# Backlog

## Preserve Package Filters Inside Auto-Discovery Roots

- **Evidence**: `isRawExtensionCheckout()` infers ownership from directory location alone. A checkout under the user `extensions/` directory, also configured as a package with `skills: []`, has disabled packaged Skills but still contributes source Skills through `resources_discover`.
- **Remaining work**: Distinguish package-managed loading from raw auto-discovery without relying only on path shape. Keep source Skill discovery for genuine raw checkouts and preserve package provenance and filters.
- **Acceptance**: Extend `test/packaging.test.ts` with a package-managed checkout inside an auto-discovery root and disabled Skills. No source Skill fallback may re-enable them; existing raw-checkout and managed-package cases must continue to pass.
