use lowercase letters, digits, and hyphens, with non-empty "
-            "dot-separated segments for commands",
-            err=True,
-        )
-        raise typer.Exit(1)
-
    project_root = _require_specify_project()
    resolver = PresetResolver(project_root)
-    template_type = "command" if is_command else "template"
-
-    layers = resolver.collect_all_layers(template_name, template_type)
+    layers = resolver.collect_all_layers(template_name)
    safe_template_name = _escape_markup(str(template_name))

    if layers:
@@ -395,7 +377,7 @@ def preset_resolve(
        if has_composition:
            # Verify composition is actually possible
            try:
-                composed = resolver.resolve_content(template_name, template_type)
+                composed = resolver.resolve_content(template_name)
            except Exception as exc:
                composed = None
                console.print(
@@ -434,7 +416,7 @@ def preset_resolve(
                )
    else:
        # No layers found — fall back to resolve_with_source for non-composition cases
-        result = resolver.resolve_with_source(template_name, template_type)
+        result = resolver.resolve_with_source(template_name)
        if result:
            console.print(
                f"  [bold]{safe_template_name}[/bold]: "
@@ -818,8 +800,8 @@ def preset_catalog_remove(

    try:
        config = yaml.safe_load(config_path.read_text(encoding="utf-8")) or {}
-    except Exception as e:
-        console.print(f"[red]Error:[/red] Failed to read preset catalog config: {e}")
+    except Exception:
+        console.print("[red]Error:[/red] Failed to read preset catalog config.")
        raise typer.Exit(1)

    catalogs = config.get("catalogs", [])
@@ -16,22 +16,6 @@ from .integrations.manifest import IntegrationManifest

 logger = logging.getLogger(__name__)

-# Managed ``.specify/.gitignore``. Keeps machine-local Spec Kit state out of
-# version control while leaving shareable project files (specs, constitution,
-# templates, scripts, extension config) tracked. Patterns are relative to the
-# ``.specify/`` directory the file lives in.
-SPECIFY_GITIGNORE_CONTENT = """\
-# Machine-local Spec Kit state — not meant to be shared.
-# Managed by the Specify CLI; safe to edit (your changes are preserved on refresh).
-
-# Local pointer to the current feature directory. Rewritten every time you
-# switch features, so it is per-checkout state rather than something to share.
-feature.json
-
-# Per-machine extension config overrides.
-extensions/*/local-config.yml
-"""
-
 # Matches a SHA-256 digest in its normalized form: exactly 64 hexadecimal
 # characters. Callers lowercase the declared value before matching (see
 # ``expected_hex = raw.lower()`` below), so an uppercase digest is accepted and
@@ -278,7 +262,8 @@ def _write_shared_bytes(
        _ensure_safe_shared_destination(project_path, dest)
        os.replace(temp_path, dest)
    finally:
-        temp_path.unlink(missing_ok=True)
+        if temp_path.exists():
+            temp_path.unlink()


 _BASH_FORMAT_COMMAND_RE = re.compile(
@@ -623,36 +608,6 @@ def install_shared_infra(
                )
                planned_templates.append((dst, rel, content))

-    # Managed ``.specify/.gitignore`` — keeps machine-local state (the
-    # ``feature.json`` pointer and per-machine ``local-config.yml`` overrides)
-    # out of git while leaving everything else shareable. Routed through the
-    # same overwrite/skip/preserve policy as templates so ``--force`` refreshes
-    # it and user edits are preserved. Like every other shared-infra file it is
-    # tracked in ``speckit.manifest.json`` (not the per-integration manifest) and
-    # is therefore intentionally left in place by ``integration uninstall``.
-    specify_dir = project_path / ".specify"
-    if _ensure_or_bucket_dir(specify_dir):
-        gitignore_dst = specify_dir / ".gitignore"
-        gitignore_rel = gitignore_dst.relative_to(project_path).as_posix()
-        seen_rels.add(gitignore_rel)
-        if _safe_dest_or_bucket(gitignore_dst, gitignore_rel):
-            write, bucket = _decide_overwrite(gitignore_rel, gitignore_dst)
-            if write:
-                planned_templates.append(
-                    (gitignore_dst, gitignore_rel, SPECIFY_GITIGNORE_CONTENT)
-                )
-            elif bucket == "preserved":
-                preserved_user_files.append(gitignore_rel)
-            else:
-                skipped_files.append(gitignore_rel)
-                if gitignore_dst.is_file() and gitignore_rel not in prior_hashes:
-                    try:
-                        manifest.record_existing(gitignore_rel, recovered=True)
-                    except (OSError, ValueError) as exc:
-                        console.print(
-                            f"[yellow]⚠[/yellow]  could not record {gitignore_rel} in manifest: {exc}"
-                        )
-
    for dst_path, rel, content, mode in planned_copies:
        if not _ensure_or_bucket_dir(dst_path.parent):
            continue
@@ -1594,12 +1594,6 @@ def workflow_status(
        except ValueError as exc:
            err.print(f"[red]Error:[/red] {_escape_markup(str(exc))}")
            raise typer.Exit(1)
-        except OSError as exc:
-            # An unreadable state.json (bad permissions, a directory in its
-            # place, I/O error) must fail as cleanly as the malformed-JSON
-            # case above -- `workflow resume` already handles OSError here.
-            err.print(f"[red]Error:[/red] {_escape_markup(str(exc))}")
-            raise typer.Exit(1)

        if json_output:
            # Build on the shared run/resume payload so the common fields
@@ -671,20 +671,8 @@ def evaluate_condition(condition: str, context: Any) -> bool:
    result = evaluate_expression(condition, context)
    # Treat plain "false"/"true" strings as booleans so that
    # condition: "false" (without {{ }}) behaves as expected.
-    #
-    # Strip before matching: the string a condition resolves to is most often
-    # captured command output, and a ``shell`` step stores ``proc.stdout``
-    # verbatim, so ``run: echo false`` resolves to ``"false\n"``. Without the
-    # strip that trailing newline matches neither branch and falls through to
-    # ``bool("false\n")`` -> True, silently taking an ``if`` step's ``then``
-    # branch (and keeping a ``while``/``do-while`` looping) on a step that
-    # printed "false". A workflow cannot strip it itself -- the registered
-    # filters are default/join/map/contains/from_json, there is no ``trim``.
-    # ``InitStep._resolve_bool`` and the catalog readers already strip before
-    # matching boolean text. ``bool(result)`` below still sees the raw string,
-    # so no non-boolean text changes truthiness.
    if isinstance(result, str):
-        lower = result.strip().lower()
+        lower = result.lower()
        if lower == "false":
            return False
        if lower == "true":
@@ -87,12 +87,7 @@ def _parse_edit(edit_raw: dict[str, Any], idx: int) -> tuple[OverlayEdit | None,
    else:
        return None, f"Edit at index {idx} has no operation; expected one of {sorted(VALID_OPERATIONS)}."

-    # ``operation`` comes straight from hand-edited YAML, so it may be an
-    # unhashable mapping/sequence (``operation: {insert_after: a}`` when the
-    # shorthand form is nested by mistake). Membership-testing an unhashable
-    # value against the frozenset raises TypeError, which would escape this
-    # never-raising validator; check the type first, like 'anchor' below.
-    if not isinstance(operation, str) or operation not in VALID_OPERATIONS:
+    if operation not in VALID_OPERATIONS:
        return None, f"Edit at index {idx} has invalid operation {operation!r}."

    if not isinstance(anchor, str) or not anchor:
@@ -1,9 +1,9 @@
 ---
 description: Generate a custom checklist for the current feature based on user requirements.
 scripts:
-  sh: scripts/bash/check-prerequisites.sh --json --template checklist-template
-  ps: scripts/powershell/check-prerequisites.ps1 -Json -Template checklist-template
-  py: scripts/python/check_prerequisites.py --json --template checklist-template
+  sh: scripts/bash/check-prerequisites.sh --json
+  ps: scripts/powershell/check-prerequisites.ps1 -Json
+  py: scripts/python/check_prerequisites.py --json
 ---

 ## Checklist Purpose: "Unit Tests for English"
@@ -72,7 +72,7 @@ You **MUST** consider the user input before proceeding (if not empty).

 ## Execution Steps

-1. **Setup**: Run `{SCRIPT}` from repo root and parse JSON for FEATURE_DIR, AVAILABLE_DOCS list, and TEMPLATE_CONTENT.
+1. **Setup**: Run `{SCRIPT}` from repo root and parse JSON for FEATURE_DIR and AVAILABLE_DOCS list.
   - All file paths must be absolute.
   - For single quotes in args like "I'm Groot", use escape syntax: e.g 'I'\''m Groot' (or double-quote if possible: "I'm Groot").

@@ -127,7 +127,7 @@ You **MUST** consider the user input before proceeding (if not empty).
   - Use progressive disclosure: add follow-on retrieval only if gaps detected
   - If source docs are large, generate interim summary items instead of embedding raw text

-6. **Generate checklist** - Use TEMPLATE_CONTENT as the structural template and create "Unit Tests for Requirements":
+6. **Generate checklist** - Create "Unit Tests for Requirements":
   - Create `FEATURE_DIR/checklists/` directory if it doesn't exist
   - Generate unique checklist filename:
     - Use short, descriptive name based on domain (e.g., `ux.md`, `api.md`, `security.md`)
@@ -4,10 +4,6 @@ handoffs:
  - label: Build Specification
    agent: speckit.specify
    prompt: Implement the feature specification based on the updated constitution. I want to build...
-scripts:
-  sh: scripts/bash/resolve-template.sh constitution-template --json
-  ps: scripts/powershell/resolve-template.ps1 constitution-template -Json
-  py: scripts/python/resolve_template.py constitution-template --json
 ---

 ## User Input
@@ -74,22 +70,13 @@ and commands read the constitution at runtime and are not modified here.

 ## Outline

-You are updating the project constitution at `.specify/memory/constitution.md`. The active
-constitution scaffold is resolved at command time from `constitution-template` through the Spec Kit
-preset/template resolution stack.
+You are updating the project constitution at `.specify/memory/constitution.md`. This file is a TEMPLATE containing placeholder tokens in square brackets (e.g. `[PROJECT_NAME]`, `[PRINCIPLE_1_NAME]`). Your job is to (a) collect/derive concrete values and (b) fill the template precisely.
+
+**Note**: If `.specify/memory/constitution.md` does not exist yet, it should have been initialized from `.specify/templates/constitution-template.md` during project setup. If it's missing, copy the template first.

 Follow this execution flow:

-1. Run `{SCRIPT}` from the repository root and parse `TEMPLATE_CONTENT` as the active template.
-   - The shared resolver applies project overrides, composing preset layers, and extension layers
-     before the core template fallback. It MUST succeed before continuing.
-   - If it fails, stop and report the resolution error; do not continue with only one contributing
-     template layer.
-   - If `.specify/memory/constitution.md` exists, load it as the source of current project-specific
-     values and amendments. Preserve information that is still applicable when applying the newly
-     resolved scaffold.
-   - If it does not exist, use the resolved template as the initial document.
-   - Do not write back to any versioned template layer.
+1. Load the existing constitution at `.specify/memory/constitution.md`.
   - Identify every placeholder token of the form `[ALL_CAPS_IDENTIFIER]`.
   **IMPORTANT**: The user might require less or more principles than the ones used in the template. If a number is specified, respect that - follow the general template. You will update the doc accordingly.

@@ -103,7 +90,7 @@ Follow this execution flow:
     - PATCH: Clarifications, wording, typo fixes, non-semantic refinements.
   - If version bump type ambiguous, propose reasoning before finalizing.

-3. Draft the updated constitution content using the resolved template as the required structure:
+3. Draft the updated constitution content:
   - Replace every placeholder with concrete text (no bracketed tokens left except intentionally retained template slots that the project has chosen not to define yet—explicitly justify any left).
   - Preserve heading hierarchy and comments can be removed once replaced unless they still add clarifying guidance.
   - Ensure each Principle section: succinct name line, paragraph (or bullet list) capturing non‑negotiable rules, explicit rationale if not obvious.
@@ -141,7 +128,7 @@ If the user supplies partial updates (e.g., only one principle revision), still

 If critical info missing (e.g., ratification date truly unknown), insert `TODO(<FIELD_NAME>): explanation` and include in the Sync Impact Report under deferred items.

-Write only `.specify/memory/constitution.md`; do not create or modify template source files.
+Do not create a new template; always operate on the existing `.specify/memory/constitution.md` file.

 ## Post-Execution Checks

@@ -60,7 +60,7 @@ You **MUST** consider the user input before proceeding (if not empty).

 ## Outline

-1. **Setup**: Run `{SCRIPT}` from repo root and parse FEATURE_DIR, TASKS_TEMPLATE_CONTENT, TASKS_TEMPLATE, and AVAILABLE_DOCS list. `FEATURE_DIR` and `TASKS_TEMPLATE` must be absolute paths when provided. `AVAILABLE_DOCS` is a list of document names/relative paths available under `FEATURE_DIR` (for example `research.md` or `contracts/`). For single quotes in args like "I'm Groot", use escape syntax: e.g 'I'\''m Groot' (or double-quote if possible: "I'm Groot").
+1. **Setup**: Run `{SCRIPT}` from repo root and parse FEATURE_DIR, TASKS_TEMPLATE, and AVAILABLE_DOCS list. `FEATURE_DIR` and `TASKS_TEMPLATE` must be absolute paths when provided. `AVAILABLE_DOCS` is a list of document names/relative paths available under `FEATURE_DIR` (for example `research.md` or `contracts/`). For single quotes in args like "I'm Groot", use escape syntax: e.g 'I'\''m Groot' (or double-quote if possible: "I'm Groot").

 2. **Load design documents**: Read from FEATURE_DIR:
   - **Required**: plan.md (tech stack, libraries, structure), spec.md (user stories with priorities)
@@ -79,7 +79,7 @@ You **MUST** consider the user input before proceeding (if not empty).
   - Create parallel execution examples per user story
   - Validate task completeness (each user story has all needed tasks, independently testable)

-4. **Generate tasks.md**: Use TASKS_TEMPLATE_CONTENT (from the JSON output above) as the structure. For compatibility with older setup scripts that omit TASKS_TEMPLATE_CONTENT, read TASKS_TEMPLATE instead. Fill with:
+4. **Generate tasks.md**: Read the tasks template from TASKS_TEMPLATE (from the JSON output above) and use it as structure. If TASKS_TEMPLATE is empty, fall back to `.specify/templates/tasks-template.md`. Fill with:
   - Correct feature name from plan.md
   - Phase 1: Setup tasks (project initialization)
   - Phase 2: Foundational tasks (blocking prerequisites for all user stories)
@@ -217,31 +217,6 @@ def test_catalog_remove_builtin_is_refused(project: Path):
    assert "built-in" in result.output


-# Every ``bundle`` error path funnels through ``_fail(str(exc))``, and the
-# BundlerError messages interpolate untrusted data -- including the command's
-# own argument. An unbalanced closer used to raise MarkupError instead of the
-# error, leaving the user with a traceback and no message at all.
-@pytest.mark.parametrize(
-    "argv, expected",
-    [
-        (
-            ["bundle", "catalog", "add", "ssh://ex[/red]ample.com/c.json"],
-            "ssh://ex[/red]ample.com/c.json",
-        ),
-        (["bundle", "catalog", "remove", "no[/red]such"], "no[/red]such"),
-        (["bundle", "update", "no[/red]such"], "no[/red]such"),
-        (["bundle", "remove", "no[/red]such"], "no[/red]such"),
-    ],
-)
-def test_error_paths_escape_rich_markup(project: Path, argv: list, expected: str):
-    result = runner.invoke(app, argv)
-
-    assert result.exit_code == 1
-    # A MarkupError would surface here as an exception rather than a clean exit.
-    assert isinstance(result.exception, SystemExit)
-    assert expected in strip_ansi(result.output)
-
-
 def test_validate_reports_invalid_manifest(project: Path):
    data = valid_manifest_dict()
    del data["bundle"]["license"]
@@ -262,33 +237,6 @@ def test_validate_accepts_valid_manifest(project: Path):
    assert "valid" in result.output


-def test_validate_escapes_manifest_markup_in_errors(project: Path):
-    data = valid_manifest_dict()
-    # An invalid constraint is echoed back inside the validation error.
-    data["requires"] = {"speckit_version": ">=1.0[/bold]"}
-    (project / "bundle.yml").write_text(yaml.safe_dump(data), encoding="utf-8")
-
-    result = runner.invoke(app, ["bundle", "validate", "--offline"])
-
-    assert result.exit_code == 1
-    assert isinstance(result.exception, SystemExit)
-    assert ">=1.0[/bold]" in strip_ansi(result.output)
-
-
-def test_validate_escapes_manifest_markup_in_warnings(project: Path):
-    data = valid_manifest_dict()
-    # Step ids are not charset-validated, and the unresolved-reference warning
-    # echoes them -- so an otherwise *valid* manifest crashed just as readily as
-    # an invalid one, on the success path.
-    data["provides"]["steps"] = [{"id": "step[/bold]a"}]
-    (project / "bundle.yml").write_text(yaml.safe_dump(data), encoding="utf-8")
-
-    result = runner.invoke(app, ["bundle", "validate", "--offline"])
-
-    assert result.exit_code == 0, repr(result.exception)
-    assert "step[/bold]a" in strip_ansi(result.output)
-
-
 def test_validate_rejects_broken_reference(project: Path):
    # Synthetic component ids resolve to nothing in any catalog → hard failure.
    (project / "bundle.yml").write_text(
@@ -319,65 +267,6 @@ def test_build_produces_artifact(project: Path):
    assert len(artifacts) == 1


-def test_build_escapes_markup_in_output_path(project: Path):
-    """The build success line echoes a caller-supplied ``--output`` path.
-
-    Brackets are legal in a directory name on both POSIX and Windows, so the
-    artifact is built and *then* misreported: ``[bold]`` is consumed as a style
-    tag, and the success line names a path that does not exist on disk.
-
-    A closing tag (``[/red]``) would raise MarkupError outright, but ``/`` is a
-    path separator on Windows, so this uses the silent-swallow form to keep the
-    fixture portable.
-    """
-    (project / "bundle.yml").write_text(
-        yaml.safe_dump(valid_manifest_dict()), encoding="utf-8"
-    )
-    (project / "README.md").write_text("# Demo", encoding="utf-8")
-    out_dir = project / "dist[bold]out"
-
-    result = runner.invoke(app, ["bundle", "build", "--output", str(out_dir)])
-
-    assert result.exit_code == 0, repr(result.exception)
-    assert list(out_dir.glob("*.zip")), "the artifact should still be built"
-    assert "dist[bold]out" in strip_ansi(result.output), (
-        "the reported path must match the directory actually written"
-    )
-
-
-def test_list_escapes_markup_in_records(project: Path):
-    """``bundle list`` renders record fields that are never charset-validated.
-
-    ``InstalledBundleRecord.from_dict`` accepts any non-empty string for
-    ``bundle_id``/``version`` and any string for ``installed_at``, so a records
-    file that *loads cleanly* could still crash the command that displays it.
-    """
-    (project / ".specify" / "bundle-records.json").write_text(
-        json.dumps(
-            {
-                "schema_version": "1.0",
-                "bundles": [
-                    {
-                        "bundle_id": "demo[/red]id",
-                        "version": "1.0.0[/bold]",
-                        "installed_at": "2026-01-01T00:00:00Z[/dim]",
-                        "contributed_components": [],
-                    }
-                ],
-            }
-        ),
-        encoding="utf-8",
-    )
-
-    result = runner.invoke(app, ["bundle", "list"])
-
-    assert result.exit_code == 0, repr(result.exception)
-    output = strip_ansi(result.output)
-    assert "demo[/red]id" in output
-    assert "1.0.0[/bold]" in output
-    assert "2026-01-01T00:00:00Z[/dim]" in output
-
-
 def _mock_manifest_download(monkeypatch, source_path: Path) -> None:
    """Mock the HTTPS manifest fetch to return a locally-authored manifest.

@@ -222,6 +222,32 @@ def test_python_custom_markers_matching_bash(tmp_path: Path) -> None:
    assert "old" not in content


+@requires_posix_bash
+def test_python_blank_markers_use_defaults_matching_bash(tmp_path: Path) -> None:
+    # Regression: with blank markers (config relying on the built-in defaults),
+    # the Bash port must fall back to DEFAULT_START/END, matching the Python and
+    # PowerShell ports. Previously the Bash config-parser transport dropped the
+    # trailing empty marker lines under $(...) command substitution, tripping the
+    # "malformed config parser output" guard so the default-marker substitution
+    # became unreachable and the context file was never updated.
+    markers = {"start": "", "end": ""}
+    repo_a, repo_b = twin_projects(
+        tmp_path, context_file="AGENTS.md", context_markers=markers
+    )
+    add_plan(repo_a)
+    add_plan(repo_b)
+
+    bash = run_bash(repo_a)
+    py = run_python(repo_b)
+
+    assert_parity(bash, py, repo_a, repo_b)
+    content = (repo_b / "AGENTS.md").read_bytes()
+    assert content == (repo_a / "AGENTS.md").read_bytes()
+    assert b"<!-- SPECKIT START -->" in content
+    assert b"<!-- SPECKIT END -->" in content
+    assert b"at specs/001-demo/plan.md" in content
+
+
@requires_posix_bash
 def test_python_multiple_context_files_dedup_matching_bash(tmp_path: Path) -> None:
    files = ["AGENTS.md", "docs/CONTEXT.md", "AGENTS.md"]
@@ -318,19 +344,14 @@ def test_python_mtime_fallback_matching_bash(tmp_path: Path) -> None:


@requires_posix_bash
-def test_python_mtime_fallback_finds_nested_plan_matching_bash(
-    tmp_path: Path,
-) -> None:
-    """The mtime fallback must recurse into scoped layouts.
-
-    A plan created under specs/<scope>/<feature>/plan.md (as produced via
-    SPECIFY_FEATURE_DIRECTORY) is more than one level below specs/. The old
-    Python port used a one-level specs/*/plan.md glob and missed it, while the
-    bash/PowerShell twins recurse (#3024). This locks in the parity.
-    """
+def test_python_mtime_fallback_finds_nested_plan_matching_bash(tmp_path: Path) -> None:
+    # Regression: the mtime fallback must discover plan.md in nested scoped
+    # layouts (specs/<scope>/<feature>/plan.md), matching the Bash/PowerShell
+    # ports and the documented recursive-discovery contract (see #3024). A
+    # one-level scan (specs/*/plan.md) would miss this and omit the plan link.
    repo_a, repo_b = twin_projects(tmp_path, context_file="AGENTS.md")
    for repo in (repo_a, repo_b):
-        plan = repo / "specs" / "backend" / "001-nested" / "plan.md"
+        plan = repo / "specs" / "scope-a" / "002-nested" / "plan.md"
        plan.parent.mkdir(parents=True, exist_ok=True)
        plan.write_text("# plan\n", encoding="utf-8")

@@ -340,39 +361,7 @@ def test_python_mtime_fallback_finds_nested_plan_matching_bash(
    assert_parity(bash, py, repo_a, repo_b)
    content = (repo_b / "AGENTS.md").read_bytes()
    assert content == (repo_a / "AGENTS.md").read_bytes()
-    assert b"at specs/backend/001-nested/plan.md" in content
-
-
-@requires_posix_bash
-def test_python_mtime_fallback_skips_plan_reached_through_escaping_symlink(
-    tmp_path: Path,
-) -> None:
-    """A plan reached via a specs/ symlink out of the project is not selected.
-
-    ``relative_to()`` is lexical, so ``specs/linked/001-x/plan.md`` looks
-    in-project even when ``specs/linked`` points outside the tree. Resolving
-    before the containment check rejects it, so the fallback finds nothing and
-    the ``at <plan>`` line is omitted rather than naming an out-of-project file
-    with an in-project-looking path. Mirrors the bash twin's ``_resolved_rel``.
-    """
-    repo_a, repo_b = twin_projects(tmp_path, context_file="AGENTS.md")
-    for repo in (repo_a, repo_b):
-        outside = repo.parent / f"outside-{repo.name}" / "001-x"
-        outside.mkdir(parents=True, exist_ok=True)
-        (outside / "plan.md").write_text("# plan\n", encoding="utf-8")
-        specs = repo / "specs"
-        specs.mkdir(parents=True, exist_ok=True)
-        (specs / "linked").symlink_to(outside.parent, target_is_directory=True)
-        # Sanity: the plan really is reachable through the symlink.
-        assert (specs / "linked" / "001-x" / "plan.md").is_file()
-
-    bash = run_bash(repo_a)
-    py = run_python(repo_b)
-
-    assert_parity(bash, py, repo_a, repo_b)
-    content = (repo_b / "AGENTS.md").read_bytes()
-    assert content == (repo_a / "AGENTS.md").read_bytes()
-    assert b"\nat " not in content
+    assert b"at specs/scope-a/002-nested/plan.md" in content


@requires_posix_bash
@@ -519,31 +508,6 @@ def test_python_fresh_context_file_matches_powershell(tmp_path: Path) -> None:
    assert (repo_a / "AGENTS.md").read_bytes() == (repo_b / "AGENTS.md").read_bytes()


-@pytest.mark.skipif(not POWERSHELL, reason="no PowerShell available")
-def test_python_mtime_fallback_finds_nested_plan_matches_powershell(
-    tmp_path: Path,
-) -> None:
-    """Python's mtime fallback must recurse like the PowerShell twin.
-
-    With no feature.json, discovery falls back to scanning under specs/. A plan
-    at specs/<scope>/<feature>/plan.md sits more than one level deep; the old
-    Python one-level glob missed it while PowerShell already recurses (#3024).
-    """
-    repo_a = make_project(tmp_path / "proj-ps", context_file="AGENTS.md")
-    repo_b = make_project(tmp_path / "proj-py", context_file="AGENTS.md")
-    for repo in (repo_a, repo_b):
-        plan = repo / "specs" / "backend" / "001-nested" / "plan.md"
-        plan.parent.mkdir(parents=True, exist_ok=True)
-        plan.write_text("# plan\n", encoding="utf-8")
-
-    ps = run_powershell(repo_a)
-    py = run_python(repo_b)
-
-    assert ps.returncode == py.returncode == 0, ps.stderr + py.stderr
-    assert (repo_a / "AGENTS.md").read_bytes() == (repo_b / "AGENTS.md").read_bytes()
-    assert b"at specs/backend/001-nested/plan.md" in (repo_b / "AGENTS.md").read_bytes()
-
-
@pytest.mark.skipif(not POWERSHELL, reason="no PowerShell available")
 def test_python_upsert_matches_powershell(tmp_path: Path) -> None:
    repo_a = make_project(tmp_path / "proj-ps", context_file="AGENTS.md")
@@ -186,50 +186,6 @@ def test_local_zip_uses_bounded_archive_open(tmp_path: Path):
        _local_manifest_source(str(artifact))


-def test_local_zip_wraps_malformed_manifest_yaml(tmp_path: Path):
-    """A malformed bundle.yml inside a .zip must raise BundlerError.
-
-    The zip branch parses YAML inline rather than through load_yaml(), so the
-    raw yaml.YAMLError used to escape. It is neither a ValueError nor an
-    OSError, so nothing upstream caught it.
-    """
-    artifact = tmp_path / "bad-manifest.zip"
-    with zipfile.ZipFile(artifact, "w") as archive:
-        archive.writestr("bundle.yml", "bundle: [unclosed\n  id: demo\n")
-
-    with pytest.raises(BundlerError, match="Invalid YAML"):
-        _local_manifest_source(str(artifact))
-
-
-def test_malformed_manifest_yaml_fails_alike_for_every_local_source(tmp_path: Path):
-    """`bundle install` reports malformed YAML the same way for all 3 sources.
-
-    Directory and bundle.yml sources already exited 1 with an "Invalid YAML"
-    message; the .zip source dumped a yaml.parser.ParserError traceback.
-    """
-    bad_yaml = "bundle: [unclosed\n  id: demo\n"
-
-    directory = tmp_path / "dir-src"
-    directory.mkdir()
-    (directory / "bundle.yml").write_text(bad_yaml, encoding="utf-8")
-
-    manifest_file = tmp_path / "standalone.yml"
-    manifest_file.write_text(bad_yaml, encoding="utf-8")
-
-    artifact = tmp_path / "artifact.zip"
-    with zipfile.ZipFile(artifact, "w") as archive:
-        archive.writestr("bundle.yml", bad_yaml)
-
-    runner = CliRunner()
-    for source in (directory, manifest_file, artifact):
-        result = runner.invoke(app, ["bundle", "install", str(source)])
-        assert result.exit_code == 1, f"{source.name}: {result.output}"
-        assert result.exception is None or isinstance(
-            result.exception, SystemExit
-        ), f"{source.name} leaked {type(result.exception).__name__}"
-        assert "Invalid YAML" in result.output, f"{source.name}: {result.output}"
-
-
 def test_invalid_local_manifest_is_rejected_before_project_init(
    tmp_path: Path,
    monkeypatch,
@@ -1067,99 +1067,6 @@ class TestInitIntegrationFlag:
        assert "not updated" in result.output


-    def test_init_here_force_reapplies_installed_presets(self, tmp_path, monkeypatch):
-        """Regression for #3990: init --here --force must call _register_presets_for_agent
-        after setup() so preset-composed files are not silently reverted to core."""
-        from unittest.mock import MagicMock, patch
-
-        from typer.testing import CliRunner
-
-        from specify_cli import app
-
-        project = tmp_path / "force-preset-reapply"
-        project.mkdir()
-
-        old_cwd = os.getcwd()
-        try:
-            os.chdir(project)
-            runner = CliRunner()
-
-            # First init to create a valid project structure.
-            result = runner.invoke(app, [
-                "init", "--here", "--force",
-                "--integration", "claude",
-                "--script", "sh",
-                "--ignore-agent-tools",
-            ], catch_exceptions=False)
-            assert result.exit_code == 0, result.output
-
-            # Second init --here --force: verify _register_presets_for_agent is called.
-            # Patch at the source module since init.py does a lazy import of these functions.
-            mock_presets = MagicMock()
-            mock_extensions = MagicMock()
-            with (
-                patch(
-                    "specify_cli.integrations._helpers._register_presets_for_agent",
-                    mock_presets,
-                ),
-                patch(
-                    "specify_cli.integrations._helpers._register_extensions_for_agent",
-                    mock_extensions,
-                ),
-            ):
-                result2 = runner.invoke(app, [
-                    "init", "--here", "--force",
-                    "--integration", "claude",
-                    "--script", "sh",
-                    "--ignore-agent-tools",
-                ], catch_exceptions=False)
-        finally:
-            os.chdir(old_cwd)
-
-        assert result2.exit_code == 0, result2.output
-        assert mock_presets.called, (
-            "_register_presets_for_agent was not called during init --here --force"
-        )
-        assert mock_extensions.called, (
-            "_register_extensions_for_agent was not called during init --here --force"
-        )
-
-    def test_init_here_without_force_does_not_reapply_presets(self, tmp_path):
-        """Without --force (fresh project), _register_presets_for_agent should NOT be called."""
-        from unittest.mock import MagicMock, patch
-
-        from typer.testing import CliRunner
-
-        from specify_cli import app
-
-        project = tmp_path / "no-force-preset"
-        project.mkdir()
-
-        old_cwd = os.getcwd()
-        try:
-            os.chdir(project)
-            runner = CliRunner()
-            mock_presets = MagicMock()
-            with patch(
-                "specify_cli.integrations._helpers._register_presets_for_agent",
-                mock_presets,
-            ):
-                result = runner.invoke(app, [
-                    "init", "--here",
-                    "--integration", "claude",
-                    "--script", "sh",
-                    "--ignore-agent-tools",
-                ], catch_exceptions=False)
-        finally:
-            os.chdir(old_cwd)
-
-        assert result.exit_code == 0, result.output
-        # On a fresh project without --force the reapply guard should not fire.
-        assert not mock_presets.called, (
-            "_register_presets_for_agent should not be called on a fresh init without --force"
-        )
-
-
 class TestForceExistingDirectory:
    """Tests for --force merging into an existing named directory."""

@@ -1263,53 +1263,6 @@ class TestCommandRunner:
        )

        argv = _resolve_event_command_argv(cmd_dir / "boot.md", tmp_path, None)
-
-        assert argv is None
-
-    def test_unreadable_template_returns_none(self, tmp_path):
-        """A command template that cannot be read must resolve to no argv.
-
-        Every other failure inside ``_resolve_event_command_argv`` — missing
-        frontmatter, malformed YAML, absent scripts — degrades to ``None`` so
-        the dispatcher treats the command as declaring no runnable script.
-        The initial ``read_text`` was the one step outside that boundary: a
-        non-UTF-8 template raised a raw ``UnicodeDecodeError`` through
-        ``resolve_and_run_event_command`` and out of ``specify event run``.
-        """
-        from specify_cli.events import _resolve_event_command_argv
-
-        cmd_dir = tmp_path / ".specify" / "templates" / "commands"
-        cmd_dir.mkdir(parents=True)
-        (cmd_dir / "boot.md").write_bytes(
-            b"---\ndescription: \"B\xff\xfeoot\"\n---\nBody\n"
-        )
-
-        argv = _resolve_event_command_argv(cmd_dir / "boot.md", tmp_path, None)
-        assert argv is None
-
-    def test_permission_denied_template_returns_none(self, tmp_path, monkeypatch):
-        """The same boundary must cover ``OSError`` (e.g. permission denied).
-
-        Mocked rather than chmod-based so the case also holds under
-        privileged CI where permission bits are not enforced.
-        """
-        from specify_cli.events import _resolve_event_command_argv
-
-        cmd_dir = tmp_path / ".specify" / "templates" / "commands"
-        cmd_dir.mkdir(parents=True)
-        template = cmd_dir / "boot.md"
-        template.write_text("---\ndescription: Boot\n---\nBody\n")
-
-        original_read_text = Path.read_text
-
-        def failing_read_text(self_path, *args, **kwargs):
-            if self_path == template:
-                raise PermissionError(13, "Permission denied")
-            return original_read_text(self_path, *args, **kwargs)
-
-        monkeypatch.setattr(Path, "read_text", failing_read_text)
-
-        argv = _resolve_event_command_argv(template, tmp_path, None)
        assert argv is None

    def test_ps_variant_prefixed_with_powershell_launcher(self, tmp_path):
@@ -238,15 +238,14 @@ class MarkdownIntegrationTests:
        files.append(".specify/init-options.json")
        files.append(f".specify/integrations/{self.KEY}.manifest.json")
        files.append(".specify/integrations/speckit.manifest.json")
-        files.append(".specify/.gitignore")

        if script_variant == "sh":
            for name in ["check-prerequisites.sh", "common.sh", "create-new-feature.sh",
-                         "resolve-template.sh", "setup-plan.sh", "setup-tasks.sh"]:
+                         "setup-plan.sh", "setup-tasks.sh"]:
                files.append(f".specify/scripts/bash/{name}")
        else:
            for name in ["check-prerequisites.ps1", "common.ps1", "create-new-feature.ps1",
-                         "resolve-template.ps1", "setup-plan.ps1", "setup-tasks.ps1"]:
+                         "setup-plan.ps1", "setup-tasks.ps1"]:
                files.append(f".specify/scripts/powershell/{name}")

        for name in ["checklist-template.md",
@@ -141,91 +141,6 @@ class SkillsIntegrationTests:
            assert isinstance(fm["description"], str)
            assert len(fm["description"]) > 0, f"{f} has empty description"

-    def test_skill_frontmatter_preserves_multiline_description(
-        self, tmp_path, monkeypatch
-    ):
-        """A multiline (block-scalar) description must round-trip exactly.
-
-        The hand-built SKILL.md frontmatter used to only escape backslash and
-        quote, so a block-scalar description was emitted with raw newlines inside
-        a double-quoted scalar and reparsed with those newlines collapsed to
-        spaces. The description must survive byte-for-byte."""
-        from pathlib import Path
-
-        i = get_integration(self.KEY)
-        # Hermes writes to ~/.hermes/skills/ — isolate Path.home() to prevent
-        # overwriting a developer's real global skill directory.
-        if self.KEY == "hermes":
-            home = tmp_path / "home"
-            home.mkdir(exist_ok=True)
-            monkeypatch.setattr(Path, "home", lambda: home)
-
-        template = tmp_path / "sample.md"
-        template.write_text(
-            "---\n"
-            "description: |\n"
-            "  first line\n"
-            "  second line\n"
-            "scripts:\n"
-            "  sh: scripts/bash/x.sh\n"
-            "---\n"
-            "Body\n",
-            encoding="utf-8",
-        )
-        monkeypatch.setattr(i, "list_command_templates", lambda: [template])
-
-        m = IntegrationManifest(self.KEY, tmp_path)
-        created = i.setup(tmp_path, m)
-        skill_files = [f for f in created if f.name == "SKILL.md"]
-        assert len(skill_files) == 1
-
-        content = skill_files[0].read_text(encoding="utf-8")
-        fm = yaml.safe_load(content.split("---", 2)[1])
-        assert "\n" in fm["description"]
-        assert fm["description"] == "first line\nsecond line\n"
-
-    def test_skill_frontmatter_preserves_control_characters(
-        self, tmp_path, monkeypatch
-    ):
-        """A description carrying a C0/DEL control char must round-trip exactly.
-
-        A control character can reach ``description`` via a YAML escape in the
-        source template (``"a\\x08b"`` parses to a real U+0008). The old
-        hand-built frontmatter only escaped backslash and quote, so the raw
-        control char landed inside the emitted double-quoted scalar and made the
-        SKILL.md unparseable / lossy. ``yaml_quote`` must escape it so the
-        value survives byte-for-byte."""
-        from pathlib import Path
-
-        i = get_integration(self.KEY)
-        # Hermes writes to ~/.hermes/skills/ — isolate Path.home() to prevent
-        # overwriting a developer's real global skill directory.
-        if self.KEY == "hermes":
-            home = tmp_path / "home"
-            home.mkdir(exist_ok=True)
-            monkeypatch.setattr(Path, "home", lambda: home)
-
-        template = tmp_path / "sample.md"
-        template.write_text(
-            "---\n"
-            'description: "a\\x08b\\ttab"\n'
-            "scripts:\n"
-            "  sh: scripts/bash/x.sh\n"
-            "---\n"
-            "Body\n",
-            encoding="utf-8",
-        )
-        monkeypatch.setattr(i, "list_command_templates", lambda: [template])
-
-        m = IntegrationManifest(self.KEY, tmp_path)
-        created = i.setup(tmp_path, m)
-        skill_files = [f for f in created if f.name == "SKILL.md"]
-        assert len(skill_files) == 1
-
-        content = skill_files[0].read_text(encoding="utf-8")
-        fm = yaml.safe_load(content.split("---", 2)[1])
-        assert fm["description"] == "a\x08b\ttab"
-
    def test_templates_are_processed(self, tmp_path):
        """Skill body must have placeholders replaced, not raw templates."""
        i = get_integration(self.KEY)
@@ -484,7 +399,6 @@ class SkillsIntegrationTests:
            ".specify/integration.json",
            f".specify/integrations/{self.KEY}.manifest.json",
            ".specify/integrations/speckit.manifest.json",
-            ".specify/.gitignore",
            ".specify/memory/.constitution-template.json",
            ".specify/memory/constitution.md",
        ]
@@ -494,7 +408,6 @@ class SkillsIntegrationTests:
                ".specify/scripts/bash/check-prerequisites.sh",
                ".specify/scripts/bash/common.sh",
                ".specify/scripts/bash/create-new-feature.sh",
-                ".specify/scripts/bash/resolve-template.sh",
                ".specify/scripts/bash/setup-plan.sh",
                ".specify/scripts/bash/setup-tasks.sh",
            ]
@@ -503,7 +416,6 @@ class SkillsIntegrationTests:
                ".specify/scripts/powershell/check-prerequisites.ps1",
                ".specify/scripts/powershell/common.ps1",
                ".specify/scripts/powershell/create-new-feature.ps1",
-                ".specify/scripts/powershell/resolve-template.ps1",
                ".specify/scripts/powershell/setup-plan.ps1",
                ".specify/scripts/powershell/setup-tasks.ps1",
            ]
@@ -488,14 +488,12 @@ class TomlIntegrationTests:
        files.append(".specify/init-options.json")
        files.append(f".specify/integrations/{self.KEY}.manifest.json")
        files.append(".specify/integrations/speckit.manifest.json")
-        files.append(".specify/.gitignore")

        if script_variant == "sh":
            for name in [
                "check-prerequisites.sh",
                "common.sh",
                "create-new-feature.sh",
-                "resolve-template.sh",
                "setup-plan.sh",
                "setup-tasks.sh",
            ]:
@@ -505,7 +503,6 @@ class TomlIntegrationTests:
                "check-prerequisites.ps1",
                "common.ps1",
                "create-new-feature.ps1",
-                "resolve-template.ps1",
                "setup-plan.ps1",
                "setup-tasks.ps1",
            ]:
@@ -402,14 +402,12 @@ class YamlIntegrationTests:
        files.append(".specify/init-options.json")
        files.append(f".specify/integrations/{self.KEY}.manifest.json")
        files.append(".specify/integrations/speckit.manifest.json")
-        files.append(".specify/.gitignore")

        if script_variant == "sh":
            for name in [
                "check-prerequisites.sh",
                "common.sh",
                "create-new-feature.sh",
-                "resolve-template.sh",
                "setup-plan.sh",
                "setup-tasks.sh",
            ]:
@@ -419,7 +417,6 @@ class YamlIntegrationTests:
                "check-prerequisites.ps1",
                "common.ps1",
                "create-new-feature.ps1",
-                "resolve-template.ps1",
                "setup-plan.ps1",
                "setup-tasks.ps1",
            ]:
@@ -223,6 +223,33 @@ class TestActiveCatalogs:
 # ---------------------------------------------------------------------------


+class _OversizedResponse:
+    """Response stub that supports bounded streaming reads for oversized-catalog tests."""
+
+    def __init__(self, data, url=""):
+        self._data = json.dumps(data).encode()
+        self._url = url if isinstance(url, str) else url.full_url
+        self._pos = 0
+
+    def read(self, n=-1):
+        if n < 0:
+            chunk = self._data[self._pos:]
+            self._pos = len(self._data)
+            return chunk
+        chunk = self._data[self._pos : self._pos + n]
+        self._pos += len(chunk)
+        return chunk
+
+    def geturl(self):
+        return self._url
+
+    def __enter__(self):
+        return self
+
+    def __exit__(self, *a):
+        pass
+
+
 class TestCatalogFetch:
    """Tests that use a local HTTP server stub via monkeypatch."""

@@ -233,15 +260,15 @@ class TestCatalogFetch:
            def __init__(self, data, url=""):
                self._data = json.dumps(data).encode()
                self._url = url if isinstance(url, str) else url.full_url
-                self._offset = 0
+                self._pos = 0

-            def read(self, size=-1):
-                if size == -1:
-                    chunk = self._data[self._offset:]
-                    self._offset = len(self._data)
-                else:
-                    chunk = self._data[self._offset:self._offset + size]
-                    self._offset += len(chunk)
+            def read(self, n=-1):
+                if n < 0:
+                    chunk = self._data[self._pos:]
+                    self._pos = len(self._data)
+                    return chunk
+                chunk = self._data[self._pos:self._pos + n]
+                self._pos += len(chunk)
                return chunk

            def geturl(self):
@@ -330,187 +357,6 @@ class TestCatalogFetch:
        results = cat.search()
        assert "acme-coder" in [r["id"] for r in results]

-    def test_fetch_rejects_oversized_catalog_response(
-        self, tmp_path, monkeypatch
-    ):
-        """Regression: _fetch_single_catalog must use read_response_limited
-        with MAX_JSON_METADATA_BYTES, not unbounded resp.read()."""
-        from specify_cli.integrations.catalog import (
-            IntegrationCatalog,
-            IntegrationCatalogError,
-        )
-        import specify_cli.integrations.catalog as catalog_module
-
-        monkeypatch.setenv("HOME", str(tmp_path))
-        monkeypatch.setenv("USERPROFILE", str(tmp_path))
-        monkeypatch.delenv("SPECKIT_INTEGRATION_CATALOG_URL", raising=False)
-        (tmp_path / ".specify").mkdir()
-        cat = IntegrationCatalog(tmp_path)
-
-        # Set limit very small so any response is oversized
-        monkeypatch.setattr(catalog_module, "MAX_JSON_METADATA_BYTES", 32)
-
-        class _OversizedResponse:
-            def __init__(self):
-                self._data = b"x" * 64
-                self._offset = 0
-
-            def read(self, size=-1):
-                if size == -1:
-                    chunk = self._data[self._offset:]
-                    self._offset = len(self._data)
-                else:
-                    chunk = self._data[self._offset:self._offset + size]
-                    self._offset += len(chunk)
-                return chunk
-
-            def geturl(self):
-                return "https://example.com/catalog.json"
-
-            def __enter__(self):
-                return self
-
-            def __exit__(self, *a):
-                pass
-
-        import specify_cli.authentication.http as _auth_http
-
-        def fake_urlopen(req, timeout=10):
-            return _OversizedResponse()
-
-        monkeypatch.setattr(_auth_http.urllib.request, "urlopen", fake_urlopen)
-
-        from specify_cli.integrations.catalog import IntegrationCatalogEntry
-
-        entry = IntegrationCatalogEntry(
-            url="https://example.com/catalog.json",
-            name="test",
-            priority=1,
-            install_allowed=True,
-        )
-
-        with pytest.raises(IntegrationCatalogError, match="exceeds maximum size"):
-            cat._fetch_single_catalog(entry, force_refresh=True)
-
-    def _patch_urlopen_bytes(self, monkeypatch, bodies):
-        """Patch urlopen to serve raw *bodies* keyed by URL substring.
-
-        Mirrors ``_patch_urlopen`` but passes the bytes through verbatim: these
-        tests need a body that is not valid UTF-8, which ``json.dumps`` cannot
-        produce.
-        """
-
-        class _RawResponse:
-            def __init__(self, data, url):
-                self._data = data
-                self._url = url
-                self._offset = 0
-
-            def read(self, size=-1):
-                if size == -1:
-                    chunk = self._data[self._offset:]
-                    self._offset = len(self._data)
-                else:
-                    chunk = self._data[self._offset:self._offset + size]
-                    self._offset += len(chunk)
-                return chunk
-
-            def geturl(self):
-                return self._url
-
-            def __enter__(self):
-                return self
-
-            def __exit__(self, *a):
-                pass
-
-        def fake_urlopen(req, timeout=10):
-            url = req if isinstance(req, str) else req.full_url
-            for marker, body in bodies.items():
-                if marker in url:
-                    return _RawResponse(body, url)
-            raise AssertionError(f"unexpected URL requested: {url}")
-
-        import specify_cli.authentication.http as _auth_http
-        monkeypatch.setattr(_auth_http.urllib.request, "urlopen", fake_urlopen)
-
-    def test_fetch_wraps_non_utf8_catalog_response(self, tmp_path, monkeypatch):
-        """Regression: a non-UTF-8 response body must raise IntegrationCatalogError.
-
-        ``.decode("utf-8")`` runs before ``json.loads``, so the resulting
-        UnicodeDecodeError is not a JSONDecodeError and slipped past both
-        handlers as a raw traceback.
-        """
-        monkeypatch.setenv("HOME", str(tmp_path))
-        monkeypatch.setenv("USERPROFILE", str(tmp_path))
-        monkeypatch.delenv("SPECKIT_INTEGRATION_CATALOG_URL", raising=False)
-        (tmp_path / ".specify").mkdir(exist_ok=True)
-        cat = IntegrationCatalog(tmp_path)
-
-        self._patch_urlopen_bytes(
-            monkeypatch,
-            {"catalog.json": b'{"schema_version": "1.0", "name": "\xff\xfe"}'},
-        )
-
-        entry = IntegrationCatalogEntry(
-            url="https://example.com/catalog.json",
-            name="test",
-            priority=1,
-            install_allowed=True,
-        )
-
-        with pytest.raises(IntegrationCatalogError, match="not valid UTF-8"):
-            cat._fetch_single_catalog(entry, force_refresh=True)
-
-    def test_search_skips_non_utf8_catalog(self, tmp_path, monkeypatch, capsys):
-        """A single non-UTF-8 catalog must not take down the whole search.
-
-        ``_get_merged_integrations`` is built to warn and continue on a bad
-        catalog; an unwrapped UnicodeDecodeError defeated that entirely.
-        """
-        monkeypatch.setenv("HOME", str(tmp_path))
-        monkeypatch.setenv("USERPROFILE", str(tmp_path))
-        monkeypatch.delenv("SPECKIT_INTEGRATION_CATALOG_URL", raising=False)
-        specify = tmp_path / ".specify"
-        specify.mkdir(exist_ok=True)
-        (specify / "integration-catalogs.yml").write_text(
-            "catalogs:\n"
-            "  - name: broken\n"
-            "    url: https://example.com/broken.json\n"
-            "    priority: 1\n"
-            "  - name: healthy\n"
-            "    url: https://example.com/healthy.json\n"
-            "    priority: 2\n",
-            encoding="utf-8",
-        )
-
-        healthy = json.dumps(
-            {
-                "schema_version": "1.0",
-                "integrations": {
-                    "acme-coder": {
-                        "name": "Acme Coder",
-                        "version": "1.0.0",
-                        "description": "Acme integration",
-                    }
-                },
-            }
-        ).encode("utf-8")
-
-        self._patch_urlopen_bytes(
-            monkeypatch,
-            {
-                "broken.json": b'{"schema_version": "1.0", "name": "\xff\xfe"}',
-                "healthy.json": healthy,
-            },
-        )
-
-        cat = IntegrationCatalog(tmp_path)
-        results = cat.search()
-
-        assert "acme-coder" in [r["id"] for r in results]
-        assert "broken" in capsys.readouterr().err
-
    def test_search_by_tag(self, tmp_path, monkeypatch):
        monkeypatch.setenv("HOME", str(tmp_path))
        monkeypatch.setenv("USERPROFILE", str(tmp_path))
@@ -586,6 +432,90 @@ class TestCatalogFetch:
        with pytest.raises(IntegrationCatalogError, match="Failed to fetch any integration catalog"):
            cat.search()

+    def test_oversized_catalog_response_rejected(self, tmp_path, monkeypatch):
+        """Response exceeding MAX_JSON_METADATA_BYTES is caught as IntegrationCatalogError.
+
+        The per-entry error is logged as a warning and skipped (not fatal).
+        When ALL catalogs are oversized, search() raises the aggregate error.
+        """
+        from specify_cli._download_security import MAX_JSON_METADATA_BYTES
+
+        monkeypatch.setenv("HOME", str(tmp_path))
+        monkeypatch.setenv("USERPROFILE", str(tmp_path))
+        monkeypatch.delenv("SPECKIT_INTEGRATION_CATALOG_URL", raising=False)
+        (tmp_path / ".specify").mkdir()
+        cat = IntegrationCatalog(tmp_path)
+
+        # Build a valid catalog dict whose JSON encoding exceeds the limit.
+        oversized = {
+            "schema_version": "1.0",
+            "integrations": {},
+            "padding": "x" * (MAX_JSON_METADATA_BYTES + 1),
+        }
+
+        import specify_cli.authentication.http as _auth_http
+
+        def _oversized_urlopen(req, timeout=10):
+            url = req if isinstance(req, str) else req.full_url
+            return _OversizedResponse(oversized, url)
+
+        monkeypatch.setattr(_auth_http.urllib.request, "urlopen", _oversized_urlopen)
+
+        # Both default + community catalogs are oversized → all fail → aggregate error.
+        # The per-entry IntegrationCatalogError (with "exceeds maximum size") is
+        # logged as a warning; the aggregate raise has a different message.
+        with pytest.raises(IntegrationCatalogError, match="Failed to fetch any integration catalog"):
+            cat.search()
+
+    def test_oversized_catalog_does_not_block_healthy_one(self, tmp_path, monkeypatch):
+        """When one catalog is oversized, the healthy catalog still returns results."""
+        from specify_cli._download_security import MAX_JSON_METADATA_BYTES
+
+        monkeypatch.setenv("HOME", str(tmp_path))
+        monkeypatch.setenv("USERPROFILE", str(tmp_path))
+        monkeypatch.delenv("SPECKIT_INTEGRATION_CATALOG_URL", raising=False)
+        specify = tmp_path / ".specify"
+        specify.mkdir()
+
+        healthy_catalog = {
+            "schema_version": "1.0",
+            "integrations": {
+                "good-agent": {
+                    "id": "good-agent",
+                    "name": "Good Agent",
+                    "version": "1.0.0",
+                    "description": "A healthy integration",
+                    "author": "test-org",
+                },
+            },
+        }
+        oversized_catalog = {
+            "schema_version": "1.0",
+            "integrations": {},
+            "padding": "x" * (MAX_JSON_METADATA_BYTES + 1),
+        }
+        cfg = specify / "integration-catalogs.yml"
+        cfg.write_text(yaml.dump({"catalogs": [
+            {"url": "https://healthy.example.com/catalog.json", "name": "healthy", "priority": 1, "install_allowed": True},
+            {"url": "https://oversized.example.com/catalog.json", "name": "oversized", "priority": 2, "install_allowed": True},
+        ]}))
+        cat = IntegrationCatalog(tmp_path)
+
+        import specify_cli.authentication.http as _auth_http
+
+        def _multi_catalog_urlopen(req, timeout=10):
+            url = req if isinstance(req, str) else req.full_url
+            if "oversized" in url:
+                return _OversizedResponse(oversized_catalog, url)
+            return _OversizedResponse(healthy_catalog, url)
+
+        monkeypatch.setattr(_auth_http.urllib.request, "urlopen", _multi_catalog_urlopen)
+
+        # The oversized catalog is skipped; the healthy catalog's integrations are returned.
+        results = cat.search()
+        ids = [r["id"] for r in results]
+        assert "good-agent" in ids
+
    def test_clear_cache(self, tmp_path):
        (tmp_path / ".specify").mkdir()
        cat = IntegrationCatalog(tmp_path)
@@ -783,23 +713,19 @@ class TestIntegrationListCatalog:
            def __init__(self, data, url=""):
                self._data = json.dumps(data).encode()
                self._url = url if isinstance(url, str) else url.full_url
-                self._offset = 0
-
-            def read(self, size=-1):
-                if size == -1:
-                    chunk = self._data[self._offset:]
-                    self._offset = len(self._data)
-                else:
-                    chunk = self._data[self._offset:self._offset + size]
-                    self._offset += len(chunk)
+                self._pos = 0
+            def read(self, n=-1):
+                if n < 0:
+                    chunk = self._data[self._pos:]
+                    self._pos = len(self._data)
+                    return chunk
+                chunk = self._data[self._pos:self._pos + n]
+                self._pos += len(chunk)
                return chunk
-
            def geturl(self):
                return self._url
-
            def __enter__(self):
                return self
-
            def __exit__(self, *a):
                pass

@@ -185,14 +185,12 @@ class TestClineIntegration(MarkdownIntegrationTests):
        files.append(".specify/init-options.json")
        files.append(f".specify/integrations/{self.KEY}.manifest.json")
        files.append(".specify/integrations/speckit.manifest.json")
-        files.append(".specify/.gitignore")

        if script_variant == "sh":
            for name in [
                "check-prerequisites.sh",
                "common.sh",
                "create-new-feature.sh",
-                "resolve-template.sh",
                "setup-plan.sh",
                "setup-tasks.sh",
            ]:
@@ -202,7 +200,6 @@ class TestClineIntegration(MarkdownIntegrationTests):
                "check-prerequisites.ps1",
                "common.ps1",
                "create-new-feature.ps1",
-                "resolve-template.ps1",
                "setup-plan.ps1",
                "setup-tasks.ps1",
            ]:
@@ -1,47 +0,0 @@
-"""Tests for CommandCodeIntegration — skills-based integration (Command Code)."""
-
-from .test_integration_base_skills import SkillsIntegrationTests
-
-
-class TestCommandCodeIntegration(SkillsIntegrationTests):
-    KEY = "command-code"
-    FOLDER = ".commandcode/"
-    COMMANDS_SUBDIR = "skills"
-    REGISTRAR_DIR = ".commandcode/skills"
-
-
-class TestCommandCodeInvocation:
-    """Command Code renders $speckit-* chat invocations (like Codex/ZCode)."""
-
-    def test_next_steps_show_dollar_skill_invocation(self, tmp_path):
-        import os
-
-        from typer.testing import CliRunner
-
-        from specify_cli import app
-
-        project = tmp_path / "command-code-next-steps"
-        project.mkdir()
-        old_cwd = os.getcwd()
-        try:
-            os.chdir(project)
-            runner = CliRunner()
-            result = runner.invoke(
-                app,
-                [
-                    "init",
-                    "--here",
-                    "--integration",
-                    "command-code",
-                    "--ignore-agent-tools",
-                    "--script",
-                    "sh",
-                ],
-                catch_exceptions=False,
-            )
-        finally:
-            os.chdir(old_cwd)
-
-        assert result.exit_code == 0
-        assert "$speckit-constitution" in result.output
-        assert "/speckit.constitution" not in result.output
@@ -274,11 +274,9 @@ class TestCopilotCommandsMode:
            ".specify/init-options.json",
            ".specify/integrations/copilot.manifest.json",
            ".specify/integrations/speckit.manifest.json",
-            ".specify/.gitignore",
            ".specify/scripts/bash/check-prerequisites.sh",
            ".specify/scripts/bash/common.sh",
            ".specify/scripts/bash/create-new-feature.sh",
-            ".specify/scripts/bash/resolve-template.sh",
            ".specify/scripts/bash/setup-plan.sh",
            ".specify/scripts/bash/setup-tasks.sh",
            ".specify/templates/checklist-template.md",
@@ -339,11 +337,9 @@ class TestCopilotCommandsMode:
            ".specify/init-options.json",
            ".specify/integrations/copilot.manifest.json",
            ".specify/integrations/speckit.manifest.json",
-            ".specify/.gitignore",
            ".specify/scripts/powershell/check-prerequisites.ps1",
            ".specify/scripts/powershell/common.ps1",
            ".specify/scripts/powershell/create-new-feature.ps1",
-            ".specify/scripts/powershell/resolve-template.ps1",
            ".specify/scripts/powershell/setup-plan.ps1",
            ".specify/scripts/powershell/setup-tasks.ps1",
            ".specify/templates/checklist-template.md",
@@ -851,12 +847,10 @@ class TestCopilotSkillsMode:
            ".specify/integration.json",
            ".specify/integrations/copilot.manifest.json",
            ".specify/integrations/speckit.manifest.json",
-            ".specify/.gitignore",
            # Scripts (sh)
            ".specify/scripts/bash/check-prerequisites.sh",
            ".specify/scripts/bash/common.sh",
            ".specify/scripts/bash/create-new-feature.sh",
-            ".specify/scripts/bash/resolve-template.sh",
            ".specify/scripts/bash/setup-plan.sh",
            ".specify/scripts/bash/setup-tasks.sh",
            # Templates
@@ -342,13 +342,11 @@ class TestGenericIntegration:
            ".specify/integration.json",
            ".specify/integrations/generic.manifest.json",
            ".specify/integrations/speckit.manifest.json",
-            ".specify/.gitignore",
            ".specify/memory/.constitution-template.json",
            ".specify/memory/constitution.md",
            ".specify/scripts/bash/check-prerequisites.sh",
            ".specify/scripts/bash/common.sh",
            ".specify/scripts/bash/create-new-feature.sh",
-            ".specify/scripts/bash/resolve-template.sh",
            ".specify/scripts/bash/setup-plan.sh",
            ".specify/scripts/bash/setup-tasks.sh",
            ".specify/templates/checklist-template.md",
@@ -401,13 +399,11 @@ class TestGenericIntegration:
            ".specify/integration.json",
            ".specify/integrations/generic.manifest.json",
            ".specify/integrations/speckit.manifest.json",
-            ".specify/.gitignore",
            ".specify/memory/.constitution-template.json",
            ".specify/memory/constitution.md",
            ".specify/scripts/powershell/check-prerequisites.ps1",
            ".specify/scripts/powershell/common.ps1",
            ".specify/scripts/powershell/create-new-feature.ps1",
-            ".specify/scripts/powershell/resolve-template.ps1",
            ".specify/scripts/powershell/setup-plan.ps1",
            ".specify/scripts/powershell/setup-tasks.ps1",
            ".specify/templates/checklist-template.md",
@@ -28,7 +28,7 @@ ALL_INTEGRATION_KEYS = [
    "gemini", "tabnine",
    # Stage 5 — skills, generic & option-driven integrations
    "codex", "kimi", "agy", "zed", "generic",
-    "droid", "command-code",
+    "droid",
 ]


@@ -178,66 +178,3 @@ class TestHermesSkillFrontmatterQuoting:

        fm = _parse_frontmatter(skill_files[0])
        assert fm["description"] == MULTILINE
-
-    def test_dashed_description_is_preserved(self, tmp_path, monkeypatch):
-        """Hermes overrides setup(), so it needs the same line-anchored parse."""
-        home = tmp_path / "home"
-        home.mkdir(exist_ok=True)
-        monkeypatch.setattr(Path, "home", lambda: home)
-
-        integration = get_integration("hermes")
-        monkeypatch.setattr(
-            integration,
-            "shared_commands_dir",
-            lambda: _fake_templates(tmp_path, DASHED_TEMPLATE),
-        )
-        manifest = IntegrationManifest("hermes", tmp_path)
-        created = integration.setup(tmp_path, manifest)
-        skill_files = [f for f in created if f.name == "SKILL.md"]
-        assert len(skill_files) == 1
-
-        fm = _parse_frontmatter_line_anchored(skill_files[0])
-        assert fm["description"] == DASHED_DESCRIPTION
-
-        content = skill_files[0].read_text(encoding="utf-8")
-        lines = content.splitlines(keepends=True)
-        end = next(i for i in range(1, len(lines)) if lines[i].rstrip() == "---")
-        body = "".join(lines[end + 1 :])
-        assert "name-marker: sentinel" not in body
-
-
-class TestKimiGeneratedSkillDetection:
-    """``_is_speckit_generated_skill`` must survive a ``---`` in a value.
-
-    Teardown only removes a legacy skill directory it recognizes as
-    Speckit-generated via the frontmatter ``metadata`` block. A substring split
-    truncated the frontmatter before ``metadata`` when a description embedded
-    ``---``, so the directory was left behind on uninstall.
-    """
-
-    def _write_skill(self, skill_dir: Path, description: str) -> None:
-        skill_dir.mkdir(parents=True, exist_ok=True)
-        (skill_dir / "SKILL.md").write_text(
-            "---\n"
-            'name: "speckit-plan"\n'
-            f"description: {description}\n"
-            "metadata:\n"
-            '  author: "github-spec-kit"\n'
-            '  source: "templates/commands/plan.md"\n'
-            "---\n\nBody.\n",
-            encoding="utf-8",
-        )
-
-    def test_detects_skill_with_dashes_in_description(self, tmp_path):
-        from specify_cli.integrations.kimi import _is_speckit_generated_skill
-
-        skill_dir = tmp_path / "speckit-plan"
-        self._write_skill(skill_dir, "Separate sections with --- markers")
-        assert _is_speckit_generated_skill(skill_dir) is True
-
-    def test_still_detects_plain_description(self, tmp_path):
-        from specify_cli.integrations.kimi import _is_speckit_generated_skill
-
-        skill_dir = tmp_path / "speckit-plan"
-        self._write_skill(skill_dir, "Plain description")
-        assert _is_speckit_generated_skill(skill_dir) is True
@@ -109,67 +109,6 @@ def write_feature_json(
    )


-def install_composition_stack(
-    repo: Path, template_name: str, core_content: str
-) -> str:
-    """Install wrap/prepend/append presets over a core template."""
-    templates = repo / ".specify" / "templates"
-    templates.mkdir(parents=True, exist_ok=True)
-    (templates / f"{template_name}.md").write_text(core_content, encoding="utf-8")
-
-    layers = [
-        ("wrap-pack", 1, "wrap", "## Wrapper\n{CORE_TEMPLATE}\n## End\n"),
-        ("prepend-pack", 2, "prepend", "# Prepended\n"),
-        ("append-pack", 3, "append", "# Appended\n"),
-    ]
-    registry: dict[str, object] = {"presets": {}}
-    registry_presets = registry["presets"]
-    assert isinstance(registry_presets, dict)
-
-    for preset_id, priority, strategy, content in layers:
-        preset_dir = repo / ".specify" / "presets" / preset_id
-        template_dir = preset_dir / "templates"
-        template_dir.mkdir(parents=True)
-        (template_dir / f"{template_name}.md").write_text(content, encoding="utf-8")
-        (preset_dir / "preset.yml").write_text(
-            "provides:\n"
-            "  templates:\n"
-            "    - type: template\n"
-            f"      name: {template_name}\n"
-            f"      file: templates/{template_name}.md\n"
-            f"      strategy: {strategy}\n",
-            encoding="utf-8",
-        )
-        registry_presets[preset_id] = {
-            "enabled": True,
-            "priority": priority,
-        }
-
-    (repo / ".specify" / "presets" / ".registry").write_text(
-        json.dumps(registry, separators=(",", ":")) + "\n",
-        encoding="utf-8",
-    )
-
-    appended = "# Appended\n"
-    prepended = "# Prepended\n"
-    wrapper = "## Wrapper\n{CORE_TEMPLATE}\n## End\n"
-    composed = f"{core_content}\n\n{appended}"
-    composed = f"{prepended}\n\n{composed}"
-    return wrapper.replace("{CORE_TEMPLATE}", composed)
-
-
-def break_wrap_layer(repo: Path, template_name: str) -> None:
-    """Replace the installed wrap layer with one missing its placeholder."""
-    (
-        repo
-        / ".specify"
-        / "presets"
-        / "wrap-pack"
-        / "templates"
-        / f"{template_name}.md"
-    ).write_text("# Broken wrapper\n", encoding="utf-8")
-
-
 def normalize_repo_paths(text: str, repo: Path) -> str:
    """Replace the repo path with a placeholder so two-repo runs compare equal."""
    repo_paths = sorted({str(repo), str(repo.resolve())}, key=len, reverse=True)
@@ -21,7 +21,6 @@ ISSUE_TEMPLATE_AGENT_KEYS = [
    "cline",
    "codebuddy",
    "codex",
-    "command-code",
    "cursor-agent",
    "devin",
    "droid",
@@ -12,7 +12,6 @@ from pathlib import Path
 import pytest

 from tests.conftest import requires_bash
-from tests.parity_helpers import install_composition_stack

 PROJECT_ROOT = Path(__file__).resolve().parent.parent
 COMMON_SH = PROJECT_ROOT / "scripts" / "bash" / "common.sh"
@@ -137,87 +136,6 @@ def _normalize_help_text(text: str) -> str:
    return "\n".join("" if not line.strip() else line for line in normalized.split("\n"))


-@requires_bash
-@pytest.mark.parametrize("missing", [False, True], ids=["composed", "missing"])
-def test_all_variants_resolve_requested_template(
-    prereq_repo: Path, missing: bool
-) -> None:
-    _write_feature_json(prereq_repo)
-    feature = prereq_repo / "specs" / "001-my-feature"
-    feature.mkdir(parents=True)
-    (feature / "plan.md").write_text("# Plan\n", encoding="utf-8")
-    template_name = "missing-template" if missing else "checklist-template"
-    expected = install_composition_stack(
-        prereq_repo, "checklist-template", "# Checklist\n"
-    )
-
-    results = [
-        _run(
-            _bash_cmd(prereq_repo, "--json", "--template", template_name),
-            prereq_repo,
-        ),
-        _run(
-            _py_cmd(prereq_repo, "--json", "--template", template_name),
-            prereq_repo,
-        ),
-    ]
-    if HAS_PWSH or _WINDOWS_POWERSHELL:
-        results.append(
-            _run(
-                _ps_cmd(prereq_repo, "-Json", "-Template", template_name),
-                prereq_repo,
-            )
-        )
-
-    expected_status = 1 if missing else 0
-    assert all(result.returncode == expected_status for result in results)
-    if missing:
-        assert all(result.stdout == "" for result in results)
-    else:
-        assert all(
-            _json_stdout(result)["TEMPLATE_CONTENT"] == expected
-            for result in results
-        )
-
-
-@requires_bash
-@pytest.mark.parametrize("missing", [False, True], ids=["composed", "missing"])
-def test_all_variants_validate_requested_template_in_text_mode(
-    prereq_repo: Path, missing: bool
-) -> None:
-    _write_feature_json(prereq_repo)
-    feature = prereq_repo / "specs" / "001-my-feature"
-    feature.mkdir(parents=True)
-    (feature / "plan.md").write_text("# Plan\n", encoding="utf-8")
-    template_name = "missing-template" if missing else "checklist-template"
-    install_composition_stack(
-        prereq_repo, "checklist-template", "# Checklist\n"
-    )
-
-    results = [
-        _run(
-            _bash_cmd(prereq_repo, "--template", template_name),
-            prereq_repo,
-        ),
-        _run(
-            _py_cmd(prereq_repo, "--template", template_name),
-            prereq_repo,
-        ),
-    ]
-    if HAS_PWSH or _WINDOWS_POWERSHELL:
-        results.append(
-            _run(
-                _ps_cmd(prereq_repo, "-Template", template_name),
-                prereq_repo,
-            )
-        )
-
-    expected_status = 1 if missing else 0
-    assert all(result.returncode == expected_status for result in results)
-    if missing:
-        assert all(result.stdout == "" for result in results)
-
-
@requires_bash
@pytest.mark.parametrize(
    "args",
@@ -263,52 +181,6 @@ def test_python_text_output_matches_bash(prereq_repo: Path) -> None:
    assert _normalize_status_text(py.stdout) == _normalize_status_text(bash.stdout)


-def test_python_text_output_survives_a_legacy_stdout_code_page(
-    prereq_repo: Path,
-) -> None:
-    """Text mode must not crash when stdout cannot encode the status glyphs.
-
-    On Windows sys.stdout falls back to the ANSI code page whenever it is not a
-    console — which is every time an agent or a workflow step captures the
-    output. U+2713 is unencodable in cp1252, so printing it raised
-    UnicodeEncodeError and truncated the report right after "AVAILABLE_DOCS:".
-    The ASCII fallback is the rendering these markers already have in-tree
-    (Test-FileExists in scripts/powershell/common.ps1, and
-    normalize_status_text here).
-    """
-    feat = prereq_repo / "specs" / "001-my-feature"
-    feat.mkdir(parents=True)
-    (feat / "plan.md").write_text("# plan\n", encoding="utf-8")
-    # research.md is present and the rest are not, so BOTH status markers are
-    # produced in the same cp1252 subprocess: U+2713 for the available document
-    # and U+2717 for the missing ones. Asserting only one of them would let a
-    # fallback that always returned "[FAIL]" pass.
-    (feat / "research.md").write_text("# research\n", encoding="utf-8")
-    (feat / "contracts").mkdir()  # present but empty -> reported missing
-    _write_feature_json(prereq_repo)
-
-    env = _clean_env()
-    env["PYTHONIOENCODING"] = "cp1252"
-    result = _run(_py_cmd(prereq_repo, "--include-tasks"), prereq_repo, env=env)
-
-    assert result.returncode == 0, result.stderr
-    assert "UnicodeEncodeError" not in result.stderr
-    assert "AVAILABLE_DOCS:" in result.stdout
-    # Every per-document line must still be there, not truncated away by the
-    # encode error.
-    for doc in (
-        "research.md",
-        "data-model.md",
-        "contracts/",
-        "quickstart.md",
-        "tasks.md",
-    ):
-        assert doc in result.stdout, (doc, result.stdout)
-    # Both fallback markers, so neither branch of _status_marker can regress.
-    assert "[OK] research.md" in result.stdout, result.stdout
-    assert "[FAIL] quickstart.md" in result.stdout, result.stdout
-
-
@requires_bash
 def test_python_help_output_matches_bash(prereq_repo: Path) -> None:
    bash = _run(_bash_cmd(prereq_repo, "--help"), prereq_repo)
@@ -79,7 +79,7 @@ def test_template_renders_python_invocation(name: str):
    result = IntegrationBase.process_template(content, "agent", "py")
    assert "{SCRIPT}" not in result
    assert re.search(
-        r"python3 \.specify/scripts/python/\w+\.py(?: [\w-]+)*", result
+        r"python3 \.specify/scripts/python/\w+\.py(?: --[\w-]+)*", result
    ), f"{name} did not render a Python invocation"


@@ -13,8 +13,6 @@ from tests.conftest import requires_bash
 from tests.parity_helpers import (
    HAS_POWERSHELL,
    bash_cmd,
-    break_wrap_layer,
-    install_composition_stack,
    install_scripts,
    json_stdout,
    make_repo,
@@ -384,108 +382,12 @@ def test_python_full_run_matches_bash(repo_pair: tuple[Path, Path]) -> None:
    branch = json_stdout(py)["BRANCH_NAME"]
    for repo in repo_pair:
        spec = repo / "specs" / branch / "spec.md"
-        assert spec.read_bytes() == TEMPLATE_BODY.encode("utf-8")
+        assert spec.read_text(encoding="utf-8") == TEMPLATE_BODY
    assert (repo_b / ".specify" / "feature.json").read_bytes() == (
        repo_a / ".specify" / "feature.json"
    ).read_bytes()


-@requires_bash
-def test_all_variants_materialize_composed_spec_template(tmp_path: Path) -> None:
-    repos = [
-        _setup_repo(tmp_path, "bash"),
-        _setup_repo(tmp_path, "powershell"),
-        _setup_repo(tmp_path, "python"),
-    ]
-    expected = ""
-    for current in repos:
-        expected = install_composition_stack(
-            current, "spec-template", TEMPLATE_BODY
-        )
-
-    bash = run(
-        bash_cmd(
-            repos[0],
-            SCRIPT,
-            "--json",
-            "--number",
-            "1",
-            "--short-name",
-            "composed",
-            "x",
-        ),
-        repos[0],
-    )
-    py = run(
-        py_cmd(
-            repos[2],
-            SCRIPT,
-            "--json",
-            "--number",
-            "1",
-            "--short-name",
-            "composed",
-            "x",
-        ),
-        repos[2],
-    )
-    results = [bash, py]
-    checked_repos = [repos[0], repos[2]]
-    if HAS_POWERSHELL:
-        results.insert(
-            1,
-            run(
-                ps_cmd(
-                    repos[1],
-                    SCRIPT,
-                    "-Json",
-                    "-Number",
-                    "1",
-                    "-ShortName",
-                    "composed",
-                    "x",
-                ),
-                repos[1],
-            ),
-        )
-        checked_repos.insert(1, repos[1])
-
-    assert all(result.returncode == 0 for result in results)
-    for current in checked_repos:
-        assert (
-            current / "specs" / "001-composed" / "spec.md"
-        ).read_text(encoding="utf-8") == expected
-
-
-@requires_bash
-def test_all_variants_fail_for_broken_spec_composition(tmp_path: Path) -> None:
-    repos = [
-        _setup_repo(tmp_path, "bash"),
-        _setup_repo(tmp_path, "powershell"),
-        _setup_repo(tmp_path, "python"),
-    ]
-    for current in repos:
-        install_composition_stack(current, "spec-template", TEMPLATE_BODY)
-        break_wrap_layer(current, "spec-template")
-
-    bash = run(bash_cmd(repos[0], SCRIPT, "--json", "x"), repos[0])
-    py = run(py_cmd(repos[2], SCRIPT, "--json", "x"), repos[2])
-    results = [(bash, repos[0]), (py, repos[2])]
-    if HAS_POWERSHELL:
-        results.append(
-            (
-                run(ps_cmd(repos[1], SCRIPT, "-Json", "x"), repos[1]),
-                repos[1],
-            )
-        )
-
-    assert all(result.returncode != 0 for result, _ in results)
-    assert all(
-        not (current / "specs" / "001-x").exists()
-        for _, current in results
-    )
-
-
@requires_bash
 def test_python_missing_template_warning_matches_bash(
    repo_pair: tuple[Path, Path],
@@ -475,194 +475,6 @@ def test_safe_extract_tar_enforces_entry_and_size_limits(tmp_path):
        safe_extract_tar(archive_path, tmp_path / "total", max_total_bytes=7)


-def _truncated_tar_gz_bytes(keep_bytes):
-    """Return the leading *keep_bytes* of a multi-member tar.gz's bytes.
-
-    A gzip stream cut short this way ends before its end-of-stream marker, so
-    reading it raises a bare ``EOFError`` from the gzip layer. ``tarfile``
-    decompresses lazily, so *where* that surfaces depends on how much is kept:
-    a very short prefix fails in ``tarfile.open`` itself, while a longer one
-    opens fine and only fails once members are iterated.
-    """
-    buffer = io.BytesIO()
-    with tarfile.open(fileobj=buffer, mode="w:gz") as archive:
-        for index in range(5):
-            info = tarfile.TarInfo(f"file{index}.txt")
-            content = bytes(range(256)) * 400
-            info.size = len(content)
-            archive.addfile(info, io.BytesIO(content))
-    return buffer.getvalue()[:keep_bytes]
-
-
-def test_detect_archive_format_rejects_truncated_tar_gz(tmp_path):
-    # A gzip stream truncated before tarfile can read its first header raises a
-    # bare EOFError -- not a TarError -- from the format probe. Catching only
-    # TarError let it escape as a raw exception instead of leaving is_tar_gz
-    # False and reporting the module's clean format-mismatch error.
-    archive_path = tmp_path / "truncated.tar.gz"
-    archive_path.write_bytes(_truncated_tar_gz_bytes(64))
-
-    with pytest.raises(ValueError, match="format mismatch"):
-        detect_archive_format(archive_path)
-
-
-@pytest.mark.parametrize("keep_bytes", [64, 512, 2048])
-def test_safe_extract_tar_rejects_truncated_archive(tmp_path, keep_bytes):
-    # The same bare EOFError, from tarfile.open on a short prefix and from
-    # member iteration on a longer one. Both sites reported it raw.
-    archive_path = tmp_path / f"truncated-{keep_bytes}.tar.gz"
-    archive_path.write_bytes(_truncated_tar_gz_bytes(keep_bytes))
-
-    with pytest.raises(ValueError, match="Invalid tar.gz archive"):
-        safe_extract_tar(archive_path, tmp_path / f"out-{keep_bytes}")
-
-
-def test_safe_extract_tar_wraps_truncation_in_caller_error_type(tmp_path):
-    # The leak bypassed the caller's domain error type entirely, so callers
-    # that only catch their own error (or ValueError) crashed the command.
-    archive_path = tmp_path / "truncated.tar.gz"
-    archive_path.write_bytes(_truncated_tar_gz_bytes(2048))
-
-    with pytest.raises(_CustomZipError, match="Invalid tar.gz archive"):
-        safe_extract_tar(
-            archive_path,
-            tmp_path / "out",
-            error_type=_CustomZipError,
-        )
-
-
-def test_safe_extract_archive_rejects_truncated_tar_gz(tmp_path):
-    archive_path = tmp_path / "truncated.tar.gz"
-    archive_path.write_bytes(_truncated_tar_gz_bytes(2048))
-
-    with pytest.raises(ValueError):
-        safe_extract_archive(archive_path, tmp_path / "out")
-
-
-#: Bytes of the first member's data that decompress cleanly before the invalid
-#: deflate block. Must exceed the gzip read buffer so ``tarfile`` has to seek
-#: forward over member data to reach the second header -- see
-#: ``_corrupt_deflate_tar_gz_bytes``. The members are twice this size, so the
-#: corruption stays well inside the first member's data.
-_CORRUPT_DEFLATE_CLEAN_BYTES = 256 * 1024
-_CORRUPT_DEFLATE_MEMBER_BYTES = 2 * _CORRUPT_DEFLATE_CLEAN_BYTES
-
-
-def _corrupt_deflate_tar_gz_bytes():
-    """Return a tar.gz whose deflate stream is corrupt mid-member.
-
-    Unlike truncation, which the gzip layer reports as ``EOFError``, an invalid
-    deflate block raises ``zlib.error``. ``tarfile`` converts that to
-    ``ReadError`` when it surfaces while reading a member *header*, but the
-    forward seek it performs to skip over member *data* sits outside that
-    conversion, so the raw ``zlib.error`` escapes from there.
-
-    Two details keep this deterministic across zlib versions:
-
-    * The corruption is a block header whose ``BTYPE`` is the reserved value
-      ``0b11``, which every zlib rejects as "invalid block type". Mangling
-      arbitrary bytes instead is *not* portable -- the garbage may still decode
-      structurally and fail the later gzip CRC check as ``BadGzipFile`` (an
-      ``OSError``, which the handler already caught) rather than raising
-      ``zlib.error`` at all.
-    * The stream is assembled by hand so the invalid block lands after
-      ``_CORRUPT_DEFLATE_CLEAN_BYTES`` of valid data. That is past the gzip read
-      buffer, so the first header reads clean and the failure happens during the
-      seek over member data rather than during a header read.
-    """
-    plain = io.BytesIO()
-    with tarfile.open(fileobj=plain, mode="w") as archive:
-        for index in range(2):
-            info = tarfile.TarInfo(f"file{index}.txt")
-            content = bytes((i * 7 + index) % 256 for i in range(1024)) * (
-                _CORRUPT_DEFLATE_MEMBER_BYTES // 1024
-            )
-            info.size = len(content)
-            archive.addfile(info, io.BytesIO(content))
-
-    clean_prefix = plain.getvalue()[:_CORRUPT_DEFLATE_CLEAN_BYTES]
-    compressor = zlib.compressobj(1, zlib.DEFLATED, -15)
-    deflate = compressor.compress(clean_prefix)
-    deflate += compressor.flush(zlib.Z_SYNC_FLUSH)
-    deflate += b"\x06"  # BTYPE=0b11 (reserved) -> "invalid block type"
-
-    gzip_header = b"\x1f\x8b\x08\x00" + b"\x00" * 4 + b"\x00\xff"
-    trailer = struct.pack("<II", zlib.crc32(clean_prefix), len(clean_prefix))
-    return gzip_header + deflate + trailer
-
-
-def test_corrupt_deflate_fixture_raises_bare_zlib_error():
-    # Guards the fixture itself: the tests below are only meaningful while this
-    # archive reaches the module as a bare zlib.error -- neither a TarError nor
-    # an OSError, so a (TarError, OSError) handler would miss it. If a future
-    # Python or zlib wraps it, this fails loudly instead of the coverage
-    # silently decaying into a duplicate of the EOFError cases.
-    archive_file = io.BytesIO(_corrupt_deflate_tar_gz_bytes())
-
-    with tarfile.open(fileobj=archive_file, mode="r:gz") as archive:
-        with pytest.raises(zlib.error) as excinfo:
-            for _member in archive:
-                pass
-
-    # The whole point of the zlib.error arm: a (TarError, OSError) handler --
-    # what the two extraction sites had before the fix -- does not catch this.
-    # tarfile.ReadError and gzip.BadGzipFile would both be caught already, so
-    # if the fixture ever degrades into one of those it proves nothing.
-    assert not isinstance(excinfo.value, tarfile.TarError)
-    assert not isinstance(excinfo.value, OSError)
-
-
-def test_detect_archive_format_accepts_corrupt_deflate_tar_gz(tmp_path):
-    # Detection is a format probe, not an integrity check: tarfile.open reads
-    # only the first member header, which is intact here, so the archive is
-    # correctly identified as tar.gz and the corruption is caught later by
-    # safe_extract_tar (see the tests below).
-    #
-    # Note this does not exercise the probe's zlib.error handling, which is
-    # unreachable: the header read is inside tarfile's own
-    # zlib.error -> ReadError conversion, so the probe sees ReadError. The
-    # zlib.error arm of _TAR_DECOMPRESSION_ERRORS is defensive at this site and
-    # load-bearing only at the two safe_extract_tar sites.
-    archive_path = tmp_path / "corrupt.tar.gz"
-    archive_path.write_bytes(_corrupt_deflate_tar_gz_bytes())
-
-    assert detect_archive_format(archive_path) == "tar.gz"
-
-
-def test_safe_extract_tar_rejects_corrupt_deflate(tmp_path):
-    archive_path = tmp_path / "corrupt.tar.gz"
-    archive_path.write_bytes(_corrupt_deflate_tar_gz_bytes())
-
-    with pytest.raises(ValueError, match="Invalid tar.gz archive"):
-        safe_extract_tar(archive_path, tmp_path / "out")
-
-
-def test_safe_extract_tar_wraps_corrupt_deflate_in_caller_error_type(tmp_path):
-    # zlib.error must reach the caller's domain error type, exactly as EOFError
-    # does, so this cannot regress independently of the truncation handling.
-    archive_path = tmp_path / "corrupt.tar.gz"
-    archive_path.write_bytes(_corrupt_deflate_tar_gz_bytes())
-
-    with pytest.raises(_CustomZipError, match="Invalid tar.gz archive"):
-        safe_extract_tar(
-            archive_path,
-            tmp_path / "out",
-            error_type=_CustomZipError,
-        )
-
-
-def test_safe_extract_archive_wraps_corrupt_deflate_in_caller_error_type(tmp_path):
-    archive_path = tmp_path / "corrupt.tar.gz"
-    archive_path.write_bytes(_corrupt_deflate_tar_gz_bytes())
-
-    with pytest.raises(_CustomZipError, match="Invalid tar.gz archive"):
-        safe_extract_archive(
-            archive_path,
-            tmp_path / "out",
-            error_type=_CustomZipError,
-        )
-
-
@pytest.mark.parametrize("suffix", [".zip", ".tar.gz", ".tgz"])
 def test_safe_extract_archive_has_format_parity(tmp_path, suffix):
    archive_path = tmp_path / f"package{suffix}"
@@ -1020,268 +1020,6 @@ provides:
        assert len(hash_value) > 10


-class TestExtensionManifestTemplatesAndScripts:
-    """Tests for the optional provides.templates / provides.scripts sections."""
-
-    def test_templates_and_scripts_declared(self, temp_dir, valid_manifest_data):
-        """A manifest declaring templates and scripts exposes them via properties."""
-        import yaml
-
-        valid_manifest_data["provides"]["templates"] = [
-            {
-                "name": "myext-template",
-                "file": "templates/myext-template.md",
-                "description": "Report scaffold contributed by myext",
-            }
-        ]
-        valid_manifest_data["provides"]["scripts"] = [
-            {
-                "name": "myext-collect",
-                "file": "scripts/bash/myext-collect.sh",
-                "description": "Data-collection helper",
-                "runtimes": ["bash", "python"],
-            }
-        ]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        manifest = ExtensionManifest(manifest_path)
-
-        assert manifest.templates == valid_manifest_data["provides"]["templates"]
-        assert manifest.scripts == valid_manifest_data["provides"]["scripts"]
-        assert manifest.warnings == []
-
-    def test_templates_only_extension_is_valid(self, temp_dir, valid_manifest_data):
-        """An extension with only a declared template (no commands/hooks/events) is valid."""
-        import yaml
-
-        valid_manifest_data["provides"]["commands"] = []
-        valid_manifest_data.pop("hooks", None)
-        valid_manifest_data["provides"]["templates"] = [
-            {"name": "myext-template", "file": "templates/myext-template.md"}
-        ]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        manifest = ExtensionManifest(manifest_path)
-        assert len(manifest.templates) == 1
-        assert len(manifest.commands) == 0
-
-    def test_scripts_only_extension_is_valid(self, temp_dir, valid_manifest_data):
-        """An extension with only a declared script (no commands/hooks/events) is valid."""
-        import yaml
-
-        valid_manifest_data["provides"]["commands"] = []
-        valid_manifest_data.pop("hooks", None)
-        valid_manifest_data["provides"]["scripts"] = [
-            {"name": "myext-collect", "file": "scripts/bash/myext-collect.sh"}
-        ]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        manifest = ExtensionManifest(manifest_path)
-        assert len(manifest.scripts) == 1
-
-    def test_no_provides_at_all_still_rejected(self, temp_dir, valid_manifest_data):
-        """Without commands, hooks, events, templates, or scripts the manifest is
-        still rejected — the relaxed rule only widens what counts, it doesn't
-        drop the requirement that an extension provide *something*."""
-        import yaml
-
-        valid_manifest_data["provides"]["commands"] = []
-        valid_manifest_data.pop("hooks", None)
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        with pytest.raises(ValidationError, match="must provide at least one command, hook, or event"):
-            ExtensionManifest(manifest_path)
-
-    @pytest.mark.parametrize("section", ["templates", "scripts"])
-    def test_provides_section_must_be_a_list(self, temp_dir, valid_manifest_data, section):
-        """provides.templates / provides.scripts must be a list, not e.g. a mapping."""
-        import yaml
-
-        valid_manifest_data["provides"][section] = {"not": "a list"}
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        with pytest.raises(ValidationError, match=f"Invalid provides.{section}: expected a list"):
-            ExtensionManifest(manifest_path)
-
-    @pytest.mark.parametrize("section", ["templates", "scripts"])
-    def test_provides_entry_must_be_a_mapping(self, temp_dir, valid_manifest_data, section):
-        """Each provides.templates / provides.scripts entry must be a mapping."""
-        import yaml
-
-        valid_manifest_data["provides"][section] = ["not-a-mapping"]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        with pytest.raises(ValidationError, match=f"Each entry in 'provides.{section}' must be a mapping"):
-            ExtensionManifest(manifest_path)
-
-    @pytest.mark.parametrize("section", ["templates", "scripts"])
-    def test_provides_entry_missing_name_or_file(self, temp_dir, valid_manifest_data, section):
-        """Each entry requires both 'name' and 'file'."""
-        import yaml
-
-        valid_manifest_data["provides"][section] = [{"name": "only-a-name"}]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        with pytest.raises(ValidationError, match="missing 'name' or 'file'"):
-            ExtensionManifest(manifest_path)
-
-    @pytest.mark.parametrize("section", ["templates", "scripts"])
-    def test_provides_entry_invalid_name_format(self, temp_dir, valid_manifest_data, section):
-        """Names must be lowercase alphanumeric with hyphens only."""
-        import yaml
-
-        valid_manifest_data["provides"][section] = [
-            {"name": "Bad_Name", "file": f"{section}/bad.txt"}
-        ]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        with pytest.raises(ValidationError, match="must be lowercase alphanumeric with hyphens only"):
-            ExtensionManifest(manifest_path)
-
-    @pytest.mark.parametrize("section", ["templates", "scripts"])
-    def test_provides_entry_duplicate_name_rejected(self, temp_dir, valid_manifest_data, section):
-        """Two entries in the same section sharing a name are rejected.
-
-        The resolver (PresetResolver._extension_manifest_declared_template)
-        returns the first entry matching a name, so a later duplicate would
-        be silently unreachable while still counted by ExtensionManifest
-        properties -- reject it up front instead.
-        """
-        import yaml
-
-        valid_manifest_data["provides"][section] = [
-            {"name": "dup", "file": f"{section}/a.txt"},
-            {"name": "dup", "file": f"{section}/b.txt"},
-        ]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        with pytest.raises(ValidationError, match=f"Duplicate .* name 'dup' in 'provides.{section}'"):
-            ExtensionManifest(manifest_path)
-
-    @pytest.mark.parametrize("section", ["templates", "scripts"])
-    def test_provides_entry_path_traversal_rejected(self, temp_dir, valid_manifest_data, section):
-        """The 'file' field is checked with the same path-safety policy as commands."""
-        import yaml
-
-        valid_manifest_data["provides"][section] = [
-            {"name": "escape", "file": "../evil"}
-        ]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        with pytest.raises(ValidationError, match="relative path within the extension directory"):
-            ExtensionManifest(manifest_path)
-
-    @pytest.mark.parametrize("section", ["templates", "scripts"])
-    def test_provides_entry_strategy_rejected(self, temp_dir, valid_manifest_data, section):
-        """'strategy' is preset-only; extension-provided artifacts are always 'replace'."""
-        import yaml
-
-        valid_manifest_data["provides"][section] = [
-            {"name": "has-strategy", "file": f"{section}/x.txt", "strategy": "replace"}
-        ]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        with pytest.raises(ValidationError, match="'strategy' is not authorable"):
-            ExtensionManifest(manifest_path)
-
-    def test_script_runtimes_accepted(self, temp_dir, valid_manifest_data):
-        """A valid 'runtimes' list on a script entry is accepted as-is."""
-        import yaml
-
-        valid_manifest_data["provides"]["scripts"] = [
-            {
-                "name": "myext-collect",
-                "file": "scripts/bash/myext-collect.sh",
-                "runtimes": ["bash", "powershell", "python"],
-            }
-        ]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        manifest = ExtensionManifest(manifest_path)
-        assert manifest.scripts[0]["runtimes"] == ["bash", "powershell", "python"]
-
-    def test_script_runtimes_must_be_a_list_of_strings(self, temp_dir, valid_manifest_data):
-        """A non-list 'runtimes' value is rejected."""
-        import yaml
-
-        valid_manifest_data["provides"]["scripts"] = [
-            {"name": "myext-collect", "file": "scripts/bash/myext-collect.sh", "runtimes": "bash"}
-        ]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        with pytest.raises(ValidationError, match="expected a list of strings"):
-            ExtensionManifest(manifest_path)
-
-    def test_script_runtimes_rejects_unknown_runtime(self, temp_dir, valid_manifest_data):
-        """An unrecognized runtime name is rejected with the valid set in the message."""
-        import yaml
-
-        valid_manifest_data["provides"]["scripts"] = [
-            {"name": "myext-collect", "file": "scripts/bash/myext-collect.sh", "runtimes": ["ruby"]}
-        ]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        with pytest.raises(ValidationError, match="Invalid runtimes.*must be one of"):
-            ExtensionManifest(manifest_path)
-
-    def test_provides_entry_description_must_be_a_string(self, temp_dir, valid_manifest_data):
-        """An optional 'description' field must be a string when present."""
-        import yaml
-
-        valid_manifest_data["provides"]["templates"] = [
-            {"name": "myext-template", "file": "templates/myext-template.md", "description": 123}
-        ]
-
-        manifest_path = temp_dir / "extension.yml"
-        with open(manifest_path, 'w', encoding="utf-8") as f:
-            yaml.dump(valid_manifest_data, f)
-
-        with pytest.raises(ValidationError, match="expected a string"):
-            ExtensionManifest(manifest_path)
-
-
 # ===== ExtensionRegistry Tests =====

 class TestExtensionRegistry:
@@ -1553,31 +1291,6 @@ class TestExtensionRegistry:
        result = registry.list()
        assert result == {}

-    def test_load_starts_fresh_for_non_utf8_registry(self, temp_dir):
-        """A registry file with undecodable bytes must start fresh, not raise.
-
-        ``_load()`` already treats malformed JSON as "corrupted registry,
-        start fresh", but a registry whose *bytes* cannot be decoded as UTF-8
-        raised a raw ``UnicodeDecodeError`` from the text-mode read before
-        JSON parsing began — the same corruption class reaching a different
-        exception type. Because the registry is loaded in ``__init__``, that
-        traceback broke *every* extension command on the project.
-        """
-        extensions_dir = temp_dir / "extensions"
-        extensions_dir.mkdir()
-        (extensions_dir / ExtensionRegistry.REGISTRY_FILE).write_bytes(
-            b"\xff\xfe not utf-8 \xc3\x28"
-        )
-
-        registry = ExtensionRegistry(extensions_dir)
-
-        assert registry.data == {
-            "schema_version": ExtensionRegistry.SCHEMA_VERSION,
-            "extensions": {},
-        }
-        assert registry.list() == {}
-        assert not registry.is_installed("test-ext")
-

 # ===== ExtensionManager Tests =====

@@ -57,38 +57,3 @@ def test_community_bundle_submission_automation_is_wired():
    assert "verified: false" in source_text
    assert "allowed-files:" in source_text
    assert "bundle-submission" in assignment_text
-
-
-def test_bug_test_workflow_provisions_python_dependencies():
-    source = WORKFLOWS_DIR / "bug-test.md"
-    compiled = WORKFLOWS_DIR / "bug-test.lock.yml"
-
-    assert source.is_file()
-    assert compiled.is_file()
-    source_text = source.read_text(encoding="utf-8")
-    compiled_text = compiled.read_text(encoding="utf-8")
-
-    setup_uv = (
-        "astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0"
-    )
-    setup_python = (
-        "actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0"
-    )
-
-    assert "    - pypi.org" in source_text
-    assert "    - files.pythonhosted.org" in source_text
-    assert setup_uv in source_text
-    assert setup_python in source_text
-    assert 'run: uv pip install --system -e ".[test]"' in source_text
-
-    assert '"pypi.org"' in compiled_text
-    assert '"files.pythonhosted.org"' in compiled_text
-    checkout_index = compiled_text.index("- name: Checkout repository")
-    uv_index = compiled_text.index("- name: Setup uv")
-    python_index = compiled_text.index("- name: Set up Python")
-    sync_index = compiled_text.index("- name: Install Python test dependencies")
-    agent_index = compiled_text.index("- name: Execute GitHub Copilot CLI")
-    assert checkout_index < uv_index < python_index < sync_index < agent_index
-    assert setup_uv in compiled_text
-    assert setup_python in compiled_text
-    assert 'run: uv pip install --system -e ".[test]"' in compiled_text
@@ -1,176 +0,0 @@
-"""`specify init` must render user-supplied values literally, not as Rich markup.
-
-`commands/init.py` interpolated the project name, `--integration`/`--script`
-values and paths straight into Rich markup f-strings. A name containing a
-tag-shaped bracket run was therefore consumed as markup:
-
-* ``specify init "proj [v2]"`` succeeded and created the directory, but the
-  Next Steps panel printed ``cd proj`` -- a command that fails when pasted.
-* ``specify init "app[/red]x"`` created the directory and then died with
-  ``MarkupError``, so the user saw a traceback for a project that had in fact
-  been scaffolded.
-
-Every sibling CLI module (extensions, presets, workflows, integrations) already
-escapes user-controlled display values; init.py was the outlier.
-"""
-
-from __future__ import annotations
-
-import os
-import re
-import subprocess
-from pathlib import Path
-
-import pytest
-from typer.testing import CliRunner
-
-from specify_cli import app
-from specify_cli.commands.init import _shell_quote_arg
-
-from tests.conftest import requires_bash
-
-_ANSI = re.compile(r"\x1b\[[0-9;]*m")
-
-
-def _strip(text: str) -> str:
-    return _ANSI.sub("", text or "")
-
-
-def _init(tmp_path: Path, name: str):
-    """Run a fully offline, non-interactive `specify init <name>`."""
-    previous = os.getcwd()
-    os.chdir(tmp_path)
-    try:
-        return CliRunner().invoke(
-            app,
-            [
-                "init",
-                name,
-                "--integration",
-                "generic",
-                "--integration-options",
-                "--commands-dir .agent/commands",
-                "--ignore-agent-tools",
-                "--offline",
-            ],
-            catch_exceptions=True,
-        )
-    finally:
-        os.chdir(previous)
-
-
-@pytest.mark.parametrize("name", ["proj [v2]", "my[bold]app"])
-def test_next_steps_cd_shows_the_real_project_name(tmp_path: Path, name: str):
-    """The `cd` line must name the directory that was actually created."""
-    result = _init(tmp_path, name)
-    assert result.exit_code == 0, _strip(result.stdout)
-    assert (tmp_path / name).is_dir()
-
-    out = _strip(result.stdout)
-    cd_lines = [line for line in out.splitlines() if "cd " in line]
-    assert cd_lines, out
-    assert f"cd {_shell_quote_arg(name)}" in " ".join(cd_lines), cd_lines
-
-
-def test_closing_tag_in_project_name_does_not_crash(tmp_path: Path):
-    """A name forming a closing tag raised MarkupError *after* the project had
-    been created, so init reported failure for work it had completed."""
-    name = "app[/red]x"
-    result = _init(tmp_path, name)
-
-    assert result.exception is None or not isinstance(
-        result.exception, Exception
-    ) or "MarkupError" not in type(result.exception).__name__, (
-        f"unexpected {type(result.exception).__name__}: {result.exception}"
-    )
-    assert result.exit_code == 0, _strip(result.stdout)
-    assert (tmp_path / name).is_dir()
-    assert f"cd {_shell_quote_arg(name)}" in _strip(result.stdout)
-
-
-def test_invalid_integration_value_is_rendered_literally(tmp_path: Path):
-    """An invalid `--integration` value is echoed back; it must not be parsed as
-    markup (nor raise) when it contains a bracket run."""
-    previous = os.getcwd()
-    os.chdir(tmp_path)
-    try:
-        result = CliRunner().invoke(
-            app,
-            ["init", "proj", "--integration", "nope[/red]", "--ignore-agent-tools"],
-            catch_exceptions=True,
-        )
-    finally:
-        os.chdir(previous)
-
-    assert result.exit_code != 0
-    assert "nope[/red]" in _strip(result.stdout)
-
-
-def _cd_argument(stdout: str) -> str:
-    """Return the argument of the printed `cd` command, verbatim.
-
-    The line is rendered inside a Rich panel, so the trailing box-drawing
-    border and its padding are stripped before the argument is compared.
-    """
-    marker = "Go to the project folder: cd "
-    for line in _strip(stdout).splitlines():
-        if marker in line:
-            return line.split(marker, 1)[1].rstrip().rstrip("│").rstrip()
-    raise AssertionError(f"no cd line in output:\n{stdout}")
-
-
-@pytest.mark.parametrize("name", ["proj v2", "my project"])
-def test_cd_line_quotes_a_name_containing_whitespace(tmp_path: Path, name: str):
-    """Rich-escaping alone left `cd proj v2`, which every shell reads as two
-    arguments, so the copy-pasted command did not enter the directory."""
-    result = _init(tmp_path, name)
-    assert result.exit_code == 0, _strip(result.stdout)
-    assert (tmp_path / name).is_dir()
-
-    printed = _cd_argument(result.stdout)
-    assert printed != name, "a whitespace-bearing name must be quoted"
-    assert name in printed, printed
-    assert printed == _shell_quote_arg(name)
-
-
-def test_ordinary_name_is_not_quoted(tmp_path: Path):
-    """The common case must stay byte-identical: no gratuitous quoting."""
-    result = _init(tmp_path, "my-project")
-    assert result.exit_code == 0, _strip(result.stdout)
-    assert _cd_argument(result.stdout) == "my-project"
-
-
-@requires_bash
-@pytest.mark.parametrize("name", ["proj v2", "proj [v2]", "my-project"])
-def test_printed_cd_command_actually_changes_directory(tmp_path: Path, name: str):
-    """Execute the printed command rather than only inspecting it.
-
-    This is the assertion the string comparisons cannot make: the rendered
-    `cd <arg>` is fed to a real shell and must land in the created directory.
-    """
-    result = _init(tmp_path, name)
-    assert result.exit_code == 0, _strip(result.stdout)
-    target = tmp_path / name
-    assert target.is_dir()
-
-    printed = _cd_argument(result.stdout)
-    proc = subprocess.run(
-        ["bash", "-c", f"cd {printed} && pwd"],
-        cwd=tmp_path,
-        capture_output=True,
-        text=True,
-    )
-    assert proc.returncode == 0, f"cd {printed!r} failed: {proc.stderr}"
-    assert Path(proc.stdout.strip()).name == name, proc.stdout
-
-
-def test_shell_quote_arg_is_host_appropriate():
-    """The helper follows `_version._render_argv`: list2cmdline on Windows,
-    shlex.quote elsewhere. Names needing no quoting round-trip unchanged."""
-    assert _shell_quote_arg("my-project") == "my-project"
-    quoted = _shell_quote_arg("my project")
-    assert quoted != "my project"
-    if os.name == "nt":
-        assert quoted == '"my project"'
-    else:
-        assert quoted == "'my project'"
@@ -1,753 +0,0 @@
-"""Parity tests for composed runtime template resolution."""
-
-from __future__ import annotations
-
-import json
-import os
-from pathlib import Path
-
-import pytest
-
-from tests.conftest import requires_bash
-from tests.parity_helpers import (
-    HAS_POWERSHELL,
-    bash_cmd,
-    clean_env,
-    install_composition_stack,
-    install_scripts,
-    json_stdout,
-    make_repo,
-    ps_cmd,
-    py_cmd,
-    run,
-)
-
-SCRIPT = "resolve-template"
-TEMPLATE = "constitution-template"
-
-
-def _setup_repo(tmp_path: Path) -> tuple[Path, str]:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    expected = install_composition_stack(repo, TEMPLATE, "# Core\n")
-    return repo, expected
-
-
-@requires_bash
-def test_all_variants_emit_composed_template_content(tmp_path: Path) -> None:
-    repo, expected = _setup_repo(tmp_path)
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode == 0 for result in results)
-    assert all(result.stderr == "" for result in results)
-    assert all(
-        json_stdout(result)
-        == {"TEMPLATE_NAME": TEMPLATE, "TEMPLATE_CONTENT": expected}
-        for result in results
-    )
-
-
-@requires_bash
-@pytest.mark.parametrize(
-    "without_registry,core_content",
-    [
-        (True, "# Core\n"),
-        (False, "# Café ✓\n"),
-    ],
-    ids=["directory_fallback", "unicode"],
-)
-def test_all_variants_preserve_composition_parity(
-    tmp_path: Path, without_registry: bool, core_content: str
-) -> None:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    expected = install_composition_stack(repo, TEMPLATE, core_content)
-    if without_registry:
-        (repo / ".specify" / "presets" / ".registry").unlink()
-        expected = (
-            "# Prepended\n\n\n"
-            "## Wrapper\n"
-            f"{core_content}\n"
-            "## End\n\n\n"
-            "# Appended\n"
-        )
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode == 0 for result in results)
-    assert all(
-        json_stdout(result)["TEMPLATE_CONTENT"] == expected
-        for result in results
-    )
-
-
-@requires_bash
-def test_all_variants_read_utf8_registry_under_ascii_locale(
-    tmp_path: Path,
-) -> None:
-    """Registry/manifest reads must force UTF-8, not the process locale.
-
-    With UTF-8 mode disabled and a C locale, the interpreter's default text
-    encoding is ASCII. Non-ASCII *metadata* in the registry or a manifest must
-    still resolve, because the resolvers open those files as UTF-8 explicitly.
-    Template content stays ASCII so the pure-Python variant can emit it on the
-    ASCII stdout this configuration forces.
-    """
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    expected = install_composition_stack(repo, TEMPLATE, "# Core\n")
-
-    # Inject non-ASCII metadata into the preset registry and a manifest so a
-    # locale-dependent decode would raise instead of resolving cleanly.
-    registry = repo / ".specify" / "presets" / ".registry"
-    registry_data = json.loads(registry.read_text(encoding="utf-8"))
-    registry_data["presets"]["wrap-pack"]["description"] = "Café ✓ wrapper"
-    registry.write_text(
-        json.dumps(registry_data, separators=(",", ":")) + "\n",
-        encoding="utf-8",
-    )
-    manifest = repo / ".specify" / "presets" / "wrap-pack" / "preset.yml"
-    manifest.write_text(
-        manifest.read_text(encoding="utf-8") + '      description: "Café ✓"\n',
-        encoding="utf-8",
-    )
-
-    env = clean_env()
-    # Force the interpreter's default text encoding to ASCII so an unqualified
-    # open() would fail on the non-ASCII metadata above.
-    env["PYTHONUTF8"] = "0"
-    env["PYTHONCOERCECLOCALE"] = "0"
-    env["LC_ALL"] = "C"
-    env["LANG"] = "C"
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo, env),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo, env),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo, env))
-
-    assert all(result.returncode == 0 for result in results)
-    assert all(
-        json_stdout(result)["TEMPLATE_CONTENT"] == expected
-        for result in results
-    )
-
-
-@requires_bash
-@pytest.mark.parametrize(
-    "template_name",
-    ["missing-template", "../../../outside"],
-    ids=["missing", "path_traversal"],
-)
-def test_all_variants_reject_unresolvable_template(
-    tmp_path: Path, template_name: str
-) -> None:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    (repo / "outside.md").write_text("sensitive content\n", encoding="utf-8")
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, template_name, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, template_name, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, template_name, "-Json"), repo))
-
-    assert all(result.returncode == 1 for result in results)
-    assert all(result.stdout == "" for result in results)
-    assert all("sensitive content" not in result.stderr for result in results)
-
-
-@requires_bash
-def test_all_variants_ignore_traversing_preset_registry_ids(tmp_path: Path) -> None:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    outside = repo.parent / "outside"
-    outside.mkdir()
-    (outside / f"{TEMPLATE}.md").write_text("sensitive content\n", encoding="utf-8")
-    presets = repo / ".specify" / "presets"
-    presets.mkdir(parents=True)
-    (presets / ".registry").write_text(
-        '{"presets":{"../../../outside":{"enabled":true,"priority":1}}}\n',
-        encoding="utf-8",
-    )
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode == 1 for result in results)
-    assert all("sensitive content" not in result.stdout for result in results)
-
-
-@requires_bash
-def test_all_variants_support_root_level_preset_convention(tmp_path: Path) -> None:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    preset = repo / ".specify" / "presets" / "root-pack"
-    preset.mkdir(parents=True)
-    (preset / f"{TEMPLATE}.md").write_text("# Root convention\n", encoding="utf-8")
-    (repo / ".specify" / "presets" / ".registry").write_text(
-        '{"presets":{"root-pack":{"enabled":true,"priority":1}}}\n',
-        encoding="utf-8",
-    )
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode == 0 for result in results)
-    assert all(
-        json_stdout(result)["TEMPLATE_CONTENT"] == "# Root convention\n"
-        for result in results
-    )
-
-
-@requires_bash
-def test_all_variants_honor_extension_registry_state_and_priority(
-    tmp_path: Path,
-) -> None:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    extensions = repo / ".specify" / "extensions"
-    for extension_id, content in (
-        ("disabled-ext", "# Disabled\n"),
-        ("low-priority", "# Low priority\n"),
-        ("high-priority", "# High priority\n"),
-    ):
-        template_dir = extensions / extension_id / "templates"
-        template_dir.mkdir(parents=True)
-        (template_dir / f"{TEMPLATE}.md").write_text(content, encoding="utf-8")
-    (extensions / ".registry").write_text(
-        '{"extensions":{'
-        '"disabled-ext":{"enabled":null,"priority":1},'
-        '"low-priority":{"enabled":true,"priority":20},'
-        '"high-priority":{"enabled":true,"priority":5}'
-        "}}\n",
-        encoding="utf-8",
-    )
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode == 0 for result in results)
-    assert all(
-        json_stdout(result)["TEMPLATE_CONTENT"] == "# High priority\n"
-        for result in results
-    )
-
-
-@requires_bash
-def test_all_variants_support_root_level_extension_convention(
-    tmp_path: Path,
-) -> None:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    extension = repo / ".specify" / "extensions" / "root-extension"
-    extension.mkdir(parents=True)
-    (extension / f"{TEMPLATE}.md").write_text(
-        "# Root extension\n",
-        encoding="utf-8",
-    )
-    (repo / ".specify" / "extensions" / ".registry").write_text(
-        '{"extensions":{"root-extension":{"enabled":true,"priority":1}}}\n',
-        encoding="utf-8",
-    )
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode == 0 for result in results)
-    assert all(
-        json_stdout(result)["TEMPLATE_CONTENT"] == "# Root extension\n"
-        for result in results
-    )
-
-
-@requires_bash
-def test_all_variants_treat_extension_registry_ids_case_sensitively(
-    tmp_path: Path,
-) -> None:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    extension = repo / ".specify" / "extensions" / "foo" / "templates"
-    extension.mkdir(parents=True)
-    (extension / f"{TEMPLATE}.md").write_text(
-        "# Lowercase extension\n",
-        encoding="utf-8",
-    )
-    (repo / ".specify" / "extensions" / ".registry").write_text(
-        '{"extensions":{"FOO":{"enabled":true,"priority":1}}}\n',
-        encoding="utf-8",
-    )
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode == 0 for result in results)
-    assert all(
-        json_stdout(result)["TEMPLATE_CONTENT"] == "# Lowercase extension\n"
-        for result in results
-    )
-
-
-@requires_bash
-@pytest.mark.parametrize(
-    "registry_content",
-    ["{ not valid json", '{"extensions":[]}\n', "[]\n"],
-    ids=["invalid_json", "non_mapping_extensions", "non_mapping_root"],
-)
-def test_all_variants_fail_for_malformed_extension_registry(
-    tmp_path: Path, registry_content: str
-) -> None:
-    """A corrupt extension registry must fail closed, not silently enable
-    every on-disk extension directory as unregistered."""
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    extensions = repo / ".specify" / "extensions"
-    template_dir = extensions / "sneaky-ext" / "templates"
-    template_dir.mkdir(parents=True)
-    (template_dir / f"{TEMPLATE}.md").write_text(
-        "# Should not be served\n", encoding="utf-8"
-    )
-    (extensions / ".registry").write_text(registry_content, encoding="utf-8")
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode != 0 for result in results)
-    assert all(result.stdout == "" for result in results)
-    assert all(
-        "Should not be served" not in result.stdout for result in results
-    )
-
-
-@requires_bash
-def test_all_variants_fail_when_registry_is_a_directory(
-    tmp_path: Path,
-) -> None:
-    """A directory at the extension registry path must fail closed, not be
-    treated as an absent registry that enables every on-disk extension."""
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    extensions = repo / ".specify" / "extensions"
-    template_dir = extensions / "sneaky-ext" / "templates"
-    template_dir.mkdir(parents=True)
-    (template_dir / f"{TEMPLATE}.md").write_text(
-        "# Should not be served\n", encoding="utf-8"
-    )
-    # Create ``.registry`` as a directory rather than a regular file.
-    (extensions / ".registry").mkdir()
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode != 0 for result in results)
-    assert all(result.stdout == "" for result in results)
-
-
-@requires_bash
-def test_all_variants_fail_when_registry_is_broken_symlink(
-    tmp_path: Path,
-) -> None:
-    """A broken symlink at the extension registry path must fail closed across
-    Bash, Python, and PowerShell resolvers rather than being treated as absent."""
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    extensions = repo / ".specify" / "extensions"
-    template_dir = extensions / "sneaky-ext" / "templates"
-    template_dir.mkdir(parents=True)
-    (template_dir / f"{TEMPLATE}.md").write_text(
-        "# Should not be served\n", encoding="utf-8"
-    )
-    (extensions / ".registry").symlink_to(extensions / "does-not-exist")
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode != 0 for result in results)
-    assert all(result.stdout == "" for result in results)
-
-
-@requires_bash
-@pytest.mark.parametrize("base_kind", ["override", "preset"])
-def test_all_variants_ignore_malformed_layers_below_replace_base(
-    tmp_path: Path,
-    base_kind: str,
-) -> None:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    expected = "# Winning base\r\nBody\r\n"
-    presets = repo / ".specify" / "presets"
-
-    if base_kind == "override":
-        override = repo / ".specify" / "templates" / "overrides"
-        override.mkdir(parents=True)
-        (override / f"{TEMPLATE}.md").write_bytes(expected.encode("utf-8"))
-        registry = {"presets": {"broken-pack": {"enabled": True, "priority": 1}}}
-    else:
-        winning = presets / "winning-pack" / "templates"
-        winning.mkdir(parents=True)
-        (winning / f"{TEMPLATE}.md").write_bytes(expected.encode("utf-8"))
-        registry = {
-            "presets": {
-                "winning-pack": {"enabled": True, "priority": 1},
-                "broken-pack": {"enabled": True, "priority": 2},
-            }
-        }
-
-    broken = presets / "broken-pack"
-    broken.mkdir(parents=True)
-    (broken / "preset.yml").write_text("provides: [\n", encoding="utf-8")
-    (presets / ".registry").write_text(
-        json.dumps(registry, separators=(",", ":")) + "\n",
-        encoding="utf-8",
-    )
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode == 0 for result in results)
-    assert all(
-        json_stdout(result)["TEMPLATE_CONTENT"] == expected
-        for result in results
-    )
-
-
-@requires_bash
-@pytest.mark.parametrize(
-    ("entries", "expected"),
-    [
-        (
-            [
-                ("disabled-pack", {"enabled": False, "priority": 0}),
-                ("numeric-pack", {"enabled": True, "priority": 2}),
-                ("string-pack", {"enabled": True, "priority": "1"}),
-            ],
-            "# string-pack\n",
-        ),
-        (
-            [
-                ("z-pack", {"enabled": True}),
-                ("a-pack", {"enabled": True}),
-            ],
-            "# a-pack\n",
-        ),
-        (
-            [
-                ("float-pack", {"enabled": True, "priority": 5.9}),
-                ("six-pack", {"enabled": True, "priority": 6}),
-            ],
-            "# float-pack\n",
-        ),
-        (
-            [
-                ("a-huge-pack", {"enabled": True, "priority": 2147483648}),
-                ("z-default-pack", {"enabled": True, "priority": "invalid"}),
-            ],
-            "# z-default-pack\n",
-        ),
-        (
-            [
-                ("decimal-string-pack", {"enabled": True, "priority": "5.9"}),
-                ("exponent-string-pack", {"enabled": True, "priority": "1e3"}),
-                ("hex-string-pack", {"enabled": True, "priority": "0x10"}),
-                ("six-pack", {"enabled": True, "priority": 6}),
-            ],
-            "# six-pack\n",
-        ),
-    ],
-    ids=[
-        "mixed_priorities",
-        "equal_priority_id_tiebreaker",
-        "float_priority",
-        "large_integer_priority",
-        "non_integer_numeric_strings",
-    ],
-)
-def test_all_variants_normalize_and_tiebreak_preset_priorities(
-    tmp_path: Path,
-    entries: list[tuple[str, dict[str, object]]],
-    expected: str,
-) -> None:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    presets = repo / ".specify" / "presets"
-    registry: dict[str, object] = {"presets": {}}
-    registry_presets = registry["presets"]
-    assert isinstance(registry_presets, dict)
-    for preset_id, metadata in entries:
-        template_dir = presets / preset_id / "templates"
-        template_dir.mkdir(parents=True)
-        (template_dir / f"{TEMPLATE}.md").write_text(
-            f"# {preset_id}\n",
-            encoding="utf-8",
-        )
-        registry_presets[preset_id] = metadata
-    (presets / ".registry").write_text(
-        json.dumps(registry, separators=(",", ":")) + "\n",
-        encoding="utf-8",
-    )
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode == 0 for result in results)
-    assert all(
-        json_stdout(result)["TEMPLATE_CONTENT"] == expected
-        for result in results
-    )
-
-
-@requires_bash
-def test_all_variants_fail_when_wrap_placeholder_is_missing(
-    tmp_path: Path,
-) -> None:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    templates = repo / ".specify" / "templates"
-    templates.mkdir(parents=True)
-    (templates / f"{TEMPLATE}.md").write_text("# Core\n", encoding="utf-8")
-    preset = repo / ".specify" / "presets" / "wrap-pack"
-    (preset / "templates").mkdir(parents=True)
-    (preset / "templates" / f"{TEMPLATE}.md").write_text(
-        "# Broken wrapper\n", encoding="utf-8"
-    )
-    (preset / "preset.yml").write_text(
-        "provides:\n"
-        "  templates:\n"
-        "    - type: template\n"
-        f"      name: {TEMPLATE}\n"
-        f"      file: templates/{TEMPLATE}.md\n"
-        "      strategy: wrap\n",
-        encoding="utf-8",
-    )
-    (repo / ".specify" / "presets" / ".registry").write_text(
-        '{"presets":{"wrap-pack":{"enabled":true,"priority":1}}}\n',
-        encoding="utf-8",
-    )
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode != 0 for result in results)
-    assert all(result.stdout == "" for result in results)
-
-
-@requires_bash
-def test_all_variants_fail_when_yaml_parser_is_unavailable(
-    tmp_path: Path,
-) -> None:
-    repo, _ = _setup_repo(tmp_path)
-    blocker = tmp_path / "blocker"
-    blocker.mkdir()
-    (blocker / "yaml.py").write_text(
-        "raise ImportError('simulated missing PyYAML')\n",
-        encoding="utf-8",
-    )
-    env = clean_env()
-    env["PYTHONPATH"] = str(blocker)
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo, env),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo, env),
-    ]
-    if HAS_POWERSHELL:
-        results.append(
-            run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo, env)
-        )
-
-    assert all(result.returncode != 0 for result in results)
-    assert all(result.stdout == "" for result in results)
-
-
-@requires_bash
-def test_bash_fails_when_override_read_fails(tmp_path: Path) -> None:
-    repo = make_repo(tmp_path)
-    install_scripts(repo, SCRIPT)
-    override = repo / ".specify" / "templates" / "overrides"
-    override.mkdir(parents=True)
-    (override / f"{TEMPLATE}.md").write_text("# Override\n", encoding="utf-8")
-    shim_dir = tmp_path / "bin"
-    shim_dir.mkdir()
-    cat_shim = shim_dir / "cat"
-    cat_shim.write_text(
-        "#!/bin/sh\n"
-        "case \"$1\" in\n"
-        "  */.specify/templates/overrides/*) exit 1 ;;\n"
-        "esac\n"
-        "exec /bin/cat \"$@\"\n",
-        encoding="utf-8",
-    )
-    cat_shim.chmod(0o755)
-    env = clean_env()
-    env["PATH"] = f"{shim_dir}{os.pathsep}{env.get('PATH', '')}"
-
-    result = run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo, env)
-
-    assert result.returncode != 0
-    assert result.stdout == ""
-
-
-@requires_bash
-@pytest.mark.parametrize(
-    "manifest_content",
-    [
-        "provides: [\n",
-        "",
-        "provides:\n  templates:\n    - null\n",
-        "provides:\n  templates: {}\n",
-        "preset:\n  id: wrap-pack\n",
-        "provides:\n  templates: []\n",
-        f"""provides:
-  templates:
-    - type: template
-      name: {TEMPLATE}
-      file: null
-      strategy: wrap
-""",
-        f"""provides:
-  templates:
-    - type: template
-      name: {TEMPLATE}
-      file: templates/{TEMPLATE}.md
-      strategy: 123
-""",
-        f"""provides:
-  templates:
-    - type: template
-      name: {TEMPLATE}
-      file: templates/{TEMPLATE}.md
-      strategy: wrap
-    - type: template
-      name: unrelated-template
-      file: null
-      strategy: append
-""",
-        f"""provides:
-  templates:
-    - name: {TEMPLATE}
-      file: templates/{TEMPLATE}.md
-      strategy: wrap
-    - type: template
-      name: unrelated-template
-      file: templates/other.md
-""",
-        f"""provides:
-  templates:
-    - type: template
-      name: {TEMPLATE}
-      file: templates/{TEMPLATE}.md
-      strategy: wrap
-    - type: template
-      name: unrelated-template
-""",
-        f"""provides:
-  templates:
-    - type: template
-      name: {TEMPLATE}
-      file: templates/{TEMPLATE}.md
-      strategy: wrap
-    - type: bogus
-      name: unrelated-template
-      file: templates/other.md
-""",
-        f"""provides:
-  templates:
-    - type: template
-      name: {TEMPLATE}
-      file: templates/{TEMPLATE}.md
-      strategy: wrap
-    - type: template
-      name: unrelated-template
-      file: templates/other.md
-      strategy: merge
-""",
-    ],
-    ids=[
-        "invalid_yaml",
-        "empty_document",
-        "non_mapping_template_entry",
-        "non_list_templates",
-        "missing_provides",
-        "empty_templates",
-        "non_string_file",
-        "non_string_strategy",
-        "malformed_entry_after_match",
-        "entry_missing_type",
-        "entry_missing_file",
-        "unsupported_type",
-        "unsupported_strategy",
-    ],
-)
-def test_all_variants_fail_for_malformed_preset_manifest(
-    tmp_path: Path,
-    manifest_content: str,
-) -> None:
-    repo, _ = _setup_repo(tmp_path)
-    (
-        repo / ".specify" / "presets" / "wrap-pack" / "preset.yml"
-    ).write_text(manifest_content, encoding="utf-8")
-
-    results = [
-        run(bash_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-        run(py_cmd(repo, SCRIPT, TEMPLATE, "--json"), repo),
-    ]
-    if HAS_POWERSHELL:
-        results.append(run(ps_cmd(repo, SCRIPT, TEMPLATE, "-Json"), repo))
-
-    assert all(result.returncode != 0 for result in results)
-    assert all(result.stdout == "" for result in results)
--- a/Show More
+++ b/Show More