@astrale-os/cli 1.0.0-beta.45 → 1.0.0-beta.46

package/dist/astrale.js

@@ -2578,7 +2578,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@astrale-os/cli",
-    version: "1.0.0-beta.45",
+    version: "1.0.0-beta.46",
     description: "Astrale CLI — connect to existing Astrale kernels",
     keywords: [
       "astrale",
@@ -70939,6 +70939,7 @@ async function checkAstraleSkills(overrides = {}) {
     const status = inspection.state === "current" ? "current" : inspection.state === "unhealthy" ? "repair-needed" : "update-available";
     return {
       status,
+      installed: inspection.state !== "absent",
       ...status === "current" ? {
         source: {
           repository: ASTRALE_CLI_SKILL_SOURCE,
@@ -71054,26 +71055,148 @@ var init_sync = __esm(() => {
   SAFE_NAME = /^[a-z0-9][a-z0-9._-]*$/iu;
 });
 
+// src/lib/skills/onboarding.ts
+import { readFile as readFile8, rm as rm4 } from "node:fs/promises";
+import { join as join7 } from "node:path";
+function statePath(home) {
+  return join7(home, "skills-onboarding.json");
+}
+function lockPath(home) {
+  return join7(home, "locks", "skills-onboarding.lock");
+}
+function emptyState() {
+  return { version: STATE_VERSION, updateDeclines: 0 };
+}
+function parseState(value) {
+  if (!value || typeof value !== "object")
+    return;
+  const state2 = value;
+  if (state2.version !== STATE_VERSION || !Number.isSafeInteger(state2.updateDeclines) || (state2.updateDeclines ?? -1) < 0 || (state2.updateDeclines ?? 0) > UPDATE_DECLINE_LIMIT || state2.reminderStage !== undefined && state2.reminderStage !== "next-day" && state2.reminderStage !== "seven-days" || state2.nextPromptAt !== undefined && (typeof state2.nextPromptAt !== "string" || !Number.isFinite(Date.parse(state2.nextPromptAt))) || state2.dismissed !== undefined && state2.dismissed !== true) {
+    return;
+  }
+  if (state2.dismissed) {
+    return {
+      version: STATE_VERSION,
+      updateDeclines: state2.updateDeclines ?? 0,
+      dismissed: true
+    };
+  }
+  if (state2.reminderStage === undefined !== (state2.nextPromptAt === undefined))
+    return;
+  return {
+    version: STATE_VERSION,
+    updateDeclines: state2.updateDeclines ?? 0,
+    ...state2.reminderStage ? { reminderStage: state2.reminderStage } : {},
+    ...state2.nextPromptAt ? { nextPromptAt: state2.nextPromptAt } : {}
+  };
+}
+async function readSkillOnboardingState(options = {}) {
+  try {
+    const raw2 = await readFile8(statePath(options.home ?? paths2.home), "utf8");
+    return parseState(JSON.parse(raw2)) ?? emptyState();
+  } catch {
+    return emptyState();
+  }
+}
+async function transitionSkillOnboardingState(options, transition) {
+  const home = options.home ?? paths2.home;
+  return withFileLock(lockPath(home), async () => {
+    const next = transition(await readSkillOnboardingState({ home }));
+    await atomicWrite(statePath(home), `${JSON.stringify(next, null, 2)}
+`);
+    return next;
+  });
+}
+async function clearSkillOnboardingState(options = {}) {
+  const home = options.home ?? paths2.home;
+  await withFileLock(lockPath(home), () => rm4(statePath(home), { force: true }));
+}
+function skillInstallOfferDue(source2, state2, now = Date.now()) {
+  if (state2.dismissed)
+    return false;
+  if (source2 !== "reminder")
+    return true;
+  if (!state2.nextPromptAt)
+    return false;
+  return Date.parse(state2.nextPromptAt) <= now;
+}
+async function recordSkillInstallDecline(source2, options = {}) {
+  const now = options.now ?? Date.now();
+  return transitionSkillOnboardingState(options, (state2) => {
+    if (state2.dismissed)
+      return state2;
+    if (source2 === "reminder" && state2.reminderStage === "seven-days") {
+      return { version: STATE_VERSION, updateDeclines: state2.updateDeclines, dismissed: true };
+    }
+    const updateDeclines = source2 === "update" ? Math.min(UPDATE_DECLINE_LIMIT, state2.updateDeclines + 1) : state2.updateDeclines;
+    if (updateDeclines >= UPDATE_DECLINE_LIMIT) {
+      return { version: STATE_VERSION, updateDeclines, dismissed: true };
+    }
+    const reminderStage = source2 === "reminder" ? "seven-days" : state2.reminderStage ?? "next-day";
+    const delay = reminderStage === "next-day" ? DAY_MS : 7 * DAY_MS;
+    return {
+      version: STATE_VERSION,
+      updateDeclines,
+      reminderStage,
+      nextPromptAt: new Date(now + delay).toISOString()
+    };
+  });
+}
+function defaultInteractive() {
+  return process.stdin.isTTY === true && process.stdout.isTTY === true && !process.env.CI && !process.env.CONTINUOUS_INTEGRATION && !process.argv.includes("--ci") && !process.argv.includes("--no-prompt") && !process.argv.includes("--json") && !process.argv.includes("--raw");
+}
+async function defaultInstallPrompt() {
+  return promptSelect("Install Astrale skills?", [
+    { name: "Yes", value: "yes" },
+    { name: "No", value: "no" }
+  ]);
+}
+async function offerAstraleSkillInstallation(source2, options = {}) {
+  const state2 = await readSkillOnboardingState(options);
+  if (state2.dismissed)
+    return { status: "suppressed" };
+  if (!skillInstallOfferDue(source2, state2, options.now))
+    return { status: "not-due" };
+  if (!(options.interactive ?? defaultInteractive()))
+    return { status: "not-interactive" };
+  const answer = await (options.prompt ?? defaultInstallPrompt)();
+  if (answer === undefined)
+    return { status: "not-interactive" };
+  if (answer === "yes")
+    return { status: "accepted" };
+  return {
+    status: "declined",
+    state: await recordSkillInstallDecline(source2, options)
+  };
+}
+var STATE_VERSION = 1, DAY_MS, UPDATE_DECLINE_LIMIT = 2, SKILL_CONFIGURE_COMMAND = "astrale skills configure";
+var init_onboarding = __esm(() => {
+  init_state();
+  init_files();
+  init_prompt();
+  DAY_MS = 24 * 60 * 60 * 1000;
+});
+
 // src/lib/skills.ts
 import { existsSync as existsSync2, lstatSync, mkdirSync as mkdirSync3, readlinkSync, symlinkSync } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname7, join as join7 } from "node:path";
+import { dirname as dirname7, join as join8 } from "node:path";
 function skillSearchDirs() {
   const dirs = [];
   let cur = process.cwd();
   for (;; ) {
-    dirs.push(join7(cur, ".claude", "skills"));
+    dirs.push(join8(cur, ".claude", "skills"));
     const parent = dirname7(cur);
     if (parent === cur)
       break;
     cur = parent;
   }
-  dirs.push(join7(homedir5(), ".claude", "skills"));
+  dirs.push(join8(homedir5(), ".claude", "skills"));
   return dirs;
 }
 function detectSkill(name) {
   for (const dir of skillSearchDirs()) {
-    const file2 = join7(dir, name, "SKILL.md");
+    const file2 = join8(dir, name, "SKILL.md");
     if (existsSync2(file2))
       return { installed: true, location: file2 };
   }
@@ -71092,7 +71215,7 @@ function isSymlink(p) {
 function findAgentsSkillsRoot(fromDir) {
   let cur = fromDir;
   for (;; ) {
-    if (existsSync2(join7(cur, ".agents", "skills")))
+    if (existsSync2(join8(cur, ".agents", "skills")))
       return cur;
     const parent = dirname7(cur);
     if (parent === cur)
@@ -71104,7 +71227,7 @@ function skillsBridgeStatus(fromDir = process.cwd()) {
   const root = findAgentsSkillsRoot(fromDir);
   if (!root)
     return { kind: "none" };
-  const link = join7(root, ".claude", "skills");
+  const link = join8(root, ".claude", "skills");
   if (isSymlink(link)) {
     try {
       if (readlinkSync(link) === BRIDGE_TARGET)
@@ -71128,7 +71251,8 @@ var AGENT_BROWSER_SKILL = "agent-browser", BRIDGE_TARGET;
 var init_skills = __esm(() => {
   init_browser();
   init_sync();
-  BRIDGE_TARGET = join7("..", ".agents", "skills");
+  init_onboarding();
+  BRIDGE_TARGET = join8("..", ".agents", "skills");
 });
 
 // src/lib/update.ts
@@ -71138,14 +71262,14 @@ import {
   copyFile,
   mkdir as mkdir7,
   mkdtemp as mkdtemp2,
-  readFile as readFile8,
+  readFile as readFile9,
   realpath,
   rename as rename4,
-  rm as rm4,
+  rm as rm5,
   writeFile as writeFile5
 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { dirname as dirname8, join as join8 } from "node:path";
+import { dirname as dirname8, join as join9 } from "node:path";
 function detectPlatform() {
   const os3 = process.platform;
   const arch = process.arch;
@@ -71181,7 +71305,7 @@ function packageManagedUpdateError(executable, command) {
 async function readInstallMetadata(path3 = INSTALL_PATH) {
   let raw2;
   try {
-    raw2 = await readFile8(path3, "utf8");
+    raw2 = await readFile9(path3, "utf8");
   } catch (error52) {
     if (!isMissingFile(error52))
       throw error52;
@@ -71231,7 +71355,7 @@ async function realpathIfExists(path3) {
 async function writeInstallMetadata(meta3, path3 = INSTALL_PATH, filesystem = {
   mkdir: mkdir7,
   rename: rename4,
-  rm: rm4,
+  rm: rm5,
   writeFile: writeFile5
 }) {
   const staged = `${path3}.next`;
@@ -71377,9 +71501,9 @@ async function updateAstrale(req, dependencies = {}) {
       channel: manifest.channel
     };
   }
-  const tmp = await mkdtemp2(join8(tmpdir(), "astrale-update-"));
+  const tmp = await mkdtemp2(join9(tmpdir(), "astrale-update-"));
   try {
-    const archive2 = join8(tmp, asset.name);
+    const archive2 = join9(tmp, asset.name);
     await downloadToFile(`${base2}/${asset.name}`, archive2);
     const manifestChecksum = "sha256" in asset ? asset.sha256 : undefined;
     const expected = manifestChecksum ?? await fetchChecksum(base2, asset.name);
@@ -71388,7 +71512,7 @@ async function updateAstrale(req, dependencies = {}) {
       throw new AstraleError("UPDATE_CHECKSUM_MISMATCH", `Checksum mismatch for ${asset.name}.`, `Expected ${expected}; got ${actual}.`);
     }
     await extractTarGz(archive2, tmp);
-    const nextBin = join8(tmp, "astrale");
+    const nextBin = join9(tmp, "astrale");
     await chmod3(nextBin, 493);
     await smokeVersion(nextBin, manifest.binaryVersion ?? manifest.version);
     const replacement = await update.replaceStandaloneCohort(meta3.bin, nextBin);
@@ -71416,12 +71540,12 @@ async function updateAstrale(req, dependencies = {}) {
       bin: meta3.bin
     };
   } finally {
-    await rm4(tmp, { recursive: true, force: true });
+    await rm5(tmp, { recursive: true, force: true });
   }
 }
 async function readUrlText(url2, signal) {
   if (url2.startsWith("file://")) {
-    return readFile8(new URL(url2), "utf8");
+    return readFile9(new URL(url2), "utf8");
   }
   const res = await fetch(url2, { signal });
   if (!res.ok)
@@ -71452,7 +71576,7 @@ async function fetchChecksum(base2, assetName) {
 }
 async function sha256File(path3) {
   const hash2 = createHash2("sha256");
-  hash2.update(await readFile8(path3));
+  hash2.update(await readFile9(path3));
   return hash2.digest("hex");
 }
 async function extractTarGz(archive2, cwd) {
@@ -71499,10 +71623,119 @@ var init_update = __esm(() => {
     ]))
   });
   admittedScriptInstall = Symbol("admittedScriptInstall");
-  defaultCohortFilesystem = { chmod: chmod3, copyFile, rename: rename4, rm: rm4 };
+  defaultCohortFilesystem = { chmod: chmod3, copyFile, rename: rename4, rm: rm5 };
   defaultUpdateDependencies = Object.freeze({ replaceStandaloneCohort, writeInstallMetadata });
 });
 
+// src/commands/skills/configure.ts
+var exports_configure = {};
+__export(exports_configure, {
+  astraleSkillAgentChoices: () => astraleSkillAgentChoices,
+  chooseAstraleSkillAgents: () => chooseAstraleSkillAgents,
+  configureAstraleSkills: () => configureAstraleSkills,
+  default: () => configure_default,
+  renderSkillConfigureOutcome: () => renderSkillConfigureOutcome
+});
+function astraleSkillAgentChoices(agents) {
+  return [...agents].sort((left, right) => Number(right.configured || right.detected) - Number(left.configured || left.detected) || left.displayName.localeCompare(right.displayName)).map((agent) => ({
+    name: `${agent.displayName}${agent.configured ? " (configured)" : agent.detected ? " (detected)" : ""}`,
+    value: agent.name,
+    checked: agent.configured,
+    description: agent.globalSkillsDir
+  }));
+}
+function canPrompt(opts) {
+  return opts.interactive !== false && process.stdin.isTTY === true && process.stdout.isTTY === true && !opts.yes && !process.env.CI && !process.env.CONTINUOUS_INTEGRATION && !process.argv.includes("--no-prompt") && !process.argv.includes("--ci") && !process.argv.includes("--json") && !process.argv.includes("--raw");
+}
+async function chooseAstraleSkillAgents(opts = {}) {
+  const agents = await astraleSkillAgents();
+  if (opts.agent)
+    return opts.agent;
+  const configured = agents.filter((agent) => agent.configured).map((agent) => agent.name);
+  if (!canPrompt(opts)) {
+    return configured.length > 0 ? configured : agents.filter((agent) => agent.detected).map((agent) => agent.name);
+  }
+  return promptMultiSelect("Install Astrale skills for which global agents?", astraleSkillAgentChoices(agents));
+}
+async function configureAstraleSkills(opts = {}) {
+  if (opts.source) {
+    const skills = await checkAstraleSkills();
+    if (skills.installed === undefined) {
+      throw new Error(`Astrale skills could not be inspected${skills.error ? `: ${skills.error}` : ""}`);
+    }
+    if (!skills.installed) {
+      const offer = opts.yes ? { status: "accepted" } : await offerAstraleSkillInstallation(opts.source, { interactive: canPrompt(opts) });
+      if (offer.status !== "accepted")
+        return offer;
+    } else {
+      const agents2 = (await astraleSkillAgents()).filter((agent) => agent.configured).map((agent) => agent.name);
+      const result2 = await syncAstraleSkills();
+      await clearSkillOnboardingState();
+      return { status: "applied", result: result2, agents: agents2 };
+    }
+  }
+  const agents = await chooseAstraleSkillAgents(opts);
+  if (agents === undefined)
+    return { status: "cancelled" };
+  const result = await syncAstraleSkills({ agents, replaceAgentSelection: true });
+  await clearSkillOnboardingState();
+  return { status: "applied", result, agents };
+}
+function renderSkillConfigureOutcome(outcome) {
+  if (outcome.status === "declined" || outcome.status === "not-interactive") {
+    log.dim(`  You can install them later with: ${SKILL_CONFIGURE_COMMAND}`);
+    return;
+  }
+  if (outcome.status !== "applied")
+    return;
+  if (outcome.result.status === "unchanged")
+    log.success("Astrale skills already up to date");
+  else if (outcome.result.status === "installed")
+    log.success("Astrale skills installed globally");
+  else if (outcome.result.status === "updated")
+    log.success("Astrale skills updated globally");
+  else if (outcome.result.status === "repaired")
+    log.success("Astrale skills repaired globally");
+  if (outcome.agents.length === 0)
+    log.dim("  canonical only: ~/.agents/skills");
+  else
+    log.dim(`  agents: ${outcome.agents.join(", ")}`);
+}
+var configure_default;
+var init_configure = __esm(() => {
+  init_log();
+  init_output();
+  init_prompt();
+  init_skills();
+  configure_default = {
+    name: "configure",
+    description: "Choose the global agents that receive Astrale skill links",
+    options: [
+      { flags: "--agent <name...>", description: "Select agents explicitly (repeat or list names)" },
+      { flags: "--yes", description: "Use detected/already-configured agents without prompting" },
+      {
+        flags: "--source <source>",
+        description: "Onboarding trigger",
+        choices: ["install", "reminder", "update"],
+        hidden: true
+      },
+      ...RAW_OUTPUT_OPTIONS
+    ],
+    action: async (opts) => {
+      try {
+        const outcome = await configureAstraleSkills(opts);
+        if (isMachine(opts)) {
+          output(outcome.status === "applied" ? { ...outcome.result, agents: outcome.agents, scope: "global" } : { status: outcome.status, scope: "global" }, opts);
+          return;
+        }
+        renderSkillConfigureOutcome(outcome);
+      } catch (error52) {
+        fatal(error52, opts);
+      }
+    }
+  };
+});
+
 // node_modules/.pnpm/jose@6.2.9/node_modules/jose/dist/webapi/lib/buffer_utils.js
 function concat(...buffers) {
   const size = buffers.reduce((acc, { length }) => acc + length, 0);
@@ -73598,8 +73831,8 @@ var init_algorithm = __esm(() => {
 
 // src/keys/pair.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { access, mkdir as mkdir8, readFile as readFile10, unlink as unlink3 } from "node:fs/promises";
-import { dirname as dirname9, join as join10, resolve as resolve4 } from "node:path";
+import { access, mkdir as mkdir8, readFile as readFile11, unlink as unlink3 } from "node:fs/promises";
+import { dirname as dirname9, join as join11, resolve as resolve4 } from "node:path";
 function keypairPaths(subject, keysDir = KEYS_DIR) {
   if (subject.length === 0 || subject.includes("\x00") || subject.includes("/") || subject.includes("\\")) {
     throw invalidKeySubject(subject);
@@ -73611,7 +73844,7 @@ function keypairPaths(subject, keysDir = KEYS_DIR) {
   };
 }
 function confinedKeyPath(keysDir, filename, subject) {
-  const path3 = join10(keysDir, filename);
+  const path3 = join11(keysDir, filename);
   if (dirname9(resolve4(path3)) !== resolve4(keysDir))
     throw invalidKeySubject(subject);
   return path3;
@@ -73688,8 +73921,8 @@ async function readKeypair(subject, keysDir = KEYS_DIR) {
   const { privatePath, publicPath } = keypairPaths(subject, keysDir);
   try {
     const [privateRaw, publicRaw] = await Promise.all([
-      readFile10(privatePath, "utf-8"),
-      readFile10(publicPath, "utf-8")
+      readFile11(privatePath, "utf-8"),
+      readFile11(publicPath, "utf-8")
     ]);
     return await acceptKeypair({
       privateJwk: JSON.parse(privateRaw),
@@ -73832,8 +74065,8 @@ var init_validation = __esm(() => {
 });
 
 // src/lib/idp.ts
-import { mkdir as mkdir9, readFile as readFile11, readdir as readdir3, unlink as unlink4 } from "node:fs/promises";
-import { dirname as dirname10, join as join11 } from "node:path";
+import { mkdir as mkdir9, readFile as readFile12, readdir as readdir3, unlink as unlink4 } from "node:fs/promises";
+import { dirname as dirname10, join as join12 } from "node:path";
 function classifyRefreshFailure(e) {
   if (e instanceof OAuthTokenError) {
     if (/not a member of the organization|organization not found/i.test(e.description ?? e.message)) {
@@ -73861,10 +74094,10 @@ function idpDir(name) {
   return paths2.idpDir(name);
 }
 function idpMetadataPath(name) {
-  return join11(idpDir(name), "metadata.json");
+  return join12(idpDir(name), "metadata.json");
 }
 function idpClientPath(name) {
-  return join11(idpDir(name), "client.json");
+  return join12(idpDir(name), "client.json");
 }
 function idpSessionPath(identityName) {
   validateName(identityName, "Identity");
@@ -73872,7 +74105,7 @@ function idpSessionPath(identityName) {
 }
 async function readIdpStore() {
   try {
-    const raw2 = await readFile11(IDPS_PATH, "utf-8");
+    const raw2 = await readFile12(IDPS_PATH, "utf-8");
     return IdpStoreSchema.parse(JSON.parse(raw2));
   } catch (e) {
     if (e instanceof exports_external.ZodError) {
@@ -73895,8 +74128,8 @@ async function readIdpConfig(name) {
   if (!entry)
     throw new Error(`IdP "${name}" not found. Run: astrale idp add ${name} --issuer <url>`);
   const [metadataRaw, clientRaw] = await Promise.all([
-    readFile11(idpMetadataPath(name), "utf-8"),
-    readFile11(idpClientPath(name), "utf-8").catch((e) => {
+    readFile12(idpMetadataPath(name), "utf-8"),
+    readFile12(idpClientPath(name), "utf-8").catch((e) => {
       if (e.code === "ENOENT")
         return "{}";
       throw e;
@@ -74162,7 +74395,7 @@ async function saveIdpSession(session) {
 }
 async function readIdpSession(identityName) {
   try {
-    const raw2 = await readFile11(idpSessionPath(identityName), "utf-8");
+    const raw2 = await readFile12(idpSessionPath(identityName), "utf-8");
     return IdpSessionSchema.parse(JSON.parse(raw2));
   } catch (e) {
     if (e.code === "ENOENT")
@@ -77315,7 +77548,7 @@ var require_filesystem = __commonJS(function(exports, module) {
     fs.close(fd, () => {});
     return buffer.subarray(0, bytesRead);
   };
-  var readFile12 = (path3) => new Promise((resolve5, reject) => {
+  var readFile13 = (path3) => new Promise((resolve5, reject) => {
     fs.open(path3, "r", (err, fd) => {
       if (err) {
         reject(err);
@@ -77332,7 +77565,7 @@ var require_filesystem = __commonJS(function(exports, module) {
     LDD_PATH,
     SELF_PATH,
     readFileSync: readFileSync3,
-    readFile: readFile12
+    readFile: readFile13
   };
 });
 
@@ -77374,7 +77607,7 @@ var require_elf = __commonJS(function(exports, module) {
 var require_detect_libc = __commonJS(function(exports, module) {
   var childProcess = __require("child_process");
   var { isLinux, getReport } = require_process();
-  var { LDD_PATH, SELF_PATH, readFile: readFile12, readFileSync: readFileSync3 } = require_filesystem();
+  var { LDD_PATH, SELF_PATH, readFile: readFile13, readFileSync: readFileSync3 } = require_filesystem();
   var { interpreterPath } = require_elf();
   var cachedFamilyInterpreter;
   var cachedFamilyFilesystem;
@@ -77454,7 +77687,7 @@ var require_detect_libc = __commonJS(function(exports, module) {
     }
     cachedFamilyFilesystem = null;
     try {
-      const lddContent = await readFile12(LDD_PATH);
+      const lddContent = await readFile13(LDD_PATH);
       cachedFamilyFilesystem = getFamilyFromLddContent(lddContent);
     } catch (e) {}
     return cachedFamilyFilesystem;
@@ -77476,7 +77709,7 @@ var require_detect_libc = __commonJS(function(exports, module) {
     }
     cachedFamilyInterpreter = null;
     try {
-      const selfContent = await readFile12(SELF_PATH);
+      const selfContent = await readFile13(SELF_PATH);
       const path3 = interpreterPath(selfContent);
       cachedFamilyInterpreter = familyFromInterpreterPath(path3);
     } catch (e) {}
@@ -77536,7 +77769,7 @@ var require_detect_libc = __commonJS(function(exports, module) {
     }
     cachedVersionFilesystem = null;
     try {
-      const lddContent = await readFile12(LDD_PATH);
+      const lddContent = await readFile13(LDD_PATH);
       const versionMatch = lddContent.match(RE_GLIBC_VERSION);
       if (versionMatch) {
         cachedVersionFilesystem = versionMatch[1];
@@ -83516,7 +83749,7 @@ var init_identity7 = __esm(() => {
 });
 
 // src/lib/instance.ts
-import { readFile as readFile12, writeFile as writeFile6, mkdir as mkdir10 } from "node:fs/promises";
+import { readFile as readFile13, writeFile as writeFile6, mkdir as mkdir10 } from "node:fs/promises";
 import { dirname as dirname11 } from "node:path";
 function seed2() {
   return { active: "", instances: {} };
@@ -83557,7 +83790,7 @@ async function readInstances(_config, opts = {}) {
     return instancesMemo;
   let raw2;
   try {
-    raw2 = await readFile12(INSTANCES_PATH, "utf-8");
+    raw2 = await readFile13(INSTANCES_PATH, "utf-8");
   } catch {
     instancesMemo = seed2();
     return instancesMemo;
@@ -83982,11 +84215,11 @@ var init_admin_target = __esm(() => {
 });
 
 // src/lib/config.ts
-import { readFile as readFile13, writeFile as writeFile7, mkdir as mkdir11 } from "node:fs/promises";
+import { readFile as readFile14, writeFile as writeFile7, mkdir as mkdir11 } from "node:fs/promises";
 import { dirname as dirname12 } from "node:path";
 async function readConfig() {
   try {
-    const raw2 = await readFile13(CONFIG_PATH, "utf-8");
+    const raw2 = await readFile14(CONFIG_PATH, "utf-8");
     return AstraleConfigSchema.parse(JSON.parse(raw2));
   } catch (e) {
     if (e instanceof exports_external.ZodError || e instanceof SyntaxError) {
@@ -84553,9 +84786,9 @@ var init_auth5 = __esm(() => {
 
 // src/setup/steps/domain.ts
 import { existsSync as existsSync3 } from "node:fs";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 function hasDomainProject() {
-  return existsSync3(join12(process.cwd(), "astrale.config.ts"));
+  return existsSync3(join13(process.cwd(), "astrale.config.ts"));
 }
 var FIX4 = "npx create-astrale-domain <name> --instance <slug>", domainStep;
 var init_domain2 = __esm(() => {
@@ -84625,6 +84858,12 @@ function idempotencyKey(...segments) {
 function randomOperationId(...namespace) {
   return idempotencyKey(...namespace, globalThis.crypto.randomUUID());
 }
+async function derivedIdempotencyKey(namespace, material) {
+  idempotencyKey(namespace);
+  const digest3 = new Uint8Array(await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(material)));
+  const hexadecimal = Array.from(digest3, (byte) => byte.toString(16).padStart(2, "0")).join("");
+  return idempotencyKey(namespace, hexadecimal);
+}
 var MAXIMUM_KEY_LENGTH = 128, URL_SAFE_KEY;
 var init_idempotency2 = __esm(() => {
   URL_SAFE_KEY = /^[A-Za-z0-9._~-]+$/u;
@@ -96441,13 +96680,13 @@ function pattern(input, patternIndex, path5) {
     invalid24("Pattern source", undefined, `${path5}/source`);
   const statesPath = `${path5}/states`;
   const states = array4(value2.states, "Pattern states", statesPath).map((item, stateIndex) => {
-    const statePath = `${statesPath}/${stateIndex}`;
-    const state2 = object2(item, "Pattern state", statePath);
-    exact9(state2, ["epsilon", "transitions"], "Pattern state", statePath, ["accepting"]);
+    const statePath2 = `${statesPath}/${stateIndex}`;
+    const state2 = object2(item, "Pattern state", statePath2);
+    exact9(state2, ["epsilon", "transitions"], "Pattern state", statePath2, ["accepting"]);
     if (state2.accepting !== undefined && state2.accepting !== true)
-      invalid24("accepting", undefined, `${statePath}/accepting`);
-    const epsilonPath = `${statePath}/epsilon`;
-    const transitionsPath = `${statePath}/transitions`;
+      invalid24("accepting", undefined, `${statePath2}/accepting`);
+    const epsilonPath = `${statePath2}/epsilon`;
+    const transitionsPath = `${statePath2}/transitions`;
     return {
       epsilon: array4(state2.epsilon, "epsilon", epsilonPath).map((target2, index2) => integer2(target2, "epsilon", `${epsilonPath}/${index2}`)),
       transitions: array4(state2.transitions, "transitions", transitionsPath).map((transitionValue, transitionIndex) => {
@@ -98847,6 +99086,7 @@ async function readAllNodes(graph, ast, options) {
   const cursors = new Set;
   let cursor;
   let pages = 0;
+  let terminal2 = false;
   const pageSize = Math.min(options.maximum, 256);
   do {
     pages += 1;
@@ -98864,6 +99104,10 @@ async function readAllNodes(graph, ast, options) {
         throw new TypeError(`${options.label} omitted requested Node values.`);
       }
       const node4 = projection.value;
+      if (options.orderedBoundary?.(node4) === true) {
+        terminal2 = true;
+        break;
+      }
       if (ids.has(String(node4.id)))
         throw new TypeError(`${options.label} repeated a Node.`);
       ids.add(String(node4.id));
@@ -98872,7 +99116,7 @@ async function readAllNodes(graph, ast, options) {
     if (nodes.length > options.maximum) {
       throw new TypeError(`${options.label} exceeded its Node bound.`);
     }
-    cursor = response2.page.next;
+    cursor = terminal2 ? undefined : response2.page.next;
     if (cursor !== undefined && cursors.has(cursor)) {
       throw new TypeError(`${options.label} repeated a cursor.`);
     }
@@ -98909,22 +99153,26 @@ async function connectAdminInstances(context, dependencies = {}) {
   const operationId = dependencies.operationId ?? defaultOperationId;
   const list3 = async () => {
     const Instance2 = AdminContract.classes.Instance;
+    const property2 = AdminContract.properties.instance;
     const instances = Query.from({ nodes: [Instance2] }).filter({
       class: { equals: Instance2 }
     });
     const nodes = await readAllNodes(context.graph, instances.select({
       kind: "nodes",
       binding: instances.node,
-      projection: { kind: "value" }
+      projection: { kind: "value" },
+      order: { property: property2.state, direction: "desc", unranked: "last" }
     }), {
       label: "Admin Instance inventory",
       maximum: MAXIMUM_INSTANCES,
-      maximumPages: MAXIMUM_PAGES
+      maximumPages: MAXIMUM_PAGES,
+      orderedBoundary: (node4) => instanceFromNode(node4).state === "deleted"
     });
-    return nodes.map(instanceFromNode).filter((instance) => instance.state !== "deleted");
+    return nodes.map(instanceFromNode);
   };
   const requireInstance = async (identifier) => {
-    const found = findOwnedInstance(await list3(), identifier);
+    const direct = directNodePath(identifier);
+    const found = direct === undefined ? findOwnedInstance(await list3(), identifier) : await readExactInstance(context.graph, direct);
     if (found === undefined)
       throw new AdminInstanceNotFoundError(identifier);
     return found;
@@ -98957,6 +99205,22 @@ async function connectAdminInstances(context, dependencies = {}) {
     }
   });
 }
+async function readExactInstance(graph, instance) {
+  const Instance2 = AdminContract.classes.Instance;
+  const selected = Query.from({ nodes: [instance] }).filter({ class: { equals: Instance2 } });
+  const nodes = await readAllNodes(graph, selected.select({ kind: "nodes", binding: selected.node, projection: { kind: "value" } }), { label: "Admin Instance lookup", maximum: 1, maximumPages: 1 });
+  if (nodes.length > 1)
+    throw new TypeError("Admin Instance lookup returned more than one Node.");
+  return nodes[0] === undefined ? undefined : instanceFromNode(nodes[0]);
+}
+function directNodePath(input) {
+  try {
+    const parsed = Path.parse(input);
+    return parsed.ast.anchor.kind === "id" && parsed.ast.steps.length === 0 ? parsed : undefined;
+  } catch {
+    return;
+  }
+}
 function instanceFromNode(node4) {
   const Instance2 = AdminContract.classes.Instance;
   if (node4.class !== ClassKey.of(Instance2)) {
@@ -101614,14 +101878,14 @@ async function boundedResponse(response2, maximum, signal) {
     signal.removeEventListener("abort", abort);
     reader.releaseLock();
   }
-  return join13(chunks, total);
+  return join14(chunks, total);
 }
 function requireExactResponse(response2, expected, label) {
   if (response2.redirected || response2.url !== expected) {
     throw new ClientError(`${label} did not return the exact requested URL.`);
   }
 }
-function join13(parts, length) {
+function join14(parts, length) {
   if (parts.length === 1)
     return new Uint8Array(parts[0]);
   const output3 = new Uint8Array(length);
@@ -104256,67 +104520,6 @@ var init_instance3 = __esm(() => {
   };
 });
 
-// src/commands/skills/configure.ts
-var exports_configure = {};
-__export(exports_configure, {
-  chooseAstraleSkillAgents: () => chooseAstraleSkillAgents,
-  default: () => configure_default
-});
-async function chooseAstraleSkillAgents(opts = {}) {
-  const agents = await astraleSkillAgents();
-  if (opts.agent)
-    return opts.agent;
-  const interactive = process.stdin.isTTY && process.stdout.isTTY && !process.env.CI && !process.argv.includes("--no-prompt") && !process.argv.includes("--ci");
-  const defaults = agents.filter((agent) => agent.configured || agent.detected).map((agent) => agent.name);
-  if (!interactive || opts.yes)
-    return defaults;
-  const ordered2 = [...agents].sort((left, right) => Number(right.configured || right.detected) - Number(left.configured || left.detected) || left.displayName.localeCompare(right.displayName));
-  return promptMultiSelect("Install Astrale skills for which global agents?", ordered2.map((agent) => ({
-    name: `${agent.displayName}${agent.configured ? " (configured)" : agent.detected ? " (detected)" : ""}`,
-    value: agent.name,
-    checked: agent.configured || agent.detected,
-    description: agent.globalSkillsDir
-  })));
-}
-var configure_default;
-var init_configure = __esm(() => {
-  init_log();
-  init_output();
-  init_prompt();
-  init_skills();
-  configure_default = {
-    name: "configure",
-    description: "Choose the global agents that receive Astrale skill links",
-    options: [
-      { flags: "--agent <name...>", description: "Select agents explicitly (repeat or list names)" },
-      { flags: "--yes", description: "Use detected/already-configured agents without prompting" },
-      ...RAW_OUTPUT_OPTIONS
-    ],
-    action: async (opts) => {
-      try {
-        const selected = await chooseAstraleSkillAgents(opts);
-        if (selected === undefined)
-          return;
-        const result = await syncAstraleSkills({
-          agents: selected,
-          replaceAgentSelection: true
-        });
-        if (isMachine(opts)) {
-          output({ ...result, agents: selected, scope: "global" }, opts);
-          return;
-        }
-        log.success("Astrale skills configured globally");
-        if (selected.length === 0)
-          log.dim("  canonical only: ~/.agents/skills");
-        else
-          log.dim(`  agents: ${selected.join(", ")}`);
-      } catch (error52) {
-        fatal(error52, opts);
-      }
-    }
-  };
-});
-
 // src/setup/steps/skills.ts
 var FIX5, skillsStep;
 var init_skills2 = __esm(() => {
@@ -104376,11 +104579,11 @@ var init_skills2 = __esm(() => {
 
 // src/setup/steps/skills-bridge.ts
 import { existsSync as existsSync4, readdirSync } from "node:fs";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 function countStaged(root) {
   try {
-    const dir = join14(root, ".agents", "skills");
-    return readdirSync(dir).filter((e) => existsSync4(join14(dir, e, "SKILL.md"))).length;
+    const dir = join15(root, ".agents", "skills");
+    return readdirSync(dir).filter((e) => existsSync4(join15(dir, e, "SKILL.md"))).length;
   } catch {
     return 0;
   }
@@ -104418,7 +104621,7 @@ var init_skills_bridge = __esm(() => {
       }
       const after = ensureSkillsBridge();
       if (after.kind === "bridged") {
-        log.success(`Workspace skills bridged — ${join14(after.root, ".agents/skills")} → .claude/skills`);
+        log.success(`Workspace skills bridged — ${join15(after.root, ".agents/skills")} → .claude/skills`);
         return "fixed";
       }
       log.warn("Could not create the skills bridge — create it manually: ln -s ../.agents/skills .claude/skills");
@@ -104886,18 +105089,18 @@ Examples:
 
 // src/lib/sdk-deps.ts
 import { existsSync as existsSync5 } from "node:fs";
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 function inDomainProject(cwd = process.cwd()) {
-  return existsSync5(join15(cwd, "astrale.config.ts"));
+  return existsSync5(join16(cwd, "astrale.config.ts"));
 }
 function foreignPackageManager(cwd = process.cwd()) {
-  if (existsSync5(join15(cwd, "pnpm-lock.yaml")))
+  if (existsSync5(join16(cwd, "pnpm-lock.yaml")))
     return null;
-  if (existsSync5(join15(cwd, "package-lock.json")))
+  if (existsSync5(join16(cwd, "package-lock.json")))
     return "npm";
-  if (existsSync5(join15(cwd, "yarn.lock")))
+  if (existsSync5(join16(cwd, "yarn.lock")))
     return "yarn";
-  if (existsSync5(join15(cwd, "bun.lockb")) || existsSync5(join15(cwd, "bun.lock")))
+  if (existsSync5(join16(cwd, "bun.lockb")) || existsSync5(join16(cwd, "bun.lock")))
     return "bun";
   return null;
 }
@@ -104948,18 +105151,15 @@ __export(exports_update, {
   cliStale: () => cliStale,
   default: () => update_default
 });
-async function refreshSkills() {
-  log.step("Ensuring Astrale agent skills are current and healthy");
-  const result = await syncAstraleSkills();
-  if (result.status === "unchanged")
-    log.success("Astrale skills already up to date");
-  else if (result.status === "installed")
-    log.success("Astrale skills installed");
-  else if (result.status === "updated")
-    log.success("Astrale skills updated");
-  else if (result.status === "repaired")
-    log.success("Astrale skills repaired and updated");
-  return result;
+async function refreshSkills(interactive, humanOutput) {
+  if (humanOutput)
+    log.step("Ensuring Astrale agent skills are current and healthy");
+  const outcome = await configureAstraleSkills({ source: "update", interactive });
+  if (humanOutput)
+    renderSkillConfigureOutcome(outcome);
+}
+function skillInstallPromptAllowed(opts) {
+  return opts.yes !== true && !isMachine(opts) && process.stdin.isTTY === true && process.stdout.isTTY === true && !process.env.CI && !process.env.CONTINUOUS_INTEGRATION && !process.argv.includes("--no-prompt");
 }
 function skillCheckStale(skills) {
   return skills.status === "update-available" || skills.status === "repair-needed";
@@ -105052,11 +105252,37 @@ async function cliStale(opts, dependencies = CLI_STALE_DEPENDENCIES) {
     };
   }
 }
-async function refreshSkillsWithUpdatedBinary(bin) {
-  const result = await run(bin, ["skills", "update", "--json"]);
-  if (result.code === 0)
+async function refreshSkillsWithUpdatedBinary(bin, interactive) {
+  if (interactive) {
+    const code = await runInherit(bin, ["skills", "configure", "--source", "update"]);
+    if (code === 0)
+      return;
+    throw new AstraleError("SKILL_UPDATE_FAILED", "The CLI was updated, but its embedded skills could not be applied.", `Retry with \`${bin} skills configure\`.`);
+  }
+  const result = await run(bin, [
+    "--no-prompt",
+    "skills",
+    "configure",
+    "--source",
+    "update",
+    "--json"
+  ]);
+  if (result.code === 0) {
+    if (!isMachine()) {
+      try {
+        const outcome = JSON.parse(result.stdout);
+        if (outcome.status === "not-interactive") {
+          log.dim(`  Skills are not installed. Run: ${SKILL_CONFIGURE_COMMAND}`);
+        } else if (outcome.status === "unchanged") {
+          log.success("Astrale skills already up to date");
+        } else if (["installed", "updated", "repaired"].includes(outcome.status ?? "")) {
+          log.success("Astrale skills updated");
+        }
+      } catch {}
+    }
     return;
-  throw new AstraleError("SKILL_UPDATE_FAILED", "The CLI was updated, but its embedded skills could not be applied.", `Retry with \`${bin} skills update\`.${result.stderr.trim() ? ` ${result.stderr.trim()}` : ""}`);
+  }
+  throw new AstraleError("SKILL_UPDATE_FAILED", "The CLI was updated, but its embedded skills could not be applied.", `Retry with \`${bin} skills configure\`.${result.stderr.trim() ? ` ${result.stderr.trim()}` : ""}`);
 }
 async function sdkStale() {
   if (!inDomainProject() || foreignPackageManager()) {
@@ -105076,6 +105302,7 @@ var init_update2 = __esm(() => {
   init_sdk_deps();
   init_skills();
   init_update();
+  init_configure();
   CLI_STALE_DEPENDENCIES = {
     update: updateAstrale
   };
@@ -105094,7 +105321,7 @@ var init_update2 = __esm(() => {
       { flags: "--no-deps", description: "Skip checking @astrale-os SDK dependency versions" },
       {
         flags: "--yes",
-        description: "Non-interactive: apply CLI + skills + SDK deps without prompts"
+        description: "Non-interactive: apply updates without opting into a first skill install"
       },
       ...RAW_OUTPUT_OPTIONS
     ],
@@ -105103,10 +105330,9 @@ Behavior:
   Keeps three things current, in order. (1) The CLI distribution: updates official
   standalone installs with checksum verification; npm-owned installs report the
   exact npm command and never overwrite package-manager files. (2) The Astrale
-  agent skills: installs every skill embedded in that
-  exact CLI release, updates healthy older
-  installs, repairs inconsistent installs, and verifies the result before
-  reporting success. (3) SDK deps: inside a pnpm domain
+  agent skills: aligns an existing cohort with the exact CLI release, repairs
+  inconsistent installs, and verifies the result. If skills are absent, an
+  interactive update offers to install them. (3) SDK deps: inside a pnpm domain
   project, proposes any @astrale-os/* dependency with a newer release and, on
   confirm, runs "pnpm update --latest --lockfile-only" (updates package.json AND
   the lockfile, honoring your registry + supply-chain age policy; run "pnpm
@@ -105115,9 +105341,10 @@ Behavior:
   The default release channel is beta; --channel overrides it for one run.
   --check is a dry run (binary + skills + SDK deps; exit 10 if anything is available) and
   never writes. With --json it emits a unified staleness report
-  ({ stale, cli, skills, sdk }) for tooling. --yes applies all three non-interactively and
-  without additional confirmation. A skill failure fails the command rather than
-  claiming a partial success. --no-skills / --no-deps explicitly skip those axes.
+  ({ stale, cli, skills, sdk }) for tooling. --yes applies existing updates
+  non-interactively but does not opt into a first skill installation. A skill
+  failure fails the command rather than claiming a partial success. --no-skills
+  / --no-deps explicitly skip those axes.
 
 Examples:
   $ astrale update
@@ -105170,17 +105397,19 @@ Examples:
           throw error52;
         }
         if (opts.skills !== false) {
+          const interactiveSkills = skillInstallPromptAllowed(opts);
+          const humanSkills = !isMachine(opts);
           if (opts.check) {
             const skills = await checkAstraleSkills();
             printSkillCheck(skills);
             if (skillCheckStale(skills))
               anyAvailable = true;
           } else if (result.status === "updated") {
-            log.step("Applying skills embedded in the updated CLI");
-            await refreshSkillsWithUpdatedBinary(result.bin);
-            log.success("Astrale skills updated");
+            if (humanSkills)
+              log.step("Applying skills embedded in the updated CLI");
+            await refreshSkillsWithUpdatedBinary(result.bin, interactiveSkills);
           } else {
-            await refreshSkills();
+            await refreshSkills(interactiveSkills, humanSkills);
           }
         } else if (!opts.check) {
           log.dim("  Astrale skills skipped (--no-skills)");
@@ -105751,7 +105980,7 @@ __export(exports_mutate, {
   default: () => mutate_default,
   mutateCommand: () => mutateCommand
 });
-import { readFile as readFile14 } from "node:fs/promises";
+import { readFile as readFile15 } from "node:fs/promises";
 async function mutateCommand(opts) {
   let mutation;
   try {
@@ -105784,7 +106013,7 @@ async function readDocument(opts) {
   if (opts.file !== undefined) {
     let raw3;
     try {
-      raw3 = await readFile14(opts.file, "utf8");
+      raw3 = await readFile15(opts.file, "utf8");
     } catch (error52) {
       throw new AstraleError("FILE_READ_FAILED", `Cannot read --file ${opts.file}.`, undefined, {
         cause: error52
@@ -105868,7 +106097,7 @@ __export(exports_query, {
   default: () => query_default,
   queryCommand: () => queryCommand
 });
-import { readFile as readFile15 } from "node:fs/promises";
+import { readFile as readFile16 } from "node:fs/promises";
 async function queryCommand(sources2, opts) {
   let input;
   try {
@@ -105919,7 +106148,7 @@ async function readAst(opts) {
     return;
   let raw2;
   try {
-    raw2 = await readFile15(opts.file, "utf8");
+    raw2 = await readFile16(opts.file, "utf8");
   } catch (error52) {
     throw new AstraleError("FILE_READ_FAILED", `Cannot read --file ${opts.file}.`, undefined, {
       cause: error52
@@ -106493,8 +106722,8 @@ var init_external_open_origins = __esm(() => {
 
 // src/lib/view/session.ts
 import { closeSync as closeSync2, fchmodSync, openSync as openSync2 } from "node:fs";
-import { chmod as chmod4, mkdir as mkdir12, readdir as readdir4, readFile as readFile16, rm as rm6 } from "node:fs/promises";
-import { join as join16 } from "node:path";
+import { chmod as chmod4, mkdir as mkdir12, readdir as readdir4, readFile as readFile17, rm as rm7 } from "node:fs/promises";
+import { join as join17 } from "node:path";
 async function ensureViewDirectory(directory = VIEW_DIR) {
   await mkdir12(directory, { recursive: true, mode: 448 });
   await chmod4(directory, 448);
@@ -106522,9 +106751,9 @@ async function openSessionLog(id, directory = VIEW_DIR) {
 }
 async function removeSessionFiles(id, directory = VIEW_DIR) {
   await Promise.all([
-    rm6(recordPath(id, directory), { force: true }),
-    rm6(configPath(id, directory), { force: true }),
-    rm6(logPath(id, directory), { force: true })
+    rm7(recordPath(id, directory), { force: true }),
+    rm7(configPath(id, directory), { force: true }),
+    rm7(logPath(id, directory), { force: true })
   ]);
 }
 function isAlive(pid) {
@@ -106548,7 +106777,7 @@ async function listSessions() {
       continue;
     let record12;
     try {
-      record12 = JSON.parse(await readFile16(join16(VIEW_DIR, entry2), "utf8"));
+      record12 = JSON.parse(await readFile17(join17(VIEW_DIR, entry2), "utf8"));
     } catch {
       continue;
     }
@@ -106576,22 +106805,22 @@ async function closeSession(record12) {
   }
   await removeSessionFiles(record12.id);
 }
-var VIEW_DIR, recordPath = (id, directory = VIEW_DIR) => join16(directory, `${id}.json`), logPath = (id, directory = VIEW_DIR) => join16(directory, `${id}.log`), configPath = (id, directory = VIEW_DIR) => join16(directory, `${id}.config.json`), CLOSE_GRACE_MS = 2000;
+var VIEW_DIR, recordPath = (id, directory = VIEW_DIR) => join17(directory, `${id}.json`), logPath = (id, directory = VIEW_DIR) => join17(directory, `${id}.log`), configPath = (id, directory = VIEW_DIR) => join17(directory, `${id}.config.json`), CLOSE_GRACE_MS = 2000;
 var init_session5 = __esm(() => {
   init_state();
-  VIEW_DIR = join16(paths2.home, "view");
+  VIEW_DIR = join17(paths2.home, "view");
 });
 
 // src/lib/view/port-allocation.ts
-import { join as join17 } from "node:path";
-function withViewPortAllocationLock(fn, lockPath = VIEW_PORT_LOCK) {
-  return withFileLock(lockPath, fn);
+import { join as join18 } from "node:path";
+function withViewPortAllocationLock(fn, lockPath2 = VIEW_PORT_LOCK) {
+  return withFileLock(lockPath2, fn);
 }
 var VIEW_PORT_LOCK;
 var init_port_allocation = __esm(() => {
   init_state();
   init_session5();
-  VIEW_PORT_LOCK = join17(VIEW_DIR, "ports.lock");
+  VIEW_PORT_LOCK = join18(VIEW_DIR, "ports.lock");
 });
 
 // src/lib/view/resolve.ts
@@ -106661,33 +106890,33 @@ var init_resolve2 = __esm(() => {
 // src/lib/view/assets.ts
 import { existsSync as existsSync6, statSync } from "node:fs";
 import { copyFile as copyFile2 } from "node:fs/promises";
-import { dirname as dirname13, join as join18 } from "node:path";
+import { dirname as dirname13, join as join19 } from "node:path";
 import { fileURLToPath } from "node:url";
 function viewerDistDir(moduleUrl = import.meta.url, entry2 = process.argv[1] ?? ".") {
   const override = process.env.ASTRALE_VIEWER_DIR;
   if (override)
     return override;
   const moduleDirectory = dirname13(fileURLToPath(moduleUrl));
-  const published = join18(moduleDirectory, "..", "viewer", "dist");
-  const source2 = join18(moduleDirectory, "..", "..", "..", "viewer", "dist");
-  const legacy = join18(dirname13(entry2), "..", "viewer", "dist");
+  const published = join19(moduleDirectory, "..", "viewer", "dist");
+  const source2 = join19(moduleDirectory, "..", "..", "..", "viewer", "dist");
+  const legacy = join19(dirname13(entry2), "..", "viewer", "dist");
   const standalone = entry2.startsWith("/$bunfs/") ? embeddedAssetDir("viewer") : undefined;
   const complete = [standalone, published, source2, legacy].find((candidate2) => candidate2 !== undefined && hasViewerBundle(candidate2));
   if (complete)
     return complete;
-  if (hasViewerSource(join18(source2, "..")))
+  if (hasViewerSource(join19(source2, "..")))
     return source2;
   return published;
 }
 async function ensureViewerAssets(moduleUrl = import.meta.url, entry2 = process.argv[1] ?? ".") {
   const dist = viewerDistDir(moduleUrl, entry2);
-  const srcDir = join18(dist, "..");
+  const srcDir = join19(dist, "..");
   if (hasViewerBundle(dist) && !viewerSourceIsNewer(srcDir, dist))
     return dist;
   const bun = globalThis.Bun;
   if (bun && hasViewerSource(srcDir)) {
     const result = await bun.build({
-      entrypoints: [join18(srcDir, "main.ts")],
+      entrypoints: [join19(srcDir, "main.ts")],
       outdir: dist,
       target: "browser",
       minify: false
@@ -106695,24 +106924,24 @@ async function ensureViewerAssets(moduleUrl = import.meta.url, entry2 = process.
     if (!result.success)
       throw new Error(`viewer build failed: ${result.logs.join(`
 `)}`);
-    await copyFile2(join18(srcDir, "index.html"), join18(dist, "index.html"));
+    await copyFile2(join19(srcDir, "index.html"), join19(dist, "index.html"));
     return dist;
   }
   return materializeEmbeddedAssets("viewer");
 }
 function hasViewerBundle(directory) {
-  return existsSync6(join18(directory, "main.js")) && existsSync6(join18(directory, "index.html"));
+  return existsSync6(join19(directory, "main.js")) && existsSync6(join19(directory, "index.html"));
 }
 function hasViewerSource(directory) {
-  return existsSync6(join18(directory, "main.ts")) && existsSync6(join18(directory, "index.html"));
+  return existsSync6(join19(directory, "main.ts")) && existsSync6(join19(directory, "index.html"));
 }
 function viewerSourceIsNewer(source2, dist) {
   if (!hasViewerSource(source2))
     return false;
   if (!hasViewerBundle(dist))
     return true;
-  const newestSource = Math.max(statSync(join18(source2, "main.ts")).mtimeMs, statSync(join18(source2, "index.html")).mtimeMs);
-  const oldestOutput = Math.min(statSync(join18(dist, "main.js")).mtimeMs, statSync(join18(dist, "index.html")).mtimeMs);
+  const newestSource = Math.max(statSync(join19(source2, "main.ts")).mtimeMs, statSync(join19(source2, "index.html")).mtimeMs);
+  const oldestOutput = Math.min(statSync(join19(dist, "main.js")).mtimeMs, statSync(join19(dist, "index.html")).mtimeMs);
   return newestSource > oldestOutput;
 }
 var init_assets = __esm(() => {
@@ -106720,9 +106949,9 @@ var init_assets = __esm(() => {
 });
 
 // src/lib/view/server.ts
-import { readFile as readFile17 } from "node:fs/promises";
+import { readFile as readFile18 } from "node:fs/promises";
 import { createServer } from "node:http";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 import { Readable } from "node:stream";
 function startViewServer(config2) {
   const { session: session3, proxy } = config2;
@@ -106770,11 +106999,11 @@ function startViewServer(config2) {
       return;
     }
     if (sub === "/" || sub === "/index.html") {
-      await serveAsset(res, join19(hostDir, "index.html"), "text/html; charset=utf-8");
+      await serveAsset(res, join20(hostDir, "index.html"), "text/html; charset=utf-8");
       return;
     }
     if (sub === "/main.js") {
-      await serveAsset(res, join19(hostDir, "main.js"), "text/javascript; charset=utf-8");
+      await serveAsset(res, join20(hostDir, "main.js"), "text/javascript; charset=utf-8");
       return;
     }
     if (sub === "/config.json" && req.method === "GET") {
@@ -106894,7 +107123,7 @@ function json3(res, code, body) {
 }
 async function serveAsset(res, file2, contentType) {
   try {
-    const content = await readFile17(file2);
+    const content = await readFile18(file2);
     res.writeHead(200, { "content-type": contentType, "cache-control": "no-store" });
     res.end(content);
   } catch {
@@ -107010,8 +107239,8 @@ __export(exports_view3, {
 });
 import { randomBytes } from "node:crypto";
 import { closeSync as closeSync3, existsSync as existsSync7, statSync as statSync2 } from "node:fs";
-import { readdir as readdir5, readFile as readFile18 } from "node:fs/promises";
-import { dirname as dirname14, join as join20 } from "node:path";
+import { readdir as readdir5, readFile as readFile19 } from "node:fs/promises";
+import { dirname as dirname14, join as join21 } from "node:path";
 async function resolveSession(spec, opts) {
   rejectUnrepresentableOverrides(opts);
   const parsed = parseViewSpec(spec);
@@ -107068,7 +107297,7 @@ async function resolveServeRuntime(environment = {}) {
   if (node4 && entry2?.endsWith(".js") && exists(entry2))
     return { file: node4, args: [entry2] };
   if (node4 && entry2?.endsWith(".ts")) {
-    const dist = join20(dirname14(entry2), "..", "dist", "astrale.js");
+    const dist = join21(dirname14(entry2), "..", "dist", "astrale.js");
     await ensureDevDist(entry2, dist);
     if (exists(dist))
       return { file: node4, args: [dist] };
@@ -107094,8 +107323,8 @@ async function findOnPath(name) {
 async function ensureDevDist(entry2, dist) {
   if (!await devDistIsStale(entry2, dist))
     return;
-  const projectDir = join20(dirname14(entry2), "..");
-  const buildScript = join20(projectDir, "scripts", "build.ts");
+  const projectDir = join21(dirname14(entry2), "..");
+  const buildScript = join21(projectDir, "scripts", "build.ts");
   const bun = await findOnPath("bun");
   if (!bun || !existsSync7(buildScript))
     return;
@@ -107111,13 +107340,13 @@ async function ensureDevDist(entry2, dist) {
 async function devDistIsStale(entry2, dist) {
   if (!existsSync7(dist))
     return true;
-  const projectDir = join20(dirname14(entry2), "..");
+  const projectDir = join21(dirname14(entry2), "..");
   const builtAt = statSync2(dist).mtimeMs;
-  const directories = [join20(projectDir, "src"), join20(projectDir, "bin"), join20(projectDir, "vendor")];
+  const directories = [join21(projectDir, "src"), join21(projectDir, "bin"), join21(projectDir, "vendor")];
   const files = [
-    join20(projectDir, "scripts", "build.ts"),
-    join20(projectDir, "package.json"),
-    join20(projectDir, "pnpm-lock.yaml")
+    join21(projectDir, "scripts", "build.ts"),
+    join21(projectDir, "package.json"),
+    join21(projectDir, "pnpm-lock.yaml")
   ];
   for (const directory of directories) {
     if (existsSync7(directory) && await newerThan(directory, builtAt))
@@ -107130,7 +107359,7 @@ async function newerThan(dir, mtimeMs) {
   for (const item of entries) {
     if (!item.isFile())
       continue;
-    if (statSync2(join20(item.parentPath, item.name)).mtimeMs > mtimeMs)
+    if (statSync2(join21(item.parentPath, item.name)).mtimeMs > mtimeMs)
       return true;
   }
   return false;
@@ -107208,7 +107437,7 @@ async function startSessionLocked(view2, opts, kernelTarget, activeInstance, def
       break;
     await sleep2(POLL_MS2);
   }
-  const tail = await readFile18(logPath(id), "utf8").catch(() => "");
+  const tail = await readFile19(logPath(id), "utf8").catch(() => "");
   await closeSession(live);
   throw new Error(`View session server did not come up.${tail ? `
 --- server log ---
@@ -107482,7 +107711,7 @@ Examples:
       if (state2?.state === "failed") {
         await reportOpened(record12, state2, mode, opts);
         if (opts.debug) {
-          const tail = await readFile18(logPath(record12.id), "utf8").catch(() => "");
+          const tail = await readFile19(logPath(record12.id), "utf8").catch(() => "");
           if (tail)
             console.error(`--- server log ---
 ${tail.slice(-3000)}`);
@@ -107555,8 +107784,8 @@ var init_status = __esm(() => {
 
 // src/lib/browser-retention.ts
 import { readlinkSync as readlinkSync2 } from "node:fs";
-import { readdir as readdir6, rm as rm7, stat as stat3 } from "node:fs/promises";
-import { join as join21 } from "node:path";
+import { readdir as readdir6, rm as rm8, stat as stat3 } from "node:fs/promises";
+import { join as join22 } from "node:path";
 function firstPositive(candidates) {
   for (const candidate2 of candidates) {
     if (candidate2 === undefined)
@@ -107584,7 +107813,7 @@ function isLive(pid) {
 function heldByLiveBrowser(profileDir) {
   let target2;
   try {
-    target2 = readlinkSync2(join21(profileDir, "SingletonLock"));
+    target2 = readlinkSync2(join22(profileDir, "SingletonLock"));
   } catch {
     return false;
   }
@@ -107600,7 +107829,7 @@ async function directoryBytes(dir) {
   }
   let total = 0;
   for (const entry2 of entries) {
-    const path5 = join21(dir, entry2.name);
+    const path5 = join22(dir, entry2.name);
     if (entry2.isDirectory()) {
       total += await directoryBytes(path5);
     } else if (entry2.isFile()) {
@@ -107614,13 +107843,13 @@ async function directoryBytes(dir) {
 async function profileCacheBytes(profileDir) {
   let total = 0;
   for (const relative2 of CACHE_PATHS)
-    total += await directoryBytes(join21(profileDir, relative2));
+    total += await directoryBytes(join22(profileDir, relative2));
   return total;
 }
 async function purgeCache(profileDir) {
   const before = await profileCacheBytes(profileDir);
   for (const relative2 of CACHE_PATHS) {
-    await rm7(join21(profileDir, relative2), { recursive: true, force: true }).catch(() => {});
+    await rm8(join22(profileDir, relative2), { recursive: true, force: true }).catch(() => {});
   }
   return before - await profileCacheBytes(profileDir);
 }
@@ -107638,7 +107867,7 @@ async function sweepBrowserProfiles(options = {}) {
   const now = options.now ?? Date.now();
   const result = { removed: [], purged: [], skipped: [], bytesFreed: 0 };
   for (const name of names) {
-    const profileDir = join21(dir, name);
+    const profileDir = join22(dir, name);
     if (heldByLiveBrowser(profileDir)) {
       result.skipped.push(name);
       continue;
@@ -107647,7 +107876,7 @@ async function sweepBrowserProfiles(options = {}) {
       const idleMs = now - (await stat3(profileDir)).mtime.getTime();
       if (idleMs > budget.maxProfileAgeMs) {
         result.bytesFreed += await directoryBytes(profileDir);
-        await rm7(profileDir, { recursive: true, force: true });
+        await rm8(profileDir, { recursive: true, force: true });
         result.removed.push(name);
         continue;
       }
@@ -107865,7 +108094,7 @@ var exports_view_serve = {};
 __export(exports_view_serve, {
   default: () => view_serve_default
 });
-import { readFile as readFile19 } from "node:fs/promises";
+import { readFile as readFile20 } from "node:fs/promises";
 var view_serve_default;
 var init_view_serve = __esm(() => {
   init_server();
@@ -107877,7 +108106,7 @@ var init_view_serve = __esm(() => {
     action: async (opts) => {
       if (!opts.config)
         throw new Error("--config is required");
-      const config2 = JSON.parse(await readFile19(opts.config, "utf8"));
+      const config2 = JSON.parse(await readFile20(opts.config, "utf8"));
       startViewServer(config2);
       console.log(`view session ${config2.session.id} listening on ${config2.session.pageUrl}`);
       await new Promise(() => {});
@@ -107900,7 +108129,7 @@ __export(exports_studio, {
   encodeStudioCliDescriptor: () => encodeStudioCliDescriptor
 });
 import { existsSync as existsSync10, realpathSync } from "node:fs";
-import { dirname as dirname15, join as join22, resolve as resolve8 } from "node:path";
+import { dirname as dirname15, join as join23, resolve as resolve8 } from "node:path";
 function encodeStudioCliDescriptor(executable = process.execPath, entry2 = process.argv[1]) {
   const args = entry2 && entry2 !== executable && !entry2.startsWith("/$bunfs") && existsSync10(entry2) ? [realpathSync(entry2)] : [];
   return JSON.stringify({ version: 1, executable, args });
@@ -107911,21 +108140,21 @@ function resolveStudioDir() {
     candidates.push(process.env.ASTRALE_STUDIO_DIR);
   try {
     const entryDir = dirname15(realpathSync(process.argv[1] ?? ""));
-    candidates.push(join22(entryDir, "..", "studio"), join22(entryDir, "studio"));
+    candidates.push(join23(entryDir, "..", "studio"), join23(entryDir, "studio"));
   } catch {}
   for (const c2 of candidates) {
-    if (existsSync10(join22(c2, "server", "index.ts")))
+    if (existsSync10(join23(c2, "server", "index.ts")))
       return resolve8(c2);
   }
   throw new Error(`Domain Studio assets not found (looked in: ${candidates.join(", ") || "<none>"}). ` + `Reinstall the astrale CLI, or set ASTRALE_STUDIO_DIR to a studio checkout.`);
 }
 function isDevSource(studioDir) {
-  return existsSync10(join22(studioDir, "vite.config.ts")) && existsSync10(join22(studioDir, "client", "src"));
+  return existsSync10(join23(studioDir, "vite.config.ts")) && existsSync10(join23(studioDir, "client", "src"));
 }
 function resolveViteBin(studioDir) {
   for (const c2 of [
-    join22(studioDir, "node_modules", ".bin", "vite"),
-    join22(studioDir, "..", "..", "node_modules", ".bin", "vite")
+    join23(studioDir, "node_modules", ".bin", "vite"),
+    join23(studioDir, "..", "..", "node_modules", ".bin", "vite")
   ]) {
     if (existsSync10(c2))
       return c2;
@@ -108284,7 +108513,7 @@ var init_model7 = __esm(() => {
 
 // src/ui/lock.ts
 import { createHash as createHash3 } from "node:crypto";
-import { readFile as readFile20 } from "node:fs/promises";
+import { readFile as readFile21 } from "node:fs/promises";
 function digest5(value3) {
   return createHash3("sha256").update(value3).digest("hex");
 }
@@ -108322,7 +108551,7 @@ function pathIsAbsolute(value3) {
 }
 async function readUiLock(target2) {
   try {
-    return parseUiLock(JSON.parse(await readFile20(target2, "utf8")));
+    return parseUiLock(JSON.parse(await readFile21(target2, "utf8")));
   } catch (cause) {
     if (cause instanceof UiError)
       throw cause;
@@ -108722,7 +108951,7 @@ var require_util = __commonJS(function(exports, module) {
 var require_parse = __commonJS(function(exports, module) {
   var util = require_util();
   var source2;
-  var parseState;
+  var parseState2;
   var stack;
   var pos;
   var line;
@@ -108732,7 +108961,7 @@ var require_parse = __commonJS(function(exports, module) {
   var root;
   module.exports = function parse6(text13, reviver) {
     source2 = String(text13);
-    parseState = "start";
+    parseState2 = "start";
     stack = [];
     pos = 0;
     line = 1;
@@ -108742,7 +108971,7 @@ var require_parse = __commonJS(function(exports, module) {
     root = undefined;
     do {
       token = lex();
-      parseStates[parseState]();
+      parseStates[parseState2]();
     } while (token.type !== "eof");
     if (typeof reviver === "function") {
       return internalize({ "": root }, "", reviver);
@@ -108852,7 +109081,7 @@ var require_parse = __commonJS(function(exports, module) {
         read2();
         return;
       }
-      return lexStates[parseState]();
+      return lexStates[parseState2]();
     },
     comment() {
       switch (c2) {
@@ -109400,7 +109629,7 @@ var require_parse = __commonJS(function(exports, module) {
         case "identifier":
         case "string":
           key = token.value;
-          parseState = "afterPropertyName";
+          parseState2 = "afterPropertyName";
           return;
         case "punctuator":
           pop();
@@ -109413,7 +109642,7 @@ var require_parse = __commonJS(function(exports, module) {
       if (token.type === "eof") {
         throw invalidEOF();
       }
-      parseState = "beforePropertyValue";
+      parseState2 = "beforePropertyValue";
     },
     beforePropertyValue() {
       if (token.type === "eof") {
@@ -109437,7 +109666,7 @@ var require_parse = __commonJS(function(exports, module) {
       }
       switch (token.value) {
         case ",":
-          parseState = "beforePropertyName";
+          parseState2 = "beforePropertyName";
           return;
         case "}":
           pop();
@@ -109449,7 +109678,7 @@ var require_parse = __commonJS(function(exports, module) {
       }
       switch (token.value) {
         case ",":
-          parseState = "beforeArrayValue";
+          parseState2 = "beforeArrayValue";
           return;
         case "]":
           pop();
@@ -109495,18 +109724,18 @@ var require_parse = __commonJS(function(exports, module) {
     if (value3 !== null && typeof value3 === "object") {
       stack.push(value3);
       if (Array.isArray(value3)) {
-        parseState = "beforeArrayValue";
+        parseState2 = "beforeArrayValue";
       } else {
-        parseState = "beforePropertyName";
+        parseState2 = "beforePropertyName";
       }
     } else {
       const current = stack[stack.length - 1];
       if (current == null) {
-        parseState = "end";
+        parseState2 = "end";
       } else if (Array.isArray(current)) {
-        parseState = "afterArrayValue";
+        parseState2 = "afterArrayValue";
       } else {
-        parseState = "afterPropertyValue";
+        parseState2 = "afterPropertyValue";
       }
     }
   }
@@ -109514,11 +109743,11 @@ var require_parse = __commonJS(function(exports, module) {
     stack.pop();
     const current = stack[stack.length - 1];
     if (current == null) {
-      parseState = "end";
+      parseState2 = "end";
     } else if (Array.isArray(current)) {
-      parseState = "afterArrayValue";
+      parseState2 = "afterArrayValue";
     } else {
-      parseState = "afterPropertyValue";
+      parseState2 = "afterPropertyValue";
     }
   }
   function invalidChar(c3) {
@@ -110353,14 +110582,14 @@ var require_lib5 = __commonJS(function(exports) {
 });
 
 // src/ui/project.ts
-import { access as access2, lstat as lstat3, readFile as readFile21, realpath as realpath2 } from "node:fs/promises";
+import { access as access2, lstat as lstat3, readFile as readFile22, realpath as realpath2 } from "node:fs/promises";
 import path5 from "node:path";
 async function exists(target2) {
   return access2(target2).then(() => true, () => false);
 }
 async function readManifest(target2) {
   try {
-    return JSON.parse(await readFile21(target2, "utf8"));
+    return JSON.parse(await readFile22(target2, "utf8"));
   } catch (cause) {
     throw new UiError("UI_PROJECT_UNSUPPORTED", "package.json is not valid JSON.", undefined, {
       cause
@@ -110430,7 +110659,7 @@ async function resolveAlias(project2, candidate2) {
 async function resolveUiRegistryTarget(project2, declaredTarget) {
   if (!declaredTarget.startsWith("components/"))
     return declaredTarget;
-  const components = await readFile21(project2.componentsPath, "utf8").then((value3) => JSON.parse(value3)).catch(() => {
+  const components = await readFile22(project2.componentsPath, "utf8").then((value3) => JSON.parse(value3)).catch(() => {
     return;
   });
   const componentsAlias = components?.aliases?.components;
@@ -110500,30 +110729,30 @@ async function discoverUiProject(input = process.cwd()) {
   const packageJsonPath = path5.join(root, "package.json");
   const packageJson = await readManifest(packageJsonPath);
   let manager = "npm";
-  let lockPath;
+  let lockPath2;
   for (const [file2, candidate2] of MANAGERS) {
     const target2 = path5.join(root, file2);
     if (await exists(target2)) {
       manager = candidate2;
-      lockPath = target2;
+      lockPath2 = target2;
       break;
     }
   }
   const declared = packageJson.packageManager;
-  if (!lockPath && typeof declared === "string") {
+  if (!lockPath2 && typeof declared === "string") {
     const candidate2 = declared.split("@")[0];
     if (candidate2 === "pnpm" || candidate2 === "npm" || candidate2 === "yarn" || candidate2 === "bun") {
       manager = candidate2;
     }
   }
-  if (!lockPath) {
+  if (!lockPath2) {
     const expectedLock = {
       pnpm: "pnpm-lock.yaml",
       npm: "package-lock.json",
       yarn: "yarn.lock",
       bun: "bun.lock"
     }[manager];
-    lockPath = path5.join(root, expectedLock);
+    lockPath2 = path5.join(root, expectedLock);
   }
   const rootCssCandidates = ["src/index.css", "src/app.css", "app/globals.css", "src/styles.css"];
   const frontendCssCandidates = [
@@ -110532,7 +110761,7 @@ async function discoverUiProject(input = process.cwd()) {
     "frontend/src/styles.css"
   ];
   const componentsPath = path5.join(root, "components.json");
-  const configuredCss = await readFile21(componentsPath, "utf8").then((value3) => {
+  const configuredCss = await readFile22(componentsPath, "utf8").then((value3) => {
     const components = JSON.parse(value3);
     const css = components.tailwind?.css;
     if (typeof css !== "string" || css.length === 0)
@@ -110558,7 +110787,7 @@ async function discoverUiProject(input = process.cwd()) {
     packageJsonPath,
     packageJson,
     manager,
-    lockPath,
+    lockPath: lockPath2,
     cssPath: path5.join(root, cssRelative),
     componentsPath,
     uiLockPath: path5.join(root, "astrale-ui.lock.json"),
@@ -110843,13 +111072,13 @@ var init_runner = __esm(() => {
 });
 
 // src/ui/operations.ts
-import { access as access3, lstat as lstat4, mkdir as mkdir13, readFile as readFile22, realpath as realpath3, rm as rm8, writeFile as writeFile9 } from "node:fs/promises";
+import { access as access3, lstat as lstat4, mkdir as mkdir13, readFile as readFile23, realpath as realpath3, rm as rm9, writeFile as writeFile9 } from "node:fs/promises";
 import path6 from "node:path";
 async function exists2(target2) {
   return access3(target2).then(() => true, () => false);
 }
 async function readOptional(target2) {
-  return readFile22(target2, "utf8").catch(() => {
+  return readFile23(target2, "utf8").catch(() => {
     return;
   });
 }
@@ -110963,7 +111192,7 @@ async function appendPnpmWorkspace(project2, workspace) {
 async function hasDomainRegistryWorkspace(project2) {
   if (!project2.isAstraleDomain || !await exists2(domainRegistryPackagePath(project2)))
     return false;
-  const registryManifest = JSON.parse(await readFile22(domainRegistryPackagePath(project2), "utf8"));
+  const registryManifest = JSON.parse(await readFile23(domainRegistryPackagePath(project2), "utf8"));
   if (registryManifest.private !== true || typeof registryManifest.name !== "string" || registryManifest.name === UI_PACKAGE || registryManifest.name === project2.packageJson.name) {
     return false;
   }
@@ -111143,13 +111372,13 @@ async function initUi(options, dependencies = {}) {
       if (value3 !== undefined)
         await writeFile9(target2, value3, "utf8");
       else
-        await rm8(target2, { force: true });
+        await rm9(target2, { force: true });
     }
     throw error52;
   }
 }
 async function pinUiDependency(project2, version2, section, runner) {
-  const manifest = JSON.parse(await readFile22(project2.packageJsonPath, "utf8"));
+  const manifest = JSON.parse(await readFile23(project2.packageJsonPath, "utf8"));
   const current = manifestDependencies(manifest, section)[UI_PACKAGE];
   const other = section === "dependencies" ? "devDependencies" : "dependencies";
   if (current === version2 && manifestDependencies(manifest, other)[UI_PACKAGE] === undefined)
@@ -111187,7 +111416,7 @@ async function addLocalTheme(address, project2, options) {
   if (!THEME_SLUG.test(slug)) {
     throw new UiError("UI_ITEM_CONFLICT", "Local theme filename must be a kebab-case theme name.", "Rename it to a name such as observatory.css.");
   }
-  const source2 = await readFile22(sourcePath, "utf8");
+  const source2 = await readFile23(sourcePath, "utf8");
   admitLocalThemeCss(source2, slug);
   return installThemeCss(slug, source2, digest5(source2), address, project2, options);
 }
@@ -111236,7 +111465,7 @@ async function installThemeCss(slug, source2, sourceDigest, sourceLabel, project
   } catch (error52) {
     for (const [mutation, previous] of snapshots) {
       if (previous === undefined)
-        await rm8(mutation, { force: true });
+        await rm9(mutation, { force: true });
       else
         await writeFile9(mutation, previous, "utf8");
     }
@@ -111331,7 +111560,7 @@ async function addUi(addresses, options, dependencies = {}) {
   } catch (error52) {
     for (const [target2, previous] of snapshots) {
       if (previous === undefined)
-        await rm8(target2, { force: true });
+        await rm9(target2, { force: true });
       else
         await writeFile9(target2, previous, "utf8");
     }
@@ -111362,7 +111591,7 @@ async function addUi(addresses, options, dependencies = {}) {
         if (!file2.target)
           continue;
         const target2 = await safeTarget(project2, resolvedTargets.get(file2.target));
-        files[projectRelative(project2, target2)] = digest5(await readFile22(target2));
+        files[projectRelative(project2, target2)] = digest5(await readFile23(target2));
       }
       lock.items[item.meta.canonicalAddress] = {
         address: item.meta.canonicalAddress,
@@ -111374,7 +111603,7 @@ async function addUi(addresses, options, dependencies = {}) {
   } catch (error52) {
     for (const [target2, previous] of snapshots) {
       if (previous === undefined)
-        await rm8(target2, { force: true });
+        await rm9(target2, { force: true });
       else
         await writeFile9(target2, previous, "utf8");
     }
@@ -111394,7 +111623,7 @@ async function doctorUi(input) {
   const checks3 = [];
   let lock;
   try {
-    lock = parseUiLock(JSON.parse(await readFile22(project2.uiLockPath, "utf8")));
+    lock = parseUiLock(JSON.parse(await readFile23(project2.uiLockPath, "utf8")));
     checks3.push({ check: "lock", ok: true });
   } catch (error52) {
     checks3.push({
@@ -111422,7 +111651,7 @@ async function doctorUi(input) {
   if (lock) {
     for (const item of Object.values(lock.items)) {
       for (const [file2, expected] of Object.entries(item.files)) {
-        const actual = await readFile22(path6.join(project2.root, file2)).then(digest5).catch(() => "");
+        const actual = await readFile23(path6.join(project2.root, file2)).then(digest5).catch(() => "");
         checks3.push({ check: "item:" + item.address + ":" + file2, ok: actual === expected });
       }
     }
@@ -111475,7 +111704,7 @@ async function rejectLocalChanges(project2, lock, items, overwrite) {
     if (!installed)
       continue;
     for (const [file2, expected] of Object.entries(installed.files)) {
-      const actual = await readFile22(path6.join(project2.root, file2)).then(digest5).catch(() => "");
+      const actual = await readFile23(path6.join(project2.root, file2)).then(digest5).catch(() => "");
       if (actual !== expected) {
         throw new UiError("UI_LOCAL_CHANGES", "Installed UI file has local changes: " + file2, "Review the file, then repeat add with explicit --overwrite --yes.");
       }
@@ -111775,7 +112004,7 @@ var init_model8 = __esm(() => {
 
 // src/ui/search/artifacts.ts
 import { createHash as createHash5 } from "node:crypto";
-import { readFile as readFile23 } from "node:fs/promises";
+import { readFile as readFile24 } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
 import path7 from "node:path";
 function cacheBase(commit, configured) {
@@ -111832,14 +112061,14 @@ function verify3(bytes, file2) {
   return bytes.byteLength === file2.bytes && createHash5("sha256").update(bytes).digest("hex") === file2.sha256;
 }
 async function readVerifiedCache(target2, file2) {
-  const bytes = await readFile23(target2).catch(() => {
+  const bytes = await readFile24(target2).catch(() => {
     return;
   });
   return bytes && verify3(bytes, file2) ? bytes : undefined;
 }
 async function readManifestCache(target2) {
   try {
-    return acceptSearchManifest(JSON.parse(await readFile23(target2, "utf8")));
+    return acceptSearchManifest(JSON.parse(await readFile24(target2, "utf8")));
   } catch {
     return;
   }
@@ -114174,9 +114403,9 @@ __export(exports_register, {
   formatIdentityRegistration: () => formatIdentityRegistration,
   prepareIdentityProvision: () => prepareIdentityProvision
 });
-import { readFile as readFile24 } from "node:fs/promises";
+import { readFile as readFile25 } from "node:fs/promises";
 async function readJwk(path9) {
-  return JSON.parse(await readFile24(path9, "utf8"));
+  return JSON.parse(await readFile25(path9, "utf8"));
 }
 function formatIdentityRegistration(result, format3, machine) {
   output(result, format3);
@@ -114191,7 +114420,7 @@ async function prepareIdentityProvision(input) {
     builder.createNode({ as: binding6, class: input.classPath, props: input.properties });
     return;
   });
-  const registrationKey = idempotencyKey("identity-register", input.name);
+  const registrationKey = await derivedIdempotencyKey("identity-register", input.name);
   const unsigned = exports_provision.accept({
     idempotencyKey: registrationKey,
     mutation,
@@ -114584,7 +114813,7 @@ var exports_import = {};
 __export(exports_import, {
   default: () => import_default
 });
-import { readFile as readFile25 } from "node:fs/promises";
+import { readFile as readFile26 } from "node:fs/promises";
 var import_default;
 var init_import2 = __esm(() => {
   init_identity7();
@@ -114612,7 +114841,7 @@ var init_import2 = __esm(() => {
     ],
     action: async (path9, opts) => {
       try {
-        const raw2 = await readFile25(path9, "utf-8");
+        const raw2 = await readFile26(path9, "utf-8");
         const passphrase = isEncryptedIdentityExport(raw2) ? await readPassphrase("Passphrase: ") : undefined;
         const envelope = await decodeIdentityExport(raw2, passphrase);
         const name = opts.name ?? envelope.subject;
@@ -114967,21 +115196,21 @@ var init_status5 = __esm(() => {
 
 // src/telemetry/store.ts
 import { existsSync as existsSync11, readdirSync as readdirSync2, readFileSync as readFileSync4, statSync as statSync3 } from "node:fs";
-import { join as join23 } from "node:path";
+import { join as join24 } from "node:path";
 function sessionsRoot() {
-  return join23(createPaths().home, "sessions");
+  return join24(createPaths().home, "sessions");
 }
 function sessionDir(id) {
-  return join23(sessionsRoot(), id);
+  return join24(sessionsRoot(), id);
 }
 function eventsPath(id) {
-  return join23(sessionDir(id), "events.jsonl");
+  return join24(sessionDir(id), "events.jsonl");
 }
 function metaPath(id) {
-  return join23(sessionDir(id), "meta.json");
+  return join24(sessionDir(id), "meta.json");
 }
 function markerPath(id) {
-  return join23(sessionDir(id), ".analyzed");
+  return join24(sessionDir(id), ".analyzed");
 }
 function sessionIds() {
   try {
@@ -115013,7 +115242,7 @@ function directoryBytes2(dir) {
   }
   let total = 0;
   for (const entry2 of entries) {
-    const path9 = join23(dir, entry2.name);
+    const path9 = join24(dir, entry2.name);
     if (entry2.isDirectory()) {
       total += directoryBytes2(path9);
     } else if (entry2.isFile()) {
@@ -115103,12 +115332,12 @@ var init_list4 = __esm(() => {
 // src/telemetry/adapters/claude-code.ts
 import { existsSync as existsSync12, readdirSync as readdirSync3, statSync as statSync4 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 function mungeCwd(cwd) {
   return cwd.replace(/[^a-zA-Z0-9]/g, "-");
 }
-function claudeCodeAdapter(base2 = join24(homedir7(), ".claude")) {
-  const projectsDir = join24(base2, "projects");
+function claudeCodeAdapter(base2 = join25(homedir7(), ".claude")) {
+  const projectsDir = join25(base2, "projects");
   function detect2() {
     try {
       return existsSync12(projectsDir);
@@ -115132,7 +115361,7 @@ function claudeCodeAdapter(base2 = join24(homedir7(), ".claude")) {
       for (const dir of dirs) {
         if (dir !== munged && !dir.startsWith(prefix))
           continue;
-        const projectPath = join24(projectsDir, dir);
+        const projectPath = join25(projectsDir, dir);
         let files;
         try {
           files = readdirSync3(projectPath);
@@ -115142,7 +115371,7 @@ function claudeCodeAdapter(base2 = join24(homedir7(), ".claude")) {
         for (const file2 of files) {
           if (!file2.endsWith(".jsonl"))
             continue;
-          const transcriptPath = join24(projectPath, file2);
+          const transcriptPath = join25(projectPath, file2);
           try {
             const st = statSync4(transcriptPath);
             const mtimeMs = st.mtime.getTime();
@@ -115178,7 +115407,7 @@ var init_claude_code = __esm(() => {
 import { existsSync as existsSync13, openSync as openSync3, readdirSync as readdirSync4, readSync, statSync as statSync5 } from "node:fs";
 import { closeSync as closeSync4 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 function readFirstLine(path9) {
   let fd = null;
   try {
@@ -115218,8 +115447,8 @@ function numericDirs(path9) {
     return [];
   }
 }
-function codexAdapter(base2 = join25(homedir8(), ".codex")) {
-  const sessionsDir = join25(base2, "sessions");
+function codexAdapter(base2 = join26(homedir8(), ".codex")) {
+  const sessionsDir = join26(base2, "sessions");
   function detect2() {
     try {
       return existsSync13(sessionsDir);
@@ -115232,14 +115461,14 @@ function codexAdapter(base2 = join25(homedir8(), ".codex")) {
     try {
       const startMs = window2.start.getTime();
       const endMs = window2.end.getTime();
-      const lowerMs = startMs - DAY_MS;
+      const lowerMs = startMs - DAY_MS2;
       for (const yyyy of numericDirs(sessionsDir)) {
-        for (const mm of numericDirs(join25(sessionsDir, yyyy))) {
-          for (const dd of numericDirs(join25(sessionsDir, yyyy, mm))) {
+        for (const mm of numericDirs(join26(sessionsDir, yyyy))) {
+          for (const dd of numericDirs(join26(sessionsDir, yyyy, mm))) {
             const dayStart = Date.UTC(Number(yyyy), Number(mm) - 1, Number(dd));
-            if (dayStart > endMs + DAY_MS || dayStart + DAY_MS <= lowerMs)
+            if (dayStart > endMs + DAY_MS2 || dayStart + DAY_MS2 <= lowerMs)
               continue;
-            scanDay(join25(sessionsDir, yyyy, mm, dd), root, startMs, endMs, sessions);
+            scanDay(join26(sessionsDir, yyyy, mm, dd), root, startMs, endMs, sessions);
           }
         }
       }
@@ -115261,7 +115490,7 @@ function scanDay(dayPath, root, startMs, endMs, out) {
   for (const file2 of files) {
     if (!file2.startsWith("rollout-") || !file2.endsWith(".jsonl"))
       continue;
-    const transcriptPath = join25(dayPath, file2);
+    const transcriptPath = join26(dayPath, file2);
     try {
       const st = statSync5(transcriptPath);
       const mtimeMs = st.mtime.getTime();
@@ -115298,9 +115527,9 @@ function scanDay(dayPath, root, startMs, endMs, out) {
     } catch {}
   }
 }
-var DAY_MS, HEAD_CHUNK, MAX_HEAD_BYTES, READING_GUIDE2;
+var DAY_MS2, HEAD_CHUNK, MAX_HEAD_BYTES, READING_GUIDE2;
 var init_codex = __esm(() => {
-  DAY_MS = 24 * 60 * 60 * 1000;
+  DAY_MS2 = 24 * 60 * 60 * 1000;
   HEAD_CHUNK = 64 * 1024;
   MAX_HEAD_BYTES = 512 * 1024;
   READING_GUIDE2 = "This is a Codex rollout: one JSON object per line (JSONL). Line 1 is `session_meta` (session_id, " + "timestamp, cwd, cli_version). Later lines are either `response_item` — payload.type of message, " + "function_call, function_call_output, or reasoning (reasoning is a short summary, not verbatim chain " + "of thought) — or `event_msg` carrying task_started, task_complete, token_count, agent_message, and " + "user_message. Files can be large, so grep for function_call names, outputs, or error strings and " + "sample around them rather than reading the whole rollout.";
@@ -115447,7 +115676,7 @@ var init_settings = __esm(() => {
 
 // src/telemetry/retention.ts
 import { readdirSync as readdirSync5, rmSync as rmSync2 } from "node:fs";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 function tidySession(id, options = {}) {
   const dir = sessionDir(id);
   let entries;
@@ -115463,7 +115692,7 @@ function tidySession(id, options = {}) {
     if (entry2.name === ANALYZER_PROMPT && options.keepPrompt === true)
       continue;
     try {
-      rmSync2(join26(dir, entry2.name), { recursive: true, force: true });
+      rmSync2(join27(dir, entry2.name), { recursive: true, force: true });
       removed.push(entry2.name);
     } catch {}
   }
@@ -115539,7 +115768,7 @@ var init_retention = __esm(() => {
 // src/telemetry/analyze.ts
 import { spawn as spawn3 } from "node:child_process";
 import { writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 function writeMarker(id, marker) {
   writeFileSync3(markerPath(id), JSON.stringify(marker, null, 2) + `
 `);
@@ -115646,7 +115875,7 @@ async function analyzeSession(id, opts = {}) {
   const guides = new Map(adapters.map((a) => [a.name, a.readingGuide]));
   const prompt = buildPrompt({ id, root, signals: signals2, guides, file: opts.file ?? false });
   const dir = sessionDir(id);
-  writeFileSync3(join27(dir, "analyzer-prompt.md"), prompt);
+  writeFileSync3(join28(dir, "analyzer-prompt.md"), prompt);
   const outcome = await runClaude(prompt, dir, opts);
   const marker = {
     analyzedAt: new Date().toISOString(),
@@ -115655,7 +115884,7 @@ async function analyzeSession(id, opts = {}) {
   };
   writeMarker(id, marker);
   tidySession(id, { keepPrompt: marker.outcome === "error" });
-  return { ...marker, reportPath: join27(dir, "report.md") };
+  return { ...marker, reportPath: join28(dir, "report.md") };
 }
 function runClaude(prompt, cwd, opts) {
   return new Promise((resolve9) => {
@@ -115685,7 +115914,7 @@ function runClaude(prompt, cwd, opts) {
     child3.on("close", (code) => {
       clearTimeout(timer);
       try {
-        writeFileSync3(join27(cwd, "analyzer.log"), clampLog(out + (err ? `
+        writeFileSync3(join28(cwd, "analyzer.log"), clampLog(out + (err ? `
 --- stderr ---
 ${err}` : "")));
       } catch {}
@@ -115718,18 +115947,18 @@ var init_analyze = __esm(() => {
 
 // src/telemetry/trigger.ts
 import { existsSync as existsSync14, mkdirSync as mkdirSync4, readFileSync as readFileSync7, unlinkSync as unlinkSync3, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join28 } from "node:path";
-function lockPath() {
-  return join28(sessionsRoot(), ".analyzer.lock");
+import { join as join29 } from "node:path";
+function lockPath2() {
+  return join29(sessionsRoot(), ".analyzer.lock");
 }
 function releaseLock() {
   try {
-    unlinkSync3(lockPath());
+    unlinkSync3(lockPath2());
   } catch {}
 }
 function restampLock() {
   try {
-    writeFileSync4(lockPath(), JSON.stringify({ pid: process.pid, at: Date.now() }));
+    writeFileSync4(lockPath2(), JSON.stringify({ pid: process.pid, at: Date.now() }));
   } catch {}
 }
 var LOCK_STALE_MS;
@@ -115816,7 +116045,7 @@ var exports_add2 = {};
 __export(exports_add2, {
   default: () => add_default2
 });
-import { readFile as readFile26 } from "node:fs/promises";
+import { readFile as readFile27 } from "node:fs/promises";
 function isString(value3) {
   return typeof value3 === "string";
 }
@@ -115878,7 +116107,7 @@ Security:
       if (!opts.issuer && !opts.metadata && !opts.workosAuthkit) {
         throw new Error("Either --issuer, --metadata, or --workos-authkit is required");
       }
-      let metadata = opts.workosAuthkit ? workosAuthKitMetadata(opts.workosApiHostname, opts.clientId) : opts.metadata ? OidcMetadataSchema.parse(JSON.parse(await readFile26(opts.metadata, "utf-8"))) : await fetchOidcMetadata(opts.issuer);
+      let metadata = opts.workosAuthkit ? workosAuthKitMetadata(opts.workosApiHostname, opts.clientId) : opts.metadata ? OidcMetadataSchema.parse(JSON.parse(await readFile27(opts.metadata, "utf-8"))) : await fetchOidcMetadata(opts.issuer);
       if (opts.issuer) {
         validateUrl(opts.issuer);
         if (normalizeIssuer2(metadata.issuer) !== normalizeIssuer2(opts.issuer)) {
@@ -116254,9 +116483,9 @@ import {
   rmSync as rmSync3,
   writeFileSync as writeFileSync7
 } from "node:fs";
-import { dirname as dirname17, join as join32, relative as relative2, resolve as resolve9, sep } from "node:path";
+import { dirname as dirname17, join as join33, relative as relative2, resolve as resolve9, sep } from "node:path";
 function dotDir(domainRoot) {
-  return join32(domainRoot, DOT);
+  return join33(domainRoot, DOT);
 }
 function assertInsideDot(domainRoot, target2) {
   const abs = resolve9(target2);
@@ -116276,7 +116505,7 @@ function assertInsideDot(domainRoot, target2) {
   let prefix = root;
   for (const part of ["", ...parts]) {
     if (part)
-      prefix = join32(prefix, part);
+      prefix = join33(prefix, part);
     try {
       lstatSync2(prefix);
     } catch (error52) {
@@ -116298,13 +116527,13 @@ function assertInsideDot(domainRoot, target2) {
   return abs;
 }
 function ensureDir(domainRoot, subpath = "") {
-  const target2 = subpath ? join32(dotDir(domainRoot), subpath) : dotDir(domainRoot);
+  const target2 = subpath ? join33(dotDir(domainRoot), subpath) : dotDir(domainRoot);
   assertInsideDot(domainRoot, target2);
   mkdirSync7(target2, { recursive: true });
   return target2;
 }
 function writeState(domainRoot, subpath, contents) {
-  const target2 = join32(dotDir(domainRoot), subpath);
+  const target2 = join33(dotDir(domainRoot), subpath);
   const abs = assertInsideDot(domainRoot, target2);
   mkdirSync7(dirname17(abs), { recursive: true });
   writeFileSync7(abs, contents);
@@ -116313,16 +116542,16 @@ function writeJson2(domainRoot, subpath, value3) {
   writeState(domainRoot, subpath, JSON.stringify(value3, null, 2));
 }
 function writeStateBuffer(domainRoot, subpath, data4) {
-  const target2 = join32(dotDir(domainRoot), subpath);
+  const target2 = join33(dotDir(domainRoot), subpath);
   const abs = assertInsideDot(domainRoot, target2);
   mkdirSync7(dirname17(abs), { recursive: true });
   writeFileSync7(abs, data4);
 }
-function statePath(domainRoot, subpath) {
-  return assertInsideDot(domainRoot, join32(dotDir(domainRoot), subpath));
+function statePath2(domainRoot, subpath) {
+  return assertInsideDot(domainRoot, join33(dotDir(domainRoot), subpath));
 }
 function readState(domainRoot, subpath) {
-  const target2 = assertInsideDot(domainRoot, join32(dotDir(domainRoot), subpath));
+  const target2 = assertInsideDot(domainRoot, join33(dotDir(domainRoot), subpath));
   if (!existsSync18(target2))
     return null;
   return readFileSync10(target2, "utf8");
@@ -116337,19 +116566,19 @@ function readJson2(domainRoot, subpath, decode12, fallback) {
   return decode12(parsed) ?? fallback;
 }
 function listState(domainRoot, subpath) {
-  const target2 = assertInsideDot(domainRoot, join32(dotDir(domainRoot), subpath));
+  const target2 = assertInsideDot(domainRoot, join33(dotDir(domainRoot), subpath));
   if (!existsSync18(target2))
     return [];
   return readdirSync7(target2);
 }
 function removeState(domainRoot, subpath) {
-  const target2 = join32(dotDir(domainRoot), subpath);
+  const target2 = join33(dotDir(domainRoot), subpath);
   const abs = assertInsideDot(domainRoot, target2);
   if (existsSync18(abs))
     rmSync3(abs, { recursive: true, force: true });
 }
 function stateExists(domainRoot, subpath) {
-  return existsSync18(assertInsideDot(domainRoot, join32(dotDir(domainRoot), subpath)));
+  return existsSync18(assertInsideDot(domainRoot, join33(dotDir(domainRoot), subpath)));
 }
 function initDotDir(domainRoot) {
   ensureDir(domainRoot);
@@ -116838,7 +117067,7 @@ var init_routes2 = __esm(() => {
 // studio/server/agent/bridge/grant.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { chmodSync as chmodSync2 } from "node:fs";
-import { join as join33 } from "node:path";
+import { join as join34 } from "node:path";
 function setBridgePort(port) {
   studioPort = port;
 }
@@ -116849,7 +117078,7 @@ function startBridge(handle, notify) {
   const base2 = `http://127.0.0.1:${studioPort}/api/domain/${encodeURIComponent(handle.id)}/agent/bridge`;
   const bridgeRel = `.cache/agent/bridge-${fileId}.json`;
   writeJson2(handle.root, bridgeRel, { base: base2, token });
-  const bridgeConfigPath = statePath(handle.root, bridgeRel);
+  const bridgeConfigPath = statePath2(handle.root, bridgeRel);
   chmodSync2(bridgeConfigPath, 384);
   let bridgeCommand;
   try {
@@ -116906,7 +117135,7 @@ var init_grant2 = __esm(() => {
     raise_question: "raise_question"
   };
   studioPort = Number(process.env.PORT) || 4319;
-  MCP_SERVER = join33(import.meta.dir, "stdio.ts");
+  MCP_SERVER = join34(import.meta.dir, "stdio.ts");
 });
 
 // studio/shared/schema/identity.ts
@@ -116946,7 +117175,7 @@ var init_types = __esm(() => {
 
 // studio/server/client-package.ts
 import { existsSync as existsSync19, readFileSync as readFileSync11, statSync as statSync7 } from "node:fs";
-import { isAbsolute as isAbsolute2, join as join34, relative as relative3, resolve as resolve10 } from "node:path";
+import { isAbsolute as isAbsolute2, join as join35, relative as relative3, resolve as resolve10 } from "node:path";
 async function resolveClientPackage(root, force = false) {
   const projectDir = resolve10(root);
   const inputs = discoverInputs(projectDir);
@@ -116969,7 +117198,7 @@ function invalidateClientPackage(root) {
   cache2.delete(resolve10(root));
 }
 function discoverInputs(projectDir) {
-  const rootPackageFile = join34(projectDir, "package.json");
+  const rootPackageFile = join35(projectDir, "package.json");
   let rootPackage;
   try {
     if (existsSync19(rootPackageFile))
@@ -116990,7 +117219,7 @@ function discoverInputs(projectDir) {
   }
 }
 function resolveDiscovery(projectDir, rootPackage, inspectedFiles) {
-  const rootPackageFile = join34(projectDir, "package.json");
+  const rootPackageFile = join35(projectDir, "package.json");
   const candidates = [];
   for (const packageFile of inspectedFiles) {
     if (packageFile === rootPackageFile)
@@ -117031,7 +117260,7 @@ function resolveDiscovery(projectDir, rootPackage, inspectedFiles) {
   return unavailable3("This domain has no package that defines a dev:hmr script.");
 }
 function discoverPackageFiles(projectDir, rootPackage) {
-  const workspaceFile = join34(projectDir, "pnpm-workspace.yaml");
+  const workspaceFile = join35(projectDir, "pnpm-workspace.yaml");
   const patterns2 = [...packageWorkspacePatterns(rootPackage)];
   if (existsSync19(workspaceFile)) {
     const workspace2 = $parse(readFileSync11(workspaceFile, "utf8"));
@@ -117117,7 +117346,7 @@ function inside(root, file2) {
 function inputFingerprint(projectDir, packageFiles) {
   return [
     fileFingerprint(projectDir),
-    fileFingerprint(join34(projectDir, "pnpm-workspace.yaml")),
+    fileFingerprint(join35(projectDir, "pnpm-workspace.yaml")),
     ...packageFiles.map(fileFingerprint)
   ].join("|");
 }
@@ -125201,7 +125430,7 @@ ${lanes.join(`
           writeOutputIsTTY() {
             return process.stdout.isTTY;
           },
-          readFile: readFile27,
+          readFile: readFile28,
           writeFile: writeFile22,
           watchFile: watchFile2,
           watchDirectory,
@@ -125394,7 +125623,7 @@ ${lanes.join(`
         function fsWatchWorker(fileOrDirectory, recursive, callback) {
           return _fs.watch(fileOrDirectory, fsSupportsRecursiveFsWatch ? { persistent: true, recursive: !!recursive } : { persistent: true }, callback);
         }
-        function readFile27(fileName, _encoding) {
+        function readFile28(fileName, _encoding) {
           let buffer;
           try {
             buffer = _fs.readFileSync(fileName);
@@ -156023,7 +156252,7 @@ ${lanes.join(`
       const possibleOption = getSpellingSuggestion(unknownOption, diagnostics.optionDeclarations, getOptionName);
       return possibleOption ? createDiagnosticForNodeInSourceFileOrCompilerDiagnostic(sourceFile, node5, diagnostics.unknownDidYouMeanDiagnostic, unknownOptionErrorText || unknownOption, possibleOption.name) : createDiagnosticForNodeInSourceFileOrCompilerDiagnostic(sourceFile, node5, diagnostics.unknownOptionDiagnostic, unknownOptionErrorText || unknownOption);
     }
-    function parseCommandLineWorker(diagnostics, commandLine, readFile27) {
+    function parseCommandLineWorker(diagnostics, commandLine, readFile28) {
       const options = {};
       let watchOptions;
       const fileNames = [];
@@ -156061,7 +156290,7 @@ ${lanes.join(`
         }
       }
       function parseResponseFile(fileName) {
-        const text13 = tryReadFile(fileName, readFile27 || ((fileName2) => sys.readFile(fileName2)));
+        const text13 = tryReadFile(fileName, readFile28 || ((fileName2) => sys.readFile(fileName2)));
         if (!isString2(text13)) {
           errors7.push(text13);
           return;
@@ -156164,8 +156393,8 @@ ${lanes.join(`
       unknownDidYouMeanDiagnostic: Diagnostics.Unknown_compiler_option_0_Did_you_mean_1,
       optionTypeMismatchDiagnostic: Diagnostics.Compiler_option_0_expects_an_argument
     };
-    function parseCommandLine(commandLine, readFile27) {
-      return parseCommandLineWorker(compilerOptionsDidYouMeanDiagnostics, commandLine, readFile27);
+    function parseCommandLine(commandLine, readFile28) {
+      return parseCommandLineWorker(compilerOptionsDidYouMeanDiagnostics, commandLine, readFile28);
     }
     function getOptionFromName(optionName, allowShort) {
       return getOptionDeclarationFromName(getOptionsNameMap, optionName, allowShort);
@@ -156233,8 +156462,8 @@ ${lanes.join(`
       result.originalFileName = result.fileName;
       return parseJsonSourceFileConfigFileContent(result, host, getNormalizedAbsolutePath(getDirectoryPath(configFileName), cwd), optionsToExtend, getNormalizedAbsolutePath(configFileName, cwd), undefined, extraFileExtensions, extendedConfigCache, watchOptionsToExtend);
     }
-    function readConfigFile(fileName, readFile27) {
-      const textOrDiagnostic = tryReadFile(fileName, readFile27);
+    function readConfigFile(fileName, readFile28) {
+      const textOrDiagnostic = tryReadFile(fileName, readFile28);
       return isString2(textOrDiagnostic) ? parseConfigFileTextToJson(fileName, textOrDiagnostic) : { config: {}, error: textOrDiagnostic };
     }
     function parseConfigFileTextToJson(fileName, jsonText) {
@@ -156244,14 +156473,14 @@ ${lanes.join(`
         error: jsonSourceFile.parseDiagnostics.length ? jsonSourceFile.parseDiagnostics[0] : undefined
       };
     }
-    function readJsonConfigFile(fileName, readFile27) {
-      const textOrDiagnostic = tryReadFile(fileName, readFile27);
+    function readJsonConfigFile(fileName, readFile28) {
+      const textOrDiagnostic = tryReadFile(fileName, readFile28);
       return isString2(textOrDiagnostic) ? parseJsonText(fileName, textOrDiagnostic) : { fileName, parseDiagnostics: [textOrDiagnostic] };
     }
-    function tryReadFile(fileName, readFile27) {
+    function tryReadFile(fileName, readFile28) {
       let text13;
       try {
-        text13 = readFile27(fileName);
+        text13 = readFile28(fileName);
       } catch (e) {
         return createCompilerDiagnostic(Diagnostics.Cannot_read_file_0_Colon_1, fileName, e.message);
       }
@@ -223007,12 +223236,12 @@ ${lanes.join(`
     function createCompilerHost(options, setParentNodes) {
       return createCompilerHostWorker(options, setParentNodes);
     }
-    function createGetSourceFile(readFile27, setParentNodes) {
+    function createGetSourceFile(readFile28, setParentNodes) {
       return (fileName, languageVersionOrOptions, onError) => {
         let text13;
         try {
           mark("beforeIORead");
-          text13 = readFile27(fileName);
+          text13 = readFile28(fileName);
           mark("afterIORead");
           measure("I/O Read", "beforeIORead", "afterIORead");
         } catch (e) {
@@ -223838,7 +224067,7 @@ ${lanes.join(`
         getSourceOfProjectReferenceRedirect,
         forEachResolvedProjectReference: forEachResolvedProjectReference2
       });
-      const readFile27 = host.readFile.bind(host);
+      const readFile28 = host.readFile.bind(host);
       (_e = tracing) == null || _e.push(tracing.Phase.Program, "shouldProgramCreateNewSourceFiles", { hasOldProgram: !!oldProgram });
       const shouldCreateNewSourceFile = shouldProgramCreateNewSourceFiles(oldProgram, options);
       (_f = tracing) == null || _f.pop();
@@ -224014,7 +224243,7 @@ ${lanes.join(`
         shouldTransformImportCall,
         emitBuildInfo,
         fileExists: fileExists2,
-        readFile: readFile27,
+        readFile: readFile28,
         directoryExists: directoryExists2,
         getSymlinkCache,
         realpath: (_o = host.realpath) == null ? undefined : _o.bind(host),
@@ -292113,7 +292342,7 @@ var require_path_browserify = __commonJS(function(exports, module) {
       assertPath(path9);
       return path9.length > 0 && path9.charCodeAt(0) === 47;
     },
-    join: function join35() {
+    join: function join36() {
       if (arguments.length === 0)
         return ".";
       var joined;
@@ -348042,16 +348271,16 @@ Node text: ${this.#forgottenText}`;
 
 // studio/server/domain.ts
 import { existsSync as existsSync20, readFileSync as readFileSync12, statSync as statSync8 } from "node:fs";
-import { basename, dirname as dirname18, extname, isAbsolute as isAbsolute3, join as join35, relative as relative4, resolve as resolve11 } from "node:path";
+import { basename, dirname as dirname18, extname, isAbsolute as isAbsolute3, join as join36, relative as relative4, resolve as resolve11 } from "node:path";
 function makeId(root) {
   return basename(resolve11(root)).replace(/[^a-zA-Z0-9_-]/g, "-") || "domain";
 }
 function resolveApplicationEntry(root) {
   const project2 = resolve11(root);
-  const conventional = join35(project2, "application.ts");
+  const conventional = join36(project2, "application.ts");
   if (existsSync20(conventional))
     return conventional;
-  const config2 = join35(project2, "astrale.config.ts");
+  const config2 = join36(project2, "astrale.config.ts");
   if (!existsSync20(config2))
     return null;
   let source2;
@@ -348093,7 +348322,7 @@ function resolveSchemaEntry(root, applicationFile) {
 }
 function isDomainDir(root) {
   const project2 = resolve11(root);
-  if (!existsSync20(join35(project2, "astrale.config.ts")))
+  if (!existsSync20(join36(project2, "astrale.config.ts")))
     return false;
   const application = resolveApplicationEntry(project2);
   return application !== null && resolveSchemaEntry(project2, application) !== null;
@@ -348101,7 +348330,7 @@ function isDomainDir(root) {
 function registerDomain(root) {
   const project2 = resolve11(root);
   const applicationFile = resolveApplicationEntry(project2);
-  if (applicationFile === null || !existsSync20(join35(project2, "astrale.config.ts")))
+  if (applicationFile === null || !existsSync20(join36(project2, "astrale.config.ts")))
     return null;
   const schemaIndex = resolveSchemaEntry(project2, applicationFile);
   if (schemaIndex === null)
@@ -348110,7 +348339,7 @@ function registerDomain(root) {
   const handle = {
     id: makeId(project2),
     root: project2,
-    configFile: join35(project2, "astrale.config.ts"),
+    configFile: join36(project2, "astrale.config.ts"),
     applicationFile,
     schemaDirName: relative4(project2, schemaDir).replaceAll("\\", "/") || ".",
     schemaDir,
@@ -348133,7 +348362,7 @@ function allDomains() {
   return [...registry2.values()];
 }
 function depsInstalled(root) {
-  if (existsSync20(join35(root, "node_modules", "@astrale-os", "sdk")))
+  if (existsSync20(join36(root, "node_modules", "@astrale-os", "sdk")))
     return true;
   try {
     Bun.resolveSync("@astrale-os/sdk/schema", root);
@@ -348259,8 +348488,8 @@ function sourceCandidates(file2) {
     `${sourceBase}.tsx`,
     `${sourceBase}.mts`,
     `${sourceBase}.cts`,
-    join35(file2, "index.ts"),
-    join35(file2, "index.tsx")
+    join36(file2, "index.ts"),
+    join36(file2, "index.tsx")
   ];
 }
 function isFile(file2) {
@@ -348355,7 +348584,7 @@ var init_settings2 = __esm(() => {
 
 // studio/server/introspect/anatomy/source.ts
 import { existsSync as existsSync21, readFileSync as readFileSync13, readdirSync as readdirSync8, statSync as statSync9 } from "node:fs";
-import { join as join36 } from "node:path";
+import { join as join37 } from "node:path";
 function readTextSafe(file2) {
   try {
     return existsSync21(file2) ? readFileSync13(file2, "utf8") : "";
@@ -348367,7 +348596,7 @@ function listFiles(dir) {
   try {
     return readdirSync8(dir).filter((e) => {
       try {
-        return statSync9(join36(dir, e)).isFile();
+        return statSync9(join37(dir, e)).isFile();
       } catch {
         return false;
       }
@@ -348380,7 +348609,7 @@ function listDirs(dir) {
   try {
     return readdirSync8(dir).filter((e) => {
       try {
-        return statSync9(join36(dir, e)).isDirectory();
+        return statSync9(join37(dir, e)).isDirectory();
       } catch {
         return false;
       }
@@ -348401,7 +348630,7 @@ function listSourceFiles(dir) {
     for (const entry2 of entries) {
       if (SKIP_SOURCE_DIRS.has(entry2))
         continue;
-      const file2 = join36(current, entry2);
+      const file2 = join37(current, entry2);
       let stat4;
       try {
         stat4 = statSync9(file2);
@@ -348517,15 +348746,15 @@ var init_source2 = __esm(() => {
 
 // studio/server/introspect/anatomy/client-tree.ts
 import { existsSync as existsSync22 } from "node:fs";
-import { join as join37 } from "node:path";
-function buildClientTree(root, clientDir = join37(root, "client")) {
-  const srcDir = clientDir ? join37(clientDir, "src") : existsSync22(join37(root, "ui")) ? join37(root, "ui") : "";
+import { join as join38 } from "node:path";
+function buildClientTree(root, clientDir = join38(root, "client")) {
+  const srcDir = clientDir ? join38(clientDir, "src") : existsSync22(join38(root, "ui")) ? join38(root, "ui") : "";
   if (!existsSync22(srcDir)) {
     return { shell: [], features: [], routes: {}, present: false };
   }
-  const shell = listFiles(join37(srcDir, "shell"));
-  const features = listDirs(srcDir).filter((d) => !RESERVED_CLIENT_DIRS.has(d)).map((name) => ({ name, files: listFiles(join37(srcDir, name)) }));
-  const routes = parseRoutes(listFiles(srcDir).filter((file2) => /\.[cm]?[jt]sx?$/.test(file2)).map((file2) => join37(srcDir, file2)));
+  const shell = listFiles(join38(srcDir, "shell"));
+  const features = listDirs(srcDir).filter((d) => !RESERVED_CLIENT_DIRS.has(d)).map((name) => ({ name, files: listFiles(join38(srcDir, name)) }));
+  const routes = parseRoutes(listFiles(srcDir).filter((file2) => /\.[cm]?[jt]sx?$/.test(file2)).map((file2) => join38(srcDir, file2)));
   return { shell, features, routes, present: true };
 }
 function parseRoutes(files) {
@@ -348548,7 +348777,7 @@ var init_client_tree = __esm(() => {
 
 // studio/server/introspect/anatomy/env-fields.ts
 import { existsSync as existsSync23 } from "node:fs";
-import { join as join38 } from "node:path";
+import { join as join39 } from "node:path";
 function cleanDoc(raw2) {
   if (!raw2)
     return;
@@ -348558,7 +348787,7 @@ function cleanDoc(raw2) {
   return text13.length ? text13 : undefined;
 }
 function buildEnvFields(root) {
-  const envFile = join38(root, "env.ts");
+  const envFile = join39(root, "env.ts");
   if (!existsSync23(envFile))
     return [];
   let project2;
@@ -348600,10 +348829,10 @@ var init_env_fields = __esm(() => {
 });
 
 // studio/server/introspect/anatomy/schema-definition.ts
-import { join as join39 } from "node:path";
+import { join as join40 } from "node:path";
 function schemaProject(root, schemaDirName) {
   const project2 = makeProject();
-  return listSourceFiles(join39(root, schemaDirName)).map((file2) => addSource(project2, file2)).filter((source2) => source2 !== null);
+  return listSourceFiles(join40(root, schemaDirName)).map((file2) => addSource(project2, file2)).filter((source2) => source2 !== null);
 }
 function defineSchemaCalls(source2) {
   return source2.getDescendantsOfKind(import_ts_morph4.SyntaxKind.CallExpression).filter((call3) => {
@@ -348634,7 +348863,7 @@ var init_schema_definition = __esm(() => {
 });
 
 // studio/server/introspect/anatomy/views/routes.ts
-import { join as join40, relative as relative5 } from "node:path";
+import { join as join41, relative as relative5 } from "node:path";
 function buildSchemaViewSources(root, schemaDirName) {
   const sources2 = new Map;
   for (const source2 of schemaProject(root, schemaDirName)) {
@@ -348670,7 +348899,7 @@ function buildFrontendViews(root, canonicalViewNames) {
   const project2 = makeProject();
   const application = resolveApplicationEntry(root);
   const applicationFiles = application === null ? [] : [application];
-  const sources2 = [...new Set([...listSourceFiles(join40(root, "views")), ...applicationFiles])].map((file2) => addSource(project2, file2)).filter((source2) => source2 !== null);
+  const sources2 = [...new Set([...listSourceFiles(join41(root, "views")), ...applicationFiles])].map((file2) => addSource(project2, file2)).filter((source2) => source2 !== null);
   const views = [];
   for (const source2 of sources2) {
     for (const call3 of source2.getDescendantsOfKind(import_ts_morph5.SyntaxKind.CallExpression)) {
@@ -348770,7 +348999,7 @@ var init_anatomy_extras = __esm(() => {
 
 // studio/server/introspect/config-preview.ts
 import { readFileSync as readFileSync14 } from "node:fs";
-import { join as join41 } from "node:path";
+import { join as join42 } from "node:path";
 function withoutComments(source2) {
   let output3 = "";
   let quote = null;
@@ -348867,7 +349096,7 @@ function parseConfigPreview(source2) {
 }
 function readConfigPreview(root) {
   try {
-    return parseConfigPreview(readFileSync14(join41(root, "astrale.config.ts"), "utf8"));
+    return parseConfigPreview(readFileSync14(join42(root, "astrale.config.ts"), "utf8"));
   } catch {
     return { adapter: "unknown", configuredSecretFiles: [] };
   }
@@ -348876,7 +349105,7 @@ var init_config_preview = () => {};
 
 // studio/server/introspect/anatomy.ts
 import { existsSync as existsSync24, readFileSync as readFileSync15, readdirSync as readdirSync9, statSync as statSync10 } from "node:fs";
-import { join as join42, relative as relative6 } from "node:path";
+import { join as join43, relative as relative6 } from "node:path";
 function buildAnatomy({
   root,
   schemaDirName,
@@ -348884,7 +349113,7 @@ function buildAnatomy({
   canonicalViews
 }) {
   const schema2 = findSchemaDefinition(root, schemaDirName);
-  const authoredClientDir = clientDir ?? (existsSync24(join42(root, "ui")) ? join42(root, "ui") : undefined);
+  const authoredClientDir = clientDir ?? (existsSync24(join43(root, "ui")) ? join43(root, "ui") : undefined);
   return {
     overview: buildOverview(root, schemaDirName, authoredClientDir, schema2?.origin),
     views: buildViews(root, schemaDirName, canonicalViews),
@@ -348894,7 +349123,7 @@ function buildAnatomy({
   };
 }
 function buildOverview(root, schemaDirName, clientDir, schemaOrigin) {
-  const pkg = readPackageJsonSafe(join42(root, "package.json"));
+  const pkg = readPackageJsonSafe(join43(root, "package.json"));
   const astraleDeps = {};
   for (const [k, v] of Object.entries({
     ...pkg?.dependencies ?? {},
@@ -348906,7 +349135,7 @@ function buildOverview(root, schemaDirName, clientDir, schemaOrigin) {
   const config2 = readConfigPreview(root);
   const application = resolveApplicationEntry(root);
   const applicationSrc = application === null ? "" : readTextSafe2(application);
-  const origin2 = schemaOrigin ?? applicationSrc.match(/defineSchema\(\s*['"]([^'"]+)['"]/)?.[1] ?? readTextSafe2(join42(root, schemaDirName, "index.ts")).match(/defineSchema\(\s*['"]([^'"]+)['"]/)?.[1] ?? "";
+  const origin2 = schemaOrigin ?? applicationSrc.match(/defineSchema\(\s*['"]([^'"]+)['"]/)?.[1] ?? readTextSafe2(join43(root, schemaDirName, "index.ts")).match(/defineSchema\(\s*['"]([^'"]+)['"]/)?.[1] ?? "";
   return {
     origin: origin2,
     applicationFile: application === null ? undefined : relative6(root, application).replaceAll("\\", "/"),
@@ -348922,13 +349151,13 @@ function buildOverview(root, schemaDirName, clientDir, schemaOrigin) {
   };
 }
 function detectIntegrations(root) {
-  const dir = join42(root, readSettings(root).integrationsDir);
+  const dir = join43(root, readSettings(root).integrationsDir);
   if (!existsSync24(dir))
     return [];
   try {
     return readdirSync9(dir).filter((e) => {
       try {
-        return statSync10(join42(dir, e)).isDirectory();
+        return statSync10(join43(dir, e)).isDirectory();
       } catch {
         return false;
       }
@@ -349243,7 +349472,7 @@ var init_project4 = __esm(() => {
 
 // studio/server/introspect/source-overlay/handlers.ts
 import { readdirSync as readdirSync10 } from "node:fs";
-import { join as join43 } from "node:path";
+import { join as join44 } from "node:path";
 function authoredTypeScriptFiles(root) {
   const files = [];
   const visit4 = (directory) => {
@@ -349256,7 +349485,7 @@ function authoredTypeScriptFiles(root) {
     for (const entry2 of entries) {
       if (entry2.isSymbolicLink())
         continue;
-      const path9 = join43(directory, entry2.name);
+      const path9 = join44(directory, entry2.name);
       if (entry2.isDirectory()) {
         if (!IGNORED_DIRECTORIES.has(entry2.name))
           visit4(path9);
@@ -350388,7 +350617,7 @@ function structuralStatusOf(changes) {
 // studio/server/state/baseline.ts
 import { createHash as createHash8 } from "node:crypto";
 import { existsSync as existsSync27, readFileSync as readFileSync17, readdirSync as readdirSync11, statSync as statSync11 } from "node:fs";
-import { join as join44, relative as relative8, resolve as resolve12 } from "node:path";
+import { join as join45, relative as relative8, resolve as resolve12 } from "node:path";
 function sha2562(buf) {
   return createHash8("sha256").update(buf).digest("hex");
 }
@@ -350402,7 +350631,7 @@ function walkFiles(dir, out) {
   for (const e of entries) {
     if (SKIP_DIRS.has(e))
       continue;
-    const full = join44(dir, e);
+    const full = join45(dir, e);
     let st;
     try {
       st = statSync11(full);
@@ -350419,7 +350648,7 @@ function hashAnatomyFiles(root, schemaDirName, applicationFile) {
   const r = resolve12(root);
   const absFiles = [];
   for (const d of [schemaDirName, ...ANATOMY_GLOBS.dirs]) {
-    const abs = join44(r, d);
+    const abs = join45(r, d);
     if (existsSync27(abs)) {
       let st;
       try {
@@ -350434,7 +350663,7 @@ function hashAnatomyFiles(root, schemaDirName, applicationFile) {
     }
   }
   for (const f of ANATOMY_GLOBS.files) {
-    const abs = join44(r, f);
+    const abs = join45(r, f);
     if (existsSync27(abs)) {
       try {
         if (statSync11(abs).isFile())
@@ -350629,7 +350858,7 @@ var init_baseline = __esm(() => {
 // studio/server/cache.ts
 import { createHash as createHash9 } from "node:crypto";
 import { existsSync as existsSync28, readFileSync as readFileSync18 } from "node:fs";
-import { join as join45, relative as relative9 } from "node:path";
+import { join as join46, relative as relative9 } from "node:path";
 function isHandlerLink(value3) {
   const record14 = asJsonRecord(value3);
   return typeof record14?.owner === "string" && ["class", "function"].includes(String(record14.ownerKind)) && ["action", "workflow"].includes(String(record14.kind)) && typeof record14.method === "string" && typeof record14.static === "boolean" && typeof record14.implemented === "boolean";
@@ -350720,10 +350949,10 @@ function bundleCacheKey(root, schemaDirName, applicationFile) {
     hash2.update(`${file2}\x00${digest7}\x00`);
   }
   for (const file2 of LOCKFILES)
-    hashFileIfPresent(hash2, file2, join45(root, file2));
+    hashFileIfPresent(hash2, file2, join46(root, file2));
   const serverRoot = import.meta.dir;
   for (const file2 of TOOL_INPUTS) {
-    const abs = join45(serverRoot, file2);
+    const abs = join46(serverRoot, file2);
     hashFileIfPresent(hash2, `tool:${relative9(serverRoot, abs)}`, abs);
   }
   return hash2.digest("hex");
@@ -351166,7 +351395,7 @@ var init_token3 = __esm(() => {
 // studio/server/agent/harness/gateway/config.ts
 import { chmodSync as chmodSync3, existsSync as existsSync29, mkdirSync as mkdirSync8, readFileSync as readFileSync19, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "node:fs";
 import { homedir as homedir9 } from "node:os";
-import { dirname as dirname20, join as join46 } from "node:path";
+import { dirname as dirname20, join as join47 } from "node:path";
 function normalizeAuth(input) {
   const record14 = asJsonRecord(input);
   if (record14?.mode === "token" || record14?.token != null && record14?.mode == null)
@@ -351250,7 +351479,7 @@ function setHarnessGateway(root, input) {
     removeState(root, LOCAL_FILE);
   } else {
     writeJson2(root, LOCAL_FILE, cfg);
-    chmodSync3(statePath(root, LOCAL_FILE), 384);
+    chmodSync3(statePath2(root, LOCAL_FILE), 384);
   }
   return getHarnessGatewayState(root);
 }
@@ -351309,13 +351538,13 @@ var LOCAL_FILE = "harness-gateway.json", GLOBAL_FILE;
 var init_config2 = __esm(() => {
   init_store2();
   init_token3();
-  GLOBAL_FILE = join46(homedir9(), ".domain-studio", "harness-gateway.json");
+  GLOBAL_FILE = join47(homedir9(), ".domain-studio", "harness-gateway.json");
 });
 
 // studio/server/agent/harness/skills.ts
 import { existsSync as existsSync30, readdirSync as readdirSync12, readFileSync as readFileSync20 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
-import { dirname as dirname21, join as join47 } from "node:path";
+import { dirname as dirname21, join as join48 } from "node:path";
 function readSkillMeta(skillMd) {
   let text13;
   try {
@@ -351348,7 +351577,7 @@ function scanSkillDir(dir, source2, plugin, commandPrefix, loaded, out, seen) {
     return;
   }
   for (const entry2 of entries) {
-    const skillMd = join47(dir, entry2, "SKILL.md");
+    const skillMd = join48(dir, entry2, "SKILL.md");
     if (!existsSync30(skillMd))
       continue;
     const command = commandPrefix + entry2;
@@ -351372,7 +351601,7 @@ function scanAncestors(root, dirs, out, seen) {
   let current = root;
   for (let i = 0;i < 12 && current !== home; i++) {
     for (const dir of dirs)
-      scanSkillDir(join47(current, dir), "project", undefined, "", true, out, seen);
+      scanSkillDir(join48(current, dir), "project", undefined, "", true, out, seen);
     const parent = dirname21(current);
     if (parent === current)
       break;
@@ -351623,7 +351852,7 @@ function writeClaudeMcpConfig(root, servers) {
     ]))
   });
   return {
-    path: statePath(root, rel),
+    path: statePath2(root, rel),
     dispose: () => {
       try {
         removeState(root, rel);
@@ -351845,9 +352074,9 @@ var init_events = __esm(() => {
 // studio/server/agent/harness/claude/skills.ts
 import { readFileSync as readFileSync21 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
-import { join as join48 } from "node:path";
+import { join as join49 } from "node:path";
 function installedPluginDirs() {
-  const file2 = join48(homedir11(), ".claude", "plugins", "installed_plugins.json");
+  const file2 = join49(homedir11(), ".claude", "plugins", "installed_plugins.json");
   let parsed;
   try {
     parsed = JSON.parse(readFileSync21(file2, "utf8"));
@@ -351873,10 +352102,10 @@ function scanClaudeSkills(root) {
   const seen = new Set;
   const home = homedir11();
   scanAncestors(root, [".claude/skills", ".agents/skills"], out, seen);
-  scanSkillDir(join48(home, ".claude", "skills"), "user", undefined, "", true, out, seen);
-  scanSkillDir(join48(home, ".agents", "skills"), "user", undefined, "", true, out, seen);
+  scanSkillDir(join49(home, ".claude", "skills"), "user", undefined, "", true, out, seen);
+  scanSkillDir(join49(home, ".agents", "skills"), "user", undefined, "", true, out, seen);
   for (const { plugin, installPath } of installedPluginDirs())
-    scanSkillDir(join48(installPath, "skills"), "plugin", plugin, `${plugin}:`, true, out, seen);
+    scanSkillDir(join49(installPath, "skills"), "plugin", plugin, `${plugin}:`, true, out, seen);
   return out;
 }
 var init_skills4 = __esm(() => {
@@ -352639,16 +352868,16 @@ var init_models = __esm(() => {
 
 // studio/server/agent/harness/codex/skills.ts
 import { homedir as homedir12 } from "node:os";
-import { join as join49 } from "node:path";
+import { join as join50 } from "node:path";
 function scanCodexSkills(root, plugins) {
   const out = [];
   const seen = new Set;
   const home = homedir12();
   scanAncestors(root, [".agents/skills", ".codex/skills"], out, seen);
-  scanSkillDir(join49(home, ".agents", "skills"), "user", undefined, "", true, out, seen);
-  scanSkillDir(join49(home, ".codex", "skills"), "user", undefined, "", true, out, seen);
+  scanSkillDir(join50(home, ".agents", "skills"), "user", undefined, "", true, out, seen);
+  scanSkillDir(join50(home, ".codex", "skills"), "user", undefined, "", true, out, seen);
   for (const plugin of plugins)
-    scanSkillDir(join49(plugin.path, "skills"), "plugin", plugin.name, `${plugin.name}:`, plugin.enabled, out, seen);
+    scanSkillDir(join50(plugin.path, "skills"), "plugin", plugin.name, `${plugin.name}:`, plugin.enabled, out, seen);
   return out;
 }
 var init_skills5 = __esm(() => {
@@ -352792,7 +353021,7 @@ var init_adapter2 = __esm(() => {
 
 // studio/server/agent/harness/mock/domain-edit.ts
 import { existsSync as existsSync31, readFileSync as readFileSync22, readdirSync as readdirSync13, writeFileSync as writeFileSync9 } from "node:fs";
-import { join as join50 } from "node:path";
+import { join as join51 } from "node:path";
 function identifier(text14, fallback) {
   const words = text14.toLowerCase().replace(/[^a-z0-9 ]+/g, " ").trim().split(/\s+/).filter(Boolean).slice(0, 3);
   if (words.length === 0)
@@ -352800,13 +353029,13 @@ function identifier(text14, fallback) {
   return words.map((word, index3) => index3 === 0 ? word : word[0].toUpperCase() + word.slice(1)).join("");
 }
 function applyMockDomainEdit(root, instruction) {
-  const schemaDir = join50(root, "schema");
+  const schemaDir = join51(root, "schema");
   if (!existsSync31(schemaDir))
     return null;
   const files = readdirSync13(schemaDir).filter((file2) => file2.endsWith(".ts") && file2 !== "index.ts");
   const propName = identifier(instruction, "agentNote");
   for (const file2 of files) {
-    const absolute = join50(schemaDir, file2);
+    const absolute = join51(schemaDir, file2);
     const source2 = readFileSync22(absolute, "utf8");
     const props4 = source2.indexOf("props: {");
     if (props4 < 0)
@@ -354087,7 +354316,7 @@ function uniqueStoredPath(root, docs, name) {
   const taken = new Set(docs.map((doc2) => doc2.stored));
   for (let attempt = 0;; attempt++) {
     const candidate2 = `${DIR}/${slug}${attempt === 0 ? "" : `-${attempt + 1}`}${extension}`;
-    if (!taken.has(candidate2) && !existsSync33(statePath(root, candidate2)))
+    if (!taken.has(candidate2) && !existsSync33(statePath2(root, candidate2)))
       return candidate2;
   }
 }
@@ -354099,7 +354328,7 @@ function migrateDocuments(root) {
   for (const doc2 of docs) {
     if (!doc2.stored.startsWith(`${LEGACY_DIR}/`))
       continue;
-    const from2 = statePath(root, doc2.stored);
+    const from2 = statePath2(root, doc2.stored);
     if (!existsSync33(from2))
       continue;
     const next = uniqueStoredPath(root, docs, doc2.name);
@@ -354184,7 +354413,7 @@ function readDocument2(root, id) {
   const doc2 = listDocuments(root).find((d) => d.id === id);
   if (!doc2)
     return null;
-  const abs = statePath(root, doc2.stored);
+  const abs = statePath2(root, doc2.stored);
   if (!existsSync33(abs))
     return null;
   return { meta: doc2, abs };
@@ -355113,10 +355342,10 @@ var init_deploy_record = __esm(() => {
 
 // studio/server/instances/deploy.ts
 import { readFileSync as readFileSync24 } from "node:fs";
-import { join as join51 } from "node:path";
+import { join as join52 } from "node:path";
 function hasProdScript(root) {
   try {
-    const pkg = JSON.parse(readFileSync24(join51(root, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync24(join52(root, "package.json"), "utf8"));
     return typeof pkg?.scripts?.prod === "string";
   } catch {
     return false;
@@ -355448,10 +355677,10 @@ function parseDotenvPreview(contents) {
 
 // studio/server/environment/files.ts
 import { existsSync as existsSync34, readFileSync as readFileSync25, writeFileSync as writeFileSync10 } from "node:fs";
-import { join as join52, resolve as resolve14 } from "node:path";
+import { join as join53, resolve as resolve14 } from "node:path";
 function readEnvModel(root, env2) {
   const file2 = envFileName(env2);
-  const abs = join52(root, file2);
+  const abs = join53(root, file2);
   const exists4 = existsSync34(abs);
   const values = exists4 ? parseDotenvPreview(readFileSync25(abs, "utf8")) : {};
   const declared = buildEnvFields(root).filter((f) => f.secret);
@@ -355519,7 +355748,7 @@ function applyUpdates2(contents, updates) {
 `);
 }
 function writeEnvUpdates(root, env2, updates) {
-  const abs = join52(root, envFileName(env2));
+  const abs = join53(root, envFileName(env2));
   if (!resolve14(abs).startsWith(resolve14(root)))
     throw new Error("refused: path escapes the domain root");
   const prior = existsSync34(abs) ? readFileSync25(abs, "utf8") : SCAFFOLD_HEADER(env2);
@@ -357851,7 +358080,7 @@ var init_sse = __esm(() => {
 });
 
 // studio/server/watch.ts
-import { join as join55, relative as relative13 } from "node:path";
+import { join as join56, relative as relative13 } from "node:path";
 function ignored(p) {
   return p.includes("node_modules") || p.includes(".domain-studio") || p.includes(".astrale") || p.includes(".dist");
 }
@@ -357865,7 +358094,7 @@ function watchDomain(handle) {
     ignoreInitial: true,
     ignored
   });
-  const anatomyW = esm_default.watch(ANATOMY_PATHS.map((p) => join55(handle.root, p)), { ignoreInitial: true, ignored });
+  const anatomyW = esm_default.watch(ANATOMY_PATHS.map((p) => join56(handle.root, p)), { ignoreInitial: true, ignored });
   let st;
   let at;
   schemaW.on("all", () => {
@@ -357954,7 +358183,7 @@ var init_workspace_state = __esm(() => {
 
 // studio/server/workspace/create.ts
 import { existsSync as existsSync35, readFileSync as readFileSync26, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join56 } from "node:path";
+import { join as join57 } from "node:path";
 async function run2(cmd, args, cwd) {
   try {
     const proc = Bun.spawn([cmd, ...args], {
@@ -357986,7 +358215,7 @@ async function createDomain2(rawName, instance) {
   const root = workspaceRoot();
   if (!root)
     return { ok: false, error: "No workspace root is configured.", output: "" };
-  const dir = join56(root, name);
+  const dir = join57(root, name);
   if (existsSync35(dir)) {
     return {
       ok: false,
@@ -358151,7 +358380,7 @@ var init_api2 = __esm(() => {
 
 // studio/server/detect.ts
 import { existsSync as existsSync36, lstatSync as lstatSync3, readdirSync as readdirSync14 } from "node:fs";
-import { dirname as dirname25, join as join57, resolve as resolve17 } from "node:path";
+import { dirname as dirname25, join as join58, resolve as resolve17 } from "node:path";
 function resolveTarget2(target2) {
   const abs = resolve17(target2);
   if (abs.endsWith("astrale.config.ts")) {
@@ -358185,7 +358414,7 @@ function scanWorkspace(workspace2, maxDepth = 4) {
     for (const e of entries) {
       if (IGNORE.has(e) || e.startsWith("."))
         continue;
-      const full = join57(dir, e);
+      const full = join58(dir, e);
       let st;
       try {
         st = lstatSync3(full);
@@ -358317,16 +358546,16 @@ var init_workspace_watch = __esm(() => {
 // studio/server/index.ts
 var exports_server = {};
 import { existsSync as existsSync37, statSync as statSync12 } from "node:fs";
-import { dirname as dirname26, join as join58, resolve as resolve18 } from "node:path";
+import { dirname as dirname26, join as join59, resolve as resolve18 } from "node:path";
 function serveStatic(pathname) {
   const rel = pathname === "/" ? "index.html" : pathname.replace(/^\//, "");
-  const file2 = join58(DIST, rel);
+  const file2 = join59(DIST, rel);
   if (existsSync37(file2) && !file2.endsWith("/") && rel !== "index.html") {
     return new Response(Bun.file(file2), {
       headers: { "cache-control": "public, max-age=31536000, immutable" }
     });
   }
-  const index3 = join58(DIST, "index.html");
+  const index3 = join59(DIST, "index.html");
   if (existsSync37(index3))
     return new Response(Bun.file(index3), {
       headers: { "content-type": "text/html", "cache-control": "no-store" }
@@ -358388,7 +358617,7 @@ var init_server2 = __esm(async () => {
   initWorkspaceState(watchRoot);
   if (existsSync37(watchRoot) && statSync12(watchRoot).isDirectory())
     watchWorkspace(watchRoot, stoppers);
-  DIST = process.env.DOMAIN_STUDIO_DIST || join58(import.meta.dir, "..", "client", "dist");
+  DIST = process.env.DOMAIN_STUDIO_DIST || join59(import.meta.dir, "..", "client", "dist");
   DEV = process.env.DOMAIN_STUDIO_DEV === "1";
   VITE = process.env.VITE_URL || "http://localhost:5173";
   HOST = process.env.DOMAIN_STUDIO_HOST || "127.0.0.1";
@@ -358437,22 +358666,22 @@ var init_server2 = __esm(async () => {
 // studio/server/introspect/extractor.ts
 var exports_extractor = {};
 import { existsSync as existsSync38 } from "node:fs";
-import { mkdtemp as mkdtemp3, readFile as readFile27, rm as rm9, writeFile as writeFile10 } from "node:fs/promises";
+import { mkdtemp as mkdtemp3, readFile as readFile28, rm as rm10, writeFile as writeFile10 } from "node:fs/promises";
 import { createRequire as createRequire2 } from "node:module";
 import { tmpdir as tmpdir2 } from "node:os";
-import { dirname as dirname27, join as join59 } from "node:path";
+import { dirname as dirname27, join as join60 } from "node:path";
 import { pathToFileURL } from "node:url";
 async function installedSdkSchema(root) {
   let directory = root;
   for (;; ) {
-    const packageRoot = join59(directory, "node_modules", "@astrale-os", "sdk");
-    const manifestPath = join59(packageRoot, "package.json");
+    const packageRoot = join60(directory, "node_modules", "@astrale-os", "sdk");
+    const manifestPath = join60(packageRoot, "package.json");
     if (existsSync38(manifestPath)) {
-      const manifest = JSON.parse(await readFile27(manifestPath, "utf8"));
+      const manifest = JSON.parse(await readFile28(manifestPath, "utf8"));
       const exported = manifest.exports?.["./schema"];
       const target3 = typeof exported === "string" ? exported : exported?.import ?? exported?.default ?? exported?.types;
       if (target3)
-        return join59(packageRoot, target3);
+        return join60(packageRoot, target3);
       throw new Error(`${manifestPath} does not export @astrale-os/sdk/schema`);
     }
     const parent = dirname27(directory);
@@ -358476,10 +358705,10 @@ function buildFailure(cause) {
 async function main() {
   if (!schemaPath)
     throw new Error("extractor: missing <schemaPath>");
-  const temporary = await mkdtemp3(join59(tmpdir2(), "astrale-studio-extractor-"));
+  const temporary = await mkdtemp3(join60(tmpdir2(), "astrale-studio-extractor-"));
   try {
     const sdkPath = await installedSdkSchema(projectRoot);
-    const wrapper = join59(temporary, "entry.ts");
+    const wrapper = join60(temporary, "entry.ts");
     await writeFile10(wrapper, `import * as authored from ${JSON.stringify(schemaPath)};
 ` + `import * as sdk from ${JSON.stringify(sdkPath)};
 ` + `export { authored, sdk };
@@ -358507,7 +358736,7 @@ async function main() {
       throw new Error("schema bundle produced no entrypoint");
     const source2 = await output3.text();
     const module = { exports: {} };
-    const require2 = createRequire2(pathToFileURL(join59(projectRoot, "package.json")));
+    const require2 = createRequire2(pathToFileURL(join60(projectRoot, "package.json")));
     const factory = new Function(`return (
 ${source2}
 );`)();
@@ -358528,7 +358757,7 @@ ${source2}
       revision: extraction.revision
     }));
   } finally {
-    await rm9(temporary, { recursive: true, force: true });
+    await rm10(temporary, { recursive: true, force: true });
   }
 }
 var schemaPath, projectRoot;
@@ -358919,14 +359148,14 @@ init_proc();
 init_prompt();
 init_skills();
 init_update();
-import { readFile as readFile9, rm as rm5 } from "node:fs/promises";
-import { join as join9 } from "node:path";
+import { readFile as readFile10, rm as rm6 } from "node:fs/promises";
+import { join as join10 } from "node:path";
 var CACHE_VERSION = 1;
 var CACHE_TTL_MS = 24 * 60 * 60 * 1000;
 var CHECK_TIMEOUT_MS = 4000;
 var REEXEC_ENV = "ASTRALE_UPDATE_REEXEC";
 function cachePath() {
-  return join9(paths2.home, "update-notice.json");
+  return join10(paths2.home, "update-notice.json");
 }
 function parseCache(value) {
   if (!value || typeof value !== "object")
@@ -358939,7 +359168,7 @@ function parseCache(value) {
 }
 async function readCache() {
   try {
-    return parseCache(JSON.parse(await readFile9(cachePath(), "utf8")));
+    return parseCache(JSON.parse(await readFile10(cachePath(), "utf8")));
   } catch {
     return;
   }
@@ -359034,14 +359263,14 @@ async function updateAndReexec(release, argv) {
     return false;
   log.step(`Updating Astrale ${release.currentVersion} → ${release.latestVersion}`);
   const environment = { ...process.env, [REEXEC_ENV]: "1" };
-  const updated = await runInherit(execution.executable, ["update", "--yes", "--no-deps"], {
+  const updated = await runInherit(execution.executable, ["update", "--no-deps"], {
     env: environment
   });
   if (updated !== 0) {
     log.warn("Automatic update did not complete; continuing with the current command.");
     return false;
   }
-  await rm5(cachePath(), { force: true }).catch(() => {
+  await rm6(cachePath(), { force: true }).catch(() => {
     return;
   });
   const resumed = await runInherit(execution.executable, argv.slice(2), { env: environment });
@@ -359070,6 +359299,15 @@ async function offerReleaseUpdate(argv) {
 }
 async function offerSkillMaintenance() {
   const state2 = await checkAstraleSkills();
+  if (state2.installed === false) {
+    const { configureAstraleSkills: configureAstraleSkills2, renderSkillConfigureOutcome: renderSkillConfigureOutcome2 } = await Promise.resolve().then(() => (init_configure(), exports_configure));
+    try {
+      renderSkillConfigureOutcome2(await configureAstraleSkills2({ source: "reminder" }));
+    } catch (error52) {
+      log.warn(`Skill configuration could not be offered; run \`astrale skills configure\`. ${error52 instanceof Error ? error52.message : String(error52)}`);
+    }
+    return;
+  }
   if (state2.status !== "update-available" && state2.status !== "repair-needed")
     return;
   const label = state2.status === "repair-needed" ? "need repair" : "have an update available";
@@ -359165,7 +359403,15 @@ function registerCommand(parent, def) {
   }
   if (def.options) {
     for (const opt of def.options) {
-      if (opt.choices) {
+      if (opt.hidden) {
+        const o = new Option2(opt.flags, opt.description);
+        if (opt.choices)
+          o.choices(opt.choices);
+        if (opt.default !== undefined)
+          o.default(opt.default);
+        o.hideHelp();
+        cmd.addOption(o);
+      } else if (opt.choices) {
         const o = new Option2(opt.flags, opt.description);
         o.choices(opt.choices);
         if (opt.default !== undefined)
@@ -359428,12 +359674,12 @@ function redactArgv(argv) {
 init_store();
 import { createHash as createHash6 } from "node:crypto";
 import { existsSync as existsSync15, mkdirSync as mkdirSync5, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname16, join as join29 } from "node:path";
+import { dirname as dirname16, join as join30 } from "node:path";
 var MAX_ID_LEN = 64;
 function findGitRoot(start) {
   let dir = start;
   for (;; ) {
-    if (existsSync15(join29(dir, ".git")))
+    if (existsSync15(join30(dir, ".git")))
       return dir;
     const parent = dirname16(dir);
     if (parent === dir)
@@ -359543,19 +359789,19 @@ function beginInvocation(argv, sessions) {
 // src/telemetry/store.ts
 init_state();
 import { existsSync as existsSync16, readdirSync as readdirSync6, readFileSync as readFileSync8, statSync as statSync6 } from "node:fs";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 var IDLE_WINDOW_MS2 = 30 * 60 * 1000;
 function sessionsRoot2() {
-  return join30(createPaths().home, "sessions");
+  return join31(createPaths().home, "sessions");
 }
 function sessionDir2(id) {
-  return join30(sessionsRoot2(), id);
+  return join31(sessionsRoot2(), id);
 }
 function eventsPath2(id) {
-  return join30(sessionDir2(id), "events.jsonl");
+  return join31(sessionDir2(id), "events.jsonl");
 }
 function markerPath2(id) {
-  return join30(sessionDir2(id), ".analyzed");
+  return join31(sessionDir2(id), ".analyzed");
 }
 function sessionIds2() {
   try {
@@ -359585,13 +359831,13 @@ init_settings();
 init_store();
 import { spawn as spawn4 } from "node:child_process";
 import { existsSync as existsSync17, mkdirSync as mkdirSync6, readFileSync as readFileSync9, unlinkSync as unlinkSync4, writeFileSync as writeFileSync6 } from "node:fs";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 var LOCK_STALE_MS2 = 30 * 60 * 1000;
-function lockPath2() {
-  return join31(sessionsRoot(), ".analyzer.lock");
+function lockPath3() {
+  return join32(sessionsRoot(), ".analyzer.lock");
 }
 function claimLock() {
-  const path9 = lockPath2();
+  const path9 = lockPath3();
   try {
     if (existsSync17(path9)) {
       const lock = JSON.parse(readFileSync9(path9, "utf-8"));