From 65b8f5559847ad85a4be9f8281d044eff6ef82e2 Mon Sep 17 00:00:00 2001
From: Abdul Wahab <abdulwahabone@gmail.com>
Date: Fri, 7 Aug 2026 13:33:42 +0500
Subject: [PATCH 1/4] Fix: stop the plugin subtree from running the project's
 skill copy (#523)

The ./plugin subtree copied dist/claude-code output verbatim, so its 44
markdown instructions said `node .claude/skills/impeccable/scripts/...`,
a path inside the user's project. A plugin-only install got
MODULE_NOT_FOUND; a dual install silently ran the project's older skill
copy with zero indication anything was wrong.

There is no literal path that works for plugins (CLAUDE_PLUGIN_ROOT is
hook-only), so the build now rewrites the plugin subtree's markdown to
the `<skill-base-dir>` form SKILL.md already carried as a fallback, and
scopes the allowed-tools rule to `Bash(node */skills/impeccable/scripts/*)`
so it pre-approves the skill's own install path instead of the project's.

Drafted with AI assistance, reviewed by a maintainer.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 plugin/agents/impeccable-asset-producer.md    |   2 +-
 .../skills/impeccable/reference/critique.md   |  10 +-
 .../reference/degraded/asset-producer.md      |   2 +-
 plugin/skills/impeccable/reference/doctor.md  |   4 +-
 plugin/skills/impeccable/reference/hooks.md   |  12 +-
 plugin/skills/impeccable/reference/layout.md  |   2 +-
 .../skills/impeccable/reference/live-setup.md |   2 +-
 plugin/skills/impeccable/reference/live.md    |  26 ++--
 plugin/skills/impeccable/reference/polish.md  |   2 +-
 plugin/skills/impeccable/reference/routing.md |   4 +-
 plugin/skills/impeccable/reference/typeset.md |   2 +-
 .../skills/impeccable/reference/visualize.md  |   2 +-
 scripts/build.js                              |   8 ++
 scripts/lib/plugin-paths.js                   |  73 +++++++++++
 scripts/test-suites.mjs                       |   2 +
 tests/plugin-paths.test.js                    | 116 ++++++++++++++++++
 16 files changed, 234 insertions(+), 35 deletions(-)
 create mode 100644 scripts/lib/plugin-paths.js
 create mode 100644 tests/plugin-paths.test.js

diff --git a/plugin/agents/impeccable-asset-producer.md b/plugin/agents/impeccable-asset-producer.md
index 600f0f8f4..1002d8d24 100644
--- a/plugin/agents/impeccable-asset-producer.md
+++ b/plugin/agents/impeccable-asset-producer.md
@@ -58,7 +58,7 @@ Ask blockers once, globally. Missing source path/crops or output directory block
 
 7. Remove baked-in UI text, navigation, buttons, body copy, and mock chrome unless the text is part of the asset.
 8. Think through the final DOM/CSS representation before generating. If CSS will own radius, clipping, shadows, borders, perspective, responsive cropping, captions, or card frames, do not bake those into the bitmap.
-9. Save outputs non-destructively in the requested project directory, and leave the intent with the file: after every generation, run `node .claude/skills/impeccable/scripts/embed-prompt.mjs <asset> --prompt "<the prompt used>"` so the prompt is embedded in the image itself, because the build thread composes what you made and needs to know what it is looking at, and the embedding survives copies where sidecars get lost.
+9. Save outputs non-destructively in the requested project directory, and leave the intent with the file: after every generation, run `node <skill-base-dir>/scripts/embed-prompt.mjs <asset> --prompt "<the prompt used>"` so the prompt is embedded in the image itself, because the build thread composes what you made and needs to know what it is looking at, and the embedding survives copies where sidecars get lost.
 10. Compare each output against its source crop, opening every image by its workspace-relative path; sandboxed viewers reject absolute paths. If a review/QA tool is available, run it before the final manifest, then retry each major/fatal finding once before finalizing.
 
 Use `texture/pattern extraction` only when the source region is already clean enough to sample as texture. If UI, cards, labels, headings, body copy, or footer chrome must be removed to make a reusable texture or background, classify it as crop-derived cleanup or clean-plate work.
diff --git a/plugin/skills/impeccable/reference/critique.md b/plugin/skills/impeccable/reference/critique.md
index 42c3f0d92..0317f6789 100644
--- a/plugin/skills/impeccable/reference/critique.md
+++ b/plugin/skills/impeccable/reference/critique.md
@@ -21,7 +21,7 @@ Resolve one stable target, run two independent assessments, synthesize a design
    - "this page" -> the current URL or source file
 2. **Confirm the target slugs cleanly**:
    ```bash
-   node .claude/skills/impeccable/scripts/critique-storage.mjs slug "<resolved-path-or-url>"
+   node <skill-base-dir>/scripts/critique-storage.mjs slug "<resolved-path-or-url>"
    ```
    Every later command also accepts the resolved target directly and derives the same slug internally; never hand-write a slug. If this exits non-zero, skip persistence and trend for this run, but continue the critique.
 3. **Read `.impeccable/critique/ignore.md`** if it exists. Drop matching findings silently; it is the only prior-run input critique consumes.
@@ -57,7 +57,7 @@ Run the bundled detector and browser visualization evidence. Assessment B is man
 
 CLI scan:
 ```bash
-node .claude/skills/impeccable/scripts/detect.mjs --json [target]
+node <skill-base-dir>/scripts/detect.mjs --json [target]
 ```
 
 - Pass markup files/directories as `[target]`; do not pass CSS-only files.
@@ -71,7 +71,7 @@ Browser visualization is required for a viewable target when browser automation
 1. Create a fresh tab and navigate. Prefer the harness's native/browser-canvas screenshot path before hand-rolling a Playwright/Puppeteer script; only fall back to a custom script when no native browser tool is exposed.
 2. Preflight mutable injection by setting `document.title` and appending a `<script>` tag. Read-only evaluate APIs do not count.
 3. If mutation is unavailable, skip live server, browser presentation, and injection; report fallback signal.
-4. If mutation is available, start `node .claude/skills/impeccable/scripts/live-server.mjs --background`, present the browser if supported, label `[Human]`, scroll top, inject `http://localhost:PORT/detect.js`, wait 2-3 seconds, read `impeccable` console messages, then stop the live server.
+4. If mutation is available, start `node <skill-base-dir>/scripts/live-server.mjs --background`, present the browser if supported, label `[Human]`, scroll top, inject `http://localhost:PORT/detect.js`, wait 2-3 seconds, read `impeccable` console messages, then stop the live server.
 5. For multi-view targets, inject on 3-5 representative pages.
 
 Return: CLI findings JSON/counts, browser console findings if applicable, false positives, and skipped/failed browser steps with concrete reasons.
@@ -183,7 +183,7 @@ Skip this step if the Setup slug was null (vague or root-level target).
 2. **Pass the structured metadata** through `IMPECCABLE_CRITIQUE_META` (JSON), then run the write command:
    ```bash
    IMPECCABLE_CRITIQUE_META='{"target":"<user phrasing>","total_score":<n>,"max_score":<n>,"na_heuristics":"<comma-separated numbers, or empty>","p0_count":<n>,"p1_count":<n>}' \
-     node .claude/skills/impeccable/scripts/critique-storage.mjs write "<resolved target>" <body-file>
+     node <skill-base-dir>/scripts/critique-storage.mjs write "<resolved target>" <body-file>
    ```
    `max_score` is the applicable maximum from the heuristic table (40 when every heuristic applied), so a later run can tell a renormalized total from a full one. The helper prints the absolute path it wrote.
 
@@ -191,7 +191,7 @@ Skip this step if the Setup slug was null (vague or root-level target).
 
 4. **Read the trend** for context:
    ```bash
-   node .claude/skills/impeccable/scripts/critique-storage.mjs trend "<resolved target>" 5
+   node <skill-base-dir>/scripts/critique-storage.mjs trend "<resolved target>" 5
    ```
    This returns a JSON array of the last 5 frontmatter entries (including the one you just wrote).
 
diff --git a/plugin/skills/impeccable/reference/degraded/asset-producer.md b/plugin/skills/impeccable/reference/degraded/asset-producer.md
index cfce6a1f0..4e9edd65c 100644
--- a/plugin/skills/impeccable/reference/degraded/asset-producer.md
+++ b/plugin/skills/impeccable/reference/degraded/asset-producer.md
@@ -53,7 +53,7 @@ Ask blockers once, globally. Missing source path/crops or output directory block
 
 7. Remove baked-in UI text, navigation, buttons, body copy, and mock chrome unless the text is part of the asset.
 8. Think through the final DOM/CSS representation before generating. If CSS will own radius, clipping, shadows, borders, perspective, responsive cropping, captions, or card frames, do not bake those into the bitmap.
-9. Save outputs non-destructively in the requested project directory, and leave the intent with the file: after every generation, run `node .claude/skills/impeccable/scripts/embed-prompt.mjs <asset> --prompt "<the prompt used>"` so the prompt is embedded in the image itself, because the build thread composes what you made and needs to know what it is looking at, and the embedding survives copies where sidecars get lost.
+9. Save outputs non-destructively in the requested project directory, and leave the intent with the file: after every generation, run `node <skill-base-dir>/scripts/embed-prompt.mjs <asset> --prompt "<the prompt used>"` so the prompt is embedded in the image itself, because the build thread composes what you made and needs to know what it is looking at, and the embedding survives copies where sidecars get lost.
 10. Compare each output against its source crop, opening every image by its workspace-relative path; sandboxed viewers reject absolute paths. If a review/QA tool is available, run it before the final manifest, then retry each major/fatal finding once before finalizing.
 
 Use `texture/pattern extraction` only when the source region is already clean enough to sample as texture. If UI, cards, labels, headings, body copy, or footer chrome must be removed to make a reusable texture or background, classify it as crop-derived cleanup or clean-plate work.
diff --git a/plugin/skills/impeccable/reference/doctor.md b/plugin/skills/impeccable/reference/doctor.md
index 72ba14ff7..7300b4d8d 100644
--- a/plugin/skills/impeccable/reference/doctor.md
+++ b/plugin/skills/impeccable/reference/doctor.md
@@ -13,7 +13,7 @@ Three kinds of drift travel under "out of date". Keep them apart:
 ## Step 1: Run the pass
 
 ```
-node .claude/skills/impeccable/scripts/doctor.mjs --json
+node <skill-base-dir>/scripts/doctor.mjs --json
 ```
 
 Add `--target <path>` when the user named a workspace, file, or route in a monorepo. Without it the report describes the repo root, and in a monorepo that is often the wrong project.
@@ -26,7 +26,7 @@ An empty `findings` array is the good outcome. Say so in one line and stop.
 
 The severity says what should happen, not how bad it is.
 
-- **`auto`** carries no decision. Run `node .claude/skills/impeccable/scripts/doctor.mjs --fix` once to apply these, then report what it moved in one line. Do not ask permission first, and do not ask about them afterward.
+- **`auto`** carries no decision. Run `node <skill-base-dir>/scripts/doctor.mjs --fix` once to apply these, then report what it moved in one line. Do not ask permission first, and do not ask about them afterward.
 - **`mention`** needs the user to know but not to decide anything now. State each one in a sentence with its offered fix.
 - **`route`** needs a specific command. Name the command and the gap it would close. Run it only if the user asks in this turn; `init` and `document` are conversations, not repairs you perform unattended.
 
diff --git a/plugin/skills/impeccable/reference/hooks.md b/plugin/skills/impeccable/reference/hooks.md
index 77ee7b871..11ad763ae 100644
--- a/plugin/skills/impeccable/reference/hooks.md
+++ b/plugin/skills/impeccable/reference/hooks.md
@@ -40,7 +40,7 @@ The first argument is the action. Defaults to `status`.
 2. Invoke the admin script and pass the user's output through verbatim:
 
    ```bash
-   node .claude/skills/impeccable/scripts/hook-admin.mjs <action> [args...]
+   node <skill-base-dir>/scripts/hook-admin.mjs <action> [args...]
    ```
 
 3. If `<action>` is `off`, follow up with a one-line note: "Done. New edits will not trigger the design hook in this project until you run `/impeccable hooks on`."
@@ -64,32 +64,32 @@ Prefer the narrowest exception:
 Example value-specific exception:
 
 ```bash
-node .claude/skills/impeccable/scripts/hook-admin.mjs ignore-value overused-font Inter --shared --reason "User confirmed Inter is intentional"
+node <skill-base-dir>/scripts/hook-admin.mjs ignore-value overused-font Inter --shared --reason "User confirmed Inter is intentional"
 ```
 
 Example intentional motion exception:
 
 ```bash
-node .claude/skills/impeccable/scripts/hook-admin.mjs ignore-value bounce-easing bounce-ball --shared --reason "User confirmed ball bounce animation is intentional"
+node <skill-base-dir>/scripts/hook-admin.mjs ignore-value bounce-easing bounce-ball --shared --reason "User confirmed ball bounce animation is intentional"
 ```
 
 Example whole-rule font exception:
 
 ```bash
-node .claude/skills/impeccable/scripts/hook-admin.mjs ignore-rule overused-font --all-values --reason "User asked to ignore overused fonts generally"
+node <skill-base-dir>/scripts/hook-admin.mjs ignore-rule overused-font --all-values --reason "User asked to ignore overused fonts generally"
 ```
 
 Example one-rule-in-one-file exception, for a file that is still worth reviewing
 for everything else:
 
 ```bash
-node .claude/skills/impeccable/scripts/hook-admin.mjs ignore-value design-system-font-size "*" --file "src/overlay/widget.js" --reason "Injected widget builds its own type scale; DESIGN.md's ramp describes the site"
+node <skill-base-dir>/scripts/hook-admin.mjs ignore-value design-system-font-size "*" --file "src/overlay/widget.js" --reason "Injected widget builds its own type scale; DESIGN.md's ramp describes the site"
 ```
 
 Example whole-file exception, for a file that is out of scope entirely:
 
 ```bash
-node .claude/skills/impeccable/scripts/hook-admin.mjs ignore-file "src/legacy/Card.tsx"
+node <skill-base-dir>/scripts/hook-admin.mjs ignore-file "src/legacy/Card.tsx"
 ```
 
 ## Constraints
diff --git a/plugin/skills/impeccable/reference/layout.md b/plugin/skills/impeccable/reference/layout.md
index c8404091d..7daaa18e6 100644
--- a/plugin/skills/impeccable/reference/layout.md
+++ b/plugin/skills/impeccable/reference/layout.md
@@ -25,7 +25,7 @@ When a sub-agent tool is available and permitted, run these independently; other
 2. **Mechanical scan:** run:
 
 ```bash
-node .claude/skills/impeccable/scripts/detect.mjs --json --scope layout [target files or dirs]
+node <skill-base-dir>/scripts/detect.mjs --json --scope layout [target files or dirs]
 ```
 
 Also inspect arbitrary spacing, overflow, stacking, and container behavior the detector cannot resolve. Keep mechanical evidence out of the first assessment, then synthesize both passes before editing. A clean scan cannot prove hierarchy or rhythm.
diff --git a/plugin/skills/impeccable/reference/live-setup.md b/plugin/skills/impeccable/reference/live-setup.md
index 2e38587be..3e2f500a8 100644
--- a/plugin/skills/impeccable/reference/live-setup.md
+++ b/plugin/skills/impeccable/reference/live-setup.md
@@ -45,7 +45,7 @@ On every boot the project is scanned for HTML files under common page roots (`pu
 If `config.cspChecked === true`, skip this whole section; the user was already asked once.
 
 ```bash
-node .claude/skills/impeccable/scripts/detect-csp.mjs
+node <skill-base-dir>/scripts/detect-csp.mjs
 ```
 
 Output `{ shape, signals }`; the shape names the *patch mechanism*, so one template covers many frameworks:
diff --git a/plugin/skills/impeccable/reference/live.md b/plugin/skills/impeccable/reference/live.md
index 479342f56..c5c49a21a 100644
--- a/plugin/skills/impeccable/reference/live.md
+++ b/plugin/skills/impeccable/reference/live.md
@@ -8,7 +8,7 @@ A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file
 
 Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins.
 
-1. `live.mjs`: boot. If the request names or implies a file, route, or app inside a monorepo, infer the concrete path and run `node .claude/skills/impeccable/scripts/live.mjs --target <path>` instead; then run the rest of this live session from the returned `projectRoot`. The boot resolves the app root from dev-server config files and persists it in `.impeccable/live/roots.json`; every helper re-anchors to that manifest at startup (a wrong cwd cannot fork session state), PRODUCT.md / DESIGN.md are discovered upward to the git root, and relative helper args like `--file` resolve against the app root.
+1. `live.mjs`: boot. If the request names or implies a file, route, or app inside a monorepo, infer the concrete path and run `node <skill-base-dir>/scripts/live.mjs --target <path>` instead; then run the rest of this live session from the returned `projectRoot`. The boot resolves the app root from dev-server config files and persists it in `.impeccable/live/roots.json`; every helper re-anchors to that manifest at startup (a wrong cwd cannot fork session state), PRODUCT.md / DESIGN.md are discovered upward to the git root, and relative helper args like `--file` resolve against the app root.
 2. Open the app URL that serves `pageFile` (infer from `package.json`, docs, terminal output, or an open tab). Never use `serverPort`; it's the helper, not the app. **Cursor:** `browser_navigate` to that URL before polling; do not skip. **Other harnesses:** use the available browser tool; if the URL is uncertain, ask the user once.
 3. Poll loop with the default long timeout (600000 ms). Run `live-poll.mjs` again immediately after every event or `--reply`; Codex runs this one-shot poll in the foreground. Never pass a short `--timeout=`. The global bar's **Impeccable mark** dims with a pulsing amber dot when nothing is polling `/poll`; restart `live-poll.mjs` to reconnect.
 4. On `generate`: reuse `event.scaffold` when present; read the screenshot if present; load the action's reference; deliver variants; `--reply done`; poll again. Generate in this thread: you already hold the project's tokens and layout. The overlay preview IS the verification channel; do not screenshot, re-render, or QA variants between generate and accept. Apply craft-floor's contrast, spacing, and type floors by construction as you write; full verification runs once at accept on the chosen variant.
@@ -31,7 +31,7 @@ Chat is overhead. No recap, no tutorial output, no pasting PRODUCT / DESIGN bodi
 
 ```
 LOOP:
-  node .claude/skills/impeccable/scripts/live-poll.mjs   # default long timeout; no --timeout=
+  node <skill-base-dir>/scripts/live-poll.mjs   # default long timeout; no --timeout=
   Read JSON; dispatch on "type"
 
   "generate"  → Handle Generate; reply done; LOOP
@@ -52,7 +52,7 @@ LOOP:
 ## Start
 
 ```bash
-node .claude/skills/impeccable/scripts/live.mjs
+node <skill-base-dir>/scripts/live.mjs
 ```
 
 Output JSON: `{ ok, serverPort, serverToken, pageFiles, roots, hasProduct, product, productPath, hasDesign, design, designPath, hasSurfaceBrief, surfaceBrief }`. `roots` is the resolved root manifest; `projectRoot` mirrors `roots.appRoot`. The surface brief rides along; do not shell out to `surface-brief.mjs` separately. Precedence for generation: **DESIGN.md wins on visual decisions; PRODUCT.md wins on durable product and voice decisions; the surface brief wins on this surface's strategy.** When DESIGN.md is missing, identity is **not** absent; extract it from CSS variables, computed styles, and sibling components (Step 4 Phase A). Identity preservation is the default; departure requires the user's explicit redesign intent.
@@ -66,9 +66,9 @@ If output is `{ ok: false, error: "config_missing" | "config_invalid", path }`,
 The append-only journal under `.impeccable/live/sessions/` is canonical durable state (not project source). When the chat was interrupted, polling was missed, the helper restarted, or the browser reloaded:
 
 ```bash
-node .claude/skills/impeccable/scripts/live-status.mjs      # helper state, active sessions, queued events; works with the helper down
-node .claude/skills/impeccable/scripts/live-resume.mjs --id SESSION_ID   # active snapshot, pending event, next safe action
-node .claude/skills/impeccable/scripts/live-complete.mjs --id SESSION_ID # canonical manual final acknowledgement after verified cleanup
+node <skill-base-dir>/scripts/live-status.mjs      # helper state, active sessions, queued events; works with the helper down
+node <skill-base-dir>/scripts/live-resume.mjs --id SESSION_ID   # active snapshot, pending event, next safe action
+node <skill-base-dir>/scripts/live-complete.mjs --id SESSION_ID # canonical manual final acknowledgement after verified cleanup
 ```
 
 Server restart rule: start `live-server.mjs` again, then poll; startup requeues unacknowledged events, so never ask the user to click Go again unless `live-resume.mjs` says no active session exists.
@@ -87,7 +87,7 @@ Speed matters; the user is watching the selected element. Reuse preflight metada
 2. If `event.scaffold` is present, use it and do **not** run the helper again. Otherwise:
 
 ```bash
-node .claude/skills/impeccable/scripts/live-insert.mjs --id EVENT_ID --count EVENT_COUNT --position after \
+node <skill-base-dir>/scripts/live-insert.mjs --id EVENT_ID --count EVENT_COUNT --position after \
   --element-id "ANCHOR_ID" --classes "class1,class2" --tag "section" --text "ANCHOR_TEXT"
 ```
 
@@ -108,7 +108,7 @@ When `event.scaffold` is present, the helper already found the source and comput
 **On source-preview targets `event.scaffold` carries `sourceWritten: false`.** The helper did NOT write the wrapper; it hands you `scaffold.wrapperBlock` plus the picked element's source range (`replaceStartLine`, `replaceEndLine`, 1-indexed). Write the wrapper **and** all variants in ONE edit: splice your variants into `wrapperBlock` at the "Variants: insert below this line" marker, then replace lines `[replaceStartLine, replaceEndLine]` with the result. A separate scaffold write reloads the framework before your variant write lands and strands the browser at 0/N. (`replaceEndLine < replaceStartLine` means insert mode: insert, remove nothing.) The `svelte-component` path never sets `sourceWritten`.
 
 ```bash
-node .claude/skills/impeccable/scripts/live-wrap.mjs --id EVENT_ID --count EVENT_COUNT --element-id "ELEMENT_ID" --classes "class1,class2" --tag "div" --text "TEXT_SNIPPET"
+node <skill-base-dir>/scripts/live-wrap.mjs --id EVENT_ID --count EVENT_COUNT --element-id "ELEMENT_ID" --classes "class1,class2" --tag "div" --text "TEXT_SNIPPET"
 ```
 
 Flag mapping (keep separate, never collapse into `--query`): `--element-id` ← `event.element.id`; `--classes` ← classes joined with commas; `--tag` ← tagName; `--text` ← first ~80 chars of textContent, **every call**: it disambiguates repeated sibling components, without it wrap lands on the first match. If `event.pageUrl` implies the file, pass `--file PATH`. If `--text` still matches several candidates, wrap exits `{ error: "element_ambiguous", candidates, fallback: "agent-driven" }`: pick the right range from page context and write the wrapper manually per the fallback flow.
@@ -240,14 +240,14 @@ Three kinds: `range` (slider; drives `--p-<id>`; author `var(--p-color-amount, 0
 ### 8. Signal done
 
 ```bash
-node .claude/skills/impeccable/scripts/live-poll.mjs --reply EVENT_ID done --file RELATIVE_PATH
+node <skill-base-dir>/scripts/live-poll.mjs --reply EVENT_ID done --file RELATIVE_PATH
 ```
 
 `RELATIVE_PATH` is relative to project root; the browser fetches source directly if the dev server lacks HMR. Then poll again immediately.
 
 ### Aborting an in-flight session
 
-If wrap or generation fails after the browser flipped to GENERATING, tell the **browser** so its bar resets: `node .claude/skills/impeccable/scripts/live-poll.mjs --reply EVENT_ID error "Short reason"`. Never use `live-accept --discard` for this (pure file mutator, browser never sees it, bar sticks on dots); `--discard` is only source-side cleanup for a discard the browser itself initiated.
+If wrap or generation fails after the browser flipped to GENERATING, tell the **browser** so its bar resets: `node <skill-base-dir>/scripts/live-poll.mjs --reply EVENT_ID error "Short reason"`. Never use `live-accept --discard` for this (pure file mutator, browser never sees it, bar sticks on dots); `--discard` is only source-side cleanup for a discard the browser itself initiated.
 
 ## Handle fallback
 
@@ -288,7 +288,7 @@ Event: `{id, _acceptResult, _completionAck}`. The poll script already restored t
 
 ## Handle `steer`
 
-Event: `{id, message, pageUrl}`: page-level direction from the global bar's Steer control (typed or spoken), no element context, no variant cycling. Read `message`, inspect the page or files as needed, make edits or answer in prose. Reply `node .claude/skills/impeccable/scripts/live-poll.mjs --reply EVENT_ID steer_done ["Optional short toast"]`, or on failure `--reply EVENT_ID error "Short reason"`, then poll immediately. No separate pickup reply; the Steer bar unlocks on `steer_done` or `error`.
+Event: `{id, message, pageUrl}`: page-level direction from the global bar's Steer control (typed or spoken), no element context, no variant cycling. Read `message`, inspect the page or files as needed, make edits or answer in prose. Reply `node <skill-base-dir>/scripts/live-poll.mjs --reply EVENT_ID steer_done ["Optional short toast"]`, or on failure `--reply EVENT_ID error "Short reason"`, then poll immediately. No separate pickup reply; the Steer bar unlocks on `steer_done` or `error`.
 
 ## Handle `prefetch`
 
@@ -304,7 +304,7 @@ When native subagents are available, delegate source edits to `impeccable_manual
 
 If `repair` is present, the previous Apply changed source but final validation failed. Fix the current source and return the same canonical JSON result; do not roll files back yourself. The browser will ask the user before any rollback.
 
-After source edits finish, reply exactly once with `node .claude/skills/impeccable/scripts/live-poll.mjs --reply EVENT_ID done --data '{"status":"done","appliedEntryIds":["8hexid"],"failed":[],"files":["src/page.html"],"notes":[]}'`. Use `status:"partial"` or `status:"error"` with `failed[]` when not every entry applied. Then poll again. Never reply without the event id; `--reply done --file ...` is invalid for manual Apply.
+After source edits finish, reply exactly once with `node <skill-base-dir>/scripts/live-poll.mjs --reply EVENT_ID done --data '{"status":"done","appliedEntryIds":["8hexid"],"failed":[],"files":["src/page.html"],"notes":[]}'`. Use `status:"partial"` or `status:"error"` with `failed[]` when not every entry applied. Then poll again. Never reply without the event id; `--reply done --file ...` is invalid for manual Apply.
 
 ## Exit
 
@@ -313,7 +313,7 @@ The user stops live mode by saying so in chat, closing the tab (SSE drops; poll
 ## Cleanup
 
 ```bash
-node .claude/skills/impeccable/scripts/live-server.mjs stop
+node <skill-base-dir>/scripts/live-server.mjs stop
 ```
 
 Stops the helper and runs `live-inject.mjs --remove` to strip the injected script (use `stop --keep-inject` to keep it for a quick restart; `.impeccable/live/config.json` persists as project config). Then search for and remove any leftover `impeccable-variants-start` wrappers and `impeccable-carbonize-start` blocks.
diff --git a/plugin/skills/impeccable/reference/polish.md b/plugin/skills/impeccable/reference/polish.md
index 9db878697..7040b11a9 100644
--- a/plugin/skills/impeccable/reference/polish.md
+++ b/plugin/skills/impeccable/reference/polish.md
@@ -29,7 +29,7 @@ Use the feature yourself at the surface's representative sizes: desktop and mobi
 If a prior critique exists, use it as one input:
 
 ```bash
-node .claude/skills/impeccable/scripts/critique-storage.mjs latest "<resolved target>"
+node <skill-base-dir>/scripts/critique-storage.mjs latest "<resolved target>"
 ```
 
 Exit 0 returns the latest snapshot; incorporate relevant P0/P1 findings and name the snapshot read. Exit 2 means none exists. Perform an independent pass either way.
diff --git a/plugin/skills/impeccable/reference/routing.md b/plugin/skills/impeccable/reference/routing.md
index da49eb993..470a8bd92 100644
--- a/plugin/skills/impeccable/reference/routing.md
+++ b/plugin/skills/impeccable/reference/routing.md
@@ -2,7 +2,7 @@
 
 Read this when the user invokes `/impeccable` with no argument. They are asking "what should I do?" Make the menu context-aware instead of static.
 
-Setup has already run `context.mjs`. If that reported `NO_PRODUCT_MD`, the project has no captured context yet: lead the menu with `/impeccable init` as the top recommendation (one line on why) and still show the rest below; don't silently jump into init. Otherwise run `node .claude/skills/impeccable/scripts/context-signals.mjs` once and read its JSON, then lead with the **2-3 highest-value next commands**, each with a one-line reason pulled from the signals, followed by the full menu (the Commands table in SKILL.md, grouped by category). **Never auto-run a command; the recommendation is a suggestion the user confirms.**
+Setup has already run `context.mjs`. If that reported `NO_PRODUCT_MD`, the project has no captured context yet: lead the menu with `/impeccable init` as the top recommendation (one line on why) and still show the rest below; don't silently jump into init. Otherwise run `node <skill-base-dir>/scripts/context-signals.mjs` once and read its JSON, then lead with the **2-3 highest-value next commands**, each with a one-line reason pulled from the signals, followed by the full menu (the Commands table in SKILL.md, grouped by category). **Never auto-run a command; the recommendation is a suggestion the user confirms.**
 
 Reason over the signals; there is no score to obey:
 
@@ -13,6 +13,6 @@ Reason over the signals; there is no score to obey:
 - `devServer.running` true → `live` is available for in-browser iteration; if false, don't lead with `live`. **`live` and the bundled `detect.mjs` are web-only.** If `setup.platform` is `ios`, `android`, or `adaptive`, don't lead with either; the browser overlay and the HTML rule engine don't apply to native app code.
 - Otherwise group by intent (build new / improve what's there / iterate visually), tailored to the current surface and `setup.platform`.
 
-**If `scan.targets` is non-empty and `setup.platform` is not `ios`/`android`/`adaptive`, run `node .claude/skills/impeccable/scripts/detect.mjs --json <scan.targets joined by spaces>` once** (the bundled detector over local files: no network, no npx; it reads HTML/CSS, so skip it for native projects). `scan.via` tells you what they are: `git-changes` (the markup/style files in your dirty tree, the most relevant set), `source-dir` (e.g. `src`, `app`), `html`, or `root`. Fold the hits into your picks: many quality / contrast hits → `audit` or `polish`; a specific slop family → the matching command (gradient text or eyebrows → `quieter` / `typeset`, flat or gray palette → `colorize`, and so on). It's a real, current signal that beats guessing. If detect errors or the tree is large and slow, skip it and recommend the user run `audit` themselves; never block the suggestion on it.
+**If `scan.targets` is non-empty and `setup.platform` is not `ios`/`android`/`adaptive`, run `node <skill-base-dir>/scripts/detect.mjs --json <scan.targets joined by spaces>` once** (the bundled detector over local files: no network, no npx; it reads HTML/CSS, so skip it for native projects). `scan.via` tells you what they are: `git-changes` (the markup/style files in your dirty tree, the most relevant set), `source-dir` (e.g. `src`, `app`), `html`, or `root`. Fold the hits into your picks: many quality / contrast hits → `audit` or `polish`; a specific slop family → the matching command (gradient text or eyebrows → `quieter` / `typeset`, flat or gray palette → `colorize`, and so on). It's a real, current signal that beats guessing. If detect errors or the tree is large and slow, skip it and recommend the user run `audit` themselves; never block the suggestion on it.
 
 Keep it to 2-3 pointed picks with the exact command to type. The menu stays the fallback; the recommendation is the lede.
diff --git a/plugin/skills/impeccable/reference/typeset.md b/plugin/skills/impeccable/reference/typeset.md
index 7b54de2d5..2b1b13e34 100644
--- a/plugin/skills/impeccable/reference/typeset.md
+++ b/plugin/skills/impeccable/reference/typeset.md
@@ -24,7 +24,7 @@ When a sub-agent tool is available and permitted, run these independently; other
 2. **Mechanical scan:** run:
 
 ```bash
-node .claude/skills/impeccable/scripts/detect.mjs --json --scope type [target files or dirs]
+node <skill-base-dir>/scripts/detect.mjs --json --scope type [target files or dirs]
 ```
 
 Also inspect dynamic or arbitrary font values the detector cannot interpret. Synthesize both assessments before editing, noting what each caught alone. A clean scan is a floor, not proof of good typography.
diff --git a/plugin/skills/impeccable/reference/visualize.md b/plugin/skills/impeccable/reference/visualize.md
index 4d91330e4..69fc9be30 100644
--- a/plugin/skills/impeccable/reference/visualize.md
+++ b/plugin/skills/impeccable/reference/visualize.md
@@ -40,7 +40,7 @@ Treat the comp as a north star, not something to trace, and know what that allow
 
 ## Produce only the assets the build needs
 
-Generation context is part of the asset: a build composed by a thread that never saw the prompts places assets it does not understand. So prefer generating build-critical imagery in the build thread when the budget allows, and when a subagent produces assets instead, every asset must carry its prompt, and the builder reads those prompts before composing a single one of them. The carrier is uniform across harnesses: after generating any image with any tool, native or `generate-image.mjs` (which does it automatically), run `node .claude/skills/impeccable/scripts/embed-prompt.mjs <image> --prompt "<the prompt used>"` so the intent lives inside the file itself and survives copies between machines and harnesses; `--read` recovers it from any impeccable-generated image.
+Generation context is part of the asset: a build composed by a thread that never saw the prompts places assets it does not understand. So prefer generating build-critical imagery in the build thread when the budget allows, and when a subagent produces assets instead, every asset must carry its prompt, and the builder reads those prompts before composing a single one of them. The carrier is uniform across harnesses: after generating any image with any tool, native or `generate-image.mjs` (which does it automatically), run `node <skill-base-dir>/scripts/embed-prompt.mjs <image> --prompt "<the prompt used>"` so the intent lives inside the file itself and survives copies between machines and harnesses; `--read` recovers it from any impeccable-generated image.
 
 When the harness runs subagents, spawn the shipped asset producer every time, even when the inventory's produce bucket looks empty: its manifest is the independent second opinion on your media, and runs that skipped the spawn are the runs whose cotton became CSS. An honestly empty manifest costs one cheap spawn; a wrongly empty produce bucket costs the build its materials. Use the producer, `impeccable-asset-producer` (`impeccable_asset_producer` in codex; `/impeccable-asset-producer` in Cursor; on GitHub Copilot say "Use the impeccable-asset-producer agent"): give it the approved comp, output paths, required dimensions and formats, transparency needs, crop notes, and what must remain semantic code. Otherwise produce the minimum required assets in the current thread by the book: load [degraded/asset-producer.md](degraded/asset-producer.md) and follow it inline, with whatever generation exists, the native tool or generate-image.mjs.
 
diff --git a/scripts/build.js b/scripts/build.js
index 445b22752..b548b7ffb 100644
--- a/scripts/build.js
+++ b/scripts/build.js
@@ -24,6 +24,7 @@ import { hooksJsonFor, buildClaudePluginHooksManifest } from './lib/transformers
 import { createAllZips, createProviderZip } from './lib/zip.js';
 import { collectPluginVersions } from './lib/validate-plugin-versions.js';
 import { collectPluginManifestFindings } from './lib/validate-plugin-manifest.js';
+import { rewritePluginMarkdownTree } from './lib/plugin-paths.js';
 import { stageOpenAIPlugin } from './lib/openai-plugin.js';
 import { ANTIPATTERNS } from '../cli/engine/registry/antipatterns.mjs';
 // Sub-page generation is now handled by Astro content collections.
@@ -697,6 +698,13 @@ async function build() {
       copyDirSync(claudeAgentsSrc, pluginAgentsDir);
     }
 
+    // The claude-code output resolves {{scripts_path}} to a project-relative
+    // path. Inside the plugin cache that path points into the user's project,
+    // so a dual install silently runs the project's older skill copy (issue
+    // #523). Rewrite the copied markdown to the skill-base-dir form.
+    rewritePluginMarkdownTree(pluginSkillsDir);
+    rewritePluginMarkdownTree(pluginAgentsDir);
+
     // Ship the design detector as a plugin-packaged hook. Claude Code and
     // Grok Build both auto-discover `hooks/hooks.json` at the plugin root
     // (Grok aliases CLAUDE_PLUGIN_ROOT → GROK_PLUGIN_ROOT), so marketplace /
diff --git a/scripts/lib/plugin-paths.js b/scripts/lib/plugin-paths.js
new file mode 100644
index 000000000..13f9b48c0
--- /dev/null
+++ b/scripts/lib/plugin-paths.js
@@ -0,0 +1,73 @@
+import fs from 'fs';
+import path from 'path';
+
+/**
+ * Rewrite project-relative script paths for the plugin subtree (issue #523).
+ *
+ * The ./plugin subtree is a verbatim copy of the dist/claude-code output,
+ * where {{scripts_path}} resolves to `.claude/skills/impeccable/scripts`,
+ * a path relative to the user's project. Run from the plugin cache, that
+ * path points at whatever the project has installed: a plugin-only user
+ * gets MODULE_NOT_FOUND, and a dual-install user silently runs the
+ * project's (possibly older) skill copy.
+ *
+ * There is no literal path that works for plugins (CLAUDE_PLUGIN_ROOT is
+ * hook-only), so the plugin's markdown uses the `<skill-base-dir>` form
+ * that SKILL.md's Setup step 1 already carries as a fallback: the runtime
+ * shows the skill's loaded base directory when it loads the skill, and
+ * scripts resolve against that.
+ */
+
+// The resolved {{scripts_path}} in dist/claude-code output, fixed by the
+// Claude Code transformer's configDir (.claude) + skill name (impeccable).
+export const CLAUDE_PROJECT_SCRIPTS_PATH = '.claude/skills/impeccable/scripts';
+
+export const PLUGIN_SCRIPTS_PATH = '<skill-base-dir>/scripts';
+
+// The project-path rule pre-approves a path inside the user's project, the
+// one place the plugin must NOT run scripts from. Claude Code Bash rules
+// support mid-pattern wildcards, so scope approval to the skill's own
+// scripts directory wherever the plugin cache puts it.
+export const PLUGIN_ALLOWED_TOOLS_RULE = 'Bash(node */skills/impeccable/scripts/*)';
+
+// Setup step 1's parenthetical describes the base-dir form as a fallback.
+// In the plugin copy that form is the primary (and only) form, so the
+// parenthetical becomes the definition of the token every instruction uses.
+const SETUP_FALLBACK_TEXT =
+  "(if the runtime shows this skill's loaded base directory, run `node <skill-base-dir>/scripts/context.mjs`; keep cwd at the user's project)";
+const SETUP_PLUGIN_TEXT =
+  "(`<skill-base-dir>` is this skill's loaded base directory, shown by the runtime when it loads the skill; keep cwd at the user's project)";
+
+/**
+ * Rewrite one markdown file's content for the plugin subtree. Pure, so the
+ * unit suite can pin every rewrite without a build.
+ */
+export function rewritePluginMarkdown(content) {
+  return content
+    // Order matters: the allowed-tools rule contains the project path, so
+    // rewrite it before the generic path replacement turns it into a
+    // rule that matches nothing.
+    .replaceAll(`Bash(node ${CLAUDE_PROJECT_SCRIPTS_PATH}/*)`, PLUGIN_ALLOWED_TOOLS_RULE)
+    .replaceAll(SETUP_FALLBACK_TEXT, SETUP_PLUGIN_TEXT)
+    .replaceAll(CLAUDE_PROJECT_SCRIPTS_PATH, PLUGIN_SCRIPTS_PATH);
+}
+
+/**
+ * Apply rewritePluginMarkdown to every .md file under dir, recursively.
+ * Script files are left alone: the only project-relative paths in them
+ * (hook-admin.mjs) install project-scoped hooks via ${CLAUDE_PROJECT_DIR},
+ * which is that command's actual job.
+ */
+export function rewritePluginMarkdownTree(dir) {
+  if (!fs.existsSync(dir)) return;
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    const entryPath = path.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      rewritePluginMarkdownTree(entryPath);
+    } else if (entry.name.endsWith('.md')) {
+      const original = fs.readFileSync(entryPath, 'utf-8');
+      const rewritten = rewritePluginMarkdown(original);
+      if (rewritten !== original) fs.writeFileSync(entryPath, rewritten);
+    }
+  }
+}
diff --git a/scripts/test-suites.mjs b/scripts/test-suites.mjs
index 608cea352..408d92701 100644
--- a/scripts/test-suites.mjs
+++ b/scripts/test-suites.mjs
@@ -46,6 +46,7 @@ export const SUITES = {
           'tests/skills-cli.test.js',
           'tests/validate-plugin-versions.test.js',
           'tests/validate-plugin-manifest.test.js',
+          'tests/plugin-paths.test.js',
         ],
       },
       {
@@ -222,6 +223,7 @@ export const SUITES = {
       /^skill\/agents\//,
       /^scripts\/build\.js$/,
       /^scripts\/lib\/validate-plugin-manifest\.js$/,
+      /^scripts\/lib\/plugin-paths\.js$/,
       /^tests\/plugin-e2e\.test\.mjs$/,
     ],
     commands: [
diff --git a/tests/plugin-paths.test.js b/tests/plugin-paths.test.js
new file mode 100644
index 000000000..70ad44464
--- /dev/null
+++ b/tests/plugin-paths.test.js
@@ -0,0 +1,116 @@
+/**
+ * Unit coverage for the plugin subtree script-path rewrite (issue #523).
+ *
+ * The ./plugin subtree copies the dist/claude-code output, whose
+ * {{scripts_path}} resolves to the project-relative
+ * `.claude/skills/impeccable/scripts`. Run from the plugin cache, that path
+ * points into the user's project: a plugin-only user gets MODULE_NOT_FOUND,
+ * and a dual-install user silently runs the project's older skill copy. The
+ * rewrite swaps every markdown instruction to the `<skill-base-dir>` form
+ * and scopes the allowed-tools rule to the skill's own install path.
+ */
+import { describe, test, expect, beforeEach, afterEach } from 'bun:test';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import {
+  rewritePluginMarkdown,
+  rewritePluginMarkdownTree,
+  CLAUDE_PROJECT_SCRIPTS_PATH,
+  PLUGIN_ALLOWED_TOOLS_RULE,
+} from '../scripts/lib/plugin-paths.js';
+
+describe('rewritePluginMarkdown', () => {
+  test('rewrites a script instruction to the skill-base-dir form', () => {
+    const input = 'Run `node .claude/skills/impeccable/scripts/context.mjs` once per session.';
+    expect(rewritePluginMarkdown(input)).toBe(
+      'Run `node <skill-base-dir>/scripts/context.mjs` once per session.',
+    );
+  });
+
+  test('rewrites every occurrence, not just the first', () => {
+    const input = [
+      'node .claude/skills/impeccable/scripts/live.mjs',
+      'node .claude/skills/impeccable/scripts/live-poll.mjs --reply EVENT_ID done',
+    ].join('\n');
+    const output = rewritePluginMarkdown(input);
+    expect(output).not.toContain(CLAUDE_PROJECT_SCRIPTS_PATH);
+    expect(output).toContain('node <skill-base-dir>/scripts/live.mjs');
+    expect(output).toContain('node <skill-base-dir>/scripts/live-poll.mjs --reply EVENT_ID done');
+  });
+
+  test('rewrites the allowed-tools rule to the install-path pattern, not a dead literal', () => {
+    const frontmatter = [
+      'allowed-tools:',
+      '  - Bash(npx impeccable *)',
+      '  - Bash(node .claude/skills/impeccable/scripts/*)',
+    ].join('\n');
+    const output = rewritePluginMarkdown(frontmatter);
+    // The generic path rewrite alone would leave Bash(node <skill-base-dir>/scripts/*),
+    // a rule that matches no real command. The allowed-tools rewrite must win.
+    expect(output).toContain(`  - ${PLUGIN_ALLOWED_TOOLS_RULE}`);
+    expect(output).not.toContain('Bash(node <skill-base-dir>/scripts/*)');
+    expect(output).not.toContain('Bash(node .claude/skills/impeccable/scripts/*)');
+    expect(output).toContain('  - Bash(npx impeccable *)');
+  });
+
+  test('turns the Setup step 1 fallback parenthetical into the token definition', () => {
+    const input =
+      "1. Run `node .claude/skills/impeccable/scripts/context.mjs` once per session " +
+      "(if the runtime shows this skill's loaded base directory, run `node <skill-base-dir>/scripts/context.mjs`; " +
+      "keep cwd at the user's project). Pass a named source file or route as `--target <path>`.";
+    const output = rewritePluginMarkdown(input);
+    expect(output).toContain('Run `node <skill-base-dir>/scripts/context.mjs` once per session');
+    expect(output).toContain("(`<skill-base-dir>` is this skill's loaded base directory");
+    // The naive rewrite would leave the same command twice in one sentence.
+    expect(output.match(/<skill-base-dir>\/scripts\/context\.mjs/g)).toHaveLength(1);
+  });
+
+  test('leaves unrelated project-relative paths alone', () => {
+    const input = 'State lives in `.impeccable/live/roots.json` and `.claude/settings.json`.';
+    expect(rewritePluginMarkdown(input)).toBe(input);
+  });
+});
+
+describe('rewritePluginMarkdownTree', () => {
+  let root;
+
+  beforeEach(() => {
+    root = fs.mkdtempSync(path.join(os.tmpdir(), 'impeccable-plugin-paths-'));
+  });
+
+  afterEach(() => {
+    fs.rmSync(root, { recursive: true, force: true });
+  });
+
+  test('rewrites .md files recursively and leaves scripts untouched', () => {
+    const write = (rel, contents) => {
+      const abs = path.join(root, rel);
+      fs.mkdirSync(path.dirname(abs), { recursive: true });
+      fs.writeFileSync(abs, contents);
+    };
+    write('SKILL.md', 'Run `node .claude/skills/impeccable/scripts/context.mjs`.');
+    write('reference/live.md', 'node .claude/skills/impeccable/scripts/live.mjs');
+    // hook-admin.mjs installs project-scoped hooks; its project path is correct.
+    write(
+      'scripts/hook-admin.mjs',
+      'const cmd = \'node "${CLAUDE_PROJECT_DIR}/.claude/skills/impeccable/scripts/hook.mjs"\';',
+    );
+
+    rewritePluginMarkdownTree(root);
+
+    expect(fs.readFileSync(path.join(root, 'SKILL.md'), 'utf-8')).toBe(
+      'Run `node <skill-base-dir>/scripts/context.mjs`.',
+    );
+    expect(fs.readFileSync(path.join(root, 'reference/live.md'), 'utf-8')).toBe(
+      'node <skill-base-dir>/scripts/live.mjs',
+    );
+    expect(fs.readFileSync(path.join(root, 'scripts/hook-admin.mjs'), 'utf-8')).toContain(
+      '${CLAUDE_PROJECT_DIR}/.claude/skills/impeccable/scripts/hook.mjs',
+    );
+  });
+
+  test('is a no-op on a missing directory', () => {
+    expect(() => rewritePluginMarkdownTree(path.join(root, 'does-not-exist'))).not.toThrow();
+  });
+});

From 3ced330f5394b7b3d6a1cce54ba517aedf3c91d1 Mon Sep 17 00:00:00 2001
From: Abdul Wahab <abdulwahabone@gmail.com>
Date: Fri, 7 Aug 2026 13:39:56 +0500
Subject: [PATCH 2/4] Fail the build loudly when the plugin rewrite drifts from
 SKILL.src.md

The parenthetical and allowed-tools replacements key on exact source
text; a reworded SKILL.src.md would make them silently no-op. The build
now verifies the rewritten plugin SKILL.md carries the <skill-base-dir>
definition and the install-path allowed-tools rule, and stops otherwise.

Drafted with AI assistance, reviewed by a maintainer.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 scripts/build.js            |  3 ++-
 scripts/lib/plugin-paths.js | 25 +++++++++++++++++++
 tests/plugin-paths.test.js  | 50 +++++++++++++++++++++++++++++++++++++
 3 files changed, 77 insertions(+), 1 deletion(-)

diff --git a/scripts/build.js b/scripts/build.js
index b548b7ffb..6142a715f 100644
--- a/scripts/build.js
+++ b/scripts/build.js
@@ -24,7 +24,7 @@ import { hooksJsonFor, buildClaudePluginHooksManifest } from './lib/transformers
 import { createAllZips, createProviderZip } from './lib/zip.js';
 import { collectPluginVersions } from './lib/validate-plugin-versions.js';
 import { collectPluginManifestFindings } from './lib/validate-plugin-manifest.js';
-import { rewritePluginMarkdownTree } from './lib/plugin-paths.js';
+import { rewritePluginMarkdownTree, verifyPluginSkillRewrite } from './lib/plugin-paths.js';
 import { stageOpenAIPlugin } from './lib/openai-plugin.js';
 import { ANTIPATTERNS } from '../cli/engine/registry/antipatterns.mjs';
 // Sub-page generation is now handled by Astro content collections.
@@ -704,6 +704,7 @@ async function build() {
     // #523). Rewrite the copied markdown to the skill-base-dir form.
     rewritePluginMarkdownTree(pluginSkillsDir);
     rewritePluginMarkdownTree(pluginAgentsDir);
+    verifyPluginSkillRewrite(path.join(pluginSkillsDir, 'impeccable', 'SKILL.md'));
 
     // Ship the design detector as a plugin-packaged hook. Claude Code and
     // Grok Build both auto-discover `hooks/hooks.json` at the plugin root
diff --git a/scripts/lib/plugin-paths.js b/scripts/lib/plugin-paths.js
index 13f9b48c0..4352bac64 100644
--- a/scripts/lib/plugin-paths.js
+++ b/scripts/lib/plugin-paths.js
@@ -52,6 +52,31 @@ export function rewritePluginMarkdown(content) {
     .replaceAll(CLAUDE_PROJECT_SCRIPTS_PATH, PLUGIN_SCRIPTS_PATH);
 }
 
+/**
+ * Fail the build when the copied SKILL.md no longer matches the rewrite.
+ * The parenthetical replacement keys on the exact Setup step 1 text; if
+ * SKILL.src.md rewords it, replaceAll silently no-ops and the plugin ships
+ * a redundant (but still correct) instruction. Loud beats redundant: the
+ * build stops here so plugin-paths.js gets updated alongside the source.
+ */
+export function verifyPluginSkillRewrite(skillMdPath) {
+  const content = fs.readFileSync(skillMdPath, 'utf-8');
+  if (!content.includes(SETUP_PLUGIN_TEXT)) {
+    throw new Error(
+      `Plugin rewrite drift: ${skillMdPath} is missing the <skill-base-dir> definition. ` +
+      "SKILL.src.md's Setup step 1 parenthetical no longer matches the replacement in " +
+      'scripts/lib/plugin-paths.js (issue #523); update SETUP_FALLBACK_TEXT to the new wording.',
+    );
+  }
+  if (!content.includes(PLUGIN_ALLOWED_TOOLS_RULE)) {
+    throw new Error(
+      `Plugin rewrite drift: ${skillMdPath} is missing the allowed-tools rule ` +
+      `${PLUGIN_ALLOWED_TOOLS_RULE}. SKILL.src.md's allowed-tools entry no longer matches the ` +
+      'replacement in scripts/lib/plugin-paths.js (issue #523).',
+    );
+  }
+}
+
 /**
  * Apply rewritePluginMarkdown to every .md file under dir, recursively.
  * Script files are left alone: the only project-relative paths in them
diff --git a/tests/plugin-paths.test.js b/tests/plugin-paths.test.js
index 70ad44464..5949e0220 100644
--- a/tests/plugin-paths.test.js
+++ b/tests/plugin-paths.test.js
@@ -16,6 +16,7 @@ import path from 'path';
 import {
   rewritePluginMarkdown,
   rewritePluginMarkdownTree,
+  verifyPluginSkillRewrite,
   CLAUDE_PROJECT_SCRIPTS_PATH,
   PLUGIN_ALLOWED_TOOLS_RULE,
 } from '../scripts/lib/plugin-paths.js';
@@ -114,3 +115,52 @@ describe('rewritePluginMarkdownTree', () => {
     expect(() => rewritePluginMarkdownTree(path.join(root, 'does-not-exist'))).not.toThrow();
   });
 });
+
+describe('verifyPluginSkillRewrite', () => {
+  let root;
+
+  beforeEach(() => {
+    root = fs.mkdtempSync(path.join(os.tmpdir(), 'impeccable-plugin-verify-'));
+  });
+
+  afterEach(() => {
+    fs.rmSync(root, { recursive: true, force: true });
+  });
+
+  const writeSkill = (contents) => {
+    const p = path.join(root, 'SKILL.md');
+    fs.writeFileSync(p, contents);
+    return p;
+  };
+
+  const goodSkill = [
+    'allowed-tools:',
+    '  - Bash(node .claude/skills/impeccable/scripts/*)',
+    '',
+    "1. Run `node .claude/skills/impeccable/scripts/context.mjs` once per session " +
+      "(if the runtime shows this skill's loaded base directory, run `node <skill-base-dir>/scripts/context.mjs`; " +
+      "keep cwd at the user's project).",
+  ].join('\n');
+
+  test('accepts a correctly rewritten SKILL.md', () => {
+    const p = writeSkill(rewritePluginMarkdown(goodSkill));
+    expect(() => verifyPluginSkillRewrite(p)).not.toThrow();
+  });
+
+  test('fails the build when the Setup parenthetical no longer matched', () => {
+    // Simulate SKILL.src.md rewording step 1: the parenthetical replacement
+    // no-ops, so the definition of <skill-base-dir> never lands.
+    const reworded = goodSkill.replace('if the runtime shows', 'when the runtime displays');
+    const p = writeSkill(rewritePluginMarkdown(reworded));
+    expect(() => verifyPluginSkillRewrite(p)).toThrow(/Setup step 1 parenthetical/);
+  });
+
+  test('fails the build when the allowed-tools rule no longer matched', () => {
+    const reworded = goodSkill.replace(
+      'Bash(node .claude/skills/impeccable/scripts/*)',
+      'Bash(node .claude/skills/impeccable/scripts/**)',
+    );
+    const p = writeSkill(rewritePluginMarkdown(reworded));
+    expect(() => verifyPluginSkillRewrite(p)).toThrow(/allowed-tools/);
+  });
+});

From e4362ed01ec389ac27e8f44701e912c3c9d2682c Mon Sep 17 00:00:00 2001
From: Abdul Wahab <abdulwahabone@gmail.com>
Date: Mon, 10 Aug 2026 14:43:19 +0500
Subject: [PATCH 3/4] Adapt the plugin rewrite to main's base-directory Setup
 wording

PR #544 moved SKILL.src.md's Setup step 1 to lead with <skill-base-dir>
and name the project path as the fallback, so the parenthetical the
rewrite keyed on no longer exists. The rewrite now swaps the fallback
sentence instead: a plugin install has no working project fallback, and
every instruction in the plugin copy already carries the token.

AI-assisted change, reviewed by a maintainer.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 plugin/skills/impeccable/SKILL.md             |  6 +--
 .../skills/impeccable/reference/new-work.md   | 12 +++---
 scripts/lib/plugin-paths.js                   | 29 +++++++-------
 tests/plugin-paths.test.js                    | 39 +++++++++++--------
 4 files changed, 48 insertions(+), 38 deletions(-)

diff --git a/plugin/skills/impeccable/SKILL.md b/plugin/skills/impeccable/SKILL.md
index 43920ae2b..9c2c73112 100644
--- a/plugin/skills/impeccable/SKILL.md
+++ b/plugin/skills/impeccable/SKILL.md
@@ -7,7 +7,7 @@ argument-hint: "[shape · audit|critique · animate|bolder|colorize|delight|layo
 license: Apache 2.0
 allowed-tools:
   - Bash(npx impeccable *)
-  - Bash(node .claude/skills/impeccable/scripts/*)
+  - Bash(node */skills/impeccable/scripts/*)
 ---
 
 This skill gives you the tools and permission to create design that earns to be called out-of-distribution craft: Whereas before, your design work would have been safe, timid and measured, you now approach every design task as a award-winning design director with impeccable understanding for what makes exceptional design work: production-grade code, peak creativity, a clear POV, deep understanding of the needs of the client and users, and exceptional craft.
@@ -19,7 +19,7 @@ Core principles:
 
 ## Setup
 
-1. Run `node <skill-base-dir>/scripts/context.mjs` once per session, where `<skill-base-dir>` is the loaded base directory the runtime reports for this skill; keep cwd at the user's project. That base directory resolves every `node .claude/skills/impeccable/scripts/...` command in this skill and its references, and `.claude/skills/impeccable/scripts` is the fallback only when the runtime reports no base directory. Pass a named source file or route as `--target <path>`. It loads PRODUCT.md, DESIGN.md, the matching surface brief, and native-platform guidance when applicable; follow its directives and do not rerun it.
+1. Run `node <skill-base-dir>/scripts/context.mjs` once per session, where `<skill-base-dir>` is the loaded base directory the runtime reports for this skill; keep cwd at the user's project. Every `node <skill-base-dir>/scripts/...` command in this skill and its references resolves against that base directory. Pass a named source file or route as `--target <path>`. It loads PRODUCT.md, DESIGN.md, the matching surface brief, and native-platform guidance when applicable; follow its directives and do not rerun it.
 2. Before acting, load the one playbook that owns the request: the Commands table's reference for an explicit or clearly implied sub-command, or [reference/new-work.md](reference/new-work.md) for a new surface or replacement visual world. Then inspect the target and at least one representative source of incumbent visual truth (tokens, theme, CSS, component, or asset) before editing.
 3. After analysis and direction are resolved, load [reference/craft-floor.md](reference/craft-floor.md) immediately before editing UI. It carries the quality floor, the absolute bans, and the reflexes no detector catches. Do not load it for planning-only work.
 
@@ -77,7 +77,7 @@ Routing:
 
 After init writes PRODUCT.md, resume without rerunning `context.mjs`; init loads the native platform reference itself when the platform it recorded is `ios`, `android`, or `adaptive`.
 
-**Pin / Unpin:** `node .claude/skills/impeccable/scripts/pin.mjs <pin|unpin> <command>` creates or removes a standalone `/<command>` shortcut. Report the script's result concisely; relay stderr verbatim on error.
+**Pin / Unpin:** `node <skill-base-dir>/scripts/pin.mjs <pin|unpin> <command>` creates or removes a standalone `/<command>` shortcut. Report the script's result concisely; relay stderr verbatim on error.
 
 **Hooks:** `/impeccable hooks <on|off|status|ignore-rule|ignore-file|ignore-value|reset>` manages the design detector hook for this project (auto-runs the detector after UI file edits and surfaces findings). Load [reference/hooks.md](reference/hooks.md) when the user invokes it with any argument.
 
diff --git a/plugin/skills/impeccable/reference/new-work.md b/plugin/skills/impeccable/reference/new-work.md
index 859b84a6b..0e3702c2c 100644
--- a/plugin/skills/impeccable/reference/new-work.md
+++ b/plugin/skills/impeccable/reference/new-work.md
@@ -34,7 +34,7 @@ Inherit its world and composition. Resolve only the new purpose, content, hierar
 
 Keep the visual system fixed. Derive five to seven materially different structures from the content, task, and user behavior, ordered by resonance. For a genuinely open whole page, screen, or flow, run:
 
-`node .claude/skills/impeccable/scripts/concept-seed.mjs --scope surface --mode <mode>`
+`node <skill-base-dir>/scripts/concept-seed.mjs --scope surface --mode <mode>`
 
 The script assigns which structure gets built; your top-ranked structure is what every run would ship, so the dice come from outside. Never run the script for a local extension or a precisely specified narrow request; shape those directly.
 
@@ -43,10 +43,10 @@ The script assigns which structure gets built; your top-ranked structure is what
 1. Name the product's unique mechanism in one sentence, the audience's real scene, its cultural home, and what this first surface must prove. Note the page this category always ships and its predictable opposite; name both as the rut and keep them out of the seven-candidate list. A brief that paints its own picture, a product name, a titled artifact, a governing metaphor, adds its literal reading to the rut: spend at most one candidate on it and derive the rest from elsewhere in the audience's world.
 2. From that cultural world, list seven concrete visual systems, artifacts, places, or rituals the audience knows by heart, each with one line on why it resonates and can carry the mechanism, ordered by resonance. The audience's world includes its graphic and screen traditions, not only its physical objects: the notation, publications, identity programs, data graphics, and interfaces it reads daily; a nameable abstract system (a school of poster, a documentation standard) is as concrete a candidate as any artifact. What would this thing look like as a physical object; what did its world look like before the web? Near-duplicates count once. When more than three of the seven share one material family, the derivation stopped at the subject's most obvious artifact; dig until the list spans at least three families.
 3. Turn that material into complete directions: each joins a reusable visual world to a concrete first-surface experience.
-4. Run `node .claude/skills/impeccable/scripts/concept-seed.mjs --scope direction --mode <mode>` and follow what it prints. This step has no substitute and no skip condition: on a new or replacement world, writing artifact code before this script has run and its assignment is acknowledged is a contract violation, whatever the harness, the model, or the time pressure, because the roll is the mechanism that keeps every run from converging on the category default. The script assigns which direction gets built and deals catalog challengers. Fuse each challenger before judging it: the challenger supplies the form and its system grammar, the product supplies every fact, and clarity wins conflicts. Weigh fused challengers against the assigned direction on exactly two axes, audience identification and product clarity; losing to strong grounded material is a valid outcome, and beating a thin or tool-monoculture list is the point. The weighing closes with a verdict per challenger, decided before any borrowing is considered: wins (beats the assigned direction on both axes; it becomes the build candidate), competitive (holds one axis; it stays a full alternate), or declined (loses both). A declined challenger is not spent: name the one discipline of its system the assigned direction lacks, and raise the assigned direction to match before presenting it. A donation transfers ambition and system discipline (a palette's total commitment, a grid's density courage, a form's structural honesty), never the challenger's clothes; a motif lifted from a declined world is a costume note, not a raise, and one world owns the page. Write each raise into the presented direction as its own line, named for its donor; a raise nobody can read did not happen.
+4. Run `node <skill-base-dir>/scripts/concept-seed.mjs --scope direction --mode <mode>` and follow what it prints. This step has no substitute and no skip condition: on a new or replacement world, writing artifact code before this script has run and its assignment is acknowledged is a contract violation, whatever the harness, the model, or the time pressure, because the roll is the mechanism that keeps every run from converging on the category default. The script assigns which direction gets built and deals catalog challengers. Fuse each challenger before judging it: the challenger supplies the form and its system grammar, the product supplies every fact, and clarity wins conflicts. Weigh fused challengers against the assigned direction on exactly two axes, audience identification and product clarity; losing to strong grounded material is a valid outcome, and beating a thin or tool-monoculture list is the point. The weighing closes with a verdict per challenger, decided before any borrowing is considered: wins (beats the assigned direction on both axes; it becomes the build candidate), competitive (holds one axis; it stays a full alternate), or declined (loses both). A declined challenger is not spent: name the one discipline of its system the assigned direction lacks, and raise the assigned direction to match before presenting it. A donation transfers ambition and system discipline (a palette's total commitment, a grid's density courage, a form's structural honesty), never the challenger's clothes; a motif lifted from a declined world is a costume note, not a raise, and one world owns the page. Write each raise into the presented direction as its own line, named for its donor; a raise nobody can read did not happen.
 5. Present one direction, fully committed and already raised by the hand it beat, its raises visible as named lines: its world, first viewport, visitor path, signature interaction, cross-surface reach, and honest risk. Alongside it, route each dealt challenger by its verdict: winning and competitive challengers are full alternates carrying their QUALITY BAR cards and one-line case, while declined challengers render demoted, compact and quiet, each carrying its verdict plus what the direction kept from it, never full-size and never silently dropped, each still adoptable on request. The verdict informs the user's choice, it never pre-empts it; the demoted row is the hand's proof of judgment, showing why the dealt worlds made the presented direction better. A hand holds at most three full-card challengers: when the roll deals more, the three strongest join the hand and the rest wait in the re-roll pool, noted in one line; dropping a challenger from the hand itself takes a named product-truth failure, disclosed. Add one card for your own top-ranked grounded candidate when it is not the assigned direction, kicker MY PICK, same anatomy as every card, with an honest risk line naming its familiarity when true: the strongest grounded direction is often the one most runs in this category land on, and the user deciding that trade is the point of showing it. Familiar and effective is a legitimate destination, not a failure of nerve; the pick card and the standing exit serve it at two depths. One pick card, never two, never a ranked list: the rest of your grounded candidates stay yours, because a lineup of them hands selection back to a taste function and invites the safest card. The pick never takes the lead position, and when the dice assign your top candidate there is no pick card; the assigned card notes it also topped your list. Add re-roll with an optional one-line steer, offered in three registers: plain (a fresh hand, same spread), safer (the familiar register: your remaining conventional grounded candidates plus the canon against named competitors), and bolder (foreign forms only, at full commitment). A register is the user's steering on the familiar-to-bold axis, never yours to pre-select; when the answer carries one, re-run the seed with `--register <value>` and the next `--reroll` round, and follow what it prints. A user saying "bolder" or "safer" while a direction round is open means these registers, never the bolder or harden commands. The two channels share this structure and differ only in richness: cards and boards on the decision page, names and one-liners through the structured tool; the structured tool's option list carries the assigned direction, the pick, the winning and competitive challengers, and the standing exit as its last option, while declined challengers fold into the assigned option's description as their kept lines, so the raise survives the text channel too.
 
-The standing exit: every direction round offers one quiet, permanent alternative, the category standard, played straight. It is the user's door, never yours: never recommend it, never weigh it against the roll, never let it soften the dealt directions; the counterweights bind the unchosen default, not the chosen one. When the user takes it, in the canon action, a safer-steer, or plain words asking for the familiar or competitor-like path, convention becomes the commitment: ask once for two or three products this should sit alongside, make their craft level the bar, and execute the canon at full fidelity, without irony or smuggled quirk. A standing preference gets recorded as a brand commitment in PRODUCT.md. Re-roll eliminates every direction already shown, grounded and challenger alike; after two consecutive re-rolls, ask what quality is missing. You may re-roll on your own only on named factual grounds, when the assigned direction cannot carry the product's truth or task; taste is never grounds. The user may re-roll freely, and a user- or brief-pinned direction beats the roll, always. Present the decision visually: write an options payload with the assigned direction leading and its raised lines included, the pick card when one exists, the dealt challengers as alternates carrying their QUALITY BAR cards plus each challenger's verdict and kept line, re-roll with its safer and bolder registers, steer, plus canon enabled, and `followup: true` when the execution-contract round will follow (it does whenever image generation exists and no standing build-path preference is recorded); a degraded roll with no challengers still uses the page, as a single text-only card with re-roll. Give every card the same anatomy, thesis, palette, materials, first viewport, honest risk, and the challengers' case lines (run the script with `--schema` for the exact shape); the page renders identity from these fields, routes declined challengers to a demoted row on its own, and a challenger's catalog image rides as labeled inspiration, never as the promise of the build. Author `canonCard` too: the category standard as one honest card with the same anatomy; the page keeps it subordinate, and the counterweights still bind you. Run `node .claude/skills/impeccable/scripts/serve-question.mjs --start --payload <file>` (run it with `--schema` first for the exact payload shape). It daemonizes, prints the page URL and a key, and exits immediately; now open that URL for the user, in-app browser first, then the system opener, then showing the URL. Collect the choice with `--wait --key <key>`, repeating while it exits 3; the ANSWER prints as JSON. Exit 4 means the page was closed without an answer: re-present once through the structured question tool, and with no answer there either, proceed unattended with the assigned direction and state the assumptions. A harness that can leave a shell blocked in the background may instead run the script without `--start` and let it auto-open and block. Only a session where no browser can open at all, headless, CI, an eval worker, a remote shell with no display, puts the same decision through the structured question tool instead; the script self-detects these environments and exits 2 with that advice, so treat exit 2 as this fallback, never as an error to retry.
+The standing exit: every direction round offers one quiet, permanent alternative, the category standard, played straight. It is the user's door, never yours: never recommend it, never weigh it against the roll, never let it soften the dealt directions; the counterweights bind the unchosen default, not the chosen one. When the user takes it, in the canon action, a safer-steer, or plain words asking for the familiar or competitor-like path, convention becomes the commitment: ask once for two or three products this should sit alongside, make their craft level the bar, and execute the canon at full fidelity, without irony or smuggled quirk. A standing preference gets recorded as a brand commitment in PRODUCT.md. Re-roll eliminates every direction already shown, grounded and challenger alike; after two consecutive re-rolls, ask what quality is missing. You may re-roll on your own only on named factual grounds, when the assigned direction cannot carry the product's truth or task; taste is never grounds. The user may re-roll freely, and a user- or brief-pinned direction beats the roll, always. Present the decision visually: write an options payload with the assigned direction leading and its raised lines included, the pick card when one exists, the dealt challengers as alternates carrying their QUALITY BAR cards plus each challenger's verdict and kept line, re-roll with its safer and bolder registers, steer, plus canon enabled, and `followup: true` when the execution-contract round will follow (it does whenever image generation exists and no standing build-path preference is recorded); a degraded roll with no challengers still uses the page, as a single text-only card with re-roll. Give every card the same anatomy, thesis, palette, materials, first viewport, honest risk, and the challengers' case lines (run the script with `--schema` for the exact shape); the page renders identity from these fields, routes declined challengers to a demoted row on its own, and a challenger's catalog image rides as labeled inspiration, never as the promise of the build. Author `canonCard` too: the category standard as one honest card with the same anatomy; the page keeps it subordinate, and the counterweights still bind you. Run `node <skill-base-dir>/scripts/serve-question.mjs --start --payload <file>` (run it with `--schema` first for the exact payload shape). It daemonizes, prints the page URL and a key, and exits immediately; now open that URL for the user, in-app browser first, then the system opener, then showing the URL. Collect the choice with `--wait --key <key>`, repeating while it exits 3; the ANSWER prints as JSON. Exit 4 means the page was closed without an answer: re-present once through the structured question tool, and with no answer there either, proceed unattended with the assigned direction and state the assumptions. A harness that can leave a shell blocked in the background may instead run the script without `--start` and let it auto-open and block. Only a session where no browser can open at all, headless, CI, an eval worker, a remote shell with no display, puts the same decision through the structured question tool instead; the script self-detects these environments and exits 2 with that advice, so treat exit 2 as this fallback, never as an error to retry.
 
 When image generation exists, every card also declares a `sketch` path under `.impeccable/mocks/decision/` (the field keeps its wire name for compatibility; what it carries is the card's comp), the canon card included. Where the harness sandboxes its shell, start the page through the least-sandboxed command path it offers: a sandboxed shell cannot bind the board's port, and the first-attempt failure costs a retry every session. Serve the page first, then produce the comps; the page shimmer-waits per slot and the user may answer before they land. Each card's image is that direction's north-star comp at full fidelity, produced under the comp discipline in [visualize.md](visualize.md): the requested surface's first viewport, structure-led prompt, real product name and real content, no invented commercial claims, in that card's own palette, type character, and material world, committed all the way. Generation takes the same time at any fidelity, so an unfinished sketch pays sketch quality for comp cost; fairness between cards comes from equal fidelity in each card's own grammar, one surface, one aspect, never from shared unfinishedness. The frame's aspect is the surface's own: a native app or mobile-first surface comps portrait at its device viewport, a desktop web surface landscape, and the decision page adapts to either, so a phone screen comped landscape is a broken frame, not a neutral default. Produce in the order the user reads, the assigned card, then the pick, then the full-card hand, then canon, each file written with its prompt sidecar the moment it is done, so a re-roll's spend front-loads onto the cards read first; declined challengers get no comp, their catalog thumb is their face. When the harness runs subagents in parallel, fan the set out as one agent per card: each spawn is the shipped asset producer with a single-comp packet, that card's fields, PRODUCT.md, the shared frame, and the card's declared path, up to four in flight at once. A slot still empty when its agent returns is regenerated inline, and a slot still empty when the user answers is dropped without ceremony; no other supervision is owed. Without parallel subagents, generate in the main thread after serving, in the same reading order, and let the harness's own generation display carry the progress; the wait for the answer follows the last file. The chosen card's comp is not spent by the choice: on a comp-led build it enters the comp round as compositional option one, and on a code-led build it returns at the finish review as the critique reference, what the image dared that the build did not. The unchosen comps stay in `.impeccable/mocks/decision/` as the round's spent hand; they carry no approval and imply none. With no image generation, the cards carry their identity in palette chips and facts, and that page is complete, not a lesser version; the page then also demotes every challenger's catalog art to a labeled thumbnail on its own, because salience must encode the verdict, never the accident of which cards have images.
 
@@ -76,9 +76,9 @@ On a new or replacement world, DESIGN.md is written at finish, from the built wo
 
 If the work establishes durable strategy for a route or artifact, read its existing surface brief, then update it:
 
-`node .claude/skills/impeccable/scripts/surface-brief.mjs read <primary-target>`
+`node <skill-base-dir>/scripts/surface-brief.mjs read <primary-target>`
 
-`node .claude/skills/impeccable/scripts/surface-brief.mjs write <primary-target> <body-file> [related-target ...]`
+`node <skill-base-dir>/scripts/surface-brief.mjs write <primary-target> <body-file> [related-target ...]`
 
 Keep the brief small: scope and visitor mode; audience, job, action/task, proof/content, and constraints; chosen direction and memorable moment; unresolved decisions. Do not copy global product truth or DESIGN.md tokens into it.
 
@@ -107,6 +107,6 @@ Preserve semantics, accessibility, performance, responsiveness, project conventi
 
 Inspect the surface's target sizes in one batched screenshot round: desktop and mobile on the web; on a native platform (`ios` / `android` / `adaptive`), the shipped device classes per OS, captured from the simulator or emulator the way the platform reference's Verifying the build section describes. Critique the render against the user's request and the direction contract, fix material gaps, and confirm with one final round; two rounds is the ceiling, and fixes batch between them rather than earning per-tweak screenshots. When an approved comp exists, the critique is a side-by-side: view the comp region and the build region together, the hero and each section as its own crop at legible scale, never one full-page thumbnail, which hides exactly the failures that matter, crude controls, wrong lettering character, flattened material, behind a superficially similar section order. On a Persuade surface, verify the mode did its job: a first-time visitor should know what this is, why it matters, and what to do within seconds, in the form's own vocabulary.
 
-After the second inspection round the build thread's polishing is over: no further defect hunts, micro-edit scripts, or rebuilds here; whatever remains ships through the handoffs, where a fresh context does the finding better and cheaper. On the web, where this harness runs no design hook, run `node .claude/skills/impeccable/scripts/detect.mjs --json` on the changed targets once here, fix what is mechanical, and pass the remaining findings to the reviewer; a hookless web build that skips this ships every tell the hook exists to catch. A native platform skips the detector entirely: it reads HTML and CSS and has no verdict on native code, so the reviewer's floor check is the only slop gate and the input packet says so. Capture the screenshots into `.impeccable/review/`, one file per captured viewport (on the web, `desktop.png` and `mobile.png`; on native, one per device class, such as `phone.png` and `tablet.png`, suffixed per OS on adaptive), creating that directory when the harness does not; the paths you pass the reviewer are its spec, and that directory is where it looks when a passed path is missing. Then spawn the shipped finish reviewer, `impeccable-finish-reviewer` (`impeccable_finish_reviewer` in codex; `/impeccable-finish-reviewer` in Cursor; on GitHub Copilot say "Use the impeccable-finish-reviewer agent"), with the original request, confirmed answers, the artifact path, the screenshot paths, its direction contract, existing hook findings, the QUALITY BAR card and approved comp paths (on a code-led build there is no approved comp; the chosen decision comp rides in that slot as the critique reference, named as such), the craft-floor reference path, and on a native platform the platform reference path(s), [ios.md](ios.md) / [android.md](android.md), both on adaptive, plus one line saying no detector ran, so the reviewer judges in the platform's conventions rather than the web's. The reviewer has no browser; screenshots you fail to pass are checks it cannot run. Never read the shipped agents' definition files before spawning; the harness loads them at spawn, and you owe only the input packet. Wait on any agent with one long timeout rather than a loop of short polls, and spend the wait on the next independent step. Verify its return carries the five contract sections; on an empty or thrashed return, respawn once with the same inputs before doing anything else. This review never runs inside the build thread and never inherits it: spawn the reviewer fresh, with no forked conversation history (`fork_turns: 0` in codex); a reviewer that inherits your transcript inherits your framing, your optimism, and your abstractions, and everything it needs travels in the inputs above. Only a harness whose tool surface has no subagent capability at all substitutes a fresh in-thread pass after stepping fully out of the build context, run from [degraded/finish-reviewer.md](degraded/finish-reviewer.md), and a substituted or failed-and-replaced review is disclosed in one line at finish, never silently. When the reviewer's first material fix is a rebuild directive, fidelity failed wholesale rather than in patches, so skip the fix batch and execute the rebuild immediately: re-derive the named regions, produce the named assets, and send the result back for a verdict, telling the user what is happening rather than asking permission to fix a failure. The user is consulted only when a second rebuild directive arrives, both verdicts on the table, or when rebuilding would discard content the user approved. Otherwise apply the material fixes in one batch, rebuild once, and recapture the same viewports over the same files. A recapture measures positions, loading, and overflow; it cannot measure whether a fix reached the quality the finding named, so send the recaptured screenshots back to the same reviewer for a verdict scoring every material fix resolved, partial, or unresolved (through the harness's agent continuation; without one, run the scoring fresh from [degraded/finish-reviewer.md](degraded/finish-reviewer.md)'s Verdict Pass). Fixes scored partial or unresolved get another batch, recapture, and verdict. Two rounds is the budget an unattended run ends at; an attended session's ceiling belongs to the user, so when the second verdict still lists open items, put the table in front of them and let them choose between shipping as it stands and funding another round. Whoever is deciding, stop the moment a round resolves nothing, and the reviewer's findings are the only list you work from, never your own re-opened hunt. Report the final verdict table to the user as it stands, open items included, under the reviewer's own disposition word: a table with open material findings is never announced as a pass, and never under a softer label than the reviewer wrote. Do not run a second detector.
+After the second inspection round the build thread's polishing is over: no further defect hunts, micro-edit scripts, or rebuilds here; whatever remains ships through the handoffs, where a fresh context does the finding better and cheaper. On the web, where this harness runs no design hook, run `node <skill-base-dir>/scripts/detect.mjs --json` on the changed targets once here, fix what is mechanical, and pass the remaining findings to the reviewer; a hookless web build that skips this ships every tell the hook exists to catch. A native platform skips the detector entirely: it reads HTML and CSS and has no verdict on native code, so the reviewer's floor check is the only slop gate and the input packet says so. Capture the screenshots into `.impeccable/review/`, one file per captured viewport (on the web, `desktop.png` and `mobile.png`; on native, one per device class, such as `phone.png` and `tablet.png`, suffixed per OS on adaptive), creating that directory when the harness does not; the paths you pass the reviewer are its spec, and that directory is where it looks when a passed path is missing. Then spawn the shipped finish reviewer, `impeccable-finish-reviewer` (`impeccable_finish_reviewer` in codex; `/impeccable-finish-reviewer` in Cursor; on GitHub Copilot say "Use the impeccable-finish-reviewer agent"), with the original request, confirmed answers, the artifact path, the screenshot paths, its direction contract, existing hook findings, the QUALITY BAR card and approved comp paths (on a code-led build there is no approved comp; the chosen decision comp rides in that slot as the critique reference, named as such), the craft-floor reference path, and on a native platform the platform reference path(s), [ios.md](ios.md) / [android.md](android.md), both on adaptive, plus one line saying no detector ran, so the reviewer judges in the platform's conventions rather than the web's. The reviewer has no browser; screenshots you fail to pass are checks it cannot run. Never read the shipped agents' definition files before spawning; the harness loads them at spawn, and you owe only the input packet. Wait on any agent with one long timeout rather than a loop of short polls, and spend the wait on the next independent step. Verify its return carries the five contract sections; on an empty or thrashed return, respawn once with the same inputs before doing anything else. This review never runs inside the build thread and never inherits it: spawn the reviewer fresh, with no forked conversation history (`fork_turns: 0` in codex); a reviewer that inherits your transcript inherits your framing, your optimism, and your abstractions, and everything it needs travels in the inputs above. Only a harness whose tool surface has no subagent capability at all substitutes a fresh in-thread pass after stepping fully out of the build context, run from [degraded/finish-reviewer.md](degraded/finish-reviewer.md), and a substituted or failed-and-replaced review is disclosed in one line at finish, never silently. When the reviewer's first material fix is a rebuild directive, fidelity failed wholesale rather than in patches, so skip the fix batch and execute the rebuild immediately: re-derive the named regions, produce the named assets, and send the result back for a verdict, telling the user what is happening rather than asking permission to fix a failure. The user is consulted only when a second rebuild directive arrives, both verdicts on the table, or when rebuilding would discard content the user approved. Otherwise apply the material fixes in one batch, rebuild once, and recapture the same viewports over the same files. A recapture measures positions, loading, and overflow; it cannot measure whether a fix reached the quality the finding named, so send the recaptured screenshots back to the same reviewer for a verdict scoring every material fix resolved, partial, or unresolved (through the harness's agent continuation; without one, run the scoring fresh from [degraded/finish-reviewer.md](degraded/finish-reviewer.md)'s Verdict Pass). Fixes scored partial or unresolved get another batch, recapture, and verdict. Two rounds is the budget an unattended run ends at; an attended session's ceiling belongs to the user, so when the second verdict still lists open items, put the table in front of them and let them choose between shipping as it stands and funding another round. Whoever is deciding, stop the moment a round resolves nothing, and the reviewer's findings are the only list you work from, never your own re-opened hunt. Report the final verdict table to the user as it stands, open items included, under the reviewer's own disposition word: a table with open material findings is never announced as a pass, and never under a softer label than the reviewer wrote. Do not run a second detector.
 
 Then spawn the shipped documenter, `impeccable-documenter` (`impeccable_documenter` in codex), with the project root, the artifact path, the direction contract, PRODUCT.md, the [document.md](document.md) reference path, and the boundary to write at; it records DESIGN.md and the sidecar from the built world, ground truth over intention; without subagents the pass runs from [degraded/documenter.md](degraded/documenter.md). A clean detector pass is not finished; finished is the contract kept, the comp honored, the review closed, and the system recorded.
diff --git a/scripts/lib/plugin-paths.js b/scripts/lib/plugin-paths.js
index 4352bac64..578d48fa9 100644
--- a/scripts/lib/plugin-paths.js
+++ b/scripts/lib/plugin-paths.js
@@ -13,9 +13,9 @@ import path from 'path';
  *
  * There is no literal path that works for plugins (CLAUDE_PLUGIN_ROOT is
  * hook-only), so the plugin's markdown uses the `<skill-base-dir>` form
- * that SKILL.md's Setup step 1 already carries as a fallback: the runtime
- * shows the skill's loaded base directory when it loads the skill, and
- * scripts resolve against that.
+ * SKILL.md's Setup step 1 already leads with: the runtime shows the
+ * skill's loaded base directory when it loads the skill, and scripts
+ * resolve against that.
  */
 
 // The resolved {{scripts_path}} in dist/claude-code output, fixed by the
@@ -30,13 +30,16 @@ export const PLUGIN_SCRIPTS_PATH = '<skill-base-dir>/scripts';
 // scripts directory wherever the plugin cache puts it.
 export const PLUGIN_ALLOWED_TOOLS_RULE = 'Bash(node */skills/impeccable/scripts/*)';
 
-// Setup step 1's parenthetical describes the base-dir form as a fallback.
-// In the plugin copy that form is the primary (and only) form, so the
-// parenthetical becomes the definition of the token every instruction uses.
+// Setup step 1's second sentence names the project path as the fallback
+// when the runtime reports no base directory. A plugin install has no
+// working project fallback (that path is the bug this rewrite exists to
+// fix), and every instruction in the plugin copy already carries the
+// token, so the sentence loses its fallback clause.
 const SETUP_FALLBACK_TEXT =
-  "(if the runtime shows this skill's loaded base directory, run `node <skill-base-dir>/scripts/context.mjs`; keep cwd at the user's project)";
+  'That base directory resolves every `node .claude/skills/impeccable/scripts/...` command in this skill and its references, ' +
+  'and `.claude/skills/impeccable/scripts` is the fallback only when the runtime reports no base directory.';
 const SETUP_PLUGIN_TEXT =
-  "(`<skill-base-dir>` is this skill's loaded base directory, shown by the runtime when it loads the skill; keep cwd at the user's project)";
+  'Every `node <skill-base-dir>/scripts/...` command in this skill and its references resolves against that base directory.';
 
 /**
  * Rewrite one markdown file's content for the plugin subtree. Pure, so the
@@ -54,17 +57,17 @@ export function rewritePluginMarkdown(content) {
 
 /**
  * Fail the build when the copied SKILL.md no longer matches the rewrite.
- * The parenthetical replacement keys on the exact Setup step 1 text; if
+ * The fallback-sentence replacement keys on the exact Setup step 1 text; if
  * SKILL.src.md rewords it, replaceAll silently no-ops and the plugin ships
- * a redundant (but still correct) instruction. Loud beats redundant: the
- * build stops here so plugin-paths.js gets updated alongside the source.
+ * the project path as its fallback. Loud beats wrong: the build stops here
+ * so plugin-paths.js gets updated alongside the source.
  */
 export function verifyPluginSkillRewrite(skillMdPath) {
   const content = fs.readFileSync(skillMdPath, 'utf-8');
   if (!content.includes(SETUP_PLUGIN_TEXT)) {
     throw new Error(
-      `Plugin rewrite drift: ${skillMdPath} is missing the <skill-base-dir> definition. ` +
-      "SKILL.src.md's Setup step 1 parenthetical no longer matches the replacement in " +
+      `Plugin rewrite drift: ${skillMdPath} is missing the <skill-base-dir> resolution sentence. ` +
+      "SKILL.src.md's Setup step 1 fallback sentence no longer matches the replacement in " +
       'scripts/lib/plugin-paths.js (issue #523); update SETUP_FALLBACK_TEXT to the new wording.',
     );
   }
diff --git a/tests/plugin-paths.test.js b/tests/plugin-paths.test.js
index 5949e0220..6fbdb6cb9 100644
--- a/tests/plugin-paths.test.js
+++ b/tests/plugin-paths.test.js
@@ -55,16 +55,21 @@ describe('rewritePluginMarkdown', () => {
     expect(output).toContain('  - Bash(npx impeccable *)');
   });
 
-  test('turns the Setup step 1 fallback parenthetical into the token definition', () => {
+  test('drops the project-path fallback clause from Setup step 1', () => {
     const input =
-      "1. Run `node .claude/skills/impeccable/scripts/context.mjs` once per session " +
-      "(if the runtime shows this skill's loaded base directory, run `node <skill-base-dir>/scripts/context.mjs`; " +
-      "keep cwd at the user's project). Pass a named source file or route as `--target <path>`.";
+      '1. Run `node <skill-base-dir>/scripts/context.mjs` once per session, where `<skill-base-dir>` is the ' +
+      "loaded base directory the runtime reports for this skill; keep cwd at the user's project. " +
+      'That base directory resolves every `node .claude/skills/impeccable/scripts/...` command in this skill ' +
+      'and its references, and `.claude/skills/impeccable/scripts` is the fallback only when the runtime ' +
+      'reports no base directory. Pass a named source file or route as `--target <path>`.';
     const output = rewritePluginMarkdown(input);
-    expect(output).toContain('Run `node <skill-base-dir>/scripts/context.mjs` once per session');
-    expect(output).toContain("(`<skill-base-dir>` is this skill's loaded base directory");
-    // The naive rewrite would leave the same command twice in one sentence.
-    expect(output.match(/<skill-base-dir>\/scripts\/context\.mjs/g)).toHaveLength(1);
+    expect(output).toContain(
+      'Every `node <skill-base-dir>/scripts/...` command in this skill and its references resolves against that base directory.',
+    );
+    // The naive rewrite would keep the fallback clause and name the token as
+    // its own fallback for when there is no base directory to resolve it.
+    expect(output).not.toContain('fallback');
+    expect(output).not.toContain(CLAUDE_PROJECT_SCRIPTS_PATH);
   });
 
   test('leaves unrelated project-relative paths alone', () => {
@@ -137,9 +142,11 @@ describe('verifyPluginSkillRewrite', () => {
     'allowed-tools:',
     '  - Bash(node .claude/skills/impeccable/scripts/*)',
     '',
-    "1. Run `node .claude/skills/impeccable/scripts/context.mjs` once per session " +
-      "(if the runtime shows this skill's loaded base directory, run `node <skill-base-dir>/scripts/context.mjs`; " +
-      "keep cwd at the user's project).",
+    '1. Run `node <skill-base-dir>/scripts/context.mjs` once per session, where `<skill-base-dir>` is the ' +
+      "loaded base directory the runtime reports for this skill; keep cwd at the user's project. " +
+      'That base directory resolves every `node .claude/skills/impeccable/scripts/...` command in this skill ' +
+      'and its references, and `.claude/skills/impeccable/scripts` is the fallback only when the runtime ' +
+      'reports no base directory.',
   ].join('\n');
 
   test('accepts a correctly rewritten SKILL.md', () => {
@@ -147,12 +154,12 @@ describe('verifyPluginSkillRewrite', () => {
     expect(() => verifyPluginSkillRewrite(p)).not.toThrow();
   });
 
-  test('fails the build when the Setup parenthetical no longer matched', () => {
-    // Simulate SKILL.src.md rewording step 1: the parenthetical replacement
-    // no-ops, so the definition of <skill-base-dir> never lands.
-    const reworded = goodSkill.replace('if the runtime shows', 'when the runtime displays');
+  test('fails the build when the Setup fallback sentence no longer matched', () => {
+    // Simulate SKILL.src.md rewording step 1: the sentence replacement
+    // no-ops, so the plugin copy keeps the project path as its fallback.
+    const reworded = goodSkill.replace('is the fallback only when', 'is used only when');
     const p = writeSkill(rewritePluginMarkdown(reworded));
-    expect(() => verifyPluginSkillRewrite(p)).toThrow(/Setup step 1 parenthetical/);
+    expect(() => verifyPluginSkillRewrite(p)).toThrow(/Setup step 1 fallback sentence/);
   });
 
   test('fails the build when the allowed-tools rule no longer matched', () => {

From 1e68ed06f8321152ca7e8c397194982dabb3e767 Mon Sep 17 00:00:00 2001
From: Abdul Wahab <abdulwahabone@gmail.com>
Date: Mon, 10 Aug 2026 15:05:44 +0500
Subject: [PATCH 4/4] Drop the node pre-approval from the plugin copy instead
 of widening it

Greptile's review proved Bash(node */skills/impeccable/scripts/*)
auto-approves any same-shaped path anywhere on disk, and no frontmatter
rule can bind approval to the loaded plugin root. The plugin ships no
node pre-approval; script runs go through the normal Bash confirmation.

AI-assisted change, reviewed by a maintainer.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 plugin/skills/impeccable/SKILL.md |  1 -
 scripts/lib/plugin-paths.js       | 27 +++++++++++++++------------
 tests/plugin-paths.test.js        | 22 ++++++++++++----------
 3 files changed, 27 insertions(+), 23 deletions(-)

diff --git a/plugin/skills/impeccable/SKILL.md b/plugin/skills/impeccable/SKILL.md
index 9c2c73112..8d1ea0a09 100644
--- a/plugin/skills/impeccable/SKILL.md
+++ b/plugin/skills/impeccable/SKILL.md
@@ -7,7 +7,6 @@ argument-hint: "[shape · audit|critique · animate|bolder|colorize|delight|layo
 license: Apache 2.0
 allowed-tools:
   - Bash(npx impeccable *)
-  - Bash(node */skills/impeccable/scripts/*)
 ---
 
 This skill gives you the tools and permission to create design that earns to be called out-of-distribution craft: Whereas before, your design work would have been safe, timid and measured, you now approach every design task as a award-winning design director with impeccable understanding for what makes exceptional design work: production-grade code, peak creativity, a clear POV, deep understanding of the needs of the client and users, and exceptional craft.
diff --git a/scripts/lib/plugin-paths.js b/scripts/lib/plugin-paths.js
index 578d48fa9..ccdd9979a 100644
--- a/scripts/lib/plugin-paths.js
+++ b/scripts/lib/plugin-paths.js
@@ -25,10 +25,13 @@ export const CLAUDE_PROJECT_SCRIPTS_PATH = '.claude/skills/impeccable/scripts';
 export const PLUGIN_SCRIPTS_PATH = '<skill-base-dir>/scripts';
 
 // The project-path rule pre-approves a path inside the user's project, the
-// one place the plugin must NOT run scripts from. Claude Code Bash rules
-// support mid-pattern wildcards, so scope approval to the skill's own
-// scripts directory wherever the plugin cache puts it.
-export const PLUGIN_ALLOWED_TOOLS_RULE = 'Bash(node */skills/impeccable/scripts/*)';
+// one place the plugin must NOT run scripts from. No replacement rule
+// exists: a wildcard pattern such as `node */skills/impeccable/scripts/*`
+// auto-approves any same-shaped path anywhere on disk, and frontmatter has
+// no variable bound to the loaded plugin root (CLAUDE_PLUGIN_ROOT is
+// hook-only). The plugin copy drops the rule and script runs go through
+// the normal Bash confirmation.
+export const PROJECT_ALLOWED_TOOLS_LINE = `  - Bash(node ${CLAUDE_PROJECT_SCRIPTS_PATH}/*)\n`;
 
 // Setup step 1's second sentence names the project path as the fallback
 // when the runtime reports no base directory. A plugin install has no
@@ -47,10 +50,10 @@ const SETUP_PLUGIN_TEXT =
  */
 export function rewritePluginMarkdown(content) {
   return content
-    // Order matters: the allowed-tools rule contains the project path, so
-    // rewrite it before the generic path replacement turns it into a
-    // rule that matches nothing.
-    .replaceAll(`Bash(node ${CLAUDE_PROJECT_SCRIPTS_PATH}/*)`, PLUGIN_ALLOWED_TOOLS_RULE)
+    // Order matters: the allowed-tools line contains the project path, so
+    // remove it before the generic path replacement rewrites it into a
+    // line the removal no longer matches.
+    .replaceAll(PROJECT_ALLOWED_TOOLS_LINE, '')
     .replaceAll(SETUP_FALLBACK_TEXT, SETUP_PLUGIN_TEXT)
     .replaceAll(CLAUDE_PROJECT_SCRIPTS_PATH, PLUGIN_SCRIPTS_PATH);
 }
@@ -71,11 +74,11 @@ export function verifyPluginSkillRewrite(skillMdPath) {
       'scripts/lib/plugin-paths.js (issue #523); update SETUP_FALLBACK_TEXT to the new wording.',
     );
   }
-  if (!content.includes(PLUGIN_ALLOWED_TOOLS_RULE)) {
+  if (content.includes('Bash(node ')) {
     throw new Error(
-      `Plugin rewrite drift: ${skillMdPath} is missing the allowed-tools rule ` +
-      `${PLUGIN_ALLOWED_TOOLS_RULE}. SKILL.src.md's allowed-tools entry no longer matches the ` +
-      'replacement in scripts/lib/plugin-paths.js (issue #523).',
+      `Plugin rewrite drift: ${skillMdPath} still pre-approves a node script path. ` +
+      "SKILL.src.md's allowed-tools entry no longer matches the removal in " +
+      'scripts/lib/plugin-paths.js (issue #523); the plugin ships no node pre-approval.',
     );
   }
 }
diff --git a/tests/plugin-paths.test.js b/tests/plugin-paths.test.js
index 6fbdb6cb9..33cb72b62 100644
--- a/tests/plugin-paths.test.js
+++ b/tests/plugin-paths.test.js
@@ -7,7 +7,9 @@
  * points into the user's project: a plugin-only user gets MODULE_NOT_FOUND,
  * and a dual-install user silently runs the project's older skill copy. The
  * rewrite swaps every markdown instruction to the `<skill-base-dir>` form
- * and scopes the allowed-tools rule to the skill's own install path.
+ * and drops the node pre-approval: no frontmatter rule can bind approval to
+ * the loaded plugin root, and an unbound wildcard would auto-approve any
+ * same-shaped path anywhere on disk.
  */
 import { describe, test, expect, beforeEach, afterEach } from 'bun:test';
 import fs from 'fs';
@@ -18,7 +20,6 @@ import {
   rewritePluginMarkdownTree,
   verifyPluginSkillRewrite,
   CLAUDE_PROJECT_SCRIPTS_PATH,
-  PLUGIN_ALLOWED_TOOLS_RULE,
 } from '../scripts/lib/plugin-paths.js';
 
 describe('rewritePluginMarkdown', () => {
@@ -40,19 +41,20 @@ describe('rewritePluginMarkdown', () => {
     expect(output).toContain('node <skill-base-dir>/scripts/live-poll.mjs --reply EVENT_ID done');
   });
 
-  test('rewrites the allowed-tools rule to the install-path pattern, not a dead literal', () => {
+  test('removes the node pre-approval instead of widening it', () => {
     const frontmatter = [
       'allowed-tools:',
       '  - Bash(npx impeccable *)',
       '  - Bash(node .claude/skills/impeccable/scripts/*)',
+      '---',
+      '',
     ].join('\n');
     const output = rewritePluginMarkdown(frontmatter);
     // The generic path rewrite alone would leave Bash(node <skill-base-dir>/scripts/*),
-    // a rule that matches no real command. The allowed-tools rewrite must win.
-    expect(output).toContain(`  - ${PLUGIN_ALLOWED_TOOLS_RULE}`);
-    expect(output).not.toContain('Bash(node <skill-base-dir>/scripts/*)');
-    expect(output).not.toContain('Bash(node .claude/skills/impeccable/scripts/*)');
-    expect(output).toContain('  - Bash(npx impeccable *)');
+    // a dead literal, and any wildcard replacement would auto-approve
+    // same-shaped paths outside the plugin. The line must go entirely.
+    expect(output).not.toContain('Bash(node ');
+    expect(output).toContain('  - Bash(npx impeccable *)\n---');
   });
 
   test('drops the project-path fallback clause from Setup step 1', () => {
@@ -162,12 +164,12 @@ describe('verifyPluginSkillRewrite', () => {
     expect(() => verifyPluginSkillRewrite(p)).toThrow(/Setup step 1 fallback sentence/);
   });
 
-  test('fails the build when the allowed-tools rule no longer matched', () => {
+  test('fails the build when a node pre-approval survives the removal', () => {
     const reworded = goodSkill.replace(
       'Bash(node .claude/skills/impeccable/scripts/*)',
       'Bash(node .claude/skills/impeccable/scripts/**)',
     );
     const p = writeSkill(rewritePluginMarkdown(reworded));
-    expect(() => verifyPluginSkillRewrite(p)).toThrow(/allowed-tools/);
+    expect(() => verifyPluginSkillRewrite(p)).toThrow(/pre-approves a node script path/);
   });
 });