@calliopelabs/cli 2.3.0 → 3.0.0

package/dist/setup.js

@@ -93,7 +93,7 @@ export async function runSetup(force = false) {
             message: 'Enter your Ollama base URL:',
             default: 'http://localhost:11434',
         });
-        config.set('ollamaBaseUrl', baseUrl);
+        config.setProviderCred('ollama', { baseUrl });
     }
     else if (providerChoice === 'litellm' && needsKey) {
         console.log();
@@ -102,7 +102,7 @@ export async function runSetup(force = false) {
             message: 'Enter your LiteLLM proxy URL:',
             default: 'http://localhost:4000',
         });
-        config.set('litellmBaseUrl', baseUrl);
+        config.setProviderCred('litellm', { baseUrl });
         const needsApiKey = await confirm({
             message: 'Does your LiteLLM proxy require an API key?',
             default: false,
@@ -113,7 +113,7 @@ export async function runSetup(force = false) {
                 mask: '*',
             });
             if (apiKey && apiKey.length > 0) {
-                config.set('litellmApiKey', apiKey);
+                config.setProviderCred('litellm', { apiKey });
             }
         }
     }
@@ -124,7 +124,7 @@ export async function runSetup(force = false) {
             message: 'Enter your Bedrock gateway/proxy URL:',
             default: 'http://localhost:8080',
         });
-        config.set('bedrockBaseUrl', baseUrl);
+        config.setProviderCred('bedrock', { baseUrl });
         const needsApiKey = await confirm({
             message: 'Does your Bedrock gateway require an API key?',
             default: false,
@@ -135,7 +135,7 @@ export async function runSetup(force = false) {
                 mask: '*',
             });
             if (apiKey && apiKey.length > 0) {
-                config.set('bedrockApiKey', apiKey);
+                config.setProviderCred('bedrock', { apiKey });
             }
         }
     }
@@ -144,11 +144,13 @@ export async function runSetup(force = false) {
         console.log(c('  Any server that speaks the OpenAI chat completions API.', 'dim'));
         console.log(c('  Examples: AnythingLLM (port 3001), LocalAI (8080), Jan (1337), LM Studio (1234), vLLM (8000)', 'dim'));
         const baseUrl = await input({ message: 'Enter base URL:', default: 'http://localhost:1234/v1' });
-        config.set('openaiCompatBaseUrl', baseUrl);
+        config.setProviderCred('openai-compat', { baseUrl });
         const needsApiKey = await confirm({ message: 'Does this server require an API key?', default: false });
         if (needsApiKey) {
             const apiKey = await input({ message: 'Enter API key:' });
-            config.set('openaiCompatApiKey', apiKey);
+            if (apiKey && apiKey.length > 0) {
+                config.setProviderCred('openai-compat', { apiKey });
+            }
         }
     }
     else if (needsKey) {
@@ -195,42 +197,9 @@ export async function runSetup(force = false) {
                 return true;
             },
         });
-        // Store the key
-        const keyMap = {
-            anthropic: 'anthropicApiKey',
-            google: 'googleApiKey',
-            openai: 'openaiApiKey',
-            openrouter: 'openrouterApiKey',
-            together: 'togetherApiKey',
-            groq: 'groqApiKey',
-            fireworks: 'fireworksApiKey',
-            mistral: 'mistralApiKey',
-            ai21: 'ai21ApiKey',
-            huggingface: 'huggingfaceApiKey',
-        };
-        if (keyMap[providerChoice]) {
-            config.set(keyMap[providerChoice], apiKey);
-        }
+        // Store the key under the provider's nested credentials.
+        config.setProviderCred(providerChoice, { apiKey });
     }
-    // Persona selection
-    console.log();
-    const personaChoice = await select({
-        message: 'Choose Calliope\'s personality:',
-        choices: [
-            { value: 'calliope', name: 'Calliope (Recommended)', description: 'Clear, concise, and thorough' },
-            { value: 'muse', name: 'Muse (Poetic)', description: 'Creative with artistic flair' },
-            { value: 'minimal', name: 'Minimal', description: 'Extremely brief and efficient' },
-        ],
-        default: 'calliope',
-    });
-    config.set('persona', personaChoice);
-    // Fancy output
-    console.log();
-    const fancyOutput = await confirm({
-        message: 'Enable fancy terminal output (colors, spinners, ASCII art)?',
-        default: true,
-    });
-    config.set('fancyOutput', fancyOutput);
     // Optional: Additional providers
     console.log();
     const addMore = await confirm({
@@ -248,7 +217,6 @@ export async function runSetup(force = false) {
     console.log(c('  Setup complete!', 'green'));
     console.log();
     console.log(`  ${c('Provider:', 'dim')} ${c(providerChoice, 'cyan')}`);
-    console.log(`  ${c('Persona:', 'dim')} ${c(personaChoice, 'magenta')}`);
     console.log(`  ${c('Config:', 'dim')} ${c(config.getConfigPath(), 'dim')}`);
     console.log();
     console.log(c('  Type your first message to begin, or /help for commands.', 'dim'));
@@ -261,22 +229,22 @@ export async function runSetup(force = false) {
  */
 async function configureAdditionalProviders(existingEnvProviders) {
     const providers = [
-        { id: 'anthropic', name: 'Anthropic Claude', envKey: 'ANTHROPIC_API_KEY', configKey: 'anthropicApiKey' },
-        { id: 'google', name: 'Google Gemini', envKey: 'GOOGLE_API_KEY', configKey: 'googleApiKey' },
-        { id: 'openai', name: 'OpenAI GPT', envKey: 'OPENAI_API_KEY', configKey: 'openaiApiKey' },
-        { id: 'openrouter', name: 'OpenRouter', envKey: 'OPENROUTER_API_KEY', configKey: 'openrouterApiKey' },
-        { id: 'together', name: 'Together AI', envKey: 'TOGETHER_API_KEY', configKey: 'togetherApiKey' },
-        { id: 'groq', name: 'Groq', envKey: 'GROQ_API_KEY', configKey: 'groqApiKey' },
-        { id: 'mistral', name: 'Mistral AI', envKey: 'MISTRAL_API_KEY', configKey: 'mistralApiKey' },
-        { id: 'ai21', name: 'AI21 Labs', envKey: 'AI21_API_KEY', configKey: 'ai21ApiKey' },
-        { id: 'huggingface', name: 'HuggingFace', envKey: 'HUGGINGFACE_API_KEY', configKey: 'huggingfaceApiKey' },
+        { id: 'anthropic', name: 'Anthropic Claude', envKey: 'ANTHROPIC_API_KEY' },
+        { id: 'google', name: 'Google Gemini', envKey: 'GOOGLE_API_KEY' },
+        { id: 'openai', name: 'OpenAI GPT', envKey: 'OPENAI_API_KEY' },
+        { id: 'openrouter', name: 'OpenRouter', envKey: 'OPENROUTER_API_KEY' },
+        { id: 'together', name: 'Together AI', envKey: 'TOGETHER_API_KEY' },
+        { id: 'groq', name: 'Groq', envKey: 'GROQ_API_KEY' },
+        { id: 'mistral', name: 'Mistral AI', envKey: 'MISTRAL_API_KEY' },
+        { id: 'ai21', name: 'AI21 Labs', envKey: 'AI21_API_KEY' },
+        { id: 'huggingface', name: 'HuggingFace', envKey: 'HUGGINGFACE_API_KEY' },
     ];
     for (const provider of providers) {
         // Skip if already configured via env or selected as primary
         if (existingEnvProviders.includes(provider.id)) {
             continue;
         }
-        const existing = config.get(provider.configKey);
+        const existing = config.getProviderCred(provider.id).apiKey;
         if (existing) {
             continue;
         }
@@ -290,7 +258,7 @@ async function configureAdditionalProviders(existingEnvProviders) {
                 mask: '*',
             });
             if (apiKey && apiKey.length > 10) {
-                config.set(provider.configKey, apiKey);
+                config.setProviderCred(provider.id, { apiKey });
                 console.log(c(`  ✓ ${provider.name} configured`, 'green'));
             }
         }

package/dist/setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup.js","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,KAAK,IAAI,CAAC,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,MAAM,GAAG;EACb,CAAC,CAAC,8DAA8D,EAAE,YAAY,CAAC;EAC/E,CAAC,CAAC,8DAA8D,EAAE,YAAY,CAAC;EAC/E,CAAC,CAAC,8DAA8D,EAAE,MAAM,CAAC;EACzE,CAAC,CAAC,8DAA8D,EAAE,MAAM,CAAC;EACzE,CAAC,CAAC,8DAA8D,EAAE,YAAY,CAAC;EAC/E,CAAC,CAAC,8DAA8D,EAAE,MAAM,CAAC;;UAEjE,CAAC,CAAC,0BAA0B,EAAE,KAAK,CAAC;CAC7C,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAK,GAAG,KAAK;IAC1C,0BAA0B;IAC1B,IAAI,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,2CAA2C;IAC3C,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9F,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAAE,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE3E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,oCAAoC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,qBAAqB;IACrB,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC;QAClC,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,gCAAgC,EAAE,WAAW,EAAE,mCAAmC,EAAE;YAChH,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,qCAAqC,EAAE;YAC9F,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE;YAC1E,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,oCAAoC,EAAE;YAC9F,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,qCAAqC,EAAE;YAC9F,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,sBAAsB,EAAE;YACpE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,6BAA6B,EAAE;YACpF,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,wCAAwC,EAAE;YAClG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,sCAAsC,EAAE;YAChG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,+BAA+B,EAAE;YACvF,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,kCAAkC,EAAE,WAAW,EAAE,wEAAwE,EAAE;YAC3J,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE;YACjE,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,6BAA6B,EAAE;YACzF,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,WAAW,EAAE,8CAA8C,EAAE;SACnH;QACD,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,WAAW;KACxC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,cAA6B,CAAC,CAAC;IAE7D,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,cAAc,KAAK,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAErF,sEAAsE;IACtE,IAAI,cAAc,KAAK,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC;YAC1B,OAAO,EAAE,6BAA6B;YACtC,OAAO,EAAE,wBAAwB;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;SAAM,IAAI,cAAc,KAAK,SAAS,IAAI,QAAQ,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,qDAAqD,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC;YAC1B,OAAO,EAAE,+BAA+B;YACxC,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAEtC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC;YAChC,OAAO,EAAE,6CAA6C;YACtD,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;gBAC5B,OAAO,EAAE,6BAA6B;gBACtC,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YACH,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,cAAc,KAAK,SAAS,IAAI,QAAQ,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,uEAAuE,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC;YAC1B,OAAO,EAAE,uCAAuC;YAChD,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAEtC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC;YAChC,OAAO,EAAE,+CAA+C;YACxD,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;gBAC5B,OAAO,EAAE,qCAAqC;gBAC9C,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YACH,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,cAAc,KAAK,eAAe,IAAI,QAAQ,EAAE,CAAC;QAC1D,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,2DAA2D,EAAE,KAAK,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,gGAAgG,EAAE,KAAK,CAAC,CAAC,CAAC;QACxH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACvG,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,gCAAgC,cAAc,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAEzE,MAAM,UAAU,GAA2B;YACzC,SAAS,EAAE,6CAA6C;YACxD,MAAM,EAAE,oCAAoC;YAC5C,MAAM,EAAE,sCAAsC;YAC9C,UAAU,EAAE,4BAA4B;YACxC,QAAQ,EAAE,4CAA4C;YACtD,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,qCAAqC;YAC9C,IAAI,EAAE,0CAA0C;YAChD,WAAW,EAAE,wCAAwC;SACtD,CAAC;QAEF,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,UAAU,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,iCAAiC;QACjC,MAAM,WAAW,GAAwD;YACvE,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;YACrC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACtB,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5C,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACxB,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;YACpC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACvB,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACpB,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;SAC3C,CAAC;QAEF,MAAM,OAAO,GAAG,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAE9D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;YAC5B,OAAO,EAAE,cAAc,cAAc,WAAW;YAChD,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;oBAC5C,OAAO,+BAA+B,OAAO,CAAC,MAAM,eAAe,CAAC;gBACtE,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxD,OAAO,GAAG,cAAc,6BAA6B,OAAO,CAAC,MAAM,GAAG,CAAC;gBACzE,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QAEH,gBAAgB;QAChB,MAAM,MAAM,GAAgD;YAC1D,SAAS,EAAE,iBAAiB;YAC5B,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,kBAAkB;YAC9B,QAAQ,EAAE,gBAAgB;YAC1B,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,mBAAmB;SACjC,CAAC;QAEF,IAAI,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC;QACjC,OAAO,EAAE,iCAAiC;QAC1C,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,8BAA8B,EAAE;YAClG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,8BAA8B,EAAE;YACrF,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,+BAA+B,EAAE;SACpF;QACD,OAAO,EAAE,UAAU;KACpB,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,aAA6B,CAAC,CAAC;IAErD,eAAe;IACf,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC;QAChC,OAAO,EAAE,6DAA6D;QACtE,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAEvC,iCAAiC;IACjC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;QAC5B,OAAO,EAAE,sDAAsD;QAC/D,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,4BAA4B,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC;IAED,sBAAsB;IACtB,MAAM,CAAC,iBAAiB,EAAE,CAAC;IAE3B,UAAU;IACV,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,4DAA4D,EAAE,KAAK,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,4BAA4B,CAAC,oBAA8B;IACxE,MAAM,SAAS,GAAG;QAChB,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,iBAAiB,EAAE;QACxG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE;QAC5F,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE;QACzF,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,kBAAkB,EAAE;QACrG,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE;QAChG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE;QAC7E,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE;QAC5F,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE;QAClF,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,mBAAmB,EAAE;KAC1G,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,4DAA4D;QAC5D,IAAI,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/C,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAwC,CAAC,CAAC;QAC/E,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;YAC9B,OAAO,EAAE,aAAa,QAAQ,CAAC,IAAI,GAAG;YACtC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QAEH,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;gBAC5B,OAAO,EAAE,cAAc,QAAQ,CAAC,IAAI,WAAW;gBAC/C,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YAEH,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAwC,EAAE,MAAM,CAAC,CAAC;gBACtE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,KAAK,IAAI,CAAC,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,MAAM,GAAG;EACb,CAAC,CAAC,8DAA8D,EAAE,YAAY,CAAC;EAC/E,CAAC,CAAC,8DAA8D,EAAE,YAAY,CAAC;EAC/E,CAAC,CAAC,8DAA8D,EAAE,MAAM,CAAC;EACzE,CAAC,CAAC,8DAA8D,EAAE,MAAM,CAAC;EACzE,CAAC,CAAC,8DAA8D,EAAE,YAAY,CAAC;EAC/E,CAAC,CAAC,8DAA8D,EAAE,MAAM,CAAC;;UAEjE,CAAC,CAAC,0BAA0B,EAAE,KAAK,CAAC;CAC7C,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAK,GAAG,KAAK;IAC1C,0BAA0B;IAC1B,IAAI,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,2CAA2C;IAC3C,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9F,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAAE,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE3E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,oCAAoC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,qBAAqB;IACrB,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC;QAClC,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,gCAAgC,EAAE,WAAW,EAAE,mCAAmC,EAAE;YAChH,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,qCAAqC,EAAE;YAC9F,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE;YAC1E,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,oCAAoC,EAAE;YAC9F,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,qCAAqC,EAAE;YAC9F,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,sBAAsB,EAAE;YACpE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,6BAA6B,EAAE;YACpF,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,wCAAwC,EAAE;YAClG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,sCAAsC,EAAE;YAChG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,+BAA+B,EAAE;YACvF,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,kCAAkC,EAAE,WAAW,EAAE,wEAAwE,EAAE;YAC3J,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE;YACjE,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,6BAA6B,EAAE;YACzF,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,WAAW,EAAE,8CAA8C,EAAE;SACnH;QACD,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,WAAW;KACxC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,cAA6B,CAAC,CAAC;IAE7D,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,cAAc,KAAK,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAErF,sEAAsE;IACtE,IAAI,cAAc,KAAK,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC;YAC1B,OAAO,EAAE,6BAA6B;YACtC,OAAO,EAAE,wBAAwB;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC;SAAM,IAAI,cAAc,KAAK,SAAS,IAAI,QAAQ,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,qDAAqD,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC;YAC1B,OAAO,EAAE,+BAA+B;YACxC,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAE/C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC;YAChC,OAAO,EAAE,6CAA6C;YACtD,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;gBAC5B,OAAO,EAAE,6BAA6B;gBACtC,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YACH,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,cAAc,KAAK,SAAS,IAAI,QAAQ,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,uEAAuE,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC;YAC1B,OAAO,EAAE,uCAAuC;YAChD,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAE/C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC;YAChC,OAAO,EAAE,+CAA+C;YACxD,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;gBAC5B,OAAO,EAAE,qCAAqC;gBAC9C,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YACH,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,cAAc,KAAK,eAAe,IAAI,QAAQ,EAAE,CAAC;QAC1D,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,2DAA2D,EAAE,KAAK,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,gGAAgG,EAAE,KAAK,CAAC,CAAC,CAAC;QACxH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,eAAe,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACvG,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC1D,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,eAAe,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,gCAAgC,cAAc,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAEzE,MAAM,UAAU,GAA2B;YACzC,SAAS,EAAE,6CAA6C;YACxD,MAAM,EAAE,oCAAoC;YAC5C,MAAM,EAAE,sCAAsC;YAC9C,UAAU,EAAE,4BAA4B;YACxC,QAAQ,EAAE,4CAA4C;YACtD,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,qCAAqC;YAC9C,IAAI,EAAE,0CAA0C;YAChD,WAAW,EAAE,wCAAwC;SACtD,CAAC;QAEF,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,UAAU,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,iCAAiC;QACjC,MAAM,WAAW,GAAwD;YACvE,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;YACrC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACtB,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5C,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACxB,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;YACpC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACvB,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACpB,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;SAC3C,CAAC;QAEF,MAAM,OAAO,GAAG,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAE9D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;YAC5B,OAAO,EAAE,cAAc,cAAc,WAAW;YAChD,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;oBAC5C,OAAO,+BAA+B,OAAO,CAAC,MAAM,eAAe,CAAC;gBACtE,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxD,OAAO,GAAG,cAAc,6BAA6B,OAAO,CAAC,MAAM,GAAG,CAAC;gBACzE,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QAEH,yDAAyD;QACzD,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,iCAAiC;IACjC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;QAC5B,OAAO,EAAE,sDAAsD;QAC/D,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,4BAA4B,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC;IAED,sBAAsB;IACtB,MAAM,CAAC,iBAAiB,EAAE,CAAC;IAE3B,UAAU;IACV,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,4DAA4D,EAAE,KAAK,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,4BAA4B,CAAC,oBAA8B;IACxE,MAAM,SAAS,GAAG;QAChB,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,mBAAmB,EAAE;QAC1E,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE;QACjE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE;QAC9D,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,oBAAoB,EAAE;QACtE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACnE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE;QACpD,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE;QAChE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE;QACzD,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,qBAAqB,EAAE;KAC1E,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,4DAA4D;QAC5D,IAAI,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/C,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5D,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;YAC9B,OAAO,EAAE,aAAa,QAAQ,CAAC,IAAI,GAAG;YACtC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QAEH,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;gBAC5B,OAAO,EAAE,cAAc,QAAQ,CAAC,IAAI,WAAW;gBAC/C,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YAEH,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACjC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,eAAe,QAAQ,CAAC"}

package/dist/skills.d.ts

@@ -13,6 +13,13 @@ export interface SkillMetadata {
     allowedTools?: string[];
     [key: string]: string | string[] | Record<string, string> | undefined;
 }
+/**
+ * Trust state of an installed skill relative to the sha256 pinned at install (#137).
+ *  - `pinned`     — on-disk SKILL.md matches the recorded hash.
+ *  - `changed`    — hash recorded but the file no longer matches (tampered/edited).
+ *  - `unverified` — no hash recorded (legacy entry installed before pinning).
+ */
+export type SkillTrust = 'pinned' | 'changed' | 'unverified';
 export interface Skill {
     id: string;
     path: string;
@@ -21,6 +28,19 @@ export interface Skill {
     loaded: boolean;
     source: 'local' | 'registry' | 'github';
     sourceUrl?: string;
+    /** Short sha256 fingerprint pinned at install time, e.g. `sha256:1a2b3c4d5e6f` (#137). */
+    fingerprint?: string;
+    /** Trust state relative to the pinned hash (#137). */
+    trust?: SkillTrust;
+}
+/** Trust state + pinned fingerprint for an installed skill, for listing surfaces (#137). */
+export interface SkillListing {
+    name: string;
+    description: string;
+    source: 'local' | 'registry' | 'github';
+    sourceUrl?: string;
+    trust: SkillTrust;
+    fingerprint?: string;
 }
 export interface SkillReference {
     type: 'script' | 'reference' | 'asset';
@@ -28,6 +48,35 @@ export interface SkillReference {
     path: string;
     content?: string;
 }
+/**
+ * Confirmation request shown to the user before a network skill is installed (#137).
+ */
+export interface SkillInstallConfirmation {
+    name: string;
+    source: 'registry' | 'github';
+    sourceUrl: string;
+    description: string;
+    /**
+     * `first-install` for a name not yet in the registry; `content-changed` when
+     * re-installing over an existing pin whose hash differs — an explicit update
+     * that must be re-confirmed rather than silently re-pinned (#137).
+     */
+    reason: 'first-install' | 'content-changed';
+    /** Short fingerprint of the incoming content (#137). */
+    fingerprint: string;
+    /** Previous pinned fingerprint, present only when reason is `content-changed` (#137). */
+    previousFingerprint?: string;
+}
+/**
+ * Reject skill names that could escape SKILLS_DIR via path traversal (#136).
+ * Mirrors the plugin loader guard in plugins.ts.
+ */
+export declare function assertSafeSkillName(name: string): void;
+/**
+ * Register a confirmation handler invoked before installing a network skill (#137).
+ * Returning false aborts the install. Pass null to clear.
+ */
+export declare function setSkillInstallConfirmHandler(handler: ((info: SkillInstallConfirmation) => boolean | Promise<boolean>) | null): void;
 /**
  * Load a skill from a directory
  */
@@ -36,6 +85,15 @@ export declare function loadSkillFromDir(dir: string): Skill | null;
  * Get all loaded skills
  */
 export declare function getSkills(): Skill[];
+/**
+ * List every installed skill with its trust state and pinned fingerprint (#137).
+ *
+ * Unlike getSkills (which returns only load-safe skills for the system prompt),
+ * this deliberately includes `changed` entries so the /skills surface can warn
+ * the user that content drifted. It does not read instructions or emit audit
+ * events — it is a pure inventory read.
+ */
+export declare function listSkills(): SkillListing[];
 /**
  * Get skill by name
  */

package/dist/skills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../src/skills.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACvE;AAED,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAsHD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAoB1D;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,KAAK,EAAE,CAenC;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAWnD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,cAAc,EAAE,CAmBjE;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAmB3D;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CA2C1E;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CA+ClF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAepD;AAMD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAezC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIhE"}
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../src/skills.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACvE;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,YAAY,CAAC;AAE7D,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAWD,4FAA4F;AAC5F,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,EAAE,eAAe,GAAG,iBAAiB,CAAC;IAC5C,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAMD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAItD;AA2CD;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,wBAAwB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GAC/E,IAAI,CAEN;AAiID;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAoB1D;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,KAAK,EAAE,CAwBnC;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,IAAI,YAAY,EAAE,CAwB3C;AAcD;;GAEG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAoBnD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,cAAc,EAAE,CAmBjE;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CA0B3D;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAiE1E;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAoElF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAepD;AAMD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAezC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIhE"}

package/dist/skills.js

@@ -8,9 +8,73 @@ import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
 import * as https from 'https';
+import * as crypto from 'crypto';
+import { auditIntegrityViolation } from './runlog.js';
 // Skills storage directory
 const SKILLS_DIR = path.join(os.homedir(), '.calliope-cli', 'skills');
 // ============================================================================
+// Security: name validation, path containment, trust gate (#136, #137)
+// ============================================================================
+/**
+ * Reject skill names that could escape SKILLS_DIR via path traversal (#136).
+ * Mirrors the plugin loader guard in plugins.ts.
+ */
+export function assertSafeSkillName(name) {
+    if (!name || name.includes('..') || name.includes('/') || name.includes('\\') || path.isAbsolute(name)) {
+        throw new Error(`Invalid skill name: ${name}`);
+    }
+}
+/**
+ * Resolve a skill destination directory and confirm it stays inside SKILLS_DIR.
+ * Defense-in-depth on top of assertSafeSkillName (#136).
+ */
+function resolveSkillDir(name) {
+    assertSafeSkillName(name);
+    const destDir = path.join(SKILLS_DIR, name);
+    const root = path.resolve(SKILLS_DIR);
+    const resolved = path.resolve(destDir);
+    if (resolved !== root && !resolved.startsWith(root + path.sep)) {
+        throw new Error(`Invalid skill name: ${name}`);
+    }
+    return destDir;
+}
+function hashContent(content) {
+    return crypto.createHash('sha256').update(content).digest('hex');
+}
+/** Short, human-comparable fingerprint of a full sha256 hex digest (#137). */
+function fingerprint(hash) {
+    return `sha256:${hash.slice(0, 12)}`;
+}
+/** sha256 of a skill directory's SKILL.md, or undefined if unreadable (#137). */
+function hashSkillFile(skillDir) {
+    try {
+        return hashContent(fs.readFileSync(path.join(skillDir, 'SKILL.md'), 'utf-8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Shared reason string for a load-time integrity refusal (#137). */
+const MISMATCH_REASON = 'SKILL.md content changed since install — refusing to load (re-install to re-trust)';
+// Optional confirmation handler for network installs (#137). When unset,
+// installs proceed (backward-compatible). Wire an interactive prompt to gate.
+let installConfirmHandler = null;
+/**
+ * Register a confirmation handler invoked before installing a network skill (#137).
+ * Returning false aborts the install. Pass null to clear.
+ */
+export function setSkillInstallConfirmHandler(handler) {
+    installConfirmHandler = handler;
+}
+async function confirmInstall(info) {
+    if (!installConfirmHandler)
+        return;
+    const ok = await installConfirmHandler(info);
+    if (!ok) {
+        throw new Error(`Skill install declined: ${info.name}`);
+    }
+}
+// ============================================================================
 // Storage
 // ============================================================================
 function ensureSkillsDir() {
@@ -55,7 +119,8 @@ function parseSkillFile(content) {
     if (!frontmatterMatch) {
         return null;
     }
-    const [, frontmatter, instructions] = frontmatterMatch;
+    const frontmatter = frontmatterMatch[1];
+    const instructions = frontmatterMatch[2];
     // Simple YAML parsing (for the basic fields we need)
     const metadata = {
         name: '',
@@ -69,7 +134,8 @@ function parseSkillFile(content) {
         // Simple key: value parsing
         const match = line.match(/^(\w[\w-]*)\s*:\s*(.*)$/);
         if (match && !inMultiline) {
-            const [, key, value] = match;
+            const key = match[1];
+            const value = match[2];
             currentKey = key;
             if (value.startsWith('"') && value.endsWith('"')) {
                 metadata[key] = value.slice(1, -1);
@@ -94,7 +160,8 @@ function parseSkillFile(content) {
             // Re-process this line
             const newMatch = line.match(/^(\w[\w-]*)\s*:\s*(.*)$/);
             if (newMatch) {
-                const [, key, value] = newMatch;
+                const key = newMatch[1];
+                const value = newMatch[2];
                 currentKey = key;
                 metadata[key] = value;
             }
@@ -145,15 +212,68 @@ export function getSkills() {
     const index = loadSkillsIndex();
     const skills = [];
     for (const [name, info] of Object.entries(index)) {
+        // Drop skills whose SKILL.md no longer matches the hash recorded at install
+        // time — do not silently elevate tampered content into the system prompt (#137).
+        if (info.hash && !verifySkillHash(info.path, info.hash)) {
+            console.warn(`Skill ${name}: SKILL.md hash mismatch — skipping (re-install to trust again)`);
+            auditIntegrityViolation(`skill:${name}`, MISMATCH_REASON);
+            continue;
+        }
         const skill = loadSkillFromDir(info.path);
         if (skill) {
             skill.source = info.source;
             skill.sourceUrl = info.sourceUrl;
+            skill.fingerprint = info.hash ? fingerprint(info.hash) : undefined;
+            skill.trust = info.hash ? 'pinned' : 'unverified';
             skills.push(skill);
         }
     }
     return skills;
 }
+/**
+ * List every installed skill with its trust state and pinned fingerprint (#137).
+ *
+ * Unlike getSkills (which returns only load-safe skills for the system prompt),
+ * this deliberately includes `changed` entries so the /skills surface can warn
+ * the user that content drifted. It does not read instructions or emit audit
+ * events — it is a pure inventory read.
+ */
+export function listSkills() {
+    ensureSkillsDir();
+    const index = loadSkillsIndex();
+    const out = [];
+    for (const [name, info] of Object.entries(index)) {
+        let trust;
+        if (!info.hash) {
+            trust = 'unverified';
+        }
+        else {
+            trust = verifySkillHash(info.path, info.hash) ? 'pinned' : 'changed';
+        }
+        const skill = loadSkillFromDir(info.path);
+        out.push({
+            name,
+            description: skill?.metadata.description ?? '',
+            source: info.source,
+            sourceUrl: info.sourceUrl,
+            trust,
+            fingerprint: info.hash ? fingerprint(info.hash) : undefined,
+        });
+    }
+    return out;
+}
+/**
+ * Re-verify a stored skill's SKILL.md against its recorded hash (TOFU — #137).
+ */
+function verifySkillHash(skillDir, expected) {
+    try {
+        const content = fs.readFileSync(path.join(skillDir, 'SKILL.md'), 'utf-8');
+        return hashContent(content) === expected;
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Get skill by name
  */
@@ -162,10 +282,18 @@ export function getSkill(name) {
     const info = index[name];
     if (!info)
         return null;
+    // Refuse to surface tampered instructions on activation (#137).
+    if (info.hash && !verifySkillHash(info.path, info.hash)) {
+        console.warn(`Skill ${name}: SKILL.md hash mismatch — refusing to load (re-install to trust again)`);
+        auditIntegrityViolation(`skill:${name}`, MISMATCH_REASON);
+        return null;
+    }
     const skill = loadSkillFromDir(info.path);
     if (skill) {
         skill.source = info.source;
         skill.sourceUrl = info.sourceUrl;
+        skill.fingerprint = info.hash ? fingerprint(info.hash) : undefined;
+        skill.trust = info.hash ? 'pinned' : 'unverified';
     }
     return skill;
 }
@@ -201,15 +329,20 @@ export function installLocalSkill(dir) {
     if (!skill) {
         return null;
     }
+    // Reject path-traversal names (the name comes from SKILL.md content — #136).
+    const destDir = resolveSkillDir(skill.id);
     ensureSkillsDir();
-    const destDir = path.join(SKILLS_DIR, skill.id);
     // Copy skill directory
     copyDir(dir, destDir);
+    // Pin the copied SKILL.md so later on-disk tampering is caught on load (#137).
+    const hash = hashSkillFile(destDir);
     // Update index
     const index = loadSkillsIndex();
-    index[skill.id] = { path: destDir, source: 'local' };
+    index[skill.id] = { path: destDir, source: 'local', hash };
     saveSkillsIndex(index);
     skill.path = destDir;
+    skill.fingerprint = hash ? fingerprint(hash) : undefined;
+    skill.trust = hash ? 'pinned' : 'unverified';
     return skill;
 }
 /**
@@ -229,17 +362,34 @@ export async function installFromGithub(url) {
     if (!parsed) {
         throw new Error('Invalid SKILL.md');
     }
+    // Reject path-traversal names from remote, attacker-controlled content (#136).
+    const destDir = resolveSkillDir(parsed.metadata.name);
+    // Pin the incoming content. If a differently-hashed pin already exists this is
+    // an explicit update, confirmed with the old→new fingerprint diff below — the
+    // registry entry is never re-pinned silently (#137).
+    const newHash = hashContent(content);
+    const index = loadSkillsIndex();
+    const existing = index[parsed.metadata.name];
+    const changed = !!(existing?.hash && existing.hash !== newHash);
+    // Require explicit confirmation before trusting network content (#137).
+    await confirmInstall({
+        name: parsed.metadata.name,
+        source: 'github',
+        sourceUrl: url,
+        description: parsed.metadata.description,
+        reason: changed ? 'content-changed' : 'first-install',
+        fingerprint: fingerprint(newHash),
+        previousFingerprint: existing?.hash ? fingerprint(existing.hash) : undefined,
+    });
     ensureSkillsDir();
-    const destDir = path.join(SKILLS_DIR, parsed.metadata.name);
     // Create skill directory
     if (!fs.existsSync(destDir)) {
         fs.mkdirSync(destDir, { recursive: true });
     }
     // Write SKILL.md
     fs.writeFileSync(path.join(destDir, 'SKILL.md'), content);
-    // Update index
-    const index = loadSkillsIndex();
-    index[parsed.metadata.name] = { path: destDir, source: 'github', sourceUrl: url };
+    // Update index (record content hash for trust-on-first-use re-verification — #137)
+    index[parsed.metadata.name] = { path: destDir, source: 'github', sourceUrl: url, hash: newHash };
     saveSkillsIndex(index);
     return {
         id: parsed.metadata.name,
@@ -249,6 +399,8 @@ export async function installFromGithub(url) {
         loaded: true,
         source: 'github',
         sourceUrl: url,
+        fingerprint: fingerprint(newHash),
+        trust: 'pinned',
     };
 }
 /**
@@ -264,18 +416,34 @@ export async function installFromRegistry(skillName) {
             return installFromGithub(info.github);
         }
         else if (info.content) {
-            ensureSkillsDir();
-            const destDir = path.join(SKILLS_DIR, skillName);
-            if (!fs.existsSync(destDir)) {
-                fs.mkdirSync(destDir, { recursive: true });
-            }
-            fs.writeFileSync(path.join(destDir, 'SKILL.md'), info.content);
+            // Reject path-traversal names before any filesystem use (#136).
+            const destDir = resolveSkillDir(skillName);
             const parsed = parseSkillFile(info.content);
             if (!parsed) {
                 throw new Error('Invalid skill content');
             }
+            // Pin the incoming content; a differently-hashed existing pin is an
+            // explicit, re-confirmed update rather than a silent re-pin (#137).
+            const newHash = hashContent(info.content);
             const index = loadSkillsIndex();
-            index[skillName] = { path: destDir, source: 'registry', sourceUrl: registryUrl };
+            const existing = index[skillName];
+            const changed = !!(existing?.hash && existing.hash !== newHash);
+            // Require explicit confirmation before trusting network content (#137).
+            await confirmInstall({
+                name: skillName,
+                source: 'registry',
+                sourceUrl: registryUrl,
+                description: parsed.metadata.description,
+                reason: changed ? 'content-changed' : 'first-install',
+                fingerprint: fingerprint(newHash),
+                previousFingerprint: existing?.hash ? fingerprint(existing.hash) : undefined,
+            });
+            ensureSkillsDir();
+            if (!fs.existsSync(destDir)) {
+                fs.mkdirSync(destDir, { recursive: true });
+            }
+            fs.writeFileSync(path.join(destDir, 'SKILL.md'), info.content);
+            index[skillName] = { path: destDir, source: 'registry', sourceUrl: registryUrl, hash: newHash };
             saveSkillsIndex(index);
             return {
                 id: skillName,
@@ -285,6 +453,8 @@ export async function installFromRegistry(skillName) {
                 loaded: true,
                 source: 'registry',
                 sourceUrl: registryUrl,
+                fingerprint: fingerprint(newHash),
+                trust: 'pinned',
             };
         }
         throw new Error('Skill not found in registry');