@arp-protocol/cli 0.0.3 → 0.0.4

package/dist/hook.js

@@ -16,7 +16,40 @@ function appendOwn(path, text) {
 // ../hook/src/hook.ts
 import { existsSync as existsSync3, lstatSync as lstatSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { dirname as dirname4, join as join5 } from "node:path";
+import { dirname as dirname3, join as join5 } from "node:path";
+// ../../packages/protocol/dist/declare/tool-thing.js
+class InvalidToolUrlError extends Error {
+  input;
+  constructor(input, why) {
+    super(`${JSON.stringify(input)} is not a usable tool URL: ${why}`);
+    this.name = "InvalidToolUrlError";
+    this.input = input;
+  }
+}
+function normaliseToolUrl(input) {
+  const trimmed = input.trim();
+  if (trimmed.length === 0)
+    throw new InvalidToolUrlError(input, "empty");
+  const withScheme = /^[a-z][a-z0-9+.-]*:/i.test(trimmed) ? trimmed : `https://${trimmed}`;
+  let url;
+  try {
+    url = new URL(withScheme);
+  } catch {
+    throw new InvalidToolUrlError(input, "not parseable as a URL");
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new InvalidToolUrlError(input, `scheme ${url.protocol} is not http or https`);
+  }
+  if (url.hostname.length === 0)
+    throw new InvalidToolUrlError(input, "no host");
+  const host = url.hostname.replace(/\.+$/, "").replace(/^(?:www\.)+/, "");
+  const path = url.pathname.replace(/(?:\.git|\/)+$/, "");
+  const params = [...new URLSearchParams(url.search).entries()].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+  const query = params.length === 0 ? "" : `?${new URLSearchParams(params).toString()}`;
+  const port = url.port === "" || url.port === "80" || url.port === "443" ? "" : `:${url.port}`;
+  return `https://${host}${port}${path}${query}`;
+}
+
 // ../../packages/graphql/dist/http.js
 var DEFAULT_TIMEOUT_MS = 1e4;
 var DEFAULT_MAX_BODY_BYTES = 8 * 1024 * 1024;
@@ -504,38 +537,6 @@ var X402_REASONS_QUERY = `query X402Reasons($ids: [String!]!, $because: String!,
         ${LEVEL}
     }
 }`;
-// ../../packages/protocol/dist/declare/tool-thing.js
-class InvalidToolUrlError extends Error {
-  input;
-  constructor(input, why) {
-    super(`${JSON.stringify(input)} is not a usable tool URL: ${why}`);
-    this.name = "InvalidToolUrlError";
-    this.input = input;
-  }
-}
-function normaliseToolUrl(input) {
-  const trimmed = input.trim();
-  if (trimmed.length === 0)
-    throw new InvalidToolUrlError(input, "empty");
-  const withScheme = /^[a-z][a-z0-9+.-]*:/i.test(trimmed) ? trimmed : `https://${trimmed}`;
-  let url;
-  try {
-    url = new URL(withScheme);
-  } catch {
-    throw new InvalidToolUrlError(input, "not parseable as a URL");
-  }
-  if (url.protocol !== "http:" && url.protocol !== "https:") {
-    throw new InvalidToolUrlError(input, `scheme ${url.protocol} is not http or https`);
-  }
-  if (url.hostname.length === 0)
-    throw new InvalidToolUrlError(input, "no host");
-  const host = url.hostname.replace(/\.+$/, "").replace(/^(?:www\.)+/, "");
-  const path = url.pathname.replace(/(?:\.git|\/)+$/, "");
-  const params = [...new URLSearchParams(url.search).entries()].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
-  const query = params.length === 0 ? "" : `?${new URLSearchParams(params).toString()}`;
-  const port = url.port === "" || url.port === "80" || url.port === "443" ? "" : `:${url.port}`;
-  return `https://${host}${port}${path}${query}`;
-}
 // ../../packages/protocol/dist/session.js
 function refForInvocation(name, source, fetched) {
   const bare = name.includes(":") ? name.split(":").pop() ?? name : name;
@@ -609,9 +610,45 @@ var COMMON = new Set(("awk bash break bun case cat cd chmod command continue cp
 var INSTALL = /\b(?:npm\s+(?:i|install)\s+(?:-g|--global)|pnpm\s+add\s+-g|yarn\s+global\s+add|brew\s+install|pipx\s+install|pip3?\s+install|cargo\s+install)\s+([@a-z0-9][@\w./-]*)/i;
 var PROBE = /\b(?:command\s+-v|which)\s+([a-z][\w-]*)/i;
 var COMMAND = /^[a-z][a-z0-9_-]*$/;
+function shellSegments(line) {
+  const segments = [];
+  let current = "";
+  let quote = null;
+  for (let index = 0;index < line.length; index += 1) {
+    const char = line[index] ?? "";
+    if (char === "\\" && quote !== "'") {
+      current += char + (line[index + 1] ?? "");
+      index += 1;
+      continue;
+    }
+    if (quote !== null) {
+      if (char === quote)
+        quote = null;
+      current += char;
+      continue;
+    }
+    if (char === '"' || char === "'") {
+      quote = char;
+      current += char;
+      continue;
+    }
+    if (char === "#" && (index === 0 || /\s/.test(line[index - 1] ?? "")))
+      break;
+    if (char === "|" || char === ";" || char === "&" && line[index + 1] === "&") {
+      segments.push(current);
+      current = "";
+      if (line[index + 1] === char)
+        index += 1;
+      continue;
+    }
+    current += char;
+  }
+  segments.push(current);
+  return segments;
+}
 function commandsIn(shell, explicitOnly) {
   const found = [];
-  for (const segment of shell.split(/&&|\|\||[|;]/)) {
+  for (const segment of shellSegments(shell)) {
     const line = segment.trim().replace(/^\$\s+/, "");
     if (line === "" || line.startsWith("#"))
       continue;
@@ -646,7 +683,7 @@ function shellLinesRun(lines) {
       run.push(line);
     continued = line.trimEnd().endsWith("\\");
     heredocEnd = /<<-?\s*['"]?([A-Za-z_]+)/.exec(line)?.[1] ?? null;
-    for (const char of line) {
+    for (const char of quote === null ? shellSegments(line).join(";") : line) {
       if (quote === null && (char === '"' || char === "'"))
         quote = char;
       else if (char === quote)
@@ -749,12 +786,21 @@ function installedFromReceipts(text) {
   return found;
 }
 // ../hook/src/classify.ts
+function isFailure(outcome) {
+  return outcome !== "ok" && outcome !== "payment_required";
+}
 var CANCELLED = /\b(interrupted|cancel(l)?ed|aborted) by (the )?user\b|\buser (rejected|denied|declined)\b|\bpermission denied by user\b|\buser doesn't want to (proceed|take this action)\b/i;
 var AUTH = /\b(unauthori[sz]ed|forbidden|invalid (api )?(key|token)|authentication|not authenticated|expired token)\b/i;
 var TIMEOUT = /\b(timed? ?out|timeout|deadline exceeded|ETIMEDOUT)\b/i;
 var UNREACHABLE = /\b(ENOTFOUND|EAI_AGAIN|ECONNREFUSED|ECONNRESET|EHOSTUNREACH|ENETUNREACH|getaddrinfo|certificate|TLS|SSL|socket hang up|connection refused|fetch failed)\b/i;
-var PAYMENT = /\b(payment required|insufficient (funds|balance)|payment (failed|refused|rejected)|x402)\b/i;
-var STATUS = /\b(40[123]|429|5\d\d)\b/;
+var CHALLENGE = /\bpayment required\b|"x402Version"[\s\S]{0,2000}"accepts"|"accepts"[\s\S]{0,2000}"x402Version"/i;
+var REFUSED = /\binsufficient[ _](funds|balance)\b|\bpayment (failed|refused|rejected|declined|invalid)\b|\bsettlement failed\b/i;
+var REFUSED_IN_X402 = /"success"\s*:\s*false|"errorReason"\s*:\s*"[^"]+"|\binvalid_[a-z_]*(signature|payload|payment)[a-z_]*\b/i;
+var ABOUT_PAYMENT = /\bx402|\bpayment\b/i;
+var TRANSACTION = /^(0x[0-9a-fA-F]{64}|[1-9A-HJ-NP-Za-km-z]{64,90})$/;
+var FLAT_OBJECT = /\{[^{}]{0,2000}\}/g;
+var RESPONSE_HEADER = /\b(?:x-)?payment-response\s*[:=]\s*"?([A-Za-z0-9+/=_-]{16,4000})/gi;
+var STATUS = /\b(40[123]|429|5\d\d)\b/g;
 function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -795,21 +841,96 @@ function statusOf(call) {
 function flaggedError(response) {
   return isRecord2(response) && (response.isError === true || response.is_error === true);
 }
+function isSettled(value) {
+  return isRecord2(value) && value.success === true && typeof value.network === "string" && typeof value.transaction === "string" && TRANSACTION.test(value.transaction);
+}
+function stringsOf(value, depth = 0, out = []) {
+  if (typeof value === "string")
+    out.push(value);
+  else if (depth < 4 && Array.isArray(value))
+    for (const item of value)
+      stringsOf(item, depth + 1, out);
+  else if (depth < 4 && isRecord2(value))
+    for (const item of Object.values(value))
+      stringsOf(item, depth + 1, out);
+  return out;
+}
+function isUnsettled(value) {
+  return isRecord2(value) && value.success === false && typeof value.network === "string";
+}
+function anyIn(value, test, depth = 0) {
+  if (test(value))
+    return true;
+  if (depth >= 4)
+    return false;
+  if (Array.isArray(value))
+    return value.some((item) => anyIn(item, test, depth + 1));
+  if (isRecord2(value))
+    return Object.values(value).some((item) => anyIn(item, test, depth + 1));
+  return false;
+}
+function parsed(text) {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+function decoded(base64) {
+  try {
+    return Buffer.from(base64.replace(/-/g, "+").replace(/_/g, "/"), "base64").toString("utf8");
+  } catch {
+    return "";
+  }
+}
+function settledInText(text) {
+  for (const [object] of text.matchAll(FLAT_OBJECT))
+    if (isSettled(parsed(object)))
+      return true;
+  for (const match of text.matchAll(RESPONSE_HEADER))
+    if (isSettled(parsed(decoded(match[1] ?? ""))))
+      return true;
+  return false;
+}
+function settlementIn(call) {
+  if (anyIn(call.response, isSettled))
+    return true;
+  const texts = [...call.error === null ? [] : [call.error], ...stringsOf(call.response)];
+  return texts.some(settledInText);
+}
+function emptyContent(response) {
+  const blocks = Array.isArray(response) ? response : isRecord2(response) && Array.isArray(response.content) ? response.content : null;
+  if (typeof response === "string")
+    return response.trim().length === 0;
+  if (blocks === null)
+    return false;
+  return blocks.every((block) => !isRecord2(block) || typeof block.text !== "string" || block.text.trim().length === 0 || isSettled(parsed(block.text)));
+}
 function classifyCall(call) {
   if (call.interrupted)
     return null;
   const failed = call.event === "PostToolUseFailure" || call.error !== null || flaggedError(call.response);
   const status = statusOf(call);
-  if (!failed && (status === null || status < 400))
-    return { outcome: "ok", code: null };
+  if (!failed && (status === null || status < 400)) {
+    return settlementIn(call) && emptyContent(call.response) ? { outcome: "paid_no_delivery", code: null } : { outcome: "ok", code: null };
+  }
   const text = failureText(call);
   if (CANCELLED.test(text))
     return null;
-  const found = STATUS.exec(text);
-  const match = status ?? (found === null ? null : Number(found[0]));
+  const found = [...text.matchAll(STATUS)].map((one) => Number(one[0]));
+  const after = status !== null && status !== 402 ? status : found.find((one) => one !== 402) ?? null;
+  const challenge = status === 402 || status === null && (found.includes(402) || CHALLENGE.test(text));
+  const match = after ?? (challenge ? 402 : null);
   const code = match === null ? null : String(match);
-  if (match === 402 || PAYMENT.test(text))
-    return { outcome: "payment", code };
+  if (settlementIn(call))
+    return { outcome: "paid_no_delivery", code: after === null ? null : String(after) };
+  const refused = anyIn(call.response, isUnsettled) || REFUSED.test(text) || (challenge || ABOUT_PAYMENT.test(text)) && REFUSED_IN_X402.test(text);
+  if (refused) {
+    return { outcome: "payment_refused", code };
+  }
+  if (challenge && after === null && !TIMEOUT.test(text) && !UNREACHABLE.test(text)) {
+    return { outcome: "payment_required", code };
+  }
   if (match === 401 || match === 403 || AUTH.test(text))
     return { outcome: "auth", code };
   if (TIMEOUT.test(text))
@@ -1041,18 +1162,18 @@ function toolCallOf(raw) {
 
 // ../../packages/protocol/src/content-path.ts
 function skillRefFromUrl3(url) {
-  let parsed;
+  let parsed2;
   try {
-    parsed = new URL(url.includes("://") ? url : `https://${url}`);
+    parsed2 = new URL(url.includes("://") ? url : `https://${url}`);
   } catch {
     return null;
   }
-  if (parsed.hostname.replace(/^www\./, "") !== "github.com")
+  if (parsed2.hostname.replace(/^www\./, "") !== "github.com")
     return null;
-  const skill = parsed.searchParams.get("skill");
+  const skill = parsed2.searchParams.get("skill");
   if (skill === null || skill.length === 0)
     return null;
-  const [owner, repo] = parsed.pathname.replace(/^\/+/, "").replace(/\/+$/, "").replace(/\.git$/, "").split("/");
+  const [owner, repo] = parsed2.pathname.replace(/^\/+/, "").replace(/\/+$/, "").replace(/\.git$/, "").split("/");
   if (owner === undefined || repo === undefined)
     return null;
   if (owner.length === 0 || repo.length === 0)
@@ -1122,9 +1243,45 @@ var COMMON2 = new Set(("awk bash break bun case cat cd chmod command continue cp
 var INSTALL2 = /\b(?:npm\s+(?:i|install)\s+(?:-g|--global)|pnpm\s+add\s+-g|yarn\s+global\s+add|brew\s+install|pipx\s+install|pip3?\s+install|cargo\s+install)\s+([@a-z0-9][@\w./-]*)/i;
 var PROBE2 = /\b(?:command\s+-v|which)\s+([a-z][\w-]*)/i;
 var COMMAND2 = /^[a-z][a-z0-9_-]*$/;
+function shellSegments2(line) {
+  const segments = [];
+  let current = "";
+  let quote = null;
+  for (let index = 0;index < line.length; index += 1) {
+    const char = line[index] ?? "";
+    if (char === "\\" && quote !== "'") {
+      current += char + (line[index + 1] ?? "");
+      index += 1;
+      continue;
+    }
+    if (quote !== null) {
+      if (char === quote)
+        quote = null;
+      current += char;
+      continue;
+    }
+    if (char === '"' || char === "'") {
+      quote = char;
+      current += char;
+      continue;
+    }
+    if (char === "#" && (index === 0 || /\s/.test(line[index - 1] ?? "")))
+      break;
+    if (char === "|" || char === ";" || char === "&" && line[index + 1] === "&") {
+      segments.push(current);
+      current = "";
+      if (line[index + 1] === char)
+        index += 1;
+      continue;
+    }
+    current += char;
+  }
+  segments.push(current);
+  return segments;
+}
 function commandsIn2(shell, explicitOnly) {
   const found = [];
-  for (const segment of shell.split(/&&|\|\||[|;]/)) {
+  for (const segment of shellSegments2(shell)) {
     const line = segment.trim().replace(/^\$\s+/, "");
     if (line === "" || line.startsWith("#"))
       continue;
@@ -1159,7 +1316,7 @@ function shellLinesRun2(lines) {
       run.push(line);
     continued = line.trimEnd().endsWith("\\");
     heredocEnd = /<<-?\s*['"]?([A-Za-z_]+)/.exec(line)?.[1] ?? null;
-    for (const char of line) {
+    for (const char of quote === null ? shellSegments2(line).join(";") : line) {
       if (quote === null && (char === '"' || char === "'"))
         quote = char;
       else if (char === quote)
@@ -1212,6 +1369,223 @@ function readRequires2(markdown) {
   return { cli, runs, login: null, description };
 }
 
+// ../../packages/protocol/src/skill-needs.ts
+var MARKDOWN = /\.(md|mdx|markdown)$/i;
+var SCRIPT = /\.(sh|bash|zsh|py|js|mjs|cjs|ts|rb|pl|ps1|php|lua)$/i;
+var COMMENT_LINE = /^\s*(?:#|\/\/|\*|--|;|rem\s)/i;
+function isTestFile2(path) {
+  return /(^|\/)(tests?|__tests__|spec|fixtures?)\/|\.(test|spec)\.[a-z]+$|(^|\/)test_[^/]+\.py$|_test\.(py|go|rb)$/i.test(path);
+}
+function isSecretName2(name) {
+  return /(^|_)(API_?KEY|KEY|TOKEN|SECRET|PASSWORD|PASSWD|PASS|CREDENTIALS|CREDS)$/.test(name);
+}
+var SET_IN_SKILL_MD = /(?:^|\s|`)(?:export\s+|set\s+|\$env:)?([A-Z][A-Z0-9_]{2,})=/g;
+function lineAt(text, index) {
+  let line = 1;
+  for (let at = text.indexOf(`
+`);at !== -1 && at < index; at = text.indexOf(`
+`, at + 1))
+    line += 1;
+  return line;
+}
+function keysIn2(files, settings) {
+  const skillMd = files.find((file) => file.path === "SKILL.md");
+  const toSet = new Set;
+  if (skillMd !== undefined)
+    for (const match of skillMd.text.matchAll(SET_IN_SKILL_MD))
+      toSet.add(match[1] ?? "");
+  const wanted = new Set(settings.filter((name) => isSecretName2(name) || toSet.has(name)));
+  const ordered = [
+    ...skillMd === undefined ? [] : [skillMd],
+    ...files.filter((file) => file.path !== "SKILL.md" && !isTestFile2(file.path))
+  ];
+  const found = new Map;
+  for (const file of ordered) {
+    for (const [index, line] of file.text.split(`
+`).entries()) {
+      for (const match of line.matchAll(/\b[A-Z][A-Z0-9_]{2,}\b/g)) {
+        const name = match[0];
+        if (!wanted.has(name) || found.has(name))
+          continue;
+        found.set(name, { name, why: isSecretName2(name) ? "secret" : "set in SKILL.md", file: file.path, line: index + 1 });
+      }
+    }
+  }
+  return [...found.values()].sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+}
+var EVERYWHERE = new Set("sh bash zsh dash env cat ls echo printf mkdir rm cp mv ln grep sed awk tr cut head tail sort uniq wc find xargs test true false base64 date sleep chmod touch tee kill ps uname which open xdg-open cmd powershell pwsh taskkill taskkill.exe where where.exe".split(" "));
+var ALIASES = {
+  soffice: "LibreOffice",
+  libreoffice: "LibreOffice",
+  "google-chrome": "Chrome",
+  chromium: "Chrome",
+  "chromium-browser": "Chrome",
+  magick: "ImageMagick",
+  convert: "ImageMagick",
+  pdftoppm: "poppler",
+  pdftotext: "poppler",
+  python: "python3",
+  docker: "Docker"
+};
+var SPAWNS = [
+  /\b(?:execFileSync|execFile|spawnSync|spawn|execaSync|execa)\(\s*["'`]([a-z][\w.+-]*)["'`]/g,
+  /\b(?:execSync|exec)\(\s*["'`]([a-z][\w.+-]*)[\s"'`]/g,
+  /\bBun\.spawn(?:Sync)?\(\s*\[\s*["'`]([a-z][\w.+-]*)["'`]/g,
+  /\bnew\s+Deno\.Command\(\s*["'`]([a-z][\w.+-]*)["'`]/g,
+  /\bsubprocess\.(?:run|call|check_call|check_output|Popen)\(\s*\[\s*["']([a-z][\w.+-]*)["']/g,
+  /\bsubprocess\.(?:run|call|check_call|check_output|Popen)\(\s*["']([a-z][\w.+-]*)[\s"']/g,
+  /\bos\.(?:system|popen)\(\s*["']([a-z][\w.+-]*)[\s"']/g
+];
+var DRIVES = {
+  puppeteer: "Chrome",
+  "puppeteer-core": "Chrome",
+  "chrome-launcher": "Chrome",
+  "chrome-remote-interface": "Chrome",
+  pyppeteer: "Chrome",
+  playwright: "a Playwright browser",
+  "playwright-core": "a Playwright browser",
+  "@playwright/test": "a Playwright browser",
+  "selenium-webdriver": "a browser and its driver",
+  selenium: "a browser and its driver",
+  "fluent-ffmpeg": "ffmpeg",
+  "ffmpeg-python": "ffmpeg",
+  ffmpeg: "ffmpeg",
+  pydub: "ffmpeg",
+  moviepy: "ffmpeg",
+  "openai-whisper": "ffmpeg",
+  whisper: "ffmpeg",
+  pytesseract: "tesseract",
+  "node-tesseract-ocr": "tesseract",
+  pdf2image: "poppler",
+  "pdf-poppler": "poppler",
+  wand: "ImageMagick",
+  gm: "ImageMagick",
+  pypandoc: "pandoc",
+  "node-pandoc": "pandoc",
+  docker: "Docker",
+  dockerode: "Docker"
+};
+var IMPORTS = [
+  /\bfrom\s+["']([@\w./-]+)["']/g,
+  /\bimport\s*\(\s*["']([@\w./-]+)["']\s*\)/g,
+  /\bimport\s+["']([@\w./-]+)["']/g,
+  /\brequire\(\s*["']([@\w./-]+)["']\s*\)/g,
+  /^\s*(?:from\s+([\w.]+)\s+import|import\s+([\w.]+))/gm
+];
+function packageRoot(specifier) {
+  if (specifier.startsWith("@"))
+    return specifier.split("/").slice(0, 2).join("/");
+  return specifier.split("/")[0]?.split(".")[0] ?? specifier;
+}
+var NAMED_PROGRAMS = [
+  { name: "ffmpeg", pattern: /\bffmpeg\b/i },
+  { name: "ffprobe", pattern: /\bffprobe\b/i },
+  { name: "Chrome", pattern: /\b(?:Google Chrome|Chrome|Chromium|chrome-headless-shell|google-chrome|chromium-browser)\b/ },
+  { name: "Docker", pattern: /\b[Dd]ocker\b/ },
+  { name: "git", pattern: /\bgit\b(?!\s*(?:hub|lab))/ },
+  { name: "jq", pattern: /\bjq\b/ },
+  { name: "pandoc", pattern: /\bpandoc\b/i },
+  { name: "ImageMagick", pattern: /\b(?:ImageMagick|imagemagick|magick)\b/ },
+  { name: "yt-dlp", pattern: /\byt-dlp\b/ },
+  { name: "tesseract", pattern: /\btesseract\b/i },
+  { name: "poppler", pattern: /\b(?:poppler|pdftoppm|pdftotext)\b/i },
+  { name: "LibreOffice", pattern: /\b(?:LibreOffice|libreoffice|soffice)\b/ },
+  { name: "sox", pattern: /\bsox\b/ },
+  { name: "exiftool", pattern: /\bexiftool\b/i },
+  { name: "ollama", pattern: /\b[Oo]llama\b/ },
+  { name: "gh", pattern: /\bgh\s+(?:CLI|cli)\b|\bGitHub CLI\b/ },
+  { name: "python3", pattern: /\b[Pp]ython\s?3?\b(?![-.\w])/ },
+  { name: "node", pattern: /\b(?:Node\.js|node)\b(?![-.\w])/ },
+  { name: "Java", pattern: /\b(?:Java|JDK|JRE)\b/ }
+];
+var NEEDED = /\b(?:requires?|required|requirements?|needs?|needed|prerequisites?|depends on|must (?:be )?install(?:ed)?|must have|install(?:ed)? first|has to be installed|be installed)\b/i;
+var NEEDED_GLOBAL = new RegExp(NEEDED.source, "gi");
+var NOT_NEEDED = /\b(?:no|not|never|without|doesn't|don't|isn't|aren't|zero)\b[^.;]{0,30}\b(?:requires?|required|needs?|needed|install)/i;
+var NOT_AFTER = /\b(?:requires?|needs?)\s+(?:no|nothing|neither)\b/i;
+function saysWhatItNeeds(path, isScript) {
+  if (isScript)
+    return true;
+  if (!MARKDOWN.test(path))
+    return false;
+  const base = path.slice(path.lastIndexOf("/") + 1).toLowerCase();
+  return base === "skill.md" || /^(readme|requirements?|prerequisites?|setup|install(ation)?|dependencies|getting-started)\b/.test(base);
+}
+var COMMENT_OR_STRING = /^\s*(?:#|\/\/|\*|\/\*|"""|''')|["'`][^"'`]*\b(?:requires?|needs?|install)/i;
+function namedAfterVerb(line, program) {
+  for (const verb of line.matchAll(NEEDED_GLOBAL)) {
+    const at = verb.index;
+    const after = line.slice(at + verb[0].length).slice(0, 40).split(/[.;:!?](?:\s|$)/)[0] ?? "";
+    const before = line.slice(Math.max(0, at - 30), at).split(/[.;:!?](?:\s|$)/).at(-1) ?? "";
+    if (program.test(after) || program.test(before))
+      return true;
+  }
+  return false;
+}
+function programsNeededIn2(files) {
+  const out = new Map;
+  const add = (program) => {
+    if (!out.has(program.name))
+      out.set(program.name, program);
+  };
+  for (const file of files) {
+    if (isTestFile2(file.path))
+      continue;
+    const lines = file.text.split(`
+`);
+    const isScript = SCRIPT.test(file.path) || lines[0]?.startsWith("#!") === true;
+    if (isScript && !/\.(sh|bash|zsh)$/i.test(file.path)) {
+      for (const pattern of SPAWNS) {
+        for (const match of file.text.matchAll(pattern)) {
+          const name = match[1] ?? "";
+          const line = lineAt(file.text, match.index);
+          if (name === "" || EVERYWHERE.has(name) || COMMENT_LINE.test(lines[line - 1] ?? ""))
+            continue;
+          add({ name: ALIASES[name] ?? name, from: "spawned", file: file.path, line });
+        }
+      }
+      for (const pattern of IMPORTS) {
+        for (const match of file.text.matchAll(pattern)) {
+          const root = packageRoot(match[1] ?? match[2] ?? "");
+          const driven = DRIVES[root];
+          const line = lineAt(file.text, match.index);
+          if (driven === undefined || COMMENT_LINE.test(lines[line - 1] ?? ""))
+            continue;
+          add({ name: driven, from: "package", file: file.path, line, via: root });
+        }
+      }
+    }
+    if (/(^|\/)package\.json$/.test(file.path)) {
+      for (const [index, line] of lines.entries()) {
+        const name = /^\s*"(@?[\w./-]+)"\s*:\s*"/.exec(line)?.[1];
+        const driven = name === undefined ? undefined : DRIVES[name];
+        if (driven !== undefined)
+          add({ name: driven, from: "package", file: file.path, line: index + 1, via: name ?? "" });
+      }
+    }
+    if (/(^|\/)requirements[\w.-]*\.txt$/i.test(file.path)) {
+      for (const [index, line] of lines.entries()) {
+        const name = /^\s*([A-Za-z0-9][\w.-]*)/.exec(line.replace(/#.*/, ""))?.[1]?.toLowerCase();
+        const driven = name === undefined ? undefined : DRIVES[name];
+        if (driven !== undefined)
+          add({ name: driven, from: "package", file: file.path, line: index + 1, via: name ?? "" });
+      }
+    }
+    if (saysWhatItNeeds(file.path, isScript)) {
+      for (const [index, line] of lines.entries()) {
+        if (NOT_NEEDED.test(line) || NOT_AFTER.test(line))
+          continue;
+        if (isScript && !COMMENT_OR_STRING.test(line))
+          continue;
+        for (const { name, pattern } of NAMED_PROGRAMS) {
+          if (namedAfterVerb(line, pattern))
+            add({ name, from: "named as needed", file: file.path, line: index + 1 });
+        }
+      }
+    }
+  }
+  return [...out.values()];
+}
+
 // ../../packages/protocol/src/skill-contents.ts
 var CONTENTS_LIMITS2 = {
   files: 200,
@@ -1219,8 +1593,8 @@ var CONTENTS_LIMITS2 = {
   items: 40,
   lineChars: 160
 };
-var SCRIPT = /\.(sh|bash|zsh|py|js|mjs|cjs|ts|rb|pl|ps1|php|lua)$/i;
-var MARKDOWN = /\.(md|mdx|markdown)$/i;
+var SCRIPT2 = /\.(sh|bash|zsh|py|js|mjs|cjs|ts|rb|pl|ps1|php|lua)$/i;
+var MARKDOWN2 = /\.(md|mdx|markdown)$/i;
 var FENCE = /^\s*(?:```|~~~)/;
 function cap(text) {
   const flat = text.replace(/\s+/g, " ").trim();
@@ -1240,10 +1614,10 @@ function interpreterOf(firstLine) {
 }
 var SCRIPT_PROBE = /(?:^|[;&|(!{]|\bif|\bthen|\$\()\s*(?:!\s*)?(?:command\s+-v|which|type\s+-p|hash)\s+([a-z][\w.+-]*)/g;
 var SYSTEM_INSTALL = /\b(?:brew|apt-get|apt|dnf|yum|apk|pacman|choco|winget|scoop|port)\s+(?:install|add|-S)\s+(?:-\S+\s+)*([a-z][\w.+-]*)/g;
-var COMMENT_LINE = /^\s*(?:#|\/\/|\*|--|;|rem\s)/i;
+var COMMENT_LINE2 = /^\s*(?:#|\/\/|\*|--|;|rem\s)/i;
 var PYTHON_PROBE = /\bshutil\.which\(\s*["']([a-z][\w.+-]*)["']/g;
 function programsInScriptLine(line, shell) {
-  if (COMMENT_LINE.test(line))
+  if (COMMENT_LINE2.test(line))
     return [];
   const matches = shell ? [...line.matchAll(SCRIPT_PROBE), ...line.matchAll(SYSTEM_INSTALL)] : [...line.matchAll(PYTHON_PROBE)];
   return matches.map((match) => match[1] ?? "").filter((name) => name !== "");
@@ -1307,7 +1681,7 @@ function settingsIn(path, text, code) {
     for (const match of text.matchAll(pattern))
       found.add((match[1] ?? "").toUpperCase());
   }
-  if (MARKDOWN.test(path)) {
+  if (MARKDOWN2.test(path)) {
     for (const match of text.matchAll(EXPORT_IN_PROSE))
       found.add(match[1] ?? "");
     for (const match of text.matchAll(KEY_NAMED))
@@ -1323,7 +1697,7 @@ function codeOf(path, text, isScript) {
 `);
   if (isScript)
     return lines;
-  if (!MARKDOWN.test(path))
+  if (!MARKDOWN2.test(path))
     return [];
   const out = [];
   let fenced = false;
@@ -1496,7 +1870,7 @@ function readSkillContents2(input) {
     if (files.length >= CONTENTS_LIMITS2.files)
       skipped.push({ path: file.path, why: "over the file limit" });
     else if (file.text === null)
-      skipped.push({ path: file.path, why: file.notFetched === true ? "not fetched" : "binary" });
+      skipped.push({ path: file.path, why: file.tooLarge === true ? "too large" : file.notFetched === true ? "not fetched" : "binary" });
     else if (file.text.length > CONTENTS_LIMITS2.fileChars)
       skipped.push({ path: file.path, why: "too large" });
     else
@@ -1507,7 +1881,7 @@ function readSkillContents2(input) {
   const programs = new Map;
   const add = (name, from) => {
     if (!programs.has(name))
-      programs.set(name, from);
+      programs.set(name, { name, from });
   };
   const requires = readRequires2(skillMd);
   for (const name of requires.cli)
@@ -1519,11 +1893,11 @@ function readSkillContents2(input) {
   const domains = new Set;
   const fetchAndRun = [];
   const hidden = [];
-  const scripts = skipped.filter((file) => file.why === "not fetched" && SCRIPT.test(file.path)).map((file) => ({ path: file.path, namedInSkillMd: namesFile(skillMd, file.path) }));
+  const scripts = skipped.filter((file) => file.why === "not fetched" && SCRIPT2.test(file.path)).map((file) => ({ path: file.path, namedInSkillMd: namesFile(skillMd, file.path) }));
   for (const file of files) {
     const lines = file.text.split(`
 `);
-    const isScript = SCRIPT.test(file.path) || lines[0]?.startsWith("#!") === true;
+    const isScript = SCRIPT2.test(file.path) || lines[0]?.startsWith("#!") === true;
     const code = codeOf(file.path, file.text, isScript);
     const shell = isShell(file.path, file.text);
     for (const line of code) {
@@ -1556,18 +1930,22 @@ function readSkillContents2(input) {
       if (run !== undefined)
         fetchAndRun.push({ kind: run.kind, file: file.path, line: index + 1, text: cap(line) });
     }
-    if (MARKDOWN.test(file.path))
+    if (MARKDOWN2.test(file.path))
       hidden.push(...hiddenInMarkdown(file.path, file.text));
   }
   const packageNames = new Set([...packages.values()].map((pkg) => pkg.name));
-  for (const [name, from] of programs)
-    if (from !== "declared" && packageNames.has(name))
+  for (const [name, program] of programs)
+    if (program.from !== "declared" && packageNames.has(name))
       programs.delete(name);
+  for (const needed of programsNeededIn2(files))
+    if (!programs.has(needed.name))
+      programs.set(needed.name, needed);
   const cut = [];
   return {
-    programs: bounded("programs", [...programs.entries()].map(([name, from]) => ({ name, from })).sort((a, b) => compare(a.name, b.name)), cut),
+    programs: bounded("programs", [...programs.values()].sort((a, b) => compare(a.name, b.name)), cut),
     packages: bounded("packages", [...packages.values()].sort((a, b) => compare(`${a.manager} ${a.name}`, `${b.manager} ${b.name}`)), cut),
     settings: bounded("settings", [...settings].sort(compare), cut),
+    keys: bounded("keys", keysIn2(files, [...settings]), cut),
     scripts: bounded("scripts", scripts.sort((a, b) => compare(a.path, b.path)), cut),
     fetchAndRun: bounded("fetchAndRun", fetchAndRun, cut),
     domains: bounded("domains", [...domains].sort(compare), cut),
@@ -1580,24 +1958,12 @@ function readSkillContents2(input) {
     cut
   };
 }
-function contentsLines2(contents, perList = 6) {
-  const list = (items, cut) => items.length === 0 ? "none found" : `${items.slice(0, perList).join(", ")}${items.length > perList || cut ? `, and ${Math.max(0, items.length - perList)}${cut ? "+" : ""} more` : ""}`;
-  const at = (rows, name) => list(rows.map((row) => `${row.kind} at ${row.file}:${row.line} "${row.text}"`), contents.cut.includes(name));
-  return [
-    `Programs: ${list(contents.programs.map((p) => `${p.name} (${p.from})`), contents.cut.includes("programs"))}`,
-    ...contents.packages.length === 0 ? [] : [`Packages: ${list(contents.packages.map((p) => `${p.manager} ${p.name}`), contents.cut.includes("packages"))}`],
-    `Keys and settings it reads: ${list(contents.settings, contents.cut.includes("settings"))}`,
-    `Scripts: ${list(contents.scripts.map((s) => s.namedInSkillMd ? `${s.path} (named in SKILL.md)` : s.path), contents.cut.includes("scripts"))}`,
-    `Fetches and runs code: ${at(contents.fetchAndRun, "fetchAndRun")}`,
-    `Domains named: ${list(contents.domains, contents.cut.includes("domains"))}`,
-    `Hidden or encoded text: ${at(contents.hidden, "hidden")}`,
-    ...contents.read.skipped.length === 0 ? [] : [`Not read: ${list(contents.read.skipped.map((s) => `${s.path} (${s.why})`), false)}`]
-  ];
-}
 
 // ../../packages/protocol/src/pulse.ts
 var MAX_SKILL_FILES_READ2 = 200;
 var MAX_SCRIPTS_READ = 5;
+var MAX_DIRECTORY_FILES_READ = 80;
+var NOT_TEXT = /\.(png|jpe?g|gif|webp|ico|bmp|tiff?|avif|svgz|pdf|zip|gz|tgz|bz2|xz|7z|rar|jar|woff2?|ttf|otf|eot|mp[34]|m4a|wav|ogg|flac|aac|mov|webm|avi|mkv|pptx|docx|xlsx|psd|ai|sketch|fig|db|sqlite|bin|exe|dll|so|dylib|wasm|pyc|class|hdr|exr|glb|ktx2?)$/i;
 var GITHUB_READ_TIMEOUT_MS = 1e4;
 var INSTALLER_ORDER = [
   "",
@@ -1669,7 +2035,7 @@ var PAID_WORD = /\b(pricing|paid|subscription|credits?|billing|free tier|per min
 var HOST = /https?:\/\/([a-zA-Z0-9.-]+\.[a-zA-Z]{2,})/g;
 var NOT_A_SERVICE = /(^|\.)(github\.com|githubusercontent\.com|example\.(com|org|net))$/;
 var LOOKS_LIKE_A_FILE = /\.(jpe?g|png|gif|webp|mp[34]|wav|mov|webm|pdf|md|json|txt)$/;
-var SCRIPT2 = /\.(sh|bash|py|js|mjs|cjs|ts|rb|pl)$/i;
+var SCRIPT3 = /\.(sh|bash|py|js|mjs|cjs|ts|rb|pl)$/i;
 var RUNS_FILE = /\b(?:node|bun|deno|tsx|python3?|bash|sh)\s+((?:~|\.{1,2})?\/?[\w.@-]+(?:\/[\w.@-]+)*\.(?:mjs|cjs|js|ts|py|sh))\b/g;
 var PLACEHOLDER = /(^|\/)(path|your|my|foo|example|script|file|input|output)(\/|\.|$)/i;
 function filesItRuns(markdown, repositoryFiles) {
@@ -1699,7 +2065,7 @@ function readSkillFacts2(markdown, filesInDirectory, repositoryFiles = filesInDi
   return {
     files: filesInDirectory.length,
     bytes: filesInDirectory.reduce((total, file) => total + file.size, 0),
-    scripts: filesInDirectory.filter((file) => SCRIPT2.test(file.path)).length,
+    scripts: filesInDirectory.filter((file) => SCRIPT3.test(file.path)).length,
     keys: [...new Set(markdown.match(KEY_NAME3) ?? [])],
     paidWords: [...new Set((markdown.match(PAID_WORD) ?? []).map((word) => word.toLowerCase()))],
     hosts: [...new Set(hosts)],
@@ -1713,6 +2079,14 @@ function parentOf(path) {
   const at = path.lastIndexOf("/");
   return at === -1 ? "" : path.slice(0, at);
 }
+var MAX_NAME_READS2 = 12;
+var NAME_BATCH = 6;
+var wordsOf = (text) => text.toLowerCase().split(/[^a-z0-9]+/).filter((word) => word.length > 1);
+function byNearness(files, wanted) {
+  const words = new Set(wordsOf(wanted));
+  const shared = (file) => wordsOf(parentOf(file.path)).filter((word) => words.has(word)).length;
+  return files.map((file) => ({ file, shared: shared(file) })).sort((a, b) => b.shared - a.shared || (a.file.path < b.file.path ? -1 : a.file.path > b.file.path ? 1 : 0));
+}
 async function locate(source, repo, skill, listing) {
   const wanted = normaliseName(skill);
   const candidates = listing.files.filter((file) => skillFilesIn2([file]).length === 1);
@@ -1724,12 +2098,18 @@ async function locate(source, repo, skill, listing) {
     if (others.length > MAX_SKILL_FILES_READ2) {
       return { status: "incomplete", reason: "too_many_skill_files" };
     }
-    for (let at = 0;at < others.length && named.length === 0; at += 20) {
-      named = await read(others.slice(at, at + 20));
+    const nearest = byNearness(others, wanted).slice(0, MAX_NAME_READS2);
+    const sharing = nearest.filter((entry) => entry.shared > 0).length;
+    let readTo = 0;
+    while (readTo < nearest.length && named.length === 0) {
+      const size = readTo < sharing ? sharing - readTo : NAME_BATCH;
+      named = await read(nearest.slice(readTo, readTo + size).map((entry) => entry.file));
+      readTo += size;
     }
     if (named.length > 0) {
-      const last = others.findIndex((file) => file === named.at(-1)?.file);
-      named = [...named, ...await read(others.slice(last + 1))];
+      named = [...named, ...await read(nearest.slice(readTo, sharing).map((entry) => entry.file))];
+    } else if (nearest.length < others.length) {
+      return { status: "incomplete", reason: "too_many_skill_files" };
     }
   }
   if (named.length === 0) {
@@ -1769,7 +2149,24 @@ async function readFileOnly(result, source) {
   }
   return null;
 }
-async function readPulse2(result, source) {
+var SCRIPT_READ_CAP2 = { files: MAX_SCRIPTS_READ, bytesEach: 256 * 1024, bytes: 512 * 1024 };
+var NOT_CODE_DIRECTORY = /(^|\/)(examples?|assets?|fonts?|images?|media|samples?|fixtures?)\//i;
+function withinReadCap(paths, listed) {
+  const sizeOf = new Map(listed.map((file) => [file.path, file.size]));
+  const kept = [];
+  let bytes = 0;
+  for (const path of paths) {
+    const size = sizeOf.get(path) ?? 0;
+    if (kept.length >= SCRIPT_READ_CAP2.files || NOT_CODE_DIRECTORY.test(path))
+      continue;
+    if (size > SCRIPT_READ_CAP2.bytesEach || bytes + size > SCRIPT_READ_CAP2.bytes)
+      continue;
+    kept.push(path);
+    bytes += size;
+  }
+  return kept;
+}
+async function readPulse2(result, source, depth) {
   if (!/^(?!\.{1,2}\/)[\w.-]+\/(?!\.{1,2}$)[\w.-]+$/.test(result.source))
     return { ...result, status: "not_github" };
   const listing = await source.listing(result.source);
@@ -1787,15 +2184,20 @@ async function readPulse2(result, source) {
   const directory = parentOf(located.file.path);
   const prefix = directory === "" ? "" : `${directory}/`;
   const inDirectory = listing.files.filter((file) => file.path.startsWith(prefix));
-  const scripts = filesItRuns(located.markdown, listing.files).slice(0, MAX_SCRIPTS_READ);
+  const scripts = withinReadCap(filesItRuns(located.markdown, listing.files), listing.files);
   const scriptTexts = await Promise.all(scripts.map(async (file) => ({ file, text: await source.file(result.source, file) })));
   const keysInScriptsItRuns = scriptTexts.map(({ file, text }) => ({ file, keys: [...new Set(text?.match(KEY_NAME3) ?? [])] })).filter((entry) => entry.keys.length > 0);
   const relative = (path) => path.startsWith(prefix) ? path.slice(prefix.length) : path;
   const fetched = new Set(scriptTexts.filter((entry) => entry.text !== null).map((entry) => entry.file));
+  const others = depth === undefined ? [] : await readDirectory(source, result.source, inDirectory, new Set([located.file.path, ...fetched]), depth.directory.by);
+  for (const file of others)
+    if (file.text !== null)
+      fetched.add(file.path);
   const contains = readSkillContents2([
     { path: "SKILL.md", text: located.markdown },
     ...scriptTexts.flatMap(({ file, text }) => text === null ? [] : [{ path: relative(file), text }]),
-    ...inDirectory.filter((file) => SCRIPT2.test(file.path) && !fetched.has(file.path)).map((file) => ({ path: relative(file.path), text: null, notFetched: true }))
+    ...others.flatMap(({ path, text }) => text === null ? [] : [{ path: relative(path), text }]),
+    ...inDirectory.filter((file) => !fetched.has(file.path) && file.path !== located.file.path && (depth !== undefined || SCRIPT3.test(file.path))).map((file) => NOT_TEXT.test(file.path) ? { path: relative(file.path), text: null } : file.size > CONTENTS_LIMITS2.fileChars ? { path: relative(file.path), text: null, notFetched: true, tooLarge: true } : { path: relative(file.path), text: null, notFetched: true })
   ]);
   return {
     ...result,
@@ -1812,6 +2214,22 @@ async function readPulse2(result, source) {
     contains
   };
 }
+async function readDirectory(source, repo, inDirectory, done, by) {
+  let late = false;
+  by.then(() => {
+    late = true;
+  });
+  const plan = inDirectory.filter((file) => !done.has(file.path) && !NOT_TEXT.test(file.path) && file.size <= CONTENTS_LIMITS2.fileChars).slice(0, MAX_DIRECTORY_FILES_READ);
+  const out = [];
+  for (let at = 0;at < plan.length && !late; at += 8) {
+    const batch = Promise.all(plan.slice(at, at + 8).map(async (file) => ({ path: file.path, text: await source.file(repo, file.path).catch(() => null) })));
+    const settled = await Promise.race([batch, by.then(() => null)]);
+    if (settled === null)
+      break;
+    out.push(...settled);
+  }
+  return out;
+}
 function githubPulseSource2(options = {}) {
   const get = options.fetch ?? fetch;
   const timeoutMs = options.timeoutMs ?? GITHUB_READ_TIMEOUT_MS;
@@ -1826,6 +2244,7 @@ function githubPulseSource2(options = {}) {
   };
   const listings = new Map;
   const repositories = new Map;
+  const fileReads = new Map;
   const quota = { apiRequests: 0, limited: false, resetsAt: null };
   const noteLimit = (response) => {
     const hit = response.status === 429 || response.status === 403 && (response.headers.get("x-ratelimit-remaining") === "0" || response.headers.has("retry-after"));
@@ -1898,15 +2317,191 @@ function githubPulseSource2(options = {}) {
   return {
     listing: (repo) => once(listings, repo, readListing),
     repository: (repo) => once(repositories, repo, readRepository),
-    file: async (repo, path) => {
-      const encoded = path.split("/").map(encodeURIComponent).join("/");
-      const response = await get(`https://raw.githubusercontent.com/${repo}/HEAD/${encoded}`, { signal: bounded2() });
-      return response.ok ? response.text() : null;
+    file: (repo, path) => {
+      const key = `${repo}
+${path}`;
+      const kept = options.files?.get(key);
+      if (kept !== undefined)
+        return Promise.resolve(kept);
+      return once(fileReads, key, async () => {
+        const encoded = path.split("/").map(encodeURIComponent).join("/");
+        const response = await get(`https://raw.githubusercontent.com/${repo}/HEAD/${encoded}`, { signal: bounded2() });
+        const text = response.ok ? await response.text() : null;
+        if (response.ok || response.status === 404)
+          options.files?.set(key, text);
+        return text;
+      });
     },
     quota: () => ({ ...quota })
   };
 }
 
+// ../../packages/protocol/src/before-install.ts
+var PAID_SERVICES2 = [
+  { name: "Anthropic", hosts: ["api.anthropic.com"], keyPrefixes: ["ANTHROPIC_"] },
+  { name: "AssemblyAI", hosts: ["api.assemblyai.com"], keyPrefixes: ["ASSEMBLYAI_"] },
+  { name: "Azure OpenAI", hosts: ["openai.azure.com"], keyPrefixes: ["AZURE_OPENAI_"] },
+  { name: "Brave Search", hosts: ["api.search.brave.com"], keyPrefixes: ["BRAVE_"] },
+  { name: "Browserbase", hosts: ["api.browserbase.com"], keyPrefixes: ["BROWSERBASE_"] },
+  { name: "Cohere", hosts: ["api.cohere.ai", "api.cohere.com"], keyPrefixes: ["COHERE_", "CO_API_"] },
+  { name: "Deepgram", hosts: ["api.deepgram.com"], keyPrefixes: ["DEEPGRAM_"] },
+  { name: "DeepSeek", hosts: ["api.deepseek.com"], keyPrefixes: ["DEEPSEEK_"] },
+  { name: "ElevenLabs", hosts: ["api.elevenlabs.io"], keyPrefixes: ["ELEVENLABS_", "ELEVEN_"] },
+  { name: "Exa", hosts: ["api.exa.ai"], keyPrefixes: ["EXA_"] },
+  { name: "fal", hosts: ["fal.run", "queue.fal.run"], keyPrefixes: ["FAL_"] },
+  { name: "Firecrawl", hosts: ["api.firecrawl.dev"], keyPrefixes: ["FIRECRAWL_"] },
+  { name: "Fireworks AI", hosts: ["api.fireworks.ai"], keyPrefixes: ["FIREWORKS_"] },
+  { name: "Google Gemini", hosts: ["generativelanguage.googleapis.com"], keyPrefixes: ["GEMINI_"] },
+  { name: "Google Vertex AI", hosts: ["aiplatform.googleapis.com"], keyPrefixes: ["VERTEX_"] },
+  { name: "Groq", hosts: ["api.groq.com"], keyPrefixes: ["GROQ_"] },
+  { name: "HeyGen", hosts: ["api.heygen.com"], keyPrefixes: ["HEYGEN_"] },
+  { name: "Mistral", hosts: ["api.mistral.ai"], keyPrefixes: ["MISTRAL_"] },
+  { name: "OpenAI", hosts: ["api.openai.com"], keyPrefixes: ["OPENAI_"] },
+  { name: "OpenRouter", hosts: ["openrouter.ai"], keyPrefixes: ["OPENROUTER_"] },
+  { name: "Perplexity", hosts: ["api.perplexity.ai"], keyPrefixes: ["PERPLEXITY_", "PPLX_"] },
+  { name: "Replicate", hosts: ["api.replicate.com"], keyPrefixes: ["REPLICATE_"] },
+  { name: "Resend", hosts: ["api.resend.com"], keyPrefixes: ["RESEND_"] },
+  { name: "Runway", hosts: ["api.dev.runwayml.com", "api.runwayml.com"], keyPrefixes: ["RUNWAY_", "RUNWAYML_"] },
+  { name: "SerpApi", hosts: ["serpapi.com"], keyPrefixes: ["SERPAPI_", "SERP_API_"] },
+  { name: "Stability AI", hosts: ["api.stability.ai"], keyPrefixes: ["STABILITY_"] },
+  { name: "Tavily", hosts: ["api.tavily.com"], keyPrefixes: ["TAVILY_"] },
+  { name: "Together AI", hosts: ["api.together.xyz", "api.together.ai"], keyPrefixes: ["TOGETHER_"] },
+  { name: "Twilio", hosts: ["api.twilio.com"], keyPrefixes: ["TWILIO_"] },
+  { name: "xAI", hosts: ["api.x.ai"], keyPrefixes: ["XAI_"] }
+];
+var STATIC_HOSTS = [
+  "fonts.googleapis.com",
+  "gstatic.com",
+  "cdn.jsdelivr.net",
+  "unpkg.com",
+  "cdnjs.cloudflare.com",
+  "esm.sh",
+  "cdn.skypack.dev",
+  "ga.jspm.io",
+  "githubusercontent.com",
+  "cdn.tailwindcss.com",
+  "code.jquery.com",
+  "use.typekit.net",
+  "fonts.bunny.net",
+  "rsms.me",
+  "cartocdn.com",
+  "tile.openstreetmap.org",
+  "server.arcgisonline.com",
+  "images.unsplash.com"
+];
+var STATIC_SHAPE = /^(?:cdn|static|fonts?|tiles?|assets|img|images|media)\d*[.-]|(?:^|[.-])cdn(?:[.-]|$)|\.cdn\./;
+var API_SHAPE = /^api\d*[.-]|[.-]api\.|^.*\.googleapis\.com$/;
+function under(host, base) {
+  return host === base || host.endsWith(`.${base}`);
+}
+var ASSET = /\.(woff2?|ttf|otf|eot|png|jpe?g|gif|webp|svgz?|ico|bmp|tiff?|avif|heic|hdr|exr|mp[34]|m4a|wav|ogg|flac|aac|mov|webm|avi|mkv|psd|ai|sketch|fig|glb|gltf|fbx|blend|ktx2?|basis|pdf|zip|gz|tgz)$|(^|\/)\.(gitkeep|keep|DS_Store)$/i;
+function beforeInstall2(input) {
+  const services = new Map;
+  const service = (name) => {
+    const found = services.get(name) ?? { name, hosts: [], keys: [] };
+    services.set(name, found);
+    return found;
+  };
+  const apiHosts = [];
+  const staticHosts = [];
+  const otherHosts = [];
+  for (const host of input.domains) {
+    const known = PAID_SERVICES2.find((entry) => entry.hosts.some((base) => under(host, base)));
+    if (known !== undefined) {
+      service(known.name).hosts.push(host);
+      apiHosts.push(host);
+    } else if (STATIC_HOSTS.some((base) => under(host, base)) || STATIC_SHAPE.test(host))
+      staticHosts.push(host);
+    else if (API_SHAPE.test(host))
+      apiHosts.push(host);
+    else
+      otherHosts.push(host);
+  }
+  for (const key of input.keys) {
+    if (key.why !== "secret")
+      continue;
+    const known = PAID_SERVICES2.find((entry) => entry.keyPrefixes.some((prefix) => key.name.startsWith(prefix)));
+    if (known !== undefined)
+      service(known.name).keys.push(key.name);
+  }
+  const asked = new Set(input.keys.map((key) => key.name));
+  return {
+    fetchAndRun: [...input.fetchAndRun],
+    keys: [...input.keys],
+    otherSettings: input.settings.filter((name) => !asked.has(name)).length,
+    services: [...services.values()].sort((a, b) => a.name < b.name ? -1 : 1),
+    programs: [...input.programs],
+    scripts: [...input.scripts],
+    apiHosts,
+    staticHosts,
+    otherHosts,
+    hidden: [...input.hidden],
+    notRead: input.skipped.filter((file) => file.why !== "binary" && !ASSET.test(file.path)),
+    cut: [...input.cut]
+  };
+}
+var plural = (count, one, many = `${one}s`) => `${count} ${count === 1 ? one : many}`;
+function programNames(programs, shown = 4) {
+  const names = programs.map((program) => program.name);
+  return names.length <= shown ? names.join(", ") : `${names.slice(0, shown).join(", ")} +${names.length - shown}`;
+}
+function beforeInstallSummary2(view) {
+  const secrets = view.keys.filter((key) => key.why === "secret").length;
+  const toSet = view.keys.length - secrets;
+  const asks = secrets + toSet === 0 ? "no keys" : [secrets === 0 ? null : plural(secrets, "key"), toSet === 0 ? null : plural(toSet, "setting")].filter((part) => part !== null).join(", ");
+  return [
+    ...view.fetchAndRun.length === 0 ? [] : ["fetches and runs code"],
+    asks,
+    view.services.length === 0 ? "no paid services" : plural(view.services.length, "paid service"),
+    view.programs.length === 0 ? "nothing to install named" : `needs ${programNames(view.programs)}`,
+    view.scripts.length === 0 ? "no scripts" : plural(view.scripts.length, "script"),
+    ...view.hidden.length === 0 ? [] : [plural(view.hidden.length, "hidden text", "hidden texts")],
+    ...view.notRead.length === 0 ? [] : [`${plural(view.notRead.length, "file")} not read`]
+  ].join(" · ");
+}
+function programSourceText2(program) {
+  const at = program.file === undefined ? "" : `${program.file}${program.line === undefined ? "" : `:${program.line}`}`;
+  switch (program.from) {
+    case "declared":
+      return "declared in SKILL.md";
+    case "runs":
+      return "run in SKILL.md";
+    case "interpreter":
+      return "script interpreter";
+    case "script":
+      return "a script checks for it or installs it";
+    case "spawned":
+      return `run by ${at}`;
+    case "package":
+      return `via ${program.via ?? "a package"}, ${at}`;
+    case "named as needed":
+      return `said to be needed, ${at}`;
+  }
+}
+function contentsLines2(contents, perList = 6) {
+  const view = beforeInstall2({ ...contents, skipped: contents.read.skipped });
+  const list = (items, cut2) => `${items.slice(0, perList).join(", ")}${items.length > perList || cut2 ? `, and ${Math.max(0, items.length - perList)}${cut2 ? "+" : ""} more` : ""}`;
+  const cut = (name) => view.cut.includes(name);
+  const at = (rows, name) => list(rows.map((row) => `${row.kind} at ${row.file}:${row.line} "${row.text}"`), cut(name));
+  const others = view.otherSettings === 0 ? "" : `; ${plural(view.otherSettings, "other setting")} it reads`;
+  const hostParts = [
+    view.apiHosts.length === 0 ? "no API host" : list(view.apiHosts, false),
+    ...view.staticHosts.length === 0 ? [] : [`fonts, CDNs and map tiles: ${view.staticHosts.length}`],
+    ...view.otherHosts.length === 0 ? [] : [`other sites named: ${view.otherHosts.length}`]
+  ];
+  return [
+    `Before you install: ${beforeInstallSummary2(view)}`,
+    ...view.fetchAndRun.length === 0 ? [] : [`Fetches and runs code: ${at(view.fetchAndRun, "fetchAndRun")}`],
+    `Asks for: ${view.keys.length === 0 ? `no keys${others}` : `${list(view.keys.map((key) => `${key.name} (${key.why === "secret" ? "" : "set in SKILL.md, "}${key.file}:${key.line})`), cut("keys"))}${others}`}`,
+    `Paid services: ${view.services.length === 0 ? "none named" : list(view.services.map((entry) => `${entry.name} (${[...entry.hosts, ...entry.keys].join(", ")})`), false)}`,
+    `Needs installed: ${view.programs.length === 0 ? "none named" : list(view.programs.map((program) => `${program.name} (${programSourceText2(program)})`), cut("programs"))}`,
+    `Runs on your machine: ${view.scripts.length === 0 ? "no scripts" : `${plural(view.scripts.length, "script")}: ${list(view.scripts.map((script) => script.namedInSkillMd ? `${script.path} (named in SKILL.md)` : script.path), cut("scripts"))}`}${view.fetchAndRun.length === 0 ? "; fetches and runs no code" : ""}`,
+    `Sends data to (hosts its files name, not shown to be contacted): ${hostParts.join("; ")}`,
+    ...view.hidden.length === 0 ? [] : [`Hidden or encoded text: ${at(view.hidden, "hidden")}`],
+    ...view.notRead.length === 0 ? [] : [`Not read: ${list(view.notRead.map((file) => `${file.path} (${file.why})`), false)}`]
+  ];
+}
+
 // ../../packages/protocol/src/skill-install.ts
 var MAX_SKILLS_READ2 = 3;
 var ADD = new Set(["add", "a", "install", "i"]);
@@ -2062,7 +2657,7 @@ async function namesUnder(install, source) {
   }));
   return { names, total: files.length };
 }
-async function readSkillInstall2(install, source, deadline) {
+async function readSkillInstall2(install, source, deadline, directoryBy = deadline) {
   if (install.kind === "elsewhere")
     return install;
   const late = deadline.then(() => "late");
@@ -2090,7 +2685,7 @@ async function readSkillInstall2(install, source, deadline) {
     total = install.skills.length;
   }
   const readings = await Promise.all(names.map(async (skill) => {
-    const pulse = readPulse2({ source: install.repo, skill, installs: null, installsText: null, url: null }, source).then((read) => ({ skill, pulse: read })).catch(() => ({ skill, pulse: null, why: "read failed" }));
+    const pulse = readPulse2({ source: install.repo, skill, installs: null, installsText: null, url: null }, source, { directory: { by: directoryBy } }).then((read) => ({ skill, pulse: read })).catch(() => ({ skill, pulse: null, why: "read failed" }));
     const settled = await Promise.race([pulse, late]);
     return settled === "late" ? { skill, pulse: null, why: "no answer in time" } : settled;
   }));
@@ -2102,7 +2697,7 @@ async function readSkillInstall2(install, source, deadline) {
     listing: null
   };
 }
-var plural = (count, word) => `${count} ${word}${count === 1 ? "" : "s"}`;
+var plural2 = (count, word) => `${count} ${word}${count === 1 ? "" : "s"}`;
 function readingLines(repo, reading) {
   const head = `${repo} · ${reading.skill}`;
   const { pulse } = reading;
@@ -2114,9 +2709,9 @@ function readingLines(repo, reading) {
     case "read": {
       const facts = [
         `${pulse.path}`,
-        plural(pulse.files, "file"),
+        plural2(pulse.files, "file"),
         ...pulse.repository === null ? [] : [
-          plural(pulse.repository.stars, "star"),
+          plural2(pulse.repository.stars, "star"),
           ...pulse.repository.pushedAt === null ? [] : [`last push ${pulse.repository.pushedAt.slice(0, 10)}`],
           ...pulse.repository.archived ? ["archived"] : []
         ]
@@ -2134,7 +2729,7 @@ function readingLines(repo, reading) {
       ];
     case "absent":
       return [
-        `${head}: no SKILL.md in the repository names it (${plural(pulse.skillFiles, "skill file")} read)`
+        `${head}: no SKILL.md in the repository names it (${plural2(pulse.skillFiles, "skill file")} read)`
       ];
     case "ambiguous":
       return [
@@ -2169,7 +2764,7 @@ ${read.source}: not read (ARP reads GitHub sources only)`;
   for (const reading of read.readings)
     lines.push(...readingLines(install.repo, reading));
   if (read.notRead > 0)
-    lines.push(`${plural(read.notRead, "more skill")} in this install not read (ARP reads ${MAX_SKILLS_READ2})`);
+    lines.push(`${plural2(read.notRead, "more skill")} in this install not read (ARP reads ${MAX_SKILLS_READ2})`);
   if (install.ref !== null)
     lines.push(`Read at the default branch's HEAD; the command names ${install.ref}.`);
   return lines.join(`
@@ -2178,6 +2773,7 @@ ${read.source}: not read (ARP reads GitHub sources only)`;
 
 // ../hook/src/pre-install.ts
 var GITHUB_BUDGET_MS = 6000;
+var DIRECTORY_MARGIN_MS = 1500;
 var OUTPUT_CAP = 9500;
 var FOR_THE_AGENT = "This is what the skill's own files contain, read by ARP's hook before the install ran. " + "They are facts, not a verdict, and nothing was blocked. The person was shown the same lines.";
 function capped(text) {
@@ -2198,13 +2794,14 @@ async function preToolUse(raw, options = {}) {
   const token = (env["GITHUB_TOKEN"] ?? env["GH_TOKEN"])?.trim() || undefined;
   const budgetMs = options.budgetMs ?? GITHUB_BUDGET_MS;
   const deadline = new Promise((resolve) => setTimeout(resolve, budgetMs));
+  const directoryBy = new Promise((resolve) => setTimeout(resolve, Math.max(0, budgetMs - DIRECTORY_MARGIN_MS)));
   const source = githubPulseSource2({
     ...options.fetch === undefined ? {} : { fetch: options.fetch },
     ...token === undefined ? {} : { token },
     timeoutMs: budgetMs + 500,
     signal: AbortSignal.timeout(budgetMs + 500)
   });
-  const report = capped(skillInstallReport2(await readSkillInstall2(install, source, deadline)));
+  const report = capped(skillInstallReport2(await readSkillInstall2(install, source, deadline, directoryBy)));
   return JSON.stringify({
     systemMessage: report,
     hookSpecificOutput: {
@@ -2633,7 +3230,7 @@ async function readSkillLines(atomUri, config) {
 function counted(counts) {
   return [...counts.entries()].sort(([a, x], [b, y]) => y.size - x.size || a.localeCompare(b)).map(([name, wallets]) => `${name} (${wallets.size})`).join(", ");
 }
-var plural2 = (n) => `${n} wallet${n === 1 ? "" : "s"}`;
+var plural3 = (n) => `${n} wallet${n === 1 ? "" : "s"}`;
 function linesSentence(usage, label, where) {
   if (usage === null)
     return null;
@@ -2661,7 +3258,7 @@ function linesSentence(usage, label, where) {
       ...because.size === 0 ? [] : [`because ${counted(because)}`],
       ...named.size === 0 ? [] : [`${outcome === "failed" ? "needs" : "with"} ${counted(named)}`]
     ];
-    parts.push([`${usage.truncated ? "at least " : ""}${plural2(wallets.size)} wrote ${outcome}`, ...detail].join(" · "));
+    parts.push([`${usage.truncated ? "at least " : ""}${plural3(wallets.size)} wrote ${outcome}`, ...detail].join(" · "));
   }
   if (parts.length === 0)
     return null;
@@ -3843,9 +4440,9 @@ function answerOf(response) {
     if (typeof text !== "string")
       continue;
     try {
-      const parsed = JSON.parse(text);
-      if (typeof parsed === "object" && parsed !== null)
-        return parsed;
+      const parsed2 = JSON.parse(text);
+      if (typeof parsed2 === "object" && parsed2 !== null)
+        return parsed2;
     } catch {
       continue;
     }
@@ -3945,7 +4542,7 @@ function appendFailure(line) {
 }
 function recordSkillFailure(call, cwd) {
   const classified = classifyCall(call);
-  if (classified === null || classified.outcome === "ok" || call.session === null)
+  if (classified === null || !isFailure(classified.outcome) || call.session === null)
     return null;
   const command = call.input?.["command"];
   if (typeof command !== "string")
@@ -4027,7 +4624,7 @@ async function postToolUseFailure(payload) {
 
 // ../hook/src/worked.ts
 import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync3 } from "node:fs";
-import { dirname as dirname3, join as join4 } from "node:path";
+import { join as join4 } from "node:path";
 
 // ../../packages/protocol/src/local-outcomes.ts
 var OUTCOME_ANSWERS2 = ["worked", "failed", "unsure"];
@@ -4050,7 +4647,6 @@ function answersIn2(text, asked) {
 }
 
 // ../hook/src/worked.ts
-var MAX_ASKED = 5;
 function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -4065,13 +4661,15 @@ function stopInputOf(raw) {
   return {
     session,
     cwd: text(raw["cwd"]) ?? process.cwd(),
-    active: field(raw, "stop_hook_active", "stopHookActive") === true,
     last: text(field(raw, "last_assistant_message", "lastAssistantMessage")) ?? "",
     transcript: text(field(raw, "transcript_path", "transcriptPath"))
   };
 }
-function questionFor(skills) {
-  return "ARP asks once per skill: did each skill you used here do its job, and did the task finish with it? " + "Reply with one line per skill and nothing else: `arp: <skill> worked`, `arp: <skill> failed` or `arp: <skill> unsure`. " + `Kept on this machine unless \`arp share\` is on. Skills: ${skills.join(", ")}`;
+function requestFor(skill) {
+  return `ARP: at the end of your final reply, add one line saying whether the skill ${skill} did its job: ` + `\`arp: ${skill} worked\`, \`arp: ${skill} failed\` or \`arp: ${skill} unsure\`. ` + "Kept on this machine unless `arp share` is on.";
+}
+function requestOutput(context) {
+  return JSON.stringify({ hookSpecificOutput: { hookEventName: "PostToolUse", additionalContext: context } });
 }
 var isArpsOwn = (name) => name === "arp" || name.endsWith(":arp");
 function rows(path) {
@@ -4132,19 +4730,33 @@ function record(input, asked, outcome, at) {
   appendOwn(join4(arpHome(), "outcomes.jsonl"), `${JSON.stringify(line)}
 `);
 }
+function askOnSkill(session, skill, source, now = new Date) {
+  if (isArpsOwn(skill))
+    return null;
+  try {
+    const home = arpHome();
+    mkdirSync3(home, { recursive: true });
+    const askedPath = join4(home, "asked.jsonl");
+    if (rows(askedPath).some((row2) => row2["session"] === session && row2["skill"] === skill))
+      return null;
+    const row = { at: now.toISOString(), session, skill, source };
+    appendOwn(askedPath, `${JSON.stringify(row)}
+`);
+    return requestFor(skill);
+  } catch {
+    return null;
+  }
+}
 async function stop(payload) {
   const input = stopInputOf(payload);
-  if (input === null)
-    return null;
-  const ask = onStop(input);
-  return ask === null ? null : JSON.stringify(ask);
+  if (input !== null)
+    onStop(input);
+  return null;
 }
 function onStop(input, now = new Date) {
   try {
     const home = arpHome();
-    mkdirSync3(home, { recursive: true });
-    const askedPath = join4(home, "asked.jsonl");
-    const asked = rows(askedPath).flatMap((row) => row["session"] === input.session && typeof row["skill"] === "string" ? [{
+    const asked = rows(join4(home, "asked.jsonl")).flatMap((row) => row["session"] === input.session && typeof row["skill"] === "string" ? [{
       at: typeof row["at"] === "string" ? row["at"] : "",
       session: input.session,
       skill: row["skill"],
@@ -4158,27 +4770,7 @@ function onStop(input, now = new Date) {
       if (row !== undefined)
         record(input, row, answer, at);
     }
-    if (input.active)
-      return null;
-    const known = new Set(asked.map((row) => row.skill));
-    const log = process.env["ARP_SESSION_LOG"] ?? join4(input.cwd, ".arp", "session.jsonl");
-    const fresh = [];
-    for (const skill of skillsOfSession(log, input.session)) {
-      if (known.has(skill.name) || isArpsOwn(skill.name))
-        continue;
-      known.add(skill.name);
-      fresh.push({ at, session: input.session, skill: skill.name, source: skill.source });
-    }
-    const ask = fresh.slice(0, MAX_ASKED);
-    if (ask.length === 0)
-      return null;
-    mkdirSync3(dirname3(askedPath), { recursive: true });
-    appendOwn(askedPath, ask.map((row) => `${JSON.stringify(row)}
-`).join(""));
-    return { decision: "block", reason: questionFor(ask.map((row) => row.skill)) };
-  } catch {
-    return null;
-  }
+  } catch {}
 }
 
 // ../hook/src/hook.ts
@@ -4245,7 +4837,7 @@ function responseOf(call, outcome) {
   } catch {
     bytes = 0;
   }
-  return { answered: raw !== null, bytes, failed: outcome !== "ok" };
+  return { answered: raw !== null, bytes, failed: isFailure(outcome) };
 }
 function readString2(from, key) {
   const value = from?.[key];
@@ -4283,19 +4875,19 @@ function whatOf(call, cwd, fetched) {
 var raw = "";
 for await (const chunk of process.stdin)
   raw += chunk;
-var parsed;
+var parsed2;
 try {
-  parsed = JSON.parse(raw);
+  parsed2 = JSON.parse(raw);
 } catch {
   process.exit(0);
 }
 if (process.argv.includes("--capture"))
-  capture(parsed, join5(homedir3(), ".arp", "captures"));
-var event = eventOf(parsed);
+  capture(parsed2, join5(homedir3(), ".arp", "captures"));
+var event = eventOf(parsed2);
 var handler = event === null ? undefined : ROUTES[event];
 if (handler !== undefined)
-  await route(handler, parsed);
-var call = toolCallOf(parsed);
+  await route(handler, parsed2);
+var call = toolCallOf(parsed2);
 if (call === null)
   process.exit(0);
 var cwd = call.cwd ?? process.cwd();
@@ -4325,13 +4917,19 @@ var line = {
   response: responseOf(call, classified.outcome)
 };
 try {
-  mkdirSync4(dirname4(path), { recursive: true });
-  if (dirname4(path) === own && lstatSync2(own).isSymbolicLink())
+  mkdirSync4(dirname3(path), { recursive: true });
+  if (dirname3(path) === own && lstatSync2(own).isSymbolicLink())
     throw new Error(`${own} is a symbolic link`);
   const ignore = join5(own, ".gitignore");
-  if (dirname4(path) === own && !existsSync3(ignore))
+  if (dirname3(path) === own && !existsSync3(ignore))
     writeFileSync2(ignore, `*
 `, { flag: "wx" });
   appendOwn(path, `${JSON.stringify(line)}
 `);
 } catch {}
+if (what.kind === "skill" && call.event === "PostToolUse" && classified.outcome === "ok" && call.session !== null) {
+  const request = askOnSkill(call.session, what.name, what.source);
+  if (request !== null)
+    process.stdout.write(`${requestOutput(request)}
+`);
+}